last executing test programs: 15.727868809s ago: executing program 3 (id=2422): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/user\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000a00)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000b40)={'wlan0\x00', 0x200}) socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x120) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r1, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) 15.149819338s ago: executing program 3 (id=2423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0xc0140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0_to_bond\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(r4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4018, r3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r7) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r8, &(0x7f0000000280)=ANY=[], 0xffdd) 11.460743576s ago: executing program 3 (id=2430): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000a00)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000b40)={'wlan0\x00', 0x200}) socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x120) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r1, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) 11.103559153s ago: executing program 3 (id=2432): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0xfffffff5, @mcast2}, 0x80, 0x0}, 0x0) 10.876589686s ago: executing program 3 (id=2434): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfd84) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32=r3], 0x0, 0x1}, 0x94) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xf, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040) r5 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000071201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYRES64=r3], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001400), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001440)=r7, 0x4) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000001480), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{r3}, 0x0, &(0x7f0000001600)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) 8.818841707s ago: executing program 3 (id=2437): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000100800000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000d, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x1}, 0x15cfa, 0x44, 0x98, 0x0, 0x90, 0xfffff274, 0xfff8, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) 5.907242495s ago: executing program 0 (id=2454): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x2, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x10000, 0x3, 0x5, 0x0, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)=r0, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x11, &(0x7f0000000340), 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x1f4, 0xe, 0x0, &(0x7f0000001480)="ff4175829d579167a4983efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001380)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r4, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000001440)="b9ff0b078059268cb89e14f088a82de08848200000000002000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.318603415s ago: executing program 1 (id=2455): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfd84) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32=r3], 0x0, 0x1}, 0x94) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xf, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040) r5 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000071201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYRES64=r3], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001400), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001440)=r7, 0x4) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000001480), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{r3}, 0x0, &(0x7f0000001600)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) 4.78391798s ago: executing program 0 (id=2456): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2800e0000000000029000b"], 0x28}, 0x840) 4.58827459s ago: executing program 0 (id=2458): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040c4) r1 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8912, &(0x7f0000000900)) 4.29605582s ago: executing program 1 (id=2460): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000740)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001980)=""/4097, 0x1001}, {&(0x7f0000002d00)=""/4095, 0xfff}, {&(0x7f0000003d00)=""/174, 0xae}, {&(0x7f0000003dc0)=""/256, 0x100}, {&(0x7f0000003ec0)=""/35, 0x23}], 0x5}, 0x12000) recvmsg$kcm(r0, &(0x7f0000003f00)={0x0, 0x0, 0x0, 0x1ea4}, 0x40006000) 3.791873851s ago: executing program 1 (id=2461): r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018480000feffffff0000000000b5708000ffffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00m\x00\x00\x00'], &(0x7f00000001c0)='GPL\x00', 0x8, 0x8e, &(0x7f0000000380)=""/142, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0xa, 0x91c, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000500)=[{0x0, 0x1, 0xc, 0x7}], 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000903000000000000000000000105000000080000000000000000000003000000000200000002000000002000000000000000000003000000000100000002"], 0x0, 0x66}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 3.790512012s ago: executing program 0 (id=2468): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040c4) r1 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8912, &(0x7f0000000900)) 3.492811552s ago: executing program 2 (id=2463): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x2, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x10000, 0x3, 0x5, 0x0, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)=r0, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x11, &(0x7f0000000340), 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x1f4, 0xe, 0x0, &(0x7f0000001480)="ff4175829d579167a4983efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000001380)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r4, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000001440)="b9ff0b078059268cb89e14f088a82de08848200000000002000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.034512922s ago: executing program 0 (id=2464): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8000) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000440)={&(0x7f0000000480)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000740)={0x0, 0xfffffff5, &(0x7f0000000780)=[{&(0x7f00000007c0)="a2", 0xfffffdef}], 0x1}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001c80)={0x0, 0x80, 0xff, 0x0, 0x2, 0x0, 0x0, 0x880040001, 0x1430, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2fb1839162b5c6d}, 0x200, 0x10000, 0x1, 0x0, 0x8000000000000000, 0xe0000000}, 0x0, 0xc, 0xffffffffffffffff, 0xc) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff}, 0x28) recvmsg(r3, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000004080)=""/248, 0xf8}], 0x1}, 0x1f00) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000004180)={0x0, 0xfffffff5, &(0x7f00000041c0)=[{&(0x7f0000004200)="a2", 0xfffffdef}], 0x1}, 0x0) 2.004250345s ago: executing program 1 (id=2465): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000140)={r0}, 0x8) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x65199, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0xffffffff}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980), 0x200002, 0x0) openat$cgroup_freezer_state(r4, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xa, 0x5, &(0x7f0000000a80)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f0000000b00)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r5 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x2, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/28], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001b0007000200070019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040000) (fail_nth: 7) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000180)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002840)={0x16, 0xb, &(0x7f0000002900)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f0000002980)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000029c0)={r8, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000002a40)="b9ff03316845268cb89614", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.001056015s ago: executing program 2 (id=2466): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x0) 1.840691111s ago: executing program 2 (id=2467): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfd84) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYBLOB], 0x0, 0x1}, 0x94) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xf, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040) r5 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000071201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYRES64=r3], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001400), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001440)=r7, 0x4) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000001480), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{r3}, 0x0, &(0x7f0000001600)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) 1.028282585s ago: executing program 1 (id=2469): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000a00)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000b40)={'wlan0\x00', 0x200}) socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x120) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r1, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) 1.027183845s ago: executing program 2 (id=2470): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000880), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0xf00, 0x0, 0x61, 0x14, 0xa0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 826.707645ms ago: executing program 0 (id=2471): r0 = socket$kcm(0x10, 0x2, 0x10) (async) r1 = socket$kcm(0x10, 0x3, 0x10) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{}, 0x0, &(0x7f0000000800)=r2}, 0x20) (async) sendmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)=""/98, 0x62}, {&(0x7f0000000c40)=""/151, 0x97}, {&(0x7f0000000d00)=""/139, 0x8b}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x4}, 0x100) (async) sendmsg$kcm(r0, &(0x7f0000001dc0)={0x0, 0xd18c9b25, &(0x7f0000001e00)=[{&(0x7f0000001e40)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000000051d82c137153e374c0c0980fc6310000300", 0x33fe0}], 0x1}, 0x0) (async) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000000080), 0xe) sendmsg$inet(r3, &(0x7f00000008c0)={&(0x7f0000000900)={0x2, 0xce23, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f00000000c0)="13762898bd9d96703445786bdf6bbe6c1033033d9ad4f06b54ab847c814c6c325114ab34ffd842600987deb72b661a83716e6f048b09371e497ad9f4f7ce8cd3d8c688f1c2d420fdf8a47146d7fa7472ce8a47f9e0dc448ce1f3a694c5f9543e19f0a9996e95e50340a6a7f5dc6d621a8c429413e4f0341c44f66c539053ea8a97a76bc1297e7d9f00214e4fb16f947f218fdeada96aeea84fbfb493b3efdde56e924e42f022611037fff2eae16c3ef928af0417b3ae7ef670685a899beef354d3", 0xc1}], 0x1}, 0x8054) (async) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f0000000200), 0x4) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000340)=@in6={0xa, 0x2, 0x11, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, 0x0}, 0x40844) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000762400000000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="d8000000180081054e81f783db4cb9040a1d3f0006007c24e8fc55a10a0015000600142603600e1208000f0000000101a8000100fe80ffff00000000035c0461c1d660c3dacf83ab8eb1a1237f7f0189b316277ce06bbaceac0000b14c2ee5a7cef41e254259c0fd5a647cb651f808e900001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de641c2e7b2da31a55fccd4e1ff0900ffc1c9b6278754ca397c388b0dd6e4edef3d9300", 0xd8}], 0x1}, 0x4000000) (async, rerun: 32) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="911039000000000095"], &(0x7f0000000680)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x1, 0x3adc, '\x00', 0x0, 0x0}, 0x50) 591.648349ms ago: executing program 2 (id=2472): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040c4) r1 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8912, &(0x7f0000000900)) 506.376768ms ago: executing program 1 (id=2473): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x10406) recvmsg(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x10) 0s ago: executing program 2 (id=2474): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x2, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x10000, 0x3, 0x5, 0x0, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)=r0, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x11, &(0x7f0000000340), 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x1f4, 0xe, 0x0, &(0x7f0000001480)="ff4175829d579167a4983efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001380)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r4, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000001440)="b9ff0b078059268cb89e14f088a82de08848200000000002000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): es in process `syz.2.1473'. [ 359.097703][T10383] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1479'. [ 360.058073][T10386] netlink: 'syz.1.1480': attribute type 10 has an invalid length. [ 360.083316][T10386] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1480'. [ 360.270379][T10396] FAULT_INJECTION: forcing a failure. [ 360.270379][T10396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.300332][T10396] CPU: 1 PID: 10396 Comm: syz.0.1485 Not tainted syzkaller #0 [ 360.307891][T10396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 360.318003][T10396] Call Trace: [ 360.321331][T10396] [ 360.324303][T10396] dump_stack_lvl+0x18c/0x250 [ 360.329055][T10396] ? show_regs_print_info+0x20/0x20 [ 360.334311][T10396] ? load_image+0x420/0x420 [ 360.338904][T10396] ? __lock_acquire+0x7eb0/0x7eb0 [ 360.343989][T10396] ? snprintf+0xe9/0x140 [ 360.348287][T10396] should_fail_ex+0x394/0x4c0 [ 360.353114][T10396] _copy_to_user+0x2f/0xa0 [ 360.357586][T10396] simple_read_from_buffer+0xe7/0x150 [ 360.363053][T10396] proc_fail_nth_read+0x1e8/0x260 [ 360.368142][T10396] ? proc_fault_inject_write+0x360/0x360 [ 360.373842][T10396] ? fsnotify_perm+0x271/0x5e0 [ 360.378668][T10396] ? proc_fault_inject_write+0x360/0x360 [ 360.384362][T10396] vfs_read+0x298/0x990 [ 360.388587][T10396] ? kernel_read+0x1e0/0x1e0 [ 360.393264][T10396] ? __fget_files+0x28/0x460 [ 360.397945][T10396] ? __fget_files+0x3fc/0x460 [ 360.402695][T10396] ? __fdget_pos+0x2a3/0x330 [ 360.407371][T10396] ? ksys_read+0x74/0x260 [ 360.411773][T10396] ksys_read+0x151/0x260 [ 360.416086][T10396] ? vfs_write+0x9a0/0x9a0 [ 360.420567][T10396] ? lockdep_hardirqs_on+0x98/0x150 [ 360.425818][T10396] do_syscall_64+0x55/0xb0 [ 360.430284][T10396] ? clear_bhb_loop+0x40/0x90 [ 360.435020][T10396] ? clear_bhb_loop+0x40/0x90 [ 360.439791][T10396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.445750][T10396] RIP: 0033:0x7f3ba2369d0e [ 360.450220][T10396] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 360.469880][T10396] RSP: 002b:00007f3ba3243fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 360.478353][T10396] RAX: ffffffffffffffda RBX: 00007f3ba32446c0 RCX: 00007f3ba2369d0e [ 360.486377][T10396] RDX: 000000000000000f RSI: 00007f3ba32440a0 RDI: 0000000000000004 [ 360.494403][T10396] RBP: 00007f3ba3244090 R08: 0000000000000000 R09: 0000000000000000 [ 360.502426][T10396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.510464][T10396] R13: 00007f3ba2626038 R14: 00007f3ba2625fa0 R15: 00007ffd3692b378 [ 360.518515][T10396] [ 360.806550][T10405] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1488'. [ 361.159570][T10414] netlink: 'syz.3.1492': attribute type 10 has an invalid length. [ 362.446056][T10438] netlink: 'syz.0.1500': attribute type 21 has an invalid length. [ 362.615012][T10447] netlink: 'syz.1.1503': attribute type 10 has an invalid length. [ 362.624708][T10447] __nla_validate_parse: 3 callbacks suppressed [ 362.624742][T10447] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1503'. [ 363.216300][T10451] FAULT_INJECTION: forcing a failure. [ 363.216300][T10451] name failslab, interval 1, probability 0, space 0, times 0 [ 363.267736][T10451] CPU: 1 PID: 10451 Comm: syz.3.1505 Not tainted syzkaller #0 [ 363.275303][T10451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 363.285415][T10451] Call Trace: [ 363.288792][T10451] [ 363.291785][T10451] dump_stack_lvl+0x18c/0x250 [ 363.296538][T10451] ? show_regs_print_info+0x20/0x20 [ 363.301800][T10451] ? load_image+0x420/0x420 [ 363.306360][T10451] ? __lock_acquire+0x7eb0/0x7eb0 [ 363.311450][T10451] ? lock_chain_count+0x20/0x20 [ 363.316368][T10451] should_fail_ex+0x394/0x4c0 [ 363.321115][T10451] should_failslab+0x9/0x20 [ 363.325675][T10451] slab_pre_alloc_hook+0x59/0x300 [ 363.330800][T10451] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 363.336406][T10451] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 363.342005][T10451] __kmem_cache_alloc_node+0x53/0x260 [ 363.347442][T10451] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 