last executing test programs: 8.732571762s ago: executing program 0 (id=5623): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000008002000050000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000900), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000940)={r0, 0x0, &(0x7f0000000a40)=""/209}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001ac0), 0x0, 0x1, r0}, 0x38) (fail_nth: 7) 7.683227349s ago: executing program 1 (id=5629): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="b70200000a000040732ac0ff00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x37fb9f24, 0x40000}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0a00000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000031970000000300000095000000000000004b91a581a08b8a0c310325171cc726c0e3cabf007906e6d9819c907f07fb6fa4c38d95de5f89cb58c0f8634f31de84ea840635802cd2ca53bbc5dea2bf354051bcb9c3e55b4dfd822e5c303348880c7f2f0ca4e8eab6c5dddf061225a7968f577db373f1f516747270a9581d8ab8f34841e36931c8036c680c314578ba67e821a26f378d6ac410"], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e40)={r4, r2}, 0xc) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e1208002e0040001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000) r5 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x40049409, 0xe000000000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x5, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000780)='GPL\x00'}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYRES16=r3], 0x50) socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x22, 0x0, &(0x7f0000000480)="001122334455001122334456080045000028000000004006f8ce030000000a000002", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.406001278s ago: executing program 0 (id=5632): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000f8ffffff00000000000000008500000036000000950000"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1c1341, 0x0) write$cgroup_subtree(r1, 0x0, 0xfdef) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x8c, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x94f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000800)='GPL\x00'}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000ac0), &(0x7f0000000b00)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000bc0)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411cf26000100000000280000000000000000000000070000000144140707"], 0x48}, 0x200040c4) 7.170976031s ago: executing program 3 (id=5633): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x2112, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r3], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x210e, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000b40)={0x0, 0xe, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="d8000000180081054e81f782db44b9040220005c06007c09e8fe55a10a0015400100142603600e1208000b000a000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000cc0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000d40)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000e00)={'sit0\x00', @random="4f33e363a4b1"}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) 4.684084284s ago: executing program 1 (id=5634): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x5, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r2}, 0xc) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08030700000004000000000000000600142603600e120800110000810401110016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ed2f31b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x5, 0x8, 0x8, 0x40}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r2}, 0xc) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08030700000004000000000000000600142603600e120800110000810401110016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ed2f31b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) 4.542580498s ago: executing program 2 (id=5635): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d00)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x8ec0, 0x0, 0x0, 0x808e}, 0x40000100) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000002180)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)=[{0x0}], 0x1, &(0x7f0000000dc0)=""/229, 0xe5}, 0x40000004) close(r1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x4, 0xe, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000002040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002080)={0x2}, 0x8, 0x10, &(0x7f00000020c0), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002100)={r3, 0x702, 0x0, 0x0, &(0x7f0000002180), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0xe, 0x4, 0x3, 0x40002, 0x28, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x6, r4}, 0x38) sendmsg$inet(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208", 0x29}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 4.284796705s ago: executing program 3 (id=5638): r0 = syz_clone(0x29040, &(0x7f0000000080)="8a2c80bc4ed17ae476c7cc2b934dfe73ca12db36ff97ab36ded2764f753a8873dcd7a87888a1c3e7d71ec0e314596a5e6a6b5b44272e617225b7ee9c43504bf8b61f69f12e69ef48c1724ccd5588f48cc1132e93ecd514db87cb5ced9d2d60693b1d2d3598655af594aae70ff0b98d46e21ff3f705b071a66f8fe9e833d4b632908551e0d62aae", 0x87, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000340)="5bde3ba86310d6e5a85ae356192b6d2c1486492aa83b5f15e125980458591de383ac2eca852443e35275d9d89724418670b1e3a0f81403984a671a9ca2e7f399c983fe4d9b8cd5739e0a20e9ad9b26713964dfa45c4baf93a37d2fe50b6cc038a63c65f5b3e725b6fecd3408c12611d934073ba625f3aa0ce98940b4145955bbe22138c699c9442a985bd55be1194f24bf217d56a5bfe0c5c2b250bc55e413460dc7084c3362eb27c19776bf790ed569b8681ba269d30d85d7c77e493128153060428eac855119180643a4adfde54a94c89223fd31") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000017c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001800)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00'], 0x20) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000001840), 0x0) gettid() perf_event_open(&(0x7f0000001bc0)={0x2, 0x80, 0x67, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_config_ext={0x3829, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c40)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) perf_event_open(&(0x7f0000001c80)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4480}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2e, &(0x7f0000001d40)=r4, 0x4) recvmsg$unix(r4, &(0x7f0000001d80)={0x0, 0x0, 0x0}, 0x10002) socket$kcm(0x2, 0x5, 0x84) write$cgroup_int(r3, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001e80)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="2f0000000020000004000000", @ANYRES32=r2, @ANYBLOB="072eb08d930347d432ea207f27691aec71d1a969547719d63b35d593abf0e01906884b9b273b49969516e20d63523a4b97cd42965b06a95567fddd934204a9d02f3641527543ea3c244803ec6a42229d978c390571e94d107e73cdf629507fbd15eb4699b5e061a42b2d0675411001046946d45900ad90d6a8894e518c5f2d48c574930d2c271b8f721f077d6adff5121f701d194e474eaaa10feab63ee73dea4bf8a9351b16c6b542093359774877", @ANYRES64=0x0], 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001900)={r0, r2, 0x0, 0x4, &(0x7f00000018c0)='GPL\x00'}, 0x30) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000fff2c4f96a0aaa3f96d966676a48d09400"/44], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000400000000010088fd20968d", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x29, 0x7, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff0000000018110000", @ANYRES32=r6, @ANYRESOCT=r5, @ANYRES32=r6, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], &(0x7f0000000300)='GPL\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="19000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x1, 0xc, &(0x7f0000001a00)=ANY=[@ANYBLOB="d41b92ab8e5c99cc570764af5900004a285a05420000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb70400000000000085000000020000009500000000000000"], &(0x7f0000001a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x10, 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000002180)='GPL\x00', 0x2, 0xfd90, &(0x7f00000021c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000022c0)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x15, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r9, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x7, 0x400, 0x10, 0x523a, 0x800, r8, 0xc3b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0xc, 0x7, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x37e}, @jmp={0x5, 0x0, 0x5, 0x9, 0x3, 0xffffffffffffffe0, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x6, 0x2, 0x3, 0x20, 0xfffffffffffffff8}]}, &(0x7f0000001ac0)='GPL\x00', 0x6a9, 0x89, &(0x7f0000001dc0)=""/137, 0x41000, 0x1, '\x00', 0x0, @fallback=0x7, r3, 0x8, &(0x7f0000002000)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000002040)={0x2, 0x3, 0x400, 0x8}, 0x10, r10, r7, 0x7, &(0x7f0000002440)=[r11, r6, 0xffffffffffffffff], &(0x7f0000002480)=[{0x4, 0x4, 0xe, 0x4}, {0x2, 0x3, 0x4, 0x3}, {0x3, 0x2, 0x3, 0xb}, {0x5, 0x5, 0x8, 0x5331b7ec6f266420}, {0x4, 0x2, 0xc, 0x2}, {0x5, 0x4, 0xa, 0x5}, {0x4, 0x3, 0x1, 0x5}], 0x10, 0x8001}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b80)={r8, &(0x7f0000001ac0), &(0x7f0000001b00)=""/78, 0x4}, 0x20) 4.162365777s ago: executing program 1 (id=5639): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f91524", 0x12}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f00000001c0)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) (fail_nth: 7) 4.087360275s ago: executing program 0 (id=5640): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x102000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x2950b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1efb}, 0x11efa, 0x4, 0x96, 0x0, 0x2, 0xfefff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008108090f9becdb4cb92e0a4831771400000069bd6e002602eaf60d000100020400bf05", 0x29}], 0x1}, 0x0) 3.844455329s ago: executing program 1 (id=5641): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000040)=[{&(0x7f0000000080)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/133, 0x85}, {&(0x7f00000002c0)=""/54, 0x36}, {&(0x7f00000004c0)=""/97, 0x61}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x4}, 0x20) recvmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000001580)={0x0, 0x900, 0x0}, 0x0) 3.352164929s ago: executing program 1 (id=5642): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f00000000c0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="36f587018562a786b28923a02fab07ce048234d6ac20f852fd342680789e543554d98bb8f028089400a32f76980013ce8725261d0d333def80accc32f93d10e7e735dfa53bc179a1f07b6efdc1abc907f5cf4cdf", 0x54}, {&(0x7f00000001c0)="a403d2544890b545872e35e6c1721c5a0462029c8c1f546de13a977fdecb41005ca6c2cad5f9ecfd5eabe4acd13345c2f52ff3b01d9be4bde591301b5b2539537f63c6b0945f34050a881301a5f9412d6973069c142fefed0a78b3c4e321bbd6145f7677b80843b6cbaa69d48c47dd55d5e35521796c3e13eb13ffaf86d21ee6c5f2864b64f5fe6758e3b13586af6f28", 0x90}, {&(0x7f0000000280)="715ed1d2e808886b11ea1e4cf05a59c792fc98d3684c2805bb07ff590c38d72b69fa962fc0ede1db4805836a42cee8064c437cf4b63cc53d1b1cecae24c72507b6db7e37aaf940d31acc794aeb56a253f029e6b182bc0f858d56f5bbc034661b07ed4504e97cc62d4aa2ab716775fd9d89d7fbe42f55a13021b1c54d1789e8231f7b90118b40479fc3948e3d1661e5f2915300e8f7fb541d84980efdc09b12", 0x9f}], 0x3, &(0x7f0000000380)=[{0x78, 0x111, 0x9, "a7b4a4723894636c8ec9e83c0309ad4a4e2ad2d46c60fd8b2fd9e7d1bc5ad415df5529e2ae2e8d3d9d7473c1d9ae2a04b75e8a063b9e4123a068f5ae7ca5f9e7821b7c4b68bdda3c7c61d2b1d7eee2e5dfa0dc3bf22cd83780ef3bad7e29c6c4e042"}, {0x28, 0x104, 0x48f, "ce7866acd79d1bfa8b1430dd3af738373a99cc8b"}, {0xb0, 0x101, 0x400, "d92eb7ac9ade07c6b719d3f61f34cec3eb47dcd5640c26f0f497e3f9109a8b18b15d08093ac973b749903adf1475d4a565082da381890a7c90581f714e2fd00452f81afe213db88202b234d8d507ced1bd9f14be0ea4971ae547e019d357b3bc96d217041469295313b67e207a3b92cc4ced4148df2e98eb7b1dc5da540c3bb47003982f126ffa3f2c738499341b0f1f3def52fd271dfc1543135d0ece92"}, {0x30, 0x10e, 0x100, "d80bf2a0a4ef2b605d2054db348b3f824b4da27fafeabcdcb20f2c6903a298"}, {0x58, 0x10a, 0x5, "678ccf5261de4109023d52776bf32d544852803a595b33b061fa8cec85eae2d8dc248fa65fb157be99b1c63f158d107c22acff20ae1e9fea14590e4421859f213df8fe"}, {0x50, 0x117, 0x8, "ebc6f27b47c3ddf9d8fc204f0afab9d7080bb6d09b3762472096b8409a1c742db19de0590d7b1f393c7e3afbba54b23a4721e0214a64b9ad383e7871f3f2"}], 0x228}, 0x5) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x800, 0x0, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x4}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000980)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0x21, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfe3b}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x5}, @generic={0x5, 0x6, 0x3, 0x1, 0x40000000}, @call={0x85, 0x0, 0x0, 0x16}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @generic={0x7, 0x9, 0x9, 0x28c0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='syzkaller\x00', 0x5, 0x66, &(0x7f0000000900)=""/102, 0x41100, 0x20, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000cc0)={0x1, 0x0, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000e00)=[0xffffffffffffffff, r6, r7, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e40)=[{0x5, 0x1, 0xc, 0x7}, {0x3, 0x2, 0x5, 0x4}, {0x2, 0x1, 0x6, 0x7}, {0x4, 0x5, 0xf, 0x9}, {0x3, 0x5, 0x7}, {0x1, 0x1, 0xf, 0x6}], 0x10, 0x9}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001380)={r8, 0x20, &(0x7f0000001340)={&(0x7f0000001200), 0x0, 0x0, &(0x7f0000001240)=""/222, 0xde}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x13, 0x24, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x73a, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000010c0)='GPL\x00', 0x7, 0x42, &(0x7f0000001100)=""/66, 0x41100, 0x42, '\x00', r4, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000011c0)={0x1, 0x0, 0xa, 0x6}, 0x10, r9, r8, 0x3, 0x0, &(0x7f00000013c0)=[{0x0, 0x3, 0x8, 0xa}, {0x1, 0x3, 0x8}, {0x3, 0x2, 0xa, 0x8}], 0x10, 0x6}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000014c0)='./cgroup/syz0\x00', 0x200002, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001500), 0x8100, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000001540)={'syzkaller1\x00', 0x1000}) ioctl$TUNSETSTEERINGEBPF(r10, 0x800454e0, &(0x7f0000001580)=r8) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@base={0x10, 0xd, 0x6, 0x8, 0x800, r1, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001640)=r5, 0x4) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001680)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7f, '\x00', r4, r12, 0x5, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x11, 0x25, &(0x7f0000001700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x2, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7d1}, @generic={0x0, 0x3, 0x8, 0x7, 0xfff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff00}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xa9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xead}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5e88}, @map_fd={0x18, 0xb, 0x1, 0x0, r3}]}, &(0x7f0000001840)='GPL\x00', 0xdb, 0x72, &(0x7f0000001880)=""/114, 0x40f00, 0x4a, '\x00', r4, 0x0, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001900)={0x0, 0xd, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001940)=[r2, r6, r13], &(0x7f0000001980)=[{0x4, 0x3, 0x6, 0xa}, {0x4, 0x4, 0xc, 0x3}, {0x5, 0x4, 0x3, 0x6}], 0x10, 0x9}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) recvmsg$unix(r14, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/167, 0xa7}], 0x2, &(0x7f0000002bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x40000100) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000031c0)={r16, 0xe0, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002f00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002f40)=[0x0, 0x0, 0x0], 0x0, 0x13, &(0x7f0000002f80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000003000), &(0x7f0000003040), 0x8, 0x43, 0x8, 0x8, &(0x7f0000003080)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x1c, 0x1c, &(0x7f0000002c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x9, 0x1, 0x0, r6}, @alu={0x7, 0x1, 0x3, 0x0, 0x0, 0x20, 0x6}, @printk={@li}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002d80)='GPL\x00', 0x8001, 0xdc, &(0x7f0000002dc0)=""/220, 0x41100, 0x33, '\x00', r4, @fallback=0x4, r18, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003340)={{r3, 0xffffffffffffffff}, &(0x7f00000032c0), &(0x7f0000003300)=r17}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000035c0)={r2, 0x58, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r24 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', r20, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000038c0)={0x18, 0x2f, &(0x7f0000003380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r22}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r16}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r16}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x1f, 0x2, 0x0, r19, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0xc, 0x1, 0x9, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000003500)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x18, '\x00', r23, 0x0, r15, 0x8, &(0x7f0000003600)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000003640)={0x5, 0xf, 0x80000001, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000003840)=[r1, r24, 0xffffffffffffffff, r17, r19, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1], &(0x7f0000003880)=[{0x3, 0x2, 0x9, 0x7}, {0x5, 0x3, 0x2, 0x6}], 0x10, 0x7a}, 0x94) 3.254451939s ago: executing program 2 (id=5643): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="b70200000a000040732ac0ff00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x37fb9f24, 0x40000}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0a00000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000031970000000300000095000000000000004b91a581a08b8a0c310325171cc726c0e3cabf007906e6d9819c907f07fb6fa4c38d95de5f89cb58c0f8634f31de84ea840635802cd2ca53bbc5dea2bf354051bcb9c3e55b4dfd822e5c303348880c7f2f0ca4e8eab6c5dddf061225a7968f577db373f1f516747270a9581d8ab8f34841e36931c8036c680c314578ba67e821a26f378d6ac410"], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e40)={r3, r2}, 0xc) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e1208002e0040001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000) r4 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x40049409, 0xe000000000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x5, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000780)='GPL\x00'}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x22, 0x0, &(0x7f0000000480)="001122334455001122334456080045000028000000004006f8ce030000000a000002", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.788087447s ago: executing program 3 (id=5644): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0], 0xa0}, 0x4004881) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000001000000010000005c"], 0x70, 0x240040c0}, 0x4000000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f0000000380)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)="5e62ad657ddd26069e462ebcbea9dfede4fa26f950f234b67a42667b34155c86bd7d41a2605e45286f4bdfddaaccc5f5e43f161809a297e4d2fc1100c353c4b5743f33e24de544307e60bfbd5f3fdfdc949fc64633382271503fb5af3e4072659ba0194c47300558af1af21eea6ec8c33aebc5922bbf222a7c649c99108765e367463321b1dcb877ff077b91a7b8258c333f5c89", 0x94}], 0x2}, 0x40000) sendmsg$kcm(r4, &(0x7f00000004c0)={0x0, 0x60, &(0x7f0000000500)=[{&(0x7f0000000540)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x49, 0x49, 0x5, [@datasec={0x9, 0x1, 0x0, 0xf, 0x1, [{0x5, 0xffffffff, 0x81}], "f6"}, @ptr={0xa, 0x0, 0x0, 0x2, 0x2}, @enum64={0x2, 0x2, 0x0, 0x13, 0x0, 0x0, [{0xa, 0x8001, 0x1}, {0xd, 0x101, 0x5}]}]}, {0x0, [0x30, 0x61, 0x5f]}}, &(0x7f0000000900)=""/40, 0x69, 0x28, 0x1, 0x6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xc, 0x0, 0x7, 0x0, 0x23400, 0x1, 0xeeac, '\x00', r5, r6, 0x4, 0x1, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000bc0)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x8, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) perf_event_open(&(0x7f0000000f80)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000001080), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001100)={'sit0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x80}, 0x100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001340)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000001380)=0x4b) socketpair(0x1, 0x1, 0x0, &(0x7f00000013c0)) 2.222909674s ago: executing program 1 (id=5645): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000f8ffffff00000000000000008500000036000000950000"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1c1341, 0x0) write$cgroup_subtree(r1, 0x0, 0xfdef) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x8c, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x94f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000800)='GPL\x00'}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000ac0), &(0x7f0000000b00)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000bc0)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411cf26000100000000280000000000000000000000070000000144140707"], 0x48}, 0x200040c4) 2.109008276s ago: executing program 0 (id=5646): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x2112, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r3], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x210e, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000b40)={0x0, 0xe, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="d8000000180081054e81f782db44b9040220005c06007c09e8fe55a10a0015400100142603600e1208000b000a000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000cc0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000d40)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000e00)={'sit0\x00', @random="4f33e363a4b1"}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) 1.105794798s ago: executing program 2 (id=5647): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="02dcaecf8b0d5e961b0a138831e03f020033", 0x12}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) close(r1) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f00000001c0)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) 620.286187ms ago: executing program 2 (id=5648): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x0, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000900)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000940)=[0x0, 0x0], 0x0, 0x0, 0xe9, &(0x7f0000000980)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f00000009c0), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x2, 0x2, &(0x7f0000000b80)=@raw=[@call={0x85, 0x0, 0x0, 0x19}, @exit], &(0x7f0000000bc0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a40)=r3, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80)=r3, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4a618979d7dceed5, 0x4, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x76}, [@call={0x27, 0x0, 0x0, 0xffffff7f}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x99, &(0x7f00000006c0)=""/153, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xd, 0x9, &(0x7f0000000cc0)=@framed={{}, [@generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r6}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x35}]}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000600)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0xc070, 0x0, 0xffffffff, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r4, &(0x7f0000000280)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @private=0xa010101}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000380)="99", 0x1}], 0x1}, 0x20000040) sendmsg$inet(r4, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000500)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000580)="84", 0x1}], 0x1}, 0x8040) close(r4) sendmsg$inet(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030007002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 619.515687ms ago: executing program 3 (id=5649): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)=[{0x0}], 0x1, &(0x7f0000000dc0)=""/229, 0xe5}, 0x40000004) close(r1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x4, 0xe, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000002040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002080)={0x2}, 0x8, 0x10, &(0x7f00000020c0), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002100)={r3, 0x702, 0x0, 0x0, &(0x7f0000002180), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0xe, 0x4, 0x3, 0x40002, 0x28, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x6, r4}, 0x38) sendmsg$inet(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208", 0x29}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 553.795754ms ago: executing program 0 (id=5650): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0xfffffffffffffd8f, &(0x7f0000000680)=[{&(0x7f00000006c0)="5c00000015006b05c84e21000af32c6e021875f802000000050003800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x26, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="1100000014006b02000000d86e6c1d0002", 0x11}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="1100000014006b02000000d86e6c1d0002", 0x11}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x748b1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x3, 0x2}, 0x8000, 0xa, 0x43a1bd76, 0x3, 0x3, 0x6, 0x2, 0x0, 0x4, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x748b1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x3, 0x2}, 0x8000, 0xa, 0x43a1bd76, 0x3, 0x3, 0x6, 0x2, 0x0, 0x4, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xc7, 0xa000000}, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r2, &(0x7f0000000940)={&(0x7f0000000280)=@phonet={0x23, 0x4, 0x0, 0x24}, 0x80, 0x0, 0xfffffffffffffe6d, &(0x7f0000000300)=[@txtime={{0x0, 0x1, 0x3d, 0x3}}], 0x18}, 0x8000) recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)=""/171, 0xab}], 0x1}, 0x2000) r3 = socket$kcm(0xa, 0x0, 0x3a) sendmsg$kcm(r3, 0x0, 0x8080) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x900}, 0x0) socketpair(0x26, 0x80000, 0x0, &(0x7f0000000740)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000780), 0x4bd) (async) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000780), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f00000007c0)={0x0, 0x0}) close(r6) perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x101}, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000880), 0x127) socket$kcm(0x1e, 0x4, 0x0) (async) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r8, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0xc00}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0xc00}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)) 281.950312ms ago: executing program 2 (id=5651): sendmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001840)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000009c0)={&(0x7f0000000a00), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=""/179, 0x21001}], 0x12}, 0x0) sendmsg$inet(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)='>', 0x2afe0}], 0x1}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000015c0)={&(0x7f0000001600)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="14000000000000002900000043"], 0x18}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x40, &(0x7f00000000c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xac, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) sendmsg$kcm(r2, &(0x7f0000002a40)={&(0x7f0000000300)=@xdp={0x2c, 0x8, r3, 0xa}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)="b9d3e486b52c1ccec8104a96f2fb58881db0a5003c7a6906e5a1b868637f4345a92b9056160164dfb3c2b8bdd4", 0x2d}], 0x1, &(0x7f0000001800)=[{0xc0, 0x115, 0xb85f, "4300f8bb46114d5f938177568f1ae63fb8562218c92ad2fd8d4ebc232a4218bf5aaa39fe4dd936724dbc11247b167cc22ba6e3ee75b1558819455e170e5232a0c0ee6e05f98723e52e3c49c9d68af9ad0c751cf8165dc66544403ba437aa1de95dd12c95f91f72277a4e628dacec982beac66e9ac84f4706dd328be87b030b5a5916c9434268f3a3ed9b22e191f032dc8a501b548b7db3b46adb3948be442b465bfa4784a4f3eb150cdfa0"}, {0x28, 0x102, 0x6, "54402b81798184b299b4e6f34ec7dd4ab2e37db2cb"}, {0x40, 0x11, 0xfffffffc, "c602e36a78328fd1fe641504dcc32c19191fd727eaf04cedd8eeea47a65fef8d992b96ede65eed632dd630"}, {0x1010, 0x118, 0x1, "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"}, {0xf0, 0x102, 0x10, "6ba2ea83529e1b0a6f14ddc9f93cbe0c49cd85881626830a5fbee0002f9b4951c003681ecb82d03043ff89d916a75a8e153d43b2b556087f0fbe77004102897ccac25272832caabf913fa99e22bb77fbe7fb81908e636c503881bd6d117524127f3d2a0ece1f1b4befe58304eba095111972b79b2b95bffcd0a28ac5b1af0d7d2dced82ec612b0e2fce276be36b77b6e70fae8951c47cef14dddc4f7af5d72ef1c74d3a4170c02d330dc839349cef754466f85ac56b7f716a7e9460307576b4b9c2b019ae03eba59e95e7b3a63b5f101619a9835fd1c5dab4c3b4f"}, {0x10, 0xff, 0x6}], 0x1238}, 0x20000000) 1.09756ms ago: executing program 3 (id=5652): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000040)=[{&(0x7f0000000080)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/133, 0x85}, {&(0x7f00000002c0)=""/54, 0x36}, {&(0x7f00000004c0)=""/97, 0x61}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x4}, 0x20) recvmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=5653): r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000a40)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) kernel console output (not intermixed with test programs): kmem_cache_alloc_node+0x5e/0x320 [ 1261.584930][T20768] ? __alloc_skb+0x103/0x2c0 [ 1261.589540][T20768] __alloc_skb+0x103/0x2c0 [ 1261.593978][T20768] netlink_dump+0x1ee/0xec0 [ 1261.598506][T20768] ? rcu_is_watching+0x15/0xb0 [ 1261.603292][T20768] ? __mutex_lock+0x30d/0xce0 [ 1261.607986][T20768] ? netlink_lookup+0x200/0x200 [ 1261.612863][T20768] ? netlink_lookup+0x30/0x200 [ 1261.617754][T20768] ? netlink_lookup+0x30/0x200 [ 1261.622537][T20768] __netlink_dump_start+0x57c/0x7a0 [ 1261.627756][T20768] rtnetlink_rcv_msg+0xe19/0xf90 [ 1261.632718][T20768] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1261.637864][T20768] ? rtnl_stats_get+0x660/0x660 [ 1261.642734][T20768] ? rtnetlink_bind+0x80/0x80 [ 1261.647425][T20768] ? kasan_quarantine_put+0xd8/0x220 [ 1261.652728][T20768] ? lockdep_hardirqs_on+0x98/0x150 [ 1261.657943][T20768] ? slab_free_freelist_hook+0x154/0x240 [ 1261.663593][T20768] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1261.669609][T20768] ? lock_chain_count+0x20/0x20 [ 1261.674500][T20768] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1261.679895][T20768] ? lockdep_hardirqs_on+0x98/0x150 [ 1261.685113][T20768] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1261.690500][T20768] ? _local_bh_enable+0xa0/0xa0 [ 1261.695373][T20768] ? __dev_queue_xmit+0x1481/0x3a30 [ 1261.700630][T20768] ? __dev_queue_xmit+0x6d1/0x3a30 [ 1261.705797][T20768] ? rtnl_stats_get+0x660/0x660 [ 1261.710697][T20768] ? ref_tracker_free+0x686/0x830 [ 1261.715762][T20768] netlink_rcv_skb+0x235/0x4c0 [ 1261.720554][T20768] ? rtnetlink_bind+0x80/0x80 [ 1261.725336][T20768] ? netlink_ack+0x1160/0x1160 [ 1261.730126][T20768] ? __lock_acquire+0x7eb0/0x7eb0 [ 1261.735168][T20768] ? netlink_deliver_tap+0x2e/0x1b0 [ 1261.740414][T20768] netlink_unicast+0x856/0x9e0 [ 1261.745213][T20768] netlink_sendmsg+0x8d0/0xbf0 [ 1261.749998][T20768] ? netlink_getsockopt+0x590/0x590 [ 1261.755206][T20768] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1261.760787][T20768] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1261.766190][T20768] ? security_socket_sendmsg+0x80/0xa0 [ 1261.771675][T20768] ? netlink_getsockopt+0x590/0x590 [ 1261.776892][T20768] ____sys_sendmsg+0x61b/0x980 [ 1261.781706][T20768] ? __asan_memset+0x22/0x40 [ 1261.786316][T20768] ? __sys_sendmsg_sock+0x30/0x30 [ 1261.791352][T20768] ? __import_iovec+0x5f2/0x850 [ 1261.796232][T20768] ? import_iovec+0x73/0xa0 [ 1261.800750][T20768] ___sys_sendmsg+0x2a6/0x360 [ 1261.805441][T20768] ? get_pid_task+0x20/0x1e0 [ 1261.810054][T20768] ? __sys_sendmsg+0x2b0/0x2b0 [ 1261.814847][T20768] ? __lock_acquire+0x7eb0/0x7eb0 [ 1261.819907][T20768] __se_sys_sendmsg+0x1d0/0x2c0 [ 1261.824808][T20768] ? __x64_sys_sendmsg+0x80/0x80 [ 1261.829770][T20768] ? lockdep_hardirqs_on+0x98/0x150 [ 1261.834986][T20768] do_syscall_64+0x55/0xb0 [ 1261.839416][T20768] ? clear_bhb_loop+0x40/0x90 [ 1261.844108][T20768] ? clear_bhb_loop+0x40/0x90 [ 1261.848803][T20768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1261.854712][T20768] RIP: 0033:0x7fe492da8f19 [ 1261.859143][T20768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1261.878846][T20768] RSP: 002b:00007fe493d0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1261.887278][T20768] RAX: ffffffffffffffda RBX: 00007fe493025fa0 RCX: 00007fe492da8f19 [ 1261.895398][T20768] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1261.903393][T20768] RBP: 00007fe493d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1261.911377][T20768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1261.919379][T20768] R13: 00007fe493026038 R14: 00007fe493025fa0 R15: 00007ffc40112d58 [ 1261.927386][T20768] [ 1262.265279][T20782] netlink: 'syz.3.4466': attribute type 10 has an invalid length. [ 1263.865528][T20780] rxe_eth0 speed is unknown, defaulting to 1000 [ 1264.093780][T20801] syzkaller0: entered promiscuous mode [ 1264.099657][T20801] syzkaller0: entered allmulticast mode [ 1266.207128][T20808] FAULT_INJECTION: forcing a failure. [ 1266.207128][T20808] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.226448][T20813] netlink: 'syz.3.4475': attribute type 10 has an invalid length. [ 1266.247489][T20808] CPU: 0 PID: 20808 Comm: syz.1.4473 Not tainted syzkaller #0 [ 1266.255027][T20808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1266.265137][T20808] Call Trace: [ 1266.268452][T20808] [ 1266.271422][T20808] dump_stack_lvl+0x18c/0x250 [ 1266.276161][T20808] ? show_regs_print_info+0x20/0x20 [ 1266.281408][T20808] ? load_image+0x420/0x420 [ 1266.285965][T20808] ? __might_sleep+0xe0/0xe0 [ 1266.290602][T20808] ? __lock_acquire+0x7eb0/0x7eb0 [ 1266.295679][T20808] should_fail_ex+0x394/0x4c0 [ 1266.300401][T20808] should_failslab+0x9/0x20 [ 1266.304938][T20808] slab_pre_alloc_hook+0x59/0x300 [ 1266.310003][T20808] ? lock_chain_count+0x20/0x20 [ 1266.314893][T20808] kmem_cache_alloc_node+0x5e/0x320 [ 1266.320106][T20808] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1266.325491][T20808] ? __alloc_skb+0x103/0x2c0 [ 1266.330101][T20808] __alloc_skb+0x103/0x2c0 [ 1266.334531][T20808] netlink_ack+0x377/0x1160 [ 1266.339053][T20808] ? __dev_queue_xmit+0x6d1/0x3a30 [ 1266.344196][T20808] ? netlink_dump+0xec0/0xec0 [ 1266.348912][T20808] ? ref_tracker_free+0x686/0x830 [ 1266.354045][T20808] netlink_rcv_skb+0x2b3/0x4c0 [ 1266.358818][T20808] ? rtnetlink_bind+0x80/0x80 [ 1266.363505][T20808] ? netlink_ack+0x1160/0x1160 [ 1266.368286][T20808] ? __lock_acquire+0x7eb0/0x7eb0 [ 1266.373327][T20808] ? netlink_deliver_tap+0x2e/0x1b0 [ 1266.378543][T20808] netlink_unicast+0x856/0x9e0 [ 1266.383334][T20808] netlink_sendmsg+0x8d0/0xbf0 [ 1266.388114][T20808] ? netlink_getsockopt+0x590/0x590 [ 1266.393326][T20808] ? apparmor_socket_sendmsg+0x170/0x330 [ 1266.398976][T20808] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1266.404274][T20808] ? security_socket_sendmsg+0x80/0xa0 [ 1266.409748][T20808] ? netlink_getsockopt+0x590/0x590 [ 1266.414957][T20808] ____sys_sendmsg+0x61b/0x980 [ 1266.419751][T20808] ? __asan_memset+0x22/0x40 [ 1266.424358][T20808] ? __sys_sendmsg_sock+0x30/0x30 [ 1266.429390][T20808] ? __import_iovec+0x5f2/0x850 [ 1266.434263][T20808] ? import_iovec+0x73/0xa0 [ 1266.438782][T20808] ___sys_sendmsg+0x2a6/0x360 [ 1266.443470][T20808] ? get_pid_task+0x20/0x1e0 [ 1266.448077][T20808] ? __sys_sendmsg+0x2b0/0x2b0 [ 1266.452865][T20808] ? __lock_acquire+0x7eb0/0x7eb0 [ 1266.457946][T20808] __se_sys_sendmsg+0x1d0/0x2c0 [ 1266.462840][T20808] ? __x64_sys_sendmsg+0x80/0x80 [ 1266.467802][T20808] ? lockdep_hardirqs_on+0x98/0x150 [ 1266.473013][T20808] do_syscall_64+0x55/0xb0 [ 1266.477454][T20808] ? clear_bhb_loop+0x40/0x90 [ 1266.482145][T20808] ? clear_bhb_loop+0x40/0x90 [ 1266.486840][T20808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1266.492746][T20808] RIP: 0033:0x7fb9b87a8f19 [ 1266.497178][T20808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1266.517057][T20808] RSP: 002b:00007fb9b960a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1266.525485][T20808] RAX: ffffffffffffffda RBX: 00007fb9b8a25fa0 RCX: 00007fb9b87a8f19 [ 1266.533556][T20808] RDX: 0000000020004080 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 1266.541539][T20808] RBP: 00007fb9b960a090 R08: 0000000000000000 R09: 0000000000000000 [ 1266.549529][T20808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1266.557599][T20808] R13: 00007fb9b8a26038 R14: 00007fb9b8a25fa0 R15: 00007fff6fafebd8 [ 1266.565595][T20808] [ 1267.017942][T20825] netlink: 'syz.1.4478': attribute type 21 has an invalid length. [ 1267.070815][T20825] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4478'. [ 1267.144697][T20828] sit0: left promiscuous mode [ 1267.281286][T20825] sit0: entered promiscuous mode [ 1268.692194][T20838] rxe_eth0 speed is unknown, defaulting to 1000 [ 1268.754033][T20857] netlink: 'syz.2.4486': attribute type 10 has an invalid length. [ 1269.358277][T20860] syzkaller0: entered promiscuous mode [ 1269.364168][T20860] syzkaller0: entered allmulticast mode [ 1269.374476][T20849] rxe_eth0 speed is unknown, defaulting to 1000 [ 1271.340129][T20853] rxe_eth0 speed is unknown, defaulting to 1000 [ 1272.246939][T20873] netlink: 'syz.2.4492': attribute type 21 has an invalid length. [ 1272.261986][T20873] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4492'. [ 1272.386446][T20873] sit0: left promiscuous mode [ 1272.652749][T20876] sit0: entered promiscuous mode [ 1273.021489][T20880] netlink: 'syz.2.4494': attribute type 21 has an invalid length. [ 1273.046161][T20880] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4494'. [ 1273.142222][T20880] sit0: left promiscuous mode [ 1273.409157][T20885] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1273.416530][T20885] IPv6: NLM_F_CREATE should be set when creating new route [ 1273.423897][T20885] IPv6: NLM_F_CREATE should be set when creating new route [ 1273.431264][T20885] IPv6: NLM_F_CREATE should be set when creating new route [ 1273.471038][T20882] netlink: 'syz.1.4495': attribute type 9 has an invalid length. [ 1273.500688][T20887] sit0: entered promiscuous mode [ 1273.505942][T20882] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4495'. [ 1274.432543][T20891] syzkaller0: entered promiscuous mode [ 1274.447521][T20891] syzkaller0: entered allmulticast mode [ 1277.143363][T20901] rxe_eth0 speed is unknown, defaulting to 1000 [ 1277.154916][T20915] FAULT_INJECTION: forcing a failure. [ 1277.154916][T20915] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.168519][T20915] CPU: 0 PID: 20915 Comm: syz.2.4504 Not tainted syzkaller #0 [ 1277.176025][T20915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1277.186095][T20915] Call Trace: [ 1277.189384][T20915] [ 1277.192324][T20915] dump_stack_lvl+0x18c/0x250 [ 1277.197023][T20915] ? show_regs_print_info+0x20/0x20 [ 1277.202234][T20915] ? load_image+0x420/0x420 [ 1277.206751][T20915] ? __might_sleep+0xe0/0xe0 [ 1277.211353][T20915] ? __lock_acquire+0x7eb0/0x7eb0 [ 1277.216394][T20915] should_fail_ex+0x394/0x4c0 [ 1277.221085][T20915] should_failslab+0x9/0x20 [ 1277.225599][T20915] slab_pre_alloc_hook+0x59/0x300 [ 1277.230892][T20915] ? finish_task_switch+0x262/0x8f0 [ 1277.236103][T20915] ? rtnl_newlink+0x10d/0x2170 [ 1277.240879][T20915] __kmem_cache_alloc_node+0x53/0x260 [ 1277.246349][T20915] ? rtnl_newlink+0x10d/0x2170 [ 1277.251123][T20915] kmalloc_trace+0x2a/0xe0 [ 1277.255559][T20915] rtnl_newlink+0x10d/0x2170 [ 1277.260181][T20915] ? __mutex_lock+0x96e/0xce0 [ 1277.264877][T20915] ? __lock_acquire+0x7eb0/0x7eb0 [ 1277.269922][T20915] ? do_raw_spin_lock+0x11f/0x2b0 [ 1277.274958][T20915] ? rtnl_setlink+0x4e0/0x4e0 [ 1277.279643][T20915] ? __rwlock_init+0x150/0x150 [ 1277.284421][T20915] ? do_raw_spin_unlock+0x121/0x230 [ 1277.289635][T20915] ? __mutex_lock+0x978/0xce0 [ 1277.294319][T20915] ? __mutex_lock+0x4d2/0xce0 [ 1277.299010][T20915] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 1277.304140][T20915] ? mutex_lock_nested+0x20/0x20 [ 1277.309109][T20915] ? rtnl_setlink+0x4e0/0x4e0 [ 1277.313812][T20915] rtnetlink_rcv_msg+0x843/0xf90 [ 1277.318760][T20915] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1277.323886][T20915] ? rtnetlink_bind+0x80/0x80 [ 1277.328571][T20915] ? kasan_quarantine_put+0xd8/0x220 [ 1277.333873][T20915] ? lockdep_hardirqs_on+0x98/0x150 [ 1277.339087][T20915] ? slab_free_freelist_hook+0x154/0x240 [ 1277.344764][T20915] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1277.350777][T20915] ? lock_chain_count+0x20/0x20 [ 1277.355640][T20915] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1277.361028][T20915] ? lockdep_hardirqs_on+0x98/0x150 [ 1277.366238][T20915] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1277.371619][T20915] ? _local_bh_enable+0xa0/0xa0 [ 1277.376491][T20915] ? __dev_queue_xmit+0x1481/0x3a30 [ 1277.381798][T20915] ? __dev_queue_xmit+0x6d1/0x3a30 [ 1277.387023][T20915] ? ref_tracker_free+0x686/0x830 [ 1277.392078][T20915] netlink_rcv_skb+0x235/0x4c0 [ 1277.396856][T20915] ? rtnetlink_bind+0x80/0x80 [ 1277.401548][T20915] ? netlink_ack+0x1160/0x1160 [ 1277.406337][T20915] ? __lock_acquire+0x7eb0/0x7eb0 [ 1277.411386][T20915] ? netlink_deliver_tap+0x2e/0x1b0 [ 1277.416600][T20915] netlink_unicast+0x856/0x9e0 [ 1277.421397][T20915] netlink_sendmsg+0x8d0/0xbf0 [ 1277.426179][T20915] ? netlink_getsockopt+0x590/0x590 [ 1277.431393][T20915] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1277.436957][T20915] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1277.442258][T20915] ? security_socket_sendmsg+0x80/0xa0 [ 1277.447731][T20915] ? netlink_getsockopt+0x590/0x590 [ 1277.452952][T20915] ____sys_sendmsg+0x61b/0x980 [ 1277.457736][T20915] ? __asan_memset+0x22/0x40 [ 1277.462342][T20915] ? __sys_sendmsg_sock+0x30/0x30 [ 1277.467376][T20915] ? __import_iovec+0x5f2/0x850 [ 1277.472251][T20915] ? import_iovec+0x73/0xa0 [ 1277.476773][T20915] ___sys_sendmsg+0x2a6/0x360 [ 1277.481466][T20915] ? get_pid_task+0x20/0x1e0 [ 1277.486075][T20915] ? __sys_sendmsg+0x2b0/0x2b0 [ 1277.490869][T20915] ? __lock_acquire+0x7eb0/0x7eb0 [ 1277.495933][T20915] __se_sys_sendmsg+0x1d0/0x2c0 [ 1277.500803][T20915] ? __x64_sys_sendmsg+0x80/0x80 [ 1277.505777][T20915] ? lockdep_hardirqs_on+0x98/0x150 [ 1277.511012][T20915] do_syscall_64+0x55/0xb0 [ 1277.515446][T20915] ? clear_bhb_loop+0x40/0x90 [ 1277.520143][T20915] ? clear_bhb_loop+0x40/0x90 [ 1277.524840][T20915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1277.530751][T20915] RIP: 0033:0x7fd5ceba8f19 [ 1277.535266][T20915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1277.554883][T20915] RSP: 002b:00007fd5cfacb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1277.563310][T20915] RAX: ffffffffffffffda RBX: 00007fd5cee25fa0 RCX: 00007fd5ceba8f19 [ 1277.571316][T20915] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1277.579315][T20915] RBP: 00007fd5cfacb090 R08: 0000000000000000 R09: 0000000000000000 [ 1277.587394][T20915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1277.595378][T20915] R13: 00007fd5cee26038 R14: 00007fd5cee25fa0 R15: 00007fffd7344218 [ 1277.603377][T20915] [ 1277.795698][T20920] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4507'. [ 1278.172245][T20927] netlink: 'syz.1.4508': attribute type 21 has an invalid length. [ 1278.480081][T20939] netlink: 'syz.2.4512': attribute type 8 has an invalid length. [ 1278.487858][T20927] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4508'. [ 1278.497583][T20935] sit0: left promiscuous mode [ 1278.582182][T20939] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4512'. [ 1278.813370][T20927] sit0: entered promiscuous mode [ 1279.403692][T20947] syzkaller0: entered promiscuous mode [ 1279.415334][T20947] syzkaller0: entered allmulticast mode [ 1283.190980][T20962] netlink: 'syz.2.4517': attribute type 10 has an invalid length. [ 1283.211726][T20962] dummy0: entered promiscuous mode [ 1283.223337][T20962] dummy0: entered allmulticast mode [ 1283.230853][T20962] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1284.109924][T20975] rxe_eth0 speed is unknown, defaulting to 1000 [ 1284.174992][T20973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1284.182331][T20973] IPv6: NLM_F_CREATE should be set when creating new route [ 1284.189725][T20973] IPv6: NLM_F_CREATE should be set when creating new route [ 1284.197025][T20973] IPv6: NLM_F_CREATE should be set when creating new route [ 1284.278516][T20973] netlink: 'syz.0.4521': attribute type 9 has an invalid length. [ 1284.323273][T20973] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4521'. [ 1284.364094][T20982] netlink: 'syz.2.4523': attribute type 21 has an invalid length. [ 1284.394920][T20982] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4523'. [ 1284.513318][T20979] sit0: left promiscuous mode [ 1284.809891][T20982] sit0: entered promiscuous mode [ 1284.838562][T20990] FAULT_INJECTION: forcing a failure. [ 1284.838562][T20990] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.882046][T20990] CPU: 1 PID: 20990 Comm: syz.0.4526 Not tainted syzkaller #0 [ 1284.889593][T20990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1284.899685][T20990] Call Trace: [ 1284.902985][T20990] [ 1284.905937][T20990] dump_stack_lvl+0x18c/0x250 [ 1284.910652][T20990] ? show_regs_print_info+0x20/0x20 [ 1284.915881][T20990] ? load_image+0x420/0x420 [ 1284.920421][T20990] ? __might_sleep+0xe0/0xe0 [ 1284.925038][T20990] ? __lock_acquire+0x7eb0/0x7eb0 [ 1284.930229][T20990] should_fail_ex+0x394/0x4c0 [ 1284.934973][T20990] should_failslab+0x9/0x20 [ 1284.939524][T20990] slab_pre_alloc_hook+0x59/0x300 [ 1284.944593][T20990] ? __lock_acquire+0x7eb0/0x7eb0 [ 1284.949676][T20990] kmem_cache_alloc_node+0x5e/0x320 [ 1284.954907][T20990] ? __alloc_skb+0x103/0x2c0 [ 1284.959624][T20990] __alloc_skb+0x103/0x2c0 [ 1284.964083][T20990] netlink_sendmsg+0x66a/0xbf0 [ 1284.968882][T20990] ? netlink_getsockopt+0x590/0x590 [ 1284.974102][T20990] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1284.979695][T20990] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1284.985011][T20990] ? security_socket_sendmsg+0x80/0xa0 [ 1284.990503][T20990] ? netlink_getsockopt+0x590/0x590 [ 1284.995727][T20990] ____sys_sendmsg+0x61b/0x980 [ 1285.000528][T20990] ? __asan_memset+0x22/0x40 [ 1285.005155][T20990] ? __sys_sendmsg_sock+0x30/0x30 [ 1285.010205][T20990] ? __import_iovec+0x5f2/0x850 [ 1285.015093][T20990] ? import_iovec+0x73/0xa0 [ 1285.019629][T20990] ___sys_sendmsg+0x2a6/0x360 [ 1285.024345][T20990] ? __sys_sendmsg+0x2b0/0x2b0 [ 1285.029167][T20990] ? __lock_acquire+0x7eb0/0x7eb0 [ 1285.034259][T20990] __se_sys_sendmsg+0x1d0/0x2c0 [ 1285.039143][T20990] ? __x64_sys_sendmsg+0x80/0x80 [ 1285.044212][T20990] ? lockdep_hardirqs_on+0x98/0x150 [ 1285.049439][T20990] do_syscall_64+0x55/0xb0 [ 1285.053883][T20990] ? clear_bhb_loop+0x40/0x90 [ 1285.058593][T20990] ? clear_bhb_loop+0x40/0x90 [ 1285.063308][T20990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1285.069227][T20990] RIP: 0033:0x7f84209a8f19 [ 1285.073676][T20990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.093416][T20990] RSP: 002b:00007f8421899028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1285.101961][T20990] RAX: ffffffffffffffda RBX: 00007f8420c25fa0 RCX: 00007f84209a8f19 [ 1285.109972][T20990] RDX: 0000000000098010 RSI: 0000200000000900 RDI: 0000000000000003 [ 1285.117971][T20990] RBP: 00007f8421899090 R08: 0000000000000000 R09: 0000000000000000 [ 1285.125968][T20990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.133980][T20990] R13: 00007f8420c26038 R14: 00007f8420c25fa0 R15: 00007ffd7d7cca28 [ 1285.142021][T20990] [ 1286.123445][T21002] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4527'. [ 1286.320851][T21009] syz.2.4531 uses obsolete (PF_INET,SOCK_PACKET) [ 1287.065500][T20999] syzkaller0: entered promiscuous mode [ 1287.075065][T20999] syzkaller0: entered allmulticast mode [ 1289.244279][T21031] netlink: 'syz.2.4536': attribute type 21 has an invalid length. [ 1289.276086][T21031] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4536'. [ 1289.414156][T21031] sit0: left promiscuous mode [ 1290.397538][T21035] sit0: entered promiscuous mode [ 1291.344041][T21033] rxe_eth0 speed is unknown, defaulting to 1000 [ 1291.417619][T21057] netlink: 'syz.1.4542': attribute type 10 has an invalid length. [ 1291.666829][T21057] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1291.887644][T21059] netlink: 'syz.0.4543': attribute type 10 has an invalid length. [ 1291.913245][T21059] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4543'. [ 1292.000155][T21059] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1292.252060][T21069] FAULT_INJECTION: forcing a failure. [ 1292.252060][T21069] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.274511][T21069] CPU: 0 PID: 21069 Comm: syz.0.4546 Not tainted syzkaller #0 [ 1292.282057][T21069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1292.292605][T21069] Call Trace: [ 1292.295924][T21069] [ 1292.299055][T21069] dump_stack_lvl+0x18c/0x250 [ 1292.303764][T21069] ? show_regs_print_info+0x20/0x20 [ 1292.308983][T21069] ? load_image+0x420/0x420 [ 1292.313501][T21069] ? __might_sleep+0xe0/0xe0 [ 1292.318109][T21069] ? __lock_acquire+0x7eb0/0x7eb0 [ 1292.323152][T21069] should_fail_ex+0x394/0x4c0 [ 1292.327943][T21069] should_failslab+0x9/0x20 [ 1292.332456][T21069] slab_pre_alloc_hook+0x59/0x300 [ 1292.337498][T21069] kmem_cache_alloc_node+0x5e/0x320 [ 1292.342733][T21069] ? __alloc_skb+0x103/0x2c0 [ 1292.347341][T21069] __alloc_skb+0x103/0x2c0 [ 1292.351777][T21069] netlink_dump+0x1ee/0xec0 [ 1292.356300][T21069] ? rcu_is_watching+0x15/0xb0 [ 1292.361106][T21069] ? __mutex_lock+0x30d/0xce0 [ 1292.366057][T21069] ? netlink_lookup+0x200/0x200 [ 1292.370933][T21069] ? lock_chain_count+0x20/0x20 [ 1292.375821][T21069] ? netlink_lookup+0x30/0x200 [ 1292.380616][T21069] ? netlink_lookup+0x30/0x200 [ 1292.385410][T21069] __netlink_dump_start+0x57c/0x7a0 [ 1292.390636][T21069] unix_diag_handler_dump+0x1ab/0x900 [ 1292.396035][T21069] ? sock_diag_lock_handler+0x19/0x280 [ 1292.401512][T21069] ? __unix_recvmsg+0xb0/0xb0 [ 1292.406204][T21069] ? unix_diag_handler_dump+0x900/0x900 [ 1292.411769][T21069] ? sock_diag_lock_handler+0x19/0x280 [ 1292.417248][T21069] ? __unix_recvmsg+0xb0/0xb0 [ 1292.421938][T21069] sock_diag_rcv_msg+0x3d3/0x5f0 [ 1292.426895][T21069] netlink_rcv_skb+0x235/0x4c0 [ 1292.431672][T21069] ? sock_diag_bind+0xb0/0xb0 [ 1292.436376][T21069] ? netlink_ack+0x1160/0x1160 [ 1292.441160][T21069] ? __lock_acquire+0x7eb0/0x7eb0 [ 1292.446209][T21069] ? netlink_deliver_tap+0x2e/0x1b0 [ 1292.451424][T21069] sock_diag_rcv+0x2a/0x40 [ 1292.455859][T21069] netlink_unicast+0x856/0x9e0 [ 1292.460660][T21069] netlink_sendmsg+0x8d0/0xbf0 [ 1292.465448][T21069] ? netlink_getsockopt+0x590/0x590 [ 1292.470658][T21069] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1292.476227][T21069] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1292.481532][T21069] ? security_socket_sendmsg+0x80/0xa0 [ 1292.487179][T21069] ? netlink_getsockopt+0x590/0x590 [ 1292.492392][T21069] ____sys_sendmsg+0x61b/0x980 [ 1292.497182][T21069] ? __asan_memset+0x22/0x40 [ 1292.501795][T21069] ? __sys_sendmsg_sock+0x30/0x30 [ 1292.506832][T21069] ? __import_iovec+0x5f2/0x850 [ 1292.511710][T21069] ? import_iovec+0x73/0xa0 [ 1292.516230][T21069] ___sys_sendmsg+0x2a6/0x360 [ 1292.520915][T21069] ? get_pid_task+0x20/0x1e0 [ 1292.525553][T21069] ? __sys_sendmsg+0x2b0/0x2b0 [ 1292.530350][T21069] ? __lock_acquire+0x7eb0/0x7eb0 [ 1292.535417][T21069] __se_sys_sendmsg+0x1d0/0x2c0 [ 1292.540288][T21069] ? __x64_sys_sendmsg+0x80/0x80 [ 1292.545275][T21069] ? lockdep_hardirqs_on+0x98/0x150 [ 1292.550532][T21069] do_syscall_64+0x55/0xb0 [ 1292.554973][T21069] ? clear_bhb_loop+0x40/0x90 [ 1292.559667][T21069] ? clear_bhb_loop+0x40/0x90 [ 1292.564364][T21069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1292.570285][T21069] RIP: 0033:0x7f84209a8f19 [ 1292.574715][T21069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.594335][T21069] RSP: 002b:00007f8421899028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1292.602768][T21069] RAX: ffffffffffffffda RBX: 00007f8420c25fa0 RCX: 00007f84209a8f19 [ 1292.610847][T21069] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000000000000003 [ 1292.618831][T21069] RBP: 00007f8421899090 R08: 0000000000000000 R09: 0000000000000000 [ 1292.626812][T21069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1292.634877][T21069] R13: 00007f8420c26038 R14: 00007f8420c25fa0 R15: 00007ffd7d7cca28 [ 1292.642876][T21069] [ 1292.844357][T21066] syzkaller0: entered promiscuous mode [ 1292.863314][T21066] syzkaller0: entered allmulticast mode [ 1295.093435][T21074] netlink: 'syz.1.4548': attribute type 21 has an invalid length. [ 1295.103865][T21074] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4548'. [ 1295.114215][T21078] sit0: left promiscuous mode [ 1295.153259][T21079] sit0: entered promiscuous mode [ 1296.232669][T21108] netlink: 'syz.0.4557': attribute type 10 has an invalid length. [ 1296.470822][T21108] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1297.122876][T21094] rxe_eth0 speed is unknown, defaulting to 1000 [ 1297.416949][T21113] netlink: 'syz.2.4560': attribute type 21 has an invalid length. [ 1297.435189][T21113] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4560'. [ 1297.531642][T21112] sit0: left promiscuous mode [ 1297.946633][T21113] sit0: entered promiscuous mode [ 1298.080557][T21117] netlink: 'syz.0.4561': attribute type 10 has an invalid length. [ 1298.153272][T21121] syzkaller0: entered promiscuous mode [ 1298.160388][T21121] syzkaller0: entered allmulticast mode [ 1300.555977][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.562351][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.713738][T21142] netlink: 'syz.3.4569': attribute type 10 has an invalid length. [ 1301.700999][T21144] rxe_eth0 speed is unknown, defaulting to 1000 [ 1302.238334][T21173] FAULT_INJECTION: forcing a failure. [ 1302.238334][T21173] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.251318][T21173] CPU: 1 PID: 21173 Comm: syz.2.4582 Not tainted syzkaller #0 [ 1302.258910][T21173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1302.269004][T21173] Call Trace: [ 1302.272318][T21173] [ 1302.275284][T21173] dump_stack_lvl+0x18c/0x250 [ 1302.280012][T21173] ? show_regs_print_info+0x20/0x20 [ 1302.285250][T21173] ? load_image+0x420/0x420 [ 1302.289792][T21173] ? __might_sleep+0xe0/0xe0 [ 1302.294424][T21173] ? __lock_acquire+0x7eb0/0x7eb0 [ 1302.299493][T21173] should_fail_ex+0x394/0x4c0 [ 1302.304220][T21173] should_failslab+0x9/0x20 [ 1302.308761][T21173] slab_pre_alloc_hook+0x59/0x300 [ 1302.313826][T21173] ? rtnl_newlink+0x10d/0x2170 [ 1302.318633][T21173] __kmem_cache_alloc_node+0x53/0x260 [ 1302.324051][T21173] ? rtnl_newlink+0x10d/0x2170 [ 1302.328852][T21173] kmalloc_trace+0x2a/0xe0 [ 1302.333325][T21173] rtnl_newlink+0x10d/0x2170 [ 1302.337952][T21173] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1302.344078][T21173] ? verify_lock_unused+0x140/0x140 [ 1302.349323][T21173] ? __mutex_trylock_common+0x160/0x270 [ 1302.354903][T21173] ? rtnl_setlink+0x4e0/0x4e0 [ 1302.359629][T21173] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1302.365822][T21173] ? rcu_is_watching+0x15/0xb0 [ 1302.370629][T21173] ? trace_contention_end+0x39/0xe0 [ 1302.375861][T21173] ? __mutex_lock+0x30d/0xce0 [ 1302.380587][T21173] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 1302.385738][T21173] ? mutex_lock_nested+0x20/0x20 [ 1302.390721][T21173] ? rtnl_setlink+0x4e0/0x4e0 [ 1302.395429][T21173] rtnetlink_rcv_msg+0x843/0xf90 [ 1302.400403][T21173] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1302.405564][T21173] ? rtnetlink_bind+0x80/0x80 [ 1302.410278][T21173] ? kasan_quarantine_put+0xd8/0x220 [ 1302.415609][T21173] ? lockdep_hardirqs_on+0x98/0x150 [ 1302.420845][T21173] ? slab_free_freelist_hook+0x154/0x240 [ 1302.426516][T21173] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1302.432542][T21173] ? lock_chain_count+0x20/0x20 [ 1302.437444][T21173] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1302.442855][T21173] ? lockdep_hardirqs_on+0x98/0x150 [ 1302.448090][T21173] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1302.453509][T21173] ? _local_bh_enable+0xa0/0xa0 [ 1302.458409][T21173] ? __dev_queue_xmit+0x1481/0x3a30 [ 1302.463649][T21173] ? __dev_queue_xmit+0x6d1/0x3a30 [ 1302.468811][T21173] ? ref_tracker_free+0x686/0x830 [ 1302.473891][T21173] netlink_rcv_skb+0x235/0x4c0 [ 1302.478697][T21173] ? rtnetlink_bind+0x80/0x80 [ 1302.483420][T21173] ? netlink_ack+0x1160/0x1160 [ 1302.488232][T21173] ? __lock_acquire+0x7eb0/0x7eb0 [ 1302.493324][T21173] ? netlink_deliver_tap+0x2e/0x1b0 [ 1302.498742][T21173] netlink_unicast+0x856/0x9e0 [ 1302.503574][T21173] netlink_sendmsg+0x8d0/0xbf0 [ 1302.508385][T21173] ? netlink_getsockopt+0x590/0x590 [ 1302.513624][T21173] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1302.519214][T21173] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1302.524535][T21173] ? security_socket_sendmsg+0x80/0xa0 [ 1302.530051][T21173] ? netlink_getsockopt+0x590/0x590 [ 1302.535286][T21173] ____sys_sendmsg+0x61b/0x980 [ 1302.540091][T21173] ? __asan_memset+0x22/0x40 [ 1302.544724][T21173] ? __sys_sendmsg_sock+0x30/0x30 [ 1302.549787][T21173] ? __import_iovec+0x5f2/0x850 [ 1302.554690][T21173] ? import_iovec+0x73/0xa0 [ 1302.559236][T21173] ___sys_sendmsg+0x2a6/0x360 [ 1302.563953][T21173] ? get_pid_task+0x20/0x1e0 [ 1302.568595][T21173] ? __sys_sendmsg+0x2b0/0x2b0 [ 1302.573418][T21173] ? __lock_acquire+0x7eb0/0x7eb0 [ 1302.578508][T21173] __se_sys_sendmsg+0x1d0/0x2c0 [ 1302.583401][T21173] ? __x64_sys_sendmsg+0x80/0x80 [ 1302.588396][T21173] ? lockdep_hardirqs_on+0x98/0x150 [ 1302.593735][T21173] do_syscall_64+0x55/0xb0 [ 1302.598209][T21173] ? clear_bhb_loop+0x40/0x90 [ 1302.602936][T21173] ? clear_bhb_loop+0x40/0x90 [ 1302.607674][T21173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1302.613613][T21173] RIP: 0033:0x7fd5ceba8f19 [ 1302.618063][T21173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1302.637720][T21173] RSP: 002b:00007fd5cfacb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1302.646183][T21173] RAX: ffffffffffffffda RBX: 00007fd5cee25fa0 RCX: 00007fd5ceba8f19 [ 1302.654190][T21173] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000003 [ 1302.662207][T21173] RBP: 00007fd5cfacb090 R08: 0000000000000000 R09: 0000000000000000 [ 1302.670301][T21173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1302.678304][T21173] R13: 00007fd5cee26038 R14: 00007fd5cee25fa0 R15: 00007fffd7344218 [ 1302.686340][T21173] [ 1303.759138][T21187] netlink: 'syz.3.4585': attribute type 10 has an invalid length. [ 1303.846162][T21187] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4585'. [ 1303.856496][T21187] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1304.272372][T21202] FAULT_INJECTION: forcing a failure. [ 1304.272372][T21202] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.296057][T21202] CPU: 0 PID: 21202 Comm: syz.1.4591 Not tainted syzkaller #0 [ 1304.303592][T21202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1304.313670][T21202] Call Trace: [ 1304.317070][T21202] [ 1304.320040][T21202] dump_stack_lvl+0x18c/0x250 [ 1304.324769][T21202] ? show_regs_print_info+0x20/0x20 [ 1304.330015][T21202] ? load_image+0x420/0x420 [ 1304.334572][T21202] ? __lock_acquire+0x7eb0/0x7eb0 [ 1304.339648][T21202] should_fail_ex+0x394/0x4c0 [ 1304.344385][T21202] should_failslab+0x9/0x20 [ 1304.348944][T21202] slab_pre_alloc_hook+0x59/0x300 [ 1304.354003][T21202] ? __lock_acquire+0x7eb0/0x7eb0 [ 1304.359061][T21202] ? security_sk_alloc+0x4b/0x130 [ 1304.364126][T21202] ? security_sk_alloc+0x4b/0x130 [ 1304.369188][T21202] __kmem_cache_alloc_node+0x53/0x260 [ 1304.374607][T21202] ? security_sk_alloc+0x4b/0x130 [ 1304.379674][T21202] __kmalloc+0xa7/0x240 [ 1304.383881][T21202] security_sk_alloc+0x4b/0x130 [ 1304.388772][T21202] sk_prot_alloc+0x101/0x210 [ 1304.393402][T21202] sk_alloc+0x3a/0x350 [ 1304.397518][T21202] inet6_create+0x7d3/0x1160 [ 1304.402322][T21202] ? inet6_create+0x80/0x1160 [ 1304.407043][T21202] __sock_create+0x49e/0x940 [ 1304.411682][T21202] __sys_socketpair+0x1c1/0x550 [ 1304.416582][T21202] __x64_sys_socketpair+0x9b/0xb0 [ 1304.421637][T21202] do_syscall_64+0x55/0xb0 [ 1304.426094][T21202] ? clear_bhb_loop+0x40/0x90 [ 1304.430812][T21202] ? clear_bhb_loop+0x40/0x90 [ 1304.435529][T21202] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1304.441466][T21202] RIP: 0033:0x7fb9b87a8f19 [ 1304.445915][T21202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1304.465569][T21202] RSP: 002b:00007fb9b960a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1304.474023][T21202] RAX: ffffffffffffffda RBX: 00007fb9b8a25fa0 RCX: 00007fb9b87a8f19 [ 1304.482023][T21202] RDX: 00000000000000ff RSI: 0000000000000003 RDI: 000000000000000a [ 1304.490026][T21202] RBP: 00007fb9b960a090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.498022][T21202] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 1304.506032][T21202] R13: 00007fb9b8a26038 R14: 00007fb9b8a25fa0 R15: 00007fff6fafebd8 [ 1304.514310][T21202] [ 1305.919300][T21236] netlink: 'syz.1.4600': attribute type 10 has an invalid length. [ 1305.931293][T21236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4600'. [ 1305.940896][T21236] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1305.962530][T21239] netlink: 'syz.0.4603': attribute type 21 has an invalid length. [ 1305.972934][T21239] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4603'. [ 1306.261827][T21235] syzkaller0: entered promiscuous mode [ 1306.269588][T21235] syzkaller0: entered allmulticast mode [ 1306.292272][T21240] sit0: left promiscuous mode [ 1306.401362][T21244] sit0: entered promiscuous mode [ 1306.985689][T21255] FAULT_INJECTION: forcing a failure. [ 1306.985689][T21255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1307.001097][T21255] CPU: 0 PID: 21255 Comm: syz.0.4609 Not tainted syzkaller #0 [ 1307.008616][T21255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1307.018719][T21255] Call Trace: [ 1307.022035][T21255] [ 1307.025005][T21255] dump_stack_lvl+0x18c/0x250 [ 1307.029744][T21255] ? show_regs_print_info+0x20/0x20 [ 1307.034993][T21255] ? load_image+0x420/0x420 [ 1307.039542][T21255] ? __might_fault+0xaa/0x120 [ 1307.044264][T21255] ? __lock_acquire+0x7eb0/0x7eb0 [ 1307.049345][T21255] should_fail_ex+0x394/0x4c0 [ 1307.054073][T21255] _copy_from_user+0x2f/0xe0 [ 1307.058701][T21255] ___sys_recvmsg+0x174/0x590 [ 1307.063428][T21255] ? __sys_recvmsg+0x2a0/0x2a0 [ 1307.068265][T21255] ? __fget_files+0x3fc/0x460 [ 1307.073012][T21255] __x64_sys_recvmsg+0x21e/0x2f0 [ 1307.078000][T21255] ? ___sys_recvmsg+0x590/0x590 [ 