last executing test programs: 17.982698692s ago: executing program 0 (id=2372): socketpair(0x22, 0x3, 0x0, &(0x7f0000003a00)={0xffffffffffffffff}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcb3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001900030002000600200000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000012000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='GPL\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 17.585111095s ago: executing program 0 (id=2375): socketpair(0x22, 0x3, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x400, 0xfffffffffffffffc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcb3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001900030002000600200000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000012000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='GPL\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 17.207924286s ago: executing program 0 (id=2379): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r3, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x42) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRESDEC=r2], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x60000000}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x27) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r5, &(0x7f00000001c0)}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0xa6, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000700)=[{0x2, 0x5, 0xe, 0x5}, {0x2, 0x1, 0x8, 0xa}, {0x0, 0x5, 0x4, 0x1}, {0x1, 0x4, 0xd, 0xb}], 0x10, 0x7}, 0x94) r6 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xffff, @remote}, 0x29, &(0x7f0000000740)=[{&(0x7f0000000700)="fbd2b9ed29d8974ae8ab72ff916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be930583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}, {&(0x7f0000000600)="6827b9fff736d81407c20937747b22379a036284a2ebe480e3ac44462339dd3a22069e0f10faefc9ef35a54105116697e59e7740aa1abfdab2f052e98cea4d0cdc807bce117b9f67d82891ec2c232723af4695f2ed94e25bbe3e6ea674844db3689561fb12a998fc45124d805b52b73f3ce5f0030e291f2ba55de2b592eeffd4666a2d49552edc2b0a82dcad2da64ea79554b8c40a924cb338b34a121090ca6b14ee4ec388e6f413fa3d012730a1bd1c90b551ec73172cf07b6ae021c758d73526447687386797b67f8f58c7eb30caf245d6f691ff3099de6f37ab23ee5e93951041e8326e2f8d9093b7"}], 0x2}, 0x0) 17.005511033s ago: executing program 0 (id=2382): socket$kcm(0x2b, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x642b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, 0x0}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x80}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x660b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e64, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200088c0) close(r7) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000002c0)='syzkaller\x00') bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r8, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r9 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r10, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0xc7, 0x0}, 0x20040010) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 15.624386627s ago: executing program 0 (id=2384): socketpair(0x22, 0x3, 0x0, &(0x7f0000003a00)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x400, 0xfffffffffffffffc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001900030002000600200000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000012000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='GPL\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 14.967644738s ago: executing program 0 (id=2390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x509041, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x200}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x2, 0xff, 0x5, 0x8}, {0x15d, 0xff, 0xd, 0x2332}, {0xa2, 0x7, 0x8, 0x1ff}, {0x10, 0x3, 0x9, 0x773}, {0x0, 0x1c, 0x81, 0x90}, {0x80, 0x8, 0x9, 0x7}, {0x6, 0x5, 0x1, 0x3}]}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x2, 0xff, 0x5, 0x8}, {0x15d, 0xff, 0xd, 0x2332}, {0xa2, 0x7, 0x8, 0x1ff}, {0x10, 0x3, 0x9, 0x773}, {0x0, 0x1c, 0x81, 0x90}, {0x80, 0x8, 0x9, 0x7}, {0x6, 0x5, 0x1, 0x3}]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r0, 0xd, 0x1, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000340)='c}^{*\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000340)='c}^{*\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r4, r1, 0x8, 0x23, 0xffffffffffffffff, @void, @void, @void, @value=r5, r3}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r4, r1, 0x8, 0x23, 0xffffffffffffffff, @void, @void, @void, @value=r5, r3}, 0x20) write$cgroup_subtree(r2, &(0x7f00000003c0)={[{0x2d, 'perf_event'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'cpu'}, {0x2d, 'freezer'}, {0x2b, 'freezer'}, {0x2d, 'devices'}, {0x2b, 'rdma'}, {0x2b, 'rlimit'}]}, 0x44) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000440), 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r2, r2}, 0xc) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r2, r2}, 0xc) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f00000004c0)) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x4) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', r2, 0x4000, r1}, 0x18) write$cgroup_pid(r2, &(0x7f00000005c0)=0xffffffffffffffff, 0x12) (async) write$cgroup_pid(r2, &(0x7f00000005c0)=0xffffffffffffffff, 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r1, 0x4) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000640)) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000680)) openat$cgroup_int(r2, &(0x7f00000006c0)='cpuset.cpus\x00', 0x2, 0x0) (async) openat$cgroup_int(r2, &(0x7f00000006c0)='cpuset.cpus\x00', 0x2, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000700)={'bond0\x00', 0x600}) write$cgroup_type(r2, &(0x7f0000000740), 0x9) write$cgroup_devices(r2, &(0x7f0000000780)={'c', ' *:* ', 'r\x00'}, 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000007c0)={'team_slave_1\x00'}) r6 = syz_clone(0x21846000, &(0x7f00000008c0)="83129363022a42fda0e078adcf912ade1c28d3", 0x13, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)="a405cdb4e5e31ca8d0efdb57f4ba9dcafa1cd5c12b105320d49d0592cb9bdd82d83f0fa27383eb1b62cb30404723a1ea91dc2d087591e5") perf_event_open(&(0x7f0000000840)={0x4, 0x80, 0x7, 0x4, 0xd2, 0x8, 0x0, 0xe, 0x4020, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000800), 0xb}, 0x2000, 0x7, 0xffffff01, 0x0, 0x7ff, 0x9, 0x1, 0x0, 0x245, 0x0, 0x101}, r6, 0x4, r2, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000009c0)='devices') ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000a00)={'wlan1\x00', @local}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000a00)={'wlan1\x00', @local}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000a80)) (async) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000a80)) 6.912038302s ago: executing program 3 (id=2420): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xb00, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0xc}, 0xf7e5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 3.871469317s ago: executing program 3 (id=2421): socket$kcm(0x2b, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x642b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, 0x0}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x80}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x660b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e64, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200088c0) close(r7) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000002c0)='syzkaller\x00') bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r8, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r9 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0xc7, 0x0}, 0x20040010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfe}, 0x80, 0x0}, 0x20000000) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.658976766s ago: executing program 3 (id=2426): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x8, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000618ab7b5dc50"], 0x0, 0x2, 0x8, &(0x7f0000000240)=""/8, 0x41000, 0x10, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000340)=[{0x5, 0x4, 0xe, 0x7}, {0x5, 0x3, 0xb, 0x1}, {0x1, 0x1, 0x8, 0x2}, {0x5, 0x2, 0x0, 0x9}], 0x10, 0x1ff}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xa6109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xe20d, 0x8}, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffefffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="85eec6100000000000f4f296c00bd31e3d5f2441006008873a001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018220000", @ANYRES32, @ANYBLOB="00000000040000005c8a20000000000018430000f9ffffff000000000000000085200000010000008520000001000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000004000000000000159e9d1806dd9c7630c6fbc926169010678bcaf7550e48f471eef5dcf477205ee62734d73402cde99b9df512ef173ff5a3d3089b4e3656743bc84d42a89fb7a1dc1019b4272609ce6fb2c7ec4aa3c2c262d3df9c62f676ba5e30b5026962180b32e6cf727f2d31659bdea8940bb09a30cdc7e62d867edcd62bc33420bc46f5d3013305b5271015a866c0191c9b9d110061ec88"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80102, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x18944, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) write$cgroup_devices(r5, 0x0, 0xffdd) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x0, 0x54}, 0x28) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000200)={'ip6gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) recvmsg$unix(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000e40)=""/248, 0xf8}, {0x0}, {&(0x7f0000000400)=""/33, 0x21}, {&(0x7f0000000880)=""/83, 0x53}], 0x4, &(0x7f0000000940)}, 0x40002102) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1000000000000, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x2c, 0x1) 2.19889167s ago: executing program 2 (id=2428): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xb00, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0xc}, 0xf7e5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 1.906783109s ago: executing program 1 (id=2429): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c306846195", 0x5d}], 0x1, 0x0, 0x0, 0x6}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a812"], 0xfe33) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) 1.859498821s ago: executing program 2 (id=2430): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r3, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x42) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRESDEC=r2], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x60000000}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000000400000008000000ff07000000000000ca466ccab787b2f54b9f8944876d45331b7a21c88e7d611ea9be0287cae12f91924f8a1fdca668b1debc1682d369217cbca6c70d518f94652afd62efe9920edd6cacd104aae97cd4749ef5b0e1e25acf2be4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x27) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r5, &(0x7f00000001c0)}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0xa6, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000700)=[{0x2, 0x5, 0xe, 0x5}, {0x2, 0x1, 0x8, 0xa}, {0x0, 0x5, 0x4, 0x1}, {0x1, 0x4, 0xd, 0xb}], 0x10, 0x7}, 0x94) r6 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xffff, @remote}, 0x29, &(0x7f0000000740)=[{&(0x7f0000000700)="fbd2b9ed29d8974ae8ab72ff916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be930583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}, {&(0x7f0000000600)="6827b9fff736d81407c20937747b22379a036284a2ebe480e3ac44462339dd3a22069e0f10faefc9ef35a54105116697e59e7740aa1abfdab2f052e98cea4d0cdc807bce117b9f67d82891ec2c232723af4695f2ed94e25bbe3e6ea674844db3689561fb12a998fc45124d805b52b73f3ce5f0030e291f2ba55de2b592eeffd4666a2d49552edc2b0a82dcad2da64ea79554b8c40a924cb338b34a121090ca6b14ee4ec388e6f413fa3d012730a1bd1c90b551ec73172cf07b6ae021c758d73526447687386797b67f8f58c7eb30caf245d6f691ff3099de6f37ab23ee5e93951041e8326e2f8d9093b7"}], 0x2}, 0x0) 1.683575156s ago: executing program 2 (id=2431): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90524fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.631404848s ago: executing program 1 (id=2432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0xa, &(0x7f0000000500), 0x4) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r0}, 0xc) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a1150002", 0x1f}], 0x1}, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) (async) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2a609, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x7fffffff}, 0x104323, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000740)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x20000401}}, 0x10, 0x0}, 0x0) (async) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="001000001a00911c01000000000041da81"], 0xfe33) 1.437391164s ago: executing program 2 (id=2433): socket$kcm(0x2b, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x642b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, 0x0}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x80}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x660b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e64, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200088c0) close(r7) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000002c0)='syzkaller\x00') bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r8, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r9 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0xc7, 0x0}, 0x20040010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfe}, 0x80, 0x0}, 0x20000000) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.437175114s ago: executing program 3 (id=2434): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000000000000850000002000000018010000696c6c2500000000002020207b1af8ff"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a00000700000000000000000600142603600e1209001800", 0x28}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x385a, 0xe2f9, 0x4, 0x120, 0x1, 0x7c, '\x00', r1, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) 1.375914656s ago: executing program 1 (id=2435): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000300000000000000000000090000000000000000000000010500000008000000010000000000000f440000000000000000000003000000000300000002000000000000000061"], 0x0, 0x5b}, 0x28) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, 0xffffffffffffffff}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x2, 0x7, 0x7, 0x18876, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x3, 0x2, 0x5, 0x0, @value=r0}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1f, 0x4, 0x1ff, 0xd9ed, 0x80, 0x1, 0x6, '\x00', 0x0, r0, 0x2, 0x4, 0x3}, 0x50) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pB \x00'}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, '\x00', 0x0, r0, 0x0, 0x0, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @generic={0x80, 0xe, 0x5, 0x1, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x18c}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x7, 0x100, 0xc0}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000680)=[r3, r4, r5, r6, r7, r8, r9, r10], &(0x7f00000006c0)=[{0x3, 0x3, 0x0, 0x4}, {0x5, 0x4, 0x1, 0x9}, {0x0, 0x5, 0x2, 0x6}, {0x1, 0x2, 0x3, 0x5}], 0x10, 0x1}, 0x94) 1.213545592s ago: executing program 1 (id=2436): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8402, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e6, 0x5, 0x4, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688812f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.124720214s ago: executing program 3 (id=2437): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xb00, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0xc}, 0xf7e5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000007104340000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 444.691325ms ago: executing program 3 (id=2438): socketpair(0x22, 0x3, 0x0, &(0x7f0000003a00)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x400, 0xfffffffffffffffc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001900030002000600200000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000012000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='GPL\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 403.060397ms ago: executing program 2 (id=2439): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c306846195", 0x5d}], 0x1, 0x0, 0x0, 0x6}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a812"], 0xfe33) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) 323.933729ms ago: executing program 1 (id=2440): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r3, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x42) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRESDEC=r2], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x60000000}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000000400000008000000ff07000000000000ca466ccab787b2f54b9f8944876d45331b7a21c88e7d611ea9be0287cae12f91924f8a1fdca668b1debc1682d369217cbca6c70d518f94652afd62efe9920edd6cacd104aae97cd4749ef5b0e1e25acf2be4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x27) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r5, &(0x7f00000001c0)}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0xa6, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000700)=[{0x2, 0x5, 0xe, 0x5}, {0x2, 0x1, 0x8, 0xa}, {0x0, 0x5, 0x4, 0x1}, {0x1, 0x4, 0xd, 0xb}], 0x10, 0x7}, 0x94) r6 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xffff, @remote}, 0x29, &(0x7f0000000740)=[{&(0x7f0000000700)="fbd2b9ed29d8974ae8ab72ff916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be930583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}, {&(0x7f0000000600)="6827b9fff736d81407c20937747b22379a036284a2ebe480e3ac44462339dd3a22069e0f10faefc9ef35a54105116697e59e7740aa1abfdab2f052e98cea4d0cdc807bce117b9f67d82891ec2c232723af4695f2ed94e25bbe3e6ea674844db3689561fb12a998fc45124d805b52b73f3ce5f0030e291f2ba55de2b592eeffd4666a2d49552edc2b0a82dcad2da64ea79554b8c40a924cb338b34a121090ca6b14ee4ec388e6f413fa3d012730a1bd1c90b551ec73172cf07b6ae021c758d73526447687386797b67f8f58c7eb30caf245d6f691ff3099de6f37ab23ee5e93951041e8326e2f8d9093b7"}], 