363.353054][T10451] __kmalloc+0xa7/0x240 [ 363.357291][T10451] bpf_prog_test_run_skb+0x242/0x18f0 [ 363.362727][T10451] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 363.368949][T10451] ? lockdep_hardirqs_on+0x98/0x150 [ 363.374196][T10451] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 363.380434][T10451] ? cpu_online+0x60/0x60 [ 363.384824][T10451] bpf_prog_test_run+0x31f/0x390 [ 363.389827][T10451] __sys_bpf+0x49d/0x890 [ 363.394136][T10451] ? bpf_link_show_fdinfo+0x560/0x560 [ 363.399586][T10451] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 363.405834][T10451] __x64_sys_bpf+0x7c/0x90 [ 363.410403][T10451] do_syscall_64+0x55/0xb0 [ 363.414878][T10451] ? clear_bhb_loop+0x40/0x90 [ 363.419701][T10451] ? clear_bhb_loop+0x40/0x90 [ 363.424447][T10451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.430492][T10451] RIP: 0033:0x7fa60a7a94d9 [ 363.434962][T10451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.454630][T10451] RSP: 002b:00007fa60b6b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 363.463121][T10451] RAX: ffffffffffffffda RBX: 00007fa60aa25fa0 RCX: 00007fa60a7a94d9 [ 363.463414][T10454] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1506'. [ 363.471128][T10451] RDX: 000000000000002c RSI: 0000200000002980 RDI: 000000000000000a [ 363.471148][T10451] RBP: 00007fa60b6b8090 R08: 0000000000000000 R09: 0000000000000000 [ 363.471162][T10451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.471175][T10451] R13: 00007fa60aa26038 R14: 00007fa60aa25fa0 R15: 00007ffdaab917b8 [ 363.471212][T10451] [ 363.554802][T10454] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.1506'. [ 364.125557][T10472] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1510'. [ 364.689354][T10485] netlink: 'syz.1.1515': attribute type 10 has an invalid length. [ 364.732470][T10485] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1515'. [ 365.068961][T10492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.088725][T10492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.522170][T10492] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 365.545114][T10492] batman_adv: batadv0: Removing interface: virt_wifi0 [ 365.755550][T10497] syzkaller0: entered promiscuous mode [ 365.772374][T10510] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1520'. [ 365.783142][T10497] syzkaller0: entered allmulticast mode [ 365.824801][T10510] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1520'. [ 365.840910][T10510] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1520'. [ 365.853398][T10510] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1520'. [ 365.963312][T10512] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1521'. [ 366.137938][T10518] FAULT_INJECTION: forcing a failure. [ 366.137938][T10518] name failslab, interval 1, probability 0, space 0, times 0 [ 366.161736][T10518] CPU: 0 PID: 10518 Comm: syz.1.1524 Not tainted syzkaller #0 [ 366.169328][T10518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 366.179467][T10518] Call Trace: [ 366.182852][T10518] [ 366.185872][T10518] dump_stack_lvl+0x18c/0x250 [ 366.190697][T10518] ? show_regs_print_info+0x20/0x20 [ 366.196022][T10518] ? load_image+0x420/0x420 [ 366.200634][T10518] ? __might_sleep+0xe0/0xe0 [ 366.205324][T10518] ? __lock_acquire+0x7eb0/0x7eb0 [ 366.210440][T10518] should_fail_ex+0x394/0x4c0 [ 366.215227][T10518] should_failslab+0x9/0x20 [ 366.219867][T10518] slab_pre_alloc_hook+0x59/0x300 [ 366.224955][T10518] ? tomoyo_encode+0x2ad/0x570 [ 366.229800][T10518] ? tomoyo_encode+0x2ad/0x570 [ 366.234616][T10518] __kmem_cache_alloc_node+0x53/0x260 [ 366.240053][T10518] ? tomoyo_encode+0x2ad/0x570 [ 366.244874][T10518] __kmalloc+0xa7/0x240 [ 366.249108][T10518] tomoyo_encode+0x2ad/0x570 [ 366.253797][T10518] tomoyo_realpath_from_path+0x57c/0x5c0 [ 366.259496][T10518] ? tomoyo_domain+0xd6/0x120 [ 366.264253][T10518] tomoyo_path_number_perm+0x248/0x5e0 [ 366.269815][T10518] ? tomoyo_path_number_perm+0x217/0x5e0 [ 366.275510][T10518] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 366.281035][T10518] ? ksys_write+0x1d2/0x260 [ 366.285692][T10518] ? __fget_files+0x28/0x460 [ 366.290383][T10518] security_file_ioctl+0x70/0xa0 [ 366.295393][T10518] __se_sys_ioctl+0x48/0x170 [ 366.300073][T10518] do_syscall_64+0x55/0xb0 [ 366.304564][T10518] ? clear_bhb_loop+0x40/0x90 [ 366.309321][T10518] ? clear_bhb_loop+0x40/0x90 [ 366.314173][T10518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.320150][T10518] RIP: 0033:0x7fc0333a94d9 [ 366.324618][T10518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.344383][T10518] RSP: 002b:00007fc0341b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.352893][T10518] RAX: ffffffffffffffda RBX: 00007fc033625fa0 RCX: 00007fc0333a94d9 [ 366.360932][T10518] RDX: 0000200000000300 RSI: 0000000000008916 RDI: 0000000000000008 [ 366.368973][T10518] RBP: 00007fc0341b0090 R08: 0000000000000000 R09: 0000000000000000 [ 366.377435][T10518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.385464][T10518] R13: 00007fc033626038 R14: 00007fc033625fa0 R15: 00007ffda2ab6548 [ 366.393622][T10518] [ 366.450366][T10518] ERROR: Out of memory at tomoyo_realpath_from_path. [ 367.005587][T10530] netlink: 'syz.2.1528': attribute type 10 has an invalid length. [ 368.005359][T10540] __nla_validate_parse: 1 callbacks suppressed [ 368.005377][T10540] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1530'. [ 368.163294][T10540] netlink: 'syz.0.1530': attribute type 10 has an invalid length. [ 368.199466][T10540] netlink: 199240 bytes leftover after parsing attributes in process `syz.0.1530'. [ 368.212783][T10547] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1532'. [ 368.884328][T10563] netlink: 'syz.0.1539': attribute type 10 has an invalid length. [ 368.901322][T10565] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1540'. [ 368.916518][T10563] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1539'. [ 368.944738][T10565] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1540'. [ 368.984010][T10565] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1540'. [ 369.019150][T10565] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1540'. [ 369.126602][T10561] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1537'. [ 369.714563][T10575] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1543'. [ 369.979065][T10582] netlink: 'syz.2.1545': attribute type 10 has an invalid length. [ 369.996390][T10582] veth1_vlan: entered allmulticast mode [ 370.045706][T10582] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 370.979556][T10593] netlink: 'syz.2.1550': attribute type 41 has an invalid length. [ 371.171118][T10600] netlink: 'syz.3.1552': attribute type 10 has an invalid length. [ 373.435680][T10637] netlink: 'syz.2.1564': attribute type 10 has an invalid length. [ 373.466683][T10637] __nla_validate_parse: 6 callbacks suppressed [ 373.466728][T10637] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1564'. [ 373.676777][T10644] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1567'. [ 374.912471][T10659] netlink: 'syz.1.1572': attribute type 29 has an invalid length. [ 374.949802][T10659] netlink: 'syz.1.1572': attribute type 29 has an invalid length. [ 374.997686][T10663] FAULT_INJECTION: forcing a failure. [ 374.997686][T10663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.014704][T10660] netlink: 'syz.1.1572': attribute type 29 has an invalid length. [ 375.026050][T10663] CPU: 0 PID: 10663 Comm: syz.2.1574 Not tainted syzkaller #0 [ 375.033590][T10663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 375.043707][T10663] Call Trace: [ 375.047051][T10663] [ 375.050117][T10663] dump_stack_lvl+0x18c/0x250 [ 375.054876][T10663] ? show_regs_print_info+0x20/0x20 [ 375.060135][T10663] ? load_image+0x420/0x420 [ 375.064708][T10663] ? __lock_acquire+0x7eb0/0x7eb0 [ 375.069796][T10663] ? snprintf+0xe9/0x140 [ 375.074110][T10663] should_fail_ex+0x394/0x4c0 [ 375.078865][T10663] _copy_to_user+0x2f/0xa0 [ 375.083340][T10663] simple_read_from_buffer+0xe7/0x150 [ 375.088794][T10663] proc_fail_nth_read+0x1e8/0x260 [ 375.093893][T10663] ? proc_fault_inject_write+0x360/0x360 [ 375.099596][T10663] ? fsnotify_perm+0x271/0x5e0 [ 375.104512][T10663] ? proc_fault_inject_write+0x360/0x360 [ 375.110219][T10663] vfs_read+0x298/0x990 [ 375.114439][T10663] ? kernel_read+0x1e0/0x1e0 [ 375.119088][T10663] ? __fget_files+0x28/0x460 [ 375.123744][T10663] ? __fget_files+0x3fc/0x460 [ 375.128583][T10663] ? __fdget_pos+0x2a3/0x330 [ 375.133278][T10663] ? ksys_read+0x74/0x260 [ 375.137764][T10663] ksys_read+0x151/0x260 [ 375.142078][T10663] ? vfs_write+0x9a0/0x9a0 [ 375.146579][T10663] ? lockdep_hardirqs_on+0x98/0x150 [ 375.151832][T10663] do_syscall_64+0x55/0xb0 [ 375.156305][T10663] ? clear_bhb_loop+0x40/0x90 [ 375.161049][T10663] ? clear_bhb_loop+0x40/0x90 [ 375.165796][T10663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.171760][T10663] RIP: 0033:0x7f2cfa169d0e [ 375.176228][T10663] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 375.195903][T10663] RSP: 002b:00007f2cfb04dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 375.204381][T10663] RAX: ffffffffffffffda RBX: 00007f2cfb04e6c0 RCX: 00007f2cfa169d0e [ 375.212415][T10663] RDX: 000000000000000f RSI: 00007f2cfb04e0a0 RDI: 0000000000000005 [ 375.220452][T10663] RBP: 00007f2cfb04e090 R08: 0000000000000000 R09: 0000000000000000 [ 375.228583][T10663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.236694][T10663] R13: 00007f2cfa426038 R14: 00007f2cfa425fa0 R15: 00007ffd5cc9c548 [ 375.244741][T10663] [ 375.292113][T10661] netlink: 'syz.1.1572': attribute type 29 has an invalid length. [ 375.304447][T10665] netlink: 'syz.1.1572': attribute type 29 has an invalid length. [ 375.487709][T10676] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1577'. [ 375.598574][T10680] netlink: 'syz.3.1579': attribute type 10 has an invalid length. [ 375.626604][T10680] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1579'. [ 376.740247][T10692] netlink: 'syz.2.1583': attribute type 46 has an invalid length. [ 376.758101][T10692] netlink: 'syz.2.1583': attribute type 46 has an invalid length. [ 377.153873][T10707] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1588'. [ 377.241438][T10713] netlink: 'syz.3.1590': attribute type 10 has an invalid length. [ 377.264621][T10713] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1590'. [ 378.504709][T10721] FAULT_INJECTION: forcing a failure. [ 378.504709][T10721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.555960][T10721] CPU: 1 PID: 10721 Comm: syz.3.1593 Not tainted syzkaller #0 [ 378.563539][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 378.573740][T10721] Call Trace: [ 378.577070][T10721] [ 378.580048][T10721] dump_stack_lvl+0x18c/0x250 [ 378.584878][T10721] ? show_regs_print_info+0x20/0x20 [ 378.590231][T10721] ? load_image+0x420/0x420 [ 378.594811][T10721] ? __might_fault+0xaa/0x120 [ 378.599554][T10721] ? __lock_acquire+0x7eb0/0x7eb0 [ 378.604648][T10721] should_fail_ex+0x394/0x4c0 [ 378.609389][T10721] fpu__restore_sig+0x221/0x1210 [ 378.614408][T10721] ? copy_fpstate_to_sigframe+0xce0/0xce0 [ 378.620205][T10721] ? __lock_acquire+0x7eb0/0x7eb0 [ 378.625296][T10721] ? __might_fault+0xc6/0x120 [ 378.630122][T10721] ? __might_fault+0xaa/0x120 [ 378.634867][T10721] __ia32_sys_rt_sigreturn+0x6d1/0x850 [ 378.640387][T10721] ? x64_setup_rt_frame+0xc30/0xc30 [ 378.645664][T10721] ? lock_chain_count+0x20/0x20 [ 378.650593][T10721] ? lockdep_hardirqs_on+0x98/0x150 [ 378.655879][T10721] do_syscall_64+0x55/0xb0 [ 378.660395][T10721] ? clear_bhb_loop+0x40/0x90 [ 378.665159][T10721] ? clear_bhb_loop+0x40/0x90 [ 378.669906][T10721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.675863][T10721] RIP: 0033:0x7fa60a7a94d9 [ 378.680345][T10721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.700006][T10721] RSP: 002b:00007fa60b6b8028 EFLAGS: 00000246 [ 378.706143][T10721] RAX: fffffffffffffffc RBX: 00007fa60aa25fa0 RCX: 00007fa60a7a94d9 [ 378.714175][T10721] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 378.722283][T10721] RBP: 00007fa60b6b8090 R08: 0000000000000000 R09: 0000000000000000 [ 378.730438][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.738637][T10721] R13: 00007fa60aa26038 R14: 00007fa60aa25fa0 R15: 00007ffdaab917b8 [ 378.746708][T10721] [ 378.886477][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.892937][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.291697][T10747] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1599'. [ 379.551474][T10751] netlink: 'syz.1.1601': attribute type 10 has an invalid length. [ 379.587062][T10751] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1601'. [ 380.740982][T10775] FAULT_INJECTION: forcing a failure. [ 380.740982][T10775] name failslab, interval 1, probability 0, space 0, times 0 [ 380.773700][T10775] CPU: 0 PID: 10775 Comm: syz.1.1608 Not tainted syzkaller #0 [ 380.781302][T10775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 380.791420][T10775] Call Trace: [ 380.794750][T10775] [ 380.797730][T10775] dump_stack_lvl+0x18c/0x250 [ 380.802484][T10775] ? show_regs_print_info+0x20/0x20 [ 380.807758][T10775] ? load_image+0x420/0x420 [ 380.812339][T10775] ? __might_sleep+0xe0/0xe0 [ 380.817043][T10775] ? __lock_acquire+0x7eb0/0x7eb0 [ 380.822231][T10775] should_fail_ex+0x394/0x4c0 [ 380.826984][T10775] should_failslab+0x9/0x20 [ 380.831533][T10775] slab_pre_alloc_hook+0x59/0x300 [ 380.836607][T10775] ? mutex_lock_nested+0x20/0x20 [ 380.841596][T10775] ? rxrpc_lookup_local+0x57f/0x1700 [ 380.846945][T10775] __kmem_cache_alloc_node+0x53/0x260 [ 380.852380][T10775] ? rxrpc_lookup_local+0x57f/0x1700 [ 380.857712][T10775] kmalloc_trace+0x2a/0xe0 [ 380.862176][T10775] rxrpc_lookup_local+0x57f/0x1700 [ 380.867354][T10775] ? rxrpc_local_dont_fragment+0x70/0x70 [ 380.873070][T10775] ? lock_chain_count+0x20/0x20 [ 380.877994][T10775] ? __local_bh_enable_ip+0x13a/0x1c0 [ 380.883420][T10775] ? lockdep_hardirqs_on+0x98/0x150 [ 380.888680][T10775] ? __local_bh_enable_ip+0x13a/0x1c0 [ 380.894117][T10775] ? _local_bh_enable+0xa0/0xa0 [ 380.899008][T10775] ? do_raw_spin_unlock+0x121/0x230 [ 380.904293][T10775] rxrpc_sendmsg+0x2f3/0x5b0 [ 380.908940][T10775] ? rxrpc_getsockopt+0x150/0x150 [ 380.913997][T10775] ____sys_sendmsg+0x61b/0x980 [ 380.918814][T10775] ? __sys_sendmsg_sock+0x30/0x30 [ 380.923894][T10775] ? __import_iovec+0x3fa/0x850 [ 380.928813][T10775] ? import_iovec+0x73/0xa0 [ 380.933378][T10775] ___sys_sendmsg+0x2a6/0x360 [ 380.938119][T10775] ? __sys_sendmsg+0x2b0/0x2b0 [ 380.943067][T10775] ? trace_call_bpf+0xc3/0x6c0 [ 380.947927][T10775] __se_sys_sendmsg+0x1d0/0x2c0 [ 380.952843][T10775] ? __x64_sys_sendmsg+0x80/0x80 [ 380.957859][T10775] ? lockdep_hardirqs_on+0x98/0x150 [ 380.963096][T10775] do_syscall_64+0x55/0xb0 [ 380.967610][T10775] ? clear_bhb_loop+0x40/0x90 [ 380.972336][T10775] ? clear_bhb_loop+0x40/0x90 [ 380.977136][T10775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.983096][T10775] RIP: 0033:0x7fc0333a94d9 [ 380.987564][T10775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.007223][T10775] RSP: 002b:00007fc0341b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.015787][T10775] RAX: ffffffffffffffda RBX: 00007fc033625fa0 RCX: 00007fc0333a94d9 [ 381.023830][T10775] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000007 [ 381.031861][T10775] RBP: 00007fc0341b0090 R08: 0000000000000000 R09: 0000000000000000 [ 381.039891][T10775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.047918][T10775] R13: 00007fc033626038 R14: 00007fc033625fa0 R15: 00007ffda2ab6548 [ 381.056000][T10775] [ 381.211518][T10781] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1610'. [ 381.360776][T10788] netlink: 'syz.3.1613': attribute type 10 has an invalid length. [ 381.383455][T10788] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1613'. [ 382.409121][T10801] netlink: 'syz.0.1617': attribute type 153 has an invalid length. [ 382.434561][T10801] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1617'. [ 382.552547][T10806] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1619'. [ 382.572633][T10809] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1621'. [ 382.689070][T10806] team0: Port device bond0 removed [ 382.709349][T10814] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1622'. [ 382.720371][T10806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.761637][T10806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.817115][T10806] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 382.839787][T10806] bond0 (unregistering): Released all slaves [ 382.893283][T10809] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1621'. [ 382.910130][T10812] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1621'. [ 382.933781][T10815] FAULT_INJECTION: forcing a failure. [ 382.933781][T10815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.977931][T10815] CPU: 1 PID: 10815 Comm: syz.1.1621 Not tainted syzkaller #0 [ 382.985481][T10815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 382.995677][T10815] Call Trace: [ 382.999004][T10815] [ 383.001995][T10815] dump_stack_lvl+0x18c/0x250 [ 383.006742][T10815] ? show_regs_print_info+0x20/0x20 [ 