last executing test programs: 5.256404078s ago: executing program 1 (id=2805): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000180)="ff138bd7abfd06ff106c3ed990f7", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x17, &(0x7f0000000200)=r4, 0x21) r5 = socket$kcm(0x25, 0x5, 0x0) recvmsg(r5, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x21) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r6, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0xaf, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf670000000000005606020015ff07007706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad15010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f3040000705fad86c8e1a53cb300815dcf00c3ee7b042d1937ba52037fdefeb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062a1faca036d9cc7db6671573e202e0a63fe4ba12b064985cc32d1ac0b9ecc8f604dcac256621c90491726de3b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0xf9, 0x16, 0x2, 0x0, 0x3, 0x14, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x4080, 0x6, 0x6, 0x2, 0x1, 0x979, 0x8, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="00000000000000006600ffffff80000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/206}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) 5.255209528s ago: executing program 3 (id=2807): mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)}, 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}, {&(0x7f0000000080)}], 0x2}, 0x20000004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x9}, 0x8) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000010000000000000000000000000400000000000e0ca211"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)=""/4080, 0xff0}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x2}, 0x10002) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xff0f000020000080) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000300)=""/234, 0x0, 0xea, 0x1, 0x9, 0x10000, @value=r7}, 0x28) close(r6) 5.147722413s ago: executing program 0 (id=2808): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='devlink_hwerr\x00', r0}, 0x11) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) 5.035695508s ago: executing program 2 (id=2809): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x6, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) socket$kcm(0x10, 0x2, 0x4) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000e00100000080000e47812a1018d21eceec4a6cab23a736", @ANYRES32=0x0, @ANYBLOB="fcffffff00"/20, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB='\x00'/28, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX=0x0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x7, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="620ac4ff000000007110b30000000000b708000000ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff0000000000000000000000e5ffffff000000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="9d94c583aabc06445e844aa6d281a8677ae90700d233cf8a4d18f24f70ee1dbe968f4a66729ebc8825f2a55173b9f4108eef69097e1e7ea06d5f58df7fb1721312f966c1f9546108ba012b", @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0xfffffffffffffeee) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="d8000000190081054e81f783db4cb9040a1d080006007c02cdfc55a10a0017000600a42603600e12080006ba0474f701a8000100fe80ffff7f6f94007134cf6efb8000a007a290457f01890500277ce06bbaceac3c2fb14c2ee5a7a3aab62f00001fb71b14d6d930dfe1d9d322fe7c2e8771820d16a4683f5aeb4edbb5952a0f536ffd77500db798262f3d409c1f40cb9f92b74f51fad9e3bb9ad809d5e1cace0d81ed0b764434a19789bf0cffece0b4129ecbee5de6ccd4e1ffffffffc2c9b627430600007c388b0dd6e4edef3d93000020000000000000", 0xd8}], 0x1}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r6, r3, 0x0, r3}, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 4.417173665s ago: executing program 2 (id=2810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.105983889s ago: executing program 0 (id=2812): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4800) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x30000800) close(r0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000800) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)={[{0x6f8d3fdef62695a0, 'blkio'}]}, 0x7) syz_clone(0x800a000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0xc5bf) socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.163044485s ago: executing program 2 (id=2813): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000002c00)="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", 0x2f2}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x0) 2.162024905s ago: executing program 3 (id=2814): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeaff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x6, 0x8, 0x0, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\t\x00\x00\x00\f\x00\x00\x00B\x00\x00\x00@'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r5}, 0x38) 2.090725998s ago: executing program 1 (id=2815): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeaff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x6, 0x8, 0x0, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\t\x00\x00\x00\f\x00\x00\x00B\x00\x00\x00@'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r5}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r5}, 0x38) 2.05105649s ago: executing program 0 (id=2816): mkdir(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)}, 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}, {&(0x7f0000000080)}], 0x2}, 0x20000004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x9}, 0x8) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000010000000000000000000000000400000000000e0ca211"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)=""/4080, 0xff0}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x2}, 0x10002) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xff0f000020000080) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000300)=""/234, 0x0, 0xea, 0x1, 0x9, 0x10000, @value=r5}, 0x28) close(r4) 1.989159483s ago: executing program 2 (id=2817): ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000500)=""/135) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x80}, 0x50) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xd}, {0x1}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xa9}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f00000028c0)=[{&(0x7f0000001780)="e7", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000)=r5, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x9, 0x6, 0x6, 0x4110, r0, 0x0, '\x00', 0x0, r2, 0x4, 0x5, 0x3, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40034, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x3, 0x8, 0x8, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) 1.81314507s ago: executing program 3 (id=2818): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x55}, 0xfc2d07f5e2ace4cd) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4201, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x3}, 0x2000, 0x0, 0x0, 0x0, 0x1, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x20044010) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x24000881) setsockopt$sock_attach_bpf(r0, 0x6, 0x7, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xe, 0x6}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x2}, 0xff2c}, 0x48) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1) syz_clone(0x10222000, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000340)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) socket$kcm(0x2, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 1.614920109s ago: executing program 1 (id=2819): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x6, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) socket$kcm(0x10, 0x2, 0x4) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000e00100000080000e47812a1018d21eceec4a6cab23a736", @ANYRES32=0x0, @ANYBLOB="fcffffff00"/20, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB='\x00'/28, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX=0x0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x7, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="620ac4ff000000007110b30000000000b708000000ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff0000000000000000000000e5ffffff000000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="9d94c583aabc06445e844aa6d281a8677ae90700d233cf8a4d18f24f70ee1dbe968f4a66729ebc8825f2a55173b9f4108eef69097e1e7ea06d5f58df7fb1721312f966c1f9546108ba012b", @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0xfffffffffffffeee) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="d8000000190081054e81f783db4cb9040a1d080006007c02cdfc55a10a0017000600a42603600e12080006ba0474f701a8000100fe80ffff7f6f94007134cf6efb8000a007a290457f01890500277ce06bbaceac3c2fb14c2ee5a7a3aab62f00001fb71b14d6d930dfe1d9d322fe7c2e8771820d16a4683f5aeb4edbb5952a0f536ffd77500db798262f3d409c1f40cb9f92b74f51fad9e3bb9ad809d5e1cace0d81ed0b764434a19789bf0cffece0b4129ecbee5de6ccd4e1ffffffffc2c9b627430600007c388b0dd6e4edef3d93000020000000000000", 0xd8}], 0x1}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r6, r3, 0x0, r3}, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.331613681s ago: executing program 3 (id=2820): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='devlink_hwerr\x00', r0}, 0x11) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) 1.305168642s ago: executing program 0 (id=2821): mkdir(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)}, 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}, {&(0x7f0000000080)}], 0x2}, 0x20000004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x9}, 0x8) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000010000000000000000000000000400000000000e0ca211"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)=""/4080, 0xff0}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x2}, 0x10002) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xff0f000020000080) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000300)=""/234, 0x0, 0xea, 0x1, 0x9, 0x10000, @value=r5}, 0x28) close(r4) 1.196321457s ago: executing program 1 (id=2822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x7, 0x0, &(0x7f0000000000)="259a53f271a76d", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 954.342978ms ago: executing program 2 (id=2823): mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)}, 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}, {&(0x7f0000000080)}], 0x2}, 0x20000004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x9}, 0x8) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000010000000000000000000000000400000000000e0ca211"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)=""/4080, 0xff0}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x2}, 0x10002) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xff0f000020000080) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000300)=""/234, 0x0, 0xea, 0x1, 0x9, 0x10000, @value=r7}, 0x28) close(r6) 893.400661ms ago: executing program 1 (id=2824): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4800) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x30000800) close(r0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000800) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)={[{0x6f8d3fdef62695a0, 'blkio'}]}, 0x7) syz_clone(0x800a000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0xc5bf) socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 591.009434ms ago: executing program 0 (id=2825): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000002c00)="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", 0x2f2}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x0) 316.422086ms ago: executing program 3 (id=2826): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeaff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x6, 0x8, 0x0, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\t\x00\x00\x00\f\x00\x00\x00B\x00\x00\x00@'], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r5}, 0x38) 297.434947ms ago: executing program 0 (id=2827): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000180)="ff138bd7abfd06ff106c3ed990f7", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x17, &(0x7f0000000200)=r4, 0x21) r5 = socket$kcm(0x25, 0x5, 0x0) recvmsg(r5, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x21) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r6, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0xaf, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0xf9, 0x16, 0x2, 0x0, 0x3, 0x14, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x4080, 0x6, 0x6, 0x2, 0x1, 0x979, 0x8, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="00000000000000006600ffffff80000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/206}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) 137.148814ms ago: executing program 2 (id=2828): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x6b7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@tipc=@id, 0xc, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x182, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x82, 0x0, 0x0, 0x0, 0x8}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r5, 0x3, 0x16, 0xffffffdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x80, 0x4, 0x1, 0x1, 0xa, 0x0, 0xdc1, 0x20000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0x2000, 0x33d, 0xffffffff, 0x7, 0x0, 0x32d, 0x1, 0x0, 0x7, 0x0, 0x8001}, r1, 0xc, 0xffffffffffffffff, 0x5) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffaecd, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000100000c0c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fffffffffffffff, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0xff, 0x0, 0x0, 0x5, 0x60000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0xa, 0x3, 0x87, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0x81, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) 71.366637ms ago: executing program 1 (id=2829): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.numa_stat\x00', 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0xfdef) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='sched_switch\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r5}, 0x18) close(r0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x401}, 0x108b84, 0x520, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x28402, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) 0s ago: executing program 3 (id=2830): mkdir(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)}, 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}, {&(0x7f0000000080)}], 0x2}, 0x20000004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x9}, 0x8) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000010000000000000000000000000400000000000e0ca211"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)=""/4080, 0xff0}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x2}, 0x10002) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xff0f000020000080) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000300)=""/234, 0x0, 0xea, 0x1, 0x9, 0x10000, @value=r5}, 0x28) close(r4) kernel console output (not intermixed with test programs): 00007f31663e6090 R15: 00007fffa133d448 [ 261.411784][ T9320] [ 261.488583][ T9322] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1203'. [ 261.663800][ T9331] netlink: 'syz.0.1204': attribute type 10 has an invalid length. [ 261.717905][ T9334] netlink: 'syz.3.1206': attribute type 21 has an invalid length. [ 261.754759][ T9334] netlink: 'syz.3.1206': attribute type 6 has an invalid length. [ 261.775948][ T9334] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1206'. [ 261.937125][ T9340] netlink: 'syz.1.1207': attribute type 29 has an invalid length. [ 261.985155][ T9340] netlink: 'syz.1.1207': attribute type 29 has an invalid length. [ 262.167012][ T9344] netlink: 'syz.0.1209': attribute type 10 has an invalid length. [ 262.193930][ T9344] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1209'. [ 262.760426][ T9352] netlink: 'syz.3.1212': attribute type 10 has an invalid length. [ 263.094708][ T9355] netlink: 'syz.2.1213': attribute type 21 has an invalid length. [ 263.103909][ T9355] netlink: 'syz.2.1213': attribute type 6 has an invalid length. [ 263.114871][ T9355] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1213'. [ 263.145512][ T9358] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 263.686800][ T9373] FAULT_INJECTION: forcing a failure. [ 263.686800][ T9373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.705188][ T9373] CPU: 1 PID: 9373 Comm: syz.0.1218 Not tainted syzkaller #0 [ 263.712691][ T9373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.722804][ T9373] Call Trace: [ 263.726138][ T9373] [ 263.729111][ T9373] dump_stack_lvl+0x16c/0x230 [ 263.733912][ T9373] ? show_regs_print_info+0x20/0x20 [ 263.739159][ T9373] ? load_image+0x3b0/0x3b0 [ 263.743706][ T9373] ? __lock_acquire+0x7c80/0x7c80 [ 263.748796][ T9373] should_fail_ex+0x39d/0x4d0 [ 263.753532][ T9373] _copy_from_user+0x2f/0xe0 [ 263.758174][ T9373] __copy_msghdr+0x3bb/0x580 [ 263.762823][ T9373] ___sys_sendmsg+0x1a6/0x290 [ 263.767557][ T9373] ? __sys_sendmsg+0x270/0x270 [ 263.772435][ T9373] ? __lock_acquire+0x7c80/0x7c80 [ 263.777575][ T9373] __se_sys_sendmsg+0x1a5/0x270 [ 263.782476][ T9373] ? __x64_sys_sendmsg+0x80/0x80 [ 263.787502][ T9373] ? lockdep_hardirqs_on+0x98/0x150 [ 263.792744][ T9373] do_syscall_64+0x55/0xb0 [ 263.797218][ T9373] ? clear_bhb_loop+0x40/0x90 [ 263.801935][ T9373] ? clear_bhb_loop+0x40/0x90 [ 263.806655][ T9373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.812582][ T9373] RIP: 0033:0x7f1af058f749 [ 263.817039][ T9373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.836684][ T9373] RSP: 002b:00007f1af1462038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.845144][ T9373] RAX: ffffffffffffffda RBX: 00007f1af07e5fa0 RCX: 00007f1af058f749 [ 263.853156][ T9373] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 263.861156][ T9373] RBP: 00007f1af1462090 R08: 0000000000000000 R09: 0000000000000000 [ 263.869165][ T9373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.877165][ T9373] R13: 00007f1af07e6038 R14: 00007f1af07e5fa0 R15: 00007ffcb16a1638 [ 263.885207][ T9373] [ 264.171805][ T9378] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1220'. [ 264.399167][ T9386] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.1223'. [ 264.617201][ T9394] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1225'. [ 265.175376][ T2955] wlan1: Trigger new scan to find an IBSS to join [ 265.485710][ T9404] syz.0.1228: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 265.504203][ T9404] CPU: 0 PID: 9404 Comm: syz.0.1228 Not tainted syzkaller #0 [ 265.511642][ T9404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.521729][ T9404] Call Trace: [ 265.525058][ T9404] [ 265.528043][ T9404] dump_stack_lvl+0x16c/0x230 [ 265.532767][ T9404] ? show_regs_print_info+0x20/0x20 [ 265.538020][ T9404] ? load_image+0x3b0/0x3b0 [ 265.542565][ T9404] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 265.549017][ T9404] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 265.555569][ T9404] warn_alloc+0x210/0x300 [ 265.559939][ T9404] ? stack_trace_save+0x9c/0xe0 [ 265.564918][ T9404] ? zone_watermark_ok_safe+0x230/0x230 [ 265.570512][ T9404] ? kasan_set_track+0x5f/0x70 [ 265.575399][ T9404] ? kasan_set_track+0x4e/0x70 [ 265.580185][ T9404] ? __kasan_kmalloc+0x8f/0xa0 [ 265.584973][ T9404] ? xsk_init_queue+0xb0/0x110 [ 265.589793][ T9404] ? xsk_setsockopt+0x4db/0x6f0 [ 265.594663][ T9404] ? do_sock_setsockopt+0x175/0x1a0 [ 265.599905][ T9404] ? __x64_sys_setsockopt+0x184/0x200 [ 265.605312][ T9404] __vmalloc_node_range+0x126/0x1320 [ 265.610663][ T9404] ? free_vm_area+0x50/0x50 [ 265.615198][ T9404] vmalloc_user+0x74/0x80 [ 265.619549][ T9404] ? xskq_create+0xbf/0x170 [ 265.624069][ T9404] xskq_create+0xbf/0x170 [ 265.628439][ T9404] xsk_init_queue+0xb0/0x110 [ 265.633047][ T9404] xsk_setsockopt+0x4db/0x6f0 [ 265.637743][ T9404] ? xsk_poll+0x670/0x670 [ 265.642269][ T9404] ? __fget_files+0x28/0x4d0 [ 265.646882][ T9404] ? aa_sock_opt_perm+0x74/0x100 [ 265.651863][ T9404] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 265.657445][ T9404] ? security_socket_setsockopt+0x7e/0xa0 [ 265.663185][ T9404] ? xsk_poll+0x670/0x670 [ 265.667544][ T9404] do_sock_setsockopt+0x175/0x1a0 [ 265.672606][ T9404] ? __fdget+0x180/0x210 [ 265.676974][ T9404] __x64_sys_setsockopt+0x184/0x200 [ 265.682216][ T9404] do_syscall_64+0x55/0xb0 [ 265.686677][ T9404] ? clear_bhb_loop+0x40/0x90 [ 265.691398][ T9404] ? clear_bhb_loop+0x40/0x90 [ 265.696094][ T9404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.702004][ T9404] RIP: 0033:0x7f1af058f749 [ 265.706439][ T9404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.726066][ T9404] RSP: 002b:00007f1af1462038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 265.734503][ T9404] RAX: ffffffffffffffda RBX: 00007f1af07e5fa0 RCX: 00007f1af058f749 [ 265.742538][ T9404] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 265.750547][ T9404] RBP: 00007f1af0613f91 R08: 0000000000000004 R09: 0000000000000000 [ 265.758535][ T9404] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 265.766554][ T9404] R13: 00007f1af07e6038 R14: 00007f1af07e5fa0 R15: 00007ffcb16a1638 [ 265.774580][ T9404] [ 265.805419][ T9404] Mem-Info: [ 265.808747][ T9404] active_anon:6570 inactive_anon:0 isolated_anon:0 [ 265.808747][ T9404] active_file:17731 inactive_file:39949 isolated_file:0 [ 265.808747][ T9404] unevictable:768 dirty:173 writeback:0 [ 265.808747][ T9404] slab_reclaimable:10190 slab_unreclaimable:95576 [ 265.808747][ T9404] mapped:24621 shmem:1361 pagetables:523 [ 265.808747][ T9404] sec_pagetables:0 bounce:0 [ 265.808747][ T9404] kernel_misc_reclaimable:0 [ 265.808747][ T9404] free:1344462 free_pcp:10926 free_cma:0 [ 265.873603][ T9404] Node 0 active_anon:26380kB inactive_anon:0kB active_file:70924kB inactive_file:159592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98484kB dirty:688kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11316kB pagetables:2092kB sec_pagetables:0kB all_unreclaimable? no [ 265.906955][ T9404] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 265.962575][ T9404] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 266.035485][ T9404] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 266.045760][ T9404] Node 0 DMA32 free:1472760kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:26332kB inactive_anon:0kB active_file:70924kB inactive_file:158276kB unevictable:1536kB writepending:688kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:22128kB local_pcp:20352kB free_cma:0kB [ 266.079048][ T9404] lowmem_reserve[]: 0 0 1 1 1 [ 266.084054][ T9404] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 266.120094][ T9419] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1232'. [ 266.154561][ T9404] lowmem_reserve[]: 0 0 0 0 0 [ 266.159594][ T9404] Node 1 Normal free:3889484kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21092kB local_pcp:9280kB free_cma:0kB [ 266.191494][ T9418] FAULT_INJECTION: forcing a failure. [ 266.191494][ T9418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.217985][ T9418] CPU: 0 PID: 9418 Comm: syz.2.1233 Not tainted syzkaller #0 [ 266.225441][ T9418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 266.235533][ T9418] Call Trace: [ 266.238849][ T9418] [ 266.241826][ T9418] dump_stack_lvl+0x16c/0x230 [ 266.246555][ T9418] ? show_regs_print_info+0x20/0x20 [ 266.251809][ T9418] ? load_image+0x3b0/0x3b0 [ 266.254580][ T9404] lowmem_reserve[]: [ 266.256343][ T9418] ? __lock_acquire+0x7c80/0x7c80 [ 266.260180][ T9404] 0 [ 266.265193][ T9418] ? snprintf+0xdb/0x120 [ 266.265220][ T9418] should_fail_ex+0x39d/0x4d0 [ 266.265255][ T9418] _copy_to_user+0x2f/0xa0 [ 266.265282][ T9418] simple_read_from_buffer+0xe7/0x150 [ 266.265319][ T9418] proc_fail_nth_read+0x1e3/0x250 [ 266.291822][ T9418] ? proc_fault_inject_write+0x340/0x340 [ 266.297490][ T9418] ? fsnotify_perm+0x271/0x5e0 [ 266.302373][ T9418] ? proc_fault_inject_write+0x340/0x340 [ 266.308030][ T9418] vfs_read+0x27e/0x920 [ 266.312215][ T9418] ? kernel_read+0x1e0/0x1e0 [ 266.316830][ T9418] ? __fget_files+0x28/0x4d0 [ 266.321459][ T9418] ? __fget_files+0x44a/0x4d0 [ 266.326163][ T9418] ? __fdget_pos+0x2a3/0x330 [ 266.330769][ T9418] ? ksys_read+0x75/0x250 [ 266.335124][ T9418] ksys_read+0x147/0x250 [ 266.339387][ T9418] ? vfs_write+0x940/0x940 [ 