0x2}, 0x0) 55.770958ms ago: executing program 2 (id=2441): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYRESHEX], 0x0, 0x8005, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback=0x16, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000180)=r5, 0x4) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r6, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r7 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000480)=ANY=[@ANYRESOCT=r7], 0x6a) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000015) sendmsg$kcm(r0, &(0x7f0000003ac0)={&(0x7f0000001380)=@ax25={{0x3, @bcast, 0x7}, [@null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default]}, 0x80, 0x0}, 0x20000000) 0s ago: executing program 1 (id=2442): r0 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) kernel console output (not intermixed with test programs): ] __netlink_sendskb+0x4b/0x90 [ 780.396022][T10793] netlink_dump+0xa75/0xe50 [ 780.400580][T10793] ? netlink_lookup+0x200/0x200 [ 780.405583][T10793] ? __asan_memset+0x22/0x40 [ 780.410226][T10793] ? genl_start+0x493/0x6b0 [ 780.414834][T10793] __netlink_dump_start+0x5f1/0x810 [ 780.420101][T10793] genl_family_rcv_msg_dumpit+0x214/0x310 [ 780.425863][T10793] ? genl_rcv_msg+0x7a0/0x7a0 [ 780.430581][T10793] ? genl_get_cmd+0x7f1/0x920 [ 780.435296][T10793] ? genl_family_rcv_msg_doit+0x310/0x310 [ 780.441050][T10793] ? genl_start+0x6b0/0x6b0 [ 780.445590][T10793] ? genl_dumpit+0x1a0/0x1a0 [ 780.450217][T10793] ? bpf_lsm_capable+0x9/0x10 [ 780.454959][T10793] ? security_capable+0x89/0xb0 [ 780.459871][T10793] genl_rcv_msg+0x5e5/0x7a0 [ 780.464413][T10793] ? genl_bind+0x360/0x360 [ 780.468862][T10793] ? batadv_bla_claim_dump+0x1120/0x1120 [ 780.474576][T10793] ? perf_trace_lock+0xfc/0x3b0 [ 780.479483][T10793] netlink_rcv_skb+0x241/0x4d0 [ 780.484282][T10793] ? genl_bind+0x360/0x360 [ 780.488843][T10793] ? netlink_ack+0x1180/0x1180 [ 780.493741][T10793] ? __lock_acquire+0x7d40/0x7d40 [ 780.498822][T10793] ? down_read+0x1ac/0x2e0 [ 780.503306][T10793] genl_rcv+0x28/0x40 [ 780.507370][T10793] netlink_unicast+0x751/0x8d0 [ 780.512187][T10793] netlink_sendmsg+0x8d0/0xbf0 [ 780.516995][T10793] ? netlink_getsockopt+0x590/0x590 [ 780.522281][T10793] ? aa_sock_msg_perm+0x94/0x150 [ 780.527277][T10793] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 780.532608][T10793] ? security_socket_sendmsg+0x80/0xa0 [ 780.538109][T10793] ? netlink_getsockopt+0x590/0x590 [ 780.543362][T10793] ____sys_sendmsg+0x5ba/0x960 [ 780.548173][T10793] ? __asan_memset+0x22/0x40 [ 780.552809][T10793] ? __sys_sendmsg_sock+0x30/0x30 [ 780.557873][T10793] ? __import_iovec+0x5f2/0x850 [ 780.562778][T10793] ? import_iovec+0x73/0xa0 [ 780.567318][T10793] ___sys_sendmsg+0x2a6/0x360 [ 780.572037][T10793] ? __sys_sendmsg+0x2a0/0x2a0 [ 780.576858][T10793] ? __lock_acquire+0x7d40/0x7d40 [ 780.581981][T10793] __se_sys_sendmsg+0x1c2/0x2b0 [ 780.586871][T10793] ? __x64_sys_sendmsg+0x80/0x80 [ 780.591871][T10793] ? lockdep_hardirqs_on+0x98/0x150 [ 780.597115][T10793] do_syscall_64+0x55/0xb0 [ 780.601596][T10793] ? clear_bhb_loop+0x40/0x90 [ 780.606320][T10793] ? clear_bhb_loop+0x40/0x90 [ 780.611033][T10793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 780.616970][T10793] RIP: 0033:0x7fcbe399ce59 [ 780.621448][T10793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.641105][T10793] RSP: 002b:00007fcbe4877028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 780.649559][T10793] RAX: ffffffffffffffda RBX: 00007fcbe3c15fa0 RCX: 00007fcbe399ce59 [ 780.657574][T10793] RDX: 00000000200000c0 RSI: 0000200000000000 RDI: 0000000000000003 [ 780.665593][T10793] RBP: 00007fcbe4877090 R08: 0000000000000000 R09: 0000000000000000 [ 780.673602][T10793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 780.681609][T10793] R13: 00007fcbe3c16038 R14: 00007fcbe3c15fa0 R15: 00007fffc8f3a1c8 [ 780.689721][T10793] [ 780.788878][T10799] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1772'. [ 784.536554][T10823] validate_nla: 12 callbacks suppressed [ 784.536577][T10823] netlink: 'syz.2.1781': attribute type 2 has an invalid length. [ 784.562277][T10823] netlink: 'syz.2.1781': attribute type 8 has an invalid length. [ 784.580775][T10823] __nla_validate_parse: 1 callbacks suppressed [ 784.580795][T10823] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1781'. [ 784.812828][T10836] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1786'. [ 788.168931][T10853] FAULT_INJECTION: forcing a failure. [ 788.168931][T10853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.185744][T10853] CPU: 0 PID: 10853 Comm: syz.0.1790 Not tainted syzkaller #0 [ 788.193273][T10853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 788.203398][T10853] Call Trace: [ 788.206721][T10853] [ 788.209682][T10853] dump_stack_lvl+0x18c/0x250 [ 788.214419][T10853] ? show_regs_print_info+0x20/0x20 [ 788.219699][T10853] ? load_image+0x420/0x420 [ 788.224241][T10853] ? __lock_acquire+0x7d40/0x7d40 [ 788.229307][T10853] ? snprintf+0xe9/0x140 [ 788.233585][T10853] should_fail_ex+0x39d/0x4d0 [ 788.238295][T10853] _copy_to_user+0x2f/0xa0 [ 788.242745][T10853] simple_read_from_buffer+0xe7/0x150 [ 788.248171][T10853] proc_fail_nth_read+0x1e8/0x260 [ 788.253228][T10853] ? proc_fault_inject_write+0x360/0x360 [ 788.258899][T10853] ? fsnotify_perm+0x271/0x5e0 [ 788.263714][T10853] ? proc_fault_inject_write+0x360/0x360 [ 788.269377][T10853] vfs_read+0x28b/0x970 [ 788.273571][T10853] ? kernel_read+0x1e0/0x1e0 [ 788.278198][T10853] ? __fget_files+0x28/0x4b0 [ 788.282816][T10853] ? __fget_files+0x28/0x4b0 [ 788.287459][T10853] ? __fget_files+0x43d/0x4b0 [ 788.292189][T10853] ? __fdget_pos+0x2a3/0x330 [ 788.296820][T10853] ? ksys_read+0x75/0x260 [ 788.301192][T10853] ksys_read+0x150/0x260 [ 788.305468][T10853] ? vfs_write+0x990/0x990 [ 788.309929][T10853] ? lockdep_hardirqs_on+0x98/0x150 [ 788.315180][T10853] do_syscall_64+0x55/0xb0 [ 788.319639][T10853] ? clear_bhb_loop+0x40/0x90 [ 788.324346][T10853] ? clear_bhb_loop+0x40/0x90 [ 788.329049][T10853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 788.334985][T10853] RIP: 0033:0x7f874ad5d68e [ 788.339422][T10853] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 788.359048][T10853] RSP: 002b:00007f874bbcffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 788.367488][T10853] RAX: ffffffffffffffda RBX: 00007f874bbd06c0 RCX: 00007f874ad5d68e [ 788.375479][T10853] RDX: 000000000000000f RSI: 00007f874bbd00a0 RDI: 0000000000000005 [ 788.383471][T10853] RBP: 00007f874bbd0090 R08: 0000000000000000 R09: 0000000000000000 [ 788.391464][T10853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 788.399458][T10853] R13: 00007f874b016038 R14: 00007f874b015fa0 R15: 00007fff339497b8 [ 788.407465][T10853] [ 788.523598][T10854] mac80211_hwsim hwsim9 .3ãc¤±ÿÿ: renamed from wlan1 (while UP) [ 788.817099][T10861] netlink: 'syz.1.1795': attribute type 2 has an invalid length. [ 788.832307][T10861] netlink: 'syz.1.1795': attribute type 8 has an invalid length. [ 788.841246][T10861] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1795'. [ 789.010812][T10867] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.1791'. [ 789.238929][T10877] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1799'. [ 789.804373][T10882] netlink: 'syz.3.1791': attribute type 6 has an invalid length. [ 789.848580][T10882] netlink: 'syz.3.1791': attribute type 1 has an invalid length. [ 789.899857][T10882] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1791'. [ 790.092835][T10885] netlink: 'syz.3.1802': attribute type 10 has an invalid length. [ 792.663306][T10898] netlink: 'syz.0.1806': attribute type 2 has an invalid length. [ 792.673456][T10898] netlink: 'syz.0.1806': attribute type 8 has an invalid length. [ 792.682074][T10898] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1806'. [ 792.904108][T10908] netlink: 'syz.2.1811': attribute type 25 has an invalid length. [ 792.922253][T10908] netlink: 'syz.2.1811': attribute type 32 has an invalid length. [ 793.163933][T10913] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1812'. [ 793.461631][T10920] FAULT_INJECTION: forcing a failure. [ 793.461631][T10920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.479359][T10920] CPU: 1 PID: 10920 Comm: syz.3.1815 Not tainted syzkaller #0 [ 793.486936][T10920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 793.497087][T10920] Call Trace: [ 793.500473][T10920] [ 793.503513][T10920] dump_stack_lvl+0x18c/0x250 [ 793.508349][T10920] ? show_regs_print_info+0x20/0x20 [ 793.513678][T10920] ? load_image+0x420/0x420 [ 793.518323][T10920] ? __lock_acquire+0x7d40/0x7d40 [ 793.523496][T10920] ? snprintf+0xe9/0x140 [ 793.527893][T10920] should_fail_ex+0x39d/0x4d0 [ 793.532727][T10920] _copy_to_user+0x2f/0xa0 [ 793.537282][T10920] simple_read_from_buffer+0xe7/0x150 [ 793.542799][T10920] proc_fail_nth_read+0x1e8/0x260 [ 793.547947][T10920] ? proc_fault_inject_write+0x360/0x360 [ 793.553684][T10920] ? fsnotify_perm+0x271/0x5e0 [ 793.558522][T10920] ? proc_fault_inject_write+0x360/0x360 [ 793.564242][T10920] vfs_read+0x28b/0x970 [ 793.568503][T10920] ? kernel_read+0x1e0/0x1e0 [ 793.573188][T10920] ? __fget_files+0x28/0x4b0 [ 793.577850][T10920] ? __fget_files+0x28/0x4b0 [ 793.582551][T10920] ? __fget_files+0x43d/0x4b0 [ 793.587371][T10920] ? __fdget_pos+0x2a3/0x330 [ 793.592054][T10920] ? ksys_read+0x75/0x260 [ 793.596486][T10920] ksys_read+0x150/0x260 [ 793.600821][T10920] ? vfs_write+0x990/0x990 [ 793.605325][T10920] ? lockdep_hardirqs_on+0x98/0x150 [ 793.610632][T10920] do_syscall_64+0x55/0xb0 [ 793.615111][T10920] ? clear_bhb_loop+0x40/0x90 [ 793.619843][T10920] ? clear_bhb_loop+0x40/0x90 [ 793.624586][T10920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 793.630531][T10920] RIP: 0033:0x7fcbe395d68e [ 793.635005][T10920] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 793.654692][T10920] RSP: 002b:00007fcbe4876fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 793.663198][T10920] RAX: ffffffffffffffda RBX: 00007fcbe48776c0 RCX: 00007fcbe395d68e [ 793.671258][T10920] RDX: 000000000000000f RSI: 00007fcbe48770a0 RDI: 0000000000000009 [ 793.679305][T10920] RBP: 00007fcbe4877090 R08: 0000000000000000 R09: 0000000000000000 [ 793.687359][T10920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.695393][T10920] R13: 00007fcbe3c16038 R14: 00007fcbe3c15fa0 R15: 00007fffc8f3a1c8 [ 793.703514][T10920] [ 794.140264][T10931] netlink: 'syz.3.1818': attribute type 2 has an invalid length. [ 794.182962][T10931] netlink: 'syz.3.1818': attribute type 8 has an invalid length. [ 794.207751][T10931] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1818'. [ 794.266509][T10938] netlink: 'syz.0.1820': attribute type 46 has an invalid length. [ 794.428339][T10939] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1820'. [ 795.534256][T10958] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1828'. [ 798.530183][T10968] validate_nla: 2 callbacks suppressed [ 798.530200][T10968] netlink: 'syz.0.1833': attribute type 2 has an invalid length. [ 798.554481][T10968] netlink: 'syz.0.1833': attribute type 8 has an invalid length. [ 798.566515][T10968] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1833'. [ 802.384845][T11003] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1842'. [ 802.515623][T10999] netlink: 'syz.2.1844': attribute type 2 has an invalid length. [ 802.538021][T10999] netlink: 'syz.2.1844': attribute type 8 has an invalid length. [ 802.550743][T10999] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1844'. [ 803.112817][T11016] netlink: 'syz.1.1847': attribute type 46 has an invalid length. [ 803.263851][T11019] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1847'. [ 804.423147][T11031] FAULT_INJECTION: forcing a failure. [ 804.423147][T11031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.442013][T11031] CPU: 1 PID: 11031 Comm: syz.2.1853 Not tainted syzkaller #0 [ 804.449551][T11031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 804.459642][T11031] Call Trace: [ 804.462956][T11031] [ 804.465918][T11031] dump_stack_lvl+0x18c/0x250 [ 804.470644][T11031] ? show_regs_print_info+0x20/0x20 [ 804.475880][T11031] ? load_image+0x420/0x420 [ 804.480418][T11031] ? __might_fault+0xaa/0x120 [ 804.485126][T11031] ? __lock_acquire+0x7d40/0x7d40 [ 804.490201][T11031] should_fail_ex+0x39d/0x4d0 [ 804.494934][T11031] _copy_to_user+0x2f/0xa0 [ 804.499505][T11031] bpf_test_finish+0x19f/0x650 [ 804.504313][T11031] ? convert_skb_to___skb+0x420/0x420 [ 804.509717][T11031] ? _copy_from_user+0xa5/0xe0 [ 804.514553][T11031] ? bpf_test_init+0x119/0x140 [ 804.519352][T11031] bpf_prog_test_run_xdp+0x8a9/0x10e0 [ 804.524772][T11031] ? dev_put+0x80/0x80 [ 804.528882][T11031] ? dev_put+0x80/0x80 [ 804.533008][T11031] bpf_prog_test_run+0x321/0x390 [ 804.537982][T11031] __sys_bpf+0x49d/0x890 [ 804.542434][T11031] ? bpf_link_show_fdinfo+0x390/0x390 [ 804.547844][T11031] ? lock_chain_count+0x20/0x20 [ 804.552729][T11031] __x64_sys_bpf+0x7c/0x90 [ 804.557182][T11031] do_syscall_64+0x55/0xb0 [ 804.561631][T11031] ? clear_bhb_loop+0x40/0x90 [ 804.566324][T11031] ? clear_bhb_loop+0x40/0x90 [ 804.571026][T11031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 804.576976][T11031] RIP: 0033:0x7f3cd8f9ce59 [ 804.581415][T11031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.601050][T11031] RSP: 002b:00007f3cd9e58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 804.609491][T11031] RAX: ffffffffffffffda RBX: 00007f3cd9215fa0 RCX: 00007f3cd8f9ce59 [ 804.617487][T11031] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 804.625480][T11031] RBP: 00007f3cd9e58090 R08: 0000000000000000 R09: 0000000000000000 [ 804.633478][T11031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 804.641467][T11031] R13: 00007f3cd9216038 R14: 00007f3cd9215fa0 R15: 00007ffcdbdf1a88 [ 804.649474][T11031] [ 804.928856][T11038] netlink: 'syz.0.1856': attribute type 2 has an invalid length. [ 804.942564][T11038] netlink: 'syz.0.1856': attribute type 8 has an invalid length. [ 804.958174][T11038] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1856'. [ 805.271669][T11053] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1863'. [ 805.333152][T11053] FAULT_INJECTION: forcing a failure. [ 805.333152][T11053] name failslab, interval 1, probability 0, space 0, times 0 [ 805.356960][T11053] CPU: 1 PID: 11053 Comm: syz.3.1863 Not tainted syzkaller #0 [ 805.364576][T11053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 805.374674][T11053] Call Trace: [ 805.377994][T11053] [ 805.380962][T11053] dump_stack_lvl+0x18c/0x250 [ 805.385691][T11053] ? show_regs_print_info+0x20/0x20 [ 805.390935][T11053] ? load_image+0x420/0x420 [ 805.395490][T11053] ? __might_sleep+0xe0/0xe0 [ 805.400219][T11053] ? __lock_acquire+0x7d40/0x7d40 [ 805.405283][T11053] ? rcu_is_watching+0x15/0xb0 [ 805.410098][T11053] should_fail_ex+0x39d/0x4d0 [ 805.414939][T11053] should_failslab+0x9/0x20 [ 805.419491][T11053] slab_pre_alloc_hook+0x59/0x310 [ 805.424575][T11053] kmem_cache_alloc_node+0x60/0x320 [ 805.429826][T11053] ? __might_fault+0xc6/0x120 [ 805.434551][T11053] ? __alloc_skb+0x103/0x2c0 [ 805.439188][T11053] __alloc_skb+0x103/0x2c0 [ 805.443655][T11053] netlink_dump+0x1ec/0xe50 [ 805.448203][T11053] ? _raw_spin_unlock+0x40/0x40 [ 805.453108][T11053] ? iov_iter_init+0x1e0/0x1e0 [ 805.457931][T11053] ? __skb_try_recv_from_queue+0x58f/0x730 [ 805.463797][T11053] ? netlink_lookup+0x200/0x200 [ 805.468688][T11053] ? __skb_try_recv_datagram+0x3da/0x4d0 [ 805.474397][T11053] ? skb_copy_datagram_iter+0x200/0x200 [ 805.479985][T11053] ? refcount_dec_and_test+0x4f/0x70 [ 805.485314][T11053] netlink_recvmsg+0x693/0xe60 [ 805.490129][T11053] ? netlink_sendmsg+0xbf0/0xbf0 [ 805.495118][T11053] ? aa_af_perm+0x330/0x330 [ 805.499694][T11053] ? __lock_acquire+0x1273/0x7d40 [ 805.504767][T11053] ? verify_lock_unused+0x140/0x140 [ 805.510008][T11053] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 805.515361][T11053] ? security_socket_recvmsg+0x89/0xb0 [ 805.520863][T11053] ? netlink_sendmsg+0xbf0/0xbf0 [ 805.525845][T11053] ____sys_recvmsg+0x2ce/0x5e0 [ 805.530674][T11053] ? __sys_recvmsg_sock+0x50/0x50 [ 805.535766][T11053] ? import_iovec+0x73/0xa0 [ 805.540318][T11053] ___sys_recvmsg+0x216/0x590 [ 805.545044][T11053] ? __sys_recvmsg+0x2a0/0x2a0 [ 805.549862][T11053] ? ksys_write+0x1c4/0x260 [ 805.554428][T11053] ? __fget_files+0x43d/0x4b0 [ 805.559176][T11053] __x64_sys_recvmsg+0x20c/0x2e0 [ 805.564163][T11053] ? ___sys_recvmsg+0x590/0x590 [ 805.569069][T11053] ? lockdep_hardirqs_on+0x98/0x150 [ 805.574312][T11053] do_syscall_64+0x55/0xb0 [ 805.578763][T11053] ? clear_bhb_loop+0x40/0x90 [ 805.583475][T11053] ? clear_bhb_loop+0x40/0x90 [ 805.588177][T11053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 805.594100][T11053] RIP: 0033:0x7fcbe399ce59 [ 805.598538][T11053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.618173][T11053] RSP: 002b:00007fcbe4877028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 805.626615][T11053] RAX: ffffffffffffffda RBX: 00007fcbe3c15fa0 RCX: 00007fcbe399ce59 [ 805.634606][T11053] RDX: 0000000000000042 RSI: 0000200000000440 RDI: 0000000000000003 [ 805.642716][T11053] RBP: 00007fcbe4877090 R08: 0000000000000000 R09: 0000000000000000 [ 805.650708][T11053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.658704][T11053] R13: 00007fcbe3c16038 R14: 00007fcbe3c15fa0 R15: 00007fffc8f3a1c8 [ 805.666798][T11053] [ 805.877078][T11063] FAULT_INJECTION: forcing a failure. [ 805.877078][T11063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.890510][T11063] CPU: 0 PID: 11063 Comm: syz.2.1866 Not tainted syzkaller #0 [ 805.898038][T11063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 805.908121][T11063] Call Trace: [ 805.911429][T11063] [ 