last executing test programs: 6.929952951s ago: executing program 1 (id=8413): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x27, 0xe, 0x0, &(0x7f0000000340)="f8ad1dcc02cb29cec80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.155641376s ago: executing program 1 (id=8418): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0xe62}, 0x0, 0xc8, 0x0, 0x6, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x69}, 0x0, 0x10, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f0c0800000000000000007127"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 5.813822856s ago: executing program 1 (id=8423): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x21}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x4, 0x1, 0x13}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x80) 5.205187551s ago: executing program 2 (id=8425): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=0x1], 0x48) 3.729380626s ago: executing program 1 (id=8430): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 3.141498s ago: executing program 3 (id=8432): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x2c, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r1, 0x0, 0xffdd) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000380)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x310}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4f2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), 0x0, 0x404, r4, 0x0, 0x1ba8847c99}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2f00020b, 0xe40, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf4ec9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00'], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 2.855932996s ago: executing program 4 (id=8433): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000080000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x9, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe41c752b4777e393, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 1.974010237s ago: executing program 4 (id=8435): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.973820037s ago: executing program 1 (id=8436): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.854149644s ago: executing program 2 (id=8437): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0135414010ff"}) 1.702576493s ago: executing program 3 (id=8438): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x5d8ceabbeb611ade, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1.613970537s ago: executing program 2 (id=8439): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x10001, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb20c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.584445479s ago: executing program 0 (id=8440): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) close(0xffffffffffffffff) 1.411716789s ago: executing program 0 (id=8441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000680)="b6e580", &(0x7f0000000340)=""/74}, 0x20) 1.329016484s ago: executing program 4 (id=8442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.2179697s ago: executing program 3 (id=8443): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000"], 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8008}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x0, 0xa7, 0x0, 0x0, 0x9, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.217724021s ago: executing program 2 (id=8444): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f7706"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r3, &(0x7f0000001600), 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.21759861s ago: executing program 0 (id=8445): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 1.152381414s ago: executing program 4 (id=8446): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{}, &(0x7f0000000c00), &(0x7f0000000080)='%+9llu \x00'}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f0000000080)) 1.068588029s ago: executing program 0 (id=8447): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 957.723506ms ago: executing program 2 (id=8448): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 853.882372ms ago: executing program 3 (id=8449): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x6, '\x00', 0x0, 0x0, 0xfffffffd, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1b}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x0, 0x8, 0x9b, 0x0, 0x0, 0x8, 0x4}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) 853.617372ms ago: executing program 4 (id=8450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20) 750.306647ms ago: executing program 2 (id=8451): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdffd, 0x1, @perf_config_ext={0x8000000000000080, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000040000007c0500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r3, 0x0, 0x1ba8847c99}, 0x38) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 737.248818ms ago: executing program 0 (id=8461): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f00000001c0)=[{0x45, 0x0, 0x2, 0x8}]}) 491.254682ms ago: executing program 4 (id=8452): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x21}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x4, 0x1, 0x13}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x80) 491.077152ms ago: executing program 1 (id=8453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 317.990612ms ago: executing program 3 (id=8454): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2e0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x50}, 0x1e) 145.697872ms ago: executing program 0 (id=8455): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 0s ago: executing program 3 (id=8456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): phy0 wpan0: encryption failed: -22 [ 1484.622428][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.160436][T27795] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.7039'. [ 1485.678614][T27806] netlink: 212908 bytes leftover after parsing attributes in process `syz.4.7041'. [ 1485.829238][T27806] netlink: zone id is out of range [ 1486.096798][T27812] netlink: 'syz.2.7042': attribute type 25 has an invalid length. [ 1486.111762][T27812] netlink: 'syz.2.7042': attribute type 7 has an invalid length. [ 1486.291578][T27822] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7047'. [ 1486.354006][T27825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7048'. [ 1486.535477][T27830] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7050'. [ 1486.683095][T27834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7051'. [ 1487.159287][ T7573] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1487.241721][T27851] FAULT_INJECTION: forcing a failure. [ 1487.241721][T27851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1487.263812][T27851] CPU: 1 PID: 27851 Comm: syz.2.7057 Not tainted syzkaller #0 [ 1487.271360][T27851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1487.281467][T27851] Call Trace: [ 1487.284874][T27851] [ 1487.287860][T27851] dump_stack_lvl+0x188/0x24e [ 1487.292611][T27851] ? show_regs_print_info+0x12/0x12 [ 1487.297869][T27851] ? load_image+0x400/0x400 [ 1487.302429][T27851] ? __lock_acquire+0x7d10/0x7d10 [ 1487.307509][T27851] should_fail_ex+0x399/0x4d0 [ 1487.312260][T27851] _copy_from_user+0x2c/0x170 [ 1487.316992][T27851] iovec_from_user+0x143/0x360 [ 1487.321807][T27851] __import_iovec+0x6d/0x500 [ 1487.326497][T27851] import_iovec+0x6f/0xa0 [ 1487.330877][T27851] ___sys_sendmsg+0x252/0x360 [ 1487.335640][T27851] ? __sys_sendmsg+0x290/0x290 [ 1487.340484][T27851] ? ktime_get_real_ts64+0x440/0x440 [ 1487.345842][T27851] __se_sys_sendmsg+0x1bb/0x2a0 [ 1487.350757][T27851] ? __x64_sys_sendmsg+0x80/0x80 [ 1487.355770][T27851] ? lockdep_hardirqs_on+0x94/0x140 [ 1487.361027][T27851] do_syscall_64+0x4c/0xa0 [ 1487.365492][T27851] ? clear_bhb_loop+0x60/0xb0 [ 1487.370226][T27851] ? clear_bhb_loop+0x60/0xb0 [ 1487.374953][T27851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1487.380896][T27851] RIP: 0033:0x7ff61139aeb9 [ 1487.385356][T27851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.405032][T27851] RSP: 002b:00007ff612259028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1487.413502][T27851] RAX: ffffffffffffffda RBX: 00007ff611615fa0 RCX: 00007ff61139aeb9 [ 1487.421530][T27851] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 1487.429556][T27851] RBP: 00007ff612259090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.437601][T27851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1487.445642][T27851] R13: 00007ff611616038 R14: 00007ff611615fa0 R15: 00007ffc4f0b7888 [ 1487.453679][T27851] [ 1487.513104][T27854] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7058'. [ 1487.538719][T27854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7058'. [ 1487.763928][T27859] netlink: 'syz.4.7060': attribute type 2 has an invalid length. [ 1487.772301][T27859] netlink: 'syz.4.7060': attribute type 8 has an invalid length. [ 1487.790626][T27859] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7060'. [ 1488.141694][T27878] FAULT_INJECTION: forcing a failure. [ 1488.141694][T27878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1488.181512][T27878] CPU: 1 PID: 27878 Comm: syz.3.7065 Not tainted syzkaller #0 [ 1488.189108][T27878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1488.199212][T27878] Call Trace: [ 1488.202525][T27878] [ 1488.205502][T27878] dump_stack_lvl+0x188/0x24e [ 1488.210243][T27878] ? show_regs_print_info+0x12/0x12 [ 1488.215496][T27878] ? load_image+0x400/0x400 [ 1488.220078][T27878] ? __lock_acquire+0x7d10/0x7d10 [ 1488.225167][T27878] should_fail_ex+0x399/0x4d0 [ 1488.229918][T27878] _copy_from_user+0x2c/0x170 [ 1488.234650][T27878] ___sys_sendmsg+0x1c3/0x360 [ 1488.239396][T27878] ? __sys_sendmsg+0x290/0x290 [ 1488.244236][T27878] ? __lock_acquire+0x7d10/0x7d10 [ 1488.249342][T27878] __se_sys_sendmsg+0x1bb/0x2a0 [ 1488.254255][T27878] ? __x64_sys_sendmsg+0x80/0x80 [ 1488.259252][T27878] ? lockdep_hardirqs_on+0x94/0x140 [ 1488.264492][T27878] do_syscall_64+0x4c/0xa0 [ 1488.268944][T27878] ? clear_bhb_loop+0x60/0xb0 [ 1488.273646][T27878] ? clear_bhb_loop+0x60/0xb0 [ 1488.278357][T27878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1488.284278][T27878] RIP: 0033:0x7fb0c239aeb9 [ 1488.288724][T27878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1488.308370][T27878] RSP: 002b:00007fb0c32fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1488.316896][T27878] RAX: ffffffffffffffda RBX: 00007fb0c2615fa0 RCX: 00007fb0c239aeb9 [ 1488.324893][T27878] RDX: 000000000000fffe RSI: 0000200000000340 RDI: 0000000000000003 [ 1488.332978][T27878] RBP: 00007fb0c32fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1488.340971][T27878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1488.348963][T27878] R13: 00007fb0c2616038 R14: 00007fb0c2615fa0 R15: 00007fffb2596fa8 [ 1488.356972][T27878] [ 1488.491400][ T4525] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1490.137110][T27919] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7081'. [ 1490.307632][T27919] team0: Port device team_slave_0 removed [ 1490.347681][T27919] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1493.164446][T27933] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.7085'. [ 1493.389788][T27941] netlink: 'syz.4.7087': attribute type 10 has an invalid length. [ 1493.439977][T27941] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 1493.760618][T27956] FAULT_INJECTION: forcing a failure. [ 1493.760618][T27956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1493.804203][T27956] CPU: 1 PID: 27956 Comm: syz.2.7093 Not tainted syzkaller #0 [ 1493.811838][T27956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1493.821941][T27956] Call Trace: [ 1493.825266][T27956] [ 1493.828241][T27956] dump_stack_lvl+0x188/0x24e [ 1493.832999][T27956] ? show_regs_print_info+0x12/0x12 [ 1493.838271][T27956] ? load_image+0x400/0x400 [ 1493.842835][T27956] ? __lock_acquire+0x7d10/0x7d10 [ 1493.847927][T27956] ? __virt_addr_valid+0x188/0x540 [ 1493.853110][T27956] should_fail_ex+0x399/0x4d0 [ 1493.857941][T27956] _copy_from_user+0x2c/0x170 [ 1493.862702][T27956] bpf_test_init+0xde/0x140 [ 1493.867266][T27956] bpf_prog_test_run_xdp+0x484/0xf10 [ 1493.872620][T27956] ? dev_put+0x80/0x80 [ 1493.876763][T27956] ? dev_put+0x80/0x80 [ 1493.880887][T27956] bpf_prog_test_run+0x31e/0x390 [ 1493.885901][T27956] __sys_bpf+0x62b/0x780 [ 1493.890271][T27956] ? bpf_link_show_fdinfo+0x380/0x380 [ 1493.895723][T27956] ? lock_chain_count+0x20/0x20 [ 1493.900641][T27956] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1493.906691][T27956] __x64_sys_bpf+0x78/0x90 [ 1493.911165][T27956] do_syscall_64+0x4c/0xa0 [ 1493.915648][T27956] ? clear_bhb_loop+0x60/0xb0 [ 1493.920380][T27956] ? clear_bhb_loop+0x60/0xb0 [ 1493.925110][T27956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1493.931053][T27956] RIP: 0033:0x7ff61139aeb9 [ 1493.935510][T27956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1493.955161][T27956] RSP: 002b:00007ff612259028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1493.963627][T27956] RAX: ffffffffffffffda RBX: 00007ff611615fa0 RCX: 00007ff61139aeb9 [ 1493.971816][T27956] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1493.979827][T27956] RBP: 00007ff612259090 R08: 0000000000000000 R09: 0000000000000000 [ 1493.987837][T27956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1493.995853][T27956] R13: 00007ff611616038 R14: 00007ff611615fa0 R15: 00007ffc4f0b7888 [ 1494.003886][T27956] [ 1494.631957][T27977] FAULT_INJECTION: forcing a failure. [ 1494.631957][T27977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1494.655570][T27977] CPU: 0 PID: 27977 Comm: syz.4.7103 Not tainted syzkaller #0 [ 1494.663107][T27977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1494.673213][T27977] Call Trace: [ 1494.676538][T27977] [ 1494.679506][T27977] dump_stack_lvl+0x188/0x24e [ 1494.684241][T27977] ? show_regs_print_info+0x12/0x12 [ 1494.689504][T27977] ? load_image+0x400/0x400 [ 1494.694054][T27977] ? __lock_acquire+0x7d10/0x7d10 [ 1494.699127][T27977] ? __fget_files+0x28/0x4b0 [ 1494.703778][T27977] should_fail_ex+0x399/0x4d0 [ 1494.708526][T27977] _copy_from_user+0x2c/0x170 [ 1494.713261][T27977] bpf_obj_get_info_by_fd+0x45b/0x2f50 [ 1494.718782][T27977] ? __lock_acquire+0x7d10/0x7d10 [ 1494.723877][T27977] ? verify_lock_unused+0x140/0x140 [ 1494.729160][T27977] ? bpf_map_get_fd_by_id+0x310/0x310 [ 1494.734597][T27977] ? get_pid_task+0x1c/0x1e0 [ 1494.739288][T27977] ? __might_fault+0xa6/0x120 [ 1494.744018][T27977] ? __might_fault+0xc2/0x120 [ 1494.748748][T27977] ? __might_fault+0xa6/0x120 [ 1494.753475][T27977] ? bpf_lsm_bpf+0x5/0x10 [ 1494.757854][T27977] ? security_bpf+0x7a/0xa0 [ 1494.762413][T27977] __sys_bpf+0x505/0x780 [ 1494.766717][T27977] ? bpf_link_show_fdinfo+0x380/0x380 [ 1494.772164][T27977] ? lock_chain_count+0x20/0x20 [ 1494.777078][T27977] __x64_sys_bpf+0x78/0x90 [ 1494.781552][T27977] do_syscall_64+0x4c/0xa0 [ 1494.786026][T27977] ? clear_bhb_loop+0x60/0xb0 [ 1494.790756][T27977] ? clear_bhb_loop+0x60/0xb0 [ 1494.795486][T27977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1494.801422][T27977] RIP: 0033:0x7f22f3f9aeb9 [ 1494.805881][T27977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1494.825547][T27977] RSP: 002b:00007f22f21f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1494.834023][T27977] RAX: ffffffffffffffda RBX: 00007f22f4215fa0 RCX: 00007f22f3f9aeb9 [ 1494.842037][T27977] RDX: 0000000000000010 RSI: 00002000000005c0 RDI: 000000000000000f [ 1494.850050][T27977] RBP: 00007f22f21f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1494.858058][T27977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1494.866062][T27977] R13: 00007f22f4216038 R14: 00007f22f4215fa0 R15: 00007ffc8d2e0a78 [ 1494.874082][T27977] [ 1495.044024][ T7573] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1495.550138][T28003] netlink: 'syz.4.7112': attribute type 10 has an invalid length. [ 1495.570382][T28003] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7112'. [ 1496.340284][T28026] netlink: 'syz.0.7121': attribute type 10 has an invalid length. [ 1496.452529][T28026] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7121'. [ 1496.941992][T28038] netlink: 'syz.3.7127': attribute type 10 has an invalid length. [ 1496.951013][T28038] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7127'. [ 1496.952559][T28040] FAULT_INJECTION: forcing a failure. [ 1496.952559][T28040] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.006010][T28040] CPU: 1 PID: 28040 Comm: syz.0.7128 Not tainted syzkaller #0 [ 1497.013564][T28040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1497.023719][T28040] Call Trace: [ 1497.027046][T28040] [ 1497.030020][T28040] dump_stack_lvl+0x188/0x24e [ 1497.034764][T28040] ? show_regs_print_info+0x12/0x12 [ 1497.040030][T28040] ? load_image+0x400/0x400 [ 1497.044589][T28040] ? __lock_acquire+0x7d10/0x7d10 [ 1497.049679][T28040] should_fail_ex+0x399/0x4d0 [ 1497.054432][T28040] should_failslab+0x5/0x20 [ 1497.059011][T28040] slab_pre_alloc_hook+0x59/0x310 [ 1497.064096][T28040] kmem_cache_alloc+0x56/0x2f0 [ 1497.068911][T28040] ? security_file_alloc+0x30/0x110 [ 1497.074170][T28040] security_file_alloc+0x30/0x110 [ 1497.079237][T28040] __alloc_file+0xc2/0x230 [ 1497.083686][T28040] alloc_empty_file+0x90/0x180 [ 1497.088487][T28040] alloc_file+0x5c/0x5f0 [ 1497.092777][T28040] alloc_file_pseudo+0x180/0x200 [ 1497.097775][T28040] ? alloc_empty_file_noaccount+0x80/0x80 [ 1497.103528][T28040] ? alloc_fd+0x58f/0x630 [ 1497.107905][T28040] anon_inode_getfd+0xc6/0x1c0 [ 1497.112816][T28040] btf_new_fd+0x5f1/0x780 [ 1497.117185][T28040] __sys_bpf+0x612/0x780 [ 1497.121464][T28040] ? bpf_link_show_fdinfo+0x380/0x380 [ 1497.126903][T28040] ? lock_chain_count+0x20/0x20 [ 1497.131834][T28040] __x64_sys_bpf+0x78/0x90 [ 1497.136371][T28040] do_syscall_64+0x4c/0xa0 [ 1497.140817][T28040] ? clear_bhb_loop+0x60/0xb0 [ 1497.145522][T28040] ? clear_bhb_loop+0x60/0xb0 [ 1497.150233][T28040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1497.156153][T28040] RIP: 0033:0x7f47dad9aeb9 [ 1497.160593][T28040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1497.180424][T28040] RSP: 002b:00007f47dbc66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1497.188867][T28040] RAX: ffffffffffffffda RBX: 00007f47db015fa0 RCX: 00007f47dad9aeb9 [ 1497.196876][T28040] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 1497.204877][T28040] RBP: 00007f47dbc66090 R08: 0000000000000000 R09: 0000000000000000 [ 1497.212882][T28040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1497.220886][T28040] R13: 00007f47db016038 R14: 00007f47db015fa0 R15: 00007ffc46f17358 [ 1497.228951][T28040] [ 1497.472026][T28047] netlink: 'syz.4.7131': attribute type 10 has an invalid length. [ 1497.613243][T28047] bond0: (slave bond_slave_0): Releasing backup interface [ 1498.213526][T28047] device bond_slave_0 left promiscuous mode [ 1498.273615][T28077] netlink: 'syz.1.7139': attribute type 25 has an invalid length. [ 1498.296345][T28077] netlink: 'syz.1.7139': attribute type 28 has an invalid length. [ 1498.988620][T28093] delete_channel: no stack [ 1499.005724][T28093] delete_channel: no stack [ 1499.144051][T28089] netlink: 'syz.0.7143': attribute type 10 has an invalid length. [ 1499.152593][T28089] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7143'. [ 1499.443640][T28108] netlink: 'syz.0.7148': attribute type 29 has an invalid length. [ 1499.539144][T28108] netlink: 'syz.0.7148': attribute type 29 has an invalid length. [ 1499.641488][T28113] netlink: 'syz.0.7148': attribute type 29 has an invalid length. [ 1499.649893][T28114] netlink: 'syz.0.7148': attribute type 29 has an invalid length. [ 1500.984728][ T4525] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1501.300129][T28143] netlink: 'syz.4.7158': attribute type 10 has an invalid length. [ 1501.339099][T28143] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7158'. [ 1501.488876][T28146] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7161'. [ 1501.688493][T28155] netlink: 'syz.1.7163': attribute type 39 has an invalid length. [ 1501.768166][T28155] netlink: 'syz.1.7163': attribute type 1 has an invalid length. [ 1501.852580][T28155] bridge0: port 1(bridge_slave_0) entered learning state [ 1501.890327][T28153] netlink: 'syz.2.7162': attribute type 10 has an invalid length. [ 1501.970879][T28153] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7162'. [ 1502.014526][ T7573] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1502.046279][T23958] Bluetooth: hci0: command 0x0406 tx timeout [ 1502.321593][T28170] netlink: 'syz.1.7166': attribute type 2 has an invalid length. [ 1502.762537][T28163] bond0: (slave bond_slave_0): Releasing backup interface [ 1502.805594][T28170] device .*! entered promiscuous mode [ 1503.067551][T28190] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7170'. [ 1503.608714][T28200] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7174'. [ 1503.933239][T28215] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7179'. [ 1504.003642][T28213] bond0: (slave bond_slave_0): Releasing backup interface [ 1504.014366][T28213] device bond_slave_0 left promiscuous mode [ 1506.283342][T28248] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.7190'. [ 1506.349563][T28248] validate_nla: 7 callbacks suppressed [ 1506.349584][T28248] netlink: 'syz.3.7190': attribute type 39 has an invalid length. [ 1506.596072][T28255] netlink: 'syz.2.7191': attribute type 10 has an invalid length. [ 1506.622256][T28255] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7191'. [ 1507.058444][T28276] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7197'. [ 1507.881392][T28294] netlink: 'syz.1.7204': attribute type 10 has an invalid length. [ 1508.790525][T28306] netlink: 'syz.1.7209': attribute type 10 has an invalid length. [ 1508.816129][T28306] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7209'. [ 1509.702722][T28354] netlink: 'syz.1.7225': attribute type 10 has an invalid length. [ 1509.743418][T28354] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7225'. [ 1510.294294][T28380] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7237'. [ 1510.331259][T28380] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7237'. [ 1510.366253][T28383] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7237'. [ 1510.448531][T28380] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7237'. [ 1510.800046][T28394] netlink: 'syz.3.7242': attribute type 10 has an invalid length. [ 1510.836477][T28394] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7242'. [ 1511.613477][T28427] device hsr0 entered promiscuous mode [ 1511.709521][T28426] netlink: 'syz.4.7255': attribute type 10 has an invalid length. [ 1512.000099][T28437] netlink: 'syz.3.7259': attribute type 10 has an invalid length. [ 1512.028646][T28437] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7259'. [ 1513.912302][T28482] netlink: 'syz.2.7274': attribute type 10 has an invalid length. [ 1513.945407][T28482] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7274'. [ 1514.689078][T28493] can: request_module (can-proto-0) failed. [ 1515.365456][T28537] netlink: 'syz.3.7294': attribute type 10 has an invalid length. [ 1515.563302][T28539] netlink: 'syz.1.7295': attribute type 4 has an invalid length. [ 1515.596076][T28539] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7295'. [ 1516.560946][T28539] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1516.894617][T28551] netlink: 'syz.4.7298': attribute type 2 has an invalid length. [ 1516.919237][T28551] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7298'. [ 1517.470698][T28575] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7304'. [ 1518.675718][T28596] netlink: 'syz.3.7310': attribute type 10 has an invalid length. [ 1518.724136][T28593] netlink: 'syz.1.7309': attribute type 3 has an invalid length. [ 1518.742930][T28593] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7309'. [ 1519.022250][T28603] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7311'. [ 1519.078051][T28606] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7313'. [ 1519.146679][T28606] device hsr_slave_0 left promiscuous mode [ 1519.376601][T28606] device hsr_slave_1 left promiscuous mode [ 1519.745510][ T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1519.982968][T28628] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7319'. [ 1520.018469][T28626] netlink: 'syz.2.7318': attribute type 2 has an invalid length. [ 1520.031765][T28626] netlink: 'syz.2.7318': attribute type 8 has an invalid length. [ 1520.040923][T28626] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7318'. [ 1520.057580][T28629] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7319'. [ 1520.254072][T28637] netlink: 'syz.0.7320': attribute type 3 has an invalid length. [ 1520.306104][T28637] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7320'. [ 1520.578832][T28637] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1520.660753][T28637] device syzkaller0 entered promiscuous mode [ 1520.743832][T28645] netlink: 'syz.1.7324': attribute type 10 has an invalid length. [ 1520.786709][T28655] netlink: 'syz.4.7325': attribute type 3 has an invalid length. [ 1520.804805][T28655] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7325'. [ 1520.819956][T28645] bond0: (slave bond_slave_0): Releasing backup interface [ 1523.420728][T28654] netlink: 'syz.2.7327': attribute type 27 has an invalid length. [ 1523.675606][T28677] netlink: 'syz.0.7335': attribute type 6 has an invalid length. [ 1523.694362][T28677] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7335'. [ 1523.823592][T28684] netlink: 'syz.4.7338': attribute type 10 has an invalid length. [ 1523.831696][T28684] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 1524.574391][T28690] netlink: 'syz.4.7339': attribute type 10 has an invalid length. [ 1525.565413][T28699] netlink: 'syz.3.7342': attribute type 3 has an invalid length. [ 1525.705260][T28699] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7342'. [ 1526.071394][ T4295] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1526.088081][T28725] FAULT_INJECTION: forcing a failure. [ 1526.088081][T28725] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1526.135023][T28725] CPU: 1 PID: 28725 Comm: syz.4.7349 Not tainted syzkaller #0 [ 1526.142565][T28725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1526.152667][T28725] Call Trace: [ 1526.155989][T28725] [ 1526.158968][T28725] dump_stack_lvl+0x188/0x24e [ 1526.163712][T28725] ? show_regs_print_info+0x12/0x12 [ 1526.168986][T28725] ? load_image+0x400/0x400 [ 1526.173542][T28725] ? __lock_acquire+0x7d10/0x7d10 [ 1526.178621][T28725] ? __lock_acquire+0x12f4/0x7d10 [ 1526.183711][T28725] should_fail_ex+0x399/0x4d0 [ 1526.188462][T28725] prepare_alloc_pages+0x1e2/0x5f0 [ 1526.193643][T28725] __alloc_pages+0x130/0x4f0 [ 1526.198306][T28725] ? lock_chain_count+0x20/0x20 [ 1526.203223][T28725] ? zone_statistics+0x170/0x170 [ 1526.208230][T28725] ? count_memcg_event_mm+0x8a/0x3c0 [ 1526.213579][T28725] ? count_memcg_event_mm+0x36b/0x3c0 [ 1526.218999][T28725] ? count_memcg_event_mm+0x8a/0x3c0 [ 1526.224340][T28725] __folio_alloc+0xe/0x30 [ 1526.228741][T28725] vma_alloc_folio+0x4a3/0x900 [ 1526.233577][T28725] handle_mm_fault+0x22b1/0x3ee0 [ 1526.238582][T28725] ? numa_migrate_prep+0x250/0x250 [ 1526.243760][T28725] ? lock_chain_count+0x20/0x20 [ 1526.248679][T28725] ? lock_mm_and_find_vma+0xae/0x2f0 [ 1526.254016][T28725] do_user_addr_fault+0x51f/0xb10 [ 1526.259119][T28725] exc_page_fault+0x60/0x100 [ 1526.263881][T28725] ? __might_fault+0xa6/0x120 [ 1526.268658][T28725] asm_exc_page_fault+0x22/0x30 [ 1526.273558][T28725] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1526.279699][T28725] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 1526.299359][T28725] RSP: 0018:ffffc90003377a58 EFLAGS: 00050297 [ 1526.305487][T28725] RAX: 0000000000000f49 RBX: 00007fffffffeffd RCX: 0000200000001d00 [ 1526.313512][T28725] RDX: 0000000000000001 RSI: ffffffff8a8c23a0 RDI: ffff888023c6ae80 [ 1526.321535][T28725] RBP: ffffc90003377d70 R08: ffffffff8e1fc32f R09: 1ffffffff1c3f865 [ 1526.329563][T28725] R10: dffffc0000000000 R11: fffffbfff1c3f866 R12: 00000000ffffffff [ 1526.337581][T28725] R13: 0000000000000000 R14: fffff5200066ef60 R15: 0000200000001d00 [ 1526.345813][T28725] bpf_obj_get_info_by_fd+0xacd/0x2f50 [ 1526.351432][T28725] ? __lock_acquire+0x7d10/0x7d10 [ 1526.356540][T28725] ? bpf_map_get_fd_by_id+0x310/0x310 [ 1526.362002][T28725] ? get_pid_task+0x1c/0x1e0 [ 1526.366705][T28725] ? __might_fault+0xa6/0x120 [ 1526.371448][T28725] ? __might_fault+0xc2/0x120 [ 1526.376199][T28725] ? __might_fault+0xa6/0x120 [ 1526.380941][T28725] ? bpf_lsm_bpf+0x5/0x10 [ 1526.385345][T28725] ? security_bpf+0x7a/0xa0 [ 1526.389910][T28725] __sys_bpf+0x505/0x780 [ 1526.394216][T28725] ? bpf_link_show_fdinfo+0x380/0x380 [ 1526.399665][T28725] ? lock_chain_count+0x20/0x20 [ 1526.404595][T28725] __x64_sys_bpf+0x78/0x90 [ 1526.409071][T28725] do_syscall_64+0x4c/0xa0 [ 1526.413546][T28725] ? clear_bhb_loop+0x60/0xb0 [ 1526.418279][T28725] ? clear_bhb_loop+0x60/0xb0 [ 1526.423017][T28725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1526.428966][T28725] RIP: 0033:0x7f22f3f9aeb9 [ 1526.433431][T28725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1526.453087][T28725] RSP: 002b:00007f22f21f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1526.461558][T28725] RAX: ffffffffffffffda RBX: 00007f22f4215fa0 RCX: 00007f22f3f9aeb9 [ 1526.469578][T28725] RDX: 0000000000000010 RSI: 00002000000005c0 RDI: 000000000000000f [ 1526.477596][T28725] RBP: 00007f22f21f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1526.485624][T28725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1526.493733][T28725] R13: 00007f22f4216038 R14: 00007f22f4215fa0 R15: 00007ffc8d2e0a78 [ 1526.501800][T28725] [ 1526.675026][T28733] netlink: 'syz.2.7353': attribute type 10 has an invalid length. [ 1526.691260][T28733] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7353'. [ 1526.708154][T28733] device team0 entered promiscuous mode [ 1526.718910][T28733] device team_slave_1 entered promiscuous mode [ 1526.740057][T28733] device geneve0 entered promiscuous mode [ 1526.778330][T28733] bridge0: port 4(team0) entered blocking state [ 1526.797842][T28733] bridge0: port 4(team0) entered disabled state [ 1526.852901][T28733] bridge0: port 4(team0) entered blocking state [ 1526.860321][T28733] bridge0: port 4(team0) entered forwarding state [ 1526.920129][T28739] netlink: 'syz.3.7354': attribute type 10 has an invalid length. [ 1527.333090][T28752] netlink: 'syz.0.7357': attribute