266.343827][ T9418] ? syscall_enter_from_user_mode+0x2e/0x80 [ 266.349772][ T9418] do_syscall_64+0x55/0xb0 [ 266.354310][ T9418] ? clear_bhb_loop+0x40/0x90 [ 266.359032][ T9418] ? clear_bhb_loop+0x40/0x90 [ 266.363730][ T9418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.369857][ T9418] RIP: 0033:0x7ff26818e15c [ 266.374364][ T9418] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 266.394086][ T9418] RSP: 002b:00007ff269073030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.402518][ T9418] RAX: ffffffffffffffda RBX: 00007ff2683e5fa0 RCX: 00007ff26818e15c [ 266.410507][ T9418] RDX: 000000000000000f RSI: 00007ff2690730a0 RDI: 000000000000002c [ 266.418493][ T9418] RBP: 00007ff269073090 R08: 0000000000000000 R09: 0000000000000000 [ 266.426475][ T9418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.434465][ T9418] R13: 00007ff2683e6038 R14: 00007ff2683e5fa0 R15: 00007fffd33f7888 [ 266.442479][ T9418] [ 266.454465][ T9404] 0 0 0 0 [ 266.470087][ T9404] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 266.500613][ T9404] Node 0 DMA32: 2572*4kB (UME) 1470*8kB (UME) 928*16kB (UME) 1182*32kB (UME) 473*64kB (UME) 88*128kB (UME) 55*256kB (UME) 35*512kB (UME) 14*1024kB (UM) 6*2048kB (UME) 322*4096kB (UM) = 1493792kB [ 266.525833][ T9422] validate_nla: 6 callbacks suppressed [ 266.525868][ T9422] netlink: 'syz.1.1234': attribute type 10 has an invalid length. [ 266.539849][ T9404] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 266.557782][ T9404] Node 1 Normal: 255*4kB (UME) 42*8kB (UME) 40*16kB (UME) 90*32kB (UME) 25*64kB (UE) 6*128kB (UM) 1*256kB (E) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 946*4096kB (M) = 3889484kB [ 266.584622][ T9404] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.640749][ T9404] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.659646][ T9404] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.669955][ T9404] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.688410][ T9404] 59041 total pagecache pages [ 266.694040][ T9404] 0 pages in swap cache [ 266.701737][ T9404] Free swap = 124996kB [ 266.707451][ T9404] Total swap = 124996kB [ 266.711655][ T9404] 2097051 pages RAM [ 266.719149][ T9404] 0 pages HighMem/MovableOnly [ 266.723862][ T9404] 416137 pages reserved [ 266.741257][ T9404] 0 pages cma reserved [ 266.941261][ T9430] netlink: 'syz.2.1236': attribute type 10 has an invalid length. [ 267.044303][ T9437] netlink: 'syz.1.1239': attribute type 10 has an invalid length. [ 267.074806][ T9437] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1239'. [ 267.514988][ T9444] FAULT_INJECTION: forcing a failure. [ 267.514988][ T9444] name failslab, interval 1, probability 0, space 0, times 0 [ 267.571361][ T9444] CPU: 0 PID: 9444 Comm: syz.2.1240 Not tainted syzkaller #0 [ 267.578810][ T9444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 267.588917][ T9444] Call Trace: [ 267.592234][ T9444] [ 267.595209][ T9444] dump_stack_lvl+0x16c/0x230 [ 267.599944][ T9444] ? show_regs_print_info+0x20/0x20 [ 267.605196][ T9444] ? load_image+0x3b0/0x3b0 [ 267.609751][ T9444] ? __might_sleep+0xe0/0xe0 [ 267.614398][ T9444] ? __lock_acquire+0x7c80/0x7c80 [ 267.619465][ T9444] ? rcu_is_watching+0x15/0xb0 [ 267.624276][ T9444] should_fail_ex+0x39d/0x4d0 [ 267.629009][ T9444] should_failslab+0x9/0x20 [ 267.633560][ T9444] slab_pre_alloc_hook+0x59/0x310 [ 267.638635][ T9444] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 267.644666][ T9444] __kmem_cache_alloc_node+0x53/0x260 [ 267.650081][ T9444] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 267.656025][ T9444] kmalloc_trace+0x2a/0xe0 [ 267.660494][ T9444] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 267.666276][ T9444] sctp_association_new+0x15d3/0x25c0 [ 267.671720][ T9444] sctp_connect_new_asoc+0x2bf/0x690 [ 267.677071][ T9444] ? __sctp_connect+0xd20/0xd20 [ 267.681980][ T9444] ? bpf_lsm_sctp_assoc_request+0x10/0x10 [ 267.687747][ T9444] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 267.693343][ T9444] ? security_sctp_bind_connect+0x89/0xb0 [ 267.699123][ T9444] sctp_sendmsg+0x155c/0x27e0 [ 267.703881][ T9444] ? sctp_getsockopt+0xb60/0xb60 [ 267.708880][ T9444] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 267.715077][ T9444] ? lockdep_hardirqs_on+0x98/0x150 [ 267.720337][ T9444] ? inet_sendmsg+0xde/0x2f0 [ 267.724999][ T9444] ? inet_sendmsg+0xe9/0x2f0 [ 267.729650][ T9444] ? inet_send_prepare+0x260/0x260 [ 267.734805][ T9444] ____sys_sendmsg+0x5bf/0x950 [ 267.739626][ T9444] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 267.745841][ T9444] ? __asan_memset+0x22/0x40 [ 267.750477][ T9444] ? __sys_sendmsg_sock+0x30/0x30 [ 267.755575][ T9444] ? __import_iovec+0x5f2/0x860 [ 267.760482][ T9444] ? import_iovec+0x73/0xa0 [ 267.765137][ T9444] ___sys_sendmsg+0x220/0x290 [ 267.769871][ T9444] ? __sys_sendmsg+0x270/0x270 [ 267.774685][ T9444] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 267.780725][ T9444] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 267.786922][ T9444] ? lockdep_hardirqs_on+0x98/0x150 [ 267.792173][ T9444] ? __sanitizer_cov_trace_pc+0x17/0x60 [ 267.797775][ T9444] __se_sys_sendmsg+0x1a5/0x270 [ 267.802688][ T9444] ? __x64_sys_sendmsg+0x80/0x80 [ 267.807724][ T9444] do_syscall_64+0x55/0xb0 [ 267.812191][ T9444] ? clear_bhb_loop+0x40/0x90 [ 267.816907][ T9444] ? clear_bhb_loop+0x40/0x90 [ 267.821657][ T9444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.827595][ T9444] RIP: 0033:0x7ff26818f749 [ 267.832043][ T9444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.851697][ T9444] RSP: 002b:00007ff269073038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.860264][ T9444] RAX: ffffffffffffffda RBX: 00007ff2683e5fa0 RCX: 00007ff26818f749 [ 267.868290][ T9444] RDX: 0000000000008040 RSI: 0000200000002700 RDI: 0000000000000006 [ 267.876307][ T9444] RBP: 00007ff269073090 R08: 0000000000000000 R09: 0000000000000000 [ 267.884324][ T9444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.892336][ T9444] R13: 00007ff2683e6038 R14: 00007ff2683e5fa0 R15: 00007fffd33f7888 [ 267.900371][ T9444] [ 268.188840][ T9449] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1241'. [ 268.738128][ T9471] netlink: 'syz.2.1248': attribute type 10 has an invalid length. [ 268.754296][ T9475] netlink: 'syz.0.1250': attribute type 10 has an invalid length. [ 268.775601][ T9475] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1250'. [ 268.788343][ T9477] netlink: 'syz.1.1249': attribute type 10 has an invalid length. [ 269.157362][ T59] wlan1: Trigger new scan to find an IBSS to join [ 269.470272][ T9498] FAULT_INJECTION: forcing a failure. [ 269.470272][ T9498] name failslab, interval 1, probability 0, space 0, times 0 [ 269.514017][ T9498] CPU: 1 PID: 9498 Comm: syz.1.1256 Not tainted syzkaller #0 [ 269.521482][ T9498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 269.531591][ T9498] Call Trace: [ 269.534906][ T9498] [ 269.537872][ T9498] dump_stack_lvl+0x16c/0x230 [ 269.542595][ T9498] ? show_regs_print_info+0x20/0x20 [ 269.547847][ T9498] ? load_image+0x3b0/0x3b0 [ 269.552403][ T9498] ? __might_sleep+0xe0/0xe0 [ 269.557049][ T9498] ? __lock_acquire+0x7c80/0x7c80 [ 269.562118][ T9498] should_fail_ex+0x39d/0x4d0 [ 269.566852][ T9498] should_failslab+0x9/0x20 [ 269.571404][ T9498] slab_pre_alloc_hook+0x59/0x310 [ 269.576510][ T9498] ? percpu_ref_put+0x12/0x100 [ 269.581323][ T9498] ? apparmor_sk_alloc_security+0x77/0x100 [ 269.587166][ T9498] __kmem_cache_alloc_node+0x53/0x260 [ 269.592591][ T9498] ? apparmor_sk_alloc_security+0x77/0x100 [ 269.598446][ T9498] kmalloc_trace+0x2a/0xe0 [ 269.602907][ T9498] apparmor_sk_alloc_security+0x77/0x100 [ 269.608578][ T9498] security_sk_alloc+0x6e/0xa0 [ 269.613380][ T9498] sk_prot_alloc+0x101/0x210 [ 269.618029][ T9498] sk_alloc+0x3a/0x360 [ 269.622152][ T9498] inet_create+0x7a0/0xfe0 [ 269.626612][ T9498] ? inet_create+0x9c/0xfe0 [ 269.631202][ T9498] __sock_create+0x4a6/0x940 [ 269.635856][ T9498] udp_sock_create4+0xbf/0x4b0 [ 269.640673][ T9498] ? erspan_exit_batch_net+0x30/0x30 [ 269.646029][ T9498] rxrpc_lookup_local+0xccb/0x1550 [ 269.651196][ T9498] ? rxrpc_local_dont_fragment+0x70/0x70 [ 269.656878][ T9498] ? lockdep_hardirqs_on+0x98/0x150 [ 269.662120][ T9498] ? _local_bh_enable+0xa0/0xa0 [ 269.667020][ T9498] rxrpc_sendmsg+0x30a/0x5b0 [ 269.671662][ T9498] ? rxrpc_getsockopt+0x150/0x150 [ 269.676732][ T9498] ____sys_sendmsg+0x5bf/0x950 [ 269.681558][ T9498] ? __sys_sendmsg_sock+0x30/0x30 [ 269.686635][ T9498] ? __import_iovec+0x3fa/0x860 [ 269.691555][ T9498] ? import_iovec+0x73/0xa0 [ 269.696215][ T9498] ___sys_sendmsg+0x220/0x290 [ 269.700949][ T9498] ? __sys_sendmsg+0x270/0x270 [ 269.705791][ T9498] ? __lock_acquire+0x7c80/0x7c80 [ 269.710891][ T9498] __se_sys_sendmsg+0x1a5/0x270 [ 269.715808][ T9498] ? __x64_sys_sendmsg+0x80/0x80 [ 269.720813][ T9498] ? lockdep_hardirqs_on+0x98/0x150 [ 269.726081][ T9498] do_syscall_64+0x55/0xb0 [ 269.730557][ T9498] ? clear_bhb_loop+0x40/0x90 [ 269.735279][ T9498] ? clear_bhb_loop+0x40/0x90 [ 269.740004][ T9498] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.745942][ T9498] RIP: 0033:0x7f316618f749 [ 269.750394][ T9498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.770034][ T9498] RSP: 002b:00007f3166f8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.778506][ T9498] RAX: ffffffffffffffda RBX: 00007f31663e5fa0 RCX: 00007f316618f749 [ 269.786504][ T9498] RDX: 0000000000000000 RSI: 0000200000002780 RDI: 0000000000000003 [ 269.794498][ T9498] RBP: 00007f3166f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 269.802491][ T9498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.810483][ T9498] R13: 00007f31663e6038 R14: 00007f31663e5fa0 R15: 00007fffa133d448 [ 269.818495][ T9498] [ 269.903292][ T9499] netlink: 'syz.2.1254': attribute type 29 has an invalid length. [ 270.984956][ T9499] netlink: 'syz.2.1254': attribute type 29 has an invalid length. [ 271.005301][ T1127] wlan1: Creating new IBSS network, BSSID de:1a:e7:19:d8:0d [ 271.080684][ T9514] netlink: 'syz.1.1260': attribute type 10 has an invalid length. [ 271.357820][ T9520] netlink: 'syz.0.1261': attribute type 10 has an invalid length. [ 271.392436][ T9519] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1262'. [ 271.820288][ T9532] FAULT_INJECTION: forcing a failure. [ 271.820288][ T9532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.853049][ T9532] CPU: 0 PID: 9532 Comm: syz.2.1266 Not tainted syzkaller #0 [ 271.860499][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 271.870599][ T9532] Call Trace: [ 271.874041][ T9532] [ 271.877010][ T9532] dump_stack_lvl+0x16c/0x230 [ 271.881742][ T9532] ? show_regs_print_info+0x20/0x20 [ 271.886990][ T9532] ? load_image+0x3b0/0x3b0 [ 271.891544][ T9532] ? __might_fault+0xaa/0x120 [ 271.896269][ T9532] ? __lock_acquire+0x7c80/0x7c80 [ 271.901339][ T9532] should_fail_ex+0x39d/0x4d0 [ 271.906051][ T9532] _copy_to_iter+0x1c8/0x10d0 [ 271.910756][ T9532] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 271.916759][ T9532] ? iov_iter_init+0x1e0/0x1e0 [ 271.921975][ T9532] ? __virt_addr_valid+0x18c/0x540 [ 271.927114][ T9532] ? __virt_addr_valid+0x469/0x540 [ 271.932246][ T9532] ? __phys_addr_symbol+0x2f/0x70 [ 271.937294][ T9532] __skb_datagram_iter+0xdb/0x780 [ 271.942341][ T9532] ? skb_copy_datagram_iter+0x200/0x200 [ 271.947918][ T9532] skb_copy_datagram_iter+0xb1/0x200 [ 271.953228][ T9532] ip_recv_error+0x141/0xbc0 [ 271.957857][ T9532] ? __lock_acquire+0x1334/0x7c80 [ 271.962901][ T9532] ? aa_sk_perm+0x930/0x930 [ 271.967441][ T9532] ? ip_local_error+0x600/0x600 [ 271.972318][ T9532] ? inet_recv_error+0xa6/0x100 [ 271.977183][ T9532] tcp_recvmsg+0x60a/0x810 [ 271.981624][ T9532] ? tcp_recv_timestamp+0x6c0/0x6c0 [ 271.986871][ T9532] ? aa_sk_perm+0x7fc/0x930 [ 271.991395][ T9532] inet_recvmsg+0x130/0x1e0 [ 271.995913][ T9532] ? inet_splice_eof+0x2e0/0x2e0 [ 272.000869][ T9532] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 272.006198][ T9532] ? security_socket_recvmsg+0x89/0xb0 [ 272.011672][ T9532] ? inet_splice_eof+0x2e0/0x2e0 [ 272.016633][ T9532] ____sys_recvmsg+0x29e/0x5b0 [ 272.021443][ T9532] ? __sys_recvmsg_sock+0x50/0x50 [ 272.026519][ T9532] ? import_iovec+0x73/0xa0 [ 272.031056][ T9532] ___sys_recvmsg+0x1b6/0x510 [ 272.035763][ T9532] ? __sys_recvmsg+0x270/0x270 [ 272.040563][ T9532] ? ksys_write+0x1c1/0x250 [ 272.045108][ T9532] ? __fget_files+0x44a/0x4d0 [ 272.049823][ T9532] __x64_sys_recvmsg+0x1f2/0x2c0 [ 272.054788][ T9532] ? ___sys_recvmsg+0x510/0x510 [ 272.059673][ T9532] ? lockdep_hardirqs_on+0x98/0x150 [ 272.064890][ T9532] do_syscall_64+0x55/0xb0 [ 272.069328][ T9532] ? clear_bhb_loop+0x40/0x90 [ 272.074014][ T9532] ? clear_bhb_loop+0x40/0x90 [ 272.078712][ T9532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.084622][ T9532] RIP: 0033:0x7ff26818f749 [ 272.089057][ T9532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.108679][ T9532] RSP: 002b:00007ff269073038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 272.117115][ T9532] RAX: ffffffffffffffda RBX: 00007ff2683e5fa0 RCX: 00007ff26818f749 [ 272.125115][ T9532] RDX: 0000000040002020 RSI: 0000200000000080 RDI: 0000000000000003 [ 272.133099][ T9532] RBP: 00007ff269073090 R08: 0000000000000000 R09: 0000000000000000 [ 272.141084][ T9532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.149072][ T9532] R13: 00007ff2683e6038 R14: 00007ff2683e5fa0 R15: 00007fffd33f7888 [ 272.157070][ T9532] [ 272.305228][ T9539] FAULT_INJECTION: forcing a failure. [ 272.305228][ T9539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.328984][ T9539] CPU: 0 PID: 9539 Comm: syz.1.1269 Not tainted syzkaller #0 [ 272.336443][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 272.346541][ T9539] Call Trace: [ 272.349856][ T9539] [ 272.350178][ T9536] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1268'. [ 272.352803][ T9539] dump_stack_lvl+0x16c/0x230 [ 272.352843][ T9539] ? show_regs_print_info+0x20/0x20 [ 272.352873][ T9539] ? load_image+0x3b0/0x3b0 [ 272.352900][ T9539] ? __might_fault+0xaa/0x120 [ 272.352922][ T9539] ? __lock_acquire+0x7c80/0x7c80 [ 272.380166][ T9541] validate_nla: 1 callbacks suppressed [ 272.380204][ T9541] netlink: 'syz.2.1270': attribute type 10 has an invalid length. [ 272.380943][ T9539] should_fail_ex+0x39d/0x4d0 [ 272.380990][ T9539] _copy_to_user+0x2f/0xa0 [ 272.381020][ T9539] bpf_test_finish+0x19a/0x620 [ 272.413253][ T9539] ? convert___skb_to_skb+0x590/0x590 [ 272.418647][ T9539] ? convert_skb_to___skb+0x420/0x420 [ 272.424042][ T9539] ? slab_build_skb+0x25f/0x3f0 [ 272.428918][ T9539] bpf_prog_test_run_skb+0xc28/0x11c0 [ 272.434384][ T9539] ? cpu_online+0x60/0x60 [ 272.438773][ T9539] bpf_prog_test_run+0x321/0x390 [ 272.443773][ T9539] __sys_bpf+0x440/0x800 [ 272.448056][ T9539] ? bpf_link_show_fdinfo+0x350/0x350 [ 272.453467][ T9539] ? lock_chain_count+0x20/0x20 [ 272.458386][ T9539] __x64_sys_bpf+0x7c/0x90 [ 272.462831][ T9539] do_syscall_64+0x55/0xb0 [ 272.467275][ T9539] ? clear_bhb_loop+0x40/0x90 [ 272.472061][ T9539] ? clear_bhb_loop+0x40/0x90 [ 272.476756][ T9539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.482668][ T9539] RIP: 0033:0x7f316618f749 [ 272.487100][ T9539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.506735][ T9539] RSP: 002b:00007f3166f8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 272.515177][ T9539] RAX: ffffffffffffffda RBX: 00007f31663e5fa0 RCX: 00007f316618f749 [ 272.523180][ T9539] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 272.531168][ T9539] RBP: 00007f3166f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 272.539159][ T9539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.547145][ T9539] R13: 00007f31663e6038 R14: 00007f31663e5fa0 R15: 00007fffa133d448 [ 272.555141][ T9539] [ 272.810656][ T9548] netlink: 'syz.0.1272': attribute type 10 has an invalid length. [ 272.869616][ T9548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.896762][ T9548] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 272.907268][ T9550] netlink: 'syz.1.1273': attribute type 10 has an invalid length. [ 272.918889][ T9549] netlink: 'syz.0.1272': attribute type 10 has an invalid length. [ 272.927125][ T9549] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1272'. [ 272.936697][ T9549] batadv0: entered promiscuous mode [ 272.942671][ T9549] batadv0: entered allmulticast mode [ 272.950522][ T9549] bond0: (slave batadv0): Releasing backup interface [ 272.975584][ T9549] bridge0: port 4(batadv0) entered blocking state [ 273.000449][ T9549] bridge0: port 4(batadv0) entered disabled state [ 273.130515][ T9559] netlink: 'syz.1.1277': attribute type 10 has an invalid length. [ 273.150105][ T9559] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1277'. [ 273.196330][ T1132] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 273.206127][ T1132] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 273.270465][ T9567] netlink: 'syz.0.1279': attribute type 10 has an invalid length. [ 273.448909][ T9575] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1283'. [ 273.494175][ T9578] syz.0.1282[9578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.494909][ T9578] syz.0.1282[9578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.516463][ T9578] netlink: 'syz.0.1282': attribute type 10 has an invalid length. [ 273.536565][ T9578] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1282'. [ 273.700241][ T9586] syz.2.1285[9586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.700392][ T9586] syz.2.1285[9586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.775136][ T9591] netlink: 'syz.2.1285': attribute type 10 has an invalid length. [ 273.823973][ T9591] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1285'. [ 273.850294][ T9591] dummy0: left allmulticast mode [ 273.865963][ T9591] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 273.904793][ T9592] netlink: 'syz.0.1287': attribute type 10 has an invalid length. [ 274.101755][ T9603] syz.0.1292[9603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.101905][ T9603] syz.0.1292[9603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.140926][ T9601] netlink: 'syz.3.1291': attribute type 10 has an invalid length. [ 274.170853][ T9603] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1292'. [ 274.170892][ T9603] FAULT_INJECTION: forcing a failure. [ 274.170892][ T9603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.170930][ T9603] CPU: 1 PID: 9603 Comm: syz.0.1292 Not tainted syzkaller #0 [ 274.170959][ T9603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 274.170981][ T9603] Call Trace: [ 274.170999][ T9603] [ 274.171017][ T9603] dump_stack_lvl+0x16c/0x230 [ 274.171065][ T9603] ? show_regs_print_info+0x20/0x20 [ 274.171111][ T9603] ? load_image+0x3b0/0x3b0 [ 274.171160][ T9603] should_fail_ex+0x39d/0x4d0 [ 274.171209][ T9603] copy_to_user_nofault+0x85/0x140 [ 274.171254][ T9603] bpf_prog_19072b5a3fcf5d64+0x40/0x44 [ 274.171291][ T9603] bpf_trace_run2+0x1d1/0x3c0 [ 274.171321][ T9603] ? put_dec_trunc8+0x1fd/0x340 [ 274.171354][ T9603] ? bpf_trace_run2+0xde/0x3c0 [ 274.171384][ T9603] ? bpf_trace_run1+0x3b0/0x3b0 [ 274.171413][ T9603] ? number+0xd21/0xf70 [ 274.171446][ T9603] ? __bpf_trace_console+0xee/0x160 [ 274.171486][ T9603] __bpf_trace_console+0x103/0x160 [ 274.171524][ T9603] ? perf_trace_console+0x490/0x490 [ 274.171557][ T9603] ? vsnprintf+0x7b2/0x1a40 [ 274.171591][ T9603] ? __asan_memcpy+0x40/0x70 [ 274.171644][ T9603] ? perf_trace_console+0x490/0x490 [ 274.171675][ T9603] __traceiter_console+0x70/0xc0 [ 274.171712][ T9603] printk_sprint+0x402/0x460 [ 274.171751][ T9603] vprintk_store+0x74b/0xc70 [ 274.171797][ T9603] ? printk_parse_prefix+0x3d0/0x3d0 [ 274.171830][ T9603] ? __lock_acquire+0x1260/0x7c80 [ 274.171862][ T9603] ? verify_lock_unused+0x140/0x140 [ 274.171901][ T9603] ? cmp_ex_search+0x1e/0x80 [ 274.171943][ T9603] ? search_extable+0xd0/0xd0 [ 274.171994][ T9603] ? mark_lock+0x94/0x320 [ 274.172031][ T9603] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 274.172073][ T9603] vprintk_emit+0x11f/0x600 [ 274.172118][ T9603] ? printk_sprint+0x460/0x460 [ 274.172154][ T9603] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 274.172188][ T9603] ? _raw_spin_unlock+0x40/0x40 [ 274.172232][ T9603] _printk+0xd0/0x110 [ 274.172273][ T9603] ? load_image+0x3b0/0x3b0 [ 274.172322][ T9603] __nla_validate_parse+0x272f/0x2fa0 [ 274.172365][ T9603] ? verify_lock_unused+0x140/0x140 [ 274.172419][ T9603] ? mark_lock+0x94/0x320 [ 274.172452][ T9603] ? __nla_validate+0x50/0x50 [ 274.172493][ T9603] ? mark_lock+0x94/0x320 [ 274.172529][ T9603] ? __lock_acquire+0x1334/0x7c80 [ 274.172588][ T9603] __nla_parse+0x40/0x50 [ 274.172635][ T9603] rtnl_setlink+0x199/0x4b0 [ 274.172681][ T9603] ? rtnl_dump_ifinfo+0x1290/0x1290 [ 274.172724][ T9603] ? __schedule+0x14da/0x44d0 [ 274.172841][ T9603] ? rtnetlink_rcv_msg+0x76f/0xf10 [ 274.172874][ T9603] ? mutex_lock_nested+0x20/0x20 [ 274.172934][ T9603] ? rtnl_dump_ifinfo+0x1290/0x1290 [ 274.172976][ T9603] rtnetlink_rcv_msg+0x7c7/0xf10 [ 274.173009][ T9603] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 274.173040][ T9603] ? lockdep_hardirqs_on+0x98/0x150 [ 274.173072][ T9603] ? rtnetlink_bind+0x80/0x80 [ 274.173109][ T9603] ? perf_trace_preemptirq_template+0xa4/0x340 [ 274.173154][ T9603] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 274.173192][ T9603] ? lock_chain_count+0x20/0x20 [ 274.173229][ T9603] ? __local_bh_enable_ip+0x12e/0x1c0 [ 274.173261][ T9603] ? lockdep_hardirqs_on+0x98/0x150 [ 274.173293][ T9603] ? __local_bh_enable_ip+0x12e/0x1c0 [ 274.173323][ T9603] ? _local_bh_enable+0xa0/0xa0 [ 274.173362][ T9603] ? __dev_queue_xmit+0x245/0x35a0 [ 274.173397][ T9603] ? __dev_queue_xmit+0x1449/0x35a0 [ 274.173448][ T9603] ? __dev_queue_xmit+0x245/0x35a0 [ 274.173494][ T9603] ? ref_tracker_free+0x634/0x7d0 [ 274.173523][ T9603] ? __copy_skb_header+0xa7/0x550 [ 274.173576][ T9603] netlink_rcv_skb+0x216/0x480 [ 274.173616][ T9603] ? rtnetlink_bind+0x80/0x80 [ 274.173648][ T9603] ? netlink_ack+0x1110/0x1110 [ 274.173701][ T9603] ? __lock_acquire+0x7c80/0x7c80 [ 274.173743][ T9603] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.173788][ T9603] netlink_unicast+0x751/0x8d0 [ 274.173838][ T9603] netlink_sendmsg+0x8c1/0xbe0 [ 274.173886][ T9603] ? netlink_getsockopt+0x580/0x580 [ 274.173929][ T9603] ? aa_sock_msg_perm+0x94/0x150 [ 274.173966][ T9603] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 274.174001][ T9603] ? security_socket_sendmsg+0x80/0xa0 [ 274.174033][ T9603] ? netlink_getsockopt+0x580/0x580 [ 274.174070][ T9603] ____sys_sendmsg+0x5bf/0x950 [ 274.174127][ T9603] ? __asan_memset+0x22/0x40 [ 274.174163][ T9603] ? __sys_sendmsg_sock+0x30/0x30 [ 274.174202][ T9603] ? __import_iovec+0x5f2/0x860 [ 274.174253][ T9603] ? import_iovec+0x73/0xa0 [ 274.174298][ T9603] ___sys_sendmsg+0x220/0x290 [ 274.174342][ T9603] ? __sys_sendmsg+0x270/0x270 [ 274.174411][ T9603] ? __lock_acquire+0x7c80/0x7c80 [ 274.174476][ T9603] __se_sys_sendmsg+0x1a5/0x270 [ 274.174521][ T9603] ? __x64_sys_sendmsg+0x80/0x80 [ 274.174583][ T9603] ? lockdep_hardirqs_on+0x98/0x150 [ 274.174618][ T9603] do_syscall_64+0x55/0xb0 [ 274.174653][ T9603] ? clear_bhb_loop+0x40/0x90 [ 274.174684][ T9603] ? clear_bhb_loop+0x40/0x90 [ 274.174719][ T9603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.174750][ T9603] RIP: 0033:0x7f1af058f749 [ 274.174779][ T9603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.174807][ T9603] RSP: 002b:00007f1af1462038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.174849][ T9603] RAX: ffffffffffffffda RBX: 00007f1af07e5fa0 RCX: 00007f1af058f749 [ 274.174874][ T9603] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 274.174898][ T9603] RBP: 00007f1af1462090 R08: 0000000000000000 R09: 0000000000000000 [ 274.174920][ T9603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.174942][ T9603] R13: 00007f1af07e6038 R14: 00007f1af07e5fa0 R15: 00007ffcb16a1638 [ 274.174986][ T9603] [ 274.905728][ T9608] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1293'. [ 275.186832][ T9614] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1294'. [ 275.204820][ T9614] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 275.259678][ T9612] FAULT_INJECTION: forcing a failure. [ 275.259678][ T9612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.280269][ T9612] CPU: 0 PID: 9612 Comm: syz.0.1295 Not tainted syzkaller #0 [ 275.287713][ T9612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 