last executing test programs: 3.951305621s ago: executing program 2 (id=1801): socket$kcm(0x29, 0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x64}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110a400000000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000280)={0x2, 0x80, 0x3, 0x8, 0x3, 0x2, 0x0, 0x8000, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x3, 0xc}, 0x80, 0xfffffffff29b774e, 0x1, 0x0, 0x101, 0x4, 0xa4, 0x0, 0x2, 0x0, 0xfff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) 3.839711442s ago: executing program 3 (id=1802): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8000, 0x8}, 0xc) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4800000000000008, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f00000001c0), &(0x7f0000000280)=r3}, 0x20) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x21, 0x2, 0x2) 3.529400103s ago: executing program 1 (id=1806): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000200ad0bfb1b033ec14f0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x7400}, 0x0) openat$cgroup_pressure(r1, &(0x7f00000001c0)='memory.pressure\x00', 0x2, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001a80)}, 0x806, 0x4, 0x8, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0xc) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000037000b63717a3c4a01d8b45b0808aa78", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9354b27b553aeeee8ae0b0000a4df2a9080f3", 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair(0x22, 0x800, 0x7143, &(0x7f0000000240)) 3.355678719s ago: executing program 3 (id=1807): close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000300)='p\x88\x88\x94\xcd?\xaa\fS\xed\x03\x89\xa6\x1dg\x82\x82!3Xu\x83\xc0\xc1\xbe\xc2\x8d+\xa9\v\x9c\x82.\xa4\xa0\xff\xc1\xf3p\xf3\xd5\x1a\xd1\xc6\xff\xb6\xa7k}\xcb\x01Mo\xb1\xf8\x17\t\xe0\xf5\xf1\xdc\xae,\xa1\xb5\xa1v\rP\xa4\'D+a\xc1\x88Fz\xed\x16\xfb\xabbi\xa4Q\xee\xe6\x13\xe5j\xe4K\x1d\xd0+\xf990\xe4\x98\x97V\xb5\xf8=\xde\xc5\xa4\xad\xbd\xb3\x92\x99\xab\xe1\x99\xef-\xc6\xdf:\xc2M\xe6N0\x17\xd3\xcf\v\xfb,pe9\x9f\x18\x97+I\xc9\xccP\xa9\x00\xe1A\xd9D%l\xe6 n\x92\x9a\xb6\xeb\xc1\xfeJ\xd7\xe5x\x99\xb3\x1d\x81\xff%\\\fA\x16\xea\xe6\xf3\x01M\x8f6\xdbYH\x8eYCJ\x7f\xce\x06\x8f\xc5\x98\xca\x0fI\xef\x9a\x9ex\xe6\x83\xf2\xa4\x1a\xc5\xa5') r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x329200, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x2) close(r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) 2.886605415s ago: executing program 1 (id=1809): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bffffff00004000633a77fbac14140be934a0a662079f4b4d2f87e5feca6aab845013f288a81a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae37dffc2e43c817f62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a9f00a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff400"/254, 0x0, 0x3, 0x60000000}, 0x50) socket$kcm(0x25, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1b00000093070000000000000080000000000000", @ANYRES32, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000010c0)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0x20000036, &(0x7f00000011c0)=ANY=[@ANYRES8=r2, @ANYRES64=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/4121, 0x1019}], 0x1, 0x0, 0x32}, 0x40) socket$kcm(0xa, 0x3, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) r6 = socket$kcm(0x2, 0x3, 0x2) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xde, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8800, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r7, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000001340)="c0dd898765587ec2b574e3397d64591bd7", 0x0, 0x10002, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000001140), 0x1}, 0x0, 0x100000001, 0x8, 0x3, 0x9}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000013000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x80000000}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.294510234s ago: executing program 2 (id=1810): socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x1400000000000000, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c816", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) 1.897666483s ago: executing program 3 (id=1812): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000001050000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff4cff808500000071000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x11, 0xe, 0x0, &(0x7f00000009c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.699426643s ago: executing program 2 (id=1813): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3, 0x5c4}, 0x80, &(0x7f00000029c0)}, 0xc9) 1.443850527s ago: executing program 3 (id=1814): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04", 0xd}], 0x1a000, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) 1.331989839s ago: executing program 0 (id=1815): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000016c0)=@base={0x1f, 0x0, 0x0, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xffd, &(0x7f0000001e40)=""/4093}, 0x94) 1.322961639s ago: executing program 1 (id=1816): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000140)=0x2000000, &(0x7f00000003c0)='%pB \x00'}, 0x20) 1.251710687s ago: executing program 2 (id=1817): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000200ad0bfb1b033ec14f0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x7400}, 0x0) openat$cgroup_pressure(r1, &(0x7f00000001c0)='memory.pressure\x00', 0x2, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001a80)}, 0x806, 0x4, 0x8, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0xc) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000037000b63717a3c4a01d8b45b0808aa78", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9354b27b553aeeee8ae0b0000a4df2a9080f3", 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair(0x22, 0x800, 0x7143, &(0x7f0000000240)) 1.251370297s ago: executing program 3 (id=1818): socket$kcm(0x29, 0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x64}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110a400000000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000280)={0x2, 0x80, 0x3, 0x8, 0x3, 0x2, 0x0, 0x8000, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x3, 0xc}, 0x80, 0xfffffffff29b774e, 0x1, 0x0, 0x101, 0x4, 0xa4, 0x0, 0x2, 0x0, 0xfff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.125129179s ago: executing program 0 (id=1819): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x3, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) 1.11799466s ago: executing program 1 (id=1820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=0x7, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="6fb0000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x3, 0xf4, 0xc, 0xf, 0x0, 0x7, 0x48b0, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff, 0xd}, 0x100000, 0x0, 0xbb40, 0x5, 0x400, 0x3, 0x79d6, 0x0, 0xee, 0x0, 0x6}, 0x0, 0x5, 0xffffffffffffffff, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 902.308371ms ago: executing program 0 (id=1821): socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x1400000000000000, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) 602.467721ms ago: executing program 0 (id=1822): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000001050000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff4cff808500000071000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x11, 0xe, 0x0, &(0x7f00000009c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 476.936083ms ago: executing program 2 (id=1823): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x3, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) (fail_nth: 1) 403.75597ms ago: executing program 0 (id=1824): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x3, 0xd, 0xa}, {0x10000005, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0xffffffffffffffb5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYRES8=r2, @ANYRES32, @ANYBLOB="50c7090b54dcda9645c602730db1476a5108219ea00eaabbc27d9475d415636311b77e11637f63972c5d3bff75677eb209ab62761d6b66b22041a80346714a7508000000000000007553036e9fdbbee81bd6d70fe5cb5281000000000000000089e7fd2300005d00", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000300), &(0x7f0000000700)=r4}, 0x20) r7 = socket$kcm(0x18, 0x7, 0x2) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8080) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x30002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r5, 0x58, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={r9, 0x7}, 0xc) ioctl$TUNSETPERSIST(r8, 0x400454cb, 0x1) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) r10 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) r13 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r13, 0x10e, 0x18, 0x0, 0x0) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x64, &(0x7f0000000000)=r14, 0x10) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) 403.47975ms ago: executing program 1 (id=1825): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3, 0x5c4}, 0x80, &(0x7f00000029c0)=[{0x0}], 0x1}, 0xc9) 263.776174ms ago: executing program 1 (id=1826): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x79a5}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x13, &(0x7f0000000200)=r6, 0x4) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000202070250000000000202020db1af8ffa0000000bda100000000000047010000f8ffffffb702000008000000b70300000000000085000000a0000000950000000000000014d516463145aecc07702d7a0ecdd40930d10fefd09814eb173f8c9dece00ddaa6006f4d5f7610634e1681d3c96cae54ece9734dd19e8a945d279ff62bf9781296a46b7701072fb1c21607099f4970f0482061a720739ce0c64fe5abdaae3d"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000080)) recvmsg$unix(r11, &(0x7f0000000640)={&(0x7f0000000340), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000680)=""/188, 0xbc}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f00000003c0)=""/17, 0x11}, {&(0x7f0000000400)=""/164, 0xa4}], 0x5, &(0x7f0000000540)}, 0x40000050) sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000600)="2e00000011008188e6b62aa73772cc891ba1f848430000005e140602000000000e0029001000000002", 0x29}, {&(0x7f0000000080)="37eebf67e6", 0x5}], 0x2}, 0x0) 89.573951ms ago: executing program 0 (id=1827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f00000100000012"], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x2, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open$cgroup(&(0x7f0000000500)={0x3, 0x80, 0x40, 0xf, 0x3, 0xf6, 0x0, 0x9, 0x10, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x9}, 0x200, 0x81, 0x10, 0x0, 0xfffffffffffff3e4, 0x81, 0x2f, 0x0, 0x0, 0x0, 0x9}, r1, 0xd, 0xffffffffffffffff, 0x8) r5 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r6}, 0x8) write$cgroup_int(r6, 0x0, 0x0) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x6, 0x4, 0x21, 0xc1, 0x1}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x5f]}}, &(0x7f0000000280)=""/30, 0x1b, 0x1e, 0x0, 0x49, 0x10000}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000080000000000002030000007470b2f5b507781b00000000ef1015f4d93e6dfb9653ffc0ecae3e6cd2118b87ba8219f5d3f27ad4c83a72eb184805637ab559ab140e65bb4358f291d9241b486a3bdcd7bc89b0ede0a1084b45a3bad9cd4e12ed157f96330bcfd00e7efdf39229aa0b7ae7ebca0b0441ebd4cf67c6299f1f10b857d88ef753a6a615988d43"], 0x0, 0x3e}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r11, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pK \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f000000ffffff7f810000000600000010000000", @ANYRES32=r10, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000300007c65aba9f7e085834ea735000100"/39], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0xa, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x11, &(0x7f0000000140)=""/17, 0x40f00, 0x43, '\x00', 0x0, @cgroup_device, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r10, r7, r8, r11, r13, r9], &(0x7f0000000640), 0x10, 0x3b6e}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) 1.69715ms ago: executing program 2 (id=1828): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000140), &(0x7f00000003c0)='%pB \x00'}, 0x20) (fail_nth: 6) 0s ago: executing program 3 (id=1829): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x4008, r0}, 0x18) kernel console output (not intermixed with test programs): .514270][ T8840] wlan1: mtu less than device minimum [ 242.531543][ T8840] team0: Device wlan1 failed to change mtu [ 242.555743][ T8840] .`: (slave team0): Error -22 calling dev_set_mtu [ 242.771625][ T5789] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9 [ 242.833987][ T8847] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1067'. [ 243.192337][ T8857] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1073'. [ 243.309712][ T8858] Ÿë: port 1(syz_tun) entered blocking state [ 243.316779][ T8858] Ÿë: port 1(syz_tun) entered disabled state [ 243.325399][ T8858] syz_tun: entered allmulticast mode [ 243.338910][ T8858] syz_tun: entered promiscuous mode [ 243.476546][ T8868] netlink: 'syz.1.1075': attribute type 3 has an invalid length. [ 243.546799][ T8868] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1075'. [ 244.465378][ T8876] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1078'. [ 246.914377][ T8891] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1083'. [ 247.748577][ T8900] netlink: 'syz.0.1086': attribute type 10 has an invalid length. [ 247.946093][ T8898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.198609][ T8915] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1090'. [ 248.758591][ T8926] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1094'. [ 249.409441][ T8937] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1099'. [ 249.775764][ T8951] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1103'. [ 249.787915][ T8953] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1101'. [ 250.612381][ T8963] netlink: 'syz.0.1107': attribute type 39 has an invalid length. [ 250.621304][ T8965] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1109'. [ 250.868453][ T8975] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1114'. [ 251.235778][ T8982] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1117'. [ 252.597513][ T9004] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1124'. [ 252.823412][ T9013] FAULT_INJECTION: forcing a failure. [ 252.823412][ T9013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.839314][ T9013] CPU: 1 PID: 9013 Comm: syz.1.1128 Not tainted syzkaller #0 [ 252.846784][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 252.856912][ T9013] Call Trace: [ 252.860245][ T9013] [ 252.863296][ T9013] dump_stack_lvl+0x16c/0x230 [ 252.868035][ T9013] ? show_regs_print_info+0x20/0x20 [ 252.873308][ T9013] ? load_image+0x3b0/0x3b0 [ 252.877961][ T9013] ? __lock_acquire+0x7c80/0x7c80 [ 252.883092][ T9013] ? snprintf+0xdb/0x120 [ 252.887391][ T9013] should_fail_ex+0x39d/0x4d0 [ 252.892138][ T9013] _copy_to_user+0x2f/0xa0 [ 252.896619][ T9013] simple_read_from_buffer+0xe7/0x150 [ 252.902063][ T9013] proc_fail_nth_read+0x1e3/0x250 [ 252.907157][ T9013] ? proc_fault_inject_write+0x340/0x340 [ 252.912854][ T9013] ? fsnotify_perm+0x271/0x5e0 [ 252.917703][ T9013] ? proc_fault_inject_write+0x340/0x340 [ 252.923391][ T9013] vfs_read+0x27e/0x920 [ 252.927611][ T9013] ? kernel_read+0x1e0/0x1e0 [ 252.932251][ T9013] ? __fget_files+0x28/0x4d0 [ 252.936887][ T9013] ? __fget_files+0x44a/0x4d0 [ 252.941643][ T9013] ? __fdget_pos+0x2a3/0x330 [ 252.946279][ T9013] ? ksys_read+0x75/0x250 [ 252.950654][ T9013] ksys_read+0x147/0x250 [ 252.954952][ T9013] ? vfs_write+0x940/0x940 [ 252.959408][ T9013] ? lockdep_hardirqs_on+0x98/0x150 [ 252.964663][ T9013] do_syscall_64+0x55/0xb0 [ 252.969211][ T9013] ? clear_bhb_loop+0x40/0x90 [ 252.973937][ T9013] ? clear_bhb_loop+0x40/0x90 [ 252.978650][ T9013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.984581][ T9013] RIP: 0033:0x7fac6f98d9dc [ 252.989029][ T9013] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 253.008767][ T9013] RSP: 002b:00007fac70815030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.017231][ T9013] RAX: ffffffffffffffda RBX: 00007fac6fbe5fa0 RCX: 00007fac6f98d9dc [ 253.025244][ T9013] RDX: 000000000000000f RSI: 00007fac708150a0 RDI: 0000000000000005 [ 253.033248][ T9013] RBP: 00007fac70815090 R08: 0000000000000000 R09: 0000000000000000 [ 253.041255][ T9013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.049262][ T9013] R13: 00007fac6fbe6038 R14: 00007fac6fbe5fa0 R15: 00007fffa77a1158 [ 253.057294][ T9013] [ 253.502801][ T9027] netlink: 'syz.2.1133': attribute