type 3 has an invalid length. [ 1527.344511][T28752] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7357'. [ 1528.949138][T28781] FAULT_INJECTION: forcing a failure. [ 1528.949138][T28781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1528.972911][T28783] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7373'. [ 1528.985408][T28781] CPU: 0 PID: 28781 Comm: syz.0.7365 Not tainted syzkaller #0 [ 1528.992948][T28781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1529.003059][T28781] Call Trace: [ 1529.006383][T28781] [ 1529.009367][T28781] dump_stack_lvl+0x188/0x24e [ 1529.014101][T28781] ? show_regs_print_info+0x12/0x12 [ 1529.019355][T28781] ? load_image+0x400/0x400 [ 1529.023908][T28781] ? __lock_acquire+0x7d10/0x7d10 [ 1529.028997][T28781] should_fail_ex+0x399/0x4d0 [ 1529.033740][T28781] _copy_from_user+0x2c/0x170 [ 1529.038467][T28781] __sys_bpf+0x2ea/0x780 [ 1529.042768][T28781] ? bpf_link_show_fdinfo+0x380/0x380 [ 1529.048209][T28781] ? lock_chain_count+0x20/0x20 [ 1529.053115][T28781] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1529.059153][T28781] __x64_sys_bpf+0x78/0x90 [ 1529.063620][T28781] do_syscall_64+0x4c/0xa0 [ 1529.068077][T28781] ? clear_bhb_loop+0x60/0xb0 [ 1529.072801][T28781] ? clear_bhb_loop+0x60/0xb0 [ 1529.077532][T28781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1529.083470][T28781] RIP: 0033:0x7f47dad9aeb9 [ 1529.087924][T28781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1529.107587][T28781] RSP: 002b:00007f47dbc66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1529.116058][T28781] RAX: ffffffffffffffda RBX: 00007f47db015fa0 RCX: 00007f47dad9aeb9 [ 1529.124073][T28781] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1529.132092][T28781] RBP: 00007f47dbc66090 R08: 0000000000000000 R09: 0000000000000000 [ 1529.140110][T28781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1529.148133][T28781] R13: 00007f47db016038 R14: 00007f47db015fa0 R15: 00007ffc46f17358 [ 1529.156251][T28781] [ 1529.188774][T28783] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7373'. [ 1529.241703][T28789] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7373'. [ 1529.282035][T28783] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7373'. [ 1529.872051][T28805] netlink: 'syz.3.7369': attribute type 10 has an invalid length. [ 1530.060504][T28794] netlink: 'syz.2.7367': attribute type 1 has an invalid length. [ 1530.113505][T28796] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.7367'. [ 1530.167655][T28794] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.7367'. [ 1531.752228][T28821] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7377'. [ 1531.771135][T28821] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7377'. [ 1532.735400][T28848] netlink: 'syz.4.7384': attribute type 4 has an invalid length. [ 1532.756396][T28848] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7384'. [ 1532.868954][T28848] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1532.932356][ T7572] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1532.958850][T28850] netlink: 'syz.0.7386': attribute type 10 has an invalid length. [ 1533.072850][T28850] bond0: (slave bond_slave_0): Releasing backup interface [ 1533.129624][T28857] netlink: 'syz.3.7387': attribute type 1 has an invalid length. [ 1533.180218][T28857] netlink: 'syz.3.7387': attribute type 1 has an invalid length. [ 1533.229016][T28853] netlink: 'syz.2.7385': attribute type 25 has an invalid length. [ 1533.246192][T28857] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.7387'. [ 1533.250747][T28853] netlink: 'syz.2.7385': attribute type 28 has an invalid length. [ 1535.117992][T28892] netlink: 'syz.2.7400': attribute type 10 has an invalid length. [ 1535.827737][T28906] netlink: 'syz.4.7405': attribute type 4 has an invalid length. [ 1535.840445][T28906] __nla_validate_parse: 2 callbacks suppressed [ 1535.840493][T28906] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7405'. [ 1535.869623][T28906] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1537.464240][T28949] netlink: 'syz.1.7418': attribute type 10 has an invalid length. [ 1537.670240][T28951] netlink: 'syz.3.7419': attribute type 4 has an invalid length. [ 1537.759513][T28951] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7419'. [ 1537.918008][T28951] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1538.735131][T28977] netlink: 'syz.1.7435': attribute type 10 has an invalid length. [ 1538.820457][T28980] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7428'. [ 1540.177897][T28998] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7434'. [ 1540.581566][T29008] netlink: 'syz.2.7437': attribute type 4 has an invalid length. [ 1540.670591][T29008] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7437'. [ 1540.744241][T29008] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1540.848782][T29018] netlink: 'syz.4.7440': attribute type 2 has an invalid length. [ 1541.263766][T29023] netlink: 'syz.3.7443': attribute type 4 has an invalid length. [ 1541.305666][T29023] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7443'. [ 1541.349046][T29023] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1541.815074][T29039] netlink: 'syz.4.7445': attribute type 10 has an invalid length. [ 1542.873403][T29059] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7453'. [ 1542.970157][T29061] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7454'. [ 1543.095438][T29063] netlink: 'syz.1.7455': attribute type 25 has an invalid length. [ 1543.111592][T29063] netlink: 'syz.1.7455': attribute type 1 has an invalid length. [ 1543.156325][T29063] bridge0: port 1(bridge_slave_0) entered learning state [ 1543.578506][T29079] netlink: 'syz.3.7464': attribute type 10 has an invalid length. [ 1543.841487][T29091] netlink: 'syz.0.7466': attribute type 10 has an invalid length. [ 1544.049411][T29091] 8021q: adding VLAN 0 to HW filter on device team0 [ 1544.639794][T29113] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7469'. [ 1545.082290][T29129] netlink: 'syz.2.7479': attribute type 10 has an invalid length. [ 1545.311435][T29134] FAULT_INJECTION: forcing a failure. [ 1545.311435][T29134] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.324632][T29134] CPU: 1 PID: 29134 Comm: syz.4.7482 Not tainted syzkaller #0 [ 1545.332153][T29134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1545.342260][T29134] Call Trace: [ 1545.345591][T29134] [ 1545.348576][T29134] dump_stack_lvl+0x188/0x24e [ 1545.353328][T29134] ? show_regs_print_info+0x12/0x12 [ 1545.358590][T29134] ? load_image+0x400/0x400 [ 1545.363145][T29134] ? kasan_set_track+0x60/0x70 [ 1545.367937][T29134] ? kasan_set_track+0x4b/0x70 [ 1545.372737][T29134] ? __kasan_slab_alloc+0x6b/0x80 [ 1545.377799][T29134] ? slab_post_alloc_hook+0x4b/0x480 [ 1545.383147][T29134] should_fail_ex+0x399/0x4d0 [ 1545.387879][T29134] should_failslab+0x5/0x20 [ 1545.392427][T29134] slab_pre_alloc_hook+0x59/0x310 [ 1545.397480][T29134] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1545.403583][T29134] ? ref_tracker_alloc+0x14e/0x4b0 [ 1545.408731][T29134] __kmem_cache_alloc_node+0x4f/0x260 [ 1545.414145][T29134] ? ref_tracker_alloc+0x14e/0x4b0 [ 1545.419298][T29134] kmalloc_trace+0x26/0xe0 [ 1545.423851][T29134] ref_tracker_alloc+0x14e/0x4b0 [ 1545.428845][T29134] ? ref_tracker_dir_print+0x150/0x150 [ 1545.434350][T29134] ? __kasan_slab_alloc+0x6b/0x80 [ 1545.439415][T29134] ? slab_post_alloc_hook+0x67/0x480 [ 1545.444733][T29134] ? slab_pre_alloc_hook+0x59/0x310 [ 1545.449972][T29134] dst_init+0xda/0x410 [ 1545.454100][T29134] dst_alloc+0x12a/0x160 [ 1545.458372][T29134] ip_route_output_key_hash_rcu+0x14a4/0x23f0 [ 1545.464494][T29134] ? ip_route_output_key_hash+0x139/0x330 [ 1545.470249][T29134] ip_route_output_key_hash+0x1ef/0x330 [ 1545.475835][T29134] ? ip_route_input_rcu+0x3160/0x3160 [ 1545.481253][T29134] ? memset+0x1e/0x40 [ 1545.485264][T29134] ip_route_output_flow+0x26/0x150 [ 1545.490421][T29134] ip_tunnel_xmit+0x993/0x2440 [ 1545.495230][T29134] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 1545.500295][T29134] ? skb_push+0x8a/0xd0 [ 1545.504493][T29134] ? gre_build_header+0x25b/0x9a0 [ 1545.509559][T29134] ipgre_xmit+0x79d/0xb20 [ 1545.513935][T29134] dev_hard_start_xmit+0x262/0x870 [ 1545.519086][T29134] __dev_queue_xmit+0x1a7f/0x37f0 [ 1545.524155][T29134] ? __dev_queue_xmit+0x26b/0x37f0 [ 1545.529299][T29134] ? netdev_core_pick_tx+0x340/0x340 [ 1545.534628][T29134] ? skb_release_data+0x1d2/0x7c0 [ 1545.539712][T29134] __bpf_redirect+0x917/0x1180 [ 1545.544512][T29134] bpf_clone_redirect+0x26c/0x3c0 [ 1545.549571][T29134] bpf_prog_da1e0ee5f8d5c8f5+0x55/0x5a [ 1545.555059][T29134] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1545.561075][T29134] ? lock_chain_count+0x20/0x20 [ 1545.565969][T29134] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1545.572265][T29134] ? lockdep_hardirqs_on+0x94/0x140 [ 1545.577508][T29134] ? ktime_get+0x7b/0x270 [ 1545.581862][T29134] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1545.588138][T29134] ? ktime_get_real_ts64+0x440/0x440 [ 1545.593466][T29134] ? read_lock_is_recursive+0x10/0x10 [ 1545.598875][T29134] ? __cant_sleep+0x220/0x220 [ 1545.603578][T29134] ? ktime_get+0x247/0x270 [ 1545.608060][T29134] bpf_test_run+0x2b6/0x830 [ 1545.612618][T29134] ? convert___skb_to_skb+0x580/0x580 [ 1545.618106][T29134] ? eth_get_headlen+0x200/0x200 [ 1545.623079][T29134] ? __build_skb+0x257/0x3c0 [ 1545.627718][T29134] ? bpf_prog_test_run_skb+0x773/0x12a0 [ 1545.633316][T29134] ? convert___skb_to_skb+0x3d/0x580 [ 1545.638654][T29134] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 1545.644082][T29134] ? cpu_online+0xa0/0xa0 [ 1545.648446][T29134] bpf_prog_test_run+0x31e/0x390 [ 1545.653427][T29134] __sys_bpf+0x62b/0x780 [ 1545.657704][T29134] ? bpf_link_show_fdinfo+0x380/0x380 [ 1545.663123][T29134] ? lock_chain_count+0x20/0x20 [ 1545.668019][T29134] __x64_sys_bpf+0x78/0x90 [ 1545.672471][T29134] do_syscall_64+0x4c/0xa0 [ 1545.676920][T29134] ? clear_bhb_loop+0x60/0xb0 [ 1545.681621][T29134] ? clear_bhb_loop+0x60/0xb0 [ 1545.686326][T29134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1545.692245][T29134] RIP: 0033:0x7f22f3f9aeb9 [ 1545.696683][T29134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.716322][T29134] RSP: 002b:00007f22f21f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1545.724766][T29134] RAX: ffffffffffffffda RBX: 00007f22f4215fa0 RCX: 00007f22f3f9aeb9 [ 1545.732788][T29134] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 1545.740785][T29134] RBP: 00007f22f21f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1545.748799][T29134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1545.756818][T29134] R13: 00007f22f4216038 R14: 00007f22f4215fa0 R15: 00007ffc8d2e0a78 [ 1545.764868][T29134] [ 1545.768026][T29134] memory allocation failure, unreliable refcount tracker. [ 1546.049131][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.055564][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.624478][T29160] netlink: 'syz.3.7489': attribute type 10 has an invalid length. [ 1546.640830][T29160] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7489'. [ 1546.922342][T29171] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.7492'. [ 1547.362139][T29187] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7498'. [ 1547.673876][T29193] netlink: 'syz.1.7499': attribute type 4 has an invalid length. [ 1547.689830][T29193] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7499'. [ 1547.703725][T29193] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1547.725161][T29195] netlink: 'syz.3.7501': attribute type 10 has an invalid length. [ 1547.766591][T29195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1547.783497][T29195] bond0: (slave team0): Enslaving as an active interface with an up link [ 1548.147490][T29202] netlink: 'syz.1.7504': attribute type 10 has an invalid length. [ 1548.187693][T29202] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7504'. [ 1548.555066][T29220] netlink: 'syz.2.7510': attribute type 4 has an invalid length. [ 1548.563734][T29220] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7510'. [ 1548.574355][T29220] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1548.785836][T29228] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7513'. [ 1549.028022][T29235] FAULT_INJECTION: forcing a failure. [ 1549.028022][T29235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1549.049270][T29235] CPU: 1 PID: 29235 Comm: syz.4.7516 Not tainted syzkaller #0 [ 1549.056806][T29235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1549.066910][T29235] Call Trace: [ 1549.070222][T29235] [ 1549.073186][T29235] dump_stack_lvl+0x188/0x24e [ 1549.077911][T29235] ? show_regs_print_info+0x12/0x12 [ 1549.083159][T29235] ? load_image+0x400/0x400 [ 1549.087728][T29235] ? __might_fault+0xa6/0x120 [ 1549.092472][T29235] should_fail_ex+0x399/0x4d0 [ 1549.097214][T29235] copyin+0x1b/0x120 [ 1549.101137][T29235] _copy_from_iter+0x447/0x1130 [ 1549.106037][T29235] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 1549.111448][T29235] ? copyout_mc+0x110/0x110 [ 1549.115996][T29235] ? __virt_addr_valid+0x188/0x540 [ 1549.121145][T29235] ? __virt_addr_valid+0x188/0x540 [ 1549.126292][T29235] ? __virt_addr_valid+0x465/0x540 [ 1549.131455][T29235] ? __check_object_size+0x500/0xa40 [ 1549.136768][T29235] skb_copy_datagram_from_iter+0xef/0x690 [ 1549.142518][T29235] ? skb_put+0x117/0x210 [ 1549.146797][T29235] packet_sendmsg+0x3727/0x4e60 [ 1549.151795][T29235] ? __might_sleep+0xd0/0xd0 [ 1549.156408][T29235] ? verify_lock_unused+0x140/0x140 [ 1549.161653][T29235] ? aa_sk_perm+0x81f/0x950 [ 1549.166207][T29235] ? packet_getsockopt+0x9a0/0x9a0 [ 1549.171380][T29235] ? aa_sock_msg_perm+0x94/0x150 [ 1549.176343][T29235] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1549.181657][T29235] ? security_socket_sendmsg+0x7c/0xa0 [ 1549.187154][T29235] ? packet_getsockopt+0x9a0/0x9a0 [ 1549.192310][T29235] ____sys_sendmsg+0x5be/0x970 [ 1549.197113][T29235] ? __sys_sendmsg_sock+0x30/0x30 [ 1549.202168][T29235] ? __import_iovec+0x315/0x500 [ 1549.207050][T29235] ? import_iovec+0x6f/0xa0 [ 1549.211578][T29235] ___sys_sendmsg+0x2a2/0x360 [ 1549.216298][T29235] ? __sys_sendmsg+0x290/0x290 [ 1549.221109][T29235] ? __lock_acquire+0x7d10/0x7d10 [ 1549.226186][T29235] __se_sys_sendmsg+0x1bb/0x2a0 [ 1549.231075][T29235] ? __x64_sys_sendmsg+0x80/0x80 [ 1549.236053][T29235] ? lockdep_hardirqs_on+0x94/0x140 [ 1549.241291][T29235] do_syscall_64+0x4c/0xa0 [ 1549.245740][T29235] ? clear_bhb_loop+0x60/0xb0 [ 1549.250456][T29235] ? clear_bhb_loop+0x60/0xb0 [ 1549.255162][T29235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1549.261087][T29235] RIP: 0033:0x7f22f3f9aeb9 [ 1549.265524][T29235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.285155][T29235] RSP: 002b:00007f22f21f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1549.293600][T29235] RAX: ffffffffffffffda RBX: 00007f22f4215fa0 RCX: 00007f22f3f9aeb9 [ 1549.301592][T29235] RDX: 0000000024000008 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1549.309594][T29235] RBP: 00007f22f21f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1549.317590][T29235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1549.325580][T29235] R13: 00007f22f4216038 R14: 00007f22f4215fa0 R15: 00007ffc8d2e0a78 [ 