805.914373][T11063] dump_stack_lvl+0x18c/0x250 [ 805.919077][T11063] ? show_regs_print_info+0x20/0x20 [ 805.924328][T11063] ? load_image+0x420/0x420 [ 805.928868][T11063] ? __might_fault+0xaa/0x120 [ 805.933578][T11063] ? __lock_acquire+0x7d40/0x7d40 [ 805.938630][T11063] ? mark_lock+0x94/0x320 [ 805.943168][T11063] should_fail_ex+0x39d/0x4d0 [ 805.947881][T11063] _copy_from_user+0x2f/0xe0 [ 805.952500][T11063] get_user_ifreq+0x6b/0x180 [ 805.957121][T11063] inet_ioctl+0x3ed/0x560 [ 805.961478][T11063] ? tomoyo_path_number_perm+0x217/0x620 [ 805.967133][T11063] ? inet_shutdown+0x370/0x370 [ 805.971924][T11063] ? slab_free_freelist_hook+0x130/0x1a0 [ 805.977593][T11063] ? tomoyo_path_number_perm+0x500/0x620 [ 805.983265][T11063] ? __kmem_cache_free+0xba/0x1e0 [ 805.988331][T11063] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 805.993821][T11063] sock_do_ioctl+0xfc/0x310 [ 805.998354][T11063] ? sock_show_fdinfo+0xb0/0xb0 [ 806.003242][T11063] sock_ioctl+0x5ba/0x7e0 [ 806.007594][T11063] ? sock_poll+0x3e0/0x3e0 [ 806.012045][T11063] ? bpf_lsm_file_ioctl+0x9/0x10 [ 806.017016][T11063] ? security_file_ioctl+0x80/0xa0 [ 806.022153][T11063] ? sock_poll+0x3e0/0x3e0 [ 806.026595][T11063] __se_sys_ioctl+0xfd/0x170 [ 806.031216][T11063] do_syscall_64+0x55/0xb0 [ 806.035657][T11063] ? clear_bhb_loop+0x40/0x90 [ 806.040381][T11063] ? clear_bhb_loop+0x40/0x90 [ 806.045104][T11063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 806.051034][T11063] RIP: 0033:0x7f3cd8f9ce59 [ 806.055474][T11063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.076288][T11063] RSP: 002b:00007f3cd9e58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 806.085357][T11063] RAX: ffffffffffffffda RBX: 00007f3cd9215fa0 RCX: 00007f3cd8f9ce59 [ 806.093359][T11063] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000003 [ 806.101357][T11063] RBP: 00007f3cd9e58090 R08: 0000000000000000 R09: 0000000000000000 [ 806.109359][T11063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.117355][T11063] R13: 00007f3cd9216038 R14: 00007f3cd9215fa0 R15: 00007ffcdbdf1a88 [ 806.125364][T11063] [ 806.333181][T11067] netlink: 'syz.2.1867': attribute type 2 has an invalid length. [ 806.350543][T11067] netlink: 'syz.2.1867': attribute type 8 has an invalid length. [ 806.372749][T11067] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1867'. [ 806.711651][T11076] netlink: 'syz.1.1873': attribute type 5 has an invalid length. [ 807.164262][T11094] FAULT_INJECTION: forcing a failure. [ 807.164262][T11094] name failslab, interval 1, probability 0, space 0, times 0 [ 807.197677][T11094] CPU: 1 PID: 11094 Comm: syz.1.1877 Not tainted syzkaller #0 [ 807.205224][T11094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 807.215326][T11094] Call Trace: [ 807.218651][T11094] [ 807.221619][T11094] dump_stack_lvl+0x18c/0x250 [ 807.226354][T11094] ? show_regs_print_info+0x20/0x20 [ 807.231603][T11094] ? load_image+0x420/0x420 [ 807.236163][T11094] ? verify_lock_unused+0x140/0x140 [ 807.241426][T11094] should_fail_ex+0x39d/0x4d0 [ 807.246160][T11094] should_failslab+0x9/0x20 [ 807.250722][T11094] slab_pre_alloc_hook+0x59/0x310 [ 807.255810][T11094] kmem_cache_alloc+0x5a/0x2d0 [ 807.260632][T11094] ? skb_clone+0x1eb/0x370 [ 807.265107][T11094] skb_clone+0x1eb/0x370 [ 807.269411][T11094] __netlink_deliver_tap+0x41c/0x830 [ 807.274760][T11094] ? netlink_deliver_tap+0x2e/0x1b0 [ 807.280008][T11094] netlink_deliver_tap+0x19c/0x1b0 [ 807.285172][T11094] netlink_unicast+0x72c/0x8d0 [ 807.291220][T11094] netlink_sendmsg+0x8d0/0xbf0 [ 807.296039][T11094] ? netlink_getsockopt+0x590/0x590 [ 807.301292][T11094] ? aa_sock_msg_perm+0x94/0x150 [ 807.306292][T11094] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 807.311632][T11094] ? security_socket_sendmsg+0x80/0xa0 [ 807.317136][T11094] ? netlink_getsockopt+0x590/0x590 [ 807.322371][T11094] ____sys_sendmsg+0x5ba/0x960 [ 807.327202][T11094] ? __asan_memset+0x22/0x40 [ 807.331849][T11094] ? __sys_sendmsg_sock+0x30/0x30 [ 807.336899][T11094] ? __import_iovec+0x3fa/0x850 [ 807.336937][T11094] ? import_iovec+0x73/0xa0 [ 807.336959][T11094] ___sys_sendmsg+0x2a6/0x360 [ 807.351179][T11094] ? __sys_sendmsg+0x2a0/0x2a0 [ 807.356001][T11094] ? trace_call_bpf+0xc3/0x6c0 [ 807.360852][T11094] __se_sys_sendmsg+0x1c2/0x2b0 [ 807.365762][T11094] ? __x64_sys_sendmsg+0x80/0x80 [ 807.370750][T11094] ? lockdep_hardirqs_on+0x98/0x150 [ 807.375985][T11094] do_syscall_64+0x55/0xb0 [ 807.380447][T11094] ? clear_bhb_loop+0x40/0x90 [ 807.385163][T11094] ? clear_bhb_loop+0x40/0x90 [ 807.389876][T11094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 807.395834][T11094] RIP: 0033:0x7f8f55f9ce59 [ 807.400291][T11094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.419924][T11094] RSP: 002b:00007f8f56d7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.428389][T11094] RAX: ffffffffffffffda RBX: 00007f8f56216090 RCX: 00007f8f55f9ce59 [ 807.436406][T11094] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 807.444421][T11094] RBP: 00007f8f56d7b090 R08: 0000000000000000 R09: 0000000000000000 [ 807.452429][T11094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.460467][T11094] R13: 00007f8f56216128 R14: 00007f8f56216090 R15: 00007ffd622bf948 [ 807.468501][T11094] [ 807.481270][T11094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 807.488590][T11094] IPv6: NLM_F_CREATE should be set when creating new route [ 807.495963][T11094] IPv6: NLM_F_CREATE should be set when creating new route [ 807.503277][T11094] IPv6: NLM_F_CREATE should be set when creating new route [ 807.528061][T11092] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 807.534479][T11092] syzkaller1: linktype set to 769 [ 807.835603][T11108] netlink: 'syz.3.1881': attribute type 2 has an invalid length. [ 807.873598][T11108] netlink: 'syz.3.1881': attribute type 8 has an invalid length. [ 807.893145][T11108] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1881'. [ 807.908916][T11110] netlink: 'syz.2.1884': attribute type 25 has an invalid length. [ 807.918390][T11110] netlink: 'syz.2.1884': attribute type 32 has an invalid length. [ 808.816161][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.822703][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.888983][T11134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 809.075939][T11138] netlink: 'syz.2.1895': attribute type 25 has an invalid length. [ 809.087053][T11140] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 809.094015][T11140] syzkaller1: linktype set to 769 [ 809.376007][T11146] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1898'. [ 810.281000][T11153] validate_nla: 1 callbacks suppressed [ 810.281019][T11153] netlink: 'syz.1.1901': attribute type 2 has an invalid length. [ 810.343995][T11153] netlink: 'syz.1.1901': attribute type 8 has an invalid length. [ 810.374091][T11153] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1901'. [ 810.735543][T11166] netlink: 'syz.2.1906': attribute type 29 has an invalid length. [ 810.841034][T11166] netlink: 'syz.2.1906': attribute type 29 has an invalid length. [ 810.911476][T11164] netlink: 'syz.1.1905': attribute type 25 has an invalid length. [ 810.921014][T11164] netlink: 'syz.1.1905': attribute type 32 has an invalid length. [ 810.935088][T11167] netlink: 'syz.2.1906': attribute type 29 has an invalid length. [ 810.995255][T11166] netlink: 'syz.2.1906': attribute type 29 has an invalid length. [ 811.079405][T11170] delete_channel: no stack [ 811.183399][T11179] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.1909'. [ 811.503330][T11185] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1911'. [ 811.909913][T11191] netlink: 'syz.0.1913': attribute type 2 has an invalid length. [ 811.918208][T11191] netlink: 'syz.0.1913': attribute type 8 has an invalid length. [ 811.937027][T11191] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1913'. [ 812.908116][T11214] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1924'. [ 813.091336][T11222] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1926'. [ 813.329637][T11223] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1927'. [ 814.404755][T11250] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1937'. [ 814.462253][T11246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 814.469593][T11246] IPv6: NLM_F_CREATE should be set when creating new route [ 814.476999][T11246] IPv6: NLM_F_CREATE should be set when creating new route [ 814.484327][T11246] IPv6: NLM_F_CREATE should be set when creating new route [ 814.962216][T11258] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1939'. [ 814.982801][T11262] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 814.996228][T11262] syzkaller1: linktype set to 769 [ 815.714352][T11282] validate_nla: 7 callbacks suppressed [ 815.714426][T11282] netlink: 'syz.2.1948': attribute type 2 has an invalid length. [ 815.742054][T11282] netlink: 'syz.2.1948': attribute type 8 has an invalid length. [ 815.759133][T11282] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1948'. [ 815.915971][T11294] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1953'. [ 816.229302][T11300] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.1956'. [ 816.653256][T11307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 816.660756][T11307] IPv6: NLM_F_CREATE should be set when creating new route [ 816.668479][T11307] IPv6: NLM_F_CREATE should be set when creating new route [ 816.676007][T11307] IPv6: NLM_F_CREATE should be set when creating new route [ 816.785492][T11314] FAULT_INJECTION: forcing a failure. [ 816.785492][T11314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.835870][T11314] CPU: 1 PID: 11314 Comm: syz.2.1960 Not tainted syzkaller #0 [ 816.843410][T11314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 816.853515][T11314] Call Trace: [ 816.856831][T11314] [ 816.859887][T11314] dump_stack_lvl+0x18c/0x250 [ 816.864620][T11314] ? show_regs_print_info+0x20/0x20 [ 816.869862][T11314] ? load_image+0x420/0x420 [ 816.874406][T11314] ? __might_fault+0xaa/0x120 [ 816.879135][T11314] ? __lock_acquire+0x7d40/0x7d40 [ 816.884206][T11314] should_fail_ex+0x39d/0x4d0 [ 816.888950][T11314] _copy_from_user+0x2f/0xe0 [ 816.893589][T11314] ___sys_sendmsg+0x1c7/0x360 [ 816.898325][T11314] ? __sys_sendmsg+0x2a0/0x2a0 [ 816.903152][T11314] ? trace_call_bpf+0xc3/0x6c0 [ 816.907996][T11314] __se_sys_sendmsg+0x1c2/0x2b0 [ 816.912903][T11314] ? __x64_sys_sendmsg+0x80/0x80 [ 816.917905][T11314] ? lockdep_hardirqs_on+0x98/0x150 [ 816.923159][T11314] do_syscall_64+0x55/0xb0 [ 816.927619][T11314] ? clear_bhb_loop+0x40/0x90 [ 816.932336][T11314] ? clear_bhb_loop+0x40/0x90 [ 816.937061][T11314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 816.943008][T11314] RIP: 0033:0x7f3cd8f9ce59 [ 816.947466][T11314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.967197][T11314] RSP: 002b:00007f3cd9e58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 816.975649][T11314] RAX: ffffffffffffffda RBX: 00007f3cd9215fa0 RCX: 00007f3cd8f9ce59 [ 816.983661][T11314] RDX: 0000000004008050 RSI: 0000200000001780 RDI: 0000000000000006 [ 816.991682][T11314] RBP: 00007f3cd9e58090 R08: 0000000000000000 R09: 0000000000000000 [ 816.999698][T11314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.007710][T11314] R13: 00007f3cd9216038 R14: 00007f3cd9215fa0 R15: 00007ffcdbdf1a88 [ 817.015745][T11314] [ 817.159457][T11306] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 817.189996][T11306] syzkaller1: linktype set to 769 [ 817.319431][T11323] netlink: 'syz.2.1963': attribute type 2 has an invalid length. [ 817.340076][T11323] netlink: 'syz.2.1963': attribute type 8 has an invalid length. [ 817.348567][T11323] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1963'. [ 817.433231][T11328] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.1966'. [ 817.675103][T11334] netlink: 'syz.2.1970': attribute type 25 has an invalid length. [ 817.700764][T11334] netlink: 'syz.2.1970': attribute type 32 has an invalid length. [ 817.802139][T11336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 817.872906][T11336] .`: (slave bond_slave_0): Releasing backup interface [ 817.898705][T11336] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 817.932371][T11338] __nla_validate_parse: 3 callbacks suppressed [ 817.932391][T11338] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1971'. [ 818.156636][T11351] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.1977'. [ 818.398151][T11357] netlink: 'syz.1.1978': attribute type 2 has an invalid length. [ 818.422110][T11357] netlink: 'syz.1.1978': attribute type 8 has an invalid length. [ 818.438815][T11357] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1978'. [ 818.571230][T11360] netlink: 'syz.2.1981': attribute type 25 has an invalid length. [ 818.581462][T11360] netlink: 'syz.2.1981': attribute type 32 has an invalid length. [ 821.695547][T11372] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.1987'. [ 821.778912][T11378] FAULT_INJECTION: forcing a failure. [ 821.778912][T11378] name failslab, interval 1, probability 0, space 0, times 0 [ 821.792104][T11378] CPU: 0 PID: 11378 Comm: syz.0.1990 Not tainted syzkaller #0 [ 821.799629][T11378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 821.809746][T11378] Call Trace: [ 821.813068][T11378] [ 821.816030][T11378] dump_stack_lvl+0x18c/0x250 [ 821.820772][T11378] ? show_regs_print_info+0x20/0x20 [ 821.826016][T11378] ? load_image+0x420/0x420 [ 821.830572][T11378] ? __might_sleep+0xe0/0xe0 [ 821.835208][T11378] ? __lock_acquire+0x7d40/0x7d40 [ 821.840287][T11378] should_fail_ex+0x39d/0x4d0 [ 821.845021][T11378] should_failslab+0x9/0x20 [ 821.849577][T11378] slab_pre_alloc_hook+0x59/0x310 [ 821.855081][T11378] ? __lock_acquire+0x7d40/0x7d40 [ 821.860165][T11378] kmem_cache_alloc_node+0x60/0x320 [ 821.865403][T11378] ? __alloc_skb+0x103/0x2c0 [ 821.870036][T11378] __alloc_skb+0x103/0x2c0 [ 821.874497][T11378] netlink_sendmsg+0x66a/0xbf0 [ 821.879298][T11378] ? perf_trace_lock+0x304/0x3b0 [ 821.884289][T11378] ? netlink_getsockopt+0x590/0x590 [ 821.889528][T11378] ? aa_sock_msg_perm+0x94/0x150 [ 821.894525][T11378] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 821.899848][T11378] ? security_socket_sendmsg+0x80/0xa0 [ 821.905353][T11378] ? netlink_getsockopt+0x590/0x590 [ 821.910590][T11378] ____sys_sendmsg+0x5ba/0x960 [ 821.915411][T11378] ? __asan_memset+0x22/0x40 [ 821.920047][T11378] ? __sys_sendmsg_sock+0x30/0x30 [ 821.925118][T11378] ? __import_iovec+0x3fa/0x850 [ 821.930029][T11378] ? import_iovec+0x73/0xa0 [ 821.934584][T11378] ___sys_sendmsg+0x2a6/0x360 [ 821.939310][T11378] ? __sys_sendmsg+0x2a0/0x2a0 [ 821.944168][T11378] ? __lock_acquire+0x7d40/0x7d40 [ 821.949274][T11378] __se_sys_sendmsg+0x1c2/0x2b0 [ 821.954197][T11378] ? __x64_sys_sendmsg+0x80/0x80 [ 821.959203][T11378] ? lockdep_hardirqs_on+0x98/0x150 [ 821.964453][T11378] do_syscall_64+0x55/0xb0 [ 821.968909][T11378] ? clear_bhb_loop+0x40/0x90 [ 821.973621][T11378] ? clear_bhb_loop+0x40/0x90 [ 821.978339][T11378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 821.984306][T11378] RIP: 0033:0x7f874ad9ce59 [ 821.988754][T11378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.008393][T11378] RSP: 002b:00007f874bbd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.016859][T11378] RAX: ffffffffffffffda RBX: 00007f874b015fa0 RCX: 00007f874ad9ce59 [ 822.024872][T11378] RDX: 0000000020000050 RSI: 0000200000000100 RDI: 0000000000000008 [ 822.032881][T11378] RBP: 00007f874bbd0090 R08: 0000000000000000 R09: 0000000000000000 [ 822.040886][T11378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.048913][T11378] R13: 00007f874b016038 R14: 00007f874b015fa0 R15: 00007fff339497b8 [ 822.056960][T11378] [ 822.149212][T11385] mac80211_hwsim hwsim8 ..