275.297808][ T9612] Call Trace: [ 275.301121][ T9612] [ 275.304093][ T9612] dump_stack_lvl+0x16c/0x230 [ 275.308825][ T9612] ? show_regs_print_info+0x20/0x20 [ 275.314071][ T9612] ? load_image+0x3b0/0x3b0 [ 275.318627][ T9612] ? __might_fault+0xaa/0x120 [ 275.323341][ T9612] ? __lock_acquire+0x7c80/0x7c80 [ 275.328410][ T9612] should_fail_ex+0x39d/0x4d0 [ 275.333141][ T9612] _copy_to_user+0x2f/0xa0 [ 275.337604][ T9612] bpf_test_finish+0x19a/0x620 [ 275.342415][ T9612] ? convert___skb_to_skb+0x590/0x590 [ 275.347828][ T9612] ? convert_skb_to___skb+0x420/0x420 [ 275.353247][ T9612] ? slab_build_skb+0x25f/0x3f0 [ 275.358172][ T9612] bpf_prog_test_run_skb+0xc28/0x11c0 [ 275.363631][ T9612] ? cpu_online+0x60/0x60 [ 275.368005][ T9612] bpf_prog_test_run+0x321/0x390 [ 275.372999][ T9612] __sys_bpf+0x440/0x800 [ 275.377278][ T9612] ? bpf_link_show_fdinfo+0x350/0x350 [ 275.382692][ T9612] ? lock_chain_count+0x20/0x20 [ 275.387576][ T9612] __x64_sys_bpf+0x7c/0x90 [ 275.392021][ T9612] do_syscall_64+0x55/0xb0 [ 275.396465][ T9612] ? clear_bhb_loop+0x40/0x90 [ 275.401167][ T9612] ? clear_bhb_loop+0x40/0x90 [ 275.405869][ T9612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.411779][ T9612] RIP: 0033:0x7f1af058f749 [ 275.416223][ T9612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.435870][ T9612] RSP: 002b:00007f1af1462038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.444300][ T9612] RAX: ffffffffffffffda RBX: 00007f1af07e5fa0 RCX: 00007f1af058f749 [ 275.452300][ T9612] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 275.460323][ T9612] RBP: 00007f1af1462090 R08: 0000000000000000 R09: 0000000000000000 [ 275.468313][ T9612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.476299][ T9612] R13: 00007f1af07e6038 R14: 00007f1af07e5fa0 R15: 00007ffcb16a1638 [ 275.484304][ T9612] [ 275.526889][ T9617] FAULT_INJECTION: forcing a failure. [ 275.526889][ T9617] name failslab, interval 1, probability 0, space 0, times 0 [ 275.552267][ T9617] CPU: 0 PID: 9617 Comm: syz.3.1296 Not tainted syzkaller #0 [ 275.559707][ T9617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 275.569783][ T9617] Call Trace: [ 275.573079][ T9617] [ 275.576117][ T9617] dump_stack_lvl+0x16c/0x230 [ 275.580826][ T9617] ? show_regs_print_info+0x20/0x20 [ 275.586054][ T9617] ? load_image+0x3b0/0x3b0 [ 275.590582][ T9617] ? __might_sleep+0xe0/0xe0 [ 275.595197][ T9617] ? __lock_acquire+0x7c80/0x7c80 [ 275.600275][ T9617] should_fail_ex+0x39d/0x4d0 [ 275.604980][ T9617] should_failslab+0x9/0x20 [ 275.609506][ T9617] slab_pre_alloc_hook+0x59/0x310 [ 275.614554][ T9617] ? tomoyo_encode+0x28b/0x540 [ 275.619339][ T9617] ? tomoyo_encode+0x28b/0x540 [ 275.624124][ T9617] __kmem_cache_alloc_node+0x53/0x260 [ 275.629520][ T9617] ? tomoyo_encode+0x28b/0x540 [ 275.634305][ T9617] __kmalloc+0xa4/0x240 [ 275.638487][ T9617] tomoyo_encode+0x28b/0x540 [ 275.643106][ T9617] tomoyo_realpath_from_path+0x592/0x5d0 [ 275.648774][ T9617] tomoyo_path_number_perm+0x1ea/0x590 [ 275.654257][ T9617] ? tomoyo_path_number_perm+0x1ba/0x590 [ 275.659928][ T9617] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 275.665414][ T9617] ? trace_call_bpf+0x5ba/0x690 [ 275.670313][ T9617] ? __fget_files+0x28/0x4d0 [ 275.674934][ T9617] security_file_ioctl+0x70/0xa0 [ 275.679911][ T9617] __se_sys_ioctl+0x48/0x170 [ 275.684528][ T9617] do_syscall_64+0x55/0xb0 [ 275.688961][ T9617] ? clear_bhb_loop+0x40/0x90 [ 275.693653][ T9617] ? clear_bhb_loop+0x40/0x90 [ 275.698370][ T9617] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.704294][ T9617] RIP: 0033:0x7f0964d8f749 [ 275.708731][ T9617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.728365][ T9617] RSP: 002b:00007f0965bf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.736804][ T9617] RAX: ffffffffffffffda RBX: 00007f0964fe5fa0 RCX: 00007f0964d8f749 [ 275.744791][ T9617] RDX: 0000200000000b00 RSI: 000000000000541b RDI: 0000000000000007 [ 275.752774][ T9617] RBP: 00007f0965bf4090 R08: 0000000000000000 R09: 0000000000000000 [ 275.760761][ T9617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.768747][ T9617] R13: 00007f0964fe6038 R14: 00007f0964fe5fa0 R15: 00007ffe7ac45268 [ 275.776751][ T9617] [ 275.784613][ T9617] ERROR: Out of memory at tomoyo_realpath_from_path. [ 277.302616][ T9680] __nla_validate_parse: 4 callbacks suppressed [ 277.302636][ T9680] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1320'. [ 277.784013][ T9688] FAULT_INJECTION: forcing a failure. [ 277.784013][ T9688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.823327][ T9691] validate_nla: 13 callbacks suppressed [ 277.823344][ T9691] netlink: 'syz.0.1324': attribute type 1 has an invalid length. [ 277.847013][ T9688] CPU: 1 PID: 9688 Comm: syz.2.1323 Not tainted syzkaller #0 [ 277.854466][ T9688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 277.864558][ T9688] Call Trace: [ 277.867873][ T9688] [ 277.870835][ T9688] dump_stack_lvl+0x16c/0x230 [ 277.875563][ T9688] ? show_regs_print_info+0x20/0x20 [ 277.880808][ T9688] ? load_image+0x3b0/0x3b0 [ 277.885359][ T9688] ? __lock_acquire+0x7c80/0x7c80 [ 277.890425][ T9688] should_fail_ex+0x39d/0x4d0 [ 277.895146][ T9688] _copy_from_user+0x2f/0xe0 [ 277.899776][ T9688] __copy_msghdr+0x3bb/0x580 [ 277.904414][ T9688] ___sys_sendmsg+0x1a6/0x290 [ 277.909138][ T9688] ? __sys_sendmsg+0x270/0x270 [ 277.913977][ T9688] ? __lock_acquire+0x7c80/0x7c80 [ 277.919093][ T9688] __se_sys_sendmsg+0x1a5/0x270 [ 277.924002][ T9688] ? __x64_sys_sendmsg+0x80/0x80 [ 277.929021][ T9688] ? lockdep_hardirqs_on+0x98/0x150 [ 277.934274][ T9688] do_syscall_64+0x55/0xb0 [ 277.938737][ T9688] ? clear_bhb_loop+0x40/0x90 [ 277.943459][ T9688] ? clear_bhb_loop+0x40/0x90 [ 277.948172][ T9688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.954098][ T9688] RIP: 0033:0x7ff26818f749 [ 277.958544][ T9688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.978187][ T9688] RSP: 002b:00007ff269073038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.986645][ T9688] RAX: ffffffffffffffda RBX: 00007ff2683e5fa0 RCX: 00007ff26818f749 [ 277.994667][ T9688] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 278.002668][ T9688] RBP: 00007ff269073090 R08: 0000000000000000 R09: 0000000000000000 [ 278.010772][ T9688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.018770][ T9688] R13: 00007ff2683e6038 R14: 00007ff2683e5fa0 R15: 00007fffd33f7888 [ 278.026792][ T9688] [ 278.047092][ T9691] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1324'. [ 278.304625][ T9702] netlink: 'syz.3.1327': attribute type 10 has an invalid length. [ 278.481407][ T9707] netlink: 'syz.2.1329': attribute type 10 has an invalid length. [ 278.654060][ T9711] netlink: 'syz.3.1330': attribute type 29 has an invalid length. [ 278.681104][ T9711] netlink: 'syz.3.1330': attribute type 29 has an invalid length. [ 278.801912][ T9721] netlink: 'syz.2.1334': attribute type 10 has an invalid length. [ 278.810380][ T9721] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1334'. [ 279.283699][ T9732] FAULT_INJECTION: forcing a failure. [ 279.283699][ T9732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.298130][ T9732] CPU: 1 PID: 9732 Comm: syz.1.1338 Not tainted syzkaller #0 [ 279.305563][ T9732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 279.315754][ T9732] Call Trace: [ 279.319077][ T9732] [ 279.322051][ T9732] dump_stack_lvl+0x16c/0x230 [ 279.326789][ T9732] ? show_regs_print_info+0x20/0x20 [ 279.332046][ T9732] ? load_image+0x3b0/0x3b0 [ 279.336613][ T9732] ? __might_fault+0xaa/0x120 [ 279.341342][ T9732] ? __lock_acquire+0x7c80/0x7c80 [ 279.346507][ T9732] should_fail_ex+0x39d/0x4d0 [ 279.351244][ T9732] _copy_to_user+0x2f/0xa0 [ 279.355736][ T9732] bpf_test_finish+0x19a/0x620 [ 279.360657][ T9732] ? convert___skb_to_skb+0x590/0x590 [ 279.366080][ T9732] ? convert_skb_to___skb+0x420/0x420 [ 279.371508][ T9732] bpf_prog_test_run_skb+0xc28/0x11c0 [ 279.376939][ T9732] ? cpu_online+0x60/0x60 [ 279.381314][ T9732] bpf_prog_test_run+0x321/0x390 [ 279.386301][ T9732] __sys_bpf+0x440/0x800 [ 279.390588][ T9732] ? bpf_link_show_fdinfo+0x350/0x350 [ 279.396025][ T9732] ? lock_chain_count+0x20/0x20 [ 279.400937][ T9732] __x64_sys_bpf+0x7c/0x90 [ 279.405398][ T9732] do_syscall_64+0x55/0xb0 [ 279.409843][ T9732] ? clear_bhb_loop+0x40/0x90 [ 279.414542][ T9732] ? clear_bhb_loop+0x40/0x90 [ 279.419252][ T9732] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.425170][ T9732] RIP: 0033:0x7f316618f749 [ 279.429614][ T9732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.449254][ T9732] RSP: 002b:00007f3166f8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 279.457781][ T9732] RAX: ffffffffffffffda RBX: 00007f31663e5fa0 RCX: 00007f316618f749 [ 279.465862][ T9732] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 279.473886][ T9732] RBP: 00007f3166f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 279.481900][ T9732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.489908][ T9732] R13: 00007f31663e6038 R14: 00007f31663e5fa0 R15: 00007fffa133d448 [ 279.497933][ T9732] [ 279.553634][ T9734] netlink: 'syz.2.1339': attribute type 10 has an invalid length. [ 279.751510][ T9744] netlink: 'syz.0.1341': attribute type 10 has an invalid length. [ 280.383988][ T9755] netlink: 'syz.1.1347': attribute type 10 has an invalid length. [ 280.419822][ T9755] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1347'. [ 280.611010][ T9763] netlink: 'syz.2.1350': attribute type 10 has an invalid length. [ 280.684871][ T9764] pim6reg1: entered promiscuous mode [ 280.716744][ T9764] pim6reg1: entered allmulticast mode [ 280.841529][ T9772] FAULT_INJECTION: forcing a failure. [ 280.841529][ T9772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.866088][ T9772] CPU: 0 PID: 9772 Comm: syz.2.1354 Not tainted syzkaller #0 [ 280.873528][ T9772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.883620][ T9772] Call Trace: [ 280.886936][ T9772] [ 280.889895][ T9772] dump_stack_lvl+0x16c/0x230 [ 280.894620][ T9772] ? show_regs_print_info+0x20/0x20 [ 280.899872][ T9772] ? load_image+0x3b0/0x3b0 [ 280.904423][ T9772] ? __might_fault+0xaa/0x120 [ 280.909148][ T9772] ? __lock_acquire+0x7c80/0x7c80 [ 280.914226][ T9772] should_fail_ex+0x39d/0x4d0 [ 280.918959][ T9772] _copy_to_user+0x2f/0xa0 [ 280.923422][ T9772] generic_map_lookup_batch+0x921/0xcd0 [ 280.929031][ T9772] ? __lock_acquire+0x7c80/0x7c80 [ 280.934113][ T9772] ? bpf_map_update_value+0x720/0x720 [ 280.939546][ T9772] ? __fdget+0x180/0x210 [ 280.943842][ T9772] ? bpf_map_update_value+0x720/0x720 [ 280.949273][ T9772] bpf_map_do_batch+0x2cb/0x610 [ 280.954166][ T9772] ? bpf_lsm_bpf+0x9/0x10 [ 280.958543][ T9772] ? security_bpf+0x7e/0xa0 [ 280.963094][ T9772] __sys_bpf+0x76e/0x800 [ 280.967374][ T9772] ? bpf_link_show_fdinfo+0x350/0x350 [ 280.972797][ T9772] ? lock_chain_count+0x20/0x20 [ 280.977706][ T9772] __x64_sys_bpf+0x7c/0x90 [ 280.982165][ T9772] do_syscall_64+0x55/0xb0 [ 280.986622][ T9772] ? clear_bhb_loop+0x40/0x90 [ 280.991344][ T9772] ? clear_bhb_loop+0x40/0x90 [ 280.996064][ T9772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.001998][ T9772] RIP: 0033:0x7ff26818f749 [ 281.006448][ T9772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.026098][ T9772] RSP: 002b:00007ff269073038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.034557][ T9772] RAX: ffffffffffffffda RBX: 00007ff2683e5fa0 RCX: 00007ff26818f749 [ 281.042554][ T9772] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 281.050540][ T9772] RBP: 00007ff269073090 R08: 0000000000000000 R09: 0000000000000000 [ 281.058532][ T9772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.066522][ T9772] R13: 00007ff2683e6038 R14: 00007ff2683e5fa0 R15: 00007fffd33f7888 [ 281.074652][ T9772] [ 281.456183][ T9790] FAULT_INJECTION: forcing a failure. [ 281.456183][ T9790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.484741][ T9790] CPU: 0 PID: 9790 Comm: syz.1.1358 Not tainted syzkaller #0 [ 281.492183][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 281.502257][ T9790] Call Trace: [ 281.505555][ T9790] [ 281.508497][ T9790] dump_stack_lvl+0x16c/0x230 [ 281.513209][ T9790] ? show_regs_print_info+0x20/0x20 [ 281.518428][ T9790] ? load_image+0x3b0/0x3b0 [ 281.522970][ T9790] ? __might_fault+0xaa/0x120 [ 281.527672][ T9790] ? __lock_acquire+0x7c80/0x7c80 [ 281.532728][ T9790] should_fail_ex+0x39d/0x4d0 [ 281.537480][ T9790] _copy_to_user+0x2f/0xa0 [ 281.541930][ T9790] bpf_test_finish+0x19a/0x620 [ 281.546746][ T9790] ? convert___skb_to_skb+0x590/0x590 [ 281.552156][ T9790] ? convert_skb_to___skb+0x420/0x420 [ 281.557558][ T9790] ? slab_build_skb+0x25f/0x3f0 [ 281.562436][ T9790] bpf_prog_test_run_skb+0xc28/0x11c0 [ 281.567843][ T9790] ? cpu_online+0x60/0x60 [ 281.572187][ T9790] bpf_prog_test_run+0x321/0x390 [ 281.577148][ T9790] __sys_bpf+0x440/0x800 [ 281.581584][ T9790] ? bpf_link_show_fdinfo+0x350/0x350 [ 281.586983][ T9790] ? lock_chain_count+0x20/0x20 [ 281.591860][ T9790] __x64_sys_bpf+0x7c/0x90 [ 281.596290][ T9790] do_syscall_64+0x55/0xb0 [ 281.600723][ T9790] ? clear_bhb_loop+0x40/0x90 [ 281.605418][ T9790] ? clear_bhb_loop+0x40/0x90 [ 281.610110][ T9790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.616015][ T9790] RIP: 0033:0x7f316618f749 [ 281.620534][ T9790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.640165][ T9790] RSP: 002b:00007f3166f8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.648597][ T9790] RAX: ffffffffffffffda RBX: 00007f31663e5fa0 RCX: 00007f316618f749 [ 281.656597][ T9790] RDX: 000000000000004c RSI: 00002000000002c0 RDI: 000000000000000a [ 281.664622][ T9790] RBP: 00007f3166f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 281.672615][ T9790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.680605][ T9790] R13: 00007f31663e6038 R14: 00007f31663e5fa0 R15: 00007fffa133d448 [ 281.688621][ T9790] [ 281.746384][ T9793] syzkaller0: left promiscuous mode [ 281.777896][ T9793] syzkaller0: entered promiscuous mode [ 281.783445][ T9793] syzkaller0: left allmulticast mode [ 281.986426][ T9797] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1360'. [ 282.350240][ T9803] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1362'. [ 282.853554][ T9806] validate_nla: 6 callbacks suppressed [ 282.853570][ T9806] netlink: 'syz.2.1363': attribute type 10 has an invalid length. [ 283.020218][ T9809] FAULT_INJECTION: forcing a failure. [ 283.020218][ T9809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.072792][ T9809] CPU: 1 PID: 9809 Comm: syz.1.1364 Not tainted syzkaller #0 [ 283.080245][ T9809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.090341][ T9809] Call Trace: [ 283.093661][ T9809] [ 283.096629][ T9809] dump_stack_lvl+0x16c/0x230 [ 283.101356][ T9809] ? show_regs_print_info+0x20/0x20 [ 283.106602][ T9809] ? load_image+0x3b0/0x3b0 [ 283.111162][ T9809] ? __lock_acquire+0x7c80/0x7c80 [ 283.116232][ T9809] ? snprintf+0xdb/0x120 [ 283.120522][ T9809] should_fail_ex+0x39d/0x4d0 [ 283.125254][ T9809] _copy_to_user+0x2f/0xa0 [ 283.129721][ T9809] simple_read_from_buffer+0xe7/0x150 [ 283.135159][ T9809] proc_fail_nth_read+0x1e3/0x250 [ 283.140241][ T9809] ? proc_fault_inject_write+0x340/0x340 [ 283.145932][ T9809] ? fsnotify_perm+0x271/0x5e0 [ 283.150754][ T9809] ? proc_fault_inject_write+0x340/0x340 [ 283.156452][ T9809] vfs_read+0x27e/0x920 [ 283.160679][ T9809] ? kernel_read+0x1e0/0x1e0 [ 283.164778][ T9812] netlink: 'syz.2.1365': attribute type 2 has an invalid length. [ 283.165300][ T9809] ? __fget_files+0x28/0x4d0 [ 283.177654][ T9809] ? __fget_files+0x44a/0x4d0 [ 283.182373][ T9809] ? __fdget_pos+0x2a3/0x330 [ 283.186983][ T9809] ? ksys_read+0x75/0x250 [ 283.191337][ T9809] ksys_read+0x147/0x250 [ 283.195608][ T9809] ? vfs_write+0x940/0x940 [ 283.200046][ T9809] ? lockdep_hardirqs_on+0x98/0x150 [ 283.205263][ T9809] do_syscall_64+0x55/0xb0 [ 283.209701][ T9809] ? clear_bhb_loop+0x40/0x90 [ 283.214412][ T9809] ? clear_bhb_loop+0x40/0x90 [ 283.219115][ T9809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.225024][ T9809] RIP: 0033:0x7f316618e15c [ 283.229469][ T9809] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 283.249088][ T9809] RSP: 002b:00007f3166f8b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 283.257516][ T9809] RAX: ffffffffffffffda RBX: 00007f31663e5fa0 RCX: 00007f316618e15c [ 283.265501][ T9809] RDX: 000000000000000f RSI: 00007f3166f8b0a0 RDI: 0000000000000003 [ 283.273483][ T9809] RBP: 00007f3166f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 283.281474][ T9809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.289475][ T9809] R13: 00007f31663e6038 R14: 00007f31663e5fa0 R15: 00007fffa133d448 [ 283.297486][ T9809] [ 283.332227][ T9812] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1365'. [ 283.405672][ T9818] netlink: 'syz.0.1366': attribute type 10 has an invalid length. [ 283.588679][ T9823] syzkaller0: left promiscuous mode [ 283.764201][ T9827] netlink: 'syz.0.1371': attribute type 2 has an invalid length. [ 283.804564][ T9827] netlink: 'syz.0.1371': attribute type 8 has an invalid length. [ 283.812757][ T9827] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1371'. [ 283.836802][ T9831] netlink: 'syz.0.1371': attribute type 153 has an invalid length. [ 283.884959][ T9831] netlink: 'syz.0.1371': attribute type 1 has an invalid length. [ 283.901776][ T9832] netlink: 'syz.1.1373': attribute type 10 has an invalid length. [ 283.918561][ T9831] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.1371'. [ 284.059243][ T9840] FAULT_INJECTION: forcing a failure. [ 284.059243][ T9840] name failslab, interval 1, probability 0, space 0, times 0 [ 284.080017][ T9840] CPU: 0 PID: 9840 Comm: syz.1.1376 Not tainted syzkaller #0 [ 284.087462][ T9840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.097657][ T9840] Call Trace: [ 284.100975][ T9840] [ 284.103943][ T9840] dump_stack_lvl+0x16c/0x230 [ 284.108689][ T9840] ? show_regs_print_info+0x20/0x20 [ 284.113944][ T9840] ? load_image+0x3b0/0x3b0 [ 284.118499][ T9840] ? __might_sleep+0xe0/0xe0 [ 284.123137][ T9840] ? __lock_acquire+0x7c80/0x7c80 [ 284.128214][ T9840] should_fail_ex+0x39d/0x4d0 [ 284.132949][ T9840] should_failslab+0x9/0x20 [ 284.137501][ T9840] slab_pre_alloc_hook+0x59/0x310 [ 284.142730][ T9840] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 284.148509][ T9840] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 284.154263][ T9840] __kmem_cache_alloc_node+0x53/0x260 [ 284.159685][ T9840] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 284.165429][ T9840] __kmalloc+0xa4/0x240 [ 284.169615][ T9840] tomoyo_realpath_from_path+0xe3/0x5d0 [ 284.175234][ T9840] tomoyo_path_number_perm+0x1ea/0x590 [ 284.180717][ T9840] ? tomoyo_path_number_perm+0x1ba/0x590 [ 284.186373][ T9840] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 284.191856][ T9840] ? ksys_write+0x1c1/0x250 [ 284.196414][ T9840] ? __fget_files+0x28/0x4d0 [ 284.201044][ T9840] security_file_ioctl+0x70/0xa0 [ 284.206014][ T9840] __se_sys_ioctl+0x48/0x170 [ 284.210716][ T9840] do_syscall_64+0x55/0xb0 [ 284.215152][ T9840] ? clear_bhb_loop+0x40/0x90 [ 284.219843][ T9840] ? clear_bhb_loop+0x40/0x90 [ 284.224544][ T9840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.230456][ T9840] RIP: 0033:0x7f316618f749 [ 284.234888][ T9840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.254605][ T9840] RSP: 002b:00007f3166f8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.263049][ T9840] RAX: ffffffffffffffda RBX: 00007f31663e5fa0 RCX: 00007f316618f749 [ 284.271034][ T9840] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 284.279026][ T9840] RBP: 00007f3166f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 284.287027][ T9840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.295013][ T9840] R13: 00007f31663e6038 R14: 00007f31663e5fa0 R15: 00007fffa133d448 [ 284.303016][ T9840] [ 284.333586][ T9840] ERROR: Out of memory at tomoyo_realpath_from_path. [ 284.460573][ T9849] netlink: 'syz.0.1379': attribute type 10 has an invalid length. [ 284.475840][ T9849] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1379'. [ 284.680502][ T9858] netlink: 'syz.2.1381': attribute type 10 has an invalid length. [ 284.987761][ T9862] FAULT_INJECTION: forcing a failure. [ 284.987761][ T9862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.004526][ T9862] CPU: 1 PID: 9862 Comm: syz.1.1383 Not tainted syzkaller #0 [ 285.011971][ T9862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.022071][ T9862] Call Trace: [ 285.025380][ T9862] [ 285.028324][ T9862] dump_stack_lvl+0x16c/0x230 [ 285.033028][ T9862] ? show_regs_print_info+0x20/0x20 [ 285.038250][ T9862] ? load_image+0x3b0/0x3b0 [ 285.042770][ T9862] ? __lock_acquire+0x7c80/0x7c80 [ 285.047811][ T9862] ? snprintf+0xdb/0x120 [ 285.052065][ T9862] should_fail_ex+0x39d/0x4d0 [ 285.056764][ T9862] _copy_to_user+0x2f/0xa0 [ 285.061198][ T9862] simple_read_from_buffer+0xe7/0x150 [ 285.066615][ T9862] proc_fail_nth_read+0x1e3/0x250 [ 285.071659][ T9862] ? proc_fault_inject_write+0x340/0x340 [ 285.077314][ T9862] ? fsnotify_perm+0x271/0x5e0 [ 285.082100][ T9862] ? proc_fault_inject_write+0x340/0x340 [ 285.087772][ T9862] vfs_read+0x27e/0x920 [ 285.091949][ T9862] ? kernel_read+0x1e0/0x1e0 [ 285.096561][ T9862] ? __fget_files+0x28/0x4d0 [ 285.101165][ T9862] ? __fget_files+0x44a/0x4d0 [ 285.105873][ T9862] ? __fdget_pos+0x2a3/0x330 [ 285.110571][ T9862] ? ksys_read+0x75/0x250 [ 285.114948][ T9862] ksys_read+0x147/0x250 [ 285.119212][ T9862] ? vfs_write+0x940/0x940 [ 285.123650][ T9862] ? lockdep_hardirqs_on+0x98/0x150 [ 285.128893][ T9862] do_syscall_64+0x55/0xb0 [ 285.133329][ T9862] ? clear_bhb_loop+0x40/0x90 [ 285.138029][ T9862] ? clear_bhb_loop+0x40/0x90 [ 285.142722][ T9862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.148631][ T9862] RIP: 0033:0x7f316618e15c [ 285.153060][ T9862] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 285.172681][ T9862] RSP: 002b:00007f3166f8b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 285.181115][ T9862] RAX: ffffffffffffffda RBX: 00007f31663e5fa0 RCX: 00007f316618e15c [ 285.189117][ T9862] RDX: 000000000000000f RSI: 00007f3166f8b0a0 RDI: 0000000000000006 [ 285.197108][ T9862] RBP: 00007f3166f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 285.205094][ T9862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.213089][ T9862] R13: 00007f31663e6038 R14: 00007f31663e5fa0 R15: 00007fffa133d448 [ 285.221094][ T9862] [ 285.449938][ T9874] FAULT_INJECTION: forcing a failure. [ 285.449938][ T9874] name failslab, interval 1, probability 0, space 0, times 0 [ 285.463137][ T9874] CPU: 1 PID: 9874 Comm: syz.1.1388 Not tainted syzkaller #0 [ 285.470567][ T9874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.480661][ T9874] Call Trace: [ 285.483982][ T9874] [ 285.486949][ T9874] dump_stack_lvl+0x16c/0x230 [ 285.491683][ T9874] ? show_regs_print_info+0x20/0x20 [ 285.496941][ T9874] ? load_image+0x3b0/0x3b0 [ 285.501504][ T9874] ? __might_sleep+0xe0/0xe0 [ 285.506149][ T9874] ? __lock_acquire+0x7c80/0x7c80 [ 285.511241][ T9874] should_fail_ex+0x39d/0x4d0 [ 285.515977][ T9874] should_failslab+0x9/0x20 [ 285.520534][ T9874] slab_pre_alloc_hook+0x59/0x310 [ 285.525604][ T9874] ? __lock_acquire+0x7c80/0x7c80 [ 285.530667][ T9874] kmem_cache_alloc_node+0x60/0x330 [ 285.535900][ T9874] ? __alloc_skb+0x108/0x2c0 [ 285.540542][ T9874] __alloc_skb+0x108/0x2c0 [ 285.545000][ T9874] netlink_sendmsg+0x65b/0xbe0 [ 285.549804][ T9874] ? netlink_getsockopt+0x580/0x580 [ 285.555033][ T9874] ? aa_sock_msg_perm+0x94/0x150 [ 285.559994][ T9874] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 285.565307][ T9874] ? security_socket_sendmsg+0x80/0xa0 [ 285.570786][ T9874] ? netlink_getsockopt+0x580/0x580 [ 285.576112][ T9874] ____sys_sendmsg+0x5bf/0x950 [ 285.580909][ T9874] ? __asan_memset+0x22/0x40 [ 285.585528][ T9874] ? __sys_sendmsg_sock+0x30/0x30 [ 285.590575][ T9874] ? __import_iovec+0x5f2/0x860 [ 285.595538][ T9874] ? import_iovec+0x73/0xa0 [ 285.600067][ T9874] ___sys_sendmsg+0x220/0x290 [ 285.604773][ T9874] ? __sys_sendmsg+0x270/0x270 [ 285.609573][ T9874] ? __lock_acquire+0x7c80/0x7c80 [ 285.614636][ T9874] __se_sys_sendmsg+0x1a5/0x270 [ 285.619515][ T9874] ? __x64_sys_sendmsg+0x80/0x80 [ 285.624497][ T9874] ? lockdep_hardirqs_on+0x98/0x150 [ 285.629796][ T9874] do_syscall_64+0x55/0xb0 [ 285.634243][ T9874] ? clear_bhb_loop+0x40/0x90 [ 285.638938][ T9874] ? clear_bhb_loop+0x40/0x90 [ 285.643632][ T9874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.649544][ T9874] RIP: 0033:0x7f316618f749 [ 285.653982][ T9874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.673611][ T9874] RSP: 002b:00007f3166f8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.682059][ T9874] RAX: ffffffffffffffda RBX: 00007f31663e5fa0 RCX: 00007f316618f749 [ 285.690061][ T9874] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 285.698056][ T9874] RBP: 00007f3166f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 285.706047][ T9874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.714029][ T9874] R13: 00007f31663e6038 R14: 00007f31663e5fa0 R15: 00007fffa133d448 [ 285.722032][ T9874] [ 286.606516][ T9900] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1398'. [ 287.761540][ T9925] FAULT_INJECTION: forcing a failure. [ 287.761540][ T9925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.813532][ T9925] CPU: 1 PID: 9925 Comm: syz.0.1408 Not tainted syzkaller #0 [ 287.820986][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 287.831094][ T9925] Call Trace: [ 287.834403][ T9925] [ 287.837375][ T9925] dump_stack_lvl+0x16c/0x230 [ 287.842116][ T9925] ? show_regs_print_info+0x20/0x20 [ 287.847368][ T9925] ? load_image+0x3b0/0x3b0 [ 287.851918][ T9925] ? __might_fault+0xaa/0x120 [ 287.856640][ T9925] ? __lock_acquire+0x7c80/0x7c80 [ 287.861712][ T9925] should_fail_ex+0x39d/0x4d0 [ 287.866449][ T9925] _copy_to_user+0x2f/0xa0 [ 287.870910][ T9925] bpf_test_finish+0x19a/0x620 [ 287.875722][ T9925] ? convert___skb_to_skb+0x590/0x590 [ 287.881130][ T9925] ? convert_skb_to___skb+0x420/0x420 [ 287.886567][ T9925] bpf_prog_test_run_skb+0xc28/0x11c0 [ 287.892002][ T9925] ? cpu_online+0x60/0x60 [ 287.896375][ T9925] bpf_prog_test_run+0x321/0x390 [ 287.901365][ T9925] __sys_bpf+0x440/0x800 [ 287.905648][ T9925] ? bpf_link_show_fdinfo+0x350/0x350 [ 287.911083][ T9925] ? lock_chain_count+0x20/0x20 [ 287.915993][ T9925] __x64_sys_bpf+0x7c/0x90 [ 287.920530][ T9925] do_syscall_64+0x55/0xb0 [ 287.924986][ T9925] ? clear_bhb_loop+0x40/0x90 [ 287.929675][ T9925] ? clear_bhb_loop+0x40/0x90 [ 287.934373][ T9925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.940298][ T9925] RIP: 0033:0x7f1af058f749 [ 287.944722][ T9925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.964348][ T9925] RSP: 002b:00007f1af1462038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.972875][ T9925] RAX: ffffffffffffffda RBX: 00007f1af07e5fa0 RCX: 00007f1af058f749 [ 287.980864][ T9925] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 287.988873][ T9925] RBP: 00007f1af1462090 R08: 0000000000000000 R09: 0000000000000000 [ 287.996952][ T9925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.004938][ T9925] R13: 00007f1af07e6038 R14: 00007f1af07e5fa0 R15: 00007ffcb16a1638 [ 288.012939][ T9925] [ 288.086985][ T9932] syzkaller0: entered promiscuous mode [ 288.106640][ T9932] syzkaller0: entered allmulticast mode [ 288.156337][ T9931] validate_nla: 8 callbacks suppressed [ 288.156355][ T9931] netlink: 'syz.1.1409': attribute type 10 has an invalid length. [ 288.395911][ T9941] FAULT_INJECTION: forcing a failure. [ 288.395911][ T9941] name failslab, interval 1, probability 0, space 0, times 0 [ 288.445805][ T9941] CPU: 1 PID: 9941 Comm: syz.3.1414 Not tainted syzkaller #0 [ 288.453269][ T9941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.463380][ T9941] Call Trace: [ 288.466694][ T9941] [ 288.469665][ T9941] dump_stack_lvl+0x16c/0x230 [ 288.474400][ T9941] ? show_regs_print_info+0x20/0x20 [ 288.479643][ T9941] ? load_image+0x3b0/0x3b0 [ 288.484184][ T9941] ? __might_sleep+0xe0/0xe0 [ 288.488821][ T9941] ? __lock_acquire+0x7c80/0x7c80 [ 288.493896][ T9941] should_fail_ex+0x39d/0x4d0 [ 288.498660][ T9941] should_failslab+0x9/0x20 [ 288.503227][ T9941] slab_pre_alloc_hook+0x59/0x310 [ 288.508322][ T9941] kmem_cache_alloc_node+0x60/0x330 [ 288.513581][ T9941] ? __alloc_skb+0x108/0x2c0 [ 288.518229][ T9941] __alloc_skb+0x108/0x2c0 [ 288.522675][ T9941] netlink_dump+0x1cf/0xde0 [ 288.527237][ T9941] ? rcu_is_watching+0x15/0xb0 [ 288.532090][ T9941] ? trace_contention_end+0x39/0xe0 [ 288.537385][ T9941] ? netlink_lookup+0x200/0x200 [ 288.542289][ T9941] ? netlink_autobind+0x300/0x300 [ 288.547344][ T9941] ? netlink_lookup+0x30/0x200 [ 288.552136][ T9941] ? netlink_lookup+0x30/0x200 [ 288.556937][ T9941] __netlink_dump_start+0x5f1/0x810 [ 288.562177][ T9941] rtnetlink_rcv_msg+0xba1/0xf10 [ 288.567137][ T9941] ? br_vlan_rtm_process+0x1180/0x1180 [ 288.572628][ T9941] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 288.577761][ T9941] ? rtnetlink_bind+0x80/0x80 [ 288.582478][ T9941] ? perf_trace_preemptirq_template+0xa4/0x340 [ 288.588659][ T9941] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 288.594660][ T9941] ? lock_chain_count+0x20/0x20 [ 288.599537][ T9941] ? __local_bh_enable_ip+0x12e/0x1c0 [ 288.604924][ T9941] ? lockdep_hardirqs_on+0x98/0x150 [ 288.610142][ T9941] ? __local_bh_enable_ip+0x12e/0x1c0 [ 288.615527][ T9941] ? _local_bh_enable+0xa0/0xa0 [ 288.620403][ T9941] ? __dev_queue_xmit+0x245/0x35a0 [ 288.625537][ T9941] ? __dev_queue_xmit+0x1449/0x35a0 [ 288.630784][ T9941] ? __dev_queue_xmit+0x245/0x35a0 [ 288.635914][ T9941] ? br_vlan_rtm_process+0x1180/0x1180 [ 288.641396][ T9941] ? ref_tracker_free+0x634/0x7d0 [ 288.646430][ T9941] ? __copy_skb_header+0xa7/0x550 [ 288.651487][ T9941] netlink_rcv_skb+0x216/0x480 [ 288.656288][ T9941] ? rtnetlink_bind+0x80/0x80 [ 288.660989][ T9941] ? netlink_ack+0x1110/0x1110 [ 288.665791][ T9941] ? __lock_acquire+0x7c80/0x7c80 [ 288.670837][ T9941] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.676075][ T9941] netlink_unicast+0x751/0x8d0 [ 288.680874][ T9941] netlink_sendmsg+0x8c1/0xbe0 [ 288.685666][ T9941] ? netlink_getsockopt+0x580/0x580 [ 288.690903][ T9941] ? aa_sock_msg_perm+0x94/0x150 [ 288.695873][ T9941] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 288.701177][ T9941] ? security_socket_sendmsg+0x80/0xa0 [ 288.706668][ T9941] ? netlink_getsockopt+0x580/0x580 [ 288.711895][ T9941] ____sys_sendmsg+0x5bf/0x950 [ 288.716711][ T9941] ? __asan_memset+0x22/0x40 [ 288.721338][ T9941] ? __sys_sendmsg_sock+0x30/0x30 [ 288.726403][ T9941] ? __import_iovec+0x5f2/0x860 [ 288.731290][ T9941] ? import_iovec+0x73/0xa0 [ 288.735923][ T9941] ___sys_sendmsg+0x220/0x290 [ 288.740639][ T9941] ? __sys_sendmsg+0x270/0x270 [ 288.745443][ T9941] ? __lock_acquire+0x7c80/0x7c80 [ 288.750507][ T9941] __se_sys_sendmsg+0x1a5/0x270 [ 288.755398][ T9941] ? __x64_sys_sendmsg+0x80/0x80 [ 288.760497][ T9941] ? lockdep_hardirqs_on+0x98/0x150 [ 288.765730][ T9941] do_syscall_64+0x55/0xb0 [ 288.770175][ T9941] ? clear_bhb_loop+0x40/0x90 [ 288.774894][ T9941] ? clear_bhb_loop+0x40/0x90 [ 288.779634][ T9941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.785554][ T9941] RIP: 0033:0x7f0964d8f749 [ 288.789995][ T9941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.809627][ T9941] RSP: 002b:00007f0965bf4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.818062][ T9941] RAX: ffffffffffffffda RBX: 00007f0964fe5fa0 RCX: 00007f0964d8f749 [ 288.826052][ T9941] RDX: 0000000000040000 RSI: 0000200000000340 RDI: 0000000000000003 [ 288.834041][ T9941] RBP: 00007f0965bf4090 R08: 0000000000000000 R09: 0000000000000000 [ 288.842036][ T9941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.850018][ T9941] R13: 00007f0964fe6038 R14: 00007f0964fe5fa0 R15: 00007ffe7ac45268 [ 288.858035][ T9941] [ 289.019716][ T9947] netlink: 'syz.0.1415': attribute type 10 has an invalid length. [ 289.035518][ T9947] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1415'. [ 289.339398][ T9951] netlink: 'syz.2.1417': attribute type 10 has an invalid length. [ 289.543902][ T9959] netlink: 4091 bytes leftover after parsing attributes in process `syz.2.1420'. [ 290.261069][ T9976] netlink: 'syz.3.1424': attribute type 10 has an invalid length. [ 290.559054][ T9981] FAULT_INJECTION: forcing a failure. [ 290.559054][ T9981] name failslab, interval 1, probability 0, space 0, times 0 [ 290.608220][ T9981] CPU: 1 PID: 9981 Comm: syz.0.1427 Not tainted syzkaller #0 [ 290.615676][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 290.625769][ T9981] Call Trace: [ 290.629090][ T9981] [ 290.632050][ T9981] dump_stack_lvl+0x16c/0x230 [ 290.636785][ T9981] ? show_regs_print_info+0x20/0x20 [ 290.642031][ T9981] ? load_image+0x3b0/0x3b0 [ 290.646585][ T9981] ? __lock_acquire+0x7c80/0x7c80 [ 290.651657][ T9981] should_fail_ex+0x39d/0x4d0 [ 290.656415][ T9981] should_failslab+0x9/0x20 [ 290.660986][ T9981] slab_pre_alloc_hook+0x59/0x310 [ 290.666063][ T9981] ? aa_get_newest_label+0xf8/0x5c0 [ 290.671328][ T9981] ? sk_prot_alloc+0xe7/0x210 [ 290.676053][ T9981] ? sk_prot_alloc+0xe7/0x210 [ 290.680795][ T9981] __kmem_cache_alloc_node+0x53/0x260 [ 290.686399][ T9981] ? sk_prot_alloc+0xe7/0x210 [ 290.691132][ T9981] __kmalloc+0xa4/0x240 [ 290.695347][ T9981] sk_prot_alloc+0xe7/0x210 [ 290.699897][ T9981] ? sk_alloc+0x24/0x360 [ 290.704189][ T9981] sk_alloc+0x3a/0x360 [ 290.708312][ T9981] caif_create+0x11d/0x400 [ 290.712777][ T9981] __sock_create+0x4a6/0x940 [ 290.717502][ T9981] __sys_socketpair+0x236/0x550 [ 290.722384][ T9981] __x64_sys_socketpair+0x9b/0xb0 [ 290.727437][ T9981] do_syscall_64+0x55/0xb0 [ 290.731871][ T9981] ? clear_bhb_loop+0x40/0x90 [ 290.736565][ T9981] ? clear_bhb_loop+0x40/0x90 [ 290.741260][ T9981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.747170][ T9981] RIP: 0033:0x7f1af058f749 [ 290.751611][ T9981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.771245][ T9981] RSP: 002b:00007f1af1462038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 290.779685][ T9981] RAX: ffffffffffffffda RBX: 00007f1af07e5fa0 RCX: 00007f1af058f749 [ 290.787679][ T9981] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000025 [ 290.795667][ T9981] RBP: 00007f1af1462090 R08: 0000000000000000 R09: 0000000000000000 [ 290.803662][ T9981] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 290.811645][ T9981] R13: 00007f1af07e6038 R14: 00007f1af07e5fa0 R15: 00007ffcb16a1638 [ 290.819652][ T9981] [ 290.844140][ T9985] netlink: 'syz.2.1429': attribute type 10 has an invalid length. [ 290.914639][ T9983] netlink: 'syz.1.1428': attribute type 10 has an invalid length. [ 290.973336][ T9983] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1428'. [ 291.036187][ T9983] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 291.320561][T10000] netlink: 'syz.1.1434': attribute type 10 has an invalid length. [ 291.334662][T10000] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1434'. [ 291.743106][T10008] netlink: 'syz.1.1437': attribute type 10 has an invalid length. [ 291.774852][T10008] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1437'. [ 291.955685][T10013] netlink: 'syz.2.1438': attribute type 10 has an invalid length. [ 292.283328][T10018] netlink: 'syz.3.1440': attribute type 10 has an invalid length. [ 292.336530][T10020] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1441'. [ 292.542254][T10025] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1443'. [ 292.896726][T10034] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1447'. [ 292.969151][T10038] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1449'. [ 293.305676][T10044] validate_nla: 4 callbacks suppressed [ 293.305695][T10044] netlink: 'syz.2.1451': attribute type 10 has an invalid length. [ 293.339194][T10044] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1451'. [ 293.516401][T10048] netlink: 'syz.1.1452': attribute type 10 has an invalid length. [ 293.703205][T10052] netlink: 'syz.1.1453': attribute type 10 has an invalid length. [ 293.962588][T10060] netlink: 'syz.1.1456': attribute type 10 has an invalid length. [ 293.976998][T10056] netlink: 'syz.2.1454': attribute type 10 has an invalid length. [ 294.012546][T10056] dummy0: entered allmulticast mode [ 294.018745][T10056] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 294.224636][T10067] netlink: 'syz.3.1460': attribute type 10 has an invalid length. [ 294.264717][T10067] __nla_validate_parse: 2 callbacks suppressed [ 294.264734][T10067] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1460'. [ 294.480193][T10075] netlink: 'syz.0.1462': attribute type 10 has an invalid length. [ 294.733993][T10078] netlink: 'syz.0.1463': attribute type 10 has an invalid length. [ 294.773240][T10078] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1463'. [ 294.798290][T10079] netlink: 'syz.3.1471': attribute type 10 has an invalid length. [ 295.138567][T10087] netlink: 'syz.3.1465': attribute type 10 has an invalid length. [ 295.550902][T10099] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1470'. [ 295.612952][T10102] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1472'. [ 295.784066][T10109] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1475'. [ 295.828856][T10106] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1473'. [ 296.236409][T10117] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1476'. [ 296.900977][T10135] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1483'. [ 296.974304][T10139] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1485'. [ 297.865873][T10165] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1495'. [ 298.611453][T10177] validate_nla: 16 callbacks suppressed [ 298.611471][T10177] netlink: 'syz.3.1499': attribute type 10 has an invalid length. [ 298.995597][T10186] netlink: 'syz.1.1501': attribute type 10 has an invalid length. [ 299.449819][T10196] netlink: 'syz.0.1504': attribute type 10 has an invalid length. [ 299.661534][T10198] netlink: 'syz.0.1505': attribute type 10 has an invalid length. [ 299.674219][T10198] __nla_validate_parse: 2 callbacks suppressed [ 299.674235][T10198] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1505'. [ 300.061399][T10207] netlink: 'syz.2.1510': attribute type 10 has an invalid length. [ 300.084728][T10207] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1510'. [ 300.285421][T10215] netlink: 'syz.0.1512': attribute type 10 has an invalid length. [ 300.293851][T10215] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1512'. [ 300.726600][T10222] netlink: 'syz.0.1515': attribute type 10 has an invalid length. [ 300.751310][T10220] netlink: 822 bytes leftover after parsing attributes in process `syz.1.1514'. [ 300.798005][T10220] veth0_to_bond: invalid flags given to default FDB implementation [ 300.927648][T10225] netlink: 'syz.0.1516': attribute type 10 has an invalid length. [ 300.947852][T10225] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1516'. [ 301.021971][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 301.058420][T10232] netlink: 'syz.2.1517': attribute type 10 has an invalid length. [ 301.264267][T10237] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 301.300631][T10239] netlink: 'syz.0.1520': attribute type 10 has an invalid length. [ 301.315224][T10239] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1520'. [ 301.540221][T10244] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1523'. [ 302.075994][T10259] netlink: 822 bytes leftover after parsing attributes in process `syz.0.1527'. [ 302.094622][T10259] veth0_to_bond: invalid flags given to default FDB implementation [ 303.098803][T10276] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1531'. [ 303.544126][T10287] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1536'. [ 304.150019][T10289] validate_nla: 5 callbacks suppressed [ 304.150054][T10289] netlink: 'syz.0.1535': attribute type 1 has an invalid length. [ 304.213428][T10300] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 304.602320][T10304] netlink: 'syz.2.1540': attribute type 10 has an invalid length. [ 304.640116][T10304] team0: entered promiscuous mode [ 304.664141][T10304] team_slave_0: entered promiscuous mode [ 304.684955][T10304] team_slave_1: entered promiscuous mode [ 304.748796][T10304] team0: entered allmulticast mode [ 304.794453][T10304] team_slave_0: entered allmulticast mode [ 304.800294][T10304] team_slave_1: entered allmulticast mode [ 304.866338][T10304] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 305.037538][T10308] netlink: 'syz.1.1541': attribute type 10 has an invalid length. [ 305.107058][T10311] netlink: 'syz.0.1542': attribute type 10 has an invalid length. [ 305.144770][T10311] __nla_validate_parse: 1 callbacks suppressed [ 305.144799][T10311] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1542'. [ 305.177035][T10312] netlink: 'syz.3.1543': attribute type 10 has an invalid length. [ 305.229818][T10315] netlink: 'syz.2.1544': attribute type 39 has an invalid length. [ 305.531226][T10319] netlink: 'syz.1.1545': attribute type 10 has an invalid length. [ 305.579273][T10319] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1545'. [ 306.457090][T10344] netlink: 'syz.1.1552': attribute type 10 has an invalid length. [ 306.471471][T10344] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1552'. [ 306.566775][T10342] pim6reg1: entered promiscuous mode [ 306.572694][T10342] pim6reg1: entered allmulticast mode [ 306.837375][T10350] netlink: 'syz.3.1555': attribute type 10 has an invalid length. [ 307.206526][T10359] netlink: 'syz.3.1556': attribute type 10 has an invalid length. [ 307.264310][T10359] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 307.318684][T10361] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1558'. [ 307.477819][T10363] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1559'. [ 308.101188][T10368] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1560'. [ 308.562084][T10372] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 308.719131][T10380] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1563'. [ 308.792948][T10383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1572'. [ 309.555471][T10399] validate_nla: 10 callbacks suppressed [ 309.555489][T10399] netlink: 'syz.1.1570': attribute type 10 has an invalid length. [ 309.596265][T10399] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1570'. [ 310.007389][T10404] netlink: 'syz.3.1568': attribute type 1 has an invalid length. [ 310.106326][T10407] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1573'. [ 310.333634][T10408] netlink: 'syz.1.1571': attribute type 10 has an invalid length. [ 310.378704][T10408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1571'. [ 310.419184][T10408] team0: entered promiscuous mode [ 310.462383][T10408] team_slave_0: entered promiscuous mode [ 310.500131][T10408] team_slave_1: entered promiscuous mode [ 310.537996][T10408] team0: entered allmulticast mode [ 310.634948][T10408] team_slave_0: entered allmulticast mode [ 310.665008][T10408] team_slave_1: entered allmulticast mode [ 310.672406][T10408] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 310.891549][T10417] netlink: 'syz.0.1583': attribute type 10 has an invalid length. [ 311.085974][T10420] netlink: 'syz.1.1576': attribute type 10 has an invalid length. [ 311.095989][T10420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1576'. [ 311.106219][T10420] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 311.183277][T10423] netlink: 'syz.2.1577': attribute type 10 has an invalid length. [ 311.340682][T10433] netlink: 'syz.0.1589': attribute type 10 has an invalid length. [ 311.409495][T10432] netlink: 'syz.3.1590': attribute type 10 has an invalid length. [ 311.439447][T10432] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1590'. [ 311.658336][T10440] netlink: 'syz.0.1581': attribute type 10 has an invalid length. [ 311.685104][T10440] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1581'. [ 311.883143][T10447] netlink: 'syz.2.1582': attribute type 10 has an invalid length. [ 311.899177][T10447] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1582'. [ 312.106496][T10452] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1586'. [ 312.158651][T10453] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1585'. [ 313.063849][T10467] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1593'. [ 313.319328][T10482] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1598'. [ 313.333982][T10480] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1597'. [ 314.666216][T10514] validate_nla: 13 callbacks suppressed [ 314.666236][T10514] netlink: 'syz.2.1613': attribute type 10 has an invalid length. [ 315.076738][T10525] netlink: 'syz.3.1620': attribute type 10 has an invalid length. [ 315.116590][T10529] netlink: 'syz.0.1619': attribute type 10 has an invalid length. [ 315.143503][T10528] netlink: 'syz.2.1621': attribute type 10 has an invalid length. [ 315.152254][T10528] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 315.379903][T10535] netlink: 'syz.2.1622': attribute type 10 has an invalid length. [ 315.392087][T10535] __nla_validate_parse: 6 callbacks suppressed [ 315.392103][T10535] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1622'. [ 315.696747][T10541] netlink: 'syz.0.1632': attribute type 10 has an invalid length. [ 315.725224][T10543] netlink: 'syz.2.1624': attribute type 10 has an invalid length. [ 315.747036][T10543] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1624'. [ 316.283686][T10557] netlink: 'syz.1.1630': attribute type 10 has an invalid length. [ 316.291903][T10557] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1630'. [ 316.302065][T10557] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 316.406656][T10560] netlink: 'syz.2.1631': attribute type 10 has an invalid length. [ 316.421483][T10562] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1633'. [ 316.470765][T10564] netlink: 'syz.1.1634': attribute type 10 has an invalid length. [ 316.479837][T10564] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1634'. [ 316.988701][T10577] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1641'. [ 317.134684][T10581] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1643'. [ 317.223289][T10585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1644'. [ 317.253478][T10585] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 317.456481][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.465762][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.503849][T10614] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1655'. [ 318.542926][T10614] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 318.836466][T10621] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1657'. [ 319.884781][T10657] validate_nla: 15 callbacks suppressed [ 319.884799][T10657] netlink: 'syz.1.1671': attribute type 10 has an invalid length. [ 320.163591][T10668] netlink: 'syz.1.1675': attribute type 10 has an invalid length. [ 320.533015][T10677] netlink: 'syz.0.1679': attribute type 10 has an invalid length. [ 320.541662][T10678] netlink: 'syz.3.1678': attribute type 10 has an invalid length. [ 320.550203][T10678] __nla_validate_parse: 2 callbacks suppressed [ 320.550219][T10678] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1678'. [ 320.760130][T10689] netlink: 'syz.1.1680': attribute type 10 has an invalid length. [ 320.953810][T10695] netlink: 'syz.0.1684': attribute type 10 has an invalid length. [ 320.964725][T10695] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1684'. [ 321.212261][T10700] netlink: 'syz.2.1686': attribute type 23 has an invalid length. [ 321.273879][T10705] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1687'. [ 321.712231][T10716] netlink: 'syz.0.1692': attribute type 10 has an invalid length. [ 321.738856][T10711] netlink: 'syz.1.1691': attribute type 10 has an invalid length. [ 321.756086][T10711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1691'. [ 321.778833][T10711] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 322.550837][T10733] netlink: 'syz.2.1690': attribute type 29 has an invalid length. [ 323.006972][T10744] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1701'. [ 323.487495][T10749] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1703'. [ 323.498108][T10749] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 323.646290][T10753] syzkaller0: left promiscuous mode [ 323.651588][T10753] syzkaller0: left allmulticast mode [ 323.775634][T10757] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1706'. [ 324.037704][T10762] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1709'. [ 324.367747][T10771] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1713'. [ 324.489161][T10773] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1714'. [ 324.499057][T10773] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 