type 10 has an invalid length. [ 253.556664][ T9025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.643724][ T9035] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1136'. [ 254.270834][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 254.278625][ T5789] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 254.947118][ T9082] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1147'. [ 255.096041][ T9086] FAULT_INJECTION: forcing a failure. [ 255.096041][ T9086] name failslab, interval 1, probability 0, space 0, times 0 [ 255.117790][ T9086] CPU: 1 PID: 9086 Comm: syz.0.1149 Not tainted syzkaller #0 [ 255.125259][ T9086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.135359][ T9086] Call Trace: [ 255.138719][ T9086] [ 255.141683][ T9086] dump_stack_lvl+0x16c/0x230 [ 255.146396][ T9086] ? show_regs_print_info+0x20/0x20 [ 255.151621][ T9086] ? load_image+0x3b0/0x3b0 [ 255.156155][ T9086] ? __might_sleep+0xe0/0xe0 [ 255.160776][ T9086] ? __lock_acquire+0x7c80/0x7c80 [ 255.165828][ T9086] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 255.171418][ T9086] should_fail_ex+0x39d/0x4d0 [ 255.176135][ T9086] should_failslab+0x9/0x20 [ 255.180673][ T9086] slab_pre_alloc_hook+0x59/0x310 [ 255.185726][ T9086] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 255.191299][ T9086] ? bpf_prog_test_run_flow_dissector+0x231/0x600 [ 255.197733][ T9086] ? bpf_prog_test_run_flow_dissector+0x231/0x600 [ 255.204180][ T9086] __kmem_cache_alloc_node+0x53/0x260 [ 255.209589][ T9086] ? bpf_prog_test_run_flow_dissector+0x231/0x600 [ 255.216023][ T9086] __kmalloc+0xa4/0x240 [ 255.220209][ T9086] bpf_prog_test_run_flow_dissector+0x231/0x600 [ 255.226478][ T9086] ? xdp_convert_buff_to_md+0x200/0x200 [ 255.232056][ T9086] ? __fget_files+0x28/0x4d0 [ 255.236678][ T9086] ? __fget_files+0x44a/0x4d0 [ 255.241396][ T9086] ? xdp_convert_buff_to_md+0x200/0x200 [ 255.246961][ T9086] bpf_prog_test_run+0x321/0x390 [ 255.251924][ T9086] __sys_bpf+0x440/0x800 [ 255.256186][ T9086] ? bpf_link_show_fdinfo+0x350/0x350 [ 255.261592][ T9086] ? lock_chain_count+0x20/0x20 [ 255.266473][ T9086] __x64_sys_bpf+0x7c/0x90 [ 255.270927][ T9086] do_syscall_64+0x55/0xb0 [ 255.275369][ T9086] ? clear_bhb_loop+0x40/0x90 [ 255.280067][ T9086] ? clear_bhb_loop+0x40/0x90 [ 255.284769][ T9086] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.290687][ T9086] RIP: 0033:0x7fb338b8efc9 [ 255.295125][ T9086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.314756][ T9086] RSP: 002b:00007fb336df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.323191][ T9086] RAX: ffffffffffffffda RBX: 00007fb338de5fa0 RCX: 00007fb338b8efc9 [ 255.331197][ T9086] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 255.339210][ T9086] RBP: 00007fb336df6090 R08: 0000000000000000 R09: 0000000000000000 [ 255.347202][ T9086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.355194][ T9086] R13: 00007fb338de6038 R14: 00007fb338de5fa0 R15: 00007fff1fbeeb98 [ 255.363200][ T9086] [ 255.691763][ T9101] netlink: 'syz.2.1154': attribute type 29 has an invalid length. [ 255.709314][ T9101] netlink: 'syz.2.1154': attribute type 29 has an invalid length. [ 255.734527][ T9101] netlink: 'syz.2.1154': attribute type 29 has an invalid length. [ 256.106998][ T9112] netlink: 'syz.0.1157': attribute type 29 has an invalid length. [ 256.180046][ T9112] netlink: 'syz.0.1157': attribute type 29 has an invalid length. [ 256.201689][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.208444][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.261106][ T9112] netlink: 'syz.0.1157': attribute type 29 has an invalid length. [ 256.650140][ T9118] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1158'. [ 257.363155][ T9141] FAULT_INJECTION: forcing a failure. [ 257.363155][ T9141] name failslab, interval 1, probability 0, space 0, times 0 [ 257.392418][ T9141] CPU: 0 PID: 9141 Comm: syz.3.1165 Not tainted syzkaller #0 [ 257.399888][ T9141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 257.409998][ T9141] Call Trace: [ 257.413326][ T9141] [ 257.416313][ T9141] dump_stack_lvl+0x16c/0x230 [ 257.421047][ T9141] ? show_regs_print_info+0x20/0x20 [ 257.426290][ T9141] ? load_image+0x3b0/0x3b0 [ 257.430865][ T9141] ? __might_sleep+0xe0/0xe0 [ 257.435511][ T9141] ? __lock_acquire+0x7c80/0x7c80 [ 257.440590][ T9141] should_fail_ex+0x39d/0x4d0 [ 257.445329][ T9141] should_failslab+0x9/0x20 [ 257.449885][ T9141] slab_pre_alloc_hook+0x59/0x310 [ 257.454968][ T9141] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 257.460738][ T9141] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 257.466605][ T9141] __kmem_cache_alloc_node+0x53/0x260 [ 257.472044][ T9141] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 257.477844][ T9141] __kmalloc+0xa4/0x240 [ 257.482066][ T9141] tomoyo_realpath_from_path+0xe3/0x5d0 [ 257.487693][ T9141] tomoyo_path_number_perm+0x1ea/0x590 [ 257.493214][ T9141] ? tomoyo_path_number_perm+0x1ba/0x590 [ 257.498900][ T9141] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 257.504395][ T9141] ? ksys_write+0x1c1/0x250 [ 257.508948][ T9141] ? __fget_files+0x28/0x4d0 [ 257.513570][ T9141] security_file_ioctl+0x70/0xa0 [ 257.518533][ T9141] __se_sys_ioctl+0x48/0x170 [ 257.523145][ T9141] do_syscall_64+0x55/0xb0 [ 257.527583][ T9141] ? clear_bhb_loop+0x40/0x90 [ 257.532279][ T9141] ? clear_bhb_loop+0x40/0x90 [ 257.536973][ T9141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.542884][ T9141] RIP: 0033:0x7fc62218efc9 [ 257.547314][ T9141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.566941][ T9141] RSP: 002b:00007fc623028038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.575381][ T9141] RAX: ffffffffffffffda RBX: 00007fc6223e5fa0 RCX: 00007fc62218efc9 [ 257.583367][ T9141] RDX: 0000200000000000 RSI: 0000000000008b1b RDI: 0000000000000003 [ 257.591379][ T9141] RBP: 00007fc623028090 R08: 0000000000000000 R09: 0000000000000000 [ 257.599369][ T9141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.607358][ T9141] R13: 00007fc6223e6038 R14: 00007fc6223e5fa0 R15: 00007ffc76de8bc8 [ 257.615362][ T9141] [ 257.682874][ T9141] ERROR: Out of memory at tomoyo_realpath_from_path. [ 258.009818][ T9156] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1169'. [ 258.306007][ T9163] netlink: 'syz.3.1172': attribute type 21 has an invalid length. [ 258.366470][ T9165] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1173'. [ 258.391769][ T9165] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1173'. [ 258.419373][ T9167] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1173'. [ 258.437385][ T9165] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1173'. [ 258.637242][ T9173] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1177'. [ 258.666164][ T9173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.689741][ T9173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.720874][ T9173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.751099][ T9173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.769754][ T9173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.784029][ T9173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.811499][ T9173] batadv_slave_1: entered promiscuous mode [ 259.004650][ T9189] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1180'. [ 259.071984][ T9192] FAULT_INJECTION: forcing a failure. [ 259.071984][ T9192] name failslab, interval 1, probability 0, space 0, times 0 [ 259.106220][ T9192] CPU: 0 PID: 9192 Comm: syz.3.1182 Not tainted syzkaller #0 [ 259.113686][ T9192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 259.123793][ T9192] Call Trace: [ 259.127135][ T9192] [ 259.130116][ T9192] dump_stack_lvl+0x16c/0x230 [ 259.134949][ T9192] ? show_regs_print_info+0x20/0x20 [ 259.140211][ T9192] ? load_image+0x3b0/0x3b0 [ 259.144774][ T9192] ? __might_sleep+0xe0/0xe0 [ 259.149428][ T9192] ? __lock_acquire+0x7c80/0x7c80 [ 259.154510][ T9192] should_fail_ex+0x39d/0x4d0 [ 259.159253][ T9192] should_failslab+0x9/0x20 [ 259.163820][ T9192] slab_pre_alloc_hook+0x59/0x310 [ 259.168905][ T9192] ? __lock_acquire+0x7c80/0x7c80 [ 259.173992][ T9192] kmem_cache_alloc_node+0x60/0x330 [ 259.179243][ T9192] ? __alloc_skb+0x108/0x2c0 [ 259.183888][ T9192] __alloc_skb+0x108/0x2c0 [ 259.188360][ T9192] netlink_sendmsg+0x65b/0xbe0 [ 259.193191][ T9192] ? netlink_getsockopt+0x580/0x580 [ 259.198455][ T9192] ? aa_sock_msg_perm+0x94/0x150 [ 259.203448][ T9192] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 259.208793][ T9192] ? security_socket_sendmsg+0x80/0xa0 [ 259.214303][ T9192] ? netlink_getsockopt+0x580/0x580 [ 259.219568][ T9192] ____sys_sendmsg+0x5bf/0x950 [ 259.224412][ T9192] ? __asan_memset+0x22/0x40 [ 259.229051][ T9192] ? __sys_sendmsg_sock+0x30/0x30 [ 259.234133][ T9192] ? __import_iovec+0x5f2/0x860 [ 259.239052][ T9192] ? import_iovec+0x73/0xa0 [ 259.243622][ T9192] ___sys_sendmsg+0x220/0x290 [ 259.248541][ T9192] ? __sys_sendmsg+0x270/0x270 [ 259.253394][ T9192] ? __lock_acquire+0x7c80/0x7c80 [ 259.258491][ T9192] __se_sys_sendmsg+0x1a5/0x270 [ 259.263404][ T9192] ? __x64_sys_sendmsg+0x80/0x80 [ 259.268432][ T9192] ? lockdep_hardirqs_on+0x98/0x150 [ 259.273693][ T9192] do_syscall_64+0x55/0xb0 [ 259.278156][ T9192] ? clear_bhb_loop+0x40/0x90 [ 259.282877][ T9192] ? clear_bhb_loop+0x40/0x90 [ 259.287599][ T9192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.293534][ T9192] RIP: 0033:0x7fc62218efc9 [ 259.298010][ T9192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.317680][ T9192] RSP: 002b:00007fc623028038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.326176][ T9192] RAX: ffffffffffffffda RBX: 00007fc6223e5fa0 RCX: 00007fc62218efc9 [ 259.334210][ T9192] RDX: 0000000000000840 RSI: 0000200000000100 RDI: 0000000000000003 [ 259.342489][ T9192] RBP: 00007fc623028090 R08: 0000000000000000 R09: 0000000000000000 [ 259.350507][ T9192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.358546][ T9192] R13: 00007fc6223e6038 R14: 00007fc6223e5fa0 R15: 00007ffc76de8bc8 [ 259.368679][ T9192] [ 259.582884][ T9203] netlink: 'syz.2.1187': attribute type 10 has an invalid length. [ 259.596522][ T9203] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1187'. [ 259.612061][ T9201] netlink: 'syz.1.1186': attribute type 21 has an invalid length. [ 259.936523][ T9217] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1191'. [ 259.991836][ T9218] netlink: 'syz.2.1192': attribute type 3 has an invalid length. [ 260.039087][ T9218] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1192'. [ 263.100189][ T9228] netlink: 'syz.0.1197': attribute type 2 has an invalid length. [ 263.151550][ T9231] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1197'. [ 263.155780][ T9228] netlink: 'syz.0.1197': attribute type 8 has an invalid length. [ 263.169717][ T9228] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1197'. [ 263.186891][ T9231] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1197'. [ 263.205444][ T9228] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1197'. [ 263.220175][ T9228] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1197'. [ 263.310169][ T9228] netlink: 'syz.0.1197': attribute type 21 has an invalid length. [ 263.325338][ T9228] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 263.495736][ T9243] FAULT_INJECTION: forcing a failure. [ 263.495736][ T9243] name failslab, interval 1, probability 0, space 0, times 0 [ 263.529568][ T9243] CPU: 1 PID: 9243 Comm: syz.2.1200 Not tainted syzkaller #0 [ 263.537037][ T9243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.547163][ T9243] Call Trace: [ 263.550459][ T9243] [ 263.553414][ T9243] dump_stack_lvl+0x16c/0x230 [ 263.558205][ T9243] ? show_regs_print_info+0x20/0x20 [ 263.563479][ T9243] ? load_image+0x3b0/0x3b0 [ 263.568011][ T9243] should_fail_ex+0x39d/0x4d0 [ 263.572976][ T9243] should_failslab+0x9/0x20 [ 263.577497][ T9243] slab_pre_alloc_hook+0x59/0x310 [ 263.582546][ T9243] ? nf_ct_ext_add+0x1ab/0x440 [ 263.587337][ T9243] ? nf_ct_ext_add+0x1ab/0x440 [ 263.592114][ T9243] __kmem_cache_alloc_node+0x53/0x260 [ 263.597513][ T9243] ? nf_ct_ext_add+0x1ab/0x440 [ 263.602290][ T9243] __kmalloc_node_track_caller+0xa2/0x230 [ 263.608033][ T9243] krealloc+0x86/0x120 [ 263.612121][ T9243] nf_ct_ext_add+0x1ab/0x440 [ 263.616736][ T9243] init_conntrack+0x674/0xee0 [ 263.621444][ T9243] ? early_drop+0x7b0/0x7b0 [ 263.625974][ T9243] ? nf_conntrack_find_get+0x600/0x600 [ 263.631484][ T9243] ? __siphash_unaligned+0x232/0x3b0 [ 263.636799][ T9243] nf_conntrack_in+0xbf1/0x15c0 [ 263.641672][ T9243] ? memset_orig+0x7b/0xac [ 263.646118][ T9243] ? nf_ct_pernet+0x270/0x270 [ 263.650911][ T9243] ? ip6t_do_table+0x1d5/0x1500 [ 263.655780][ T9243] ? ip6t_alloc_initial_table+0x640/0x640 [ 263.661520][ T9243] ? ipv6_defrag+0x2d6/0x3a0 [ 263.666127][ T9243] ? ipv6_conntrack_in+0x20/0x20 [ 263.671091][ T9243] nf_hook_slow+0xbd/0x200 [ 263.675539][ T9243] __ip6_local_out+0x776/0x880 [ 263.680331][ T9243] ? __ip6_local_out+0x614/0x880 [ 263.685293][ T9243] ? ip6_dst_hoplimit+0x350/0x350 [ 263.690343][ T9243] ? __ip6_local_out+0x880/0x880 [ 263.695325][ T9243] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 263.701510][ T9243] ip6_local_out+0x2a/0x130 [ 263.706034][ T9243] ? ip6_send_skb+0x10f/0x380 [ 263.710735][ T9243] ip6_send_skb+0x1d5/0x380 [ 263.715267][ T9243] udp_v6_send_skb+0xbbb/0x1860 [ 263.720161][ T9243] udpv6_sendmsg+0x1bb8/0x22f0 [ 263.724962][ T9243] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 263.729955][ T9243] ? udp_v6_early_demux+0xf60/0xf60 [ 263.735260][ T9243] ? perf_trace_preemptirq_template+0xa4/0x340 [ 263.741445][ T9243] ? lock_chain_count+0x20/0x20 [ 263.746328][ T9243] ? _local_bh_enable+0xa0/0xa0 [ 263.751208][ T9243] ? inet_send_prepare+0x1b3/0x260 [ 263.756341][ T9243] ? inet_send_prepare+0x1b3/0x260 [ 263.761473][ T9243] ? inet6_sendmsg+0x5f/0xd0 [ 263.766120][ T9243] ? inet6_compat_ioctl+0x380/0x380 [ 263.771349][ T9243] ____sys_sendmsg+0x5bf/0x950 [ 263.776149][ T9243] ? __asan_memset+0x22/0x40 [ 263.780773][ T9243] ? __sys_sendmsg_sock+0x30/0x30 [ 263.785925][ T9243] ? __import_iovec+0x3fa/0x860 [ 263.790838][ T9243] ? import_iovec+0x73/0xa0 [ 263.795387][ T9243] ___sys_sendmsg+0x220/0x290 [ 263.800123][ T9243] ? __sys_sendmsg+0x270/0x270 [ 263.804953][ T9243] ? seqcount_lockdep_reader_access+0x160/0x1c0 [ 263.811669][ T9243] __se_sys_sendmsg+0x1a5/0x270 [ 263.816559][ T9243] ? __x64_sys_sendmsg+0x80/0x80 [ 263.821530][ T9243] ? lockdep_hardirqs_on+0x98/0x150 [ 263.826753][ T9243] do_syscall_64+0x55/0xb0 [ 263.831192][ T9243] ? clear_bhb_loop+0x40/0x90 [ 263.835894][ T9243] ? clear_bhb_loop+0x40/0x90 [ 263.840590][ T9243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.846506][ T9243] RIP: 0033:0x7fee9018efc9 [ 263.850940][ T9243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.870569][ T9243] RSP: 002b:00007fee910b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.879092][ T9243] RAX: ffffffffffffffda RBX: 00007fee903e5fa0 RCX: 00007fee9018efc9 [ 263.887087][ T9243] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 263.895082][ T9243] RBP: 00007fee910b2090 R08: 0000000000000000 R09: 0000000000000000 [ 263.903082][ T9243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.911133][ T9243] R13: 00007fee903e6038 R14: 00007fee903e5fa0 R15: 00007ffcaa9402a8 [ 263.919151][ T9243] [ 264.114166][ T9253] netlink: 'syz.3.1204': attribute type 10 has an invalid length. [ 264.222336][ T9253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.268638][ T9253] .`: (slave batadv0): Enslaving as an active interface with an up link [ 264.334775][ T9259] .`: entered promiscuous mode [ 264.339672][ T9259] ?