1307.082909][T21255] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1307.088842][T21255] do_syscall_64+0x55/0xb0 [ 1307.093303][T21255] ? clear_bhb_loop+0x40/0x90 [ 1307.097999][T21255] ? clear_bhb_loop+0x40/0x90 [ 1307.102696][T21255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1307.108606][T21255] RIP: 0033:0x7f84209a8f19 [ 1307.113040][T21255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.132662][T21255] RSP: 002b:00007f8421899028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1307.141096][T21255] RAX: ffffffffffffffda RBX: 00007f8420c25fa0 RCX: 00007f84209a8f19 [ 1307.149086][T21255] RDX: 0000000040000004 RSI: 0000200000000c80 RDI: 0000000000000008 [ 1307.157070][T21255] RBP: 00007f8421899090 R08: 0000000000000000 R09: 0000000000000000 [ 1307.165050][T21255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1307.173059][T21255] R13: 00007f8420c26038 R14: 00007f8420c25fa0 R15: 00007ffd7d7cca28 [ 1307.181067][T21255] [ 1307.572123][T21262] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4611'. [ 1309.081158][T21262] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4611'. [ 1309.523567][T21278] netlink: 'syz.3.4617': attribute type 10 has an invalid length. [ 1309.848181][T21280] netlink: 763 bytes leftover after parsing attributes in process `syz.3.4617'. [ 1309.897097][T21274] netlink: 'syz.2.4614': attribute type 10 has an invalid length. [ 1309.924632][T21274] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4614'. [ 1310.020467][T21274] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1310.062077][T21285] netlink: 'syz.1.4618': attribute type 21 has an invalid length. [ 1310.100123][T21285] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4618'. [ 1310.123456][T21290] sit0: left promiscuous mode [ 1310.227421][T21291] sit0: entered promiscuous mode [ 1310.712857][T21308] FAULT_INJECTION: forcing a failure. [ 1310.712857][T21308] name failslab, interval 1, probability 0, space 0, times 0 [ 1310.734906][T21308] CPU: 1 PID: 21308 Comm: syz.1.4623 Not tainted syzkaller #0 [ 1310.742453][T21308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1310.752550][T21308] Call Trace: [ 1310.755875][T21308] [ 1310.758845][T21308] dump_stack_lvl+0x18c/0x250 [ 1310.763586][T21308] ? show_regs_print_info+0x20/0x20 [ 1310.768834][T21308] ? load_image+0x420/0x420 [ 1310.773375][T21308] ? __lock_acquire+0x7eb0/0x7eb0 [ 1310.778442][T21308] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1310.784636][T21308] ? __lock_acquire+0x135d/0x7eb0 [ 1310.789795][T21308] should_fail_ex+0x394/0x4c0 [ 1310.794517][T21308] should_failslab+0x9/0x20 [ 1310.799055][T21308] slab_pre_alloc_hook+0x59/0x300 [ 1310.804114][T21308] ? __inet_diag_dump_start+0x8b/0x9f0 [ 1310.809719][T21308] __kmem_cache_alloc_node+0x53/0x260 [ 1310.815130][T21308] ? __netlink_dump_start+0xf4/0x7a0 [ 1310.820456][T21308] ? __inet_diag_dump_start+0x8b/0x9f0 [ 1310.825951][T21308] kmalloc_trace+0x2a/0xe0 [ 1310.830416][T21308] __inet_diag_dump_start+0x8b/0x9f0 [ 1310.835735][T21308] ? netlink_lookup+0x30/0x200 [ 1310.840540][T21308] ? netlink_lookup+0x30/0x200 [ 1310.845354][T21308] __netlink_dump_start+0x43c/0x7a0 [ 1310.850609][T21308] inet_diag_rcv_msg_compat+0x215/0x440 [ 1310.856204][T21308] ? __inet_diag_dump+0x380/0x380 [ 1310.861290][T21308] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 1310.866368][T21308] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 1310.872113][T21308] ? inet_diag_dump_start_compat+0x20/0x20 [ 1310.877940][T21308] ? inet_diag_dump+0x50/0x50 [ 1310.882653][T21308] ? __inet_diag_dump+0x380/0x380 [ 1310.887699][T21308] sock_diag_rcv_msg+0x3d3/0x5f0 [ 1310.892669][T21308] netlink_rcv_skb+0x235/0x4c0 [ 1310.897452][T21308] ? sock_diag_bind+0xb0/0xb0 [ 1310.902154][T21308] ? netlink_ack+0x1160/0x1160 [ 1310.907054][T21308] ? __lock_acquire+0x7eb0/0x7eb0 [ 1310.912112][T21308] ? netlink_deliver_tap+0x2e/0x1b0 [ 1310.917332][T21308] sock_diag_rcv+0x2a/0x40 [ 1310.921768][T21308] netlink_unicast+0x856/0x9e0 [ 1310.926598][T21308] netlink_sendmsg+0x8d0/0xbf0 [ 1310.931396][T21308] ? netlink_getsockopt+0x590/0x590 [ 1310.936677][T21308] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1310.942256][T21308] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1310.947559][T21308] ? security_socket_sendmsg+0x80/0xa0 [ 1310.953045][T21308] ? netlink_getsockopt+0x590/0x590 [ 1310.958263][T21308] ____sys_sendmsg+0x61b/0x980 [ 1310.963058][T21308] ? __asan_memset+0x22/0x40 [ 1310.967680][T21308] ? __sys_sendmsg_sock+0x30/0x30 [ 1310.972723][T21308] ? __import_iovec+0x5f2/0x850 [ 1310.977617][T21308] ? import_iovec+0x73/0xa0 [ 1310.982160][T21308] ___sys_sendmsg+0x2a6/0x360 [ 1310.986865][T21308] ? __sys_sendmsg+0x2b0/0x2b0 [ 1310.991683][T21308] ? __lock_acquire+0x7eb0/0x7eb0 [ 1310.996769][T21308] __se_sys_sendmsg+0x1d0/0x2c0 [ 1311.001641][T21308] ? __x64_sys_sendmsg+0x80/0x80 [ 1311.006631][T21308] ? lockdep_hardirqs_on+0x98/0x150 [ 1311.011861][T21308] do_syscall_64+0x55/0xb0 [ 1311.016300][T21308] ? clear_bhb_loop+0x40/0x90 [ 1311.020998][T21308] ? clear_bhb_loop+0x40/0x90 [ 1311.025707][T21308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1311.031631][T21308] RIP: 0033:0x7fb9b87a8f19 [ 1311.036066][T21308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1311.055698][T21308] RSP: 002b:00007fb9b960a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1311.064140][T21308] RAX: ffffffffffffffda RBX: 00007fb9b8a25fa0 RCX: 00007fb9b87a8f19 [ 1311.072129][T21308] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000003 [ 1311.080117][T21308] RBP: 00007fb9b960a090 R08: 0000000000000000 R09: 0000000000000000 [ 1311.088106][T21308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1311.096121][T21308] R13: 00007fb9b8a26038 R14: 00007fb9b8a25fa0 R15: 00007fff6fafebd8 [ 1311.104141][T21308] [ 1312.916886][T21320] rxe_eth0 speed is unknown, defaulting to 1000 [ 1313.334253][T21345] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.4637'. [ 1313.526654][T21350] FAULT_INJECTION: forcing a failure. [ 1313.526654][T21350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1313.540396][T21350] CPU: 1 PID: 21350 Comm: syz.1.4639 Not tainted syzkaller #0 [ 1313.547940][T21350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1313.558048][T21350] Call Trace: [ 1313.561381][T21350] [ 1313.564367][T21350] dump_stack_lvl+0x18c/0x250 [ 1313.569108][T21350] ? show_regs_print_info+0x20/0x20 [ 1313.574362][T21350] ? load_image+0x420/0x420 [ 1313.578895][T21350] ? __lock_acquire+0x7eb0/0x7eb0 [ 1313.583942][T21350] ? snprintf+0xe9/0x140 [ 1313.588205][T21350] should_fail_ex+0x394/0x4c0 [ 1313.592916][T21350] _copy_to_user+0x2f/0xa0 [ 1313.597353][T21350] simple_read_from_buffer+0xe7/0x150 [ 1313.602747][T21350] proc_fail_nth_read+0x1e8/0x260 [ 1313.607798][T21350] ? proc_fault_inject_write+0x360/0x360 [ 1313.613456][T21350] ? fsnotify_perm+0x271/0x5e0 [ 1313.618236][T21350] ? proc_fault_inject_write+0x360/0x360 [ 1313.623894][T21350] vfs_read+0x298/0x990 [ 1313.628073][T21350] ? kernel_read+0x1e0/0x1e0 [ 1313.632705][T21350] ? __fget_files+0x28/0x460 [ 1313.637339][T21350] ? __fget_files+0x3fc/0x460 [ 1313.642046][T21350] ? __fdget_pos+0x2a3/0x330 [ 1313.646653][T21350] ? ksys_read+0x74/0x260 [ 1313.651002][T21350] ksys_read+0x151/0x260 [ 1313.655276][T21350] ? vfs_write+0x9a0/0x9a0 [ 1313.659714][T21350] ? lockdep_hardirqs_on+0x98/0x150 [ 1313.664927][T21350] do_syscall_64+0x55/0xb0 [ 1313.669357][T21350] ? clear_bhb_loop+0x40/0x90 [ 1313.674057][T21350] ? clear_bhb_loop+0x40/0x90 [ 1313.678751][T21350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1313.684660][T21350] RIP: 0033:0x7fb9b876974e [ 1313.689091][T21350] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1313.708797][T21350] RSP: 002b:00007fb9b9609fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1313.717231][T21350] RAX: ffffffffffffffda RBX: 00007fb9b960a6c0 RCX: 00007fb9b876974e [ 1313.725217][T21350] RDX: 000000000000000f RSI: 00007fb9b960a0a0 RDI: 0000000000000005 [ 1313.733242][T21350] RBP: 00007fb9b960a090 R08: 0000000000000000 R09: 0000000000000000 [ 1313.741252][T21350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1313.749244][T21350] R13: 00007fb9b8a26038 R14: 00007fb9b8a25fa0 R15: 00007fff6fafebd8 [ 1313.757257][T21350] [ 1313.846134][T21354] netlink: 'syz.0.4642': attribute type 10 has an invalid length. [ 1315.365844][T21388] netlink: 'syz.3.4652': attribute type 10 has an invalid length. [ 1315.375683][T21375] rxe_eth0 speed is unknown, defaulting to 1000 [ 1315.558030][T21391] FAULT_INJECTION: forcing a failure. [ 1315.558030][T21391] name failslab, interval 1, probability 0, space 0, times 0 [ 1315.572328][T21391] CPU: 1 PID: 21391 Comm: syz.3.4654 Not tainted syzkaller #0 [ 1315.579835][T21391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1315.590105][T21391] Call Trace: [ 1315.593428][T21391] [ 1315.596398][T21391] dump_stack_lvl+0x18c/0x250 [ 1315.601042][T21379] rxe_eth0 speed is unknown, defaulting to 1000 [ 1315.601114][T21391] ? show_regs_print_info+0x20/0x20 [ 1315.612689][T21391] ? load_image+0x420/0x420 [ 1315.617235][T21391] ? __might_sleep+0xe0/0xe0 [ 1315.621882][T21391] ? __lock_acquire+0x7eb0/0x7eb0 [ 1315.626962][T21391] should_fail_ex+0x394/0x4c0 [ 1315.631693][T21391] should_failslab+0x9/0x20 [ 1315.636244][T21391] slab_pre_alloc_hook+0x59/0x300 [ 1315.641315][T21391] ? sctp_association_new+0x89/0x25b0 [ 1315.646738][T21391] __kmem_cache_alloc_node+0x53/0x260 [ 1315.652174][T21391] ? sctp_association_new+0x89/0x25b0 [ 1315.657599][T21391] kmalloc_trace+0x2a/0xe0 [ 1315.662165][T21391] sctp_association_new+0x89/0x25b0 [ 1315.667438][T21391] sctp_connect_new_asoc+0x2de/0x6a0 [ 1315.672780][T21391] ? __sctp_connect+0xd80/0xd80 [ 1315.677678][T21391] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1315.683116][T21391] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1315.688720][T21391] ? security_sctp_bind_connect+0x89/0xb0 [ 1315.694498][T21391] sctp_sendmsg+0x1519/0x27b0 [ 1315.699242][T21391] ? sctp_getsockopt+0xb60/0xb60 [ 1315.704320][T21391] ? aa_sk_perm+0x7bb/0x8e0 [ 1315.708881][T21391] ? aa_af_perm+0x330/0x330 [ 1315.713440][T21391] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1315.719923][T21391] ? sock_rps_record_flow+0x19/0x3f0 [ 1315.725383][T21391] ? inet_sendmsg+0xce/0x2a0 [ 1315.730052][T21391] ? inet_send_prepare+0x250/0x250 [ 1315.735240][T21391] ____sys_sendmsg+0x61b/0x980 [ 1315.740075][T21391] ? __sys_sendmsg_sock+0x30/0x30 [ 1315.745150][T21391] ? __import_iovec+0x5f2/0x850 [ 1315.750075][T21391] ? import_iovec+0x73/0xa0 [ 1315.754630][T21391] ___sys_sendmsg+0x2a6/0x360 [ 1315.759354][T21391] ? __sys_sendmsg+0x2b0/0x2b0 [ 1315.764187][T21391] ? __lock_acquire+0x7eb0/0x7eb0 [ 1315.769292][T21391] __se_sys_sendmsg+0x1d0/0x2c0 [ 1315.774181][T21391] ? perf_trace_preemptirq_template+0x269/0x330 [ 1315.780489][T21391] ? __x64_sys_sendmsg+0x80/0x80 [ 1315.785501][T21391] ? lockdep_hardirqs_on+0x98/0x150 [ 1315.790749][T21391] do_syscall_64+0x55/0xb0 [ 1315.795208][T21391] ? clear_bhb_loop+0x40/0x90 [ 1315.800025][T21391] ? clear_bhb_loop+0x40/0x90 [ 1315.804754][T21391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1315.810777][T21391] RIP: 0033:0x7fe492da8f19 [ 1315.815318][T21391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1315.834972][T21391] RSP: 002b:00007fe493d0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1315.843457][T21391] RAX: ffffffffffffffda RBX: 00007fe493025fa0 RCX: 00007fe492da8f19 [ 1315.851467][T21391] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000005 [ 1315.859471][T21391] RBP: 00007fe493d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1315.867487][T21391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1315.875508][T21391] R13: 00007fe493026038 R14: 00007fe493025fa0 R15: 00007ffc40112d58 [ 1315.883638][T21391] [ 1316.021697][T21395] netlink: 'syz.3.4655': attribute type 29 has an invalid length. [ 1316.030145][T21395] netlink: 'syz.3.4655': attribute type 29 has an invalid length. [ 1316.042939][T21395] netlink: 'syz.3.4655': attribute type 29 has an invalid length. [ 1316.051839][T21395] netlink: 'syz.3.4655': attribute type 29 has an invalid length. [ 1316.063973][T21395] netlink: 'syz.3.4655': attribute type 29 has an invalid length. [ 1316.140855][T21397] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.4656'. [ 1316.150949][T21397] openvswitch: netlink: Flow key attr not present in new flow. [ 1317.610629][T21414] netlink: 'syz.3.4662': attribute type 10 has an invalid length. [ 1318.364073][T21408] rxe_eth0 speed is unknown, defaulting to 1000 [ 1319.007210][T21425] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1319.018308][T21425] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1319.026587][T21425] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1319.035869][T21425] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1319.072005][T21425] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1319.079735][T21425] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1319.349683][T17349] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.350974][T21431] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.4668'. [ 1319.391876][T21424] rxe_eth0 speed is unknown, defaulting to 1000 [ 1319.479607][T17349] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.605985][T17349] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.730148][T17349] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.890797][T21437] FAULT_INJECTION: forcing a failure. [ 1319.890797][T21437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1319.948917][T21437] CPU: 0 PID: 21437 Comm: syz.1.4671 Not tainted syzkaller #0 [ 1319.956457][T21437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1319.966641][T21437] Call Trace: [ 1319.969954][T21437] [ 1319.972915][T21437] dump_stack_lvl+0x18c/0x250 [ 1319.977654][T21437] ? show_regs_print_info+0x20/0x20 [ 1319.982899][T21437] ? load_image+0x420/0x420 [ 1319.987450][T21437] ? __might_fault+0xaa/0x120 [ 1319.992248][T21437] ? __lock_acquire+0x7eb0/0x7eb0 [ 1319.997312][T21437] should_fail_ex+0x394/0x4c0 [ 1320.002027][T21437] _copy_to_user+0x2f/0xa0 [ 1320.006488][T21437] bpf_test_finish+0x4e7/0x650 [ 1320.011300][T21437] ? convert_skb_to___skb+0x420/0x420 [ 1320.016707][T21437] ? read_tsc+0x9/0x20 [ 1320.020818][T21437] bpf_prog_test_run_flow_dissector+0x4c9/0x640 [ 1320.027111][T21437] ? xdp_convert_buff_to_md+0x200/0x200 [ 1320.032694][T21437] ? __fget_files+0x28/0x460 [ 1320.037340][T21437] ? xdp_convert_buff_to_md+0x200/0x200 [ 1320.042920][T21437] bpf_prog_test_run+0x31f/0x390 [ 1320.047902][T21437] __sys_bpf+0x49d/0x890 [ 1320.052181][T21437] ? bpf_link_show_fdinfo+0x560/0x560 [ 1320.057610][T21437] ? lock_chain_count+0x20/0x20 [ 1320.062521][T21437] __x64_sys_bpf+0x7c/0x90 [ 1320.066976][T21437] do_syscall_64+0x55/0xb0 [ 1320.071436][T21437] ? clear_bhb_loop+0x40/0x90 [ 1320.076153][T21437] ? clear_bhb_loop+0x40/0x90 [ 1320.080869][T21437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1320.086798][T21437] RIP: 0033:0x7fb9b87a8f19 [ 1320.091246][T21437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1320.110889][T21437] RSP: 002b:00007fb9b960a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1320.119343][T21437] RAX: ffffffffffffffda RBX: 00007fb9b8a25fa0 RCX: 00007fb9b87a8f19 [ 1320.127347][T21437] RDX: 0000000000000050 RSI: 0000200000000f80 RDI: 000000000000000a [ 1320.135349][T21437] RBP: 00007fb9b960a090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.143351][T21437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.151359][T21437] R13: 00007fb9b8a26038 R14: 00007fb9b8a25fa0 R15: 00007fff6fafebd8 [ 1320.159393][T21437] [ 1321.169764][T21425] Bluetooth: hci2: command tx timeout [ 1321.212410][T21445] rxe_eth0 speed is unknown, defaulting to 1000 [ 1321.352387][T21424] chnl_net:caif_netlink_parms(): no params data found [ 1322.240554][T21424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.268650][T21424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.286131][T21424] bridge_slave_0: entered allmulticast mode [ 1322.304133][T21424] bridge_slave_0: entered promiscuous mode [ 1322.371924][T21424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.385919][T21424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.403494][T21424] bridge_slave_1: entered allmulticast mode [ 1322.416353][T21424] bridge_slave_1: entered promiscuous mode [ 1322.607290][T21424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1322.640524][T21424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1322.909560][T21424] team0: Port device team_slave_0 added [ 1322.938820][T21424] team0: Port device team_slave_1 added [ 1322.999776][T21483] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.4677'. [ 1323.245894][T21425] Bluetooth: hci2: command tx timeout [ 1323.321180][T21424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.335830][T21424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.454820][T21424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.886470][T21424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.907397][T21424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.987182][T21424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.413542][T21492] rxe_eth0 speed is unknown, defaulting to 1000 [ 1324.584883][T21424] hsr_slave_0: entered promiscuous mode [ 1324.613032][T21424] hsr_slave_1: entered promiscuous mode [ 1324.710593][T17349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1324.761650][T17349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1324.845064][T17349] veth0_macvtap: left promiscuous mode [ 1324.866122][T17349] veth1_vlan: left promiscuous mode [ 1324.871537][T17349] veth0_vlan: left promiscuous mode [ 1325.329215][T21425] Bluetooth: hci2: command tx timeout [ 1326.053922][T17349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1326.062772][T17349] bond_slave_1 (unregistering): left promiscuous mode [ 1326.069646][T17349] bond_slave_1 (unregistering): left allmulticast mode [ 1326.157766][T17349] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1326.170368][T17349] bridge_slave_1 (unregistering): left promiscuous mode [ 1326.177962][T17349] bridge_slave_1 (unregistering): left allmulticast mode [ 1326.470674][T17349] bond0 (unregistering): Released all slaves [ 1327.095233][T21512] netlink: 'syz.0.4679': attribute type 10 has an invalid length. [ 1327.406578][T21425] Bluetooth: hci2: command tx timeout [ 1328.152665][T21424] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1328.164691][T21424] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1328.184408][T21424] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1328.203130][T21424] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1328.368727][T21424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1328.398725][T21424] 8021q: adding VLAN 0 to HW filter on device team0 [ 1328.424590][ T8165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.431844][ T8165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1328.472288][ T8165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.479547][ T8165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1328.829729][T21424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1328.899242][T21424] veth0_vlan: entered promiscuous mode [ 1328.914101][T21424] veth1_vlan: entered promiscuous mode [ 1328.978867][T21424] veth0_macvtap: entered promiscuous mode [ 1328.992122][T21424] veth1_macvtap: entered promiscuous mode [ 1329.033265][T21424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1329.044631][T21424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.056308][T21424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.066310][T21424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.077737][T21424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.087906][T21424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.098446][T21424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.110266][T21424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1329.138665][T21424] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.151653][T21424] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.164540][T21424] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.178809][T21424] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.305308][T17354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.331559][T17354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.384706][T17354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.394336][T17354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.586566][T21563] netlink: 'syz.1.4690': attribute type 10 has an invalid length. [ 1330.095985][T21576] netlink: 'syz.1.4693': attribute type 10 has an invalid length. [ 1330.966775][T21578] netlink: 'syz.3.4681': attribute type 25 has an invalid length. [ 1330.991288][T21578] netlink: 'syz.3.4681': attribute type 5 has an invalid length. [ 1331.050937][T21578] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4681'. [ 1331.414907][T21567] rxe_eth0 speed is unknown, defaulting to 1000 [ 1331.612008][T21595] netlink: 'syz.1.4686': attribute type 9 has an invalid length. [ 1331.664662][T21595] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4686'. [ 1332.534395][T21615] netlink: 'syz.3.4694': attribute type 10 has an invalid length. [ 1332.571404][T21615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.585825][T21615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.713235][T21615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.721169][T21615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1332.731576][T21615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.739421][T21615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.796879][T21615] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1332.813798][T21614] netlink: 'syz.2.4692': attribute type 21 has an invalid length. [ 1332.898015][T21614] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4692'. [ 1332.937492][T21627] sit0: left promiscuous mode [ 1333.076416][T21628] sit0: entered promiscuous mode [ 1333.362289][T21631] netlink: 'syz.3.4695': attribute type 10 has an invalid length. [ 1333.549800][T21631] team0 (unregistering): Port device team_slave_0 removed [ 1333.577457][T21631] team0 (unregistering): Port device team_slave_1 removed [ 1333.708733][T21623] rxe_eth0 speed is unknown, defaulting to 1000 [ 1333.932601][T21638] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4697'. [ 1333.954931][T21638] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1336.270305][T21673] netlink: 'syz.1.4710': attribute type 10 has an invalid length. [ 1337.017913][T21664] rxe_eth0 speed is unknown, defaulting to 1000 [ 1337.599639][T21689] -: renamed from syzkaller0 [ 1339.841774][T21705] netlink: 'syz.2.4719': attribute type 10 has an invalid length. [ 1340.923706][T21719] netlink: 'syz.2.4722': attribute type 10 has an invalid length. [ 1341.042562][T21719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4722'. [ 1341.130565][T21719] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1341.990081][T21728] FAULT_INJECTION: forcing a failure. [ 1341.990081][T21728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1342.013241][T21728] CPU: 0 PID: 21728 Comm: syz.1.4728 Not tainted syzkaller #0 [ 1342.020776][T21728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1342.030862][T21728] Call Trace: [ 1342.034167][T21728] [ 1342.037122][T21728] dump_stack_lvl+0x18c/0x250 [ 1342.041850][T21728] ? show_regs_print_info+0x20/0x20 [ 1342.047092][T21728] ? load_image+0x420/0x420 [ 1342.051636][T21728] ? __lock_acquire+0x7eb0/0x7eb0 [ 1342.056696][T21728] ? mark_lock+0x94/0x320 [ 1342.061061][T21728] should_fail_ex+0x394/0x4c0 [ 1342.065777][T21728] prepare_alloc_pages+0x1e1/0x5b0 [ 1342.070935][T21728] __alloc_pages+0x134/0x460 [ 1342.075566][T21728] ? zone_statistics+0x170/0x170 [ 1342.080543][T21728] ? do_wp_page+0x733/0x34d0 [ 1342.085162][T21728] ? do_wp_page+0xf17/0x34d0 [ 1342.089783][T21728] ? __lock_acquire+0x7eb0/0x7eb0 [ 1342.094851][T21728] __folio_alloc+0x10/0x20 [ 1342.099301][T21728] vma_alloc_folio+0x474/0x8f0 [ 1342.104106][T21728] do_wp_page+0x118d/0x34d0 [ 1342.108663][T21728] ? folio_put+0xd0/0xd0 [ 1342.112936][T21728] ? do_raw_spin_lock+0x11f/0x2b0 [ 1342.118001][T21728] ? __rwlock_init+0x150/0x150 [ 1342.122817][T21728] handle_mm_fault+0x1300/0x4a40 [ 1342.127794][T21728] ? handle_mm_fault+0xe6/0x4a40 [ 1342.132870][T21728] ? numa_migrate_prep+0x350/0x350 [ 1342.138130][T21728] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1342.143452][T21728] do_user_addr_fault+0xeb7/0x13e0 [ 1342.148624][T21728] exc_page_fault+0x64/0x100 [ 1342.153254][T21728] asm_exc_page_fault+0x26/0x30 [ 1342.158139][T21728] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1342.163979][T21728] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 1342.183708][T21728] RSP: 0018:ffffc90004dd7498 EFLAGS: 00050206 [ 1342.189820][T21728] RAX: ffffffff842cc701 RBX: 1ffff920009bafc7 RCX: 0000000000006c80 [ 1342.197820][T21728] RDX: 0000000000000000 RSI: ffff888050e19380 RDI: 0000200000004000 [ 1342.205818][T21728] RBP: ffffc90004dd75e8 R08: ffff888050e1ffff R09: 1ffff1100a1c3fff [ 1342.213829][T21728] R10: dffffc0000000000 R11: ffffed100a1c4000 R12: ffff888050e18000 [ 1342.221828][T21728] R13: 0000000000008000 R14: 0000000000008000 R15: ffffc90004dd7e48 [ 1342.229842][T21728] ? _copy_to_iter+0x161/0x1110 [ 1342.234740][T21728] _copy_to_iter+0x24f/0x1110 [ 1342.239452][T21728] ? __lock_acquire+0x7eb0/0x7eb0 [ 1342.244525][T21728] ? trace_event_raw_event_lock+0x240/0x240 [ 1342.250638][T21728] ? iov_iter_init+0x1e0/0x1e0 [ 1342.255438][T21728] ? __virt_addr_valid+0x10c/0x380 [ 1342.260602][T21728] ? __check_object_size+0x4fc/0xa40 [ 1342.265932][T21728] __skb_datagram_iter+0x2ff/0x780 [ 1342.271088][T21728] ? skb_copy_datagram_iter+0x200/0x200 [ 1342.276677][T21728] skb_copy_datagram_iter+0xb1/0x200 [ 1342.282009][T21728] unix_stream_read_actor+0x6c/0xa0 [ 1342.287255][T21728] unix_stream_read_generic+0xd03/0x1fc0 [ 1342.292962][T21728] ? unix_stream_read_actor+0xa0/0xa0 [ 1342.298367][T21728] ? wake_bit_function+0x200/0x200 [ 1342.303549][T21728] unix_stream_recvmsg+0x169/0x1c0 [ 1342.308700][T21728] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 1342.314102][T21728] ? __unix_stream_recvmsg+0x150/0x150 [ 1342.319599][T21728] ? aa_sock_msg_perm+0x94/0x150 [ 1342.324574][T21728] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1342.329891][T21728] ? security_socket_recvmsg+0x89/0xb0 [ 1342.335390][T21728] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 1342.340720][T21728] ____sys_recvmsg+0x2bd/0x5d0 [ 1342.345536][T21728] ? __sys_recvmsg_sock+0x50/0x50 [ 1342.350614][T21728] ? import_iovec+0x73/0xa0 [ 1342.355160][T21728] ___sys_recvmsg+0x214/0x590 [ 1342.359879][T21728] ? __sys_recvmsg+0x2a0/0x2a0 [ 1342.364682][T21728] ? ksys_write+0x1d2/0x260 [ 1342.369238][T21728] ? __fget_files+0x3fc/0x460 [ 1342.373979][T21728] __x64_sys_recvmsg+0x21e/0x2f0 [ 1342.378948][T21728] ? ___sys_recvmsg+0x590/0x590 [ 1342.383855][T21728] ? lockdep_hardirqs_on+0x98/0x150 [ 1342.389091][T21728] do_syscall_64+0x55/0xb0 [ 1342.393542][T21728] ? clear_bhb_loop+0x40/0x90 [ 1342.398260][T21728] ? clear_bhb_loop+0x40/0x90 [ 1342.402972][T21728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1342.408898][T21728] RIP: 0033:0x7fb9b87a8f19 [ 1342.413342][T21728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1342.432982][T21728] RSP: 002b:00007fb9b960a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1342.441518][T21728] RAX: ffffffffffffffda RBX: 00007fb9b8a25fa0 RCX: 00007fb9b87a8f19 [ 1342.449518][T21728] RDX: 0000000040000100 RSI: 0000200000001d40 RDI: 0000000000000005 [ 1342.457518][T21728] RBP: 00007fb9b960a090 R08: 0000000000000000 R09: 0000000000000000 [ 1342.465602][T21728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1342.473603][T21728] R13: 00007fb9b8a26038 R14: 00007fb9b8a25fa0 R15: 00007fff6fafebd8 [ 1342.481627][T21728] [ 1342.942354][T21732] netlink: 'syz.1.4729': attribute type 10 has an invalid length. [ 1343.743295][T21751] netlink: 'syz.2.4736': attribute type 10 has an invalid length. [ 1344.294818][T21744] rxe_eth0 speed is unknown, defaulting to 1000 [ 1345.093930][T21755] rxe_eth0 speed is unknown, defaulting to 1000 [ 1345.423783][T21758] rxe_eth0 speed is unknown, defaulting to 1000 [ 1345.548531][T21771] netlink: 'syz.3.4742': attribute type 10 has an invalid length. [ 1345.562182][T21771] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4742'. [ 1345.573999][T21771] batadv_slave_0: entered promiscuous mode [ 1345.591442][T21771] batadv_slave_0: entered allmulticast mode [ 1345.600869][T21771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1345.623261][T21771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1345.657505][T21771] bridge0: port 3(batadv_slave_0) entered blocking state [ 1345.665024][T21771] bridge0: port 3(batadv_slave_0) entered disabled state [ 1345.676840][T21771] bridge0: port 3(batadv_slave_0) entered blocking state [ 1345.684074][T21771] bridge0: port 3(batadv_slave_0) entered forwarding state [ 1347.173019][T21793] FAULT_INJECTION: forcing a failure. [ 1347.173019][T21793] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.197571][T21793] CPU: 0 PID: 21793 Comm: syz.0.4751 Not tainted syzkaller #0 [ 1347.205095][T21793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1347.215189][T21793] Call Trace: [ 1347.218501][T21793] [ 1347.221471][T21793] dump_stack_lvl+0x18c/0x250 [ 1347.226198][T21793] ? show_regs_print_info+0x20/0x20 [ 1347.231437][T21793] ? load_image+0x420/0x420 [ 1347.235983][T21793] ? __lock_acquire+0x7eb0/0x7eb0 [ 1347.241042][T21793] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1347.247227][T21793] ? __lock_acquire+0x135d/0x7eb0 [ 1347.252292][T21793] should_fail_ex+0x394/0x4c0 [ 1347.257014][T21793] should_failslab+0x9/0x20 [ 1347.261555][T21793] slab_pre_alloc_hook+0x59/0x300 [ 1347.266028][T21792] netlink: 'syz.1.4750': attribute type 10 has an invalid length. [ 1347.266787][T21793] ? __inet_diag_dump_start+0x8b/0x9f0 [ 1347.280111][T21793] __kmem_cache_alloc_node+0x53/0x260 [ 1347.285533][T21793] ? __netlink_dump_start+0xf4/0x7a0 [ 1347.290862][T21793] ? __inet_diag_dump_start+0x8b/0x9f0 [ 1347.296367][T21793] kmalloc_trace+0x2a/0xe0 [ 1347.301189][T21793] __inet_diag_dump_start+0x8b/0x9f0 [ 1347.306496][T21793] ? netlink_lookup+0x30/0x200 [ 1347.311281][T21793] ? netlink_lookup+0x30/0x200 [ 1347.316072][T21793] __netlink_dump_start+0x43c/0x7a0 [ 1347.321322][T21793] inet_diag_rcv_msg_compat+0x215/0x440 [ 1347.326893][T21793] ? __inet_diag_dump+0x380/0x380 [ 1347.331951][T21793] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 1347.337009][T21793] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 1347.342751][T21793] ? inet_diag_dump_start_compat+0x20/0x20 [ 1347.348584][T21793] ? inet_diag_dump+0x50/0x50 [ 1347.353300][T21793] ? __inet_diag_dump+0x380/0x380 [ 1347.358351][T21793] sock_diag_rcv_msg+0x3d3/0x5f0 [ 1347.363324][T21793] netlink_rcv_skb+0x235/0x4c0 [ 1347.368111][T21793] ? sock_diag_bind+0xb0/0xb0 [ 1347.372832][T21793] ? netlink_ack+0x1160/0x1160 [ 1347.377633][T21793] ? __lock_acquire+0x7eb0/0x7eb0 [ 1347.382693][T21793] ? netlink_deliver_tap+0x2e/0x1b0 [ 1347.387922][T21793] sock_diag_rcv+0x2a/0x40 [ 1347.392370][T21793] netlink_unicast+0x856/0x9e0 [ 1347.397184][T21793] netlink_sendmsg+0x8d0/0xbf0 [ 1347.401982][T21793] ? netlink_getsockopt+0x590/0x590 [ 1347.407208][T21793] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1347.412788][T21793] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1347.418113][T21793] ? security_socket_sendmsg+0x80/0xa0 [ 1347.423601][T21793] ? netlink_getsockopt+0x590/0x590 [ 1347.428830][T21793] ____sys_sendmsg+0x61b/0x980 [ 1347.433626][T21793] ? __asan_memset+0x22/0x40 [ 1347.438246][T21793] ? __sys_sendmsg_sock+0x30/0x30 [ 1347.443289][T21793] ? __import_iovec+0x5f2/0x850 [ 1347.448182][T21793] ? import_iovec+0x73/0xa0 [ 1347.452718][T21793] ___sys_sendmsg+0x2a6/0x360 [ 1347.457419][T21793] ? get_pid_task+0x20/0x1e0 [ 1347.462040][T21793] ? __sys_sendmsg+0x2b0/0x2b0 [ 1347.466855][T21793] ? __lock_acquire+0x7eb0/0x7eb0 [ 1347.471937][T21793] __se_sys_sendmsg+0x1d0/0x2c0 [ 1347.476821][T21793] ? __x64_sys_sendmsg+0x80/0x80 [ 1347.481821][T21793] ? lockdep_hardirqs_on+0x98/0x150 [ 1347.487050][T21793] do_syscall_64+0x55/0xb0 [ 1347.491500][T21793] ? clear_bhb_loop+0x40/0x90 [ 1347.496204][T21793] ? clear_bhb_loop+0x40/0x90 [ 1347.500909][T21793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1347.506830][T21793] RIP: 0033:0x7f84209a8f19 [ 1347.511268][T21793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.530895][T21793] RSP: 002b:00007f8421899028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1347.539338][T21793] RAX: ffffffffffffffda RBX: 00007f8420c25fa0 RCX: 00007f84209a8f19 [ 1347.547331][T21793] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1347.555323][T21793] RBP: 00007f8421899090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.563317][T21793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1347.571306][T21793] R13: 00007f8420c26038 R14: 00007f8420c25fa0 R15: 00007ffd7d7cca28 [ 1347.579321][T21793] [ 1348.908253][T21799] rxe_eth0 speed is unknown, defaulting to 1000 [ 1349.145967][T21818] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4757'. [ 1349.252598][T21817] netlink: 'syz.2.4757': attribute type 10 has an invalid length. [ 1349.276113][T21817] syz_tun: entered promiscuous mode [ 1349.319026][T21814] rxe_eth0 speed is unknown, defaulting to 1000 [ 1352.237383][T21862] FAULT_INJECTION: forcing a failure. [ 1352.237383][T21862] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1352.251664][T21862] CPU: 1 PID: 21862 Comm: syz.3.4776 Not tainted syzkaller #0 [ 1352.259194][T21862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1352.269466][T21862] Call Trace: [ 1352.272801][T21862] [ 1352.275769][T21862] dump_stack_lvl+0x18c/0x250 [ 1352.280513][T21862] ? show_regs_print_info+0x20/0x20 [ 1352.285774][T21862] ? load_image+0x420/0x420 [ 1352.290336][T21862] ? __lock_acquire+0x7eb0/0x7eb0 [ 1352.295402][T21862] should_fail_ex+0x394/0x4c0 [ 1352.300136][T21862] prepare_alloc_pages+0x1e1/0x5b0 [ 1352.305287][T21862] __alloc_pages+0x134/0x460 [ 1352.309907][T21862] ? zone_statistics+0x170/0x170 [ 1352.314870][T21862] ? __build_skb_around+0x245/0x3c0 [ 1352.320087][T21862] ? alloc_pages+0x4e1/0x740 [ 1352.324699][T21862] alloc_skb_with_frags+0x23e/0x7a0 [ 1352.330013][T21862] sock_alloc_send_pskb+0x969/0xa80 [ 1352.335254][T21862] ? sock_kzfree_s+0x50/0x50 [ 1352.339877][T21862] tun_get_user+0xa44/0x3d30 [ 1352.344533][T21862] ? trace_event_raw_event_lock+0x240/0x240 [ 1352.350459][T21862] ? aa_file_perm+0x3e3/0xee0 [ 1352.355154][T21862] ? rcu_read_unlock+0xa0/0xa0 [ 1352.360033][T21862] ? tun_get+0x1c/0x2e0 [ 1352.364213][T21862] ? __lock_acquire+0x7eb0/0x7eb0 [ 1352.369256][T21862] ? tun_get+0x1c/0x2e0 [ 1352.373429][T21862] tun_chr_write_iter+0x119/0x200 [ 1352.378466][T21862] vfs_write+0x474/0x9a0 [ 1352.382729][T21862] ? file_end_write+0x250/0x250 [ 1352.387602][T21862] ? __fget_files+0x3fc/0x460 [ 1352.392302][T21862] ? __fdget_pos+0x1d8/0x330 [ 1352.396918][T21862] ? ksys_write+0x74/0x260 [ 1352.401356][T21862] ksys_write+0x151/0x260 [ 1352.405714][T21862] ? __ia32_sys_read+0x90/0x90 [ 1352.410512][T21862] ? lockdep_hardirqs_on+0x98/0x150 [ 1352.415728][T21862] do_syscall_64+0x55/0xb0 [ 1352.420156][T21862] ? clear_bhb_loop+0x40/0x90 [ 1352.424846][T21862] ? clear_bhb_loop+0x40/0x90 [ 1352.429540][T21862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1352.435451][T21862] RIP: 0033:0x7f3803da8f19 [ 1352.439881][T21862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.459504][T21862] RSP: 002b:00007f3804ba6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1352.467936][T21862] RAX: ffffffffffffffda RBX: 00007f3804025fa0 RCX: 00007f3803da8f19 [ 1352.475919][T21862] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 1352.483897][T21862] RBP: 00007f3804ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 1352.491877][T21862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1352.499856][T21862] R13: 00007f3804026038 R14: 00007f3804025fa0 R15: 00007ffe7832d508 [ 1352.507871][T21862] [ 1354.938381][T21888] rxe_eth0 speed is unknown, defaulting to 1000 [ 1355.584978][T21893] rxe_eth0 speed is unknown, defaulting to 1000 [ 1355.610047][T21910] FAULT_INJECTION: forcing a failure. [ 1355.610047][T21910] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1355.625837][T21910] CPU: 0 PID: 21910 Comm: syz.0.4789 Not tainted syzkaller #0 [ 1355.633342][T21910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1355.643446][T21910] Call Trace: [ 1355.646771][T21910] [ 1355.649733][T21910] dump_stack_lvl+0x18c/0x250 [ 1355.654456][T21910] ? show_regs_print_info+0x20/0x20 [ 1355.659697][T21910] ? load_image+0x420/0x420 [ 1355.664254][T21910] ? __lock_acquire+0x7eb0/0x7eb0 [ 1355.669322][T21910] should_fail_ex+0x394/0x4c0 [ 1355.674049][T21910] prepare_alloc_pages+0x1e1/0x5b0 [ 1355.679198][T21910] __alloc_pages+0x134/0x460 [ 1355.683828][T21910] ? zone_statistics+0x170/0x170 [ 1355.688801][T21910] ? __build_skb_around+0x245/0x3c0 [ 1355.694039][T21910] ? alloc_pages+0x4e1/0x740 [ 1355.698761][T21910] alloc_skb_with_frags+0x23e/0x7a0 [ 1355.704019][T21910] sock_alloc_send_pskb+0x969/0xa80 [ 1355.709292][T21910] ? sock_kzfree_s+0x50/0x50 [ 1355.713970][T21910] tun_get_user+0xa44/0x3d30 [ 1355.718635][T21910] ? aa_file_perm+0x3e3/0xee0 [ 1355.723364][T21910] ? rcu_read_unlock+0xa0/0xa0 [ 1355.728183][T21910] ? tun_get+0x1c/0x2e0 [ 1355.732379][T21910] ? __lock_acquire+0x7eb0/0x7eb0 [ 1355.737450][T21910] ? tun_get+0x1c/0x2e0 [ 1355.741647][T21910] tun_chr_write_iter+0x119/0x200 [ 1355.746718][T21910] vfs_write+0x474/0x9a0 [ 1355.751013][T21910] ? file_end_write+0x250/0x250 [ 1355.755922][T21910] ? __fget_files+0x3fc/0x460 [ 1355.760661][T21910] ? __fdget_pos+0x1d8/0x330 [ 1355.765308][T21910] ? ksys_write+0x74/0x260 [ 1355.769786][T21910] ksys_write+0x151/0x260 [ 1355.774170][T21910] ? __ia32_sys_read+0x90/0x90 [ 1355.778994][T21910] ? lockdep_hardirqs_on+0x98/0x150 [ 1355.784236][T21910] do_syscall_64+0x55/0xb0 [ 1355.788700][T21910] ? clear_bhb_loop+0x40/0x90 [ 1355.793433][T21910] ? clear_bhb_loop+0x40/0x90 [ 1355.798171][T21910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1355.804123][T21910] RIP: 0033:0x7f84209a8f19 [ 1355.808671][T21910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.828324][T21910] RSP: 002b:00007f8421899028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1355.836793][T21910] RAX: ffffffffffffffda RBX: 00007f8420c25fa0 RCX: 00007f84209a8f19 [ 1355.844820][T21910] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 1355.852826][T21910] RBP: 00007f8421899090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.860854][T21910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.868870][T21910] R13: 00007f8420c26038 R14: 00007f8420c25fa0 R15: 00007ffd7d7cca28 [ 1355.876909][T21910] [ 1356.257177][T21923] FAULT_INJECTION: forcing a failure. [ 1356.257177][T21923] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.281465][T21923] CPU: 0 PID: 21923 Comm: syz.3.4797 Not tainted syzkaller #0 [ 1356.289002][T21923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1356.299094][T21923] Call Trace: [ 1356.302390][T21923] [ 1356.305337][T21923] dump_stack_lvl+0x18c/0x250 [ 1356.310031][T21923] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1356.316210][T21923] ? show_regs_print_info+0x20/0x20 [ 1356.321424][T21923] ? load_image+0x420/0x420 [ 1356.325946][T21923] should_fail_ex+0x394/0x4c0 [ 1356.330643][T21923] should_failslab+0x9/0x20 [ 1356.335150][T21923] slab_pre_alloc_hook+0x59/0x300 [ 1356.340186][T21923] ? bpf_test_init+0x9f/0x140 [ 1356.344874][T21923] ? bpf_test_init+0x9f/0x140 [ 1356.349560][T21923] __kmem_cache_alloc_node+0x53/0x260 [ 1356.354945][T21923] ? bpf_test_init+0x9f/0x140 [ 1356.359629][T21923] __kmalloc+0xa7/0x240 [ 1356.363805][T21923] bpf_test_init+0x9f/0x140 [ 1356.368324][T21923] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 1356.373713][T21923] ? __lock_acquire+0x7eb0/0x7eb0 [ 1356.378762][T21923] ? dev_put+0x80/0x80 [ 1356.382852][T21923] ? dev_put+0x80/0x80 [ 1356.386933][T21923] bpf_prog_test_run+0x31f/0x390 [ 1356.391885][T21923] __sys_bpf+0x49d/0x890 [ 1356.396139][T21923] ? read_tsc+0x9/0x20 [ 1356.400222][T21923] ? bpf_link_show_fdinfo+0x560/0x560 [ 1356.405615][T21923] ? lock_chain_count+0x20/0x20 [ 1356.410475][T21923] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1356.416471][T21923] __x64_sys_bpf+0x7c/0x90 [ 1356.420897][T21923] do_syscall_64+0x55/0xb0 [ 1356.425323][T21923] ? clear_bhb_loop+0x40/0x90 [ 1356.430018][T21923] ? clear_bhb_loop+0x40/0x90 [ 1356.434712][T21923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1356.440624][T21923] RIP: 0033:0x7f3803da8f19 [ 1356.445048][T21923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.464664][T21923] RSP: 002b:00007f3804ba6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1356.473093][T21923] RAX: ffffffffffffffda RBX: 00007f3804025fa0 RCX: 00007f3803da8f19 [ 1356.481070][T21923] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1356.489048][T21923] RBP: 00007f3804ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.497029][T21923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.505006][T21923] R13: 00007f3804026038 R14: 00007f3804025fa0 R15: 00007ffe7832d508 [ 1356.513012][T21923] [ 1357.656762][T21945] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4805'. [ 1357.801010][T21944] netlink: 'syz.1.4805': attribute type 10 has an invalid length. [ 1357.828131][T21944] syz_tun: entered promiscuous mode [ 1357.954776][T21933] rxe_eth0 speed is unknown, defaulting to 1000 [ 1359.562945][T21949] rxe_eth0 speed is unknown, defaulting to 1000 [ 1360.420601][T21965] rxe_eth0 speed is unknown, defaulting to 1000 [ 1361.869649][T21997] netlink: 207776 bytes leftover after parsing attributes in process `syz.2.4823'. [ 1361.930559][T22000] netlink: 'syz.3.4824': attribute type 21 has an invalid length. [ 1362.026456][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.033002][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.049684][T22000] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4824'. [ 1362.184286][T22000] sit0: entered allmulticast mode [ 1362.269495][T22001] sit0: entered promiscuous mode [ 1362.863219][T22015] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4828'. [ 1362.936168][T22015] hsr_slave_0: left promiscuous mode [ 1363.146332][T22015] hsr_slave_1: left promiscuous mode [ 1364.103026][T22032] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.4833'. [ 1364.236326][T22032] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4833'. [ 1364.389589][T22032] bond0: (slave bond_slave_0): Releasing backup interface [ 1364.569158][T22032] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1364.846661][T22026] rxe_eth0 speed is unknown, defaulting to 1000 [ 1365.202864][T22043] netlink: 'syz.3.4836': attribute type 21 has an invalid length. [ 1365.215355][T22043] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4836'. [ 1365.368333][T22040] sit0: left promiscuous mode [ 1365.721903][T22043] sit0: entered promiscuous mode [ 1365.869771][T22035] rxe_eth0 speed is unknown, defaulting to 1000 [ 1365.901212][T22048] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4837'. [ 1367.767889][T22069] netlink: 'syz.3.4846': attribute type 21 has an invalid length. [ 1367.777843][T22069] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4846'. [ 1367.855756][T22069] sit0: left promiscuous mode [ 1368.129359][T22074] sit0: entered promiscuous mode [ 1369.609904][T22093] rxe_eth0 speed is unknown, defaulting to 1000 [ 1370.612950][T22109] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.4858'. [ 1370.681498][T22111] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4858'. [ 1371.041407][T22098] rxe_eth0 speed is unknown, defaulting to 1000 [ 1371.816229][T22126] FAULT_INJECTION: forcing a failure. [ 1371.816229][T22126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1371.837246][T22126] CPU: 1 PID: 22126 Comm: syz.1.4865 Not tainted syzkaller #0 [ 1371.844780][T22126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1371.854884][T22126] Call Trace: [ 1371.858210][T22126] [ 1371.861192][T22126] dump_stack_lvl+0x18c/0x250 [ 1371.865955][T22126] ? show_regs_print_info+0x20/0x20 [ 1371.871295][T22126] ? load_image+0x420/0x420 [ 1371.875937][T22126] ? __might_fault+0xaa/0x120 [ 1371.880673][T22126] ? __lock_acquire+0x7eb0/0x7eb0 [ 1371.885754][T22126] ? __virt_addr_valid+0x10c/0x380 [ 1371.890928][T22126] should_fail_ex+0x394/0x4c0 [ 1371.895674][T22126] _copy_from_user+0x2f/0xe0 [ 1371.900494][T22126] csum_and_copy_from_iter+0x660/0x1480 [ 1371.906115][T22126] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 1371.911809][T22126] ? __alloc_pages+0x276/0x460 [ 1371.916625][T22126] ? zone_statistics+0x170/0x170 [ 1371.921602][T22126] ? mark_lock+0x94/0x320 [ 1371.926073][T22126] ? __lock_acquire+0x1431/0x7eb0 [ 1371.931239][T22126] ip_generic_getfrag+0x163/0x2f0 [ 1371.936354][T22126] ? ip_skb_dst_mtu+0xb70/0xb70 [ 1371.941252][T22126] ? raw_getfrag+0x11d/0x390 [ 1371.946000][T22126] ? skb_page_frag_refill+0x199/0x310 [ 1371.951449][T22126] __ip_append_data+0x1e6a/0x3bf0 [ 1371.956521][T22126] ? _local_bh_enable+0xa0/0xa0 [ 1371.961460][T22126] ? raw_send_hdrinc+0x1150/0x1150 [ 1371.966653][T22126] ? ip_setup_cork+0x840/0x840 [ 1371.971567][T22126] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1371.976981][T22126] ? lockdep_hardirqs_on+0x98/0x150 [ 1371.982233][T22126] ip_append_data+0x10d/0x180 [ 1371.986970][T22126] ? raw_send_hdrinc+0x1150/0x1150 [ 1371.992149][T22126] raw_sendmsg+0x155e/0x1ba0 [ 1371.996833][T22126] ? compat_raw_ioctl+0x70/0x70 [ 1372.001782][T22126] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 1372.008258][T22126] ? aa_sock_msg_perm+0x94/0x150 [ 1372.013249][T22126] ? sock_rps_record_flow+0x19/0x3f0 [ 1372.018589][T22126] ? inet_sendmsg+0x7e/0x2a0 [ 1372.023226][T22126] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1372.028561][T22126] ? inet_send_prepare+0x250/0x250 [ 1372.033733][T22126] ____sys_sendmsg+0x61b/0x980 [ 1372.038551][T22126] ? __asan_memset+0x22/0x40 [ 1372.043208][T22126] ? __sys_sendmsg_sock+0x30/0x30 [ 1372.048281][T22126] ? __import_iovec+0x3fa/0x850 [ 1372.053206][T22126] ? import_iovec+0x73/0xa0 [ 1372.057768][T22126] ___sys_sendmsg+0x2a6/0x360 [ 1372.062506][T22126] ? __sys_sendmsg+0x2b0/0x2b0 [ 1372.067357][T22126] ? __lock_acquire+0x7eb0/0x7eb0 [ 1372.072477][T22126] __se_sys_sendmsg+0x1d0/0x2c0 [ 1372.077386][T22126] ? __x64_sys_sendmsg+0x80/0x80 [ 1372.082398][T22126] ? lockdep_hardirqs_on+0x98/0x150 [ 1372.087649][T22126] do_syscall_64+0x55/0xb0 [ 1372.092118][T22126] ? clear_bhb_loop+0x40/0x90 [ 1372.096865][T22126] ? clear_bhb_loop+0x40/0x90 [ 1372.101604][T22126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1372.107549][T22126] RIP: 0033:0x7fb9b87a8f19 [ 1372.112016][T22126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.131674][T22126] RSP: 002b:00007fb9b960a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1372.140145][T22126] RAX: ffffffffffffffda RBX: 00007fb9b8a25fa0 RCX: 00007fb9b87a8f19 [ 1372.148184][T22126] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 1372.156220][T22126] RBP: 00007fb9b960a090 R08: 0000000000000000 R09: 0000000000000000 [ 1372.164241][T22126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1372.172259][T22126] R13: 00007fb9b8a26038 R14: 00007fb9b8a25fa0 R15: 00007fff6fafebd8 [ 1372.180300][T22126] [ 1372.600993][T22141] netlink: 'syz.0.4877': attribute type 21 has an invalid length. [ 1372.625972][T22141] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4877'. [ 1372.972534][T22145] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.4872'. [ 1373.087377][T22139] sit0: left promiscuous mode [ 1373.673113][T22146] sit0: entered promiscuous mode [ 1373.891503][T22151] FAULT_INJECTION: forcing a failure. [ 1373.891503][T22151] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.918678][T22151] CPU: 1 PID: 22151 Comm: syz.1.4873 Not tainted syzkaller #0 [ 1373.926210][T22151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1373.936283][T22151] Call Trace: [ 1373.939572][T22151] [ 1373.942517][T22151] dump_stack_lvl+0x18c/0x250 [ 1373.947311][T22151] ? show_regs_print_info+0x20/0x20 [ 1373.952526][T22151] ? load_image+0x420/0x420 [ 1373.957063][T22151] should_fail_ex+0x394/0x4c0 [ 1373.961770][T22151] should_failslab+0x9/0x20 [ 1373.966282][T22151] slab_pre_alloc_hook+0x59/0x300 [ 1373.971316][T22151] ? lockdep_hardirqs_on+0x98/0x150 [ 1373.976528][T22151] ? cfg80211_wext_siwscan+0x245/0x1150 [ 1373.982100][T22151] ? cfg80211_wext_siwscan+0x245/0x1150 [ 1373.987685][T22151] __kmem_cache_alloc_node+0x53/0x260 [ 1373.993073][T22151] ? cfg80211_wext_siwscan+0x245/0x1150 [ 1373.998639][T22151] __kmalloc+0xa7/0x240 [ 1374.002818][T22151] cfg80211_wext_siwscan+0x245/0x1150 [ 1374.008216][T22151] ? ioctl_standard_iw_point+0x52d/0xd50 [ 1374.013957][T22151] ? rcu_is_watching+0x15/0xb0 [ 1374.018738][T22151] ? __kmalloc+0xe5/0x240 [ 1374.023090][T22151] ioctl_standard_iw_point+0x827/0xd50 [ 1374.028750][T22151] ? cfg80211_rehash_bss+0x530/0x530 [ 1374.034049][T22151] ? iw_handler_get_iwstats+0x110/0x110 [ 1374.039610][T22151] ? wext_ioctl_dispatch+0x106/0x650 [ 1374.044908][T22151] ? mutex_lock_nested+0x20/0x20 [ 1374.049864][T22151] ioctl_standard_call+0xae/0x250 [ 1374.054912][T22151] ? cfg80211_rehash_bss+0x530/0x530 [ 1374.060299][T22151] ? cfg80211_rehash_bss+0x530/0x530 [ 1374.065602][T22151] wext_ioctl_dispatch+0x51a/0x650 [ 1374.070731][T22151] ? __lock_acquire+0x7eb0/0x7eb0 [ 1374.075778][T22151] ? wext_ioctl_dispatch+0x650/0x650 [ 1374.081087][T22151] ? iw_handler_get_private+0x1f0/0x1f0 [ 1374.086646][T22151] ? wext_handle_ioctl+0x1e0/0x1e0 [ 1374.091767][T22151] ? __might_fault+0xaa/0x120 [ 1374.096462][T22151] ? __might_fault+0xc6/0x120 [ 1374.101152][T22151] ? __might_fault+0xaa/0x120 [ 1374.105873][T22151] wext_handle_ioctl+0x118/0x1e0 [ 1374.110830][T22151] ? call_commit_handler+0xf0/0xf0 [ 1374.115959][T22151] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1374.122046][T22151] ? lock_chain_count+0x20/0x20 [ 1374.126911][T22151] sock_ioctl+0x15d/0x7e0 [ 1374.131262][T22151] ? sock_poll+0x460/0x460 [ 1374.135698][T22151] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1374.141869][T22151] ? sock_poll+0x460/0x460 [ 1374.146303][T22151] ? __se_sys_ioctl+0xf1/0x170 [ 1374.151086][T22151] ? sock_poll+0x460/0x460 [ 1374.155512][T22151] __se_sys_ioctl+0xfd/0x170 [ 1374.160122][T22151] do_syscall_64+0x55/0xb0 [ 1374.164555][T22151] ? clear_bhb_loop+0x40/0x90 [ 1374.169274][T22151] ? clear_bhb_loop+0x40/0x90 [ 1374.173968][T22151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1374.179875][T22151] RIP: 0033:0x7fb9b87a8f19 [ 1374.184303][T22151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1374.203941][T22151] RSP: 002b:00007fb9b960a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1374.212372][T22151] RAX: ffffffffffffffda RBX: 00007fb9b8a25fa0 RCX: 00007fb9b87a8f19 [ 1374.220359][T22151] RDX: 0000200000001240 RSI: 0000000000008b18 RDI: 0000000000000009 [ 1374.228339][T22151] RBP: 00007fb9b960a090 R08: 0000000000000000 R09: 0000000000000000 [ 1374.236317][T22151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1374.244300][T22151] R13: 00007fb9b8a26038 R14: 00007fb9b8a25fa0 R15: 00007fff6fafebd8 [ 1374.252296][T22151] [ 1374.307356][T22145] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4872'. [ 1374.319313][T22145] bond0: (slave bond_slave_0): Releasing backup interface [ 1374.339933][T22145] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1374.373525][T22149] rxe_eth0 speed is unknown, defaulting to 1000 [ 1375.454832][T22183] netlink: 'syz.1.4881': attribute type 21 has an invalid length. [ 1375.466098][T22183] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4881'. [ 1375.585235][T22186] sit0: left promiscuous mode [ 1375.689900][T22183] sit0: entered promiscuous mode [ 1376.658579][T22192] netlink: 'syz.0.4890': attribute type 21 has an invalid length. [ 1376.671806][T22192] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4890'. [ 1376.837071][T22193] sit0: left promiscuous mode [ 1377.449226][T22192] sit0: entered promiscuous mode [ 1377.689604][T22198] netlink: 'syz.1.4885': attribute type 21 has an invalid length. [ 1377.706345][T22198] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4885'. [ 1377.733820][T22201] sit0: left promiscuous mode [ 1377.814787][T22206] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4886'. [ 1377.920549][T22202] sit0: entered promiscuous mode [ 1378.081845][T22206] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.4886'. [ 1378.122359][T22206] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4886'. [ 1378.186200][T22206] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.4886'. [ 1378.250019][T22206] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4886'. [ 1378.275344][T22206] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.4886'. [ 1378.306444][T22206] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4886'. [ 1378.323376][T22219] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4889'. [ 1378.718157][T22229] FAULT_INJECTION: forcing a failure. [ 1378.718157][T22229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1378.750641][T22225] netlink: 'syz.0.4892': attribute type 21 has an invalid length. [ 1378.794882][T22229] CPU: 1 PID: 22229 Comm: syz.2.4894 Not tainted syzkaller #0 [ 1378.802474][T22229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1378.812579][T22229] Call Trace: [ 1378.815936][T22229] [ 1378.818899][T22229] dump_stack_lvl+0x18c/0x250 [ 1378.823640][T22229] ? show_regs_print_info+0x20/0x20 [ 1378.828873][T22229] ? load_image+0x420/0x420 [ 1378.833410][T22229] ? __might_fault+0xaa/0x120 [ 1378.838116][T22229] ? __lock_acquire+0x7eb0/0x7eb0 [ 1378.843178][T22229] should_fail_ex+0x394/0x4c0 [ 1378.847894][T22229] _copy_from_user+0x2f/0xe0 [ 1378.852512][T22229] sk_setsockopt+0x2b9/0x2b20 [ 1378.857244][T22229] ? sockopt_capable+0x60/0x60 [ 1378.862049][T22229] ? aa_sk_perm+0x7bb/0x8e0 [ 1378.866591][T22229] ? aa_af_perm+0x330/0x330 [ 1378.871216][T22229] ? __fget_files+0x28/0x460 [ 1378.875852][T22229] ? aa_sock_opt_perm+0x74/0x100 [ 1378.880819][T22229] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1378.886402][T22229] ? security_socket_setsockopt+0x7e/0xa0 [ 1378.892161][T22229] do_sock_setsockopt+0x11b/0x1a0 [ 1378.897228][T22229] __x64_sys_setsockopt+0x182/0x200 [ 1378.902467][T22229] do_syscall_64+0x55/0xb0 [ 1378.906917][T22229] ? clear_bhb_loop+0x40/0x90 [ 1378.911629][T22229] ? clear_bhb_loop+0x40/0x90 [ 1378.916344][T22229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1378.922269][T22229] RIP: 0033:0x7fd5ceba8f19 [ 1378.926715][T22229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1378.946350][T22229] RSP: 002b:00007fd5cfacb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1378.954794][T22229] RAX: ffffffffffffffda RBX: 00007fd5cee25fa0 RCX: 00007fd5ceba8f19 [ 1378.962790][T22229] RDX: 0000000000000022 RSI: 0000000000000001 RDI: 0000000000000006 [ 1378.970784][T22229] RBP: 00007fd5cfacb090 R08: 0000000000000004 R09: 0000000000000000 [ 1378.978782][T22229] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000001 [ 1378.986784][T22229] R13: 00007fd5cee26038 R14: 00007fd5cee25fa0 R15: 00007fffd7344218 [ 1378.994795][T22229] [ 1379.138065][T22230] sit0: left promiscuous mode [ 1379.276667][T22225] sit0: entered promiscuous mode [ 1380.532216][T22246] netlink: 'syz.2.4900': attribute type 21 has an invalid length. [ 1380.755676][T22246] sit0: left promiscuous mode [ 1381.111967][T22239] rxe_eth0 speed is unknown, defaulting to 1000 [ 1381.165363][T22250] sit0: entered promiscuous mode [ 1382.038195][T22269] netlink: 'syz.2.4908': attribute type 21 has an invalid length. [ 1382.047302][T22269] __nla_validate_parse: 41 callbacks suppressed [ 1382.047332][T22269] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4908'. [ 1382.134023][T22270] sit0: left promiscuous mode [ 1382.391542][T22269] sit0: entered promiscuous mode [ 1382.420256][T22277] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4911'. [ 1382.767267][T22281] netlink: 'syz.1.4913': attribute type 21 has an invalid length. [ 1382.781725][T22281] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4913'. [ 1382.896899][T22286] sit0: left promiscuous mode [ 1382.986042][T22281] sit0: entered promiscuous mode [ 1383.598838][T22294] netlink: 'syz.3.4919': attribute type 21 has an invalid length. [ 1383.609324][T22294] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4919'. [ 1383.678730][T22294] sit0: left promiscuous mode [ 1384.010221][T22301] sit0: entered promiscuous mode [ 1384.217167][T22300] netlink: 'syz.1.4921': attribute type 21 has an invalid length. [ 1384.243648][T22300] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4921'. [ 1384.431741][T22306] sit0: left promiscuous mode [ 1384.554479][T22307] sit0: entered promiscuous mode [ 1384.848093][T22319] netlink: 'syz.0.4926': attribute type 21 has an invalid length. [ 1385.187029][T22327] tun0: tun_chr_ioctl cmd 35108 [ 1385.268244][T22327] netlink: 'syz.2.4928': attribute type 22 has an invalid length. [ 1385.296264][T22327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4928'. [ 1385.759859][T22337] netlink: 'syz.0.4933': attribute type 21 has an invalid length. [ 1385.772964][T22337] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4933'. [ 1385.902728][T22321] rxe_eth0 speed is unknown, defaulting to 1000 [ 1385.921221][T22337] sit0: left promiscuous mode [ 1386.165161][T22348] FAULT_INJECTION: forcing a failure. [ 1386.165161][T22348] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.213340][T22348] CPU: 1 PID: 22348 Comm: syz.2.4936 Not tainted syzkaller #0 [ 1386.220877][T22348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1386.230969][T22348] Call Trace: [ 1386.234302][T22348] [ 1386.237298][T22348] dump_stack_lvl+0x18c/0x250 [ 1386.242027][T22348] ? show_regs_print_info+0x20/0x20 [ 1386.247272][T22348] ? load_image+0x420/0x420 [ 1386.251819][T22348] ? __might_sleep+0xe0/0xe0 [ 1386.256462][T22348] ? __lock_acquire+0x7eb0/0x7eb0 [ 1386.261537][T22348] should_fail_ex+0x394/0x4c0 [ 1386.266259][T22348] should_failslab+0x9/0x20 [ 1386.270788][T22348] slab_pre_alloc_hook+0x59/0x300 [ 1386.275849][T22348] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1386.281611][T22348] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1386.287452][T22348] __kmem_cache_alloc_node+0x53/0x260 [ 1386.292878][T22348] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1386.298636][T22348] __kmalloc+0xa7/0x240 [ 1386.302846][T22348] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1386.308431][T22348] ? tomoyo_domain+0xd6/0x120 [ 1386.313153][T22348] tomoyo_path_number_perm+0x248/0x5e0 [ 1386.318673][T22348] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1386.324525][T22348] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1386.330023][T22348] ? ksys_write+0x1d2/0x260 [ 1386.334608][T22348] ? __fget_files+0x28/0x460 [ 1386.339262][T22348] security_file_ioctl+0x70/0xa0 [ 1386.344246][T22348] __se_sys_ioctl+0x48/0x170 [ 1386.348872][T22348] do_syscall_64+0x55/0xb0 [ 1386.353326][T22348] ? clear_bhb_loop+0x40/0x90 [ 1386.358036][T22348] ? clear_bhb_loop+0x40/0x90 [ 1386.362753][T22348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1386.368681][T22348] RIP: 0033:0x7fd5ceba8f19 [ 1386.373134][T22348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1386.393828][T22348] RSP: 002b:00007fd5cfaaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1386.402285][T22348] RAX: ffffffffffffffda RBX: 00007fd5cee26090 RCX: 00007fd5ceba8f19 [ 1386.410289][T22348] RDX: 0000200000000100 RSI: 0000000000008940 RDI: 0000000000000006 [ 1386.418290][T22348] RBP: 00007fd5cfaaa090 R08: 0000000000000000 R09: 0000000000000000 [ 1386.426294][T22348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1386.434295][T22348] R13: 00007fd5cee26128 R14: 00007fd5cee26090 R15: 00007fffd7344218 [ 1386.442324][T22348] [ 1386.514633][T22348] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1386.636981][T22342] sit0: entered promiscuous mode [ 1386.672695][T22349] netlink: 'syz.1.4935': attribute type 21 has an invalid length. [ 1386.680857][T22349] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4935'. [ 1386.885041][T22358] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.4939'. [ 1386.895476][T22358] openvswitch: netlink: Flow key attr not present in new flow. [ 1387.608329][T22366] netlink: 'syz.0.4941': attribute type 21 has an invalid length. [ 1387.616850][T22366] FAULT_INJECTION: forcing a failure. [ 1387.616850][T22366] name failslab, interval 1, probability 0, space 0, times 0 [ 1387.630185][T22366] CPU: 1 PID: 22366 Comm: syz.0.4941 Not tainted syzkaller #0 [ 1387.637686][T22366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1387.647743][T22366] Call Trace: [ 1387.651030][T22366] [ 1387.653958][T22366] dump_stack_lvl+0x18c/0x250 [ 1387.658740][T22366] ? show_regs_print_info+0x20/0x20 [ 1387.663947][T22366] ? load_image+0x420/0x420 [ 1387.668464][T22366] ? __might_sleep+0xe0/0xe0 [ 1387.673078][T22366] ? __lock_acquire+0x7eb0/0x7eb0 [ 1387.678131][T22366] should_fail_ex+0x394/0x4c0 [ 1387.682829][T22366] should_failslab+0x9/0x20 [ 1387.687367][T22366] slab_pre_alloc_hook+0x59/0x300 [ 1387.692430][T22366] ? fib_create_info+0xa8d/0x2390 [ 1387.697500][T22366] ? fib_create_info+0xa8d/0x2390 [ 1387.702545][T22366] __kmem_cache_alloc_node+0x53/0x260 [ 1387.707935][T22366] ? fib_create_info+0xa8d/0x2390 [ 1387.712979][T22366] __kmalloc+0xa7/0x240 [ 1387.717159][T22366] fib_create_info+0xa8d/0x2390 [ 1387.722035][T22366] fib_table_insert+0xc6/0x1b00 [ 1387.726900][T22366] ? lwtunnel_valid_encap_type+0x90/0x600 [ 1387.732656][T22366] ? rtm_to_fib_config+0x1065/0x13b0 [ 1387.737966][T22366] ? fib_new_table+0x10a/0x2d0 [ 1387.742749][T22366] inet_rtm_newroute+0x14b/0x240 [ 1387.747705][T22366] ? rcu_read_unlock+0xa0/0xa0 [ 1387.752496][T22366] ? rcu_read_unlock+0xa0/0xa0 [ 1387.757273][T22366] rtnetlink_rcv_msg+0x843/0xf90 [ 1387.762230][T22366] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1387.767359][T22366] ? rtnetlink_bind+0x80/0x80 [ 1387.772045][T22366] ? kasan_quarantine_put+0xd8/0x220 [ 1387.777372][T22366] ? lockdep_hardirqs_on+0x98/0x150 [ 1387.782646][T22366] ? perf_trace_preemptirq_template+0xac/0x330 [ 1387.788826][T22366] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1387.794829][T22366] ? lock_chain_count+0x20/0x20 [ 1387.799696][T22366] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1387.805097][T22366] ? lockdep_hardirqs_on+0x98/0x150 [ 1387.810307][T22366] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1387.815691][T22366] ? _local_bh_enable+0xa0/0xa0 [ 1387.820561][T22366] ? __dev_queue_xmit+0x1481/0x3a30 [ 1387.825816][T22366] ? __dev_queue_xmit+0x6d1/0x3a30 [ 1387.830976][T22366] ? ref_tracker_free+0x686/0x830 [ 