325.320695][T10791] validate_nla: 13 callbacks suppressed [ 325.320717][T10791] netlink: 'syz.0.1721': attribute type 23 has an invalid length. [ 325.355146][T10791] netlink: 'syz.0.1721': attribute type 10 has an invalid length. [ 325.579764][T10791] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 325.700421][T10794] netlink: 'syz.2.1722': attribute type 10 has an invalid length. [ 325.719754][T10794] __nla_validate_parse: 1 callbacks suppressed [ 325.719771][T10794] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1722'. [ 326.173321][T10803] netlink: 'syz.3.1724': attribute type 10 has an invalid length. [ 326.193118][T10803] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1724'. [ 326.426083][T10805] netlink: 'syz.3.1725': attribute type 10 has an invalid length. [ 326.469639][T10812] netlink: 'syz.0.1726': attribute type 10 has an invalid length. [ 326.948830][T10821] netlink: 'syz.0.1732': attribute type 23 has an invalid length. [ 326.968093][T10821] netlink: 'syz.0.1732': attribute type 10 has an invalid length. [ 327.057121][T10829] netlink: 'syz.3.1734': attribute type 10 has an invalid length. [ 327.065448][T10829] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1734'. [ 327.351195][T10838] netlink: 'syz.0.1737': attribute type 10 has an invalid length. [ 327.624668][T10842] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1739'. [ 328.444033][T10861] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1745'. [ 328.457120][T10861] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 329.714330][T10892] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1756'. [ 330.013597][T10904] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1762'. [ 330.621160][T10915] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1763'. [ 330.892712][T10920] validate_nla: 11 callbacks suppressed [ 330.892749][T10920] netlink: 'syz.1.1766': attribute type 10 has an invalid length. [ 330.932611][T10923] netlink: 'syz.0.1768': attribute type 10 has an invalid length. [ 330.952215][T10923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1768'. [ 331.033839][T10928] netlink: 'syz.3.1770': attribute type 10 has an invalid length. [ 331.044519][T10928] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1770'. [ 331.181346][T10930] netlink: 'syz.1.1771': attribute type 10 has an invalid length. [ 331.477260][T10941] netlink: 'syz.2.1775': attribute type 10 has an invalid length. [ 331.506557][T10941] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1775'. [ 331.550662][T10945] netlink: 'syz.1.1774': attribute type 10 has an invalid length. [ 331.607060][T10948] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1776'. [ 332.003823][T10958] netlink: 'syz.2.1781': attribute type 10 has an invalid length. [ 332.031740][T10958] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1781'. [ 332.081917][T10958] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 332.388164][T10971] netlink: 'syz.2.1784': attribute type 10 has an invalid length. [ 332.739285][T10978] netlink: 'syz.1.1794': attribute type 10 has an invalid length. [ 332.911686][T10977] netlink: 'syz.2.1786': attribute type 10 has an invalid length. [ 333.226333][T10984] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1787'. [ 333.745114][T11003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1793'. [ 335.266413][T11043] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1808'. [ 335.971589][T11071] validate_nla: 13 callbacks suppressed [ 335.971636][T11071] netlink: 'syz.2.1819': attribute type 10 has an invalid length. [ 336.120392][T11076] netlink: 'syz.2.1821': attribute type 10 has an invalid length. [ 336.128456][T11076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1821'. [ 336.139288][T11076] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 336.297479][T11082] netlink: 'syz.2.1822': attribute type 10 has an invalid length. [ 336.640387][T11091] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1824'. [ 336.700211][T11090] netlink: 'syz.2.1826': attribute type 23 has an invalid length. [ 336.740459][T11090] netlink: 'syz.2.1826': attribute type 10 has an invalid length. [ 336.961348][T11098] netlink: 'syz.3.1829': attribute type 10 has an invalid length. [ 337.032666][T11100] netlink: 'syz.1.1831': attribute type 10 has an invalid length. [ 337.054450][T11100] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1831'. [ 337.063902][T11100] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 337.133802][T11107] netlink: 'syz.0.1832': attribute type 10 has an invalid length. [ 337.477650][T11119] netlink: 'syz.1.1837': attribute type 10 has an invalid length. [ 337.498742][T11119] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1837'. [ 337.838776][T11126] netlink: 'syz.3.1839': attribute type 23 has an invalid length. [ 338.228415][T11139] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1844'. [ 338.238308][T11139] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 338.507641][T11150] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1849'. [ 338.540484][T11151] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1856'. [ 338.822838][T11162] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1851'. [ 339.414085][T11177] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1859'. [ 339.551048][T11183] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1868'. [ 340.555478][T11208] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 341.522697][T11227] validate_nla: 19 callbacks suppressed [ 341.522717][T11227] netlink: 'syz.2.1877': attribute type 23 has an invalid length. [ 341.576792][T11227] netlink: 'syz.2.1877': attribute type 10 has an invalid length. [ 341.676035][T11235] netlink: 'syz.1.1879': attribute type 10 has an invalid length. [ 341.795329][T11231] netlink: 'syz.3.1878': attribute type 23 has an invalid length. [ 341.863790][T11231] netlink: 'syz.3.1878': attribute type 10 has an invalid length. [ 341.988595][T11242] netlink: 'syz.1.1893': attribute type 10 has an invalid length. [ 342.774003][T11262] netlink: 'syz.2.1892': attribute type 23 has an invalid length. [ 342.896613][T11262] netlink: 'syz.2.1892': attribute type 10 has an invalid length. [ 343.438123][T11269] netlink: 'syz.1.1895': attribute type 23 has an invalid length. [ 343.496046][T11274] netlink: 'syz.2.1897': attribute type 10 has an invalid length. [ 344.209562][T11297] __nla_validate_parse: 5 callbacks suppressed [ 344.209584][T11297] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1907'. [ 344.305098][T11302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1908'. [ 344.315096][T11302] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 344.924447][T11311] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1912'. [ 345.664097][T11332] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1920'. [ 345.877423][T11339] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1923'. [ 346.219684][T11349] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1926'. [ 346.861961][T11369] validate_nla: 16 callbacks suppressed [ 346.861981][T11369] netlink: 'syz.1.1933': attribute type 10 has an invalid length. [ 346.893844][T11369] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1933'. [ 346.904188][T11370] netlink: 'syz.2.1932': attribute type 10 has an invalid length. [ 347.060469][T11373] netlink: 'syz.0.1934': attribute type 10 has an invalid length. [ 347.093796][T11377] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1935'. [ 347.380061][T11382] netlink: 'syz.1.1936': attribute type 10 has an invalid length. [ 348.048541][T11401] netlink: 'syz.0.1944': attribute type 23 has an invalid length. [ 348.059078][T11401] netlink: 'syz.0.1944': attribute type 10 has an invalid length. [ 348.261048][T11405] netlink: 'syz.1.1945': attribute type 10 has an invalid length. [ 348.272953][T11405] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1945'. [ 348.380222][T11407] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1946'. [ 348.641436][T11417] netlink: 'syz.3.1950': attribute type 10 has an invalid length. [ 348.670912][T11418] netlink: 'syz.2.1947': attribute type 10 has an invalid length. [ 348.687799][T11415] netlink: 'syz.0.1949': attribute type 10 has an invalid length. [ 350.030759][T11446] __nla_validate_parse: 3 callbacks suppressed [ 350.030778][T11446] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1967'. [ 350.076487][T11451] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1959'. [ 350.093026][T11450] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1960'. [ 350.566075][T11459] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1970'. [ 350.976111][T11470] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1966'. [ 351.438536][T11483] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1971'. [ 351.999167][T11503] validate_nla: 9 callbacks suppressed [ 351.999186][T11503] netlink: 'syz.0.1985': attribute type 10 has an invalid length. [ 352.599037][T11521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1984'. [ 353.106772][T11530] netlink: 'syz.0.1988': attribute type 10 has an invalid length. [ 353.127296][T11537] netlink: 'syz.1.1990': attribute type 10 has an invalid length. [ 353.376585][T11541] netlink: 'syz.3.1992': attribute type 10 has an invalid length. [ 353.414821][T11541] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1992'. [ 354.029608][T11551] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1995'. [ 354.911549][T11554] netlink: 'syz.3.1996': attribute type 10 has an invalid length. [ 354.976486][T11554] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1996'. [ 355.499432][T11555] netlink: 'syz.0.1997': attribute type 10 has an invalid length. [ 356.254499][T11566] netlink: 'syz.3.2000': attribute type 10 has an invalid length. [ 356.264243][T11566] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2000'. [ 356.588036][T11563] netlink: 'syz.0.1999': attribute type 10 has an invalid length. [ 356.994660][T11582] netlink: 'syz.1.2004': attribute type 10 has an invalid length. [ 357.004926][T11583] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2005'. [ 357.044931][T11584] netlink: 'syz.3.2006': attribute type 10 has an invalid length. [ 357.053096][T11584] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2006'. [ 357.450017][T11595] netlink: 'syz.1.2011': attribute type 23 has an invalid length. [ 357.505838][T11595] netlink: 'syz.1.2011': attribute type 10 has an invalid length. [ 358.053177][T11608] netlink: 'syz.2.2016': attribute type 10 has an invalid length. [ 358.222819][T11613] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2017'. [ 358.311604][T11618] netlink: 'syz.0.2018': attribute type 10 has an invalid length. [ 358.329219][T11618] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2018'. [ 358.394955][T11617] netlink: 'syz.2.2019': attribute type 10 has an invalid length. [ 358.411946][T11617] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2019'. [ 358.421620][T11617] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 358.800454][T11625] netlink: 'syz.0.2022': attribute type 23 has an invalid length. [ 358.848858][T11625] netlink: 'syz.0.2022': attribute type 10 has an invalid length. [ 358.901910][T11632] netlink: 'syz.1.2025': attribute type 10 has an invalid length. [ 358.947787][T11632] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2025'. [ 359.322263][T11645] netlink: 'syz.1.2029': attribute type 10 has an invalid length. [ 359.331057][T11645] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2029'. [ 359.340922][T11645] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 359.480286][T11652] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2030'. [ 359.721920][T11659] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2034'. [ 361.677136][T11722] __nla_validate_parse: 2 callbacks suppressed [ 361.677174][T11722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2060'. [ 362.374601][T11733] validate_nla: 7 callbacks suppressed [ 362.374641][T11733] netlink: 'syz.0.2066': attribute type 10 has an invalid length. [ 362.476191][T11738] netlink: 'syz.3.2068': attribute type 10 has an invalid length. [ 362.495999][T11738] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2068'. [ 362.507212][T11734] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2067'. [ 362.586326][T11734] netlink: 'syz.2.2067': attribute type 29 has an invalid length. [ 362.611474][T11734] netlink: 'syz.2.2067': attribute type 29 has an invalid length. [ 363.226705][T11748] netlink: 'syz.1.2072': attribute type 23 has an invalid length. [ 363.309912][T11748] netlink: 'syz.1.2072': attribute type 10 has an invalid length. [ 363.441434][T11753] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2073'. [ 363.976065][T11758] netlink: 'syz.1.2077': attribute type 29 has an invalid length. [ 363.985517][T11758] netlink: 'syz.1.2077': attribute type 29 has an invalid length. [ 364.961473][T11773] netlink: 'syz.2.2081': attribute type 10 has an invalid length. [ 365.095648][T11773] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2081'. [ 365.901965][T11784] netlink: 'syz.1.2083': attribute type 10 has an invalid length. [ 365.950298][T11784] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2083'. [ 366.298155][T11793] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2087'. [ 366.562519][T11798] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2088'. [ 366.677784][T11800] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2089'. [ 366.991931][T11814] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2095'. [ 367.386279][T11825] validate_nla: 8 callbacks suppressed [ 367.386319][T11825] netlink: 'syz.2.2098': attribute type 10 has an invalid length. [ 368.514553][T11845] netlink: 'syz.2.2106': attribute type 10 has an invalid length. [ 368.522419][T11845] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2106'. [ 368.538179][T11845] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 368.567996][T11853] netlink: 'syz.0.2108': attribute type 10 has an invalid length. [ 368.577378][T11853] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2108'. [ 368.588385][T11854] netlink: 'syz.3.2107': attribute type 10 has an invalid length. [ 368.734113][T11856] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2105'. [ 368.772311][T11848] netlink: 'syz.1.2105': attribute type 29 has an invalid length. [ 368.795347][T11848] netlink: 'syz.1.2105': attribute type 29 has an invalid length. [ 369.073015][T11861] netlink: 'syz.2.2117': attribute type 10 has an invalid length. [ 369.095193][T11861] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2117'. [ 369.111804][T11861] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 369.239557][T11865] netlink: 'syz.1.2110': attribute type 23 has an invalid length. [ 369.305995][T11865] netlink: 'syz.1.2110': attribute type 10 has an invalid length. [ 369.607972][T11876] netlink: 'syz.1.2115': attribute type 10 has an invalid length. [ 369.648365][T11876] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2115'. [ 369.658509][T11876] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 369.674917][T11881] FAULT_INJECTION: forcing a failure. [ 369.674917][T11881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.695913][T11881] CPU: 0 PID: 11881 Comm: syz.2.2119 Not tainted syzkaller #0 [ 369.703432][T11881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.713526][T11881] Call Trace: [ 369.716829][T11881] [ 369.719777][T11881] dump_stack_lvl+0x16c/0x230 [ 369.724483][T11881] ? show_regs_print_info+0x20/0x20 [ 369.729724][T11881] ? load_image+0x3b0/0x3b0 [ 369.734244][T11881] ? __lock_acquire+0x7c80/0x7c80 [ 369.739287][T11881] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 369.745460][T11881] should_fail_ex+0x39d/0x4d0 [ 369.750184][T11881] _copy_to_user+0x2f/0xa0 [ 369.754624][T11881] put_user_ifreq+0x78/0xb0 [ 369.759153][T11881] sock_do_ioctl+0x255/0x2f0 [ 369.763767][T11881] ? sock_show_fdinfo+0xb0/0xb0 [ 369.768650][T11881] sock_ioctl+0x623/0x7a0 [ 369.772993][T11881] ? sock_poll+0x3d0/0x3d0 [ 369.777430][T11881] ? bpf_lsm_file_ioctl+0x9/0x10 [ 369.782411][T11881] ? security_file_ioctl+0x80/0xa0 [ 369.787552][T11881] ? sock_poll+0x3d0/0x3d0 [ 369.791999][T11881] __se_sys_ioctl+0xfd/0x170 [ 369.796612][T11881] do_syscall_64+0x55/0xb0 [ 369.801045][T11881] ? clear_bhb_loop+0x40/0x90 [ 369.805739][T11881] ? clear_bhb_loop+0x40/0x90 [ 369.810433][T11881] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.816342][T11881] RIP: 0033:0x7ff26818f749 [ 369.820767][T11881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.840392][T11881] RSP: 002b:00007ff269073038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.848912][T11881] RAX: ffffffffffffffda RBX: 00007ff2683e5fa0 RCX: 00007ff26818f749 [ 369.856900][T11881] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000024 [ 369.864907][T11881] RBP: 00007ff269073090 R08: 0000000000000000 R09: 0000000000000000 [ 369.872975][T11881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.880981][T11881] R13: 00007ff2683e6038 R14: 00007ff2683e5fa0 R15: 00007fffd33f7888 [ 369.889016][T11881] [ 369.910479][T11884] veth1_to_bond: entered allmulticast mode [ 369.984008][T11890] FAULT_INJECTION: forcing a failure. [ 369.984008][T11890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.999883][T11890] CPU: 0 PID: 11890 Comm: syz.1.2121 Not tainted syzkaller #0 [ 370.007405][T11890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 370.017485][T11890] Call Trace: [ 370.020778][T11890] [ 370.023723][T11890] dump_stack_lvl+0x16c/0x230 [ 370.028438][T11890] ? show_regs_print_info+0x20/0x20 [ 370.033658][T11890] ? load_image+0x3b0/0x3b0 [ 370.038179][T11890] ? __might_fault+0xaa/0x120 [ 370.042877][T11890] ? __lock_acquire+0x7c80/0x7c80 [ 370.047939][T11890] should_fail_ex+0x39d/0x4d0 [ 370.052646][T11890] _copy_from_user+0x2f/0xe0 [ 370.057264][T11890] generic_map_update_batch+0x53f/0x810 [ 370.062855][T11890] ? rcu_read_unlock+0xa0/0xa0 [ 370.067650][T11890] ? __fdget+0x180/0x210 [ 370.071913][T11890] ? rcu_read_unlock+0xa0/0xa0 [ 370.076720][T11890] bpf_map_do_batch+0x3d7/0x610 [ 370.081624][T11890] __sys_bpf+0x31b/0x800 [ 370.085898][T11890] ? bpf_link_show_fdinfo+0x350/0x350 [ 370.091301][T11890] ? lock_chain_count+0x20/0x20 [ 370.096176][T11890] __x64_sys_bpf+0x7c/0x90 [ 370.100607][T11890] do_syscall_64+0x55/0xb0 [ 370.105039][T11890] ? clear_bhb_loop+0x40/0x90 [ 370.109735][T11890] ? clear_bhb_loop+0x40/0x90 [ 370.114427][T11890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.120332][T11890] RIP: 0033:0x7f316618f749 [ 370.124757][T11890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.144390][T11890] RSP: 002b:00007f3166f8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 370.152860][T11890] RAX: ffffffffffffffda RBX: 00007f31663e5fa0 RCX: 00007f316618f749 [ 370.160850][T11890] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 370.168927][T11890] RBP: 00007f3166f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 370.176934][T11890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.184917][T11890] R13: 00007f31663e6038 R14: 00007f31663e5fa0 R15: 00007fffa133d448 [ 370.192914][T11890] [ 370.212419][T11891] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2120'. [ 370.995872][T11914] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2130'. [ 371.101562][T11917] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2131'. [ 371.378150][T11924] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2135'. [ 372.234751][T11955] __nla_validate_parse: 1 callbacks suppressed [ 372.234771][T11955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2144'. [ 372.346546][T11962] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2145'. [ 372.551358][T11965] validate_nla: 19 callbacks suppressed [ 372.551378][T11965] netlink: 'syz.3.2147': attribute type 10 has an invalid length. [ 372.568664][T11965] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2147'. [ 372.714952][T11968] netlink: 'syz.0.2148': attribute type 23 has an invalid length. [ 372.776762][T11968] netlink: 'syz.0.2148': attribute type 10 has an invalid length. [ 373.428214][T11984] netlink: 'syz.2.2155': attribute type 10 has an invalid length. [ 373.540124][T11989] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2156'. [ 373.665738][T11996] netlink: 'syz.1.2157': attribute type 10 has an invalid length. [ 373.700414][T11995] netlink: 'syz.0.2158': attribute type 10 has an invalid length. [ 373.742074][T11995] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2158'. [ 374.247071][T12010] netlink: 'syz.0.2162': attribute type 10 has an invalid length. [ 374.305971][T12010] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2162'. [ 374.363527][T12007] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2161'. [ 374.699418][T12024] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2167'. [ 374.824129][T12026] netlink: 'syz.3.2168': attribute type 10 has an invalid length. [ 375.198924][T12034] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2170'. [ 375.284566][T12030] netlink: 'syz.2.2171': attribute type 23 has an invalid length. [ 375.358576][T12030] netlink: 'syz.2.2171': attribute type 10 has an invalid length. [ 375.377007][T12040] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2173'. [ 377.386875][T12104] __nla_validate_parse: 6 callbacks suppressed [ 377.386896][T12104] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2195'. [ 377.668912][T12115] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2197'. [ 378.108296][T12132] validate_nla: 11 callbacks suppressed [ 378.108314][T12132] netlink: 'syz.3.2202': attribute type 10 has an invalid length. [ 378.412974][T12141] netlink: 'syz.3.2208': attribute type 10 has an invalid length. [ 378.435118][T12141] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2208'. [ 378.455715][T12144] netlink: 'syz.2.2207': attribute type 10 has an invalid length. [ 378.463906][T12144] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2207'. [ 378.757811][T12145] netlink: 'syz.0.2209': attribute type 23 has an invalid length. [ 378.841107][T12145] netlink: 'syz.0.2209': attribute type 10 has an invalid length. [ 378.851582][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.858208][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.422228][T12168] netlink: 'syz.3.2216': attribute type 10 has an invalid length. [ 379.739630][T12177] netlink: 'syz.2.2221': attribute type 10 has an invalid length. [ 379.779521][T12177] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2221'. [ 380.241855][T12197] netlink: 'syz.0.2228': attribute type 10 has an invalid length. [ 380.262748][T12197] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2228'. [ 380.292009][T12195] netlink: 'syz.3.2226': attribute type 10 has an invalid length. [ 380.314539][T12195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2226'. [ 380.651092][T12205] netlink: 'syz.3.2229': attribute type 10 has an invalid length. [ 380.994742][T12218] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2236'. [ 381.153001][T12224] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2238'. [ 381.505359][T12232] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2241'. [ 382.723342][T12257] __nla_validate_parse: 1 callbacks suppressed [ 382.723360][T12257] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2250'. [ 383.065654][T12270] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2255'. [ 383.279069][T12275] validate_nla: 7 callbacks suppressed [ 383.279182][T12275] netlink: 'syz.0.2256': attribute type 23 has an invalid length. [ 383.310994][T12275] netlink: 'syz.0.2256': attribute type 10 has an invalid length. [ 383.664638][T12282] netlink: 'syz.2.2259': attribute type 10 has an invalid length. [ 383.715187][T12280] netlink: 'syz.0.2258': attribute type 3 has an invalid length. [ 383.733761][T12280] netlink: 'syz.0.2258': attribute type 1 has an invalid length. [ 383.752417][T12280] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2258'. [ 384.131406][T12293] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2262'. [ 384.426124][T12303] netlink: 'syz.2.2264': attribute type 10 has an invalid length. [ 384.437596][T12303] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2264'. [ 384.815069][T12308] netlink: 'syz.1.2267': attribute type 23 has an invalid length. [ 385.025368][T12308] netlink: 'syz.1.2267': attribute type 10 has an invalid length. [ 385.096119][T12314] netlink: 'syz.2.2269': attribute type 10 has an invalid length. [ 385.367117][T12317] netlink: 'syz.0.2279': attribute type 10 has an invalid length. [ 385.827071][T12332] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2274'. [ 386.059674][T12340] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2278'. [ 386.071785][T12340] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 386.089699][T12338] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2277'. [ 386.790997][T12368] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2287'. [ 387.161201][T12376] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2292'. [ 387.964558][T12399] __nla_validate_parse: 1 callbacks suppressed [ 387.964576][T12399] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2300'. [ 388.052732][T12405] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2301'. [ 388.536494][T12414] validate_nla: 8 callbacks suppressed [ 388.536547][T12414] netlink: 'syz.1.2306': attribute type 10 has an invalid length. [ 389.215754][T12421] netlink: 'syz.2.2309': attribute type 10 has an invalid length. [ 389.233000][T12421] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2309'. [ 389.323590][T12421] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 389.661167][T12430] netlink: 'syz.3.2311': attribute type 10 has an invalid length. [ 390.066795][T12435] netlink: 'syz.2.2313': attribute type 10 has an invalid length. [ 390.097281][T12435] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2313'. [ 390.491615][T12444] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2315'. [ 390.916793][T12455] netlink: 'syz.1.2320': attribute type 10 has an invalid length. [ 390.943561][T12455] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2320'. [ 391.059289][T12461] netlink: 'syz.2.2322': attribute type 10 has an invalid length. [ 391.493585][T12469] netlink: 'syz.2.2325': attribute type 10 has an invalid length. [ 391.512250][T12469] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2325'. [ 391.522580][T12469] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 391.597461][T12472] netlink: 'syz.3.2327': attribute type 10 has an invalid length. [ 391.606730][T12472] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2327'. [ 391.720294][T12477] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2326'. [ 392.168984][T12490] netlink: 'syz.2.2332': attribute type 10 has an invalid length. [ 392.212178][T12496] netlink: 'syz.0.2334': attribute type 10 has an invalid length. [ 392.224581][T12496] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2334'. [ 393.295623][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 393.307319][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 393.316243][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 393.324985][ T5791] .