µ¤: entered promiscuous mode [ 264.374295][ T9259] bond_slave_1: entered promiscuous mode [ 264.402561][ T9259] bridge_slave_1: entered promiscuous mode [ 264.411251][ T9259] batadv0: entered promiscuous mode [ 265.115724][ T9279] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1209'. [ 265.745400][ T9293] syz.1.1213[9293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.745684][ T9293] syz.1.1213[9293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.758729][ T9293] FAULT_INJECTION: forcing a failure. [ 265.758729][ T9293] name failslab, interval 1, probability 0, space 0, times 0 [ 265.783266][ T9293] CPU: 0 PID: 9293 Comm: syz.1.1213 Not tainted syzkaller #0 [ 265.790703][ T9293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.800808][ T9293] Call Trace: [ 265.804132][ T9293] [ 265.807111][ T9293] dump_stack_lvl+0x16c/0x230 [ 265.811852][ T9293] ? show_regs_print_info+0x20/0x20 [ 265.817107][ T9293] ? load_image+0x3b0/0x3b0 [ 265.821682][ T9293] should_fail_ex+0x39d/0x4d0 [ 265.826420][ T9293] ? __sigqueue_alloc+0x32/0x520 [ 265.831431][ T9293] should_failslab+0x9/0x20 [ 265.835993][ T9293] slab_pre_alloc_hook+0x59/0x310 [ 265.841072][ T9293] ? __sigqueue_alloc+0x32/0x520 [ 265.846072][ T9293] kmem_cache_alloc+0x5a/0x2e0 [ 265.850899][ T9293] ? __sigqueue_alloc+0x40c/0x520 [ 265.855984][ T9293] ? __sigqueue_alloc+0x32/0x520 [ 265.860978][ T9293] __sigqueue_alloc+0x40c/0x520 [ 265.865872][ T9293] __send_signal_locked+0x22f/0xe00 [ 265.871104][ T9293] force_sig_info_to_task+0x308/0x450 [ 265.876520][ T9293] force_sig+0xc9/0x110 [ 265.880702][ T9293] ? send_sig+0xf0/0xf0 [ 265.884895][ T9293] ? fixup_iopl_exception+0xdc/0x2e0 [ 265.890222][ T9293] ? try_fixup_enqcmd_gp+0x230/0x230 [ 265.895651][ T9293] exc_general_protection+0xdb/0x200 [ 265.900996][ T9293] ? do_syscall_64+0x61/0xb0 [ 265.905724][ T9293] asm_exc_general_protection+0x26/0x30 [ 265.911296][ T9293] RIP: 0033:0x7fac6f9679f9 [ 265.915747][ T9293] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 265.935374][ T9293] RSP: 002b:00007fac708147c8 EFLAGS: 00010283 [ 265.941515][ T9293] RAX: 0000000000000999 RBX: 00007fac70814d30 RCX: 00007fac6fba8120 [ 265.949504][ T9293] RDX: 9999999999999999 RSI: 00007fac6fa11ca9 RDI: 9999999999999999 [ 265.957495][ T9293] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 265.965485][ T9293] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 265.973500][ T9293] R13: 00007fac70814eb0 R14: 9999999999999999 R15: 0000000000000000 [ 265.981515][ T9293] [ 266.415255][ T9306] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1219'. [ 268.282747][ T9344] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1233'. [ 268.397107][ T9342] syzkaller0: entered promiscuous mode [ 268.407792][ T9342] syzkaller0: entered allmulticast mode [ 270.661778][ T9370] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1242'. [ 270.735867][ T9373] netlink: 'syz.0.1243': attribute type 10 has an invalid length. [ 270.747534][ T9373] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1243'. [ 270.757880][ T9373] bond0: entered promiscuous mode [ 270.765643][ T9373] ?µ¤: entered promiscuous mode [ 270.771336][ T9373] bond_slave_1: entered promiscuous mode [ 270.777617][ T9373] team0: entered promiscuous mode [ 270.783334][ T9373] team_slave_0: entered promiscuous mode [ 270.789292][ T9373] team_slave_1: entered promiscuous mode [ 270.795341][ T9373] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 270.802577][ T9373] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 270.896309][ T9379] netlink: 'syz.2.1244': attribute type 3 has an invalid length. [ 270.918805][ T9381] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1245'. [ 270.938982][ T9379] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1244'. [ 271.495108][ T9393] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1251'. [ 271.608713][ T9397] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1252'. [ 271.932841][ T9404] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1254'. [ 272.354665][ T9416] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1256'. [ 272.663782][ T9421] FAULT_INJECTION: forcing a failure. [ 272.663782][ T9421] name failslab, interval 1, probability 0, space 0, times 0 [ 272.700968][ T9421] CPU: 1 PID: 9421 Comm: syz.3.1260 Not tainted syzkaller #0 [ 272.708524][ T9421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 272.718642][ T9421] Call Trace: [ 272.721970][ T9421] [ 272.725030][ T9421] dump_stack_lvl+0x16c/0x230 [ 272.729775][ T9421] ? show_regs_print_info+0x20/0x20 [ 272.735043][ T9421] ? load_image+0x3b0/0x3b0 [ 272.739609][ T9421] ? kasan_check_range+0x89/0x290 [ 272.744701][ T9421] should_fail_ex+0x39d/0x4d0 [ 272.749449][ T9421] should_failslab+0x9/0x20 [ 272.754015][ T9421] slab_pre_alloc_hook+0x59/0x310 [ 272.759104][ T9421] kmem_cache_alloc+0x5a/0x2e0 [ 272.763941][ T9421] ? skb_clone+0x1eb/0x370 [ 272.768431][ T9421] skb_clone+0x1eb/0x370 [ 272.772733][ T9421] __netlink_deliver_tap+0x41c/0x830 [ 272.778089][ T9421] ? netlink_deliver_tap+0x2e/0x1b0 [ 272.783338][ T9421] netlink_deliver_tap+0x19c/0x1b0 [ 272.788508][ T9421] netlink_unicast+0x72c/0x8d0 [ 272.793333][ T9421] netlink_sendmsg+0x8c1/0xbe0 [ 272.798162][ T9421] ? netlink_getsockopt+0x580/0x580 [ 272.803422][ T9421] ? aa_sock_msg_perm+0x94/0x150 [ 272.805734][ T9428] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1263'. [ 272.808384][ T9421] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 272.808429][ T9421] ? security_socket_sendmsg+0x80/0xa0 [ 272.828362][ T9421] ? netlink_getsockopt+0x580/0x580 [ 272.833616][ T9421] ____sys_sendmsg+0x5bf/0x950 [ 272.838446][ T9421] ? __asan_memset+0x22/0x40 [ 272.843088][ T9421] ? __sys_sendmsg_sock+0x30/0x30 [ 272.848175][ T9421] ? __import_iovec+0x5f2/0x860 [ 272.853093][ T9421] ? import_iovec+0x73/0xa0 [ 272.857653][ T9421] ___sys_sendmsg+0x220/0x290 [ 272.862391][ T9421] ? __sys_sendmsg+0x270/0x270 [ 272.867283][ T9421] __se_sys_sendmsg+0x1a5/0x270 [ 272.872194][ T9421] ? __x64_sys_sendmsg+0x80/0x80 [ 272.877213][ T9421] ? syscall_enter_from_user_mode+0x2e/0x80 [ 272.883187][ T9421] do_syscall_64+0x55/0xb0 [ 272.887667][ T9421] ? clear_bhb_loop+0x40/0x90 [ 272.892387][ T9421] ? clear_bhb_loop+0x40/0x90 [ 272.897125][ T9421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.903087][ T9421] RIP: 0033:0x7fc62218efc9 [ 272.907553][ T9421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.927224][ T9421] RSP: 002b:00007fc623028038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.935698][ T9421] RAX: ffffffffffffffda RBX: 00007fc6223e5fa0 RCX: 00007fc62218efc9 [ 272.943746][ T9421] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000c [ 272.951779][ T9421] RBP: 00007fc623028090 R08: 0000000000000000 R09: 0000000000000000 [ 272.959805][ T9421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.967833][ T9421] R13: 00007fc6223e6038 R14: 00007fc6223e5fa0 R15: 00007ffc76de8bc8 [ 272.975895][ T9421] [ 273.451497][ T9440] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1266'. [ 273.954835][ T9455] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1271'. [ 274.004061][ T9457] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1272'. [ 274.143232][ T9465] netlink: 'syz.3.1273': attribute type 3 has an invalid length. [ 274.173751][ T9467] FAULT_INJECTION: forcing a failure. [ 274.173751][ T9467] name failslab, interval 1, probability 0, space 0, times 0 [ 274.185871][ T9465] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1273'. [ 274.216694][ T9467] CPU: 0 PID: 9467 Comm: syz.0.1275 Not tainted syzkaller #0 [ 274.224252][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 274.234353][ T9467] Call Trace: [ 274.237676][ T9467] [ 274.240651][ T9467] dump_stack_lvl+0x16c/0x230 [ 274.245387][ T9467] ? show_regs_print_info+0x20/0x20 [ 274.250645][ T9467] ? load_image+0x3b0/0x3b0 [ 274.255203][ T9467] ? __might_sleep+0xe0/0xe0 [ 274.259862][ T9467] ? __lock_acquire+0x7c80/0x7c80 [ 274.264944][ T9467] should_fail_ex+0x39d/0x4d0 [ 274.269701][ T9467] should_failslab+0x9/0x20 [ 274.274260][ T9467] slab_pre_alloc_hook+0x59/0x310 [ 274.279348][ T9467] ? __lock_acquire+0x7c80/0x7c80 [ 274.284434][ T9467] kmem_cache_alloc_node+0x60/0x330 [ 274.289702][ T9467] ? __alloc_skb+0x108/0x2c0 [ 274.294445][ T9467] __alloc_skb+0x108/0x2c0 [ 274.298933][ T9467] netlink_sendmsg+0x65b/0xbe0 [ 274.303786][ T9467] ? netlink_getsockopt+0x580/0x580 [ 274.309064][ T9467] ? aa_sock_msg_perm+0x94/0x150 [ 274.314068][ T9467] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 274.319401][ T9467] ? security_socket_sendmsg+0x80/0xa0 [ 274.324913][ T9467] ? netlink_getsockopt+0x580/0x580 [ 274.330175][ T9467] ____sys_sendmsg+0x5bf/0x950 [ 274.335012][ T9467] ? __asan_memset+0x22/0x40 [ 274.339661][ T9467] ? __sys_sendmsg_sock+0x30/0x30 [ 274.344753][ T9467] ? __import_iovec+0x5f2/0x860 [ 274.349677][ T9467] ? import_iovec+0x73/0xa0 [ 274.354232][ T9467] ___sys_sendmsg+0x220/0x290 [ 274.359113][ T9467] ? __sys_sendmsg+0x270/0x270 [ 274.363960][ T9467] ? __lock_acquire+0x7c80/0x7c80 [ 274.369067][ T9467] __se_sys_sendmsg+0x1a5/0x270 [ 274.373989][ T9467] ? __x64_sys_sendmsg+0x80/0x80 [ 274.379003][ T9467] ? lockdep_hardirqs_on+0x98/0x150 [ 274.384367][ T9467] do_syscall_64+0x55/0xb0 [ 274.388838][ T9467] ? clear_bhb_loop+0x40/0x90 [ 274.393558][ T9467] ? clear_bhb_loop+0x40/0x90 [ 274.398275][ T9467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.404202][ T9467] RIP: 0033:0x7fb338b8efc9 [ 274.408652][ T9467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.428309][ T9467] RSP: 002b:00007fb336df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.436763][ T9467] RAX: ffffffffffffffda RBX: 00007fb338de5fa0 RCX: 00007fb338b8efc9 [ 274.444768][ T9467] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 274.452770][ T9467] RBP: 00007fb336df6090 R08: 0000000000000000 R09: 0000000000000000 [ 274.460772][ T9467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.468788][ T9467] R13: 00007fb338de6038 R14: 00007fb338de5fa0 R15: 00007fff1fbeeb98 [ 274.476838][ T9467] [ 274.671721][ T9481] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1279'. [ 275.233381][ T9493] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1283'. [ 275.588784][ T9505] netlink: 'syz.1.1287': attribute type 3 has an invalid length. [ 275.602928][ T9505] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1287'. [ 275.607180][ T9506] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1288'. [ 275.919521][ T9517] netlink: 'syz.1.1292': attribute type 10 has an invalid length. [ 275.938310][ T9517] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1292'. [ 275.966547][ T9517] batman_adv: batadv0: Adding interface: virt_wifi0 [ 275.990950][ T9517] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.059778][ T9517] batman_adv: batadv0: Interface activated: virt_wifi0 [ 276.084329][ T9524] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1294'. [ 276.362178][ T9528] netlink: 'syz.3.1296': attribute type 10 has an invalid length. [ 276.957044][ T9547] netlink: 'syz.2.1303': attribute type 1 has an invalid length. [ 277.011951][ T9551] netlink: 'syz.2.1303': attribute type 1 has an invalid length. [ 277.603363][ T9566] syzkaller0: entered promiscuous mode [ 277.609745][ T9566] syzkaller0: entered allmulticast mode [ 278.774237][ T9583] __nla_validate_parse: 4 callbacks suppressed [ 278.774258][ T9583] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1315'. [ 278.985131][ T9585] FAULT_INJECTION: forcing a failure. [ 278.985131][ T9585] name failslab, interval 1, probability 0, space 0, times 0 [ 278.998390][ T9585] CPU: 0 PID: 9585 Comm: syz.2.1316 Not tainted syzkaller #0 [ 279.005849][ T9585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 279.015977][ T9585] Call Trace: [ 279.019318][ T9585] [ 279.022296][ T9585] dump_stack_lvl+0x16c/0x230 [ 279.027074][ T9585] ? show_regs_print_info+0x20/0x20 [ 279.032374][ T9585] ? load_image+0x3b0/0x3b0 [ 279.036993][ T9585] ? verify_lock_unused+0x140/0x140 [ 279.042277][ T9585] ? perf_trace_lock_acquire+0x32a/0x3e0 [ 279.048032][ T9585] should_fail_ex+0x39d/0x4d0 [ 279.052811][ T9585] should_failslab+0x9/0x20 [ 279.057391][ T9585] slab_pre_alloc_hook+0x59/0x310 [ 279.062553][ T9585] kmem_cache_alloc+0x5a/0x2e0 [ 279.067433][ T9585] ? skb_clone+0x1eb/0x370 [ 279.071927][ T9585] skb_clone+0x1eb/0x370 [ 279.076228][ T9585] __netlink_deliver_tap+0x41c/0x830 [ 279.081595][ T9585] ? netlink_deliver_tap+0x2e/0x1b0 [ 279.086850][ T9585] netlink_deliver_tap+0x19c/0x1b0 [ 279.092026][ T9585] netlink_unicast+0x72c/0x8d0 [ 279.096869][ T9585] netlink_sendmsg+0x8c1/0xbe0 [ 279.101733][ T9585] ? netlink_getsockopt+0x580/0x580 [ 279.106985][ T9585] ? aa_sock_msg_perm+0x94/0x150 [ 279.111975][ T9585] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 279.117300][ T9585] ? security_socket_sendmsg+0x80/0xa0 [ 279.122802][ T9585] ? netlink_getsockopt+0x580/0x580 [ 279.128043][ T9585] ____sys_sendmsg+0x5bf/0x950 [ 279.132872][ T9585] ? __asan_memset+0x22/0x40 [ 279.137510][ T9585] ? __sys_sendmsg_sock+0x30/0x30 [ 279.142580][ T9585] ? __import_iovec+0x5f2/0x860 [ 279.147514][ T9585] ? import_iovec+0x73/0xa0 [ 279.152075][ T9585] ___sys_sendmsg+0x220/0x290 [ 279.156816][ T9585] ? __sys_sendmsg+0x270/0x270 [ 279.161691][ T9585] ? __lock_acquire+0x7c80/0x7c80 [ 279.166829][ T9585] __se_sys_sendmsg+0x1a5/0x270 [ 279.171741][ T9585] ? __x64_sys_sendmsg+0x80/0x80 [ 279.176785][ T9585] ? lockdep_hardirqs_on+0x98/0x150 [ 279.182045][ T9585] do_syscall_64+0x55/0xb0 [ 279.186512][ T9585] ? clear_bhb_loop+0x40/0x90 [ 279.191228][ T9585] ? clear_bhb_loop+0x40/0x90 [ 279.195949][ T9585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.201904][ T9585] RIP: 0033:0x7fee9018efc9 [ 279.206361][ T9585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.226002][ T9585] RSP: 002b:00007fee910b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.234465][ T9585] RAX: ffffffffffffffda RBX: 00007fee903e5fa0 RCX: 00007fee9018efc9 [ 279.242475][ T9585] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 279.250487][ T9585] RBP: 00007fee910b2090 R08: 0000000000000000 R09: 0000000000000000 [ 279.258516][ T9585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.266537][ T9585] R13: 00007fee903e6038 R14: 00007fee903e5fa0 R15: 00007ffcaa9402a8 [ 279.274628][ T9585] [ 280.816564][ T9575] netlink: 'syz.1.1313': attribute type 41 has an invalid length. [ 280.824857][ T9575] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1313'. [ 280.851624][ T9585] netlink: 'syz.2.1316': attribute type 10 has an invalid length. [ 280.860926][ T9585] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1316'. [ 280.883673][ T9585] batman_adv: batadv0: Adding interface: virt_wifi0 [ 280.890344][ T9585] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.937099][ T9585] batman_adv: batadv0: Interface activated: virt_wifi0 [ 281.213977][ T9593] FAULT_INJECTION: forcing a failure. [ 281.213977][ T9593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.228522][ T9593] CPU: 0 PID: 9593 Comm: syz.2.1320 Not tainted syzkaller #0 [ 281.235975][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 281.246102][ T9593] Call Trace: [ 281.249440][ T9593] [ 281.252430][ T9593] dump_stack_lvl+0x16c/0x230 [ 281.257283][ T9593] ? show_regs_print_info+0x20/0x20 [ 281.262570][ T9593] ? load_image+0x3b0/0x3b0 [ 281.267120][ T9593] ? __might_fault+0xaa/0x120 [ 281.271834][ T9593] ? __lock_acquire+0x7c80/0x7c80 [ 281.276904][ T9593] should_fail_ex+0x39d/0x4d0 [ 281.281651][ T9593] _copy_from_user+0x2f/0xe0 [ 281.286366][ T9593] btf_new_fd+0x348/0x980 [ 281.290791][ T9593] ? bpf_btf_show_fdinfo+0x80/0x80 [ 281.295956][ T9593] ? capable+0x88/0xe0 [ 281.300082][ T9593] __sys_bpf+0x60e/0x800 [ 281.304446][ T9593] ? bpf_link_show_fdinfo+0x350/0x350 [ 281.309898][ T9593] ? lock_chain_count+0x20/0x20 [ 281.314815][ T9593] __x64_sys_bpf+0x7c/0x90 [ 281.319274][ T9593] do_syscall_64+0x55/0xb0 [ 281.323824][ T9593] ? clear_bhb_loop+0x40/0x90 [ 281.328536][ T9593] ? clear_bhb_loop+0x40/0x90 [ 281.333256][ T9593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.339188][ T9593] RIP: 0033:0x7fee9018efc9 [ 281.343642][ T9593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.363285][ T9593] RSP: 002b:00007fee910b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.371741][ T9593] RAX: ffffffffffffffda RBX: 00007fee903e5fa0 RCX: 00007fee9018efc9 [ 281.379745][ T9593] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 281.387753][ T9593] RBP: 00007fee910b2090 R08: 0000000000000000 R09: 0000000000000000 [ 281.395755][ T9593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.403762][ T9593] R13: 00007fee903e6038 R14: 00007fee903e5fa0 R15: 00007ffcaa9402a8 [ 281.411813][ T9593] [ 282.808151][ T9638] netlink: 'syz.1.1335': attribute type 32 has an invalid length. [ 282.822175][ T9638] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1335'. [ 282.938792][ T9642] netlink: 'syz.3.1336': attribute type 3 has an invalid length. [ 282.953118][ T9642] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1336'. [ 286.078752][ T9650] netlink: 'syz.3.1340': attribute type 3 has an invalid length. [ 286.115661][ T9650] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1340'. [ 286.158542][ T9650] Dead loop on virtual device ip6_vti0, fix it urgently! [ 286.258513][ T9650] netlink: 'syz.3.1340': attribute type 27 has an invalid length. [ 286.461233][ T9650] .`: (slave 0?µ¤): Releasing backup interface [ 286.486542][ T9650] ?