1387.836042][T22366] netlink_rcv_skb+0x235/0x4c0 [ 1387.840823][T22366] ? rtnetlink_bind+0x80/0x80 [ 1387.845512][T22366] ? netlink_ack+0x1160/0x1160 [ 1387.850298][T22366] ? __lock_acquire+0x7eb0/0x7eb0 [ 1387.855342][T22366] ? netlink_deliver_tap+0x2e/0x1b0 [ 1387.860643][T22366] netlink_unicast+0x856/0x9e0 [ 1387.865440][T22366] netlink_sendmsg+0x8d0/0xbf0 [ 1387.870225][T22366] ? netlink_getsockopt+0x590/0x590 [ 1387.875433][T22366] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1387.881000][T22366] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1387.886305][T22366] ? security_socket_sendmsg+0x80/0xa0 [ 1387.891778][T22366] ? netlink_getsockopt+0x590/0x590 [ 1387.897162][T22366] ____sys_sendmsg+0x61b/0x980 [ 1387.901946][T22366] ? __asan_memset+0x22/0x40 [ 1387.906582][T22366] ? __sys_sendmsg_sock+0x30/0x30 [ 1387.911703][T22366] ? __import_iovec+0x3fa/0x850 [ 1387.916587][T22366] ? import_iovec+0x73/0xa0 [ 1387.921108][T22366] ___sys_sendmsg+0x2a6/0x360 [ 1387.925794][T22366] ? get_pid_task+0x20/0x1e0 [ 1387.930426][T22366] ? __sys_sendmsg+0x2b0/0x2b0 [ 1387.935251][T22366] ? __lock_acquire+0x7eb0/0x7eb0 [ 1387.940329][T22366] __se_sys_sendmsg+0x1d0/0x2c0 [ 1387.945202][T22366] ? __x64_sys_sendmsg+0x80/0x80 [ 1387.950166][T22366] ? lockdep_hardirqs_on+0x98/0x150 [ 1387.955381][T22366] do_syscall_64+0x55/0xb0 [ 1387.959841][T22366] ? clear_bhb_loop+0x40/0x90 [ 1387.964559][T22366] ? clear_bhb_loop+0x40/0x90 [ 1387.969263][T22366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1387.975174][T22366] RIP: 0033:0x7f84209a8f19 [ 1387.979603][T22366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1387.999234][T22366] RSP: 002b:00007f8421899028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1388.007664][T22366] RAX: ffffffffffffffda RBX: 00007f8420c25fa0 RCX: 00007f84209a8f19 [ 1388.015675][T22366] RDX: 0000000000000410 RSI: 0000200000000940 RDI: 0000000000000003 [ 1388.023671][T22366] RBP: 00007f8421899090 R08: 0000000000000000 R09: 0000000000000000 [ 1388.031746][T22366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1388.040335][T22366] R13: 00007f8420c26038 R14: 00007f8420c25fa0 R15: 00007ffd7d7cca28 [ 1388.048423][T22366] [ 1388.259057][T22380] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4945'. [ 1388.506275][T22388] netlink: 'syz.2.4947': attribute type 21 has an invalid length. [ 1388.527900][T22388] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4947'. [ 1388.644613][T22388] sit0: left promiscuous mode [ 1388.894612][T22393] sit0: entered promiscuous mode [ 1389.406039][T22404] netlink: 'syz.3.4952': attribute type 29 has an invalid length. [ 1389.441941][T22404] netlink: 'syz.3.4952': attribute type 29 has an invalid length. [ 1389.474830][T22408] netlink: 'syz.3.4952': attribute type 29 has an invalid length. [ 1389.534009][T22404] netlink: 'syz.3.4952': attribute type 29 has an invalid length. [ 1389.564278][T22404] netlink: 'syz.3.4952': attribute type 29 has an invalid length. [ 1390.048146][T22417] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4958'. [ 1390.079340][T22416] netlink: 'syz.3.4957': attribute type 21 has an invalid length. [ 1390.107245][T22416] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4957'. [ 1390.292248][T22420] netlink: 'syz.0.4959': attribute type 21 has an invalid length. [ 1390.301410][T22420] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4959'. [ 1392.877823][T22416] sit0: left promiscuous mode [ 1393.136931][T22421] sit0: entered promiscuous mode [ 1393.305425][T22423] sit0: left promiscuous mode [ 1393.433236][T22426] sit0: entered promiscuous mode [ 1393.605476][T22436] rxe_eth0 speed is unknown, defaulting to 1000 [ 1393.702640][T22445] netlink: 'syz.3.4965': attribute type 29 has an invalid length. [ 1393.719610][T22445] netlink: 'syz.3.4965': attribute type 29 has an invalid length. [ 1393.735438][T22445] netlink: 'syz.3.4965': attribute type 29 has an invalid length. [ 1393.751937][T22445] netlink: 'syz.3.4965': attribute type 29 has an invalid length. [ 1393.761325][T22445] netlink: 'syz.3.4965': attribute type 29 has an invalid length. [ 1395.025415][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1395.042758][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1395.052020][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1395.069989][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1395.079401][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1395.087176][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1395.188297][T22461] rxe_eth0 speed is unknown, defaulting to 1000 [ 1395.884386][ T8165] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.035299][ T8165] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.052628][T22467] rxe_eth0 speed is unknown, defaulting to 1000 [ 1396.067100][T22461] chnl_net:caif_netlink_parms(): no params data found [ 1396.136524][ T8165] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.262797][ T8165] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.399435][T22481] netlink: 'syz.3.4974': attribute type 21 has an invalid length. [ 1396.409778][T22481] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4974'. [ 1396.478227][T22461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.498053][T22461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.505356][T22461] bridge_slave_0: entered allmulticast mode [ 1396.512963][T22461] bridge_slave_0: entered promiscuous mode [ 1396.525464][T22461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.534093][T22461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.541487][T22461] bridge_slave_1: entered allmulticast mode [ 1396.549038][T22461] bridge_slave_1: entered promiscuous mode [ 1396.573376][T22486] sit0: left promiscuous mode [ 1396.818935][T22481] sit0: entered promiscuous mode [ 1397.167080][T21425] Bluetooth: hci3: command tx timeout [ 1397.301316][T22461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1397.372744][T22461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1397.454204][T22461] team0: Port device team_slave_0 added [ 1397.495543][T22461] team0: Port device team_slave_1 added [ 1397.650723][T22495] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4977'. [ 1397.673873][T22492] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4977'. [ 1397.697750][T22461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.714948][T22461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.766235][T22461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1398.196209][T22461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1398.203272][T22461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1398.268620][T22461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1398.948933][T22461] hsr_slave_0: entered promiscuous mode [ 1398.988607][T22461] hsr_slave_1: entered promiscuous mode [ 1399.246585][T21425] Bluetooth: hci3: command tx timeout [ 1400.031906][T22519] rxe_eth0 speed is unknown, defaulting to 1000 [ 1400.472713][T22539] netlink: 'syz.2.4984': attribute type 21 has an invalid length. [ 1400.497920][T22539] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4984'. [ 1400.729829][T22543] sit0: left promiscuous mode [ 1400.942627][T22539] sit0: entered promiscuous mode [ 1401.336003][T21425] Bluetooth: hci3: command tx timeout [ 1401.625389][ T8165] hsr_slave_0: left promiscuous mode [ 1401.639469][ T8165] hsr_slave_1: left promiscuous mode [ 1401.646823][ T8165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1401.654298][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1401.704332][ T8165] veth1_macvtap: left promiscuous mode [ 1401.714592][ T8165] veth0_macvtap: left promiscuous mode [ 1401.723535][ T8165] veth1_vlan: left promiscuous mode [ 1401.729548][ T8165] veth0_vlan: left promiscuous mode [ 1403.021663][ T8165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1403.414105][T21425] Bluetooth: hci3: command tx timeout [ 1403.624896][ T8165] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1403.675750][ T8165] bond0 (unregistering): Released all slaves [ 1404.038572][T22461] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1404.092761][T22461] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1404.118620][T22461] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1404.173733][T22567] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1404.186618][T22461] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1404.396317][T22567] netlink: 'syz.2.4990': attribute type 10 has an invalid length. [ 1404.404920][T22567] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4990'. [ 1404.573442][T22461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1404.678884][T22461] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.724062][ T7704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.731321][ T7704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.776028][ T8165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.783151][ T8165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.211954][T22461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1405.365059][T22461] veth0_vlan: entered promiscuous mode [ 1405.482844][T22461] veth1_vlan: entered promiscuous mode [ 1405.676578][T22461] veth0_macvtap: entered promiscuous mode [ 1405.729148][T22461] veth1_macvtap: entered promiscuous mode [ 1405.851059][T22461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1405.924019][T22461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1405.967668][T22461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.005589][T22461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.075806][T22461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.095810][T22461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.126086][T22461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.173483][T22461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1406.283416][T22607] netlink: 'syz.2.4993': attribute type 21 has an invalid length. [ 1406.310861][T22607] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4993'. [ 1406.353612][T22461] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.373235][T22461] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.391436][T22461] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.405841][T22461] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.434171][T22589] rxe_eth0 speed is unknown, defaulting to 1000 [ 1406.457501][T22606] sit0: left promiscuous mode [ 1406.806201][T22607] sit0: entered promiscuous mode [ 1407.238613][T17351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1407.261280][T17351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.365520][T17351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1407.382208][T17351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.756340][T22632] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5003'. [ 1407.815825][T22634] netlink: 'syz.2.5002': attribute type 21 has an invalid length. [ 1407.930386][T22634] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5002'. [ 1409.043769][T22637] sit0: left promiscuous mode [ 1409.495012][T22630] sit0: entered promiscuous mode [ 1410.892065][T22636] rxe_eth0 speed is unknown, defaulting to 1000 [ 1411.617464][T22665] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4997'. [ 1412.713542][T22675] netlink: 'syz.2.5004': attribute type 21 has an invalid length. [ 1412.732571][T22675] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5004'. [ 1412.893526][T22675] sit0: left promiscuous mode [ 1413.195894][T22677] sit0: entered promiscuous mode [ 1413.582107][T22684] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5006'. [ 1413.594792][T22687] IPv6: Can't replace route, no match found [ 1415.350117][T22691] netlink: 'syz.2.5007': attribute type 21 has an invalid length. [ 1415.358917][T22691] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5007'. [ 1415.373063][T22694] sit0: left promiscuous mode [ 1415.495436][T22695] sit0: entered promiscuous mode [ 1415.676942][T22702] rxe_eth0 speed is unknown, defaulting to 1000 [ 1415.732143][T22706] netlink: 'syz.1.5009': attribute type 21 has an invalid length. [ 1415.786099][T22706] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5009'. [ 1415.850005][T22706] sit0: left promiscuous mode [ 1416.304222][T22707] sit0: entered promiscuous mode [ 1416.905310][T22717] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5013'. [ 1417.683986][T22728] netlink: 'syz.0.5016': attribute type 21 has an invalid length. [ 1417.705429][T22728] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5016'. [ 1417.863025][T22728] sit0: entered allmulticast mode [ 1417.974595][T22738] netlink: 'syz.1.5017': attribute type 2 has an invalid length. [ 1418.004976][T22735] netlink: 'syz.2.5018': attribute type 21 has an invalid length. [ 1418.016942][T22738] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5017'. [ 1418.044090][T22735] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5018'. [ 1418.077285][T22730] sit0: entered promiscuous mode [ 1418.371586][T22735] sit0: left promiscuous mode [ 1418.677627][T22742] sit0: entered promiscuous mode [ 1419.389493][T22756] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5024'. [ 1419.921485][T22769] netlink: 'syz.3.5028': attribute type 21 has an invalid length. [ 1419.937138][T22769] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5028'. [ 1420.035018][T22769] sit0: left promiscuous mode [ 1420.449310][T22774] sit0: entered promiscuous mode [ 1420.625396][T22775] netlink: 'syz.1.5029': attribute type 21 has an invalid length. [ 1420.661019][T22775] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5029'. [ 1420.724236][T22787] sit0: left promiscuous mode [ 1421.110498][T22775] sit0: entered promiscuous mode [ 1421.883963][T22793] FAULT_INJECTION: forcing a failure. [ 1421.883963][T22793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1421.923510][T22793] CPU: 1 PID: 22793 Comm: syz.3.5034 Not tainted syzkaller #0 [ 1421.931057][T22793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1421.941146][T22793] Call Trace: [ 1421.944465][T22793] [ 1421.947430][T22793] dump_stack_lvl+0x18c/0x250 [ 1421.952168][T22793] ? show_regs_print_info+0x20/0x20 [ 1421.957417][T22793] ? load_image+0x420/0x420 [ 1421.962010][T22793] ? __lock_acquire+0x7eb0/0x7eb0 [ 1421.967109][T22793] should_fail_ex+0x394/0x4c0 [ 1421.971849][T22793] _copy_from_user+0x2f/0xe0 [ 1421.976496][T22793] bpf_prog_test_run_skb+0x267/0x18f0 [ 1421.981942][T22793] ? __fget_files+0x28/0x460 [ 1421.986581][T22793] ? __fget_files+0x3fc/0x460 [ 1421.991320][T22793] ? cpu_online+0x60/0x60 [ 1421.995739][T22793] bpf_prog_test_run+0x31f/0x390 [ 1421.999999][T22785] rxe_eth0 speed is unknown, defaulting to 1000 [ 1422.000710][T22793] __sys_bpf+0x49d/0x890 [ 1422.011241][T22793] ? bpf_link_show_fdinfo+0x560/0x560 [ 1422.016676][T22793] ? lock_chain_count+0x20/0x20 [ 1422.021584][T22793] __x64_sys_bpf+0x7c/0x90 [ 1422.026051][T22793] do_syscall_64+0x55/0xb0 [ 1422.030512][T22793] ? clear_bhb_loop+0x40/0x90 [ 1422.035238][T22793] ? clear_bhb_loop+0x40/0x90 [ 1422.039965][T22793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1422.046079][T22793] RIP: 0033:0x7f3803da8f19 [ 1422.050536][T22793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1422.070195][T22793] RSP: 002b:00007f3804ba6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1422.078660][T22793] RAX: ffffffffffffffda RBX: 00007f3804025fa0 RCX: 00007f3803da8f19 [ 1422.086680][T22793] RDX: 0000000000000050 RSI: 0000200000000980 RDI: 000000000000000a [ 1422.094701][T22793] RBP: 00007f3804ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 1422.102720][T22793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1422.110739][T22793] R13: 00007f3804026038 R14: 00007f3804025fa0 R15: 00007ffe7832d508 [ 1422.118778][T22793] [ 1422.410672][T22784] rxe_eth0 speed is unknown, defaulting to 1000 [ 1422.425063][T22797] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5036'. [ 1423.545458][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.556095][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.936213][T22813] netlink: 'syz.3.5042': attribute type 21 has an invalid length. [ 1424.955107][T22813] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5042'. [ 1425.108998][T22813] sit0: left promiscuous mode [ 1425.557406][T22816] sit0: entered promiscuous mode [ 1425.978444][T22819] syzkaller0: entered promiscuous mode [ 1425.984002][T22819] syzkaller0: entered allmulticast mode [ 1426.121681][T22834] netlink: 142444 bytes leftover after parsing attributes in process `syz.3.5047'. [ 1430.414669][T22863] netlink: 'syz.1.5056': attribute type 21 has an invalid length. [ 1430.434826][T22863] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5056'. [ 1430.744377][T22848] rxe_eth0 speed is unknown, defaulting to 1000 [ 1432.737800][T22900] netlink: 142444 bytes leftover after parsing attributes in process `syz.1.5065'. [ 1432.827112][T22902] netlink: 'syz.3.5066': attribute type 21 has an invalid length. [ 1432.836217][T22902] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5066'. [ 1433.528738][T22908] netlink: 'syz.2.5067': attribute type 21 has an invalid length. [ 1433.545646][T22908] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5067'. [ 1433.768725][T22908] sit0: left promiscuous mode [ 1434.376447][T22926] netlink: 'syz.0.5075': attribute type 21 has an invalid length. [ 1434.580292][T22927] syzkaller0: entered promiscuous mode [ 1434.611891][T22927] syzkaller0: entered allmulticast mode [ 1435.793867][T22945] netlink: 142444 bytes leftover after parsing attributes in process `syz.2.5080'. [ 1438.470256][T22934] netlink: 'syz.0.5076': attribute type 3 has an invalid length. [ 1438.478551][T22934] netlink: 'syz.0.5076': attribute type 1 has an invalid length. [ 1438.486412][T22934] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5076'. [ 1438.495564][T22936] netlink: 'syz.1.5077': attribute type 21 has an invalid length. [ 1438.513498][T22936] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5077'. [ 1438.556320][T22948] rxe_eth0 speed is unknown, defaulting to 1000 [ 1439.603528][T22974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5089'. [ 1442.551481][T22987] netlink: 'syz.3.5093': attribute type 21 has an invalid length. [ 1442.567196][T22987] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5093'. [ 1442.818161][T22985] syzkaller0: entered promiscuous mode [ 1442.823918][T22985] syzkaller0: entered allmulticast mode [ 1442.837540][T22991] sit0: left promiscuous mode [ 1442.884475][T22993] netlink: 'syz.2.5095': attribute type 10 has an invalid length. [ 1442.904641][T22994] sit0: entered promiscuous mode [ 1445.983349][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 1447.934153][T23017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5102'. [ 1448.146453][T23020] netlink: 'syz.0.5104': attribute type 10 has an invalid length. [ 1448.286941][T23020] team0 (unregistering): Port device team_slave_0 removed [ 1448.333740][T23020] team0 (unregistering): Port device team_slave_1 removed [ 1448.615080][T23027] netlink: 'syz.2.5107': attribute type 21 has an invalid length. [ 1448.623738][T23027] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5107'. [ 1448.739591][T23027] sit0: entered promiscuous mode [ 1449.433891][T23040] netlink: 'syz.0.5118': attribute type 21 has an invalid length. [ 1449.452614][T23040] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5118'. [ 1449.463835][T23034] rxe_eth0 speed is unknown, defaulting to 1000 [ 1449.531337][T23040] sit0: left promiscuous mode [ 1449.828277][T23046] sit0: entered promiscuous mode [ 1450.950387][T23054] syzkaller0: entered promiscuous mode [ 1450.960244][T23054] syzkaller0: entered allmulticast mode [ 1454.102219][T23061] netlink: 'syz.0.5123': attribute type 21 has an invalid length. [ 1454.110559][T23061] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5123'. [ 1454.120760][T23064] sit0: left promiscuous mode [ 1454.179412][T23065] sit0: entered promiscuous mode [ 1454.278069][T23063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5114'. [ 1454.446778][T23073] netlink: 'syz.0.5117': attribute type 10 has an invalid length. [ 1454.634600][T23077] netlink: 'syz.0.5120': attribute type 10 has an invalid length. [ 1454.843921][T23083] FAULT_INJECTION: forcing a failure. [ 1454.843921][T23083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1454.867551][T23083] CPU: 0 PID: 23083 Comm: syz.0.5122 Not tainted syzkaller #0 [ 1454.875076][T23083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1454.885150][T23083] Call Trace: [ 1454.888443][T23083] [ 1454.891383][T23083] dump_stack_lvl+0x18c/0x250 [ 1454.896174][T23083] ? show_regs_print_info+0x20/0x20 [ 1454.901385][T23083] ? load_image+0x420/0x420 [ 1454.905900][T23083] ? __might_fault+0xaa/0x120 [ 1454.910591][T23083] ? __lock_acquire+0x7eb0/0x7eb0 [ 1454.915635][T23083] should_fail_ex+0x394/0x4c0 [ 1454.920341][T23083] _copy_from_user+0x2f/0xe0 [ 1454.924941][T23083] ___sys_sendmsg+0x1c7/0x360 [ 1454.929629][T23083] ? get_pid_task+0x20/0x1e0 [ 1454.934262][T23083] ? __sys_sendmsg+0x2b0/0x2b0 [ 1454.939142][T23083] ? __lock_acquire+0x7eb0/0x7eb0 [ 1454.944198][T23083] __se_sys_sendmsg+0x1d0/0x2c0 [ 1454.949064][T23083] ? __x64_sys_sendmsg+0x80/0x80 [ 1454.954029][T23083] ? lockdep_hardirqs_on+0x98/0x150 [ 1454.959242][T23083] do_syscall_64+0x55/0xb0 [ 1454.963672][T23083] ? clear_bhb_loop+0x40/0x90 [ 1454.968364][T23083] ? clear_bhb_loop+0x40/0x90 [ 1454.973059][T23083] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1454.979054][T23083] RIP: 0033:0x7f63fb9a8f19 [ 1454.983481][T23083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1455.003107][T23083] RSP: 002b:00007f63fc805028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1455.011536][T23083] RAX: ffffffffffffffda RBX: 00007f63fbc25fa0 RCX: 00007f63fb9a8f19 [ 1455.019523][T23083] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1455.027503][T23083] RBP: 00007f63fc805090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.035510][T23083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.043491][T23083] R13: 00007f63fbc26038 R14: 00007f63fbc25fa0 R15: 00007ffeb2a7b6c8 [ 1455.051487][T23083] [ 1455.410991][T23086] syzkaller0: entered promiscuous mode [ 1455.417012][T23086] syzkaller0: entered allmulticast mode [ 1455.425885][T23090] bridge_slave_1: left allmulticast mode [ 1455.444068][T23090] bridge_slave_1: left promiscuous mode [ 1455.456572][T23090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.479399][T23090] bridge_slave_0: left allmulticast mode [ 1455.485314][T23090] bridge_slave_0: left promiscuous mode [ 1455.498219][T23090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.629371][T23093] netlink: 'syz.3.5127': attribute type 21 has an invalid length. [ 1455.638532][T23093] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5127'. [ 1455.661430][T23096] sit0: left promiscuous mode [ 1455.752826][T23097] sit0: entered promiscuous mode [ 1456.388518][T23104] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5129'. [ 1459.075181][T23108] netlink: 'syz.2.5131': attribute type 10 has an invalid length. [ 1459.999724][T23125] netlink: 'syz.3.5137': attribute type 21 has an invalid length. [ 1460.029930][T23125] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5137'. [ 1460.148798][T23128] sit0: left promiscuous mode [ 1460.451352][T23125] sit0: entered promiscuous mode [ 1461.039624][T23120] rxe_eth0 speed is unknown, defaulting to 1000 [ 1461.470127][T23144] syzkaller0: entered promiscuous mode [ 1461.476351][T23144] syzkaller0: entered allmulticast mode [ 1464.346700][T23152] sit0: left promiscuous mode [ 1464.407394][T23155] sit0: entered promiscuous mode [ 1464.640563][T23162] FAULT_INJECTION: forcing a failure. [ 1464.640563][T23162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1464.675890][T23162] CPU: 1 PID: 23162 Comm: syz.1.5144 Not tainted syzkaller #0 [ 1464.683442][T23162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1464.693535][T23162] Call Trace: [ 1464.696848][T23162] [ 1464.699910][T23162] dump_stack_lvl+0x18c/0x250 [ 1464.704656][T23162] ? show_regs_print_info+0x20/0x20 [ 1464.709924][T23162] ? load_image+0x420/0x420 [ 1464.714482][T23162] ? __lock_acquire+0x7eb0/0x7eb0 [ 1464.719576][T23162] should_fail_ex+0x394/0x4c0 [ 1464.724390][T23162] _copy_from_user+0x2f/0xe0 [ 1464.729023][T23162] bpf_test_init+0xde/0x140 [ 1464.733577][T23162] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 1464.738993][T23162] ? __lock_acquire+0x7eb0/0x7eb0 [ 1464.744079][T23162] ? dev_put+0x80/0x80 [ 1464.748199][T23162] ? bpf_prog_test_run+0x313/0x390 [ 1464.753320][T23162] ? dev_put+0x80/0x80 [ 1464.757404][T23162] bpf_prog_test_run+0x31f/0x390 [ 1464.762453][T23162] __sys_bpf+0x49d/0x890 [ 1464.766748][T23162] ? bpf_link_show_fdinfo+0x560/0x560 [ 1464.772185][T23162] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1464.778418][T23162] __x64_sys_bpf+0x7c/0x90 [ 1464.782887][T23162] do_syscall_64+0x55/0xb0 [ 1464.787350][T23162] ? clear_bhb_loop+0x40/0x90 [ 1464.792071][T23162] ? clear_bhb_loop+0x40/0x90 [ 1464.796797][T23162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1464.802728][T23162] RIP: 0033:0x7fb9b87a8f19 [ 1464.807181][T23162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1464.826833][T23162] RSP: 002b:00007fb9b960a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1464.835298][T23162] RAX: ffffffffffffffda RBX: 00007fb9b8a25fa0 RCX: 00007fb9b87a8f19 [ 1464.843304][T23162] RDX: 0000000000000050 RSI: 0000200000002a00 RDI: 000000000000000a [ 1464.851412][T23162] RBP: 00007fb9b960a090 R08: 0000000000000000 R09: 0000000000000000 [ 1464.859409][T23162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1464.867392][T23162] R13: 00007fb9b8a26038 R14: 00007fb9b8a25fa0 R15: 00007fff6fafebd8 [ 1464.875387][T23162] [ 1465.106982][T23168] netlink: 12030 bytes leftover after parsing attributes in process `syz.2.5146'. [ 1466.103012][T23186] sit0: left promiscuous mode [ 1466.389011][T23187] sit0: entered promiscuous mode [ 1466.691262][T23193] syzkaller0: entered promiscuous mode [ 1466.699840][T23193] syzkaller0: entered allmulticast mode [ 1469.899672][T23224] sit0: left promiscuous mode [ 1470.215057][T23239] FAULT_INJECTION: forcing a failure. [ 1470.215057][T23239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1470.252414][T23230] sit0: entered promiscuous mode [ 1470.298201][T23239] CPU: 0 PID: 23239 Comm: syz.1.5167 Not tainted syzkaller #0 [ 1470.305724][T23239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1470.315825][T23239] Call Trace: [ 1470.319139][T23239] [ 1470.322103][T23239] dump_stack_lvl+0x18c/0x250 [ 1470.326827][T23239] ? show_regs_print_info+0x20/0x20 [ 1470.332074][T23239] ? load_image+0x420/0x420 [ 1470.336621][T23239] ? __lock_acquire+0x7eb0/0x7eb0 [ 1470.341743][T23239] should_fail_ex+0x394/0x4c0 [ 1470.346553][T23239] _copy_from_user+0x2f/0xe0 [ 1470.351181][T23239] ___bpf_copy_key+0xb0/0x100 [ 1470.355908][T23239] map_delete_elem+0x1fc/0x550 [ 1470.360723][T23239] ? bpf_lsm_bpf+0x9/0x10 [ 1470.365100][T23239] __sys_bpf+0x502/0x890 [ 1470.369382][T23239] ? bpf_link_show_fdinfo+0x560/0x560 [ 1470.374821][T23239] ? lock_chain_count+0x20/0x20 [ 1470.379727][T23239] __x64_sys_bpf+0x7c/0x90 [ 1470.384183][T23239] do_syscall_64+0x55/0xb0 [ 1470.388728][T23239] ? clear_bhb_loop+0x40/0x90 [ 1470.393447][T23239] ? clear_bhb_loop+0x40/0x90 [ 1470.398166][T23239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1470.404102][T23239] RIP: 0033:0x7fb9b87a8f19 [ 1470.408564][T23239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1470.428221][T23239] RSP: 002b:00007fb9b960a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1470.436692][T23239] RAX: ffffffffffffffda RBX: 00007fb9b8a25fa0 RCX: 00007fb9b87a8f19 [ 1470.444708][T23239] RDX: 0000000000000020 RSI: 0000200000000e80 RDI: 0000000000000003 [ 1470.452721][T23239] RBP: 00007fb9b960a090 R08: 0000000000000000 R09: 0000000000000000 [ 1470.460741][T23239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1470.468753][T23239] R13: 00007fb9b8a26038 R14: 00007fb9b8a25fa0 R15: 00007fff6fafebd8 [ 1470.476797][T23239] [ 1470.809094][T23213] rxe_eth0 speed is unknown, defaulting to 1000 [ 1471.339227][T23226] rxe_eth0 speed is unknown, defaulting to 1000 [ 1471.625454][T23221] rxe_eth0 speed is unknown, defaulting to 1000 [ 1471.811610][T23258] syzkaller0: entered promiscuous mode [ 1471.817901][T23258] syzkaller0: entered allmulticast mode [ 1474.867643][T23275] sit0: left promiscuous mode [ 1475.230499][T23276] sit0: entered promiscuous mode [ 1475.905125][T23286] delete_channel: no stack [ 1475.912536][T23283] syzkaller0: entered promiscuous mode [ 1475.918599][T23283] syzkaller0: entered allmulticast mode [ 1475.922558][T23286] delete_channel: no stack [ 1478.957855][T23303] sit0: left promiscuous mode [ 1479.042270][T23304] sit0: entered promiscuous mode [ 1479.526750][T23317] netlink: 'syz.0.5193': attribute type 21 has an invalid length. [ 1481.209629][T23340] sit0: left promiscuous mode [ 1481.637036][T23341] sit0: entered promiscuous mode [ 1482.072373][T23324] rxe_eth0 speed is unknown, defaulting to 1000 [ 1482.366930][T23348] bond0: entered promiscuous mode [ 1482.375237][T23348] bond_slave_0: entered promiscuous mode [ 1482.387287][T23348] bond_slave_1: entered promiscuous mode [ 1482.393893][T23348] bond0: entered allmulticast mode [ 1482.410352][T23348] bond_slave_0: entered allmulticast mode [ 1482.432282][T23348] bond_slave_1: entered allmulticast mode [ 1482.721290][T23351] syzkaller0: entered promiscuous mode [ 1482.777036][T23351] syzkaller0: entered allmulticast mode [ 1484.850911][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.858694][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.385673][T23377] sit0: left promiscuous mode [ 1487.663316][T23383] sit0: entered promiscuous mode [ 1488.382183][T23391] FAULT_INJECTION: forcing a failure. [ 1488.382183][T23391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1488.406477][T23391] CPU: 0 PID: 23391 Comm: syz.1.5208 Not tainted syzkaller #0 [ 1488.414001][T23391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1488.424086][T23391] Call Trace: [ 1488.427378][T23391] [ 1488.430321][T23391] dump_stack_lvl+0x18c/0x250 [ 1488.435035][T23391] ? show_regs_print_info+0x20/0x20 [ 1488.440268][T23391] ? load_image+0x420/0x420 [ 1488.444795][T23391] ? __might_fault+0xaa/0x120 [ 1488.449490][T23391] ? __lock_acquire+0x7eb0/0x7eb0 [ 1488.454532][T23391] ? unix_ioctl+0x259/0x6b0 [ 1488.459057][T23391] should_fail_ex+0x394/0x4c0 [ 1488.463757][T23391] _copy_from_user+0x2f/0xe0 [ 1488.468363][T23391] sock_do_ioctl+0x190/0x310 [ 1488.472974][T23391] ? sock_show_fdinfo+0xb0/0xb0 [ 1488.477860][T23391] sock_ioctl+0x5be/0x7e0 [ 1488.482208][T23391] ? sock_poll+0x460/0x460 [ 1488.486849][T23391] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1488.491821][T23391] ? security_file_ioctl+0x80/0xa0 [ 1488.496971][T23391] ? sock_poll+0x460/0x460 [ 1488.501410][T23391] __se_sys_ioctl+0xfd/0x170 [ 1488.506034][T23391] do_syscall_64+0x55/0xb0 [ 1488.510471][T23391] ? clear_bhb_loop+0x40/0x90 [ 1488.515172][T23391] ? clear_bhb_loop+0x40/0x90 [ 1488.519864][T23391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1488.525778][T23391] RIP: 0033:0x7fb9b87a8f19 [ 1488.530205][T23391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1488.549911][T23391] RSP: 002b:00007fb9b960a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1488.558341][T23391] RAX: ffffffffffffffda RBX: 00007fb9b8a25fa0 RCX: 00007fb9b87a8f19 [ 1488.566412][T23391] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000007 [ 1488.574393][T23391] RBP: 00007fb9b960a090 R08: 0000000000000000 R09: 0000000000000000 [ 1488.582397][T23391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1488.590393][T23391] R13: 00007fb9b8a26038 R14: 00007fb9b8a25fa0 R15: 00007fff6fafebd8 [ 1488.598396][T23391] [ 1488.603104][T23392] bond0: entered promiscuous mode [ 1488.615885][T23392] bond_slave_1: entered promiscuous mode [ 1488.638201][T23392] bridge0: entered promiscuous mode [ 1488.643717][T23392] bond0: entered allmulticast mode [ 1488.662965][T23392] bond_slave_1: entered allmulticast mode [ 1488.688392][T23392] bridge0: entered allmulticast mode [ 1489.827155][T23408] syzkaller0: entered promiscuous mode [ 1489.846733][T23408] syzkaller0: entered allmulticast mode [ 1489.865988][T23411] sit0: left promiscuous mode [ 1489.948334][T23412] sit0: entered promiscuous mode [ 1495.508681][T23415] FAULT_INJECTION: forcing a failure. [ 1495.508681][T23415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1495.535724][T23415] CPU: 0 PID: 23415 Comm: syz.2.5220 Not tainted syzkaller #0 [ 1495.543233][T23415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1495.553346][T23415] Call Trace: [ 1495.556656][T23415] [ 1495.559611][T23415] dump_stack_lvl+0x18c/0x250 [ 1495.564329][T23415] ? show_regs_print_info+0x20/0x20 [ 1495.569555][T23415] ? load_image+0x420/0x420 [ 1495.574073][T23415] ? __might_fault+0xaa/0x120 [ 1495.578766][T23415] ? __lock_acquire+0x7eb0/0x7eb0 [ 1495.583817][T23415] ? __lock_acquire+0x1431/0x7eb0 [ 1495.588855][T23415] should_fail_ex+0x394/0x4c0 [ 1495.593552][T23415] _copy_from_user+0x2f/0xe0 [ 1495.598149][T23415] ethtool_set_per_queue+0xf0/0x1f0 [ 1495.603371][T23415] ? ethtool_get_phy_stats+0x650/0x650 [ 1495.608886][T23415] ? __might_fault+0xaa/0x120 [ 1495.613578][T23415] ? __lock_acquire+0x7eb0/0x7eb0 [ 1495.618732][T23415] ? __might_fault+0xaa/0x120 [ 1495.623421][T23415] ? __might_fault+0xc6/0x120 [ 1495.628108][T23415] ? __might_fault+0xaa/0x120 [ 1495.632808][T23415] dev_ethtool+0x1733/0x18d0 [ 1495.637419][T23415] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1495.643679][T23415] ? __lock_acquire+0x7eb0/0x7eb0 [ 1495.648718][T23415] ? __might_fault+0xaa/0x120 [ 1495.653409][T23415] ? full_name_hash+0x92/0xe0 [ 1495.658105][T23415] ? dev_load+0x21/0x1f0 [ 1495.662370][T23415] dev_ioctl+0x392/0x1140 [ 1495.666718][T23415] sock_do_ioctl+0x239/0x310 [ 1495.671345][T23415] ? sock_show_fdinfo+0xb0/0xb0 [ 1495.676224][T23415] sock_ioctl+0x5be/0x7e0 [ 1495.680622][T23415] ? sock_poll+0x460/0x460 [ 1495.685103][T23415] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1495.690073][T23415] ? security_file_ioctl+0x80/0xa0 [ 1495.695203][T23415] ? sock_poll+0x460/0x460 [ 1495.699635][T23415] __se_sys_ioctl+0xfd/0x170 [ 1495.704418][T23415] do_syscall_64+0x55/0xb0 [ 1495.708847][T23415] ? clear_bhb_loop+0x40/0x90 [ 1495.713548][T23415] ? clear_bhb_loop+0x40/0x90 [ 1495.718245][T23415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1495.724154][T23415] RIP: 0033:0x7fd5ceba8f19 [ 1495.728587][T23415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1495.748224][T23415] RSP: 002b:00007fd5cfacb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1495.756682][T23415] RAX: ffffffffffffffda RBX: 00007fd5cee25fa0 RCX: 00007fd5ceba8f19 [ 1495.764667][T23415] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000c [ 1495.772822][T23415] RBP: 00007fd5cfacb090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.780891][T23415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1495.788895][T23415] R13: 00007fd5cee26038 R14: 00007fd5cee25fa0 R15: 00007fffd7344218 [ 1495.796997][T23415] [ 1495.886656][T23426] rxe_eth0 speed is unknown, defaulting to 1000 [ 1496.129773][T23433] netlink: 'syz.1.5225': attribute type 12 has an invalid length. [ 1496.150414][T23433] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5225'. [ 1496.799578][T23442] sit0: left promiscuous mode [ 1497.302698][T23446] sit0: entered promiscuous mode [ 1499.278146][T23459] syzkaller0: entered promiscuous mode [ 1499.284037][T23459] syzkaller0: entered allmulticast mode [ 1499.604777][T23474] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.5236'. [ 1502.483678][T23471] rxe_eth0 speed is unknown, defaulting to 1000 [ 1502.802196][T23477] rxe_eth0 speed is unknown, defaulting to 1000 [ 1503.015358][T23484] netlink: 'syz.0.5240': attribute type 10 has an invalid length. [ 1503.499044][T23487] sit0: left promiscuous mode [ 1504.004866][T23488] sit0: entered promiscuous mode [ 1504.264312][T23495] FAULT_INJECTION: forcing a failure. [ 1504.264312][T23495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1504.312954][T23495] CPU: 0 PID: 23495 Comm: syz.0.5243 Not tainted syzkaller #0 [ 1504.320609][T23495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1504.330726][T23495] Call Trace: [ 1504.334046][T23495] [ 1504.337018][T23495] dump_stack_lvl+0x18c/0x250 [ 1504.341742][T23495] ? show_regs_print_info+0x20/0x20 [ 1504.346963][T23495] ? load_image+0x420/0x420 [ 1504.351484][T23495] ? __might_fault+0xaa/0x120 [ 1504.356182][T23495] ? __lock_acquire+0x7eb0/0x7eb0 [ 1504.361317][T23495] should_fail_ex+0x394/0x4c0 [ 1504.366015][T23495] _copy_from_user+0x2f/0xe0 [ 1504.370626][T23495] ___sys_sendmsg+0x1c7/0x360 [ 1504.375319][T23495] ? get_pid_task+0x20/0x1e0 [ 1504.379936][T23495] ? __sys_sendmsg+0x2b0/0x2b0 [ 1504.384732][T23495] ? __lock_acquire+0x7eb0/0x7eb0 [ 1504.389792][T23495] __se_sys_sendmsg+0x1d0/0x2c0 [ 1504.394657][T23495] ? perf_trace_preemptirq_template+0x269/0x330 [ 1504.400918][T23495] ? __x64_sys_sendmsg+0x80/0x80 [ 1504.405888][T23495] ? lockdep_hardirqs_on+0x98/0x150 [ 1504.411099][T23495] do_syscall_64+0x55/0xb0 [ 1504.415705][T23495] ? clear_bhb_loop+0x40/0x90 [ 1504.420401][T23495] ? clear_bhb_loop+0x40/0x90 [ 1504.425091][T23495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1504.430997][T23495] RIP: 0033:0x7f63fb9a8f19 [ 1504.435426][T23495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1504.455129][T23495] RSP: 002b:00007f63fc805028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1504.463559][T23495] RAX: ffffffffffffffda RBX: 00007f63fbc25fa0 RCX: 00007f63fb9a8f19 [ 1504.471542][T23495] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1504.479534][T23495] RBP: 00007f63fc805090 R08: 0000000000000000 R09: 0000000000000000 [ 1504.487533][T23495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1504.495521][T23495] R13: 00007f63fbc26038 R14: 00007f63fbc25fa0 R15: 00007ffeb2a7b6c8 [ 1504.503532][T23495] [ 1505.035958][T23502] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.5246'. [ 1505.763374][T23510] syzkaller0: entered promiscuous mode [ 1505.789390][T23510] syzkaller0: entered allmulticast mode [ 1505.855404][T23519] FAULT_INJECTION: forcing a failure. [ 1505.855404][T23519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1505.878189][T23519] CPU: 0 PID: 23519 Comm: syz.3.5250 Not tainted syzkaller #0 [ 1505.885727][T23519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1505.896004][T23519] Call Trace: [ 1505.899364][T23519] [ 1505.902335][T23519] dump_stack_lvl+0x18c/0x250 [ 1505.907079][T23519] ? show_regs_print_info+0x20/0x20 [ 1505.912332][T23519] ? load_image+0x420/0x420 [ 1505.916890][T23519] ? __lock_acquire+0x7eb0/0x7eb0 [ 1505.921990][T23519] should_fail_ex+0x394/0x4c0 [ 1505.926705][T23519] _copy_from_user+0x2f/0xe0 [ 1505.931316][T23519] ___bpf_copy_key+0xb0/0x100 [ 1505.936012][T23519] map_delete_elem+0x1fc/0x550 [ 1505.940796][T23519] ? bpf_lsm_bpf+0x9/0x10 [ 1505.945145][T23519] __sys_bpf+0x502/0x890 [ 1505.949405][T23519] ? bpf_link_show_fdinfo+0x560/0x560 [ 1505.954808][T23519] ? lock_chain_count+0x20/0x20 [ 1505.959683][T23519] __x64_sys_bpf+0x7c/0x90 [ 1505.964112][T23519] do_syscall_64+0x55/0xb0 [ 1505.968543][T23519] ? clear_bhb_loop+0x40/0x90 [ 1505.973240][T23519] ? clear_bhb_loop+0x40/0x90 [ 1505.977981][T23519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1505.983892][T23519] RIP: 0033:0x7f3803da8f19 [ 1505.988324][T23519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1506.007943][T23519] RSP: 002b:00007f3804ba6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1506.016376][T23519] RAX: ffffffffffffffda RBX: 00007f3804025fa0 RCX: 00007f3803da8f19 [ 1506.024386][T23519] RDX: 0000000000000020 RSI: 0000200000000e80 RDI: 0000000000000003 [ 1506.032369][T23519] RBP: 00007f3804ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 1506.040351][T23519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1506.048333][T23519] R13: 00007f3804026038 R14: 00007f3804025fa0 R15: 00007ffe7832d508 [ 1506.056327][T23519] [ 1508.618332][T23506] rxe_eth0 speed is unknown, defaulting to 1000 [ 1508.626256][T23522] sit0: left promiscuous mode [ 1508.721281][T23523] sit0: entered promiscuous mode [ 1511.609279][T23562] sit0: left promiscuous mode [ 1511.876498][T23557] sit0: entered promiscuous mode [ 1512.406277][T23542] rxe_eth0 speed is unknown, defaulting to 1000 [ 1512.854248][T23574] netlink: 'syz.3.5266': attribute type 12 has an invalid length. [ 1512.872527][T23574] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5266'. [ 1512.985754][T23559] rxe_eth0 speed is unknown, defaulting to 1000 [ 1514.283039][T23576] rxe_eth0 speed is unknown, defaulting to 1000 [ 1515.897888][T23601] sit0: left promiscuous mode [ 1516.325898][T23598] sit0: entered promiscuous mode [ 1516.771375][T23607] netlink: 'syz.0.5275': attribute type 12 has an invalid length. [ 1516.783341][T23607] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5275'. [ 1517.408502][T23623] netlink: 'syz.3.5281': attribute type 29 has an invalid length. [ 1517.472733][T23630] FAULT_INJECTION: forcing a failure. [ 1517.472733][T23630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1517.496961][T23630] CPU: 0 PID: 23630 Comm: syz.1.5283 Not tainted syzkaller #0 [ 1517.504514][T23630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1517.514619][T23630] Call Trace: [ 1517.517949][T23630] [ 1517.520903][T23630] dump_stack_lvl+0x18c/0x250 [ 1517.525637][T23630] ? show_regs_print_info+0x20/0x20 [ 1517.530885][T23630] ? load_image+0x420/0x420 [ 1517.535538][T23630] ? __might_fault+0xaa/0x120 [ 1517.540250][T23630] ? __lock_acquire+0x7eb0/0x7eb0 [ 1517.545302][T23630] ? bpf_percpu_hash_update+0x2b/0x200 [ 1517.550786][T23630] ? __virt_addr_valid+0x10c/0x380 [ 1517.555935][T23630] should_fail_ex+0x394/0x4c0 [ 1517.560640][T23630] _copy_from_user+0x2f/0xe0 [ 1517.565243][T23630] generic_map_update_batch+0x58c/0x800 [ 1517.570815][T23630] ? rcu_read_unlock+0xa0/0xa0 [ 1517.575596][T23630] ? __fdget+0x180/0x210 [ 1517.579871][T23630] ? rcu_read_unlock+0xa0/0xa0 [ 1517.584671][T23630] bpf_map_do_batch+0x3f2/0x600 [ 1517.589541][T23630] ? bpf_lsm_xfrm_decode_session+0x10/0x10 [ 1517.595546][T23630] __sys_bpf+0x381/0x890 [ 1517.599808][T23630] ? bpf_link_show_fdinfo+0x560/0x560 [ 1517.605210][T23630] ? lock_chain_count+0x20/0x20 [ 1517.610082][T23630] __x64_sys_bpf+0x7c/0x90 [ 1517.615030][T23630] do_syscall_64+0x55/0xb0 [ 1517.619475][T23630] ? clear_bhb_loop+0x40/0x90 [ 1517.624172][T23630] ? clear_bhb_loop+0x40/0x90 [ 1517.628889][T23630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1517.634803][T23630] RIP: 0033:0x7fb9b87a8f19 [ 1517.639229][T23630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1517.658844][T23630] RSP: 002b:00007fb9b960a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1517.667275][T23630] RAX: ffffffffffffffda RBX: 00007fb9b8a25fa0 RCX: 00007fb9b87a8f19 [ 1517.675260][T23630] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 1517.683240][T23630] RBP: 00007fb9b960a090 R08: 0000000000000000 R09: 0000000000000000 [ 1517.691224][T23630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1517.699202][T23630] R13: 00007fb9b8a26038 R14: 00007fb9b8a25fa0 R15: 00007fff6fafebd8 [ 1517.707205][T23630] [ 1517.717334][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 1517.914819][T23623] netlink: 'syz.3.5281': attribute type 29 has an invalid length. [ 1519.025756][T23618] rxe_eth0 speed is unknown, defaulting to 1000 [ 1519.480575][T23644] sit0: left promiscuous mode [ 1519.900727][T23645] sit0: entered promiscuous mode [ 1520.213170][T23649] delete_channel: no stack [ 1520.487489][T23649] delete_channel: no stack [ 1521.075789][T23633] rxe_eth0 speed is unknown, defaulting to 1000 [ 1521.209866][T23659] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5291'. [ 1523.034640][T23674] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5296'. [ 1523.317180][T23683] sit0: left promiscuous mode [ 1523.523212][T23678] sit0: entered promiscuous mode [ 1525.141877][T23700] rxe_eth0 speed is unknown, defaulting to 1000 [ 1525.246763][T23716] netlink: 'syz.0.5309': attribute type 5 has an invalid length. [ 1525.384315][T23719] FAULT_INJECTION: forcing a failure. [ 1525.384315][T23719] name failslab, interval 1, probability 0, space 0, times 0 [ 1525.445930][T23719] CPU: 0 PID: 23719 Comm: syz.1.5310 Not tainted syzkaller #0 [ 1525.453484][T23719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1525.463589][T23719] Call Trace: [ 1525.466909][T23719] [ 1525.469879][T23719] dump_stack_lvl+0x18c/0x250 [ 1525.474616][T23719] ? show_regs_print_info+0x20/0x20 [ 1525.479862][T23719] ? load_image+0x420/0x420 [ 1525.484406][T23719] ? verify_lock_unused+0x140/0x140 [ 1525.489660][T23719] should_fail_ex+0x394/0x4c0 [ 1525.494403][T23719] should_failslab+0x9/0x20 [ 1525.498953][T23719] slab_pre_alloc_hook+0x59/0x300 [ 1525.504037][T23719] kmem_cache_alloc+0x5a/0x2d0 [ 1525.508842][T23719] ? skb_clone+0x1eb/0x370 [ 1525.513317][T23719] skb_clone+0x1eb/0x370 [ 1525.517626][T23719] __netlink_deliver_tap+0x411/0x7f0 [ 1525.522959][T23719] ? netlink_deliver_tap+0x2e/0x1b0 [ 1525.528183][T23719] netlink_deliver_tap+0x19c/0x1b0 [ 1525.533312][T23719] netlink_unicast+0x82f/0x9e0 [ 1525.538138][T23719] netlink_sendmsg+0x8d0/0xbf0 [ 1525.543028][T23719] ? netlink_getsockopt+0x590/0x590 [ 1525.548251][T23719] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1525.553830][T23719] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1525.559135][T23719] ? security_socket_sendmsg+0x80/0xa0 [ 1525.564616][T23719] ? netlink_getsockopt+0x590/0x590 [ 1525.569825][T23719] ____sys_sendmsg+0x61b/0x980 [ 1525.574608][T23719] ? __asan_memset+0x22/0x40 [ 1525.579236][T23719] ? __sys_sendmsg_sock+0x30/0x30 [ 1525.584271][T23719] ? __import_iovec+0x5f2/0x850 [ 1525.589167][T23719] ? import_iovec+0x73/0xa0 [ 1525.593703][T23719] ___sys_sendmsg+0x2a6/0x360 [ 1525.598413][T23719] ? get_pid_task+0x20/0x1e0 [ 1525.603029][T23719] ? __sys_sendmsg+0x2b0/0x2b0 [ 1525.607828][T23719] ? __lock_acquire+0x7eb0/0x7eb0 [ 1525.612887][T23719] __se_sys_sendmsg+0x1d0/0x2c0 [ 1525.617757][T23719] ? __x64_sys_sendmsg+0x80/0x80 [ 1525.622719][T23719] ? lockdep_hardirqs_on+0x98/0x150 [ 1525.627935][T23719] do_syscall_64+0x55/0xb0 [ 1525.632362][T23719] ? clear_bhb_loop+0x40/0x90 [ 1525.637053][T23719] ? clear_bhb_loop+0x40/0x90 [ 1525.641751][T23719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1525.647657][T23719] RIP: 0033:0x7fb9b87a8f19 [ 1525.652086][T23719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1525.671700][T23719] RSP: 002b:00007fb9b960a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1525.680132][T23719] RAX: ffffffffffffffda RBX: 00007fb9b8a25fa0 RCX: 00007fb9b87a8f19 [ 1525.688112][T23719] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000004 [ 1525.696106][T23719] RBP: 00007fb9b960a090 R08: 0000000000000000 R09: 0000000000000000 [ 1525.704109][T23719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1525.712097][T23719] R13: 00007fb9b8a26038 R14: 00007fb9b8a25fa0 R15: 00007fff6fafebd8 [ 1525.720101][T23719] [ 1525.891845][T23721] rxe_eth0 speed is unknown, defaulting to 1000 [ 1526.462199][T23730] sit0: left promiscuous mode [ 1526.888600][T23731] sit0: entered promiscuous mode [ 1529.015930][T23759] sit0: left promiscuous mode [ 1529.309151][T23762] sit0: entered promiscuous mode [ 1530.210870][T23766] rxe_eth0 speed is unknown, defaulting to 1000 [ 1530.375544][T23779] FAULT_INJECTION: forcing a failure. [ 1530.375544][T23779] name failslab, interval 1, probability 0, space 0, times 0 [ 1530.417284][T23779] CPU: 1 PID: 23779 Comm: syz.2.5330 Not tainted syzkaller #0 [ 1530.424821][T23779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1530.434916][T23779] Call Trace: [ 1530.438239][T23779] [ 1530.441208][T23779] dump_stack_lvl+0x18c/0x250 [ 1530.445957][T23779] ? show_regs_print_info+0x20/0x20 [ 1530.450100][T23782] FAULT_INJECTION: forcing a failure. [ 1530.450100][T23782] name failslab, interval 1, probability 0, space 0, times 0 [ 1530.451177][T23779] ? load_image+0x420/0x420 [ 1530.451211][T23779] ? __might_sleep+0xe0/0xe0 [ 1530.451239][T23779] ? __lock_acquire+0x7eb0/0x7eb0 [ 1530.451271][T23779] should_fail_ex+0x394/0x4c0 [ 1530.451302][T23779] should_failslab+0x9/0x20 [ 1530.451319][T23779] slab_pre_alloc_hook+0x59/0x300 [ 1530.492556][T23779] kmem_cache_alloc+0x5a/0x2d0 [ 1530.497381][T23779] ? sk_prot_alloc+0x57/0x210 [ 1530.502125][T23779] sk_prot_alloc+0x57/0x210 [ 1530.506672][T23779] ? sk_alloc+0x24/0x350 [ 1530.510957][T23779] sk_alloc+0x3a/0x350 [ 1530.515070][T23779] inet_create+0x7a9/0xfe0 [ 1530.519537][T23779] ? inet_create+0x9d/0xfe0 [ 1530.524086][T23779] __sock_create+0x49e/0x940 [ 1530.528730][T23779] mptcp_subflow_create_socket+0x10c/0xad0 [ 1530.534592][T23779] ? __mptcp_subflow_connect+0x14d0/0x14d0 [ 1530.540439][T23779] ? mark_lock+0x94/0x320 [ 1530.544826][T23779] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1530.550846][T23779] __mptcp_nmpc_sk+0x157/0x720 [ 1530.555661][T23779] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 1530.562459][T23779] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1530.567871][T23779] ? lockdep_hardirqs_on+0x98/0x150 [ 1530.573112][T23779] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1530.578537][T23779] mptcp_sendmsg_fastopen+0x7c/0x4c0 [ 1530.583884][T23779] mptcp_sendmsg+0x144c/0x1670 [ 1530.588718][T23779] ? aa_sk_perm+0x7bb/0x8e0 [ 1530.593273][T23779] ? aa_af_perm+0x330/0x330 [ 1530.597816][T23779] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1530.604277][T23779] ? mptcp_shutdown+0x160/0x160 [ 1530.609174][T23779] ? sock_rps_record_flow+0x19/0x3f0 [ 1530.614508][T23779] ? inet_sendmsg+0xce/0x2a0 [ 1530.619137][T23779] ? inet_send_prepare+0x250/0x250 [ 1530.624294][T23779] ____sys_sendmsg+0x61b/0x980 [ 1530.629124][T23779] ? __asan_memset+0x22/0x40 [ 1530.633774][T23779] ? __sys_sendmsg_sock+0x30/0x30 [ 1530.638842][T23779] ? __import_iovec+0x3fa/0x850 [ 1530.643747][T23779] ? import_iovec+0x73/0xa0 [ 1530.648294][T23779] ___sys_sendmsg+0x2a6/0x360 [ 1530.653113][T23779] ? get_pid_task+0x20/0x1e0 [ 1530.657773][T23779] ? __sys_sendmsg+0x2b0/0x2b0 [ 1530.662615][T23779] ? __lock_acquire+0x7eb0/0x7eb0 [ 1530.667732][T23779] __se_sys_sendmsg+0x1d0/0x2c0 [ 1530.672632][T23779] ? __x64_sys_sendmsg+0x80/0x80 [ 1530.677716][T23779] ? lockdep_hardirqs_on+0x98/0x150 [ 1530.682972][T23779] do_syscall_64+0x55/0xb0 [ 1530.687468][T23779] ? clear_bhb_loop+0x40/0x90 [ 1530.692206][T23779] ? clear_bhb_loop+0x40/0x90 [ 1530.696932][T23779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1530.703022][T23779] RIP: 0033:0x7fd5ceba8f19 [ 1530.707501][T23779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1530.727160][T23779] RSP: 002b:00007fd5cfacb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1530.735626][T23779] RAX: ffffffffffffffda RBX: 00007fd5cee25fa0 RCX: 00007fd5ceba8f19 [ 1530.743649][T23779] RDX: 0000000030004001 RSI: 0000200000000880 RDI: 0000000000000003 [ 1530.751661][T23779] RBP: 00007fd5cfacb090 R08: 0000000000000000 R09: 0000000000000000 [ 1530.759674][T23779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1530.767776][T23779] R13: 00007fd5cee26038 R14: 00007fd5cee25fa0 R15: 00007fffd7344218 [ 1530.775806][T23779] [ 1530.779254][T23782] CPU: 0 PID: 23782 Comm: syz.1.5329 Not tainted syzkaller #0 [ 1530.786787][T23782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1530.796986][T23782] Call Trace: [ 1530.800307][T23782] [ 1530.803269][T23782] dump_stack_lvl+0x18c/0x250 [ 1530.808014][T23782] ? show_regs_print_info+0x20/0x20 [ 1530.813278][T23782] ? load_image+0x420/0x420 [ 1530.817853][T23782] ? __might_sleep+0xe0/0xe0 [ 1530.822495][T23782] ? __lock_acquire+0x7eb0/0x7eb0 [ 1530.827581][T23782] should_fail_ex+0x394/0x4c0 [ 1530.832323][T23782] should_failslab+0x9/0x20 [ 1530.836869][T23782] slab_pre_alloc_hook+0x59/0x300 [ 1530.842033][T23782] kmem_cache_alloc_lru+0x4d/0x2c0 [ 1530.847191][T23782] ? proc_alloc_inode+0x2a/0xb0 [ 1530.852093][T23782] proc_alloc_inode+0x2a/0xb0 [ 1530.856805][T23782] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 1530.863188][T23782] new_inode_pseudo+0x63/0x1d0 [ 1530.868010][T23782] new_inode+0x22/0x1d0 [ 1530.872222][T23782] proc_pid_make_inode+0x24/0x190 [ 1530.877295][T23782] proc_pident_instantiate+0x6d/0x2b0 [ 1530.882804][T23782] proc_pident_lookup+0x1b3/0x290 [ 1530.887918][T23782] __lookup_slow+0x2a1/0x400 [ 1530.892553][T23782] ? lookup_one_len+0x2e0/0x2e0 [ 1530.897476][T23782] ? down_read+0x1ac/0x2e0 [ 1530.901946][T23782] lookup_slow+0x53/0x70 [ 1530.906221][T23782] link_path_walk+0x97c/0xe40 [ 1530.910966][T23782] ? handle_lookup_down+0x130/0x130 [ 1530.916223][T23782] path_openat+0x291/0x3270 [ 1530.920787][T23782] ? mark_lock+0x94/0x320 [ 1530.925158][T23782] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1530.931192][T23782] ? lock_chain_count+0x20/0x20 [ 1530.936081][T23782] ? do_filp_open+0x430/0x430 [ 1530.940798][T23782] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1530.946987][T23782] ? lockdep_hardirqs_on+0x98/0x150 [ 1530.952209][T23782] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1530.958428][T23782] do_filp_open+0x1f2/0x430 [ 1530.962964][T23782] ? vfs_tmpfile+0x620/0x620 [ 1530.967587][T23782] ? noop_direct_IO+0x20/0x20 [ 1530.972314][T23782] ? _raw_spin_unlock+0x28/0x40 [ 1530.977185][T23782] ? alloc_fd+0x590/0x640 [ 1530.981577][T23782] do_sys_openat2+0x134/0x1d0 [ 1530.986283][T23782] ? do_sys_open+0xe0/0xe0 [ 1530.990740][T23782] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1530.996930][T23782] __x64_sys_openat+0x139/0x160 [ 1531.001820][T23782] do_syscall_64+0x55/0xb0 [ 1531.006258][T23782] ? clear_bhb_loop+0x40/0x90 [ 1531.010960][T23782] ? clear_bhb_loop+0x40/0x90 [ 1531.015760][T23782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1531.021680][T23782] RIP: 0033:0x7fb9b876974e [ 1531.026113][T23782] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1531.045741][T23782] RSP: 002b:00007fb9b9609ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1531.054183][T23782] RAX: ffffffffffffffda RBX: 00007fb9b960a6c0 RCX: 00007fb9b876974e [ 1531.062209][T23782] RDX: 0000000000000002 RSI: 00007fb9b9609f90 RDI: ffffffffffffff9c [ 1531.070219][T23782] RBP: 00007fb9b960a090 R08: 0000000000000000 R09: 0000000000000000 [ 1531.078218][T23782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1531.086235][T23782] R13: 00007fb9b8a26038 R14: 00007fb9b8a25fa0 R15: 00007fff6fafebd8 [ 1531.094255][T23782] [ 1531.742186][T23794] netlink: 'syz.0.5334': attribute type 3 has an invalid length. [ 1531.813716][T23794] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5334'. [ 1532.245494][T23794] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 1532.486040][T23803] dvmrp1: tun_chr_ioctl cmd 1074025694 [ 1532.522939][T23801] sit0: left promiscuous mode [ 1532.994861][T23804] sit0: entered promiscuous mode [ 1533.385775][T23809] rxe_eth0 speed is unknown, defaulting to 1000 [ 1534.028764][T23824] netlink: 'syz.3.5343': attribute type 10 has an invalid length. [ 1534.052329][T23824] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5343'. [ 1534.133011][T23810] rxe_eth0 speed is unknown, defaulting to 1000 [ 1534.796972][T23833] FAULT_INJECTION: forcing a failure. [ 1534.796972][T23833] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.830244][T23833] CPU: 0 PID: 23833 Comm: syz.3.5345 Not tainted syzkaller #0 [ 1534.837786][T23833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1534.847891][T23833] Call Trace: [ 1534.851205][T23833] [ 1534.854166][T23833] dump_stack_lvl+0x18c/0x250 [ 1534.858903][T23833] ? show_regs_print_info+0x20/0x20 [ 1534.864148][T23833] ? load_image+0x420/0x420 [ 1534.868689][T23833] ? perf_trace_lock_acquire+0x105/0x400 [ 1534.874450][T23833] ? verify_lock_unused+0x140/0x140 [ 1534.879696][T23833] ? perf_trace_lock_acquire+0x105/0x400 [ 1534.885374][T23833] should_fail_ex+0x394/0x4c0 [ 1534.890148][T23833] should_failslab+0x9/0x20 [ 1534.894687][T23833] slab_pre_alloc_hook+0x59/0x300 [ 1534.899755][T23833] kmem_cache_alloc+0x5a/0x2d0 [ 1534.904551][T23833] ? skb_clone+0x1eb/0x370 [ 1534.909021][T23833] skb_clone+0x1eb/0x370 [ 1534.913311][T23833] __netlink_deliver_tap+0x411/0x7f0 [ 1534.918640][T23833] ? netlink_deliver_tap+0x2e/0x1b0 [ 1534.923862][T23833] netlink_deliver_tap+0x19c/0x1b0 [ 1534.928990][T23833] netlink_unicast+0x82f/0x9e0 [ 1534.933796][T23833] netlink_sendmsg+0x8d0/0xbf0 [ 1534.938583][T23833] ? netlink_getsockopt+0x590/0x590 [ 1534.943797][T23833] ? apparmor_socket_sendmsg+0x170/0x330 [ 1534.949456][T23833] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1534.954755][T23833] ? security_socket_sendmsg+0x80/0xa0 [ 1534.960230][T23833] ? netlink_getsockopt+0x590/0x590 [ 1534.965440][T23833] ____sys_sendmsg+0x61b/0x980 [ 1534.970230][T23833] ? __asan_memset+0x22/0x40 [ 1534.974837][T23833] ? __sys_sendmsg_sock+0x30/0x30 [ 1534.979883][T23833] ? __import_iovec+0x5f2/0x850 [ 1534.984760][T23833] ? import_iovec+0x73/0xa0 [ 1534.989286][T23833] ___sys_sendmsg+0x2a6/0x360 [ 1534.993975][T23833] ? get_pid_task+0x20/0x1e0 [ 1534.998592][T23833] ? __sys_sendmsg+0x2b0/0x2b0 [ 1535.003391][T23833] ? __lock_acquire+0x7eb0/0x7eb0 [ 1535.008485][T23833] __se_sys_sendmsg+0x1d0/0x2c0 [ 1535.013353][T23833] ? __x64_sys_sendmsg+0x80/0x80 [ 1535.018321][T23833] ? lockdep_hardirqs_on+0x98/0x150 [ 1535.023539][T23833] do_syscall_64+0x55/0xb0 [ 1535.027974][T23833] ? clear_bhb_loop+0x40/0x90 [ 1535.032676][T23833] ? clear_bhb_loop+0x40/0x90 [ 1535.037378][T23833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1535.043290][T23833] RIP: 0033:0x7f3803da8f19 [ 1535.047718][T23833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1535.067339][T23833] RSP: 002b:00007f3804ba6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1535.075867][T23833] RAX: ffffffffffffffda RBX: 00007f3804025fa0 RCX: 00007f3803da8f19 [ 1535.083856][T23833] RDX: 0000000020040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1535.091839][T23833] RBP: 00007f3804ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 1535.099824][T23833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1535.107896][T23833] R13: 00007f3804026038 R14: 00007f3804025fa0 R15: 00007ffe7832d508 [ 1535.115899][T23833] [ 1535.281902][T23838] netlink: 'syz.0.5346': attribute type 10 has an invalid length. [ 1535.306867][T23838] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5346'. [ 1535.430519][T23838] netlink: 'syz.0.5346': attribute type 10 has an invalid length. [ 1535.516984][T23838] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5346'. [ 1536.037551][T23847] sit0: left promiscuous mode [ 1536.652383][T23854] netlink: 'syz.0.5352': attribute type 1 has an invalid length. [ 1536.776531][T23846] sit0: entered promiscuous mode [ 1536.799718][T23854] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.5352'. [ 1537.154478][T23853] netlink: 'syz.0.5352': attribute type 9 has an invalid length. [ 1537.307072][T23853] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5352'. [ 1538.100477][T23860] FAULT_INJECTION: forcing a failure. [ 1538.100477][T23860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1538.114019][T23860] CPU: 0 PID: 23860 Comm: syz.1.5353 Not tainted syzkaller #0 [ 1538.121518][T23860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1538.131613][T23860] Call Trace: [ 1538.134935][T23860] [ 1538.137896][T23860] dump_stack_lvl+0x18c/0x250 [ 1538.142621][T23860] ? show_regs_print_info+0x20/0x20 [ 1538.147860][T23860] ? load_image+0x420/0x420 [ 1538.152401][T23860] ? __might_fault+0xaa/0x120 [ 1538.157099][T23860] ? __lock_acquire+0x7eb0/0x7eb0 [ 1538.162137][T23860] should_fail_ex+0x394/0x4c0 [ 1538.166837][T23860] _copy_from_user+0x2f/0xe0 [ 1538.171443][T23860] __sys_bpf+0x23e/0x890 [ 1538.175700][T23860] ? bpf_link_show_fdinfo+0x560/0x560 [ 1538.181099][T23860] ? lock_chain_count+0x20/0x20 [ 1538.185968][T23860] __x64_sys_bpf+0x7c/0x90 [ 1538.190397][T23860] do_syscall_64+0x55/0xb0 [ 1538.194833][T23860] ? clear_bhb_loop+0x40/0x90 [ 1538.199525][T23860] ? clear_bhb_loop+0x40/0x90 [ 1538.204220][T23860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1538.210138][T23860] RIP: 0033:0x7fb9b87a8f19 [ 1538.214571][T23860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1538.234209][T23860] RSP: 002b:00007fb9b960a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1538.242639][T23860] RAX: ffffffffffffffda RBX: 00007fb9b8a25fa0 RCX: 00007fb9b87a8f19 [ 1538.250622][T23860] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 0000000000000000 [ 1538.258602][T23860] RBP: 00007fb9b960a090 R08: 0000000000000000 R09: 0000000000000000 [ 1538.266586][T23860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1538.274564][T23860] R13: 00007fb9b8a26038 R14: 00007fb9b8a25fa0 R15: 00007fff6fafebd8 [ 1538.282558][T23860] [ 1538.875964][T23863] can: request_module (can-proto-0) failed. [ 1538.883253][T23849] rxe_eth0 speed is unknown, defaulting to 1000 [ 1539.202911][T23867] sctp: [Deprecated]: syz.0.5355 (pid 23867) Use of int in maxseg socket option. [ 1539.202911][T23867] Use struct sctp_assoc_value instead [ 1539.240947][T23862] rxe_eth0 speed is unknown, defaulting to 1000 [ 1540.253147][ T5791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1540.263738][ T5791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1540.272240][ T5791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1540.292150][ T5791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1540.314927][ T5791] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1540.333437][ T5791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1540.629346][T23880] rxe_eth0 speed is unknown, defaulting to 1000 [ 1541.622080][T23899] sit0: left promiscuous mode [ 1541.770112][T23897] sit0: entered promiscuous mode [ 1542.077668][T23880] chnl_net:caif_netlink_parms(): no params data found [ 1542.212503][T23880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.235831][T23880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.243188][T23880] bridge_slave_0: entered allmulticast mode [ 1542.290061][T23880] bridge_slave_0: entered promiscuous mode [ 1542.339942][T23880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.359766][T23880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.366262][T21425] Bluetooth: hci4: command tx timeout [ 1542.371110][T23880] bridge_slave_1: entered allmulticast mode [ 1542.401436][T23880] bridge_slave_1: entered promiscuous mode [ 1542.482246][T23880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1542.519682][T23880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1542.642292][T23880] team0: Port device team_slave_0 added [ 1542.657525][T23880] team0: Port device team_slave_1 added [ 1542.710911][T23880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1542.718160][T23880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1542.744432][T23880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1542.760684][T23880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1542.768080][T23880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1542.802553][T23880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1542.916914][T23926] netlink: 