383.012002][T10815] ? load_image+0x420/0x420 [ 383.016563][T10815] ? __lock_acquire+0x7eb0/0x7eb0 [ 383.021654][T10815] ? snprintf+0xe9/0x140 [ 383.025952][T10815] should_fail_ex+0x394/0x4c0 [ 383.030684][T10815] _copy_to_user+0x2f/0xa0 [ 383.035144][T10815] simple_read_from_buffer+0xe7/0x150 [ 383.040583][T10815] proc_fail_nth_read+0x1e8/0x260 [ 383.045686][T10815] ? proc_fault_inject_write+0x360/0x360 [ 383.051387][T10815] ? fsnotify_perm+0x271/0x5e0 [ 383.056263][T10815] ? proc_fault_inject_write+0x360/0x360 [ 383.062068][T10815] vfs_read+0x298/0x990 [ 383.066311][T10815] ? kernel_read+0x1e0/0x1e0 [ 383.070965][T10815] ? __fget_files+0x28/0x460 [ 383.075639][T10815] ? __fget_files+0x3fc/0x460 [ 383.080397][T10815] ? __fdget_pos+0x2a3/0x330 [ 383.085038][T10815] ? ksys_read+0x74/0x260 [ 383.089426][T10815] ksys_read+0x151/0x260 [ 383.093724][T10815] ? vfs_write+0x9a0/0x9a0 [ 383.098197][T10815] ? lockdep_hardirqs_on+0x98/0x150 [ 383.103555][T10815] do_syscall_64+0x55/0xb0 [ 383.108016][T10815] ? clear_bhb_loop+0x40/0x90 [ 383.112743][T10815] ? clear_bhb_loop+0x40/0x90 [ 383.117469][T10815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.123432][T10815] RIP: 0033:0x7fc033369d0e [ 383.127884][T10815] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 383.147533][T10815] RSP: 002b:00007fc0315f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 383.156001][T10815] RAX: ffffffffffffffda RBX: 00007fc0315f66c0 RCX: 00007fc033369d0e [ 383.164010][T10815] RDX: 000000000000000f RSI: 00007fc0315f60a0 RDI: 0000000000000004 [ 383.172046][T10815] RBP: 00007fc0315f6090 R08: 0000000000000000 R09: 0000000000000000 [ 383.180060][T10815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.188068][T10815] R13: 00007fc033626218 R14: 00007fc033626180 R15: 00007ffda2ab6548 [ 383.196103][T10815] [ 383.376935][T10823] netlink: 'syz.0.1624': attribute type 10 has an invalid length. [ 384.503989][T10846] FAULT_INJECTION: forcing a failure. [ 384.503989][T10846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.524296][T10846] CPU: 1 PID: 10846 Comm: syz.2.1632 Not tainted syzkaller #0 [ 384.532114][T10846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 384.542220][T10846] Call Trace: [ 384.545541][T10846] [ 384.548524][T10846] dump_stack_lvl+0x18c/0x250 [ 384.553293][T10846] ? show_regs_print_info+0x20/0x20 [ 384.558645][T10846] ? load_image+0x420/0x420 [ 384.563211][T10846] ? __might_fault+0xaa/0x120 [ 384.567951][T10846] ? __lock_acquire+0x7eb0/0x7eb0 [ 384.573084][T10846] should_fail_ex+0x394/0x4c0 [ 384.577836][T10846] _copy_from_iter+0x1cd/0x1290 [ 384.582748][T10846] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 384.588982][T10846] ? lockdep_hardirqs_on+0x98/0x150 [ 384.594253][T10846] ? copyout_mc+0x70/0x70 [ 384.599012][T10846] ? __check_object_size+0x2bf/0xa40 [ 384.604375][T10846] ? __kmem_obj_info+0x360/0x360 [ 384.609452][T10846] ? __check_object_size+0x4fc/0xa40 [ 384.614801][T10846] netlink_sendmsg+0x76b/0xbf0 [ 384.619636][T10846] ? netlink_getsockopt+0x590/0x590 [ 384.624897][T10846] ? apparmor_socket_sendmsg+0x8e/0x330 [ 384.630519][T10846] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 384.635871][T10846] ? security_socket_sendmsg+0x80/0xa0 [ 384.641392][T10846] ? netlink_getsockopt+0x590/0x590 [ 384.646631][T10846] ____sys_sendmsg+0x61b/0x980 [ 384.651440][T10846] ? __asan_memset+0x22/0x40 [ 384.656067][T10846] ? __sys_sendmsg_sock+0x30/0x30 [ 384.661120][T10846] ? __import_iovec+0x5f2/0x850 [ 384.666014][T10846] ? import_iovec+0x73/0xa0 [ 384.670557][T10846] ___sys_sendmsg+0x2a6/0x360 [ 384.675306][T10846] ? __sys_sendmsg+0x2b0/0x2b0 [ 384.680141][T10846] __se_sys_sendmsg+0x1d0/0x2c0 [ 384.685045][T10846] ? __x64_sys_sendmsg+0x80/0x80 [ 384.690116][T10846] do_syscall_64+0x55/0xb0 [ 384.694579][T10846] ? clear_bhb_loop+0x40/0x90 [ 384.699390][T10846] ? clear_bhb_loop+0x40/0x90 [ 384.704108][T10846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.710044][T10846] RIP: 0033:0x7f2cfa1a94d9 [ 384.714494][T10846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.734135][T10846] RSP: 002b:00007f2cfb04e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.742580][T10846] RAX: ffffffffffffffda RBX: 00007f2cfa425fa0 RCX: 00007f2cfa1a94d9 [ 384.750587][T10846] RDX: 0000000004000000 RSI: 0000200000004980 RDI: 0000000000000003 [ 384.758588][T10846] RBP: 00007f2cfb04e090 R08: 0000000000000000 R09: 0000000000000000 [ 384.766585][T10846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.774584][T10846] R13: 00007f2cfa426038 R14: 00007f2cfa425fa0 R15: 00007ffd5cc9c548 [ 384.782634][T10846] [ 384.886520][T10850] __nla_validate_parse: 3 callbacks suppressed [ 384.886539][T10850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1634'. [ 384.912643][T10850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1634'. [ 384.922327][T10850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1634'. [ 384.936130][T10850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1634'. [ 384.945453][T10850] FAULT_INJECTION: forcing a failure. [ 384.945453][T10850] name failslab, interval 1, probability 0, space 0, times 0 [ 384.961927][T10850] CPU: 0 PID: 10850 Comm: syz.2.1634 Not tainted syzkaller #0 [ 384.969462][T10850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 384.979590][T10850] Call Trace: [ 384.982898][T10850] [ 384.985865][T10850] dump_stack_lvl+0x18c/0x250 [ 384.990599][T10850] ? show_regs_print_info+0x20/0x20 [ 384.995928][T10850] ? load_image+0x420/0x420 [ 385.000569][T10850] should_fail_ex+0x394/0x4c0 [ 385.005639][T10850] should_failslab+0x9/0x20 [ 385.010184][T10850] slab_pre_alloc_hook+0x59/0x300 [ 385.015274][T10850] kmem_cache_alloc+0x5a/0x2d0 [ 385.020095][T10850] ? skb_clone+0x1eb/0x370 [ 385.024555][T10850] skb_clone+0x1eb/0x370 [ 385.028859][T10850] __netlink_deliver_tap+0x411/0x7f0 [ 385.034189][T10850] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.039506][T10850] netlink_deliver_tap+0x19c/0x1b0 [ 385.044647][T10850] netlink_dump+0x95b/0xec0 [ 385.049181][T10850] ? lock_chain_count+0x20/0x20 [ 385.054155][T10850] ? netlink_lookup+0x200/0x200 [ 385.059040][T10850] ? slab_free_freelist_hook+0x154/0x240 [ 385.064706][T10850] ? netlink_recvmsg+0x5e7/0xe60 [ 385.069670][T10850] ? kmem_cache_free+0xf8/0x290 [ 385.074556][T10850] netlink_recvmsg+0x693/0xe60 [ 385.079357][T10850] ? netlink_sendmsg+0xbf0/0xbf0 [ 385.084318][T10850] ? aa_sk_perm+0x7bb/0x8e0 [ 385.088860][T10850] ? aa_af_perm+0x330/0x330 [ 385.093412][T10850] ? __lock_acquire+0x135d/0x7eb0 [ 385.098503][T10850] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 385.103845][T10850] ? security_socket_recvmsg+0x89/0xb0 [ 385.109355][T10850] ? netlink_sendmsg+0xbf0/0xbf0 [ 385.114348][T10850] ____sys_recvmsg+0x2bd/0x5d0 [ 385.119160][T10850] ? __sys_recvmsg_sock+0x50/0x50 [ 385.124230][T10850] ? import_iovec+0x73/0xa0 [ 385.128780][T10850] ___sys_recvmsg+0x214/0x590 [ 385.133503][T10850] ? __sys_recvmsg+0x2a0/0x2a0 [ 385.138298][T10850] ? ksys_write+0x1d2/0x260 [ 385.142854][T10850] ? __fget_files+0x3fc/0x460 [ 385.147577][T10850] __x64_sys_recvmsg+0x21e/0x2f0 [ 385.152567][T10850] ? ___sys_recvmsg+0x590/0x590 [ 385.157467][T10850] ? lockdep_hardirqs_on+0x98/0x150 [ 385.162695][T10850] do_syscall_64+0x55/0xb0 [ 385.167144][T10850] ? clear_bhb_loop+0x40/0x90 [ 385.171857][T10850] ? clear_bhb_loop+0x40/0x90 [ 385.176572][T10850] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.182501][T10850] RIP: 0033:0x7f2cfa1a94d9 [ 385.186942][T10850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.206686][T10850] RSP: 002b:00007f2cfb04e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 385.215128][T10850] RAX: ffffffffffffffda RBX: 00007f2cfa425fa0 RCX: 00007f2cfa1a94d9 [ 385.223222][T10850] RDX: 0000000000000080 RSI: 0000200000003040 RDI: 0000000000000003 [ 385.231226][T10850] RBP: 00007f2cfb04e090 R08: 0000000000000000 R09: 0000000000000000 [ 385.239576][T10850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.247576][T10850] R13: 00007f2cfa426038 R14: 00007f2cfa425fa0 R15: 00007ffd5cc9c548 [ 385.255590][T10850] [ 385.844022][T10866] netlink: 'syz.0.1639': attribute type 10 has an invalid length. [ 385.853659][T10866] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1639'. [ 385.886289][T10868] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1641'. [ 386.058386][T10870] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1642'. [ 387.596337][ T5797] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 387.840164][T10905] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1653'. [ 387.859168][T10903] netlink: 'syz.0.1652': attribute type 10 has an invalid length. [ 387.879604][T10903] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1652'. [ 387.928461][T10907] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1654'. [ 389.130488][T10937] netlink: 'syz.1.1666': attribute type 10 has an invalid length. [ 389.152922][T10940] FAULT_INJECTION: forcing a failure. [ 389.152922][T10940] name failslab, interval 1, probability 0, space 0, times 0 [ 389.191674][T10940] CPU: 0 PID: 10940 Comm: syz.0.1667 Not tainted syzkaller #0 [ 389.199260][T10940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 389.209369][T10940] Call Trace: [ 389.212721][T10940] [ 389.215708][T10940] dump_stack_lvl+0x18c/0x250 [ 389.220537][T10940] ? show_regs_print_info+0x20/0x20 [ 389.225792][T10940] ? load_image+0x420/0x420 [ 389.230376][T10940] ? __lock_acquire+0x7eb0/0x7eb0 [ 389.235478][T10940] should_fail_ex+0x394/0x4c0 [ 389.240217][T10940] should_failslab+0x9/0x20 [ 389.244764][T10940] slab_pre_alloc_hook+0x59/0x300 [ 389.249838][T10940] ? __lock_acquire+0x7eb0/0x7eb0 [ 389.254922][T10940] ? security_sk_alloc+0x4b/0x130 [ 389.260007][T10940] ? security_sk_alloc+0x4b/0x130 [ 389.265089][T10940] __kmem_cache_alloc_node+0x53/0x260 [ 389.270610][T10940] ? security_sk_alloc+0x4b/0x130 [ 389.275699][T10940] __kmalloc+0xa7/0x240 [ 389.279927][T10940] security_sk_alloc+0x4b/0x130 [ 389.284846][T10940] sk_prot_alloc+0x101/0x210 [ 389.289508][T10940] sk_alloc+0x3a/0x350 [ 389.293644][T10940] inet_create+0x7a9/0xfe0 [ 389.298126][T10940] ? inet_create+0x9d/0xfe0 [ 389.302695][T10940] __sock_create+0x49e/0x940 [ 389.307366][T10940] __sys_socket+0xd7/0x1b0 [ 389.311862][T10940] __x64_sys_socket+0x7a/0x90 [ 389.316594][T10940] do_syscall_64+0x55/0xb0 [ 389.321096][T10940] ? clear_bhb_loop+0x40/0x90 [ 389.325837][T10940] ? clear_bhb_loop+0x40/0x90 [ 389.330570][T10940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.336570][T10940] RIP: 0033:0x7f3ba23a94d9 [ 389.341038][T10940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.360735][T10940] RSP: 002b:00007f3ba3244028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 389.369243][T10940] RAX: ffffffffffffffda RBX: 00007f3ba2625fa0 RCX: 00007f3ba23a94d9 [ 389.377270][T10940] RDX: 0000000000000073 RSI: 0000000000000002 RDI: 0000000000000002 [ 389.385297][T10940] RBP: 00007f3ba3244090 R08: 0000000000000000 R09: 0000000000000000 [ 389.393321][T10940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.401346][T10940] R13: 00007f3ba2626038 R14: 00007f3ba2625fa0 R15: 00007ffd3692b378 [ 389.409496][T10940] [ 390.812105][T10967] netlink: 'syz.2.1677': attribute type 10 has an invalid length. [ 390.823905][T10967] __nla_validate_parse: 6 callbacks suppressed [ 390.823948][T10967] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1677'. [ 391.176659][T10973] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1678'. [ 391.423897][T10980] netlink: 'syz.0.1680': attribute type 10 has an invalid length. [ 391.929885][T11004] netlink: 'syz.3.1689': attribute type 10 has an invalid length. [ 391.948843][T11004] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1689'. [ 392.126491][T11009] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1690'. [ 394.796481][T11030] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1698'. [ 394.805657][T11030] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1698'. [ 394.846720][T11030] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1698'. [ 395.115149][T11037] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1701'. [ 395.178529][T11040] netlink: 'syz.1.1702': attribute type 10 has an invalid length. [ 395.193440][T11040] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1702'. [ 396.175521][T11046] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1705'. [ 396.180192][T11048] netlink: 'syz.1.1713': attribute type 10 has an invalid length. [ 396.229632][T11048] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1713'. [ 396.477039][T11057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1708'. [ 396.490198][T11057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1708'. [ 396.521361][T11055] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1707'. [ 396.605519][T11055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.634809][T11055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.662139][T11055] bond0 (unregistering): (slave team0): Releasing backup interface [ 396.674917][T11055] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 396.696533][T11055] bond0 (unregistering): Released all slaves [ 396.713195][T11057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1708'. [ 396.729125][T11058] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1708'. [ 397.156296][T11072] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1714'. [ 398.292712][T11083] netlink: 'syz.3.1716': attribute type 10 has an invalid length. [ 398.303484][T11083] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1716'. [ 398.314407][T11081] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1717'. [ 398.359525][T11081] netlink: 'syz.1.1717': attribute type 10 has an invalid length. [ 398.629103][T11089] netlink: 'syz.2.1728': attribute type 10 has an invalid length. [ 400.603804][T11121] netlink: 'syz.2.1733': attribute type 10 has an invalid length. [ 402.018243][T11137] __nla_validate_parse: 6 callbacks suppressed [ 402.018280][T11137] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1738'. [ 402.429273][T11154] netlink: 'syz.1.1744': attribute type 10 has an invalid length. [ 402.477817][T11154] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1744'. [ 404.947328][T11174] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1751'. [ 405.314107][T11179] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1753'. [ 405.324047][T11179] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1753'. [ 405.339164][T11179] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1753'. [ 405.462348][T11186] netlink: 'syz.1.1756': attribute type 10 has an invalid length. [ 405.478459][T11186] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1756'. [ 405.621117][T11192] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1757'. [ 407.094775][T11203] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1760'. [ 407.104180][T11203] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1760'. [ 407.118586][T11203] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1760'. [ 407.456544][T11212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1763'. [ 408.693154][T11222] netlink: 'syz.2.1765': attribute type 10 has an invalid length. [ 408.701601][T11222] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1765'. [ 409.040378][T11232] netlink: 'syz.1.1778': attribute type 10 has an invalid length. [ 409.077550][T11232] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1778'. [ 409.103031][T11234] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1769'. [ 409.274611][T11237] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1770'. [ 409.514179][T11244] netlink: 'syz.1.1771': attribute type 1 has an invalid length. [ 409.535565][T11244] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1771'. [ 410.399708][T11256] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1776'. [ 411.052572][T11258] netlink: 'syz.1.1777': attribute type 10 has an invalid length. [ 411.479320][T11270] veth0_to_bond: entered promiscuous mode [ 411.609576][T11272] netlink: 'syz.2.1781': attribute type 10 has an invalid length. [ 411.652967][T11270] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 411.748156][T11270] syzkaller0: entered promiscuous mode [ 411.756049][T11270] syzkaller0: entered allmulticast mode [ 411.794446][T11276] netlink: 'syz.0.1782': attribute type 10 has an invalid length. [ 413.408698][T11295] __nla_validate_parse: 3 callbacks suppressed [ 413.408739][T11295] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1790'. [ 415.652281][T11307] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1796'. [ 415.784854][T11311] netlink: 'syz.1.1798': attribute type 10 has an invalid length. [ 415.796970][T11311] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1798'. [ 416.014983][T11315] netlink: 'syz.2.1799': attribute type 1 has an invalid length. [ 416.081000][T11315] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1799'. [ 416.999931][T11324] netlink: 'syz.0.1802': attribute type 10 has an invalid length. [ 417.011715][T11324] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1802'. [ 417.439926][T11329] rxe_eth0 speed is unknown, defaulting to 1000 [ 417.467164][T11331] netlink: 52711 bytes leftover after parsing attributes in process `syz.2.1803'. [ 