ãc¤±: renamed from wlan1 (while UP) [ 822.169110][T11381] netlink: 'syz.2.1991': attribute type 25 has an invalid length. [ 822.177474][T11381] netlink: 'syz.2.1991': attribute type 32 has an invalid length. [ 822.334781][T11387] netlink: 'syz.0.1993': attribute type 2 has an invalid length. [ 822.352013][T11387] netlink: 'syz.0.1993': attribute type 8 has an invalid length. [ 822.360278][T11387] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1993'. [ 822.767537][T11401] syzkaller0: entered promiscuous mode [ 822.783388][T11401] syzkaller0: entered allmulticast mode [ 822.877359][T11404] netlink: 'syz.0.1998': attribute type 29 has an invalid length. [ 825.576217][T11404] netlink: 'syz.0.1998': attribute type 29 has an invalid length. [ 825.772671][T11418] FAULT_INJECTION: forcing a failure. [ 825.772671][T11418] name failslab, interval 1, probability 0, space 0, times 0 [ 825.785803][T11418] CPU: 0 PID: 11418 Comm: syz.2.2003 Not tainted syzkaller #0 [ 825.793324][T11418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 825.803417][T11418] Call Trace: [ 825.806735][T11418] [ 825.809679][T11418] dump_stack_lvl+0x18c/0x250 [ 825.814406][T11418] ? show_regs_print_info+0x20/0x20 [ 825.819656][T11418] ? load_image+0x420/0x420 [ 825.824205][T11418] ? perf_trace_lock_acquire+0x104/0x410 [ 825.829884][T11418] ? verify_lock_unused+0x140/0x140 [ 825.835111][T11418] ? perf_trace_lock_acquire+0x104/0x410 [ 825.840787][T11418] should_fail_ex+0x39d/0x4d0 [ 825.845523][T11418] should_failslab+0x9/0x20 [ 825.850080][T11418] slab_pre_alloc_hook+0x59/0x310 [ 825.855148][T11418] kmem_cache_alloc+0x5a/0x2d0 [ 825.859955][T11418] ? skb_clone+0x1eb/0x370 [ 825.864414][T11418] skb_clone+0x1eb/0x370 [ 825.868703][T11418] __netlink_deliver_tap+0x41c/0x830 [ 825.874017][T11418] ? netlink_deliver_tap+0x2e/0x1b0 [ 825.879260][T11418] netlink_deliver_tap+0x19c/0x1b0 [ 825.884418][T11418] netlink_unicast+0x72c/0x8d0 [ 825.889202][T11418] netlink_sendmsg+0x8d0/0xbf0 [ 825.893997][T11418] ? netlink_getsockopt+0x590/0x590 [ 825.899218][T11418] ? aa_sock_msg_perm+0x94/0x150 [ 825.904172][T11418] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 825.909485][T11418] ? security_socket_sendmsg+0x80/0xa0 [ 825.914981][T11418] ? netlink_getsockopt+0x590/0x590 [ 825.920210][T11418] ____sys_sendmsg+0x5ba/0x960 [ 825.925007][T11418] ? __asan_memset+0x22/0x40 [ 825.929640][T11418] ? __sys_sendmsg_sock+0x30/0x30 [ 825.934703][T11418] ? __import_iovec+0x5f2/0x850 [ 825.939575][T11418] ? import_iovec+0x73/0xa0 [ 825.944096][T11418] ___sys_sendmsg+0x2a6/0x360 [ 825.948854][T11418] ? __sys_sendmsg+0x2a0/0x2a0 [ 825.953687][T11418] ? __lock_acquire+0x7d40/0x7d40 [ 825.958785][T11418] __se_sys_sendmsg+0x1c2/0x2b0 [ 825.963670][T11418] ? __x64_sys_sendmsg+0x80/0x80 [ 825.968663][T11418] ? lockdep_hardirqs_on+0x98/0x150 [ 825.973892][T11418] do_syscall_64+0x55/0xb0 [ 825.978335][T11418] ? clear_bhb_loop+0x40/0x90 [ 825.983044][T11418] ? clear_bhb_loop+0x40/0x90 [ 825.987759][T11418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 825.993718][T11418] RIP: 0033:0x7f3cd8f9ce59 [ 825.998167][T11418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.017802][T11418] RSP: 002b:00007f3cd9e58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.026260][T11418] RAX: ffffffffffffffda RBX: 00007f3cd9215fa0 RCX: 00007f3cd8f9ce59 [ 826.034278][T11418] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 826.042268][T11418] RBP: 00007f3cd9e58090 R08: 0000000000000000 R09: 0000000000000000 [ 826.050264][T11418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.058252][T11418] R13: 00007f3cd9216038 R14: 00007f3cd9215fa0 R15: 00007ffcdbdf1a88 [ 826.066279][T11418] [ 827.476975][T11415] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2001'. [ 827.504786][T11415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 827.542415][T11419] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2001'. [ 827.551653][T11423] netlink: 'syz.2.2005': attribute type 25 has an invalid length. [ 827.567974][T11423] netlink: 'syz.2.2005': attribute type 32 has an invalid length. [ 831.239151][T11451] syzkaller0: entered promiscuous mode [ 831.256080][T11451] syzkaller0: entered allmulticast mode [ 833.483049][T11466] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2019'. [ 833.514007][T11466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 833.542487][T11468] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2019'. [ 833.562208][T11468] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2019'. [ 833.579519][T11468] .`: (slave bond_slave_0): Releasing backup interface [ 833.602451][T11468] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 833.722804][T11484] netlink: 'syz.0.2027': attribute type 9 has an invalid length. [ 833.759340][T11484] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2027'. [ 833.814703][T11487] netlink: 'syz.2.2028': attribute type 2 has an invalid length. [ 833.833633][T11487] netlink: 'syz.2.2028': attribute type 8 has an invalid length. [ 833.836251][T11494] FAULT_INJECTION: forcing a failure. [ 833.836251][T11494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 833.843792][T11487] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2028'. [ 833.870065][T11494] CPU: 0 PID: 11494 Comm: syz.3.2030 Not tainted syzkaller #0 [ 833.877615][T11494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 833.887762][T11494] Call Trace: [ 833.891109][T11494] [ 833.894104][T11494] dump_stack_lvl+0x18c/0x250 [ 833.898906][T11494] ? show_regs_print_info+0x20/0x20 [ 833.904179][T11494] ? load_image+0x420/0x420 [ 833.908764][T11494] ? __might_fault+0xaa/0x120 [ 833.913557][T11494] ? __lock_acquire+0x7d40/0x7d40 [ 833.914600][T11493] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2029'. [ 833.918648][T11494] should_fail_ex+0x39d/0x4d0 [ 833.932494][T11494] _copy_from_user+0x2f/0xe0 [ 833.937178][T11494] ___sys_sendmsg+0x1c7/0x360 [ 833.941959][T11494] ? __sys_sendmsg+0x2a0/0x2a0 [ 833.946861][T11494] ? __lock_acquire+0x7d40/0x7d40 [ 833.952058][T11494] __se_sys_sendmsg+0x1c2/0x2b0 [ 833.957002][T11494] ? __x64_sys_sendmsg+0x80/0x80 [ 833.962251][T11494] ? lockdep_hardirqs_on+0x98/0x150 [ 833.967526][T11494] do_syscall_64+0x55/0xb0 [ 833.971984][T11494] ? clear_bhb_loop+0x40/0x90 [ 833.976702][T11494] ? clear_bhb_loop+0x40/0x90 [ 833.981431][T11494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 833.987384][T11494] RIP: 0033:0x7fcbe399ce59 [ 833.991853][T11494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.011528][T11494] RSP: 002b:00007fcbe4856028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.020008][T11494] RAX: ffffffffffffffda RBX: 00007fcbe3c16090 RCX: 00007fcbe399ce59 [ 834.028039][T11494] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 834.036079][T11494] RBP: 00007fcbe4856090 R08: 0000000000000000 R09: 0000000000000000 [ 834.044095][T11494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.052110][T11494] R13: 00007fcbe3c16128 R14: 00007fcbe3c16090 R15: 00007fffc8f3a1c8 [ 834.060170][T11494] [ 834.086156][T11491] netlink: 'syz.3.2030': attribute type 9 has an invalid length. [ 834.094653][T11491] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2030'. [ 834.231500][T11490] netlink: 'syz.0.2027': attribute type 9 has an invalid length. [ 834.240534][T11490] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2027'. [ 834.615485][T11503] netlink: 'syz.2.2034': attribute type 25 has an invalid length. [ 834.632715][T11503] netlink: 'syz.2.2034': attribute type 32 has an invalid length. [ 834.769286][T11505] syzkaller0: entered promiscuous mode [ 834.775059][T11505] syzkaller0: entered allmulticast mode [ 835.087239][T11515] netlink: 'syz.3.2038': attribute type 9 has an invalid length. [ 835.099332][T11515] netlink: 181256 bytes leftover after parsing attributes in process `syz.3.2038'. [ 835.146536][T11517] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2038'. [ 836.509313][T11519] netlink: 'syz.3.2038': attribute type 9 has an invalid length. [ 836.549341][T11521] netlink: 'syz.1.2039': attribute type 2 has an invalid length. [ 837.040392][T11544] syzkaller0: entered promiscuous mode [ 837.046238][T11544] syzkaller0: entered allmulticast mode [ 837.317658][T11552] FAULT_INJECTION: forcing a failure. [ 837.317658][T11552] name failslab, interval 1, probability 0, space 0, times 0 [ 837.331551][T11552] CPU: 0 PID: 11552 Comm: syz.1.2052 Not tainted syzkaller #0 [ 837.339081][T11552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 837.349181][T11552] Call Trace: [ 837.352484][T11552] [ 837.355424][T11552] dump_stack_lvl+0x18c/0x250 [ 837.360121][T11552] ? show_regs_print_info+0x20/0x20 [ 837.365363][T11552] ? load_image+0x420/0x420 [ 837.369899][T11552] ? __might_sleep+0xe0/0xe0 [ 837.374526][T11552] ? __lock_acquire+0x7d40/0x7d40 [ 837.379591][T11552] should_fail_ex+0x39d/0x4d0 [ 837.384319][T11552] should_failslab+0x9/0x20 [ 837.388869][T11552] slab_pre_alloc_hook+0x59/0x310 [ 837.393933][T11552] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 837.399684][T11552] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 837.405434][T11552] __kmem_cache_alloc_node+0x53/0x250 [ 837.410846][T11552] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 837.416597][T11552] __kmalloc+0xa4/0x230 [ 837.420794][T11552] tomoyo_realpath_from_path+0xe3/0x5d0 [ 837.426388][T11552] tomoyo_path_number_perm+0x248/0x620 [ 837.431886][T11552] ? tomoyo_path_number_perm+0x217/0x620 [ 837.437577][T11552] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 837.443160][T11552] ? ksys_write+0x1c4/0x260 [ 837.447763][T11552] ? __fget_files+0x28/0x4b0 [ 837.452477][T11552] ? __fget_files+0x28/0x4b0 [ 837.457116][T11552] security_file_ioctl+0x70/0xa0 [ 837.462087][T11552] __se_sys_ioctl+0x48/0x170 [ 837.466709][T11552] do_syscall_64+0x55/0xb0 [ 837.471166][T11552] ? clear_bhb_loop+0x40/0x90 [ 837.475866][T11552] ? clear_bhb_loop+0x40/0x90 [ 837.480567][T11552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 837.486493][T11552] RIP: 0033:0x7f8f55f9ce59 [ 837.490939][T11552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.510580][T11552] RSP: 002b:00007f8f56d9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 837.519032][T11552] RAX: ffffffffffffffda RBX: 00007f8f56215fa0 RCX: 00007f8f55f9ce59 [ 837.527030][T11552] RDX: fffffffffffffff9 RSI: 0000000000002401 RDI: 0000000000000004 [ 837.535039][T11552] RBP: 00007f8f56d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 837.543034][T11552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.551040][T11552] R13: 00007f8f56216038 R14: 00007f8f56215fa0 R15: 00007ffd622bf948 [ 837.559056][T11552] [ 837.582319][T11552] ERROR: Out of memory at tomoyo_realpath_from_path. [ 837.896962][T11562] FAULT_INJECTION: forcing a failure. [ 837.896962][T11562] name failslab, interval 1, probability 0, space 0, times 0 [ 837.957007][T11562] CPU: 1 PID: 11562 Comm: syz.1.2055 Not tainted syzkaller #0 [ 837.964576][T11562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 837.974683][T11562] Call Trace: [ 837.978005][T11562] [ 837.980955][T11562] dump_stack_lvl+0x18c/0x250 [ 837.985674][T11562] ? show_regs_print_info+0x20/0x20 [ 837.991000][T11562] ? load_image+0x420/0x420 [ 837.995546][T11562] ? __lock_acquire+0x7d40/0x7d40 [ 838.000624][T11562] should_fail_ex+0x39d/0x4d0 [ 838.005354][T11562] should_failslab+0x9/0x20 [ 838.009930][T11562] slab_pre_alloc_hook+0x59/0x310 [ 838.015003][T11562] ? __lock_acquire+0x7d40/0x7d40 [ 838.020095][T11562] kmem_cache_alloc+0x5a/0x2d0 [ 838.024902][T11562] ? security_file_alloc+0x34/0x120 [ 838.030133][T11562] security_file_alloc+0x34/0x120 [ 838.035218][T11562] init_file+0x94/0x1f0 [ 838.039421][T11562] alloc_empty_file+0xb7/0x1d0 [ 838.044208][T11562] alloc_file+0x5c/0x600 [ 838.048485][T11562] alloc_file_pseudo+0x184/0x210 [ 838.053474][T11562] ? alloc_empty_backing_file+0xe0/0xe0 [ 838.059078][T11562] ? _raw_spin_unlock+0x28/0x40 [ 838.063988][T11562] ? alloc_fd+0x58f/0x630 [ 838.068361][T11562] sock_alloc_file+0xb7/0x280 [ 838.073058][T11562] __sys_socket+0x13d/0x1a0 [ 838.077599][T11562] __x64_sys_socket+0x7a/0x90 [ 838.082332][T11562] do_syscall_64+0x55/0xb0 [ 838.086781][T11562] ? clear_bhb_loop+0x40/0x90 [ 838.091501][T11562] ? clear_bhb_loop+0x40/0x90 [ 838.096189][T11562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 838.102114][T11562] RIP: 0033:0x7f8f55f9ce59 [ 838.106563][T11562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.126176][T11562] RSP: 002b:00007f8f56d9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 838.134604][T11562] RAX: ffffffffffffffda RBX: 00007f8f56215fa0 RCX: 00007f8f55f9ce59 [ 838.142601][T11562] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 838.150584][T11562] RBP: 00007f8f56d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 838.158589][T11562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.166598][T11562] R13: 00007f8f56216038 R14: 00007f8f56215fa0 R15: 00007ffd622bf948 [ 838.174600][T11562] [ 839.269091][T11560] validate_nla: 5 callbacks suppressed [ 839.269108][T11560] netlink: 'syz.0.2054': attribute type 2 has an invalid length. [ 839.284115][T11560] netlink: 'syz.0.2054': attribute type 8 has an invalid length. [ 839.294487][T11560] __nla_validate_parse: 5 callbacks suppressed [ 839.294502][T11560] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2054'. [ 839.495170][T11571] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2060'. [ 839.514462][T11573] netlink: 'syz.3.2059': attribute type 2 has an invalid length. [ 839.542360][T11573] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.2059'. [ 839.707749][T11585] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2062'. [ 839.958536][T11591] delete_channel: no stack [ 839.978656][T11591] delete_channel: no stack [ 840.213808][T11594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2067'. [ 843.044407][T11598] FAULT_INJECTION: forcing a failure. [ 843.044407][T11598] name failslab, interval 1, probability 0, space 0, times 0 [ 843.072210][T11598] CPU: 0 PID: 11598 Comm: syz.3.2071 Not tainted syzkaller #0 [ 843.079776][T11598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 843.089932][T11598] Call Trace: [ 843.093267][T11598] [ 843.096265][T11598] dump_stack_lvl+0x18c/0x250 [ 843.101037][T11598] ? show_regs_print_info+0x20/0x20 [ 843.106318][T11598] ? load_image+0x420/0x420 [ 843.110905][T11598] ? __might_sleep+0xe0/0xe0 [ 843.115577][T11598] ? __lock_acquire+0x7d40/0x7d40 [ 843.120692][T11598] should_fail_ex+0x39d/0x4d0 [ 843.125490][T11598] should_failslab+0x9/0x20 [ 843.130104][T11598] slab_pre_alloc_hook+0x59/0x310 [ 843.135231][T11598] ? d_instantiate+0x6f/0x90 [ 843.139916][T11598] kmem_cache_alloc+0x5a/0x2d0 [ 843.144786][T11598] ? alloc_empty_file+0x9e/0x1d0 [ 843.149838][T11598] alloc_empty_file+0x9e/0x1d0 [ 843.154687][T11598] alloc_file+0x5c/0x600 [ 843.159035][T11598] alloc_file_pseudo+0x184/0x210 [ 843.164073][T11598] ? alloc_empty_backing_file+0xe0/0xe0 [ 843.169730][T11598] ? _raw_spin_unlock+0x28/0x40 [ 843.174670][T11598] ? alloc_fd+0x58f/0x630 [ 843.179212][T11598] sock_alloc_file+0xb7/0x280 [ 843.183981][T11598] __sys_socket+0x13d/0x1a0 [ 843.188586][T11598] __x64_sys_socket+0x7a/0x90 [ 843.193350][T11598] do_syscall_64+0x55/0xb0 [ 843.197838][T11598] ? clear_bhb_loop+0x40/0x90 [ 843.202584][T11598] ? clear_bhb_loop+0x40/0x90 [ 843.207316][T11598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 843.213264][T11598] RIP: 0033:0x7fcbe399ce59 [ 843.217728][T11598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.237388][T11598] RSP: 002b:00007fcbe4877028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 843.245856][T11598] RAX: ffffffffffffffda RBX: 00007fcbe3c15fa0 RCX: 00007fcbe399ce59 [ 843.253868][T11598] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 843.261889][T11598] RBP: 00007fcbe4877090 R08: 0000000000000000 R09: 0000000000000000 [ 843.269908][T11598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 843.277930][T11598] R13: 00007fcbe3c16038 R14: 00007fcbe3c15fa0 R15: 00007fffc8f3a1c8 [ 843.285993][T11598] [ 843.484298][T11602] syzkaller0: entered promiscuous mode [ 843.490124][T11602] syzkaller0: entered allmulticast mode [ 845.619591][T11617] netlink: 'syz.2.2075': attribute type 2 has an invalid length. [ 845.628768][T11617] netlink: 'syz.2.2075': attribute type 8 has an invalid length. [ 845.637305][T11617] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2075'. [ 845.653253][T11624] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2077'. [ 846.145868][T11635] netlink: 'syz.0.2081': attribute type 29 has an invalid length. [ 846.158061][T11635] netlink: 'syz.0.2081': attribute type 29 has an invalid length. [ 846.934005][T11633] syz.2.2079 (11633) used greatest stack depth: 16680 bytes left [ 847.166431][T11647] syzkaller0: entered promiscuous mode [ 847.172175][T11647] syzkaller0: entered allmulticast mode [ 849.107625][T11654] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2088'. [ 849.689016][T11676] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2096'. [ 849.769615][T11681] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2098'. [ 849.965407][T11685] syzkaller0: entered promiscuous mode [ 849.971132][T11685] syzkaller0: entered allmulticast mode [ 850.006701][T11686] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2099'. [ 850.868049][T11708] FAULT_INJECTION: forcing a failure. [ 850.868049][T11708] name failslab, interval 1, probability 0, space 0, times 0 [ 850.882155][T11708] CPU: 1 PID: 11708 Comm: syz.1.2108 Not tainted syzkaller #0 [ 850.889678][T11708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 850.899860][T11708] Call Trace: [ 850.903180][T11708] [ 850.906151][T11708] dump_stack_lvl+0x18c/0x250 [ 850.910950][T11708] ? show_regs_print_info+0x20/0x20 [ 850.916195][T11708] ? load_image+0x420/0x420 [ 850.920726][T11708] ? __might_sleep+0xe0/0xe0 [ 850.925348][T11708] ? __lock_acquire+0x7d40/0x7d40 [ 850.930408][T11708] should_fail_ex+0x39d/0x4d0 [ 850.935124][T11708] should_failslab+0x9/0x20 [ 850.939676][T11708] slab_pre_alloc_hook+0x59/0x310 [ 850.944739][T11708] ? d_instantiate+0x6f/0x90 [ 850.949356][T11708] kmem_cache_alloc+0x5a/0x2d0 [ 850.954237][T11708] ? alloc_empty_file+0x9e/0x1d0 [ 850.959238][T11708] alloc_empty_file+0x9e/0x1d0 [ 850.964055][T11708] alloc_file+0x5c/0x600 [ 850.968331][T11708] alloc_file_pseudo+0x184/0x210 [ 850.973302][T11708] ? alloc_empty_backing_file+0xe0/0xe0 [ 850.978913][T11708] ? alloc_fd+0x58f/0x630 [ 850.983276][T11708] anon_inode_getfd+0xca/0x1c0 [ 850.988084][T11708] map_create+0xf14/0x12f0 [ 850.992535][T11708] __sys_bpf+0x651/0x890 [ 850.996806][T11708] ? bpf_link_show_fdinfo+0x390/0x390 [ 851.002221][T11708] ? lock_chain_count+0x20/0x20 [ 851.007102][T11708] __x64_sys_bpf+0x7c/0x90 [ 851.011537][T11708] do_syscall_64+0x55/0xb0 [ 851.015977][T11708] ? clear_bhb_loop+0x40/0x90 [ 851.020674][T11708] ? clear_bhb_loop+0x40/0x90 [ 851.025372][T11708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 851.031292][T11708] RIP: 0033:0x7f8f55f9ce59 [ 851.035728][T11708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.055355][T11708] RSP: 002b:00007f8f56d9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 851.063790][T11708] RAX: ffffffffffffffda RBX: 00007f8f56215fa0 RCX: 00007f8f55f9ce59 [ 851.071784][T11708] RDX: 0000000000000048 RSI: 0000200000000280 RDI: 0000000000000000 [ 851.079782][T11708] RBP: 00007f8f56d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 851.087775][T11708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.095767][T11708] R13: 00007f8f56216038 R14: 00007f8f56215fa0 R15: 00007ffd622bf948 [ 851.103774][T11708] [ 852.223384][T11716] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2110'. [ 852.619533][T11725] FAULT_INJECTION: forcing a failure. [ 852.619533][T11725] name failslab, interval 1, probability 0, space 0, times 0 [ 852.658888][T11725] CPU: 0 PID: 11725 Comm: syz.2.2114 Not tainted syzkaller #0 [ 852.666514][T11725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 852.676608][T11725] Call Trace: [ 852.679931][T11725] [ 852.682913][T11725] dump_stack_lvl+0x18c/0x250 [ 852.687670][T11725] ? show_regs_print_info+0x20/0x20 [ 852.692937][T11725] ? load_image+0x420/0x420 [ 852.697484][T11725] ? __might_sleep+0xe0/0xe0 [ 852.702119][T11725] ? __lock_acquire+0x7d40/0x7d40 [ 852.707186][T11725] should_fail_ex+0x39d/0x4d0 [ 852.711934][T11725] should_failslab+0x9/0x20 [ 852.716479][T11725] slab_pre_alloc_hook+0x59/0x310 [ 852.721555][T11725] ? kvmalloc_node+0x70/0x180 [ 852.726287][T11725] ? kvmalloc_node+0x70/0x180 [ 852.731013][T11725] __kmem_cache_alloc_node+0x53/0x250 [ 852.736445][T11725] ? kvmalloc_node+0x70/0x180 [ 852.741181][T11725] __kmalloc_node+0xa4/0x230 [ 852.745827][T11725] kvmalloc_node+0x70/0x180 [ 852.750380][T11725] bpf_test_run_xdp_live+0x1e9/0x1b20 [ 852.755828][T11725] ? 