1549.333584][T29235] [ 1549.382526][T29237] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7517'. [ 1549.436089][T29239] netlink: 'syz.0.7518': attribute type 10 has an invalid length. [ 1549.453392][T29239] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7518'. [ 1549.516797][T29244] netlink: 'syz.2.7529': attribute type 10 has an invalid length. [ 1550.487338][T29264] netlink: 'syz.2.7525': attribute type 4 has an invalid length. [ 1550.506562][T29264] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7525'. [ 1550.579980][T29264] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1550.753778][T23055] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1550.907797][T29279] netlink: 'syz.3.7531': attribute type 10 has an invalid length. [ 1551.471941][T29298] netlink: 'syz.0.7539': attribute type 4 has an invalid length. [ 1551.803508][T23055] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1551.927335][T29298] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1552.036323][T29304] __nla_validate_parse: 4 callbacks suppressed [ 1552.036341][T29304] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7536'. [ 1552.376276][T29304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1552.418943][T29304] bond0 (unregistering): (slave team0): Releasing backup interface [ 1552.444471][T29304] bond0 (unregistering): Released all slaves [ 1552.499354][T29322] netlink: 'syz.2.7544': attribute type 4 has an invalid length. [ 1552.528962][T29322] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7544'. [ 1552.558655][T29322] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1552.663094][T29325] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7545'. [ 1552.774008][T29332] netlink: 'syz.1.7547': attribute type 10 has an invalid length. [ 1552.799473][T29332] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7547'. [ 1552.913021][T29339] bond0: (slave team0): Error: Slave device does not support XDP [ 1553.178482][T29349] netlink: 'syz.2.7554': attribute type 27 has an invalid length. [ 1553.365266][T29355] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.7559'. [ 1553.664886][T29373] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7561'. [ 1553.932369][T29379] netlink: 'syz.3.7563': attribute type 10 has an invalid length. [ 1553.970781][T29379] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7563'. [ 1554.411722][T29393] netlink: 'syz.4.7570': attribute type 10 has an invalid length. [ 1554.502858][T29393] team0: Device veth1_vlan failed to register rx_handler [ 1554.710855][T29400] netlink: 'syz.1.7573': attribute type 10 has an invalid length. [ 1554.765478][T29402] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7572'. [ 1556.011609][T29421] netlink: 'syz.2.7579': attribute type 10 has an invalid length. [ 1556.039455][T29421] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7579'. [ 1556.203459][T29429] Â: renamed from pim6reg1 [ 1557.141126][T29441] netlink: 160 bytes leftover after parsing attributes in process `syz.2.7585'. [ 1557.177847][T29441] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1557.228594][T29442] netlink: 'syz.3.7586': attribute type 10 has an invalid length. [ 1557.237979][T29444] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7587'. [ 1557.509133][ T7572] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1557.738172][T29463] netlink: 'syz.3.7594': attribute type 10 has an invalid length. [ 1557.809496][T29463] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7594'. [ 1557.869719][T23958] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 1558.061289][T29480] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7600'. [ 1558.263618][T29489] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7603'. [ 1558.339686][T29491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7604'. [ 1558.510622][T29498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7607'. [ 1558.931791][T29512] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7613'. [ 1559.018187][T29512] device hsr_slave_0 left promiscuous mode [ 1559.171118][T29512] device hsr_slave_1 left promiscuous mode [ 1559.737668][T29521] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7614'. [ 1560.224141][T29545] netlink: 'syz.1.7622': attribute type 10 has an invalid length. [ 1560.242366][T29543] netlink: 'syz.2.7623': attribute type 10 has an invalid length. [ 1560.756610][T29556] netlink: 763 bytes leftover after parsing attributes in process `syz.2.7625'. [ 1561.033637][T29562] netlink: 'syz.1.7626': attribute type 21 has an invalid length. [ 1561.671892][T29574] netlink: 'syz.0.7630': attribute type 4 has an invalid length. [ 1561.709661][T29574] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1562.577842][T29594] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1562.612302][T29595] netlink: 'syz.4.7636': attribute type 10 has an invalid length. [ 1562.986118][T29606] netlink: 'syz.4.7640': attribute type 10 has an invalid length. [ 1563.290313][T29618] __nla_validate_parse: 3 callbacks suppressed [ 1563.290354][T29618] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7645'. [ 1563.703736][T29629] netlink: 'syz.4.7650': attribute type 10 has an invalid length. [ 1563.749305][T29627] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1563.948652][T29633] netlink: 'syz.0.7651': attribute type 4 has an invalid length. [ 1563.970048][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 1563.993321][T29633] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7651'. [ 1564.039835][T29633] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1564.282432][T29646] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1564.334086][T29644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7654'. [ 1564.649609][T29652] netlink: 160 bytes leftover after parsing attributes in process `syz.1.7655'. [ 1564.706887][T29652] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1564.823060][T29655] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7660'. [ 1565.012155][T29662] netlink: 'syz.3.7657': attribute type 10 has an invalid length. [ 1565.769680][T29662] team0: Port device wlan1 added [ 1565.995122][T29666] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.7662'. [ 1566.495410][T29677] netlink: 'syz.3.7665': attribute type 10 has an invalid length. [ 1567.966104][ T7572] wlan1: Trigger new scan to find an IBSS to join [ 1569.671152][T29699] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7674'. [ 1570.151514][T29722] netlink: 'syz.0.7682': attribute type 3 has an invalid length. [ 1570.180917][T29722] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7682'. [ 1570.193390][T29725] netlink: 'syz.1.7684': attribute type 10 has an invalid length. [ 1571.508791][T29742] netlink: 'syz.4.7689': attribute type 11 has an invalid length. [ 1571.524800][T29742] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7689'. [ 1571.558604][T29750] netlink: 'syz.1.7693': attribute type 2 has an invalid length. [ 1571.568852][T29742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1571.829289][T29751] netlink: 126612 bytes leftover after parsing attributes in process `syz.1.7693'. [ 1571.849917][T29751] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7693'. [ 1571.872156][T29758] netlink: 'syz.2.7696': attribute type 4 has an invalid length. [ 1571.902898][T29758] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7696'. [ 1571.979086][ T7572] wlan1: Trigger new scan to find an IBSS to join [ 1572.135991][T29750] device 1 entered promiscuous mode [ 1572.209605][T29766] netlink: 'syz.4.7698': attribute type 10 has an invalid length. [ 1572.647463][T29781] netlink: 'syz.1.7712': attribute type 10 has an invalid length. [ 1572.658307][T29778] netlink: 'syz.2.7701': attribute type 3 has an invalid length. [ 1572.679262][T29778] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7701'. [ 1573.706333][ T75] wlan1: Creating new IBSS network, BSSID 86:f1:f4:65:d2:e8 [ 1573.721147][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1573.957160][T29797] netlink: 'syz.1.7715': attribute type 11 has an invalid length. [ 1573.965436][T29797] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7715'. [ 1574.003334][T29797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1575.465479][T29829] netlink: 'syz.1.7719': attribute type 21 has an invalid length. [ 1575.705919][T29831] netlink: 'syz.0.7721': attribute type 11 has an invalid length. [ 1575.715269][T29831] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7721'. [ 1575.731587][T29831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1576.067140][T29854] IPv6: NLM_F_CREATE should be specified when creating new route [ 1576.078351][T29854] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7727'. [ 1576.761819][T29867] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7732'. [ 1577.142937][T29875] netlink: 'syz.0.7734': attribute type 2 has an invalid length. [ 1577.347203][T29875] device 0 entered promiscuous mode [ 1577.458434][T29878] netlink: 126612 bytes leftover after parsing attributes in process `syz.0.7734'. [ 1577.490449][T29878] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7734'. [ 1577.945423][T29886] netlink: 'syz.3.7736': attribute type 10 has an invalid length. [ 1577.988019][T29886] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7736'. [ 1578.061005][T29888] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7739'. [ 1578.131709][T29889] netlink: 'syz.1.7738': attribute type 10 has an invalid length. [ 1578.697127][T29889] team0: Port device hsr_slave_0 added [ 1578.795563][T29903] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7741'. [ 1578.819235][T29903] bridge0: port 3(bond0) entered disabled state [ 1579.668175][T29903] bridge0: port 3(bond0) entered disabled state [ 1579.715406][T29903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1579.735337][T29903] device bond_slave_1 left promiscuous mode [ 1579.777322][T29903] bond0 (unregistering): (slave team0): Releasing backup interface [ 1579.793478][T29903] device team0 left promiscuous mode [ 1579.816131][T29903] device team_slave_0 left promiscuous mode [ 1579.822247][T29903] device team_slave_1 left promiscuous mode [ 1579.841715][T29903] bond0 (unregistering): Released all slaves [ 1579.852160][T29909] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7743'. [ 1580.177998][T29925] netlink: 'syz.4.7749': attribute type 2 has an invalid length. [ 1580.493076][T29931] netlink: 126612 bytes leftover after parsing attributes in process `syz.4.7749'. [ 1580.933345][T29925] device 0 entered promiscuous mode [ 1581.072706][T29946] netlink: 'syz.3.7754': attribute type 4 has an invalid length. [ 1581.082954][T29946] __nla_validate_parse: 1 callbacks suppressed [ 1581.082992][T29946] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7754'. [ 1581.104660][T29946] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1581.449218][T29962] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7758'. [ 1581.570919][T29965] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7759'. [ 1582.231264][T29984] netlink: 'syz.2.7767': attribute type 4 has an invalid length. [ 1582.291037][T29984] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7767'. [ 1582.326264][T29989] FAULT_INJECTION: forcing a failure. [ 1582.326264][T29989] name failslab, interval 1, probability 0, space 0, times 0 [ 1582.339419][T29989] CPU: 0 PID: 29989 Comm: syz.3.7769 Not tainted syzkaller #0 [ 1582.346930][T29989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1582.357029][T29989] Call Trace: [ 1582.360360][T29989] [ 1582.363417][T29989] dump_stack_lvl+0x188/0x24e [ 1582.368159][T29989] ? show_regs_print_info+0x12/0x12 [ 1582.373506][T29989] ? load_image+0x400/0x400 [ 1582.378052][T29989] ? mark_lock+0x94/0x320 [ 1582.382445][T29989] ? mark_lock+0x94/0x320 [ 1582.386837][T29989] should_fail_ex+0x399/0x4d0 [ 1582.391650][T29989] should_failslab+0x5/0x20 [ 1582.396203][T29989] slab_pre_alloc_hook+0x59/0x310 [ 1582.401262][T29989] kmem_cache_alloc_node+0x5a/0x320 [ 1582.406660][T29989] ? __alloc_skb+0xfc/0x7e0 [ 1582.411206][T29989] __alloc_skb+0xfc/0x7e0 [ 1582.415578][T29989] alloc_skb_with_frags+0xa7/0x710 [ 1582.420732][T29989] ? mark_lock+0x94/0x320 [ 1582.425099][T29989] ? __lock_acquire+0x12f4/0x7d10 [ 1582.430171][T29989] sock_alloc_send_pskb+0x87f/0x9a0 [ 1582.435414][T29989] ? sock_kzfree_s+0x50/0x50 [ 1582.440040][T29989] ? verify_lock_unused+0x140/0x140 [ 1582.445284][T29989] ? __lock_acquire+0x12f4/0x7d10 [ 1582.450346][T29989] ? __ipv6_neigh_lookup_noref+0x5b9/0x7d0 [ 1582.456196][T29989] __ip6_append_data+0x2ae9/0x3d40 [ 1582.461372][T29989] ? __in6_dev_get+0xd0/0xd0 [ 1582.466007][T29989] ? ip6_mtu+0x79/0x3f0 [ 1582.470223][T29989] ? ip6_setup_cork+0xfe0/0xfe0 [ 1582.475125][T29989] ? ip6_setup_cork+0xa30/0xfe0 [ 1582.480035][T29989] ip6_append_data+0x1ea/0x3e0 [ 1582.484876][T29989] ? __in6_dev_get+0xd0/0xd0 [ 1582.489516][T29989] icmp6_send+0x1341/0x1a60 [ 1582.494076][T29989] ? icmp6_send+0xb89/0x1a60 [ 1582.498773][T29989] ? icmpv6_push_pending_frames+0x4a0/0x4a0 [ 1582.504714][T29989] ? __local_bh_enable_ip+0x136/0x1c0 [ 1582.510115][T29989] ? lockdep_hardirqs_on+0x94/0x140 [ 1582.515368][T29989] ? ip_route_output_key_hash+0x139/0x330 [ 1582.521138][T29989] icmpv6_ndo_send+0x1b5/0x520 [ 1582.525948][T29989] ? memset+0x1e/0x40 [ 1582.529961][T29989] ? xfrm_lookup_with_ifid+0x18e7/0x2050 [ 1582.535625][T29989] ? udp6_set_csum+0xef0/0xef0 [ 1582.540442][T29989] ? ipv4_mtu+0x2c8/0x3e0 [ 1582.544820][T29989] tnl_update_pmtu+0xd33/0x1070 [ 1582.549789][T29989] ip_tunnel_xmit+0xd42/0x2440 [ 1582.554600][T29989] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 1582.559653][T29989] ? lock_chain_count+0x20/0x20 [ 1582.564549][T29989] ? skb_push+0x8a/0xd0 [ 1582.568752][T29989] ? gre_build_header+0x25b/0x9a0 [ 1582.573902][T29989] ipgre_xmit+0x79d/0xb20 [ 1582.578267][T29989] dev_hard_start_xmit+0x262/0x870 [ 1582.583425][T29989] __dev_queue_xmit+0x1a7f/0x37f0 [ 1582.588486][T29989] ? __dev_queue_xmit+0x26b/0x37f0 [ 1582.593635][T29989] ? netdev_core_pick_tx+0x340/0x340 [ 1582.598969][T29989] ? skb_release_data+0x1d2/0x7c0 [ 1582.604032][T29989] __bpf_redirect+0x917/0x1180 [ 1582.608849][T29989] bpf_clone_redirect+0x26c/0x3c0 [ 1582.613941][T29989] bpf_prog_da1e0ee5f8d5c8f5+0x55/0x5a [ 1582.619452][T29989] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1582.625477][T29989] ? lock_chain_count+0x20/0x20 [ 1582.630367][T29989] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1582.636643][T29989] ? lockdep_hardirqs_on+0x94/0x140 [ 1582.641892][T29989] ? ktime_get+0x7b/0x270 [ 1582.646252][T29989] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1582.652608][T29989] ? ktime_get_real_ts64+0x440/0x440 [ 1582.657921][T29989] ? read_lock_is_recursive+0x10/0x10 [ 1582.663357][T29989] bpf_test_run+0x4c1/0x830 [ 1582.667906][T29989] ? convert___skb_to_skb+0x580/0x580 [ 1582.673353][T29989] ? eth_get_headlen+0x200/0x200 [ 1582.678317][T29989] ? __build_skb+0x257/0x3c0 [ 1582.682939][T29989] ? bpf_prog_test_run_skb+0x773/0x12a0 [ 1582.688550][T29989] ? convert___skb_to_skb+0x3d/0x580 [ 1582.693882][T29989] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 1582.699384][T29989] ? cpu_online+0xa0/0xa0 [ 1582.703742][T29989] bpf_prog_test_run+0x31e/0x390 [ 1582.708723][T29989] __sys_bpf+0x62b/0x780 [ 1582.713010][T29989] ? bpf_link_show_fdinfo+0x380/0x380 [ 1582.718427][T29989] ? lock_chain_count+0x20/0x20 [ 1582.723333][T29989] __x64_sys_bpf+0x78/0x90 [ 1582.727874][T29989] do_syscall_64+0x4c/0xa0 [ 1582.732327][T29989] ? clear_bhb_loop+0x60/0xb0 [ 1582.737141][T29989] ? clear_bhb_loop+0x60/0xb0 [ 1582.741873][T29989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1582.747810][T29989] RIP: 0033:0x7fb0c239aeb9 [ 1582.752255][T29989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1582.772061][T29989] RSP: 002b:00007fb0c32fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1582.780504][T29989] RAX: ffffffffffffffda RBX: 00007fb0c2615fa0 RCX: 00007fb0c239aeb9 [ 1582.788506][T29989] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 1582.796501][T29989] RBP: 00007fb0c32fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1582.804510][T29989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1582.812513][T29989] R13: 00007fb0c2616038 R14: 00007fb0c2615fa0 R15: 00007fffb2596fa8 [ 1582.820534][T29989] [ 1582.823933][ T4295] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1582.836162][T29984] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1583.524916][T29990] device syzkaller0 entered promiscuous mode [ 1583.611304][T30010] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7773'. [ 1583.779611][T30012] FAULT_INJECTION: forcing a failure. [ 1583.779611][T30012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1583.861104][ T4525] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1583.872002][T30012] CPU: 1 PID: 30012 Comm: syz.0.7774 Not tainted syzkaller #0 [ 1583.879507][T30012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1583.889716][T30012] Call Trace: [ 1583.893038][T30012] [ 1583.896014][T30012] dump_stack_lvl+0x188/0x24e [ 1583.900748][T30012] ? show_regs_print_info+0x12/0x12 [ 1583.906022][T30012] ? load_image+0x400/0x400 [ 1583.910575][T30012] ? __lock_acquire+0x7d10/0x7d10 [ 1583.915657][T30012] should_fail_ex+0x399/0x4d0 [ 1583.920397][T30012] _copy_from_user+0x2c/0x170 [ 1583.925141][T30012] __copy_msghdr+0x3b7/0x580 [ 1583.929803][T30012] ___sys_sendmsg+0x210/0x360 [ 1583.934541][T30012] ? __sys_sendmsg+0x290/0x290 [ 1583.939380][T30012] ? trace_call_bpf+0xbf/0x6b0 [ 1583.944225][T30012] __se_sys_sendmsg+0x1bb/0x2a0 [ 1583.949125][T30012] ? ct_nmi_exit+0x145/0x1c0 [ 1583.953762][T30012] ? __x64_sys_sendmsg+0x80/0x80 [ 1583.958775][T30012] ? lockdep_hardirqs_on+0x94/0x140 [ 1583.964046][T30012] do_syscall_64+0x4c/0xa0 [ 1583.968514][T30012] ? clear_bhb_loop+0x60/0xb0 [ 1583.973233][T30012] ? clear_bhb_loop+0x60/0xb0 [ 1583.977985][T30012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1583.983920][T30012] RIP: 0033:0x7f47dad9aeb9 [ 1583.988372][T30012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1584.008014][T30012] RSP: 002b:00007f47dbc66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1584.016471][T30012] RAX: ffffffffffffffda RBX: 00007f47db015fa0 RCX: 00007f47dad9aeb9 [ 1584.024603][T30012] RDX: 000000000000fffe RSI: 0000200000000340 RDI: 0000000000000003 [ 1584.032614][T30012] RBP: 00007f47dbc66090 R08: 0000000000000000 R09: 0000000000000000 [ 1584.040618][T30012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1584.048632][T30012] R13: 00007f47db016038 R14: 00007f47db015fa0 R15: 00007ffc46f17358 [ 1584.056683][T30012] [ 1584.082538][T30009] netlink: 'syz.1.7772': attribute type 4 has an invalid length. [ 1584.108450][T30009] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7772'. [ 1584.127482][T30009] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1584.963010][T30038] netlink: 'syz.1.7783': attribute type 4 has an invalid length. [ 1584.973929][T30038] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7783'. [ 1584.988232][T30038] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1585.454320][T30048] can: request_module (can-proto-3) failed. [ 1586.039087][T30052] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7788'. [ 1586.082417][T30052] netlink: 'syz.4.7788': attribute type 21 has an invalid length. [ 1586.125653][T30052] netlink: 'syz.4.7788': attribute type 4 has an invalid length. [ 1586.145082][T30052] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7788'. [ 1586.179854][T30055] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7787'. [ 1586.460705][T30065] netlink: 'syz.4.7791': attribute type 10 has an invalid length. [ 1586.519090][T30068] netlink: 'syz.1.7794': attribute type 39 has an invalid length. [ 1587.559945][T30077] netlink: 'syz.0.7793': attribute type 4 has an invalid length. [ 1587.579251][T30077] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7793'. [ 1587.617893][T30077] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1587.695270][T30089] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7799'. [ 1587.916308][T30094] netlink: 'syz.0.7801': attribute type 4 has an invalid length. [ 1587.948604][T30094] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7801'. [ 1587.983593][T30094] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1589.425348][T30124] netlink: 'syz.3.7810': attribute type 10 has an invalid length. [ 1590.324862][T30151] netlink: 'syz.0.7816': attribute type 4 has an invalid length. [ 1590.332736][T30151] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7816'. [ 1590.351091][T30151] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1590.927978][T30162] netlink: 'syz.4.7819': attribute type 2 has an invalid length. [ 1590.984584][T30162] netlink: 'syz.4.7819': attribute type 8 has an invalid length. [ 1591.025612][T30162] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7819'. [ 1591.961799][ T48] Bluetooth: hci5: ISO packet for unknown connection handle 1854 [ 1592.214932][T30196] netlink: 'syz.1.7832': attribute type 4 has an invalid length. [ 1592.266257][T30196] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7832'. [ 1592.306751][T30196] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1593.319670][T30241] netlink: 'syz.0.7848': attribute type 4 has an invalid length. [ 1593.343689][T30241] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7848'. [ 1593.376891][T30241] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1593.506043][T30252] netlink: 'syz.1.7853': attribute type 21 has an invalid length. [ 1593.513976][T30252] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7853'. [ 1593.549602][T30255] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7853'. [ 1593.596728][T30252] netlink: 'syz.1.7853': attribute type 4 has an invalid length. [ 1593.625424][T30255] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7853'. [ 1593.740372][T30262] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7853'. [ 1593.776457][T30252] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7853'. [ 1594.549471][T30285] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7863'. [ 1594.739934][T30284] netlink: 'syz.0.7864': attribute type 4 has an invalid length. [ 1594.777219][T30284] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7864'. [ 1594.818892][T30284] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1594.929352][T30293] device syzkaller0 entered promiscuous mode [ 1594.976453][T30293] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1595.526996][T30286] delete_channel: no stack [ 1596.235160][T30326] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7877'. [ 1596.502515][T30331] netlink: 'syz.0.7879': attribute type 10 has an invalid length. [ 1596.719156][T30331] team0: Port device wlan1 added [ 1596.731327][T30335] netlink: 'syz.3.7880': attribute type 39 has an invalid length. [ 1596.992311][T30346] netlink: 'syz.2.7883': attribute type 8 has an invalid length. [ 1597.643873][T30339] netlink: 'syz.1.7882': attribute type 4 has an invalid length. [ 1597.666203][T30339] __nla_validate_parse: 1 callbacks suppressed [ 1597.666222][T30339] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7882'. [ 1597.696301][T30339] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1598.141219][T30369] device syzkaller0 entered promiscuous mode [ 1598.181479][T30373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7891'. [ 1598.243169][T30376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7892'. [ 1599.031702][ T4525] wlan1: Trigger new scan to find an IBSS to join [ 1600.151794][T30388] FAULT_INJECTION: forcing a failure. [ 1600.151794][T30388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1600.174630][T30388] CPU: 0 PID: 30388 Comm: syz.0.7896 Not tainted syzkaller #0 [ 1600.182209][T30388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1600.192393][T30388] Call Trace: [ 1600.195744][T30388] [ 1600.198737][T30388] dump_stack_lvl+0x188/0x24e [ 1600.203514][T30388] ? show_regs_print_info+0x12/0x12 [ 1600.208796][T30388] ? load_image+0x400/0x400 [ 1600.213401][T30388] ? __might_fault+0xa6/0x120 [ 1600.218188][T30388] should_fail_ex+0x399/0x4d0 [ 1600.222980][T30388] copyin+0x1b/0x120 [ 1600.226962][T30388] _copy_from_iter+0x447/0x1130 [ 1600.231949][T30388] ? lockdep_hardirqs_on+0x94/0x140 [ 1600.237306][T30388] ? copyout_mc+0x110/0x110 [ 1600.241910][T30388] ? __virt_addr_valid+0x188/0x540 [ 1600.247101][T30388] ? __virt_addr_valid+0x188/0x540 [ 1600.252296][T30388] ? __virt_addr_valid+0x465/0x540 [ 1600.257498][T30388] ? __check_object_size+0x500/0xa40 [ 1600.262879][T30388] netlink_sendmsg+0x755/0xbd0 [ 1600.267757][T30388] ? netlink_getsockopt+0x550/0x550 [ 1600.273052][T30388] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1600.279186][T30388] ? aa_sock_msg_perm+0x94/0x150 [ 1600.284188][T30388] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1600.289524][T30388] ? security_socket_sendmsg+0x7c/0xa0 [ 1600.295084][T30388] ? netlink_getsockopt+0x550/0x550 [ 1600.300368][T30388] ____sys_sendmsg+0x5be/0x970 [ 1600.305269][T30388] ? __sys_sendmsg_sock+0x30/0x30 [ 1600.310377][T30388] ? __import_iovec+0x315/0x500 [ 1600.315342][T30388] ? import_iovec+0x6f/0xa0 [ 1600.319937][T30388] ___sys_sendmsg+0x2a2/0x360 [ 1600.324723][T30388] ? __sys_sendmsg+0x290/0x290 [ 1600.329657][T30388] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1600.335664][T30388] __se_sys_sendmsg+0x1bb/0x2a0 [ 1600.340630][T30388] ? __x64_sys_sendmsg+0x80/0x80 [ 1600.345722][T30388] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1600.351709][T30388] do_syscall_64+0x4c/0xa0 [ 1600.356207][T30388] ? clear_bhb_loop+0x60/0xb0 [ 1600.360976][T30388] ? clear_bhb_loop+0x60/0xb0 [ 1600.365752][T30388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1600.371849][T30388] RIP: 0033:0x7f47dad9aeb9 [ 1600.376346][T30388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1600.396149][T30388] RSP: 002b:00007f47dbc66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1600.404649][T30388] RAX: ffffffffffffffda RBX: 00007f47db015fa0 RCX: 00007f47dad9aeb9 [ 1600.412687][T30388] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 1600.420742][T30388] RBP: 00007f47dbc66090 R08: 0000000000000000 R09: 0000000000000000 [ 1600.428806][T30388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1600.436862][T30388] R13: 00007f47db016038 R14: 00007f47db015fa0 R15: 00007ffc46f17358 [ 1600.444956][T30388] [ 1602.981088][T30398] netlink: 'syz.0.7898': attribute type 4 has an invalid length. [ 1602.991440][T30398] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7898'. [ 1603.000997][T30398] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1603.023087][T30402] netlink: 'syz.4.7899': attribute type 2 has an invalid length. [ 1603.044568][T30402] netlink: 'syz.4.7899': attribute type 8 has an invalid length. [ 1603.065995][T30402] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7899'. [ 1603.243192][T30411] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7901'. [ 1603.360630][T30419] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7904'. [ 1603.703290][T30432] netlink: 'syz.4.7909': attribute type 10 has an invalid length. [ 1603.796193][T21359] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1603.966146][ T75] wlan1: Trigger new scan to find an IBSS to join [ 1604.188140][T30443] netlink: 'syz.3.7912': attribute type 4 has an invalid length. [ 1604.216147][T30443] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7912'. [ 1604.225835][T30443] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1604.569175][T30458] netlink: 'syz.0.7915': attribute type 10 has an invalid length. [ 1604.920881][ T75] wlan1: Creating new IBSS network, BSSID 6a:18:12:bc:8b:c8 [ 1604.948207][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1604.961709][T30467] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7919'. [ 1605.350510][T30479] netlink: 'syz.3.7924': attribute type 10 has an invalid length. [ 1605.386478][T30481] netlink: 'syz.2.7926': attribute type 4 has an invalid length. [ 1605.445492][T30481] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7926'. [ 1605.529233][T30481] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1607.494084][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.500719][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.921196][T30533] netlink: 'syz.2.7941': attribute type 10 has an invalid length. [ 1607.990515][T30534] netlink: 'syz.4.7942': attribute type 4 has an invalid length. [ 1608.022349][T30534] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7942'. [ 1608.053312][T30534] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1608.665125][T30554] FAULT_INJECTION: forcing a failure. [ 1608.665125][T30554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1608.699550][T30554] CPU: 1 PID: 30554 Comm: syz.3.7947 Not tainted syzkaller #0 [ 1608.707096][T30554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1608.717209][T30554] Call Trace: [ 1608.720529][T30554] [ 1608.723494][T30554] dump_stack_lvl+0x188/0x24e [ 1608.728233][T30554] ? show_regs_print_info+0x12/0x12 [ 1608.733483][T30554] ? load_image+0x400/0x400 [ 1608.738038][T30554] ? __lock_acquire+0x7d10/0x7d10 [ 1608.743128][T30554] should_fail_ex+0x399/0x4d0 [ 1608.747876][T30554] _copy_from_user+0x2c/0x170 [ 1608.752615][T30554] bpf_prog_test_run_skb+0x262/0x12a0 [ 1608.758032][T30554] ? __fget_files+0x28/0x4b0 [ 1608.762687][T30554] ? __fget_files+0x28/0x4b0 [ 1608.767336][T30554] ? __fget_files+0x43d/0x4b0 [ 1608.772077][T30554] ? cpu_online+0xa0/0xa0 [ 1608.776459][T30554] bpf_prog_test_run+0x31e/0x390 [ 1608.781469][T30554] __sys_bpf+0x62b/0x780 [ 1608.785784][T30554] ? bpf_link_show_fdinfo+0x380/0x380 [ 1608.791238][T30554] ? lock_chain_count+0x20/0x20 [ 1608.796150][T30554] __x64_sys_bpf+0x78/0x90 [ 1608.800627][T30554] do_syscall_64+0x4c/0xa0 [ 1608.805091][T30554] ? clear_bhb_loop+0x60/0xb0 [ 1608.809859][T30554] ? clear_bhb_loop+0x60/0xb0 [ 1608.814596][T30554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1608.820625][T30554] RIP: 0033:0x7fb0c239aeb9 [ 1608.825087][T30554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1608.844763][T30554] RSP: 002b:00007fb0c32fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1608.853239][T30554] RAX: ffffffffffffffda RBX: 00007fb0c2615fa0 RCX: 00007fb0c239aeb9 [ 1608.861261][T30554] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1608.869281][T30554] RBP: 00007fb0c32fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1608.877288][T30554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1608.885314][T30554] R13: 00007fb0c2616038 R14: 00007fb0c2615fa0 R15: 00007fffb2596fa8 [ 1608.893349][T30554] [ 1609.321522][T30572] netlink: 