µ¤ (unregistering): left promiscuous mode [ 286.557581][ T9665] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1345'. [ 287.500134][ T9681] netlink: 'syz.3.1348': attribute type 3 has an invalid length. [ 287.590950][ T9681] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1348'. [ 290.791652][ T9707] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1355'. [ 293.309281][ T9731] netlink: 'syz.1.1362': attribute type 3 has an invalid length. [ 293.320932][ T9731] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1362'. [ 294.342839][ T9739] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1365'. [ 295.630418][ T9749] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 295.637551][ T9749] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 295.731820][ T9749] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1367'. [ 296.134366][ T9764] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1374'. [ 296.398565][ T9773] netlink: 'syz.1.1376': attribute type 3 has an invalid length. [ 296.421872][ T9773] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1376'. [ 296.459819][ T9778] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1378'. [ 296.484217][ T9773] Dead loop on virtual device ip6_vti0, fix it urgently! [ 296.578428][ T9773] netlink: 'syz.1.1376': attribute type 27 has an invalid length. [ 296.792746][ T9773] bond0: (slave 0?µ¤): Releasing backup interface [ 296.876953][ T9792] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1385'. [ 297.450899][ T9810] netlink: 'syz.2.1391': attribute type 4 has an invalid length. [ 297.479326][ T9810] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1391'. [ 297.680153][ T9816] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1394'. [ 298.018300][ T9823] FAULT_INJECTION: forcing a failure. [ 298.018300][ T9823] name failslab, interval 1, probability 0, space 0, times 0 [ 298.066896][ T9823] CPU: 1 PID: 9823 Comm: syz.2.1397 Not tainted syzkaller #0 [ 298.074363][ T9823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.084468][ T9823] Call Trace: [ 298.087799][ T9823] [ 298.090766][ T9823] dump_stack_lvl+0x16c/0x230 [ 298.095592][ T9823] ? show_regs_print_info+0x20/0x20 [ 298.100841][ T9823] ? load_image+0x3b0/0x3b0 [ 298.105390][ T9823] ? __might_sleep+0xe0/0xe0 [ 298.110025][ T9823] ? __lock_acquire+0x7c80/0x7c80 [ 298.115114][ T9823] should_fail_ex+0x39d/0x4d0 [ 298.119859][ T9823] should_failslab+0x9/0x20 [ 298.124505][ T9823] slab_pre_alloc_hook+0x59/0x310 [ 298.129600][ T9823] ? rtnl_newlink+0xeb/0x2020 [ 298.134326][ T9823] __kmem_cache_alloc_node+0x53/0x260 [ 298.139752][ T9823] ? rtnl_newlink+0xeb/0x2020 [ 298.144480][ T9823] kmalloc_trace+0x2a/0xe0 [ 298.148943][ T9823] rtnl_newlink+0xeb/0x2020 [ 298.153502][ T9823] ? arch_stack_walk+0x160/0x190 [ 298.158514][ T9823] ? __mutex_trylock_common+0x153/0x250 [ 298.164120][ T9823] ? rtnl_setlink+0x4b0/0x4b0 [ 298.168846][ T9823] ? trace_raw_output_contention_end+0xd0/0xd0 [ 298.175054][ T9823] ? rcu_is_watching+0x15/0xb0 [ 298.179867][ T9823] ? trace_contention_end+0x39/0xe0 [ 298.185117][ T9823] ? __mutex_lock+0x304/0xcc0 [ 298.189852][ T9823] ? rtnetlink_rcv_msg+0x76f/0xf10 [ 298.195020][ T9823] ? mutex_lock_nested+0x20/0x20 [ 298.200019][ T9823] ? rtnl_setlink+0x4b0/0x4b0 [ 298.204752][ T9823] rtnetlink_rcv_msg+0x7c7/0xf10 [ 298.209743][ T9823] ? __dev_queue_xmit+0x245/0x35a0 [ 298.214895][ T9823] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 298.220059][ T9823] ? rtnetlink_bind+0x80/0x80 [ 298.224886][ T9823] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 298.230924][ T9823] ? __dev_queue_xmit+0x245/0x35a0 [ 298.236094][ T9823] ? lock_chain_count+0x20/0x20 [ 298.241000][ T9823] ? __local_bh_enable_ip+0x12e/0x1c0 [ 298.246424][ T9823] ? lockdep_hardirqs_on+0x98/0x150 [ 298.251736][ T9823] ? __local_bh_enable_ip+0x12e/0x1c0 [ 298.257154][ T9823] ? _local_bh_enable+0xa0/0xa0 [ 298.262065][ T9823] ? __dev_queue_xmit+0x245/0x35a0 [ 298.267310][ T9823] ? __dev_queue_xmit+0x1449/0x35a0 [ 298.272582][ T9823] ? __dev_queue_xmit+0x245/0x35a0 [ 298.277754][ T9823] ? netlink_deliver_tap+0x2e/0x1b0 [ 298.283000][ T9823] ? perf_trace_lock+0xf7/0x380 [ 298.287900][ T9823] ? __copy_skb_header+0xa7/0x550 [ 298.292991][ T9823] netlink_rcv_skb+0x216/0x480 [ 298.297815][ T9823] ? rtnetlink_bind+0x80/0x80 [ 298.302551][ T9823] ? netlink_ack+0x1110/0x1110 [ 298.307385][ T9823] ? __lock_acquire+0x7c80/0x7c80 [ 298.312457][ T9823] ? netlink_deliver_tap+0x2e/0x1b0 [ 298.317768][ T9823] netlink_unicast+0x751/0x8d0 [ 298.322612][ T9823] netlink_sendmsg+0x8c1/0xbe0 [ 298.327437][ T9823] ? netlink_getsockopt+0x580/0x580 [ 298.332693][ T9823] ? aa_sock_msg_perm+0x94/0x150 [ 298.337698][ T9823] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 298.343036][ T9823] ? security_socket_sendmsg+0x80/0xa0 [ 298.348537][ T9823] ? netlink_getsockopt+0x580/0x580 [ 298.353791][ T9823] ____sys_sendmsg+0x5bf/0x950 [ 298.358616][ T9823] ? __asan_memset+0x22/0x40 [ 298.363280][ T9823] ? __sys_sendmsg_sock+0x30/0x30 [ 298.368360][ T9823] ? __import_iovec+0x5f2/0x860 [ 298.373366][ T9823] ? import_iovec+0x73/0xa0 [ 298.377927][ T9823] ___sys_sendmsg+0x220/0x290 [ 298.382663][ T9823] ? __sys_sendmsg+0x270/0x270 [ 298.387523][ T9823] ? __lock_acquire+0x7c80/0x7c80 [ 298.392647][ T9823] __se_sys_sendmsg+0x1a5/0x270 [ 298.397568][ T9823] ? __x64_sys_sendmsg+0x80/0x80 [ 298.402598][ T9823] ? lockdep_hardirqs_on+0x98/0x150 [ 298.407882][ T9823] do_syscall_64+0x55/0xb0 [ 298.412351][ T9823] ? clear_bhb_loop+0x40/0x90 [ 298.417082][ T9823] ? clear_bhb_loop+0x40/0x90 [ 298.421812][ T9823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.427755][ T9823] RIP: 0033:0x7fee9018efc9 [ 298.432217][ T9823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.451878][ T9823] RSP: 002b:00007fee910b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.460336][ T9823] RAX: ffffffffffffffda RBX: 00007fee903e5fa0 RCX: 00007fee9018efc9 [ 298.468360][ T9823] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 298.476345][ T9823] RBP: 00007fee910b2090 R08: 0000000000000000 R09: 0000000000000000 [ 298.484325][ T9823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.492302][ T9823] R13: 00007fee903e6038 R14: 00007fee903e5fa0 R15: 00007ffcaa9402a8 [ 298.500300][ T9823] [ 298.865955][ T9843] FAULT_INJECTION: forcing a failure. [ 298.865955][ T9843] name failslab, interval 1, probability 0, space 0, times 0 [ 298.912110][ T9843] CPU: 0 PID: 9843 Comm: syz.1.1403 Not tainted syzkaller #0 [ 298.919588][ T9843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.929697][ T9843] Call Trace: [ 298.933028][ T9843] [ 298.935995][ T9843] dump_stack_lvl+0x16c/0x230 [ 298.940726][ T9843] ? show_regs_print_info+0x20/0x20 [ 298.945965][ T9843] ? load_image+0x3b0/0x3b0 [ 298.950505][ T9843] ? __lock_acquire+0x7c80/0x7c80 [ 298.955576][ T9843] should_fail_ex+0x39d/0x4d0 [ 298.960302][ T9843] should_failslab+0x9/0x20 [ 298.964851][ T9843] slab_pre_alloc_hook+0x59/0x310 [ 298.969924][ T9843] ? bpf_test_init+0xc0/0x150 [ 298.974680][ T9843] ? bpf_test_init+0xc0/0x150 [ 298.979426][ T9843] __kmem_cache_alloc_node+0x53/0x260 [ 298.984863][ T9843] ? bpf_test_init+0xc0/0x150 [ 298.989598][ T9843] __kmalloc+0xa4/0x240 [ 298.993811][ T9843] bpf_test_init+0xc0/0x150 [ 298.998400][ T9843] bpf_prog_test_run_xdp+0x382/0xfa0 [ 299.003747][ T9843] ? dev_put+0x80/0x80 [ 299.007862][ T9843] ? dev_put+0x80/0x80 [ 299.011960][ T9843] bpf_prog_test_run+0x321/0x390 [ 299.016952][ T9843] __sys_bpf+0x440/0x800 [ 299.021252][ T9843] ? bpf_link_show_fdinfo+0x350/0x350 [ 299.026674][ T9843] ? lock_chain_count+0x20/0x20 [ 299.031576][ T9843] __x64_sys_bpf+0x7c/0x90 [ 299.036024][ T9843] do_syscall_64+0x55/0xb0 [ 299.040481][ T9843] ? clear_bhb_loop+0x40/0x90 [ 299.045210][ T9843] ? clear_bhb_loop+0x40/0x90 [ 299.049943][ T9843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.055908][ T9843] RIP: 0033:0x7fac6f98efc9 [ 299.060361][ T9843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.080110][ T9843] RSP: 002b:00007fac70815038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 299.088578][ T9843] RAX: ffffffffffffffda RBX: 00007fac6fbe5fa0 RCX: 00007fac6f98efc9 [ 299.096589][ T9843] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 299.104610][ T9843] RBP: 00007fac70815090 R08: 0000000000000000 R09: 0000000000000000 [ 299.112622][ T9843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.120659][ T9843] R13: 00007fac6fbe6038 R14: 00007fac6fbe5fa0 R15: 00007fffa77a1158 [ 299.128709][ T9843] [ 299.244512][ T9841] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1402'. [ 299.296962][ T9849] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1405'. [ 300.109091][ T9875] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1416'. [ 300.123493][ T9877] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1417'. [ 300.861227][ T9897] syzkaller0: entered promiscuous mode [ 300.875455][ T9897] syzkaller0: entered allmulticast mode [ 302.104398][ T9912] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1428'. [ 305.392515][ T9936] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1439'. [ 305.444939][ T9935] FAULT_INJECTION: forcing a failure. [ 305.444939][ T9935] name failslab, interval 1, probability 0, space 0, times 0 [ 305.460562][ T9935] CPU: 1 PID: 9935 Comm: syz.1.1437 Not tainted syzkaller #0 [ 305.468012][ T9935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 305.478121][ T9935] Call Trace: [ 305.481442][ T9935] [ 305.484404][ T9935] dump_stack_lvl+0x16c/0x230 [ 305.489144][ T9935] ? show_regs_print_info+0x20/0x20 [ 305.494396][ T9935] ? load_image+0x3b0/0x3b0 [ 305.498940][ T9935] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 305.504978][ T9935] ? __asan_memset+0x22/0x40 [ 305.509618][ T9935] should_fail_ex+0x39d/0x4d0 [ 305.514353][ T9935] should_failslab+0x9/0x20 [ 305.518904][ T9935] slab_pre_alloc_hook+0x59/0x310 [ 305.523973][ T9935] ? __debug_object_init+0xe8/0x430 [ 305.529207][ T9935] kmem_cache_alloc+0x5a/0x2e0 [ 305.533993][ T9935] ? slab_build_skb+0x2b/0x3f0 [ 305.538780][ T9935] slab_build_skb+0x2b/0x3f0 [ 305.543393][ T9935] bpf_prog_test_run_skb+0x3ba/0x11c0 [ 305.548790][ T9935] ? __fget_files+0x28/0x4d0 [ 305.553409][ T9935] ? cpu_online+0x60/0x60 [ 305.558033][ T9935] bpf_prog_test_run+0x321/0x390 [ 305.562991][ T9935] __sys_bpf+0x440/0x800 [ 305.567338][ T9935] ? bpf_link_show_fdinfo+0x350/0x350 [ 305.572758][ T9935] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 305.578946][ T9935] __x64_sys_bpf+0x7c/0x90 [ 305.583376][ T9935] do_syscall_64+0x55/0xb0 [ 305.587808][ T9935] ? clear_bhb_loop+0x40/0x90 [ 305.592496][ T9935] ? clear_bhb_loop+0x40/0x90 [ 305.597191][ T9935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.603098][ T9935] RIP: 0033:0x7fac6f98efc9 [ 305.607526][ T9935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.627152][ T9935] RSP: 002b:00007fac70815038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.635589][ T9935] RAX: ffffffffffffffda RBX: 00007fac6fbe5fa0 RCX: 00007fac6f98efc9 [ 305.643573][ T9935] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 305.651582][ T9935] RBP: 00007fac70815090 R08: 0000000000000000 R09: 0000000000000000 [ 305.659560][ T9935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.667541][ T9935] R13: 00007fac6fbe6038 R14: 00007fac6fbe5fa0 R15: 00007fffa77a1158 [ 305.675537][ T9935] [ 305.837741][ T9943] IPv6: NLM_F_CREATE should be specified when creating new route [ 306.069317][ T9954] netlink: 'syz.1.1445': attribute type 1 has an invalid length. [ 306.267767][ T9958] FAULT_INJECTION: forcing a failure. [ 306.267767][ T9958] name failslab, interval 1, probability 0, space 0, times 0 [ 306.311268][ T9958] CPU: 1 PID: 9958 Comm: syz.3.1448 Not tainted syzkaller #0 [ 306.318739][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 306.328841][ T9958] Call Trace: [ 306.332158][ T9958] [ 306.335126][ T9958] dump_stack_lvl+0x16c/0x230 [ 306.339875][ T9958] ? show_regs_print_info+0x20/0x20 [ 306.345126][ T9958] ? load_image+0x3b0/0x3b0 [ 306.349681][ T9958] ? __asan_memset+0x22/0x40 [ 306.354327][ T9958] should_fail_ex+0x39d/0x4d0 [ 306.359060][ T9958] should_failslab+0x9/0x20 [ 306.363610][ T9958] slab_pre_alloc_hook+0x59/0x310 [ 306.368691][ T9958] ? __debug_object_init+0xe8/0x430 [ 306.373941][ T9958] kmem_cache_alloc+0x5a/0x2e0 [ 306.378757][ T9958] ? slab_build_skb+0x2b/0x3f0 [ 306.383587][ T9958] slab_build_skb+0x2b/0x3f0 [ 306.388227][ T9958] bpf_prog_test_run_skb+0x3ba/0x11c0 [ 306.393656][ T9958] ? __fdget+0x180/0x210 [ 306.397956][ T9958] ? cpu_online+0x60/0x60 [ 306.402348][ T9958] bpf_prog_test_run+0x321/0x390 [ 306.407336][ T9958] __sys_bpf+0x440/0x800 [ 306.411631][ T9958] ? bpf_link_show_fdinfo+0x350/0x350 [ 306.417060][ T9958] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 306.423266][ T9958] __x64_sys_bpf+0x7c/0x90 [ 306.427724][ T9958] do_syscall_64+0x55/0xb0 [ 306.432191][ T9958] ? clear_bhb_loop+0x40/0x90 [ 306.436910][ T9958] ? clear_bhb_loop+0x40/0x90 [ 306.441676][ T9958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.447619][ T9958] RIP: 0033:0x7fc62218efc9 [ 306.452158][ T9958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.471813][ T9958] RSP: 002b:00007fc623028038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 306.480278][ T9958] RAX: ffffffffffffffda RBX: 00007fc6223e5fa0 RCX: 00007fc62218efc9 [ 306.488298][ T9958] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 306.496307][ T9958] RBP: 00007fc623028090 R08: 0000000000000000 R09: 0000000000000000 [ 306.504323][ T9958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.512335][ T9958] R13: 00007fc6223e6038 R14: 00007fc6223e5fa0 R15: 00007ffc76de8bc8 [ 306.520373][ T9958] [ 306.873185][ T9970] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1449'. [ 307.363654][ T9985] FAULT_INJECTION: forcing a failure. [ 307.363654][ T9985] name failslab, interval 1, probability 0, space 0, times 0 [ 307.392129][ T9985] CPU: 1 PID: 9985 Comm: syz.0.1457 Not tainted syzkaller #0 [ 307.399617][ T9985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 307.409736][ T9985] Call Trace: [ 307.413071][ T9985] [ 307.416038][ T9985] dump_stack_lvl+0x16c/0x230 [ 307.420771][ T9985] ? show_regs_print_info+0x20/0x20 [ 307.426042][ T9985] ? load_image+0x3b0/0x3b0 [ 307.430614][ T9985] ? __asan_memset+0x22/0x40 [ 307.435264][ T9985] should_fail_ex+0x39d/0x4d0 [ 307.440009][ T9985] should_failslab+0x9/0x20 [ 307.444568][ T9985] slab_pre_alloc_hook+0x59/0x310 [ 307.449648][ T9985] ? __debug_object_init+0xe8/0x430 [ 307.454914][ T9985] kmem_cache_alloc+0x5a/0x2e0 [ 307.459736][ T9985] ? slab_build_skb+0x2b/0x3f0 [ 307.464560][ T9985] slab_build_skb+0x2b/0x3f0 [ 307.469219][ T9985] bpf_prog_test_run_skb+0x3ba/0x11c0 [ 307.474649][ T9985] ? lockdep_hardirqs_on+0x98/0x150 [ 307.479913][ T9985] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 307.486134][ T9985] ? cpu_online+0x60/0x60 [ 307.490518][ T9985] bpf_prog_test_run+0x321/0x390 [ 307.495510][ T9985] __sys_bpf+0x440/0x800 [ 307.499808][ T9985] ? bpf_link_show_fdinfo+0x350/0x350 [ 307.505252][ T9985] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 307.511472][ T9985] __x64_sys_bpf+0x7c/0x90 [ 307.515947][ T9985] do_syscall_64+0x55/0xb0 [ 307.520418][ T9985] ? clear_bhb_loop+0x40/0x90 [ 307.525137][ T9985] ? clear_bhb_loop+0x40/0x90 [ 307.529866][ T9985] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.535814][ T9985] RIP: 0033:0x7fb338b8efc9 [ 307.540287][ T9985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.559961][ T9985] RSP: 002b:00007fb336df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 307.568429][ T9985] RAX: ffffffffffffffda RBX: 00007fb338de5fa0 RCX: 00007fb338b8efc9 [ 307.576449][ T9985] RDX: 000000000000004d RSI: 0000200000000380 RDI: 000000000000000a [ 307.584467][ T9985] RBP: 00007fb336df6090 R08: 0000000000000000 R09: 0000000000000000 [ 307.592487][ T9985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.600497][ T9985] R13: 00007fb338de6038 R14: 00007fb338de5fa0 R15: 00007fff1fbeeb98 [ 307.608534][ T9985] [ 308.156591][T10004] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1464'. [ 308.468906][T10016] netlink: 'syz.1.1467': attribute type 3 has an invalid length. [ 308.478305][T10016] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1467'. [ 310.121857][T10031] FAULT_INJECTION: forcing a failure. [ 310.121857][T10031] name failslab, interval 1, probability 0, space 0, times 0 [ 310.184342][T10031] CPU: 1 PID: 10031 Comm: syz.2.1472 Not tainted syzkaller #0 [ 310.191887][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 