417.723760][T11341] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1808'. [ 418.391606][T11359] netlink: 'syz.3.1811': attribute type 1 has an invalid length. [ 418.442379][T11359] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1811'. [ 419.668373][T11363] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1813'. [ 419.723934][T11363] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1813'. [ 419.746807][T11366] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1813'. [ 419.798762][T11365] netlink: 'syz.1.1814': attribute type 10 has an invalid length. [ 419.815512][T11365] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1814'. [ 420.652653][T11376] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1818'. [ 421.476027][T11376] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1818'. [ 421.487357][T11380] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1818'. [ 423.972405][T11407] netlink: 'syz.3.1829': attribute type 10 has an invalid length. [ 423.993714][T11407] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1829'. [ 428.210762][T11448] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1841'. [ 429.887320][T11473] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1847'. [ 429.954997][T11473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.982970][T11473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.999648][T11473] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 430.009809][T11473] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.030853][T11473] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 430.055366][T11473] bond0 (unregistering): Released all slaves [ 430.069129][T11471] netlink: 'syz.3.1848': attribute type 10 has an invalid length. [ 430.078350][T11471] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1848'. [ 430.094644][T11476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.103713][T11476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.279756][T11478] netlink: 'syz.1.1858': attribute type 10 has an invalid length. [ 430.296261][T11478] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1858'. [ 430.597041][T11486] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1851'. [ 430.737080][T11488] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1852'. [ 431.170255][T11502] netlink: 'syz.2.1859': attribute type 10 has an invalid length. [ 431.209700][T11502] team0: Device nlmon0 is of different type [ 431.512771][T11509] netlink: 'syz.2.1861': attribute type 10 has an invalid length. [ 431.548945][T11509] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1861'. [ 431.748538][T11513] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1863'. [ 431.967238][T11524] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1868'. [ 432.457969][T11540] netlink: 'syz.2.1873': attribute type 10 has an invalid length. [ 432.486204][T11540] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1873'. [ 432.645161][T11544] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1876'. [ 434.907230][T11564] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 435.029822][T11573] __nla_validate_parse: 2 callbacks suppressed [ 435.029860][T11573] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1887'. [ 435.033700][T11564] syzkaller0: entered promiscuous mode [ 435.054485][T11564] syzkaller0: entered allmulticast mode [ 435.073380][T11567] netlink: 'syz.2.1885': attribute type 10 has an invalid length. [ 435.081839][T11567] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1885'. [ 435.254727][T11579] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1888'. [ 435.254790][T11576] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1896'. [ 437.464409][T11604] netlink: 'syz.3.1898': attribute type 10 has an invalid length. [ 437.488292][T11604] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1898'. [ 437.599342][T11607] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1899'. [ 437.870591][T11619] netlink: 'syz.2.1902': attribute type 10 has an invalid length. [ 438.480456][T11635] netlink: 'syz.2.1909': attribute type 10 has an invalid length. [ 438.489092][T11635] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1909'. [ 438.664240][T11639] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1911'. [ 439.441224][T11664] netlink: 'syz.1.1921': attribute type 9 has an invalid length. [ 439.484058][T11664] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1921'. [ 439.632066][T11673] FAULT_INJECTION: forcing a failure. [ 439.632066][T11673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.646239][T11669] netlink: 'syz.2.1922': attribute type 10 has an invalid length. [ 439.654304][T11669] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1922'. [ 439.673551][T11673] CPU: 1 PID: 11673 Comm: syz.3.1923 Not tainted syzkaller #0 [ 439.681116][T11673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 439.691220][T11673] Call Trace: [ 439.694562][T11673] [ 439.697534][T11673] dump_stack_lvl+0x18c/0x250 [ 439.702270][T11673] ? show_regs_print_info+0x20/0x20 [ 439.707542][T11673] ? load_image+0x420/0x420 [ 439.712101][T11673] ? __might_fault+0xaa/0x120 [ 439.716831][T11673] ? __lock_acquire+0x7eb0/0x7eb0 [ 439.721942][T11673] should_fail_ex+0x394/0x4c0 [ 439.726709][T11673] _copy_from_user+0x2f/0xe0 [ 439.731378][T11673] ___sys_sendmsg+0x1c7/0x360 [ 439.736118][T11673] ? get_pid_task+0x20/0x1e0 [ 439.740808][T11673] ? __sys_sendmsg+0x2b0/0x2b0 [ 439.745652][T11673] ? __lock_acquire+0x7eb0/0x7eb0 [ 439.750763][T11673] __se_sys_sendmsg+0x1d0/0x2c0 [ 439.755691][T11673] ? __x64_sys_sendmsg+0x80/0x80 [ 439.760710][T11673] ? lockdep_hardirqs_on+0x98/0x150 [ 439.765972][T11673] do_syscall_64+0x55/0xb0 [ 439.770447][T11673] ? clear_bhb_loop+0x40/0x90 [ 439.775184][T11673] ? clear_bhb_loop+0x40/0x90 [ 439.779928][T11673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.785883][T11673] RIP: 0033:0x7fa60a7a94d9 [ 439.790386][T11673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.810053][T11673] RSP: 002b:00007fa60b6b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.818530][T11673] RAX: ffffffffffffffda RBX: 00007fa60aa25fa0 RCX: 00007fa60a7a94d9 [ 439.826564][T11673] RDX: 0000000000000000 RSI: 0000200000000e40 RDI: 0000000000000003 [ 439.834592][T11673] RBP: 00007fa60b6b8090 R08: 0000000000000000 R09: 0000000000000000 [ 439.842631][T11673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.850673][T11673] R13: 00007fa60aa26038 R14: 00007fa60aa25fa0 R15: 00007ffdaab917b8 [ 439.858719][T11673] [ 440.068172][T11678] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1925'. [ 440.285015][T11686] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1929'. [ 440.294802][T11686] hsr_slave_0: left promiscuous mode [ 440.334806][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.341299][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.353705][T11686] hsr_slave_1: left promiscuous mode [ 440.425715][T11686] bridge0: port 3(hsr0) entered disabled state [ 440.534688][T11686] hsr0 (unregistering): left allmulticast mode [ 440.574644][T11686] bridge0: port 3(hsr0) entered disabled state [ 443.021425][T11710] netlink: 'syz.3.1935': attribute type 10 has an invalid length. [ 443.046060][T11710] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1935'. [ 443.441662][T11724] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1942'. [ 446.142160][T11743] netlink: 'syz.2.1946': attribute type 10 has an invalid length. [ 446.150673][T11743] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1946'. [ 446.159874][T11746] netlink: 'syz.3.1945': attribute type 10 has an invalid length. [ 446.169426][T11746] FAULT_INJECTION: forcing a failure. [ 446.169426][T11746] name failslab, interval 1, probability 0, space 0, times 0 [ 446.182334][T11746] CPU: 1 PID: 11746 Comm: syz.3.1945 Not tainted syzkaller #0 [ 446.190026][T11746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 446.200328][T11746] Call Trace: [ 446.203651][T11746] [ 446.206654][T11746] dump_stack_lvl+0x18c/0x250 [ 446.211400][T11746] ? show_regs_print_info+0x20/0x20 [ 446.216744][T11746] ? load_image+0x420/0x420 [ 446.221295][T11746] ? lockdep_unlock+0x146/0x2e0 [ 446.226215][T11746] should_fail_ex+0x394/0x4c0 [ 446.230971][T11746] should_failslab+0x9/0x20 [ 446.235520][T11746] slab_pre_alloc_hook+0x59/0x300 [ 446.240595][T11746] ? switchdev_deferred_enqueue+0x2d/0x240 [ 446.246459][T11746] ? switchdev_deferred_enqueue+0x2d/0x240 [ 446.252329][T11746] __kmem_cache_alloc_node+0x53/0x260 [ 446.257790][T11746] ? switchdev_deferred_enqueue+0x2d/0x240 [ 446.263658][T11746] ? switchdev_deferred_enqueue+0x240/0x240 [ 446.269606][T11746] __kmalloc+0xa7/0x240 [ 446.273829][T11746] ? verify_lock_unused+0x140/0x140 [ 446.279093][T11746] switchdev_deferred_enqueue+0x2d/0x240 [ 446.284793][T11746] switchdev_port_attr_set+0xff/0x2e0 [ 446.290229][T11746] ? switchdev_deferred_process+0x290/0x290 [ 446.296190][T11746] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 446.302238][T11746] ? mark_lock+0x94/0x320 [ 446.306633][T11746] br_set_state+0x376/0x690 [ 446.311205][T11746] ? br_ioctl_stub+0xd50/0xd50 [ 446.316032][T11746] ? do_raw_spin_lock+0x11f/0x2b0 [ 446.321116][T11746] ? __rwlock_init+0x150/0x150 [ 446.325952][T11746] ? br_become_designated_port+0x20/0x250 [ 446.331723][T11746] br_stp_disable_port+0x71/0x1c0 [ 446.336851][T11746] br_stp_disable_bridge+0x81/0x150 [ 446.342106][T11746] br_dev_stop+0x2d/0x180 [ 446.346488][T11746] ? br_dev_open+0x140/0x140 [ 446.351145][T11746] __dev_close_many+0x1d5/0x2b0 [ 446.356054][T11746] ? dev_close_many+0x410/0x410 [ 446.360977][T11746] __dev_change_flags+0x2cd/0x6a0 [ 446.366141][T11746] ? vprintk_emit+0x53d/0x610 [ 446.370877][T11746] ? dev_get_flags+0x1c0/0x1c0 [ 446.375787][T11746] ? printk_sprint+0x460/0x460 [ 446.380610][T11746] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 446.386599][T11746] dev_change_flags+0x7c/0x1a0 [ 446.391421][T11746] do_setlink+0xc1f/0x3f00 [ 446.395934][T11746] ? load_image+0x420/0x420 [ 446.400491][T11746] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 446.406726][T11746] ? stack_trace_save+0xaa/0x100 [ 446.411737][T11746] ? stack_trace_snprint+0xf0/0xf0 [ 446.416964][T11746] ? __nla_validate+0x50/0x50 [ 446.421734][T11746] ? validate_linkmsg+0x719/0x910 [ 446.426816][T11746] rtnl_newlink+0x1848/0x2170 [ 446.431584][T11746] ? rtnl_newlink+0x501/0x2170 [ 446.436409][T11746] ? rtnl_setlink+0x4e0/0x4e0 [ 446.441140][T11746] ? __rwlock_init+0x150/0x150 [ 446.445969][T11746] ? do_raw_spin_unlock+0x121/0x230 [ 446.451226][T11746] ? __mutex_lock+0x978/0xce0 [ 446.455972][T11746] ? __mutex_lock+0x4d2/0xce0 [ 446.460740][T11746] ? rtnl_setlink+0x4e0/0x4e0 [ 446.465488][T11746] rtnetlink_rcv_msg+0x843/0xf90 [ 446.470486][T11746] ? rtnetlink_rcv_msg+0x220/0xf90 [ 446.475660][T11746] ? rtnetlink_bind+0x80/0x80 [ 446.480371][T11746] ? mark_lock+0x94/0x320 [ 446.484764][T11746] ? __lock_acquire+0x135d/0x7eb0 [ 446.489838][T11746] ? is_bpf_text_address+0x28f/0x2a0 [ 446.495193][T11746] ? mark_lock+0x94/0x320 [ 446.499590][T11746] ? mark_lock+0x94/0x320 [ 446.504095][T11746] ? __lock_acquire+0x135d/0x7eb0 [ 446.509277][T11746] ? __stack_depot_save+0x1f/0x660 [ 446.514453][T11746] ? verify_lock_unused+0x140/0x140 [ 446.519718][T11746] ? verify_lock_unused+0x140/0x140 [ 446.524967][T11746] netlink_rcv_skb+0x235/0x4c0 [ 446.529762][T11746] ? rtnetlink_bind+0x80/0x80 [ 446.534506][T11746] ? netlink_ack+0x1160/0x1160 [ 446.539333][T11746] ? __lock_acquire+0x7eb0/0x7eb0 [ 446.544507][T11746] ? net_generic+0x1e/0x240 [ 446.549088][T11746] ? netlink_deliver_tap+0x2e/0x1b0 [ 446.554315][T11746] netlink_unicast+0x856/0x9e0 [ 446.559142][T11746] netlink_sendmsg+0x8d0/0xbf0 [ 446.563961][T11746] ? netlink_getsockopt+0x590/0x590 [ 446.569334][T11746] ? apparmor_socket_sendmsg+0x8e/0x330 [ 446.574989][T11746] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 446.580353][T11746] ? security_socket_sendmsg+0x80/0xa0 [ 446.585927][T11746] ? netlink_getsockopt+0x590/0x590 [ 446.591204][T11746] ____sys_sendmsg+0x61b/0x980 [ 446.596048][T11746] ? __asan_memset+0x22/0x40 [ 446.600710][T11746] ? __sys_sendmsg_sock+0x30/0x30 [ 446.605795][T11746] ? __import_iovec+0x5f2/0x850 [ 446.610722][T11746] ? import_iovec+0x73/0xa0 [ 446.615295][T11746] ___sys_sendmsg+0x2a6/0x360 [ 446.620053][T11746] ? get_pid_task+0x20/0x1e0 [ 446.624731][T11746] ? __sys_sendmsg+0x2b0/0x2b0 [ 446.629589][T11746] ? __lock_acquire+0x7eb0/0x7eb0 [ 446.634713][T11746] __se_sys_sendmsg+0x1d0/0x2c0 [ 446.639734][T11746] ? __x64_sys_sendmsg+0x80/0x80 [ 446.644762][T11746] ? lockdep_hardirqs_on+0x98/0x150 [ 446.650073][T11746] do_syscall_64+0x55/0xb0 [ 446.654569][T11746] ? clear_bhb_loop+0x40/0x90 [ 446.659316][T11746] ? clear_bhb_loop+0x40/0x90 [ 446.664093][T11746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.670108][T11746] RIP: 0033:0x7fa60a7a94d9 [ 446.674671][T11746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.694343][T11746] RSP: 002b:00007fa60b6b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.702820][T11746] RAX: ffffffffffffffda RBX: 00007fa60aa25fa0 RCX: 00007fa60a7a94d9 [ 446.710850][T11746] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 446.718882][T11746] RBP: 00007fa60b6b8090 R08: 0000000000000000 R09: 0000000000000000 [ 446.726913][T11746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.734941][T11746] R13: 00007fa60aa26038 R14: 00007fa60aa25fa0 R15: 00007ffdaab917b8 [ 446.743009][T11746] [ 446.746177][T11746] bridge0: error setting offload STP state on port 1(bridge_slave_0) [ 446.788734][T11757] netlink: 'syz.0.1951': attribute type 10 has an invalid length. [ 446.964443][T11773] netlink: 'syz.0.1953': attribute type 10 has an invalid length. [ 446.979170][T11773] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1953'. [ 447.634994][T11787] netlink: 'syz.1.1958': attribute type 10 has an invalid length. [ 447.663998][T11787] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1958'. [ 448.206601][T11792] netlink: 'syz.3.1961': attribute type 10 has an invalid length. [ 448.214828][T11792] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1961'. [ 452.085024][T11819] veth0_to_bond: entered promiscuous mode [ 452.130319][T11825] netlink: 'syz.1.1974': attribute type 10 has an invalid length. [ 452.154818][T11825] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1974'. [ 452.226758][T11833] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 452.278488][T11833] syzkaller0: entered promiscuous mode [ 452.284300][T11833] syzkaller0: entered allmulticast mode [ 454.265951][T11847] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1977'. [ 454.278141][T11848] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 454.317404][T11848] syzkaller0: entered promiscuous mode [ 454.322961][T11848] syzkaller0: entered allmulticast mode [ 454.516409][T11862] netlink: 'syz.0.1980': attribute type 9 has an invalid length. [ 454.526064][T11862] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1980'. [ 457.388830][T11874] netlink: 'syz.2.1985': attribute type 10 has an invalid length. [ 457.396812][T11874] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1985'. [ 458.598530][T11912] netlink: 'syz.0.1999': attribute type 10 has an invalid length. [ 458.612487][T11912] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1999'. [ 458.846433][T11919] tap0: tun_chr_ioctl cmd 1074025677 [ 458.862665][T11919] tap0: linktype set to 776 [ 458.872540][T11916] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 458.959600][T11916] syzkaller0: entered promiscuous mode [ 458.965475][T11916] syzkaller0: entered allmulticast mode [ 459.040538][T11919] tap0: tun_chr_ioctl cmd 1074025681 [ 461.094368][T11948] netlink: 'syz.3.2010': attribute type 21 has an invalid length. [ 461.103751][T11948] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.2010'. [ 461.385093][T11953] netlink: 'syz.3.2011': attribute type 10 has an invalid length. [ 461.411180][T11953] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2011'. [ 462.353620][T11974] bridge0: port 2(batadv0) entered blocking state [ 462.365375][T11974] bridge0: port 2(batadv0) entered disabled state [ 462.374647][T11974] batadv0: entered allmulticast mode [ 462.384071][T11974] batadv0: entered promiscuous mode [ 462.691745][ T166] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 462.701686][ T166] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 462.752848][T11983] netlink: 'syz.2.2022': attribute type 10 has an invalid length. [ 462.764955][T11983] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2022'. [ 463.299772][T11993] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 463.396107][T11993] syzkaller0: entered promiscuous mode [ 463.412454][T11993] syzkaller0: entered allmulticast mode [ 465.819236][T12001] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 465.837876][T12001] syzkaller0: entered promiscuous mode [ 465.843551][T12001] syzkaller0: entered allmulticast mode [ 465.964655][T12017] netlink: 'syz.0.2034': attribute type 10 has an invalid length. [ 465.975441][T12017] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2034'. [ 466.249796][ T5797] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 