'syz.2.7954': attribute type 10 has an invalid length. [ 1609.369282][T30572] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7954'. [ 1609.403138][T30580] netlink: 'syz.1.7955': attribute type 4 has an invalid length. [ 1609.463127][T30580] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7955'. [ 1609.483220][T30580] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1609.614542][T30578] netlink: 'syz.0.7956': attribute type 10 has an invalid length. [ 1610.217605][T30601] netlink: 'syz.1.7963': attribute type 10 has an invalid length. [ 1610.262872][T30601] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7963'. [ 1610.358293][T30601] bridge0: port 3(veth0_vlan) entered blocking state [ 1610.417263][T30601] bridge0: port 3(veth0_vlan) entered disabled state [ 1610.462211][T30601] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1611.715438][T30624] netlink: 'syz.3.7970': attribute type 10 has an invalid length. [ 1611.747041][T30624] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7970'. [ 1611.892688][T30629] netlink: 'syz.4.7971': attribute type 4 has an invalid length. [ 1611.924074][T30629] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7971'. [ 1611.960298][T30629] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1612.138299][T30640] netlink: 'syz.1.7973': attribute type 10 has an invalid length. [ 1614.918035][T30651] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7975'. [ 1614.992869][T30658] netlink: 'syz.2.7976': attribute type 25 has an invalid length. [ 1615.066415][T30658] netlink: 'syz.2.7976': attribute type 1 has an invalid length. [ 1615.100527][T30658] bridge0: port 1(bridge_slave_0) entered learning state [ 1616.203517][T30682] netlink: 'syz.2.7986': attribute type 10 has an invalid length. [ 1616.258144][T30682] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7986'. [ 1616.384637][T30691] netlink: 'syz.0.7988': attribute type 4 has an invalid length. [ 1616.469485][T30691] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7988'. [ 1616.503897][T30691] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1616.590855][T30692] netlink: 'syz.1.7989': attribute type 10 has an invalid length. [ 1616.645342][T30700] netlink: 'syz.4.7990': attribute type 10 has an invalid length. [ 1616.676177][T30700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7990'. [ 1616.926982][T30700] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1617.143948][T30715] netlink: 'syz.1.7992': attribute type 6 has an invalid length. [ 1617.190631][T30715] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.7992'. [ 1617.475909][T30719] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.7994'. [ 1618.543081][T30736] netlink: 'syz.3.8000': attribute type 29 has an invalid length. [ 1618.553023][T30736] netlink: 'syz.3.8000': attribute type 29 has an invalid length. [ 1618.703740][T30741] netlink: 'syz.4.8003': attribute type 4 has an invalid length. [ 1618.731977][T30741] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8003'. [ 1618.767354][T30741] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1619.520068][T30761] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.8009'. [ 1619.606133][T30767] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8012'. [ 1619.705418][T30771] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.8014'. [ 1620.010088][T30780] validate_nla: 1 callbacks suppressed [ 1620.010131][T30780] netlink: 'syz.3.8017': attribute type 4 has an invalid length. [ 1620.036511][T30780] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8017'. [ 1620.089048][T30780] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1620.314357][T30793] netlink: 'syz.0.8022': attribute type 21 has an invalid length. [ 1620.354376][T30793] netlink: 'syz.0.8022': attribute type 4 has an invalid length. [ 1621.464542][T30818] netlink: 'syz.3.8028': attribute type 25 has an invalid length. [ 1621.496193][T30818] netlink: 'syz.3.8028': attribute type 1 has an invalid length. [ 1621.504735][T30818] bridge0: port 1(bridge_slave_0) entered learning state [ 1621.517688][T30821] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.8030'. [ 1621.560209][T30825] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8031'. [ 1621.950066][T30836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1622.000431][T30835] netlink: 'syz.1.8036': attribute type 4 has an invalid length. [ 1622.034101][T30835] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8036'. [ 1622.114127][T30836] netlink: 'syz.0.8035': attribute type 3 has an invalid length. [ 1622.154861][T30835] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1622.182183][T30836] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8035'. [ 1622.380505][T30846] netlink: 'syz.3.8038': attribute type 2 has an invalid length. [ 1622.639315][T30851] netlink: 'syz.1.8040': attribute type 10 has an invalid length. [ 1624.038601][T30879] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8048'. [ 1624.082758][T30881] netlink: 'syz.2.8049': attribute type 6 has an invalid length. [ 1624.668385][T30888] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8051'. [ 1624.710264][T30888] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1625.153258][T30902] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.8053'. [ 1625.185063][T30902] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1625.196268][T30902] CPU: 0 PID: 30902 Comm: syz.1.8053 Not tainted syzkaller #0 [ 1625.203794][T30902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1625.213896][T30902] Call Trace: [ 1625.217218][T30902] [ 1625.220199][T30902] dump_stack_lvl+0x188/0x24e [ 1625.224947][T30902] ? show_regs_print_info+0x12/0x12 [ 1625.230204][T30902] ? load_image+0x400/0x400 [ 1625.234758][T30902] sysfs_warn_dup+0x8a/0xa0 [ 1625.239311][T30902] sysfs_do_create_link_sd+0xc0/0x110 [ 1625.244739][T30902] device_add+0x7ed/0xfb0 [ 1625.249174][T30902] wiphy_register+0x1d9f/0x2ac0 [ 1625.254109][T30902] ? cfg80211_event_work+0x40/0x40 [ 1625.259279][T30902] ? minstrel_ht_alloc+0x894/0xa20 [ 1625.264448][T30902] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1625.270576][T30902] ieee80211_register_hw+0x2d00/0x39f0 [ 1625.276121][T30902] ? ieee80211_register_hw+0xea1/0x39f0 [ 1625.281716][T30902] ? ieee80211_register_hw+0xea1/0x39f0 [ 1625.287319][T30902] ? ieee80211_tasklet_handler+0x20/0x20 [ 1625.293031][T30902] ? memset+0x1e/0x40 [ 1625.297053][T30902] ? __hrtimer_init+0x186/0x270 [ 1625.301951][T30902] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1625.307745][T30902] hwsim_new_radio_nl+0xafa/0xce0 [ 1625.312841][T30902] genl_family_rcv_msg_doit+0x22a/0x330 [ 1625.318436][T30902] ? end_current_label_crit_section+0x170/0x170 [ 1625.324724][T30902] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1625.330679][T30902] ? bpf_lsm_capable+0x5/0x10 [ 1625.335414][T30902] ? security_capable+0x85/0xb0 [ 1625.340318][T30902] genl_rcv_msg+0x604/0x790 [ 1625.344890][T30902] ? genl_bind+0x360/0x360 [ 1625.349362][T30902] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1625.355767][T30902] netlink_rcv_skb+0x1fb/0x450 [ 1625.360585][T30902] ? genl_bind+0x360/0x360 [ 1625.365061][T30902] ? netlink_ack+0x1170/0x1170 [ 1625.369893][T30902] ? down_read+0x1a8/0x2d0 [ 1625.374365][T30902] genl_rcv+0x24/0x40 [ 1625.378404][T30902] netlink_unicast+0x74d/0x8d0 [ 1625.383319][T30902] netlink_sendmsg+0x8ad/0xbd0 [ 1625.388146][T30902] ? netlink_getsockopt+0x550/0x550 [ 1625.393413][T30902] ? aa_sock_msg_perm+0x94/0x150 [ 1625.398397][T30902] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1625.403734][T30902] ? security_socket_sendmsg+0x7c/0xa0 [ 1625.409369][T30902] ? netlink_getsockopt+0x550/0x550 [ 1625.414622][T30902] ____sys_sendmsg+0x5be/0x970 [ 1625.419454][T30902] ? __sys_sendmsg_sock+0x30/0x30 [ 1625.424531][T30902] ? __import_iovec+0x315/0x500 [ 1625.429438][T30902] ? import_iovec+0x6f/0xa0 [ 1625.433990][T30902] ___sys_sendmsg+0x2a2/0x360 [ 1625.438727][T30902] ? try_to_wake_up+0x6ae/0x1080 [ 1625.443717][T30902] ? __sys_sendmsg+0x290/0x290 [ 1625.448592][T30902] __se_sys_sendmsg+0x1bb/0x2a0 [ 1625.453511][T30902] ? __x64_sys_sendmsg+0x80/0x80 [ 1625.458774][T30902] ? lockdep_hardirqs_on+0x94/0x140 [ 1625.464038][T30902] do_syscall_64+0x4c/0xa0 [ 1625.468504][T30902] ? clear_bhb_loop+0x60/0xb0 [ 1625.473318][T30902] ? clear_bhb_loop+0x60/0xb0 [ 1625.478041][T30902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1625.483977][T30902] RIP: 0033:0x7fd669b9aeb9 [ 1625.488441][T30902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1625.508537][T30902] RSP: 002b:00007fd66a9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1625.517000][T30902] RAX: ffffffffffffffda RBX: 00007fd669e16090 RCX: 00007fd669b9aeb9 [ 1625.525019][T30902] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1625.533032][T30902] RBP: 00007fd669c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1625.541047][T30902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1625.549067][T30902] R13: 00007fd669e16128 R14: 00007fd669e16090 R15: 00007ffc163274d8 [ 1625.557101][T30902] [ 1625.759441][T30911] FAULT_INJECTION: forcing a failure. [ 1625.759441][T30911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1625.773068][T30911] CPU: 0 PID: 30911 Comm: syz.2.8057 Not tainted syzkaller #0 [ 1625.780585][T30911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1625.790685][T30911] Call Trace: [ 1625.794004][T30911] [ 1625.796972][T30911] dump_stack_lvl+0x188/0x24e [ 1625.801707][T30911] ? show_regs_print_info+0x12/0x12 [ 1625.806964][T30911] ? load_image+0x400/0x400 [ 1625.811615][T30911] ? __lock_acquire+0x7d10/0x7d10 [ 1625.816715][T30911] should_fail_ex+0x399/0x4d0 [ 1625.821460][T30911] _copy_from_user+0x2c/0x170 [ 1625.826282][T30911] bpf_prog_test_run_skb+0x262/0x12a0 [ 1625.831699][T30911] ? __fget_files+0x28/0x4b0 [ 1625.836337][T30911] ? __fget_files+0x28/0x4b0 [ 1625.840974][T30911] ? __fget_files+0x43d/0x4b0 [ 1625.845709][T30911] ? cpu_online+0xa0/0xa0 [ 1625.850085][T30911] bpf_prog_test_run+0x31e/0x390 [ 1625.855081][T30911] __sys_bpf+0x62b/0x780 [ 1625.859382][T30911] ? bpf_link_show_fdinfo+0x380/0x380 [ 1625.864821][T30911] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1625.871045][T30911] __x64_sys_bpf+0x78/0x90 [ 1625.875589][T30911] do_syscall_64+0x4c/0xa0 [ 1625.880059][T30911] ? clear_bhb_loop+0x60/0xb0 [ 1625.884787][T30911] ? clear_bhb_loop+0x60/0xb0 [ 1625.889522][T30911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1625.895463][T30911] RIP: 0033:0x7ff61139aeb9 [ 1625.899921][T30911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1625.919580][T30911] RSP: 002b:00007ff612217028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1625.928044][T30911] RAX: ffffffffffffffda RBX: 00007ff611616180 RCX: 00007ff61139aeb9 [ 1625.936144][T30911] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1625.944148][T30911] RBP: 00007ff612217090 R08: 0000000000000000 R09: 0000000000000000 [ 1625.952161][T30911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1625.960182][T30911] R13: 00007ff611616218 R14: 00007ff611616180 R15: 00007ffc4f0b7888 [ 1625.968243][T30911] [ 1626.239153][T30918] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8058'. [ 1626.891975][T30944] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8069'. [ 1626.928624][T30944] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 1626.934523][T30944] syzkaller0: owner set to 0 [ 1627.172879][T30947] validate_nla: 1 callbacks suppressed [ 1627.172926][T30947] netlink: 'syz.3.8070': attribute type 21 has an invalid length. [ 1627.252390][T30947] netlink: 'syz.3.8070': attribute type 1 has an invalid length. [ 1627.295763][T30947] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8070'. [ 1627.405645][T30954] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8074'. [ 1627.462124][T30964] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.8077'. [ 1628.642895][T30989] netlink: 'syz.1.8086': attribute type 10 has an invalid length. [ 1628.661497][T30989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8086'. [ 1628.695405][T30989] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1628.741456][T30996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1628.805220][T30992] netlink: 'syz.2.8088': attribute type 3 has an invalid length. [ 1628.833823][T30992] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8088'. [ 1628.931835][T30999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8090'. [ 1630.263699][T31018] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8098'. [ 1630.575617][T31030] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8105'. [ 1630.632485][T31036] netlink: 'syz.4.8104': attribute type 10 has an invalid length. [ 1631.151280][T31055] netlink: 'syz.3.8113': attribute type 10 has an invalid length. [ 1631.247876][T31058] netlink: 'syz.3.8113': attribute type 21 has an invalid length. [ 1631.309989][ T48] Bluetooth: hci5: ISO packet for unknown connection handle 48 [ 1631.657396][T31077] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8120'. [ 1631.693174][T31079] netlink: 'syz.1.8122': attribute type 10 has an invalid length. [ 1632.921747][T31116] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8137'. [ 1632.982831][T31120] netlink: 'syz.0.8138': attribute type 10 has an invalid length. [ 1633.302215][T31129] netlink: 'syz.2.8140': attribute type 27 has an invalid length. [ 1633.345161][T31131] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8141'. [ 1633.427942][T31137] netlink: 'syz.0.8144': attribute type 29 has an invalid length. [ 1633.452936][T31136] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8143'. [ 1633.516839][T31137] netlink: 'syz.0.8144': attribute type 29 has an invalid length. [ 1633.554189][T31138] netlink: 'syz.0.8144': attribute type 29 has an invalid length. [ 1633.574223][T31143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8146'. [ 1633.608648][T31145] netlink: 'syz.0.8144': attribute type 29 has an invalid length. [ 1633.688032][T31137] netlink: 'syz.0.8144': attribute type 29 has an invalid length. [ 1634.361364][T31157] can: request_module (can-proto-3) failed. [ 1634.392022][T31169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8154'. [ 1634.418234][T31167] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8152'. [ 1634.623234][T31173] netlink: 'syz.4.8155': attribute type 10 has an invalid length. [ 1634.925488][ T4295] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1635.969299][T31206] netlink: 'syz.2.8167': attribute type 29 has an invalid length. [ 1636.000809][T31206] netlink: 'syz.2.8167': attribute type 29 has an invalid length. [ 1636.031128][T31210] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8168'. [ 1636.459791][T31226] FAULT_INJECTION: forcing a failure. [ 1636.459791][T31226] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.486022][T31226] CPU: 0 PID: 31226 Comm: syz.1.8174 Not tainted syzkaller #0 [ 1636.493560][T31226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1636.503661][T31226] Call Trace: [ 1636.506981][T31226] [ 1636.509951][T31226] dump_stack_lvl+0x188/0x24e [ 1636.514690][T31226] ? show_regs_print_info+0x12/0x12 [ 1636.519945][T31226] ? load_image+0x400/0x400 [ 1636.524497][T31226] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1636.530532][T31226] should_fail_ex+0x399/0x4d0 [ 1636.535272][T31226] should_failslab+0x5/0x20 [ 