310.201990][T10031] Call Trace: [ 310.205323][T10031] [ 310.208291][T10031] dump_stack_lvl+0x16c/0x230 [ 310.213030][T10031] ? show_regs_print_info+0x20/0x20 [ 310.218275][T10031] ? load_image+0x3b0/0x3b0 [ 310.222825][T10031] ? __lock_acquire+0x7c80/0x7c80 [ 310.227910][T10031] should_fail_ex+0x39d/0x4d0 [ 310.232655][T10031] should_failslab+0x9/0x20 [ 310.237218][T10031] slab_pre_alloc_hook+0x59/0x310 [ 310.242310][T10031] ? bpf_test_init+0xc0/0x150 [ 310.247044][T10031] ? bpf_test_init+0xc0/0x150 [ 310.251784][T10031] __kmem_cache_alloc_node+0x53/0x260 [ 310.257227][T10031] ? bpf_test_init+0xc0/0x150 [ 310.261959][T10031] __kmalloc+0xa4/0x240 [ 310.266173][T10031] bpf_test_init+0xc0/0x150 [ 310.270736][T10031] bpf_prog_test_run_xdp+0x382/0xfa0 [ 310.276100][T10031] ? dev_put+0x80/0x80 [ 310.280220][T10031] ? dev_put+0x80/0x80 [ 310.284323][T10031] bpf_prog_test_run+0x321/0x390 [ 310.289314][T10031] __sys_bpf+0x440/0x800 [ 310.293605][T10031] ? bpf_link_show_fdinfo+0x350/0x350 [ 310.299037][T10031] ? lock_chain_count+0x20/0x20 [ 310.303946][T10031] __x64_sys_bpf+0x7c/0x90 [ 310.308403][T10031] do_syscall_64+0x55/0xb0 [ 310.312866][T10031] ? clear_bhb_loop+0x40/0x90 [ 310.317584][T10031] ? clear_bhb_loop+0x40/0x90 [ 310.322313][T10031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.328269][T10031] RIP: 0033:0x7fee9018efc9 [ 310.332734][T10031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.352478][T10031] RSP: 002b:00007fee910b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.360943][T10031] RAX: ffffffffffffffda RBX: 00007fee903e5fa0 RCX: 00007fee9018efc9 [ 310.368960][T10031] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 310.376978][T10031] RBP: 00007fee910b2090 R08: 0000000000000000 R09: 0000000000000000 [ 310.385006][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.393017][T10031] R13: 00007fee903e6038 R14: 00007fee903e5fa0 R15: 00007ffcaa9402a8 [ 310.401055][T10031] [ 311.257528][T10037] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1474'. [ 311.639970][T10046] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1478'. [ 311.644446][T10047] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1477'. [ 312.135179][T10065] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1483'. [ 312.376700][T10073] sctp: [Deprecated]: syz.2.1485 (pid 10073) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.376700][T10073] Use struct sctp_sack_info instead [ 312.436745][T10074] netlink: 'syz.3.1486': attribute type 3 has an invalid length. [ 312.466829][T10074] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1486'. [ 316.218798][T10091] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1491'. [ 316.451520][T10093] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1492'. [ 317.634477][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.645448][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.243700][T10086] netlink: 'syz.3.1489': attribute type 1 has an invalid length. [ 318.805468][T10117] netlink: 'syz.3.1496': attribute type 3 has an invalid length. [ 318.815953][T10117] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1496'. [ 318.939905][T10120] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1501'. [ 319.846535][T10132] netlink: 'syz.1.1504': attribute type 21 has an invalid length. [ 322.444821][T10147] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1510'. [ 323.187686][T10159] syz.0.1513[10159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.307238][T10165] FAULT_INJECTION: forcing a failure. [ 323.307238][T10165] name failslab, interval 1, probability 0, space 0, times 0 [ 323.342847][T10165] CPU: 0 PID: 10165 Comm: syz.2.1515 Not tainted syzkaller #0 [ 323.350402][T10165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 323.360518][T10165] Call Trace: [ 323.363924][T10165] [ 323.366896][T10165] dump_stack_lvl+0x16c/0x230 [ 323.371746][T10165] ? show_regs_print_info+0x20/0x20 [ 323.377005][T10165] ? load_image+0x3b0/0x3b0 [ 323.381561][T10165] ? __might_sleep+0xe0/0xe0 [ 323.383807][T10168] FAULT_INJECTION: forcing a failure. [ 323.383807][T10168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.386177][T10165] ? __lock_acquire+0x7c80/0x7c80 [ 323.386209][T10165] should_fail_ex+0x39d/0x4d0 [ 323.386245][T10165] should_failslab+0x9/0x20 [ 323.413590][T10165] slab_pre_alloc_hook+0x59/0x310 [ 323.418661][T10165] ? apparmor_sk_alloc_security+0x77/0x100 [ 323.424514][T10165] __kmem_cache_alloc_node+0x53/0x260 [ 323.429937][T10165] ? apparmor_sk_alloc_security+0x77/0x100 [ 323.435782][T10165] kmalloc_trace+0x2a/0xe0 [ 323.440248][T10165] apparmor_sk_alloc_security+0x77/0x100 [ 323.445922][T10165] security_sk_alloc+0x6e/0xa0 [ 323.450727][T10165] sk_prot_alloc+0x101/0x210 [ 323.455371][T10165] sk_alloc+0x3a/0x360 [ 323.459502][T10165] inet_create+0x7a0/0xfe0 [ 323.463960][T10165] ? inet_create+0x9c/0xfe0 [ 323.468513][T10165] __sock_create+0x4a6/0x940 [ 323.473172][T10165] mptcp_subflow_create_socket+0xf7/0xa60 [ 323.478947][T10165] ? __mptcp_subflow_connect+0x1370/0x1370 [ 323.484815][T10165] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.491022][T10165] __mptcp_nmpc_sk+0x151/0x730 [ 323.495915][T10165] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.502117][T10165] ? __bpf_trace_subflow_check_data_avail+0x150/0x150 [ 323.508948][T10165] mptcp_sendmsg_fastopen+0x7f/0x4d0 [ 323.514292][T10165] mptcp_sendmsg+0x14a3/0x16b0 [ 323.519103][T10165] ? irqentry_enter+0x3b/0x50 [ 323.523841][T10165] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 323.529868][T10165] ? lock_chain_count+0x20/0x20 [ 323.534755][T10165] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.540946][T10165] ? lockdep_hardirqs_on+0x98/0x150 [ 323.546204][T10165] ? mptcp_shutdown+0x80/0x80 [ 323.550935][T10165] ? mptcp_shutdown+0x80/0x80 [ 323.555659][T10165] ? inet_send_prepare+0x260/0x260 [ 323.560807][T10165] ____sys_sendmsg+0x5bf/0x950 [ 323.565628][T10165] ? lockdep_hardirqs_on+0x98/0x150 [ 323.570872][T10165] ? __sys_sendmsg_sock+0x30/0x30 [ 323.575950][T10165] ? ___sys_sendmsg+0x206/0x290 [ 323.580854][T10165] ___sys_sendmsg+0x220/0x290 [ 323.585585][T10165] ? __sys_sendmsg+0x270/0x270 [ 323.590404][T10165] ? perf_trace_preemptirq_template+0xa4/0x340 [ 323.596647][T10165] __se_sys_sendmsg+0x1a5/0x270 [ 323.601541][T10165] ? __x64_sys_sendmsg+0x80/0x80 [ 323.606537][T10165] ? lockdep_hardirqs_on+0x98/0x150 [ 323.611783][T10165] do_syscall_64+0x55/0xb0 [ 323.616234][T10165] ? clear_bhb_loop+0x40/0x90 [ 323.620946][T10165] ? clear_bhb_loop+0x40/0x90 [ 323.625657][T10165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.631579][T10165] RIP: 0033:0x7fee9018efc9 [ 323.636023][T10165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.655670][T10165] RSP: 002b:00007fee910b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.664121][T10165] RAX: ffffffffffffffda RBX: 00007fee903e5fa0 RCX: 00007fee9018efc9 [ 323.672122][T10165] RDX: 000000003000c041 RSI: 0000200000000080 RDI: 000000000000000a [ 323.680210][T10165] RBP: 00007fee910b2090 R08: 0000000000000000 R09: 0000000000000000 [ 323.688302][T10165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.696309][T10165] R13: 00007fee903e6038 R14: 00007fee903e5fa0 R15: 00007ffcaa9402a8 [ 323.704338][T10165] [ 323.707403][T10168] CPU: 1 PID: 10168 Comm: syz.3.1516 Not tainted syzkaller #0 [ 323.714912][T10168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 323.725007][T10168] Call Trace: [ 323.728327][T10168] [ 323.731300][T10168] dump_stack_lvl+0x16c/0x230 [ 323.736045][T10168] ? show_regs_print_info+0x20/0x20 [ 323.741313][T10168] ? load_image+0x3b0/0x3b0 [ 323.745872][T10168] ? __might_fault+0xaa/0x120 [ 323.750593][T10168] ? __lock_acquire+0x7c80/0x7c80 [ 323.755666][T10168] ? __virt_addr_valid+0x18c/0x540 [ 323.760922][T10168] should_fail_ex+0x39d/0x4d0 [ 323.765649][T10168] _copy_from_user+0x2f/0xe0 [ 323.770283][T10168] bpf_prog_test_run_skb+0x259/0x11c0 [ 323.775737][T10168] ? cpu_online+0x60/0x60 [ 323.780130][T10168] bpf_prog_test_run+0x321/0x390 [ 323.785120][T10168] __sys_bpf+0x440/0x800 [ 323.789408][T10168] ? bpf_link_show_fdinfo+0x350/0x350 [ 323.794834][T10168] ? lock_chain_count+0x20/0x20 [ 323.799717][T10168] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 323.805750][T10168] __x64_sys_bpf+0x7c/0x90 [ 323.810212][T10168] do_syscall_64+0x55/0xb0 [ 323.814666][T10168] ? clear_bhb_loop+0x40/0x90 [ 323.819361][T10168] ? clear_bhb_loop+0x40/0x90 [ 323.824059][T10168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.829972][T10168] RIP: 0033:0x7fc62218efc9 [ 323.834406][T10168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.854030][T10168] RSP: 002b:00007fc623028038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 323.862465][T10168] RAX: ffffffffffffffda RBX: 00007fc6223e5fa0 RCX: 00007fc62218efc9 [ 323.870456][T10168] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 323.878443][T10168] RBP: 00007fc623028090 R08: 0000000000000000 R09: 0000000000000000 [ 323.886427][T10168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.894408][T10168] R13: 00007fc6223e6038 R14: 00007fc6223e5fa0 R15: 00007ffc76de8bc8 [ 323.902424][T10168] [ 324.169599][T10179] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1520'. [ 325.306718][T10207] syz.2.1528[10207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.884620][T10214] FAULT_INJECTION: forcing a failure. [ 325.884620][T10214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.924162][T10214] CPU: 0 PID: 10214 Comm: syz.1.1530 Not tainted syzkaller #0 [ 325.931756][T10214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.941894][T10214] Call Trace: [ 325.945209][T10214] [ 325.948228][T10214] dump_stack_lvl+0x16c/0x230 [ 325.952978][T10214] ? show_regs_print_info+0x20/0x20 [ 325.958230][T10214] ? load_image+0x3b0/0x3b0 [ 325.962794][T10214] ? __might_fault+0xaa/0x120 [ 325.967518][T10214] ? __lock_acquire+0x7c80/0x7c80 [ 325.972632][T10214] should_fail_ex+0x39d/0x4d0 [ 325.977375][T10214] _copy_from_user+0x2f/0xe0 [ 325.982015][T10214] __sys_bpf+0x1e9/0x800 [ 325.986310][T10214] ? bpf_link_show_fdinfo+0x350/0x350 [ 325.991766][T10214] ? lock_chain_count+0x20/0x20 [ 325.996679][T10214] __x64_sys_bpf+0x7c/0x90 [ 326.001140][T10214] do_syscall_64+0x55/0xb0 [ 326.005599][T10214] ? clear_bhb_loop+0x40/0x90 [ 326.010312][T10214] ? clear_bhb_loop+0x40/0x90 [ 326.015035][T10214] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.020975][T10214] RIP: 0033:0x7fac6f98efc9 [ 326.025447][T10214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.045100][T10214] RSP: 002b:00007fac707f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.053573][T10214] RAX: ffffffffffffffda RBX: 00007fac6fbe6090 RCX: 00007fac6f98efc9 [ 326.061583][T10214] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 326.069596][T10214] RBP: 00007fac707f4090 R08: 0000000000000000 R09: 0000000000000000 [ 326.077606][T10214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.085614][T10214] R13: 00007fac6fbe6128 R14: 00007fac6fbe6090 R15: 00007fffa77a1158 [ 326.093697][T10214] [ 326.197781][T10216] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1531'. [ 327.414766][T10246] netlink: 'syz.0.1539': attribute type 21 has an invalid length. [ 327.582532][T10248] syz.1.1540[10248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.627198][T10248] bridge0: port 5(netdevsim0) entered disabled state [ 327.649466][T10248] bridge0: port 4(dummy0) entered disabled state [ 327.656616][T10248] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.670365][T10248] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.706150][T10248] bridge0: entered allmulticast mode [ 328.075682][T10253] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1542'. [ 330.865995][T10287] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1554'. [ 331.190451][T10296] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1557'. [ 331.349996][T10298] netlink: 'syz.1.1558': attribute type 4 has an invalid length. [ 331.364582][T10298] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1558'. [ 331.386619][T10298] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 331.421523][T10298] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 331.990089][T10308] netlink: 'syz.3.1562': attribute type 10 has an invalid length. [ 332.246127][T10316] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1564'. [ 332.391833][T10318] netlink: 'syz.1.1566': attribute type 21 has an invalid length. [ 332.421642][T10318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1566'. [ 332.514195][T10325] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1568'. [ 332.606439][T10328] netlink: 'syz.2.1569': attribute type 21 has an invalid length. [ 332.616481][T10328] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1569'. [ 332.659022][T10329] netlink: 'syz.1.1570': attribute type 10 has an invalid length. [ 332.814370][T10337] FAULT_INJECTION: forcing a failure. [ 332.814370][T10337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.828038][T10338] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1574'. [ 332.830317][T10337] CPU: 0 PID: 10337 Comm: syz.0.1573 Not tainted syzkaller #0 [ 332.844913][T10337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.855015][T10337] Call Trace: [ 332.858336][T10337] [ 332.861306][T10337] dump_stack_lvl+0x16c/0x230 [ 332.866035][T10337] ? show_regs_print_info+0x20/0x20 [ 332.871289][T10337] ? load_image+0x3b0/0x3b0 [ 332.875939][T10337] ? __might_fault+0xaa/0x120 [ 332.880663][T10337] should_fail_ex+0x39d/0x4d0 [ 332.885419][T10337] copyin+0x1a/0x90 [ 332.889300][T10337] _copy_from_iter+0x54f/0x1290 [ 332.894304][T10337] ? slab_post_alloc_hook+0x8a/0x4d0 [ 332.899661][T10337] ? __virt_addr_valid+0x18c/0x540 [ 332.904932][T10337] ? copyout_mc+0x70/0x70 [ 332.909323][T10337] ? __virt_addr_valid+0x18c/0x540 [ 332.914500][T10337] ? __virt_addr_valid+0x18c/0x540 [ 332.919692][T10337] ? __virt_addr_valid+0x469/0x540 [ 332.924854][T10337] ? __check_object_size+0x506/0xa30 [ 332.930220][T10337] netlink_sendmsg+0x75c/0xbe0 [ 332.935051][T10337] ? netlink_getsockopt+0x580/0x580 [ 332.940283][T10337] ? aa_sock_msg_perm+0x94/0x150 [ 332.945245][T10337] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 332.950556][T10337] ? security_socket_sendmsg+0x80/0xa0 [ 332.956031][T10337] ? netlink_getsockopt+0x580/0x580 [ 332.961286][T10337] ____sys_sendmsg+0x5bf/0x950 [ 332.966096][T10337] ? __asan_memset+0x22/0x40 [ 332.970712][T10337] ? __sys_sendmsg_sock+0x30/0x30 [ 332.975762][T10337] ? __import_iovec+0x3fa/0x860 [ 332.980644][T10337] ? import_iovec+0x73/0xa0 [ 332.985196][T10337] ___sys_sendmsg+0x220/0x290 [ 332.989933][T10337] ? __sys_sendmsg+0x270/0x270 [ 332.994753][T10337] ? __lock_acquire+0x7c80/0x7c80 [ 332.999818][T10337] __se_sys_sendmsg+0x1a5/0x270 [ 333.004693][T10337] ? perf_trace_preemptirq_template+0x281/0x340 [ 333.010956][T10337] ? __x64_sys_sendmsg+0x80/0x80 [ 333.015936][T10337] ? lockdep_hardirqs_on+0x98/0x150 [ 333.021177][T10337] do_syscall_64+0x55/0xb0 [ 333.025611][T10337] ? clear_bhb_loop+0x40/0x90 [ 333.030312][T10337] ? clear_bhb_loop+0x40/0x90 [ 333.035014][T10337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.040925][T10337] RIP: 0033:0x7fb338b8efc9 [ 333.045357][T10337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.064979][T10337] RSP: 002b:00007fb336df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.073409][T10337] RAX: ffffffffffffffda RBX: 00007fb338de5fa0 RCX: 00007fb338b8efc9 [ 333.081508][T10337] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 333.089505][T10337] RBP: 00007fb336df6090 R08: 0000000000000000 R09: 0000000000000000 [ 333.097484][T10337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.105466][T10337] R13: 00007fb338de6038 R14: 00007fb338de5fa0 R15: 00007fff1fbeeb98 [ 333.113476][T10337] [ 333.675801][T10355] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1580'. [ 333.744252][T10351] FAULT_INJECTION: forcing a failure. [ 333.744252][T10351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.786885][T10351] CPU: 1 PID: 10351 Comm: syz.0.1578 Not tainted syzkaller #0 [ 333.794430][T10351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 333.804526][T10351] Call Trace: [ 333.807937][T10351] [ 333.810904][T10351] dump_stack_lvl+0x16c/0x230 [ 333.815642][T10351] ? show_regs_print_info+0x20/0x20 [ 333.820895][T10351] ? load_image+0x3b0/0x3b0 [ 333.825459][T10351] ? __might_fault+0xaa/0x120 [ 333.830183][T10351] ? __lock_acquire+0x7c80/0x7c80 [ 333.835273][T10351] should_fail_ex+0x39d/0x4d0 [ 333.840018][T10351] _copy_from_user+0x2f/0xe0 [ 