469.496080][T12044] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2043'. [ 469.507314][T12047] netlink: 'syz.2.2043': attribute type 39 has an invalid length. [ 469.620473][T12057] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 469.644241][T12057] syzkaller0: entered promiscuous mode [ 469.651970][T12057] syzkaller0: entered allmulticast mode [ 469.661023][T12062] netlink: 'syz.3.2045': attribute type 10 has an invalid length. [ 469.701818][T12062] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2045'. [ 471.839540][T12091] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2053'. [ 473.822085][T12083] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 473.841237][T12083] syzkaller0: entered promiscuous mode [ 473.846938][T12083] syzkaller0: entered allmulticast mode [ 473.862397][T12091] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2053'. [ 474.061575][T12100] netlink: 'syz.2.2056': attribute type 10 has an invalid length. [ 474.071471][T12100] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2056'. [ 476.526095][T12129] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 476.557573][T12129] syzkaller0: entered promiscuous mode [ 476.563247][T12129] syzkaller0: entered allmulticast mode [ 479.380562][T12142] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 479.402301][T12142] syzkaller0: entered promiscuous mode [ 479.408013][T12142] syzkaller0: entered allmulticast mode [ 479.471520][T12144] netlink: 'syz.1.2068': attribute type 10 has an invalid length. [ 479.479971][T12144] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2068'. [ 479.536838][T12169] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 479.559557][T12169] syzkaller0: entered promiscuous mode [ 479.565117][T12169] syzkaller0: entered allmulticast mode [ 484.350478][T12205] netlink: 'syz.1.2083': attribute type 10 has an invalid length. [ 484.370196][T12205] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2083'. [ 485.650159][T12226] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 485.789728][T12226] syzkaller0: entered promiscuous mode [ 485.806053][T12226] syzkaller0: entered allmulticast mode [ 488.116529][T12257] netlink: 'syz.2.2100': attribute type 10 has an invalid length. [ 488.146304][T12257] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2100'. [ 488.247684][T12262] netlink: 'syz.3.2103': attribute type 9 has an invalid length. [ 488.257583][T12262] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.2103'. [ 489.583685][T12272] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 489.710092][T12272] syzkaller0: entered promiscuous mode [ 489.716111][T12272] syzkaller0: entered allmulticast mode [ 491.988992][T12284] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 492.011170][T12284] syzkaller0: entered promiscuous mode [ 492.019394][T12284] syzkaller0: entered allmulticast mode [ 492.101102][T12299] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 492.119928][T12299] syzkaller0: entered promiscuous mode [ 492.125727][T12299] syzkaller0: entered allmulticast mode [ 492.133200][T12303] netlink: 'syz.1.2114': attribute type 10 has an invalid length. [ 492.146102][T12303] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2114'. [ 495.944716][T12328] netlink: 'syz.2.2123': attribute type 9 has an invalid length. [ 495.953154][T12328] netlink: 463 bytes leftover after parsing attributes in process `syz.2.2123'. [ 497.481673][T12332] netlink: 'syz.2.2125': attribute type 10 has an invalid length. [ 497.491349][T12332] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2125'. [ 497.704947][T12339] netlink: 'syz.2.2128': attribute type 9 has an invalid length. [ 497.722681][T12339] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2128'. [ 497.737706][T12337] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 497.833730][T12337] syzkaller0: entered promiscuous mode [ 497.840701][T12337] syzkaller0: entered allmulticast mode [ 498.928100][T12370] netlink: 'syz.1.2134': attribute type 9 has an invalid length. [ 498.985539][T12370] netlink: 463 bytes leftover after parsing attributes in process `syz.1.2134'. [ 500.594357][T12358] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 500.612405][T12358] syzkaller0: entered promiscuous mode [ 500.621538][T12358] syzkaller0: entered allmulticast mode [ 500.784945][T12382] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 500.791570][T12382] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 500.836961][T12378] netlink: 'syz.3.2136': attribute type 10 has an invalid length. [ 500.865742][T12378] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2136'. [ 501.244081][T12389] netlink: 'syz.1.2141': attribute type 9 has an invalid length. [ 501.257641][T12389] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2141'. [ 501.752258][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.758950][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.669342][T12414] netlink: 'syz.1.2148': attribute type 10 has an invalid length. [ 503.696661][T12414] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2148'. [ 503.732878][T12407] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 503.911979][T12407] syzkaller0: entered promiscuous mode [ 503.918460][T12407] syzkaller0: entered allmulticast mode [ 504.118471][T12426] FAULT_INJECTION: forcing a failure. [ 504.118471][T12426] name failslab, interval 1, probability 0, space 0, times 0 [ 504.139195][T12426] CPU: 0 PID: 12426 Comm: syz.3.2151 Not tainted syzkaller #0 [ 504.146744][T12426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 504.157030][T12426] Call Trace: [ 504.160369][T12426] [ 504.163389][T12426] dump_stack_lvl+0x18c/0x250 [ 504.168224][T12426] ? show_regs_print_info+0x20/0x20 [ 504.173493][T12426] ? load_image+0x420/0x420 [ 504.178149][T12426] ? __might_sleep+0xe0/0xe0 [ 504.182803][T12426] ? __lock_acquire+0x7eb0/0x7eb0 [ 504.187898][T12426] should_fail_ex+0x394/0x4c0 [ 504.192658][T12426] should_failslab+0x9/0x20 [ 504.197222][T12426] slab_pre_alloc_hook+0x59/0x300 [ 504.202343][T12426] ? __get_vm_area_node+0x125/0x370 [ 504.207704][T12426] __kmem_cache_alloc_node+0x53/0x260 [ 504.213396][T12426] ? __get_vm_area_node+0x125/0x370 [ 504.218669][T12426] kmalloc_node_trace+0x26/0xe0 [ 504.223603][T12426] __get_vm_area_node+0x125/0x370 [ 504.228796][T12426] __vmalloc_node_range+0x36f/0x1320 [ 504.234150][T12426] ? netlink_sendmsg+0x602/0xbf0 [ 504.239152][T12426] ? netlink_insert+0x10d0/0x13e0 [ 504.244268][T12426] ? free_vm_area+0x50/0x50 [ 504.248850][T12426] ? netlink_sendmsg+0x602/0xbf0 [ 504.253847][T12426] vmalloc+0x79/0x90 [ 504.257806][T12426] ? netlink_sendmsg+0x602/0xbf0 [ 504.262797][T12426] netlink_sendmsg+0x602/0xbf0 [ 504.267628][T12426] ? netlink_getsockopt+0x590/0x590 [ 504.272881][T12426] ? apparmor_socket_sendmsg+0x8e/0x330 [ 504.278575][T12426] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 504.283896][T12426] ? security_socket_sendmsg+0x80/0xa0 [ 504.289399][T12426] ? netlink_getsockopt+0x590/0x590 [ 504.294680][T12426] ____sys_sendmsg+0x61b/0x980 [ 504.299488][T12426] ? __asan_memset+0x22/0x40 [ 504.304131][T12426] ? __sys_sendmsg_sock+0x30/0x30 [ 504.309281][T12426] ? __import_iovec+0x5f2/0x850 [ 504.314173][T12426] ? import_iovec+0x73/0xa0 [ 504.318806][T12426] ___sys_sendmsg+0x2a6/0x360 [ 504.323516][T12426] ? get_pid_task+0x20/0x1e0 [ 504.328170][T12426] ? __sys_sendmsg+0x2b0/0x2b0 [ 504.333177][T12426] ? __lock_acquire+0x7eb0/0x7eb0 [ 504.338252][T12426] __se_sys_sendmsg+0x1d0/0x2c0 [ 504.343137][T12426] ? __x64_sys_sendmsg+0x80/0x80 [ 504.348146][T12426] ? lockdep_hardirqs_on+0x98/0x150 [ 504.353378][T12426] do_syscall_64+0x55/0xb0 [ 504.357848][T12426] ? clear_bhb_loop+0x40/0x90 [ 504.362557][T12426] ? clear_bhb_loop+0x40/0x90 [ 504.367270][T12426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 504.373284][T12426] RIP: 0033:0x7fa60a7a94d9 [ 504.377731][T12426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.397716][T12426] RSP: 002b:00007fa60b6b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.406339][T12426] RAX: ffffffffffffffda RBX: 00007fa60aa25fa0 RCX: 00007fa60a7a94d9 [ 504.414352][T12426] RDX: 0000000000000000 RSI: 0000200000000980 RDI: 0000000000000003 [ 504.422443][T12426] RBP: 00007fa60b6b8090 R08: 0000000000000000 R09: 0000000000000000 [ 504.430468][T12426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.438478][T12426] R13: 00007fa60aa26038 R14: 00007fa60aa25fa0 R15: 00007ffdaab917b8 [ 504.446499][T12426] [ 504.469761][T12426] syz.3.2151: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 504.513559][T12426] CPU: 1 PID: 12426 Comm: syz.3.2151 Not tainted syzkaller #0 [ 504.521107][T12426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 504.531217][T12426] Call Trace: [ 504.534545][T12426] [ 504.537519][T12426] dump_stack_lvl+0x18c/0x250 [ 504.542270][T12426] ? show_regs_print_info+0x20/0x20 [ 504.547556][T12426] ? load_image+0x420/0x420 [ 504.552125][T12426] ? __rcu_read_unlock+0x7c/0xd0 [ 504.557108][T12426] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 504.563580][T12426] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 504.570162][T12426] warn_alloc+0x246/0x340 [ 504.574541][T12426] ? __get_vm_area_node+0x125/0x370 [ 504.579812][T12426] ? zone_watermark_ok_safe+0x230/0x230 [ 504.585414][T12426] ? rcu_is_watching+0x15/0xb0 [ 504.590240][T12426] ? __get_vm_area_node+0x356/0x370 [ 504.595508][T12426] __vmalloc_node_range+0x394/0x1320 [ 504.600877][T12426] ? netlink_insert+0x10d0/0x13e0 [ 504.605999][T12426] ? free_vm_area+0x50/0x50 [ 504.610665][T12426] ? netlink_sendmsg+0x602/0xbf0 [ 504.615663][T12426] vmalloc+0x79/0x90 [ 504.619626][T12426] ? netlink_sendmsg+0x602/0xbf0 [ 504.624614][T12426] netlink_sendmsg+0x602/0xbf0 [ 504.629456][T12426] ? netlink_getsockopt+0x590/0x590 [ 504.634707][T12426] ? apparmor_socket_sendmsg+0x8e/0x330 [ 504.640348][T12426] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 504.645703][T12426] ? security_socket_sendmsg+0x80/0xa0 [ 504.651213][T12426] ? netlink_getsockopt+0x590/0x590 [ 504.656458][T12426] ____sys_sendmsg+0x61b/0x980 [ 504.661327][T12426] ? __asan_memset+0x22/0x40 [ 504.665985][T12426] ? __sys_sendmsg_sock+0x30/0x30 [ 504.671057][T12426] ? __import_iovec+0x5f2/0x850 [ 504.675958][T12426] ? import_iovec+0x73/0xa0 [ 504.680509][T12426] ___sys_sendmsg+0x2a6/0x360 [ 504.685218][T12426] ? get_pid_task+0x20/0x1e0 [ 504.689846][T12426] ? __sys_sendmsg+0x2b0/0x2b0 [ 504.694670][T12426] ? __lock_acquire+0x7eb0/0x7eb0 [ 504.699752][T12426] __se_sys_sendmsg+0x1d0/0x2c0 [ 504.704665][T12426] ? __x64_sys_sendmsg+0x80/0x80 [ 504.709649][T12426] ? lockdep_hardirqs_on+0x98/0x150 [ 504.714986][T12426] do_syscall_64+0x55/0xb0 [ 504.719441][T12426] ? clear_bhb_loop+0x40/0x90 [ 504.724160][T12426] ? clear_bhb_loop+0x40/0x90 [ 504.728909][T12426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 504.734843][T12426] RIP: 0033:0x7fa60a7a94d9 [ 504.739302][T12426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.759125][T12426] RSP: 002b:00007fa60b6b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.767611][T12426] RAX: ffffffffffffffda RBX: 00007fa60aa25fa0 RCX: 00007fa60a7a94d9 [ 504.775622][T12426] RDX: 0000000000000000 RSI: 0000200000000980 RDI: 0000000000000003 [ 504.783621][T12426] RBP: 00007fa60b6b8090 R08: 0000000000000000 R09: 0000000000000000 [ 504.791644][T12426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.799644][T12426] R13: 00007fa60aa26038 R14: 00007fa60aa25fa0 R15: 00007ffdaab917b8 [ 504.807689][T12426] [ 504.824887][T12426] Mem-Info: [ 504.829799][T12426] active_anon:5226 inactive_anon:0 isolated_anon:0 [ 504.829799][T12426] active_file:17768 inactive_file:40125 isolated_file:0 [ 504.829799][T12426] unevictable:768 dirty:144 writeback:0 [ 504.829799][T12426] slab_reclaimable:10110 slab_unreclaimable:97300 [ 504.829799][T12426] mapped:24717 shmem:1364 pagetables:546 [ 504.829799][T12426] sec_pagetables:0 bounce:0 [ 504.829799][T12426] kernel_misc_reclaimable:0 [ 504.829799][T12426] free:1340150 free_pcp:10041 free_cma:0 [ 504.880639][T12426] Node 0 active_anon:20904kB inactive_anon:0kB active_file:71072kB inactive_file:160296kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100468kB dirty:576kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10436kB pagetables:2184kB sec_pagetables:0kB all_unreclaimable? no [ 504.918248][T12426] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 504.958401][T12426] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 505.003298][T12426] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 505.009834][T12426] Node 0 DMA32 free:1449348kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:20860kB inactive_anon:0kB active_file:71072kB inactive_file:159476kB unevictable:1536kB writepending:576kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:15580kB local_pcp:8388kB free_cma:0kB [ 505.044902][T12426] lowmem_reserve[]: 0 0 0 0 0 [ 505.063630][T12426] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 505.092079][T12426] lowmem_reserve[]: 0 0 0 0 0 [ 505.097217][T12426] Node 1 Normal free:3895892kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24512kB local_pcp:11840kB free_cma:0kB [ 505.128127][T12426] lowmem_reserve[]: 0 0 0 0 0 [ 505.132931][T12426] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 505.161525][T12426] Node 0 DMA32: 809*4kB (UM) 1439*8kB (UME) 1205*16kB (UME) 639*32kB (UME) 221*64kB (UME) 135*128kB (ME) 26*256kB (UME) 7*512kB (UM) 11*1024kB (UM) 5*2048kB (UME) 325*4096kB (M) = 1448844kB [ 505.182126][T12426] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 505.195267][T12426] Node 1 Normal: 211*4kB (UE) 43*8kB (UME) 39*16kB (UME) 58*32kB (UME) 20*64kB (UE) 4*128kB (UM) 1*256kB (U) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3895892kB [ 505.223503][T12426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.233680][T12426] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 505.255906][T12426] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.307916][T12426] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 505.345928][T12426] 59257 total pagecache pages [ 505.350700][T12426] 0 pages in swap cache [ 505.354896][T12426] Free swap = 124996kB [ 505.381713][T12426] Total swap = 124996kB [ 505.399844][T12426] 2097051 pages RAM [ 505.403735][T12426] 0 pages HighMem/MovableOnly [ 505.419241][T12426] 421729 pages reserved [ 505.423486][T12426] 0 pages cma reserved [ 505.574551][T12447] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.2157'. [ 507.308995][T12439] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 507.325718][T12439] syzkaller0: entered promiscuous mode [ 507.335867][T12439] syzkaller0: entered allmulticast mode [ 507.355947][T12457] netlink: 'syz.0.2159': attribute type 10 has an invalid length. [ 507.386120][T12457] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2159'. [ 507.620700][T12467] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2162'. [ 510.538531][T12467] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2162'. [ 510.602676][T12492] syzkaller0: entered promiscuous mode [ 510.608831][T12492] syzkaller0: entered allmulticast mode [ 510.733812][T12501] netlink: 'syz.1.2170': attribute type 10 has an invalid length. [ 510.758101][T12501] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2170'. [ 512.691194][T12518] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 512.721026][T12518] syzkaller0: entered promiscuous mode [ 512.736055][T12518] syzkaller0: entered allmulticast mode [ 515.985062][T12539] netlink: 'syz.3.2180': attribute type 10 has an invalid length. [ 515.993256][T12539] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2180'. [ 516.045923][T12550] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 516.082904][T12550] syzkaller0: entered promiscuous mode [ 516.088765][T12550] syzkaller0: entered allmulticast mode [ 518.795200][T12557] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 518.894680][T12557] syzkaller0: entered promiscuous mode [ 518.901432][T12557] syzkaller0: entered allmulticast mode [ 518.980108][T12568] netlink: 'syz.1.2187': attribute type 22 has an invalid length. [ 518.989406][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2187'. [ 519.013662][T12580] netlink: 'syz.2.2192': attribute type 10 has an invalid length. [ 519.023016][T12580] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2192'. [ 521.235942][T12597] netlink: 'syz.2.2199': attribute type 21 has an invalid length. [ 521.412778][T12605] netlink: 'syz.0.2203': attribute type 10 has an invalid length. [ 521.421371][T12605] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2203'. [ 522.058524][T12608] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 522.104089][T12608] syzkaller0: entered promiscuous mode [ 522.119346][T12608] syzkaller0: entered allmulticast mode [ 524.134705][T12627] netlink: 'syz.0.2218': attribute type 27 has an invalid length. [ 524.156653][T12627] netlink: 'syz.0.2218': attribute type 25 has an invalid length. [ 524.648886][T12636] netlink: 'syz.0.2213': attribute type 10 has an invalid length. [ 524.658668][T12636] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2213'. [ 524.773203][T12634] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 524.872516][T12634] syzkaller0: entered