0xffffffffa0004740 [ 852.760024][T11725] ? 0xffffffffa0004740 [ 852.764212][T11725] ? 0xffffffffa0004740 [ 852.768420][T11725] ? xdp_convert_md_to_buff+0x330/0x330 [ 852.774807][T11725] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 852.780595][T11725] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 852.786813][T11725] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 852.793132][T11725] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 852.798567][T11725] ? dev_put+0x80/0x80 [ 852.802700][T11725] ? dev_put+0x80/0x80 [ 852.806825][T11725] bpf_prog_test_run+0x321/0x390 [ 852.811817][T11725] __sys_bpf+0x49d/0x890 [ 852.816131][T11725] ? bpf_link_show_fdinfo+0x390/0x390 [ 852.821551][T11725] ? lock_chain_count+0x20/0x20 [ 852.826445][T11725] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 852.832471][T11725] __x64_sys_bpf+0x7c/0x90 [ 852.836925][T11725] do_syscall_64+0x55/0xb0 [ 852.841379][T11725] ? clear_bhb_loop+0x40/0x90 [ 852.846095][T11725] ? clear_bhb_loop+0x40/0x90 [ 852.850813][T11725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 852.856793][T11725] RIP: 0033:0x7f3cd8f9ce59 [ 852.861249][T11725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.880898][T11725] RSP: 002b:00007f3cd9e58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 852.889343][T11725] RAX: ffffffffffffffda RBX: 00007f3cd9215fa0 RCX: 00007f3cd8f9ce59 [ 852.897335][T11725] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 852.905328][T11725] RBP: 00007f3cd9e58090 R08: 0000000000000000 R09: 0000000000000000 [ 852.913323][T11725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.921327][T11725] R13: 00007f3cd9216038 R14: 00007f3cd9215fa0 R15: 00007ffcdbdf1a88 [ 852.929338][T11725] [ 853.018704][T11729] netlink: 'syz.1.2117': attribute type 22 has an invalid length. [ 853.113010][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'. [ 853.248829][T11738] FAULT_INJECTION: forcing a failure. [ 853.248829][T11738] name failslab, interval 1, probability 0, space 0, times 0 [ 853.292294][T11738] CPU: 1 PID: 11738 Comm: syz.2.2119 Not tainted syzkaller #0 [ 853.299817][T11738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 853.309915][T11738] Call Trace: [ 853.313235][T11738] [ 853.316206][T11738] dump_stack_lvl+0x18c/0x250 [ 853.320935][T11738] ? show_regs_print_info+0x20/0x20 [ 853.326183][T11738] ? load_image+0x420/0x420 [ 853.330739][T11738] ? __might_sleep+0xe0/0xe0 [ 853.335550][T11738] ? __lock_acquire+0x7d40/0x7d40 [ 853.340619][T11738] should_fail_ex+0x39d/0x4d0 [ 853.345363][T11738] should_failslab+0x9/0x20 [ 853.349918][T11738] slab_pre_alloc_hook+0x59/0x310 [ 853.354997][T11738] ? __lock_acquire+0x7d40/0x7d40 [ 853.360073][T11738] kmem_cache_alloc_node+0x60/0x320 [ 853.365334][T11738] ? __alloc_skb+0x103/0x2c0 [ 853.369975][T11738] __alloc_skb+0x103/0x2c0 [ 853.374538][T11738] netlink_sendmsg+0x66a/0xbf0 [ 853.379443][T11738] ? netlink_getsockopt+0x590/0x590 [ 853.384703][T11738] ? aa_sock_msg_perm+0x94/0x150 [ 853.389694][T11738] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 853.395029][T11738] ? security_socket_sendmsg+0x80/0xa0 [ 853.400546][T11738] ? netlink_getsockopt+0x590/0x590 [ 853.405802][T11738] ____sys_sendmsg+0x5ba/0x960 [ 853.410674][T11738] ? __asan_memset+0x22/0x40 [ 853.415328][T11738] ? __sys_sendmsg_sock+0x30/0x30 [ 853.420403][T11738] ? __import_iovec+0x3fa/0x850 [ 853.425309][T11738] ? import_iovec+0x73/0xa0 [ 853.429865][T11738] ___sys_sendmsg+0x2a6/0x360 [ 853.434594][T11738] ? get_pid_task+0x20/0x1e0 [ 853.439254][T11738] ? __sys_sendmsg+0x2a0/0x2a0 [ 853.444088][T11738] ? __lock_acquire+0x7d40/0x7d40 [ 853.449192][T11738] __se_sys_sendmsg+0x1c2/0x2b0 [ 853.454097][T11738] ? __x64_sys_sendmsg+0x80/0x80 [ 853.459102][T11738] ? lockdep_hardirqs_on+0x98/0x150 [ 853.464406][T11738] do_syscall_64+0x55/0xb0 [ 853.468879][T11738] ? clear_bhb_loop+0x40/0x90 [ 853.473598][T11738] ? clear_bhb_loop+0x40/0x90 [ 853.478325][T11738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 853.484364][T11738] RIP: 0033:0x7f3cd8f9ce59 [ 853.488826][T11738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.508511][T11738] RSP: 002b:00007f3cd9e58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.516975][T11738] RAX: ffffffffffffffda RBX: 00007f3cd9215fa0 RCX: 00007f3cd8f9ce59 [ 853.524997][T11738] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 853.533026][T11738] RBP: 00007f3cd9e58090 R08: 0000000000000000 R09: 0000000000000000 [ 853.541034][T11738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.549046][T11738] R13: 00007f3cd9216038 R14: 00007f3cd9215fa0 R15: 00007ffcdbdf1a88 [ 853.557074][T11738] [ 853.820960][T11742] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2121'. [ 853.897222][T11742] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.952444][T11742] .` (unregistering): (slave syz_tun): Releasing backup interface [ 853.986867][T11742] .` (unregistering): (slave team0): Releasing backup interface [ 854.025532][T11742] .` (unregistering): Released all slaves [ 854.135480][T11743] syzkaller0: entered promiscuous mode [ 854.150447][T11743] syzkaller0: entered allmulticast mode [ 854.167832][T11750] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2123'. [ 857.001136][T11776] netlink: 'syz.3.2132': attribute type 2 has an invalid length. [ 857.009027][T11776] netlink: 'syz.3.2132': attribute type 8 has an invalid length. [ 857.017166][T11776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2132'. [ 857.105775][T11779] FAULT_INJECTION: forcing a failure. [ 857.105775][T11779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.145370][T11779] CPU: 1 PID: 11779 Comm: syz.3.2133 Not tainted syzkaller #0 [ 857.152933][T11779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 857.163061][T11779] Call Trace: [ 857.166402][T11779] [ 857.169402][T11779] dump_stack_lvl+0x18c/0x250 [ 857.174235][T11779] ? show_regs_print_info+0x20/0x20 [ 857.179525][T11779] ? load_image+0x420/0x420 [ 857.184120][T11779] ? __might_fault+0xaa/0x120 [ 857.188878][T11779] ? __lock_acquire+0x7d40/0x7d40 [ 857.193982][T11779] should_fail_ex+0x39d/0x4d0 [ 857.198733][T11779] _copy_from_user+0x2f/0xe0 [ 857.203378][T11779] ___sys_sendmsg+0x1c7/0x360 [ 857.208105][T11779] ? get_pid_task+0x20/0x1e0 [ 857.212779][T11779] ? __sys_sendmsg+0x2a0/0x2a0 [ 857.217660][T11779] ? __lock_acquire+0x7d40/0x7d40 [ 857.222829][T11779] __se_sys_sendmsg+0x1c2/0x2b0 [ 857.227745][T11779] ? __x64_sys_sendmsg+0x80/0x80 [ 857.232776][T11779] ? lockdep_hardirqs_on+0x98/0x150 [ 857.238045][T11779] do_syscall_64+0x55/0xb0 [ 857.242508][T11779] ? clear_bhb_loop+0x40/0x90 [ 857.247232][T11779] ? clear_bhb_loop+0x40/0x90 [ 857.251962][T11779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 857.257910][T11779] RIP: 0033:0x7fcbe399ce59 [ 857.262377][T11779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.282061][T11779] RSP: 002b:00007fcbe4877028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 857.290546][T11779] RAX: ffffffffffffffda RBX: 00007fcbe3c15fa0 RCX: 00007fcbe399ce59 [ 857.298568][T11779] RDX: e07e872420dfefca RSI: 0000200000000780 RDI: 0000000000000005 [ 857.306601][T11779] RBP: 00007fcbe4877090 R08: 0000000000000000 R09: 0000000000000000 [ 857.314626][T11779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.322643][T11779] R13: 00007fcbe3c16038 R14: 00007fcbe3c15fa0 R15: 00007fffc8f3a1c8 [ 857.330722][T11779] [ 857.570676][T11783] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2135'. [ 858.887152][T11805] syzkaller0: entered promiscuous mode [ 858.901854][T11805] syzkaller0: entered allmulticast mode [ 858.919867][T11807] netlink: 'syz.2.2143': attribute type 2 has an invalid length. [ 858.947575][T11807] netlink: 'syz.2.2143': attribute type 8 has an invalid length. [ 858.955953][T11807] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2143'. [ 861.171028][T11826] netlink: 'syz.1.2148': attribute type 41 has an invalid length. [ 861.446405][T11834] netlink: 'syz.3.2151': attribute type 2 has an invalid length. [ 861.481569][T11834] netlink: 'syz.3.2151': attribute type 8 has an invalid length. [ 861.507658][T11834] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2151'. [ 861.560445][T11840] netlink: 'syz.0.2152': attribute type 10 has an invalid length. [ 861.845330][T11850] netlink: 'syz.1.2157': attribute type 2 has an invalid length. [ 861.871047][T11850] netlink: 'syz.1.2157': attribute type 8 has an invalid length. [ 861.884545][T11850] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2157'. [ 862.864402][T11878] FAULT_INJECTION: forcing a failure. [ 862.864402][T11878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.877885][T11878] CPU: 1 PID: 11878 Comm: syz.2.2169 Not tainted syzkaller #0 [ 862.885401][T11878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 862.895505][T11878] Call Trace: [ 862.898834][T11878] [ 862.901808][T11878] dump_stack_lvl+0x18c/0x250 [ 862.906559][T11878] ? show_regs_print_info+0x20/0x20 [ 862.911827][T11878] ? load_image+0x420/0x420 [ 862.916379][T11878] ? __might_fault+0xaa/0x120 [ 862.918063][T11879] netlink: 'syz.1.2167': attribute type 2 has an invalid length. [ 862.921094][T11878] ? __lock_acquire+0x7d40/0x7d40 [ 862.933912][T11878] should_fail_ex+0x39d/0x4d0 [ 862.938656][T11878] _copy_from_user+0x2f/0xe0 [ 862.943299][T11878] ___sys_sendmsg+0x1c7/0x360 [ 862.948014][T11878] ? get_pid_task+0x20/0x1e0 [ 862.952659][T11878] ? __sys_sendmsg+0x2a0/0x2a0 [ 862.957464][T11878] ? __lock_acquire+0x7d40/0x7d40 [ 862.962539][T11878] __se_sys_sendmsg+0x1c2/0x2b0 [ 862.967421][T11878] ? __x64_sys_sendmsg+0x80/0x80 [ 862.972404][T11878] ? lockdep_hardirqs_on+0x98/0x150 [ 862.977641][T11878] do_syscall_64+0x55/0xb0 [ 862.982109][T11878] ? clear_bhb_loop+0x40/0x90 [ 862.986814][T11878] ? clear_bhb_loop+0x40/0x90 [ 862.991524][T11878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 862.997455][T11878] RIP: 0033:0x7f3cd8f9ce59 [ 863.001918][T11878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.021569][T11878] RSP: 002b:00007f3cd9e58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 863.030017][T11878] RAX: ffffffffffffffda RBX: 00007f3cd9215fa0 RCX: 00007f3cd8f9ce59 [ 863.038020][T11878] RDX: e07e872420dfefca RSI: 0000200000000780 RDI: 0000000000000003 [ 863.046020][T11878] RBP: 00007f3cd9e58090 R08: 0000000000000000 R09: 0000000000000000 [ 863.054022][T11878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.062017][T11878] R13: 00007f3cd9216038 R14: 00007f3cd9215fa0 R15: 00007ffcdbdf1a88 [ 863.070027][T11878] [ 863.074017][T11879] netlink: 'syz.1.2167': attribute type 8 has an invalid length. [ 863.088919][T11879] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2167'. [ 863.897222][T11896] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2176'. [ 864.110191][T11896] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 864.738503][T11920] validate_nla: 1 callbacks suppressed [ 864.738522][T11920] netlink: 'syz.2.2185': attribute type 2 has an invalid length. [ 864.762204][T11920] netlink: 'syz.2.2185': attribute type 8 has an invalid length. [ 864.770505][T11920] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2185'. [ 864.781272][T11923] netlink: 'syz.0.2187': attribute type 10 has an invalid length. [ 864.806430][T11923] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 865.010220][T11932] netlink: 'syz.3.2189': attribute type 10 has an invalid length. [ 865.291874][T11940] netlink: 184408 bytes leftover after parsing attributes in process `syz.1.2194'. [ 865.302685][T11940] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 865.322024][T11948] netlink: 'syz.3.2195': attribute type 10 has an invalid length. [ 865.330053][T11948] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 865.625111][T11962] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2198'. [ 865.862191][T11970] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2203'. [ 865.927334][T11975] netlink: 'syz.1.2204': attribute type 25 has an invalid length. [ 865.939331][T11975] netlink: 'syz.1.2204': attribute type 32 has an invalid length. [ 866.623113][T11981] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2208'. [ 866.632782][T11981] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2208'. [ 866.644313][T11980] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2208'. [ 866.657069][T11981] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2208'. [ 867.169817][T11994] FAULT_INJECTION: forcing a failure. [ 867.169817][T11994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.195927][T11994] CPU: 0 PID: 11994 Comm: syz.2.2214 Not tainted syzkaller #0 [ 867.203539][T11994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 867.213605][T11994] Call Trace: [ 867.216893][T11994] [ 867.219834][T11994] dump_stack_lvl+0x18c/0x250 [ 867.224536][T11994] ? show_regs_print_info+0x20/0x20 [ 867.229768][T11994] ? load_image+0x420/0x420 [ 867.234372][T11994] ? __might_fault+0xaa/0x120 [ 867.239064][T11994] ? __lock_acquire+0x7d40/0x7d40 [ 867.244144][T11994] should_fail_ex+0x39d/0x4d0 [ 867.248849][T11994] _copy_from_user+0x2f/0xe0 [ 867.253484][T11994] ___sys_recvmsg+0x176/0x590 [ 867.258381][T11994] ? __sys_recvmsg+0x2a0/0x2a0 [ 867.263187][T11994] ? ksys_write+0x1c4/0x260 [ 867.267783][T11994] ? __fget_files+0x43d/0x4b0 [ 867.272508][T11994] __x64_sys_recvmsg+0x20c/0x2e0 [ 867.277483][T11994] ? ___sys_recvmsg+0x590/0x590 [ 867.282379][T11994] ? lockdep_hardirqs_on+0x98/0x150 [ 867.287636][T11994] do_syscall_64+0x55/0xb0 [ 867.292140][T11994] ? clear_bhb_loop+0x40/0x90 [ 867.296882][T11994] ? clear_bhb_loop+0x40/0x90 [ 867.301605][T11994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 867.307536][T11994] RIP: 0033:0x7f3cd8f9ce59 [ 867.311994][T11994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.331630][T11994] RSP: 002b:00007f3cd9e58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 867.340073][T11994] RAX: ffffffffffffffda RBX: 00007f3cd9215fa0 RCX: 00007f3cd8f9ce59 [ 867.348068][T11994] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 867.356070][T11994] RBP: 00007f3cd9e58090 R08: 0000000000000000 R09: 0000000000000000 [ 867.364079][T11994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.372072][T11994] R13: 00007f3cd9216038 R14: 00007f3cd9215fa0 R15: 00007ffcdbdf1a88 [ 867.380087][T11994] [ 869.535967][T12039] netlink: 'syz.2.2230': attribute type 10 has an invalid length. [ 869.553523][T12039] __nla_validate_parse: 8 callbacks suppressed [ 869.553575][T12039] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2230'. [ 869.594539][T12039] ipvlan1: entered promiscuous mode [ 869.608250][T12039] ipvlan1: entered allmulticast mode [ 869.620199][T12039] veth0_vlan: entered allmulticast mode [ 869.688041][T12039] bridge0: port 4(ipvlan1) entered blocking state [ 869.704614][T12039] bridge0: port 4(ipvlan1) entered disabled state [ 869.738919][T12039] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 869.977466][T12052] netlink: 'syz.3.2236': attribute type 2 has an invalid length. [ 869.986291][T12052] netlink: 'syz.3.2236': attribute type 8 has an invalid length. [ 870.002109][T12052] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2236'. [ 870.208421][T12059] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2238'. [ 870.372731][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.379790][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.618091][T12062] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.2240'. [ 871.223764][T12078] netlink: 'syz.1.2247': attribute type 10 has an invalid length. [ 871.263209][T12078] FAULT_INJECTION: forcing a failure. [ 871.263209][T12078] name failslab, interval 1, probability 0, space 0, times 0 [ 871.289908][T12078] CPU: 0 PID: 12078 Comm: syz.1.2247 Not tainted syzkaller #0 [ 871.297447][T12078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 871.307540][T12078] Call Trace: [ 871.310854][T12078] [ 871.313823][T12078] dump_stack_lvl+0x18c/0x250 [ 871.318569][T12078] ? show_regs_print_info+0x20/0x20 [ 871.323838][T12078] ? load_image+0x420/0x420 [ 871.328396][T12078] ? __might_sleep+0xe0/0xe0 [ 871.333061][T12078] ? __lock_acquire+0x7d40/0x7d40 [ 871.338147][T12078] should_fail_ex+0x39d/0x4d0 [ 871.342885][T12078] should_failslab+0x9/0x20 [ 871.347441][T12078] slab_pre_alloc_hook+0x59/0x310 [ 871.352521][T12078] ? __lock_acquire+0x7d40/0x7d40 [ 871.357583][T12078] ? trace_contention_end+0x39/0xe0 [ 871.362826][T12078] ? nf_nat_masq_schedule+0x246/0x560 [ 871.368242][T12078] __kmem_cache_alloc_node+0x53/0x250 [ 871.373665][T12078] ? nf_nat_masq_schedule+0x246/0x560 [ 871.379075][T12078] kmalloc_trace+0x2a/0xe0 [ 871.383538][T12078] nf_nat_masq_schedule+0x246/0x560 [ 871.388795][T12078] ? mutex_unlock+0x10/0x10 [ 871.393409][T12078] ? nf_nat_masq_schedule+0x560/0x560 [ 871.398816][T12078] ? masq_device_event+0xd0/0xd0 [ 871.403803][T12078] ? nfqnl_rcv_dev_event+0xb1/0x800 [ 871.409063][T12078] masq_device_event+0xa2/0xd0 [ 871.413874][T12078] notifier_call_chain+0x197/0x380 [ 871.419059][T12078] __dev_notify_flags+0x16e/0x310 [ 871.424131][T12078] ? __dev_change_flags+0x6a0/0x6a0 [ 871.429370][T12078] ? __dev_change_flags+0x4d4/0x6a0 [ 871.434626][T12078] ? vprintk_emit+0x53d/0x610 [ 871.439352][T12078] ? dev_get_flags+0x1c0/0x1c0 [ 871.444184][T12078] ? printk_sprint+0x460/0x460 [ 871.448986][T12078] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 871.454932][T12078] ? _raw_spin_unlock+0x40/0x40 [ 871.459810][T12078] dev_change_flags+0xe8/0x1a0 [ 871.464609][T12078] do_setlink+0xc58/0x4130 [ 871.469076][T12078] ? arch_stack_walk+0x160/0x190 [ 871.474074][T12078] ? load_image+0x420/0x420 [ 871.478610][T12078] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 871.484799][T12078] ? stack_trace_save+0xaa/0x100 [ 871.489792][T12078] ? __nla_validate_parse+0x2522/0x2ea0 [ 871.495388][T12078] ? __nla_validate+0x50/0x50 [ 871.500151][T12078] ? validate_linkmsg+0x719/0x910 [ 871.505250][T12078] rtnl_newlink+0x17da/0x20a0 [ 871.509972][T12078] ? rtnl_newlink+0x511/0x20a0 [ 871.514777][T12078] ? rtnl_setlink+0x4e0/0x4e0 [ 871.519508][T12078] ? trace_raw_output_contention_end+0xd0/0xd0 [ 871.525696][T12078] ? rcu_is_watching+0x15/0xb0 [ 871.530502][T12078] ? trace_contention_end+0x39/0xe0 [ 871.535733][T12078] ? __mutex_lock+0x315/0xcc0 [ 871.540468][T12078] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 871.545617][T12078] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 871.550757][T12078] ? rtnl_setlink+0x4e0/0x4e0 [ 871.555456][T12078] rtnetlink_rcv_msg+0x869/0xfa0 [ 871.560425][T12078] ? lockdep_hardirqs_on+0x98/0x150 [ 871.565653][T12078] ? rtnetlink_bind+0x80/0x80 [ 871.570357][T12078] ? perf_trace_preemptirq_template+0xac/0x330 [ 871.576539][T12078] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 871.582545][T12078] ? lock_chain_count+0x20/0x20 [ 871.587423][T12078] ? __local_bh_enable_ip+0x13a/0x1c0 [ 871.592809][T12078] ? lockdep_hardirqs_on+0x98/0x150 [ 871.598031][T12078] ? __local_bh_enable_ip+0x13a/0x1c0 [ 871.603424][T12078] ? _local_bh_enable+0xa0/0xa0 [ 871.608316][T12078] ? __dev_queue_xmit+0x265/0x3660 [ 871.613478][T12078] ? __dev_queue_xmit+0x265/0x3660 [ 871.618634][T12078] ? __dev_queue_xmit+0x1b2c/0x3660 [ 871.623885][T12078] ? __dev_queue_xmit+0x265/0x3660 [ 871.629066][T12078] ? ref_tracker_free+0x690/0x840 [ 871.634167][T12078] netlink_rcv_skb+0x241/0x4d0 [ 871.638964][T12078] ? rtnetlink_bind+0x80/0x80 [ 871.643672][T12078] ? netlink_ack+0x1180/0x1180 [ 871.648470][T12078] ? __lock_acquire+0x7d40/0x7d40 [ 871.653533][T12078] ? netlink_deliver_tap+0x2e/0x1b0 [ 871.658796][T12078] netlink_unicast+0x751/0x8d0 [ 871.663594][T12078] netlink_sendmsg+0x8d0/0xbf0 [ 871.668569][T12078] ? netlink_getsockopt+0x590/0x590 [ 871.673800][T12078] ? aa_sock_msg_perm+0x94/0x150 [ 871.678770][T12078] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 871.684081][T12078] ? security_socket_sendmsg+0x80/0xa0 [ 871.689571][T12078] ? netlink_getsockopt+0x590/0x590 [ 871.694794][T12078] ____sys_sendmsg+0x5ba/0x960 [ 871.699598][T12078] ? __asan_memset+0x22/0x40 [ 871.704219][T12078] ? __sys_sendmsg_sock+0x30/0x30 [ 871.709272][T12078] ? __import_iovec+0x5f2/0x850 [ 871.714152][T12078] ? import_iovec+0x73/0xa0 [ 871.718705][T12078] ___sys_sendmsg+0x2a6/0x360 [ 871.723500][T12078] ? get_pid_task+0x20/0x1e0 [ 871.728325][T12078] ? __sys_sendmsg+0x2a0/0x2a0 [ 871.733254][T12078] ? __lock_acquire+0x7d40/0x7d40 [ 871.738328][T12078] __se_sys_sendmsg+0x1c2/0x2b0 [ 871.743224][T12078] ? __x64_sys_sendmsg+0x80/0x80 [ 871.748201][T12078] ? lockdep_hardirqs_on+0x98/0x150 [ 871.753435][T12078] do_syscall_64+0x55/0xb0 [ 871.757876][T12078] ? clear_bhb_loop+0x40/0x90 [ 871.762578][T12078] ? clear_bhb_loop+0x40/0x90 [ 871.767286][T12078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 871.773215][T12078] RIP: 0033:0x7f8f55f9ce59 [ 871.777651][T12078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.797301][T12078] RSP: 002b:00007f8f56d9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 871.805747][T12078] RAX: ffffffffffffffda RBX: 00007f8f56215fa0 RCX: 00007f8f55f9ce59 [ 871.813750][T12078] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 871.821736][T12078] RBP: 00007f8f56d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 871.829735][T12078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 871.837750][T12078] R13: 00007f8f56216038 R14: 00007f8f56215fa0 R15: 00007ffd622bf948 [ 871.845771][T12078] [ 871.910930][T12078] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.923757][T12078] .`: (slave team0): Enslaving as an active interface with an up link [ 872.196614][T12089] FAULT_INJECTION: forcing a failure. [ 872.196614][T12089] name failslab, interval 1, probability 0, space 0, times 0 [ 872.217258][T12084] syzkaller0: entered promiscuous mode [ 872.232233][T12084] syzkaller0: entered allmulticast mode [ 872.239746][T12089] CPU: 0 PID: 12089 Comm: syz.0.2251 Not tainted syzkaller #0 [ 872.247367][T12089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 872.257466][T12089] Call Trace: [ 872.260789][T12089] [ 872.263756][T12089] dump_stack_lvl+0x18c/0x250 [ 872.268493][T12089] ? show_regs_print_info+0x20/0x20 [ 872.273747][T12089] ? load_image+0x420/0x420 [ 872.278314][T12089] ? __might_sleep+0xe0/0xe0 [ 872.282972][T12089] ? __lock_acquire+0x7d40/0x7d40 [ 872.288061][T12089] should_fail_ex+0x39d/0x4d0 [ 872.292805][T12089] should_failslab+0x9/0x20 [ 872.297367][T12089] slab_pre_alloc_hook+0x59/0x310 [ 872.302538][T12089] ? kvmalloc_node+0x70/0x180 [ 872.307267][T12089] ? kvmalloc_node+0x70/0x180 [ 872.311974][T12089] __kmem_cache_alloc_node+0x53/0x250 [ 872.317401][T12089] ? kvmalloc_node+0x70/0x180 [ 872.322107][T12089] __kmalloc_node+0xa4/0x230 [ 872.326733][T12089] kvmalloc_node+0x70/0x180 [ 872.331300][T12089] page_pool_create+0x1eb/0x5c0 [ 872.336213][T12089] bpf_test_run_xdp_live+0x203/0x1b20 [ 872.341646][T12089] ? 0xffffffffa0004740 [ 872.345818][T12089] ? 0xffffffffa0004740 [ 872.349996][T12089] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 872.355936][T12089] ? 0xffffffffa0004740 [ 872.360122][T12089] ? xdp_convert_md_to_buff+0x330/0x330 [ 872.365724][T12089] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 872.371995][T12089] ? _copy_from_user+0xa5/0xe0 [ 872.376797][T12089] ? bpf_test_init+0x119/0x140 [ 872.381593][T12089] ? xdp_convert_md_to_buff+0x5b/0x330 [ 872.387099][T12089] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 872.392515][T12089] ? dev_put+0x80/0x80 [ 872.396615][T12089] ? dev_put+0x80/0x80 [ 872.400704][T12089] bpf_prog_test_run+0x321/0x390 [ 872.405675][T12089] __sys_bpf+0x49d/0x890 [ 872.409943][T12089] ? bpf_link_show_fdinfo+0x390/0x390 [ 872.415344][T12089] ? lock_chain_count+0x20/0x20 [ 872.420223][T12089] __x64_sys_bpf+0x7c/0x90 [ 872.424661][T12089] do_syscall_64+0x55/0xb0 [ 872.429105][T12089] ? clear_bhb_loop+0x40/0x90 [ 872.433806][T12089] ? clear_bhb_loop+0x40/0x90 [ 872.438594][T12089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 872.444524][T12089] RIP: 0033:0x7f874ad9ce59 [ 872.449050][T12089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.468706][T12089] RSP: 002b:00007f874bbd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 872.477147][T12089] RAX: ffffffffffffffda RBX: 00007f874b015fa0 RCX: 00007f874ad9ce59 [ 872.485144][T12089] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 872.493142][T12089] RBP: 00007f874bbd0090 R08: 0000000000000000 R09: 0000000000000000 [ 872.501135][T12089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.509131][T12089] R13: 00007f874b016038 R14: 00007f874b015fa0 R15: 00007fff339497b8 [ 872.517141][T12089] [ 872.541996][T12089] page_pool_create() gave up with errno -12 [ 878.788031][T12150] netlink: 'syz.0.2274': attribute type 3 has an invalid length. [ 878.826905][T12150] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2274'. [ 878.860287][T12147] netlink: 'syz.1.2275': attribute type 10 has an invalid length. [ 878.872144][T12147] netlink: 200976 bytes leftover after parsing attributes in process `syz.1.2275'. [ 878.882533][T12147] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 879.159017][T12153] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2276'. [ 879.365454][T12163] FAULT_INJECTION: forcing a failure. [ 879.365454][T12163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 879.400810][T12163] CPU: 0 PID: 12163 Comm: syz.1.2279 Not tainted syzkaller #0 [ 879.408380][T12163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 879.418501][T12163] Call Trace: [ 879.421834][T12163] [ 879.424820][T12163] dump_stack_lvl+0x18c/0x250 [ 879.429583][T12163] ? show_regs_print_info+0x20/0x20 [ 879.434849][T12163] ? load_image+0x420/0x420 [ 879.439420][T12163] ? __lock_acquire+0x7d40/0x7d40 [ 879.444519][T12163] ? snprintf+0xe9/0x140 [ 879.448845][T12163] should_fail_ex+0x39d/0x4d0 [ 879.453626][T12163] _copy_to_user+0x2f/0xa0 [ 879.458103][T12163] simple_read_from_buffer+0xe7/0x150 [ 879.463528][T12163] proc_fail_nth_read+0x1e8/0x260 [ 879.468603][T12163] ? proc_fault_inject_write+0x360/0x360 [ 879.474282][T12163] ? fsnotify_perm+0x271/0x5e0 [ 879.479078][T12163] ? proc_fault_inject_write+0x360/0x360 [ 879.484749][T12163] vfs_read+0x28b/0x970 [ 879.488956][T12163] ? kernel_read+0x1e0/0x1e0 [ 879.493607][T12163] ? __fget_files+0x28/0x4b0 [ 879.498232][T12163] ? __fget_files+0x28/0x4b0 [ 879.502865][T12163] ? __fget_files+0x43d/0x4b0 [ 879.507600][T12163] ? __fdget_pos+0x2a3/0x330 [ 879.512223][T12163] ? ksys_read+0x75/0x260 [ 879.516598][T12163] ksys_read+0x150/0x260 [ 879.520890][T12163] ? vfs_write+0x990/0x990 [ 879.525359][T12163] ? lockdep_hardirqs_on+0x98/0x150 [ 879.530603][T12163] do_syscall_64+0x55/0xb0 [ 879.535059][T12163] ? clear_bhb_loop+0x40/0x90 [ 879.539782][T12163] ? clear_bhb_loop+0x40/0x90 [ 879.544510][T12163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 879.550445][T12163] RIP: 0033:0x7f8f55f5d68e [ 879.554923][T12163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 879.574594][T12163] RSP: 002b:00007f8f56d9bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 879.583050][T12163] RAX: ffffffffffffffda RBX: 00007f8f56d9c6c0 RCX: 00007f8f55f5d68e [ 879.591979][T12163] RDX: 000000000000000f RSI: 00007f8f56d9c0a0 RDI: 0000000000000006 [ 879.599988][T12163] RBP: 00007f8f56d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 879.607997][T12163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.616012][T12163] R13: 00007f8f56216038 R14: 00007f8f56215fa0 R15: 00007ffd622bf948 [ 879.624069][T12163] [ 880.360941][T12180] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2287'. [ 883.206371][T12184] FAULT_INJECTION: forcing a failure. [ 883.206371][T12184] name failslab, interval 1, probability 0, space 0, times 0 [ 883.241633][T12184] CPU: 0 PID: 12184 Comm: syz.3.2289 Not tainted syzkaller #0 [ 883.249180][T12184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 883.259287][T12184] Call Trace: [ 883.262606][T12184] [ 883.265576][T12184] dump_stack_lvl+0x18c/0x250 [ 883.270314][T12184] ? show_regs_print_info+0x20/0x20 [ 883.275568][T12184] ? load_image+0x420/0x420 [ 883.280139][T12184] ? __might_sleep+0xe0/0xe0 [ 883.284779][T12184] ? __lock_acquire+0x7d40/0x7d40 [ 883.289868][T12184] should_fail_ex+0x39d/0x4d0 [ 883.294614][T12184] should_failslab+0x9/0x20 [ 883.299171][T12184] slab_pre_alloc_hook+0x59/0x310 [ 883.304255][T12184] kmem_cache_alloc+0x5a/0x2d0 [ 883.309099][T12184] ? ptlock_alloc+0x20/0x70 [ 883.313652][T12184] ptlock_alloc+0x20/0x70 [ 883.318031][T12184] pte_alloc_one+0xcc/0x530 [ 883.322584][T12184] ? pfn_modify_allowed+0x560/0x560 [ 883.327832][T12184] ? __pud_alloc+0x1f0/0x1f0 [ 883.332464][T12184] __pte_alloc+0x22/0x2a0 [ 883.336847][T12184] handle_mm_fault+0x3ff8/0x4c00 [ 883.341827][T12184] ? handle_mm_fault+0xe7/0x4c00 [ 883.346834][T12184] ? numa_migrate_prep+0x350/0x350 [ 883.351997][T12184] ? lock_chain_count+0x20/0x20 [ 883.356894][T12184] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 883.362220][T12184] do_user_addr_fault+0x730/0x12c0 [ 883.367386][T12184] exc_page_fault+0x64/0x100 [ 883.372032][T12184] asm_exc_page_fault+0x26/0x30 [ 883.376937][T12184] RIP: 0010:__put_user_4+0x11/0x20 [ 883.382101][T12184] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 883.401751][T12184] RSP: 0018:ffffc9000ccdfe80 EFLAGS: 00050206 [ 883.407870][T12184] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 00002000000002c0 [ 883.415886][T12184] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1c9c20 [ 883.423894][T12184] RBP: 0000000000000004 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 883.431903][T12184] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: 0000000000000000 [ 883.439917][T12184] R13: 00002000000002c0 R14: 0000000000000010 R15: 0000000000000003 [ 883.447950][T12184] __sys_socketpair+0xb8/0x550 [ 883.452792][T12184] __x64_sys_socketpair+0x9b/0xb0 [ 883.457867][T12184] do_syscall_64+0x55/0xb0 [ 883.462329][T12184] ? clear_bhb_loop+0x40/0x90 [ 883.467051][T12184] ? clear_bhb_loop+0x40/0x90 [ 883.471794][T12184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 883.477735][T12184] RIP: 0033:0x7fcbe399ce59 [ 883.482194][T12184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.502152][T12184] RSP: 002b:00007fcbe4877028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 883.510619][T12184] RAX: ffffffffffffffda RBX: 00007fcbe3c15fa0 RCX: 00007fcbe399ce59 [ 883.518643][T12184] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 0000000000000010 [ 883.526652][T12184] RBP: 00007fcbe4877090 R08: 0000000000000000 R09: 0000000000000000 [ 883.534657][T12184] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 883.542666][T12184] R13: 00007fcbe3c16038 R14: 00007fcbe3c15fa0 R15: 00007fffc8f3a1c8 [ 883.550690][T12184] [ 883.789318][T12201] netlink: 'syz.1.2294': attribute type 25 has an invalid length. [ 883.842731][T12201] netlink: 'syz.1.2294': attribute type 32 has an invalid length. [ 885.682994][T12218] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2297'. [ 885.745057][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2297'. [ 887.122259][T12235] netlink: 'syz.1.2307': attribute type 25 has an invalid length. [ 887.152628][T12235] netlink: 'syz.1.2307': attribute type 32 has an invalid length. [ 887.181822][T12237] netlink: 'syz.3.2308': attribute type 10 has an invalid length. [ 887.189711][T12237] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2308'. [ 887.212102][T12237] ipvlan1: entered promiscuous mode [ 887.217380][T12237] ipvlan1: entered allmulticast mode [ 887.251997][T12237] veth0_vlan: entered allmulticast mode [ 887.260620][T12237] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 887.886814][T12257] netlink: 'syz.1.2317': attribute type 25 has an invalid length. [ 887.942081][T12257] netlink: 'syz.1.2317': attribute type 32 has an invalid length. [ 888.328504][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 888.337147][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 888.345914][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 888.354201][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 888.362266][ T5835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 888.370568][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 890.861230][T12268] netlink: 'syz.1.2320': attribute type 10 has an invalid length. [ 890.872758][T12268] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2320'. [ 890.922216][T12268] ipvlan1: entered promiscuous mode [ 890.941865][T12268] ipvlan1: entered allmulticast mode [ 890.947229][T12268] veth0_vlan: entered allmulticast mode [ 890.975941][T12268] bridge0: port 4(ipvlan1) entered blocking state [ 890.983132][T12268] bridge0: port 4(ipvlan1) entered disabled state [ 890.992461][T12268] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 892.972079][ T5835] Bluetooth: hci4: command tx timeout [ 894.459732][T12278] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2323'. [ 894.522484][T12278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2323'. [ 894.569244][T12261] chnl_net:caif_netlink_parms(): no params data found [ 894.590072][T12291] netlink: 'syz.0.2328': attribute type 9 has an invalid length. [ 894.603298][T12291] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2328'. [ 894.700072][ T5875] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.944423][ T5875] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.052032][ T5835] Bluetooth: hci4: command tx timeout [ 897.132062][ T5835] Bluetooth: hci4: command tx timeout [ 898.039111][T12299] netlink: 'syz.3.2331': attribute type 4 has an invalid length. [ 898.054488][T12299] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2331'. [ 898.071567][T12299] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 898.200866][ T5875] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.277151][T12261] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.284569][T12261] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.291872][T12261] bridge_slave_0: entered allmulticast mode [ 898.299439][T12261] bridge_slave_0: entered promiscuous mode [ 898.308631][T12261] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.315946][T12261] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.323329][T12261] bridge_slave_1: entered allmulticast mode [ 898.330737][T12261] bridge_slave_1: entered promiscuous mode [ 898.378942][T12261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.415367][T12261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.459520][T12261] team0: Port device team_slave_0 added [ 898.474768][T12261] team0: Port device team_slave_1 added [ 898.523204][T12261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.530220][T12261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 898.611631][T12261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.211978][ T5835] Bluetooth: hci4: command tx timeout [ 901.221293][ T5875] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.264919][T12261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.271996][T12261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.309001][T12261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.380843][T12320] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2337'. [ 901.627367][T12261] hsr_slave_0: entered promiscuous mode [ 901.642794][T12261] hsr_slave_1: entered promiscuous mode [ 901.652296][T12261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 901.659909][T12261] Cannot