1636.539831][T31226] slab_pre_alloc_hook+0x59/0x310 [ 1636.544898][T31226] ? lockdep_hardirqs_on+0x94/0x140 [ 1636.550146][T31226] kmem_cache_alloc+0x56/0x2f0 [ 1636.554950][T31226] ? skb_clone+0x1e7/0x370 [ 1636.559418][T31226] skb_clone+0x1e7/0x370 [ 1636.563720][T31226] __netlink_deliver_tap+0x3ed/0x800 [ 1636.569101][T31226] ? netlink_deliver_tap+0x2e/0x1b0 [ 1636.574348][T31226] netlink_deliver_tap+0x19c/0x1b0 [ 1636.579508][T31226] netlink_unicast+0x728/0x8d0 [ 1636.584325][T31226] netlink_sendmsg+0x8ad/0xbd0 [ 1636.589150][T31226] ? lockdep_hardirqs_on+0x94/0x140 [ 1636.594406][T31226] ? netlink_getsockopt+0x550/0x550 [ 1636.599662][T31226] ? ____sys_sendmsg+0x534/0x970 [ 1636.604664][T31226] ? netlink_getsockopt+0x550/0x550 [ 1636.609912][T31226] ____sys_sendmsg+0x5be/0x970 [ 1636.614736][T31226] ? __sys_sendmsg_sock+0x30/0x30 [ 1636.619816][T31226] ? __import_iovec+0x315/0x500 [ 1636.624722][T31226] ? import_iovec+0x6f/0xa0 [ 1636.629279][T31226] ___sys_sendmsg+0x2a2/0x360 [ 1636.634026][T31226] ? __sys_sendmsg+0x290/0x290 [ 1636.638861][T31226] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1636.644653][T31226] __se_sys_sendmsg+0x1bb/0x2a0 [ 1636.649555][T31226] ? __x64_sys_sendmsg+0x80/0x80 [ 1636.654562][T31226] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1636.660494][T31226] do_syscall_64+0x4c/0xa0 [ 1636.664958][T31226] ? clear_bhb_loop+0x60/0xb0 [ 1636.669690][T31226] ? clear_bhb_loop+0x60/0xb0 [ 1636.674415][T31226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1636.680347][T31226] RIP: 0033:0x7fd669b9aeb9 [ 1636.684799][T31226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1636.704442][T31226] RSP: 002b:00007fd66aa17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1636.712923][T31226] RAX: ffffffffffffffda RBX: 00007fd669e15fa0 RCX: 00007fd669b9aeb9 [ 1636.720941][T31226] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 1636.728979][T31226] RBP: 00007fd66aa17090 R08: 0000000000000000 R09: 0000000000000000 [ 1636.736995][T31226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1636.745017][T31226] R13: 00007fd669e16038 R14: 00007fd669e15fa0 R15: 00007ffc163274d8 [ 1636.753058][T31226] [ 1636.834878][T31229] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8175'. [ 1636.866264][T31231] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8175'. [ 1637.030334][T31240] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.8176'. [ 1637.050557][T31235] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1637.063225][T31240] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.8176'. [ 1637.075430][T31234] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.8176'. [ 1637.090180][T31241] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.8176'. [ 1637.278754][T31247] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8181'. [ 1637.470735][ T4525] tipc: Subscription rejected, illegal request [ 1637.483465][T31255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8184'. [ 1637.593634][T31259] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8186'. [ 1638.832295][T31307] validate_nla: 72 callbacks suppressed [ 1638.832317][T31307] netlink: 'syz.0.8202': attribute type 10 has an invalid length. [ 1638.905487][T31309] netlink: 'syz.4.8201': attribute type 10 has an invalid length. [ 1638.932886][T31309] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 1642.666459][T31341] netlink: 'syz.0.8207': attribute type 21 has an invalid length. [ 1642.674566][T31341] netlink: 'syz.0.8207': attribute type 1 has an invalid length. [ 1642.702949][T31341] __nla_validate_parse: 3 callbacks suppressed [ 1642.702973][T31341] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8207'. [ 1642.951723][T31352] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8211'. [ 1643.369532][ T7572] tipc: Subscription rejected, illegal request [ 1645.300030][T31400] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8229'. [ 1645.574359][T31404] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8231'. [ 1645.666833][T21359] tipc: Subscription rejected, illegal request [ 1645.829397][T31417] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.8237'. [ 1646.233577][T31428] FAULT_INJECTION: forcing a failure. [ 1646.233577][T31428] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.310931][T31428] CPU: 1 PID: 31428 Comm: syz.0.8240 Not tainted syzkaller #0 [ 1646.318492][T31428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1646.328599][T31428] Call Trace: [ 1646.331925][T31428] [ 1646.334906][T31428] dump_stack_lvl+0x188/0x24e [ 1646.339750][T31428] ? show_regs_print_info+0x12/0x12 [ 1646.345008][T31428] ? load_image+0x400/0x400 [ 1646.349572][T31428] ? __might_sleep+0xd0/0xd0 [ 1646.354218][T31428] ? __lock_acquire+0x7d10/0x7d10 [ 1646.359326][T31428] should_fail_ex+0x399/0x4d0 [ 1646.364082][T31428] should_failslab+0x5/0x20 [ 1646.368664][T31428] slab_pre_alloc_hook+0x59/0x310 [ 1646.373747][T31428] ? __get_vm_area_node+0x122/0x330 [ 1646.379011][T31428] __kmem_cache_alloc_node+0x4f/0x260 [ 1646.384427][T31428] ? __get_vm_area_node+0x122/0x330 [ 1646.389685][T31428] kmalloc_node_trace+0x22/0xe0 [ 1646.394719][T31428] __get_vm_area_node+0x122/0x330 [ 1646.399794][T31428] ? __local_bh_enable_ip+0x136/0x1c0 [ 1646.405306][T31428] __vmalloc_node_range+0x357/0x13b0 [ 1646.410632][T31428] ? netlink_sendmsg+0x5ec/0xbd0 [ 1646.415710][T31428] ? netlink_insert+0x1034/0x13c0 [ 1646.420801][T31428] ? free_vm_area+0x50/0x50 [ 1646.425363][T31428] ? netlink_sendmsg+0x5ec/0xbd0 [ 1646.430339][T31428] vmalloc+0x75/0x80 [ 1646.434273][T31428] ? netlink_sendmsg+0x5ec/0xbd0 [ 1646.439256][T31428] netlink_sendmsg+0x5ec/0xbd0 [ 1646.444073][T31428] ? netlink_getsockopt+0x550/0x550 [ 1646.449317][T31428] ? aa_file_perm+0x3ea/0xf00 [ 1646.454030][T31428] ? aa_file_perm+0x112/0xf00 [ 1646.458735][T31428] ? aa_sock_msg_perm+0x94/0x150 [ 1646.463794][T31428] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1646.469110][T31428] ? security_socket_sendmsg+0x7c/0xa0 [ 1646.474619][T31428] sock_write_iter+0x2d9/0x3e0 [ 1646.479433][T31428] ? sock_read_iter+0x3a0/0x3a0 [ 1646.484342][T31428] ? common_file_perm+0x171/0x1c0 [ 1646.489415][T31428] vfs_write+0x4b1/0xa30 [ 1646.493710][T31428] ? file_end_write+0x250/0x250 [ 1646.498612][T31428] ? __fget_files+0x43d/0x4b0 [ 1646.503342][T31428] ? __fdget_pos+0x1d4/0x360 [ 1646.507972][T31428] ? ksys_write+0x71/0x250 [ 1646.512436][T31428] ksys_write+0x14c/0x250 [ 1646.516807][T31428] ? __ia32_sys_read+0x80/0x80 [ 1646.521617][T31428] ? lockdep_hardirqs_on+0x94/0x140 [ 1646.526868][T31428] do_syscall_64+0x4c/0xa0 [ 1646.531318][T31428] ? clear_bhb_loop+0x60/0xb0 [ 1646.536029][T31428] ? clear_bhb_loop+0x60/0xb0 [ 1646.540749][T31428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1646.546676][T31428] RIP: 0033:0x7f47dad9aeb9 [ 1646.551129][T31428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1646.570774][T31428] RSP: 002b:00007f47dbc66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1646.579230][T31428] RAX: ffffffffffffffda RBX: 00007f47db015fa0 RCX: 00007f47dad9aeb9 [ 1646.587235][T31428] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000005 [ 1646.595239][T31428] RBP: 00007f47dbc66090 R08: 0000000000000000 R09: 0000000000000000 [ 1646.603284][T31428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1646.611304][T31428] R13: 00007f47db016038 R14: 00007f47db015fa0 R15: 00007ffc46f17358 [ 1646.619376][T31428] [ 1646.648408][T31428] syz.0.8240: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1646.718528][T31428] CPU: 0 PID: 31428 Comm: syz.0.8240 Not tainted syzkaller #0 [ 1646.726168][T31428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1646.736283][T31428] Call Trace: [ 1646.739610][T31428] [ 1646.742592][T31428] dump_stack_lvl+0x188/0x24e [ 1646.747336][T31428] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1646.753817][T31428] ? show_regs_print_info+0x12/0x12 [ 1646.759088][T31428] ? load_image+0x400/0x400 [ 1646.763662][T31428] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1646.770142][T31428] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1646.776711][T31428] warn_alloc+0x242/0x330 [ 1646.781119][T31428] ? zone_watermark_ok_safe+0x270/0x270 [ 1646.786749][T31428] ? __get_vm_area_node+0x318/0x330 [ 1646.792016][T31428] ? __local_bh_enable_ip+0x136/0x1c0 [ 1646.797470][T31428] __vmalloc_node_range+0x37c/0x13b0 [ 1646.802836][T31428] ? netlink_insert+0x1034/0x13c0 [ 1646.807982][T31428] ? free_vm_area+0x50/0x50 [ 1646.812573][T31428] ? netlink_sendmsg+0x5ec/0xbd0 [ 1646.817578][T31428] vmalloc+0x75/0x80 [ 1646.821544][T31428] ? netlink_sendmsg+0x5ec/0xbd0 [ 1646.826559][T31428] netlink_sendmsg+0x5ec/0xbd0 [ 1646.831451][T31428] ? netlink_getsockopt+0x550/0x550 [ 1646.836743][T31428] ? aa_file_perm+0x3ea/0xf00 [ 1646.841483][T31428] ? aa_file_perm+0x112/0xf00 [ 1646.846302][T31428] ? aa_sock_msg_perm+0x94/0x150 [ 1646.851391][T31428] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1646.856748][T31428] ? security_socket_sendmsg+0x7c/0xa0 [ 1646.862279][T31428] sock_write_iter+0x2d9/0x3e0 [ 1646.867119][T31428] ? sock_read_iter+0x3a0/0x3a0 [ 1646.872065][T31428] ? common_file_perm+0x171/0x1c0 [ 1646.877165][T31428] vfs_write+0x4b1/0xa30 [ 1646.881506][T31428] ? file_end_write+0x250/0x250 [ 1646.886430][T31428] ? __fget_files+0x43d/0x4b0 [ 1646.891203][T31428] ? __fdget_pos+0x1d4/0x360 [ 1646.895852][T31428] ? ksys_write+0x71/0x250 [ 1646.900341][T31428] ksys_write+0x14c/0x250 [ 1646.904752][T31428] ? __ia32_sys_read+0x80/0x80 [ 1646.909595][T31428] ? lockdep_hardirqs_on+0x94/0x140 [ 1646.914874][T31428] do_syscall_64+0x4c/0xa0 [ 1646.919378][T31428] ? clear_bhb_loop+0x60/0xb0 [ 1646.924111][T31428] ? clear_bhb_loop+0x60/0xb0 [ 1646.928850][T31428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1646.934802][T31428] RIP: 0033:0x7f47dad9aeb9 [ 1646.939273][T31428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1646.958966][T31428] RSP: 002b:00007f47dbc66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1646.967451][T31428] RAX: ffffffffffffffda RBX: 00007f47db015fa0 RCX: 00007f47dad9aeb9 [ 1646.975478][T31428] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000005 [ 1646.983503][T31428] RBP: 00007f47dbc66090 R08: 0000000000000000 R09: 0000000000000000 [ 1646.991538][T31428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1646.999600][T31428] R13: 00007f47db016038 R14: 00007f47db015fa0 R15: 00007ffc46f17358 [ 1647.007694][T31428] [ 1647.053086][T31428] Mem-Info: [ 1647.056840][T31428] active_anon:8762 inactive_anon:0 isolated_anon:0 [ 1647.056840][T31428] active_file:22011 inactive_file:40549 isolated_file:0 [ 1647.056840][T31428] unevictable:768 dirty:95 writeback:0 [ 1647.056840][T31428] slab_reclaimable:21357 slab_unreclaimable:97906 [ 1647.056840][T31428] mapped:30195 shmem:1361 pagetables:637 [ 1647.056840][T31428] sec_pagetables:0 bounce:0 [ 1647.056840][T31428] kernel_misc_reclaimable:0 [ 1647.056840][T31428] free:1310138 free_pcp:6469 free_cma:0 [ 1647.324655][T31437] netlink: 'syz.4.8241': attribute type 10 has an invalid length. [ 1647.352488][T31428] Node 0 active_anon:34848kB inactive_anon:0kB active_file:88044kB inactive_file:161992kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120780kB dirty:480kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11032kB pagetables:2448kB sec_pagetables:0kB all_unreclaimable? no [ 1647.353767][T31437] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8241'. [ 1647.394630][T31428] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1647.432515][T31428] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1647.458107][T31436] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8245'. [ 1647.469029][T31428] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1647.469128][T31428] Node 0 DMA32 free:1315352kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:34848kB inactive_anon:0kB active_file:88044kB inactive_file:161992kB unevictable:1536kB writepending:680kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:22900kB local_pcp:11484kB free_cma:0kB [ 1647.469202][T31428] lowmem_reserve[]: 0 0 1 1 1 [ 1647.469269][T31428] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1647.469339][T31428] lowmem_reserve[]: 0 0 0 0 0 [ 1647.469409][T31428] Node 1 Normal free:3909640kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:3872kB local_pcp:0kB free_cma:0kB [ 1647.469482][T31428] lowmem_reserve[]: 0 0 0 0 0 [ 1647.469550][T31428] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1647.593659][T31428] Node 0 DMA32: 280*4kB (UME) 2345*8kB (UME) 1487*16kB (UM) 1040*32kB (UME) 1338*64kB (UME) 614*128kB (UME) 418*256kB (UME) 181*512kB (UME) 58*1024kB (UME) 24*2048kB (UME) 187*4096kB (UM) = 1315352kB [ 1647.615692][T31428] Node 0 Normal: 3*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1647.686953][T31428] Node 1 Normal: 256*4kB (UE) 57*8kB (UME) 30*16kB (UE) 221*32kB (UME) 87*64kB (UME) 22*128kB (UME) 10*256kB (UM) 3*512kB (UME) 1*1024kB (U) 2*2048kB (UE) 948*4096kB (M) = 3909640kB [ 1647.768020][T31428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1647.839607][T31428] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1647.856141][T31428] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1647.902781][T31428] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1647.933853][T31428] 63921 total pagecache pages [ 1647.938958][T31428] 0 pages in swap cache [ 1647.943158][T31428] Free swap = 124996kB [ 1647.956079][T31428] Total swap = 124996kB [ 1647.968629][T31428] 2097051 pages RAM [ 1647.976435][T31428] 0 pages HighMem/MovableOnly [ 1647.982740][T31428] 415205 pages reserved [ 1648.013277][T31428] 0 pages cma reserved [ 1648.646366][T31473] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8257'. [ 1648.823288][T31475] device syzkaller0 entered promiscuous mode [ 1648.911406][T31477] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8259'. [ 1651.385158][T31507] device wg2 entered promiscuous mode [ 1652.327536][T31526] netlink: 'syz.4.8272': attribute type 10 has an invalid length. [ 1653.175651][T31559] netlink: 184 bytes leftover after parsing attributes in process `syz.4.8282'. [ 1653.391915][T31568] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8282'. [ 1653.734959][T31558] device sit0 entered promiscuous mode [ 1653.976738][T31574] netlink: 'syz.0.8285': attribute type 25 has an invalid length. [ 1654.035026][T31574] netlink: 'syz.0.8285': attribute type 1 has an invalid length. [ 1654.086447][T31574] bridge0: port 1(bridge_slave_0) entered learning state [ 1654.287938][T31583] netlink: 'syz.2.8286': attribute type 10 has an invalid length. [ 1654.342264][T31585] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8288'. [ 1654.821585][T31605] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8295'. [ 1654.886326][T31607] netlink: 'syz.2.8294': attribute type 10 has an invalid length. [ 1654.947421][T31607] bridge0: port 4(team0) entered disabled state [ 1654.982265][T31607] device team0 left promiscuous mode [ 1655.001533][T31607] device team_slave_1 left promiscuous mode [ 1655.019896][T31607] device geneve0 left promiscuous mode [ 1655.077935][T31607] bridge0: port 4(team0) entered disabled state [ 1655.191638][T31607] 8021q: adding VLAN 0 to HW filter on device team0 [ 1655.232619][T31607] device team0 entered promiscuous mode [ 1655.240241][T31607] device team_slave_1 entered promiscuous mode [ 1655.309895][T31607] device