promiscuous mode [ 524.878567][T12634] syzkaller0: entered allmulticast mode [ 527.114064][T12659] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2222'. [ 527.124684][T12659] bridge_slave_1: default FDB implementation only supports local addresses [ 527.196485][T12667] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 527.229916][T12667] syzkaller0: entered promiscuous mode [ 527.235498][T12667] syzkaller0: entered allmulticast mode [ 527.283194][T12672] FAULT_INJECTION: forcing a failure. [ 527.283194][T12672] name failslab, interval 1, probability 0, space 0, times 0 [ 527.306385][T12672] CPU: 0 PID: 12672 Comm: syz.0.2223 Not tainted syzkaller #0 [ 527.314117][T12672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 527.324486][T12672] Call Trace: [ 527.327816][T12672] [ 527.330792][T12672] dump_stack_lvl+0x18c/0x250 [ 527.335565][T12672] ? show_regs_print_info+0x20/0x20 [ 527.340922][T12672] ? load_image+0x420/0x420 [ 527.345494][T12672] ? __might_sleep+0xe0/0xe0 [ 527.350152][T12672] ? __lock_acquire+0x7eb0/0x7eb0 [ 527.355251][T12672] should_fail_ex+0x394/0x4c0 [ 527.359984][T12672] should_failslab+0x9/0x20 [ 527.364537][T12672] slab_pre_alloc_hook+0x59/0x300 [ 527.369625][T12672] ? __get_vm_area_node+0x125/0x370 [ 527.374883][T12672] __kmem_cache_alloc_node+0x53/0x260 [ 527.380299][T12672] ? __get_vm_area_node+0x125/0x370 [ 527.385552][T12672] kmalloc_node_trace+0x26/0xe0 [ 527.390493][T12672] __get_vm_area_node+0x125/0x370 [ 527.395607][T12672] __vmalloc_node_range+0x36f/0x1320 [ 527.400945][T12672] ? netlink_sendmsg+0x602/0xbf0 [ 527.405954][T12672] ? netlink_insert+0x10d0/0x13e0 [ 527.411076][T12672] ? free_vm_area+0x50/0x50 [ 527.415666][T12672] ? netlink_sendmsg+0x602/0xbf0 [ 527.420665][T12672] vmalloc+0x79/0x90 [ 527.424618][T12672] ? netlink_sendmsg+0x602/0xbf0 [ 527.429608][T12672] netlink_sendmsg+0x602/0xbf0 [ 527.434423][T12672] ? netlink_getsockopt+0x590/0x590 [ 527.439669][T12672] ? apparmor_socket_sendmsg+0x8e/0x330 [ 527.445300][T12672] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 527.450637][T12672] ? security_socket_sendmsg+0x80/0xa0 [ 527.456148][T12672] ? netlink_getsockopt+0x590/0x590 [ 527.461473][T12672] ____sys_sendmsg+0x61b/0x980 [ 527.466289][T12672] ? __asan_memset+0x22/0x40 [ 527.470928][T12672] ? __sys_sendmsg_sock+0x30/0x30 [ 527.476010][T12672] ? __import_iovec+0x5f2/0x850 [ 527.480932][T12672] ? import_iovec+0x73/0xa0 [ 527.485496][T12672] ___sys_sendmsg+0x2a6/0x360 [ 527.490363][T12672] ? __sys_sendmsg+0x2b0/0x2b0 [ 527.495242][T12672] __se_sys_sendmsg+0x1d0/0x2c0 [ 527.500146][T12672] ? __x64_sys_sendmsg+0x80/0x80 [ 527.505139][T12672] ? syscall_enter_from_user_mode+0x2e/0x80 [ 527.511089][T12672] do_syscall_64+0x55/0xb0 [ 527.515563][T12672] ? clear_bhb_loop+0x40/0x90 [ 527.520291][T12672] ? clear_bhb_loop+0x40/0x90 [ 527.525022][T12672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.530974][T12672] RIP: 0033:0x7f3ba23a94d9 [ 527.535608][T12672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.555259][T12672] RSP: 002b:00007f3ba3244028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.563723][T12672] RAX: ffffffffffffffda RBX: 00007f3ba2625fa0 RCX: 00007f3ba23a94d9 [ 527.571931][T12672] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000007 [ 527.579940][T12672] RBP: 00007f3ba3244090 R08: 0000000000000000 R09: 0000000000000000 [ 527.587968][T12672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.595984][T12672] R13: 00007f3ba2626038 R14: 00007f3ba2625fa0 R15: 00007ffd3692b378 [ 527.604022][T12672] [ 527.623557][T12672] syz.0.2223: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 527.643738][T12672] CPU: 1 PID: 12672 Comm: syz.0.2223 Not tainted syzkaller #0 [ 527.651279][T12672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 527.661400][T12672] Call Trace: [ 527.664760][T12672] [ 527.667748][T12672] dump_stack_lvl+0x18c/0x250 [ 527.672499][T12672] ? show_regs_print_info+0x20/0x20 [ 527.677758][T12672] ? load_image+0x420/0x420 [ 527.682323][T12672] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 527.688806][T12672] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 527.695388][T12672] warn_alloc+0x246/0x340 [ 527.699776][T12672] ? __get_vm_area_node+0x125/0x370 [ 527.705040][T12672] ? zone_watermark_ok_safe+0x230/0x230 [ 527.710641][T12672] ? rcu_is_watching+0x15/0xb0 [ 527.715460][T12672] ? __get_vm_area_node+0x356/0x370 [ 527.720712][T12672] __vmalloc_node_range+0x394/0x1320 [ 527.726052][T12672] ? netlink_insert+0x10d0/0x13e0 [ 527.731142][T12672] ? free_vm_area+0x50/0x50 [ 527.735687][T12672] ? netlink_sendmsg+0x602/0xbf0 [ 527.740653][T12672] vmalloc+0x79/0x90 [ 527.744587][T12672] ? netlink_sendmsg+0x602/0xbf0 [ 527.749556][T12672] netlink_sendmsg+0x602/0xbf0 [ 527.754354][T12672] ? netlink_getsockopt+0x590/0x590 [ 527.759581][T12672] ? apparmor_socket_sendmsg+0x8e/0x330 [ 527.765163][T12672] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 527.770485][T12672] ? security_socket_sendmsg+0x80/0xa0 [ 527.776167][T12672] ? netlink_getsockopt+0x590/0x590 [ 527.781396][T12672] ____sys_sendmsg+0x61b/0x980 [ 527.786204][T12672] ? __asan_memset+0x22/0x40 [ 527.790832][T12672] ? __sys_sendmsg_sock+0x30/0x30 [ 527.795893][T12672] ? __import_iovec+0x5f2/0x850 [ 527.800787][T12672] ? import_iovec+0x73/0xa0 [ 527.805341][T12672] ___sys_sendmsg+0x2a6/0x360 [ 527.810071][T12672] ? __sys_sendmsg+0x2b0/0x2b0 [ 527.815000][T12672] __se_sys_sendmsg+0x1d0/0x2c0 [ 527.819889][T12672] ? __x64_sys_sendmsg+0x80/0x80 [ 527.824981][T12672] ? syscall_enter_from_user_mode+0x2e/0x80 [ 527.831099][T12672] do_syscall_64+0x55/0xb0 [ 527.835552][T12672] ? clear_bhb_loop+0x40/0x90 [ 527.840378][T12672] ? clear_bhb_loop+0x40/0x90 [ 527.845085][T12672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.851014][T12672] RIP: 0033:0x7f3ba23a94d9 [ 527.855563][T12672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.875285][T12672] RSP: 002b:00007f3ba3244028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.883725][T12672] RAX: ffffffffffffffda RBX: 00007f3ba2625fa0 RCX: 00007f3ba23a94d9 [ 527.891721][T12672] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000007 [ 527.899718][T12672] RBP: 00007f3ba3244090 R08: 0000000000000000 R09: 0000000000000000 [ 527.907713][T12672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.915707][T12672] R13: 00007f3ba2626038 R14: 00007f3ba2625fa0 R15: 00007ffd3692b378 [ 527.923743][T12672] [ 527.949307][T12672] Mem-Info: [ 527.952980][T12672] active_anon:5197 inactive_anon:0 isolated_anon:0 [ 527.952980][T12672] active_file:17807 inactive_file:40133 isolated_file:0 [ 527.952980][T12672] unevictable:768 dirty:209 writeback:0 [ 527.952980][T12672] slab_reclaimable:10140 slab_unreclaimable:95916 [ 527.952980][T12672] mapped:24592 shmem:1364 pagetables:525 [ 527.952980][T12672] sec_pagetables:0 bounce:0 [ 527.952980][T12672] kernel_misc_reclaimable:0 [ 527.952980][T12672] free:1339098 free_pcp:12200 free_cma:0 [ 528.004437][T12672] Node 0 active_anon:20788kB inactive_anon:0kB active_file:71228kB inactive_file:160328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98368kB dirty:836kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10188kB pagetables:2100kB sec_pagetables:0kB all_unreclaimable? no [ 528.043526][T12677] netlink: 'syz.3.2225': attribute type 10 has an invalid length. [ 528.047516][T12672] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 528.073417][T12677] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2225'. [ 528.097544][T12672] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 528.156801][T12672] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 528.162873][T12672] Node 0 DMA32 free:1445140kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:20656kB inactive_anon:0kB active_file:71228kB inactive_file:159516kB unevictable:1536kB writepending:736kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:24564kB local_pcp:15964kB free_cma:0kB [ 528.229349][T12672] lowmem_reserve[]: 0 0 0 0 0 [ 528.234276][T12672] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 528.263932][T12672] lowmem_reserve[]: 0 0 0 0 0 [ 528.289506][T12672] Node 1 Normal free:3895892kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24512kB local_pcp:11840kB free_cma:0kB [ 528.327458][T12672] lowmem_reserve[]: 0 0 0 0 0 [ 528.345915][T12672] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 528.372555][T12672] Node 0 DMA32: 815*4kB (UM) 1189*8kB (UM) 1153*16kB (UME) 553*32kB (UME) 246*64kB (UME) 137*128kB (UME) 26*256kB (UME) 7*512kB (UM) 11*1024kB (UM) 5*2048kB (UME) 325*4096kB (M) = 1445140kB [ 528.415934][T12672] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 528.440578][T12672] Node 1 Normal: 211*4kB (UE) 43*8kB (UME) 39*16kB (UME) 58*32kB (UME) 20*64kB (UE) 4*128kB (UM) 1*256kB (U) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3895892kB [ 528.464484][T12672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 528.474697][T12672] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 528.486939][T12672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 528.500550][T12672] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 528.511614][T12672] 59306 total pagecache pages [ 528.517884][T12672] 0 pages in swap cache [ 528.522268][T12672] Free swap = 124996kB [ 528.528241][T12672] Total swap = 124996kB [ 528.532622][T12672] 2097051 pages RAM [ 528.540678][T12672] 0 pages HighMem/MovableOnly [ 528.551039][T12672] 421729 pages reserved [ 528.557455][T12672] 0 pages cma reserved [ 530.724920][T12695] netlink: 'syz.2.2232': attribute type 12 has an invalid length. [ 530.732963][T12695] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2232'. [ 530.778285][T12706] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 530.824617][T12706] syzkaller0: entered promiscuous mode [ 530.830226][T12706] syzkaller0: entered allmulticast mode [ 533.582376][T12714] netlink: 'syz.1.2236': attribute type 10 has an invalid length. [ 533.590509][T12714] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2236'. [ 533.742308][ T5797] Bluetooth: hci3: unexpected event 0x10 length: 15 > 1 [ 533.743841][ T5797] Bluetooth: hci3: hardware error 0x0f [ 533.821406][T12736] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2245'. [ 533.855395][T12736] bridge_slave_1: default FDB implementation only supports local addresses [ 533.893765][T12734] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 534.071124][T12734] syzkaller0: entered promiscuous mode [ 534.103371][T12734] syzkaller0: entered allmulticast mode [ 534.170857][T12739] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2245'. [ 535.826874][ T5797] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 536.805085][T12757] netlink: 'syz.0.2252': attribute type 10 has an invalid length. [ 536.813330][T12757] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2252'. [ 536.852798][T12768] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 536.903578][T12768] syzkaller0: entered promiscuous mode [ 536.915915][T12768] syzkaller0: entered allmulticast mode [ 536.943916][T12776] netlink: 'syz.0.2262': attribute type 10 has an invalid length. [ 536.954352][T12776] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2262'. [ 538.967889][T12795] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 538.994370][T12795] syzkaller0: entered promiscuous mode [ 539.000467][T12795] syzkaller0: entered allmulticast mode [ 541.460135][T12819] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 541.491224][T12819] syzkaller0: entered promiscuous mode [ 541.496888][T12819] syzkaller0: entered allmulticast mode [ 541.504094][T12824] netlink: 'syz.3.2265': attribute type 10 has an invalid length. [ 541.525901][T12824] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2265'. [ 544.242220][T12856] netlink: 'syz.2.2277': attribute type 10 has an invalid length. [ 544.250693][T12856] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2277'. [ 544.347749][T12852] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 544.491537][T12852] syzkaller0: entered promiscuous mode [ 544.506032][T12852] syzkaller0: entered allmulticast mode [ 546.961374][T12888] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 546.982394][T12888] syzkaller0: entered promiscuous mode [ 546.992522][T12888] syzkaller0: entered allmulticast mode [ 547.015983][T12895] netlink: 'syz.1.2288': attribute type 10 has an invalid length. [ 547.037578][T12895] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2288'. [ 549.609033][T12927] netlink: 'syz.3.2300': attribute type 10 has an invalid length. [ 549.620263][T12927] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2300'. [ 549.686790][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2303'. [ 549.894743][T12928] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 549.985080][T12928] syzkaller0: entered promiscuous mode [ 549.991688][T12928] syzkaller0: entered allmulticast mode [ 552.500588][T12965] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 552.554623][T12965] syzkaller0: entered promiscuous mode [ 552.576138][T12965] syzkaller0: entered allmulticast mode [ 552.658399][T12972] netlink: 'syz.3.2312': attribute type 10 has an invalid length. [ 552.676018][T12972] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2312'. [ 553.439282][T12984] FAULT_INJECTION: forcing a failure. [ 553.439282][T12984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.456205][T12984] CPU: 1 PID: 12984 Comm: syz.3.2315 Not tainted syzkaller #0 [ 553.463816][T12984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 553.474117][T12984] Call Trace: [ 553.477528][T12984] [ 553.480548][T12984] dump_stack_lvl+0x18c/0x250 [ 553.485361][T12984] ? show_regs_print_info+0x20/0x20 [ 553.490681][T12984] ? load_image+0x420/0x420 [ 553.495327][T12984] ? __lock_acquire+0x7eb0/0x7eb0 [ 553.500762][T12984] should_fail_ex+0x394/0x4c0 [ 553.505575][T12984] _copy_from_user+0x2f/0xe0 [ 553.510305][T12984] bpf_prog_test_run_skb+0x267/0x18f0 [ 553.515808][T12984] ? __fget_files+0x28/0x460 [ 553.520521][T12984] ? __fget_files+0x3fc/0x460 [ 553.525369][T12984] ? cpu_online+0x60/0x60 [ 553.529819][T12984] bpf_prog_test_run+0x31f/0x390 [ 553.534910][T12984] __sys_bpf+0x49d/0x890 [ 553.539283][T12984] ? bpf_link_show_fdinfo+0x560/0x560 [ 553.544883][T12984] ? lock_chain_count+0x20/0x20 [ 553.549909][T12984] __x64_sys_bpf+0x7c/0x90 [ 553.554548][T12984] do_syscall_64+0x55/0xb0 [ 553.559067][T12984] ? clear_bhb_loop+0x40/0x90 [ 553.563851][T12984] ? clear_bhb_loop+0x40/0x90 [ 553.568660][T12984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.574663][T12984] RIP: 0033:0x7fa60a7a94d9 [ 553.579194][T12984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.599000][T12984] RSP: 002b:00007fa60b697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 553.607512][T12984] RAX: ffffffffffffffda RBX: 00007fa60aa26090 RCX: 00007fa60a7a94d9 [ 553.615576][T12984] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 553.623612][T12984] RBP: 00007fa60b697090 R08: 0000000000000000 R09: 0000000000000000 [ 553.631672][T12984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.639900][T12984] R13: 00007fa60aa26128 R14: 00007fa60aa26090 R15: 00007ffdaab917b8 [ 553.648043][T12984] [ 556.899636][T13007] netlink: 'syz.3.2323': attribute type 10 has an invalid length. [ 556.908310][T13007] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2323'. [ 557.802459][T13026] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 557.884757][T13026] syzkaller0: entered promiscuous mode [ 557.908761][T13026] syzkaller0: entered allmulticast mode [ 559.553246][T13053] netlink: 21 bytes leftover after parsing attributes in process `syz.3.2339'. [ 559.564348][T13053] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 561.567472][T13040] netlink: 'syz.0.2335': attribute type 10 has an invalid length. [ 561.575866][T13040] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2335'. [ 561.586308][T13065] netlink: 'syz.3.2344': attribute type 21 has an invalid length. [ 561.607010][T13065] netlink: 'syz.3.2344': attribute type 20 has an invalid length. [ 561.952883][T13075] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 562.058656][T13075] syzkaller0: entered promiscuous mode [ 562.065234][T13075] syzkaller0: entered allmulticast mode [ 563.204283][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.216273][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.355077][T13096] netlink: 'syz.3.2353': attribute type 10 has an invalid length. [ 564.363108][T13096] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2353'. [ 564.698401][T13105] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 564.858603][T13105] syzkaller0: entered promiscuous mode [ 564.890538][T13105] syzkaller0: entered allmulticast mode [ 565.183355][T12737] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 565.192787][T12737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 565.203468][T12737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 565.213672][T12737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 565.221587][T12737] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 565.230875][T12737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 567.044064][T13126] netlink: 