last executing test programs: 2.870309375s ago: executing program 2 (id=1378): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x20040800) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8, r2}, 0x18) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x8, 0x8}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x8, [@union={0x6, 0x3, 0x0, 0x5, 0x0, 0xfff, [{0x2, 0x1, 0x2}, {0x8, 0x0, 0x7}, {0xb, 0x2, 0xffff}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x10}, {0xd, 0x5}]}, @const={0xe, 0x0, 0x0, 0xa, 0x1}, @typedef={0x3, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x5c, 0x61, 0x61, 0x30, 0x5f, 0x5f]}}, &(0x7f0000000440)=""/194, 0x84, 0xc2, 0x1, 0x6}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x1f, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x7, 0x1, 0xb, 0x1, 0x0, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @exit, @map_fd={0x18, 0x7}, @exit, @map_fd={0x18, 0x9, 0x1, 0x0, r4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0xfffffff7, 0x33, &(0x7f0000000300)=""/51, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1f, r5, 0x8, &(0x7f0000000580)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x1, 0x7}, 0x10, 0xffffffffffffffff, r2, 0x1, &(0x7f00000006c0)=[r6], &(0x7f0000000700)=[{0x0, 0x3, 0x0, 0xb}], 0x10, 0x9}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x42200, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000800)={'nr0\x00', 0x400}) 2.229833409s ago: executing program 1 (id=1387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x5, 0x3, 0x4, 0x1ff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0xfffe, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.105101222s ago: executing program 0 (id=1389): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) socket$kcm(0x2, 0x1, 0x84) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0xb, &(0x7f0000000000)=r3, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0xfa, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'ipvlan1\x00', @multicast}) 2.065476913s ago: executing program 1 (id=1390): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x22, &(0x7f0000000280), 0x4) r3 = socket$kcm(0x2b, 0x4, 0x0) close(r3) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r4, 0x84, 0xb, &(0x7f0000000000), 0xe) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000001c0), 0x45) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/167, 0xa7}, 0x2002) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xc00e}, 0x40800) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r6) write$cgroup_devices(r6, 0x0, 0xfffffeff) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000040)=0x6) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.860915128s ago: executing program 2 (id=1392): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8990, &(0x7f0000000040)={'bond0\x00', @random="18faff000020"}) 1.75727583s ago: executing program 2 (id=1393): close(0xffffffffffffffff) r0 = socket$kcm(0xa, 0x1, 0x0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x80000001, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xb88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r5, 0x8010743f, 0xf0ff1f00000000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x7b) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0x3}, 0x80, 0x0}, 0x20000001) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000200)=[0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x0, 0x58, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x9d, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x0, '\x00', r7, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x20040019) 1.632604623s ago: executing program 0 (id=1395): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd71}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x5, 0x3, 0x7, 0x1, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x6c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x136}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) 1.632370543s ago: executing program 1 (id=1396): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x480, 0x0, 0x0) 1.541611765s ago: executing program 2 (id=1397): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00a600"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB], 0x50) 1.451193187s ago: executing program 0 (id=1398): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x300, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) sendmsg$tipc(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="e909000000747a9bab1ccbda126d1d347f32977d0fca647cd8921ba460d8eb0a5612a6ecdb0000000000000000005400dd4da300e021f5767186799af720b27ef5ddc50180008b6c2ff74ec4bffc57504e3df152b5c421bc9aaeaac4b96faa8cbf2e40137d0d7de6fe3a2bef44da6cbfc054356adcf7f0a2", 0x78}, {&(0x7f0000000b00)="9b11a80b974e60df4aa8901d6aa0b636089fc5d73337e44e3e6f85e35d8e171720", 0x21}], 0x2, 0x0, 0x0, 0x400c884}, 0x4000000) close(r1) 1.448065327s ago: executing program 2 (id=1399): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xf6, 0x0, 0x8, 0x0, 0x0, 0x6, 0x61, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88f5d9965ff4a44, @perf_bp={0x0, 0x7}, 0x10000, 0xca, 0x0, 0x0, 0xffff, 0x28, 0x7, 0x0, 0x0, 0x0, 0x400100}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffbe}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3e9b1d"], 0xf9) socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000080000000400000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc", 0x29}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x100000000, 0x6}, 0xe01, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x80002, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c", 0xc}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r6, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x4, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0xfe0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc010000200000001800"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) 1.438375747s ago: executing program 3 (id=1400): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x5, 0x3, 0x4, 0x1ff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 6) 1.32638787s ago: executing program 1 (id=1401): bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r5, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000090401000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000020130180000000000000000000000000000009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) close(r2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r5, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000090401000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000020130180000000000000000000000000000009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) (async) 1.059624056s ago: executing program 0 (id=1402): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x27, 0x6, 0x401, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xa, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x101}, [@jmp={0x5, 0x0, 0x1, 0x6, 0xa, 0x50, 0xffffffffffffffff}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @jmp={0x5, 0x0, 0x358300d72a08b6a2, 0x0, 0xb, 0x10, 0xfffffffffffffff5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x242, 0x0, 0x0, 0x0, 0xd}, @generic={0x40, 0x6, 0x8, 0x5, 0x10}]}, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x69, &(0x7f0000000340)=""/105, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x1, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x84e}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r2, r3}) r4 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) socket$kcm(0xa, 0x6, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000000)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000000)='./file0\x00', r4, 0x4000, r0}, 0x18) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) 1.030006757s ago: executing program 3 (id=1403): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8990, &(0x7f0000000040)={'bond0\x00', @random="18faff000020"}) (fail_nth: 3) 716.903004ms ago: executing program 1 (id=1404): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) sendmsg$tipc(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="e909000000747a9bab1ccbda126d1d347f32977d0fca647cd8921ba460d8eb0a5612a6ecdb0000000000000000005400dd4da300e021f5767186799af720b27ef5ddc50180008b6c2ff74ec4bffc57504e3df152b5c421bc9aaeaac4b96faa8cbf2e40137d0d7de6fe3a2bef44da6cbfc054356adcf7f0a2", 0x78}, {&(0x7f0000000b00)="9b11a80b974e60df4aa8901d6aa0b636089fc5d73337e44e3e6f85e35d8e171720", 0x21}], 0x2, 0x0, 0x0, 0x400c884}, 0x4000000) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200080, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x3, &(0x7f0000000180)=[{0x0, 0x5, 0x2, 0xffff}, {0xd93e, 0x3, 0x6f, 0x6}, {0x6, 0x8, 0xff, 0x6}]}) 716.489024ms ago: executing program 3 (id=1405): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x1, 0xffffffff, 0x4, 0x8000, r0, 0x8, '\x00', 0x0, r4, 0x4, 0x0, 0x5, 0x7, @value=r5}, 0x50) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0x72}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r6 = socket$kcm(0x10, 0x2, 0x10) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x1000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f00000002c0)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040), 0x4) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r5, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r5, &(0x7f0000000040)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8990, &(0x7f0000000040)={'bond0\x00', @random="18faff000020"}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e00000005000000000000000800000002000000", @ANYRES32=r5, @ANYBLOB="0200000000000000000000000000000000000020", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000003000000000000000800"/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r7, 0x58, &(0x7f0000000180)}, 0x10) 561.911837ms ago: executing program 3 (id=1407): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00a600"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB], 0x50) 464.842779ms ago: executing program 1 (id=1408): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xf6, 0x0, 0x8, 0x0, 0x0, 0x6, 0x61, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88f5d9965ff4a44, @perf_bp={0x0, 0x7}, 0x10000, 0xca, 0x0, 0x0, 0xffff, 0x28, 0x7, 0x0, 0x0, 0x0, 0x400100}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffbe}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3e9b1d"], 0xf9) r3 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000080000000400000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc", 0x29}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x100000000, 0x6}, 0xe01, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x80002, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c", 0xc}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r6, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x4, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0xfe0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) 459.881259ms ago: executing program 0 (id=1409): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x480, 0x0, 0x0) 390.162691ms ago: executing program 3 (id=1410): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x18}, 0x2c) (fail_nth: 2) 240.002274ms ago: executing program 0 (id=1411): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x4040000) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x4040000) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async) 0s ago: executing program 3 (id=1412): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f065581bff88fbffff4000632f77fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x18}, 0x2c) kernel console output (not intermixed with test programs): oop+0x40/0x90 [ 178.683800][ T7538] ? clear_bhb_loop+0x40/0x90 [ 178.688567][ T7538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.694547][ T7538] RIP: 0033:0x7f56e619de59 [ 178.699060][ T7538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.718735][ T7538] RSP: 002b:00007f56e70e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.727235][ T7538] RAX: ffffffffffffffda RBX: 00007f56e6425fa0 RCX: 00007f56e619de59 [ 178.735275][ T7538] RDX: 0000000000000040 RSI: 0000200000000640 RDI: 0000000000000010 [ 178.743312][ T7538] RBP: 00007f56e70e1090 R08: 0000000000000000 R09: 0000000000000000 [ 178.751351][ T7538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.759387][ T7538] R13: 00007f56e6426038 R14: 00007f56e6425fa0 R15: 00007ffe6506b6a8 [ 178.767570][ T7538] [ 178.828177][ T7542] FAULT_INJECTION: forcing a failure. [ 178.828177][ T7542] name failslab, interval 1, probability 0, space 0, times 0 [ 178.846084][ T7542] CPU: 1 PID: 7542 Comm: syz.2.563 Not tainted syzkaller #0 [ 178.853428][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 178.863518][ T7542] Call Trace: [ 178.866841][ T7542] [ 178.869811][ T7542] dump_stack_lvl+0x18c/0x250 [ 178.874550][ T7542] ? show_regs_print_info+0x20/0x20 [ 178.879807][ T7542] ? load_image+0x420/0x420 [ 178.884359][ T7542] ? __might_sleep+0xe0/0xe0 [ 178.889030][ T7542] ? __lock_acquire+0x7d80/0x7d80 [ 178.894094][ T7542] should_fail_ex+0x394/0x4c0 [ 178.898818][ T7542] should_failslab+0x9/0x20 [ 178.903372][ T7542] slab_pre_alloc_hook+0x59/0x300 [ 178.908448][ T7542] ? kernfs_fop_write_iter+0x158/0x520 [ 178.913960][ T7542] ? kernfs_fop_write_iter+0x158/0x520 [ 178.919476][ T7542] __kmem_cache_alloc_node+0x53/0x250 [ 178.924909][ T7542] ? kernfs_fop_write_iter+0x158/0x520 [ 178.930419][ T7542] __kmalloc+0xa7/0x240 [ 178.934645][ T7542] kernfs_fop_write_iter+0x158/0x520 [ 178.939994][ T7542] vfs_write+0x474/0x9a0 [ 178.944292][ T7542] ? file_end_write+0x250/0x250 [ 178.949186][ T7542] ? __fget_files+0x3fc/0x460 [ 178.953922][ T7542] ? __fdget_pos+0x2a3/0x330 [ 178.958559][ T7542] ? ksys_write+0x74/0x260 [ 178.963017][ T7542] ksys_write+0x151/0x260 [ 178.967382][ T7542] ? __ia32_sys_read+0x90/0x90 [ 178.972171][ T7542] ? lockdep_hardirqs_on+0x98/0x150 [ 178.977393][ T7542] do_syscall_64+0x55/0xb0 [ 178.981835][ T7542] ? clear_bhb_loop+0x40/0x90 [ 178.986529][ T7542] ? clear_bhb_loop+0x40/0x90 [ 178.991226][ T7542] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.997142][ T7542] RIP: 0033:0x7f71b099de59 [ 179.001583][ T7542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.021205][ T7542] RSP: 002b:00007f71b1874028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.029644][ T7542] RAX: ffffffffffffffda RBX: 00007f71b0c26090 RCX: 00007f71b099de59 [ 179.037669][ T7542] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000a [ 179.045656][ T7542] RBP: 00007f71b1874090 R08: 0000000000000000 R09: 0000000000000000 [ 179.053656][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.061656][ T7542] R13: 00007f71b0c26128 R14: 00007f71b0c26090 R15: 00007fff570b1108 [ 179.069670][ T7542] [ 179.421784][ T7557] netlink: 38831 bytes leftover after parsing attributes in process `syz.1.570'. [ 179.606404][ T7572] netlink: 'syz.0.571': attribute type 29 has an invalid length. [ 179.614408][ T7572] netlink: 'syz.0.571': attribute type 29 has an invalid length. [ 179.636299][ T7567] netlink: 'syz.0.571': attribute type 29 has an invalid length. [ 180.626194][ T7592] netlink: 'syz.0.581': attribute type 10 has an invalid length. [ 180.653421][ T7592] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 180.666573][ T7592] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 180.677607][ T7592] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 180.691440][ T7592] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 180.701722][ T7595] FAULT_INJECTION: forcing a failure. [ 180.701722][ T7595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.717130][ T7595] CPU: 1 PID: 7595 Comm: syz.2.582 Not tainted syzkaller #0 [ 180.724460][ T7595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 180.734546][ T7595] Call Trace: [ 180.737843][ T7595] [ 180.740797][ T7595] dump_stack_lvl+0x18c/0x250 [ 180.745515][ T7595] ? show_regs_print_info+0x20/0x20 [ 180.750755][ T7595] ? load_image+0x420/0x420 [ 180.755291][ T7595] ? __might_fault+0xaa/0x120 [ 180.760013][ T7595] ? __lock_acquire+0x7d80/0x7d80 [ 180.765087][ T7595] should_fail_ex+0x394/0x4c0 [ 180.769900][ T7595] _copy_from_user+0x2f/0xe0 [ 180.774537][ T7595] ___sys_sendmsg+0x1c7/0x360 [ 180.779259][ T7595] ? __sys_sendmsg+0x2b0/0x2b0 [ 180.784070][ T7595] ? __lock_acquire+0x7d80/0x7d80 [ 180.789140][ T7595] __se_sys_sendmsg+0x1d0/0x2c0 [ 180.794018][ T7595] ? __x64_sys_sendmsg+0x80/0x80 [ 180.799010][ T7595] ? lockdep_hardirqs_on+0x98/0x150 [ 180.804232][ T7595] do_syscall_64+0x55/0xb0 [ 180.808669][ T7595] ? clear_bhb_loop+0x40/0x90 [ 180.813363][ T7595] ? clear_bhb_loop+0x40/0x90 [ 180.818067][ T7595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.823989][ T7595] RIP: 0033:0x7f71b099de59 [ 180.828423][ T7595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.848058][ T7595] RSP: 002b:00007f71b1895028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.856620][ T7595] RAX: ffffffffffffffda RBX: 00007f71b0c25fa0 RCX: 00007f71b099de59 [ 180.864651][ T7595] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 180.872648][ T7595] RBP: 00007f71b1895090 R08: 0000000000000000 R09: 0000000000000000 [ 180.880649][ T7595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.888642][ T7595] R13: 00007f71b0c26038 R14: 00007f71b0c25fa0 R15: 00007fff570b1108 [ 180.896651][ T7595] [ 181.027786][ T7601] netlink: 'syz.0.584': attribute type 10 has an invalid length. [ 181.056105][ T7601] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 181.091556][ T7601] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 181.117506][ T7601] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 181.136266][ T7601] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 181.163665][ T7608] FAULT_INJECTION: forcing a failure. [ 181.163665][ T7608] name failslab, interval 1, probability 0, space 0, times 0 [ 181.185039][ T7608] CPU: 0 PID: 7608 Comm: syz.3.588 Not tainted syzkaller #0 [ 181.192368][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 181.202459][ T7608] Call Trace: [ 181.205767][ T7608] [ 181.208725][ T7608] dump_stack_lvl+0x18c/0x250 [ 181.213447][ T7608] ? show_regs_print_info+0x20/0x20 [ 181.218695][ T7608] ? load_image+0x420/0x420 [ 181.223248][ T7608] ? __might_sleep+0xe0/0xe0 [ 181.227874][ T7608] ? __lock_acquire+0x7d80/0x7d80 [ 181.232965][ T7608] should_fail_ex+0x394/0x4c0 [ 181.237700][ T7608] should_failslab+0x9/0x20 [ 181.242319][ T7608] slab_pre_alloc_hook+0x59/0x300 [ 181.247389][ T7608] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 181.253148][ T7608] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 181.258921][ T7608] __kmem_cache_alloc_node+0x53/0x250 [ 181.264392][ T7608] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 181.270168][ T7608] __kmalloc+0xa7/0x240 [ 181.274370][ T7608] tomoyo_realpath_from_path+0xe6/0x5c0 [ 181.279964][ T7608] ? tomoyo_domain+0xd6/0x120 [ 181.284711][ T7608] tomoyo_path_number_perm+0x248/0x5e0 [ 181.290212][ T7608] ? tomoyo_path_number_perm+0x217/0x5e0 [ 181.295890][ T7608] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 181.301387][ T7608] ? ksys_write+0x1d2/0x260 [ 181.305958][ T7608] ? __fget_files+0x28/0x460 [ 181.310604][ T7608] security_file_ioctl+0x70/0xa0 [ 181.315605][ T7608] __se_sys_ioctl+0x48/0x170 [ 181.320238][ T7608] do_syscall_64+0x55/0xb0 [ 181.324696][ T7608] ? clear_bhb_loop+0x40/0x90 [ 181.329417][ T7608] ? clear_bhb_loop+0x40/0x90 [ 181.334174][ T7608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.340122][ T7608] RIP: 0033:0x7f56e619de59 [ 181.344571][ T7608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.364202][ T7608] RSP: 002b:00007f56e70e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.372654][ T7608] RAX: ffffffffffffffda RBX: 00007f56e6425fa0 RCX: 00007f56e619de59 [ 181.380670][ T7608] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 181.388669][ T7608] RBP: 00007f56e70e1090 R08: 0000000000000000 R09: 0000000000000000 [ 181.396678][ T7608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.404693][ T7608] R13: 00007f56e6426038 R14: 00007f56e6425fa0 R15: 00007ffe6506b6a8 [ 181.412707][ T7608] [ 181.438719][ T7608] ERROR: Out of memory at tomoyo_realpath_from_path. [ 181.511839][ T7616] netlink: 'syz.2.589': attribute type 29 has an invalid length. [ 181.525856][ T7616] netlink: 'syz.2.589': attribute type 29 has an invalid length. [ 181.542670][ T7615] netlink: 'syz.2.589': attribute type 29 has an invalid length. [ 181.603947][ T7618] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.593'. [ 181.782683][ T7625] netlink: 'syz.1.594': attribute type 11 has an invalid length. [ 181.803771][ T7625] netlink: 126292 bytes leftover after parsing attributes in process `syz.1.594'. [ 181.822665][ T7623] netlink: 'syz.3.593': attribute type 10 has an invalid length. [ 181.832658][ T7623] netlink: 2 bytes leftover after parsing attributes in process `syz.3.593'. [ 181.842663][ T7623] hsr0: entered promiscuous mode [ 182.026528][ T7632] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.597'. [ 182.173050][ T7634] C: renamed from team_slave_0 (while UP) [ 182.181693][ T7634] netlink: 152 bytes leftover after parsing attributes in process `syz.3.599'. [ 182.329642][ T7641] netlink: 132 bytes leftover after parsing attributes in process `syz.1.601'. [ 182.420106][ T7645] hsr0: left promiscuous mode [ 182.701540][ T7651] veth0_vlan: left promiscuous mode [ 182.736051][ T7651] veth0_vlan: entered promiscuous mode [ 182.752609][ T7651] team0: Device veth0_vlan failed to register rx_handler [ 182.837699][ T7658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.609'. [ 182.865994][ T7658] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 182.904216][ T7658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.007396][ T7670] netlink: 132 bytes leftover after parsing attributes in process `syz.0.611'. [ 183.024303][ T7670] netlink: 132 bytes leftover after parsing attributes in process `syz.0.611'. [ 183.327924][ T7680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.832707][ T7682] syzkaller0: entered promiscuous mode [ 183.847116][ T7682] syzkaller0: entered allmulticast mode [ 183.869843][ T7695] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.618'. [ 184.112099][ T7703] FAULT_INJECTION: forcing a failure. [ 184.112099][ T7703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.144185][ T7703] CPU: 1 PID: 7703 Comm: syz.1.623 Not tainted syzkaller #0 [ 184.151533][ T7703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 184.161634][ T7703] Call Trace: [ 184.164946][ T7703] [ 184.167901][ T7703] dump_stack_lvl+0x18c/0x250 [ 184.172643][ T7703] ? show_regs_print_info+0x20/0x20 [ 184.177900][ T7703] ? load_image+0x420/0x420 [ 184.182442][ T7703] ? __lock_acquire+0x7d80/0x7d80 [ 184.187511][ T7703] ? snprintf+0xe9/0x140 [ 184.191809][ T7703] should_fail_ex+0x394/0x4c0 [ 184.196550][ T7703] _copy_to_user+0x2f/0xa0 [ 184.201000][ T7703] simple_read_from_buffer+0xe7/0x150 [ 184.206417][ T7703] proc_fail_nth_read+0x1e8/0x260 [ 184.211471][ T7703] ? proc_fault_inject_write+0x360/0x360 [ 184.217134][ T7703] ? fsnotify_perm+0x271/0x5e0 [ 184.221924][ T7703] ? proc_fault_inject_write+0x360/0x360 [ 184.227578][ T7703] vfs_read+0x298/0x990 [ 184.231759][ T7703] ? kernel_read+0x1e0/0x1e0 [ 184.236369][ T7703] ? __fget_files+0x28/0x460 [ 184.240976][ T7703] ? __fget_files+0x3fc/0x460 [ 184.245676][ T7703] ? __fdget_pos+0x2a3/0x330 [ 184.250290][ T7703] ? ksys_read+0x74/0x260 [ 184.254646][ T7703] ksys_read+0x151/0x260 [ 184.258912][ T7703] ? vfs_write+0x9a0/0x9a0 [ 184.263353][ T7703] ? lockdep_hardirqs_on+0x98/0x150 [ 184.268572][ T7703] do_syscall_64+0x55/0xb0 [ 184.273014][ T7703] ? clear_bhb_loop+0x40/0x90 [ 184.277736][ T7703] ? clear_bhb_loop+0x40/0x90 [ 184.282428][ T7703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.288345][ T7703] RIP: 0033:0x7f4744f5e68e [ 184.292800][ T7703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.312421][ T7703] RSP: 002b:00007f4745f3afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.320854][ T7703] RAX: ffffffffffffffda RBX: 00007f4745f3b6c0 RCX: 00007f4744f5e68e [ 184.328875][ T7703] RDX: 000000000000000f RSI: 00007f4745f3b0a0 RDI: 000000000000000d [ 184.336857][ T7703] RBP: 00007f4745f3b090 R08: 0000000000000000 R09: 0000000000000000 [ 184.344841][ T7703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.352824][ T7703] R13: 00007f4745226038 R14: 00007f4745225fa0 R15: 00007ffc04779ac8 [ 184.360824][ T7703] [ 184.747583][ T7720] validate_nla: 17 callbacks suppressed [ 184.747598][ T7720] netlink: 'syz.0.626': attribute type 29 has an invalid length. [ 184.992617][ T7719] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.627'. [ 186.175963][ T7720] netlink: 'syz.0.626': attribute type 29 has an invalid length. [ 186.239670][ T7725] netlink: 'syz.1.627': attribute type 10 has an invalid length. [ 186.284973][ T7725] netlink: 2 bytes leftover after parsing attributes in process `syz.1.627'. [ 186.323005][ T7725] bridge0: port 3(hsr0) entered blocking state [ 186.329560][ T7725] bridge0: port 3(hsr0) entered forwarding state [ 186.516798][ T7732] netlink: 763 bytes leftover after parsing attributes in process `syz.0.629'. [ 186.646288][ T7737] FAULT_INJECTION: forcing a failure. [ 186.646288][ T7737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.719296][ T7737] CPU: 1 PID: 7737 Comm: syz.3.632 Not tainted syzkaller #0 [ 186.726642][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 186.736738][ T7737] Call Trace: [ 186.740048][ T7737] [ 186.743014][ T7737] dump_stack_lvl+0x18c/0x250 [ 186.747747][ T7737] ? show_regs_print_info+0x20/0x20 [ 186.752989][ T7737] ? load_image+0x420/0x420 [ 186.757539][ T7737] ? __might_fault+0xaa/0x120 [ 186.762250][ T7737] ? __lock_acquire+0x7d80/0x7d80 [ 186.767327][ T7737] ? __virt_addr_valid+0x10c/0x380 [ 186.772506][ T7737] should_fail_ex+0x394/0x4c0 [ 186.777234][ T7737] _copy_from_user+0x2f/0xe0 [ 186.781864][ T7737] generic_map_update_batch+0x58c/0x800 [ 186.787452][ T7737] ? rcu_read_unlock+0xa0/0xa0 [ 186.792255][ T7737] ? __fdget+0x180/0x210 [ 186.796547][ T7737] ? rcu_read_unlock+0xa0/0xa0 [ 186.801356][ T7737] bpf_map_do_batch+0x3f2/0x600 [ 186.806249][ T7737] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 186.812627][ T7737] __sys_bpf+0x381/0x890 [ 186.816916][ T7737] ? bpf_link_show_fdinfo+0x390/0x390 [ 186.822347][ T7737] ? lock_chain_count+0x20/0x20 [ 186.827250][ T7737] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 186.833301][ T7737] __x64_sys_bpf+0x7c/0x90 [ 186.837771][ T7737] do_syscall_64+0x55/0xb0 [ 186.842227][ T7737] ? clear_bhb_loop+0x40/0x90 [ 186.846937][ T7737] ? clear_bhb_loop+0x40/0x90 [ 186.851652][ T7737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.857591][ T7737] RIP: 0033:0x7f56e619de59 [ 186.862055][ T7737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.881684][ T7737] RSP: 002b:00007f56e70e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 186.890140][ T7737] RAX: ffffffffffffffda RBX: 00007f56e6425fa0 RCX: 00007f56e619de59 [ 186.898184][ T7737] RDX: 0000000000000038 RSI: 00002000000002c0 RDI: 000000000000001a [ 186.906177][ T7737] RBP: 00007f56e70e1090 R08: 0000000000000000 R09: 0000000000000000 [ 186.914163][ T7737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.922151][ T7737] R13: 00007f56e6426038 R14: 00007f56e6425fa0 R15: 00007ffe6506b6a8 [ 186.930163][ T7737] [ 187.246386][ T7749] FAULT_INJECTION: forcing a failure. [ 187.246386][ T7749] name failslab, interval 1, probability 0, space 0, times 0 [ 187.262979][ T7749] CPU: 1 PID: 7749 Comm: syz.0.635 Not tainted syzkaller #0 [ 187.270322][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 187.280424][ T7749] Call Trace: [ 187.283742][ T7749] [ 187.286698][ T7749] dump_stack_lvl+0x18c/0x250 [ 187.291424][ T7749] ? show_regs_print_info+0x20/0x20 [ 187.296684][ T7749] ? load_image+0x420/0x420 [ 187.301234][ T7749] ? __might_sleep+0xe0/0xe0 [ 187.305865][ T7749] ? __lock_acquire+0x7d80/0x7d80 [ 187.310926][ T7749] should_fail_ex+0x394/0x4c0 [ 187.315641][ T7749] should_failslab+0x9/0x20 [ 187.320191][ T7749] slab_pre_alloc_hook+0x59/0x300 [ 187.325278][ T7749] ? tomoyo_encode+0x2ad/0x570 [ 187.330091][ T7749] ? tomoyo_encode+0x2ad/0x570 [ 187.334905][ T7749] __kmem_cache_alloc_node+0x53/0x250 [ 187.340335][ T7749] ? tomoyo_encode+0x2ad/0x570 [ 187.345148][ T7749] __kmalloc+0xa7/0x240 [ 187.348905][ T7750] netlink: 'syz.3.636': attribute type 10 has an invalid length. [ 187.349331][ T7749] tomoyo_encode+0x2ad/0x570 [ 187.349380][ T7749] tomoyo_realpath_from_path+0x57c/0x5c0 [ 187.366241][ T7750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.636'. [ 187.367387][ T7749] ? tomoyo_domain+0xd6/0x120 [ 187.367424][ T7749] tomoyo_path_number_perm+0x248/0x5e0 [ 187.367455][ T7749] ? tomoyo_path_number_perm+0x217/0x5e0 [ 187.367479][ T7749] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 187.367503][ T7749] ? trace_call_bpf+0xc3/0x6c0 [ 187.367531][ T7749] ? trace_call_bpf+0xc3/0x6c0 [ 187.407218][ T7749] ? trace_call_bpf+0x5e9/0x6c0 [ 187.409202][ T7750] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 187.412123][ T7749] ? __fget_files+0x28/0x460 [ 187.412165][ T7749] security_file_ioctl+0x70/0xa0 [ 187.437067][ T7749] __se_sys_ioctl+0x48/0x170 [ 187.441695][ T7749] do_syscall_64+0x55/0xb0 [ 187.446166][ T7749] ? clear_bhb_loop+0x40/0x90 [ 187.450911][ T7749] ? clear_bhb_loop+0x40/0x90 [ 187.455621][ T7749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.461550][ T7749] RIP: 0033:0x7fa37759de59 [ 187.466004][ T7749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.485635][ T7749] RSP: 002b:00007fa378416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.494118][ T7749] RAX: ffffffffffffffda RBX: 00007fa377825fa0 RCX: 00007fa37759de59 [ 187.502120][ T7749] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 187.510121][ T7749] RBP: 00007fa378416090 R08: 0000000000000000 R09: 0000000000000000 [ 187.518139][ T7749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.526163][ T7749] R13: 00007fa377826038 R14: 00007fa377825fa0 R15: 00007ffd5ea169e8 [ 187.534187][ T7749] [ 187.575847][ T7749] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.607728][ T7755] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.637'. [ 187.754453][ T7759] netlink: 'syz.3.639': attribute type 2 has an invalid length. [ 187.766018][ T7759] netlink: 'syz.3.639': attribute type 8 has an invalid length. [ 187.774036][ T7759] netlink: 132 bytes leftover after parsing attributes in process `syz.3.639'. [ 187.846629][ T7764] netlink: 'syz.0.638': attribute type 29 has an invalid length. [ 187.854471][ T7764] netlink: 'syz.0.638': attribute type 29 has an invalid length. [ 187.877059][ T7762] netlink: 'syz.0.638': attribute type 29 has an invalid length. [ 188.082057][ T7770] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.642'. [ 188.316626][ T7773] netlink: 'syz.2.642': attribute type 10 has an invalid length. [ 188.324504][ T7773] netlink: 2 bytes leftover after parsing attributes in process `syz.2.642'. [ 188.348394][ T7773] bridge0: port 3(hsr0) entered blocking state [ 188.354783][ T7773] bridge0: port 3(hsr0) entered forwarding state [ 188.732271][ T7779] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.646'. [ 188.828705][ T7784] netlink: 40 bytes leftover after parsing attributes in process `syz.0.648'. [ 188.885954][ T7784] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 189.298604][ T7800] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.655'. [ 189.551395][ T7803] netlink: 2 bytes leftover after parsing attributes in process `syz.0.655'. [ 189.566076][ T7803] hsr0: entered promiscuous mode [ 189.589067][ T7803] bridge0: port 3(hsr0) entered blocking state [ 189.625511][ T7803] bridge0: port 3(hsr0) entered disabled state [ 189.632106][ T7803] hsr0: entered allmulticast mode [ 189.659811][ T7803] hsr_slave_0: entered allmulticast mode [ 189.675312][ T7803] hsr_slave_1: entered allmulticast mode [ 189.683050][ T7803] bridge0: port 3(hsr0) entered blocking state [ 189.689424][ T7803] bridge0: port 3(hsr0) entered forwarding state [ 189.785462][ T7807] validate_nla: 5 callbacks suppressed [ 189.785481][ T7807] netlink: 'syz.1.656': attribute type 29 has an invalid length. [ 189.801078][ T7807] netlink: 'syz.1.656': attribute type 29 has an invalid length. [ 189.810432][ T7806] netlink: 'syz.1.656': attribute type 29 has an invalid length. [ 189.944573][ T7810] netlink: 'syz.0.657': attribute type 2 has an invalid length. [ 189.955433][ T7810] netlink: 'syz.0.657': attribute type 8 has an invalid length. [ 189.963589][ T7810] netlink: 132 bytes leftover after parsing attributes in process `syz.0.657'. [ 190.417744][ T7819] netlink: 'syz.3.660': attribute type 1 has an invalid length. [ 190.426293][ T7819] netlink: 'syz.3.660': attribute type 4 has an invalid length. [ 190.434904][ T7819] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.660'. [ 190.545372][ T7822] netlink: 'syz.2.661': attribute type 10 has an invalid length. [ 190.595700][ T7822] netlink: 40 bytes leftover after parsing attributes in process `syz.2.661'. [ 191.111170][ T7828] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.664'. [ 191.534024][ T7838] netlink: 'syz.1.667': attribute type 10 has an invalid length. [ 191.991972][ T7854] delete_channel: no stack [ 192.004564][ T7855] netlink: 'syz.1.670': attribute type 29 has an invalid length. [ 192.816411][ T7871] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 193.282904][ T7888] __nla_validate_parse: 9 callbacks suppressed [ 193.282940][ T7888] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.681'. [ 194.147746][ T7911] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.691'. [ 194.253306][ T7914] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.692'. [ 194.291624][ T7917] netlink: 132 bytes leftover after parsing attributes in process `syz.1.693'. [ 194.395785][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.402247][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.023012][ T7926] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.696'. [ 195.110181][ T7930] validate_nla: 17 callbacks suppressed [ 195.110198][ T7930] netlink: 'syz.2.696': attribute type 4 has an invalid length. [ 195.330655][ T7932] netlink: 'syz.3.698': attribute type 10 has an invalid length. [ 195.373658][ T7936] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.700'. [ 195.522864][ T7939] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.702'. [ 195.546681][ T7940] netlink: 'syz.1.700': attribute type 10 has an invalid length. [ 195.554461][ T7940] netlink: 2 bytes leftover after parsing attributes in process `syz.1.700'. [ 195.923875][ T7951] netlink: 'syz.3.706': attribute type 11 has an invalid length. [ 195.933322][ T7951] netlink: 'syz.3.706': attribute type 1 has an invalid length. [ 195.950871][ T7951] netlink: 'syz.3.706': attribute type 1 has an invalid length. [ 195.970740][ T7951] netlink: 'syz.3.706': attribute type 2 has an invalid length. [ 195.979721][ T7951] netlink: 199296 bytes leftover after parsing attributes in process `syz.3.706'. [ 196.387845][ T7964] bridge0: port 3(hsr0) entered disabled state [ 196.658101][ T7972] netlink: 'syz.0.713': attribute type 10 has an invalid length. [ 196.666170][ T7972] netlink: 2 bytes leftover after parsing attributes in process `syz.0.713'. [ 196.676154][ T7972] bridge0: port 3(hsr0) entered blocking state [ 196.682492][ T7972] bridge0: port 3(hsr0) entered forwarding state [ 197.078392][ T7984] netlink: 'syz.0.719': attribute type 11 has an invalid length. [ 197.096211][ T7984] netlink: 'syz.0.719': attribute type 1 has an invalid length. [ 197.346669][ T7992] bridge0: port 3(hsr0) entered disabled state [ 197.544083][ T8003] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.463815][ T8061] __nla_validate_parse: 3 callbacks suppressed [ 198.463854][ T8061] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.730'. [ 198.659067][ T8063] netlink: 2 bytes leftover after parsing attributes in process `syz.3.732'. [ 198.814188][ T8072] bridge0: port 3(hsr0) entered disabled state [ 198.993082][ T8086] netlink: 60 bytes leftover after parsing attributes in process `syz.2.740'. [ 199.015324][ T8086] netlink: 60 bytes leftover after parsing attributes in process `syz.2.740'. [ 199.027374][ T8086] netlink: 60 bytes leftover after parsing attributes in process `syz.2.740'. [ 199.079975][ T8085] netlink: 668 bytes leftover after parsing attributes in process `syz.3.741'. [ 199.096312][ T8085] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 199.109880][ T8085] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 199.292431][ T8089] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.743'. [ 200.303536][ T8114] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.751'. [ 201.067061][ T8117] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.752'. [ 201.077464][ T8117] bridge_slave_1: default FDB implementation only supports local addresses [ 201.316400][ T8132] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.756'. [ 203.162014][ T8146] bridge0: port 3(hsr0) entered disabled state [ 203.177559][ T8151] vlan0: entered promiscuous mode [ 203.182824][ T8151] vlan0: entered allmulticast mode [ 203.543564][ T8164] __nla_validate_parse: 1 callbacks suppressed [ 203.543742][ T8164] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.767'. [ 203.626282][ T8171] validate_nla: 3 callbacks suppressed [ 203.626292][ T8171] netlink: 'syz.0.768': attribute type 29 has an invalid length. [ 203.640512][ T8171] netlink: 'syz.0.768': attribute type 29 has an invalid length. [ 203.655531][ T8169] netlink: 'syz.0.768': attribute type 29 has an invalid length. [ 203.741081][ T8175] netlink: 'syz.1.771': attribute type 21 has an invalid length. [ 203.755350][ T8175] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.766090][ T8175] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.773746][ T8175] IPv6: NLM_F_CREATE should be set when creating new route [ 203.781123][ T8175] IPv6: NLM_F_CREATE should be set when creating new route [ 203.788402][ T8175] IPv6: NLM_F_CREATE should be set when creating new route [ 203.880039][ T8182] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.773'. [ 204.280702][ T8195] syzkaller0: entered promiscuous mode [ 204.286803][ T8195] syzkaller0: entered allmulticast mode [ 206.115425][ T8235] netlink: 'syz.0.789': attribute type 29 has an invalid length. [ 206.141487][ T8235] netlink: 'syz.0.789': attribute type 29 has an invalid length. [ 206.155527][ T8230] netlink: 'syz.0.789': attribute type 29 has an invalid length. [ 206.181878][ T8238] FAULT_INJECTION: forcing a failure. [ 206.181878][ T8238] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 206.198008][ T8238] CPU: 0 PID: 8238 Comm: syz.1.792 Not tainted syzkaller #0 [ 206.205340][ T8238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 206.215420][ T8238] Call Trace: [ 206.218728][ T8238] [ 206.221691][ T8238] dump_stack_lvl+0x18c/0x250 [ 206.226416][ T8238] ? show_regs_print_info+0x20/0x20 [ 206.231675][ T8238] ? load_image+0x420/0x420 [ 206.236231][ T8238] ? __lock_acquire+0x7d80/0x7d80 [ 206.241295][ T8238] ? verify_lock_unused+0x140/0x140 [ 206.246548][ T8238] should_fail_ex+0x394/0x4c0 [ 206.251285][ T8238] prepare_alloc_pages+0x1e1/0x5b0 [ 206.256467][ T8238] __alloc_pages+0x134/0x460 [ 206.261107][ T8238] ? zone_statistics+0x170/0x170 [ 206.266071][ T8238] ? mt_find+0x169/0x640 [ 206.270349][ T8238] ? handle_mm_fault+0xe6/0x4a50 [ 206.275308][ T8238] ? __lock_acquire+0x7d80/0x7d80 [ 206.280380][ T8238] __folio_alloc+0x10/0x20 [ 206.284833][ T8238] vma_alloc_folio+0x474/0x8f0 [ 206.289659][ T8238] ? handle_mm_fault+0xe6/0x4a50 [ 206.294632][ T8238] handle_mm_fault+0x1ab6/0x4a50 [ 206.299591][ T8238] ? handle_mm_fault+0xe6/0x4a50 [ 206.304563][ T8238] ? numa_migrate_prep+0x350/0x350 [ 206.309712][ T8238] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 206.315024][ T8238] do_user_addr_fault+0x736/0x12d0 [ 206.320184][ T8238] exc_page_fault+0x64/0x100 [ 206.324803][ T8238] asm_exc_page_fault+0x26/0x30 [ 206.329681][ T8238] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 206.335514][ T8238] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 206.355146][ T8238] RSP: 0018:ffffc900055bfc30 EFLAGS: 00050206 [ 206.361246][ T8238] RAX: ffffffff84312701 RBX: 00000000000103a0 RCX: 000000000000c3a0 [ 206.369253][ T8238] RDX: 0000000000000000 RSI: ffff8880598c4000 RDI: 0000200000004000 [ 206.377241][ T8238] RBP: 00000000000040e8 R08: ffff8880598d039f R09: 1ffff1100b31a073 [ 206.385248][ T8238] R10: dffffc0000000000 R11: ffffed100b31a074 R12: 00002000000103a0 [ 206.393242][ T8238] R13: ffff88802f28c4a8 R14: 0000200000000000 R15: ffff8880598c0000 [ 206.401235][ T8238] ? _copy_from_user+0x51/0xe0 [ 206.406109][ T8238] _copy_to_user+0x85/0xa0 [ 206.410556][ T8238] bpf_prog_array_copy_to_user+0x23d/0x290 [ 206.416415][ T8238] netns_bpf_prog_query+0x36e/0x500 [ 206.421648][ T8238] ? rht_unlock+0x1d0/0x1d0 [ 206.426189][ T8238] __sys_bpf+0x7a0/0x890 [ 206.430462][ T8238] ? bpf_link_show_fdinfo+0x390/0x390 [ 206.435885][ T8238] ? lock_chain_count+0x20/0x20 [ 206.440771][ T8238] __x64_sys_bpf+0x7c/0x90 [ 206.445218][ T8238] do_syscall_64+0x55/0xb0 [ 206.449666][ T8238] ? clear_bhb_loop+0x40/0x90 [ 206.454367][ T8238] ? clear_bhb_loop+0x40/0x90 [ 206.459068][ T8238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.464989][ T8238] RIP: 0033:0x7f4744f9de59 [ 206.469444][ T8238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.489082][ T8238] RSP: 002b:00007f4745f3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.497534][ T8238] RAX: ffffffffffffffda RBX: 00007f4745225fa0 RCX: 00007f4744f9de59 [ 206.505546][ T8238] RDX: 0000000000000040 RSI: 0000200000000640 RDI: 0000000000000010 [ 206.513586][ T8238] RBP: 00007f4745f3b090 R08: 0000000000000000 R09: 0000000000000000 [ 206.521588][ T8238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.529584][ T8238] R13: 00007f4745226038 R14: 00007f4745225fa0 R15: 00007ffc04779ac8 [ 206.537606][ T8238] [ 206.709535][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 206.709664][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 206.715971][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 206.722113][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 206.932403][ T8258] netlink: 'syz.0.799': attribute type 9 has an invalid length. [ 206.950153][ T8258] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.799'. [ 207.244620][ T8272] netlink: 'syz.3.806': attribute type 6 has an invalid length. [ 207.252563][ T8272] netlink: 168 bytes leftover after parsing attributes in process `syz.3.806'. [ 207.411611][ T8280] netlink: 'syz.1.808': attribute type 21 has an invalid length. [ 207.560047][ T8286] veth0_vlan: left promiscuous mode [ 207.567757][ T8286] veth0_vlan: entered promiscuous mode [ 207.578302][ T8286] team0: Device veth0_vlan failed to register rx_handler [ 207.729512][ T8290] netlink: 132 bytes leftover after parsing attributes in process `syz.1.812'. [ 211.274675][ T8306] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.817'. [ 211.375482][ T8306] bridge_slave_1: default FDB implementation only supports local addresses [ 211.591510][ T8305] validate_nla: 6 callbacks suppressed [ 211.591601][ T8305] netlink: 'syz.3.817': attribute type 10 has an invalid length. [ 211.915885][ T8305] veth0_vlan: left promiscuous mode [ 211.922814][ T8305] veth0_vlan: entered promiscuous mode [ 211.944638][ T8305] team0: Device veth0_vlan failed to register rx_handler [ 211.990829][ T8322] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.820'. [ 212.511373][ T8339] netlink: 'syz.0.825': attribute type 29 has an invalid length. [ 212.550191][ T8339] netlink: 'syz.0.825': attribute type 29 has an invalid length. [ 212.582055][ T8337] netlink: 'syz.0.825': attribute type 29 has an invalid length. [ 212.631952][ T8341] FAULT_INJECTION: forcing a failure. [ 212.631952][ T8341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.682984][ T8341] CPU: 0 PID: 8341 Comm: syz.2.827 Not tainted syzkaller #0 [ 212.690395][ T8341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 212.700523][ T8341] Call Trace: [ 212.703886][ T8341] [ 212.706881][ T8341] dump_stack_lvl+0x18c/0x250 [ 212.711650][ T8341] ? show_regs_print_info+0x20/0x20 [ 212.716942][ T8341] ? load_image+0x420/0x420 [ 212.721545][ T8341] ? __might_fault+0xaa/0x120 [ 212.726290][ T8341] ? __lock_acquire+0x7d80/0x7d80 [ 212.731400][ T8341] should_fail_ex+0x394/0x4c0 [ 212.736196][ T8341] _copy_from_iter+0x1cd/0x1290 [ 212.741132][ T8341] ? rcu_is_watching+0x15/0xb0 [ 212.745981][ T8341] ? copyout_mc+0x70/0x70 [ 212.750395][ T8341] ? __virt_addr_valid+0x10c/0x380 [ 212.755588][ T8341] ? __virt_addr_valid+0x10c/0x380 [ 212.760779][ T8341] ? __virt_addr_valid+0x10c/0x380 [ 212.765972][ T8341] ? __check_object_size+0x4fc/0xa40 [ 212.771347][ T8341] netlink_sendmsg+0x76b/0xbf0 [ 212.776219][ T8341] ? netlink_getsockopt+0x590/0x590 [ 212.781514][ T8341] ? apparmor_socket_sendmsg+0x8e/0x330 [ 212.787153][ T8341] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 212.792532][ T8341] ? security_socket_sendmsg+0x80/0xa0 [ 212.798085][ T8341] ? netlink_getsockopt+0x590/0x590 [ 212.803379][ T8341] ____sys_sendmsg+0x61b/0x980 [ 212.808251][ T8341] ? __asan_memset+0x22/0x40 [ 212.812916][ T8341] ? __sys_sendmsg_sock+0x30/0x30 [ 212.818028][ T8341] ? __import_iovec+0x5f2/0x850 [ 212.823074][ T8341] ? import_iovec+0x73/0xa0 [ 212.827693][ T8341] ___sys_sendmsg+0x2a6/0x360 [ 212.832451][ T8341] ? get_pid_task+0x20/0x1e0 [ 212.837148][ T8341] ? __sys_sendmsg+0x2b0/0x2b0 [ 212.842083][ T8341] ? __lock_acquire+0x7d80/0x7d80 [ 212.847292][ T8341] __se_sys_sendmsg+0x1d0/0x2c0 [ 212.852244][ T8341] ? __x64_sys_sendmsg+0x80/0x80 [ 212.857334][ T8341] ? lockdep_hardirqs_on+0x98/0x150 [ 212.862629][ T8341] do_syscall_64+0x55/0xb0 [ 212.867130][ T8341] ? clear_bhb_loop+0x40/0x90 [ 212.871884][ T8341] ? clear_bhb_loop+0x40/0x90 [ 212.876644][ T8341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.882610][ T8341] RIP: 0033:0x7f71b099de59 [ 212.887094][ T8341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.906774][ T8341] RSP: 002b:00007f71b1895028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.915306][ T8341] RAX: ffffffffffffffda RBX: 00007f71b0c25fa0 RCX: 00007f71b099de59 [ 212.923354][ T8341] RDX: 0000000000004800 RSI: 0000200000000600 RDI: 0000000000000003 [ 212.931382][ T8341] RBP: 00007f71b1895090 R08: 0000000000000000 R09: 0000000000000000 [ 212.939431][ T8341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.947500][ T8341] R13: 00007f71b0c26038 R14: 00007f71b0c25fa0 R15: 00007fff570b1108 [ 212.955624][ T8341] [ 213.401255][ T8349] »»»»»»: renamed from virt_wifi0 [ 213.722465][ T8364] netlink: 'syz.3.831': attribute type 29 has an invalid length. [ 213.815309][ T8364] netlink: 'syz.3.831': attribute type 29 has an invalid length. [ 213.823511][ T8361] netlink: 'syz.3.831': attribute type 29 has an invalid length. [ 214.017590][ T8368] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.835'. [ 214.028101][ T8368] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 214.037048][ T8368] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 214.052591][ T8368] netlink: 'syz.0.835': attribute type 17 has an invalid length. [ 214.061630][ T8368] netlink: 152 bytes leftover after parsing attributes in process `syz.0.835'. [ 214.104443][ T8368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.229382][ T8387] netlink: 'syz.1.839': attribute type 29 has an invalid length. [ 215.255389][ T8387] netlink: 'syz.1.839': attribute type 29 has an invalid length. [ 215.843482][ T8396] FAULT_INJECTION: forcing a failure. [ 215.843482][ T8396] name failslab, interval 1, probability 0, space 0, times 0 [ 215.862997][ T8396] CPU: 0 PID: 8396 Comm: syz.0.843 Not tainted syzkaller #0 [ 215.870390][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 215.880529][ T8396] Call Trace: [ 215.883879][ T8396] [ 215.886876][ T8396] dump_stack_lvl+0x18c/0x250 [ 215.891660][ T8396] ? show_regs_print_info+0x20/0x20 [ 215.896959][ T8396] ? load_image+0x420/0x420 [ 215.901564][ T8396] ? __might_sleep+0xe0/0xe0 [ 215.906248][ T8396] ? __lock_acquire+0x7d80/0x7d80 [ 215.911383][ T8396] should_fail_ex+0x394/0x4c0 [ 215.916158][ T8396] should_failslab+0x9/0x20 [ 215.920744][ T8396] slab_pre_alloc_hook+0x59/0x300 [ 215.925865][ T8396] ? __get_vm_area_node+0x125/0x370 [ 215.931161][ T8396] __kmem_cache_alloc_node+0x53/0x250 [ 215.936626][ T8396] ? __get_vm_area_node+0x125/0x370 [ 215.941901][ T8396] kmalloc_node_trace+0x26/0xe0 [ 215.946838][ T8396] __get_vm_area_node+0x125/0x370 [ 215.951972][ T8396] __vmalloc_node_range+0x36f/0x1320 [ 215.957340][ T8396] ? netlink_sendmsg+0x602/0xbf0 [ 215.962365][ T8396] ? netlink_insert+0x1094/0x1390 [ 215.967515][ T8396] ? netlink_insert+0x2ba/0x1390 [ 215.972567][ T8396] ? free_vm_area+0x50/0x50 [ 215.977203][ T8396] ? netlink_sendmsg+0x602/0xbf0 [ 215.982230][ T8396] vmalloc+0x79/0x90 [ 215.986213][ T8396] ? netlink_sendmsg+0x602/0xbf0 [ 215.991239][ T8396] netlink_sendmsg+0x602/0xbf0 [ 215.996129][ T8396] ? netlink_getsockopt+0x590/0x590 [ 216.001424][ T8396] ? apparmor_socket_sendmsg+0x8e/0x330 [ 216.007051][ T8396] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 216.012417][ T8396] ? security_socket_sendmsg+0x80/0xa0 [ 216.017972][ T8396] ? netlink_getsockopt+0x590/0x590 [ 216.023248][ T8396] ____sys_sendmsg+0x61b/0x980 [ 216.028120][ T8396] ? __asan_memset+0x22/0x40 [ 216.032790][ T8396] ? __sys_sendmsg_sock+0x30/0x30 [ 216.037889][ T8396] ? __import_iovec+0x5f2/0x850 [ 216.042850][ T8396] ? import_iovec+0x73/0xa0 [ 216.047456][ T8396] ___sys_sendmsg+0x2a6/0x360 [ 216.052236][ T8396] ? __sys_sendmsg+0x2b0/0x2b0 [ 216.057162][ T8396] ? trace_call_bpf+0xc3/0x6c0 [ 216.062139][ T8396] __se_sys_sendmsg+0x1d0/0x2c0 [ 216.067069][ T8396] ? perf_trace_preemptirq_template+0x269/0x330 [ 216.073397][ T8396] ? __x64_sys_sendmsg+0x80/0x80 [ 216.078486][ T8396] ? lockdep_hardirqs_on+0x98/0x150 [ 216.083774][ T8396] do_syscall_64+0x55/0xb0 [ 216.088265][ T8396] ? clear_bhb_loop+0x40/0x90 [ 216.093006][ T8396] ? clear_bhb_loop+0x40/0x90 [ 216.097760][ T8396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.103801][ T8396] RIP: 0033:0x7fa37759de59 [ 216.108293][ T8396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.127985][ T8396] RSP: 002b:00007fa378416028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.136490][ T8396] RAX: ffffffffffffffda RBX: 00007fa377825fa0 RCX: 00007fa37759de59 [ 216.144516][ T8396] RDX: 0000010000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 216.152542][ T8396] RBP: 00007fa378416090 R08: 0000000000000000 R09: 0000000000000000 [ 216.160688][ T8396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.168721][ T8396] R13: 00007fa377826038 R14: 00007fa377825fa0 R15: 00007ffd5ea169e8 [ 216.176827][ T8396] [ 216.194589][ T8396] syz.0.843: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 216.209754][ T8396] CPU: 0 PID: 8396 Comm: syz.0.843 Not tainted syzkaller #0 [ 216.217116][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 216.227240][ T8396] Call Trace: [ 216.230591][ T8396] [ 216.233591][ T8396] dump_stack_lvl+0x18c/0x250 [ 216.238360][ T8396] ? show_regs_print_info+0x20/0x20 [ 216.243640][ T8396] ? load_image+0x420/0x420 [ 216.248233][ T8396] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 216.254726][ T8396] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 216.261324][ T8396] warn_alloc+0x246/0x340 [ 216.265722][ T8396] ? __get_vm_area_node+0x125/0x370 [ 216.270976][ T8396] ? zone_watermark_ok_safe+0x230/0x230 [ 216.276571][ T8396] ? rcu_is_watching+0x15/0xb0 [ 216.281403][ T8396] ? __get_vm_area_node+0x356/0x370 [ 216.286671][ T8396] __vmalloc_node_range+0x394/0x1320 [ 216.292020][ T8396] ? netlink_insert+0x1094/0x1390 [ 216.297137][ T8396] ? netlink_insert+0x2ba/0x1390 [ 216.302146][ T8396] ? free_vm_area+0x50/0x50 [ 216.306718][ T8396] ? netlink_sendmsg+0x602/0xbf0 [ 216.311704][ T8396] vmalloc+0x79/0x90 [ 216.315654][ T8396] ? netlink_sendmsg+0x602/0xbf0 [ 216.320659][ T8396] netlink_sendmsg+0x602/0xbf0 [ 216.325513][ T8396] ? netlink_getsockopt+0x590/0x590 [ 216.330769][ T8396] ? apparmor_socket_sendmsg+0x8e/0x330 [ 216.336369][ T8396] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 216.341696][ T8396] ? security_socket_sendmsg+0x80/0xa0 [ 216.347198][ T8396] ? netlink_getsockopt+0x590/0x590 [ 216.352452][ T8396] ____sys_sendmsg+0x61b/0x980 [ 216.357286][ T8396] ? __asan_memset+0x22/0x40 [ 216.361919][ T8396] ? __sys_sendmsg_sock+0x30/0x30 [ 216.366986][ T8396] ? __import_iovec+0x5f2/0x850 [ 216.371901][ T8396] ? import_iovec+0x73/0xa0 [ 216.376484][ T8396] ___sys_sendmsg+0x2a6/0x360 [ 216.381219][ T8396] ? __sys_sendmsg+0x2b0/0x2b0 [ 216.386116][ T8396] ? trace_call_bpf+0xc3/0x6c0 [ 216.391006][ T8396] __se_sys_sendmsg+0x1d0/0x2c0 [ 216.395920][ T8396] ? perf_trace_preemptirq_template+0x269/0x330 [ 216.402224][ T8396] ? __x64_sys_sendmsg+0x80/0x80 [ 216.407269][ T8396] ? lockdep_hardirqs_on+0x98/0x150 [ 216.412537][ T8396] do_syscall_64+0x55/0xb0 [ 216.417008][ T8396] ? clear_bhb_loop+0x40/0x90 [ 216.421720][ T8396] ? clear_bhb_loop+0x40/0x90 [ 216.426452][ T8396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.432401][ T8396] RIP: 0033:0x7fa37759de59 [ 216.436863][ T8396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.456531][ T8396] RSP: 002b:00007fa378416028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.465019][ T8396] RAX: ffffffffffffffda RBX: 00007fa377825fa0 RCX: 00007fa37759de59 [ 216.473030][ T8396] RDX: 0000010000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 216.481065][ T8396] RBP: 00007fa378416090 R08: 0000000000000000 R09: 0000000000000000 [ 216.489077][ T8396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.497089][ T8396] R13: 00007fa377826038 R14: 00007fa377825fa0 R15: 00007ffd5ea169e8 [ 216.505157][ T8396] [ 216.545730][ T8396] Mem-Info: [ 216.549053][ T8396] active_anon:11635 inactive_anon:0 isolated_anon:0 [ 216.549053][ T8396] active_file:18157 inactive_file:40003 isolated_file:0 [ 216.549053][ T8396] unevictable:768 dirty:117 writeback:0 [ 216.549053][ T8396] slab_reclaimable:10111 slab_unreclaimable:93696 [ 216.549053][ T8396] mapped:24638 shmem:1361 pagetables:544 [ 216.549053][ T8396] sec_pagetables:0 bounce:0 [ 216.549053][ T8396] kernel_misc_reclaimable:0 [ 216.549053][ T8396] free:1342596 free_pcp:6466 free_cma:0 [ 216.607954][ T8396] Node 0 active_anon:46540kB inactive_anon:0kB active_file:72628kB inactive_file:159812kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98552kB dirty:468kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10800kB pagetables:2176kB sec_pagetables:0kB all_unreclaimable? no [ 216.643263][ T8396] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 216.681703][ T8396] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.711535][ T8396] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 216.718716][ T8396] Node 0 DMA32 free:1454032kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:46500kB inactive_anon:0kB active_file:72628kB inactive_file:158988kB unevictable:1536kB writepending:468kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:8544kB local_pcp:7856kB free_cma:0kB [ 216.751110][ T8396] lowmem_reserve[]: 0 0 0 0 0 [ 216.756707][ T8396] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.784976][ T8396] lowmem_reserve[]: 0 0 0 0 0 [ 216.794593][ T8398] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.844'. [ 216.832136][ T8396] Node 1 Normal free:3900508kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17052kB local_pcp:7008kB free_cma:0kB [ 216.903469][ T8396] lowmem_reserve[]: 0 0 0 0 0 [ 216.909553][ T8396] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 216.924610][ T8400] syzkaller0: entered promiscuous mode [ 216.933981][ T8400] syzkaller0: entered allmulticast mode [ 216.954439][ T8400] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.845'. [ 216.964090][ T8400] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 216.979797][ T8402] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.846'. [ 216.989206][ T8396] Node 0 DMA32: 652*4kB (UM) 829*8kB (UM) 874*16kB (UME) 1001*32kB (UME) 384*64kB (UME) 126*128kB (UME) 79*256kB (UM) 46*512kB (UME) 21*1024kB (UM) 11*2048kB (UME) 310*4096kB (M) = 1453528kB [ 217.025358][ T8396] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 217.037549][ T8396] Node 1 Normal: 163*4kB (UME) 58*8kB (UME) 30*16kB (UME) 53*32kB (UME) 18*64kB (UME) 6*128kB (U) 2*256kB (UE) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3900508kB [ 217.067814][ T8396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.078448][ T8396] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.088863][ T8396] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.098960][ T8396] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.108954][ T8396] 59543 total pagecache pages [ 217.113777][ T8396] 0 pages in swap cache [ 217.128144][ T8396] Free swap = 124996kB [ 217.132379][ T8396] Total swap = 124996kB [ 217.137237][ T8396] 2097051 pages RAM [ 217.141096][ T8396] 0 pages HighMem/MovableOnly [ 217.146311][ T8396] 416953 pages reserved [ 217.152839][ T8396] 0 pages cma reserved [ 218.073218][ T8424] validate_nla: 1 callbacks suppressed [ 218.073231][ T8424] netlink: 'syz.1.853': attribute type 29 has an invalid length. [ 218.094509][ T8424] netlink: 'syz.1.853': attribute type 29 has an invalid length. [ 218.104703][ T8423] netlink: 'syz.1.853': attribute type 29 has an invalid length. [ 220.869023][ T8436] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.865'. [ 222.560312][ T8462] hsr0: left promiscuous mode [ 222.568728][ T8464] netlink: 'syz.0.871': attribute type 29 has an invalid length. [ 222.585321][ T8464] netlink: 'syz.0.871': attribute type 29 has an invalid length. [ 222.599259][ T8459] netlink: 'syz.0.871': attribute type 29 has an invalid length. [ 223.725135][ T8478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.733880][ T8478] IPv6: NLM_F_CREATE should be set when creating new route [ 223.741733][ T8478] IPv6: NLM_F_CREATE should be set when creating new route [ 223.749264][ T8478] IPv6: NLM_F_CREATE should be set when creating new route [ 224.379821][ T8496] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.877'. [ 224.435042][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'. [ 224.448386][ T8498] FAULT_INJECTION: forcing a failure. [ 224.448386][ T8498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.464877][ T8499] delete_channel: no stack [ 224.486024][ T8498] CPU: 1 PID: 8498 Comm: syz.0.878 Not tainted syzkaller #0 [ 224.493372][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 224.503459][ T8498] Call Trace: [ 224.506780][ T8498] [ 224.509759][ T8498] dump_stack_lvl+0x18c/0x250 [ 224.514512][ T8498] ? show_regs_print_info+0x20/0x20 [ 224.519750][ T8498] ? load_image+0x420/0x420 [ 224.524268][ T8498] ? __might_fault+0xaa/0x120 [ 224.528958][ T8498] ? __lock_acquire+0x7d80/0x7d80 [ 224.533989][ T8498] should_fail_ex+0x394/0x4c0 [ 224.538703][ T8498] _copy_from_iter+0x1cd/0x1290 [ 224.543595][ T8498] ? rcu_is_watching+0x15/0xb0 [ 224.548405][ T8498] ? copyout_mc+0x70/0x70 [ 224.552788][ T8498] ? __virt_addr_valid+0x10c/0x380 [ 224.557938][ T8498] ? __virt_addr_valid+0x10c/0x380 [ 224.563107][ T8498] ? __virt_addr_valid+0x10c/0x380 [ 224.568267][ T8498] ? __check_object_size+0x4fc/0xa40 [ 224.573595][ T8498] netlink_sendmsg+0x76b/0xbf0 [ 224.578410][ T8498] ? netlink_getsockopt+0x590/0x590 [ 224.583657][ T8498] ? apparmor_socket_sendmsg+0x8e/0x330 [ 224.589247][ T8498] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 224.594576][ T8498] ? security_socket_sendmsg+0x80/0xa0 [ 224.600080][ T8498] ? netlink_getsockopt+0x590/0x590 [ 224.605348][ T8498] ____sys_sendmsg+0x61b/0x980 [ 224.610196][ T8498] ? __asan_memset+0x22/0x40 [ 224.614858][ T8498] ? __sys_sendmsg_sock+0x30/0x30 [ 224.619954][ T8498] ? __import_iovec+0x5f2/0x850 [ 224.624864][ T8498] ? import_iovec+0x73/0xa0 [ 224.629413][ T8498] ___sys_sendmsg+0x2a6/0x360 [ 224.634172][ T8498] ? get_pid_task+0x20/0x1e0 [ 224.638819][ T8498] ? __sys_sendmsg+0x2b0/0x2b0 [ 224.643651][ T8498] ? __lock_acquire+0x7d80/0x7d80 [ 224.648744][ T8498] __se_sys_sendmsg+0x1d0/0x2c0 [ 224.653699][ T8498] ? __x64_sys_sendmsg+0x80/0x80 [ 224.658703][ T8498] ? lockdep_hardirqs_on+0x98/0x150 [ 224.663966][ T8498] do_syscall_64+0x55/0xb0 [ 224.668436][ T8498] ? clear_bhb_loop+0x40/0x90 [ 224.673152][ T8498] ? clear_bhb_loop+0x40/0x90 [ 224.677876][ T8498] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.683830][ T8498] RIP: 0033:0x7fa37759de59 [ 224.688287][ T8498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.707937][ T8498] RSP: 002b:00007fa378416028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.716393][ T8498] RAX: ffffffffffffffda RBX: 00007fa377825fa0 RCX: 00007fa37759de59 [ 224.724405][ T8498] RDX: 0000000000004800 RSI: 0000200000000600 RDI: 0000000000000003 [ 224.732411][ T8498] RBP: 00007fa378416090 R08: 0000000000000000 R09: 0000000000000000 [ 224.740423][ T8498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.748484][ T8498] R13: 00007fa377826038 R14: 00007fa377825fa0 R15: 00007ffd5ea169e8 [ 224.756513][ T8498] [ 224.816512][ T8509] netlink: 'syz.1.879': attribute type 29 has an invalid length. [ 224.824350][ T8509] netlink: 'syz.1.879': attribute type 29 has an invalid length. [ 224.846748][ T8506] netlink: 'syz.1.879': attribute type 29 has an invalid length. [ 224.952472][ T8511] netlink: 'syz.0.882': attribute type 9 has an invalid length. [ 224.978150][ T8511] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.882'. [ 225.031612][ T8513] netlink: 'syz.3.883': attribute type 10 has an invalid length. [ 225.971443][ T8523] FAULT_INJECTION: forcing a failure. [ 225.971443][ T8523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.989369][ T8515] delete_channel: no stack [ 226.010231][ T8523] CPU: 0 PID: 8523 Comm: syz.0.887 Not tainted syzkaller #0 [ 226.017600][ T8523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 226.027689][ T8523] Call Trace: [ 226.031000][ T8523] [ 226.034021][ T8523] dump_stack_lvl+0x18c/0x250 [ 226.038788][ T8523] ? show_regs_print_info+0x20/0x20 [ 226.044055][ T8523] ? load_image+0x420/0x420 [ 226.048600][ T8523] ? __might_fault+0xaa/0x120 [ 226.053340][ T8523] ? __lock_acquire+0x7d80/0x7d80 [ 226.058420][ T8523] should_fail_ex+0x394/0x4c0 [ 226.063162][ T8523] _copy_from_user+0x2f/0xe0 [ 226.067799][ T8523] ___sys_sendmsg+0x1c7/0x360 [ 226.072544][ T8523] ? __sys_sendmsg+0x2b0/0x2b0 [ 226.077380][ T8523] ? trace_call_bpf+0xc3/0x6c0 [ 226.082213][ T8523] __se_sys_sendmsg+0x1d0/0x2c0 [ 226.087115][ T8523] ? __x64_sys_sendmsg+0x80/0x80 [ 226.092106][ T8523] ? lockdep_hardirqs_on+0x98/0x150 [ 226.097375][ T8523] do_syscall_64+0x55/0xb0 [ 226.101828][ T8523] ? clear_bhb_loop+0x40/0x90 [ 226.106539][ T8523] ? clear_bhb_loop+0x40/0x90 [ 226.111232][ T8523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.117179][ T8523] RIP: 0033:0x7fa37759de59 [ 226.121615][ T8523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.141256][ T8523] RSP: 002b:00007fa378416028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.149695][ T8523] RAX: ffffffffffffffda RBX: 00007fa377825fa0 RCX: 00007fa37759de59 [ 226.157690][ T8523] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000003 [ 226.165696][ T8523] RBP: 00007fa378416090 R08: 0000000000000000 R09: 0000000000000000 [ 226.173676][ T8523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.181660][ T8523] R13: 00007fa377826038 R14: 00007fa377825fa0 R15: 00007ffd5ea169e8 [ 226.189671][ T8523] [ 226.541302][ T8532] netlink: 'syz.1.889': attribute type 29 has an invalid length. [ 226.574006][ T8532] netlink: 'syz.1.889': attribute type 29 has an invalid length. [ 226.602125][ T8535] netlink: 'syz.1.889': attribute type 29 has an invalid length. [ 226.640871][ T8532] netlink: 'syz.1.889': attribute type 29 has an invalid length. [ 226.774377][ T8537] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.891'. [ 227.850327][ T8560] : port 1(syz_tun) entered blocking state [ 227.880426][ T8560] : port 1(syz_tun) entered disabled state [ 227.896761][ T8560] syz_tun: entered allmulticast mode [ 227.914275][ T8560] syz_tun: entered promiscuous mode [ 228.132319][ T8568] netlink: 'syz.1.904': attribute type 39 has an invalid length. [ 228.428395][ T8576] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.907'. [ 228.736029][ T8582] syzkaller0: entered promiscuous mode [ 228.742958][ T8582] syzkaller0: entered allmulticast mode [ 230.957215][ T8585] IPv6: NLM_F_CREATE should be specified when creating new route [ 230.965634][ T8585] netlink: 1 bytes leftover after parsing attributes in process `syz.3.911'. [ 230.974618][ T8595] netlink: 'syz.0.913': attribute type 21 has an invalid length. [ 230.982758][ T8595] netlink: 'syz.0.913': attribute type 1 has an invalid length. [ 230.991049][ T8595] netlink: 132 bytes leftover after parsing attributes in process `syz.0.913'. [ 231.120430][ T8605] netlink: 'syz.1.917': attribute type 21 has an invalid length. [ 231.152861][ T8605] netlink: 'syz.1.917': attribute type 1 has an invalid length. [ 231.167314][ T8605] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.917'. [ 231.298914][ T8609] FAULT_INJECTION: forcing a failure. [ 231.298914][ T8609] name failslab, interval 1, probability 0, space 0, times 0 [ 231.311628][ T8609] CPU: 1 PID: 8609 Comm: syz.2.921 Not tainted syzkaller #0 [ 231.318953][ T8609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 231.329049][ T8609] Call Trace: [ 231.332366][ T8609] [ 231.335339][ T8609] dump_stack_lvl+0x18c/0x250 [ 231.340075][ T8609] ? show_regs_print_info+0x20/0x20 [ 231.345315][ T8609] ? load_image+0x420/0x420 [ 231.349858][ T8609] ? netdev_core_pick_tx+0x370/0x370 [ 231.355176][ T8609] should_fail_ex+0x394/0x4c0 [ 231.359922][ T8609] should_failslab+0x9/0x20 [ 231.364462][ T8609] slab_pre_alloc_hook+0x59/0x300 [ 231.369554][ T8609] kmem_cache_alloc+0x5a/0x2c0 [ 231.374351][ T8609] ? skb_clone+0x1eb/0x370 [ 231.378819][ T8609] skb_clone+0x1eb/0x370 [ 231.383126][ T8609] bpf_clone_redirect+0x16d/0x4a0 [ 231.388197][ T8609] bpf_prog_c6f54bbad6dab1ee+0x5e/0x63 [ 231.393693][ T8609] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 231.399716][ T8609] ? __lock_acquire+0x7d80/0x7d80 [ 231.404774][ T8609] ? lock_chain_count+0x20/0x20 [ 231.409661][ T8609] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 231.415691][ T8609] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 231.421015][ T8609] ? lock_chain_count+0x20/0x20 [ 231.425906][ T8609] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 231.432181][ T8609] ? __local_bh_disable_ip+0x108/0x1a0 [ 231.437669][ T8609] ? __cant_sleep+0x220/0x220 [ 231.442386][ T8609] ? __local_bh_enable_ip+0x13a/0x1c0 [ 231.447796][ T8609] ? _local_bh_enable+0xa0/0xa0 [ 231.452679][ T8609] ? bpf_test_timer_continue+0x135/0x380 [ 231.458348][ T8609] ? bpf_test_run+0x174/0x870 [ 231.463063][ T8609] bpf_test_run+0x2df/0x870 [ 231.467599][ T8609] ? bpf_test_run+0x174/0x870 [ 231.472306][ T8609] ? dst_hold+0x70/0x70 [ 231.476488][ T8609] ? eth_get_headlen+0x210/0x210 [ 231.481464][ T8609] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 231.486883][ T8609] ? cpu_online+0x60/0x60 [ 231.491235][ T8609] bpf_prog_test_run+0x31f/0x390 [ 231.496208][ T8609] __sys_bpf+0x49d/0x890 [ 231.500479][ T8609] ? bpf_link_show_fdinfo+0x390/0x390 [ 231.505897][ T8609] ? lock_chain_count+0x20/0x20 [ 231.510782][ T8609] __x64_sys_bpf+0x7c/0x90 [ 231.515240][ T8609] do_syscall_64+0x55/0xb0 [ 231.519697][ T8609] ? clear_bhb_loop+0x40/0x90 [ 231.524402][ T8609] ? clear_bhb_loop+0x40/0x90 [ 231.529103][ T8609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.535027][ T8609] RIP: 0033:0x7f71b099de59 [ 231.539522][ T8609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.559158][ T8609] RSP: 002b:00007f71b1895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.567601][ T8609] RAX: ffffffffffffffda RBX: 00007f71b0c25fa0 RCX: 00007f71b099de59 [ 231.575596][ T8609] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 231.583597][ T8609] RBP: 00007f71b1895090 R08: 0000000000000000 R09: 0000000000000000 [ 231.591599][ T8609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 231.599595][ T8609] R13: 00007f71b0c26038 R14: 00007f71b0c25fa0 R15: 00007fff570b1108 [ 231.607604][ T8609] [ 232.103151][ T8625] FAULT_INJECTION: forcing a failure. [ 232.103151][ T8625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.117445][ T8625] CPU: 1 PID: 8625 Comm: syz.1.925 Not tainted syzkaller #0 [ 232.124788][ T8625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 232.134887][ T8625] Call Trace: [ 232.138198][ T8625] [ 232.141178][ T8625] dump_stack_lvl+0x18c/0x250 [ 232.145894][ T8625] ? show_regs_print_info+0x20/0x20 [ 232.151126][ T8625] ? load_image+0x420/0x420 [ 232.155657][ T8625] ? __might_fault+0xaa/0x120 [ 232.160360][ T8625] ? __lock_acquire+0x7d80/0x7d80 [ 232.165435][ T8625] should_fail_ex+0x394/0x4c0 [ 232.170143][ T8625] _copy_from_iter+0x1cd/0x1290 [ 232.175029][ T8625] ? lockdep_hardirqs_on+0x98/0x150 [ 232.180349][ T8625] ? copyout_mc+0x70/0x70 [ 232.184708][ T8625] ? __virt_addr_valid+0x10c/0x380 [ 232.189851][ T8625] ? __virt_addr_valid+0x10c/0x380 [ 232.194998][ T8625] ? __virt_addr_valid+0x10c/0x380 [ 232.200145][ T8625] ? __check_object_size+0x4fc/0xa40 [ 232.205459][ T8625] pfkey_sendmsg+0x1fd/0x11a0 [ 232.210169][ T8625] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 232.217399][ T8625] ? pfkey_release+0x340/0x340 [ 232.222180][ T8625] ? aa_sk_perm+0x83c/0x970 [ 232.226711][ T8625] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 232.232898][ T8625] ? lockdep_hardirqs_on+0x98/0x150 [ 232.238141][ T8625] ? aa_af_perm+0x330/0x330 [ 232.242673][ T8625] ? aa_sock_msg_perm+0x94/0x150 [ 232.247638][ T8625] ? apparmor_socket_sendmsg+0x8e/0x330 [ 232.253206][ T8625] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 232.258516][ T8625] ? security_socket_sendmsg+0x80/0xa0 [ 232.264063][ T8625] ? pfkey_release+0x340/0x340 [ 232.268853][ T8625] ____sys_sendmsg+0x61b/0x980 [ 232.273667][ T8625] ? __asan_memset+0x22/0x40 [ 232.278293][ T8625] ? __sys_sendmsg_sock+0x30/0x30 [ 232.283345][ T8625] ? __import_iovec+0x5f2/0x850 [ 232.288267][ T8625] ? import_iovec+0x73/0xa0 [ 232.292808][ T8625] ___sys_sendmsg+0x2a6/0x360 [ 232.297525][ T8625] ? __sys_sendmsg+0x2b0/0x2b0 [ 232.302335][ T8625] ? perf_trace_preemptirq_template+0x269/0x330 [ 232.308649][ T8625] __se_sys_sendmsg+0x1d0/0x2c0 [ 232.313530][ T8625] ? perf_trace_preemptirq_template+0x269/0x330 [ 232.319827][ T8625] ? __x64_sys_sendmsg+0x80/0x80 [ 232.324812][ T8625] ? lockdep_hardirqs_on+0x98/0x150 [ 232.330042][ T8625] do_syscall_64+0x55/0xb0 [ 232.334494][ T8625] ? clear_bhb_loop+0x40/0x90 [ 232.339193][ T8625] ? clear_bhb_loop+0x40/0x90 [ 232.343890][ T8625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.349818][ T8625] RIP: 0033:0x7f4744f9de59 [ 232.354294][ T8625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.373930][ T8625] RSP: 002b:00007f4745f3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.382380][ T8625] RAX: ffffffffffffffda RBX: 00007f4745225fa0 RCX: 00007f4744f9de59 [ 232.390373][ T8625] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000005 [ 232.398372][ T8625] RBP: 00007f4745f3b090 R08: 0000000000000000 R09: 0000000000000000 [ 232.406368][ T8625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.414379][ T8625] R13: 00007f4745226038 R14: 00007f4745225fa0 R15: 00007ffc04779ac8 [ 232.422391][ T8625] [ 232.469618][ T8623] netlink: 'syz.3.924': attribute type 10 has an invalid length. [ 233.166306][ T8640] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.930'. [ 233.221206][ T8633] netlink: 'syz.1.926': attribute type 3 has an invalid length. [ 233.255903][ T8633] netlink: 132 bytes leftover after parsing attributes in process `syz.1.926'. [ 233.521240][ T8649] netlink: 'syz.3.933': attribute type 10 has an invalid length. [ 233.540198][ T8649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.933'. [ 233.560787][ T8649] team0: entered promiscuous mode [ 233.566933][ T8649] C: entered promiscuous mode [ 233.572252][ T8649] team_slave_1: entered promiscuous mode [ 233.579036][ T8649] team0: entered allmulticast mode [ 233.605289][ T8649] C: entered allmulticast mode [ 233.614839][ T8649] team_slave_1: entered allmulticast mode [ 233.630790][ T8649] bond0: (slave team0): Releasing backup interface [ 233.666156][ T8649] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 233.753135][ T8658] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.936'. [ 234.777048][ T8677] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.943'. [ 234.807096][ T8678] netlink: 'syz.1.942': attribute type 29 has an invalid length. [ 234.815110][ T8678] netlink: 'syz.1.942': attribute type 29 has an invalid length. [ 234.829813][ T8675] netlink: 'syz.1.942': attribute type 29 has an invalid length. [ 236.438222][ T8712] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.956'. [ 236.534744][ T8718] netlink: 'syz.0.957': attribute type 29 has an invalid length. [ 236.555324][ T8718] netlink: 'syz.0.957': attribute type 29 has an invalid length. [ 236.567540][ T8715] netlink: 'syz.0.957': attribute type 29 has an invalid length. [ 236.652857][ T8724] FAULT_INJECTION: forcing a failure. [ 236.652857][ T8724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.666822][ T8724] CPU: 1 PID: 8724 Comm: syz.3.961 Not tainted syzkaller #0 [ 236.674191][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 236.684344][ T8724] Call Trace: [ 236.687674][ T8724] [ 236.690699][ T8724] dump_stack_lvl+0x18c/0x250 [ 236.695424][ T8724] ? show_regs_print_info+0x20/0x20 [ 236.700691][ T8724] ? load_image+0x420/0x420 [ 236.705234][ T8724] ? __might_fault+0xaa/0x120 [ 236.709950][ T8724] ? __lock_acquire+0x7d80/0x7d80 [ 236.715022][ T8724] should_fail_ex+0x394/0x4c0 [ 236.719745][ T8724] _copy_from_iter+0x1cd/0x1290 [ 236.724637][ T8724] ? __virt_addr_valid+0x10c/0x380 [ 236.729846][ T8724] ? __lock_acquire+0x7d80/0x7d80 [ 236.734927][ T8724] ? copyout_mc+0x70/0x70 [ 236.739305][ T8724] ? __virt_addr_valid+0x10c/0x380 [ 236.744512][ T8724] ? __virt_addr_valid+0x10c/0x380 [ 236.749712][ T8724] ? __virt_addr_valid+0x10c/0x380 [ 236.754883][ T8724] ? __check_object_size+0x4fc/0xa40 [ 236.760259][ T8724] kernfs_fop_write_iter+0x19e/0x520 [ 236.765617][ T8724] vfs_write+0x474/0x9a0 [ 236.769923][ T8724] ? file_end_write+0x250/0x250 [ 236.774833][ T8724] ? __fget_files+0x3fc/0x460 [ 236.779579][ T8724] ? __fdget_pos+0x2a3/0x330 [ 236.784231][ T8724] ? ksys_write+0x74/0x260 [ 236.788693][ T8724] ksys_write+0x151/0x260 [ 236.793090][ T8724] ? __ia32_sys_read+0x90/0x90 [ 236.797925][ T8724] ? lockdep_hardirqs_on+0x98/0x150 [ 236.803168][ T8724] do_syscall_64+0x55/0xb0 [ 236.807627][ T8724] ? clear_bhb_loop+0x40/0x90 [ 236.812370][ T8724] ? clear_bhb_loop+0x40/0x90 [ 236.817078][ T8724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.823012][ T8724] RIP: 0033:0x7f56e619de59 [ 236.827523][ T8724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.847182][ T8724] RSP: 002b:00007f56e70e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.855635][ T8724] RAX: ffffffffffffffda RBX: 00007f56e6425fa0 RCX: 00007f56e619de59 [ 236.863664][ T8724] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000007 [ 236.871665][ T8724] RBP: 00007f56e70e1090 R08: 0000000000000000 R09: 0000000000000000 [ 236.879674][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.887707][ T8724] R13: 00007f56e6426038 R14: 00007f56e6425fa0 R15: 00007ffe6506b6a8 [ 236.895737][ T8724] [ 237.164609][ T8737] FAULT_INJECTION: forcing a failure. [ 237.164609][ T8737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.177967][ T8733] netlink: 'syz.2.962': attribute type 10 has an invalid length. [ 237.191818][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.199794][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.206881][ T8737] CPU: 1 PID: 8737 Comm: syz.3.966 Not tainted syzkaller #0 [ 237.214196][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 237.224281][ T8737] Call Trace: [ 237.227596][ T8737] [ 237.230605][ T8737] dump_stack_lvl+0x18c/0x250 [ 237.235361][ T8737] ? show_regs_print_info+0x20/0x20 [ 237.240628][ T8737] ? load_image+0x420/0x420 [ 237.245193][ T8737] ? __lock_acquire+0x7d80/0x7d80 [ 237.250274][ T8737] ? snprintf+0xe9/0x140 [ 237.254574][ T8737] should_fail_ex+0x394/0x4c0 [ 237.259305][ T8737] _copy_to_user+0x2f/0xa0 [ 237.263764][ T8737] simple_read_from_buffer+0xe7/0x150 [ 237.269174][ T8737] proc_fail_nth_read+0x1e8/0x260 [ 237.274243][ T8737] ? proc_fault_inject_write+0x360/0x360 [ 237.279905][ T8737] ? fsnotify_perm+0x271/0x5e0 [ 237.284717][ T8737] ? proc_fault_inject_write+0x360/0x360 [ 237.290375][ T8737] vfs_read+0x298/0x990 [ 237.294558][ T8737] ? kernel_read+0x1e0/0x1e0 [ 237.299168][ T8737] ? __fget_files+0x28/0x460 [ 237.303788][ T8737] ? __fget_files+0x3fc/0x460 [ 237.308500][ T8737] ? __fdget_pos+0x2a3/0x330 [ 237.313119][ T8737] ? ksys_read+0x74/0x260 [ 237.317466][ T8737] ksys_read+0x151/0x260 [ 237.321741][ T8737] ? vfs_write+0x9a0/0x9a0 [ 237.326182][ T8737] ? lockdep_hardirqs_on+0x98/0x150 [ 237.331407][ T8737] do_syscall_64+0x55/0xb0 [ 237.335849][ T8737] ? clear_bhb_loop+0x40/0x90 [ 237.340540][ T8737] ? clear_bhb_loop+0x40/0x90 [ 237.345236][ T8737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.351161][ T8737] RIP: 0033:0x7f56e615e68e [ 237.355589][ T8737] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 237.375218][ T8737] RSP: 002b:00007f56e70e0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 237.383647][ T8737] RAX: ffffffffffffffda RBX: 00007f56e70e16c0 RCX: 00007f56e615e68e [ 237.391669][ T8737] RDX: 000000000000000f RSI: 00007f56e70e10a0 RDI: 0000000000000005 [ 237.399662][ T8737] RBP: 00007f56e70e1090 R08: 0000000000000000 R09: 0000000000000000 [ 237.407930][ T8737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.415937][ T8737] R13: 00007f56e6426038 R14: 00007f56e6425fa0 R15: 00007ffe6506b6a8 [ 237.423928][ T8737] [ 237.513961][ T8733] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 237.598216][ T8733] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.605493][ T8733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.613041][ T8733] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.620324][ T8733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.692183][ T8733] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 238.489474][ T8760] netlink: 'syz.2.973': attribute type 3 has an invalid length. [ 238.503197][ T8760] netlink: 132 bytes leftover after parsing attributes in process `syz.2.973'. [ 238.504224][ T8771] netlink: 'syz.0.975': attribute type 29 has an invalid length. [ 238.581724][ T8771] netlink: 'syz.0.975': attribute type 29 has an invalid length. [ 238.616171][ T8770] netlink: 'syz.0.975': attribute type 29 has an invalid length. [ 239.089026][ T8776] netlink: 'syz.3.977': attribute type 21 has an invalid length. [ 239.104823][ T8776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.977'. [ 239.134945][ T8782] netlink: 'syz.1.980': attribute type 21 has an invalid length. [ 239.151970][ T8782] netlink: 132 bytes leftover after parsing attributes in process `syz.1.980'. [ 239.298687][ T8782] FAULT_INJECTION: forcing a failure. [ 239.298687][ T8782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.324331][ T8782] CPU: 1 PID: 8782 Comm: syz.1.980 Not tainted syzkaller #0 [ 239.331788][ T8782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 239.341894][ T8782] Call Trace: [ 239.345224][ T8782] [ 239.348218][ T8782] dump_stack_lvl+0x18c/0x250 [ 239.353012][ T8782] ? show_regs_print_info+0x20/0x20 [ 239.358291][ T8782] ? load_image+0x420/0x420 [ 239.362867][ T8782] ? __might_fault+0xaa/0x120 [ 239.367628][ T8782] ? __lock_acquire+0x7d80/0x7d80 [ 239.372743][ T8782] should_fail_ex+0x394/0x4c0 [ 239.377483][ T8782] _copy_from_user+0x2f/0xe0 [ 239.382121][ T8782] ___sys_sendmsg+0x1c7/0x360 [ 239.386836][ T8782] ? get_pid_task+0x20/0x1e0 [ 239.391470][ T8782] ? __sys_sendmsg+0x2b0/0x2b0 [ 239.396320][ T8782] ? __lock_acquire+0x7d80/0x7d80 [ 239.401438][ T8782] __se_sys_sendmsg+0x1d0/0x2c0 [ 239.406374][ T8782] ? __x64_sys_sendmsg+0x80/0x80 [ 239.411405][ T8782] ? lockdep_hardirqs_on+0x98/0x150 [ 239.416670][ T8782] do_syscall_64+0x55/0xb0 [ 239.421143][ T8782] ? clear_bhb_loop+0x40/0x90 [ 239.425866][ T8782] ? clear_bhb_loop+0x40/0x90 [ 239.430613][ T8782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.436578][ T8782] RIP: 0033:0x7f4744f9de59 [ 239.441045][ T8782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.460712][ T8782] RSP: 002b:00007f4745f3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.469194][ T8782] RAX: ffffffffffffffda RBX: 00007f4745225fa0 RCX: 00007f4744f9de59 [ 239.477201][ T8782] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000010 [ 239.485216][ T8782] RBP: 00007f4745f3b090 R08: 0000000000000000 R09: 0000000000000000 [ 239.493219][ T8782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.501223][ T8782] R13: 00007f4745226038 R14: 00007f4745225fa0 R15: 00007ffc04779ac8 [ 239.509263][ T8782] [ 239.533031][ T8776] netlink: 40 bytes leftover after parsing attributes in process `syz.3.977'. [ 239.640115][ T8776] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 239.791649][ T8787] netlink: 132 bytes leftover after parsing attributes in process `syz.0.982'. [ 239.957213][ T8787] netlink: 40 bytes leftover after parsing attributes in process `syz.0.982'. [ 240.001482][ T8787] bridge0: port 4(ipvlan1) entered blocking state [ 240.027117][ T8787] bridge0: port 4(ipvlan1) entered disabled state [ 240.212063][ T8787] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 240.450989][ T8801] netlink: 212424 bytes leftover after parsing attributes in process `syz.0.988'. [ 240.463545][ T8801] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.988'. [ 240.933226][ T8816] syzkaller0: entered promiscuous mode [ 240.938829][ T8816] syzkaller0: entered allmulticast mode [ 240.996359][ T8805] ±ÿ: renamed from lo (while UP) [ 243.882459][ T8829] FAULT_INJECTION: forcing a failure. [ 243.882459][ T8829] name failslab, interval 1, probability 0, space 0, times 0 [ 243.898039][ T8829] CPU: 1 PID: 8829 Comm: syz.1.996 Not tainted syzkaller #0 [ 243.905374][ T8829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 243.915462][ T8829] Call Trace: [ 243.918773][ T8829] [ 243.921738][ T8829] dump_stack_lvl+0x18c/0x250 [ 243.926470][ T8829] ? show_regs_print_info+0x20/0x20 [ 243.931727][ T8829] ? load_image+0x420/0x420 [ 243.936270][ T8829] ? __might_sleep+0xe0/0xe0 [ 243.940897][ T8829] ? __lock_acquire+0x7d80/0x7d80 [ 243.945963][ T8829] should_fail_ex+0x394/0x4c0 [ 243.950687][ T8829] should_failslab+0x9/0x20 [ 243.955233][ T8829] slab_pre_alloc_hook+0x59/0x300 [ 243.960317][ T8829] ? lockdep_hardirqs_on+0x98/0x150 [ 243.965584][ T8829] kmem_cache_alloc_node+0x5e/0x310 [ 243.971019][ T8829] ? __alloc_skb+0x103/0x2c0 [ 243.975660][ T8829] __alloc_skb+0x103/0x2c0 [ 243.980123][ T8829] netlink_ack+0x377/0x1160 [ 243.984697][ T8829] ? inet_diag_unregister+0xb0/0xb0 [ 243.989964][ T8829] ? netlink_dump+0xec0/0xec0 [ 243.994702][ T8829] ? inet_diag_unregister+0xb0/0xb0 [ 243.999944][ T8829] ? sock_diag_rcv_msg+0x3f4/0x5f0 [ 244.005108][ T8829] netlink_rcv_skb+0x2b3/0x4c0 [ 244.009925][ T8829] ? sock_diag_bind+0xb0/0xb0 [ 244.014651][ T8829] ? netlink_ack+0x1160/0x1160 [ 244.019529][ T8829] ? __lock_acquire+0x7d80/0x7d80 [ 244.024614][ T8829] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.029892][ T8829] sock_diag_rcv+0x2a/0x40 [ 244.034346][ T8829] netlink_unicast+0x7b1/0x930 [ 244.039144][ T8829] netlink_sendmsg+0x8d0/0xbf0 [ 244.043931][ T8829] ? netlink_getsockopt+0x590/0x590 [ 244.049155][ T8829] ? apparmor_socket_sendmsg+0x8e/0x330 [ 244.054725][ T8829] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 244.060035][ T8829] ? security_socket_sendmsg+0x80/0xa0 [ 244.065533][ T8829] ? netlink_getsockopt+0x590/0x590 [ 244.070785][ T8829] ____sys_sendmsg+0x61b/0x980 [ 244.075582][ T8829] ? __asan_memset+0x22/0x40 [ 244.080197][ T8829] ? __sys_sendmsg_sock+0x30/0x30 [ 244.085250][ T8829] ? __import_iovec+0x5f2/0x850 [ 244.090136][ T8829] ? import_iovec+0x73/0xa0 [ 244.094666][ T8829] ___sys_sendmsg+0x2a6/0x360 [ 244.099364][ T8829] ? get_pid_task+0x20/0x1e0 [ 244.103993][ T8829] ? __sys_sendmsg+0x2b0/0x2b0 [ 244.108798][ T8829] ? __lock_acquire+0x7d80/0x7d80 [ 244.113853][ T8829] __se_sys_sendmsg+0x1d0/0x2c0 [ 244.118732][ T8829] ? __x64_sys_sendmsg+0x80/0x80 [ 244.123703][ T8829] ? lockdep_hardirqs_on+0x98/0x150 [ 244.128943][ T8829] do_syscall_64+0x55/0xb0 [ 244.133383][ T8829] ? clear_bhb_loop+0x40/0x90 [ 244.138080][ T8829] ? clear_bhb_loop+0x40/0x90 [ 244.142765][ T8829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.148675][ T8829] RIP: 0033:0x7f4744f9de59 [ 244.153098][ T8829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.172720][ T8829] RSP: 002b:00007f4745f3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.181165][ T8829] RAX: ffffffffffffffda RBX: 00007f4745225fa0 RCX: 00007f4744f9de59 [ 244.189151][ T8829] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 244.197129][ T8829] RBP: 00007f4745f3b090 R08: 0000000000000000 R09: 0000000000000000 [ 244.205112][ T8829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.213099][ T8829] R13: 00007f4745226038 R14: 00007f4745225fa0 R15: 00007ffc04779ac8 [ 244.221101][ T8829] [ 244.297663][ T8833] validate_nla: 6 callbacks suppressed [ 244.297680][ T8833] netlink: 'syz.0.997': attribute type 10 has an invalid length. [ 244.323114][ T8833] netlink: 55 bytes leftover after parsing attributes in process `syz.0.997'. [ 244.455216][ T8842] netlink: 'syz.2.1002': attribute type 21 has an invalid length. [ 244.536552][ T8848] netlink: 'syz.3.1001': attribute type 29 has an invalid length. [ 244.564954][ T8848] netlink: 'syz.3.1001': attribute type 29 has an invalid length. [ 244.580382][ T8843] netlink: 'syz.3.1001': attribute type 29 has an invalid length. [ 244.652730][ T8853] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1006'. [ 245.102766][ T8865] netlink: 'syz.1.1011': attribute type 1 has an invalid length. [ 245.111396][ T8865] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1011'. [ 245.196608][ T8867] netlink: 'syz.1.1012': attribute type 10 has an invalid length. [ 248.476945][ T8879] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1016'. [ 248.680891][ T8887] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1018'. [ 249.349036][ T8910] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1027'. [ 249.682576][ T8921] syzkaller0: entered promiscuous mode [ 249.688897][ T8921] syzkaller0: entered allmulticast mode [ 249.710767][ T8921] ±ÿ: renamed from lo (while UP) [ 250.396912][ T8941] netlink: 'syz.1.1037': attribute type 29 has an invalid length. [ 250.404932][ T8941] netlink: 'syz.1.1037': attribute type 29 has an invalid length. [ 250.414666][ T8940] netlink: 'syz.1.1037': attribute type 29 has an invalid length. [ 250.659368][ T8954] netlink: 'syz.2.1041': attribute type 29 has an invalid length. [ 250.668093][ T8954] netlink: 'syz.2.1041': attribute type 29 has an invalid length. [ 250.677180][ T8951] netlink: 'syz.2.1041': attribute type 29 has an invalid length. [ 251.876368][ T8989] netlink: 'syz.0.1052': attribute type 29 has an invalid length. [ 251.884383][ T8989] netlink: 'syz.0.1052': attribute type 29 has an invalid length. [ 251.893051][ T8986] netlink: 'syz.0.1052': attribute type 29 has an invalid length. [ 252.271582][ T8995] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1055'. [ 252.408312][ T8999] FAULT_INJECTION: forcing a failure. [ 252.408312][ T8999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.422984][ T8999] CPU: 0 PID: 8999 Comm: syz.1.1057 Not tainted syzkaller #0 [ 252.430419][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 252.440507][ T8999] Call Trace: [ 252.443849][ T8999] [ 252.446835][ T8999] dump_stack_lvl+0x18c/0x250 [ 252.451577][ T8999] ? show_regs_print_info+0x20/0x20 [ 252.456816][ T8999] ? load_image+0x420/0x420 [ 252.461349][ T8999] ? __might_fault+0xaa/0x120 [ 252.466076][ T8999] ? __lock_acquire+0x7d80/0x7d80 [ 252.471166][ T8999] should_fail_ex+0x394/0x4c0 [ 252.475874][ T8999] _copy_from_user+0x2f/0xe0 [ 252.480515][ T8999] kstrtouint_from_user+0xde/0x170 [ 252.485670][ T8999] ? kstrtol_from_user+0x190/0x190 [ 252.490842][ T8999] proc_fail_nth_write+0x8f/0x250 [ 252.495880][ T8999] ? proc_fail_nth_read+0x260/0x260 [ 252.501142][ T8999] ? proc_fail_nth_read+0x260/0x260 [ 252.506425][ T8999] vfs_write+0x299/0x9a0 [ 252.510699][ T8999] ? file_end_write+0x250/0x250 [ 252.515589][ T8999] ? __fget_files+0x28/0x460 [ 252.520227][ T8999] ? __fget_files+0x3fc/0x460 [ 252.524965][ T8999] ? __fdget_pos+0x2a3/0x330 [ 252.529580][ T8999] ? ksys_write+0x74/0x260 [ 252.534041][ T8999] ksys_write+0x151/0x260 [ 252.538423][ T8999] ? __ia32_sys_read+0x90/0x90 [ 252.543245][ T8999] ? lockdep_hardirqs_on+0x98/0x150 [ 252.548466][ T8999] do_syscall_64+0x55/0xb0 [ 252.552906][ T8999] ? clear_bhb_loop+0x40/0x90 [ 252.557592][ T8999] ? clear_bhb_loop+0x40/0x90 [ 252.562279][ T8999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.568201][ T8999] RIP: 0033:0x7f4744f5e68e [ 252.572650][ T8999] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 252.592458][ T8999] RSP: 002b:00007f4745f3afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.600935][ T8999] RAX: ffffffffffffffda RBX: 00007f4745f3b6c0 RCX: 00007f4744f5e68e [ 252.608950][ T8999] RDX: 0000000000000001 RSI: 00007f4745f3b0a0 RDI: 0000000000000004 [ 252.616979][ T8999] RBP: 00007f4745f3b090 R08: 0000000000000000 R09: 0000000000000000 [ 252.624989][ T8999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.633005][ T8999] R13: 00007f4745226038 R14: 00007f4745225fa0 R15: 00007ffc04779ac8 [ 252.641034][ T8999] [ 252.721488][ T9001] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1058'. [ 253.001998][ T9016] netlink: 'syz.3.1064': attribute type 21 has an invalid length. [ 253.139179][ T9021] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1065'. [ 253.885457][ T9035] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1070'. [ 253.985734][ T9039] FAULT_INJECTION: forcing a failure. [ 253.985734][ T9039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.001720][ T9039] CPU: 1 PID: 9039 Comm: syz.0.1071 Not tainted syzkaller #0 [ 254.009181][ T9039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 254.019279][ T9039] Call Trace: [ 254.022589][ T9039] [ 254.025561][ T9039] dump_stack_lvl+0x18c/0x250 [ 254.030323][ T9039] ? show_regs_print_info+0x20/0x20 [ 254.035582][ T9039] ? load_image+0x420/0x420 [ 254.040161][ T9039] ? __might_fault+0xaa/0x120 [ 254.044889][ T9039] ? __lock_acquire+0x7d80/0x7d80 [ 254.049965][ T9039] ? __virt_addr_valid+0x10c/0x380 [ 254.055188][ T9039] should_fail_ex+0x394/0x4c0 [ 254.059948][ T9039] _copy_from_user+0x2f/0xe0 [ 254.064615][ T9039] generic_map_update_batch+0x53e/0x800 [ 254.070251][ T9039] ? rcu_read_unlock+0xa0/0xa0 [ 254.075089][ T9039] ? __fdget+0x180/0x210 [ 254.079419][ T9039] ? rcu_read_unlock+0xa0/0xa0 [ 254.084247][ T9039] bpf_map_do_batch+0x3f2/0x600 [ 254.089177][ T9039] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 254.095603][ T9039] __sys_bpf+0x381/0x890 [ 254.099919][ T9039] ? bpf_link_show_fdinfo+0x390/0x390 [ 254.105386][ T9039] ? lock_chain_count+0x20/0x20 [ 254.110317][ T9039] __x64_sys_bpf+0x7c/0x90 [ 254.114798][ T9039] do_syscall_64+0x55/0xb0 [ 254.119282][ T9039] ? clear_bhb_loop+0x40/0x90 [ 254.124015][ T9039] ? clear_bhb_loop+0x40/0x90 [ 254.128754][ T9039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.134731][ T9039] RIP: 0033:0x7fa37759de59 [ 254.139217][ T9039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.158921][ T9039] RSP: 002b:00007fa378416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 254.167407][ T9039] RAX: ffffffffffffffda RBX: 00007fa377825fa0 RCX: 00007fa37759de59 [ 254.175457][ T9039] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 254.183484][ T9039] RBP: 00007fa378416090 R08: 0000000000000000 R09: 0000000000000000 [ 254.191515][ T9039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.199546][ T9039] R13: 00007fa377826038 R14: 00007fa377825fa0 R15: 00007ffd5ea169e8 [ 254.207616][ T9039] [ 254.591146][ T9049] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1076'. [ 254.809460][ T9056] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1077'. [ 255.386054][ T9074] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1081'. [ 255.398028][ T9074] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1081'. [ 255.407950][ T9074] erspan0: refused to change device tx_queue_len [ 255.813148][ T9089] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1088'. [ 255.830477][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.836871][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.877096][ T9135] validate_nla: 9 callbacks suppressed [ 256.877112][ T9135] netlink: 'syz.3.1103': attribute type 29 has an invalid length. [ 258.301825][ T9131] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1101'. [ 258.311274][ T9135] netlink: 'syz.3.1103': attribute type 29 has an invalid length. [ 258.543210][ T9146] syzkaller0: entered promiscuous mode [ 258.570934][ T9146] syzkaller0: entered allmulticast mode [ 258.604167][ T9149] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 259.085828][ T9157] wlan0: mtu greater than device maximum [ 259.192676][ T9157] netlink: 'syz.1.1113': attribute type 1 has an invalid length. [ 259.212364][ T9157] netlink: 'syz.1.1113': attribute type 4 has an invalid length. [ 259.238424][ T9157] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1113'. [ 259.296403][ T9160] netlink: 'syz.1.1113': attribute type 1 has an invalid length. [ 259.304191][ T9160] netlink: 'syz.1.1113': attribute type 4 has an invalid length. [ 259.342702][ T9160] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1113'. [ 259.511777][ T9167] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1116'. [ 259.627124][ T9175] netlink: 'syz.2.1120': attribute type 25 has an invalid length. [ 259.635001][ T9175] netlink: 'syz.2.1120': attribute type 25 has an invalid length. [ 259.648047][ T9175] FAULT_INJECTION: forcing a failure. [ 259.648047][ T9175] name failslab, interval 1, probability 0, space 0, times 0 [ 259.661191][ T9175] CPU: 1 PID: 9175 Comm: syz.2.1120 Not tainted syzkaller #0 [ 259.668606][ T9175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 259.673796][ T9176] netlink: 'syz.1.1118': attribute type 29 has an invalid length. [ 259.678676][ T9175] Call Trace: [ 259.678731][ T9175] [ 259.678741][ T9175] dump_stack_lvl+0x18c/0x250 [ 259.697615][ T9175] ? show_regs_print_info+0x20/0x20 [ 259.702869][ T9175] ? load_image+0x420/0x420 [ 259.707408][ T9175] ? mark_lock+0x94/0x320 [ 259.711782][ T9175] ? __lock_acquire+0x1336/0x7d80 [ 259.716865][ T9175] should_fail_ex+0x394/0x4c0 [ 259.721605][ T9175] should_failslab+0x9/0x20 [ 259.726162][ T9175] slab_pre_alloc_hook+0x59/0x300 [ 259.731282][ T9175] kmem_cache_alloc_node+0x5e/0x310 [ 259.736544][ T9175] ? __alloc_skb+0x103/0x2c0 [ 259.741185][ T9175] __alloc_skb+0x103/0x2c0 [ 259.745673][ T9175] br_rtr_notify+0x19e/0xa00 [ 259.750319][ T9175] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 259.756283][ T9175] ? br_mdb_notify+0x970/0x970 [ 259.761090][ T9175] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 259.767036][ T9175] ? _raw_spin_unlock+0x40/0x40 [ 259.771938][ T9175] br_multicast_add_router+0x4ca/0x5e0 [ 259.777443][ T9175] ? in_dev_get+0x280/0x280 [ 259.782003][ T9175] br_multicast_set_port_router+0x509/0xcf0 [ 259.787951][ T9175] ? br_multicast_set_router+0x3c0/0x3c0 [ 259.793641][ T9175] ? br_port_flags_change+0x19b/0x1f0 [ 259.799058][ T9175] br_setport+0xe7a/0x1680 [ 259.803520][ T9175] ? br_setlink+0x860/0x860 [ 259.808063][ T9175] ? __rwlock_init+0x150/0x150 [ 259.812883][ T9175] ? br_setlink+0x4df/0x860 [ 259.817403][ T9175] br_setlink+0x4f1/0x860 [ 259.821765][ T9175] ? br_vlan_info+0x460/0x460 [ 259.826534][ T9175] ? trace_contention_end+0x39/0xe0 [ 259.831750][ T9175] ? __mutex_lock+0x30d/0xc80 [ 259.836446][ T9175] ? mutex_is_locked+0x12/0x40 [ 259.841223][ T9175] rtnl_bridge_setlink+0x5b2/0x7d0 [ 259.846379][ T9175] ? mutex_lock_nested+0x20/0x20 [ 259.851370][ T9175] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 259.856693][ T9175] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 259.862017][ T9175] rtnetlink_rcv_msg+0x843/0xf90 [ 259.867019][ T9175] ? rtnetlink_rcv_msg+0x220/0xf90 [ 259.872177][ T9175] ? rtnetlink_bind+0x80/0x80 [ 259.876899][ T9175] ? perf_trace_preemptirq_template+0xac/0x330 [ 259.883083][ T9175] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 259.889115][ T9175] ? lock_chain_count+0x20/0x20 [ 259.894008][ T9175] ? __local_bh_enable_ip+0x13a/0x1c0 [ 259.899414][ T9175] ? lockdep_hardirqs_on+0x98/0x150 [ 259.904655][ T9175] ? __local_bh_enable_ip+0x13a/0x1c0 [ 259.910059][ T9175] ? _local_bh_enable+0xa0/0xa0 [ 259.914960][ T9175] ? __dev_queue_xmit+0x275/0x3630 [ 259.920116][ T9175] ? __dev_queue_xmit+0x1bc2/0x3630 [ 259.925345][ T9175] ? __dev_queue_xmit+0x275/0x3630 [ 259.930523][ T9175] ? ref_tracker_free+0x686/0x830 [ 259.935601][ T9175] netlink_rcv_skb+0x235/0x4c0 [ 259.940419][ T9175] ? rtnetlink_bind+0x80/0x80 [ 259.945145][ T9175] ? netlink_ack+0x1160/0x1160 [ 259.949987][ T9175] ? __lock_acquire+0x7d80/0x7d80 [ 259.955045][ T9175] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.960261][ T9175] netlink_unicast+0x7b1/0x930 [ 259.965047][ T9175] netlink_sendmsg+0x8d0/0xbf0 [ 259.969836][ T9175] ? netlink_getsockopt+0x590/0x590 [ 259.975051][ T9175] ? apparmor_socket_sendmsg+0x8e/0x330 [ 259.980656][ T9175] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 259.985970][ T9175] ? security_socket_sendmsg+0x80/0xa0 [ 259.991470][ T9175] ? netlink_getsockopt+0x590/0x590 [ 259.996710][ T9175] ____sys_sendmsg+0x61b/0x980 [ 260.001517][ T9175] ? __asan_memset+0x22/0x40 [ 260.006183][ T9175] ? __sys_sendmsg_sock+0x30/0x30 [ 260.011228][ T9175] ? __import_iovec+0x5f2/0x850 [ 260.016118][ T9175] ? import_iovec+0x73/0xa0 [ 260.020694][ T9175] ___sys_sendmsg+0x2a6/0x360 [ 260.025424][ T9175] ? get_pid_task+0x20/0x1e0 [ 260.030094][ T9175] ? __sys_sendmsg+0x2b0/0x2b0 [ 260.034892][ T9175] ? __lock_acquire+0x7d80/0x7d80 [ 260.039953][ T9175] __se_sys_sendmsg+0x1d0/0x2c0 [ 260.044837][ T9175] ? __x64_sys_sendmsg+0x80/0x80 [ 260.049825][ T9175] ? lockdep_hardirqs_on+0x98/0x150 [ 260.055063][ T9175] do_syscall_64+0x55/0xb0 [ 260.059529][ T9175] ? clear_bhb_loop+0x40/0x90 [ 260.064236][ T9175] ? clear_bhb_loop+0x40/0x90 [ 260.068931][ T9175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.074865][ T9175] RIP: 0033:0x7f71b099de59 [ 260.079318][ T9175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.098957][ T9175] RSP: 002b:00007f71b1895028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.107384][ T9175] RAX: ffffffffffffffda RBX: 00007f71b0c25fa0 RCX: 00007f71b099de59 [ 260.115378][ T9175] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 260.123400][ T9175] RBP: 00007f71b1895090 R08: 0000000000000000 R09: 0000000000000000 [ 260.131396][ T9175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.139384][ T9175] R13: 00007f71b0c26038 R14: 00007f71b0c25fa0 R15: 00007fff570b1108 [ 260.147391][ T9175] [ 260.164668][ T9176] netlink: 'syz.1.1118': attribute type 29 has an invalid length. [ 260.212935][ T9181] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1122'. [ 260.249512][ T9186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.589636][ T9200] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1129'. [ 260.808102][ T9209] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1132'. [ 261.363004][ T9211] tc_dump_action: action bad kind [ 261.584567][ T9222] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1134'. [ 261.804148][ T9231] FAULT_INJECTION: forcing a failure. [ 261.804148][ T9231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.821896][ T9231] CPU: 1 PID: 9231 Comm: syz.0.1140 Not tainted syzkaller #0 [ 261.829315][ T9231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 261.839412][ T9231] Call Trace: [ 261.842753][ T9231] [ 261.845721][ T9231] dump_stack_lvl+0x18c/0x250 [ 261.850468][ T9231] ? show_regs_print_info+0x20/0x20 [ 261.855719][ T9231] ? load_image+0x420/0x420 [ 261.860272][ T9231] ? __might_fault+0xaa/0x120 [ 261.865051][ T9231] ? __lock_acquire+0x7d80/0x7d80 [ 261.870114][ T9231] ? __virt_addr_valid+0x10c/0x380 [ 261.875279][ T9231] should_fail_ex+0x394/0x4c0 [ 261.880005][ T9231] _copy_to_user+0x2f/0xa0 [ 261.884466][ T9231] generic_map_lookup_batch+0x85d/0xc60 [ 261.890066][ T9231] ? bpf_map_update_value+0x710/0x710 [ 261.895487][ T9231] ? __fdget+0x180/0x210 [ 261.899780][ T9231] ? bpf_map_update_value+0x710/0x710 [ 261.905194][ T9231] bpf_map_do_batch+0x2e3/0x600 [ 261.910094][ T9231] ? bpf_lsm_bpf+0x9/0x10 [ 261.914495][ T9231] ? security_bpf+0x7e/0xa0 [ 261.919036][ T9231] __sys_bpf+0x7d7/0x890 [ 261.923322][ T9231] ? bpf_link_show_fdinfo+0x390/0x390 [ 261.928775][ T9231] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 261.934978][ T9231] __x64_sys_bpf+0x7c/0x90 [ 261.939421][ T9231] do_syscall_64+0x55/0xb0 [ 261.943907][ T9231] ? clear_bhb_loop+0x40/0x90 [ 261.948608][ T9231] ? clear_bhb_loop+0x40/0x90 [ 261.953313][ T9231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.959234][ T9231] RIP: 0033:0x7fa37759de59 [ 261.963660][ T9231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.983359][ T9231] RSP: 002b:00007fa378416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.991817][ T9231] RAX: ffffffffffffffda RBX: 00007fa377825fa0 RCX: 00007fa37759de59 [ 261.999812][ T9231] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 262.007795][ T9231] RBP: 00007fa378416090 R08: 0000000000000000 R09: 0000000000000000 [ 262.015784][ T9231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.023791][ T9231] R13: 00007fa377826038 R14: 00007fa377825fa0 R15: 00007ffd5ea169e8 [ 262.031805][ T9231] [ 262.119219][ T9235] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1142'. [ 262.205846][ T9239] validate_nla: 6 callbacks suppressed [ 262.205970][ T9239] netlink: 'syz.2.1144': attribute type 10 has an invalid length. [ 262.236392][ T9239] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.261463][ T9239] bond0: (slave team0): Enslaving as an active interface with an up link [ 262.287792][ T9241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1145'. [ 262.839730][ T9255] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1150'. [ 262.998953][ T9262] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1153'. [ 263.126282][ T9270] wlan0: mtu greater than device maximum [ 263.139526][ T9270] netlink: 'syz.2.1156': attribute type 1 has an invalid length. [ 263.148201][ T9270] netlink: 'syz.2.1156': attribute type 4 has an invalid length. [ 263.158437][ T9270] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1156'. [ 263.171963][ T9270] netlink: 'syz.2.1156': attribute type 1 has an invalid length. [ 263.180002][ T9270] netlink: 'syz.2.1156': attribute type 4 has an invalid length. [ 263.188168][ T9270] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1156'. [ 263.221283][ T9272] netlink: 'syz.3.1155': attribute type 29 has an invalid length. [ 263.229431][ T9272] netlink: 'syz.3.1155': attribute type 29 has an invalid length. [ 263.237938][ T9271] netlink: 'syz.3.1155': attribute type 29 has an invalid length. [ 264.259509][ T9288] netlink: 'syz.3.1162': attribute type 29 has an invalid length. [ 264.284942][ T9288] netlink: 'syz.3.1162': attribute type 29 has an invalid length. [ 264.492539][ T9298] wlan0: mtu greater than device maximum [ 264.732395][ T9295] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 265.444690][ T9327] __nla_validate_parse: 4 callbacks suppressed [ 265.444743][ T9327] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1178'. [ 265.569125][ T9329] wlan0: mtu greater than device maximum [ 265.589355][ T9329] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1179'. [ 265.626020][ T9329] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1179'. [ 266.031189][ T9355] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1190'. [ 266.092752][ T9350] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 266.246193][ T9359] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1192'. [ 266.399204][ T9367] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1195'. [ 266.414147][ T9367] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1195'. [ 267.078244][ T9381] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1200'. [ 270.234926][ T9401] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1205'. [ 270.248484][ T9401] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1205'. [ 270.459956][ T9411] validate_nla: 11 callbacks suppressed [ 270.459997][ T9411] netlink: 'syz.0.1210': attribute type 29 has an invalid length. [ 270.517980][ T9411] netlink: 'syz.0.1210': attribute type 29 has an invalid length. [ 270.535445][ T9415] netlink: 'syz.0.1210': attribute type 29 has an invalid length. [ 270.547447][ T9415] netlink: 'syz.0.1210': attribute type 29 has an invalid length. [ 270.579891][ T9411] netlink: 'syz.0.1210': attribute type 29 has an invalid length. [ 270.660884][ T9417] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1211'. [ 270.689652][ T9419] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1211'. [ 271.115608][ T9423] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1212'. [ 271.702870][ T9438] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1217'. [ 271.725946][ T9441] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1217'. [ 272.168910][ T9457] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1224'. [ 272.283934][ T9461] netlink: 'syz.1.1225': attribute type 29 has an invalid length. [ 272.297590][ T9461] netlink: 'syz.1.1225': attribute type 29 has an invalid length. [ 272.326405][ T9461] netlink: 'syz.1.1225': attribute type 29 has an invalid length. [ 272.354985][ T9461] netlink: 'syz.1.1225': attribute type 29 has an invalid length. [ 272.384125][ T9461] netlink: 'syz.1.1225': attribute type 29 has an invalid length. [ 272.866504][ T9468] wlan0: mtu greater than device maximum [ 273.128207][ T9480] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1235'. [ 273.432620][ T9491] FAULT_INJECTION: forcing a failure. [ 273.432620][ T9491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.447864][ T9491] CPU: 0 PID: 9491 Comm: syz.0.1240 Not tainted syzkaller #0 [ 273.455307][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 273.465420][ T9491] Call Trace: [ 273.468762][ T9491] [ 273.471727][ T9491] dump_stack_lvl+0x18c/0x250 [ 273.476463][ T9491] ? show_regs_print_info+0x20/0x20 [ 273.481710][ T9491] ? load_image+0x420/0x420 [ 273.486259][ T9491] ? __might_fault+0xaa/0x120 [ 273.490972][ T9491] ? __lock_acquire+0x7d80/0x7d80 [ 273.496043][ T9491] ? mark_lock+0x94/0x320 [ 273.500415][ T9491] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 273.506269][ T9491] should_fail_ex+0x394/0x4c0 [ 273.511012][ T9491] _copy_from_user+0x2f/0xe0 [ 273.515654][ T9491] get_user_ifreq+0x6b/0x180 [ 273.520285][ T9491] inet_ioctl+0x3ed/0x560 [ 273.524673][ T9491] ? inet_shutdown+0x370/0x370 [ 273.529519][ T9491] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 273.535218][ T9491] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 273.540994][ T9491] sock_do_ioctl+0xfc/0x310 [ 273.545545][ T9491] ? sock_show_fdinfo+0xb0/0xb0 [ 273.550480][ T9491] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 273.556499][ T9491] ? lock_chain_count+0x20/0x20 [ 273.561386][ T9491] sock_ioctl+0x5be/0x7e0 [ 273.565741][ T9491] ? sock_poll+0x3e0/0x3e0 [ 273.570186][ T9491] ? bpf_lsm_backing_file_free+0x10/0x10 [ 273.575845][ T9491] ? bpf_lsm_file_ioctl+0x9/0x10 [ 273.580811][ T9491] ? security_file_ioctl+0x80/0xa0 [ 273.585945][ T9491] ? sock_poll+0x3e0/0x3e0 [ 273.590386][ T9491] __se_sys_ioctl+0xfd/0x170 [ 273.595008][ T9491] do_syscall_64+0x55/0xb0 [ 273.599475][ T9491] ? clear_bhb_loop+0x40/0x90 [ 273.604204][ T9491] ? clear_bhb_loop+0x40/0x90 [ 273.608930][ T9491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.614844][ T9491] RIP: 0033:0x7fa37759de59 [ 273.619274][ T9491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.638896][ T9491] RSP: 002b:00007fa378416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.647331][ T9491] RAX: ffffffffffffffda RBX: 00007fa377825fa0 RCX: 00007fa37759de59 [ 273.655322][ T9491] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000008 [ 273.663307][ T9491] RBP: 00007fa378416090 R08: 0000000000000000 R09: 0000000000000000 [ 273.671306][ T9491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.679291][ T9491] R13: 00007fa377826038 R14: 00007fa377825fa0 R15: 00007ffd5ea169e8 [ 273.687299][ T9491] [ 273.715071][ T9496] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1242'. [ 273.777900][ T9501] wlan0: mtu greater than device maximum [ 274.016641][ T9513] netlink: 61963 bytes leftover after parsing attributes in process `syz.2.1249'. [ 274.096786][ T9516] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1250'. [ 274.221661][ T9530] wlan0: mtu greater than device maximum [ 274.302314][ T9528] team0: Port device team_slave_0 removed [ 274.324597][ T9528] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 275.038361][ T9550] syzkaller0: entered promiscuous mode [ 275.044549][ T9550] syzkaller0: entered allmulticast mode [ 275.208756][ T9557] wlan0: mtu greater than device maximum [ 275.599156][ T9576] validate_nla: 6 callbacks suppressed [ 275.599172][ T9576] netlink: 'syz.2.1274': attribute type 46 has an invalid length. [ 275.645973][ T9576] netlink: 'syz.2.1274': attribute type 46 has an invalid length. [ 275.709136][ T9576] __nla_validate_parse: 7 callbacks suppressed [ 275.709155][ T9576] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1274'. [ 275.772645][ T9582] wlan0: mtu greater than device maximum [ 275.819235][ T9582] netlink: 'syz.0.1276': attribute type 1 has an invalid length. [ 275.837986][ T9582] netlink: 'syz.0.1276': attribute type 4 has an invalid length. [ 275.856661][ T9582] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1276'. [ 275.871746][ T9588] netlink: 'syz.0.1276': attribute type 1 has an invalid length. [ 275.880152][ T9588] netlink: 'syz.0.1276': attribute type 4 has an invalid length. [ 275.888388][ T9588] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1276'. [ 276.416266][ T9615] netlink: 'syz.0.1287': attribute type 21 has an invalid length. [ 276.503305][ T9618] wlan0: mtu greater than device maximum [ 276.527367][ T9618] netlink: 'syz.1.1288': attribute type 1 has an invalid length. [ 276.547731][ T9618] netlink: 'syz.1.1288': attribute type 4 has an invalid length. [ 276.562285][ T9618] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1288'. [ 276.587833][ T9623] netlink: 'syz.1.1288': attribute type 1 has an invalid length. [ 276.596899][ T9623] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1288'. [ 276.627250][ T9622] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1290'. [ 276.774121][ T9631] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1294'. [ 277.043083][ T9637] syzkaller0: entered promiscuous mode [ 277.075232][ T9637] syzkaller0: entered allmulticast mode [ 278.582107][ T9656] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1302'. [ 278.601592][ T9663] wlan0: mtu greater than device maximum [ 278.616513][ T9664] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1304'. [ 278.635911][ T9665] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1304'. [ 278.769905][ T9669] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.781296][ T9669] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 278.931366][ T9678] FAULT_INJECTION: forcing a failure. [ 278.931366][ T9678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.947069][ T9678] CPU: 1 PID: 9678 Comm: syz.2.1313 Not tainted syzkaller #0 [ 278.954492][ T9678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 278.964619][ T9678] Call Trace: [ 278.967951][ T9678] [ 278.970925][ T9678] dump_stack_lvl+0x18c/0x250 [ 278.975647][ T9678] ? show_regs_print_info+0x20/0x20 [ 278.980892][ T9678] ? load_image+0x420/0x420 [ 278.985436][ T9678] ? __might_fault+0xaa/0x120 [ 278.990203][ T9678] ? __lock_acquire+0x7d80/0x7d80 [ 278.995278][ T9678] should_fail_ex+0x394/0x4c0 [ 279.000009][ T9678] _copy_from_user+0x2f/0xe0 [ 279.004646][ T9678] ip_tunnel_siocdevprivate+0xc2/0x1f0 [ 279.010159][ T9678] ? ip_tunnel_update+0xae0/0xae0 [ 279.015227][ T9678] ? __mutex_trylock_common+0x160/0x270 [ 279.020791][ T9678] ipip6_tunnel_siocdevprivate+0x362/0x16e0 [ 279.026710][ T9678] ? rcu_is_watching+0x15/0xb0 [ 279.031492][ T9678] ? sit_tunnel_xmit+0x2390/0x2390 [ 279.036627][ T9678] ? trace_contention_end+0x39/0xe0 [ 279.041835][ T9678] ? __mutex_lock+0x30d/0xc80 [ 279.046531][ T9678] ? dev_load+0x21/0x1f0 [ 279.050801][ T9678] ? dev_ioctl+0x83c/0x1140 [ 279.055434][ T9678] ? __lock_acquire+0x7d80/0x7d80 [ 279.060521][ T9678] ? mutex_lock_nested+0x20/0x20 [ 279.065479][ T9678] ? full_name_hash+0x92/0xe0 [ 279.070190][ T9678] ? dev_ifsioc+0x957/0xc40 [ 279.074721][ T9678] dev_ioctl+0x84c/0x1140 [ 279.079080][ T9678] sock_ioctl+0x74c/0x7e0 [ 279.083424][ T9678] ? sock_poll+0x3e0/0x3e0 [ 279.087858][ T9678] ? bpf_lsm_file_ioctl+0x9/0x10 [ 279.092855][ T9678] ? security_file_ioctl+0x80/0xa0 [ 279.097986][ T9678] ? sock_poll+0x3e0/0x3e0 [ 279.102420][ T9678] __se_sys_ioctl+0xfd/0x170 [ 279.107044][ T9678] do_syscall_64+0x55/0xb0 [ 279.111508][ T9678] ? clear_bhb_loop+0x40/0x90 [ 279.116240][ T9678] ? clear_bhb_loop+0x40/0x90 [ 279.120929][ T9678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.126842][ T9678] RIP: 0033:0x7f71b099de59 [ 279.131283][ T9678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.150915][ T9678] RSP: 002b:00007f71b1895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.159354][ T9678] RAX: ffffffffffffffda RBX: 00007f71b0c25fa0 RCX: 00007f71b099de59 [ 279.167341][ T9678] RDX: 0000200000000900 RSI: 00000000000089f0 RDI: 0000000000000004 [ 279.175331][ T9678] RBP: 00007f71b1895090 R08: 0000000000000000 R09: 0000000000000000 [ 279.183316][ T9678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.191304][ T9678] R13: 00007f71b0c26038 R14: 00007f71b0c25fa0 R15: 00007fff570b1108 [ 279.199300][ T9678] [ 279.560847][ T9695] wlan0: mtu greater than device maximum [ 280.356579][ T9724] wlan0: mtu greater than device maximum [ 281.084715][ T9751] __nla_validate_parse: 7 callbacks suppressed [ 281.084751][ T9751] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1340'. [ 281.941577][ T9774] wlan0: mtu greater than device maximum [ 281.972537][ T9774] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1346'. [ 282.026249][ T9774] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1346'. [ 282.116989][ T9785] validate_nla: 19 callbacks suppressed [ 282.117009][ T9785] netlink: 'syz.2.1350': attribute type 39 has an invalid length. [ 282.312274][ T9788] netlink: 'syz.2.1350': attribute type 10 has an invalid length. [ 282.340231][ T9788] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 282.380535][ T5776] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 282.399516][ T9788] team0: Port device wlan1 added [ 282.439188][ T9789] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1351'. [ 283.435591][ T9807] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1356'. [ 283.855477][ T9822] wlan0: mtu greater than device maximum [ 283.902074][ T9820] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1361'. [ 283.919522][ T9821] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1362'. [ 283.931500][ T9817] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1360'. [ 283.985858][ T9822] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1360'. [ 284.370030][ T9837] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1368'. [ 284.776815][ T9849] FAULT_INJECTION: forcing a failure. [ 284.776815][ T9849] name failslab, interval 1, probability 0, space 0, times 0 [ 284.835219][ T9849] CPU: 0 PID: 9849 Comm: syz.2.1372 Not tainted syzkaller #0 [ 284.842786][ T9849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 284.852888][ T9849] Call Trace: [ 284.856213][ T9849] [ 284.859182][ T9849] dump_stack_lvl+0x18c/0x250 [ 284.863936][ T9849] ? show_regs_print_info+0x20/0x20 [ 284.869204][ T9849] ? load_image+0x420/0x420 [ 284.873799][ T9849] should_fail_ex+0x394/0x4c0 [ 284.878550][ T9849] should_failslab+0x9/0x20 [ 284.883146][ T9849] slab_pre_alloc_hook+0x59/0x300 [ 284.888239][ T9849] kmem_cache_alloc_node+0x5e/0x310 [ 284.893504][ T9849] ? __alloc_skb+0x103/0x2c0 [ 284.898167][ T9849] __alloc_skb+0x103/0x2c0 [ 284.902695][ T9849] rtmsg_ifinfo_build_skb+0x83/0x260 [ 284.908052][ T9849] ? __local_bh_enable_ip+0x13a/0x1c0 [ 284.913483][ T9849] rtmsg_ifinfo+0x8c/0x1a0 [ 284.917977][ T9849] __dev_notify_flags+0xf3/0x310 [ 284.922987][ T9849] ? __dev_change_flags+0x6a0/0x6a0 [ 284.928263][ T9849] ? __dev_change_flags+0x4d2/0x6a0 [ 284.933528][ T9849] ? dev_get_flags+0x1c0/0x1c0 [ 284.938359][ T9849] ? apparmor_capable+0x137/0x1a0 [ 284.943464][ T9849] dev_change_flags+0xde/0x1a0 [ 284.948304][ T9849] devinet_ioctl+0x949/0x1d70 [ 284.953073][ T9849] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 284.958269][ T9849] ? _copy_from_user+0xa5/0xe0 [ 284.963085][ T9849] ? get_user_ifreq+0x12b/0x180 [ 284.968016][ T9849] inet_ioctl+0x42b/0x560 [ 284.972417][ T9849] ? tomoyo_path_number_perm+0x217/0x5e0 [ 284.978121][ T9849] ? inet_shutdown+0x370/0x370 [ 284.982950][ T9849] ? slab_free_freelist_hook+0x130/0x1a0 [ 284.988652][ T9849] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 284.994420][ T9849] ? __kmem_cache_free+0xba/0x1f0 [ 284.999533][ T9849] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 285.005068][ T9849] sock_do_ioctl+0xfc/0x310 [ 285.009629][ T9849] ? sock_show_fdinfo+0xb0/0xb0 [ 285.014555][ T9849] sock_ioctl+0x5be/0x7e0 [ 285.018947][ T9849] ? sock_poll+0x3e0/0x3e0 [ 285.023425][ T9849] ? bpf_lsm_file_ioctl+0x9/0x10 [ 285.028414][ T9849] ? security_file_ioctl+0x80/0xa0 [ 285.033596][ T9849] ? sock_poll+0x3e0/0x3e0 [ 285.038070][ T9849] __se_sys_ioctl+0xfd/0x170 [ 285.042734][ T9849] do_syscall_64+0x55/0xb0 [ 285.047216][ T9849] ? clear_bhb_loop+0x40/0x90 [ 285.051946][ T9849] ? clear_bhb_loop+0x40/0x90 [ 285.056684][ T9849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.062639][ T9849] RIP: 0033:0x7f71b099de59 [ 285.067246][ T9849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.086918][ T9849] RSP: 002b:00007f71b1895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.095400][ T9849] RAX: ffffffffffffffda RBX: 00007f71b0c25fa0 RCX: 00007f71b099de59 [ 285.103441][ T9849] RDX: 00002000000000c0 RSI: 0000000000008914 RDI: 0000000000000006 [ 285.111484][ T9849] RBP: 00007f71b1895090 R08: 0000000000000000 R09: 0000000000000000 [ 285.119519][ T9849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.127548][ T9849] R13: 00007f71b0c26038 R14: 00007f71b0c25fa0 R15: 00007fff570b1108 [ 285.135598][ T9849] [ 285.348085][ T9857] wlan0: mtu greater than device maximum [ 286.194764][ T9883] __nla_validate_parse: 6 callbacks suppressed [ 286.194802][ T9883] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1386'. [ 286.388406][ T9893] wlan0: mtu greater than device maximum [ 286.399660][ T9893] netlink: 'syz.3.1391': attribute type 1 has an invalid length. [ 286.415335][ T9893] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1391'. [ 286.446863][ T9893] netlink: 'syz.3.1391': attribute type 1 has an invalid length. [ 286.454708][ T9893] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1391'. [ 286.516602][ T9891] netlink: 'syz.1.1390': attribute type 10 has an invalid length. [ 286.524813][ T9891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1390'. [ 286.542377][ T9891] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 286.714688][ T9900] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1394'. [ 286.988763][ T9912] FAULT_INJECTION: forcing a failure. [ 286.988763][ T9912] name failslab, interval 1, probability 0, space 0, times 0 [ 287.001489][ T9911] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1399'. [ 287.022094][ T9912] CPU: 0 PID: 9912 Comm: syz.3.1400 Not tainted syzkaller #0 [ 287.029567][ T9912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 287.039666][ T9912] Call Trace: [ 287.042987][ T9912] [ 287.045957][ T9912] dump_stack_lvl+0x18c/0x250 [ 287.050715][ T9912] ? show_regs_print_info+0x20/0x20 [ 287.055972][ T9912] ? load_image+0x420/0x420 [ 287.060620][ T9912] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 287.066681][ T9912] ? __asan_memset+0x22/0x40 [ 287.071311][ T9912] should_fail_ex+0x394/0x4c0 [ 287.076041][ T9912] should_failslab+0x9/0x20 [ 287.080592][ T9912] slab_pre_alloc_hook+0x59/0x300 [ 287.085657][ T9912] ? __debug_object_init+0xec/0x450 [ 287.090887][ T9912] kmem_cache_alloc+0x5a/0x2c0 [ 287.095687][ T9912] ? slab_build_skb+0x28/0x3e0 [ 287.100485][ T9912] slab_build_skb+0x28/0x3e0 [ 287.105122][ T9912] bpf_prog_test_run_skb+0x38f/0x18f0 [ 287.110530][ T9912] ? __fget_files+0x28/0x460 [ 287.115164][ T9912] ? __fget_files+0x3fc/0x460 [ 287.119893][ T9912] ? cpu_online+0x60/0x60 [ 287.124253][ T9912] bpf_prog_test_run+0x31f/0x390 [ 287.129222][ T9912] __sys_bpf+0x49d/0x890 [ 287.133492][ T9912] ? bpf_link_show_fdinfo+0x390/0x390 [ 287.138904][ T9912] ? lock_chain_count+0x20/0x20 [ 287.143793][ T9912] __x64_sys_bpf+0x7c/0x90 [ 287.148244][ T9912] do_syscall_64+0x55/0xb0 [ 287.152700][ T9912] ? clear_bhb_loop+0x40/0x90 [ 287.157406][ T9912] ? clear_bhb_loop+0x40/0x90 [ 287.162109][ T9912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.168050][ T9912] RIP: 0033:0x7f56e619de59 [ 287.172503][ T9912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.192140][ T9912] RSP: 002b:00007f56e70e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.200591][ T9912] RAX: ffffffffffffffda RBX: 00007f56e6425fa0 RCX: 00007f56e619de59 [ 287.208591][ T9912] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 287.216595][ T9912] RBP: 00007f56e70e1090 R08: 0000000000000000 R09: 0000000000000000 [ 287.224598][ T9912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.232603][ T9912] R13: 00007f56e6426038 R14: 00007f56e6425fa0 R15: 00007ffe6506b6a8 [ 287.240616][ T9912] [ 287.344668][ T9920] wlan0: mtu greater than device maximum [ 287.351859][ T9923] FAULT_INJECTION: forcing a failure. [ 287.351859][ T9923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.367816][ T9923] CPU: 1 PID: 9923 Comm: syz.3.1403 Not tainted syzkaller #0 [ 287.375277][ T9923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 287.385392][ T9923] Call Trace: [ 287.388722][ T9923] [ 287.391698][ T9923] dump_stack_lvl+0x18c/0x250 [ 287.396458][ T9923] ? show_regs_print_info+0x20/0x20 [ 287.401718][ T9923] ? load_image+0x420/0x420 [ 287.406267][ T9923] ? __might_fault+0xaa/0x120 [ 287.410980][ T9923] ? __lock_acquire+0x7d80/0x7d80 [ 287.416045][ T9923] ? unix_ioctl+0x259/0x6b0 [ 287.420608][ T9923] should_fail_ex+0x394/0x4c0 [ 287.425343][ T9923] _copy_from_user+0x2f/0xe0 [ 287.429965][ T9923] sock_do_ioctl+0x190/0x310 [ 287.434583][ T9923] ? sock_show_fdinfo+0xb0/0xb0 [ 287.439478][ T9923] sock_ioctl+0x5be/0x7e0 [ 287.443843][ T9923] ? sock_poll+0x3e0/0x3e0 [ 287.448296][ T9923] ? bpf_lsm_file_ioctl+0x9/0x10 [ 287.453260][ T9923] ? security_file_ioctl+0x80/0xa0 [ 287.458402][ T9923] ? sock_poll+0x3e0/0x3e0 [ 287.462845][ T9923] __se_sys_ioctl+0xfd/0x170 [ 287.467481][ T9923] do_syscall_64+0x55/0xb0 [ 287.471931][ T9923] ? clear_bhb_loop+0x40/0x90 [ 287.476635][ T9923] ? clear_bhb_loop+0x40/0x90 [ 287.481335][ T9923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.487259][ T9923] RIP: 0033:0x7f56e619de59 [ 287.491696][ T9923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.511323][ T9923] RSP: 002b:00007f56e70e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.519763][ T9923] RAX: ffffffffffffffda RBX: 00007f56e6425fa0 RCX: 00007f56e619de59 [ 287.527766][ T9923] RDX: 0000200000000040 RSI: 0000000000008990 RDI: 0000000000000003 [ 287.535761][ T9923] RBP: 00007f56e70e1090 R08: 0000000000000000 R09: 0000000000000000 [ 287.543761][ T9923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.551758][ T9923] R13: 00007f56e6426038 R14: 00007f56e6425fa0 R15: 00007ffe6506b6a8 [ 287.559771][ T9923] [ 287.596596][ T9920] netlink: 'syz.0.1402': attribute type 1 has an invalid length. [ 287.604673][ T9920] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1402'. [ 287.648827][ T9920] netlink: 'syz.0.1402': attribute type 1 has an invalid length. [ 287.669435][ T9920] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1402'. [ 287.963236][ T9940] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1408'. [ 288.066018][ T9942] FAULT_INJECTION: forcing a failure. [ 288.066018][ T9942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.079465][ T9942] CPU: 0 PID: 9942 Comm: syz.3.1410 Not tainted syzkaller #0 [ 288.086909][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 288.096996][ T9942] Call Trace: [ 288.100378][ T9942] [ 288.103337][ T9942] dump_stack_lvl+0x18c/0x250 [ 288.108057][ T9942] ? show_regs_print_info+0x20/0x20 [ 288.113301][ T9942] ? load_image+0x420/0x420 [ 288.117844][ T9942] ? __lock_acquire+0x7d80/0x7d80 [ 288.122908][ T9942] ? snprintf+0xe9/0x140 [ 288.127181][ T9942] should_fail_ex+0x394/0x4c0 [ 288.131898][ T9942] _copy_to_user+0x2f/0xa0 [ 288.136348][ T9942] simple_read_from_buffer+0xe7/0x150 [ 288.141783][ T9942] proc_fail_nth_read+0x1e8/0x260 [ 288.146853][ T9942] ? proc_fault_inject_write+0x360/0x360 [ 288.152521][ T9942] ? fsnotify_perm+0x271/0x5e0 [ 288.157339][ T9942] ? proc_fault_inject_write+0x360/0x360 [ 288.163005][ T9942] vfs_read+0x298/0x990 [ 288.167205][ T9942] ? kernel_read+0x1e0/0x1e0 [ 288.171834][ T9942] ? __fget_files+0x28/0x460 [ 288.176454][ T9942] ? __fget_files+0x3fc/0x460 [ 288.181178][ T9942] ? __fdget_pos+0x2a3/0x330 [ 288.185796][ T9942] ? ksys_read+0x74/0x260 [ 288.190164][ T9942] ksys_read+0x151/0x260 [ 288.194441][ T9942] ? vfs_write+0x9a0/0x9a0 [ 288.198899][ T9942] ? lockdep_hardirqs_on+0x98/0x150 [ 288.204140][ T9942] do_syscall_64+0x55/0xb0 [ 288.208589][ T9942] ? clear_bhb_loop+0x40/0x90 [ 288.213287][ T9942] ? clear_bhb_loop+0x40/0x90 [ 288.217988][ T9942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.223916][ T9942] RIP: 0033:0x7f56e615e68e [ 288.228372][ T9942] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 288.248006][ T9942] RSP: 002b:00007f56e70e0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 288.256452][ T9942] RAX: ffffffffffffffda RBX: 00007f56e70e16c0 RCX: 00007f56e615e68e [ 288.264456][ T9942] RDX: 000000000000000f RSI: 00007f56e70e10a0 RDI: 0000000000000003 [ 288.272458][ T9942] RBP: 00007f56e70e1090 R08: 0000000000000000 R09: 0000000000000000 [ 288.280461][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.288464][ T9942] R13: 00007f56e6426038 R14: 00007f56e6425fa0 R15: 00007ffe6506b6a8 [ 288.296483][ T9942] [ 288.346356][ C0] [ 288.346365][ C0] ================================ [ 288.346372][ C0] WARNING: inconsistent lock state [ 288.346391][ C0] syzkaller #0 Not tainted [ 288.346403][ C0] -------------------------------- [ 288.346408][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 288.346417][ C0] syz.0.1411/9944 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 288.346440][ C0] ffff88807a99e238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x95/0x680 [ 288.346510][ C0] {INITIAL USE} state was registered at: [ 288.346517][ C0] lock_acquire+0x19e/0x420 [ 288.346540][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 288.346566][ C0] trie_update_elem+0xcd/0xdf0 [ 288.346589][ C0] bpf_map_update_value+0x64b/0x710 [ 288.346606][ C0] generic_map_update_batch+0x5de/0x800 [ 288.346622][ C0] bpf_map_do_batch+0x3f2/0x600 [ 288.346642][ C0] __sys_bpf+0x381/0x890 [ 288.346659][ C0] __x64_sys_bpf+0x7c/0x90 [ 288.346675][ C0] do_syscall_64+0x55/0xb0 [ 288.346702][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.346736][ C0] irq event stamp: 970 [ 288.346743][ C0] hardirqs last enabled at (969): [] ___slab_alloc+0x10e9/0x12f0 [ 288.346779][ C0] hardirqs last disabled at (970): [] exc_debug+0x73/0x140 [ 288.346801][ C0] softirqs last enabled at (926): [] netlink_insert+0x1094/0x1390 [ 288.346833][ C0] softirqs last disabled at (924): [] release_sock+0x2f/0x1c0 [ 288.346859][ C0] [ 288.346859][ C0] other info that might help us debug this: [ 288.346864][ C0] Possible unsafe locking scenario: [ 288.346864][ C0] [ 288.346869][ C0] CPU0 [ 288.346872][ C0] ---- [ 288.346876][ C0] lock(&trie->lock); [ 288.346889][ C0] [ 288.346892][ C0] lock(&trie->lock); [ 288.346904][ C0] [ 288.346904][ C0] *** DEADLOCK *** [ 288.346904][ C0] [ 288.346908][ C0] no locks held by syz.0.1411/9944. [ 288.346917][ C0] [ 288.346917][ C0] stack backtrace: [ 288.346922][ C0] CPU: 0 PID: 9944 Comm: syz.0.1411 Not tainted syzkaller #0 [ 288.346941][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 288.346952][ C0] Call Trace: [ 288.346960][ C0] <#DB> [ 288.346967][ C0] dump_stack_lvl+0x18c/0x250 [ 288.346999][ C0] ? show_regs_print_info+0x20/0x20 [ 288.347034][ C0] ? print_usage_bug+0x43d/0x6a0 [ 288.347057][ C0] ? verify_lock_unused+0x15/0x140 [ 288.347081][ C0] lock_acquire+0x2c2/0x420 [ 288.347105][ C0] ? trie_delete_elem+0x95/0x680 [ 288.347133][ C0] ? read_lock_is_recursive+0x20/0x20 [ 288.347156][ C0] ? get_user_pages_fast_only+0xa0/0xa0 [ 288.347185][ C0] ? look_up_lock_class+0x75/0x140 [ 288.347210][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 288.347236][ C0] ? trie_delete_elem+0x95/0x680 [ 288.347262][ C0] ? _raw_spin_lock+0x40/0x40 [ 288.347288][ C0] ? perf_prepare_sample+0x1558/0x1db0 [ 288.347313][ C0] trie_delete_elem+0x95/0x680 [ 288.347340][ C0] ? perf_callchain+0x220/0x220 [ 288.347365][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 288.347386][ C0] bpf_overflow_handler+0x1fc/0x510 [ 288.347415][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 288.347436][ C0] ? bpf_overflow_handler+0xde/0x510 [ 288.347471][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 288.347503][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 288.347527][ C0] __perf_event_overflow+0x461/0x660 [ 288.347554][ C0] perf_swevent_event+0x319/0x570 [ 288.347578][ C0] ? perf_tp_event+0x1550/0x1550 [ 288.347600][ C0] ? perf_trace_buf_alloc+0x290/0x290 [ 288.347630][ C0] perf_bp_event+0x319/0x430 [ 288.347652][ C0] ? look_up_lock_class+0x75/0x140 [ 288.347677][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 288.347699][ C0] ? rcu_is_watching+0x15/0xb0 [ 288.347726][ C0] ? lock_release+0xb5/0x8c0 [ 288.347761][ C0] ? lock_acquire+0x2c2/0x420 [ 288.347788][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 288.347815][ C0] notifier_call_chain+0x18f/0x380 [ 288.347841][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 288.347868][ C0] atomic_notifier_call_chain+0xda/0x180 [ 288.347895][ C0] notify_die+0x145/0x1a0 [ 288.347921][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 288.347950][ C0] ? rcu_is_watching+0x15/0xb0 [ 288.347977][ C0] notify_debug+0x2e/0x50 [ 288.347995][ C0] exc_debug+0xde/0x140 [ 288.348015][ C0] asm_exc_debug+0x1e/0x40 [ 288.348043][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 288.348065][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 288.348082][ C0] RSP: 0018:ffffc900193cf958 EFLAGS: 00050206 [ 288.348099][ C0] RAX: ffffffff842eee01 RBX: 000000000000fe33 RCX: 000000000000fb33 [ 288.348113][ C0] RDX: 0000000000000001 RSI: 0000200000000340 RDI: ffffc90019424300 [ 288.348127][ C0] RBP: ffffc900193cfa90 R08: ffffc90019433e32 R09: 1ffff920032867c6 [ 288.348142][ C0] R10: dffffc0000000000 R11: fffff520032867c7 R12: ffffc90019424000 [ 288.348157][ C0] R13: 0000200000000040 R14: ffffc900193cfc18 R15: 1ffff92003279f83 [ 288.348176][ C0] ? _copy_from_iter+0x1b1/0x1290 [ 288.348206][ C0] [ 288.348212][ C0] [ 288.348217][ C0] _copy_from_iter+0x242/0x1290 [ 288.348242][ C0] ? __rwlock_init+0x150/0x150 [ 288.348270][ C0] ? copyout_mc+0x70/0x70 [ 288.348292][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 288.348319][ C0] ? _raw_spin_unlock+0x28/0x40 [ 288.348343][ C0] ? find_vmap_area+0xfc/0x110 [ 288.348368][ C0] ? __check_object_size+0x4fc/0xa40 [ 288.348389][ C0] netlink_sendmsg+0x76b/0xbf0 [ 288.348423][ C0] ? netlink_getsockopt+0x590/0x590 [ 288.348450][ C0] ? apparmor_socket_sendmsg+0x8e/0x330 [ 288.348476][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 288.348501][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 288.348531][ C0] sock_write_iter+0x2dc/0x420 [ 288.348551][ C0] ? sock_read_iter+0x3f0/0x3f0 [ 288.348575][ C0] ? common_file_perm+0x198/0x1f0 [ 288.348599][ C0] vfs_write+0x474/0x9a0 [ 288.348627][ C0] ? file_end_write+0x250/0x250 [ 288.348655][ C0] ? __fget_files+0x3fc/0x460 [ 288.348686][ C0] ? __fdget_pos+0x1d8/0x330 [ 288.348710][ C0] ? ksys_write+0x74/0x260 [ 288.348735][ C0] ksys_write+0x151/0x260 [ 288.348762][ C0] ? __ia32_sys_read+0x90/0x90 [ 288.348790][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 288.348815][ C0] do_syscall_64+0x55/0xb0 [ 288.348843][ C0] ? clear_bhb_loop+0x40/0x90 [ 288.348860][ C0] ? clear_bhb_loop+0x40/0x90 [ 288.348877][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.348905][ C0] RIP: 0033:0x7fa37759de59 [ 288.348922][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.348938][ C0] RSP: 002b:00007fa378416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 288.348959][ C0] RAX: ffffffffffffffda RBX: 00007fa377825fa0 RCX: 00007fa37759de59 [ 288.348975][ C0] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000008 [ 288.348987][ C0] RBP: 00007fa377633e6f R08: 0000000000000000 R09: 0000000000000000 [ 288.349000][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.349011][ C0] R13: 00007fa377826038 R14: 00007fa377825fa0 R15: 00007ffd5ea169e8 [ 288.349034][ C0] [ 288.349327][ T9944] netlink: 56343 bytes leftover after parsing attributes in process `syz.0.1411'.