333.844658][T10351] __sys_bpf+0x1e9/0x800 [ 333.848952][T10351] ? bpf_link_show_fdinfo+0x350/0x350 [ 333.854390][T10351] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.860614][T10351] __x64_sys_bpf+0x7c/0x90 [ 333.865073][T10351] do_syscall_64+0x55/0xb0 [ 333.870064][T10351] ? clear_bhb_loop+0x40/0x90 [ 333.874784][T10351] ? clear_bhb_loop+0x40/0x90 [ 333.879507][T10351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.885454][T10351] RIP: 0033:0x7fb338b8efc9 [ 333.889911][T10351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.909572][T10351] RSP: 002b:00007fb336df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 333.918057][T10351] RAX: ffffffffffffffda RBX: 00007fb338de5fa0 RCX: 00007fb338b8efc9 [ 333.926081][T10351] RDX: 000000000000004d RSI: 0000200000000380 RDI: 000000000000000a [ 333.934085][T10351] RBP: 00007fb336df6090 R08: 0000000000000000 R09: 0000000000000000 [ 333.942077][T10351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.950100][T10351] R13: 00007fb338de6038 R14: 00007fb338de5fa0 R15: 00007fff1fbeeb98 [ 333.958126][T10351] [ 334.211135][T10363] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1583'. [ 334.277907][T10364] netlink: 'syz.2.1582': attribute type 3 has an invalid length. [ 334.332355][T10364] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1582'. [ 337.284004][T10379] netlink: 212832 bytes leftover after parsing attributes in process `syz.3.1589'. [ 337.489849][T10388] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1591'. [ 337.544267][T10389] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1592'. [ 337.605349][T10384] netlink: 'syz.0.1590': attribute type 4 has an invalid length. [ 337.631584][T10384] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1590'. [ 337.648621][T10384] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 337.726012][T10384] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 337.829783][T10396] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1594'. [ 338.430928][T10407] netlink: 'syz.2.1597': attribute type 3 has an invalid length. [ 338.473030][T10407] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1597'. [ 338.532708][T10398] netlink: 'syz.1.1596': attribute type 10 has an invalid length. [ 338.558422][T10398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1596'. [ 339.387723][T10398] geneve0: entered promiscuous mode [ 339.428282][T10398] team0: Port device geneve0 added [ 339.538509][T10421] pim6reg1: entered promiscuous mode [ 339.555837][T10421] pim6reg1: entered allmulticast mode [ 341.147732][T10426] netlink: 16187 bytes leftover after parsing attributes in process `syz.1.1602'. [ 341.289456][T10429] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.1604'. [ 341.414987][T10434] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1605'. [ 341.499185][T10437] netlink: 'syz.0.1606': attribute type 3 has an invalid length. [ 341.527573][T10437] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1606'. [ 342.043727][T10455] netlink: 'syz.2.1611': attribute type 3 has an invalid length. [ 342.054900][T10452] FAULT_INJECTION: forcing a failure. [ 342.054900][T10452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.119303][T10455] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1611'. [ 342.152754][T10452] CPU: 1 PID: 10452 Comm: syz.0.1609 Not tainted syzkaller #0 [ 342.160300][T10452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 342.170399][T10452] Call Trace: [ 342.173708][T10452] [ 342.176662][T10452] dump_stack_lvl+0x16c/0x230 [ 342.181386][T10452] ? show_regs_print_info+0x20/0x20 [ 342.186625][T10452] ? load_image+0x3b0/0x3b0 [ 342.191168][T10452] ? __might_fault+0xaa/0x120 [ 342.195927][T10452] should_fail_ex+0x39d/0x4d0 [ 342.200651][T10452] copyin+0x1a/0x90 [ 342.204500][T10452] _copy_from_iter+0x54f/0x1290 [ 342.209399][T10452] ? __virt_addr_valid+0x18c/0x540 [ 342.214600][T10452] ? copyout_mc+0x70/0x70 [ 342.218965][T10452] ? __virt_addr_valid+0x18c/0x540 [ 342.224116][T10452] ? __virt_addr_valid+0x18c/0x540 [ 342.229266][T10452] ? __virt_addr_valid+0x469/0x540 [ 342.234419][T10452] ? __phys_addr_symbol+0x2f/0x70 [ 342.239482][T10452] ? __check_object_size+0x506/0xa30 [ 342.244917][T10452] tipc_msg_append+0x42c/0x640 [ 342.249762][T10452] __tipc_sendstream+0x7c7/0x1260 [ 342.254865][T10452] ? tsk_advance_rx_queue+0x310/0x310 [ 342.260278][T10452] ? wait_woken+0x180/0x180 [ 342.264820][T10452] ? _local_bh_enable+0xa0/0xa0 [ 342.269713][T10452] tipc_sendstream+0x55/0x70 [ 342.274349][T10452] ? tipc_getsockopt+0x580/0x580 [ 342.279327][T10452] ____sys_sendmsg+0x5bf/0x950 [ 342.284136][T10452] ? __asan_memset+0x22/0x40 [ 342.288771][T10452] ? __sys_sendmsg_sock+0x30/0x30 [ 342.293844][T10452] ? __import_iovec+0x3fa/0x860 [ 342.298743][T10452] ? import_iovec+0x73/0xa0 [ 342.303293][T10452] ___sys_sendmsg+0x220/0x290 [ 342.308096][T10452] ? __sys_sendmsg+0x270/0x270 [ 342.312925][T10452] ? __lock_acquire+0x7c80/0x7c80 [ 342.318014][T10452] __se_sys_sendmsg+0x1a5/0x270 [ 342.322907][T10452] ? __x64_sys_sendmsg+0x80/0x80 [ 342.327903][T10452] ? lockdep_hardirqs_on+0x98/0x150 [ 342.333176][T10452] do_syscall_64+0x55/0xb0 [ 342.337629][T10452] ? clear_bhb_loop+0x40/0x90 [ 342.342343][T10452] ? clear_bhb_loop+0x40/0x90 [ 342.347054][T10452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.352977][T10452] RIP: 0033:0x7fb338b8efc9 [ 342.357415][T10452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.377050][T10452] RSP: 002b:00007fb336db4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.385501][T10452] RAX: ffffffffffffffda RBX: 00007fb338de6180 RCX: 00007fb338b8efc9 [ 342.393511][T10452] RDX: 0000000004000000 RSI: 0000200000000340 RDI: 0000000000000006 [ 342.401514][T10452] RBP: 00007fb336db4090 R08: 0000000000000000 R09: 0000000000000000 [ 342.409515][T10452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.417526][T10452] R13: 00007fb338de6218 R14: 00007fb338de6180 R15: 00007fff1fbeeb98 [ 342.425582][T10452] [ 344.949960][T10465] netlink: 'syz.0.1613': attribute type 10 has an invalid length. [ 344.968476][T10465] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1613'. [ 345.048760][T10467] netlink: 16187 bytes leftover after parsing attributes in process `syz.1.1614'. [ 345.049017][T10465] geneve0: entered promiscuous mode [ 345.110325][T10465] team0: Port device geneve0 added [ 345.190100][T10469] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1615'. [ 345.512766][T10482] bridge0: port 5(netdevsim0) entered blocking state [ 345.519590][T10482] FAULT_INJECTION: forcing a failure. [ 345.519590][T10482] name failslab, interval 1, probability 0, space 0, times 0 [ 345.532323][T10482] CPU: 0 PID: 10482 Comm: syz.1.1618 Not tainted syzkaller #0 [ 345.539831][T10482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 345.550899][T10482] Call Trace: [ 345.554233][T10482] [ 345.557201][T10482] dump_stack_lvl+0x16c/0x230 [ 345.561942][T10482] ? show_regs_print_info+0x20/0x20 [ 345.567194][T10482] ? load_image+0x3b0/0x3b0 [ 345.571745][T10482] ? console_unlock+0x2e3/0x340 [ 345.576652][T10482] ? tick_nohz_tick_stopped+0x7f/0xc0 [ 345.582087][T10482] ? __irq_work_queue_local+0x13a/0x3b0 [ 345.587692][T10482] should_fail_ex+0x39d/0x4d0 [ 345.592439][T10482] should_failslab+0x9/0x20 [ 345.596997][T10482] slab_pre_alloc_hook+0x59/0x310 [ 345.602061][T10482] ? printk_sprint+0x460/0x460 [ 345.606848][T10482] ? switchdev_deferred_enqueue+0x2d/0x240 [ 345.612701][T10482] ? switchdev_deferred_enqueue+0x2d/0x240 [ 345.618533][T10482] __kmem_cache_alloc_node+0x53/0x260 [ 345.623925][T10482] ? do_raw_spin_unlock+0x121/0x230 [ 345.629150][T10482] ? switchdev_deferred_enqueue+0x2d/0x240 [ 345.634975][T10482] ? switchdev_deferred_enqueue+0x240/0x240 [ 345.640914][T10482] __kmalloc+0xa4/0x240 [ 345.645115][T10482] switchdev_deferred_enqueue+0x2d/0x240 [ 345.650772][T10482] switchdev_port_attr_set+0xf8/0x2b0 [ 345.656175][T10482] ? load_image+0x3b0/0x3b0 [ 345.660701][T10482] ? switchdev_deferred_process+0x2a0/0x2a0 [ 345.666622][T10482] ? mark_lock+0x94/0x320 [ 345.670992][T10482] __set_ageing_time+0xc9/0x150 [ 345.675867][T10482] ? br_set_max_age+0x110/0x110 [ 345.680750][T10482] ? mod_delayed_work_on+0xf7/0x1a0 [ 345.686054][T10482] ? mod_delayed_work_on+0x164/0x1a0 [ 345.691353][T10482] ? __queue_delayed_work+0x200/0x200 [ 345.696738][T10482] ? br_become_designated_port+0x20/0x250 [ 345.702484][T10482] br_stp_enable_port+0x13f/0x250 [ 345.707544][T10482] br_stp_enable_bridge+0x1ee/0x280 [ 345.712770][T10482] br_dev_open+0xa6/0x140 [ 345.717125][T10482] __dev_open+0x2bc/0x430 [ 345.721482][T10482] ? dev_open+0x170/0x170 [ 345.725833][T10482] __dev_change_flags+0x20e/0x6a0 [ 345.730914][T10482] ? dev_get_flags+0x1c0/0x1c0 [ 345.735723][T10482] ? rcu_is_watching+0x15/0xb0 [ 345.740510][T10482] ? trace_contention_end+0x39/0xe0 [ 345.745736][T10482] ? __mutex_lock+0x304/0xcc0 [ 345.750480][T10482] dev_change_flags+0x88/0x1a0 [ 345.755275][T10482] dev_ifsioc+0x6a7/0xe20 [ 345.759652][T10482] ? dev_ioctl+0x1170/0x1170 [ 345.764291][T10482] ? dev_load+0x21/0x1f0 [ 345.768561][T10482] ? dev_load+0x21/0x1f0 [ 345.772830][T10482] dev_ioctl+0x7e2/0x1170 [ 345.777179][T10482] sock_do_ioctl+0x226/0x2f0 [ 345.781808][T10482] ? sock_show_fdinfo+0xb0/0xb0 [ 345.786699][T10482] sock_ioctl+0x623/0x7a0 [ 345.791054][T10482] ? sock_poll+0x3d0/0x3d0 [ 345.795716][T10482] ? bpf_lsm_file_ioctl+0x9/0x10 [ 345.800703][T10482] ? security_file_ioctl+0x80/0xa0 [ 345.805860][T10482] ? sock_poll+0x3d0/0x3d0 [ 345.810309][T10482] __se_sys_ioctl+0xfd/0x170 [ 345.814924][T10482] do_syscall_64+0x55/0xb0 [ 345.819387][T10482] ? clear_bhb_loop+0x40/0x90 [ 345.824112][T10482] ? clear_bhb_loop+0x40/0x90 [ 345.828830][T10482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.834745][T10482] RIP: 0033:0x7fac6f98efc9 [ 345.839783][T10482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.859409][T10482] RSP: 002b:00007fac707f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.867843][T10482] RAX: ffffffffffffffda RBX: 00007fac6fbe6090 RCX: 00007fac6f98efc9 [ 345.875851][T10482] RDX: 0000200000000900 RSI: 0000000000008914 RDI: 0000000000000011 [ 345.883890][T10482] RBP: 00007fac707f4090 R08: 0000000000000000 R09: 0000000000000000 [ 345.891904][T10482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.899893][T10482] R13: 00007fac6fbe6128 R14: 00007fac6fbe6090 R15: 00007fffa77a1158 [ 345.907904][T10482] [ 345.911097][T10482] netdevsim netdevsim1 netdevsim0: failed to offload ageing time [ 345.918931][T10482] bridge0: port 5(netdevsim0) entered forwarding state [ 345.926344][T10482] bridge0: port 4(dummy0) entered blocking state [ 345.932896][T10482] bridge0: port 4(dummy0) entered forwarding state [ 345.939654][T10482] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.946931][T10482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.954545][T10482] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.961838][T10482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.976616][T10482] bridge0: entered promiscuous mode [ 346.396498][T10491] netlink: 16187 bytes leftover after parsing attributes in process `syz.3.1623'. [ 346.847636][T10502] netlink: 'syz.3.1625': attribute type 3 has an invalid length. [ 346.861065][T10501] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1626'. [ 346.925055][T10502] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1625'. [ 346.976146][T10505] netlink: 'syz.1.1627': attribute type 21 has an invalid length. [ 348.185892][T10515] netlink: 'syz.2.1629': attribute type 10 has an invalid length. [ 348.212467][T10515] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1629'. [ 349.705880][T10515] team0: Port device geneve0 added [ 350.167671][T10524] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1631'. [ 351.129482][T10534] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1636'. [ 351.331647][T10532] pim6reg1: entered promiscuous mode [ 351.349808][T10532] pim6reg1: entered allmulticast mode [ 351.891255][T10546] netlink: 'syz.2.1639': attribute type 3 has an invalid length. [ 351.961116][T10546] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1639'. [ 354.724554][T10545] netlink: 'syz.0.1640': attribute type 21 has an invalid length. [ 354.934994][T10550] netlink: 'syz.0.1641': attribute type 4 has an invalid length. [ 354.958462][T10550] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.1641'. [ 355.330626][T10563] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1646'. [ 355.771689][T10572] netlink: 'syz.1.1649': attribute type 21 has an invalid length. [ 356.109161][T10579] netlink: 'syz.2.1651': attribute type 3 has an invalid length. [ 356.172520][T10579] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1651'. [ 356.194739][T10578] pim6reg1: entered promiscuous mode [ 356.215871][T10578] pim6reg1: entered allmulticast mode [ 356.334396][T10583] FAULT_INJECTION: forcing a failure. [ 356.334396][T10583] name failslab, interval 1, probability 0, space 0, times 0 [ 356.402326][T10583] CPU: 0 PID: 10583 Comm: syz.3.1652 Not tainted syzkaller #0 [ 356.409878][T10583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 356.420069][T10583] Call Trace: [ 356.423389][T10583] [ 356.426358][T10583] dump_stack_lvl+0x16c/0x230 [ 356.431090][T10583] ? show_regs_print_info+0x20/0x20 [ 356.436337][T10583] ? load_image+0x3b0/0x3b0 [ 356.440907][T10583] should_fail_ex+0x39d/0x4d0 [ 356.445658][T10583] should_failslab+0x9/0x20 [ 356.450219][T10583] slab_pre_alloc_hook+0x59/0x310 [ 356.455309][T10583] kmem_cache_alloc+0x5a/0x2e0 [ 356.460133][T10583] ? dst_alloc+0x105/0x170 [ 356.464610][T10583] dst_alloc+0x105/0x170 [ 356.468912][T10583] rt_dst_clone+0x58/0x680 [ 356.473479][T10583] ip_mc_finish_output+0xec/0x250 [ 356.478568][T10583] ip_mc_output+0x25c/0x580 [ 356.483135][T10583] ip_send_skb+0x12f/0x1d0 [ 356.487609][T10583] udp_send_skb+0xa37/0x13a0 [ 356.492269][T10583] udp_sendmsg+0x6e7/0x2380 [ 356.496839][T10583] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 356.501741][T10583] ? udp_cmsg_send+0x350/0x350 [ 356.506557][T10583] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 356.512621][T10583] ? sock_rps_record_flow+0x19/0x400 [ 356.517960][T10583] ? inet_send_prepare+0x260/0x260 [ 356.523132][T10583] ? inet_sendmsg+0x7c/0x2f0 [ 356.527760][T10583] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 356.533097][T10583] ? security_socket_sendmsg+0x80/0xa0 [ 356.538605][T10583] ? inet_send_prepare+0x260/0x260 [ 356.543774][T10583] ____sys_sendmsg+0x5bf/0x950 [ 356.548615][T10583] ? __asan_memset+0x22/0x40 [ 356.553266][T10583] ? __sys_sendmsg_sock+0x30/0x30 [ 356.558349][T10583] ? __import_iovec+0x3fa/0x860 [ 356.563272][T10583] ? import_iovec+0x73/0xa0 [ 356.567829][T10583] ___sys_sendmsg+0x220/0x290 [ 356.572563][T10583] ? __sys_sendmsg+0x270/0x270 [ 356.577412][T10583] ? lockdep_hardirqs_on+0x98/0x150 [ 356.582753][T10583] __se_sys_sendmsg+0x1a5/0x270 [ 356.587663][T10583] ? __x64_sys_sendmsg+0x80/0x80 [ 356.592672][T10583] ? lockdep_hardirqs_on+0x98/0x150 [ 356.597941][T10583] do_syscall_64+0x55/0xb0 [ 356.602406][T10583] ? clear_bhb_loop+0x40/0x90 [ 356.607124][T10583] ? clear_bhb_loop+0x40/0x90 [ 356.611848][T10583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.617776][T10583] RIP: 0033:0x7fc62218efc9 [ 356.622211][T10583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.641849][T10583] RSP: 002b:00007fc623028038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.650296][T10583] RAX: ffffffffffffffda RBX: 00007fc6223e5fa0 RCX: 00007fc62218efc9 [ 356.658301][T10583] RDX: 00000000040e4804 RSI: 0000200000000300 RDI: 0000000000000007 [ 356.666329][T10583] RBP: 00007fc623028090 R08: 0000000000000000 R09: 0000000000000000 [ 356.674346][T10583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.682365][T10583] R13: 00007fc6223e6038 R14: 00007fc6223e5fa0 R15: 00007ffc76de8bc8 [ 356.690509][T10583] [ 356.862316][T10593] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1656'. [ 359.524648][T10612] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1665'. [ 359.834336][T10621] netlink: 'syz.0.1666': attribute type 3 has an invalid length. [ 359.902509][T10629] netlink: 'syz.0.1666': attribute type 10 has an invalid length. [ 359.910423][T10629] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1666'. [ 359.981175][T10621] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1666'. [ 360.034489][T10629] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 360.171542][T10630] netlink: 'syz.3.1668': attribute type 3 has an invalid length. [ 