`: (slave syz_tun): Releasing backup interface [ 393.333776][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 393.344082][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 393.351625][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 393.402285][T12517] __nla_validate_parse: 2 callbacks suppressed [ 393.402304][T12517] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2342'. [ 393.423426][T12519] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2341'. [ 393.606504][ T1127] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.662025][T12523] validate_nla: 6 callbacks suppressed [ 393.662040][T12523] netlink: 'syz.0.2343': attribute type 10 has an invalid length. [ 393.755484][ T1127] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.890631][ T1127] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.106810][ T1127] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.196290][T12537] netlink: 'syz.0.2347': attribute type 10 has an invalid length. [ 394.204476][T12537] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2347'. [ 394.413750][T12514] chnl_net:caif_netlink_parms(): no params data found [ 394.493642][T12544] netlink: 'syz.2.2349': attribute type 10 has an invalid length. [ 394.505028][T12544] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2349'. [ 394.542783][T12545] netlink: 'syz.3.2348': attribute type 23 has an invalid length. [ 394.879282][T12545] netlink: 'syz.3.2348': attribute type 10 has an invalid length. [ 395.281903][T12514] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.296025][T12514] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.316194][T12514] bridge_slave_0: entered allmulticast mode [ 395.341144][T12514] bridge_slave_0: entered promiscuous mode [ 395.395583][ T5798] Bluetooth: hci3: command tx timeout [ 395.478221][T12573] netlink: 'syz.3.2355': attribute type 10 has an invalid length. [ 395.496602][T12573] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2355'. [ 395.516980][T12514] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.524254][T12514] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.544804][T12514] bridge_slave_1: entered allmulticast mode [ 395.582357][T12514] bridge_slave_1: entered promiscuous mode [ 395.769136][T12580] netlink: 'syz.2.2356': attribute type 10 has an invalid length. [ 395.803048][T12580] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2356'. [ 395.899156][T12514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.947207][T12514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.169950][T12514] team0: Port device team_slave_0 added [ 396.186377][T12514] team0: Port device team_slave_1 added [ 396.438739][T12606] netlink: 'syz.2.2362': attribute type 10 has an invalid length. [ 396.447978][T12606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2362'. [ 396.461064][T12606] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 396.485270][T12514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.495221][T12514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.521721][T12514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.563026][T12608] netlink: 'syz.0.2361': attribute type 10 has an invalid length. [ 396.595560][T12514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.602569][T12514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.706190][T12514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.737963][T12603] netlink: 'syz.0.2361': attribute type 23 has an invalid length. [ 397.198382][T12514] hsr_slave_0: entered promiscuous mode [ 397.219213][T12514] hsr_slave_1: entered promiscuous mode [ 397.239313][T12514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.261198][T12514] Cannot create hsr debugfs directory [ 397.316748][ T1127] hsr_slave_0: left promiscuous mode [ 397.355138][ T1127] hsr_slave_1: left promiscuous mode [ 397.383473][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.407500][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.474664][ T5798] Bluetooth: hci3: command tx timeout [ 397.602247][ T1127] veth1_vlan: left promiscuous mode [ 397.625734][ T1127] veth0_vlan: left promiscuous mode [ 398.549967][ T1127] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 398.595589][ T1127] team_slave_1 (unregistering): left promiscuous mode [ 398.602757][ T1127] team_slave_1 (unregistering): left allmulticast mode [ 398.620153][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 398.670353][ T1127] team_slave_0 (unregistering): left promiscuous mode [ 398.677785][ T1127] team_slave_0 (unregistering): left allmulticast mode [ 398.688638][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 398.729105][ T1127] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.189526][ T1127] .` (unregistering): Released all slaves [ 399.243638][T12638] netlink: 'syz.0.2369': attribute type 10 has an invalid length. [ 399.251701][T12638] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2369'. [ 399.274425][T12651] netlink: 21615 bytes leftover after parsing attributes in process `syz.3.2371'. [ 399.283705][T12651] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.2371'. [ 399.293679][T12651] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2371'. [ 399.339395][T12660] netlink: 'syz.2.2373': attribute type 10 has an invalid length. [ 399.350576][T12660] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2373'. [ 399.555719][ T5798] Bluetooth: hci3: command tx timeout [ 400.191657][T12683] netlink: 'syz.0.2379': attribute type 10 has an invalid length. [ 400.244520][T12683] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2379'. [ 400.411783][T12689] netlink: 'syz.2.2381': attribute type 10 has an invalid length. [ 400.434228][T12689] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2381'. [ 400.449627][T12689] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 400.478602][T12700] netlink: 'syz.3.2383': attribute type 10 has an invalid length. [ 400.486723][T12700] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2383'. [ 400.828873][T12514] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 400.885320][T12514] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 400.920017][T12514] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 400.939612][T12514] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 401.295009][T12514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.344294][T12514] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.379402][T12730] netlink: 'syz.3.2389': attribute type 10 has an invalid length. [ 401.404552][T12730] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2389'. [ 401.421580][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.428946][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.441613][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.448887][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.580936][T12735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2391'. [ 401.641926][T12514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.677937][ T5798] Bluetooth: hci3: command tx timeout [ 401.684713][T12732] netlink: 'syz.0.2390': attribute type 23 has an invalid length. [ 401.730864][T12732] netlink: 'syz.0.2390': attribute type 10 has an invalid length. [ 402.010953][T12744] netlink: 'syz.2.2392': attribute type 10 has an invalid length. [ 402.070816][T12744] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 402.284258][T12514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.491209][T12514] veth0_vlan: entered promiscuous mode [ 402.528003][T12761] netlink: 'syz.3.2395': attribute type 10 has an invalid length. [ 402.572698][T12514] veth1_vlan: entered promiscuous mode [ 402.814147][T12514] veth0_macvtap: entered promiscuous mode [ 402.907497][T12514] veth1_macvtap: entered promiscuous mode [ 403.081755][T12514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.182244][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.245584][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.294515][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.310636][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.320986][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.332168][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.354009][T12514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.399095][T12514] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.490894][T12514] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.514372][T12514] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.548321][T12514] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.756134][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.795557][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.896241][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.915275][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.366210][T12797] validate_nla: 4 callbacks suppressed [ 404.366228][T12797] netlink: 'syz.2.2402': attribute type 10 has an invalid length. [ 404.397177][T12797] __nla_validate_parse: 5 callbacks suppressed [ 404.397359][T12797] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2402'. [ 404.911041][T12809] netlink: 'syz.3.2406': attribute type 10 has an invalid length. [ 404.944622][T12809] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2406'. [ 405.344950][T12817] netlink: 'syz.2.2408': attribute type 10 has an invalid length. [ 405.374581][T12817] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2408'. [ 405.678425][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 405.690058][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 405.704856][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 405.718911][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.728653][ T5788] bond0: (slave syz_tun): Releasing backup interface [ 405.751523][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 405.764940][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.159051][ T2955] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.255296][T12841] netlink: 'syz.2.2413': attribute type 10 has an invalid length. [ 406.276235][T12841] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2413'. [ 406.379955][ T2955] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.439001][T12849] netlink: 'syz.1.2414': attribute type 23 has an invalid length. [ 406.533037][ T2955] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.609672][T12843] netlink: 'syz.1.2414': attribute type 10 has an invalid length. [ 407.035236][T12843] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 407.098504][ T2955] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.199753][T12866] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2417'. [ 407.661669][T12879] netlink: 'syz.2.2420': attribute type 10 has an invalid length. [ 407.691358][T12879] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2420'. [ 407.876282][ T5796] Bluetooth: hci1: command tx timeout [ 408.042787][T12825] chnl_net:caif_netlink_parms(): no params data found [ 408.878736][T12825] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.941264][T12825] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.967209][T12825] bridge_slave_0: entered allmulticast mode [ 408.997339][T12825] bridge_slave_0: entered promiscuous mode [ 409.027277][T12919] netlink: 'syz.1.2429': attribute type 10 has an invalid length. [ 409.036382][T12919] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2429'. [ 409.045703][T12919] dummy0: entered promiscuous mode [ 409.050958][T12919] dummy0: entered allmulticast mode [ 409.058522][T12919] bridge0: port 3(dummy0) entered blocking state [ 409.065136][T12919] bridge0: port 3(dummy0) entered disabled state [ 409.073892][T12919] bridge0: port 3(dummy0) entered blocking state [ 409.080459][T12919] bridge0: port 3(dummy0) entered forwarding state [ 409.153738][T12924] netlink: 'syz.3.2427': attribute type 23 has an invalid length. [ 409.182133][T12825] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.191608][T12825] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.199077][T12825] bridge_slave_1: entered allmulticast mode [ 409.208536][T12825] bridge_slave_1: entered promiscuous mode [ 409.216947][T12925] netlink: 'syz.3.2427': attribute type 10 has an invalid length. [ 409.448059][T12931] netlink: 'syz.3.2433': attribute type 10 has an invalid length. [ 409.465023][T12931] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2433'. [ 409.599069][T12825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.637988][T12825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.964700][ T5796] Bluetooth: hci1: command tx timeout [ 409.977162][T12825] team0: Port device team_slave_0 added [ 410.017602][T12945] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2437'. [ 410.051216][T12825] team0: Port device team_slave_1 added [ 410.409090][T12825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.466467][T12825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.521312][T12825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.552392][T12957] netlink: 'syz.3.2441': attribute type 10 has an invalid length. [ 410.589264][T12957] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2441'. [ 410.684590][T12967] netlink: 'syz.1.2440': attribute type 23 has an invalid length. [ 410.718842][T12825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.739188][T12825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.804585][T12825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.843444][T12969] netlink: 'syz.1.2440': attribute type 10 has an invalid length. [ 411.170771][ T2955] hsr_slave_0: left promiscuous mode [ 411.212051][ T2955] hsr_slave_1: left promiscuous mode [ 411.219538][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.232580][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.251321][ T2955] bridge0: port 4(batadv0) entered disabled state [ 411.264040][ T2955] bridge0: port 3(dummy0) entered disabled state [ 411.272897][ T2955] bridge_slave_1: left allmulticast mode [ 411.279881][ T2955] bridge_slave_1: left promiscuous mode [ 411.286921][ T2955] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.300379][ T2955] bridge_slave_0: left allmulticast mode [ 411.307100][ T2955] bridge_slave_0: left promiscuous mode [ 411.312986][ T2955] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.387840][ T2955] veth1_vlan: left promiscuous mode [ 411.393235][ T2955] veth0_vlan: left promiscuous mode [ 412.044636][ T5796] Bluetooth: hci1: command tx timeout [ 413.489239][ T2955] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 413.533654][ T2955] team0 (unregistering): Port device team_slave_1 removed [ 413.576470][ T2955] team0 (unregistering): Port device C removed [ 413.614465][ T2955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.658657][ T2955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.058338][ T2955] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 414.067505][ T2955] bond0 (unregistering): Released all slaves [ 414.124582][ T5796] Bluetooth: hci1: command tx timeout [ 414.163507][T12985] netlink: 'syz.2.2447': attribute type 10 has an invalid length. [ 414.171733][T12985] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2447'. [ 414.180885][T12992] netlink: 'syz.3.2450': attribute type 10 has an invalid length. [ 414.189651][T12992] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2450'. [ 414.280593][T12825] hsr_slave_0: entered promiscuous mode [ 414.303768][T12825] hsr_slave_1: entered promiscuous mode [ 414.331371][T12825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.347578][T12825] Cannot create hsr debugfs directory [ 414.603352][T13006] netlink: 'syz.2.2453': attribute type 23 has an invalid length. [ 414.672831][T13001] netlink: 'syz.2.2453': attribute type 10 has an invalid length. [ 415.112103][T13017] netlink: 'syz.1.2457': attribute type 10 has an invalid length. [ 415.166744][T13017] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2457'. [ 415.658857][T13019] netlink: 'syz.2.2456': attribute type 10 has an invalid length. [ 415.666926][T13019] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2456'. [ 415.871440][T13040] FAULT_INJECTION: forcing a failure. [ 415.871440][T13040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.914844][T13040] CPU: 1 PID: 13040 Comm: syz.2.2460 Not tainted syzkaller #0 [ 415.922381][T13040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 415.932471][T13040] Call Trace: [ 415.935784][T13040] [ 415.938749][T13040] dump_stack_lvl+0x16c/0x230 [ 415.943484][T13040] ? show_regs_print_info+0x20/0x20 [ 415.948732][T13040] ? load_image+0x3b0/0x3b0 [ 415.953364][T13040] ? __lock_acquire+0x7c80/0x7c80 [ 415.958439][T13040] ? snprintf+0xdb/0x120 [ 415.962730][T13040] should_fail_ex+0x39d/0x4d0 [ 415.967462][T13040] _copy_to_user+0x2f/0xa0 [ 415.971927][T13040] simple_read_from_buffer+0xe7/0x150 [ 415.977364][T13040] proc_fail_nth_read+0x1e3/0x250 [ 415.982454][T13040] ? proc_fault_inject_write+0x340/0x340 [ 415.988139][T13040] ? fsnotify_perm+0x271/0x5e0 [ 415.992968][T13040] ? proc_fault_inject_write+0x340/0x340 [ 415.998645][T13040] vfs_read+0x27e/0x920 [ 416.002855][T13040] ? kernel_read+0x1e0/0x1e0 [ 416.007497][T13040] ? __fget_files+0x28/0x4d0 [ 416.012134][T13040] ? __fget_files+0x44a/0x4d0 [ 416.016863][T13040] ? __fdget_pos+0x2a3/0x330 [ 416.021529][T13040] ? ksys_read+0x75/0x250 [ 416.025911][T13040] ksys_read+0x147/0x250 [ 416.030190][T13040] ? vfs_write+0x940/0x940 [ 416.034636][T13040] ? lockdep_hardirqs_on+0x98/0x150 [ 416.039858][T13040] do_syscall_64+0x55/0xb0 [ 416.044313][T13040] ? clear_bhb_loop+0x40/0x90 [ 416.049005][T13040] ? clear_bhb_loop+0x40/0x90 [ 416.053695][T13040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.059600][T13040] RIP: 0033:0x7ff26818e15c [ 416.064028][T13040] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 416.083654][T13040] RSP: 002b:00007ff269073030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 416.092079][T13040] RAX: ffffffffffffffda RBX: 00007ff2683e5fa0 RCX: 00007ff26818e15c [ 416.100067][T13040] RDX: 000000000000000f RSI: 00007ff2690730a0 RDI: 0000000000000005 [ 416.108056][T13040] RBP: 00007ff269073090 R08: 0000000000000000 R09: 0000000000000000 [ 416.116036][T13040] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 416.124026][T13040] R13: 00007ff2683e6038 R14: 00007ff2683e5fa0 R15: 00007fffd33f7888 [ 416.132025][T13040] [ 416.251063][T12825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 416.262715][T12825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 416.312192][T12825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 416.361083][T12825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 416.590070][T13049] netlink: 'syz.3.2461': attribute type 10 has an invalid length. [ 416.621562][T13049] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2461'. [ 416.641381][T13056] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2464'. [ 417.007914][T12825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.087561][T12825] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.146793][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.154951][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.213886][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.221183][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.470750][T13091] netlink: 'syz.1.2470': attribute type 10 has an invalid length. [ 417.479404][T13091] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2470'. [ 417.601817][T13096] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2471'. [ 417.883890][T13105] netlink: 'syz.2.2473': attribute type 10 has an invalid length. [ 417.907350][T13105] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2473'. [ 417.921135][T13105] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 418.021323][T12825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.152328][T12825] veth0_vlan: entered promiscuous mode [ 418.175079][T12825] veth1_vlan: entered promiscuous mode [ 418.242765][T12825] veth0_macvtap: entered promiscuous mode [ 418.261000][T12825] veth1_macvtap: entered promiscuous mode [ 418.296839][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.313839][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.332857][T12825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.356798][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.371515][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.385906][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.400385][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.412290][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.428995][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.445563][T12825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.475009][T12825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.488905][T12825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.499832][T12825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.516300][T12825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.649369][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.663884][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.728011][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.741742][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.480959][T13133] netlink: 'syz.1.2480': attribute type 10 has an invalid length. [ 419.517986][T13133] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2480'. [ 419.549507][T13135] netlink: 'syz.0.2481': attribute type 10 has an invalid length. [ 419.576243][T13135] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2481'. [ 419.989746][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 419.999044][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 420.007685][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 420.020924][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 420.033383][ T5798] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 420.054475][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 420.154133][T13137] netlink: 'syz.3.2482': attribute type 10 has an invalid length. [ 420.163667][T13137] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2482'. [ 420.216385][ T5787] .