'syz.0.2364': attribute type 10 has an invalid length. [ 567.056851][T13126] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2364'. [ 567.163514][ T6099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.341085][ T6099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.352208][ T5797] Bluetooth: hci1: command tx timeout [ 567.380986][T13132] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 567.399087][T13132] syzkaller0: entered promiscuous mode [ 567.406285][T13132] syzkaller0: entered allmulticast mode [ 567.440196][ T6099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.474700][T13117] rxe_eth0 speed is unknown, defaulting to 1000 [ 567.620200][ T6099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.427731][ T5797] Bluetooth: hci1: command tx timeout [ 570.083885][T13147] netlink: 'syz.1.2373': attribute type 10 has an invalid length. [ 570.091956][T13147] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2373'. [ 570.249471][T13152] netlink: 21 bytes leftover after parsing attributes in process `syz.3.2374'. [ 570.281614][T13152] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 570.583454][T13117] chnl_net:caif_netlink_parms(): no params data found [ 571.511797][ T5797] Bluetooth: hci1: command tx timeout [ 571.743367][T13190] netlink: 'syz.3.2383': attribute type 10 has an invalid length. [ 571.752449][T13190] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2383'. [ 571.816419][T13117] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.833980][T13117] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.866018][T13117] bridge_slave_0: entered allmulticast mode [ 571.873626][T13117] bridge_slave_0: entered promiscuous mode [ 571.925970][T13117] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.933187][T13117] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.956088][T13117] bridge_slave_1: entered allmulticast mode [ 571.963627][T13117] bridge_slave_1: entered promiscuous mode [ 572.193092][T13208] netlink: 21 bytes leftover after parsing attributes in process `syz.3.2387'. [ 572.202327][T13208] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 572.203231][T13117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.279714][T13200] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 572.320055][T13200] syzkaller0: entered promiscuous mode [ 572.325970][T13200] syzkaller0: entered allmulticast mode [ 572.349615][T13117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.497099][T13215] FAULT_INJECTION: forcing a failure. [ 572.497099][T13215] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 572.510828][T13215] CPU: 1 PID: 13215 Comm: syz.1.2389 Not tainted syzkaller #0 [ 572.518367][T13215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 572.528493][T13215] Call Trace: [ 572.531886][T13215] [ 572.534893][T13215] dump_stack_lvl+0x18c/0x250 [ 572.539674][T13215] ? show_regs_print_info+0x20/0x20 [ 572.541645][T13117] team0: Port device team_slave_0 added [ 572.544930][T13215] ? load_image+0x420/0x420 [ 572.555396][T13215] ? __lock_acquire+0x7eb0/0x7eb0 [ 572.560526][T13215] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 572.566367][T13215] should_fail_ex+0x394/0x4c0 [ 572.571148][T13215] prepare_alloc_pages+0x1e1/0x5b0 [ 572.576350][T13215] __alloc_pages+0x134/0x460 [ 572.581013][T13215] ? zone_statistics+0x170/0x170 [ 572.586037][T13215] ? do_wp_page+0x733/0x34d0 [ 572.590701][T13215] ? do_wp_page+0xf17/0x34d0 [ 572.594803][T13117] team0: Port device team_slave_1 added [ 572.595344][T13215] ? __lock_acquire+0x7eb0/0x7eb0 [ 572.606008][T13215] __folio_alloc+0x10/0x20 [ 572.610500][T13215] vma_alloc_folio+0x474/0x8f0 [ 572.615363][T13215] do_wp_page+0x118d/0x34d0 [ 572.620082][T13215] ? folio_put+0xd0/0xd0 [ 572.624394][T13215] ? do_raw_spin_lock+0x11f/0x2b0 [ 572.629504][T13215] ? __rwlock_init+0x150/0x150 [ 572.634404][T13215] handle_mm_fault+0x1300/0x4a40 [ 572.639430][T13215] ? handle_mm_fault+0xe6/0x4a40 [ 572.644473][T13215] ? numa_migrate_prep+0x350/0x350 [ 572.649685][T13215] ? lock_chain_count+0x20/0x20 [ 572.654631][T13215] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 572.660198][T13215] do_user_addr_fault+0xeb7/0x13e0 [ 572.665415][T13215] exc_page_fault+0x64/0x100 [ 572.670102][T13215] asm_exc_page_fault+0x26/0x30 [ 572.675030][T13215] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 572.680914][T13215] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 572.700612][T13215] RSP: 0018:ffffc900055b7718 EFLAGS: 00050206 [ 572.706766][T13215] RAX: ffffffff842cc701 RBX: 1ffff92000ab6fc7 RCX: 00000000000015d0 [ 572.714810][T13215] RDX: 0000000000000000 RSI: ffff88806334ece8 RDI: 000020000000f000 [ 572.722852][T13215] RBP: ffffc900055b7868 R08: ffff8880633502b7 R09: 1ffff1100c66a056 [ 572.730896][T13215] R10: dffffc0000000000 R11: ffffed100c66a057 R12: ffff8880633400e8 [ 572.738938][T13215] R13: 00000000000101d0 R14: 00000000000101d0 R15: ffffc900055b7e48 [ 572.747036][T13215] ? _copy_to_iter+0x161/0x1110 [ 572.751986][T13215] _copy_to_iter+0x24f/0x1110 [ 572.756745][T13215] ? __lock_acquire+0x7eb0/0x7eb0 [ 572.761846][T13215] ? _raw_spin_unlock+0x40/0x40 [ 572.766786][T13215] ? iov_iter_init+0x1e0/0x1e0 [ 572.771626][T13215] ? __virt_addr_valid+0x10c/0x380 [ 572.773281][T13117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.776799][T13215] ? __check_object_size+0x4fc/0xa40 [ 572.776849][T13215] __skb_datagram_iter+0xdb/0x780 [ 572.794306][T13215] ? skb_copy_datagram_iter+0x200/0x200 [ 572.796133][T13117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.799936][T13215] skb_copy_datagram_iter+0xb1/0x200 [ 572.831220][T13215] tipc_recvstream+0x730/0xe90 [ 572.836107][T13215] ? tipc_sendstream+0x70/0x70 [ 572.840955][T13215] ____sys_recvmsg+0x2bd/0x5d0 [ 572.845810][T13215] ? __sys_recvmsg_sock+0x50/0x50 [ 572.851027][T13215] ? import_iovec+0x73/0xa0 [ 572.855615][T13215] ___sys_recvmsg+0x214/0x590 [ 572.860383][T13215] ? __sys_recvmsg+0x2a0/0x2a0 [ 572.864588][T13117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.865224][T13215] ? ksys_write+0x1d2/0x260 [ 572.880314][T13215] ? __fget_files+0x3fc/0x460 [ 572.885104][T13215] __x64_sys_recvmsg+0x21e/0x2f0 [ 572.890122][T13215] ? ___sys_recvmsg+0x590/0x590 [ 572.894961][T13117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.895143][T13215] ? lockdep_hardirqs_on+0x98/0x150 [ 572.907256][T13215] do_syscall_64+0x55/0xb0 [ 572.911745][T13215] ? clear_bhb_loop+0x40/0x90 [ 572.916502][T13215] ? clear_bhb_loop+0x40/0x90 [ 572.916897][T13117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.921246][T13215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.921286][T13215] RIP: 0033:0x7fc0333a94d9 [ 572.952182][T13117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.953084][T13215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.987794][T13215] RSP: 002b:00007fc0341b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 572.996381][T13215] RAX: ffffffffffffffda RBX: 00007fc033625fa0 RCX: 00007fc0333a94d9 [ 573.004431][T13215] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000003 [ 573.012483][T13215] RBP: 00007fc0341b0090 R08: 0000000000000000 R09: 0000000000000000 [ 573.020564][T13215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 573.028620][T13215] R13: 00007fc033626038 R14: 00007fc033625fa0 R15: 00007ffda2ab6548 [ 573.036708][T13215] [ 573.140670][T13212] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 573.164407][T13212] syzkaller0: entered promiscuous mode [ 573.170166][T13212] syzkaller0: entered allmulticast mode [ 573.595924][ T5797] Bluetooth: hci1: command tx timeout [ 575.080713][T13117] hsr_slave_0: entered promiscuous mode [ 575.087901][T13117] hsr_slave_1: entered promiscuous mode [ 575.192137][T13234] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2390'. [ 577.691623][T13248] netlink: 'syz.1.2392': attribute type 10 has an invalid length. [ 577.710730][T13248] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2392'. [ 578.016709][T13270] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 578.063009][T13270] syzkaller0: entered promiscuous mode [ 578.094764][T13270] syzkaller0: entered allmulticast mode [ 581.297422][ T6099] hsr_slave_0: left promiscuous mode [ 581.303829][ T6099] hsr_slave_1: left promiscuous mode [ 581.310812][ T6099] hsr0: left allmulticast mode [ 581.317329][ T6099] bridge0: port 1(hsr0) entered disabled state [ 581.355506][ T6099] veth1_macvtap: left promiscuous mode [ 581.366089][ T6099] veth0_macvtap: left promiscuous mode [ 581.374550][ T6099] veth1_vlan: left allmulticast mode [ 581.384422][ T6099] veth1_vlan: left promiscuous mode [ 581.393790][ T6099] veth0_vlan: left promiscuous mode [ 581.592423][ T6099] team0 (unregistering): Port device geneve1 removed [ 581.659859][ T6099] team0 (unregistering): Port device geneve0 removed [ 581.988613][ T6099] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 582.492734][ T6099] team0 (unregistering): Port device team_slave_1 removed [ 582.552176][ T6099] team0 (unregistering): Port device team_slave_0 removed [ 582.620787][ T6099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.693203][ T6099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.761365][ T6099] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 582.989005][ T6099] team0 (unregistering): Port device bond0 removed [ 583.020534][ T6099] bond0 (unregistering): Released all slaves [ 583.104127][T13293] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2401'. [ 583.125916][T13293] bridge_slave_1: default FDB implementation only supports local addresses [ 583.269244][T13304] veth1_macvtap: left promiscuous mode [ 583.574150][T13312] netlink: 'syz.1.2405': attribute type 10 has an invalid length. [ 583.583183][T13312] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2405'. [ 584.168883][T13318] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 584.366900][T13318] syzkaller0: entered promiscuous mode [ 584.373772][T13318] syzkaller0: entered allmulticast mode [ 586.665052][T13330] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 586.792929][T13330] syzkaller0: entered promiscuous mode [ 586.800541][T13330] syzkaller0: entered allmulticast mode [ 586.911273][T13361] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 586.931042][T13361] syzkaller0: entered promiscuous mode [ 586.936779][T13361] syzkaller0: entered allmulticast mode [ 588.668027][T13369] FAULT_INJECTION: forcing a failure. [ 588.668027][T13369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.682560][T13369] CPU: 0 PID: 13369 Comm: syz.0.2415 Not tainted syzkaller #0 [ 588.690104][T13369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 588.700218][T13369] Call Trace: [ 588.703551][T13369] [ 588.706539][T13369] dump_stack_lvl+0x18c/0x250 [ 588.711286][T13369] ? show_regs_print_info+0x20/0x20 [ 588.716553][T13369] ? load_image+0x420/0x420 [ 588.721118][T13369] ? __might_fault+0xaa/0x120 [ 588.725855][T13369] ? __lock_acquire+0x7eb0/0x7eb0 [ 588.731030][T13369] should_fail_ex+0x394/0x4c0 [ 588.735870][T13369] _copy_to_user+0x2f/0xa0 [ 588.740346][T13369] bpf_test_finish+0x19f/0x650 [ 588.745172][T13369] ? convert_skb_to___skb+0x420/0x420 [ 588.750670][T13369] ? _copy_from_user+0xa5/0xe0 [ 588.755502][T13369] ? bpf_test_init+0x119/0x140 [ 588.760331][T13369] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 588.765769][T13369] ? __lock_acquire+0x7eb0/0x7eb0 [ 588.770880][T13369] ? dev_put+0x80/0x80 [ 588.775027][T13369] ? dev_put+0x80/0x80 [ 588.779156][T13369] bpf_prog_test_run+0x31f/0x390 [ 588.784160][T13369] __sys_bpf+0x49d/0x890 [ 588.789526][T13369] ? bpf_link_show_fdinfo+0x560/0x560 [ 588.794986][T13369] ? lock_chain_count+0x20/0x20 [ 588.800005][T13369] __x64_sys_bpf+0x7c/0x90 [ 588.804484][T13369] do_syscall_64+0x55/0xb0 [ 588.808965][T13369] ? clear_bhb_loop+0x40/0x90 [ 588.813705][T13369] ? clear_bhb_loop+0x40/0x90 [ 588.818473][T13369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 588.824428][T13369] RIP: 0033:0x7f3ba23a94d9 [ 588.828895][T13369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.848573][T13369] RSP: 002b:00007f3ba3244028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 588.857045][T13369] RAX: ffffffffffffffda RBX: 00007f3ba2625fa0 RCX: 00007f3ba23a94d9 [ 588.865075][T13369] RDX: 0000000000000050 RSI: 0000200000000700 RDI: 000000000000000a [ 588.873102][T13369] RBP: 00007f3ba3244090 R08: 0000000000000000 R09: 0000000000000000 [ 588.881309][T13369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 588.889333][T13369] R13: 00007f3ba2626038 R14: 00007f3ba2625fa0 R15: 00007ffd3692b378 [ 588.897420][T13369] [ 590.664307][T13371] netlink: 'syz.3.2416': attribute type 10 has an invalid length. [ 590.677331][T13371] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2416'. [ 590.711007][T13373] veth1_macvtap: left promiscuous mode [ 590.796040][T13117] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 590.806994][T13117] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 590.819825][T13117] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 590.832853][T13117] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 591.118451][T13117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.156811][T13117] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.187905][T13240] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.196026][T13240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.225399][ T7086] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.232622][ T7086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.844174][T13117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.994523][T13117] veth0_vlan: entered promiscuous mode [ 592.029875][T13117] veth1_vlan: entered promiscuous mode [ 592.138202][T13117] veth0_macvtap: entered promiscuous mode [ 592.151325][T13117] veth1_macvtap: entered promiscuous mode [ 592.251729][T13117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.274696][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.301392][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.311629][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.327651][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.343189][T13117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.406343][T13413] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 592.570617][T13413] syzkaller0: entered promiscuous mode [ 592.596115][T13413] syzkaller0: entered allmulticast mode [ 592.629644][T13117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.645941][T13117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.657302][T13117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.675852][T13117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.707334][T13424] netlink: 'syz.0.2426': attribute type 10 has an invalid length. [ 592.736660][T13424] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2426'. [ 595.543895][T13453] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 595.585400][T13453] syzkaller0: entered promiscuous mode [ 595.605553][T13453] syzkaller0: entered allmulticast mode [ 595.771609][ T6099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.802030][ T6099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.161568][T13510] netlink: 'syz.3.2434': attribute type 10 has an invalid length. [ 598.166273][ T6098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.169913][T13510] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2434'. [ 598.198232][ T6098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.056424][T13550] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2443'. [ 599.115518][T13550] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 599.325969][T12737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 599.345987][T12737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 599.363114][T12737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 599.378289][T12737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 599.389294][T12737] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 599.397320][T12737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 599.486245][T13553] netlink: 'syz.2.2444': attribute type 10 has an invalid length. [ 599.494507][T13553] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2444'. [ 599.538211][T13553] hsr0: entered promiscuous mode [ 599.574801][T13553] bridge0: port 3(hsr0) entered blocking state [ 599.610437][T13553] bridge0: port 3(hsr0) entered disabled state [ 599.625299][T13553] hsr0: entered allmulticast mode [ 599.640562][T13553] hsr_slave_0: entered allmulticast mode [ 599.654943][T13553] hsr_slave_1: entered allmulticast mode [ 599.681950][T13553] bridge0: port 3(hsr0) entered blocking state [ 599.689604][T13553] bridge0: port 3(hsr0) entered forwarding state [ 600.575173][ T6098] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.750251][ T6098] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.810980][T13555] rxe_eth0 speed is unknown, defaulting to 1000 [ 600.895418][ T6098] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.032478][ T6098] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.425958][ T5797] Bluetooth: hci2: command tx timeout [ 601.993035][T13555] chnl_net:caif_netlink_parms(): no params data found [ 602.494197][T13602] netlink: 