360.179395][T10630] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1668'. [ 360.848117][T10632] FAULT_INJECTION: forcing a failure. [ 360.848117][T10632] name failslab, interval 1, probability 0, space 0, times 0 [ 360.927750][T10632] CPU: 0 PID: 10632 Comm: syz.1.1669 Not tainted syzkaller #0 [ 360.935300][T10632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 360.945401][T10632] Call Trace: [ 360.948726][T10632] [ 360.951695][T10632] dump_stack_lvl+0x16c/0x230 [ 360.956434][T10632] ? show_regs_print_info+0x20/0x20 [ 360.961688][T10632] ? load_image+0x3b0/0x3b0 [ 360.966250][T10632] ? __might_sleep+0xe0/0xe0 [ 360.970894][T10632] ? __lock_acquire+0x7c80/0x7c80 [ 360.975976][T10632] should_fail_ex+0x39d/0x4d0 [ 360.980705][T10632] should_failslab+0x9/0x20 [ 360.985276][T10632] slab_pre_alloc_hook+0x59/0x310 [ 360.990357][T10632] ? tomoyo_encode+0x28b/0x540 [ 360.995168][T10632] ? tomoyo_encode+0x28b/0x540 [ 361.000006][T10632] __kmem_cache_alloc_node+0x53/0x260 [ 361.005432][T10632] ? tomoyo_encode+0x28b/0x540 [ 361.010244][T10632] __kmalloc+0xa4/0x240 [ 361.014457][T10632] tomoyo_encode+0x28b/0x540 [ 361.019112][T10632] tomoyo_realpath_from_path+0x592/0x5d0 [ 361.024798][T10632] tomoyo_path_number_perm+0x1ea/0x590 [ 361.030286][T10632] ? tomoyo_path_number_perm+0x1ba/0x590 [ 361.035969][T10632] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 361.041465][T10632] ? ksys_write+0x1c1/0x250 [ 361.046025][T10632] ? __fget_files+0x28/0x4d0 [ 361.050665][T10632] security_file_ioctl+0x70/0xa0 [ 361.055666][T10632] __se_sys_ioctl+0x48/0x170 [ 361.060296][T10632] do_syscall_64+0x55/0xb0 [ 361.064748][T10632] ? clear_bhb_loop+0x40/0x90 [ 361.069445][T10632] ? clear_bhb_loop+0x40/0x90 [ 361.074147][T10632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.080062][T10632] RIP: 0033:0x7fac6f98efc9 [ 361.084497][T10632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.104123][T10632] RSP: 002b:00007fac70815038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.112559][T10632] RAX: ffffffffffffffda RBX: 00007fac6fbe5fa0 RCX: 00007fac6f98efc9 [ 361.120549][T10632] RDX: 00002000000006c0 RSI: 0000000000005452 RDI: 0000000000000000 [ 361.128543][T10632] RBP: 00007fac70815090 R08: 0000000000000000 R09: 0000000000000000 [ 361.136530][T10632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.144519][T10632] R13: 00007fac6fbe6038 R14: 00007fac6fbe5fa0 R15: 00007fffa77a1158 [ 361.152523][T10632] [ 361.228454][T10632] ERROR: Out of memory at tomoyo_realpath_from_path. [ 363.009624][T10644] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1674'. [ 363.056560][T10640] pim6reg1: entered promiscuous mode [ 363.068987][T10640] pim6reg1: entered allmulticast mode [ 363.388394][T10656] FAULT_INJECTION: forcing a failure. [ 363.388394][T10656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.407596][T10656] CPU: 1 PID: 10656 Comm: syz.3.1677 Not tainted syzkaller #0 [ 363.415199][T10656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 363.425370][T10656] Call Trace: [ 363.428753][T10656] [ 363.431764][T10656] dump_stack_lvl+0x16c/0x230 [ 363.436532][T10656] ? show_regs_print_info+0x20/0x20 [ 363.441805][T10656] ? load_image+0x3b0/0x3b0 [ 363.446389][T10656] ? __lock_acquire+0x7c80/0x7c80 [ 363.451485][T10656] ? snprintf+0xdb/0x120 [ 363.455844][T10656] should_fail_ex+0x39d/0x4d0 [ 363.460677][T10656] _copy_to_user+0x2f/0xa0 [ 363.465221][T10656] simple_read_from_buffer+0xe7/0x150 [ 363.470714][T10656] proc_fail_nth_read+0x1e3/0x250 [ 363.475836][T10656] ? proc_fault_inject_write+0x340/0x340 [ 363.481563][T10656] ? fsnotify_perm+0x271/0x5e0 [ 363.486413][T10656] ? proc_fault_inject_write+0x340/0x340 [ 363.492137][T10656] vfs_read+0x27e/0x920 [ 363.496397][T10656] ? kernel_read+0x1e0/0x1e0 [ 363.501070][T10656] ? __fget_files+0x28/0x4d0 [ 363.505737][T10656] ? __fget_files+0x44a/0x4d0 [ 363.510532][T10656] ? __fdget_pos+0x2a3/0x330 [ 363.515186][T10656] ? ksys_read+0x75/0x250 [ 363.519618][T10656] ksys_read+0x147/0x250 [ 363.523954][T10656] ? vfs_write+0x940/0x940 [ 363.528508][T10656] ? lockdep_hardirqs_on+0x98/0x150 [ 363.533848][T10656] do_syscall_64+0x55/0xb0 [ 363.538346][T10656] ? clear_bhb_loop+0x40/0x90 [ 363.543089][T10656] ? clear_bhb_loop+0x40/0x90 [ 363.547841][T10656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.553792][T10656] RIP: 0033:0x7fc62218d9dc [ 363.558274][T10656] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 363.577944][T10656] RSP: 002b:00007fc623028030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 363.586425][T10656] RAX: ffffffffffffffda RBX: 00007fc6223e5fa0 RCX: 00007fc62218d9dc [ 363.594455][T10656] RDX: 000000000000000f RSI: 00007fc6230280a0 RDI: 0000000000000005 [ 363.602484][T10656] RBP: 00007fc623028090 R08: 0000000000000000 R09: 0000000000000000 [ 363.610518][T10656] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 363.618553][T10656] R13: 00007fc6223e6038 R14: 00007fc6223e5fa0 R15: 00007ffc76de8bc8 [ 363.626679][T10656] [ 364.009467][T10665] netlink: 'syz.0.1681': attribute type 3 has an invalid length. [ 364.048704][T10665] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1681'. [ 364.218828][T10673] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1685'. [ 364.807505][T10678] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1683'. [ 367.095048][T10691] FAULT_INJECTION: forcing a failure. [ 367.095048][T10691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.113622][T10691] CPU: 1 PID: 10691 Comm: syz.2.1690 Not tainted syzkaller #0 [ 367.121169][T10691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 367.131312][T10691] Call Trace: [ 367.134654][T10691] [ 367.137636][T10691] dump_stack_lvl+0x16c/0x230 [ 367.142383][T10691] ? show_regs_print_info+0x20/0x20 [ 367.147651][T10691] ? load_image+0x3b0/0x3b0 [ 367.152236][T10691] ? __might_fault+0xaa/0x120 [ 367.157010][T10691] ? __lock_acquire+0x7c80/0x7c80 [ 367.162113][T10691] should_fail_ex+0x39d/0x4d0 [ 367.166872][T10691] _copy_to_iter+0x1c8/0x10d0 [ 367.171644][T10691] ? __virt_addr_valid+0x18c/0x540 [ 367.176818][T10691] ? iov_iter_init+0x1e0/0x1e0 [ 367.181647][T10691] ? __virt_addr_valid+0x18c/0x540 [ 367.186826][T10691] ? __virt_addr_valid+0x469/0x540 [ 367.192002][T10691] ? __phys_addr_symbol+0x2f/0x70 [ 367.197082][T10691] ? __check_object_size+0x506/0xa30 [ 367.202454][T10691] __skb_datagram_iter+0xdb/0x780 [ 367.207544][T10691] ? unix_stream_read_generic+0x669/0x2020 [ 367.213413][T10691] ? skb_copy_datagram_iter+0x200/0x200 [ 367.219018][T10691] ? do_raw_spin_lock+0x121/0x2c0 [ 367.224113][T10691] skb_copy_datagram_iter+0xb1/0x200 [ 367.229476][T10691] unix_stream_read_actor+0x6c/0xa0 [ 367.234753][T10691] unix_stream_read_generic+0xd4b/0x2020 [ 367.240457][T10691] ? perf_trace_lock+0x2ed/0x380 [ 367.245539][T10691] ? unix_stream_read_actor+0xa0/0xa0 [ 367.250984][T10691] ? unix_bpf_recvmsg+0xa3d/0xd90 [ 367.256091][T10691] ? trace_contention_end+0x39/0xe0 [ 367.261361][T10691] ? __mutex_lock+0x304/0xcc0 [ 367.266115][T10691] __unix_stream_recvmsg+0xe7/0x130 [ 367.271387][T10691] ? scm_recv_unix+0x810/0x810 [ 367.276223][T10691] ? __unix_stream_recvmsg+0x130/0x130 [ 367.281754][T10691] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 367.287650][T10691] unix_bpf_recvmsg+0xc1a/0xd90 [ 367.292609][T10691] ? __might_sleep+0xe0/0xe0 [ 367.297263][T10691] ? unix_stream_bpf_update_proto+0x2f0/0x2f0 [ 367.303432][T10691] unix_stream_recvmsg+0x13f/0x1b0 [ 367.308626][T10691] ? unix_stream_sendmsg+0xba0/0xba0 [ 367.313976][T10691] ? __unix_stream_recvmsg+0x130/0x130 [ 367.319513][T10691] ? aa_sock_msg_perm+0x94/0x150 [ 367.324522][T10691] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 367.329867][T10691] ? security_socket_recvmsg+0x89/0xb0 [ 367.335397][T10691] ? unix_stream_sendmsg+0xba0/0xba0 [ 367.340749][T10691] ____sys_recvmsg+0x29e/0x5b0 [ 367.345615][T10691] ? __sys_recvmsg_sock+0x50/0x50 [ 367.350751][T10691] ? import_iovec+0x73/0xa0 [ 367.355340][T10691] ___sys_recvmsg+0x1b6/0x510 [ 367.360117][T10691] ? __sys_recvmsg+0x270/0x270 [ 367.364969][T10691] ? ksys_write+0x1c1/0x250 [ 367.369564][T10691] ? __fget_files+0x44a/0x4d0 [ 367.374339][T10691] __x64_sys_recvmsg+0x1f2/0x2c0 [ 367.379353][T10691] ? ___sys_recvmsg+0x510/0x510 [ 367.384306][T10691] ? lockdep_hardirqs_on+0x98/0x150 [ 367.389579][T10691] do_syscall_64+0x55/0xb0 [ 367.394056][T10691] ? clear_bhb_loop+0x40/0x90 [ 367.398797][T10691] ? clear_bhb_loop+0x40/0x90 [ 367.403541][T10691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.409487][T10691] RIP: 0033:0x7fee9018efc9 [ 367.413959][T10691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.433632][T10691] RSP: 002b:00007fee910b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 367.442120][T10691] RAX: ffffffffffffffda RBX: 00007fee903e5fa0 RCX: 00007fee9018efc9 [ 367.450149][T10691] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 367.458152][T10691] RBP: 00007fee910b2090 R08: 0000000000000000 R09: 0000000000000000 [ 367.466183][T10691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.474188][T10691] R13: 00007fee903e6038 R14: 00007fee903e5fa0 R15: 00007ffcaa9402a8 [ 367.482209][T10691] [ 367.807822][T10705] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1694'. [ 368.096620][T10714] netlink: 'syz.2.1698': attribute type 3 has an invalid length. [ 368.170863][T10714] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1698'. [ 368.970645][T10731] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1700'. [ 371.233836][T10740] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1705'. [ 371.259974][T10742] netlink: 'syz.0.1704': attribute type 10 has an invalid length. [ 371.290570][T10742] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1704'. [ 371.314198][T10742] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 371.952812][T10765] netlink: 'syz.3.1713': attribute type 3 has an invalid length. [ 371.988944][T10765] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1713'. [ 376.185036][T10807] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1727'. [ 376.189119][T10805] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1725'. [ 376.593739][T10819] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1732'. [ 377.404227][T10839] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1739'. [ 378.100296][T10848] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1742'. [ 378.506993][T10862] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1748'. [ 379.268609][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.275246][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.711797][T10891] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1756'. [ 380.068281][T10899] netlink: 'syz.2.1758': attribute type 3 has an invalid length. [ 380.106703][T10899] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1758'. [ 380.451289][T10903] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1757'. [ 381.093269][T10911] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1760'. [ 381.910242][T10920] FAULT_INJECTION: forcing a failure. [ 381.910242][T10920] name failslab, interval 1, probability 0, space 0, times 0 [ 381.950865][T10920] CPU: 1 PID: 10920 Comm: syz.2.1764 Not tainted syzkaller #0 [ 381.958517][T10920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 381.968734][T10920] Call Trace: [ 381.972087][T10920] [ 381.975087][T10920] dump_stack_lvl+0x16c/0x230 [ 381.979861][T10920] ? show_regs_print_info+0x20/0x20 [ 381.985154][T10920] ? load_image+0x3b0/0x3b0 [ 381.989725][T10920] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 381.995826][T10920] ? __asan_memset+0x22/0x40 [ 382.000508][T10920] should_fail_ex+0x39d/0x4d0 [ 382.005293][T10920] should_failslab+0x9/0x20 [ 382.009867][T10920] slab_pre_alloc_hook+0x59/0x310 [ 382.014967][T10920] ? __debug_object_init+0xe8/0x430 [ 382.020265][T10920] kmem_cache_alloc+0x5a/0x2e0 [ 382.025098][T10920] ? slab_build_skb+0x2b/0x3f0 [ 382.030039][T10920] slab_build_skb+0x2b/0x3f0 [ 382.034737][T10920] bpf_prog_test_run_skb+0x3ba/0x11c0 [ 382.040195][T10920] ? __fget_files+0x28/0x4d0 [ 382.044903][T10920] ? cpu_online+0x60/0x60 [ 382.049301][T10920] bpf_prog_test_run+0x321/0x390 [ 382.054399][T10920] __sys_bpf+0x440/0x800 [ 382.058785][T10920] ? bpf_link_show_fdinfo+0x350/0x350 [ 382.064241][T10920] ? lock_chain_count+0x20/0x20 [ 382.069156][T10920] __x64_sys_bpf+0x7c/0x90 [ 382.073615][T10920] do_syscall_64+0x55/0xb0 [ 382.078085][T10920] ? clear_bhb_loop+0x40/0x90 [ 382.082798][T10920] ? clear_bhb_loop+0x40/0x90 [ 382.087516][T10920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.093461][T10920] RIP: 0033:0x7fee9018efc9 [ 382.098037][T10920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.117680][T10920] RSP: 002b:00007fee910b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 382.126162][T10920] RAX: ffffffffffffffda RBX: 00007fee903e5fa0 RCX: 00007fee9018efc9 [ 382.134271][T10920] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 382.142294][T10920] RBP: 00007fee910b2090 R08: 0000000000000000 R09: 0000000000000000 [ 382.150299][T10920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.158310][T10920] R13: 00007fee903e6038 R14: 00007fee903e5fa0 R15: 00007ffcaa9402a8 [ 382.166364][T10920] [ 383.039894][T10933] FAULT_INJECTION: forcing a failure. [ 383.039894][T10933] name failslab, interval 1, probability 0, space 0, times 0 [ 383.086081][T10933] CPU: 0 PID: 10933 Comm: syz.1.1769 Not tainted syzkaller #0 [ 383.093644][T10933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 383.103744][T10933] Call Trace: [ 383.107063][T10933] [ 383.110045][T10933] dump_stack_lvl+0x16c/0x230 [ 383.114791][T10933] ? show_regs_print_info+0x20/0x20 [ 383.120038][T10933] ? load_image+0x3b0/0x3b0 [ 383.124608][T10933] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 383.130654][T10933] ? __asan_memset+0x22/0x40 [ 383.135299][T10933] should_fail_ex+0x39d/0x4d0 [ 383.140035][T10933] should_failslab+0x9/0x20 [ 383.144588][T10933] slab_pre_alloc_hook+0x59/0x310 [ 383.149670][T10933] ? __debug_object_init+0xe8/0x430 [ 383.154922][T10933] kmem_cache_alloc+0x5a/0x2e0 [ 383.159736][T10933] ? slab_build_skb+0x2b/0x3f0 [ 383.164558][T10933] slab_build_skb+0x2b/0x3f0 [ 383.169215][T10933] bpf_prog_test_run_skb+0x3ba/0x11c0 [ 383.174641][T10933] ? __fget_files+0x28/0x4d0 [ 383.179296][T10933] ? cpu_online+0x60/0x60 [ 383.183683][T10933] bpf_prog_test_run+0x321/0x390 [ 383.188761][T10933] __sys_bpf+0x440/0x800 [ 383.193046][T10933] ? bpf_link_show_fdinfo+0x350/0x350 [ 383.198493][T10933] ? lock_chain_count+0x20/0x20 [ 383.203401][T10933] __x64_sys_bpf+0x7c/0x90 [ 383.207859][T10933] do_syscall_64+0x55/0xb0 [ 383.212320][T10933] ? clear_bhb_loop+0x40/0x90 [ 383.217033][T10933] ? clear_bhb_loop+0x40/0x90 [ 383.221754][T10933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.227689][T10933] RIP: 0033:0x7fac6f98efc9 [ 383.232230][T10933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.252057][T10933] RSP: 002b:00007fac70815038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 383.260526][T10933] RAX: ffffffffffffffda RBX: 00007fac6fbe5fa0 RCX: 00007fac6f98efc9 [ 383.268539][T10933] RDX: 0000000000000050 RSI: 0000200000000480 RDI: 000000000000000a [ 383.276566][T10933] RBP: 00007fac70815090 R08: 0000000000000000 R09: 0000000000000000 [ 383.284583][T10933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.292597][T10933] R13: 00007fac6fbe6038 R14: 00007fac6fbe5fa0 R15: 00007fffa77a1158 [ 383.300647][T10933] [ 383.605071][T10941] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1771'. [ 384.258292][T10963] FAULT_INJECTION: forcing a failure. [ 384.258292][T10963] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 384.302963][T10963] CPU: 1 PID: 10963 Comm: syz.0.1781 Not tainted syzkaller #0 [ 384.310516][T10963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 384.320616][T10963] Call Trace: [ 384.323935][T10963] [ 384.326907][T10963] dump_stack_lvl+0x16c/0x230 [ 384.331653][T10963] ? show_regs_print_info+0x20/0x20 [ 384.336909][T10963] ? load_image+0x3b0/0x3b0 [ 384.341474][T10963] ? __lock_acquire+0x7c80/0x7c80 [ 384.346554][T10963] ? __stack_depot_save+0x1f/0x630 [ 384.351713][T10963] should_fail_ex+0x39d/0x4d0 [ 384.356451][T10963] prepare_alloc_pages+0x1e2/0x5f0 [ 384.361635][T10963] __alloc_pages+0x127/0x460 [ 384.366286][T10963] ? zone_statistics+0x170/0x170 [ 384.371279][T10963] ? perf_trace_lock+0xf7/0x380 [ 384.376202][T10963] ? alloc_pages+0x4dc/0x740 [ 384.380871][T10963] __get_free_pages+0xc/0x30 [ 384.385527][T10963] kasan_populate_vmalloc_pte+0x35/0x100 [ 384.391307][T10963] __apply_to_page_range+0x878/0xdb0 [ 