create hsr debugfs directory [ 901.755602][T12326] netlink: 'syz.3.2340': attribute type 4 has an invalid length. [ 901.763587][T12326] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2340'. [ 901.774651][T12326] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 901.802645][T12328] netlink: 'syz.0.2339': attribute type 3 has an invalid length. [ 901.813345][T12328] netlink: 'syz.0.2339': attribute type 1 has an invalid length. [ 901.821148][T12328] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.2339'. [ 901.859857][T12330] netlink: 'syz.1.2341': attribute type 9 has an invalid length. [ 901.892823][T12330] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2341'. [ 901.924877][T12326] netlink: 'syz.3.2340': attribute type 5 has an invalid length. [ 902.569246][T12347] netlink: 'syz.1.2345': attribute type 10 has an invalid length. [ 902.581209][T12347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2345'. [ 902.599017][T12347] bridge0: port 4(ipvlan1) entered blocking state [ 902.607014][T12347] bridge0: port 4(ipvlan1) entered disabled state [ 902.650773][T12347] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 903.525446][T12356] syzkaller0: entered promiscuous mode [ 903.531234][T12356] syzkaller0: entered allmulticast mode [ 903.540169][T12363] netlink: 'syz.0.2346': attribute type 40 has an invalid length. [ 903.825096][T12378] netlink: 'syz.3.2350': attribute type 3 has an invalid length. [ 903.833007][T12378] netlink: 'syz.3.2350': attribute type 1 has an invalid length. [ 903.840790][T12378] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.2350'. [ 905.255898][T12377] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2349'. [ 905.463489][T12385] netlink: 'syz.3.2351': attribute type 9 has an invalid length. [ 905.471293][T12385] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2351'. [ 905.525298][T12383] netlink: 'syz.1.2358': attribute type 25 has an invalid length. [ 905.537805][T12383] netlink: 'syz.1.2358': attribute type 32 has an invalid length. [ 905.868080][T12391] netlink: 'syz.1.2353': attribute type 4 has an invalid length. [ 905.881109][T12391] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2353'. [ 905.900138][T12391] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 905.994415][T12392] netlink: 'syz.1.2353': attribute type 5 has an invalid length. [ 906.103077][T12261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 906.200813][T12261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 906.224526][T12400] netlink: 'syz.3.2355': attribute type 10 has an invalid length. [ 906.244922][T12400] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 906.329071][T12261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 906.371039][T12261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 907.131049][T12261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.268488][T12261] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.345061][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.352286][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.383491][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.390670][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.504327][T12439] FAULT_INJECTION: forcing a failure. [ 907.504327][T12439] name failslab, interval 1, probability 0, space 0, times 0 [ 907.575180][T12439] CPU: 0 PID: 12439 Comm: syz.1.2363 Not tainted syzkaller #0 [ 907.582722][T12439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 907.592815][T12439] Call Trace: [ 907.596145][T12439] [ 907.599116][T12439] dump_stack_lvl+0x18c/0x250 [ 907.603847][T12439] ? show_regs_print_info+0x20/0x20 [ 907.609137][T12439] ? load_image+0x420/0x420 [ 907.613697][T12439] ? __might_sleep+0xe0/0xe0 [ 907.618337][T12439] ? __lock_acquire+0x7d40/0x7d40 [ 907.623415][T12439] should_fail_ex+0x39d/0x4d0 [ 907.628156][T12439] should_failslab+0x9/0x20 [ 907.632723][T12439] slab_pre_alloc_hook+0x59/0x310 [ 907.637807][T12439] ? asan.module_dtor+0x20/0x20 [ 907.642713][T12439] kmem_cache_alloc_node+0x60/0x320 [ 907.647975][T12439] ? __alloc_skb+0x103/0x2c0 [ 907.652620][T12439] __alloc_skb+0x103/0x2c0 [ 907.657102][T12439] tipc_buf_acquire+0x2b/0xe0 [ 907.661837][T12439] tipc_msg_build+0x59a/0xee0 [ 907.666580][T12439] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 907.672550][T12439] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 907.678681][T12439] ? tipc_group_bc_cong+0x15c/0x210 [ 907.683933][T12439] tipc_send_group_bcast+0x7d8/0xad0 [ 907.689297][T12439] ? tipc_wait_for_connect+0x650/0x650 [ 907.694823][T12439] ? wait_woken+0x180/0x180 [ 907.699368][T12439] ? tomoyo_check_path_number_acl+0x280/0x280 [ 907.705486][T12439] __tipc_sendmsg+0x33c/0x2bb0 [ 907.710309][T12439] ? rht_unlock+0x1d0/0x1d0 [ 907.714873][T12439] ? verify_lock_unused+0x140/0x140 [ 907.720118][T12439] ? verify_lock_unused+0x140/0x140 [ 907.725385][T12439] ? __might_sleep+0xe0/0xe0 [ 907.730025][T12439] ? mark_lock+0x94/0x320 [ 907.734408][T12439] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 907.740454][T12439] ? __local_bh_enable_ip+0x13a/0x1c0 [ 907.745883][T12439] ? lockdep_hardirqs_on+0x98/0x150 [ 907.751146][T12439] ? __local_bh_enable_ip+0x13a/0x1c0 [ 907.756572][T12439] ? _local_bh_enable+0xa0/0xa0 [ 907.761495][T12439] tipc_sendmsg+0x55/0x70 [ 907.765896][T12439] sock_write_iter+0x2df/0x420 [ 907.770716][T12439] ? sock_read_iter+0x3e0/0x3e0 [ 907.775668][T12439] ? common_file_perm+0x198/0x1f0 [ 907.780754][T12439] vfs_write+0x46c/0x990 [ 907.785054][T12439] ? file_end_write+0x250/0x250 [ 907.789966][T12439] ? __fget_files+0x43d/0x4b0 [ 907.794707][T12439] ? __fdget_pos+0x1d8/0x330 [ 907.799347][T12439] ? ksys_write+0x75/0x260 [ 907.803819][T12439] ksys_write+0x150/0x260 [ 907.808201][T12439] ? __ia32_sys_read+0x90/0x90 [ 907.813009][T12439] ? lockdep_hardirqs_on+0x98/0x150 [ 907.818242][T12439] do_syscall_64+0x55/0xb0 [ 907.822684][T12439] ? clear_bhb_loop+0x40/0x90 [ 907.827381][T12439] ? clear_bhb_loop+0x40/0x90 [ 907.832080][T12439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 907.838002][T12439] RIP: 0033:0x7f8f55f9ce59 [ 907.842446][T12439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.862610][T12439] RSP: 002b:00007f8f56d7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 907.871048][T12439] RAX: ffffffffffffffda RBX: 00007f8f56216090 RCX: 00007f8f55f9ce59 [ 907.879045][T12439] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 907.887046][T12439] RBP: 00007f8f56d7b090 R08: 0000000000000000 R09: 0000000000000000 [ 907.895040][T12439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.903034][T12439] R13: 00007f8f56216128 R14: 00007f8f56216090 R15: 00007ffd622bf948 [ 907.911045][T12439] [ 908.246739][T12454] netlink: 'syz.0.2366': attribute type 4 has an invalid length. [ 908.282228][T12454] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2366'. [ 908.331108][T12454] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 908.790643][T12261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.127297][T12261] veth0_vlan: entered promiscuous mode [ 909.244864][T12261] veth1_vlan: entered promiscuous mode [ 909.455966][T12261] veth0_macvtap: entered promiscuous mode [ 909.512419][ T5875] hsr_slave_0: left promiscuous mode [ 909.527430][ T5875] hsr_slave_1: left promiscuous mode [ 909.549919][ T5875] hsr0: left allmulticast mode [ 909.561000][ T5875] bridge0: port 3(hsr0) entered disabled state [ 909.586606][ T5875] bridge_slave_1: left allmulticast mode [ 909.593888][ T5875] bridge_slave_1: left promiscuous mode [ 909.605910][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.624788][ T5875] bridge_slave_0: left allmulticast mode [ 909.630669][ T5875] bridge_slave_0: left promiscuous mode [ 909.636813][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.720033][ T5875] veth0_macvtap: left promiscuous mode [ 909.732663][ T5875] veth1_vlan: left allmulticast mode [ 909.745039][ T5875] veth1_vlan: left promiscuous mode [ 909.758337][ T5875] veth0_vlan: left promiscuous mode [ 910.591153][ T5875] team0 (unregistering): Port device team_slave_1 removed [ 910.629382][ T5875] team0 (unregistering): Port device team_slave_0 removed [ 911.045418][T12497] validate_nla: 1 callbacks suppressed [ 911.045435][T12497] netlink: 'syz.0.2382': attribute type 10 has an invalid length. [ 911.059726][T12497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2382'. [ 911.069072][T12497] ipvlan1: entered promiscuous mode [ 911.076813][T12497] ipvlan1: entered allmulticast mode [ 911.082250][T12497] veth0_vlan: entered allmulticast mode [ 911.092602][T12497] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 911.112218][T12501] netlink: 'syz.1.2383': attribute type 25 has an invalid length. [ 911.130673][T12501] netlink: 'syz.1.2383': attribute type 32 has an invalid length. [ 911.153117][T12261] veth1_macvtap: entered promiscuous mode [ 911.230693][T12261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 911.270826][T12261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 911.315017][T12261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.361979][T12261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.370820][T12261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.433345][T12261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.484795][T12512] FAULT_INJECTION: forcing a failure. [ 911.484795][T12512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 911.499228][T12512] CPU: 1 PID: 12512 Comm: syz.1.2387 Not tainted syzkaller #0 [ 911.506750][T12512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 911.516844][T12512] Call Trace: [ 911.520157][T12512] [ 911.523128][T12512] dump_stack_lvl+0x18c/0x250 [ 911.527884][T12512] ? show_regs_print_info+0x20/0x20 [ 911.533133][T12512] ? load_image+0x420/0x420 [ 911.537700][T12512] ? __lock_acquire+0x7d40/0x7d40 [ 911.542780][T12512] ? __virt_addr_valid+0x18c/0x540 [ 911.547938][T12512] should_fail_ex+0x39d/0x4d0 [ 911.552676][T12512] _copy_from_user+0x2f/0xe0 [ 911.557324][T12512] bpf_prog_test_run_skb+0x26c/0x18c0 [ 911.562742][T12512] ? __fget_files+0x28/0x4b0 [ 911.567358][T12512] ? __fget_files+0x28/0x4b0 [ 911.571973][T12512] ? __fget_files+0x43d/0x4b0 [ 911.576686][T12512] ? cpu_online+0x60/0x60 [ 911.581036][T12512] bpf_prog_test_run+0x321/0x390 [ 911.585998][T12512] __sys_bpf+0x49d/0x890 [ 911.590268][T12512] ? bpf_link_show_fdinfo+0x390/0x390 [ 911.595694][T12512] ? lock_chain_count+0x20/0x20 [ 911.600582][T12512] __x64_sys_bpf+0x7c/0x90 [ 911.605025][T12512] do_syscall_64+0x55/0xb0 [ 911.609456][T12512] ? clear_bhb_loop+0x40/0x90 [ 911.614151][T12512] ? clear_bhb_loop+0x40/0x90 [ 911.618863][T12512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.624792][T12512] RIP: 0033:0x7f8f55f9ce59 [ 911.629243][T12512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.648885][T12512] RSP: 002b:00007f8f56d9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 911.657333][T12512] RAX: ffffffffffffffda RBX: 00007f8f56215fa0 RCX: 00007f8f55f9ce59 [ 911.665324][T12512] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 911.673313][T12512] RBP: 00007f8f56d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 911.681304][T12512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.689311][T12512] R13: 00007f8f56216038 R14: 00007f8f56215fa0 R15: 00007ffd622bf948 [ 911.697321][T12512] [ 911.919706][T12517] FAULT_INJECTION: forcing a failure. [ 911.919706][T12517] name failslab, interval 1, probability 0, space 0, times 0 [ 911.959547][T12517] CPU: 0 PID: 12517 Comm: syz.1.2389 Not tainted syzkaller #0 [ 911.967196][T12517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 911.977299][T12517] Call Trace: [ 911.980634][T12517] [ 911.983701][T12517] dump_stack_lvl+0x18c/0x250 [ 911.988697][T12517] ? show_regs_print_info+0x20/0x20 [ 911.993075][ T5879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.993922][T12517] ? load_image+0x420/0x420 [ 912.006298][T12517] ? __might_sleep+0xe0/0xe0 [ 912.010945][T12517] ? __lock_acquire+0x7d40/0x7d40 [ 912.016017][T12517] should_fail_ex+0x39d/0x4d0 [ 912.020741][T12517] should_failslab+0x9/0x20 [ 912.025415][T12517] slab_pre_alloc_hook+0x59/0x310 [ 912.030511][T12517] ? kvmalloc_node+0x70/0x180 [ 912.035247][T12517] ? kvmalloc_node+0x70/0x180 [ 912.039973][T12517] __kmem_cache_alloc_node+0x53/0x250 [ 912.041897][ T5879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.045385][T12517] ? kvmalloc_node+0x70/0x180 [ 912.057379][T12517] __kmalloc_node+0xa4/0x230 [ 912.062022][T12517] kvmalloc_node+0x70/0x180 [ 912.066589][T12517] bpf_test_run_xdp_live+0x1e9/0x1b20 [ 912.072057][T12517] ? 0xffffffffa0004740 [ 912.076257][T12517] ? 0xffffffffa0004740 [ 912.080439][T12517] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 912.086381][T12517] ? 0xffffffffa0004740 [ 912.090567][T12517] ? xdp_convert_md_to_buff+0x330/0x330 [ 912.096177][T12517] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 912.102462][T12517] ? _copy_from_user+0xa5/0xe0 [ 912.107279][T12517] ? bpf_test_init+0x119/0x140 [ 912.112088][T12517] ? xdp_convert_md_to_buff+0x5b/0x330 [ 912.117617][T12517] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 912.123038][T12517] ? dev_put+0x80/0x80 [ 912.127153][T12517] ? dev_put+0x80/0x80 [ 912.131258][T12517] bpf_prog_test_run+0x321/0x390 [ 912.136239][T12517] __sys_bpf+0x49d/0x890 [ 912.140514][T12517] ? bpf_link_show_fdinfo+0x390/0x390 [ 912.145933][T12517] ? lock_chain_count+0x20/0x20 [ 912.150841][T12517] __x64_sys_bpf+0x7c/0x90 [ 912.155304][T12517] do_syscall_64+0x55/0xb0 [ 912.159755][T12517] ? clear_bhb_loop+0x40/0x90 [ 912.164493][T12517] ? clear_bhb_loop+0x40/0x90 [ 912.169209][T12517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 912.175176][T12517] RIP: 0033:0x7f8f55f9ce59 [ 912.179620][T12517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.199255][T12517] RSP: 002b:00007f8f56d9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 912.207715][T12517] RAX: ffffffffffffffda RBX: 00007f8f56215fa0 RCX: 00007f8f55f9ce59 [ 912.215816][T12517] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 912.223826][T12517] RBP: 00007f8f56d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 912.231913][T12517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.239912][T12517] R13: 00007f8f56216038 R14: 00007f8f56215fa0 R15: 00007ffd622bf948 [ 912.247931][T12517] [ 912.278325][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.289312][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.428830][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 913.439620][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 913.448405][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 913.456583][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 913.482391][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 913.499434][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 913.626093][ T5875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.806968][ T5875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.853266][T12554] netlink: 'syz.3.2403': attribute type 10 has an invalid length. [ 913.873594][T12554] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2403'. [ 913.894183][T12554] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 913.944192][ T5875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.031099][ T5875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.053698][T12562] netlink: 'syz.1.2405': attribute type 2 has an invalid length. [ 914.220463][T12541] chnl_net:caif_netlink_parms(): no params data found [ 914.580113][T12572] C: renamed from team_slave_0 (while UP) [ 914.613926][T12572] netlink: 'syz.2.2407': attribute type 4 has an invalid length. [ 914.623349][T12572] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2407'. [ 914.634116][T12572] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 914.669790][T12541] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.687415][T12541] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.705581][T12541] bridge_slave_0: entered allmulticast mode [ 914.723786][T12541] bridge_slave_0: entered promiscuous mode [ 914.876829][T12541] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.894011][T12541] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.916711][T12541] bridge_slave_1: entered allmulticast mode [ 914.928181][T12541] bridge_slave_1: entered promiscuous mode [ 915.008487][T12541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.106344][T12541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.121460][T12585] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2410'. [ 915.138751][T12585] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.2410'. [ 915.172646][T12585] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2410'. [ 915.612110][ T5835] Bluetooth: hci0: command tx timeout [ 917.692049][ T5835] Bluetooth: hci0: command tx timeout [ 918.019986][T12591] netlink: 'syz.3.2411': attribute type 7 has an invalid length. [ 918.027969][T12591] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2411'. [ 918.096169][T12608] FAULT_INJECTION: forcing a failure. [ 918.096169][T12608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.109666][T12608] CPU: 1 PID: 12608 Comm: syz.2.2413 Not tainted syzkaller #0 [ 918.117174][T12608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 918.127271][T12608] Call Trace: [ 918.130592][T12608] [ 918.133560][T12608] dump_stack_lvl+0x18c/0x250 [ 918.138298][T12608] ? show_regs_print_info+0x20/0x20 [ 918.143552][T12608] ? load_image+0x420/0x420 [ 918.148103][T12608] ? __might_fault+0xaa/0x120 [ 918.152822][T12608] ? __lock_acquire+0x7d40/0x7d40 [ 918.157884][T12608] should_fail_ex+0x39d/0x4d0 [ 918.162596][T12608] _copy_from_user+0x2f/0xe0 [ 918.167219][T12608] ___sys_sendmsg+0x1c7/0x360 [ 918.171956][T12608] ? get_pid_task+0x20/0x1e0 [ 918.176605][T12608] ? __sys_sendmsg+0x2a0/0x2a0 [ 918.181408][T12608] ? __lock_acquire+0x7d40/0x7d40 [ 918.186494][T12608] __se_sys_sendmsg+0x1c2/0x2b0 [ 918.191470][T12608] ? __x64_sys_sendmsg+0x80/0x80 [ 918.198153][T12608] ? lockdep_hardirqs_on+0x98/0x150 [ 918.204972][T12608] do_syscall_64+0x55/0xb0 [ 918.209421][T12608] ? clear_bhb_loop+0x40/0x90 [ 918.214144][T12608] ? clear_bhb_loop+0x40/0x90 [ 918.218842][T12608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 918.224761][T12608] RIP: 0033:0x7f236ff9ce59 [ 918.229195][T12608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.248823][T12608] RSP: 002b:00007f236e1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.257273][T12608] RAX: ffffffffffffffda RBX: 00007f2370215fa0 RCX: 00007f236ff9ce59 [ 918.265266][T12608] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 918.273262][T12608] RBP: 00007f236e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 918.281253][T12608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.289254][T12608] R13: 00007f2370216038 R14: 00007f2370215fa0 R15: 00007ffc52e85bf8 [ 918.297277][T12608] [ 918.373950][T12541] team0: Port device team_slave_0 added [ 918.385936][T12541] team0: Port device team_slave_1 added [ 918.480127][T12612] netlink: 'syz.2.2415': attribute type 21 has an invalid length. [ 918.515219][T12541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.523614][T12541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 918.555143][T12541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.568900][T12541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.576297][T12541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 918.603306][T12541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.730959][T12541] hsr_slave_0: entered promiscuous mode [ 918.738434][T12541] hsr_slave_1: entered promiscuous mode [ 919.353900][T12623] netlink: 'syz.2.2416': attribute type 10 has an invalid length. [ 919.405517][T12623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2416'. [ 919.418169][T12623] ipvlan1: entered promiscuous mode [ 919.424732][T12623] ipvlan1: entered allmulticast mode [ 919.431158][T12623] veth0_vlan: entered allmulticast mode [ 919.456649][T12623] bridge0: port 3(ipvlan1) entered blocking state [ 919.465324][T12623] bridge0: port 3(ipvlan1) entered disabled state [ 919.487729][T12623] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 919.772100][ T5835] Bluetooth: hci0: command tx timeout [ 921.851868][ T5835] Bluetooth: hci0: command tx timeout [ 923.369912][T12662] netlink: 'syz.3.2421': attribute type 10 has an invalid length. [ 923.381315][T12665] netlink: 'syz.2.2422': attribute type 2 has an invalid length. [ 923.430855][T12662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2421'. [ 923.454420][T12662] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 923.577462][T12671] FAULT_INJECTION: forcing a failure. [ 923.577462][T12671] name failslab, interval 1, probability 0, space 0, times 0 [ 923.622026][T12671] CPU: 1 PID: 12671 Comm: syz.2.2424 Not tainted syzkaller #0 [ 923.629664][T12671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 923.639768][T12671] Call Trace: [ 923.643094][T12671] [ 923.646095][T12671] dump_stack_lvl+0x18c/0x250 [ 923.650842][T12671] ? show_regs_print_info+0x20/0x20 [ 923.656092][T12671] ? load_image+0x420/0x420 [ 923.660746][T12671] should_fail_ex+0x39d/0x4d0 [ 923.665493][T12671] should_failslab+0x9/0x20 [ 923.670055][T12671] slab_pre_alloc_hook+0x59/0x310 [ 923.675132][T12671] ? nf_ct_ext_add+0x1ab/0x440 [ 923.680032][T12671] ? nf_ct_ext_add+0x1ab/0x440 [ 923.684825][T12671] __kmem_cache_alloc_node+0x53/0x250 [ 923.690237][T12671] ? nf_ct_ext_add+0x1ab/0x440 [ 923.695037][T12671] __kmalloc_node_track_caller+0xa2/0x230 [ 923.700795][T12671] krealloc+0x86/0x120 [ 923.704917][T12671] nf_ct_ext_add+0x1ab/0x440 [ 923.709581][T12671] init_conntrack+0x69c/0xf10 [ 923.714300][T12671] ? early_drop+0x7f0/0x7f0 [ 923.718845][T12671] ? nf_conntrack_find_get+0x650/0x650 [ 923.724358][T12671] ? __siphash_unaligned+0x22e/0x3a0 [ 923.729701][T12671] nf_conntrack_in+0xc06/0x15c0 [ 923.734604][T12671] ? nf_ct_pernet+0x270/0x270 [ 923.739309][T12671] ? ip6t_do_table+0x1d9/0x1510 [ 923.744207][T12671] ? ip6t_alloc_initial_table+0x640/0x640 [ 923.749965][T12671] ? ipv6_defrag+0x2d6/0x3a0 [ 923.754592][T12671] ? ipv6_conntrack_in+0x20/0x20 [ 923.759925][T12671] nf_hook_slow+0xbd/0x200 [ 923.764377][T12671] ? rawv6_send_hdrinc+0xb5a/0x1640 [ 923.769690][T12671] rawv6_send_hdrinc+0x14f3/0x1640 [ 923.774844][T12671] ? txopt_get+0x3f0/0x3f0 [ 923.779275][T12671] ? txopt_get+0x344/0x3f0 [ 923.783712][T12671] ? rawv6_push_pending_frames+0x8d0/0x8d0 [ 923.789544][T12671] ? fl6_sock_lookup+0xc0/0xc0 [ 923.794331][T12671] rawv6_sendmsg+0x12cc/0x1770 [ 923.799145][T12671] ? compat_rawv6_ioctl+0x70/0x70 [ 923.804221][T12671] ? aa_sk_perm+0x83c/0x970 [ 923.808763][T12671] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 923.815210][T12671] ? inet_sendmsg+0x7c/0x2f0 [ 923.819829][T12671] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 923.825148][T12671] ? security_socket_sendmsg+0x80/0xa0 [ 923.830636][T12671] ? inet_send_prepare+0x260/0x260 [ 923.835776][T12671] ____sys_sendmsg+0x5ba/0x960 [ 923.840568][T12671] ? __lock_acquire+0x7d40/0x7d40 [ 923.845621][T12671] ? __asan_memset+0x22/0x40 [ 923.850260][T12671] ? __sys_sendmsg_sock+0x30/0x30 [ 923.855322][T12671] ? __import_iovec+0x5f2/0x850 [ 923.860217][T12671] ? import_iovec+0x73/0xa0 [ 923.864745][T12671] ___sys_sendmsg+0x2a6/0x360 [ 923.869496][T12671] ? __sys_sendmsg+0x2a0/0x2a0 [ 923.874388][T12671] ? __lock_acquire+0x7d40/0x7d40 [ 923.879452][T12671] __se_sys_sendmsg+0x1c2/0x2b0 [ 923.884333][T12671] ? __x64_sys_sendmsg+0x80/0x80 [ 923.889348][T12671] ? lockdep_hardirqs_on+0x98/0x150 [ 923.894608][T12671] do_syscall_64+0x55/0xb0 [ 923.899068][T12671] ? clear_bhb_loop+0x40/0x90 [ 923.903781][T12671] ? clear_bhb_loop+0x40/0x90 [ 923.908518][T12671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 923.914564][T12671] RIP: 0033:0x7f236ff9ce59 [ 923.919025][T12671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.938678][T12671] RSP: 002b:00007f236e1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 923.947136][T12671] RAX: ffffffffffffffda RBX: 00007f2370215fa0 RCX: 00007f236ff9ce59 [ 923.955140][T12671] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 923.963139][T12671] RBP: 00007f236e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 923.971145][T12671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 923.979149][T12671] R13: 00007f2370216038 R14: 00007f2370215fa0 R15: 00007ffc52e85bf8 [ 923.987179][T12671] [ 924.210670][T12541] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 924.275723][T12541] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 924.307830][T12541] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 924.358506][T12678] netlink: 'syz.2.2427': attribute type 25 has an invalid length. [ 924.402440][T12678] netlink: 'syz.2.2427': attribute type 32 has an invalid length. [ 924.709942][T12541] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 925.039044][T12541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.165196][T12541] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.175966][T12702] netlink: 'syz.2.2431': attribute type 9 has an invalid length. [ 925.192657][T12702] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2431'. [ 925.257264][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.264524][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.402431][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.409685][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.478933][T12711] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2434'. [ 925.632834][T12713] netlink: 'syz.2.2433': attribute type 10 has an invalid length. [ 925.661339][T12713] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2433'. [ 925.698048][T12713] bridge0: port 3(ipvlan1) entered blocking state [ 925.722687][T12713] bridge0: port 3(ipvlan1) entered disabled state [ 925.755935][T12713] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 926.251140][T12541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 926.274302][T12541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 926.802793][ T5875] [ 926.805198][ T5875] ====================================================== [ 926.812250][ T5875] WARNING: possible circular locking dependency detected [ 926.819314][ T5875] syzkaller #0 Not tainted [ 926.823768][ T5875] ------------------------------------------------------ [ 926.830816][ T5875] kworker/u4:2/5875 is trying to acquire lock: [ 926.836994][ T5875] ffff88803186cd80 (team->team_lock_key){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 926.846464][ T5875] [ 926.846464][ T5875] but task is already holding lock: [ 926.853851][ T5875] ffff88801baa0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 926.864283][ T5875] [ 926.864283][ T5875] which lock already depends on the new lock. [ 926.864283][ T5875] [ 926.874714][ T5875] [ 926.874714][ T5875] the existing dependency chain (in reverse order) is: [ 926.883744][ T5875] [ 926.883744][ T5875] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 926.891499][ T5875] __mutex_lock+0x136/0xcc0 [ 926.896549][ T5875] ieee80211_open+0x144/0x200 [ 926.901776][ T5875] __dev_open+0x2cb/0x430 [ 926.906655][ T5875] dev_open+0xab/0x190 [ 926.911274][ T5875] team_add_slave+0x75f/0x29a0 [ 926.916583][ T5875] do_setlink+0xdfe/0x4130 [ 926.921547][ T5875] rtnl_newlink+0x17da/0x20a0 [ 926.926771][ T5875] rtnetlink_rcv_msg+0x869/0xfa0 [ 926.932251][ T5875] netlink_rcv_skb+0x241/0x4d0 [ 926.937559][ T5875] netlink_unicast+0x751/0x8d0 [ 926.942862][ T5875] netlink_sendmsg+0x8d0/0xbf0 [ 926.948170][ T5875] ____sys_sendmsg+0x5ba/0x960 [ 926.953478][ T5875] ___sys_sendmsg+0x2a6/0x360 [ 926.958731][ T5875] __se_sys_sendmsg+0x1c2/0x2b0 [ 926.964133][ T5875] do_syscall_64+0x55/0xb0 [ 926.969094][ T5875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 926.975535][ T5875] [ 926.975535][ T5875] -> #0 (team->team_lock_key){+.+.}-{3:3}: [ 926.983560][ T5875] __lock_acquire+0x2df1/0x7d40 [ 926.988959][ T5875] lock_acquire+0x19e/0x420 [ 926.994096][ T5875] __mutex_lock+0x136/0xcc0 [ 926.999145][ T5875] team_del_slave+0x32/0x1c0 [ 927.004284][ T5875] team_device_event+0x28d/0xa20 [ 927.009771][ T5875] notifier_call_chain+0x197/0x380 [ 927.015429][ T5875] unregister_netdevice_many_notify+0x100d/0x1900 [ 927.022485][ T5875] unregister_netdevice_queue+0x32c/0x370 [ 927.028758][ T5875] _cfg80211_unregister_wdev+0x16b/0x580 [ 927.034942][ T5875] ieee80211_remove_interfaces+0x49e/0x690 [ 927.041377][ T5875] ieee80211_unregister_hw+0x5d/0x2a0 [ 927.047297][ T5875] mac80211_hwsim_del_radio+0x289/0x480 [ 927.053388][ T5875] hwsim_exit_net+0x58d/0x650 [ 927.058609][ T5875] cleanup_net+0x70a/0xbb0 [ 927.063566][ T5875] process_scheduled_works+0xa5d/0x15d0 [ 927.069650][ T5875] worker_thread+0xa55/0xfc0 [ 927.074788][ T5875] kthread+0x2fa/0x390 [ 927.079413][ T5875] ret_from_fork+0x48/0x80 [ 927.084375][ T5875] ret_from_fork_asm+0x11/0x20 [ 927.089688][ T5875] [ 927.089688][ T5875] other info that might help us debug this: [ 927.089688][ T5875] [ 927.099950][ T5875] Possible unsafe locking scenario: [ 927.099950][ T5875] [ 927.107407][ T5875] CPU0 CPU1 [ 927.113149][ T5875] ---- ---- [ 927.118704][ T5875] lock(&rdev->wiphy.mtx); [ 927.123225][ T5875] lock(team->team_lock_key); [ 927.130529][ T5875] lock(&rdev->wiphy.mtx); [ 927.137576][ T5875] lock(team->team_lock_key); [ 927.142368][ T5875] [ 927.142368][ T5875] *** DEADLOCK *** [ 927.142368][ T5875] [ 927.150528][ T5875] 5 locks held by kworker/u4:2/5875: [ 927.155834][ T5875] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 927.166748][ T5875] #1: ffffc90005147d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 927.177304][ T5875] #2: ffffffff8e3b9990 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 927.186725][ T5875] #3: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 927.196599][ T5875] #4: ffff88801baa0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 927.207438][ T5875] [ 927.207438][ T5875] stack backtrace: [ 927.213348][ T5875] CPU: 1 PID: 5875 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 927.220907][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 927.230985][ T5875] Workqueue: netns cleanup_net [ 927.235796][ T5875] Call Trace: [ 927.239104][ T5875] [ 927.242057][ T5875] dump_stack_lvl+0x18c/0x250 [ 927.246768][ T5875] ? load_image+0x420/0x420 [ 927.251293][ T5875] ? show_regs_print_info+0x20/0x20 [ 927.256516][ T5875] ? print_circular_bug+0x12b/0x1a0 [ 927.261745][ T5875] check_noncircular+0x2fc/0x400 [ 927.266709][ T5875] ? print_deadlock_bug+0x5d0/0x5d0 [ 927.271928][ T5875] ? lockdep_lock+0xf5/0x230 [ 927.276629][ T5875] ? __lock_acquire+0x1273/0x7d40 [ 927.281691][ T5875] ? _find_first_zero_bit+0xd3/0x100 [ 927.286998][ T5875] __lock_acquire+0x2df1/0x7d40 [ 927.291940][ T5875] ? verify_lock_unused+0x140/0x140 [ 927.297188][ T5875] ? verify_lock_unused+0x140/0x140 [ 927.302421][ T5875] lock_acquire+0x19e/0x420 [ 927.306945][ T5875] ? team_del_slave+0x32/0x1c0 [ 927.311752][ T5875] ? __might_sleep+0xe0/0xe0 [ 927.316378][ T5875] ? read_lock_is_recursive+0x20/0x20 [ 927.321786][ T5875] __mutex_lock+0x136/0xcc0 [ 927.326356][ T5875] ? team_del_slave+0x32/0x1c0 [ 927.331146][ T5875] ? __lock_acquire+0x7d40/0x7d40 [ 927.336197][ T5875] ? rcu_is_watching+0x15/0xb0 [ 927.340998][ T5875] ? trace_contention_end+0x39/0xe0 [ 927.346217][ T5875] ? __mutex_lock+0x315/0xcc0 [ 927.350925][ T5875] ? team_del_slave+0x32/0x1c0 [ 927.355727][ T5875] ? mutex_lock_nested+0x20/0x20 [ 927.360704][ T5875] ? bond_netdev_event+0xeb/0xf20 [ 927.365749][ T5875] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 927.371408][ T5875] team_del_slave+0x32/0x1c0 [ 927.376027][ T5875] team_device_event+0x28d/0xa20 [ 927.380985][ T5875] notifier_call_chain+0x197/0x380 [ 927.386127][ T5875] unregister_netdevice_many_notify+0x100d/0x1900 [ 927.392571][ T5875] ? lock_chain_count+0x20/0x20 [ 927.397447][ T5875] ? unregister_netdevice_many+0x20/0x20 [ 927.403105][ T5875] ? kernfs_remove_by_name_ns+0x117/0x150 [ 927.408860][ T5875] ? __lock_acquire+0x7d40/0x7d40 [ 927.413918][ T5875] unregister_netdevice_queue+0x32c/0x370 [ 927.419675][ T5875] ? list_netdevice+0x730/0x730 [ 927.424551][ T5875] ? kernfs_remove_by_name_ns+0x117/0x150 [ 927.430331][ T5875] _cfg80211_unregister_wdev+0x16b/0x580 [ 927.435991][ T5875] ieee80211_remove_interfaces+0x49e/0x690 [ 927.441829][ T5875] ? ieee80211_do_stop+0x1e20/0x1e20 [ 927.447141][ T5875] ? rcu_is_watching+0x15/0xb0 [ 927.451934][ T5875] ieee80211_unregister_hw+0x5d/0x2a0 [ 927.457329][ T5875] mac80211_hwsim_del_radio+0x289/0x480 [ 927.462898][ T5875] ? rhashtable_remove_fast+0xc00/0xc00 [ 927.468468][ T5875] hwsim_exit_net+0x58d/0x650 [ 927.473173][ T5875] ? hwsim_init_net+0x90/0x90 [ 927.477873][ T5875] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 927.483709][ T5875] cleanup_net+0x70a/0xbb0 [ 927.488153][ T5875] ? ops_free_list+0x3b0/0x3b0 [ 927.492951][ T5875] ? _raw_spin_unlock_irq+0x23/0x50 [ 927.498187][ T5875] ? process_scheduled_works+0x96f/0x15d0 [ 927.503933][ T5875] ? process_scheduled_works+0x96f/0x15d0 [ 927.509679][ T5875] process_scheduled_works+0xa5d/0x15d0 [ 927.515260][ T5875] ? worker_attach_to_pool+0x380/0x380 [ 927.520745][ T5875] ? assign_work+0x3d2/0x5d0 [ 927.525366][ T5875] worker_thread+0xa55/0xfc0 [ 927.529998][ T5875] kthread+0x2fa/0x390 [ 927.534089][ T5875] ? pr_cont_work+0x560/0x560 [ 927.538794][ T5875] ? kthread_blkcg+0xd0/0xd0 [ 927.543403][ T5875] ret_from_fork+0x48/0x80 [ 927.547840][ T5875] ? kthread_blkcg+0xd0/0xd0 [ 927.552448][ T5875] ret_from_fork_asm+0x11/0x20 [ 927.557238][ T5875] [ 927.609590][ T5875] team0: Port device wlan1 removed [ 927.658068][T12755] netlink: 'syz.1.2442': attribute type 4 has an invalid length. [ 927.676571][T12755] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2442'. [ 927.755799][T12541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.790283][ T5875] hsr_slave_0: left promiscuous mode [ 927.813698][ T5875] hsr_slave_1: left promiscuous mode [ 927.821590][ T5875] veth0_macvtap: left promiscuous mode [ 927.827677][ T5875] veth1_vlan: left allmulticast mode [ 927.837280][ T5875] veth1_vlan: left promiscuous mode [ 927.842658][ T5875] veth0_vlan: left promiscuous mode [ 928.135447][ T5875] team0 (unregistering): Port device team_slave_1 removed [ 928.160382][ T5875] team0 (unregistering): Port device team_slave_0 removed [ 928.198387][ T5875] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 928.363468][ T5875] .` (unregistering): Released all slaves [ 928.414755][T12541] veth0_vlan: entered promiscuous mode [ 928.431251][T12541] veth1_vlan: entered promiscuous mode [ 928.485553][T12541] veth0_macvtap: entered promiscuous mode [ 928.507020][T12541] veth1_macvtap: entered promiscuous mode [ 928.546866][T12541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.571037][T12541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.591674][T12541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.611394][T12541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.631863][T12541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.653723][T12541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.671321][T12541] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.697587][T12541] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.706510][T12541] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.715334][T12541] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.785530][T12541] ieee80211 phy68: Selected rate control algorithm 'minstrel_ht' [ 928.826456][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.836704][T12541] ieee80211 phy69: Selected rate control algorithm 'minstrel_ht' [ 928.844561][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.880210][ T5875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.889902][ T5875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.695344][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.703557][ T1281] ieee802154 phy1 wpan1: encryption failed: -22