'syz.1.2455': attribute type 10 has an invalid length. [ 602.516344][T13602] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2455'. [ 602.537921][T13555] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.566043][T13555] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.573393][T13555] bridge_slave_0: entered allmulticast mode [ 602.621837][T13555] bridge_slave_0: entered promiscuous mode [ 602.655885][T13555] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.673939][T13555] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.682182][T13555] bridge_slave_1: entered allmulticast mode [ 602.700637][T13555] bridge_slave_1: entered promiscuous mode [ 602.843460][T13555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.934746][T13621] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2460'. [ 602.974958][T13555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.055522][T13621] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2460'. [ 603.112045][T13555] team0: Port device team_slave_0 added [ 603.122348][T13622] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2460'. [ 603.154455][T13555] team0: Port device team_slave_1 added [ 603.321044][T13555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.341849][T13629] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2462'. [ 603.349829][T13555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.394755][T13629] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 603.432984][T13555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.447468][T13555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.454679][T13555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.489418][T13555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.512037][ T5797] Bluetooth: hci2: command tx timeout [ 605.103946][T13555] hsr_slave_0: entered promiscuous mode [ 605.126397][T13555] hsr_slave_1: entered promiscuous mode [ 605.150548][T13555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 605.162560][T13555] Cannot create hsr debugfs directory [ 605.335149][T13643] netlink: 'syz.1.2465': attribute type 27 has an invalid length. [ 605.360549][T13643] netlink: 'syz.1.2465': attribute type 25 has an invalid length. [ 605.382348][T13643] FAULT_INJECTION: forcing a failure. [ 605.382348][T13643] name failslab, interval 1, probability 0, space 0, times 0 [ 605.409886][T13643] CPU: 1 PID: 13643 Comm: syz.1.2465 Not tainted syzkaller #0 [ 605.417463][T13643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 605.427589][T13643] Call Trace: [ 605.430925][T13643] [ 605.433914][T13643] dump_stack_lvl+0x18c/0x250 [ 605.438675][T13643] ? show_regs_print_info+0x20/0x20 [ 605.443954][T13643] ? load_image+0x420/0x420 [ 605.448560][T13643] ? __might_sleep+0xe0/0xe0 [ 605.453223][T13643] ? __lock_acquire+0x7eb0/0x7eb0 [ 605.458329][T13643] should_fail_ex+0x394/0x4c0 [ 605.463090][T13643] should_failslab+0x9/0x20 [ 605.467659][T13643] slab_pre_alloc_hook+0x59/0x300 [ 605.472832][T13643] ? mark_lock+0x94/0x320 [ 605.477236][T13643] kmem_cache_alloc_node+0x5e/0x320 [ 605.482501][T13643] ? __lock_acquire+0x135d/0x7eb0 [ 605.487681][T13643] ? __alloc_skb+0x103/0x2c0 [ 605.492349][T13643] __alloc_skb+0x103/0x2c0 [ 605.496847][T13643] netlink_ack+0x377/0x1160 [ 605.501446][T13643] ? verify_lock_unused+0x140/0x140 [ 605.506716][T13643] ? perf_trace_lock_acquire+0x342/0x400 [ 605.512418][T13643] ? netlink_dump+0xec0/0xec0 [ 605.517166][T13643] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 605.523926][T13643] netlink_rcv_skb+0x2b3/0x4c0 [ 605.528799][T13643] ? rtnetlink_bind+0x80/0x80 [ 605.533555][T13643] ? netlink_ack+0x1160/0x1160 [ 605.538417][T13643] ? __lock_acquire+0x7eb0/0x7eb0 [ 605.543511][T13643] ? net_generic+0x1e/0x240 [ 605.548097][T13643] ? netlink_deliver_tap+0x2e/0x1b0 [ 605.553372][T13643] netlink_unicast+0x856/0x9e0 [ 605.558262][T13643] netlink_sendmsg+0x8d0/0xbf0 [ 605.563107][T13643] ? netlink_getsockopt+0x590/0x590 [ 605.568379][T13643] ? apparmor_socket_sendmsg+0x8e/0x330 [ 605.574001][T13643] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 605.579335][T13643] ? security_socket_sendmsg+0x80/0xa0 [ 605.585116][T13643] ? netlink_getsockopt+0x590/0x590 [ 605.590367][T13643] ____sys_sendmsg+0x61b/0x980 [ 605.595182][T13643] ? __asan_memset+0x22/0x40 [ 605.599826][T13643] ? __sys_sendmsg_sock+0x30/0x30 [ 605.604883][T13643] ? __import_iovec+0x5f2/0x850 [ 605.609791][T13643] ? import_iovec+0x73/0xa0 [ 605.614353][T13643] ___sys_sendmsg+0x2a6/0x360 [ 605.619088][T13643] ? __sys_sendmsg+0x2b0/0x2b0 [ 605.623961][T13643] ? ktime_get+0x7f/0x280 [ 605.628340][T13643] ? trace_call_bpf+0xc3/0x6c0 [ 605.633184][T13643] __se_sys_sendmsg+0x1d0/0x2c0 [ 605.638074][T13643] ? perf_trace_preemptirq_template+0x269/0x330 [ 605.644359][T13643] ? __x64_sys_sendmsg+0x80/0x80 [ 605.649361][T13643] ? lockdep_hardirqs_on+0x98/0x150 [ 605.654609][T13643] do_syscall_64+0x55/0xb0 [ 605.659068][T13643] ? clear_bhb_loop+0x40/0x90 [ 605.663797][T13643] ? clear_bhb_loop+0x40/0x90 [ 605.668532][T13643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 605.674479][T13643] RIP: 0033:0x7fc0333a94d9 [ 605.678934][T13643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.698885][T13643] RSP: 002b:00007fc0341b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.707375][T13643] RAX: ffffffffffffffda RBX: 00007fc033625fa0 RCX: 00007fc0333a94d9 [ 605.715387][T13643] RDX: 0000000004040000 RSI: 0000200000000540 RDI: 0000000000000008 [ 605.723397][T13643] RBP: 00007fc0341b0090 R08: 0000000000000000 R09: 0000000000000000 [ 605.731406][T13643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.739413][T13643] R13: 00007fc033626038 R14: 00007fc033625fa0 R15: 00007ffda2ab6548 [ 605.747447][T13643] [ 605.757960][ T5797] Bluetooth: hci2: command tx timeout [ 605.887259][T13648] netlink: 'syz.2.2467': attribute type 10 has an invalid length. [ 605.895466][T13648] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2467'. [ 606.397673][T13664] netlink: 'syz.0.2471': attribute type 10 has an invalid length. [ 606.451287][T13668] netlink: 'syz.0.2471': attribute type 21 has an invalid length. [ 606.484223][T13668] netlink: 'syz.0.2471': attribute type 21 has an invalid length. [ 606.510715][T13664] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.2471'. [ 606.628866][T13668] netlink: 'syz.0.2471': attribute type 21 has an invalid length. [ 607.042665][T13668] netlink: 'syz.0.2471': attribute type 21 has an invalid length. [ 607.085951][T13668] netlink: 'syz.0.2471': attribute type 21 has an invalid length. [ 607.094343][T13668] netlink: 'syz.0.2471': attribute type 21 has an invalid length. [ 607.168240][ T6098] [ 607.170656][ T6098] ====================================================== [ 607.177886][ T6098] WARNING: possible circular locking dependency detected [ 607.184920][ T6098] syzkaller #0 Not tainted [ 607.189368][ T6098] ------------------------------------------------------ [ 607.196421][ T6098] kworker/u4:11/6098 is trying to acquire lock: [ 607.202706][ T6098] ffff88807dae4dc0 (team->team_lock_key#4){+.+.}-{3:3}, at: team_device_event+0x295/0xc50 [ 607.212734][ T6098] [ 607.212734][ T6098] but task is already holding lock: [ 607.220139][ T6098] ffff888026010768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 607.230569][ T6098] [ 607.230569][ T6098] which lock already depends on the new lock. [ 607.230569][ T6098] [ 607.241001][ T6098] [ 607.241001][ T6098] the existing dependency chain (in reverse order) is: [ 607.250052][ T6098] [ 607.250052][ T6098] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 607.258186][ T6098] __mutex_lock+0x135/0xce0 [ 607.263348][ T6098] ieee80211_open+0x144/0x200 [ 607.268595][ T6098] __dev_open+0x2cb/0x430 [ 607.273474][ T6098] dev_open+0xab/0x190 [ 607.278083][ T6098] team_add_slave+0x703/0x28a0 [ 607.283397][ T6098] do_setlink+0xda4/0x3f00 [ 607.288366][ T6098] rtnl_newlink+0x1848/0x2170 [ 607.293595][ T6098] rtnetlink_rcv_msg+0x843/0xf90 [ 607.299081][ T6098] netlink_rcv_skb+0x235/0x4c0 [ 607.304417][ T6098] netlink_unicast+0x856/0x9e0 [ 607.309759][ T6098] netlink_sendmsg+0x8d0/0xbf0 [ 607.315074][ T6098] ____sys_sendmsg+0x61b/0x980 [ 607.320410][ T6098] ___sys_sendmsg+0x2a6/0x360 [ 607.325660][ T6098] __se_sys_sendmsg+0x1d0/0x2c0 [ 607.331056][ T6098] do_syscall_64+0x55/0xb0 [ 607.336043][ T6098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 607.342497][ T6098] [ 607.342497][ T6098] -> #0 (team->team_lock_key#4){+.+.}-{3:3}: [ 607.350702][ T6098] __lock_acquire+0x3a07/0x7eb0 [ 607.356114][ T6098] lock_acquire+0x19e/0x420 [ 607.361168][ T6098] __mutex_lock+0x135/0xce0 [ 607.366220][ T6098] team_device_event+0x295/0xc50 [ 607.371700][ T6098] notifier_call_chain+0x18f/0x380 [ 607.377383][ T6098] unregister_netdevice_many_notify+0x1037/0x1910 [ 607.384349][ T6098] unregister_netdevice_queue+0x2e9/0x330 [ 607.390635][ T6098] _cfg80211_unregister_wdev+0x16c/0x5a0 [ 607.396825][ T6098] ieee80211_remove_interfaces+0x4b3/0x690 [ 607.403185][ T6098] ieee80211_unregister_hw+0x5d/0x2a0 [ 607.409113][ T6098] mac80211_hwsim_del_radio+0x289/0x480 [ 607.415212][ T6098] hwsim_exit_net+0x58d/0x650 [ 607.420443][ T6098] cleanup_net+0x6f7/0xb00 [ 607.425408][ T6098] process_scheduled_works+0xa60/0x1600 [ 607.431549][ T6098] worker_thread+0xa5e/0xfe0 [ 607.436783][ T6098] kthread+0x2fa/0x390 [ 607.441430][ T6098] ret_from_fork+0x48/0x80 [ 607.446399][ T6098] ret_from_fork_asm+0x11/0x20 [ 607.451711][ T6098] [ 607.451711][ T6098] other info that might help us debug this: [ 607.451711][ T6098] [ 607.462307][ T6098] Possible unsafe locking scenario: [ 607.462307][ T6098] [ 607.469776][ T6098] CPU0 CPU1 [ 607.475160][ T6098] ---- ---- [ 607.480637][ T6098] lock(&rdev->wiphy.mtx); [ 607.485167][ T6098] lock(team->team_lock_key#4); [ 607.492663][ T6098] lock(&rdev->wiphy.mtx); [ 607.499727][ T6098] lock(team->team_lock_key#4); [ 607.504692][ T6098] [ 607.504692][ T6098] *** DEADLOCK *** [ 607.504692][ T6098] [ 607.512858][ T6098] 5 locks held by kworker/u4:11/6098: [ 607.518251][ T6098] #0: ffff888140049138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 607.529174][ T6098] #1: ffffc9000b73fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 607.539742][ T6098] #2: ffffffff8f3db1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x140/0xb00 [ 607.549169][ T6098] #3: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 607.559037][ T6098] #4: ffff888026010768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 607.569858][ T6098] [ 607.569858][ T6098] stack backtrace: [ 607.575768][ T6098] CPU: 0 PID: 6098 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 607.583418][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 607.593583][ T6098] Workqueue: netns cleanup_net [ 607.598394][ T6098] Call Trace: [ 607.601706][ T6098] [ 607.604664][ T6098] dump_stack_lvl+0x18c/0x250 [ 607.609390][ T6098] ? load_image+0x420/0x420 [ 607.613927][ T6098] ? show_regs_print_info+0x20/0x20 [ 607.619167][ T6098] ? print_circular_bug+0x12b/0x1a0 [ 607.624409][ T6098] check_noncircular+0x2fc/0x400 [ 607.629391][ T6098] ? print_deadlock_bug+0x5d0/0x5d0 [ 607.634623][ T6098] ? lockdep_lock+0xf5/0x230 [ 607.639251][ T6098] ? _find_first_zero_bit+0xd6/0x100 [ 607.644656][ T6098] __lock_acquire+0x3a07/0x7eb0 [ 607.649551][ T6098] ? verify_lock_unused+0x140/0x140 [ 607.654777][ T6098] ? verify_lock_unused+0x140/0x140 [ 607.660009][ T6098] ? __up_read+0x2b8/0x6b0 [ 607.664453][ T6098] ? up_read+0x20/0x20 [ 607.668564][ T6098] lock_acquire+0x19e/0x420 [ 607.673104][ T6098] ? team_device_event+0x295/0xc50 [ 607.678248][ T6098] ? __might_sleep+0xe0/0xe0 [ 607.682868][ T6098] ? read_lock_is_recursive+0x20/0x20 [ 607.688269][ T6098] ? xsk_notifier+0x210/0x220 [ 607.692978][ T6098] __mutex_lock+0x135/0xce0 [ 607.697503][ T6098] ? team_device_event+0x295/0xc50 [ 607.702639][ T6098] ? __mutex_lock+0x30d/0xce0 [ 607.707374][ T6098] ? bond_netdev_event+0xeb/0xef0 [ 607.712429][ T6098] ? team_device_event+0x295/0xc50 [ 607.717567][ T6098] ? mutex_lock_nested+0x20/0x20 [ 607.722559][ T6098] team_device_event+0x295/0xc50 [ 607.727526][ T6098] notifier_call_chain+0x18f/0x380 [ 607.732673][ T6098] unregister_netdevice_many_notify+0x1037/0x1910 [ 607.739119][ T6098] ? unregister_netdevice_many+0x20/0x20 [ 607.744797][ T6098] ? kernfs_remove_by_name_ns+0x117/0x150 [ 607.750560][ T6098] ? __lock_acquire+0x7eb0/0x7eb0 [ 607.755630][ T6098] unregister_netdevice_queue+0x2e9/0x330 [ 607.761385][ T6098] ? list_netdevice+0x730/0x730 [ 607.766269][ T6098] ? kernfs_remove_by_name_ns+0x117/0x150 [ 607.772109][ T6098] _cfg80211_unregister_wdev+0x16c/0x5a0 [ 607.777773][ T6098] ieee80211_remove_interfaces+0x4b3/0x690 [ 607.783614][ T6098] ? ieee80211_do_stop+0x2030/0x2030 [ 607.788931][ T6098] ? rcu_is_watching+0x15/0xb0 [ 607.793731][ T6098] ieee80211_unregister_hw+0x5d/0x2a0 [ 607.799131][ T6098] mac80211_hwsim_del_radio+0x289/0x480 [ 607.804704][ T6098] ? rhashtable_remove_fast+0xc00/0xc00 [ 607.810306][ T6098] hwsim_exit_net+0x58d/0x650 [ 607.815022][ T6098] ? hwsim_init_net+0x90/0x90 [ 607.819727][ T6098] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 607.825565][ T6098] cleanup_net+0x6f7/0xb00 [ 607.830012][ T6098] ? ops_free_list+0x3b0/0x3b0 [ 607.834806][ T6098] ? _raw_spin_unlock_irq+0x23/0x50 [ 607.840027][ T6098] ? process_scheduled_works+0x975/0x1600 [ 607.845805][ T6098] ? process_scheduled_works+0x975/0x1600 [ 607.851561][ T6098] process_scheduled_works+0xa60/0x1600 [ 607.857146][ T6098] ? worker_attach_to_pool+0x370/0x370 [ 607.862639][ T6098] ? assign_work+0x3cc/0x5d0 [ 607.867270][ T6098] worker_thread+0xa5e/0xfe0 [ 607.871991][ T6098] kthread+0x2fa/0x390 [ 607.876096][ T6098] ? pr_cont_work+0x550/0x550 [ 607.880807][ T6098] ? kthread_blkcg+0xd0/0xd0 [ 607.885428][ T6098] ret_from_fork+0x48/0x80 [ 607.889871][ T6098] ? kthread_blkcg+0xd0/0xd0 [ 607.894485][ T6098] ret_from_fork_asm+0x11/0x20 [ 607.899282][ T6098] [ 607.909020][ T5797] Bluetooth: hci2: command tx timeout [ 607.985591][ T6098] team0: Port device wlan0 removed [ 608.504260][ T6098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.512055][ T6098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.521277][ T6098] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 608.530271][ T6098] batman_adv: batadv0: Removing interface: virt_wifi0 [ 608.537759][ T6098] batadv0: left allmulticast mode [ 608.542819][ T6098] batadv0: left promiscuous mode [ 608.553652][ T6098] bridge0: port 2(batadv0) entered disabled state [ 608.563326][ T6098] bridge_slave_0: left allmulticast mode [ 608.571045][ T6098] bridge_slave_0: left promiscuous mode [ 608.577269][ T6098] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.590377][ T6098] veth0_macvtap: left promiscuous mode [ 608.674869][ T6098] team0 (unregistering): Port device geneve0 removed [ 608.784306][ T6098] team0 (unregistering): Port device team_slave_1 removed [ 608.812767][ T6098] team0 (unregistering): Port device team_slave_0 removed [ 609.297987][T13555] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 609.310229][T13555] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 609.330566][T13555] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 609.351622][T13555] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 609.469294][T13555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.513462][T13555] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.530414][ T6097] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.537659][ T6097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.565661][ T6097] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.572908][ T6097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.813911][T13555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.861227][T13555] veth0_vlan: entered promiscuous mode [ 609.881254][T13555] veth1_vlan: entered promiscuous mode [ 609.927593][T13555] veth0_macvtap: entered promiscuous mode [ 609.940566][T13555] veth1_macvtap: entered promiscuous mode [ 609.965317][T13555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.977238][T13555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.989528][T13555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.002265][T13555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.016142][T13555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.026344][T13555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.037355][T13555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.051786][T13555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.078643][T13555] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.088132][T13555] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.099297][T13555] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.108300][T13555] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.160536][T13555] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 610.195909][ T6098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.203797][ T6098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.213404][T13555] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 610.249607][T13240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.259369][T13240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50