geneve0 entered promiscuous mode [ 1655.361135][T31607] bond0: (slave team0): Enslaving as an active interface with an up link [ 1655.670512][T31624] netlink: 'syz.0.8299': attribute type 4 has an invalid length. [ 1655.707921][T31624] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8299'. [ 1655.750456][T31624] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1655.818410][T31631] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8301'. [ 1655.851564][T31633] netlink: 'syz.1.8304': attribute type 10 has an invalid length. [ 1656.579934][T31653] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8309'. [ 1656.930926][T31671] FAULT_INJECTION: forcing a failure. [ 1656.930926][T31671] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.971144][T31671] CPU: 0 PID: 31671 Comm: syz.3.8313 Not tainted syzkaller #0 [ 1656.978698][T31671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1656.988812][T31671] Call Trace: [ 1656.992133][T31671] [ 1656.995112][T31671] dump_stack_lvl+0x188/0x24e [ 1656.999854][T31671] ? fib_rules_lookup+0x98/0xb40 [ 1657.004846][T31671] ? show_regs_print_info+0x12/0x12 [ 1657.010096][T31671] ? load_image+0x400/0x400 [ 1657.014640][T31671] ? fib_rules_lookup+0x98/0xb40 [ 1657.019639][T31671] should_fail_ex+0x399/0x4d0 [ 1657.024385][T31671] should_failslab+0x5/0x20 [ 1657.028948][T31671] slab_pre_alloc_hook+0x59/0x310 [ 1657.034021][T31671] ? __lock_acquire+0x7d10/0x7d10 [ 1657.039100][T31671] ? find_exception+0x171/0xa30 [ 1657.044016][T31671] kmem_cache_alloc+0x56/0x2f0 [ 1657.048832][T31671] ? dst_alloc+0x101/0x160 [ 1657.053297][T31671] dst_alloc+0x101/0x160 [ 1657.057611][T31671] ip_route_output_key_hash_rcu+0x14a4/0x23f0 [ 1657.063742][T31671] ? ip_route_output_key_hash_rcu+0x1311/0x23f0 [ 1657.070061][T31671] ? ip_route_output_key_hash+0x139/0x330 [ 1657.075844][T31671] ip_route_output_key_hash+0x1ef/0x330 [ 1657.081458][T31671] ? ip_route_input_rcu+0x3160/0x3160 [ 1657.086871][T31671] ? __lock_acquire+0x7d10/0x7d10 [ 1657.091948][T31671] ip_route_output_flow+0x26/0x150 [ 1657.097125][T31671] ? security_sk_classify_flow+0x77/0x90 [ 1657.102801][T31671] raw_sendmsg+0x116d/0x1b20 [ 1657.107428][T31671] ? raw_sendmsg+0x541/0x1b20 [ 1657.112148][T31671] ? compat_raw_ioctl+0x60/0x60 [ 1657.117058][T31671] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 1657.123514][T31671] ? sock_rps_record_flow+0x19/0x3f0 [ 1657.128835][T31671] ? inet_sendmsg+0x78/0x2f0 [ 1657.133458][T31671] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1657.138793][T31671] ? security_socket_sendmsg+0x7c/0xa0 [ 1657.144289][T31671] ? inet_send_prepare+0x260/0x260 [ 1657.149433][T31671] ____sys_sendmsg+0x5be/0x970 [ 1657.154426][T31671] ? __sys_sendmsg_sock+0x30/0x30 [ 1657.159506][T31671] ? __import_iovec+0x315/0x500 [ 1657.164419][T31671] ? import_iovec+0x6f/0xa0 [ 1657.168954][T31671] ___sys_sendmsg+0x2a2/0x360 [ 1657.173672][T31671] ? __sys_sendmsg+0x290/0x290 [ 1657.178484][T31671] ? __lock_acquire+0x7d10/0x7d10 [ 1657.183559][T31671] __se_sys_sendmsg+0x1bb/0x2a0 [ 1657.188443][T31671] ? ct_nmi_exit+0x145/0x1c0 [ 1657.193059][T31671] ? __x64_sys_sendmsg+0x80/0x80 [ 1657.198044][T31671] ? lockdep_hardirqs_on+0x94/0x140 [ 1657.203282][T31671] do_syscall_64+0x4c/0xa0 [ 1657.207723][T31671] ? clear_bhb_loop+0x60/0xb0 [ 1657.212426][T31671] ? clear_bhb_loop+0x60/0xb0 [ 1657.217128][T31671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1657.223055][T31671] RIP: 0033:0x7fb0c239aeb9 [ 1657.227492][T31671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1657.247125][T31671] RSP: 002b:00007fb0c32fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1657.255568][T31671] RAX: ffffffffffffffda RBX: 00007fb0c2615fa0 RCX: 00007fb0c239aeb9 [ 1657.263566][T31671] RDX: 000000000000fffe RSI: 0000200000000340 RDI: 0000000000000003 [ 1657.271554][T31671] RBP: 00007fb0c32fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1657.279551][T31671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1657.287542][T31671] R13: 00007fb0c2616038 R14: 00007fb0c2615fa0 R15: 00007fffb2596fa8 [ 1657.295547][T31671] [ 1657.605799][T31679] netlink: 'syz.2.8316': attribute type 4 has an invalid length. [ 1657.628350][T31679] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8316'. [ 1657.708569][T31679] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1657.752356][T31684] netlink: 'syz.4.8318': attribute type 10 has an invalid length. [ 1657.785023][T31687] netlink: 'syz.3.8320': attribute type 10 has an invalid length. [ 1657.939852][T31687] team0: Port device wlan1 removed [ 1658.055398][T31687] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1658.069399][T31680] device sit0 entered promiscuous mode [ 1658.710557][T31718] netlink: 'syz.1.8332': attribute type 4 has an invalid length. [ 1658.728761][T31718] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8332'. [ 1658.750051][T31718] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1659.034579][ T48] Bluetooth: hci3: ISO packet for unknown connection handle 8 [ 1659.179610][T31730] netlink: 'syz.2.8335': attribute type 10 has an invalid length. [ 1659.745569][T31752] netlink: 'syz.1.8342': attribute type 3 has an invalid length. [ 1659.795365][T31741] device sit0 entered promiscuous mode [ 1659.844768][T31752] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8342'. [ 1659.990048][T31756] netlink: 'syz.2.8344': attribute type 4 has an invalid length. [ 1660.007472][T31756] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8344'. [ 1660.056291][T31756] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1660.277539][T31766] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8348'. [ 1660.963441][T31785] netlink: 'syz.0.8354': attribute type 10 has an invalid length. [ 1663.697921][T25827] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1663.716085][T25827] CPU: 1 PID: 25827 Comm: syz-executor Not tainted syzkaller #0 [ 1663.723781][T25827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1663.733876][T25827] Call Trace: [ 1663.737198][T25827] [ 1663.740165][T25827] dump_stack_lvl+0x188/0x24e [ 1663.744901][T25827] ? show_regs_print_info+0x12/0x12 [ 1663.750160][T25827] ? load_image+0x400/0x400 [ 1663.754731][T25827] ? ___ratelimit+0x45e/0x5f0 [ 1663.759499][T25827] ? radix_tree_cpu_dead+0x160/0x160 [ 1663.764833][T25827] dump_header+0xd7/0x820 [ 1663.769208][T25827] oom_kill_process+0x361/0x550 [ 1663.774104][T25827] out_of_memory+0xe91/0x1240 [ 1663.778824][T25827] ? mem_cgroup_out_of_memory+0xbd/0x390 [ 1663.784515][T25827] ? mutex_lock_nested+0x10/0x10 [ 1663.789516][T25827] ? unregister_oom_notifier+0x20/0x20 [ 1663.795064][T25827] mem_cgroup_out_of_memory+0x2c3/0x390 [ 1663.800689][T25827] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1663.806302][T25827] ? do_raw_spin_unlock+0x11d/0x230 [ 1663.811541][T25827] try_charge_memcg+0xcba/0x1800 [ 1663.816576][T25827] ? verify_lock_unused+0x140/0x140 [ 1663.821846][T25827] ? percpu_ref_put+0x180/0x180 [ 1663.826804][T25827] charge_memcg+0x117/0x3a0 [ 1663.831371][T25827] ? __mem_cgroup_charge+0x80/0x80 [ 1663.836552][T25827] ? mem_cgroup_swapin_charge_folio+0x2f/0x380 [ 1663.842775][T25827] mem_cgroup_swapin_charge_folio+0x25e/0x380 [ 1663.848906][T25827] __read_swap_cache_async+0x3eb/0x960 [ 1663.854434][T25827] swap_cluster_readahead+0x38e/0x690 [ 1663.860042][T25827] ? read_swap_cache_async+0xa0/0xa0 [ 1663.865384][T25827] ? __lock_acquire+0x7d10/0x7d10 [ 1663.870463][T25827] ? xas_descend+0x3a4/0x490 [ 1663.875127][T25827] swapin_readahead+0xfc/0x930 [ 1663.879981][T25827] ? put_swap_device+0x1e/0x230 [ 1663.884889][T25827] ? __lock_acquire+0x7d10/0x7d10 [ 1663.889975][T25827] ? exit_swap_address_space+0x280/0x280 [ 1663.895673][T25827] ? put_swap_device+0x1e/0x230 [ 1663.900579][T25827] ? put_swap_device+0x1e/0x230 [ 1663.905488][T25827] ? put_swap_device+0x17e/0x230 [ 1663.910482][T25827] ? swap_cache_get_folio+0x137/0x5b0 [ 1663.915920][T25827] do_swap_page+0x321/0x3ab0 [ 1663.920557][T25827] ? count_memcg_event_mm+0x8a/0x3c0 [ 1663.925886][T25827] ? count_memcg_event_mm+0x36b/0x3c0 [ 1663.931302][T25827] ? __lock_acquire+0x7d10/0x7d10 [ 1663.936382][T25827] ? count_memcg_event_mm+0x8a/0x3c0 [ 1663.941721][T25827] ? put_page+0x270/0x270 [ 1663.946110][T25827] handle_mm_fault+0x197b/0x3ee0 [ 1663.951096][T25827] ? mt_find+0x157/0x830 [ 1663.955425][T25827] ? numa_migrate_prep+0x250/0x250 [ 1663.960606][T25827] ? lock_chain_count+0x20/0x20 [ 1663.965522][T25827] ? lock_mm_and_find_vma+0xae/0x2f0 [ 1663.970863][T25827] do_user_addr_fault+0x51f/0xb10 [ 1663.975958][T25827] exc_page_fault+0x60/0x100 [ 1663.980631][T25827] ? clear_bhb_loop+0x60/0xb0 [ 1663.985362][T25827] asm_exc_page_fault+0x22/0x30 [ 1663.990258][T25827] RIP: 0033:0x7fb0c235b78e [ 1663.994721][T25827] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1664.014407][T25827] RSP: 002b:00007fffb2597288 EFLAGS: 00010246 [ 1664.020521][T25827] RAX: 0000000000000000 RBX: 0000555568382500 RCX: 00007fb0c235b78e [ 1664.028535][T25827] RDX: 00007fffb25972e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1664.036543][T25827] RBP: 00007fffb259734c R08: 0000000000000000 R09: 0000000000000000 [ 1664.044555][T25827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1664.052570][T25827] R13: 00000000000927c0 R14: 0000000000195a20 R15: 00007fffb25973a0 [ 1664.060602][T25827] [ 1664.536000][T25827] memory: usage 299564kB, limit 307200kB, failcnt 2622 [ 1664.542946][T25827] memory+swap: usage 299784kB, limit 9007199254740988kB, failcnt 0 [ 1664.596019][T25827] kmem: usage 295620kB, limit 9007199254740988kB, failcnt 0 [ 1664.603399][T25827] Memory cgroup stats for /syz3: [ 1664.603900][T25827] anon 0 [ 1664.603900][T25827] file 135168 [ 1664.603900][T25827] kernel 302714880 [ 1664.603900][T25827] kernel_stack 98304 [ 1664.603900][T25827] pagetables 126976 [ 1664.603900][T25827] sec_pagetables 0 [ 1664.603900][T25827] percpu 36912 [ 1664.603900][T25827] sock 0 [ 1664.603900][T25827] vmalloc 301654016 [ 1664.603900][T25827] shmem 0 [ 1664.603900][T25827] zswap 0 [ 1664.603900][T25827] zswapped 0 [ 1664.603900][T25827] file_mapped 135168 [ 1664.603900][T25827] file_dirty 135168 [ 1664.603900][T25827] file_writeback 0 [ 1664.603900][T25827] swapcached 225280 [ 1664.603900][T25827] anon_thp 0 [ 1664.603900][T25827] file_thp 0 [ 1664.603900][T25827] shmem_thp 0 [ 1664.603900][T25827] inactive_anon 0 [ 1664.603900][T25827] active_anon 0 [ 1664.603900][T25827] inactive_file 0 [ 1664.603900][T25827] active_file 135168 [ 1664.603900][T25827] unevictable 0 [ 1664.603900][T25827] slab_reclaimable 230704 [ 1664.603900][T25827] slab_unreclaimable 536072 [ 1664.603900][T25827] slab 766776 [ 1664.837350][T25827] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.8353,pid=31780,uid=0 [ 1664.878263][T25827] Memory cgroup out of memory: Killed process 31780 (syz.3.8353) total-vm:102320kB, anon-rss:1188kB, file-rss:21832kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1665.201624][T31807] netlink: 'syz.4.8360': attribute type 4 has an invalid length. [ 1665.245310][T31807] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8360'. [ 1665.318159][T31807] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1665.450335][T31808] device sit0 entered promiscuous mode [ 1665.595475][T31814] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8363'. [ 1665.885819][T31826] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1665.895450][T31826] pimreg1: linktype set to 769 [ 1665.919502][T31826] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1665.956179][T21359] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1666.488273][T31838] @ÿ: renamed from bond_slave_0 [ 1666.978346][ T4295] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1667.040702][ T30] oom_reaper: reaped process 31780 (syz.3.8353), now anon-rss:0kB, file-rss:21448kB, shmem-rss:0kB [ 1668.842093][T31875] @ÿ: renamed from bond_slave_0 [ 1668.928333][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.934739][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1672.668917][T31963] IPv6: …: Disabled Multicast RS [ 1676.901871][T32012] A@ÿ: renamed from bond_slave_0 [ 1678.427732][T32051] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1678.709015][T32058] [ 1678.711884][T32058] ============================= [ 1678.717013][T32058] WARNING: suspicious RCU usage [ 1678.721924][T32058] syzkaller #0 Not tainted [ 1678.726485][T32058] ----------------------------- [ 1678.731374][T32058] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 1678.740059][T32058] [ 1678.740059][T32058] other info that might help us debug this: [ 1678.740059][T32058] [ 1678.750666][T32058] [ 1678.750666][T32058] rcu_scheduler_active = 2, debug_locks = 1 [ 1678.758860][T32058] 1 lock held by syz.0.8455/32058: [ 1678.764010][T32058] #0: ffffffff8cb2d7a0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 1678.774325][T32058] [ 1678.774325][T32058] stack backtrace: [ 1678.780337][T32058] CPU: 0 PID: 32058 Comm: syz.0.8455 Not tainted syzkaller #0 [ 1678.787852][T32058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1678.797959][T32058] Call Trace: [ 1678.801282][T32058] [ 1678.804254][T32058] dump_stack_lvl+0x188/0x24e [ 1678.808994][T32058] ? show_regs_print_info+0x12/0x12 [ 1678.814259][T32058] ? load_image+0x400/0x400 [ 1678.818829][T32058] lockdep_rcu_suspicious+0x1dd/0x300 [ 1678.824273][T32058] get_callchain_entry+0x2a5/0x3b0 [ 1678.829631][T32058] get_perf_callchain+0xc4/0x490 [ 1678.834632][T32058] ? put_callchain_entry+0xb0/0xb0 [ 1678.839819][T32058] ? plist_add+0x3d4/0x480 [ 1678.844305][T32058] ? verify_lock_unused+0x140/0x140 [ 1678.849565][T32058] __bpf_get_stack+0x2de/0x520 [ 1678.854396][T32058] ? stack_map_get_build_id_offset+0x970/0x970 [ 1678.860613][T32058] ? __cant_sleep+0x220/0x220 [ 1678.865340][T32058] ? bpf_prog_14d9fb3786f83342+0x3d/0x41 [ 1678.871028][T32058] bpf_get_stack_raw_tp+0x189/0x1c0 [ 1678.876297][T32058] bpf_prog_14d9fb3786f83342+0x3d/0x41 [ 1678.881813][T32058] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 1678.887249][T32058] bpf_prog_test_run_syscall+0x313/0x4a0 [ 1678.892942][T32058] ? sock_gen_cookie+0x60/0x60 [ 1678.897806][T32058] ? sock_gen_cookie+0x60/0x60 [ 1678.902649][T32058] bpf_prog_test_run+0x31e/0x390 [ 1678.907684][T32058] __sys_bpf+0x62b/0x780 [ 1678.912000][T32058] ? bpf_link_show_fdinfo+0x380/0x380 [ 1678.917427][T32058] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1678.923387][T32058] ? lock_chain_count+0x20/0x20 [ 1678.928318][T32058] __x64_sys_bpf+0x78/0x90 [ 1678.932797][T32058] do_syscall_64+0x4c/0xa0 [ 1678.937274][T32058] ? clear_bhb_loop+0x60/0xb0 [ 1678.942004][T32058] ? clear_bhb_loop+0x60/0xb0 [ 1678.946733][T32058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1678.952705][T32058] RIP: 0033:0x7f47dad9aeb9 [ 1678.957164][T32058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1678.976838][T32058] RSP: 002b:00007f47dbc66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1678.985305][T32058] RAX: ffffffffffffffda RBX: 00007f47db015fa0 RCX: 00007f47dad9aeb9 [ 1678.993325][T32058] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 1679.001349][T32058] RBP: 00007f47dae08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1679.009377][T32058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1679.017402][T32058] R13: 00007f47db016038 R14: 00007f47db015fa0 R15: 00007ffc46f17358 [ 1679.025446][T32058]