last executing test programs: 13.707978619s ago: executing program 1 (id=2331): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="da9894f2f162189f"], 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @private2}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0xffff0000, 0x10, 0x0, &(0x7f0000000000)="2b206d0748010097737ea2aae9f80000", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x464100, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'macvtap0\x00', 0x100}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4062, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz0\x00', 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000800)={'team_slave_1\x00', @random="10006f3b31b9"}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r9}, 0x4) r10 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r10, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000) 12.57216459s ago: executing program 1 (id=2335): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0xfffffffffffffe08, 0x0}, 0x10) (fail_nth: 1) 11.472106589s ago: executing program 1 (id=2337): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r4, @ANYRES8=r3, @ANYRESOCT=r4, @ANYRESOCT=r3, @ANYRES32=r4, @ANYRESOCT=r2, @ANYBLOB="a6df8330d602526053706484b9bb2bcf4002201770cf023f9263eecc3c5a60b56211ae1cc17697120e71f22a46d6dff6d40ad639427b9f5c2b1fbefeda08b27421813bf818f6dc3d", @ANYRESOCT=r1, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) 11.016242655s ago: executing program 1 (id=2339): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000380)=[{0xe8, 0x0, 0xfff, "998bfd356c6eaa58b7dded24527dce90fcd12b72b2ce1f05d439f63d1505d1f02e36eb8aad71a94c61f91d7a4a0acb5580c164a985f46122f9cb890f95889a5db23e16a7fc991c8ce713e805f83c847184166e8f4d139ad7c16d9f95f98eb467e4d6a28a7aa83c18359b28bde6aa22495dd1eb36745b44083afd8b6f683e2edb085180924538aa782706bdd8d49db6b4455585b7ff5f9937ff6abb9d73d7bece8c6370c178c721a988b3d7e04bfa4d804d0435b003669154217efac1a356685595a0477961a40bb6ec604e2825a2bdd61e1b7c29ad"}, {0x88, 0x0, 0x0, "b3fed7845195821c52cedfe4e604ed5ac3f4d421296eea601832af087398dca6bd95d96108f9300e5507278e1a1be6ef00be2d6b0eec3ab39a485bd1f19ae25ff8c4fc44def32eec91c1080b547b035fd6decf7d7f3d23e97c47dc9d1015549cbb9d0d70c07f92178d836d002a3b174e17d0ad"}, {0x88, 0x84, 0x2, "a9503298958a7eb98fc12c01254b1bb8ca3be8099c254d7b951ffd981529ddc37c63c50d58b157858474c73948f4bf59a64eed6c1039bb99b9de4cc8e05d7bae622a24e683cc43bdd70651e47d526af7c2c22474fa3cd4d97ec36ce07efbccd915ffe719d003e3ee9c321bd61500a4326a25"}], 0x1f8}, 0x4c0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180000002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000021000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) close(0x3) 9.846745169s ago: executing program 1 (id=2344): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xf, 0x10}, [@tail_call], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22) unlink(&(0x7f0000000140)='./file0\x00') 9.642210736s ago: executing program 1 (id=2345): r0 = syz_clone(0x40000000, &(0x7f0000000c40)="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", 0x12b, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x5}, {0x0, 0x4, 0x10100, 0x8}], 0x10, 0x201}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdbb2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) (async) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r4}, 0x10) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) r5 = socket$kcm(0x10, 0x3, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r5, @ANYRES16=r0, @ANYRES8=r6], 0x50) close(0x3) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r6}, 0x8) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r8}, &(0x7f0000000000), &(0x7f0000000600)}, 0x20) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r9}, 0xc) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 3.534464266s ago: executing program 3 (id=2361): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/27], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640f9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r5, 0x20, &(0x7f00000002c0)={0x0, 0x3c, 0x0, &(0x7f00000000c0)=""/171, 0xab}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r6, &(0x7f0000000240)="9a"}, 0x20) 3.190579104s ago: executing program 3 (id=2364): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x0) close(r1) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0, 0x700}, 0x900000000040010) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xb, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socketpair(0x3, 0x4, 0x86e, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000006480)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 2.810566655s ago: executing program 0 (id=2365): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.712063343s ago: executing program 2 (id=2366): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x10, 0x32, 0x43a1bd76, 0x7, 0x1000, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xfffffffffffffff8}, 0x1098, 0xffffffffffff3b81, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22e0ee00000000000000000000000000007fc5f603ff65ec5deb004298f479a79d93014b8e7781c2"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x21d00, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0xffffffff}, 0x205, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x338b}, 0x0, 0x32, 0x6, 0x7, 0x9, 0x6, 0x2, 0x0, 0x10001, 0x0, 0x2009}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000200f5e4cbc657ffffff08000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x5e004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9}, 0x2046}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240), 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002a00)="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", 0x5c9}], 0x1}, 0x400c1) setsockopt$sock_attach_bpf(r7, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000600000000000000eac9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000100000000550901000000000095000000000000007c00400000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x6a, &(0x7f0000000140)=""/106, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001340)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001440)=[0xffffffffffffffff], &(0x7f0000001480)=[{0x2, 0x3, 0x3, 0xa}, {0x0, 0x4, 0xc, 0x5}], 0x10, 0x80}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x80, 0xc8, 0x0, 0x2, 0x2, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) 2.49560953s ago: executing program 0 (id=2367): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90b246ee9040f030047000000053582c137153e370248018000f01700d1bd", 0x2e}], 0x1}, 0x0) 2.381329309s ago: executing program 2 (id=2368): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xec, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x7, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000640), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.290437797s ago: executing program 0 (id=2369): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x101, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f00000003c0), &(0x7f00000001c0)=r2}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a0000000500000002000000040000000000000015ff0584c5fbc99472a3fecf0762bb95e30b7c29b443a8deed1a07771b789ba45dbe755c112841ff0caa4f6f120796b0d61cb29273a69ee640144fb513e4fa888ccf9284fe", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x8, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r6}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4) socketpair(0x21, 0xa, 0x0, &(0x7f0000000040)) r9 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r10, r9, 0x0, 0x2, &(0x7f0000000100)='+\x00'}, 0x30) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x7, 0x4, 0x8, 0xd, 0x0, 0x9f, 0x400, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ffc0000, 0x1, @perf_bp={&(0x7f0000000240), 0x5}, 0x841, 0x5, 0xe6, 0x5, 0x7fffffffffffffff, 0xffff, 0xd59, 0x0, 0x6, 0x0, 0xf}, r10, 0x7, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x1ff) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @private1, 0x7, 0x83}, 0x80, &(0x7f0000000180)=[{&(0x7f00000007c0)="f4000900062b3325fe80000000000000dc8b850f23848f7e5c74a57f32cd8caf80bc8e7a2f3ce32a", 0x28}], 0x1}, 0x800) 2.268370749s ago: executing program 2 (id=2370): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x4e, &(0x7f0000000100), 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 2.115597571s ago: executing program 3 (id=2371): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x2, 0x4, 0x6, 0x8, 0x1414}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee688b5c6", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.00264512s ago: executing program 2 (id=2372): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 1.896213509s ago: executing program 2 (id=2373): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="97faab3b838cf7855a877062abecfdb58d2e281b20ed59c1cee779bf0b251b2edc22fac2ce2737319c87887371fa8451555468b38442597ee47091bbc0d7c25230e65fe447494b35", 0x48}], 0x1, &(0x7f0000000380)=[{0xe8, 0x0, 0xfff, "998bfd356c6eaa58b7dded24527dce90fcd12b72b2ce1f05d439f63d1505d1f02e36eb8aad71a94c61f91d7a4a0acb5580c164a985f46122f9cb890f95889a5db23e16a7fc991c8ce713e805f83c847184166e8f4d139ad7c16d9f95f98eb467e4d6a28a7aa83c18359b28bde6aa22495dd1eb36745b44083afd8b6f683e2edb085180924538aa782706bdd8d49db6b4455585b7ff5f9937ff6abb9d73d7bece8c6370c178c721a988b3d7e04bfa4d804d0435b003669154217efac1a356685595a0477961a40bb6ec604e2825a2bdd61e1b7c29ad"}, {0x88, 0x0, 0x0, "b3fed7845195821c52cedfe4e604ed5ac3f4d421296eea601832af087398dca6bd95d96108f9300e5507278e1a1be6ef00be2d6b0eec3ab39a485bd1f19ae25ff8c4fc44def32eec91c1080b547b035fd6decf7d7f3d23e97c47dc9d1015549cbb9d0d70c07f92178d836d002a3b174e17d0ad"}, {0x88, 0x84, 0x2, "a9503298958a7eb98fc12c01254b1bb8ca3be8099c254d7b951ffd981529ddc37c63c50d58b157858474c73948f4bf59a64eed6c1039bb99b9de4cc8e05d7bae622a24e683cc43bdd70651e47d526af7c2c22474fa3cd4d97ec36ce07efbccd915ffe719d003e3ee9c321bd61500a4326a25"}], 0x1f8}, 0x4c0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180000002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000021000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) close(0x3) 1.852050651s ago: executing program 3 (id=2374): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.754394719s ago: executing program 0 (id=2375): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="97faab3b838cf7855a877062abecfdb58d2e281b20ed59c1cee779bf0b251b2edc22fac2ce2737319c87887371fa8451555468b38442597ee47091bbc0d7c25230e65fe447494b3548229ee8d652795c7a58b265", 0x54}], 0x1, &(0x7f0000000380)=[{0xe8, 0x0, 0xfff, "998bfd356c6eaa58b7dded24527dce90fcd12b72b2ce1f05d439f63d1505d1f02e36eb8aad71a94c61f91d7a4a0acb5580c164a985f46122f9cb890f95889a5db23e16a7fc991c8ce713e805f83c847184166e8f4d139ad7c16d9f95f98eb467e4d6a28a7aa83c18359b28bde6aa22495dd1eb36745b44083afd8b6f683e2edb085180924538aa782706bdd8d49db6b4455585b7ff5f9937ff6abb9d73d7bece8c6370c178c721a988b3d7e04bfa4d804d0435b003669154217efac1a356685595a0477961a40bb6ec604e2825a2bdd61e1b7c29ad"}, {0x88, 0x0, 0x0, "b3fed7845195821c52cedfe4e604ed5ac3f4d421296eea601832af087398dca6bd95d96108f9300e5507278e1a1be6ef00be2d6b0eec3ab39a485bd1f19ae25ff8c4fc44def32eec91c1080b547b035fd6decf7d7f3d23e97c47dc9d1015549cbb9d0d70c07f92178d836d002a3b174e17d0ad"}, {0x88, 0x84, 0x2, "a9503298958a7eb98fc12c01254b1bb8ca3be8099c254d7b951ffd981529ddc37c63c50d58b157858474c73948f4bf59a64eed6c1039bb99b9de4cc8e05d7bae622a24e683cc43bdd70651e47d526af7c2c22474fa3cd4d97ec36ce07efbccd915ffe719d003e3ee9c321bd61500a4326a25"}], 0x1f8}, 0x4c0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180000002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000021000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) close(0x3) 1.530612818s ago: executing program 3 (id=2376): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x94992134bde15605) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x10, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x9fe, 0x452}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r2) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000140)=r3, 0x2) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r5}, 0xc) r6 = socket$kcm(0x2b, 0x5, 0x0) close(r6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x33, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x100, 0x0, 0xb}, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) 215.105424ms ago: executing program 2 (id=2377): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000001c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x28, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x24008010) 184.296956ms ago: executing program 0 (id=2378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 67.801885ms ago: executing program 0 (id=2379): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x4e, &(0x7f0000000100), 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 0s ago: executing program 3 (id=2380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000800000002"], 0x48) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x8, 0x7}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffe, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r1, 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x0, 0x5, 0x4}, 0x10, 0x0, r0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f", 0xc}], 0x1}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033"], 0xfe33) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f0000000340), 0x4) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x20000000000000f0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0xd, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="7c87f9000001"], 0xfe3a) (async) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x15) kernel console output (not intermixed with test programs): ain_count+0x20/0x20 [ 419.708982][T10898] __x64_sys_bpf+0x7c/0x90 [ 419.713434][T10898] do_syscall_64+0x55/0xb0 [ 419.717886][T10898] ? clear_bhb_loop+0x40/0x90 [ 419.722581][T10898] ? clear_bhb_loop+0x40/0x90 [ 419.727279][T10898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.733195][T10898] RIP: 0033:0x7fce9ab8ebe9 [ 419.737625][T10898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.757348][T10898] RSP: 002b:00007fce9b9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 419.765797][T10898] RAX: ffffffffffffffda RBX: 00007fce9adb5fa0 RCX: 00007fce9ab8ebe9 [ 419.773791][T10898] RDX: 0000000000000027 RSI: 0000200000001d40 RDI: 000000000000001c [ 419.781947][T10898] RBP: 00007fce9b9de090 R08: 0000000000000000 R09: 0000000000000000 [ 419.789937][T10898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.797917][T10898] R13: 00007fce9adb6038 R14: 00007fce9adb5fa0 R15: 00007ffc72984098 [ 419.805929][T10898] [ 419.851043][T10898] bond0: (slave bond_slave_0): Error -12 calling ndo_bpf [ 420.172334][T10910] syzkaller0: entered promiscuous mode [ 420.177872][T10910] syzkaller0: entered allmulticast mode [ 420.392822][T10918] FAULT_INJECTION: forcing a failure. [ 420.392822][T10918] name failslab, interval 1, probability 0, space 0, times 0 [ 420.492317][T10918] CPU: 1 PID: 10918 Comm: syz.3.1779 Not tainted 6.6.102-syzkaller #0 [ 420.500551][T10918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 420.510649][T10918] Call Trace: [ 420.513953][T10918] [ 420.516895][T10918] dump_stack_lvl+0x16c/0x230 [ 420.521603][T10918] ? show_regs_print_info+0x20/0x20 [ 420.526812][T10918] ? load_image+0x3b0/0x3b0 [ 420.531342][T10918] ? __lock_acquire+0x7c80/0x7c80 [ 420.536378][T10918] ? cfg80211_unhold_bss+0xc0/0xc0 [ 420.541506][T10918] should_fail_ex+0x39d/0x4d0 [ 420.546310][T10918] should_failslab+0x9/0x20 [ 420.550929][T10918] slab_pre_alloc_hook+0x59/0x310 [ 420.555969][T10918] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 420.561974][T10918] ? tun_device_event+0x163/0x1030 [ 420.567107][T10918] ? tun_device_event+0x163/0x1030 [ 420.572317][T10918] __kmem_cache_alloc_node+0x53/0x260 [ 420.580664][T10918] ? tun_device_event+0x163/0x1030 [ 420.585808][T10918] __kmalloc+0xa4/0x240 [ 420.590016][T10918] tun_device_event+0x163/0x1030 [ 420.594986][T10918] ? lockdep_rtnl_is_held+0x26/0x30 [ 420.600202][T10918] notifier_call_chain+0x197/0x390 [ 420.605340][T10918] dev_change_tx_queue_len+0x121/0x260 [ 420.610870][T10918] ? dev_set_mtu+0x170/0x170 [ 420.615475][T10918] ? __mutex_lock+0x4e8/0xcc0 [ 420.620170][T10918] dev_ifsioc+0x950/0xe20 [ 420.624532][T10918] ? dev_ioctl+0x1170/0x1170 [ 420.629130][T10918] ? dev_load+0x21/0x1f0 [ 420.633384][T10918] ? dev_load+0x21/0x1f0 [ 420.637654][T10918] dev_ioctl+0x7e2/0x1170 [ 420.641998][T10918] sock_do_ioctl+0x226/0x2f0 [ 420.646630][T10918] ? sock_show_fdinfo+0xb0/0xb0 [ 420.651511][T10918] sock_ioctl+0x623/0x7a0 [ 420.655946][T10918] ? sock_poll+0x3d0/0x3d0 [ 420.660396][T10918] ? bpf_lsm_file_ioctl+0x9/0x10 [ 420.665347][T10918] ? security_file_ioctl+0x80/0xa0 [ 420.670481][T10918] ? sock_poll+0x3d0/0x3d0 [ 420.675349][T10918] __se_sys_ioctl+0xfd/0x170 [ 420.679952][T10918] do_syscall_64+0x55/0xb0 [ 420.684376][T10918] ? clear_bhb_loop+0x40/0x90 [ 420.689149][T10918] ? clear_bhb_loop+0x40/0x90 [ 420.693855][T10918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.699821][T10918] RIP: 0033:0x7fce9ab8ebe9 [ 420.704258][T10918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.723873][T10918] RSP: 002b:00007fce9b9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.732300][T10918] RAX: ffffffffffffffda RBX: 00007fce9adb5fa0 RCX: 00007fce9ab8ebe9 [ 420.740364][T10918] RDX: 0000200000000900 RSI: 0000000000008943 RDI: 0000000000000004 [ 420.748345][T10918] RBP: 00007fce9b9de090 R08: 0000000000000000 R09: 0000000000000000 [ 420.756346][T10918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.764336][T10918] R13: 00007fce9adb6038 R14: 00007fce9adb5fa0 R15: 00007ffc72984098 [ 420.772418][T10918] [ 421.171133][T10918] syz_tun: refused to change device tx_queue_len [ 421.260002][T10926] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 421.525377][T10932] netlink: 'syz.1.1784': attribute type 10 has an invalid length. [ 421.684372][T10936] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1785'. [ 421.841939][T10941] netlink: 'syz.2.1786': attribute type 29 has an invalid length. [ 421.941502][T10941] netlink: 'syz.2.1786': attribute type 29 has an invalid length. [ 421.966589][T10946] netlink: 'syz.2.1786': attribute type 29 has an invalid length. [ 422.019227][T10950] netlink: 'syz.2.1786': attribute type 29 has an invalid length. [ 423.292944][T10970] netlink: 'syz.0.1798': attribute type 10 has an invalid length. [ 423.339220][T10972] FAULT_INJECTION: forcing a failure. [ 423.339220][T10972] name failslab, interval 1, probability 0, space 0, times 0 [ 423.352050][T10972] CPU: 1 PID: 10972 Comm: syz.1.1799 Not tainted 6.6.102-syzkaller #0 [ 423.360257][T10972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 423.370356][T10972] Call Trace: [ 423.373674][T10972] [ 423.376681][T10972] dump_stack_lvl+0x16c/0x230 [ 423.381667][T10972] ? show_regs_print_info+0x20/0x20 [ 423.386910][T10972] ? load_image+0x3b0/0x3b0 [ 423.391476][T10972] should_fail_ex+0x39d/0x4d0 [ 423.396213][T10972] should_failslab+0x9/0x20 [ 423.400789][T10972] slab_pre_alloc_hook+0x59/0x310 [ 423.405867][T10972] kmem_cache_alloc+0x5a/0x2e0 [ 423.410679][T10972] ? skb_clone+0x1eb/0x370 [ 423.415235][T10972] skb_clone+0x1eb/0x370 [ 423.419532][T10972] bpf_clone_redirect+0xad/0x3d0 [ 423.424521][T10972] bpf_prog_ae0716d478eff878+0x5e/0x63 [ 423.430028][T10972] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 423.435879][T10972] ? perf_trace_preemptirq_template+0x281/0x340 [ 423.442173][T10972] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 423.448201][T10972] ? lockdep_softirqs_on+0x570/0x570 [ 423.453704][T10972] ? lock_chain_count+0x20/0x20 [ 423.458813][T10972] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 423.465112][T10972] ? __local_bh_disable_ip+0xf2/0x190 [ 423.470609][T10972] ? __cant_sleep+0x210/0x210 [ 423.475337][T10972] ? __local_bh_enable_ip+0x12e/0x1c0 [ 423.480748][T10972] ? _local_bh_enable+0xa0/0xa0 [ 423.485655][T10972] ? bpf_test_timer_continue+0x135/0x380 [ 423.491345][T10972] ? bpf_test_run+0x15c/0x810 [ 423.496074][T10972] bpf_test_run+0x2c7/0x810 [ 423.500643][T10972] ? bpf_test_run+0x15c/0x810 [ 423.505364][T10972] ? convert___skb_to_skb+0x590/0x590 [ 423.510788][T10972] ? eth_get_headlen+0x200/0x200 [ 423.515780][T10972] ? slab_build_skb+0x25f/0x3f0 [ 423.520678][T10972] ? convert___skb_to_skb+0x3d/0x590 [ 423.526012][T10972] bpf_prog_test_run_skb+0xa67/0x11c0 [ 423.531453][T10972] ? cpu_online+0x60/0x60 [ 423.535832][T10972] bpf_prog_test_run+0x321/0x390 [ 423.540815][T10972] __sys_bpf+0x440/0x800 [ 423.545115][T10972] ? bpf_link_show_fdinfo+0x350/0x350 [ 423.550549][T10972] ? lock_chain_count+0x20/0x20 [ 423.555450][T10972] __x64_sys_bpf+0x7c/0x90 [ 423.559908][T10972] do_syscall_64+0x55/0xb0 [ 423.564359][T10972] ? clear_bhb_loop+0x40/0x90 [ 423.569072][T10972] ? clear_bhb_loop+0x40/0x90 [ 423.573788][T10972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.579732][T10972] RIP: 0033:0x7f245198ebe9 [ 423.584190][T10972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.603840][T10972] RSP: 002b:00007f2452772038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 423.612309][T10972] RAX: ffffffffffffffda RBX: 00007f2451bb5fa0 RCX: 00007f245198ebe9 [ 423.620326][T10972] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 423.628339][T10972] RBP: 00007f2452772090 R08: 0000000000000000 R09: 0000000000000000 [ 423.636359][T10972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.644367][T10972] R13: 00007f2451bb6038 R14: 00007f2451bb5fa0 R15: 00007ffdb7038018 [ 423.652399][T10972] [ 423.951295][T10981] netlink: 'syz.1.1803': attribute type 29 has an invalid length. [ 424.064052][T10981] netlink: 'syz.1.1803': attribute type 29 has an invalid length. [ 424.109019][T10986] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1804'. [ 424.142560][T10983] netlink: 'syz.1.1803': attribute type 29 has an invalid length. [ 425.242729][T11012] netlink: 'syz.2.1811': attribute type 10 has an invalid length. [ 426.273728][T11032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.290242][T11035] netlink: 'syz.2.1820': attribute type 29 has an invalid length. [ 426.318190][T11035] netlink: 'syz.2.1820': attribute type 29 has an invalid length. [ 426.527580][T11035] netlink: 'syz.2.1820': attribute type 29 has an invalid length. [ 427.507246][T11057] FAULT_INJECTION: forcing a failure. [ 427.507246][T11057] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 427.521036][T11057] CPU: 0 PID: 11057 Comm: syz.3.1827 Not tainted 6.6.102-syzkaller #0 [ 427.529338][T11057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 427.539421][T11057] Call Trace: [ 427.542721][T11057] [ 427.545672][T11057] dump_stack_lvl+0x16c/0x230 [ 427.550367][T11057] ? show_regs_print_info+0x20/0x20 [ 427.555586][T11057] ? load_image+0x3b0/0x3b0 [ 427.560108][T11057] ? __lock_acquire+0x7c80/0x7c80 [ 427.565157][T11057] should_fail_ex+0x39d/0x4d0 [ 427.569853][T11057] prepare_alloc_pages+0x1e2/0x5f0 [ 427.574986][T11057] __alloc_pages+0x127/0x460 [ 427.579591][T11057] ? rcu_is_watching+0x15/0xb0 [ 427.584369][T11057] ? zone_statistics+0x170/0x170 [ 427.589494][T11057] ? __build_skb_around+0x255/0x3d0 [ 427.594759][T11057] alloc_skb_with_frags+0x23c/0x7c0 [ 427.600006][T11057] sock_alloc_send_pskb+0x857/0x990 [ 427.605318][T11057] ? sock_kzfree_s+0x50/0x50 [ 427.609934][T11057] tun_get_user+0x9dc/0x3bf0 [ 427.614635][T11057] ? aa_file_perm+0x120/0xec0 [ 427.619324][T11057] ? aa_file_perm+0x3e8/0xec0 [ 427.624018][T11057] ? rcu_read_unlock+0xa0/0xa0 [ 427.628802][T11057] ? tun_get+0x1c/0x2e0 [ 427.632970][T11057] ? __lock_acquire+0x7c80/0x7c80 [ 427.638187][T11057] ? tun_get+0x1c/0x2e0 [ 427.642361][T11057] tun_chr_write_iter+0x119/0x200 [ 427.647490][T11057] vfs_write+0x43b/0x940 [ 427.651759][T11057] ? file_end_write+0x250/0x250 [ 427.656627][T11057] ? __fget_files+0x44a/0x4d0 [ 427.661329][T11057] ? __fdget_pos+0x1d8/0x330 [ 427.665935][T11057] ? ksys_write+0x75/0x250 [ 427.670368][T11057] ksys_write+0x147/0x250 [ 427.674715][T11057] ? __ia32_sys_read+0x90/0x90 [ 427.679496][T11057] ? lockdep_hardirqs_on+0x98/0x150 [ 427.684718][T11057] do_syscall_64+0x55/0xb0 [ 427.689141][T11057] ? clear_bhb_loop+0x40/0x90 [ 427.693830][T11057] ? clear_bhb_loop+0x40/0x90 [ 427.698519][T11057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.704432][T11057] RIP: 0033:0x7fce9ab8ebe9 [ 427.708864][T11057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.728512][T11057] RSP: 002b:00007fce9b9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 427.736952][T11057] RAX: ffffffffffffffda RBX: 00007fce9adb5fa0 RCX: 00007fce9ab8ebe9 [ 427.744931][T11057] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 427.752908][T11057] RBP: 00007fce9b9de090 R08: 0000000000000000 R09: 0000000000000000 [ 427.760888][T11057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.769004][T11057] R13: 00007fce9adb6038 R14: 00007fce9adb5fa0 R15: 00007ffc72984098 [ 427.777003][T11057] [ 429.742671][T11053] netlink: 'syz.2.1825': attribute type 5 has an invalid length. [ 429.750434][T11053] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1825'. [ 430.090408][T11075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.719208][T11107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.695573][T11183] FAULT_INJECTION: forcing a failure. [ 436.695573][T11183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.722093][T11183] CPU: 1 PID: 11183 Comm: syz.2.1868 Not tainted 6.6.102-syzkaller #0 [ 436.730325][T11183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 436.740405][T11183] Call Trace: [ 436.743709][T11183] [ 436.746666][T11183] dump_stack_lvl+0x16c/0x230 [ 436.751385][T11183] ? show_regs_print_info+0x20/0x20 [ 436.756617][T11183] ? load_image+0x3b0/0x3b0 [ 436.761167][T11183] ? __lock_acquire+0x7c80/0x7c80 [ 436.766223][T11183] ? snprintf+0xdb/0x120 [ 436.770517][T11183] should_fail_ex+0x39d/0x4d0 [ 436.775243][T11183] _copy_to_user+0x2f/0xa0 [ 436.779695][T11183] simple_read_from_buffer+0xe7/0x150 [ 436.785115][T11183] proc_fail_nth_read+0x1e3/0x250 [ 436.790188][T11183] ? proc_fault_inject_write+0x340/0x340 [ 436.795870][T11183] ? fsnotify_perm+0x271/0x5e0 [ 436.800676][T11183] ? proc_fault_inject_write+0x340/0x340 [ 436.806340][T11183] vfs_read+0x27e/0x920 [ 436.810553][T11183] ? kernel_read+0x1e0/0x1e0 [ 436.815183][T11183] ? __fget_files+0x28/0x4d0 [ 436.819829][T11183] ? __fget_files+0x44a/0x4d0 [ 436.824618][T11183] ? __fdget_pos+0x2a3/0x330 [ 436.829270][T11183] ? ksys_read+0x75/0x250 [ 436.833661][T11183] ksys_read+0x147/0x250 [ 436.837954][T11183] ? vfs_write+0x940/0x940 [ 436.842418][T11183] ? lockdep_hardirqs_on+0x98/0x150 [ 436.847662][T11183] do_syscall_64+0x55/0xb0 [ 436.852117][T11183] ? clear_bhb_loop+0x40/0x90 [ 436.856834][T11183] ? clear_bhb_loop+0x40/0x90 [ 436.861546][T11183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.867501][T11183] RIP: 0033:0x7f61dc58d5fc [ 436.871948][T11183] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 436.891673][T11183] RSP: 002b:00007f61dd343030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.900126][T11183] RAX: ffffffffffffffda RBX: 00007f61dc7b5fa0 RCX: 00007f61dc58d5fc [ 436.908121][T11183] RDX: 000000000000000f RSI: 00007f61dd3430a0 RDI: 0000000000000006 [ 436.916121][T11183] RBP: 00007f61dd343090 R08: 0000000000000000 R09: 0000000000000000 [ 436.924119][T11183] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 436.932121][T11183] R13: 00007f61dc7b6038 R14: 00007f61dc7b5fa0 R15: 00007fff99372958 [ 436.940164][T11183] [ 437.521160][T11187] netlink: 'syz.2.1872': attribute type 21 has an invalid length. [ 437.529839][T11187] netlink: 'syz.2.1872': attribute type 1 has an invalid length. [ 437.540032][T11187] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1872'. [ 437.846205][T11197] netlink: 'syz.2.1874': attribute type 21 has an invalid length. [ 437.892275][T11197] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1874'. [ 437.937574][T11197] netlink: 'syz.2.1874': attribute type 4 has an invalid length. [ 437.986171][T11197] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1874'. [ 440.136788][T11226] FAULT_INJECTION: forcing a failure. [ 440.136788][T11226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.151630][T11220] netlink: 'syz.0.1881': attribute type 28 has an invalid length. [ 440.161772][T11220] netlink: 'syz.0.1881': attribute type 29 has an invalid length. [ 440.171997][T11220] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1881'. [ 440.218631][T11226] CPU: 0 PID: 11226 Comm: syz.1.1882 Not tainted 6.6.102-syzkaller #0 [ 440.227131][T11226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 440.237401][T11226] Call Trace: [ 440.240732][T11226] [ 440.243707][T11226] dump_stack_lvl+0x16c/0x230 [ 440.248452][T11226] ? show_regs_print_info+0x20/0x20 [ 440.253709][T11226] ? load_image+0x3b0/0x3b0 [ 440.258299][T11226] ? __might_fault+0xaa/0x120 [ 440.263047][T11226] ? __lock_acquire+0x7c80/0x7c80 [ 440.268140][T11226] should_fail_ex+0x39d/0x4d0 [ 440.273320][T11226] _copy_from_user+0x2f/0xe0 [ 440.277956][T11226] generic_map_update_batch+0x58e/0x810 [ 440.283577][T11226] ? rcu_read_unlock+0xa0/0xa0 [ 440.288411][T11226] ? __fdget+0x180/0x210 [ 440.292710][T11226] ? rcu_read_unlock+0xa0/0xa0 [ 440.297526][T11226] bpf_map_do_batch+0x3d7/0x610 [ 440.302424][T11226] __sys_bpf+0x31b/0x800 [ 440.306715][T11226] ? bpf_link_show_fdinfo+0x350/0x350 [ 440.312167][T11226] ? lock_chain_count+0x20/0x20 [ 440.317083][T11226] __x64_sys_bpf+0x7c/0x90 [ 440.321566][T11226] do_syscall_64+0x55/0xb0 [ 440.326043][T11226] ? clear_bhb_loop+0x40/0x90 [ 440.330768][T11226] ? clear_bhb_loop+0x40/0x90 [ 440.335510][T11226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.341545][T11226] RIP: 0033:0x7f245198ebe9 [ 440.346009][T11226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.365682][T11226] RSP: 002b:00007f2452772038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 440.374182][T11226] RAX: ffffffffffffffda RBX: 00007f2451bb5fa0 RCX: 00007f245198ebe9 [ 440.382203][T11226] RDX: 0000000000000038 RSI: 0000200000000c00 RDI: 000000000000001a [ 440.390236][T11226] RBP: 00007f2452772090 R08: 0000000000000000 R09: 0000000000000000 [ 440.398264][T11226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 440.406285][T11226] R13: 00007f2451bb6038 R14: 00007f2451bb5fa0 R15: 00007ffdb7038018 [ 440.414310][T11226] [ 440.420008][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.426570][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.838302][T11242] netlink: 'syz.3.1890': attribute type 21 has an invalid length. [ 440.846617][T11242] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1890'. [ 440.862506][T11242] netlink: 'syz.3.1890': attribute type 4 has an invalid length. [ 440.881657][T11242] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1890'. [ 441.911081][T11250] netlink: 'syz.2.1892': attribute type 39 has an invalid length. [ 442.088136][T11255] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1893'. [ 442.097711][T11255] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1893'. [ 442.108021][T11252] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1893'. [ 442.130441][T11257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1894'. [ 443.468302][T11272] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1898'. [ 443.537683][T11272] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1898'. [ 443.552986][T11271] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1898'. [ 445.239084][T11291] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1904'. [ 445.253134][T11293] netlink: 'syz.0.1911': attribute type 21 has an invalid length. [ 445.265385][T11293] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1911'. [ 445.278076][T11293] netlink: 'syz.0.1911': attribute type 4 has an invalid length. [ 445.290210][T11293] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1911'. [ 445.716523][T11303] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1905'. [ 445.766788][T11303] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1905'. [ 445.821729][T11301] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1905'. [ 445.871612][T11301] FAULT_INJECTION: forcing a failure. [ 445.871612][T11301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.947761][T11301] CPU: 1 PID: 11301 Comm: syz.1.1905 Not tainted 6.6.102-syzkaller #0 [ 445.956079][T11301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 445.966168][T11301] Call Trace: [ 445.969498][T11301] [ 445.972455][T11301] dump_stack_lvl+0x16c/0x230 [ 445.977176][T11301] ? show_regs_print_info+0x20/0x20 [ 445.982409][T11301] ? load_image+0x3b0/0x3b0 [ 445.986956][T11301] ? __lock_acquire+0x7c80/0x7c80 [ 445.992013][T11301] ? snprintf+0xdb/0x120 [ 445.996296][T11301] should_fail_ex+0x39d/0x4d0 [ 446.001052][T11301] _copy_to_user+0x2f/0xa0 [ 446.005511][T11301] simple_read_from_buffer+0xe7/0x150 [ 446.010927][T11301] proc_fail_nth_read+0x1e3/0x250 [ 446.016000][T11301] ? proc_fault_inject_write+0x340/0x340 [ 446.021675][T11301] ? fsnotify_perm+0x271/0x5e0 [ 446.026491][T11301] ? proc_fault_inject_write+0x340/0x340 [ 446.032156][T11301] vfs_read+0x27e/0x920 [ 446.036358][T11301] ? kernel_read+0x1e0/0x1e0 [ 446.040980][T11301] ? __fget_files+0x28/0x4d0 [ 446.045601][T11301] ? __fget_files+0x44a/0x4d0 [ 446.050318][T11301] ? __fdget_pos+0x2a3/0x330 [ 446.054947][T11301] ? ksys_read+0x75/0x250 [ 446.059312][T11301] ksys_read+0x147/0x250 [ 446.063597][T11301] ? vfs_write+0x940/0x940 [ 446.068050][T11301] ? lockdep_hardirqs_on+0x98/0x150 [ 446.073290][T11301] do_syscall_64+0x55/0xb0 [ 446.077733][T11301] ? clear_bhb_loop+0x40/0x90 [ 446.082457][T11301] ? clear_bhb_loop+0x40/0x90 [ 446.087186][T11301] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.093133][T11301] RIP: 0033:0x7f245198d5fc [ 446.097675][T11301] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 446.117430][T11301] RSP: 002b:00007f2452772030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 446.125880][T11301] RAX: ffffffffffffffda RBX: 00007f2451bb5fa0 RCX: 00007f245198d5fc [ 446.133884][T11301] RDX: 000000000000000f RSI: 00007f24527720a0 RDI: 0000000000000004 [ 446.141892][T11301] RBP: 00007f2452772090 R08: 0000000000000000 R09: 0000000000000000 [ 446.149910][T11301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.157927][T11301] R13: 00007f2451bb6038 R14: 00007f2451bb5fa0 R15: 00007ffdb7038018 [ 446.165968][T11301] [ 447.949153][T11330] netlink: 'syz.1.1916': attribute type 28 has an invalid length. [ 447.970883][T11330] netlink: 'syz.1.1916': attribute type 29 has an invalid length. [ 448.013825][T11330] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1916'. [ 448.586895][T11347] netlink: 'syz.0.1919': attribute type 21 has an invalid length. [ 448.596821][T11347] netlink: 'syz.0.1919': attribute type 11 has an invalid length. [ 448.859004][T11356] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1925'. [ 448.880161][T11358] netlink: 212900 bytes leftover after parsing attributes in process `syz.2.1926'. [ 448.892594][T11358] openvswitch: netlink: IP tunnel dst address not specified [ 448.907113][T11358] netlink: 'syz.2.1926': attribute type 3 has an invalid length. [ 448.918658][T11358] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1926'. [ 452.744158][T11400] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1937'. [ 453.066872][T11406] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1937'. [ 453.396976][T11410] netlink: 'syz.0.1940': attribute type 1 has an invalid length. [ 453.422305][T11409] netlink: 'syz.0.1940': attribute type 10 has an invalid length. [ 453.474395][T11409] team0: Device ipvlan1 failed to register rx_handler [ 454.511044][T11428] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1945'. [ 454.572947][T11428] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1945'. [ 454.669195][T11424] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1945'. [ 454.873229][T11436] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1945'. [ 454.959494][T11444] netlink: 'syz.1.1950': attribute type 13 has an invalid length. [ 454.983187][T11444] macvtap0: entered promiscuous mode [ 454.990589][T11444] macvtap0: refused to change device tx_queue_len [ 455.010151][T11444] C: renamed from team_slave_0 (while UP) [ 455.056185][T11444] netlink: 'syz.1.1950': attribute type 1 has an invalid length. [ 455.095377][T11444] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1950'. [ 456.339654][T11477] FAULT_INJECTION: forcing a failure. [ 456.339654][T11477] name failslab, interval 1, probability 0, space 0, times 0 [ 456.356371][T11477] CPU: 0 PID: 11477 Comm: syz.0.1969 Not tainted 6.6.102-syzkaller #0 [ 456.364585][T11477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 456.374674][T11477] Call Trace: [ 456.377981][T11477] [ 456.380940][T11477] dump_stack_lvl+0x16c/0x230 [ 456.385680][T11477] ? show_regs_print_info+0x20/0x20 [ 456.390930][T11477] ? load_image+0x3b0/0x3b0 [ 456.395490][T11477] ? __might_sleep+0xe0/0xe0 [ 456.400136][T11477] ? __lock_acquire+0x7c80/0x7c80 [ 456.405233][T11477] should_fail_ex+0x39d/0x4d0 [ 456.409969][T11477] should_failslab+0x9/0x20 [ 456.414511][T11477] slab_pre_alloc_hook+0x59/0x310 [ 456.419575][T11477] ? find_css_set+0x9ba/0x1540 [ 456.424390][T11477] __kmem_cache_alloc_node+0x53/0x260 [ 456.429814][T11477] ? find_css_set+0x9ba/0x1540 [ 456.434877][T11477] kmalloc_trace+0x2a/0xe0 [ 456.439342][T11477] find_css_set+0x9ba/0x1540 [ 456.443990][T11477] ? cgroup_migrate_prepare_dst+0x6f0/0x6f0 [ 456.449937][T11477] ? mark_lock+0x94/0x320 [ 456.454319][T11477] cgroup_migrate_prepare_dst+0x130/0x6f0 [ 456.460083][T11477] cgroup_attach_task+0x527/0x830 [ 456.465140][T11477] ? cgroup_attach_task+0x1f3/0x830 [ 456.470365][T11477] ? cgroup_migrate_execute+0xf30/0xf30 [ 456.475970][T11477] ? _atomic_dec_and_lock+0x93/0x120 [ 456.481306][T11477] ? cgroup_attach_permissions+0x4eb/0x9d0 [ 456.487155][T11477] ? revert_creds+0xae/0xc0 [ 456.491796][T11477] __cgroup_procs_write+0x23a/0x350 [ 456.497048][T11477] cgroup_procs_write+0x27/0x50 [ 456.501935][T11477] ? cgroup_procs_next+0xa0/0xa0 [ 456.506909][T11477] cgroup_file_write+0x2fc/0x660 [ 456.511888][T11477] ? read_lock_is_recursive+0x20/0x20 [ 456.517300][T11477] ? cgroup_seqfile_stop+0xd0/0xd0 [ 456.522471][T11477] ? cgroup_seqfile_stop+0xd0/0xd0 [ 456.527696][T11477] kernfs_fop_write_iter+0x37d/0x4d0 [ 456.533030][T11477] vfs_write+0x43b/0x940 [ 456.537320][T11477] ? file_end_write+0x250/0x250 [ 456.542218][T11477] ? __fget_files+0x44a/0x4d0 [ 456.546965][T11477] ? __fdget_pos+0x2a3/0x330 [ 456.551584][T11477] ? ksys_write+0x75/0x250 [ 456.556049][T11477] ksys_write+0x147/0x250 [ 456.560431][T11477] ? __ia32_sys_read+0x90/0x90 [ 456.565234][T11477] ? lockdep_hardirqs_on+0x98/0x150 [ 456.570502][T11477] do_syscall_64+0x55/0xb0 [ 456.574948][T11477] ? clear_bhb_loop+0x40/0x90 [ 456.579749][T11477] ? clear_bhb_loop+0x40/0x90 [ 456.584472][T11477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.590409][T11477] RIP: 0033:0x7f5a24d8ebe9 [ 456.594868][T11477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.614512][T11477] RSP: 002b:00007f5a25b89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 456.622957][T11477] RAX: ffffffffffffffda RBX: 00007f5a24fb5fa0 RCX: 00007f5a24d8ebe9 [ 456.630956][T11477] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000005 [ 456.638951][T11477] RBP: 00007f5a25b89090 R08: 0000000000000000 R09: 0000000000000000 [ 456.646948][T11477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.654946][T11477] R13: 00007f5a24fb6038 R14: 00007f5a24fb5fa0 R15: 00007ffd6156d8e8 [ 456.663255][T11477] [ 456.752592][T11484] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1961'. [ 456.761688][T11484] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1961'. [ 456.779808][T11475] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1961'. [ 456.805307][T11477] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1969'. [ 456.805850][T11477] netlink: zone id is out of range [ 456.805862][T11477] netlink: zone id is out of range [ 456.805870][T11477] netlink: zone id is out of range [ 456.805879][T11477] netlink: zone id is out of range [ 456.805888][T11477] netlink: zone id is out of range [ 456.805897][T11477] netlink: zone id is out of range [ 456.805907][T11477] netlink: zone id is out of range [ 456.805915][T11477] netlink: zone id is out of range [ 456.805923][T11477] netlink: zone id is out of range [ 456.805932][T11477] netlink: zone id is out of range [ 456.989504][T11483] netlink: 'syz.3.1959': attribute type 21 has an invalid length. [ 457.040391][T11483] netlink: 'syz.3.1959': attribute type 11 has an invalid length. [ 457.055214][T11484] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1961'. [ 457.735292][T11497] netlink: 'syz.2.1966': attribute type 10 has an invalid length. [ 458.385985][T11497] veth1_vlan (unregistering): left allmulticast mode [ 458.488684][T11497] bond0: (slave macvlan0): Releasing backup interface [ 458.549017][T11501] netlink: 'syz.2.1966': attribute type 10 has an invalid length. [ 458.909201][T11529] FAULT_INJECTION: forcing a failure. [ 458.909201][T11529] name failslab, interval 1, probability 0, space 0, times 0 [ 458.921963][T11529] CPU: 0 PID: 11529 Comm: syz.3.1977 Not tainted 6.6.102-syzkaller #0 [ 458.930249][T11529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 458.940331][T11529] Call Trace: [ 458.943645][T11529] [ 458.946604][T11529] dump_stack_lvl+0x16c/0x230 [ 458.951331][T11529] ? show_regs_print_info+0x20/0x20 [ 458.956563][T11529] ? load_image+0x3b0/0x3b0 [ 458.961129][T11529] should_fail_ex+0x39d/0x4d0 [ 458.965851][T11529] should_failslab+0x9/0x20 [ 458.970411][T11529] slab_pre_alloc_hook+0x59/0x310 [ 458.975487][T11529] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 458.981080][T11529] kmem_cache_alloc+0x5a/0x2e0 [ 458.985977][T11529] ? skb_clone+0x1eb/0x370 [ 458.990448][T11529] skb_clone+0x1eb/0x370 [ 458.994750][T11529] bpf_clone_redirect+0xad/0x3d0 [ 458.999725][T11529] ? bpf_test_run+0x15c/0x810 [ 459.004433][T11529] bpf_prog_e97454e6a39c6b06+0x61/0x66 [ 459.009911][T11529] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 459.015911][T11529] ? lock_chain_count+0x20/0x20 [ 459.020800][T11529] ? seqcount_lockdep_reader_access+0x124/0x1c0 [ 459.027052][T11529] ? lockdep_softirqs_on+0x570/0x570 [ 459.032352][T11529] ? ktime_get+0x7f/0x280 [ 459.036695][T11529] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 459.042949][T11529] ? ktime_get_real_ts64+0x420/0x420 [ 459.048245][T11529] ? bpf_prog_test_run+0x321/0x390 [ 459.053370][T11529] ? __local_bh_disable_ip+0xf2/0x190 [ 459.058754][T11529] ? __cant_sleep+0x210/0x210 [ 459.063450][T11529] ? read_tsc+0x9/0x20 [ 459.067533][T11529] ? ktime_get+0x24b/0x280 [ 459.071982][T11529] ? bpf_test_run+0x15c/0x810 [ 459.076798][T11529] ? kvm_sched_clock_read+0x11/0x20 [ 459.082034][T11529] bpf_test_run+0x4e6/0x810 [ 459.086583][T11529] ? bpf_test_run+0x15c/0x810 [ 459.091284][T11529] ? convert___skb_to_skb+0x590/0x590 [ 459.096683][T11529] ? eth_get_headlen+0x200/0x200 [ 459.101823][T11529] ? slab_build_skb+0x25f/0x3f0 [ 459.106692][T11529] ? convert___skb_to_skb+0x3d/0x590 [ 459.112111][T11529] bpf_prog_test_run_skb+0xa67/0x11c0 [ 459.117566][T11529] ? cpu_online+0x60/0x60 [ 459.121921][T11529] bpf_prog_test_run+0x321/0x390 [ 459.126883][T11529] __sys_bpf+0x440/0x800 [ 459.131146][T11529] ? bpf_link_show_fdinfo+0x350/0x350 [ 459.136646][T11529] ? lock_chain_count+0x20/0x20 [ 459.141534][T11529] __x64_sys_bpf+0x7c/0x90 [ 459.145978][T11529] do_syscall_64+0x55/0xb0 [ 459.150409][T11529] ? clear_bhb_loop+0x40/0x90 [ 459.155097][T11529] ? clear_bhb_loop+0x40/0x90 [ 459.159788][T11529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.165705][T11529] RIP: 0033:0x7fce9ab8ebe9 [ 459.170132][T11529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.189765][T11529] RSP: 002b:00007fce9b9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 459.198200][T11529] RAX: ffffffffffffffda RBX: 00007fce9adb5fa0 RCX: 00007fce9ab8ebe9 [ 459.206396][T11529] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 459.214401][T11529] RBP: 00007fce9b9de090 R08: 0000000000000000 R09: 0000000000000000 [ 459.222410][T11529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.230395][T11529] R13: 00007fce9adb6038 R14: 00007fce9adb5fa0 R15: 00007ffc72984098 [ 459.238403][T11529] [ 459.685945][T11538] syzkaller0: entered promiscuous mode [ 459.691952][T11538] syzkaller0: entered allmulticast mode [ 459.756179][T11543] netlink: 'syz.1.1980': attribute type 10 has an invalid length. [ 459.810424][T11543] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 459.824857][T11543] team0: Port device wlan1 added [ 460.127831][T11556] __nla_validate_parse: 3 callbacks suppressed [ 460.127851][T11556] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1988'. [ 460.318605][T11535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.231824][T11576] netlink: 'syz.3.1995': attribute type 21 has an invalid length. [ 461.259474][T11580] netlink: 'syz.3.1995': attribute type 10 has an invalid length. [ 461.302506][T11580] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1995'. [ 462.446983][T11612] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2007'. [ 462.464205][T11612] net_ratelimit: 146 callbacks suppressed [ 462.464224][T11612] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 463.107195][T11624] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.2011'. [ 463.147212][T11624] netlink: 'syz.2.2011': attribute type 29 has an invalid length. [ 463.156204][T11624] netlink: 'syz.2.2011': attribute type 29 has an invalid length. [ 463.167966][T11624] netlink: 'syz.2.2011': attribute type 29 has an invalid length. [ 463.184987][T11624] netlink: 'syz.2.2011': attribute type 29 has an invalid length. [ 463.296025][T11628] syzkaller0: entered promiscuous mode [ 463.322606][T11628] syzkaller0: entered allmulticast mode [ 463.536924][T11635] FAULT_INJECTION: forcing a failure. [ 463.536924][T11635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.565055][T11635] CPU: 1 PID: 11635 Comm: syz.2.2017 Not tainted 6.6.102-syzkaller #0 [ 463.573326][T11635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 463.583429][T11635] Call Trace: [ 463.586743][T11635] [ 463.589703][T11635] dump_stack_lvl+0x16c/0x230 [ 463.594432][T11635] ? show_regs_print_info+0x20/0x20 [ 463.599682][T11635] ? load_image+0x3b0/0x3b0 [ 463.604240][T11635] ? __might_fault+0xaa/0x120 [ 463.608976][T11635] ? __lock_acquire+0x7c80/0x7c80 [ 463.614052][T11635] should_fail_ex+0x39d/0x4d0 [ 463.618785][T11635] _copy_from_user+0x2f/0xe0 [ 463.623517][T11635] bpf_prog_test_run_xdp+0xca3/0xfa0 [ 463.628876][T11635] ? dev_put+0x80/0x80 [ 463.633000][T11635] ? dev_put+0x80/0x80 [ 463.637116][T11635] bpf_prog_test_run+0x321/0x390 [ 463.642098][T11635] __sys_bpf+0x440/0x800 [ 463.646401][T11635] ? bpf_link_show_fdinfo+0x350/0x350 [ 463.651895][T11635] ? lock_chain_count+0x20/0x20 [ 463.656853][T11635] __x64_sys_bpf+0x7c/0x90 [ 463.661276][T11635] do_syscall_64+0x55/0xb0 [ 463.665713][T11635] ? clear_bhb_loop+0x40/0x90 [ 463.670390][T11635] ? clear_bhb_loop+0x40/0x90 [ 463.675087][T11635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.681028][T11635] RIP: 0033:0x7f61dc58ebe9 [ 463.685475][T11635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.705192][T11635] RSP: 002b:00007f61dd343038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 463.713610][T11635] RAX: ffffffffffffffda RBX: 00007f61dc7b5fa0 RCX: 00007f61dc58ebe9 [ 463.721582][T11635] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 463.729577][T11635] RBP: 00007f61dd343090 R08: 0000000000000000 R09: 0000000000000000 [ 463.737559][T11635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.745531][T11635] R13: 00007f61dc7b6038 R14: 00007f61dc7b5fa0 R15: 00007fff99372958 [ 463.753550][T11635] [ 463.928028][T11645] FAULT_INJECTION: forcing a failure. [ 463.928028][T11645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.941593][T11645] CPU: 1 PID: 11645 Comm: syz.2.2019 Not tainted 6.6.102-syzkaller #0 [ 463.949961][T11645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 463.960051][T11645] Call Trace: [ 463.963356][T11645] [ 463.966336][T11645] dump_stack_lvl+0x16c/0x230 [ 463.971044][T11645] ? show_regs_print_info+0x20/0x20 [ 463.976269][T11645] ? load_image+0x3b0/0x3b0 [ 463.980815][T11645] ? __might_fault+0xaa/0x120 [ 463.985517][T11645] ? __lock_acquire+0x7c80/0x7c80 [ 463.990574][T11645] should_fail_ex+0x39d/0x4d0 [ 463.995293][T11645] _copy_from_user+0x2f/0xe0 [ 463.999909][T11645] __sys_bpf+0x1e9/0x800 [ 464.004177][T11645] ? bpf_link_show_fdinfo+0x350/0x350 [ 464.009584][T11645] ? lock_chain_count+0x20/0x20 [ 464.014469][T11645] __x64_sys_bpf+0x7c/0x90 [ 464.018921][T11645] do_syscall_64+0x55/0xb0 [ 464.023361][T11645] ? clear_bhb_loop+0x40/0x90 [ 464.028056][T11645] ? clear_bhb_loop+0x40/0x90 [ 464.032763][T11645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.038707][T11645] RIP: 0033:0x7f61dc58ebe9 [ 464.043165][T11645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.062995][T11645] RSP: 002b:00007f61dd343038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 464.071454][T11645] RAX: ffffffffffffffda RBX: 00007f61dc7b5fa0 RCX: 00007f61dc58ebe9 [ 464.079546][T11645] RDX: 0000000000000010 RSI: 0000200000000bc0 RDI: 000000000000000a [ 464.087647][T11645] RBP: 00007f61dd343090 R08: 0000000000000000 R09: 0000000000000000 [ 464.095643][T11645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.103902][T11645] R13: 00007f61dc7b6038 R14: 00007f61dc7b5fa0 R15: 00007fff99372958 [ 464.112003][T11645] [ 464.729104][T11666] netlink: 'syz.0.2027': attribute type 10 has an invalid length. [ 464.807907][T11668] netlink: 'syz.3.2025': attribute type 10 has an invalid length. [ 464.851647][T11668] team0: Port device wlan1 added [ 465.381379][T11658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.905638][T11681] FAULT_INJECTION: forcing a failure. [ 465.905638][T11681] name failslab, interval 1, probability 0, space 0, times 0 [ 465.968124][T11681] CPU: 0 PID: 11681 Comm: syz.2.2032 Not tainted 6.6.102-syzkaller #0 [ 465.976385][T11681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 465.986646][T11681] Call Trace: [ 465.989955][T11681] [ 465.992924][T11681] dump_stack_lvl+0x16c/0x230 [ 465.997640][T11681] ? show_regs_print_info+0x20/0x20 [ 466.002902][T11681] ? load_image+0x3b0/0x3b0 [ 466.007448][T11681] ? __might_sleep+0xe0/0xe0 [ 466.012068][T11681] ? __lock_acquire+0x7c80/0x7c80 [ 466.017138][T11681] should_fail_ex+0x39d/0x4d0 [ 466.021856][T11681] should_failslab+0x9/0x20 [ 466.026478][T11681] slab_pre_alloc_hook+0x59/0x310 [ 466.031533][T11681] ? __kernfs_new_node+0x9d/0x7e0 [ 466.036604][T11681] ? rcu_is_watching+0x15/0xb0 [ 466.041437][T11681] kmem_cache_alloc+0x5a/0x2e0 [ 466.046230][T11681] ? __kernfs_new_node+0xd8/0x7e0 [ 466.051296][T11681] __kernfs_new_node+0xd8/0x7e0 [ 466.056293][T11681] ? verify_lock_unused+0x140/0x140 [ 466.061528][T11681] ? kernfs_new_node+0x260/0x260 [ 466.066568][T11681] ? make_kgid+0x1ae/0x640 [ 466.071039][T11681] ? from_kuid_munged+0x690/0x690 [ 466.076111][T11681] kernfs_new_node+0x14c/0x260 [ 466.081010][T11681] kernfs_create_dir_ns+0x44/0x120 [ 466.086163][T11681] sysfs_create_dir_ns+0x124/0x280 [ 466.091316][T11681] ? get_device_parent+0x20d/0x390 [ 466.096502][T11681] ? sysfs_warn_dup+0xa0/0xa0 [ 466.101224][T11681] ? do_raw_spin_unlock+0x121/0x230 [ 466.106464][T11681] kobject_add_internal+0x6b8/0xc70 [ 466.111731][T11681] kobject_add+0x156/0x220 [ 466.116209][T11681] ? kobject_init+0x1e0/0x1e0 [ 466.120941][T11681] ? get_device_parent+0x366/0x390 [ 466.126112][T11681] device_add+0x408/0xc20 [ 466.130497][T11681] ? device_initialize+0x24b/0x440 [ 466.135658][T11681] netdev_register_kobject+0x17a/0x310 [ 466.141159][T11681] register_netdevice+0x128f/0x1ae0 [ 466.146408][T11681] ? kvmalloc_node+0x70/0x180 [ 466.151121][T11681] ? netif_stacked_transfer_operstate+0x210/0x210 [ 466.157578][T11681] ? __asan_memset+0x22/0x40 [ 466.162203][T11681] ? alloc_netdev_mqs+0xbb7/0x1040 [ 466.167348][T11681] ? __asan_memcpy+0x40/0x70 [ 466.171970][T11681] ? alloc_netdev_mqs+0xca6/0x1040 [ 466.177112][T11681] ? ip6gre_tunnel_locate+0x264/0x5c0 [ 466.182541][T11681] ip6gre_tunnel_locate+0x305/0x5c0 [ 466.187791][T11681] ? ip6gre_tnl_change+0x920/0x920 [ 466.192946][T11681] ? __asan_memcpy+0x40/0x70 [ 466.197579][T11681] ? ip6gre_tunnel_siocdevprivate+0x4b1/0x6d0 [ 466.203688][T11681] ip6gre_tunnel_siocdevprivate+0x4de/0x6d0 [ 466.209627][T11681] ? ip6gre_tunnel_init+0x150/0x150 [ 466.214857][T11681] ? __mutex_trylock_common+0x153/0x250 [ 466.220464][T11681] ? full_name_hash+0x92/0xe0 [ 466.225362][T11681] dev_ifsioc+0xae6/0xe20 [ 466.229723][T11681] ? dev_ioctl+0x1170/0x1170 [ 466.234342][T11681] ? dev_load+0x21/0x1f0 [ 466.238612][T11681] ? dev_load+0x21/0x1f0 [ 466.242882][T11681] dev_ioctl+0x87a/0x1170 [ 466.247245][T11681] sock_ioctl+0x726/0x7a0 [ 466.251628][T11681] ? sock_poll+0x3d0/0x3d0 [ 466.256093][T11681] ? bpf_lsm_file_ioctl+0x9/0x10 [ 466.261056][T11681] ? security_file_ioctl+0x80/0xa0 [ 466.266202][T11681] ? sock_poll+0x3d0/0x3d0 [ 466.270657][T11681] __se_sys_ioctl+0xfd/0x170 [ 466.275282][T11681] do_syscall_64+0x55/0xb0 [ 466.279728][T11681] ? clear_bhb_loop+0x40/0x90 [ 466.284441][T11681] ? clear_bhb_loop+0x40/0x90 [ 466.289147][T11681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.295077][T11681] RIP: 0033:0x7f61dc58ebe9 [ 466.299528][T11681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.319189][T11681] RSP: 002b:00007f61dd343038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.327647][T11681] RAX: ffffffffffffffda RBX: 00007f61dc7b5fa0 RCX: 00007f61dc58ebe9 [ 466.335659][T11681] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 466.343661][T11681] RBP: 00007f61dd343090 R08: 0000000000000000 R09: 0000000000000000 [ 466.351660][T11681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 466.359656][T11681] R13: 00007f61dc7b6038 R14: 00007f61dc7b5fa0 R15: 00007fff99372958 [ 466.367683][T11681] [ 466.397859][T11681] kobject: kobject_add_internal failed for ip6gre2 (error: -12 parent: net) [ 466.931127][T11700] netlink: 'syz.3.2041': attribute type 29 has an invalid length. [ 466.980704][T11700] netlink: 'syz.3.2041': attribute type 29 has an invalid length. [ 467.011383][T11702] netlink: 'syz.3.2041': attribute type 29 has an invalid length. [ 467.202593][T11711] netlink: 'syz.0.2043': attribute type 10 has an invalid length. [ 467.228841][T11711] team0: Port device wlan1 added [ 467.822937][T11701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.538310][T11741] FAULT_INJECTION: forcing a failure. [ 468.538310][T11741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.562308][T11741] CPU: 1 PID: 11741 Comm: syz.0.2055 Not tainted 6.6.102-syzkaller #0 [ 468.570528][T11741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 468.580603][T11741] Call Trace: [ 468.583905][T11741] [ 468.586843][T11741] dump_stack_lvl+0x16c/0x230 [ 468.591539][T11741] ? show_regs_print_info+0x20/0x20 [ 468.596757][T11741] ? load_image+0x3b0/0x3b0 [ 468.601279][T11741] ? __lock_acquire+0x7c80/0x7c80 [ 468.606317][T11741] ? snprintf+0xdb/0x120 [ 468.610589][T11741] should_fail_ex+0x39d/0x4d0 [ 468.615285][T11741] _copy_to_user+0x2f/0xa0 [ 468.619715][T11741] simple_read_from_buffer+0xe7/0x150 [ 468.625110][T11741] proc_fail_nth_read+0x1e3/0x250 [ 468.630164][T11741] ? proc_fault_inject_write+0x340/0x340 [ 468.635846][T11741] ? fsnotify_perm+0x271/0x5e0 [ 468.640624][T11741] ? proc_fault_inject_write+0x340/0x340 [ 468.646275][T11741] vfs_read+0x27e/0x920 [ 468.650535][T11741] ? kernel_read+0x1e0/0x1e0 [ 468.655146][T11741] ? __fget_files+0x28/0x4d0 [ 468.659747][T11741] ? __fget_files+0x44a/0x4d0 [ 468.664445][T11741] ? __fdget_pos+0x2a3/0x330 [ 468.669057][T11741] ? ksys_read+0x75/0x250 [ 468.673449][T11741] ksys_read+0x147/0x250 [ 468.677884][T11741] ? vfs_write+0x940/0x940 [ 468.682317][T11741] ? lockdep_hardirqs_on+0x98/0x150 [ 468.687536][T11741] do_syscall_64+0x55/0xb0 [ 468.691960][T11741] ? clear_bhb_loop+0x40/0x90 [ 468.696649][T11741] ? clear_bhb_loop+0x40/0x90 [ 468.701331][T11741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.707258][T11741] RIP: 0033:0x7f5a24d8d5fc [ 468.711679][T11741] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 468.731297][T11741] RSP: 002b:00007f5a25b89030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.739727][T11741] RAX: ffffffffffffffda RBX: 00007f5a24fb5fa0 RCX: 00007f5a24d8d5fc [ 468.747710][T11741] RDX: 000000000000000f RSI: 00007f5a25b890a0 RDI: 0000000000000003 [ 468.755687][T11741] RBP: 00007f5a25b89090 R08: 0000000000000000 R09: 0000000000000000 [ 468.763755][T11741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.771732][T11741] R13: 00007f5a24fb6038 R14: 00007f5a24fb5fa0 R15: 00007ffd6156d8e8 [ 468.779726][T11741] [ 468.926965][T11749] netlink: 'syz.2.2056': attribute type 21 has an invalid length. [ 468.961183][T11749] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2056'. [ 469.573539][T11758] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2061'. [ 470.360635][T11770] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2065'. [ 470.940799][T11787] tun0: tun_chr_ioctl cmd 2147767520 [ 471.024649][T11798] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2070'. [ 471.076509][T11800] FAULT_INJECTION: forcing a failure. [ 471.076509][T11800] name failslab, interval 1, probability 0, space 0, times 0 [ 471.102281][T11800] CPU: 1 PID: 11800 Comm: syz.3.2073 Not tainted 6.6.102-syzkaller #0 [ 471.110530][T11800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 471.120804][T11800] Call Trace: [ 471.124120][T11800] [ 471.127089][T11800] dump_stack_lvl+0x16c/0x230 [ 471.131805][T11800] ? show_regs_print_info+0x20/0x20 [ 471.137032][T11800] ? load_image+0x3b0/0x3b0 [ 471.141575][T11800] ? __might_sleep+0xe0/0xe0 [ 471.146169][T11800] ? __lock_acquire+0x7c80/0x7c80 [ 471.151287][T11800] should_fail_ex+0x39d/0x4d0 [ 471.156002][T11800] should_failslab+0x9/0x20 [ 471.160529][T11800] slab_pre_alloc_hook+0x59/0x310 [ 471.165574][T11800] ? bpf_trace_run2+0x26f/0x3c0 [ 471.170549][T11800] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 471.176516][T11800] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 471.182254][T11800] __kmem_cache_alloc_node+0x53/0x260 [ 471.187692][T11800] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 471.193476][T11800] __kmalloc+0xa4/0x240 [ 471.197685][T11800] tomoyo_realpath_from_path+0xe3/0x5d0 [ 471.203299][T11800] tomoyo_path_number_perm+0x1ea/0x590 [ 471.208770][T11800] ? tomoyo_path_number_perm+0x1ba/0x590 [ 471.214607][T11800] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 471.220296][T11800] ? ksys_write+0x1c1/0x250 [ 471.224874][T11800] ? __fget_files+0x28/0x4d0 [ 471.229503][T11800] security_file_ioctl+0x70/0xa0 [ 471.234476][T11800] __se_sys_ioctl+0x48/0x170 [ 471.239111][T11800] do_syscall_64+0x55/0xb0 [ 471.243536][T11800] ? clear_bhb_loop+0x40/0x90 [ 471.248211][T11800] ? clear_bhb_loop+0x40/0x90 [ 471.252892][T11800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.258789][T11800] RIP: 0033:0x7fce9ab8ebe9 [ 471.263221][T11800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.282848][T11800] RSP: 002b:00007fce9b9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.291262][T11800] RAX: ffffffffffffffda RBX: 00007fce9adb5fa0 RCX: 00007fce9ab8ebe9 [ 471.299238][T11800] RDX: 0000000000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 471.307206][T11800] RBP: 00007fce9b9de090 R08: 0000000000000000 R09: 0000000000000000 [ 471.315206][T11800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.323194][T11800] R13: 00007fce9adb6038 R14: 00007fce9adb5fa0 R15: 00007ffc72984098 [ 471.331366][T11800] [ 471.344616][T11800] ERROR: Out of memory at tomoyo_realpath_from_path. [ 473.222803][T11852] netlink: 'syz.3.2089': attribute type 10 has an invalid length. [ 473.260083][T11852] batman_adv: batadv0: Adding interface: team0 [ 473.280935][T11852] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.308249][T11852] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 473.331309][T11857] netlink: 'syz.3.2089': attribute type 10 has an invalid length. [ 473.339962][T11857] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2089'. [ 473.349769][T11857] team0: entered promiscuous mode [ 473.355809][T11857] team_slave_0: entered promiscuous mode [ 473.363905][T11857] team_slave_1: entered promiscuous mode [ 473.371417][T11857] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 473.384116][T11857] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.391252][T11857] batman_adv: batadv0: Interface activated: team0 [ 473.401277][T11857] batman_adv: batadv0: Interface deactivated: team0 [ 473.415543][T11857] batman_adv: batadv0: Removing interface: team0 [ 473.437662][T11857] bridge0: port 3(team0) entered blocking state [ 473.458030][T11857] bridge0: port 3(team0) entered disabled state [ 473.473081][T11857] team0: entered allmulticast mode [ 473.485299][T11857] team_slave_0: entered allmulticast mode [ 473.494972][T11857] team_slave_1: entered allmulticast mode [ 473.500853][T11857] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 473.513499][T11857] bridge0: port 3(team0) entered blocking state [ 473.520696][T11857] bridge0: port 3(team0) entered forwarding state [ 473.985687][T11873] syzkaller0: entered promiscuous mode [ 473.991619][T11873] syzkaller0: entered allmulticast mode [ 474.857015][T11888] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2098'. [ 479.057756][T11896] netlink: 'syz.2.2100': attribute type 10 has an invalid length. [ 479.071061][T11896] bond0: (slave team0): Releasing backup interface [ 479.080734][T11899] netlink: 'syz.2.2100': attribute type 10 has an invalid length. [ 479.092174][T11899] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2100'. [ 479.101210][T11899] team0: entered promiscuous mode [ 479.107054][T11899] team_slave_0: entered promiscuous mode [ 479.113432][T11899] team_slave_1: entered promiscuous mode [ 479.121000][T11899] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.129133][T11899] bridge0: port 3(team0) entered blocking state [ 479.136102][T11899] bridge0: port 3(team0) entered disabled state [ 479.142904][T11899] team0: entered allmulticast mode [ 479.148066][T11899] team_slave_0: entered allmulticast mode [ 479.154791][T11899] team_slave_1: entered allmulticast mode [ 479.163506][T11899] bridge0: port 3(team0) entered blocking state [ 479.170081][T11899] bridge0: port 3(team0) entered forwarding state [ 479.392893][T11929] FAULT_INJECTION: forcing a failure. [ 479.392893][T11929] name failslab, interval 1, probability 0, space 0, times 0 [ 479.409307][T11931] FAULT_INJECTION: forcing a failure. [ 479.409307][T11931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.418013][T11929] CPU: 0 PID: 11929 Comm: syz.1.2109 Not tainted 6.6.102-syzkaller #0 [ 479.430734][T11929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 479.440848][T11929] Call Trace: [ 479.444168][T11929] [ 479.447128][T11929] dump_stack_lvl+0x16c/0x230 [ 479.451858][T11929] ? show_regs_print_info+0x20/0x20 [ 479.457103][T11929] ? load_image+0x3b0/0x3b0 [ 479.461676][T11929] ? __might_sleep+0xe0/0xe0 [ 479.466313][T11929] ? __lock_acquire+0x7c80/0x7c80 [ 479.471398][T11929] should_fail_ex+0x39d/0x4d0 [ 479.476124][T11929] should_failslab+0x9/0x20 [ 479.480768][T11929] slab_pre_alloc_hook+0x59/0x310 [ 479.485858][T11929] ? apparmor_sk_alloc_security+0x77/0x100 [ 479.491717][T11929] __kmem_cache_alloc_node+0x53/0x260 [ 479.497426][T11929] ? apparmor_sk_alloc_security+0x77/0x100 [ 479.503267][T11929] kmalloc_trace+0x2a/0xe0 [ 479.507729][T11929] apparmor_sk_alloc_security+0x77/0x100 [ 479.513396][T11929] security_sk_alloc+0x6e/0xa0 [ 479.518382][T11929] sk_prot_alloc+0x101/0x210 [ 479.522991][T11929] ? sk_alloc+0x24/0x360 [ 479.527259][T11929] sk_alloc+0x3a/0x360 [ 479.531349][T11929] ? bpf_ctx_init+0x163/0x1a0 [ 479.536062][T11929] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 479.541835][T11929] bpf_prog_test_run_skb+0x39a/0x11c0 [ 479.547259][T11929] ? __fget_files+0x28/0x4d0 [ 479.551902][T11929] ? cpu_online+0x60/0x60 [ 479.556278][T11929] bpf_prog_test_run+0x321/0x390 [ 479.561442][T11929] __sys_bpf+0x440/0x800 [ 479.565736][T11929] ? bpf_link_show_fdinfo+0x350/0x350 [ 479.571172][T11929] ? lock_chain_count+0x20/0x20 [ 479.576067][T11929] __x64_sys_bpf+0x7c/0x90 [ 479.580539][T11929] do_syscall_64+0x55/0xb0 [ 479.585007][T11929] ? clear_bhb_loop+0x40/0x90 [ 479.589737][T11929] ? clear_bhb_loop+0x40/0x90 [ 479.594456][T11929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.600400][T11929] RIP: 0033:0x7f245198ebe9 [ 479.604848][T11929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.624484][T11929] RSP: 002b:00007f2452772038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 479.633704][T11929] RAX: ffffffffffffffda RBX: 00007f2451bb5fa0 RCX: 00007f245198ebe9 [ 479.641697][T11929] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 479.649684][T11929] RBP: 00007f2452772090 R08: 0000000000000000 R09: 0000000000000000 [ 479.657672][T11929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.665695][T11929] R13: 00007f2451bb6038 R14: 00007f2451bb5fa0 R15: 00007ffdb7038018 [ 479.673907][T11929] [ 479.677266][T11931] CPU: 1 PID: 11931 Comm: syz.3.2110 Not tainted 6.6.102-syzkaller #0 [ 479.685572][T11931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 479.695710][T11931] Call Trace: [ 479.699008][T11931] [ 479.701959][T11931] dump_stack_lvl+0x16c/0x230 [ 479.706691][T11931] ? show_regs_print_info+0x20/0x20 [ 479.711942][T11931] ? load_image+0x3b0/0x3b0 [ 479.716511][T11931] ? __might_fault+0xaa/0x120 [ 479.721219][T11931] ? __lock_acquire+0x7c80/0x7c80 [ 479.726464][T11931] should_fail_ex+0x39d/0x4d0 [ 479.731179][T11931] _copy_from_iter+0x1d3/0x1290 [ 479.736060][T11931] ? __virt_addr_valid+0x18c/0x540 [ 479.741284][T11931] ? __lock_acquire+0x7c80/0x7c80 [ 479.746340][T11931] ? copyout_mc+0x70/0x70 [ 479.750706][T11931] ? __virt_addr_valid+0x18c/0x540 [ 479.755838][T11931] ? __virt_addr_valid+0x18c/0x540 [ 479.761053][T11931] ? __virt_addr_valid+0x469/0x540 [ 479.766187][T11931] ? __check_object_size+0x506/0xa30 [ 479.771507][T11931] rawv6_send_hdrinc+0x79e/0x16a0 [ 479.776751][T11931] ? txopt_get+0x3e0/0x3e0 [ 479.781183][T11931] ? txopt_get+0x336/0x3e0 [ 479.785619][T11931] ? fl6_sock_lookup+0xd0/0xd0 [ 479.790415][T11931] rawv6_sendmsg+0x12ca/0x17f0 [ 479.795215][T11931] ? __might_sleep+0xe0/0xe0 [ 479.799830][T11931] ? compat_rawv6_ioctl+0x70/0x70 [ 479.804898][T11931] ? aa_sk_perm+0x7fc/0x930 [ 479.809437][T11931] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 479.815903][T11931] ? inet_send_prepare+0x260/0x260 [ 479.821034][T11931] ? inet_sendmsg+0x7c/0x2f0 [ 479.825638][T11931] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 479.830942][T11931] ? security_socket_sendmsg+0x80/0xa0 [ 479.836421][T11931] ? inet_send_prepare+0x260/0x260 [ 479.841547][T11931] ____sys_sendmsg+0x5bf/0x950 [ 479.846350][T11931] ? __asan_memset+0x22/0x40 [ 479.851052][T11931] ? __sys_sendmsg_sock+0x30/0x30 [ 479.856095][T11931] ? __import_iovec+0x5f2/0x860 [ 479.860985][T11931] ? import_iovec+0x73/0xa0 [ 479.865528][T11931] ___sys_sendmsg+0x220/0x290 [ 479.870291][T11931] ? __sys_sendmsg+0x270/0x270 [ 479.875330][T11931] ? __lock_acquire+0x7c80/0x7c80 [ 479.880447][T11931] __se_sys_sendmsg+0x1a5/0x270 [ 479.885323][T11931] ? perf_trace_preemptirq_template+0x281/0x340 [ 479.891590][T11931] ? __x64_sys_sendmsg+0x80/0x80 [ 479.896668][T11931] ? lockdep_hardirqs_on+0x98/0x150 [ 479.901900][T11931] do_syscall_64+0x55/0xb0 [ 479.906337][T11931] ? clear_bhb_loop+0x40/0x90 [ 479.911026][T11931] ? clear_bhb_loop+0x40/0x90 [ 479.915725][T11931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.921656][T11931] RIP: 0033:0x7fce9ab8ebe9 [ 479.926116][T11931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.945750][T11931] RSP: 002b:00007fce9b9de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.954807][T11931] RAX: ffffffffffffffda RBX: 00007fce9adb5fa0 RCX: 00007fce9ab8ebe9 [ 479.962800][T11931] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 479.970790][T11931] RBP: 00007fce9b9de090 R08: 0000000000000000 R09: 0000000000000000 [ 479.978777][T11931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.986781][T11931] R13: 00007fce9adb6038 R14: 00007fce9adb5fa0 R15: 00007ffc72984098 [ 479.994798][T11931] [ 480.286614][T11965] syzkaller0: left promiscuous mode [ 480.293749][T11965] syzkaller0: left allmulticast mode [ 480.507754][T11976] netlink: 'syz.1.2119': attribute type 10 has an invalid length. [ 480.520311][T11976] team0: left allmulticast mode [ 480.530446][T11976] C: left allmulticast mode [ 480.538711][T11976] team_slave_1: left allmulticast mode [ 480.545193][T11976] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 480.571782][T11976] netlink: 'syz.1.2119': attribute type 10 has an invalid length. [ 480.592182][T11976] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2119'. [ 480.601318][T11976] team0: entered promiscuous mode [ 480.623687][T11976] C: entered promiscuous mode [ 480.629629][T11980] netlink: 'syz.3.2121': attribute type 3 has an invalid length. [ 480.643067][T11976] team_slave_1: entered promiscuous mode [ 480.658101][T11980] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2121'. [ 480.659527][T11976] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 480.680850][T11976] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.717332][T11976] batman_adv: batadv0: Interface activated: team0 [ 480.727552][T11976] batman_adv: batadv0: Interface deactivated: team0 [ 480.803766][T11976] batman_adv: batadv0: Removing interface: team0 [ 480.812179][T11976] bridge0: port 3(team0) entered blocking state [ 480.820847][T11976] bridge0: port 3(team0) entered disabled state [ 480.832306][T11976] team0: entered allmulticast mode [ 480.837681][T11976] C: entered allmulticast mode [ 480.847948][T11976] team_slave_1: entered allmulticast mode [ 480.858088][T11976] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 480.874014][T11976] bridge0: port 3(team0) entered blocking state [ 480.880545][T11976] bridge0: port 3(team0) entered forwarding state [ 481.381789][T11991] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2124'. [ 481.412338][T11991] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2124'. [ 481.448110][T11992] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2124'. [ 482.323913][T12024] netlink: 'syz.2.2136': attribute type 21 has an invalid length. [ 482.342578][T12024] netlink: 'syz.2.2136': attribute type 1 has an invalid length. [ 482.489975][T12032] FAULT_INJECTION: forcing a failure. [ 482.489975][T12032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.556425][T12032] CPU: 1 PID: 12032 Comm: syz.0.2139 Not tainted 6.6.102-syzkaller #0 [ 482.564666][T12032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 482.574758][T12032] Call Trace: [ 482.578068][T12032] [ 482.581032][T12032] dump_stack_lvl+0x16c/0x230 [ 482.585772][T12032] ? show_regs_print_info+0x20/0x20 [ 482.591030][T12032] ? load_image+0x3b0/0x3b0 [ 482.595600][T12032] ? __lock_acquire+0x7c80/0x7c80 [ 482.600666][T12032] ? snprintf+0xdb/0x120 [ 482.604951][T12032] should_fail_ex+0x39d/0x4d0 [ 482.609676][T12032] _copy_to_user+0x2f/0xa0 [ 482.614140][T12032] simple_read_from_buffer+0xe7/0x150 [ 482.619575][T12032] proc_fail_nth_read+0x1e3/0x250 [ 482.624642][T12032] ? proc_fault_inject_write+0x340/0x340 [ 482.630299][T12032] ? fsnotify_perm+0x271/0x5e0 [ 482.635189][T12032] ? proc_fault_inject_write+0x340/0x340 [ 482.640839][T12032] vfs_read+0x27e/0x920 [ 482.645015][T12032] ? kernel_read+0x1e0/0x1e0 [ 482.649623][T12032] ? __fget_files+0x28/0x4d0 [ 482.654230][T12032] ? __fget_files+0x44a/0x4d0 [ 482.658926][T12032] ? __fdget_pos+0x2a3/0x330 [ 482.663528][T12032] ? ksys_read+0x75/0x250 [ 482.667883][T12032] ksys_read+0x147/0x250 [ 482.672146][T12032] ? vfs_write+0x940/0x940 [ 482.676760][T12032] ? lockdep_hardirqs_on+0x98/0x150 [ 482.681995][T12032] do_syscall_64+0x55/0xb0 [ 482.686423][T12032] ? clear_bhb_loop+0x40/0x90 [ 482.691105][T12032] ? clear_bhb_loop+0x40/0x90 [ 482.695814][T12032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.701723][T12032] RIP: 0033:0x7f5a24d8d5fc [ 482.706146][T12032] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 482.725769][T12032] RSP: 002b:00007f5a25b89030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 482.734199][T12032] RAX: ffffffffffffffda RBX: 00007f5a24fb5fa0 RCX: 00007f5a24d8d5fc [ 482.742179][T12032] RDX: 000000000000000f RSI: 00007f5a25b890a0 RDI: 0000000000000004 [ 482.750248][T12032] RBP: 00007f5a25b89090 R08: 0000000000000000 R09: 0000000000000000 [ 482.758229][T12032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.766210][T12032] R13: 00007f5a24fb6038 R14: 00007f5a24fb5fa0 R15: 00007ffd6156d8e8 [ 482.774206][T12032] [ 484.975127][T12041] netlink: 'syz.1.2143': attribute type 25 has an invalid length. [ 484.983318][T12041] netlink: 'syz.1.2143': attribute type 1 has an invalid length. [ 484.991142][T12041] bridge0: port 1(bridge_slave_0) entered learning state [ 485.150271][T12059] FAULT_INJECTION: forcing a failure. [ 485.150271][T12059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.183772][T12059] CPU: 1 PID: 12059 Comm: syz.3.2148 Not tainted 6.6.102-syzkaller #0 [ 485.192016][T12059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 485.202108][T12059] Call Trace: [ 485.205418][T12059] [ 485.208367][T12059] dump_stack_lvl+0x16c/0x230 [ 485.213087][T12059] ? show_regs_print_info+0x20/0x20 [ 485.218349][T12059] ? load_image+0x3b0/0x3b0 [ 485.223040][T12059] ? __might_fault+0xaa/0x120 [ 485.227742][T12059] ? __lock_acquire+0x7c80/0x7c80 [ 485.232878][T12059] ? perf_trace_lock_acquire+0x32a/0x3e0 [ 485.238542][T12059] should_fail_ex+0x39d/0x4d0 [ 485.243344][T12059] _copy_from_user+0x2f/0xe0 [ 485.247964][T12059] ___sys_sendmsg+0x159/0x290 [ 485.252678][T12059] ? __sys_sendmsg+0x270/0x270 [ 485.257588][T12059] ? __lock_acquire+0x7c80/0x7c80 [ 485.262680][T12059] __se_sys_sendmsg+0x1a5/0x270 [ 485.267561][T12059] ? __x64_sys_sendmsg+0x80/0x80 [ 485.272645][T12059] ? lockdep_hardirqs_on+0x98/0x150 [ 485.277874][T12059] do_syscall_64+0x55/0xb0 [ 485.282309][T12059] ? clear_bhb_loop+0x40/0x90 [ 485.287004][T12059] ? clear_bhb_loop+0x40/0x90 [ 485.291706][T12059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.298518][T12059] RIP: 0033:0x7fce9ab8ebe9 [ 485.302967][T12059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.322615][T12059] RSP: 002b:00007fce9b9de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.331065][T12059] RAX: ffffffffffffffda RBX: 00007fce9adb5fa0 RCX: 00007fce9ab8ebe9 [ 485.339057][T12059] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000004 [ 485.347151][T12059] RBP: 00007fce9b9de090 R08: 0000000000000000 R09: 0000000000000000 [ 485.355143][T12059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.363142][T12059] R13: 00007fce9adb6038 R14: 00007fce9adb5fa0 R15: 00007ffc72984098 [ 485.371165][T12059] [ 485.545495][T12061] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2149'. [ 485.880515][T12077] netlink: 'syz.2.2153': attribute type 29 has an invalid length. [ 485.900725][T12077] netlink: 'syz.2.2153': attribute type 29 has an invalid length. [ 486.293814][T12098] FAULT_INJECTION: forcing a failure. [ 486.293814][T12098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.307104][T12098] CPU: 1 PID: 12098 Comm: syz.2.2160 Not tainted 6.6.102-syzkaller #0 [ 486.315333][T12098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 486.325430][T12098] Call Trace: [ 486.328744][T12098] [ 486.331696][T12098] dump_stack_lvl+0x16c/0x230 [ 486.336420][T12098] ? show_regs_print_info+0x20/0x20 [ 486.341917][T12098] ? load_image+0x3b0/0x3b0 [ 486.346459][T12098] ? __lock_acquire+0x7c80/0x7c80 [ 486.351510][T12098] ? snprintf+0xdb/0x120 [ 486.355780][T12098] should_fail_ex+0x39d/0x4d0 [ 486.360611][T12098] _copy_to_user+0x2f/0xa0 [ 486.365050][T12098] simple_read_from_buffer+0xe7/0x150 [ 486.370471][T12098] proc_fail_nth_read+0x1e3/0x250 [ 486.375515][T12098] ? proc_fault_inject_write+0x340/0x340 [ 486.381258][T12098] ? fsnotify_perm+0x271/0x5e0 [ 486.386038][T12098] ? proc_fault_inject_write+0x340/0x340 [ 486.391683][T12098] vfs_read+0x27e/0x920 [ 486.395855][T12098] ? kernel_read+0x1e0/0x1e0 [ 486.400462][T12098] ? __fget_files+0x28/0x4d0 [ 486.405065][T12098] ? __fget_files+0x44a/0x4d0 [ 486.409762][T12098] ? __fdget_pos+0x2a3/0x330 [ 486.414388][T12098] ? ksys_read+0x75/0x250 [ 486.418733][T12098] ksys_read+0x147/0x250 [ 486.423009][T12098] ? vfs_write+0x940/0x940 [ 486.427442][T12098] ? lockdep_hardirqs_on+0x98/0x150 [ 486.432748][T12098] do_syscall_64+0x55/0xb0 [ 486.437183][T12098] ? clear_bhb_loop+0x40/0x90 [ 486.441868][T12098] ? clear_bhb_loop+0x40/0x90 [ 486.446555][T12098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.452466][T12098] RIP: 0033:0x7f61dc58d5fc [ 486.456910][T12098] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 486.476530][T12098] RSP: 002b:00007f61dd343030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 486.484958][T12098] RAX: ffffffffffffffda RBX: 00007f61dc7b5fa0 RCX: 00007f61dc58d5fc [ 486.492956][T12098] RDX: 000000000000000f RSI: 00007f61dd3430a0 RDI: 0000000000000005 [ 486.500951][T12098] RBP: 00007f61dd343090 R08: 0000000000000000 R09: 0000000000000000 [ 486.508979][T12098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.516971][T12098] R13: 00007f61dc7b6038 R14: 00007f61dc7b5fa0 R15: 00007fff99372958 [ 486.524972][T12098] [ 487.759406][T12128] FAULT_INJECTION: forcing a failure. [ 487.759406][T12128] name failslab, interval 1, probability 0, space 0, times 0 [ 487.772794][T12128] CPU: 1 PID: 12128 Comm: syz.1.2170 Not tainted 6.6.102-syzkaller #0 [ 487.781002][T12128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 487.791084][T12128] Call Trace: [ 487.794369][T12128] [ 487.797540][T12128] dump_stack_lvl+0x16c/0x230 [ 487.802254][T12128] ? show_regs_print_info+0x20/0x20 [ 487.807462][T12128] ? load_image+0x3b0/0x3b0 [ 487.812000][T12128] ? __might_sleep+0xe0/0xe0 [ 487.816643][T12128] ? __lock_acquire+0x7c80/0x7c80 [ 487.821688][T12128] should_fail_ex+0x39d/0x4d0 [ 487.826479][T12128] should_failslab+0x9/0x20 [ 487.830998][T12128] slab_pre_alloc_hook+0x59/0x310 [ 487.836041][T12128] kmem_cache_alloc_lru+0x4d/0x2e0 [ 487.841154][T12128] ? __d_alloc+0x31/0x730 [ 487.845488][T12128] __d_alloc+0x31/0x730 [ 487.849663][T12128] d_alloc_pseudo+0x1d/0x70 [ 487.854169][T12128] alloc_file_pseudo+0xcc/0x200 [ 487.859056][T12128] ? alloc_empty_backing_file+0xe0/0xe0 [ 487.864622][T12128] ? __lock_acquire+0x7c80/0x7c80 [ 487.869861][T12128] ? __local_bh_enable_ip+0x12e/0x1c0 [ 487.875344][T12128] ? _local_bh_enable+0xa0/0xa0 [ 487.880203][T12128] anon_inode_getfile+0xc5/0x1a0 [ 487.885163][T12128] bpf_link_prime+0xa6/0x1d0 [ 487.889794][T12128] bpf_raw_tp_link_attach+0x33c/0x560 [ 487.895186][T12128] ? bpf_insn_prepare_dump+0x840/0x840 [ 487.900679][T12128] bpf_raw_tracepoint_open+0x197/0x210 [ 487.906148][T12128] __sys_bpf+0x364/0x800 [ 487.910405][T12128] ? bpf_link_show_fdinfo+0x350/0x350 [ 487.915885][T12128] ? lock_chain_count+0x20/0x20 [ 487.920757][T12128] __x64_sys_bpf+0x7c/0x90 [ 487.925187][T12128] do_syscall_64+0x55/0xb0 [ 487.929718][T12128] ? clear_bhb_loop+0x40/0x90 [ 487.934404][T12128] ? clear_bhb_loop+0x40/0x90 [ 487.939182][T12128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.945183][T12128] RIP: 0033:0x7f245198ebe9 [ 487.949694][T12128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.969310][T12128] RSP: 002b:00007f2452772038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.978198][T12128] RAX: ffffffffffffffda RBX: 00007f2451bb5fa0 RCX: 00007f245198ebe9 [ 487.986231][T12128] RDX: 0000000000000010 RSI: 00002000000004c0 RDI: 0000000000000011 [ 487.994237][T12128] RBP: 00007f2452772090 R08: 0000000000000000 R09: 0000000000000000 [ 488.002217][T12128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.010204][T12128] R13: 00007f2451bb6038 R14: 00007f2451bb5fa0 R15: 00007ffdb7038018 [ 488.018212][T12128] [ 490.299356][T12145] FAULT_INJECTION: forcing a failure. [ 490.299356][T12145] name failslab, interval 1, probability 0, space 0, times 0 [ 490.343558][T12145] CPU: 0 PID: 12145 Comm: syz.2.2178 Not tainted 6.6.102-syzkaller #0 [ 490.351777][T12145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 490.361861][T12145] Call Trace: [ 490.365167][T12145] [ 490.368228][T12145] dump_stack_lvl+0x16c/0x230 [ 490.372959][T12145] ? show_regs_print_info+0x20/0x20 [ 490.378279][T12145] ? load_image+0x3b0/0x3b0 [ 490.382911][T12145] ? verify_lock_unused+0x140/0x140 [ 490.388133][T12145] should_fail_ex+0x39d/0x4d0 [ 490.392838][T12145] should_failslab+0x9/0x20 [ 490.397360][T12145] slab_pre_alloc_hook+0x59/0x310 [ 490.402407][T12145] kmem_cache_alloc+0x5a/0x2e0 [ 490.407182][T12145] ? skb_clone+0x1eb/0x370 [ 490.411705][T12145] skb_clone+0x1eb/0x370 [ 490.415968][T12145] __netlink_deliver_tap+0x41c/0x830 [ 490.421369][T12145] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.426587][T12145] netlink_deliver_tap+0x19c/0x1b0 [ 490.431706][T12145] netlink_unicast+0x72c/0x8d0 [ 490.436491][T12145] netlink_sendmsg+0x8c1/0xbe0 [ 490.441273][T12145] ? netlink_getsockopt+0x580/0x580 [ 490.446494][T12145] ? aa_sock_msg_perm+0x94/0x150 [ 490.451532][T12145] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 490.456838][T12145] ? security_socket_sendmsg+0x80/0xa0 [ 490.462315][T12145] ? netlink_getsockopt+0x580/0x580 [ 490.467529][T12145] ____sys_sendmsg+0x5bf/0x950 [ 490.472311][T12145] ? __asan_memset+0x22/0x40 [ 490.477002][T12145] ? __sys_sendmsg_sock+0x30/0x30 [ 490.482042][T12145] ? __import_iovec+0x5f2/0x860 [ 490.486913][T12145] ? import_iovec+0x73/0xa0 [ 490.491434][T12145] ___sys_sendmsg+0x220/0x290 [ 490.496132][T12145] ? __sys_sendmsg+0x270/0x270 [ 490.500923][T12145] ? __lock_acquire+0x7c80/0x7c80 [ 490.505975][T12145] __se_sys_sendmsg+0x1a5/0x270 [ 490.510841][T12145] ? perf_trace_preemptirq_template+0x281/0x340 [ 490.517272][T12145] ? __x64_sys_sendmsg+0x80/0x80 [ 490.522239][T12145] ? lockdep_hardirqs_on+0x98/0x150 [ 490.527473][T12145] do_syscall_64+0x55/0xb0 [ 490.531902][T12145] ? clear_bhb_loop+0x40/0x90 [ 490.536585][T12145] ? clear_bhb_loop+0x40/0x90 [ 490.541269][T12145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.547186][T12145] RIP: 0033:0x7f61dc58ebe9 [ 490.551610][T12145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.571417][T12145] RSP: 002b:00007f61dd343038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.579845][T12145] RAX: ffffffffffffffda RBX: 00007f61dc7b5fa0 RCX: 00007f61dc58ebe9 [ 490.587824][T12145] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 490.595803][T12145] RBP: 00007f61dd343090 R08: 0000000000000000 R09: 0000000000000000 [ 490.603954][T12145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.611930][T12145] R13: 00007f61dc7b6038 R14: 00007f61dc7b5fa0 R15: 00007fff99372958 [ 490.619926][T12145] [ 490.654383][T12145] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2178'. [ 491.274999][T12158] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2182'. [ 495.507794][T12191] netlink: 'syz.2.2193': attribute type 6 has an invalid length. [ 495.524759][T12191] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2193'. [ 497.202171][T12237] FAULT_INJECTION: forcing a failure. [ 497.202171][T12237] name failslab, interval 1, probability 0, space 0, times 0 [ 497.219117][T12237] CPU: 1 PID: 12237 Comm: syz.1.2209 Not tainted 6.6.102-syzkaller #0 [ 497.227326][T12237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 497.237668][T12237] Call Trace: [ 497.241161][T12237] [ 497.244130][T12237] dump_stack_lvl+0x16c/0x230 [ 497.248866][T12237] ? show_regs_print_info+0x20/0x20 [ 497.254172][T12237] ? load_image+0x3b0/0x3b0 [ 497.258724][T12237] ? __might_sleep+0xe0/0xe0 [ 497.263351][T12237] ? __lock_acquire+0x7c80/0x7c80 [ 497.268419][T12237] should_fail_ex+0x39d/0x4d0 [ 497.273137][T12237] should_failslab+0x9/0x20 [ 497.277681][T12237] slab_pre_alloc_hook+0x59/0x310 [ 497.282936][T12237] ? apparmor_sk_alloc_security+0x77/0x100 [ 497.288804][T12237] __kmem_cache_alloc_node+0x53/0x260 [ 497.294228][T12237] ? apparmor_sk_alloc_security+0x77/0x100 [ 497.300074][T12237] kmalloc_trace+0x2a/0xe0 [ 497.304704][T12237] apparmor_sk_alloc_security+0x77/0x100 [ 497.310382][T12237] security_sk_alloc+0x6e/0xa0 [ 497.315187][T12237] sk_prot_alloc+0x101/0x210 [ 497.319823][T12237] ? sk_alloc+0x24/0x360 [ 497.324126][T12237] sk_alloc+0x3a/0x360 [ 497.328245][T12237] ? bpf_ctx_init+0x163/0x1a0 [ 497.332967][T12237] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 497.338638][T12237] bpf_prog_test_run_skb+0x39a/0x11c0 [ 497.344043][T12237] ? __fget_files+0x28/0x4d0 [ 497.348709][T12237] ? cpu_online+0x60/0x60 [ 497.353072][T12237] bpf_prog_test_run+0x321/0x390 [ 497.358048][T12237] __sys_bpf+0x440/0x800 [ 497.362321][T12237] ? bpf_link_show_fdinfo+0x350/0x350 [ 497.367913][T12237] ? lock_chain_count+0x20/0x20 [ 497.372889][T12237] __x64_sys_bpf+0x7c/0x90 [ 497.377337][T12237] do_syscall_64+0x55/0xb0 [ 497.381784][T12237] ? clear_bhb_loop+0x40/0x90 [ 497.386487][T12237] ? clear_bhb_loop+0x40/0x90 [ 497.391199][T12237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.397127][T12237] RIP: 0033:0x7f245198ebe9 [ 497.401709][T12237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.421611][T12237] RSP: 002b:00007f2452772038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 497.430155][T12237] RAX: ffffffffffffffda RBX: 00007f2451bb5fa0 RCX: 00007f245198ebe9 [ 497.438310][T12237] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 497.446308][T12237] RBP: 00007f2452772090 R08: 0000000000000000 R09: 0000000000000000 [ 497.454306][T12237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.462302][T12237] R13: 00007f2451bb6038 R14: 00007f2451bb5fa0 R15: 00007ffdb7038018 [ 497.470403][T12237] [ 497.853561][T12247] netlink: 'syz.0.2213': attribute type 10 has an invalid length. [ 497.882931][T12247] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2213'. [ 497.910992][T12247] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 497.929437][T12247] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.960786][T12247] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 499.797961][T12279] netlink: 'syz.2.2225': attribute type 4 has an invalid length. [ 501.308813][T12294] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 501.320270][T12294] syzkaller0: entered promiscuous mode [ 501.326214][T12294] syzkaller0: entered allmulticast mode [ 501.658489][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.664927][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.759174][T12310] FAULT_INJECTION: forcing a failure. [ 501.759174][T12310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.786967][T12310] CPU: 1 PID: 12310 Comm: syz.0.2234 Not tainted 6.6.102-syzkaller #0 [ 501.795382][T12310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 501.805472][T12310] Call Trace: [ 501.808787][T12310] [ 501.811753][T12310] dump_stack_lvl+0x16c/0x230 [ 501.816476][T12310] ? show_regs_print_info+0x20/0x20 [ 501.821709][T12310] ? load_image+0x3b0/0x3b0 [ 501.826355][T12310] ? __might_fault+0xaa/0x120 [ 501.831173][T12310] ? __lock_acquire+0x7c80/0x7c80 [ 501.836242][T12310] should_fail_ex+0x39d/0x4d0 [ 501.840994][T12310] _copy_from_user+0x2f/0xe0 [ 501.845710][T12310] __sys_bpf+0x1e9/0x800 [ 501.849994][T12310] ? bpf_link_show_fdinfo+0x350/0x350 [ 501.855427][T12310] ? lock_chain_count+0x20/0x20 [ 501.860332][T12310] __x64_sys_bpf+0x7c/0x90 [ 501.864786][T12310] do_syscall_64+0x55/0xb0 [ 501.869238][T12310] ? clear_bhb_loop+0x40/0x90 [ 501.873949][T12310] ? clear_bhb_loop+0x40/0x90 [ 501.878656][T12310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 501.884584][T12310] RIP: 0033:0x7f5a24d8ebe9 [ 501.889065][T12310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.908704][T12310] RSP: 002b:00007f5a25b89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 501.917128][T12310] RAX: ffffffffffffffda RBX: 00007f5a24fb5fa0 RCX: 00007f5a24d8ebe9 [ 501.925106][T12310] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 501.933086][T12310] RBP: 00007f5a25b89090 R08: 0000000000000000 R09: 0000000000000000 [ 501.941063][T12310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.949100][T12310] R13: 00007f5a24fb6038 R14: 00007f5a24fb5fa0 R15: 00007ffd6156d8e8 [ 501.957110][T12310] [ 502.127653][T12318] netlink: 'syz.1.2236': attribute type 10 has an invalid length. [ 502.186358][T12318] geneve1: entered promiscuous mode [ 502.200932][T12318] geneve1: entered allmulticast mode [ 502.211030][T12318] team0: Port device geneve1 added [ 503.118934][T12334] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.341080][T12334] bridge_slave_0 (unregistering): left allmulticast mode [ 503.368326][T12334] bridge_slave_0 (unregistering): left promiscuous mode [ 503.386328][T12334] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.523009][T12344] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2246'. [ 503.543959][T12344] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 503.570140][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.681878][T12344] bridge_slave_0 (unregistering): left allmulticast mode [ 503.692711][T12344] bridge_slave_0 (unregistering): left promiscuous mode [ 503.699869][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.734358][T12308] Bluetooth: hci3: command 0x0406 tx timeout [ 503.889054][T12355] netlink: 'syz.0.2251': attribute type 29 has an invalid length. [ 503.906362][T12355] netlink: 'syz.0.2251': attribute type 29 has an invalid length. [ 503.916628][T12355] netlink: 'syz.0.2251': attribute type 29 has an invalid length. [ 503.942777][T12355] netlink: 'syz.0.2251': attribute type 29 has an invalid length. [ 504.037412][T12361] netlink: 'syz.2.2252': attribute type 27 has an invalid length. [ 504.060062][T12361] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2252'. [ 504.070525][T12361] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 504.103297][T12362] netlink: 'syz.0.2251': attribute type 29 has an invalid length. [ 504.116523][T12360] tun0: tun_chr_ioctl cmd 2147767511 [ 504.721722][T12368] syz.1.2262[12368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 504.722086][T12368] syz.1.2262[12368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 505.070626][T12374] netlink: 'syz.2.2255': attribute type 27 has an invalid length. [ 505.102235][T12374] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2255'. [ 505.111526][T12374] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 505.133763][T12376] FAULT_INJECTION: forcing a failure. [ 505.133763][T12376] name failslab, interval 1, probability 0, space 0, times 0 [ 505.162560][T12376] CPU: 0 PID: 12376 Comm: syz.1.2257 Not tainted 6.6.102-syzkaller #0 [ 505.170810][T12376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 505.181089][T12376] Call Trace: [ 505.184405][T12376] [ 505.187365][T12376] dump_stack_lvl+0x16c/0x230 [ 505.192096][T12376] ? show_regs_print_info+0x20/0x20 [ 505.197343][T12376] ? load_image+0x3b0/0x3b0 [ 505.201887][T12376] ? __might_sleep+0xe0/0xe0 [ 505.206514][T12376] ? __lock_acquire+0x7c80/0x7c80 [ 505.211586][T12376] should_fail_ex+0x39d/0x4d0 [ 505.216304][T12376] should_failslab+0x9/0x20 [ 505.220812][T12376] slab_pre_alloc_hook+0x59/0x310 [ 505.225854][T12376] ? __lock_acquire+0x7c80/0x7c80 [ 505.230898][T12376] kmem_cache_alloc_node+0x60/0x330 [ 505.236114][T12376] ? __alloc_skb+0x108/0x2c0 [ 505.240721][T12376] __alloc_skb+0x108/0x2c0 [ 505.245150][T12376] netlink_sendmsg+0x65b/0xbe0 [ 505.249930][T12376] ? netlink_getsockopt+0x580/0x580 [ 505.255164][T12376] ? aa_sock_msg_perm+0x94/0x150 [ 505.260151][T12376] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 505.265445][T12376] ? security_socket_sendmsg+0x80/0xa0 [ 505.270915][T12376] ? netlink_getsockopt+0x580/0x580 [ 505.276143][T12376] ____sys_sendmsg+0x5bf/0x950 [ 505.280950][T12376] ? __asan_memset+0x22/0x40 [ 505.285578][T12376] ? __sys_sendmsg_sock+0x30/0x30 [ 505.290620][T12376] ? __import_iovec+0x5f2/0x860 [ 505.295581][T12376] ? import_iovec+0x73/0xa0 [ 505.300102][T12376] ___sys_sendmsg+0x220/0x290 [ 505.304805][T12376] ? __sys_sendmsg+0x270/0x270 [ 505.309605][T12376] ? __lock_acquire+0x7c80/0x7c80 [ 505.314659][T12376] __se_sys_sendmsg+0x1a5/0x270 [ 505.319533][T12376] ? __x64_sys_sendmsg+0x80/0x80 [ 505.324496][T12376] ? lockdep_hardirqs_on+0x98/0x150 [ 505.329711][T12376] do_syscall_64+0x55/0xb0 [ 505.334143][T12376] ? clear_bhb_loop+0x40/0x90 [ 505.338828][T12376] ? clear_bhb_loop+0x40/0x90 [ 505.344141][T12376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.350083][T12376] RIP: 0033:0x7f245198ebe9 [ 505.354537][T12376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.374195][T12376] RSP: 002b:00007f2452772038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.382630][T12376] RAX: ffffffffffffffda RBX: 00007f2451bb5fa0 RCX: 00007f245198ebe9 [ 505.390611][T12376] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 505.398590][T12376] RBP: 00007f2452772090 R08: 0000000000000000 R09: 0000000000000000 [ 505.406579][T12376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.414558][T12376] R13: 00007f2451bb6038 R14: 00007f2451bb5fa0 R15: 00007ffdb7038018 [ 505.422659][T12376] [ 505.609819][T12379] netlink: 'syz.0.2267': attribute type 10 has an invalid length. [ 505.622525][T12379] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2267'. [ 505.682732][T12379] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 505.981231][T12395] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2264'. [ 506.132986][T12395] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2264'. [ 506.223922][T12395] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.486650][T12395] bridge_slave_0 (unregistering): left allmulticast mode [ 506.497414][T12395] bridge_slave_0 (unregistering): left promiscuous mode [ 506.510964][T12395] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.790702][T12308] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 506.799966][T12308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 506.826439][T12308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 506.840144][T12308] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 506.852257][T12308] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 506.860046][T12308] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 507.034903][T11948] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.117079][T12412] netlink: 'syz.0.2269': attribute type 10 has an invalid length. [ 507.186830][T12412] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2269'. [ 507.351920][T12412] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 507.672571][T11948] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.734181][T12425] FAULT_INJECTION: forcing a failure. [ 507.734181][T12425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.747543][T12425] CPU: 1 PID: 12425 Comm: syz.0.2271 Not tainted 6.6.102-syzkaller #0 [ 507.756169][T12425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 507.766526][T12425] Call Trace: [ 507.769823][T12425] [ 507.772770][T12425] dump_stack_lvl+0x16c/0x230 [ 507.777490][T12425] ? show_regs_print_info+0x20/0x20 [ 507.782900][T12425] ? load_image+0x3b0/0x3b0 [ 507.787425][T12425] ? __might_fault+0xaa/0x120 [ 507.792187][T12425] ? __lock_acquire+0x7c80/0x7c80 [ 507.797232][T12425] should_fail_ex+0x39d/0x4d0 [ 507.801946][T12425] _copy_from_iter+0x1d3/0x1290 [ 507.804780][T12421] netlink: 'syz.1.2268': attribute type 39 has an invalid length. [ 507.806819][T12425] ? slab_post_alloc_hook+0x8a/0x4d0 [ 507.820175][T12425] ? __virt_addr_valid+0x18c/0x540 [ 507.825307][T12425] ? __lock_acquire+0x7c80/0x7c80 [ 507.830352][T12425] ? rcu_is_watching+0x15/0xb0 [ 507.835152][T12425] ? copyout_mc+0x70/0x70 [ 507.839607][T12425] ? __virt_addr_valid+0x18c/0x540 [ 507.844729][T12425] ? __virt_addr_valid+0x18c/0x540 [ 507.849844][T12425] ? __virt_addr_valid+0x469/0x540 [ 507.855009][T12425] ? __check_object_size+0x506/0xa30 [ 507.860350][T12425] netlink_sendmsg+0x75c/0xbe0 [ 507.865131][T12425] ? netlink_getsockopt+0x580/0x580 [ 507.870332][T12425] ? aa_sock_msg_perm+0x94/0x150 [ 507.875268][T12425] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 507.880576][T12425] ? security_socket_sendmsg+0x80/0xa0 [ 507.886052][T12425] ? netlink_getsockopt+0x580/0x580 [ 507.891394][T12425] ____sys_sendmsg+0x5bf/0x950 [ 507.896252][T12425] ? __asan_memset+0x22/0x40 [ 507.900959][T12425] ? __sys_sendmsg_sock+0x30/0x30 [ 507.906018][T12425] ? __import_iovec+0x5f2/0x860 [ 507.910899][T12425] ? import_iovec+0x73/0xa0 [ 507.915420][T12425] ___sys_sendmsg+0x220/0x290 [ 507.920114][T12425] ? __sys_sendmsg+0x270/0x270 [ 507.924908][T12425] ? __lock_acquire+0x7c80/0x7c80 [ 507.929967][T12425] __se_sys_sendmsg+0x1a5/0x270 [ 507.934845][T12425] ? __x64_sys_sendmsg+0x80/0x80 [ 507.939808][T12425] ? lockdep_hardirqs_on+0x98/0x150 [ 507.945031][T12425] do_syscall_64+0x55/0xb0 [ 507.949455][T12425] ? clear_bhb_loop+0x40/0x90 [ 507.954140][T12425] ? clear_bhb_loop+0x40/0x90 [ 507.958823][T12425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.964754][T12425] RIP: 0033:0x7f5a24d8ebe9 [ 507.969179][T12425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.988831][T12425] RSP: 002b:00007f5a25b89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.997268][T12425] RAX: ffffffffffffffda RBX: 00007f5a24fb5fa0 RCX: 00007f5a24d8ebe9 [ 508.005253][T12425] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 508.013620][T12425] RBP: 00007f5a25b89090 R08: 0000000000000000 R09: 0000000000000000 [ 508.021685][T12425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.029673][T12425] R13: 00007f5a24fb6038 R14: 00007f5a24fb5fa0 R15: 00007ffd6156d8e8 [ 508.037753][T12425] [ 508.050173][T12421] veth0_macvtap: left promiscuous mode [ 508.136754][T12427] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2272'. [ 508.244591][T11948] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.312589][T12433] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2275'. [ 508.455783][T11948] bond0: (slave netdevsim0): Releasing backup interface [ 508.467461][T12442] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2277'. [ 508.497994][T11948] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.807711][T12454] __nla_validate_parse: 2 callbacks suppressed [ 508.807727][T12454] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2279'. [ 508.820880][T12452] syzkaller0: entered promiscuous mode [ 508.831829][T12452] syzkaller0: entered allmulticast mode [ 508.857922][T12454] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2279'. [ 508.932444][T12308] Bluetooth: hci2: command tx timeout [ 510.099052][T12464] FAULT_INJECTION: forcing a failure. [ 510.099052][T12464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.138968][T12464] CPU: 1 PID: 12464 Comm: syz.1.2284 Not tainted 6.6.102-syzkaller #0 [ 510.147218][T12464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 510.157335][T12464] Call Trace: [ 510.160658][T12464] [ 510.163717][T12464] dump_stack_lvl+0x16c/0x230 [ 510.168461][T12464] ? show_regs_print_info+0x20/0x20 [ 510.173720][T12464] ? load_image+0x3b0/0x3b0 [ 510.178289][T12464] ? __might_fault+0xaa/0x120 [ 510.183023][T12464] ? __lock_acquire+0x7c80/0x7c80 [ 510.188152][T12464] should_fail_ex+0x39d/0x4d0 [ 510.192912][T12464] _copy_from_iter+0x1d3/0x1290 [ 510.197828][T12464] ? __virt_addr_valid+0x18c/0x540 [ 510.203000][T12464] ? __lock_acquire+0x7c80/0x7c80 [ 510.208107][T12464] ? copyout_mc+0x70/0x70 [ 510.212502][T12464] ? __virt_addr_valid+0x18c/0x540 [ 510.217668][T12464] ? __virt_addr_valid+0x18c/0x540 [ 510.222835][T12464] ? __virt_addr_valid+0x469/0x540 [ 510.228016][T12464] ? __check_object_size+0x506/0xa30 [ 510.233379][T12464] kernfs_fop_write_iter+0x1a8/0x4d0 [ 510.238738][T12464] vfs_write+0x43b/0x940 [ 510.243054][T12464] ? file_end_write+0x250/0x250 [ 510.247977][T12464] ? __fget_files+0x44a/0x4d0 [ 510.252729][T12464] ? __fdget_pos+0x2a3/0x330 [ 510.257372][T12464] ? ksys_write+0x75/0x250 [ 510.261847][T12464] ksys_write+0x147/0x250 [ 510.266334][T12464] ? __ia32_sys_read+0x90/0x90 [ 510.271292][T12464] ? lockdep_hardirqs_on+0x98/0x150 [ 510.276843][T12464] do_syscall_64+0x55/0xb0 [ 510.281316][T12464] ? clear_bhb_loop+0x40/0x90 [ 510.286042][T12464] ? clear_bhb_loop+0x40/0x90 [ 510.290775][T12464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.296724][T12464] RIP: 0033:0x7f245198ebe9 [ 510.301190][T12464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.320859][T12464] RSP: 002b:00007f2452772038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 510.329336][T12464] RAX: ffffffffffffffda RBX: 00007f2451bb5fa0 RCX: 00007f245198ebe9 [ 510.337808][T12464] RDX: 0000000000000008 RSI: 0000200000000140 RDI: 0000000000000005 [ 510.345840][T12464] RBP: 00007f2452772090 R08: 0000000000000000 R09: 0000000000000000 [ 510.354126][T12464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.362831][T12464] R13: 00007f2451bb6038 R14: 00007f2451bb5fa0 R15: 00007ffdb7038018 [ 510.370901][T12464] [ 511.013094][T12308] Bluetooth: hci2: command tx timeout [ 512.752953][T12453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2279'. [ 512.765271][T12408] chnl_net:caif_netlink_parms(): no params data found [ 512.952304][T12477] sctp: [Deprecated]: syz.1.2290 (pid 12477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 512.952304][T12477] Use struct sctp_sack_info instead [ 513.092192][T12308] Bluetooth: hci2: command tx timeout [ 513.113199][T12484] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2292'. [ 513.140805][T12484] netlink: zone id is out of range [ 513.160335][T12484] netlink: del zone limit has 8 unknown bytes [ 513.425652][T12408] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.439225][T12408] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.446869][T12408] bridge_slave_0: entered allmulticast mode [ 513.457508][T12408] bridge_slave_0: entered promiscuous mode [ 513.483594][T12494] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2293'. [ 513.531740][T12408] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.546782][T12408] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.562253][T12408] bridge_slave_1: entered allmulticast mode [ 513.577054][T12408] bridge_slave_1: entered promiscuous mode [ 513.688926][T12502] FAULT_INJECTION: forcing a failure. [ 513.688926][T12502] name failslab, interval 1, probability 0, space 0, times 0 [ 513.720919][T12502] CPU: 1 PID: 12502 Comm: syz.3.2295 Not tainted 6.6.102-syzkaller #0 [ 513.729221][T12502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 513.739420][T12502] Call Trace: [ 513.742745][T12502] [ 513.745722][T12502] dump_stack_lvl+0x16c/0x230 [ 513.750480][T12502] ? show_regs_print_info+0x20/0x20 [ 513.755823][T12502] ? load_image+0x3b0/0x3b0 [ 513.760383][T12502] ? __might_sleep+0xe0/0xe0 [ 513.765018][T12502] ? __lock_acquire+0x7c80/0x7c80 [ 513.770086][T12502] should_fail_ex+0x39d/0x4d0 [ 513.774812][T12502] should_failslab+0x9/0x20 [ 513.779358][T12502] slab_pre_alloc_hook+0x59/0x310 [ 513.784435][T12502] ? d_instantiate+0x6f/0x90 [ 513.789079][T12502] kmem_cache_alloc+0x5a/0x2e0 [ 513.793889][T12502] ? alloc_empty_file+0x9e/0x1d0 [ 513.798880][T12502] alloc_empty_file+0x9e/0x1d0 [ 513.803700][T12502] alloc_file+0x5c/0x600 [ 513.808007][T12502] alloc_file_pseudo+0x17e/0x200 [ 513.813609][T12502] ? alloc_empty_backing_file+0xe0/0xe0 [ 513.819293][T12502] ? __lock_acquire+0x7c80/0x7c80 [ 513.824450][T12502] ? __local_bh_enable_ip+0x12e/0x1c0 [ 513.829861][T12502] ? _local_bh_enable+0xa0/0xa0 [ 513.834754][T12502] anon_inode_getfile+0xc5/0x1a0 [ 513.839746][T12502] bpf_link_prime+0xa6/0x1d0 [ 513.844376][T12502] bpf_raw_tp_link_attach+0x33c/0x560 [ 513.849800][T12502] ? bpf_insn_prepare_dump+0x840/0x840 [ 513.855413][T12502] bpf_raw_tracepoint_open+0x197/0x210 [ 513.860918][T12502] __sys_bpf+0x364/0x800 [ 513.865218][T12502] ? bpf_link_show_fdinfo+0x350/0x350 [ 513.870656][T12502] ? lock_chain_count+0x20/0x20 [ 513.875566][T12502] __x64_sys_bpf+0x7c/0x90 [ 513.880022][T12502] do_syscall_64+0x55/0xb0 [ 513.884480][T12502] ? clear_bhb_loop+0x40/0x90 [ 513.889197][T12502] ? clear_bhb_loop+0x40/0x90 [ 513.893923][T12502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.899861][T12502] RIP: 0033:0x7fce9ab8ebe9 [ 513.904310][T12502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.924134][T12502] RSP: 002b:00007fce9b9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 513.932601][T12502] RAX: ffffffffffffffda RBX: 00007fce9adb5fa0 RCX: 00007fce9ab8ebe9 [ 513.940616][T12502] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000011 [ 513.948632][T12502] RBP: 00007fce9b9de090 R08: 0000000000000000 R09: 0000000000000000 [ 513.956729][T12502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.964753][T12502] R13: 00007fce9adb6038 R14: 00007fce9adb5fa0 R15: 00007ffc72984098 [ 513.972783][T12502] [ 514.339450][T12408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.349796][T12521] netlink: 'syz.3.2299': attribute type 10 has an invalid length. [ 514.369701][T12521] FAULT_INJECTION: forcing a failure. [ 514.369701][T12521] name failslab, interval 1, probability 0, space 0, times 0 [ 514.404857][T12521] CPU: 1 PID: 12521 Comm: syz.3.2299 Not tainted 6.6.102-syzkaller #0 [ 514.413079][T12521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 514.423149][T12521] Call Trace: [ 514.426439][T12521] [ 514.429377][T12521] dump_stack_lvl+0x16c/0x230 [ 514.434197][T12521] ? show_regs_print_info+0x20/0x20 [ 514.439512][T12521] ? load_image+0x3b0/0x3b0 [ 514.444129][T12521] should_fail_ex+0x39d/0x4d0 [ 514.448823][T12521] should_failslab+0x9/0x20 [ 514.453339][T12521] slab_pre_alloc_hook+0x59/0x310 [ 514.458482][T12521] kmem_cache_alloc_node+0x60/0x330 [ 514.463776][T12521] ? __alloc_skb+0x108/0x2c0 [ 514.468380][T12521] __alloc_skb+0x108/0x2c0 [ 514.472812][T12521] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 514.478108][T12521] ? hsr_dev_open+0x240/0x240 [ 514.482922][T12521] rtmsg_ifinfo+0x8c/0x1a0 [ 514.487355][T12521] __dev_notify_flags+0xf5/0x2e0 [ 514.492307][T12521] ? __dev_change_flags+0x6a0/0x6a0 [ 514.497516][T12521] ? __dev_change_flags+0x4bf/0x6a0 [ 514.502821][T12521] ? dev_get_flags+0x1c0/0x1c0 [ 514.507601][T12521] ? vprintk_emit+0x521/0x600 [ 514.512295][T12521] dev_change_flags+0xe8/0x1a0 [ 514.517087][T12521] do_setlink+0xc74/0x3fb0 [ 514.521524][T12521] ? _printk+0xd0/0x110 [ 514.525796][T12521] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 514.532054][T12521] ? load_image+0x3b0/0x3b0 [ 514.536589][T12521] ? __perf_event_task_sched_in+0xf1/0x1460 [ 514.542598][T12521] ? __nla_validate_parse+0x22dc/0x2cd0 [ 514.548157][T12521] ? netlink_rcv_skb+0x216/0x480 [ 514.553221][T12521] ? netlink_unicast+0x751/0x8d0 [ 514.558190][T12521] ? netlink_sendmsg+0x8c1/0xbe0 [ 514.563268][T12521] ? __nla_validate+0x50/0x50 [ 514.568169][T12521] ? validate_linkmsg+0x719/0x910 [ 514.573225][T12521] rtnl_newlink+0x175b/0x2020 [ 514.577927][T12521] ? rtnl_newlink+0x421/0x2020 [ 514.582733][T12521] ? rtnl_setlink+0x4b0/0x4b0 [ 514.587420][T12521] ? __rwlock_init+0x150/0x150 [ 514.592286][T12521] ? do_raw_spin_unlock+0x121/0x230 [ 514.597502][T12521] ? __mutex_lock+0x95d/0xcc0 [ 514.602198][T12521] ? __mutex_lock+0x4e8/0xcc0 [ 514.607005][T12521] ? rtnl_setlink+0x4b0/0x4b0 [ 514.611702][T12521] rtnetlink_rcv_msg+0x7c7/0xf10 [ 514.616660][T12521] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 514.621787][T12521] ? rtnetlink_bind+0x80/0x80 [ 514.626479][T12521] ? perf_trace_preemptirq_template+0x281/0x340 [ 514.632739][T12521] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 514.638731][T12521] ? lock_chain_count+0x20/0x20 [ 514.643596][T12521] ? __local_bh_enable_ip+0x12e/0x1c0 [ 514.648979][T12521] ? lockdep_hardirqs_on+0x98/0x150 [ 514.654205][T12521] ? __local_bh_enable_ip+0x12e/0x1c0 [ 514.659596][T12521] ? _local_bh_enable+0xa0/0xa0 [ 514.664461][T12521] ? __dev_queue_xmit+0x245/0x35a0 [ 514.669593][T12521] ? __dev_queue_xmit+0x1449/0x35a0 [ 514.674810][T12521] ? __dev_queue_xmit+0x245/0x35a0 [ 514.679934][T12521] ? ref_tracker_free+0x634/0x7d0 [ 514.684970][T12521] ? __copy_skb_header+0xa7/0x550 [ 514.690102][T12521] netlink_rcv_skb+0x216/0x480 [ 514.694879][T12521] ? rtnetlink_bind+0x80/0x80 [ 514.699570][T12521] ? netlink_ack+0x1110/0x1110 [ 514.704440][T12521] ? __lock_acquire+0x7c80/0x7c80 [ 514.709568][T12521] ? netlink_deliver_tap+0x2e/0x1b0 [ 514.714780][T12521] netlink_unicast+0x751/0x8d0 [ 514.719565][T12521] netlink_sendmsg+0x8c1/0xbe0 [ 514.724358][T12521] ? netlink_getsockopt+0x580/0x580 [ 514.729568][T12521] ? aa_sock_msg_perm+0x94/0x150 [ 514.734604][T12521] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 514.739897][T12521] ? security_socket_sendmsg+0x80/0xa0 [ 514.745363][T12521] ? netlink_getsockopt+0x580/0x580 [ 514.750572][T12521] ____sys_sendmsg+0x5bf/0x950 [ 514.755357][T12521] ? __asan_memset+0x22/0x40 [ 514.759985][T12521] ? __sys_sendmsg_sock+0x30/0x30 [ 514.765042][T12521] ? __import_iovec+0x5f2/0x860 [ 514.769930][T12521] ? import_iovec+0x73/0xa0 [ 514.774549][T12521] ___sys_sendmsg+0x220/0x290 [ 514.779276][T12521] ? __sys_sendmsg+0x270/0x270 [ 514.784103][T12521] ? __lock_acquire+0x7c80/0x7c80 [ 514.789204][T12521] __se_sys_sendmsg+0x1a5/0x270 [ 514.794075][T12521] ? perf_trace_preemptirq_template+0x281/0x340 [ 514.800356][T12521] ? __x64_sys_sendmsg+0x80/0x80 [ 514.805349][T12521] ? lockdep_hardirqs_on+0x98/0x150 [ 514.810583][T12521] do_syscall_64+0x55/0xb0 [ 514.815011][T12521] ? clear_bhb_loop+0x40/0x90 [ 514.819696][T12521] ? clear_bhb_loop+0x40/0x90 [ 514.824383][T12521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 514.830294][T12521] RIP: 0033:0x7fce9ab8ebe9 [ 514.834719][T12521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.854429][T12521] RSP: 002b:00007fce9b9de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.862862][T12521] RAX: ffffffffffffffda RBX: 00007fce9adb5fa0 RCX: 00007fce9ab8ebe9 [ 514.870861][T12521] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 514.878841][T12521] RBP: 00007fce9b9de090 R08: 0000000000000000 R09: 0000000000000000 [ 514.886825][T12521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.894901][T12521] R13: 00007fce9adb6038 R14: 00007fce9adb5fa0 R15: 00007ffc72984098 [ 514.902916][T12521] [ 514.979801][T12521] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 514.998286][T12408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.139834][T12525] FAULT_INJECTION: forcing a failure. [ 515.139834][T12525] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 515.164515][T12525] CPU: 0 PID: 12525 Comm: syz.0.2300 Not tainted 6.6.102-syzkaller #0 [ 515.172772][T12525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 515.182088][T12308] Bluetooth: hci2: command tx timeout [ 515.182860][T12525] Call Trace: [ 515.191610][T12525] [ 515.194598][T12525] dump_stack_lvl+0x16c/0x230 [ 515.199364][T12525] ? show_regs_print_info+0x20/0x20 [ 515.204629][T12525] ? load_image+0x3b0/0x3b0 [ 515.209223][T12525] ? __lock_acquire+0x7c80/0x7c80 [ 515.214319][T12525] ? trace_event_raw_event_lock+0x230/0x230 [ 515.220299][T12525] should_fail_ex+0x39d/0x4d0 [ 515.225085][T12525] prepare_alloc_pages+0x1e2/0x5f0 [ 515.230309][T12525] __alloc_pages+0x127/0x460 [ 515.234989][T12525] ? zone_statistics+0x170/0x170 [ 515.240085][T12525] pte_alloc_one+0x89/0x540 [ 515.244640][T12525] ? pfn_modify_allowed+0x560/0x560 [ 515.249881][T12525] ? hugepage_vma_check+0x488/0x5a0 [ 515.255147][T12525] handle_mm_fault+0x2e8e/0x4920 [ 515.260222][T12525] ? handle_mm_fault+0xd1/0x4920 [ 515.265280][T12525] ? numa_migrate_prep+0x350/0x350 [ 515.270495][T12525] ? lock_mm_and_find_vma+0x9c/0x300 [ 515.275928][T12525] do_user_addr_fault+0x738/0x12e0 [ 515.281133][T12525] exc_page_fault+0x67/0x110 [ 515.285771][T12525] asm_exc_page_fault+0x26/0x30 [ 515.290660][T12525] RIP: 0010:rep_movs_alternative+0x13/0x90 [ 515.296499][T12525] Code: b6 48 8b 1c 24 4c 8b 64 24 08 48 83 c4 10 c3 cc cc cc cc cc cc cc cc f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 [ 515.316223][T12525] RSP: 0018:ffffc90003737a10 EFLAGS: 00050202 [ 515.322418][T12525] RAX: ffffffff841e5e01 RBX: 0000000000000001 RCX: 0000000000000001 [ 515.330451][T12525] RDX: 0000000000000001 RSI: 000000110c230000 RDI: ffffc90003737b00 [ 515.338466][T12525] RBP: ffffc90003737bb0 R08: ffffc90003737b00 R09: 1ffff920006e6f60 [ 515.346498][T12525] R10: dffffc0000000000 R11: fffff520006e6f61 R12: 000000110c230001 [ 515.354588][T12525] R13: ffffc90003737d48 R14: ffffc90003737b00 R15: 000000110c230000 [ 515.362611][T12525] ? rcuref_put_slowpath+0x141/0x150 [ 515.367964][T12525] _copy_from_user+0x8b/0xe0 [ 515.372596][T12525] ioctl_standard_iw_point+0x46d/0xca0 [ 515.378096][T12525] ? do_raw_spin_unlock+0x121/0x230 [ 515.383411][T12525] ? __mutex_lock+0x95d/0xcc0 [ 515.388211][T12525] ? cfg80211_wext_giwap+0x120/0x120 [ 515.393636][T12525] ? iw_handler_get_iwstats+0x110/0x110 [ 515.399320][T12525] ? mutex_lock_nested+0x20/0x20 [ 515.404404][T12525] ? cfg80211_wext_giwap+0x120/0x120 [ 515.409727][T12525] ioctl_standard_call+0xb7/0x2b0 [ 515.414803][T12525] ? cfg80211_wext_giwap+0x120/0x120 [ 515.420124][T12525] wext_ioctl_dispatch+0x1cb/0x5f0 [ 515.425319][T12525] ? wext_ioctl_dispatch+0x5f0/0x5f0 [ 515.430633][T12525] ? iw_handler_get_private+0x1f0/0x1f0 [ 515.436216][T12525] ? wext_handle_ioctl+0x1c0/0x1c0 [ 515.441356][T12525] ? __might_fault+0xaa/0x120 [ 515.446068][T12525] ? __might_fault+0xc6/0x120 [ 515.450769][T12525] ? __might_fault+0xaa/0x120 [ 515.455505][T12525] wext_handle_ioctl+0x108/0x1c0 [ 515.460483][T12525] ? call_commit_handler+0xf0/0xf0 [ 515.465674][T12525] sock_ioctl+0x160/0x7a0 [ 515.470053][T12525] ? sock_poll+0x3d0/0x3d0 [ 515.474534][T12525] ? bpf_lsm_file_ioctl+0x9/0x10 [ 515.479495][T12525] ? security_file_ioctl+0x80/0xa0 [ 515.484642][T12525] ? sock_poll+0x3d0/0x3d0 [ 515.489096][T12525] __se_sys_ioctl+0xfd/0x170 [ 515.493727][T12525] do_syscall_64+0x55/0xb0 [ 515.498168][T12525] ? clear_bhb_loop+0x40/0x90 [ 515.502957][T12525] ? clear_bhb_loop+0x40/0x90 [ 515.507671][T12525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 515.513601][T12525] RIP: 0033:0x7f5a24d8ebe9 [ 515.518058][T12525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.537698][T12525] RSP: 002b:00007f5a25b89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 515.546165][T12525] RAX: ffffffffffffffda RBX: 00007f5a24fb5fa0 RCX: 00007f5a24d8ebe9 [ 515.554169][T12525] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000003 [ 515.562178][T12525] RBP: 00007f5a25b89090 R08: 0000000000000000 R09: 0000000000000000 [ 515.570175][T12525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.578178][T12525] R13: 00007f5a24fb6038 R14: 00007f5a24fb5fa0 R15: 00007ffd6156d8e8 [ 515.586220][T12525] [ 515.800895][T12408] team0: Port device team_slave_0 added [ 515.887183][T12408] team0: Port device team_slave_1 added [ 516.337033][T12547] FAULT_INJECTION: forcing a failure. [ 516.337033][T12547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.378724][T12408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.396241][T12547] CPU: 0 PID: 12547 Comm: syz.0.2307 Not tainted 6.6.102-syzkaller #0 [ 516.404493][T12547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 516.414613][T12547] Call Trace: [ 516.417949][T12547] [ 516.421003][T12547] dump_stack_lvl+0x16c/0x230 [ 516.425761][T12547] ? show_regs_print_info+0x20/0x20 [ 516.431129][T12547] ? load_image+0x3b0/0x3b0 [ 516.435984][T12547] ? __might_fault+0xaa/0x120 [ 516.440762][T12547] ? __lock_acquire+0x7c80/0x7c80 [ 516.445849][T12547] ? __lock_acquire+0x1260/0x7c80 [ 516.450965][T12547] should_fail_ex+0x39d/0x4d0 [ 516.455738][T12547] _copy_from_user+0x2f/0xe0 [ 516.460402][T12547] do_ipv6_setsockopt+0x354/0x3c30 [ 516.465627][T12547] ? sk_dst_reset+0xa0/0xa0 [ 516.470283][T12547] ? trace_call_bpf+0xc3/0x690 [ 516.475126][T12547] ? perf_trace_lock+0xf7/0x380 [ 516.480069][T12547] ? trace_event_raw_event_lock+0x230/0x230 [ 516.486039][T12547] ? mark_lock+0x94/0x320 [ 516.490447][T12547] ? __lock_acquire+0x1260/0x7c80 [ 516.495538][T12547] ? trace_call_bpf+0xc3/0x690 [ 516.500405][T12547] ? trace_call_bpf+0xc3/0x690 [ 516.505240][T12547] ? __lock_acquire+0x7c80/0x7c80 [ 516.510352][T12547] ? mark_lock+0x94/0x320 [ 516.514767][T12547] ? __lock_acquire+0x1260/0x7c80 [ 516.519918][T12547] ? aa_label_sk_perm+0x3ec/0x500 [ 516.525085][T12547] ? aa_sk_perm+0x930/0x930 [ 516.529735][T12547] ? trace_call_bpf+0xc3/0x690 [ 516.534574][T12547] ? __might_sleep+0xe0/0xe0 [ 516.539314][T12547] ? trace_call_bpf+0x5ba/0x690 [ 516.544312][T12547] ipv6_setsockopt+0x59/0x190 [ 516.549076][T12547] dccp_setsockopt+0x160/0x830 [ 516.553910][T12547] ? aa_af_perm+0x2b0/0x2b0 [ 516.558504][T12547] ? dccp_ioctl+0x200/0x200 [ 516.563064][T12547] ? __fget_files+0x28/0x4d0 [ 516.567719][T12547] ? aa_sock_opt_perm+0x74/0x100 [ 516.572732][T12547] ? sock_common_setsockopt+0x36/0xc0 [ 516.578180][T12547] ? sock_common_recvmsg+0x1b0/0x1b0 [ 516.583989][T12547] do_sock_setsockopt+0x175/0x1a0 [ 516.589080][T12547] ? __fdget+0x180/0x210 [ 516.593414][T12547] __x64_sys_setsockopt+0x184/0x200 [ 516.598970][T12547] do_syscall_64+0x55/0xb0 [ 516.603448][T12547] ? clear_bhb_loop+0x40/0x90 [ 516.608195][T12547] ? clear_bhb_loop+0x40/0x90 [ 516.613024][T12547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.618989][T12547] RIP: 0033:0x7f5a24d8ebe9 [ 516.623498][T12547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.643173][T12547] RSP: 002b:00007f5a25b89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 516.651666][T12547] RAX: ffffffffffffffda RBX: 00007f5a24fb5fa0 RCX: 00007f5a24d8ebe9 [ 516.659723][T12547] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000005 [ 516.667763][T12547] RBP: 00007f5a25b89090 R08: 0000000000000120 R09: 0000000000000000 [ 516.675839][T12547] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 516.683869][T12547] R13: 00007f5a24fb6038 R14: 00007f5a24fb5fa0 R15: 00007ffd6156d8e8 [ 516.691979][T12547] [ 516.698546][T12408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.728881][T12408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.768517][T12408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.812771][T12408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.888053][T12408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.996968][T12408] hsr_slave_0: entered promiscuous mode [ 518.029142][T12408] hsr_slave_1: entered promiscuous mode [ 518.044498][T12408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.058897][T12408] Cannot create hsr debugfs directory [ 518.232226][T12575] netlink: 'syz.3.2312': attribute type 3 has an invalid length. [ 518.260614][T12575] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2312'. [ 518.472483][T12581] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2314'. [ 518.838821][T12581] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2314'. [ 518.938337][T12580] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2314'. [ 518.950423][T12582] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2314'. [ 518.987224][T11948] hsr_slave_0: left promiscuous mode [ 518.995796][T11948] hsr_slave_1: left promiscuous mode [ 519.001782][T11948] team0: left allmulticast mode [ 519.009575][T11948] team_slave_0: left allmulticast mode [ 519.016119][T11948] team_slave_1: left allmulticast mode [ 519.021888][T11948] bridge0: port 3(team0) entered disabled state [ 519.030710][T11948] bridge_slave_1: left allmulticast mode [ 519.036534][T11948] bridge_slave_1: left promiscuous mode [ 519.042393][T11948] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.075221][T11948] veth1_macvtap: left promiscuous mode [ 519.080814][T11948] veth0_macvtap: left promiscuous mode [ 521.225262][T11948] team_slave_1 (unregistering): left promiscuous mode [ 521.235836][T11948] team0 (unregistering): Port device team_slave_1 removed [ 521.278795][T11948] team_slave_0 (unregistering): left promiscuous mode [ 521.286663][T11948] team0 (unregistering): Port device team_slave_0 removed [ 521.331012][T11948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.380712][T11948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.778619][T11948] bond0 (unregistering): Released all slaves [ 522.772184][T12308] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 524.544171][T12635] syz.3.2325[12635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 524.628762][T12635] syz.3.2325[12635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 524.913168][T12408] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 525.315363][T12408] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 525.894839][T12408] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 525.938351][T12408] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 526.530040][T12660] netlink: 'syz.1.2327': attribute type 10 has an invalid length. [ 526.547563][T12660] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2327'. [ 526.584439][T12660] bond0: entered promiscuous mode [ 526.602081][T12660] bond_slave_0: entered promiscuous mode [ 526.622210][T12660] bond_slave_1: entered promiscuous mode [ 526.643022][T12660] netdevsim netdevsim1 ÿÿÿÿÿÿ: entered promiscuous mode [ 526.658629][T12660] bridge0: port 1(bond0) entered blocking state [ 526.696898][T12660] bridge0: port 1(bond0) entered disabled state [ 526.714709][T12660] bond0: entered allmulticast mode [ 526.732327][T12660] bond_slave_0: entered allmulticast mode [ 526.754377][T12660] bond_slave_1: entered allmulticast mode [ 526.767252][T12660] netdevsim netdevsim1 ÿÿÿÿÿÿ: entered allmulticast mode [ 526.789122][T12660] bridge0: port 1(bond0) entered blocking state [ 526.796040][T12660] bridge0: port 1(bond0) entered forwarding state [ 526.867377][T12408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.047641][T12408] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.165599][T11954] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.173638][T11954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.230037][T11954] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.237756][T11954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.724248][T12408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 528.511498][T12702] FAULT_INJECTION: forcing a failure. [ 528.511498][T12702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.603083][T12702] CPU: 1 PID: 12702 Comm: syz.1.2335 Not tainted 6.6.102-syzkaller #0 [ 528.611325][T12702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 528.621412][T12702] Call Trace: [ 528.624808][T12702] [ 528.627776][T12702] dump_stack_lvl+0x16c/0x230 [ 528.632498][T12702] ? show_regs_print_info+0x20/0x20 [ 528.637824][T12702] ? load_image+0x3b0/0x3b0 [ 528.642376][T12702] ? __might_fault+0xaa/0x120 [ 528.647087][T12702] ? __lock_acquire+0x7c80/0x7c80 [ 528.652157][T12702] should_fail_ex+0x39d/0x4d0 [ 528.656974][T12702] _copy_from_user+0x2f/0xe0 [ 528.661599][T12702] __sys_bpf+0x1e9/0x800 [ 528.665888][T12702] ? bpf_link_show_fdinfo+0x350/0x350 [ 528.671336][T12702] ? lock_chain_count+0x20/0x20 [ 528.676260][T12702] __x64_sys_bpf+0x7c/0x90 [ 528.680721][T12702] do_syscall_64+0x55/0xb0 [ 528.685178][T12702] ? clear_bhb_loop+0x40/0x90 [ 528.689895][T12702] ? clear_bhb_loop+0x40/0x90 [ 528.692968][T12408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.694583][T12702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.694615][T12702] RIP: 0033:0x7f245198ebe9 [ 528.711719][T12702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.731357][T12702] RSP: 002b:00007f2452772038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 528.739794][T12702] RAX: ffffffffffffffda RBX: 00007f2451bb5fa0 RCX: 00007f245198ebe9 [ 528.747785][T12702] RDX: 0000000000000010 RSI: 0000200000000bc0 RDI: 000000000000000a [ 528.755777][T12702] RBP: 00007f2452772090 R08: 0000000000000000 R09: 0000000000000000 [ 528.763782][T12702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.771784][T12702] R13: 00007f2451bb6038 R14: 00007f2451bb5fa0 R15: 00007ffdb7038018 [ 528.779824][T12702] [ 528.960121][T12408] veth0_vlan: entered promiscuous mode [ 529.090981][T12408] veth1_vlan: entered promiscuous mode [ 529.509594][T12408] veth0_macvtap: entered promiscuous mode [ 529.559745][T12408] veth1_macvtap: entered promiscuous mode [ 529.582278][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.600696][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.618319][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.629325][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.639960][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.651883][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.679820][T12408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.875008][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.922018][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.948488][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.974698][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.011794][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.043573][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.076917][T12408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.826273][T12408] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.849829][T12408] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.859409][T12408] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.869661][T12408] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.121464][T11954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.146614][T11954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.302478][T11950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.310368][T11950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.860237][T12811] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2354'. [ 537.018620][T12811] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2354'. [ 538.194749][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 538.213395][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 538.221790][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 538.242586][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 538.255703][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 538.270558][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 538.591819][T11949] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.788655][T11949] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.095383][T11949] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.269281][T11949] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface [ 539.277384][T11949] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): left promiscuous mode [ 539.288912][T11949] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): left allmulticast mode [ 539.305987][T11949] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.568969][T12836] chnl_net:caif_netlink_parms(): no params data found [ 540.412501][T12308] Bluetooth: hci0: command tx timeout [ 540.636943][T12836] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.644465][T12836] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.660479][T12836] bridge_slave_0: entered allmulticast mode [ 540.680954][T12836] bridge_slave_0: entered promiscuous mode [ 540.700759][T12836] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.722246][T12836] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.762313][T12836] bridge_slave_1: entered allmulticast mode [ 540.769855][T12836] bridge_slave_1: entered promiscuous mode [ 541.000244][T12836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.069293][T12836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.165289][T12836] team0: Port device team_slave_0 added [ 541.185232][T12836] team0: Port device team_slave_1 added [ 541.277198][T12836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.298578][T12836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.337188][T12836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.381720][T12836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.389087][T12836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.415629][T12836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.507772][T12836] hsr_slave_0: entered promiscuous mode [ 541.520813][T12836] hsr_slave_1: entered promiscuous mode [ 541.527881][T12836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 541.542170][T12836] Cannot create hsr debugfs directory [ 541.961046][T11949] [ 541.963458][T11949] ====================================================== [ 541.970500][T11949] WARNING: possible circular locking dependency detected [ 541.977545][T11949] 6.6.102-syzkaller #0 Not tainted [ 541.982676][T11949] ------------------------------------------------------ [ 541.989800][T11949] kworker/u4:29/11949 is trying to acquire lock: [ 541.996155][T11949] ffff888060594d00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 542.005882][T11949] [ 542.005882][T11949] but task is already holding lock: [ 542.013271][T11949] ffff88802eb60768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 542.023685][T11949] [ 542.023685][T11949] which lock already depends on the new lock. [ 542.023685][T11949] [ 542.034115][T11949] [ 542.034115][T11949] the existing dependency chain (in reverse order) is: [ 542.043152][T11949] [ 542.043152][T11949] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 542.050934][T11949] __mutex_lock+0x129/0xcc0 [ 542.055994][T11949] ieee80211_open+0x144/0x200 [ 542.061232][T11949] __dev_open+0x2bc/0x430 [ 542.066126][T11949] dev_open+0xab/0x170 [ 542.070754][T11949] team_add_slave+0xae7/0x2660 [ 542.076081][T11949] do_setlink+0xe14/0x3fb0 [ 542.081064][T11949] rtnl_newlink+0x175b/0x2020 [ 542.086305][T11949] rtnetlink_rcv_msg+0x7c7/0xf10 [ 542.091817][T11949] netlink_rcv_skb+0x216/0x480 [ 542.097130][T11949] netlink_unicast+0x751/0x8d0 [ 542.102446][T11949] netlink_sendmsg+0x8c1/0xbe0 [ 542.107762][T11949] ____sys_sendmsg+0x5bf/0x950 [ 542.113087][T11949] ___sys_sendmsg+0x220/0x290 [ 542.118320][T11949] __se_sys_sendmsg+0x1a5/0x270 [ 542.123718][T11949] do_syscall_64+0x55/0xb0 [ 542.128683][T11949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.135132][T11949] [ 542.135132][T11949] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 542.143350][T11949] __lock_acquire+0x2ddb/0x7c80 [ 542.148763][T11949] lock_acquire+0x197/0x410 [ 542.153918][T11949] __mutex_lock+0x129/0xcc0 [ 542.158973][T11949] team_del_slave+0x32/0x1c0 [ 542.164126][T11949] team_device_event+0x28d/0xa20 [ 542.169613][T11949] notifier_call_chain+0x197/0x390 [ 542.175276][T11949] unregister_netdevice_many_notify+0xf36/0x1810 [ 542.182163][T11949] unregister_netdevice_queue+0x324/0x360 [ 542.188532][T11949] _cfg80211_unregister_wdev+0x16b/0x580 [ 542.194717][T11949] ieee80211_remove_interfaces+0x496/0x680 [ 542.201090][T11949] ieee80211_unregister_hw+0x5d/0x2a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 542.207190][T11949] mac80211_hwsim_del_radio+0x274/0x450 [ 542.213288][T11949] hwsim_exit_net+0x585/0x640 [ 542.218520][T11949] cleanup_net+0x6f4/0xb90 [ 542.223488][T11949] process_scheduled_works+0xa45/0x15b0 [ 542.229577][T11949] worker_thread+0xa55/0xfc0 [ 542.234711][T11949] kthread+0x2fa/0x390 [ 542.239320][T11949] ret_from_fork+0x48/0x80 [ 542.244283][T11949] ret_from_fork_asm+0x11/0x20 [ 542.249596][T11949] [ 542.249596][T11949] other info that might help us debug this: [ 542.249596][T11949] [ 542.259847][T11949] Possible unsafe locking scenario: [ 542.259847][T11949] [ 542.267332][T11949] CPU0 CPU1 [ 542.272905][T11949] ---- ---- [ 542.278298][T11949] lock(&rdev->wiphy.mtx); [ 542.283020][T11949] lock(team->team_lock_key#2); [ 542.290519][T11949] lock(&rdev->wiphy.mtx); [ 542.297574][T11949] lock(team->team_lock_key#2); [ 542.302546][T11949] [ 542.302546][T11949] *** DEADLOCK *** [ 542.302546][T11949] [ 542.310716][T11949] 5 locks held by kworker/u4:29/11949: [ 542.316281][T11949] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 542.327218][T11949] #1: ffffc900033c7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 542.337803][T11949] #2: ffffffff8dfaec50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 542.347269][T11949] #3: ffffffff8dfbba48 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 542.357154][T11949] #4: ffff88802eb60768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 542.368083][T11949] [ 542.368083][T11949] stack backtrace: [ 542.373989][T11949] CPU: 1 PID: 11949 Comm: kworker/u4:29 Not tainted 6.6.102-syzkaller #0 [ 542.382428][T11949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 542.392608][T11949] Workqueue: netns cleanup_net [ 542.397487][T11949] Call Trace: [ 542.400875][T11949] [ 542.403905][T11949] dump_stack_lvl+0x16c/0x230 [ 542.408594][T11949] ? load_image+0x3b0/0x3b0 [ 542.413112][T11949] ? show_regs_print_info+0x20/0x20 [ 542.418322][T11949] ? print_circular_bug+0x12b/0x1a0 [ 542.423705][T11949] check_noncircular+0x2bd/0x3c0 [ 542.428653][T11949] ? print_deadlock_bug+0x5d0/0x5d0 [ 542.433956][T11949] ? lockdep_lock+0xe0/0x220 [ 542.438592][T11949] ? __lock_acquire+0x1334/0x7c80 [ 542.443633][T11949] ? _find_first_zero_bit+0xd3/0x100 [ 542.449021][T11949] __lock_acquire+0x2ddb/0x7c80 [ 542.453890][T11949] ? verify_lock_unused+0x140/0x140 [ 542.459092][T11949] ? verify_lock_unused+0x140/0x140 [ 542.464311][T11949] lock_acquire+0x197/0x410 [ 542.469000][T11949] ? team_del_slave+0x32/0x1c0 [ 542.474048][T11949] ? __might_sleep+0xe0/0xe0 [ 542.478745][T11949] ? read_lock_is_recursive+0x20/0x20 [ 542.484211][T11949] __mutex_lock+0x129/0xcc0 [ 542.488720][T11949] ? team_del_slave+0x32/0x1c0 [ 542.493487][T11949] ? __lock_acquire+0x7c80/0x7c80 [ 542.498515][T11949] ? rcu_is_watching+0x15/0xb0 [ 542.503408][T11949] ? trace_contention_end+0x39/0xe0 [ 542.508618][T11949] ? __mutex_lock+0x304/0xcc0 [ 542.513312][T11949] ? team_del_slave+0x32/0x1c0 [ 542.518081][T11949] ? mutex_lock_nested+0x20/0x20 [ 542.523027][T11949] ? bond_netdev_event+0xe1/0xef0 [ 542.528061][T11949] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 542.533792][T11949] ? bond_ipsec_offload_ok+0x410/0x410 [ 542.539274][T11949] team_del_slave+0x32/0x1c0 [ 542.543875][T11949] team_device_event+0x28d/0xa20 [ 542.548828][T11949] notifier_call_chain+0x197/0x390 [ 542.553952][T11949] unregister_netdevice_many_notify+0xf36/0x1810 [ 542.560290][T11949] ? lock_chain_count+0x20/0x20 [ 542.565168][T11949] ? unregister_netdevice_many+0x20/0x20 [ 542.570914][T11949] ? kernfs_remove_by_name_ns+0x117/0x150 [ 542.576657][T11949] ? __lock_acquire+0x7c80/0x7c80 [ 542.581693][T11949] unregister_netdevice_queue+0x324/0x360 [ 542.587450][T11949] ? list_netdevice+0x730/0x730 [ 542.592339][T11949] ? kernfs_remove_by_name_ns+0x117/0x150 [ 542.598086][T11949] _cfg80211_unregister_wdev+0x16b/0x580 [ 542.603755][T11949] ieee80211_remove_interfaces+0x496/0x680 [ 542.609660][T11949] ? ieee80211_do_stop+0x1db0/0x1db0 [ 542.614960][T11949] ? rcu_is_watching+0x15/0xb0 [ 542.619744][T11949] ieee80211_unregister_hw+0x5d/0x2a0 [ 542.625130][T11949] mac80211_hwsim_del_radio+0x274/0x450 [ 542.630863][T11949] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 542.637285][T11949] hwsim_exit_net+0x585/0x640 [ 542.642074][T11949] ? hwsim_init_net+0x90/0x90 [ 542.646779][T11949] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 542.652598][T11949] cleanup_net+0x6f4/0xb90 [ 542.657025][T11949] ? ops_free_list+0x3b0/0x3b0 [ 542.661797][T11949] ? _raw_spin_unlock_irq+0x23/0x50 [ 542.667011][T11949] ? process_scheduled_works+0x957/0x15b0 [ 542.673089][T11949] ? process_scheduled_works+0x957/0x15b0 [ 542.678814][T11949] process_scheduled_works+0xa45/0x15b0 [ 542.684375][T11949] ? assign_work+0x400/0x400 [ 542.689058][T11949] ? assign_work+0x39e/0x400 [ 542.693656][T11949] worker_thread+0xa55/0xfc0 [ 542.698277][T11949] kthread+0x2fa/0x390 [ 542.702351][T11949] ? pr_cont_work+0x560/0x560 [ 542.707208][T11949] ? kthread_blkcg+0xd0/0xd0 [ 542.711892][T11949] ret_from_fork+0x48/0x80 [ 542.716318][T11949] ? kthread_blkcg+0xd0/0xd0 [ 542.721012][T11949] ret_from_fork_asm+0x11/0x20 [ 542.726050][T11949] [ 542.751997][T12308] Bluetooth: hci0: command tx timeout [ 542.902365][T11949] mac80211_hwsim hwsim3 wlan1 (unregistering): left promiscuous mode [ 542.916312][T11949] mac80211_hwsim hwsim3 wlan1 (unregistering): left allmulticast mode [ 543.013997][T11949] team0: Port device wlan1 removed [ 543.297398][ T5783] team0: Port device syz_tun removed [ 543.512943][T11949] hsr_slave_0: left promiscuous mode [ 543.538274][T11949] hsr_slave_1: left promiscuous mode [ 543.544624][T11949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.552431][T11949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.575185][T11949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.592010][T11949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.599883][T11949] bond0: left allmulticast mode [ 543.605060][T11949] bond_slave_0: left allmulticast mode [ 543.610730][T11949] bond_slave_1: left allmulticast mode [ 543.632480][T11949] bridge0: port 1(bond0) entered disabled state [ 543.640510][T11949] team0: left allmulticast mode [ 543.652386][T11949] C: left allmulticast mode [ 543.657022][T11949] team_slave_1: left allmulticast mode [ 543.672059][T11949] geneve1: left allmulticast mode [ 543.677308][T11949] bridge0: port 3(team0) entered disabled state [ 543.703753][T11949] bridge_slave_1: left allmulticast mode [ 543.709453][T11949] bridge_slave_1: left promiscuous mode [ 543.722151][T11949] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.770995][T11949] veth1_vlan: left promiscuous mode [ 543.857368][T11949] geneve1 (unregistering): left promiscuous mode [ 543.873606][T11949] team0 (unregistering): Port device geneve1 removed [ 544.140363][T11949] team_slave_1 (unregistering): left promiscuous mode [ 544.153018][T11949] team0 (unregistering): Port device team_slave_1 removed [ 544.189833][T11949] C (unregistering): left promiscuous mode [ 544.196792][T11949] team0 (unregistering): Port device C removed [ 544.223658][T11949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.234301][T11949] bond_slave_1 (unregistering): left promiscuous mode [ 544.276974][T11949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.286116][T11949] bond_slave_0 (unregistering): left promiscuous mode [ 544.463141][T11949] bond0 (unregistering): Released all slaves [ 544.965135][T11939] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.023737][T11939] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.081491][T11939] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.149509][T11939] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.236387][T11939] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.279190][T11939] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.321122][T11939] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.388960][T11939] bond0: (slave netdevsim0): Releasing backup interface [ 545.399554][T11939] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.515823][T11939] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.571246][T11939] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.627865][T11939] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.668206][T11939] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.827344][T11939] team0: Port device wlan1 removed [ 546.977929][T11939] mac80211_hwsim hwsim13 wlan1 (unregistering): left promiscuous mode [ 546.988401][T11939] mac80211_hwsim hwsim13 wlan1 (unregistering): left allmulticast mode [ 546.998269][T11939] team0: Port device wlan1 removed [ 547.148486][T11939] hsr_slave_0: left promiscuous mode [ 547.154712][T11939] hsr_slave_1: left promiscuous mode [ 547.160711][T11939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.170090][T11939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.179326][T11939] bridge_slave_1: left allmulticast mode [ 547.188252][T11939] bridge_slave_1: left promiscuous mode [ 547.194450][T11939] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.205518][T11939] bridge_slave_0: left allmulticast mode [ 547.211201][T11939] bridge_slave_0: left promiscuous mode [ 547.217468][T11939] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.232017][T11939] hsr_slave_0: left promiscuous mode [ 547.238034][T11939] hsr_slave_1: left promiscuous mode [ 547.248192][T11939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.256191][T11939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.264519][T11939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.272061][T11939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.279578][T11939] bridge_slave_1: left allmulticast mode [ 547.286054][T11939] bridge_slave_1: left promiscuous mode [ 547.291728][T11939] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.300249][T11939] bridge_slave_0: left allmulticast mode [ 547.306082][T11939] bridge_slave_0: left promiscuous mode [ 547.311736][T11939] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.324921][T11939] hsr_slave_0: left promiscuous mode [ 547.330710][T11939] hsr_slave_1: left promiscuous mode [ 547.336714][T11939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.345535][T11939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.353356][T11939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.360734][T11939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.369353][T11939] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 547.376522][T11939] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 547.385812][T11939] hsr_slave_0: left promiscuous mode [ 547.391455][T11939] hsr_slave_1: left promiscuous mode [ 547.397318][T11939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.404971][T11939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.412795][T11939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.420197][T11939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.428002][T11939] team0: left allmulticast mode [ 547.433153][T11939] team_slave_0: left allmulticast mode [ 547.438729][T11939] team_slave_1: left allmulticast mode [ 547.444681][T11939] bridge0: port 3(team0) entered disabled state [ 547.452234][T11939] bridge_slave_1: left allmulticast mode [ 547.458065][T11939] bridge_slave_1: left promiscuous mode [ 547.463808][T11939] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.476163][T11939] veth1_macvtap: left promiscuous mode [ 547.481667][T11939] veth0_macvtap: left promiscuous mode [ 547.487876][T11939] veth1_vlan: left promiscuous mode [ 547.493225][T11939] veth0_vlan: left promiscuous mode [ 547.499296][T11939] veth1_macvtap: left promiscuous mode [ 547.505234][T11939] veth0_macvtap: left promiscuous mode [ 547.510798][T11939] veth1_vlan: left promiscuous mode [ 547.516096][T11939] veth0_vlan: left promiscuous mode [ 547.522585][T11939] veth1_macvtap: left promiscuous mode [ 547.528119][T11939] veth0_macvtap: left promiscuous mode [ 547.534002][T11939] veth1_vlan: left promiscuous mode [ 547.539302][T11939] veth0_vlan: left promiscuous mode [ 547.817367][T11939] team0 (unregistering): Port device team_slave_1 removed [ 547.843025][T11939] team0 (unregistering): Port device team_slave_0 removed [ 547.867242][T11939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.895939][T11939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.961616][T11939] bond0 (unregistering): Released all slaves [ 548.123115][T11939] team0 (unregistering): Port device team_slave_1 removed [ 548.148969][T11939] team0 (unregistering): Port device team_slave_0 removed [ 548.177081][T11939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.190112][T11939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.253998][T11939] bond0 (unregistering): Released all slaves [ 548.493367][T11939] team0 (unregistering): Port device team_slave_1 removed [ 548.519753][T11939] team0 (unregistering): Port device team_slave_0 removed [ 548.558536][T11939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.588439][T11939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.663277][T11939] bond0 (unregistering): Released all slaves [ 548.772506][T11939] team_slave_1 (unregistering): left promiscuous mode [ 548.779924][T11939] team0 (unregistering): Port device team_slave_1 removed [ 548.811042][T11939] team_slave_0 (unregistering): left promiscuous mode [ 548.818426][T11939] team0 (unregistering): Port device team_slave_0 removed [ 548.829770][T11939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.845224][T11939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.008966][T11939] bond0 (unregistering): Released all slaves