`: (slave syz_tun): Releasing backup interface [ 420.364918][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.447807][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.462265][T13149] netlink: 'syz.3.2484': attribute type 23 has an invalid length. [ 420.483823][T13150] netlink: 'syz.3.2484': attribute type 10 has an invalid length. [ 420.530169][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.657927][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.672579][T13154] FAULT_INJECTION: forcing a failure. [ 420.672579][T13154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.688844][T13154] CPU: 0 PID: 13154 Comm: syz.3.2485 Not tainted syzkaller #0 [ 420.696399][T13154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 420.706486][T13154] Call Trace: [ 420.709798][T13154] [ 420.712764][T13154] dump_stack_lvl+0x16c/0x230 [ 420.717490][T13154] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.723690][T13154] ? show_regs_print_info+0x20/0x20 [ 420.728942][T13154] ? load_image+0x3b0/0x3b0 [ 420.733502][T13154] should_fail_ex+0x39d/0x4d0 [ 420.738240][T13154] _copy_to_user+0x2f/0xa0 [ 420.742698][T13154] put_user_ifreq+0x78/0xb0 [ 420.747257][T13154] sock_do_ioctl+0x255/0x2f0 [ 420.751884][T13154] ? sock_show_fdinfo+0xb0/0xb0 [ 420.756797][T13154] sock_ioctl+0x623/0x7a0 [ 420.761168][T13154] ? sock_poll+0x3d0/0x3d0 [ 420.763362][T13143] chnl_net:caif_netlink_parms(): no params data found [ 420.765609][T13154] ? bpf_lsm_file_ioctl+0x9/0x10 [ 420.765633][T13154] ? security_file_ioctl+0x80/0xa0 [ 420.765662][T13154] ? sock_poll+0x3d0/0x3d0 [ 420.765682][T13154] __se_sys_ioctl+0xfd/0x170 [ 420.765711][T13154] do_syscall_64+0x55/0xb0 [ 420.765737][T13154] ? clear_bhb_loop+0x40/0x90 [ 420.765758][T13154] ? clear_bhb_loop+0x40/0x90 [ 420.765782][T13154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.811448][T13154] RIP: 0033:0x7f0964d8f749 [ 420.815905][T13154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.835560][T13154] RSP: 002b:00007f0965bf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.844033][T13154] RAX: ffffffffffffffda RBX: 00007f0964fe5fa0 RCX: 00007f0964d8f749 [ 420.852021][T13154] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000025 [ 420.860005][T13154] RBP: 00007f0965bf4090 R08: 0000000000000000 R09: 0000000000000000 [ 420.867994][T13154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.875997][T13154] R13: 00007f0964fe6038 R14: 00007f0964fe5fa0 R15: 00007ffe7ac45268 [ 420.884041][T13154] [ 420.978814][T13143] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.990601][T13143] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.006982][T13143] bridge_slave_0: entered allmulticast mode [ 421.016036][T13143] bridge_slave_0: entered promiscuous mode [ 421.042735][T13143] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.050171][T13143] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.063654][T13143] bridge_slave_1: entered allmulticast mode [ 421.072326][T13143] bridge_slave_1: entered promiscuous mode [ 421.359888][T13143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.417134][T13143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.658179][T13143] team0: Port device team_slave_0 added [ 421.668667][T13168] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2489'. [ 421.849596][T13143] team0: Port device team_slave_1 added [ 421.880753][T13171] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2490'. [ 421.915982][T13175] netlink: 'syz.0.2491': attribute type 10 has an invalid length. [ 421.924086][T13175] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2491'. [ 421.934454][T13175] dummy0: entered promiscuous mode [ 421.939627][T13175] dummy0: entered allmulticast mode [ 421.950471][T13175] bridge0: port 3(dummy0) entered blocking state [ 421.960485][T13175] bridge0: port 3(dummy0) entered disabled state [ 421.976767][T13175] bridge0: port 3(dummy0) entered blocking state [ 421.983266][T13175] bridge0: port 3(dummy0) entered forwarding state [ 422.026931][T13143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.037836][T13143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.064209][T13143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.114718][ T5796] Bluetooth: hci4: command tx timeout [ 422.123440][T13143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.142297][T13143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.179779][T13143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.588818][T13143] hsr_slave_0: entered promiscuous mode [ 422.646653][T13143] hsr_slave_1: entered promiscuous mode [ 422.658153][T13143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.670088][T13143] Cannot create hsr debugfs directory [ 422.824391][T13190] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 422.830483][T13190] pim6reg0: linktype set to 769 [ 422.862534][T13194] pim6reg0: tun_chr_ioctl cmd 35588 [ 422.967618][T13199] netlink: 'syz.0.2495': attribute type 10 has an invalid length. [ 423.007707][T13199] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2495'. [ 423.245891][T13208] netlink: 'syz.3.2497': attribute type 23 has an invalid length. [ 423.280734][T13215] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2499'. [ 423.295390][T13211] netlink: 'syz.3.2497': attribute type 10 has an invalid length. [ 423.559810][T13219] netlink: 'syz.3.2501': attribute type 10 has an invalid length. [ 423.575505][T13219] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2501'. [ 424.197093][ T5796] Bluetooth: hci4: command tx timeout [ 425.872170][ T59] hsr_slave_0: left promiscuous mode [ 425.938150][ T59] hsr_slave_1: left promiscuous mode [ 425.984430][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.991916][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.274551][ T5796] Bluetooth: hci4: command tx timeout [ 427.012565][T13256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2507'. [ 428.354438][ T5796] Bluetooth: hci4: command tx timeout [ 428.734543][ T59] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 428.777769][ T59] team_slave_1 (unregistering): left promiscuous mode [ 428.785448][ T59] team_slave_1 (unregistering): left allmulticast mode [ 428.795866][ T59] team0 (unregistering): Port device team_slave_1 removed [ 428.834138][ T59] team_slave_0 (unregistering): left promiscuous mode [ 428.841168][ T59] team_slave_0 (unregistering): left allmulticast mode [ 428.850503][ T59] team0 (unregistering): Port device team_slave_0 removed [ 428.892036][ T59] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.933673][ T59] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.976584][ T59] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 429.341983][ T59] .` (unregistering): Released all slaves [ 429.375276][T13256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2507'. [ 429.388051][T13258] netlink: 'syz.3.2508': attribute type 23 has an invalid length. [ 429.426178][T13260] netlink: 'syz.3.2508': attribute type 10 has an invalid length. [ 429.557691][T13271] netlink: 'syz.1.2512': attribute type 10 has an invalid length. [ 429.573862][T13271] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2512'. [ 429.832200][T13143] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 429.867063][T13143] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 429.930600][T13143] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 429.967499][T13143] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 430.171426][T13143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.213022][T13143] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.236423][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.243628][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.287206][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.294486][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.358719][T13291] netlink: 'syz.0.2515': attribute type 10 has an invalid length. [ 430.407910][T13291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2515'. [ 430.728848][T13303] netlink: 'syz.0.2518': attribute type 29 has an invalid length. [ 430.764807][T13303] netlink: 'syz.0.2518': attribute type 29 has an invalid length. [ 430.793330][T13307] netlink: 'syz.0.2518': attribute type 29 has an invalid length. [ 431.074160][T13307] netlink: 'syz.0.2518': attribute type 21 has an invalid length. [ 431.304107][T13143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.508892][T13143] veth0_vlan: entered promiscuous mode [ 431.532182][T13143] veth1_vlan: entered promiscuous mode [ 431.573032][T13326] netlink: 'syz.0.2522': attribute type 10 has an invalid length. [ 431.581128][T13326] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2522'. [ 431.641877][T13323] netlink: 'syz.3.2520': attribute type 23 has an invalid length. [ 431.779619][T13143] veth0_macvtap: entered promiscuous mode [ 431.799920][T13143] veth1_macvtap: entered promiscuous mode [ 431.840401][T13143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.864087][T13143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.885878][T13143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.904743][T13143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.932243][T13143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.955451][T13143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.980858][T13143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.993206][T13143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.010064][T13143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.022684][T13143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.039886][T13143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.089997][T13143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.161230][T13143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.180264][T13143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.190392][T13143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.219213][T13143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.363352][T13348] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2526'. [ 432.465449][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.504651][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.609162][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.639286][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.630307][T13372] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2531'. [ 434.112445][T13385] FAULT_INJECTION: forcing a failure. [ 434.112445][T13385] name failslab, interval 1, probability 0, space 0, times 0 [ 434.146575][T13386] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2535'. [ 434.160518][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 434.171306][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 434.185808][T13385] CPU: 1 PID: 13385 Comm: syz.2.2534 Not tainted syzkaller #0 [ 434.193355][T13385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.203548][T13385] Call Trace: [ 434.206877][T13385] [ 434.209856][T13385] dump_stack_lvl+0x16c/0x230 [ 434.214599][T13385] ? show_regs_print_info+0x20/0x20 [ 434.219850][T13385] ? load_image+0x3b0/0x3b0 [ 434.224416][T13385] ? __might_sleep+0xe0/0xe0 [ 434.229056][T13385] ? __lock_acquire+0x7c80/0x7c80 [ 434.234128][T13385] should_fail_ex+0x39d/0x4d0 [ 434.238839][T13385] should_failslab+0x9/0x20 [ 434.243375][T13385] slab_pre_alloc_hook+0x59/0x310 [ 434.248539][T13385] kmem_cache_alloc+0x5a/0x2e0 [ 434.253348][T13385] ? security_inode_alloc+0x34/0x110 [ 434.258690][T13385] security_inode_alloc+0x34/0x110 [ 434.263836][T13385] inode_init_always+0x8fc/0xc90 [ 434.268812][T13385] new_inode_pseudo+0x95/0x1d0 [ 434.273603][T13385] __sock_create+0x12d/0x940 [ 434.278225][T13385] ? __asan_memset+0x22/0x40 [ 434.282862][T13385] udp_sock_create4+0xbf/0x4b0 [ 434.287684][T13385] ? erspan_exit_batch_net+0x30/0x30 [ 434.293101][T13385] rxrpc_lookup_local+0xccb/0x1550 [ 434.298254][T13385] ? rxrpc_local_dont_fragment+0x70/0x70 [ 434.303917][T13385] ? lockdep_hardirqs_on+0x98/0x150 [ 434.309145][T13385] ? _local_bh_enable+0xa0/0xa0 [ 434.314022][T13385] rxrpc_sendmsg+0x30a/0x5b0 [ 434.318640][T13385] ? rxrpc_getsockopt+0x150/0x150 [ 434.323694][T13385] ____sys_sendmsg+0x5bf/0x950 [ 434.328500][T13385] ? __sys_sendmsg_sock+0x30/0x30 [ 434.333548][T13385] ? __import_iovec+0x3fa/0x860 [ 434.338438][T13385] ? import_iovec+0x73/0xa0 [ 434.342977][T13385] ___sys_sendmsg+0x220/0x290 [ 434.347688][T13385] ? __sys_sendmsg+0x270/0x270 [ 434.352531][T13385] ? __lock_acquire+0x7c80/0x7c80 [ 434.357618][T13385] __se_sys_sendmsg+0x1a5/0x270 [ 434.362511][T13385] ? __x64_sys_sendmsg+0x80/0x80 [ 434.367503][T13385] ? lockdep_hardirqs_on+0x98/0x150 [ 434.372735][T13385] do_syscall_64+0x55/0xb0 [ 434.377178][T13385] ? clear_bhb_loop+0x40/0x90 [ 434.381898][T13385] ? clear_bhb_loop+0x40/0x90 [ 434.386614][T13385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.392535][T13385] RIP: 0033:0x7f3dc7f8f749 [ 434.396975][T13385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.416605][T13385] RSP: 002b:00007f3dc8d7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.425042][T13385] RAX: ffffffffffffffda RBX: 00007f3dc81e5fa0 RCX: 00007f3dc7f8f749 [ 434.433128][T13385] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 434.441117][T13385] RBP: 00007f3dc8d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 434.449115][T13385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.457124][T13385] R13: 00007f3dc81e6038 R14: 00007f3dc81e5fa0 R15: 00007fff09e4b888 [ 434.465149][T13385] [ 434.471958][T13385] socket: no more sockets [ 434.477019][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 434.497148][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 434.516774][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 434.531950][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 434.821807][ T5789] bond0: (slave syz_tun): Releasing backup interface [ 435.105779][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.528674][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.382484][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.461779][T13387] chnl_net:caif_netlink_parms(): no params data found [ 436.579905][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.595594][ T5796] Bluetooth: hci0: command tx timeout [ 436.648663][T13437] validate_nla: 6 callbacks suppressed [ 436.648777][T13437] netlink: 'syz.2.2544': attribute type 23 has an invalid length. [ 436.680730][T13443] netlink: 'syz.2.2544': attribute type 10 has an invalid length. [ 436.734053][T13443] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 437.056852][T13387] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.074066][T13387] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.100137][T13387] bridge_slave_0: entered allmulticast mode [ 437.133415][T13387] bridge_slave_0: entered promiscuous mode [ 437.248195][T13387] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.272727][T13387] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.325634][T13387] bridge_slave_1: entered allmulticast mode [ 437.334205][T13387] bridge_slave_1: entered promiscuous mode [ 437.636368][T13387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.736649][T13387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.620199][T13387] team0: Port device team_slave_0 added [ 438.674948][ T5796] Bluetooth: hci0: command tx timeout [ 438.680898][T13387] team0: Port device team_slave_1 added [ 439.011343][T13387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.018766][T13387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.047677][T13387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.094830][T13485] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2555'. [ 439.115563][T13387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.122705][T13387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.150015][T13387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.277551][T13488] FAULT_INJECTION: forcing a failure. [ 439.277551][T13488] name failslab, interval 1, probability 0, space 0, times 0 [ 439.297515][T13488] CPU: 1 PID: 13488 Comm: syz.0.2556 Not tainted syzkaller #0 [ 439.305069][T13488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 439.315161][T13488] Call Trace: [ 439.318473][T13488] [ 439.321443][T13488] dump_stack_lvl+0x16c/0x230 [ 439.326180][T13488] ? show_regs_print_info+0x20/0x20 [ 439.331413][T13488] ? load_image+0x3b0/0x3b0 [ 439.335954][T13488] ? __might_sleep+0xe0/0xe0 [ 439.340585][T13488] ? __lock_acquire+0x7c80/0x7c80 [ 439.345646][T13488] ? skb_gro_incr_csum_unnecessary+0x300/0x300 [ 439.351842][T13488] should_fail_ex+0x39d/0x4d0 [ 439.356567][T13488] should_failslab+0x9/0x20 [ 439.361109][T13488] slab_pre_alloc_hook+0x59/0x310 [ 439.366188][T13488] ? inet6_rtm_newroute+0x946/0x1b40 [ 439.371539][T13488] __kmem_cache_alloc_node+0x53/0x260 [ 439.376957][T13488] ? inet6_rtm_newroute+0x946/0x1b40 [ 439.382275][T13488] kmalloc_trace+0x2a/0xe0 [ 439.386730][T13488] inet6_rtm_newroute+0x946/0x1b40 [ 439.391891][T13488] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 439.397862][T13488] ? do_raw_spin_unlock+0x121/0x230 [ 439.403136][T13488] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 439.409069][T13488] rtnetlink_rcv_msg+0x7c7/0xf10 [ 439.414041][T13488] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 439.419181][T13488] ? lockdep_hardirqs_on+0x98/0x150 [ 439.424412][T13488] ? rtnetlink_bind+0x80/0x80 [ 439.429215][T13488] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 439.435245][T13488] ? __dev_queue_xmit+0x245/0x35a0 [ 439.440406][T13488] ? lock_chain_count+0x20/0x20 [ 439.445300][T13488] ? __local_bh_enable_ip+0x12e/0x1c0 [ 439.450712][T13488] ? lockdep_hardirqs_on+0x98/0x150 [ 439.455957][T13488] ? __local_bh_enable_ip+0x12e/0x1c0 [ 439.461360][T13488] ? _local_bh_enable+0xa0/0xa0 [ 439.466257][T13488] ? __dev_queue_xmit+0x245/0x35a0 [ 439.471417][T13488] ? __dev_queue_xmit+0x1449/0x35a0 [ 439.476687][T13488] ? __dev_queue_xmit+0x245/0x35a0 [ 439.481851][T13488] ? ref_tracker_free+0x634/0x7d0 [ 439.486915][T13488] ? __copy_skb_header+0xa7/0x550 [ 439.492015][T13488] netlink_rcv_skb+0x216/0x480 [ 439.496825][T13488] ? rtnetlink_bind+0x80/0x80 [ 439.501558][T13488] ? netlink_ack+0x1110/0x1110 [ 439.506383][T13488] ? __lock_acquire+0x7c80/0x7c80 [ 439.511444][T13488] ? netlink_deliver_tap+0x2e/0x1b0 [ 439.516686][T13488] netlink_unicast+0x751/0x8d0 [ 439.521551][T13488] netlink_sendmsg+0x8c1/0xbe0 [ 439.526365][T13488] ? netlink_getsockopt+0x580/0x580 [ 439.531620][T13488] ? aa_sock_msg_perm+0x94/0x150 [ 439.536617][T13488] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 439.541930][T13488] ? security_socket_sendmsg+0x80/0xa0 [ 439.547418][T13488] ? netlink_getsockopt+0x580/0x580 [ 439.552657][T13488] ____sys_sendmsg+0x5bf/0x950 [ 439.557468][T13488] ? __asan_memset+0x22/0x40 [ 439.562101][T13488] ? __sys_sendmsg_sock+0x30/0x30 [ 439.567161][T13488] ? __import_iovec+0x5f2/0x860 [ 439.572056][T13488] ? import_iovec+0x73/0xa0 [ 439.576599][T13488] ___sys_sendmsg+0x220/0x290 [ 439.581313][T13488] ? __sys_sendmsg+0x270/0x270 [ 439.586134][T13488] ? __lock_acquire+0x7c80/0x7c80 [ 439.591212][T13488] __se_sys_sendmsg+0x1a5/0x270 [ 439.596109][T13488] ? __x64_sys_sendmsg+0x80/0x80 [ 439.601108][T13488] ? lockdep_hardirqs_on+0x98/0x150 [ 439.606339][T13488] do_syscall_64+0x55/0xb0 [ 439.610786][T13488] ? clear_bhb_loop+0x40/0x90 [ 439.615540][T13488] ? clear_bhb_loop+0x40/0x90 [ 439.620249][T13488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.626171][T13488] RIP: 0033:0x7f295cb8f749 [ 439.630648][T13488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.650287][T13488] RSP: 002b:00007f295adf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.658750][T13488] RAX: ffffffffffffffda RBX: 00007f295cde5fa0 RCX: 00007f295cb8f749 [ 439.666845][T13488] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 439.674841][T13488] RBP: 00007f295adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 439.682840][T13488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.690851][T13488] R13: 00007f295cde6038 R14: 00007f295cde5fa0 R15: 00007ffd45fffb38 [ 439.698877][T13488] [ 440.159094][T13387] hsr_slave_0: entered promiscuous mode [ 440.178501][T13387] hsr_slave_1: entered promiscuous mode [ 440.311312][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.318079][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.755250][ T5796] Bluetooth: hci0: command tx timeout [ 441.610911][T13531] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2564'. [ 441.880621][T13533] netlink: 'syz.0.2565': attribute type 21 has an invalid length. [ 441.897138][T13533] netlink: 'syz.0.2565': attribute type 6 has an invalid length. [ 441.907201][T13533] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2565'. [ 442.490598][T13549] netlink: 'syz.0.2569': attribute type 23 has an invalid length. [ 442.526291][T13550] netlink: 'syz.0.2569': attribute type 10 has an invalid length. [ 442.652611][T13550] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 442.844946][ T5796] Bluetooth: hci0: command tx timeout [ 443.157912][ T49] hsr_slave_0: left promiscuous mode [ 443.181245][ T49] hsr_slave_1: left promiscuous mode [ 443.194103][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.214499][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.256959][ T49] bridge0: port 4(team0) entered disabled state [ 443.293961][ T49] bridge0: port 3(dummy0) entered disabled state [ 443.305633][ T49] bridge_slave_1: left allmulticast mode [ 443.311925][ T49] bridge_slave_1: left promiscuous mode [ 443.323623][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.347294][ T49] bridge_slave_0: left allmulticast mode [ 443.364472][ T49] bridge_slave_0: left promiscuous mode [ 443.370621][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.435841][ T49] veth1_vlan: left promiscuous mode [ 445.088657][ T49] geneve1 (unregistering): left promiscuous mode [ 445.095336][ T49] geneve1 (unregistering): left allmulticast mode [ 445.104102][ T49] team0 (unregistering): Port device geneve1 removed [ 445.334274][ T49] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 445.381324][ T49] team_slave_1 (unregistering): left promiscuous mode [ 445.388351][ T49] team_slave_1 (unregistering): left allmulticast mode [ 445.400526][ T49] team0 (unregistering): Port device team_slave_1 removed [ 445.441988][ T49] team_slave_0 (unregistering): left promiscuous mode [ 445.448974][ T49] team_slave_0 (unregistering): left allmulticast mode [ 445.460757][ T49] team0 (unregistering): Port device team_slave_0 removed [ 445.506563][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.548480][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.960733][ T49] bond0 (unregistering): Released all slaves [ 446.034600][T13563] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2574'. [ 446.073745][T13387] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 446.120673][T13387] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 446.192023][T13571] netlink: 'syz.1.2577': attribute type 21 has an invalid length. [ 446.218684][T13571] netlink: 'syz.1.2577': attribute type 6 has an invalid length. [ 446.233154][T13571] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2577'. [ 446.251875][T13387] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 446.318795][T13387] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 446.401031][T13574] netlink: 'syz.0.2576': attribute type 10 has an invalid length. [ 446.410110][T13574] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2576'. [ 446.748871][T13387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.858615][T13387] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.885988][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.893189][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.977398][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.984648][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.030063][T13595] netlink: 