'syz.1.5370': attribute type 10 has an invalid length. [ 1542.951721][T23926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5370'. [ 1542.971237][T23880] hsr_slave_0: entered promiscuous mode [ 1542.989195][T23880] hsr_slave_1: entered promiscuous mode [ 1542.990401][T23928] netlink: 'syz.3.5371': attribute type 10 has an invalid length. [ 1543.002834][T23928] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5371'. [ 1543.012226][T23880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1543.025452][T23880] Cannot create hsr debugfs directory [ 1543.032975][T23926] netlink: 'syz.1.5370': attribute type 10 has an invalid length. [ 1543.047733][T23926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5370'. [ 1543.060818][T23928] netlink: 'syz.3.5371': attribute type 10 has an invalid length. [ 1543.071452][T23928] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5371'. [ 1543.369180][T23921] rxe_eth0 speed is unknown, defaulting to 1000 [ 1543.397007][T23931] netlink: 'syz.1.5372': attribute type 2 has an invalid length. [ 1543.642087][T23880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.753961][T23935] sit0: left promiscuous mode [ 1544.192215][T23880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.251562][T23936] sit0: entered promiscuous mode [ 1544.364658][T23880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.447177][T21425] Bluetooth: hci4: command tx timeout [ 1544.523293][T23880] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.556222][T23946] wlan1: mtu less than device minimum [ 1544.802814][T23880] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1544.862370][T23880] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1544.926876][T23880] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1544.962012][T23880] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1544.987839][T23953] FAULT_INJECTION: forcing a failure. [ 1544.987839][T23953] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.021170][T23953] CPU: 1 PID: 23953 Comm: syz.3.5381 Not tainted syzkaller #0 [ 1545.028726][T23953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1545.038835][T23953] Call Trace: [ 1545.042164][T23953] [ 1545.045147][T23953] dump_stack_lvl+0x18c/0x250 [ 1545.049878][T23953] ? show_regs_print_info+0x20/0x20 [ 1545.055090][T23953] ? load_image+0x420/0x420 [ 1545.059677][T23953] ? __might_sleep+0xe0/0xe0 [ 1545.064355][T23953] ? __lock_acquire+0x7eb0/0x7eb0 [ 1545.069458][T23953] should_fail_ex+0x394/0x4c0 [ 1545.074227][T23953] should_failslab+0x9/0x20 [ 1545.078873][T23953] slab_pre_alloc_hook+0x59/0x300 [ 1545.084038][T23953] ? tomoyo_encode+0x2ad/0x570 [ 1545.088849][T23953] ? tomoyo_encode+0x2ad/0x570 [ 1545.093632][T23953] __kmem_cache_alloc_node+0x53/0x260 [ 1545.099036][T23953] ? tomoyo_encode+0x2ad/0x570 [ 1545.103864][T23953] __kmalloc+0xa7/0x240 [ 1545.107270][T23955] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5382'. [ 1545.108066][T23953] tomoyo_encode+0x2ad/0x570 [ 1545.121932][T23953] tomoyo_realpath_from_path+0x57c/0x5c0 [ 1545.127639][T23953] ? tomoyo_domain+0xd6/0x120 [ 1545.132397][T23953] tomoyo_path_number_perm+0x248/0x5e0 [ 1545.137927][T23953] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1545.143618][T23953] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1545.149142][T23953] ? ksys_write+0x1d2/0x260 [ 1545.153785][T23953] ? __fget_files+0x28/0x460 [ 1545.158482][T23953] security_file_ioctl+0x70/0xa0 [ 1545.163488][T23953] __se_sys_ioctl+0x48/0x170 [ 1545.168142][T23953] do_syscall_64+0x55/0xb0 [ 1545.172614][T23953] ? clear_bhb_loop+0x40/0x90 [ 1545.177350][T23953] ? clear_bhb_loop+0x40/0x90 [ 1545.182099][T23953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1545.188035][T23953] RIP: 0033:0x7f3803da8f19 [ 1545.192480][T23953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.212141][T23953] RSP: 002b:00007f3804ba6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1545.220602][T23953] RAX: ffffffffffffffda RBX: 00007f3804025fa0 RCX: 00007f3803da8f19 [ 1545.228601][T23953] RDX: 0000200000000100 RSI: 0000000000008940 RDI: 0000000000000005 [ 1545.236593][T23953] RBP: 00007f3804ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 1545.244584][T23953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.252576][T23953] R13: 00007f3804026038 R14: 00007f3804025fa0 R15: 00007ffe7832d508 [ 1545.260592][T23953] [ 1545.292167][T23953] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1545.413497][T23880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1545.451266][T23880] 8021q: adding VLAN 0 to HW filter on device team0 [ 1545.491012][T17352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.498279][T17352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1545.598590][T17352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.605837][T17352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1545.770237][T23963] sit0: left promiscuous mode [ 1546.204801][T23966] sit0: entered promiscuous mode [ 1546.245360][T23970] netlink: 'syz.3.5387': attribute type 10 has an invalid length. [ 1546.290882][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.300853][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.526059][T21425] Bluetooth: hci4: command tx timeout [ 1546.743817][T23880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1546.937454][T23880] veth0_vlan: entered promiscuous mode [ 1546.966852][T23988] netlink: 'syz.3.5394': attribute type 10 has an invalid length. [ 1546.990456][T23880] veth1_vlan: entered promiscuous mode [ 1547.089499][T23880] veth0_macvtap: entered promiscuous mode [ 1547.127748][T23880] veth1_macvtap: entered promiscuous mode [ 1547.249909][T23880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1547.305655][T23880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.326457][T23880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1547.360985][T23993] sit0: left promiscuous mode [ 1547.552345][T23880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1547.576911][T23880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.603723][T23880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1547.624309][T23880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.635310][T23880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1547.647597][T23880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.715892][T23880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1547.774214][T23880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.799889][T23880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1547.823374][T23992] sit0: entered promiscuous mode [ 1548.133610][T23880] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.166979][T23880] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.185914][T23880] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.194705][T23880] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.222934][T24001] FAULT_INJECTION: forcing a failure. [ 1548.222934][T24001] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.236084][T24001] CPU: 1 PID: 24001 Comm: syz.1.5398 Not tainted syzkaller #0 [ 1548.243584][T24001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1548.253664][T24001] Call Trace: [ 1548.256958][T24001] [ 1548.259902][T24001] dump_stack_lvl+0x18c/0x250 [ 1548.264775][T24001] ? show_regs_print_info+0x20/0x20 [ 1548.270020][T24001] ? load_image+0x420/0x420 [ 1548.274543][T24001] ? rt6_nlmsg_size+0xd0/0x490 [ 1548.279327][T24001] ? __lock_acquire+0x7eb0/0x7eb0 [ 1548.284361][T24001] should_fail_ex+0x394/0x4c0 [ 1548.289059][T24001] should_failslab+0x9/0x20 [ 1548.293570][T24001] slab_pre_alloc_hook+0x59/0x300 [ 1548.298605][T24001] ? rt6_nlmsg_size+0x40a/0x490 [ 1548.303482][T24001] kmem_cache_alloc_node+0x5e/0x320 [ 1548.308687][T24001] ? __alloc_skb+0x103/0x2c0 [ 1548.313299][T24001] __alloc_skb+0x103/0x2c0 [ 1548.317730][T24001] inet6_rt_notify+0xb4/0x240 [ 1548.322431][T24001] fib6_del+0x10e4/0x1590 [ 1548.326792][T24001] ? fib6_locate_1+0x6b0/0x6b0 [ 1548.331574][T24001] ? verify_lock_unused+0x140/0x140 [ 1548.336781][T24001] ? __lock_acquire+0x1431/0x7eb0 [ 1548.341814][T24001] ? verify_lock_unused+0x140/0x140 [ 1548.347028][T24001] ? fib6_ifdown+0x10d/0x4b0 [ 1548.351648][T24001] fib6_clean_node+0x290/0x540 [ 1548.356430][T24001] ? node_free_rcu+0x30/0x30 [ 1548.361295][T24001] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1548.366685][T24001] fib6_walk_continue+0x67f/0x8d0 [ 1548.371730][T24001] fib6_walk+0x149/0x260 [ 1548.375993][T24001] __fib6_clean_all+0x27e/0x3e0 [ 1548.380858][T24001] ? __fib6_clean_all+0xb2/0x3e0 [ 1548.385806][T24001] ? rt6_sync_down_dev+0x160/0x160 [ 1548.390939][T24001] ? fib6_clean_all+0x30/0x30 [ 1548.395640][T24001] ? node_free_rcu+0x30/0x30 [ 1548.400257][T24001] ? rt6_sync_down_dev+0x160/0x160 [ 1548.405419][T24001] rt6_disable_ip+0x12a/0x860 [ 1548.410115][T24001] ? tee_netdev_event+0x42c/0x440 [ 1548.415346][T24001] ? fib6_ifdown+0x4b0/0x4b0 [ 1548.419970][T24001] ? rcu_is_watching+0x15/0xb0 [ 1548.424775][T24001] ? trace_contention_end+0x39/0xe0 [ 1548.430023][T24001] addrconf_ifdown+0x160/0x18a0 [ 1548.434898][T24001] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1548.440546][T24001] ? mutex_unlock+0x10/0x10 [ 1548.445066][T24001] ? addrconf_cleanup+0x1e0/0x1e0 [ 1548.450113][T24001] addrconf_notify+0x6c6/0x1010 [ 1548.454983][T24001] notifier_call_chain+0x18f/0x380 [ 1548.460122][T24001] dev_set_mtu_ext+0x463/0x680 [ 1548.464905][T24001] ? dev_validate_mtu+0x170/0x170 [ 1548.469944][T24001] ? __mutex_lock+0x96e/0xce0 [ 1548.474633][T24001] ? do_raw_spin_lock+0x11f/0x2b0 [ 1548.479693][T24001] ? __rwlock_init+0x150/0x150 [ 1548.484467][T24001] ? mutex_spin_on_owner+0x7d/0x330 [ 1548.489685][T24001] dev_set_mtu+0xec/0x1c0 [ 1548.494029][T24001] ? dev_set_mtu_ext+0x680/0x680 [ 1548.498993][T24001] ? __dev_get_by_name+0xe5/0x130 [ 1548.504029][T24001] ? dev_ifsioc+0x4f9/0xc40 [ 1548.508574][T24001] dev_ioctl+0x7b4/0x1140 [ 1548.512934][T24001] sock_do_ioctl+0x239/0x310 [ 1548.517544][T24001] ? sock_show_fdinfo+0xb0/0xb0 [ 1548.522429][T24001] sock_ioctl+0x5be/0x7e0 [ 1548.526789][T24001] ? sock_poll+0x460/0x460 [ 1548.531314][T24001] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1548.536267][T24001] ? security_file_ioctl+0x80/0xa0 [ 1548.541392][T24001] ? sock_poll+0x460/0x460 [ 1548.545824][T24001] __se_sys_ioctl+0xfd/0x170 [ 1548.550436][T24001] do_syscall_64+0x55/0xb0 [ 1548.554865][T24001] ? clear_bhb_loop+0x40/0x90 [ 1548.559553][T24001] ? clear_bhb_loop+0x40/0x90 [ 1548.564353][T24001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1548.570259][T24001] RIP: 0033:0x7fb9b87a8f19 [ 1548.574686][T24001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1548.594392][T24001] RSP: 002b:00007fb9b960a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1548.602821][T24001] RAX: ffffffffffffffda RBX: 00007fb9b8a25fa0 RCX: 00007fb9b87a8f19 [ 1548.610804][T24001] RDX: 00002000000011c0 RSI: 0000000000008922 RDI: 0000000000000004 [ 1548.618783][T24001] RBP: 00007fb9b960a090 R08: 0000000000000000 R09: 0000000000000000 [ 1548.626760][T24001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1548.634741][T24001] R13: 00007fb9b8a26038 R14: 00007fb9b8a25fa0 R15: 00007fff6fafebd8 [ 1548.642742][T24001] [ 1548.655494][T21425] Bluetooth: hci4: command tx timeout [ 1548.890822][ T7704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.921909][ T7704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.280558][T17349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.297124][T17349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.138541][T24021] sit0: left promiscuous mode [ 1553.235878][T24022] sit0: entered promiscuous mode [ 1553.614829][T24029] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.5407'. [ 1553.633796][T24029] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1554.516222][T24030] rxe_eth0 speed is unknown, defaulting to 1000 [ 1554.959051][T24048] FAULT_INJECTION: forcing a failure. [ 1554.959051][T24048] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.003483][T24048] CPU: 1 PID: 24048 Comm: syz.0.5412 Not tainted syzkaller #0 [ 1555.011027][T24048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1555.021126][T24048] Call Trace: [ 1555.024479][T24048] [ 1555.027448][T24048] dump_stack_lvl+0x18c/0x250 [ 1555.032182][T24048] ? show_regs_print_info+0x20/0x20 [ 1555.037428][T24048] ? load_image+0x420/0x420 [ 1555.041970][T24048] ? ipt_alloc_initial_table+0x610/0x610 [ 1555.047655][T24048] should_fail_ex+0x394/0x4c0 [ 1555.052378][T24048] should_failslab+0x9/0x20 [ 1555.056917][T24048] slab_pre_alloc_hook+0x59/0x300 [ 1555.061983][T24048] ? nf_hook+0xa2/0x390 [ 1555.066182][T24048] kmem_cache_alloc+0x5a/0x2d0 [ 1555.070975][T24048] ? skb_clone+0x1eb/0x370 [ 1555.075411][T24048] skb_clone+0x1eb/0x370 [ 1555.079666][T24048] ? ip_mc_output+0x1d6/0x570 [ 1555.084370][T24048] ip_mc_output+0x1e3/0x570 [ 1555.088891][T24048] ip_send_skb+0x12f/0x1d0 [ 1555.093324][T24048] raw_sendmsg+0x15de/0x1ba0 [ 1555.097944][T24048] ? compat_raw_ioctl+0x70/0x70 [ 1555.102853][T24048] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 1555.109293][T24048] ? aa_sock_msg_perm+0x94/0x150 [ 1555.114256][T24048] ? sock_rps_record_flow+0x19/0x3f0 [ 1555.119590][T24048] ? inet_sendmsg+0x7e/0x2a0 [ 1555.124194][T24048] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1555.129537][T24048] ? inet_send_prepare+0x250/0x250 [ 1555.134669][T24048] ____sys_sendmsg+0x61b/0x980 [ 1555.139717][T24048] ? __asan_memset+0x22/0x40 [ 1555.144339][T24048] ? __sys_sendmsg_sock+0x30/0x30 [ 1555.149371][T24048] ? __import_iovec+0x3fa/0x850 [ 1555.154249][T24048] ? import_iovec+0x73/0xa0 [ 1555.158768][T24048] ___sys_sendmsg+0x2a6/0x360 [ 1555.163458][T24048] ? get_pid_task+0x20/0x1e0 [ 1555.168067][T24048] ? __sys_sendmsg+0x2b0/0x2b0 [ 1555.172860][T24048] ? __lock_acquire+0x7eb0/0x7eb0 [ 1555.177923][T24048] __se_sys_sendmsg+0x1d0/0x2c0 [ 1555.182783][T24048] ? __x64_sys_sendmsg+0x80/0x80 [ 1555.187748][T24048] ? lockdep_hardirqs_on+0x98/0x150 [ 1555.192958][T24048] do_syscall_64+0x55/0xb0 [ 1555.197387][T24048] ? clear_bhb_loop+0x40/0x90 [ 1555.202078][T24048] ? clear_bhb_loop+0x40/0x90 [ 1555.206769][T24048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1555.212686][T24048] RIP: 0033:0x7f63fb9a8f19 [ 1555.217116][T24048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1555.236747][T24048] RSP: 002b:00007f63fc805028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1555.245204][T24048] RAX: ffffffffffffffda RBX: 00007f63fbc25fa0 RCX: 00007f63fb9a8f19 [ 1555.253221][T24048] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 1555.261242][T24048] RBP: 00007f63fc805090 R08: 0000000000000000 R09: 0000000000000000 [ 1555.269238][T24048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1555.277223][T24048] R13: 00007f63fbc26038 R14: 00007f63fbc25fa0 R15: 00007ffeb2a7b6c8 [ 1555.285225][T24048] [ 1555.473248][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1555.481967][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1555.494121][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1555.517249][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1555.549365][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1555.558256][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1555.595554][T24054] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.5413'. [ 1555.729661][T24050] rxe_eth0 speed is unknown, defaulting to 1000 [ 1556.300692][T17354] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.490217][T17354] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.351749][T17354] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.586152][T24066] sit0: entered allmulticast mode [ 1557.630927][T24067] sit0: entered promiscuous mode [ 1557.679805][T21425] Bluetooth: hci0: command tx timeout [ 1558.172046][T17354] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.539381][T24050] chnl_net:caif_netlink_parms(): no params data found [ 1559.249180][T24050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.276164][T24050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.302359][T24050] bridge_slave_0: entered allmulticast mode [ 1559.317320][T24050] bridge_slave_0: entered promiscuous mode [ 1559.378144][T24050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.385440][T24050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.426073][T24050] bridge_slave_1: entered allmulticast mode [ 1559.433654][T24050] bridge_slave_1: entered promiscuous mode [ 1559.948103][T21425] Bluetooth: hci0: command tx timeout [ 1560.315972][T24104] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5423'. [ 1560.375275][T24109] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5423'. [ 1560.762895][T24050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1560.799958][T24050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1560.865806][T24124] sit0: left promiscuous mode [ 1561.057188][T24127] sit0: entered promiscuous mode [ 1561.614657][T24050] team0: Port device team_slave_0 added [ 1561.636382][T24050] team0: Port device team_slave_1 added [ 1561.866715][T24050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1561.873746][T24050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1561.909966][T24050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1561.976751][T21425] Bluetooth: hci0: command tx timeout [ 1561.976815][T24139] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.5430'. [ 1562.108971][T24050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1562.135663][T24050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1562.211504][T24050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1562.347572][T24131] rxe_eth0 speed is unknown, defaulting to 1000 [ 1562.763486][T24050] hsr_slave_0: entered promiscuous mode [ 1562.856930][T24050] hsr_slave_1: entered promiscuous mode [ 1562.911803][T24050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1562.934616][T24050] Cannot create hsr debugfs directory [ 1563.296283][T24160] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5432'. [ 1563.793063][T24167] netlink: 'syz.3.5433': attribute type 4 has an invalid length. [ 1563.834194][T24167] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5433'. [ 1564.051076][T21425] Bluetooth: hci0: command tx timeout [ 1564.750802][T24182] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5436'. [ 1567.305844][T24182] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5436'. [ 1567.614937][T24177] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5436'. [ 1568.228441][T24198] sit0: left promiscuous mode [ 1568.587607][T24201] sit0: entered promiscuous mode [ 1569.260214][T24208] netlink: 'syz.3.5440': attribute type 10 has an invalid length. [ 1569.421068][T17354] hsr_slave_0: left promiscuous mode [ 1569.443073][T17354] hsr_slave_1: left promiscuous mode [ 1569.459608][T17354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1569.477148][T17354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1569.570636][T17354] veth1_macvtap: left promiscuous mode [ 1569.586951][T17354] veth0_macvtap: left promiscuous mode [ 1569.592765][T17354] veth1_vlan: left promiscuous mode [ 1569.635841][T17354] veth0_vlan: left promiscuous mode [ 1569.719270][T24221] FAULT_INJECTION: forcing a failure. [ 1569.719270][T24221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1569.755948][T24221] CPU: 1 PID: 24221 Comm: syz.3.5442 Not tainted syzkaller #0 [ 1569.763509][T24221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1569.773617][T24221] Call Trace: [ 1569.776941][T24221] [ 1569.779907][T24221] dump_stack_lvl+0x18c/0x250 [ 1569.784643][T24221] ? show_regs_print_info+0x20/0x20 [ 1569.789897][T24221] ? load_image+0x420/0x420 [ 1569.794626][T24221] ? __might_fault+0xaa/0x120 [ 1569.799354][T24221] ? __lock_acquire+0x7eb0/0x7eb0 [ 1569.804438][T24221] should_fail_ex+0x394/0x4c0 [ 1569.809175][T24221] _copy_from_user+0x2f/0xe0 [ 1569.813802][T24221] ___sys_sendmsg+0x1c7/0x360 [ 1569.818524][T24221] ? get_pid_task+0x20/0x1e0 [ 1569.823162][T24221] ? __sys_sendmsg+0x2b0/0x2b0 [ 1569.827995][T24221] ? __lock_acquire+0x7eb0/0x7eb0 [ 1569.833178][T24221] __se_sys_sendmsg+0x1d0/0x2c0 [ 1569.838073][T24221] ? perf_trace_preemptirq_template+0x269/0x330 [ 1569.844367][T24221] ? __x64_sys_sendmsg+0x80/0x80 [ 1569.849366][T24221] ? lockdep_hardirqs_on+0x98/0x150 [ 1569.854614][T24221] do_syscall_64+0x55/0xb0 [ 1569.859084][T24221] ? clear_bhb_loop+0x40/0x90 [ 1569.863811][T24221] ? clear_bhb_loop+0x40/0x90 [ 1569.868543][T24221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1569.874480][T24221] RIP: 0033:0x7f3803da8f19 [ 1569.878939][T24221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1569.898682][T24221] RSP: 002b:00007f3804ba6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1569.907153][T24221] RAX: ffffffffffffffda RBX: 00007f3804025fa0 RCX: 00007f3803da8f19 [ 1569.915168][T24221] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 1569.923176][T24221] RBP: 00007f3804ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 1569.931368][T24221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1569.939382][T24221] R13: 00007f3804026038 R14: 00007f3804025fa0 R15: 00007ffe7832d508 [ 1569.947416][T24221] [ 1571.735833][T17354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1571.833509][T17354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1572.427603][T17354] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1572.492400][T17354] bond0 (unregistering): Released all slaves [ 1572.574598][T24224] netlink: 'syz.2.5443': attribute type 4 has an invalid length. [ 1572.593630][T24224] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5443'. [ 1572.603775][T24224] FAULT_INJECTION: forcing a failure. [ 1572.603775][T24224] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.635916][T24224] CPU: 1 PID: 24224 Comm: syz.2.5443 Not tainted syzkaller #0 [ 1572.643436][T24224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1572.653601][T24224] Call Trace: [ 1572.656919][T24224] [ 1572.659881][T24224] dump_stack_lvl+0x18c/0x250 [ 1572.664611][T24224] ? show_regs_print_info+0x20/0x20 [ 1572.669853][T24224] ? load_image+0x420/0x420 [ 1572.674424][T24224] ? __might_sleep+0xe0/0xe0 [ 1572.679073][T24224] ? __lock_acquire+0x7eb0/0x7eb0 [ 1572.684246][T24224] should_fail_ex+0x394/0x4c0 [ 1572.688971][T24224] should_failslab+0x9/0x20 [ 1572.693509][T24224] slab_pre_alloc_hook+0x59/0x300 [ 1572.698571][T24224] ? vprintk_emit+0x53d/0x610 [ 1572.703289][T24224] ? do_setlink+0x687/0x3f00 [ 1572.707926][T24224] ? do_setlink+0x687/0x3f00 [ 1572.712547][T24224] __kmem_cache_alloc_node+0x53/0x260 [ 1572.717962][T24224] ? do_setlink+0x687/0x3f00 [ 1572.722589][T24224] __kmalloc+0xa7/0x240 [ 1572.726793][T24224] do_setlink+0x687/0x3f00 [ 1572.731336][T24224] ? _printk+0xde/0x130 [ 1572.735553][T24224] ? load_image+0x420/0x420 [ 1572.740108][T24224] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 1572.746323][T24224] ? stack_trace_save+0xaa/0x100 [ 1572.751296][T24224] ? rcu_is_watching+0x15/0xb0 [ 1572.756082][T24224] ? do_trace_netlink_extack+0x7e/0x1a0 [ 1572.761677][T24224] ? __nla_validate+0x50/0x50 [ 1572.766401][T24224] ? validate_linkmsg+0x719/0x910 [ 1572.771531][T24224] rtnl_newlink+0x1848/0x2170 [ 1572.776233][T24224] ? rtnl_newlink+0x501/0x2170 [ 1572.781023][T24224] ? rtnl_setlink+0x4e0/0x4e0 [ 1572.785709][T24224] ? __rwlock_init+0x150/0x150 [ 1572.790493][T24224] ? do_raw_spin_unlock+0x121/0x230 [ 1572.795722][T24224] ? __mutex_lock+0x978/0xce0 [ 1572.800419][T24224] ? __mutex_lock+0x4d2/0xce0 [ 1572.805129][T24224] ? rtnl_setlink+0x4e0/0x4e0 [ 1572.809826][T24224] rtnetlink_rcv_msg+0x843/0xf90 [ 1572.814775][T24224] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1572.819902][T24224] ? rtnetlink_bind+0x80/0x80 [ 1572.824588][T24224] ? kasan_quarantine_put+0xd8/0x220 [ 1572.829897][T24224] ? lockdep_hardirqs_on+0x98/0x150 [ 1572.835123][T24224] ? perf_trace_preemptirq_template+0xac/0x330 [ 1572.841329][T24224] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1572.847436][T24224] ? lock_chain_count+0x20/0x20 [ 1572.852324][T24224] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1572.857715][T24224] ? lockdep_hardirqs_on+0x98/0x150 [ 1572.862930][T24224] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1572.868314][T24224] ? _local_bh_enable+0xa0/0xa0 [ 1572.873276][T24224] ? __dev_queue_xmit+0x1481/0x3a30 [ 1572.878496][T24224] ? __dev_queue_xmit+0x6d1/0x3a30 [ 1572.883716][T24224] ? ref_tracker_free+0x686/0x830 [ 1572.888765][T24224] netlink_rcv_skb+0x235/0x4c0 [ 1572.893547][T24224] ? rtnetlink_bind+0x80/0x80 [ 1572.898282][T24224] ? netlink_ack+0x1160/0x1160 [ 1572.903072][T24224] ? __lock_acquire+0x7eb0/0x7eb0 [ 1572.908228][T24224] ? netlink_deliver_tap+0x2e/0x1b0 [ 1572.913443][T24224] netlink_unicast+0x856/0x9e0 [ 1572.918246][T24224] netlink_sendmsg+0x8d0/0xbf0 [ 1572.923033][T24224] ? netlink_getsockopt+0x590/0x590 [ 1572.928304][T24224] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1572.933897][T24224] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1572.939231][T24224] ? security_socket_sendmsg+0x80/0xa0 [ 1572.944709][T24224] ? netlink_getsockopt+0x590/0x590 [ 1572.949956][T24224] ____sys_sendmsg+0x61b/0x980 [ 1572.954748][T24224] ? __asan_memset+0x22/0x40 [ 1572.959361][T24224] ? __sys_sendmsg_sock+0x30/0x30 [ 1572.964395][T24224] ? __import_iovec+0x5f2/0x850 [ 1572.969276][T24224] ? import_iovec+0x73/0xa0 [ 1572.973799][T24224] ___sys_sendmsg+0x2a6/0x360 [ 1572.978577][T24224] ? get_pid_task+0x20/0x1e0 [ 1572.983189][T24224] ? __sys_sendmsg+0x2b0/0x2b0 [ 1572.987987][T24224] ? __lock_acquire+0x7eb0/0x7eb0 [ 1572.993053][T24224] __se_sys_sendmsg+0x1d0/0x2c0 [ 1572.997926][T24224] ? __x64_sys_sendmsg+0x80/0x80 [ 1573.002902][T24224] ? lockdep_hardirqs_on+0x98/0x150 [ 1573.008186][T24224] do_syscall_64+0x55/0xb0 [ 1573.012618][T24224] ? clear_bhb_loop+0x40/0x90 [ 1573.017309][T24224] ? clear_bhb_loop+0x40/0x90 [ 1573.022001][T24224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1573.027907][T24224] RIP: 0033:0x7fe38cba8f19 [ 1573.032358][T24224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1573.051976][T24224] RSP: 002b:00007fe38d999028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1573.060403][T24224] RAX: ffffffffffffffda RBX: 00007fe38ce25fa0 RCX: 00007fe38cba8f19 [ 1573.068384][T24224] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1573.076363][T24224] RBP: 00007fe38d999090 R08: 0000000000000000 R09: 0000000000000000 [ 1573.084343][T24224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1573.092324][T24224] R13: 00007fe38ce26038 R14: 00007fe38ce25fa0 R15: 00007ffe8130d3d8 [ 1573.100430][T24224] [ 1573.118190][T24234] bridge0: port 3(batadv_slave_0) entered disabled state [ 1573.142700][T24234] bridge_slave_1: left allmulticast mode [ 1573.149951][T24234] bridge_slave_1: left promiscuous mode [ 1573.172209][T24234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.189335][T24234] bridge_slave_0: left allmulticast mode [ 1573.195072][T24234] bridge_slave_0: left promiscuous mode [ 1573.216053][T24234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.295232][T24234] bond0: (slave bridge0): Releasing backup interface [ 1573.303138][T24234] bridge0 (unregistering): left promiscuous mode [ 1573.313377][T24234] bridge0 (unregistering): left allmulticast mode [ 1573.344816][T24050] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1573.397888][T24050] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1573.445490][T24050] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1573.489880][T24050] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1573.814576][T24050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1573.915284][T24250] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.5449'. [ 1573.963371][T24050] 8021q: adding VLAN 0 to HW filter on device team0 [ 1574.111192][T24246] sit0: left promiscuous mode [ 1574.526068][T24253] sit0: entered promiscuous mode [ 1574.706073][T22653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.713285][T22653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1574.777664][ T7704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.784869][ T7704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1575.096395][T24274] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5451'. [ 1576.106760][T24050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1576.400224][T24050] veth0_vlan: entered promiscuous mode [ 1576.514385][T24050] veth1_vlan: entered promiscuous mode [ 1576.854015][T24050] veth0_macvtap: entered promiscuous mode [ 1576.933395][T24050] veth1_macvtap: entered promiscuous mode [ 1577.049573][T24050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.115830][T24050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.142317][T24050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.177370][T24050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.212396][T24050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1577.273105][T24050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1577.331375][T24050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.372398][T24050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1577.424223][T24050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.455129][T24050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1577.486672][T24050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.536076][T24050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1577.596208][T24050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.650207][T24050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1577.693082][T24050] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.737148][T24050] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.787111][T24050] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.824259][T24050] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.308428][T17352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1578.345123][T17352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1578.486189][T17352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1578.494083][T17352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1579.252086][T24308] rxe_eth0 speed is unknown, defaulting to 1000 [ 1579.846556][T24324] sit0: entered allmulticast mode [ 1579.920137][T24326] sit0: entered promiscuous mode [ 1580.941098][T24350] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5462'. [ 1584.076201][T24358] netlink: 'syz.3.5463': attribute type 3 has an invalid length. [ 1584.083441][T24342] rxe_eth0 speed is unknown, defaulting to 1000 [ 1584.097253][T24358] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5463'. [ 1584.214733][T24360] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5471'. [ 1584.489233][T24358] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 1587.504648][T24375] bridge_slave_1: left allmulticast mode [ 1587.523546][T24375] bridge_slave_1: left promiscuous mode [ 1587.593812][T24375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.664363][T24375] bridge_slave_0: left allmulticast mode [ 1587.735427][T24375] bridge_slave_0: left promiscuous mode [ 1587.750499][T24375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.038485][T24382] sit0: left promiscuous mode [ 1588.200218][T24383] sit0: entered promiscuous mode [ 1588.658593][T24387] sit0: left promiscuous mode [ 1588.994468][T24391] sit0: entered promiscuous mode [ 1589.454873][T24400] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.5472'. [ 1589.465533][T24398] sit0: left promiscuous mode [ 1589.527468][T24400] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1589.746653][T24401] sit0: entered promiscuous mode [ 1590.394377][T24413] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5475'. [ 1591.433801][T24415] rxe_eth0 speed is unknown, defaulting to 1000 [ 1592.520795][T24435] rxe_eth0 speed is unknown, defaulting to 1000 [ 1592.826136][T24439] sit0: left promiscuous mode [ 1593.334875][T24443] sit0: entered promiscuous mode [ 1593.417774][T24445] sit0: left promiscuous mode [ 1593.613544][T24446] sit0: entered promiscuous mode [ 1595.433215][T24465] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.5488'. [ 1595.475829][T24465] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1596.315315][T17352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1596.338916][T17352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1596.536718][T17352] veth1_macvtap: left promiscuous mode [ 1596.542518][T17352] veth0_macvtap: left promiscuous mode [ 1596.606120][T17352] veth1_vlan: left promiscuous mode [ 1596.612571][T17352] veth0_vlan: left promiscuous mode [ 1596.853719][T24477] netlink: 'syz.2.5492': attribute type 10 has an invalid length. [ 1596.904586][T24477] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.5492'. [ 1601.002007][T17352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1601.010871][T17352] bond_slave_1 (unregistering): left promiscuous mode [ 1601.017741][T17352] bond_slave_1 (unregistering): left allmulticast mode [ 1601.403514][T17352] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1601.412196][T17352] dummy0 (unregistering): left promiscuous mode [ 1601.418563][T17352] dummy0 (unregistering): left allmulticast mode [ 1601.449262][T17352] bond0 (unregistering): Released all slaves [ 1601.493536][T24474] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5491'. [ 1601.876083][T24491] sit0: left promiscuous mode [ 1602.243865][T24498] sit0: entered promiscuous mode [ 1603.240807][T24513] rxe_eth0 speed is unknown, defaulting to 1000 [ 1603.748721][T24519] netlink: 'syz.1.5503': attribute type 29 has an invalid length. [ 1603.826522][T24520] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5503'. [ 1603.879604][T24519] netlink: 'syz.1.5503': attribute type 29 has an invalid length. [ 1603.986862][T24526] netlink: 'syz.1.5503': attribute type 29 has an invalid length. [ 1604.043697][T24525] netlink: 'syz.1.5503': attribute type 29 has an invalid length. [ 1604.107726][T24523] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1604.164389][T24522] netlink: 'syz.2.5504': attribute type 3 has an invalid length. [ 1604.222958][T24522] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5504'. [ 1604.310158][T24528] netlink: 'syz.1.5503': attribute type 29 has an invalid length. [ 1606.929687][T24534] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5507'. [ 1606.994391][T24527] rxe_eth0 speed is unknown, defaulting to 1000 [ 1607.205997][T24538] sit0: left promiscuous mode [ 1607.722959][T24543] sit0: entered promiscuous mode [ 1607.736518][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.742910][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.836730][T24547] rxe_eth0 speed is unknown, defaulting to 1000 [ 1609.965913][T24560] rxe_eth0 speed is unknown, defaulting to 1000 [ 1610.225325][T24566] netlink: 'syz.3.5516': attribute type 3 has an invalid length. [ 1610.234884][T24566] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5516'. [ 1610.479298][T24568] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5517'. [ 1613.746895][T24578] sit0: left promiscuous mode [ 1613.903038][T24580] sit0: entered promiscuous mode [ 1614.270964][T24584] sit0: left promiscuous mode [ 1614.606570][T24588] sit0: entered promiscuous mode [ 1615.036592][T24585] rxe_eth0 speed is unknown, defaulting to 1000 [ 1615.382127][T24601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5526'. [ 1616.317326][T24611] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5529'. [ 1616.897344][T24615] sit0: left promiscuous mode [ 1617.781159][T24618] sit0: entered promiscuous mode [ 1619.579563][T24654] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5541'. [ 1619.672353][T24656] netlink: 'syz.1.5542': attribute type 21 has an invalid length. [ 1619.696689][T24656] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5542'. [ 1620.324998][T24656] sit0: left promiscuous mode [ 1620.474831][T24655] sit0: entered promiscuous mode [ 1620.802472][T24672] netlink: 'syz.2.5545': attribute type 3 has an invalid length. [ 1620.853773][T24672] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.5545'. [ 1621.307734][T24678] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5547'. [ 1621.563366][T24680] sit0: left promiscuous mode [ 1622.426294][T24684] sit0: entered promiscuous mode [ 1622.893395][T24690] rxe_eth0 speed is unknown, defaulting to 1000 [ 1624.638113][T24700] sit0: left promiscuous mode [ 1624.954169][T24705] netlink: 'syz.3.5554': attribute type 21 has an invalid length. [ 1625.015997][T24705] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5554'. [ 1625.088351][T24702] sit0: entered promiscuous mode [ 1626.718844][T24710] sit0: left promiscuous mode [ 1626.805892][T24711] sit0: entered promiscuous mode [ 1626.934302][T24713] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5553'. [ 1627.156719][T24722] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5556'. [ 1627.248447][T24722] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1627.659607][T24727] netlink: 'syz.3.5557': attribute type 4 has an invalid length. [ 1627.676219][T24727] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5557'. [ 1627.688566][T24727] FAULT_INJECTION: forcing a failure. [ 1627.688566][T24727] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.725786][T24727] CPU: 1 PID: 24727 Comm: syz.3.5557 Not tainted syzkaller #0 [ 1627.733333][T24727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1627.743422][T24727] Call Trace: [ 1627.746737][T24727] [ 1627.749704][T24727] dump_stack_lvl+0x18c/0x250 [ 1627.754450][T24727] ? show_regs_print_info+0x20/0x20 [ 1627.759699][T24727] ? load_image+0x420/0x420 [ 1627.764352][T24727] ? __might_sleep+0xe0/0xe0 [ 1627.768999][T24727] ? __lock_acquire+0x7eb0/0x7eb0 [ 1627.774075][T24727] ? mark_lock+0x94/0x320 [ 1627.778468][T24727] should_fail_ex+0x394/0x4c0 [ 1627.783212][T24727] should_failslab+0x9/0x20 [ 1627.787766][T24727] slab_pre_alloc_hook+0x59/0x300 [ 1627.792924][T24727] ? vprintk_emit+0x53d/0x610 [ 1627.797648][T24727] ? do_setlink+0x687/0x3f00 [ 1627.802265][T24727] ? do_setlink+0x687/0x3f00 [ 1627.806875][T24727] __kmem_cache_alloc_node+0x53/0x260 [ 1627.812264][T24727] ? do_setlink+0x687/0x3f00 [ 1627.816872][T24727] __kmalloc+0xa7/0x240 [ 1627.821050][T24727] do_setlink+0x687/0x3f00 [ 1627.825570][T24727] ? _printk+0xde/0x130 [ 1627.829745][T24727] ? load_image+0x420/0x420 [ 1627.834258][T24727] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 1627.840431][T24727] ? stack_trace_save+0xaa/0x100 [ 1627.845389][T24727] ? rcu_is_watching+0x15/0xb0 [ 1627.850170][T24727] ? do_trace_netlink_extack+0x7e/0x1a0 [ 1627.855765][T24727] ? __nla_validate+0x50/0x50 [ 1627.860483][T24727] ? validate_linkmsg+0x719/0x910 [ 1627.865524][T24727] rtnl_newlink+0x1848/0x2170 [ 1627.870231][T24727] ? rtnl_newlink+0x501/0x2170 [ 1627.875016][T24727] ? rtnl_setlink+0x4e0/0x4e0 [ 1627.879710][T24727] ? __rwlock_init+0x150/0x150 [ 1627.884497][T24727] ? do_raw_spin_unlock+0x121/0x230 [ 1627.890146][T24727] ? __mutex_lock+0x978/0xce0 [ 1627.894839][T24727] ? __mutex_lock+0x4d2/0xce0 [ 1627.899555][T24727] ? rtnl_setlink+0x4e0/0x4e0 [ 1627.904240][T24727] rtnetlink_rcv_msg+0x843/0xf90 [ 1627.909190][T24727] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1627.914329][T24727] ? rtnetlink_bind+0x80/0x80 [ 1627.919014][T24727] ? kasan_quarantine_put+0xd8/0x220 [ 1627.924329][T24727] ? lockdep_hardirqs_on+0x98/0x150 [ 1627.929541][T24727] ? slab_free_freelist_hook+0x154/0x240 [ 1627.935187][T24727] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1627.941186][T24727] ? lock_chain_count+0x20/0x20 [ 1627.946056][T24727] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1627.951440][T24727] ? lockdep_hardirqs_on+0x98/0x150 [ 1627.956749][T24727] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1627.962139][T24727] ? _local_bh_enable+0xa0/0xa0 [ 1627.967013][T24727] ? __dev_queue_xmit+0x1481/0x3a30 [ 1627.972233][T24727] ? __dev_queue_xmit+0x6d1/0x3a30 [ 1627.977390][T24727] ? ref_tracker_free+0x686/0x830 [ 1627.982439][T24727] netlink_rcv_skb+0x235/0x4c0 [ 1627.987217][T24727] ? rtnetlink_bind+0x80/0x80 [ 1627.991907][T24727] ? netlink_ack+0x1160/0x1160 [ 1627.996785][T24727] ? __lock_acquire+0x7eb0/0x7eb0 [ 1628.001868][T24727] ? netlink_deliver_tap+0x2e/0x1b0 [ 1628.007082][T24727] netlink_unicast+0x856/0x9e0 [ 1628.011885][T24727] netlink_sendmsg+0x8d0/0xbf0 [ 1628.016669][T24727] ? netlink_getsockopt+0x590/0x590 [ 1628.021881][T24727] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1628.027447][T24727] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1628.032756][T24727] ? security_socket_sendmsg+0x80/0xa0 [ 1628.038244][T24727] ? netlink_getsockopt+0x590/0x590 [ 1628.043458][T24727] ____sys_sendmsg+0x61b/0x980 [ 1628.048245][T24727] ? __asan_memset+0x22/0x40 [ 1628.052864][T24727] ? __sys_sendmsg_sock+0x30/0x30 [ 1628.057900][T24727] ? __import_iovec+0x5f2/0x850 [ 1628.062776][T24727] ? import_iovec+0x73/0xa0 [ 1628.067302][T24727] ___sys_sendmsg+0x2a6/0x360 [ 1628.071993][T24727] ? get_pid_task+0x20/0x1e0 [ 1628.076602][T24727] ? __sys_sendmsg+0x2b0/0x2b0 [ 1628.081396][T24727] ? __lock_acquire+0x7eb0/0x7eb0 [ 1628.086468][T24727] __se_sys_sendmsg+0x1d0/0x2c0 [ 1628.091351][T24727] ? __x64_sys_sendmsg+0x80/0x80 [ 1628.096324][T24727] ? lockdep_hardirqs_on+0x98/0x150 [ 1628.101536][T24727] do_syscall_64+0x55/0xb0 [ 1628.105964][T24727] ? clear_bhb_loop+0x40/0x90 [ 1628.110658][T24727] ? clear_bhb_loop+0x40/0x90 [ 1628.115353][T24727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1628.121287][T24727] RIP: 0033:0x7f3803da8f19 [ 1628.125719][T24727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1628.145336][T24727] RSP: 002b:00007f3804ba6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1628.153764][T24727] RAX: ffffffffffffffda RBX: 00007f3804025fa0 RCX: 00007f3803da8f19 [ 1628.161753][T24727] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000003 [ 1628.169735][T24727] RBP: 00007f3804ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 1628.177716][T24727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1628.185808][T24727] R13: 00007f3804026038 R14: 00007f3804025fa0 R15: 00007ffe7832d508 [ 1628.193805][T24727] [ 1628.572053][T24742] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5561'. [ 1630.532131][T24751] rxe_eth0 speed is unknown, defaulting to 1000 [ 1630.752793][T24759] netlink: 'syz.2.5566': attribute type 21 has an invalid length. [ 1630.777831][T24759] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5566'. [ 1630.842997][T24759] sit0: left promiscuous mode [ 1631.126429][T24762] sit0: entered promiscuous mode [ 1631.312601][T24766] netlink: 'syz.0.5567': attribute type 4 has an invalid length. [ 1631.345690][T24766] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5567'. [ 1631.376190][T24766] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1631.599481][T24768] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5568'. [ 1631.904932][T24774] netlink: 'syz.0.5570': attribute type 2 has an invalid length. [ 1631.936541][T24774] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5570'. [ 1631.958929][T24776] FAULT_INJECTION: forcing a failure. [ 1631.958929][T24776] name failslab, interval 1, probability 0, space 0, times 0 [ 1632.039657][T24776] CPU: 1 PID: 24776 Comm: syz.2.5571 Not tainted syzkaller #0 [ 1632.047199][T24776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1632.057299][T24776] Call Trace: [ 1632.060613][T24776] [ 1632.063577][T24776] dump_stack_lvl+0x18c/0x250 [ 1632.068328][T24776] ? show_regs_print_info+0x20/0x20 [ 1632.073608][T24776] ? load_image+0x420/0x420 [ 1632.078159][T24776] ? __might_sleep+0xe0/0xe0 [ 1632.082801][T24776] ? __lock_acquire+0x7eb0/0x7eb0 [ 1632.087865][T24776] ? do_raw_spin_lock+0x11f/0x2b0 [ 1632.092939][T24776] should_fail_ex+0x394/0x4c0 [ 1632.097711][T24776] should_failslab+0x9/0x20 [ 1632.102257][T24776] slab_pre_alloc_hook+0x59/0x300 [ 1632.107324][T24776] ? _raw_spin_unlock+0x28/0x40 [ 1632.112217][T24776] kmem_cache_alloc_lru+0x4d/0x2c0 [ 1632.117368][T24776] ? sock_alloc_inode+0x28/0xc0 [ 1632.122260][T24776] sock_alloc_inode+0x28/0xc0 [ 1632.126983][T24776] ? sockfs_init_fs_context+0xb0/0xb0 [ 1632.132389][T24776] new_inode_pseudo+0x63/0x1d0 [ 1632.137282][T24776] __sock_create+0x12d/0x940 [ 1632.141936][T24776] __sys_socketpair+0x236/0x550 [ 1632.146831][T24776] __x64_sys_socketpair+0x9b/0xb0 [ 1632.151872][T24776] do_syscall_64+0x55/0xb0 [ 1632.156309][T24776] ? clear_bhb_loop+0x40/0x90 [ 1632.160998][T24776] ? clear_bhb_loop+0x40/0x90 [ 1632.165689][T24776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1632.171598][T24776] RIP: 0033:0x7fe38cba8f19 [ 1632.176027][T24776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1632.195653][T24776] RSP: 002b:00007fe38adf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1632.204087][T24776] RAX: ffffffffffffffda RBX: 00007fe38ce26090 RCX: 00007fe38cba8f19 [ 1632.212069][T24776] RDX: 00000000000000ff RSI: 0000000000000003 RDI: 000000000000000a [ 1632.220049][T24776] RBP: 00007fe38adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1632.228032][T24776] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 1632.236013][T24776] R13: 00007fe38ce26128 R14: 00007fe38ce26090 R15: 00007ffe8130d3d8 [ 1632.244031][T24776] [ 1632.334312][T24776] socket: no more sockets [ 1634.821113][T24787] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5573'. [ 1634.842596][T24793] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5573'. [ 1634.904501][T24787] syzkaller0: entered promiscuous mode [ 1634.920030][T24787] syzkaller0: entered allmulticast mode [ 1634.964848][T24799] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5575'. [ 1638.403577][T24806] netlink: 'syz.2.5578': attribute type 21 has an invalid length. [ 1638.432319][T24806] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5578'. [ 1638.473821][T24808] sit0: left promiscuous mode [ 1638.634938][T24809] sit0: entered promiscuous mode [ 1639.118126][T24823] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5583'. [ 1642.113205][T24818] rxe_eth0 speed is unknown, defaulting to 1000 [ 1642.592838][T24840] FAULT_INJECTION: forcing a failure. [ 1642.592838][T24840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1642.766594][T24840] CPU: 0 PID: 24840 Comm: syz.0.5588 Not tainted syzkaller #0 [ 1642.774141][T24840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1642.784249][T24840] Call Trace: [ 1642.787551][T24840] [ 1642.790688][T24840] dump_stack_lvl+0x18c/0x250 [ 1642.795425][T24840] ? show_regs_print_info+0x20/0x20 [ 1642.800667][T24840] ? load_image+0x420/0x420 [ 1642.805209][T24840] ? __lock_acquire+0x7eb0/0x7eb0 [ 1642.810270][T24840] ? snprintf+0xe9/0x140 [ 1642.814548][T24840] should_fail_ex+0x394/0x4c0 [ 1642.819273][T24840] _copy_to_user+0x2f/0xa0 [ 1642.823731][T24840] simple_read_from_buffer+0xe7/0x150 [ 1642.829147][T24840] proc_fail_nth_read+0x1e8/0x260 [ 1642.834243][T24840] ? proc_fault_inject_write+0x360/0x360 [ 1642.839928][T24840] ? fsnotify_perm+0x271/0x5e0 [ 1642.844730][T24840] ? proc_fault_inject_write+0x360/0x360 [ 1642.850413][T24840] vfs_read+0x298/0x990 [ 1642.854625][T24840] ? kernel_read+0x1e0/0x1e0 [ 1642.859260][T24840] ? __fget_files+0x28/0x460 [ 1642.863914][T24840] ? __fget_files+0x3fc/0x460 [ 1642.868650][T24840] ? __fdget_pos+0x2a3/0x330 [ 1642.873280][T24840] ? ksys_read+0x74/0x260 [ 1642.877664][T24840] ksys_read+0x151/0x260 [ 1642.881951][T24840] ? vfs_write+0x9a0/0x9a0 [ 1642.886427][T24840] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1642.892362][T24840] do_syscall_64+0x55/0xb0 [ 1642.896820][T24840] ? clear_bhb_loop+0x40/0x90 [ 1642.901539][T24840] ? clear_bhb_loop+0x40/0x90 [ 1642.906261][T24840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1642.912213][T24840] RIP: 0033:0x7f63fb96974e [ 1642.916664][T24840] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1642.936315][T24840] RSP: 002b:00007f63fc804fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1642.944807][T24840] RAX: ffffffffffffffda RBX: 00007f63fc8056c0 RCX: 00007f63fb96974e [ 1642.952827][T24840] RDX: 000000000000000f RSI: 00007f63fc8050a0 RDI: 000000000000000a [ 1642.960836][T24840] RBP: 00007f63fc805090 R08: 0000000000000000 R09: 0000000000000000 [ 1642.968856][T24840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1642.976871][T24840] R13: 00007f63fbc26038 R14: 00007f63fbc25fa0 R15: 00007ffeb2a7b6c8 [ 1642.984904][T24840] [ 1644.455642][T24852] netlink: 'syz.3.5592': attribute type 21 has an invalid length. [ 1644.463981][T24852] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5592'. [ 1644.541552][T24858] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5590'. [ 1644.658835][T24852] sit0: left promiscuous mode [ 1645.373425][T24860] sit0: entered promiscuous mode [ 1646.153314][T24853] rxe_eth0 speed is unknown, defaulting to 1000 [ 1646.696409][T24869] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5594'. [ 1647.946043][T24876] ¥: port 1(batadv0) entered blocking state [ 1647.952456][T24876] ¥: port 1(batadv0) entered disabled state [ 1647.982225][T24876] batadv0: entered allmulticast mode [ 1647.994094][T24876] batadv0: entered promiscuous mode [ 1648.175881][T24883] bridge_slave_1: left allmulticast mode [ 1648.195805][T24883] bridge_slave_1: left promiscuous mode [ 1648.220075][T24883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.261085][T24883] bridge_slave_0: left allmulticast mode [ 1648.295676][T24883] bridge_slave_0: left promiscuous mode [ 1648.320929][T17352] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1648.330709][T17352] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1648.366401][T24883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.786720][T24889] sit0: left promiscuous mode Stopping sshd: stopped /usr/sbin/sshd (pid 5539) OK [ 1649.248030][T24896] netlink: 'syz.2.5601': attribute type 10 has an invalid length. [ 1649.268834][T24903] FAULT_INJECTION: forcing a failure. [ 1649.268834][T24903] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.303978][T24903] CPU: 1 PID: 24903 Comm: syz.3.5602 Not tainted syzkaller #0 [ 1649.311537][T24903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1649.321639][T24903] Call Trace: [ 1649.324996][T24903] [ 1649.327970][T24903] dump_stack_lvl+0x18c/0x250 [ 1649.332723][T24903] ? show_regs_print_info+0x20/0x20 [ 1649.337979][T24903] ? load_image+0x420/0x420 [ 1649.342542][T24903] ? __might_sleep+0xe0/0xe0 [ 1649.347200][T24903] ? __lock_acquire+0x7eb0/0x7eb0 [ 1649.352273][T24903] ? stack_trace_save+0xaa/0x100 [ 1649.357265][T24903] ? stack_trace_snprint+0xf0/0xf0 [ 1649.362433][T24903] should_fail_ex+0x394/0x4c0 [ 1649.367256][T24903] should_failslab+0x9/0x20 [ 1649.371807][T24903] slab_pre_alloc_hook+0x59/0x300 [ 1649.376874][T24903] ? __kasan_kmalloc+0x8f/0xa0 [ 1649.381671][T24903] ? __inet_diag_dump_start+0x8b/0x9f0 [ 1649.387265][T24903] ? __netlink_dump_start+0x43c/0x7a0 [ 1649.392788][T24903] kmem_cache_alloc_node+0x5e/0x320 [ 1649.398046][T24903] ? ___sys_sendmsg+0x2a6/0x360 [ 1649.402956][T24903] ? __alloc_skb+0x103/0x2c0 [ 1649.407613][T24903] __alloc_skb+0x103/0x2c0 [ 1649.412335][T24903] netlink_dump+0x1ee/0xec0 [ 1649.416862][T24903] ? end_current_label_crit_section+0x170/0x170 [ 1649.423127][T24903] ? end_current_label_crit_section+0x170/0x170 [ 1649.429395][T24903] ? netlink_lookup+0x200/0x200 [ 1649.434279][T24903] ? ns_capable+0x89/0xe0 [ 1649.438633][T24903] ? __inet_diag_dump_start+0x886/0x9f0 [ 1649.444211][T24903] __netlink_dump_start+0x57c/0x7a0 [ 1649.449433][T24903] inet_diag_rcv_msg_compat+0x215/0x440 [ 1649.454998][T24903] ? __inet_diag_dump+0x380/0x380 [ 1649.460045][T24903] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 1649.465087][T24903] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 1649.470820][T24903] ? inet_diag_dump_start_compat+0x20/0x20 [ 1649.476640][T24903] ? inet_diag_dump+0x50/0x50 [ 1649.481344][T24903] ? __inet_diag_dump+0x380/0x380 [ 1649.486386][T24903] sock_diag_rcv_msg+0x3d3/0x5f0 [ 1649.491346][T24903] netlink_rcv_skb+0x235/0x4c0 [ 1649.496140][T24903] ? sock_diag_bind+0xb0/0xb0 [ 1649.501017][T24903] ? netlink_ack+0x1160/0x1160 [ 1649.505808][T24903] ? __lock_acquire+0x7eb0/0x7eb0 [ 1649.510861][T24903] ? netlink_deliver_tap+0x2e/0x1b0 [ 1649.516078][T24903] sock_diag_rcv+0x2a/0x40 [ 1649.520513][T24903] netlink_unicast+0x856/0x9e0 [ 1649.525318][T24903] netlink_sendmsg+0x8d0/0xbf0 [ 1649.530112][T24903] ? netlink_getsockopt+0x590/0x590 [ 1649.535353][T24903] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1649.540938][T24903] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1649.546253][T24903] ? security_socket_sendmsg+0x80/0xa0 [ 1649.551730][T24903] ? netlink_getsockopt+0x590/0x590 [ 1649.556949][T24903] ____sys_sendmsg+0x61b/0x980 [ 1649.561738][T24903] ? __asan_memset+0x22/0x40 [ 1649.566352][T24903] ? __sys_sendmsg_sock+0x30/0x30 [ 1649.571401][T24903] ? __import_iovec+0x5f2/0x850 [ 1649.576279][T24903] ? import_iovec+0x73/0xa0 [ 1649.581712][T24903] ___sys_sendmsg+0x2a6/0x360 [ 1649.586424][T24903] ? __sys_sendmsg+0x2b0/0x2b0 [ 1649.591252][T24903] ? __lock_acquire+0x7eb0/0x7eb0 [ 1649.596338][T24903] __se_sys_sendmsg+0x1d0/0x2c0 [ 1649.601216][T24903] ? __x64_sys_sendmsg+0x80/0x80 [ 1649.606219][T24903] ? lockdep_hardirqs_on+0x98/0x150 [ 1649.611449][T24903] do_syscall_64+0x55/0xb0 [ 1649.615889][T24903] ? clear_bhb_loop+0x40/0x90 [ 1649.620589][T24903] ? clear_bhb_loop+0x40/0x90 [ 1649.625287][T24903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1649.631202][T24903] RIP: 0033:0x7f3803da8f19 [ 1649.635639][T24903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1649.655260][T24903] RSP: 002b:00007f3804ba6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1649.663712][T24903] RAX: ffffffffffffffda RBX: 00007f3804025fa0 RCX: 00007f3803da8f19 [ 1649.671706][T24903] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000003 [ 1649.679740][T24903] RBP: 00007f3804ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 1649.687750][T24903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1649.695761][T24903] R13: 00007f3804026038 R14: 00007f3804025fa0 R15: 00007ffe7832d508 [ 1649.703778][T24903] Stopping crond: [ 1649.737133][T24896] veth0_vlan: left promiscuous mode [ 1649.756557][T24896] veth0_vlan: entered promiscuous mode [ 1649.798733][T24896] team0: Device veth0_vlan failed to register rx_handler stopped /usr/sbin/crond (pid 5525) OK [ 1650.357828][T24912] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5605'. [ 1650.811455][T24922] netlink: 'syz.3.5607': attribute type 21 has an invalid length. Stopping dhcpcd... [ 1650.999334][T24922] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5607'. [ 1651.112979][T24926] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5606'. stopped /sbin/dhcpcd (pid 5445) [ 1651.217171][T24926] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5606'. [ 1651.258495][T24913] FAULT_INJECTION: forcing a failure. [ 1651.258495][T24913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1651.379997][T24913] CPU: 0 PID: 24913 Comm: syz.0.5604 Not tainted syzkaller #0 [ 1651.387560][T24913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1651.397683][T24913] Call Trace: [ 1651.401020][T24913] [ 1651.404007][T24913] dump_stack_lvl+0x18c/0x250 [ 1651.408764][T24913] ? show_regs_print_info+0x20/0x20 [ 1651.414031][T24913] ? load_image+0x420/0x420 [ 1651.418587][T24913] ? __might_fault+0xaa/0x120 [ 1651.423310][T24913] ? __lock_acquire+0x7eb0/0x7eb0 [ 1651.428383][T24913] should_fail_ex+0x394/0x4c0 [ 1651.433211][T24913] _copy_from_user+0x2f/0xe0 [ 1651.437850][T24913] ___sys_sendmsg+0x1c7/0x360 [ 1651.442574][T24913] ? __sys_sendmsg+0x2b0/0x2b0 [ 1651.447406][T24913] ? __lock_acquire+0x7eb0/0x7eb0 [ 1651.452505][T24913] __se_sys_sendmsg+0x1d0/0x2c0 [ 1651.457384][T24913] ? __x64_sys_sendmsg+0x80/0x80 [ 1651.462374][T24913] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1651.468299][T24913] do_syscall_64+0x55/0xb0 [ 1651.472740][T24913] ? clear_bhb_loop+0x40/0x90 [ 1651.477442][T24913] ? clear_bhb_loop+0x40/0x90 [ 1651.482153][T24913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1651.488074][T24913] RIP: 0033:0x7f63fb9a8f19 [ 1651.492521][T24913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1651.512155][T24913] RSP: 002b:00007f63fc805028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1651.520604][T24913] RAX: ffffffffffffffda RBX: 00007f63fbc25fa0 RCX: 00007f63fb9a8f19 [ 1651.528597][T24913] RDX: 0000000000098010 RSI: 0000200000000900 RDI: 000000000000000a [ 1651.536589][T24913] RBP: 00007f63fc805090 R08: 0000000000000000 R09: 0000000000000000 [ 1651.544582][T24913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1651.552574][T24913] R13: 00007f63fbc26038 R14: 00007f63fbc25fa0 R15: 00007ffeb2a7b6c8 [ 1651.560598][T24913] [ 1651.567847][T24926] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5606'. [ 1651.627811][T24926] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5606'. [ 1651.641874][T24926] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5606'. Stopping network: [ 1651.684472][T24926] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5606'. [ 1651.780525][T24926] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5606'. [ 1651.849340][T24926] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5606'. [ 1653.354642][T24927] sit0: entered promiscuous mode [ 1654.344093][T24949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1654.427466][T24938] rxe_eth0 speed is unknown, defaulting to 1000 OK Stopping iptables: OK Stopping system message bus: done [ 1659.601851][T25000] __nla_validate_parse: 25 callbacks suppressed [ 1659.601873][T25000] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5617'. [ 1661.354558][T25013] netlink: 'syz.0.5620': attribute type 21 has an invalid length. [ 1661.371586][T25013] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5620'. Stopping klogd: OK Stopping acpid: [ 1662.566067][T25047] FAULT_INJECTION: forcing a failure. [ 1662.566067][T25047] name failslab, interval 1, probability 0, space 0, times 0 [ 1662.615677][T25047] CPU: 0 PID: 25047 Comm: syz.3.5628 Not tainted syzkaller #0 [ 1662.623227][T25047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1662.633342][T25047] Call Trace: [ 1662.636662][T25047] [ 1662.639635][T25047] dump_stack_lvl+0x18c/0x250 [ 1662.644370][T25047] ? show_regs_print_info+0x20/0x20 [ 1662.649620][T25047] ? load_image+0x420/0x420 [ 1662.654171][T25047] ? __might_sleep+0xe0/0xe0 [ 1662.658809][T25047] ? __lock_acquire+0x7eb0/0x7eb0 [ 1662.664250][T25047] should_fail_ex+0x394/0x4c0 [ 1662.668996][T25047] should_failslab+0x9/0x20 [ 1662.673543][T25047] slab_pre_alloc_hook+0x59/0x300 [ 1662.678645][T25047] ? sk_prot_alloc+0xe7/0x210 [ 1662.683381][T25047] ? sk_prot_alloc+0xe7/0x210 [ 1662.688102][T25047] __kmem_cache_alloc_node+0x53/0x260 [ 1662.693532][T25047] ? sk_prot_alloc+0xe7/0x210 [ 1662.698259][T25047] __kmalloc+0xa7/0x240 [ 1662.702474][T25047] sk_prot_alloc+0xe7/0x210 [ 1662.707025][T25047] ? sk_alloc+0x24/0x350 [ 1662.711332][T25047] sk_alloc+0x3a/0x350 [ 1662.715451][T25047] ? bpf_ctx_init+0x154/0x190 [ 1662.720192][T25047] bpf_prog_test_run_skb+0x371/0x18f0 [ 1662.725623][T25047] ? __fget_files+0x28/0x460 [ 1662.730277][T25047] ? __fget_files+0x3fc/0x460 [ 1662.735033][T25047] ? cpu_online+0x60/0x60 [ 1662.739413][T25047] bpf_prog_test_run+0x31f/0x390 [ 1662.744401][T25047] __sys_bpf+0x49d/0x890 [ 1662.748707][T25047] ? bpf_link_show_fdinfo+0x560/0x560 [ 1662.754147][T25047] ? lock_chain_count+0x20/0x20 [ 1662.759069][T25047] __x64_sys_bpf+0x7c/0x90 [ 1662.763533][T25047] do_syscall_64+0x55/0xb0 [ 1662.767998][T25047] ? clear_bhb_loop+0x40/0x90 [ 1662.772727][T25047] ? clear_bhb_loop+0x40/0x90 [ 1662.777456][T25047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1662.783408][T25047] RIP: 0033:0x7f3803da8f19 [ 1662.787864][T25047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1662.807502][T25047] RSP: 002b:00007f3804ba6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1662.815935][T25047] RAX: ffffffffffffffda RBX: 00007f3804025fa0 RCX: 00007f3803da8f19 [ 1662.823916][T25047] RDX: 0000000000000050 RSI: 0000200000000980 RDI: 000000000000000a [ 1662.831903][T25047] RBP: 00007f3804ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 1662.839884][T25047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1662.847866][T25047] R13: 00007f3804026038 R14: 00007f3804025fa0 R15: 00007ffe7832d508 [ 1662.855874][T25047] [ 1663.174317][T25051] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5629'. [ 1663.563807][T25062] netlink: 'syz.3.5633': attribute type 21 has an invalid length. [ 1663.603424][T25062] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5633'. [ 1663.807271][T25063] rxe_eth0 speed is unknown, defaulting to 1000 OK Stopping syslogd: stopped /sbin/syslogd (pid 5133) OK umount: can't remount debugfs read-only [ 1665.937493][T25075] netlink: 'syz.1.5634': attribute type 17 has an invalid length. [ 1665.972724][T25075] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5634'. [ 1666.180566][T25076] netlink: 'syz.1.5634': attribute type 17 has an invalid length. [ 1666.200009][T25076] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5634'. [ 1666.211022][T25066] Bluetooth: hci4: command 0x0406 tx timeout [ 1666.791647][T25095] netlink: 'syz.1.5641': attribute type 29 has an invalid length. [ 1666.887738][T25095] netlink: 'syz.1.5641': attribute type 29 has an invalid length. [ 1666.918246][T25097] netlink: 'syz.1.5641': attribute type 29 has an invalid length. [ 1666.950784][T25098] netlink: 'syz.1.5641': attribute type 29 has an invalid length. [ 1667.008439][T25095] netlink: 'syz.1.5641': attribute type 29 has an invalid length. [ 1667.988364][T25104] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5643'. [ 1669.184653][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.193094][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.284882][T25117] netlink: 'syz.0.5646': attribute type 21 has an invalid length. [ 1669.427379][T25117] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5646'. [ 1669.572898][T25121] rxe_eth0 speed is unknown, defaulting to 1000 [ 1670.239963][T25133] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5650'. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.190 closed by remote host. [ 1671.774364][T17354] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 1671.901037][T17354] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.053058][T17354] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.233051][T17354] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.823198][T25142] smc: removing ib device rxe0 [ 1672.849119][T25142] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1672.892793][T25142] ACPI: PM: Preparing to enter system sleep state S5 [ 1672.927373][T25142] kvm: exiting hardware virtualization [ 1672.933149][T25142] reboot: Power down serialport: VM disconnected.