384.396669][T10963] ? kasan_populate_vmalloc+0x70/0x70 [ 384.402105][T10963] ? apply_to_page_range+0x50/0x50 [ 384.407284][T10963] ? do_raw_spin_unlock+0x121/0x230 [ 384.412625][T10963] alloc_vmap_area+0x1b4a/0x1c70 [ 384.417667][T10963] ? vm_map_ram+0xcb0/0xcb0 [ 384.422307][T10963] ? rcu_is_watching+0x15/0xb0 [ 384.427147][T10963] __get_vm_area_node+0x162/0x370 [ 384.432243][T10963] __vmalloc_node_range+0x36e/0x1320 [ 384.437616][T10963] ? prealloc_init+0x136/0x830 [ 384.442445][T10963] ? is_dynamic_key+0x114/0x260 [ 384.447368][T10963] ? lock_chain_count+0x20/0x20 [ 384.452301][T10963] ? free_vm_area+0x50/0x50 [ 384.456894][T10963] ? lockdep_init_map_type+0x241/0x880 [ 384.462408][T10963] ? __might_sleep+0xe0/0xe0 [ 384.467071][T10963] bpf_map_area_alloc+0xf1/0x110 [ 384.472064][T10963] ? prealloc_init+0x136/0x830 [ 384.476886][T10963] prealloc_init+0x136/0x830 [ 384.481553][T10963] ? htab_init_buckets+0x24a/0x280 [ 384.486731][T10963] htab_map_alloc+0x84d/0xe50 [ 384.491532][T10963] map_create+0x877/0x12f0 [ 384.496007][T10963] ? bpf_lsm_bpf+0x9/0x10 [ 384.500405][T10963] __sys_bpf+0x5f0/0x800 [ 384.504707][T10963] ? bpf_link_show_fdinfo+0x350/0x350 [ 384.510151][T10963] ? lock_chain_count+0x20/0x20 [ 384.515064][T10963] __x64_sys_bpf+0x7c/0x90 [ 384.519529][T10963] do_syscall_64+0x55/0xb0 [ 384.523994][T10963] ? clear_bhb_loop+0x40/0x90 [ 384.528719][T10963] ? clear_bhb_loop+0x40/0x90 [ 384.533466][T10963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.539423][T10963] RIP: 0033:0x7fb338b8efc9 [ 384.543892][T10963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.563547][T10963] RSP: 002b:00007fb336df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.572019][T10963] RAX: ffffffffffffffda RBX: 00007fb338de5fa0 RCX: 00007fb338b8efc9 [ 384.580047][T10963] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 384.588091][T10963] RBP: 00007fb336df6090 R08: 0000000000000000 R09: 0000000000000000 [ 384.596123][T10963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.604141][T10963] R13: 00007fb338de6038 R14: 00007fb338de5fa0 R15: 00007fff1fbeeb98 [ 384.612182][T10963] [ 384.811915][T10967] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1782'. [ 384.891045][T10970] netlink: 'syz.2.1782': attribute type 16 has an invalid length. [ 384.938300][T10970] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1782'. [ 385.838959][T10983] netlink: 16187 bytes leftover after parsing attributes in process `syz.1.1786'. [ 386.287876][T10991] FAULT_INJECTION: forcing a failure. [ 386.287876][T10991] name failslab, interval 1, probability 0, space 0, times 0 [ 386.369964][T10991] CPU: 1 PID: 10991 Comm: syz.3.1790 Not tainted syzkaller #0 [ 386.377542][T10991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 386.387655][T10991] Call Trace: [ 386.390983][T10991] [ 386.393965][T10991] dump_stack_lvl+0x16c/0x230 [ 386.398714][T10991] ? show_regs_print_info+0x20/0x20 [ 386.403979][T10991] ? load_image+0x3b0/0x3b0 [ 386.408551][T10991] ? __might_sleep+0xe0/0xe0 [ 386.413203][T10991] ? __lock_acquire+0x7c80/0x7c80 [ 386.418291][T10991] should_fail_ex+0x39d/0x4d0 [ 386.423035][T10991] should_failslab+0x9/0x20 [ 386.427598][T10991] slab_pre_alloc_hook+0x59/0x310 [ 386.432691][T10991] ? tomoyo_encode+0x28b/0x540 [ 386.437522][T10991] ? tomoyo_encode+0x28b/0x540 [ 386.442341][T10991] __kmem_cache_alloc_node+0x53/0x260 [ 386.447786][T10991] ? tomoyo_encode+0x28b/0x540 [ 386.452610][T10991] __kmalloc+0xa4/0x240 [ 386.456837][T10991] tomoyo_encode+0x28b/0x540 [ 386.461506][T10991] tomoyo_realpath_from_path+0x592/0x5d0 [ 386.467234][T10991] tomoyo_path_number_perm+0x1ea/0x590 [ 386.472758][T10991] ? tomoyo_path_number_perm+0x1ba/0x590 [ 386.478456][T10991] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 386.483979][T10991] ? ksys_write+0x1c1/0x250 [ 386.488630][T10991] ? __fget_files+0x28/0x4d0 [ 386.493312][T10991] security_file_ioctl+0x70/0xa0 [ 386.498324][T10991] __se_sys_ioctl+0x48/0x170 [ 386.503023][T10991] do_syscall_64+0x55/0xb0 [ 386.507772][T10991] ? clear_bhb_loop+0x40/0x90 [ 386.512516][T10991] ? clear_bhb_loop+0x40/0x90 [ 386.517353][T10991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.523303][T10991] RIP: 0033:0x7fc62218efc9 [ 386.527773][T10991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.547622][T10991] RSP: 002b:00007fc623028038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.556105][T10991] RAX: ffffffffffffffda RBX: 00007fc6223e5fa0 RCX: 00007fc62218efc9 [ 386.564134][T10991] RDX: 0000200000000000 RSI: 000000000000891c RDI: 0000000000000007 [ 386.572153][T10991] RBP: 00007fc623028090 R08: 0000000000000000 R09: 0000000000000000 [ 386.580180][T10991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.588212][T10991] R13: 00007fc6223e6038 R14: 00007fc6223e5fa0 R15: 00007ffc76de8bc8 [ 386.596283][T10991] [ 386.677580][T10991] ERROR: Out of memory at tomoyo_realpath_from_path. [ 386.728744][T10993] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1791'. [ 386.956747][T11000] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1793'. [ 386.978445][T11000] tc_dump_action: action bad kind [ 387.150497][T11002] netlink: 'syz.1.1794': attribute type 10 has an invalid length. [ 387.454571][T11014] FAULT_INJECTION: forcing a failure. [ 387.454571][T11014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.546532][T11002] geneve1: entered promiscuous mode [ 387.550555][T11014] CPU: 0 PID: 11014 Comm: syz.2.1796 Not tainted syzkaller #0 [ 387.560074][T11014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 387.570172][T11014] Call Trace: [ 387.573486][T11014] [ 387.576448][T11014] dump_stack_lvl+0x16c/0x230 [ 387.581177][T11014] ? show_regs_print_info+0x20/0x20 [ 387.586425][T11014] ? load_image+0x3b0/0x3b0 [ 387.590983][T11014] ? __might_fault+0xaa/0x120 [ 387.595699][T11014] ? __lock_acquire+0x7c80/0x7c80 [ 387.600755][T11014] ? unix_ioctl+0x254/0x660 [ 387.605302][T11014] should_fail_ex+0x39d/0x4d0 [ 387.610038][T11014] _copy_from_user+0x2f/0xe0 [ 387.614668][T11014] sock_do_ioctl+0x17c/0x2f0 [ 387.619279][T11014] ? sock_show_fdinfo+0xb0/0xb0 [ 387.624248][T11014] sock_ioctl+0x623/0x7a0 [ 387.628605][T11014] ? sock_poll+0x3d0/0x3d0 [ 387.633073][T11014] ? bpf_lsm_file_ioctl+0x9/0x10 [ 387.638053][T11014] ? security_file_ioctl+0x80/0xa0 [ 387.643189][T11014] ? sock_poll+0x3d0/0x3d0 [ 387.647631][T11014] __se_sys_ioctl+0xfd/0x170 [ 387.652265][T11014] do_syscall_64+0x55/0xb0 [ 387.656698][T11014] ? clear_bhb_loop+0x40/0x90 [ 387.661388][T11014] ? clear_bhb_loop+0x40/0x90 [ 387.666168][T11014] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.672097][T11014] RIP: 0033:0x7fee9018efc9 [ 387.676528][T11014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.696158][T11014] RSP: 002b:00007fee91091038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.704703][T11014] RAX: ffffffffffffffda RBX: 00007fee903e6090 RCX: 00007fee9018efc9 [ 387.712785][T11014] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 387.720773][T11014] RBP: 00007fee91091090 R08: 0000000000000000 R09: 0000000000000000 [ 387.728758][T11014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.736744][T11014] R13: 00007fee903e6128 R14: 00007fee903e6090 R15: 00007ffcaa9402a8 [ 387.744765][T11014] [ 387.766414][T11002] team0: Port device geneve1 added [ 388.053388][T11017] netlink: 16187 bytes leftover after parsing attributes in process `syz.3.1798'. [ 388.962119][T11041] sctp: [Deprecated]: syz.3.1807 (pid 11041) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.962119][T11041] Use struct sctp_sack_info instead [ 390.147845][T11057] netlink: 16187 bytes leftover after parsing attributes in process `syz.2.1810'. [ 390.286742][T11062] FAULT_INJECTION: forcing a failure. [ 390.286742][T11062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.330533][T11062] CPU: 1 PID: 11062 Comm: syz.0.1811 Not tainted syzkaller #0 [ 390.338098][T11062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 390.348212][T11062] Call Trace: [ 390.351546][T11062] [ 390.354528][T11062] dump_stack_lvl+0x16c/0x230 [ 390.359268][T11062] ? show_regs_print_info+0x20/0x20 [ 390.364529][T11062] ? load_image+0x3b0/0x3b0 [ 390.369090][T11062] ? __might_fault+0xaa/0x120 [ 390.373842][T11062] ? __lock_acquire+0x7c80/0x7c80 [ 390.378945][T11062] should_fail_ex+0x39d/0x4d0 [ 390.383794][T11062] _copy_from_user+0x2f/0xe0 [ 390.388455][T11062] addrconf_del_ifaddr+0xca/0x160 [ 390.393542][T11062] ? inet6_addr_add+0xb60/0xb60 [ 390.393584][T11062] ? __lock_acquire+0x7c80/0x7c80 [ 390.403655][T11062] ? slab_free_freelist_hook+0x130/0x1b0 [ 390.409374][T11062] inet6_ioctl+0x110/0x280 [ 390.413857][T11062] ? inet6_getname+0x650/0x650 [ 390.419035][T11062] ? tomoyo_path_number_perm+0x4dc/0x590 [ 390.424746][T11062] ? tomoyo_path_number_perm+0x1ba/0x590 [ 390.430449][T11062] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 390.435985][T11062] sock_do_ioctl+0xd7/0x2f0 [ 390.440524][T11062] ? sock_show_fdinfo+0xb0/0xb0 [ 390.445453][T11062] sock_ioctl+0x623/0x7a0 [ 390.449844][T11062] ? sock_poll+0x3d0/0x3d0 [ 390.454317][T11062] ? bpf_lsm_file_ioctl+0x9/0x10 [ 390.459280][T11062] ? security_file_ioctl+0x80/0xa0 [ 390.464450][T11062] ? sock_poll+0x3d0/0x3d0 [ 390.468902][T11062] __se_sys_ioctl+0xfd/0x170 [ 390.473542][T11062] do_syscall_64+0x55/0xb0 [ 390.477987][T11062] ? clear_bhb_loop+0x40/0x90 [ 390.482774][T11062] ? clear_bhb_loop+0x40/0x90 [ 390.487493][T11062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.493425][T11062] RIP: 0033:0x7fb338b8efc9 [ 390.497866][T11062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.517504][T11062] RSP: 002b:00007fb336df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.525947][T11062] RAX: ffffffffffffffda RBX: 00007fb338de5fa0 RCX: 00007fb338b8efc9 [ 390.533939][T11062] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000004 [ 390.541968][T11062] RBP: 00007fb336df6090 R08: 0000000000000000 R09: 0000000000000000 [ 390.549964][T11062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.557961][T11062] R13: 00007fb338de6038 R14: 00007fb338de5fa0 R15: 00007fff1fbeeb98 [ 390.565986][T11062] [ 391.340268][T11083] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1821'. [ 391.755330][T11092] FAULT_INJECTION: forcing a failure. [ 391.755330][T11092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.772273][T11092] CPU: 1 PID: 11092 Comm: syz.2.1823 Not tainted syzkaller #0 [ 391.779818][T11092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 391.790004][T11092] Call Trace: [ 391.793318][T11092] [ 391.796302][T11092] dump_stack_lvl+0x16c/0x230 [ 391.801024][T11092] ? show_regs_print_info+0x20/0x20 [ 391.806262][T11092] ? load_image+0x3b0/0x3b0 [ 391.810812][T11092] ? __might_fault+0xaa/0x120 [ 391.815526][T11092] ? __lock_acquire+0x7c80/0x7c80 [ 391.820600][T11092] should_fail_ex+0x39d/0x4d0 [ 391.825336][T11092] _copy_from_user+0x2f/0xe0 [ 391.829978][T11092] ___sys_sendmsg+0x159/0x290 [ 391.834710][T11092] ? __sys_sendmsg+0x270/0x270 [ 391.839543][T11092] ? __lock_acquire+0x7c80/0x7c80 [ 391.844634][T11092] __se_sys_sendmsg+0x1a5/0x270 [ 391.849543][T11092] ? __x64_sys_sendmsg+0x80/0x80 [ 391.854632][T11092] ? lockdep_hardirqs_on+0x98/0x150 [ 391.859860][T11092] do_syscall_64+0x55/0xb0 [ 391.864299][T11092] ? clear_bhb_loop+0x40/0x90 [ 391.868990][T11092] ? clear_bhb_loop+0x40/0x90 [ 391.873683][T11092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.879594][T11092] RIP: 0033:0x7fee9018efc9 [ 391.884209][T11092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.903860][T11092] RSP: 002b:00007fee910b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.912298][T11092] RAX: ffffffffffffffda RBX: 00007fee903e5fa0 RCX: 00007fee9018efc9 [ 391.920290][T11092] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 391.928281][T11092] RBP: 00007fee910b2090 R08: 0000000000000000 R09: 0000000000000000 [ 391.936271][T11092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.944266][T11092] R13: 00007fee903e6038 R14: 00007fee903e5fa0 R15: 00007ffcaa9402a8 [ 391.952265][T11092] [ 392.036314][T11094] netlink: 'syz.1.1826': attribute type 41 has an invalid length. [ 392.198634][T11100] [ 392.201030][T11100] ============================================ [ 392.207270][T11100] WARNING: possible recursive locking detected [ 392.213421][T11100] syzkaller #0 Not tainted [ 392.217828][T11100] -------------------------------------------- [ 392.223969][T11100] syz.2.1828/11100 is trying to acquire lock: [ 392.230030][T11100] ffff888060435a38 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x96/0x6a0 [ 392.238918][T11100] [ 392.238918][T11100] but task is already holding lock: [ 392.246276][T11100] ffff888060435a38 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xca/0xea0 [ 392.255166][T11100] [ 392.255166][T11100] other info that might help us debug this: [ 392.263223][T11100] Possible unsafe locking scenario: [ 392.263223][T11100] [ 392.270680][T11100] CPU0 [ 392.273958][T11100] ---- [ 392.277329][T11100] lock(&trie->lock); [ 392.281421][T11100] lock(&trie->lock); [ 392.285489][T11100] [ 392.285489][T11100] *** DEADLOCK *** [ 392.285489][T11100] [ 392.293625][T11100] May be due to missing lock nesting notation [ 392.293625][T11100] [ 392.301939][T11100] 3 locks held by syz.2.1828/11100: [ 392.307129][T11100] #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x41d/0x720 [ 392.317073][T11100] #1: ffff888060435a38 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xca/0xea0 [ 392.326407][T11100] #2: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0xde/0x3c0 [ 392.335715][T11100] [ 392.335715][T11100] stack backtrace: [ 392.341598][T11100] CPU: 0 PID: 11100 Comm: syz.2.1828 Not tainted syzkaller #0 [ 392.349048][T11100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 392.359101][T11100] Call Trace: [ 392.362402][T11100] [ 392.365428][T11100] dump_stack_lvl+0x16c/0x230 [ 392.370112][T11100] ? show_regs_print_info+0x20/0x20 [ 392.375314][T11100] ? print_deadlock_bug+0x435/0x5d0 [ 392.380518][T11100] __lock_acquire+0x5d40/0x7c80 [ 392.385386][T11100] ? verify_lock_unused+0x140/0x140 [ 392.390591][T11100] ? mark_lock+0x94/0x320 [ 392.394925][T11100] ? verify_lock_unused+0x140/0x140 [ 392.400127][T11100] ? __lock_acquire+0x1260/0x7c80 [ 392.405163][T11100] lock_acquire+0x197/0x410 [ 392.409689][T11100] ? trie_delete_elem+0x96/0x6a0 [ 392.414636][T11100] ? verify_lock_unused+0x140/0x140 [ 392.419840][T11100] ? mark_lock+0x94/0x320 [ 392.424194][T11100] ? verify_lock_unused+0x140/0x140 [ 392.429395][T11100] ? read_lock_is_recursive+0x20/0x20 [ 392.434770][T11100] ? __lock_acquire+0x1260/0x7c80 [ 392.439795][T11100] ? should_fail_ex+0x288/0x4d0 [ 392.444655][T11100] _raw_spin_lock_irqsave+0xa8/0xf0 [ 392.449854][T11100] ? trie_delete_elem+0x96/0x6a0 [ 392.454798][T11100] ? _raw_spin_lock+0x40/0x40 [ 392.459480][T11100] trie_delete_elem+0x96/0x6a0 [ 392.464265][T11100] ? __cant_sleep+0x210/0x210 [ 392.468950][T11100] bpf_prog_19c411c901d4c64c+0x42/0x7f [ 392.474411][T11100] bpf_trace_run2+0x1d1/0x3c0 [ 392.479087][T11100] ? bpf_trace_run2+0xde/0x3c0 [ 392.483851][T11100] ? bpf_trace_run1+0x3b0/0x3b0 [ 392.488708][T11100] ? trie_update_elem+0x6d1/0xea0 [ 392.493745][T11100] ? percpu_ref_put+0x17e/0x230 [ 392.498594][T11100] ? trie_update_elem+0x6d1/0xea0 [ 392.503623][T11100] kfree+0xf8/0x1a0 [ 392.507437][T11100] trie_update_elem+0x6d1/0xea0 [ 392.512297][T11100] ? __lock_acquire+0x7c80/0x7c80 [ 392.517335][T11100] bpf_map_update_value+0x660/0x720 [ 392.522548][T11100] map_update_elem+0x57b/0x700 [ 392.527315][T11100] __sys_bpf+0x652/0x800 [ 392.531560][T11100] ? bpf_link_show_fdinfo+0x350/0x350 [ 392.536941][T11100] ? lock_chain_count+0x20/0x20 [ 392.541794][T11100] __x64_sys_bpf+0x7c/0x90 [ 392.546213][T11100] do_syscall_64+0x55/0xb0 [ 392.550650][T11100] ? clear_bhb_loop+0x40/0x90 [ 392.555354][T11100] ? clear_bhb_loop+0x40/0x90 [ 392.560037][T11100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.565952][T11100] RIP: 0033:0x7fee9018efc9 [ 392.570369][T11100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.589977][T11100] RSP: 002b:00007fee910b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 392.598394][T11100] RAX: ffffffffffffffda RBX: 00007fee903e5fa0 RCX: 00007fee9018efc9 [ 392.606372][T11100] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000002 [ 392.614344][T11100] RBP: 00007fee910b2090 R08: 0000000000000000 R09: 0000000000000000 [ 392.622401][T11100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.630383][T11100] R13: 00007fee903e6038 R14: 00007fee903e5fa0 R15: 00007ffcaa9402a8 [ 392.638368][T11100]