'syz.0.2580': attribute type 23 has an invalid length. [ 447.077181][T13595] netlink: 'syz.0.2580': attribute type 10 has an invalid length. [ 447.221719][T13387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.897947][T13387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.958123][T13624] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2585'. [ 448.123665][T13387] veth0_vlan: entered promiscuous mode [ 448.162489][T13387] veth1_vlan: entered promiscuous mode [ 448.282794][T13387] veth0_macvtap: entered promiscuous mode [ 448.329202][T13387] veth1_macvtap: entered promiscuous mode [ 448.406224][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.442162][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.474368][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.492245][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.514411][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.533198][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.545831][T13387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.561078][T13640] netlink: 'syz.2.2590': attribute type 21 has an invalid length. [ 448.591377][T13640] netlink: 'syz.2.2590': attribute type 6 has an invalid length. [ 448.614989][T13640] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2590'. [ 448.639205][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.684481][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.706293][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.737185][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.769214][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.804741][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.832019][T13387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.855894][T13387] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.867035][T13387] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.876745][T13387] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.886060][T13387] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.192177][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.222520][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.266967][T13660] netlink: 'syz.2.2595': attribute type 23 has an invalid length. [ 449.362580][T13660] netlink: 'syz.2.2595': attribute type 10 has an invalid length. [ 449.516964][ T2955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.534828][ T2955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.859415][T13681] netlink: 'syz.2.2598': attribute type 10 has an invalid length. [ 449.889471][T13681] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2598'. [ 451.086119][T13692] netlink: 'syz.3.2599': attribute type 23 has an invalid length. [ 451.116163][T13695] netlink: 'syz.3.2599': attribute type 10 has an invalid length. [ 451.181119][T13695] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 451.373377][T13700] netlink: 'syz.0.2600': attribute type 10 has an invalid length. [ 451.434489][T13700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2600'. [ 451.663815][T13708] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2604'. [ 452.116673][T13716] validate_nla: 2 callbacks suppressed [ 452.116719][T13716] netlink: 'syz.1.2607': attribute type 23 has an invalid length. [ 452.256519][T13716] netlink: 'syz.1.2607': attribute type 10 has an invalid length. [ 452.886821][T13731] netlink: 'syz.3.2613': attribute type 10 has an invalid length. [ 452.909554][T13731] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2613'. [ 452.940750][T13731] dummy0: entered promiscuous mode [ 452.946357][T13731] dummy0: entered allmulticast mode [ 452.952836][T13731] bridge0: port 3(dummy0) entered blocking state [ 452.962026][T13731] bridge0: port 3(dummy0) entered disabled state [ 452.971719][T13731] bridge0: port 3(dummy0) entered blocking state [ 452.978280][T13731] bridge0: port 3(dummy0) entered forwarding state [ 452.989725][T13734] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2614'. [ 453.053593][T13738] netlink: 'syz.1.2616': attribute type 23 has an invalid length. [ 453.105425][T13738] netlink: 'syz.1.2616': attribute type 10 has an invalid length. [ 453.329817][T13744] netlink: 'syz.0.2619': attribute type 23 has an invalid length. [ 453.380209][T13744] netlink: 'syz.0.2619': attribute type 10 has an invalid length. [ 454.122597][T13763] netlink: 'syz.2.2627': attribute type 10 has an invalid length. [ 454.133305][T13763] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2627'. [ 454.149198][T13763] dummy0: entered promiscuous mode [ 454.154913][T13763] dummy0: entered allmulticast mode [ 454.161447][T13763] bridge0: port 3(dummy0) entered blocking state [ 454.169685][T13763] bridge0: port 3(dummy0) entered disabled state [ 454.179056][T13763] bridge0: port 3(dummy0) entered blocking state [ 454.185657][T13763] bridge0: port 3(dummy0) entered forwarding state [ 454.194799][T13766] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2628'. [ 454.468405][T13771] netlink: 'syz.2.2629': attribute type 23 has an invalid length. [ 454.515560][T13771] netlink: 'syz.2.2629': attribute type 10 has an invalid length. [ 455.207434][T13779] syzkaller0: entered promiscuous mode [ 455.228300][T13779] syzkaller0: entered allmulticast mode [ 455.522125][T13795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2637'. [ 455.584124][T13796] bond0: (slave bond_slave_0): Releasing backup interface [ 457.402633][T13798] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2639'. [ 457.412498][T13814] validate_nla: 5 callbacks suppressed [ 457.412517][T13814] netlink: 'syz.0.2645': attribute type 10 has an invalid length. [ 457.441515][T13814] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2645'. [ 457.948079][T13827] netlink: 'syz.2.2650': attribute type 21 has an invalid length. [ 457.964589][T13827] netlink: 'syz.2.2650': attribute type 6 has an invalid length. [ 457.972453][T13827] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2650'. [ 458.593483][T13839] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2654'. [ 458.959443][T13848] netlink: 'syz.3.2660': attribute type 21 has an invalid length. [ 458.968273][T13848] netlink: 'syz.3.2660': attribute type 6 has an invalid length. [ 458.977075][T13848] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2660'. [ 459.339465][T13856] FAULT_INJECTION: forcing a failure. [ 459.339465][T13856] name failslab, interval 1, probability 0, space 0, times 0 [ 459.390096][T13856] CPU: 1 PID: 13856 Comm: syz.0.2663 Not tainted syzkaller #0 [ 459.397665][T13856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 459.407780][T13856] Call Trace: [ 459.411110][T13856] [ 459.414110][T13856] dump_stack_lvl+0x16c/0x230 [ 459.418854][T13856] ? show_regs_print_info+0x20/0x20 [ 459.424107][T13856] ? load_image+0x3b0/0x3b0 [ 459.428670][T13856] ? __might_sleep+0xe0/0xe0 [ 459.433326][T13856] ? __lock_acquire+0x7c80/0x7c80 [ 459.438415][T13856] should_fail_ex+0x39d/0x4d0 [ 459.443160][T13856] should_failslab+0x9/0x20 [ 459.447720][T13856] slab_pre_alloc_hook+0x59/0x310 [ 459.452824][T13856] ? allocate_cgrp_cset_links+0xc9/0x320 [ 459.458510][T13856] __kmem_cache_alloc_node+0x53/0x260 [ 459.463927][T13856] ? allocate_cgrp_cset_links+0xc9/0x320 [ 459.469602][T13856] kmalloc_trace+0x2a/0xe0 [ 459.474139][T13856] allocate_cgrp_cset_links+0xc9/0x320 [ 459.479632][T13856] find_css_set+0x9dc/0x1540 [ 459.484265][T13856] ? cgroup_migrate_prepare_dst+0x6f0/0x6f0 [ 459.490210][T13856] ? mark_lock+0x94/0x320 [ 459.494626][T13856] cgroup_migrate_prepare_dst+0x130/0x6f0 [ 459.500425][T13856] cgroup_attach_task+0x527/0x830 [ 459.505519][T13856] ? proc_nr_inodes+0x230/0x230 [ 459.510409][T13856] ? cgroup_attach_task+0x1f3/0x830 [ 459.515653][T13856] ? cgroup_migrate_execute+0xf30/0xf30 [ 459.521261][T13856] ? cgroup_attach_permissions+0x4eb/0x9d0 [ 459.527113][T13856] ? revert_creds+0xae/0xc0 [ 459.531662][T13856] __cgroup_procs_write+0x23a/0x350 [ 459.536921][T13856] cgroup_procs_write+0x27/0x50 [ 459.541804][T13856] ? cgroup_procs_next+0xa0/0xa0 [ 459.546799][T13856] cgroup_file_write+0x2fc/0x660 [ 459.551777][T13856] ? read_lock_is_recursive+0x20/0x20 [ 459.557183][T13856] ? cgroup_seqfile_stop+0xd0/0xd0 [ 459.562348][T13856] ? cgroup_seqfile_stop+0xd0/0xd0 [ 459.567492][T13856] kernfs_fop_write_iter+0x3b6/0x520 [ 459.572821][T13856] vfs_write+0x43b/0x940 [ 459.577107][T13856] ? file_end_write+0x250/0x250 [ 459.581999][T13856] ? __fget_files+0x44a/0x4d0 [ 459.586724][T13856] ? __fdget_pos+0x2a3/0x330 [ 459.591359][T13856] ? ksys_write+0x75/0x250 [ 459.595815][T13856] ksys_write+0x147/0x250 [ 459.600228][T13856] ? __ia32_sys_read+0x90/0x90 [ 459.605044][T13856] ? lockdep_hardirqs_on+0x98/0x150 [ 459.610273][T13856] do_syscall_64+0x55/0xb0 [ 459.614714][T13856] ? clear_bhb_loop+0x40/0x90 [ 459.619436][T13856] ? clear_bhb_loop+0x40/0x90 [ 459.624157][T13856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.630081][T13856] RIP: 0033:0x7f295cb8f749 [ 459.634613][T13856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.654251][T13856] RSP: 002b:00007f295adf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 459.662698][T13856] RAX: ffffffffffffffda RBX: 00007f295cde5fa0 RCX: 00007f295cb8f749 [ 459.670699][T13856] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 0000000000000004 [ 459.678693][T13856] RBP: 00007f295adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 459.686697][T13856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.694709][T13856] R13: 00007f295cde6038 R14: 00007f295cde5fa0 R15: 00007ffd45fffb38 [ 459.702754][T13856] [ 459.983612][T13861] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2665'. [ 460.145751][T13869] netlink: 'syz.3.2669': attribute type 21 has an invalid length. [ 460.153795][T13869] netlink: 'syz.3.2669': attribute type 6 has an invalid length. [ 460.201826][T13869] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2669'. [ 460.513936][T13880] netlink: 'syz.0.2673': attribute type 10 has an invalid length. [ 460.522130][T13880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2673'. [ 460.667220][T13888] netlink: 'syz.0.2677': attribute type 10 has an invalid length. [ 460.675730][T13888] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2677'. [ 460.754237][T13890] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2678'. [ 461.015280][T13896] netlink: 'syz.3.2680': attribute type 21 has an invalid length. [ 462.591502][T13942] validate_nla: 5 callbacks suppressed [ 462.591520][T13942] netlink: 'syz.3.2697': attribute type 10 has an invalid length. [ 462.623520][T13942] __nla_validate_parse: 5 callbacks suppressed [ 462.623537][T13942] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2697'. [ 463.174636][T13960] netlink: 'syz.2.2703': attribute type 10 has an invalid length. [ 463.211959][T13960] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2703'. [ 463.262135][T13964] netlink: 'syz.1.2705': attribute type 21 has an invalid length. [ 463.272470][T13964] netlink: 'syz.1.2705': attribute type 6 has an invalid length. [ 463.302104][T13964] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2705'. [ 463.535590][T13973] netlink: 'syz.0.2709': attribute type 10 has an invalid length. [ 463.554790][T13973] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2709'. [ 464.712066][T13997] netlink: 'syz.2.2717': attribute type 21 has an invalid length. [ 464.728047][T13997] netlink: 'syz.2.2717': attribute type 6 has an invalid length. [ 464.741355][T13997] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2717'. [ 464.875287][T14003] netlink: 'syz.0.2720': attribute type 10 has an invalid length. [ 464.883188][T14003] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2720'. [ 464.944577][T14005] netlink: 'syz.3.2721': attribute type 10 has an invalid length. [ 464.952493][T14005] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2721'. [ 465.842071][T14037] netlink: 'syz.0.2733': attribute type 10 has an invalid length. [ 465.850375][T14037] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2733'. [ 465.912180][T14040] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2735'. [ 467.190075][T14067] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2745'. [ 468.048046][T14095] FAULT_INJECTION: forcing a failure. [ 468.048046][T14095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.081899][T14095] CPU: 1 PID: 14095 Comm: syz.2.2755 Not tainted syzkaller #0 [ 468.089447][T14095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 468.099538][T14095] Call Trace: [ 468.102858][T14095] [ 468.105820][T14095] dump_stack_lvl+0x16c/0x230 [ 468.110554][T14095] ? show_regs_print_info+0x20/0x20 [ 468.115808][T14095] ? load_image+0x3b0/0x3b0 [ 468.120405][T14095] ? __might_fault+0xaa/0x120 [ 468.125123][T14095] ? __lock_acquire+0x7c80/0x7c80 [ 468.130188][T14095] should_fail_ex+0x39d/0x4d0 [ 468.134914][T14095] _copy_to_user+0x2f/0xa0 [ 468.139351][T14095] ethtool_get_perm_addr+0x11c/0x220 [ 468.144653][T14095] ? ethtool_get_stats+0x360/0x360 [ 468.149778][T14095] ? full_name_hash+0x92/0xe0 [ 468.154478][T14095] dev_ethtool+0x1154/0x1720 [ 468.159104][T14095] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 468.165361][T14095] ? __lock_acquire+0x7c80/0x7c80 [ 468.170403][T14095] ? lockdep_hardirqs_on+0x98/0x150 [ 468.175618][T14095] ? full_name_hash+0x92/0xe0 [ 468.180337][T14095] ? dev_load+0x21/0x1f0 [ 468.184618][T14095] dev_ioctl+0x4ca/0x1170 [ 468.188971][T14095] sock_do_ioctl+0x226/0x2f0 [ 468.193580][T14095] ? sock_show_fdinfo+0xb0/0xb0 [ 468.198443][T14095] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 468.204446][T14095] ? lock_chain_count+0x20/0x20 [ 468.209326][T14095] sock_ioctl+0x623/0x7a0 [ 468.213671][T14095] ? sock_poll+0x3d0/0x3d0 [ 468.218105][T14095] ? bpf_lsm_file_free_security+0x10/0x10 [ 468.223865][T14095] ? bpf_lsm_file_ioctl+0x9/0x10 [ 468.228821][T14095] ? security_file_ioctl+0x80/0xa0 [ 468.233960][T14095] ? sock_poll+0x3d0/0x3d0 [ 468.238390][T14095] __se_sys_ioctl+0xfd/0x170 [ 468.243023][T14095] do_syscall_64+0x55/0xb0 [ 468.247459][T14095] ? clear_bhb_loop+0x40/0x90 [ 468.252241][T14095] ? clear_bhb_loop+0x40/0x90 [ 468.256938][T14095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.262842][T14095] RIP: 0033:0x7f3dc7f8f749 [ 468.267275][T14095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.286899][T14095] RSP: 002b:00007f3dc8d7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 468.295345][T14095] RAX: ffffffffffffffda RBX: 00007f3dc81e5fa0 RCX: 00007f3dc7f8f749 [ 468.303349][T14095] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000021 [ 468.311335][T14095] RBP: 00007f3dc8d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 468.319328][T14095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.327326][T14095] R13: 00007f3dc81e6038 R14: 00007f3dc81e5fa0 R15: 00007fff09e4b888 [ 468.335344][T14095] [ 469.005859][T14114] validate_nla: 7 callbacks suppressed [ 469.005882][T14114] netlink: 'syz.2.2760': attribute type 10 has an invalid length. [ 469.062981][T14114] __nla_validate_parse: 1 callbacks suppressed [ 469.063000][T14114] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2760'. [ 469.729570][T14125] netlink: 'syz.2.2764': attribute type 23 has an invalid length. [ 469.804866][T14125] netlink: 'syz.2.2764': attribute type 10 has an invalid length. [ 470.260020][T14142] netlink: 'syz.3.2774': attribute type 10 has an invalid length. [ 470.290952][T14142] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2774'. [ 471.070226][T14161] netlink: 'syz.2.2778': attribute type 10 has an invalid length. [ 471.108819][T14161] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2778'. [ 471.775391][T14168] netlink: 'syz.1.2780': attribute type 23 has an invalid length. [ 471.844869][T14170] netlink: 'syz.2.2782': attribute type 10 has an invalid length. [ 471.861347][T14170] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2782'. [ 471.896935][T14168] netlink: 'syz.1.2780': attribute type 10 has an invalid length. [ 472.166221][T14185] netlink: 'syz.1.2787': attribute type 10 has an invalid length. [ 472.184487][T14185] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2787'. [ 473.275300][T14206] netlink: 'syz.1.2801': attribute type 10 has an invalid length. [ 473.311741][T14206] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2801'. [ 474.750840][T14231] syz.1.2805[14231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.750977][T14231] syz.1.2805[14231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.852476][T14236] validate_nla: 4 callbacks suppressed [ 474.852495][T14236] netlink: 'syz.2.2806': attribute type 10 has an invalid length. [ 474.879826][T14236] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2806'. [ 474.893675][T14237] netlink: 'syz.3.2807': attribute type 10 has an invalid length. [ 474.931260][T14237] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2807'. [ 475.177697][T14245] netlink: 'syz.2.2809': attribute type 23 has an invalid length. [ 475.404832][T14244] netlink: 'syz.2.2809': attribute type 10 has an invalid length. [ 478.609194][T14269] netlink: 'syz.1.2819': attribute type 23 has an invalid length. [ 478.655759][T14269] netlink: 'syz.1.2819': attribute type 10 has an invalid length. [ 479.154746][T14278] netlink: 'syz.2.2823': attribute type 10 has an invalid length. [ 479.162660][T14278] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2823'. [ 479.792166][T14289] syz.0.2827[14289] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.792268][T14289] syz.0.2827[14289] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.962915][T14293] bridge0: port 3(dummy0) entered disabled state [ 479.981086][T14293] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.988910][T14293] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.013535][T14293] bridge0: entered allmulticast mode [ 480.240519][T14301] bridge0: port 3(dummy0) entered disabled state [ 480.527914][T14301] bridge_slave_1: left allmulticast mode [ 480.540076][T14301] bridge_slave_1: left promiscuous mode [ 480.551483][T14301] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.569188][T14301] bridge_slave_0: left allmulticast mode [ 480.577532][T14301] bridge_slave_0: left promiscuous mode [ 480.583455][T14301] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.457667][T13143] bond0: (slave syz_tun): Releasing backup interface [ 481.856193][T12825] bond0: (slave syz_tun): Releasing backup interface [ 481.941710][T13387] bond0: (slave syz_tun): Releasing backup interface [ 481.991633][T12514] bond0: (slave syz_tun): Releasing backup interface [ 482.039511][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.130339][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.271291][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.351978][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.365264][ T59] hsr_slave_0: left promiscuous mode [ 483.372294][ T59] hsr_slave_1: left promiscuous mode [ 483.379604][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.387224][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.403939][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.411555][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.449723][ T59] veth1_macvtap: left promiscuous mode [ 483.461021][ T59] veth0_macvtap: left promiscuous mode [ 483.466878][ T59] veth1_vlan: left promiscuous mode [ 483.472332][ T59] veth0_vlan: left promiscuous mode [ 483.971181][ T59] team0 (unregistering): Port device team_slave_1 removed [ 484.018509][ T59] team0 (unregistering): Port device team_slave_0 removed [ 484.060826][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.106364][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.521429][ T59] bond0 (unregistering): Released all slaves [ 484.993356][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.077406][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.145859][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.207376][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.421885][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.517317][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.622386][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.693384][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.848040][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.932592][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.007494][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.094102][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.950419][ T49] hsr_slave_0: left promiscuous mode [ 487.956746][ T49] hsr_slave_1: left promiscuous mode [ 487.962938][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.974639][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.982824][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.992645][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.002337][ T49] bridge0: port 3(dummy0) entered disabled state [ 488.011054][ T49] bridge_slave_1: left allmulticast mode [ 488.016964][ T49] bridge_slave_1: left promiscuous mode [ 488.022769][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.033274][ T49] bridge_slave_0: left allmulticast mode [ 488.040522][ T49] bridge_slave_0: left promiscuous mode [ 488.047448][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.063121][ T49] hsr_slave_0: left promiscuous mode [ 488.070275][ T49] hsr_slave_1: left promiscuous mode [ 488.076544][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.083973][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.094913][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.102339][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.110692][ T49] bridge0: port 3(dummy0) entered disabled state [ 488.119458][ T49] bridge_slave_1: left allmulticast mode [ 488.125279][ T49] bridge_slave_1: left promiscuous mode [ 488.131021][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.141661][ T49] bridge_slave_0: left allmulticast mode [ 488.147975][ T49] bridge_slave_0: left promiscuous mode [ 488.153751][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.170510][ T49] hsr_slave_0: left promiscuous mode [ 488.176676][ T49] hsr_slave_1: left promiscuous mode [ 488.182766][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.190382][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.200401][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.207903][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.215949][ T49] bridge0: port 3(dummy0) entered disabled state [ 488.224350][ T49] bridge_slave_1: left allmulticast mode [ 488.230096][ T49] bridge_slave_1: left promiscuous mode [ 488.236166][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.247003][ T49] bridge_slave_0: left allmulticast mode [ 488.252715][ T49] bridge_slave_0: left promiscuous mode [ 488.258506][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.316185][ T49] veth1_macvtap: left promiscuous mode [ 488.321761][ T49] veth0_macvtap: left promiscuous mode [ 488.327724][ T49] veth1_vlan: left promiscuous mode [ 488.333066][ T49] veth0_vlan: left promiscuous mode [ 488.341376][ T49] veth1_macvtap: left promiscuous mode [ 488.347095][ T49] veth0_macvtap: left promiscuous mode [ 488.352699][ T49] veth1_vlan: left promiscuous mode [ 488.358015][ T49] veth0_vlan: left promiscuous mode [ 488.366391][ T49] veth1_macvtap: left promiscuous mode [ 488.371942][ T49] veth0_macvtap: left promiscuous mode [ 488.378066][ T49] veth1_vlan: left promiscuous mode [ 488.383351][ T49] veth0_vlan: left promiscuous mode [ 488.985680][ T49] team0 (unregistering): Port device team_slave_1 removed [ 489.029760][ T49] team0 (unregistering): Port device team_slave_0 removed [ 489.069878][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.112595][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.527363][ T49] bond0 (unregistering): Released all slaves [ 489.892126][ T49] team0 (unregistering): Port device team_slave_1 removed [ 489.935017][ T49] team0 (unregistering): Port device team_slave_0 removed [ 489.975081][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.374924][ T49] bond0 (unregistering): Released all slaves [ 490.759719][ T49] team0 (unregistering): Port device team_slave_1 removed [ 490.799088][ T49] team0 (unregistering): Port device team_slave_0 removed [ 490.840041][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.882456][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface