last executing test programs: 2.809618497s ago: executing program 1 (id=3303): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x15, 0x4, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000380)={0x3, 0xffffffffffffffab, 0x0, 0x0, 0xf3, 0x6, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc20, 0xc8, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0xc) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc5c082c00db5bffffffffff000000060300000023000000000000000000000000ac1414aa2c200007"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 2.479654242s ago: executing program 1 (id=3309): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r0, 0x0, 0x800) 2.478917477s ago: executing program 4 (id=3310): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="180000fce0fdc1800000140000ffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000050000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)="5c00000013006bcc9e3be35c6e17aa31066b876c1d0000007ea6e763160af36504001ac0080040000500020002000000ef64bc24eab556a705251e618294ff0051f60a9553adac000e4509c5bbcd72c6c953ec3ded4d8217961381fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x36, 0x8, 0xfffffffffffffc76, &(0x7f00000002c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', r6}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x10000, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x1, &(0x7f00000002c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000340)='syzkaller\x00', 0x4, 0xb6, &(0x7f0000000640)=""/182, 0x41000, 0x31, '\x00', r6, 0x1b, r0, 0x8, &(0x7f0000000380)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0xf, 0xee, 0xb}, 0x10, r7, 0x0, 0x0, &(0x7f0000000780)=[r1, r4, r0, r1], 0x0, 0x10, 0x4}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8b04, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.401459613s ago: executing program 3 (id=3312): syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', r0}, 0x18) 2.222005023s ago: executing program 1 (id=3313): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="01008b201000"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x13) getpid() ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000040)=0x33f) 2.126103983s ago: executing program 3 (id=3315): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x8848, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x118}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000480), 0x4) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x8}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0xffffffffffffff2f, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="03000072000500000001e2ff00"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000004c0)='%pB \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000f000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70b0000000000008500000083000000bf090000000000005549ce1d9f0901000000000095000000000000001856000004000000000000000000000018560046580000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0xd6, 0x6, &(0x7f0000000380)=""/6, 0xc2d00, 0x75, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xb, 0x4, 0xffffffff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[r1, r1, r1, r1, r4, r1, r1, r8, r1], &(0x7f0000000580)=[{0x3, 0x3, 0x10, 0x3}, {0x0, 0x5, 0x4, 0x7}, {0x2, 0x4, 0x3, 0x7}], 0x10, 0x5}, 0x94) socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000007c0)={0x0, 0x80, 0xf1, 0x4, 0x9, 0x2, 0x0, 0x8, 0x111a, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x5, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x41, 0x763, 0xf, 0x1, 0x5, 0x6, 0x4, 0x0, 0x5, 0x0, 0x1}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, &(0x7f0000000040)="c6428e3c7549c2e1a258285ac77991bd69739e2436cd63f943ae31626523c89dd2d9e7b949dcc12f07fb55a055dc813f30f00e57e5b99c8b933190bcd97371915a9107a86bf0c54a600a9668c3dba8504be5f0d7dc0fa81829eded16cc283670a0b36962cc7cbd0e6018eed339f0bd0e3b9dbe8dacb6d9516283d758b393ddaa1d8a3c80489c93c86ac762b19d0da0ca8eddfd7adda6685253a6e68ca9164ada0eb1e22108aef2fa6ff8958e214c9b41ef82c88057fdb84bdb872567b475ac86e6060e8b4de74b2813a55ec46b3d82503747d138a11e06329d8db71824bc71139a3d909c8ba4b36bc197de9f4654cc63", &(0x7f0000000140)=""/208}, 0x20) 2.027215148s ago: executing program 4 (id=3316): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) 1.903081667s ago: executing program 0 (id=3318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f00000002c0)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x2, 0x0, 0x8a, 0x80, r0, 0x4, '\x00', r2, r3, 0x4, 0x0, 0x5, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x41cf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x4}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000900)=r5, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.861729395s ago: executing program 4 (id=3320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000000000069118a00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000040), 0x4) recvmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/10, 0xa}, {0x0}], 0x2}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x72, 0xfe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='-hugetlb -r|imit '], 0x11) write$cgroup_subtree(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe800000fe800000875a65059ff57b00000000000000000000000000ac1414aa0000883e"], 0xcfa4) 1.710017959s ago: executing program 2 (id=3321): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0000006a0081020000000000005ef42502e0dfffff0e000a000e0000000224ec4db183f5582c92c0d0218da2a8", 0x2e}], 0x1}, 0x4c080) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02410000000000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586", @ANYRESDEC=r1, @ANYBLOB="d804b2c03e6c25c30bef1def26f469e5d6f411af9e17e533c323f4b70bb6180be2f300a968b60ff976363ffb0ddb42f2eaa7557550a1978f43beac4ae967e83340d4a9fe92209d9489e5d854e8196b179b30efd74f6b9fec54ed63d350d16f0b8df98052fe5fa0e7fa9aa28b705541abafe4523a98f954f8125672d031e210ddb8b4", @ANYBLOB="33e8ffcb6e2b3a75af2aebc0a88e9ab42cbf2eeeba8624edabe69f4cb6bb28356cc6ff70d2aac40b8f418e0e8813d5df2c1381159eb3adbcb979c9fe8e7f259ab43f51852a442d15b61b13fa19fcfc527534770145702191580232a68cbeb0c8dfc70b5cf62c91820ab5b0660058a478c4cfbc88fabb587082fc9634efafc6821002970e487a64948b363da91e5b9339c24e9bd3a755ab46bf9285e043aff8e58298ac224931bd14d1fbe8dbf34ef2ca91c5c478352e0f55666b5ca11b49a742e0006eb209f62b21a668a9eab2d15bdada8ffafaf7f14969c1f14d"], &(0x7f0000000000)='GPL\x00'}, 0x94) 1.457063982s ago: executing program 2 (id=3322): socket$kcm(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth1_macvtap\x00', @random="2542c3d08c53"}) 1.45109982s ago: executing program 4 (id=3323): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r0, 0x0, 0x800) 1.298065634s ago: executing program 2 (id=3324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) 1.253216047s ago: executing program 4 (id=3325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1a03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) close(0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x891c, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x52}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000af04000000eab2d5dc311b87d44119c552354fa812b7ee46dc8d2a8798e2e4001a25d3d2fb57fc"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3e8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='xprtrdma_frwr_maperr\x00', r5, 0x0, 0xff}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8918, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRES16=r6, @ANYRES16=r3], 0xffdd) 1.251919681s ago: executing program 1 (id=3326): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}, {0x85, 0x0, 0x0, 0xc4}}]}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000012c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 1.192787561s ago: executing program 0 (id=3327): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2000, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02410000000000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.082044493s ago: executing program 3 (id=3328): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000480), 0x4) 1.081861619s ago: executing program 0 (id=3329): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FREEZING\x00', 0x9) 1.042428847s ago: executing program 1 (id=3330): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x29, 0x1, 0x5, &(0x7f00000002c0)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0x46, 0x0, &(0x7f0000000300)="4ae4bdc50f362560d58840316820636fa1cc23027143435204e8b383f3c8163a420aa5fd1547941e612d68a9ff7e54f7b37de67741b2d5daab3c3cd0703083a242e30cb20646", 0x0, 0x0, 0x0, 0x78, 0xe0, &(0x7f0000000500)="3ee75e6c621aa56c2b43fb4466eb7aeee9d44dcc793983c71b1f625d7f74887b816db5a1a4271867210a60587bd852833e226823ad23275726221215520747c0864f9d9568fe01d079692aa42efd1b050b0d8ccd97d95eb63e124c7f4304ce8c68e02895315da83f3340b9a4642ed6fd96c95f3d39262bfb", &(0x7f00000005c0)="365f87e55e0bfbc00f2c7feefbd87657f27058df0e4985b31c4ce232d61f524556a115fdd787c2988827833b68503aa9dfcff8433dd1d94e4f80f279f22baa1d16e9a2bbb348526822cb65f20f14abde614581ab34c8292075fd154037d193a2804c506152214e8587db8dfa22eed00f6ab420b7eb5cf952144ee1424724004f879fb13e07740feddd79a82091ee1d5eac3fde5d5b91d57aa57bbdf814b8bbf448e4356f28190d285702691ee8570ae3cbdd35dcba3edaa5677aee883d9d0726c4f3415cb126cc94f788b427d1fe6fbccb73d71db43bf32507c6e57061c52895", 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3281, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 1.038721548s ago: executing program 2 (id=3331): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="22000000a0e00a00fd16080000000100000080000000b27467291d53854ec8c94c312c17404fa81a43da", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000400"/28], 0x50) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000ac0)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x5, &(0x7f0000002480)=ANY=[@ANYRES64=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000007c0)=r2, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000a00)=@in6={0xa, 0x4e20, 0xc, @mcast2, 0x5}, 0x80, 0x0}, 0x4040004) r6 = socket$kcm(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x5411, &(0x7f0000000040)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r7, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = socket$kcm(0x29, 0x1, 0x0) recvmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000600)=""/173, 0xad}, {&(0x7f0000000e00)=""/262, 0x106}, {&(0x7f00000008c0)=""/230, 0xe6}, {&(0x7f00000009c0)=""/246, 0xf6}, {&(0x7f0000000d00)=""/209, 0xd1}, {&(0x7f0000000500)=""/107, 0x6b}, {&(0x7f0000000240)=""/28, 0x1c}, {&(0x7f0000000bc0)=""/86, 0x56}, {&(0x7f0000000340)=""/47, 0x2f}], 0xa}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x10, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x5f]}}, 0x0, 0x2f}, 0x28) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='9\x00\x00\x00', 0x4}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000800)={r9}) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802200000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0xfffffffffffffffc, &(0x7f0000000300), &(0x7f0000000940), 0x4, r0}, 0x38) 963.444421ms ago: executing program 0 (id=3332): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0xd}, 0x14105, 0x2e, 0xfffffbff, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x204080, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES64=r1], 0x20) 848.99326ms ago: executing program 3 (id=3333): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x4, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) socket$kcm(0xa, 0x2, 0x88) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0xd}, 0x14105, 0x2e, 0xfffffbff, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x204080, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES64=r2], 0x20) 755.755122ms ago: executing program 3 (id=3334): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 7) 646.727383ms ago: executing program 0 (id=3335): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x800) 641.825941ms ago: executing program 4 (id=3336): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x8, 0x10}, 0x48) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r4, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x4f, &(0x7f0000000100)=[{&(0x7f0000000500)="5c00000012006b009a3fe3d86e17aa31106b8700000000000000ff040000006504001a0038001d00f3f031b0121f8d073d2b000055f142c52a31a0e69ee52bd34460bc06000000a705251e6182949a3651f65a224b5e068100000000f663ae3f32ac526f420fe2775e528c6743ede518a76b58c656565201214299bb38a8f2a3e0722e355681a33e78ebaf85c517c07c1782ea2698c912a1", 0x98}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) close(r4) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000061000000180100002020702500000073e52020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200001a020000b7030000400000008500000006000000950000000000000060a8bceb162d24cfa7f89cfead5104231c830661af5c35c3147872fef1ec939821f3101e2878a0dcf2b97aba45562a5e437512d3bc98f10d26b344c387c6cc7445756835f31b627a20b6ed04d6907d22f21c05efd47ef52f898433baffd74a3916e98fce34551b2b892e35da72785642d4d76de916e9eaabe2648ed7779dcaacf9677bcfa38a220cb8d6e83f8f3c34e3d265f0259e7ec538e63231e7ef952e375a2262c79baa9de2d6517937f6"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000880)="3d25ab324119c4cbd001708588a8", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 546.096704ms ago: executing program 2 (id=3337): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f00000026b938ae1a74"], 0x20) (fail_nth: 7) 509.558115ms ago: executing program 1 (id=3338): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/173) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xe) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 412.410126ms ago: executing program 0 (id=3339): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r3, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x3, '\x00', r5, r6, 0x3, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) r9 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x26}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r10, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000fa54140ebe262d08eeeebcc7102f8612b6392de93baa0cfabb1235cea61069d4a796a3ed9f561d2dfed6b7"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) 412.207055ms ago: executing program 2 (id=3340): r0 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8919, &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3281, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b36, &(0x7f0000000040)={'wlan1\x00', @random="080180000400"}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0xfd, 0x0, 0xa, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1}, 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000002800100"/18], 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.stat\x00', 0x0, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x9c) 0s ago: executing program 3 (id=3341): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x4, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000380)={0x3, 0xffffffffffffffab, 0x0, 0x0, 0xf3, 0x6, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc20, 0xc8, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0xc) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc5c082c00db5bffffffffff000000060300000023000000000000000000000000ac1414aa2c200007"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) kernel console output (not intermixed with test programs): bridge0: entered allmulticast mode [ 146.534768][ T7093] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.542056][ T7093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.549788][ T7093] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.556952][ T7093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.657085][ T7093] bridge0: entered promiscuous mode [ 146.684903][ T7102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.453'. [ 146.953036][ T7112] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.456'. [ 147.203031][ T7118] veth1_macvtap: left promiscuous mode [ 147.229128][ T7118] macsec0: entered promiscuous mode [ 147.234426][ T7118] macsec0: entered allmulticast mode [ 147.493585][ T51] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6 [ 147.646292][ T7133] veth1_macvtap: left allmulticast mode [ 147.659640][ T7133] veth1_macvtap: left promiscuous mode [ 147.676261][ T7133] veth1_macvtap: entered promiscuous mode [ 147.694387][ T7133] veth1_macvtap: entered allmulticast mode [ 148.098040][ T7142] veth1_macvtap: left allmulticast mode [ 148.103901][ T7142] veth1_macvtap: left promiscuous mode [ 148.135256][ T7143] veth1_macvtap: left promiscuous mode [ 148.144757][ T7143] macsec0: entered promiscuous mode [ 148.154906][ T7143] macsec0: entered allmulticast mode [ 148.179913][ T7142] veth1_macvtap: entered promiscuous mode [ 148.185813][ T7142] veth1_macvtap: entered allmulticast mode [ 148.248850][ T7143] veth1_macvtap: entered promiscuous mode [ 148.265861][ T7143] veth1_macvtap: entered allmulticast mode [ 148.648215][ T7156] sctp: [Deprecated]: syz.0.476 (pid 7156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.648215][ T7156] Use struct sctp_sack_info instead [ 148.757092][ T7160] bridge_slave_1: left allmulticast mode [ 148.793781][ T7160] bridge_slave_1: left promiscuous mode [ 148.832973][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.958227][ T7160] bridge_slave_0: left allmulticast mode [ 148.968802][ T7160] bridge_slave_0: left promiscuous mode [ 149.180685][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.578860][ T51] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 150.662522][ T7200] veth1_macvtap: left allmulticast mode [ 150.684801][ T7200] veth1_macvtap: left promiscuous mode [ 150.709897][ T7197] veth1_macvtap: entered promiscuous mode [ 150.715985][ T7197] veth1_macvtap: entered allmulticast mode [ 151.089580][ T7208] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 151.096642][ T7208] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 151.130374][ T7215] veth1_macvtap: left allmulticast mode [ 151.136243][ T7215] veth1_macvtap: left promiscuous mode [ 151.149840][ T7215] veth1_macvtap: entered promiscuous mode [ 151.155846][ T7215] veth1_macvtap: entered allmulticast mode [ 152.592116][ T7239] macsec0: entered promiscuous mode [ 152.609256][ T7239] macsec0: entered allmulticast mode [ 152.630289][ T7239] veth1_macvtap: entered allmulticast mode [ 153.053526][ T51] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 153.701278][ T7266] veth1_macvtap: left allmulticast mode [ 153.726624][ T7266] veth1_macvtap: left promiscuous mode [ 155.841126][ T7315] macsec0: entered promiscuous mode [ 155.856547][ T7315] macsec0: entered allmulticast mode [ 155.866965][ T7315] veth1_macvtap: entered allmulticast mode [ 156.041969][ T7324] veth1_macvtap: entered promiscuous mode [ 156.053818][ T7324] veth1_macvtap: entered allmulticast mode [ 157.601296][ T7370] veth1_macvtap: entered promiscuous mode [ 157.607248][ T7370] veth1_macvtap: entered allmulticast mode [ 159.939110][ T7431] veth1_macvtap: left allmulticast mode [ 159.945002][ T7431] veth1_macvtap: left promiscuous mode [ 159.994096][ T7429] veth1_macvtap: entered promiscuous mode [ 160.002890][ T7429] veth1_macvtap: entered allmulticast mode [ 160.717116][ T7448] C: renamed from team_slave_0 (while UP) [ 160.850884][ T7448] netlink: 'syz.2.589': attribute type 1 has an invalid length. [ 160.887344][ T7448] netlink: 152 bytes leftover after parsing attributes in process `syz.2.589'. [ 160.943175][ T7448] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 161.009843][ T7453] veth1_macvtap: left allmulticast mode [ 161.015799][ T7453] veth1_macvtap: left promiscuous mode [ 161.092887][ T7454] veth1_macvtap: entered promiscuous mode [ 161.098756][ T7454] veth1_macvtap: entered allmulticast mode [ 161.507670][ T7464] netlink: 830 bytes leftover after parsing attributes in process `syz.1.599'. [ 161.672506][ T7470] C: renamed from team_slave_0 (while UP) [ 161.755472][ T7470] netlink: 'syz.3.601': attribute type 1 has an invalid length. [ 161.797814][ T7470] netlink: 152 bytes leftover after parsing attributes in process `syz.3.601'. [ 161.821218][ T7470] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 167.351449][ T7547] C: renamed from team_slave_0 (while UP) [ 167.386340][ T7547] netlink: 'syz.0.633': attribute type 1 has an invalid length. [ 167.417805][ T7547] netlink: 152 bytes leftover after parsing attributes in process `syz.0.633'. [ 167.463978][ T7547] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 167.510011][ T7555] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 167.550038][ T7555] netlink: 'syz.2.636': attribute type 2 has an invalid length. [ 168.701233][ T7588] netlink: 'syz.1.648': attribute type 2 has an invalid length. [ 169.201185][ T7597] C: renamed from team_slave_0 (while UP) [ 169.343177][ T7597] netlink: 'syz.4.653': attribute type 1 has an invalid length. [ 169.386180][ T7597] netlink: 152 bytes leftover after parsing attributes in process `syz.4.653'. [ 169.425517][ T7597] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 170.633004][ T7640] netlink: 'syz.3.668': attribute type 2 has an invalid length. [ 171.070884][ T7644] netlink: 'syz.4.670': attribute type 1 has an invalid length. [ 171.102549][ T7644] netlink: 152 bytes leftover after parsing attributes in process `syz.4.670'. [ 171.154028][ T7644] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 171.232400][ T7650] netlink: 'syz.0.673': attribute type 2 has an invalid length. [ 172.542727][ T7665] netlink: 'syz.3.678': attribute type 1 has an invalid length. [ 172.588337][ T7665] netlink: 152 bytes leftover after parsing attributes in process `syz.3.678'. [ 172.623567][ T7665] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 172.947672][ T7676] netlink: 'syz.1.682': attribute type 2 has an invalid length. [ 173.190933][ T7686] netlink: 'syz.3.686': attribute type 1 has an invalid length. [ 173.246489][ T7686] netlink: 152 bytes leftover after parsing attributes in process `syz.3.686'. [ 173.351157][ T7686] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 174.076808][ T7704] netlink: 'syz.0.695': attribute type 1 has an invalid length. [ 174.115953][ T7704] netlink: 152 bytes leftover after parsing attributes in process `syz.0.695'. [ 174.203221][ T7704] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 175.080178][ T7727] netlink: 'syz.1.704': attribute type 2 has an invalid length. [ 177.482284][ T7776] netlink: 'syz.3.722': attribute type 2 has an invalid length. [ 180.571532][ T7817] veth1_macvtap: left allmulticast mode [ 180.625605][ T7817] veth1_macvtap: left promiscuous mode [ 180.694856][ T7820] veth1_macvtap: entered promiscuous mode [ 180.722054][ T7820] veth1_macvtap: entered allmulticast mode [ 180.902905][ T7827] netlink: 'syz.2.740': attribute type 1 has an invalid length. [ 180.940665][ T7827] netlink: 152 bytes leftover after parsing attributes in process `syz.2.740'. [ 181.001778][ T7827] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 181.864140][ T7846] veth1_macvtap: left allmulticast mode [ 181.910556][ T7846] veth1_macvtap: left promiscuous mode [ 181.953476][ T7846] veth1_macvtap: entered promiscuous mode [ 181.959504][ T7846] veth1_macvtap: entered allmulticast mode [ 182.506961][ T7866] netlink: 'syz.3.755': attribute type 10 has an invalid length. [ 182.542620][ T7866] geneve0: entered promiscuous mode [ 182.644954][ T7866] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 182.749814][ T7871] netlink: 'syz.4.757': attribute type 1 has an invalid length. [ 182.770658][ T7871] netlink: 152 bytes leftover after parsing attributes in process `syz.4.757'. [ 182.832962][ T7871] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 183.361895][ T7889] veth1_macvtap: left allmulticast mode [ 183.382601][ T7889] veth1_macvtap: left promiscuous mode [ 183.476035][ T7889] veth1_macvtap: entered promiscuous mode [ 183.512808][ T7889] veth1_macvtap: entered allmulticast mode [ 183.726472][ T7897] netlink: 'syz.3.767': attribute type 39 has an invalid length. [ 184.041333][ T7897] veth0_macvtap: left promiscuous mode [ 186.611081][ T7934] netlink: 'syz.0.782': attribute type 39 has an invalid length. [ 186.689812][ T7934] veth0_macvtap: left promiscuous mode [ 186.800592][ T7942] netlink: 'syz.3.786': attribute type 2 has an invalid length. [ 188.406963][ T7962] netlink: 'syz.3.793': attribute type 39 has an invalid length. [ 188.563905][ T7971] netlink: 'syz.0.797': attribute type 39 has an invalid length. [ 188.775170][ T7975] veth1_macvtap: left allmulticast mode [ 188.807804][ T7975] veth1_macvtap: left promiscuous mode [ 188.829472][ T7975] veth1_macvtap: entered promiscuous mode [ 188.857590][ T7975] veth1_macvtap: entered allmulticast mode [ 191.349411][ T8010] netlink: 'syz.3.812': attribute type 39 has an invalid length. [ 191.487954][ T8016] netlink: 'syz.2.815': attribute type 39 has an invalid length. [ 191.581974][ T8016] veth0_macvtap: left promiscuous mode [ 191.686287][ T8022] netlink: 'syz.3.818': attribute type 39 has an invalid length. [ 191.712208][ T8024] C: renamed from team_slave_0 (while UP) [ 192.686762][ T8024] netlink: 'syz.1.819': attribute type 1 has an invalid length. [ 192.707799][ T8024] netlink: 152 bytes leftover after parsing attributes in process `syz.1.819'. [ 192.718419][ T8024] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 192.850320][ T8028] netlink: 'syz.2.821': attribute type 1 has an invalid length. [ 192.895933][ T8028] netlink: 152 bytes leftover after parsing attributes in process `syz.2.821'. [ 192.930939][ T8028] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 192.958202][ T51] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9 [ 193.845330][ T8048] veth1_macvtap: left allmulticast mode [ 193.958154][ T8048] veth1_macvtap: left promiscuous mode [ 194.058913][ T8048] veth1_macvtap: entered promiscuous mode [ 194.064899][ T8048] veth1_macvtap: entered allmulticast mode [ 194.069935][ T8059] netlink: 'syz.3.831': attribute type 39 has an invalid length. [ 194.262362][ T8061] netlink: 'syz.2.832': attribute type 39 has an invalid length. [ 194.347991][ T51] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 194.363633][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.377216][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.347868][ T8070] veth1_macvtap: left allmulticast mode [ 195.353714][ T8070] veth1_macvtap: left promiscuous mode [ 195.429888][ T8070] macsec0: left allmulticast mode [ 195.711402][ T8080] netlink: 'syz.1.836': attribute type 1 has an invalid length. [ 195.751382][ T8080] netlink: 152 bytes leftover after parsing attributes in process `syz.1.836'. [ 195.790265][ T8081] netlink: 'syz.0.840': attribute type 39 has an invalid length. [ 195.841573][ T8080] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 196.310160][ T8089] veth1_macvtap: left allmulticast mode [ 196.316116][ T8089] veth1_macvtap: left promiscuous mode [ 196.426899][ T8089] macsec0: left allmulticast mode [ 197.162917][ T8101] netlink: 'syz.0.847': attribute type 39 has an invalid length. [ 197.425512][ T8111] netlink: 'syz.2.850': attribute type 39 has an invalid length. [ 197.543333][ T8109] veth1_macvtap: left allmulticast mode [ 197.956002][ T8109] veth1_macvtap: left promiscuous mode [ 198.195157][ T8109] macsec0: left allmulticast mode [ 198.203435][ T8118] veth1_macvtap: left allmulticast mode [ 198.221666][ T8118] veth1_macvtap: left promiscuous mode [ 198.238211][ T8118] macsec0: left allmulticast mode [ 198.676039][ T8136] netlink: 'syz.1.859': attribute type 39 has an invalid length. [ 198.930459][ T8136] veth0_macvtap: left promiscuous mode [ 199.248303][ T8147] netlink: 'syz.3.863': attribute type 39 has an invalid length. [ 200.336319][ T8165] veth1_macvtap: entered promiscuous mode [ 200.353361][ T8165] macsec0: entered allmulticast mode [ 200.384391][ T8165] veth1_macvtap: entered allmulticast mode [ 201.578747][ T8188] netlink: 'syz.4.877': attribute type 2 has an invalid length. [ 201.594465][ T8192] netlink: 'syz.2.879': attribute type 10 has an invalid length. [ 201.625230][ T8192] geneve0: entered promiscuous mode [ 201.779075][ T8192] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 203.112119][ T8216] netlink: 'syz.1.888': attribute type 39 has an invalid length. [ 204.683376][ T8253] netlink: 'syz.2.903': attribute type 39 has an invalid length. [ 204.934399][ T8259] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 204.975276][ T8259] geneve0: entered promiscuous mode [ 205.065896][ T8259] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 205.093336][ T8263] netlink: 'syz.3.908': attribute type 1 has an invalid length. [ 205.116687][ T8263] netlink: 152 bytes leftover after parsing attributes in process `syz.3.908'. [ 205.143399][ T8263] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 205.578100][ T8281] netlink: 'syz.2.913': attribute type 2 has an invalid length. [ 205.648234][ T8284] veth1_macvtap: left allmulticast mode [ 205.684826][ T8284] veth1_macvtap: left promiscuous mode [ 205.773535][ T8284] macsec0: left allmulticast mode [ 206.852826][ T8293] netlink: 'syz.1.916': attribute type 2 has an invalid length. [ 206.924434][ T8290] netlink: 'syz.3.918': attribute type 39 has an invalid length. [ 207.149759][ T8298] netlink: 'syz.4.921': attribute type 39 has an invalid length. [ 207.206474][ T8298] veth0_macvtap: left promiscuous mode [ 209.530102][ T8340] veth1_macvtap: left allmulticast mode [ 209.702736][ T8346] netlink: 'syz.0.942': attribute type 39 has an invalid length. [ 210.106253][ T8340] veth1_macvtap: left promiscuous mode [ 210.116124][ T8340] macsec0: left allmulticast mode [ 211.199217][ T8382] netlink: 'syz.3.956': attribute type 10 has an invalid length. [ 211.677094][ T8401] netlink: 'syz.2.962': attribute type 39 has an invalid length. [ 211.743734][ T8402] netlink: 'syz.0.963': attribute type 1 has an invalid length. [ 211.766004][ T8402] netlink: 152 bytes leftover after parsing attributes in process `syz.0.963'. [ 211.795034][ T8402] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 211.933760][ T8405] netlink: 'syz.4.964': attribute type 39 has an invalid length. [ 212.119102][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 212.119763][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 212.125969][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 212.132927][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 212.315220][ T8418] netlink: 'syz.1.970': attribute type 2 has an invalid length. [ 213.565407][ T8428] netlink: 'syz.4.976': attribute type 39 has an invalid length. [ 214.045699][ T8440] netlink: 'syz.4.978': attribute type 2 has an invalid length. [ 214.199269][ T8443] netlink: 'syz.3.979': attribute type 39 has an invalid length. [ 214.214666][ T8446] netlink: 'syz.1.981': attribute type 1 has an invalid length. [ 214.255614][ T8446] netlink: 152 bytes leftover after parsing attributes in process `syz.1.981'. [ 214.280974][ T8446] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 215.171935][ T8455] netlink: 'syz.1.983': attribute type 2 has an invalid length. [ 216.480132][ T8463] netlink: 'syz.3.988': attribute type 2 has an invalid length. [ 216.866621][ T8472] netlink: 'syz.1.992': attribute type 39 has an invalid length. [ 218.383471][ T8499] netlink: 'syz.3.1003': attribute type 2 has an invalid length. [ 219.642852][ T8511] netlink: 'syz.2.1011': attribute type 39 has an invalid length. [ 222.630756][ T8605] netlink: 'syz.2.1047': attribute type 2 has an invalid length. [ 227.133707][ T8648] netlink: 'syz.1.1064': attribute type 39 has an invalid length. [ 227.513109][ T8657] netlink: 'syz.4.1067': attribute type 39 has an invalid length. [ 227.568076][ T8656] netlink: 'syz.1.1066': attribute type 39 has an invalid length. [ 227.739281][ T8661] netlink: 'syz.2.1070': attribute type 39 has an invalid length. [ 229.284102][ T8702] netlink: 'syz.1.1084': attribute type 39 has an invalid length. [ 231.030911][ T8740] netlink: 'syz.1.1097': attribute type 39 has an invalid length. [ 231.226573][ T8742] netlink: 'syz.4.1098': attribute type 2 has an invalid length. [ 231.310048][ T8746] netlink: 'syz.3.1099': attribute type 10 has an invalid length. [ 232.250816][ T8757] netlink: 'syz.4.1104': attribute type 2 has an invalid length. [ 233.623188][ T8768] netlink: 'syz.0.1108': attribute type 39 has an invalid length. [ 233.950793][ T8773] netlink: 'syz.3.1112': attribute type 1 has an invalid length. [ 233.968473][ T8774] netlink: 'syz.4.1110': attribute type 10 has an invalid length. [ 234.047595][ T8773] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1112'. [ 234.157162][ T8773] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 234.223783][ T8774] team0: Device hsr_slave_0 failed to register rx_handler [ 235.065612][ T8797] netlink: 'syz.4.1119': attribute type 2 has an invalid length. [ 235.121921][ T8799] netlink: 'syz.3.1116': attribute type 10 has an invalid length. [ 235.241785][ T8799] team0: Port device hsr_slave_0 added [ 237.506989][ T8811] netlink: 'syz.4.1124': attribute type 39 has an invalid length. [ 238.824201][ T8838] netlink: 'syz.2.1132': attribute type 10 has an invalid length. [ 239.005393][ T8838] team0: Device hsr_slave_0 failed to register rx_handler [ 239.448346][ T8843] netlink: 'syz.0.1135': attribute type 39 has an invalid length. [ 239.481654][ T8848] netlink: 'syz.4.1136': attribute type 10 has an invalid length. [ 239.526243][ T8848] team0: Device hsr_slave_0 failed to register rx_handler [ 239.924643][ T8854] netlink: 'syz.0.1139': attribute type 10 has an invalid length. [ 239.951684][ T8852] netlink: 'syz.2.1140': attribute type 39 has an invalid length. [ 239.979396][ T8854] team0: Device hsr_slave_0 failed to register rx_handler [ 240.023955][ T8856] netlink: 'syz.1.1138': attribute type 10 has an invalid length. [ 240.067148][ T8856] team0: Device hsr_slave_0 failed to register rx_handler [ 240.209157][ T8860] netlink: 'syz.4.1142': attribute type 39 has an invalid length. [ 241.263503][ T8879] netlink: 'syz.3.1150': attribute type 10 has an invalid length. [ 241.417164][ T8883] netlink: 'syz.2.1152': attribute type 1 has an invalid length. [ 241.459081][ T8883] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1152'. [ 241.504560][ T8883] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 241.594896][ T8892] netlink: 'syz.0.1155': attribute type 10 has an invalid length. [ 241.623817][ T8892] team0: Device hsr_slave_0 failed to register rx_handler [ 241.936001][ T8900] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1158'. [ 241.963049][ T8900] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 243.525816][ T8924] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1167'. [ 243.580170][ T8924] hsr_slave_0: left promiscuous mode [ 243.598679][ T8924] hsr_slave_1: left promiscuous mode [ 244.087020][ T8944] validate_nla: 3 callbacks suppressed [ 244.087058][ T8944] netlink: 'syz.1.1176': attribute type 1 has an invalid length. [ 244.096965][ T8942] netlink: 'syz.0.1175': attribute type 39 has an invalid length. [ 244.112472][ T8944] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1176'. [ 244.126567][ T8944] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 244.321446][ T8949] netlink: 'syz.2.1177': attribute type 2 has an invalid length. [ 246.333211][ T8976] netlink: 'syz.3.1190': attribute type 2 has an invalid length. [ 248.795003][ T9014] netlink: 'syz.2.1204': attribute type 2 has an invalid length. [ 248.962550][ T9019] netlink: 'syz.0.1205': attribute type 10 has an invalid length. [ 249.033410][ T9019] team0: Device hsr_slave_0 failed to register rx_handler [ 252.560806][ T9078] netlink: 'syz.4.1227': attribute type 39 has an invalid length. [ 253.929428][ T9109] netlink: 'syz.4.1239': attribute type 39 has an invalid length. [ 255.873427][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.883208][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.073823][ T9162] netlink: 'syz.4.1259': attribute type 10 has an invalid length. [ 257.144632][ T9162] geneve0: entered promiscuous mode [ 257.232436][ T9173] netlink: 'syz.0.1260': attribute type 2 has an invalid length. [ 257.352593][ T9162] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 257.407069][ T9167] netlink: 'syz.1.1261': attribute type 10 has an invalid length. [ 258.066444][ T9167] team0: Device hsr_slave_0 failed to register rx_handler [ 258.409476][ T9182] netlink: 'syz.1.1263': attribute type 2 has an invalid length. [ 258.450474][ T9181] netlink: 'syz.2.1264': attribute type 2 has an invalid length. [ 259.733400][ T9190] netlink: 'syz.4.1268': attribute type 39 has an invalid length. [ 263.875000][ T9276] netlink: 'syz.2.1298': attribute type 39 has an invalid length. [ 263.907763][ T9278] netlink: 'syz.1.1301': attribute type 2 has an invalid length. [ 265.345452][ T9293] netlink: 'syz.3.1304': attribute type 39 has an invalid length. [ 265.436824][ T9296] netlink: 'syz.1.1307': attribute type 10 has an invalid length. [ 265.545677][ T9296] geneve0: entered promiscuous mode [ 265.715503][ T9296] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 266.422644][ T9313] netlink: 'syz.4.1313': attribute type 39 has an invalid length. [ 266.489606][ T9316] netlink: 'syz.1.1314': attribute type 39 has an invalid length. [ 266.827751][ T9331] netlink: 'syz.3.1320': attribute type 2 has an invalid length. [ 267.997849][ T9341] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1325'. [ 268.061332][ T9339] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1322'. [ 268.476827][ T9341] hsr_slave_0: left promiscuous mode [ 268.662648][ T9341] hsr_slave_1: left promiscuous mode [ 269.056193][ T9362] netlink: 'syz.0.1328': attribute type 10 has an invalid length. [ 269.329509][ T9339] hsr_slave_0: left promiscuous mode [ 269.336224][ T9339] hsr_slave_1: left promiscuous mode [ 269.525868][ T9344] netlink: 'syz.2.1324': attribute type 1 has an invalid length. [ 269.537600][ T9344] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1324'. [ 269.563082][ T9344] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 270.481983][ T9391] netlink: 'syz.0.1337': attribute type 1 has an invalid length. [ 270.516189][ T9391] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1337'. [ 270.580018][ T9391] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 271.671582][ T9417] netlink: 'syz.1.1344': attribute type 10 has an invalid length. [ 271.769794][ T9417] team0: Port device hsr_slave_0 added [ 271.992214][ T9422] netlink: 'syz.2.1347': attribute type 10 has an invalid length. [ 273.371111][ T9442] netlink: 'syz.1.1355': attribute type 10 has an invalid length. [ 276.965508][ T9501] netlink: 'syz.0.1370': attribute type 10 has an invalid length. [ 277.102869][ T9501] team0: Device hsr_slave_0 failed to register rx_handler [ 278.997847][ T9544] netlink: 'syz.4.1389': attribute type 10 has an invalid length. [ 279.175205][ T9541] netlink: 'syz.1.1390': attribute type 10 has an invalid length. [ 279.202560][ T9544] team0: Port device hsr_slave_0 added [ 279.739898][ T9557] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1395'. [ 281.063718][ T9590] netlink: 'syz.1.1406': attribute type 10 has an invalid length. [ 281.805318][ T9599] netlink: 'syz.4.1408': attribute type 10 has an invalid length. [ 284.437300][ T9641] netlink: 'syz.1.1420': attribute type 10 has an invalid length. [ 287.796853][ T9704] netlink: 'syz.4.1443': attribute type 10 has an invalid length. [ 288.057647][ T9707] netlink: 'syz.0.1444': attribute type 10 has an invalid length. [ 288.253773][ T9707] team0: Device hsr_slave_0 failed to register rx_handler [ 288.893237][ T9723] netlink: 'syz.1.1448': attribute type 10 has an invalid length. [ 289.252560][ T9738] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1452'. [ 290.272260][ T9754] netlink: 'syz.0.1456': attribute type 10 has an invalid length. [ 290.289227][ T9754] team0: Device hsr_slave_0 failed to register rx_handler [ 290.424286][ T9761] netlink: 'syz.3.1458': attribute type 10 has an invalid length. [ 291.347762][ T9771] delete_channel: no stack [ 292.667031][ T9800] netlink: 'syz.2.1472': attribute type 10 has an invalid length. [ 292.947447][ T9795] netlink: 'syz.3.1470': attribute type 10 has an invalid length. [ 292.971417][ T9800] team0: Port device hsr_slave_0 added [ 293.682694][ T9811] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1475'. [ 293.694595][ T9813] netlink: 'syz.4.1476': attribute type 10 has an invalid length. [ 293.903675][ T9811] hsr_slave_0: left promiscuous mode [ 294.049319][ T9811] hsr_slave_1: left promiscuous mode [ 294.396517][ T9824] netlink: 'syz.2.1479': attribute type 10 has an invalid length. [ 297.116923][ T9871] netlink: 'syz.0.1494': attribute type 10 has an invalid length. [ 297.231979][ T9871] team0: Port device hsr_slave_0 added [ 297.326333][ T9877] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.1495'. [ 298.876251][ T9907] netlink: 'syz.0.1505': attribute type 10 has an invalid length. [ 299.901540][ T9942] netlink: 'syz.0.1514': attribute type 10 has an invalid length. [ 300.756553][ T9966] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.1520'. [ 300.846358][ T9955] delete_channel: no stack [ 301.310372][ T9979] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1526'. [ 302.359685][ T9994] netlink: 'syz.3.1532': attribute type 10 has an invalid length. [ 302.701432][T10004] netlink: 'syz.0.1535': attribute type 10 has an invalid length. [ 302.871833][T10017] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1539'. [ 303.518778][T10033] netlink: 'syz.3.1543': attribute type 10 has an invalid length. [ 305.472511][T10072] netlink: 'syz.1.1554': attribute type 10 has an invalid length. [ 306.081887][T10090] netlink: 212424 bytes leftover after parsing attributes in process `syz.2.1561'. [ 306.152183][T10090] delete_channel: no stack [ 306.758764][T10113] netlink: 'syz.2.1567': attribute type 10 has an invalid length. [ 307.676050][T10122] netlink: 'syz.4.1570': attribute type 10 has an invalid length. [ 308.221340][T10139] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1577'. [ 308.281055][T10137] netlink: 'syz.1.1574': attribute type 10 has an invalid length. [ 308.293892][T10130] netlink: 'syz.4.1575': attribute type 10 has an invalid length. [ 308.802344][T10153] netlink: 'syz.3.1580': attribute type 10 has an invalid length. [ 309.659883][T10172] netlink: 'syz.1.1586': attribute type 10 has an invalid length. [ 312.399588][T10219] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.1603'. [ 312.513806][T10219] delete_channel: no stack [ 312.543891][T10222] netlink: 'syz.4.1600': attribute type 10 has an invalid length. [ 313.193516][T10235] netlink: 212424 bytes leftover after parsing attributes in process `syz.1.1609'. [ 313.363602][T10235] delete_channel: no stack [ 313.616193][T10245] netlink: 'syz.3.1611': attribute type 10 has an invalid length. [ 314.145241][T10255] netlink: 'syz.0.1615': attribute type 10 has an invalid length. [ 314.798874][T10264] netlink: 'syz.2.1618': attribute type 10 has an invalid length. [ 314.862643][T10268] netlink: 212424 bytes leftover after parsing attributes in process `syz.1.1620'. [ 314.978857][T10268] delete_channel: no stack [ 317.245321][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.251929][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.329173][T10315] netlink: 'syz.0.1636': attribute type 10 has an invalid length. [ 317.600729][T10321] netlink: 'syz.2.1638': attribute type 10 has an invalid length. [ 317.836091][T10319] netlink: 'syz.4.1637': attribute type 10 has an invalid length. [ 318.033792][T10323] netlink: 'syz.0.1640': attribute type 10 has an invalid length. [ 318.869639][T10345] netlink: 'syz.2.1647': attribute type 10 has an invalid length. [ 319.635750][T10362] netlink: 'syz.4.1651': attribute type 10 has an invalid length. [ 321.219809][T10397] netlink: 'syz.1.1664': attribute type 1 has an invalid length. [ 321.246460][T10397] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1664'. [ 321.303111][T10397] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 321.330353][T10398] netlink: 'syz.4.1663': attribute type 1 has an invalid length. [ 321.344151][T10398] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1663'. [ 321.369564][T10398] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 321.445742][T10405] netlink: 'syz.0.1666': attribute type 1 has an invalid length. [ 321.534903][T10405] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1666'. [ 321.587126][T10405] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 322.221485][T10420] netlink: 'syz.3.1670': attribute type 10 has an invalid length. [ 322.445536][T10431] netlink: 'syz.0.1672': attribute type 1 has an invalid length. [ 322.456960][T10431] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1672'. [ 322.499653][T10431] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 322.659641][T10434] netlink: 'syz.2.1673': attribute type 10 has an invalid length. [ 323.724765][T10456] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1679'. [ 324.470088][T10464] netlink: 'syz.3.1682': attribute type 10 has an invalid length. [ 325.021854][T10479] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1685'. [ 326.331233][T10500] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1692'. [ 326.348599][T10499] netlink: 'syz.0.1693': attribute type 10 has an invalid length. [ 328.740122][ T51] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 328.799338][T10564] netlink: 'syz.2.1713': attribute type 10 has an invalid length. [ 329.127093][T10569] netlink: 212424 bytes leftover after parsing attributes in process `syz.1.1715'. [ 329.171262][T10571] delete_channel: no stack [ 331.082313][T10601] netlink: 'syz.4.1725': attribute type 10 has an invalid length. [ 334.456999][T10637] netlink: 'syz.0.1738': attribute type 10 has an invalid length. [ 334.475854][T10640] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1739'. [ 334.914794][T10642] netlink: 'syz.4.1737': attribute type 10 has an invalid length. [ 335.338819][T10655] netlink: 'syz.2.1743': attribute type 10 has an invalid length. [ 335.498312][T10658] netlink: 'syz.3.1744': attribute type 10 has an invalid length. [ 336.030769][T10665] netlink: 'syz.2.1745': attribute type 10 has an invalid length. [ 336.528631][T10682] netlink: 'syz.1.1750': attribute type 1 has an invalid length. [ 336.540026][T10682] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1750'. [ 336.576311][T10682] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 337.403964][T10697] netlink: 212424 bytes leftover after parsing attributes in process `syz.4.1756'. [ 337.525185][T10701] delete_channel: no stack [ 338.466475][T10718] netlink: 'syz.0.1758': attribute type 10 has an invalid length. [ 339.030225][T10728] netlink: 'syz.4.1764': attribute type 10 has an invalid length. [ 339.165624][T10740] netlink: 'syz.2.1767': attribute type 10 has an invalid length. [ 340.510570][T10767] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1775'. [ 341.107728][T10781] netlink: 'syz.4.1777': attribute type 10 has an invalid length. [ 341.354596][T10792] netlink: 'syz.0.1781': attribute type 10 has an invalid length. [ 341.784057][T10803] netlink: 'syz.1.1785': attribute type 10 has an invalid length. [ 342.365886][T10819] netlink: 'syz.1.1793': attribute type 1 has an invalid length. [ 342.382051][T10819] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1793'. [ 342.405512][T10819] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 346.396704][T10908] netlink: 'syz.2.1819': attribute type 10 has an invalid length. [ 346.582360][T10921] netlink: 'syz.1.1823': attribute type 10 has an invalid length. [ 348.429398][T10946] netlink: 'syz.3.1831': attribute type 10 has an invalid length. [ 351.782875][T11029] netlink: 'syz.2.1859': attribute type 1 has an invalid length. [ 351.792730][T11029] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1859'. [ 351.806896][T11029] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 352.014704][T11036] netlink: 'syz.4.1863': attribute type 10 has an invalid length. [ 352.828770][T11050] netlink: 'syz.1.1869': attribute type 10 has an invalid length. [ 353.011966][T11054] netlink: 'syz.3.1868': attribute type 10 has an invalid length. [ 353.067217][T11056] netlink: 'syz.2.1871': attribute type 10 has an invalid length. [ 355.498850][T11114] netlink: 'syz.2.1889': attribute type 10 has an invalid length. [ 356.020738][T11130] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1890'. [ 357.431749][T11151] netlink: 'syz.3.1902': attribute type 10 has an invalid length. [ 359.010306][T11183] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1912'. [ 359.320488][T11197] netlink: 'syz.3.1915': attribute type 10 has an invalid length. [ 360.356684][T11233] netlink: 'syz.1.1925': attribute type 1 has an invalid length. [ 360.385755][T11233] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1925'. [ 360.415206][T11233] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 361.838197][T11256] netlink: 'syz.4.1932': attribute type 10 has an invalid length. [ 362.265818][T11262] netlink: 'syz.2.1933': attribute type 10 has an invalid length. [ 362.299466][T11264] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.1931'. [ 362.443473][T11264] delete_channel: no stack [ 364.017297][T11296] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1944'. [ 365.377186][T11338] netlink: 'syz.3.1955': attribute type 10 has an invalid length. [ 366.505749][T11360] bridge_slave_1: left allmulticast mode [ 366.573842][T11360] bridge_slave_1: left promiscuous mode [ 366.580369][T11360] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.611954][T11360] bridge_slave_0: left allmulticast mode [ 366.647557][T11360] bridge_slave_0: left promiscuous mode [ 366.653539][T11360] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.236825][T11377] netlink: 'syz.0.1968': attribute type 10 has an invalid length. [ 368.160417][T11410] netlink: 'syz.0.1977': attribute type 10 has an invalid length. [ 369.561084][T11427] netlink: 'syz.3.1983': attribute type 10 has an invalid length. [ 369.866177][T11436] netlink: 'syz.2.1988': attribute type 10 has an invalid length. [ 370.434796][T11444] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1991'. [ 370.523181][T11444] caif0: entered promiscuous mode [ 370.547775][T11444] caif0: entered allmulticast mode [ 370.844961][T11464] netlink: 'syz.1.1993': attribute type 10 has an invalid length. [ 370.904630][T11461] netlink: 'syz.3.1995': attribute type 10 has an invalid length. [ 370.963498][T11465] netlink: 'syz.4.1994': attribute type 10 has an invalid length. [ 371.374800][T11474] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1997'. [ 373.211727][T11507] netlink: 'syz.1.2009': attribute type 10 has an invalid length. [ 374.632327][T11530] netlink: 'syz.1.2018': attribute type 10 has an invalid length. [ 374.977183][T11538] netlink: 'syz.0.2021': attribute type 10 has an invalid length. [ 375.083467][T11544] bridge_slave_1: left allmulticast mode [ 375.122911][T11544] bridge_slave_1: left promiscuous mode [ 375.151874][T11544] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.289590][T11544] bridge_slave_0: left promiscuous mode [ 375.295499][T11544] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.624149][T11559] netlink: 'syz.4.2025': attribute type 10 has an invalid length. [ 378.573432][T11618] netlink: 'syz.1.2046': attribute type 10 has an invalid length. [ 378.952035][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.961831][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.549387][T11670] netlink: 'syz.0.2060': attribute type 10 has an invalid length. [ 381.811293][T11675] netlink: 'syz.3.2059': attribute type 10 has an invalid length. [ 382.141651][T11678] bridge_slave_1: left allmulticast mode [ 382.166459][T11678] bridge_slave_1: left promiscuous mode [ 382.175186][T11678] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.275720][T11678] bridge_slave_0: left allmulticast mode [ 382.367858][T11678] bridge_slave_0: left promiscuous mode [ 382.395486][T11678] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.580818][T11687] netlink: 'syz.1.2064': attribute type 10 has an invalid length. [ 382.679847][T11685] netlink: 'syz.2.2066': attribute type 10 has an invalid length. [ 384.015693][T11712] netlink: 'syz.0.2073': attribute type 10 has an invalid length. [ 385.218162][T11740] netlink: 'syz.1.2083': attribute type 10 has an invalid length. [ 385.735540][T11749] netlink: 'syz.0.2086': attribute type 10 has an invalid length. [ 387.058723][T11773] netlink: 'syz.0.2094': attribute type 10 has an invalid length. [ 387.114353][ T51] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 387.215858][T11778] netlink: 'syz.1.2097': attribute type 10 has an invalid length. [ 389.299562][T11819] netlink: 'syz.1.2108': attribute type 10 has an invalid length. [ 390.295995][T11824] netlink: 'syz.2.2112': attribute type 10 has an invalid length. [ 390.546319][T11839] netlink: 'syz.4.2118': attribute type 10 has an invalid length. [ 391.108852][T11852] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2122'. [ 392.563353][T11876] netlink: 'syz.0.2129': attribute type 10 has an invalid length. [ 392.670623][T11882] netlink: 'syz.1.2133': attribute type 10 has an invalid length. [ 392.693315][T11884] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2132'. [ 393.371055][T11907] netlink: 'syz.1.2137': attribute type 10 has an invalid length. [ 393.828532][T11912] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2139'. [ 393.952591][T11921] netlink: 'syz.2.2141': attribute type 1 has an invalid length. [ 393.961766][T11921] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2141'. [ 394.048593][T11921] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 394.075267][T11926] netlink: 'syz.1.2142': attribute type 10 has an invalid length. [ 395.200079][T11932] netlink: 'syz.4.2145': attribute type 10 has an invalid length. [ 396.739928][T11986] netlink: 'syz.1.2161': attribute type 10 has an invalid length. [ 397.249128][T11999] netlink: 'syz.4.2166': attribute type 10 has an invalid length. [ 397.470610][T12006] netlink: 'syz.2.2169': attribute type 10 has an invalid length. [ 398.585971][T12031] netlink: 'syz.3.2176': attribute type 10 has an invalid length. [ 399.339495][T12038] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2178'. [ 399.464373][T12035] netlink: 'syz.1.2177': attribute type 10 has an invalid length. [ 399.851810][T12047] netlink: 'syz.2.2180': attribute type 10 has an invalid length. [ 400.802340][T12069] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2188'. [ 400.942009][T12067] netlink: 'syz.1.2187': attribute type 10 has an invalid length. [ 402.862539][T12101] netlink: 'syz.2.2197': attribute type 10 has an invalid length. [ 405.814974][T12164] netlink: 'syz.4.2220': attribute type 1 has an invalid length. [ 405.907893][T12164] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2220'. [ 405.937236][T12164] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 406.154693][T12175] netlink: 'syz.0.2222': attribute type 10 has an invalid length. [ 406.496185][T12177] netlink: 'syz.1.2223': attribute type 10 has an invalid length. [ 409.303365][T12233] netlink: 'syz.2.2239': attribute type 10 has an invalid length. [ 409.722181][T12227] netlink: 'syz.0.2241': attribute type 10 has an invalid length. [ 410.121668][T12239] delete_channel: no stack [ 410.260579][T12244] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2247'. [ 411.138564][T12264] netlink: 'syz.3.2252': attribute type 10 has an invalid length. [ 411.368613][T12272] netlink: 'syz.0.2254': attribute type 10 has an invalid length. [ 411.394741][T12271] netlink: 'syz.1.2255': attribute type 1 has an invalid length. [ 411.458975][T12271] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2255'. [ 411.561887][T12271] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 411.781824][T12280] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2256'. [ 411.929305][T12290] netlink: 'syz.3.2258': attribute type 10 has an invalid length. [ 412.022322][T12292] netlink: 'syz.0.2259': attribute type 10 has an invalid length. [ 413.212482][T12314] netlink: 'syz.4.2266': attribute type 10 has an invalid length. [ 413.486475][T12318] netlink: 'syz.0.2267': attribute type 10 has an invalid length. [ 413.807137][T12325] netlink: 'syz.1.2268': attribute type 1 has an invalid length. [ 413.815293][T12325] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2268'. [ 413.841977][T12325] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 417.343000][T12366] netlink: 'syz.0.2283': attribute type 10 has an invalid length. [ 417.937075][T12389] netlink: 'syz.1.2288': attribute type 10 has an invalid length. [ 419.301357][T12415] netlink: 'syz.2.2297': attribute type 10 has an invalid length. [ 419.926161][T12431] delete_channel: no stack [ 420.213298][T12445] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2308'. [ 420.694506][T12458] netlink: 'syz.4.2309': attribute type 10 has an invalid length. [ 421.392148][T12477] netlink: 'syz.0.2316': attribute type 10 has an invalid length. [ 421.704332][T12485] netlink: 'syz.1.2318': attribute type 10 has an invalid length. [ 423.222072][T12523] netlink: 'syz.4.2330': attribute type 10 has an invalid length. [ 423.272573][T12525] netlink: 'syz.1.2332': attribute type 10 has an invalid length. [ 423.318499][T12526] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2331'. [ 423.839523][T12535] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2333'. [ 425.392088][T12560] netlink: 'syz.1.2339': attribute type 10 has an invalid length. [ 426.022120][T12567] netlink: 'syz.0.2342': attribute type 10 has an invalid length. [ 426.538372][T12578] netlink: 'syz.2.2343': attribute type 10 has an invalid length. [ 426.795641][T12585] delete_channel: no stack [ 427.632272][T12594] netlink: 'syz.0.2349': attribute type 10 has an invalid length. [ 429.296025][T12629] netlink: 'syz.2.2362': attribute type 10 has an invalid length. [ 430.843382][T12652] netlink: 'syz.4.2369': attribute type 10 has an invalid length. [ 434.992331][T12720] netlink: 'syz.0.2390': attribute type 10 has an invalid length. [ 437.435940][T12759] netlink: 'syz.3.2402': attribute type 2 has an invalid length. [ 438.087230][T12773] netlink: 'syz.3.2407': attribute type 2 has an invalid length. [ 440.145638][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.155276][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.537631][T12830] netlink: 'syz.3.2427': attribute type 10 has an invalid length. [ 442.099645][T12855] netlink: 'syz.0.2434': attribute type 10 has an invalid length. [ 445.648390][T12943] netlink: 'syz.2.2464': attribute type 10 has an invalid length. [ 447.129927][T12966] netlink: 'syz.1.2473': attribute type 10 has an invalid length. [ 448.059533][T12986] netlink: 'syz.2.2479': attribute type 10 has an invalid length. [ 449.202954][T13008] netlink: 'syz.1.2486': attribute type 10 has an invalid length. [ 452.381728][T13090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2514'. [ 453.630535][T13116] netlink: 'syz.4.2522': attribute type 10 has an invalid length. [ 454.415862][T13129] delete_channel: no stack [ 456.465832][T13168] netlink: 'syz.2.2538': attribute type 10 has an invalid length. [ 459.200574][T13219] delete_channel: no stack [ 460.258356][T13236] delete_channel: no stack [ 463.902582][T13302] netlink: 'syz.2.2581': attribute type 10 has an invalid length. [ 467.882430][T13382] netlink: 'syz.4.2610': attribute type 10 has an invalid length. [ 468.185282][T13392] delete_channel: no stack [ 484.502581][T13732] delete_channel: no stack [ 485.223866][T13751] delete_channel: no stack [ 500.028119][T14057] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2822'. [ 500.184869][T14066] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2824'. [ 500.207804][T14066] caif0: entered promiscuous mode [ 500.212928][T14066] caif0: entered allmulticast mode [ 501.597887][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.608193][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.370635][T14135] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2848'. [ 505.980730][T14189] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2865'. [ 506.255068][T14194] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2867'. [ 506.299085][T14194] caif0: entered promiscuous mode [ 506.320097][T14194] caif0: entered allmulticast mode [ 508.472855][T14257] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2887'. [ 509.506228][T14290] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2896'. [ 512.827987][T14368] netlink: 'syz.3.2921': attribute type 29 has an invalid length. [ 512.884858][T14368] netlink: 'syz.3.2921': attribute type 29 has an invalid length. [ 521.626820][T14592] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3010'. [ 528.052876][T14742] FAULT_INJECTION: forcing a failure. [ 528.052876][T14742] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 528.186226][T14742] CPU: 0 UID: 0 PID: 14742 Comm: syz.2.3063 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 528.186260][T14742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 528.186286][T14742] Call Trace: [ 528.186294][T14742] [ 528.186303][T14742] dump_stack_lvl+0x189/0x250 [ 528.186349][T14742] ? __pfx____ratelimit+0x10/0x10 [ 528.186368][T14742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.186398][T14742] ? __pfx__printk+0x10/0x10 [ 528.186419][T14742] ? __might_fault+0xb0/0x130 [ 528.186451][T14742] should_fail_ex+0x414/0x560 [ 528.186496][T14742] _copy_from_user+0x2d/0xb0 [ 528.186518][T14742] ___sys_sendmsg+0x158/0x2a0 [ 528.186551][T14742] ? __pfx____sys_sendmsg+0x10/0x10 [ 528.186620][T14742] ? __fget_files+0x2a/0x420 [ 528.186643][T14742] ? __fget_files+0x3a0/0x420 [ 528.186678][T14742] __x64_sys_sendmsg+0x19b/0x260 [ 528.186709][T14742] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 528.186747][T14742] ? __pfx_ksys_write+0x10/0x10 [ 528.186765][T14742] ? rcu_is_watching+0x15/0xb0 [ 528.186801][T14742] ? do_syscall_64+0xbe/0x3b0 [ 528.186825][T14742] do_syscall_64+0xfa/0x3b0 [ 528.186844][T14742] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.186862][T14742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.186881][T14742] ? clear_bhb_loop+0x60/0xb0 [ 528.186906][T14742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.186947][T14742] RIP: 0033:0x7fb68058e929 [ 528.186968][T14742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.186987][T14742] RSP: 002b:00007fb68144e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.187011][T14742] RAX: ffffffffffffffda RBX: 00007fb6807b5fa0 RCX: 00007fb68058e929 [ 528.187024][T14742] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 528.187036][T14742] RBP: 00007fb68144e090 R08: 0000000000000000 R09: 0000000000000000 [ 528.187047][T14742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.187057][T14742] R13: 0000000000000000 R14: 00007fb6807b5fa0 R15: 00007ffcf9959378 [ 528.187086][T14742] [ 528.634016][T14754] netlink: 'syz.1.3066': attribute type 21 has an invalid length. [ 529.526296][T14783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3079'. [ 529.576617][T14785] FAULT_INJECTION: forcing a failure. [ 529.576617][T14785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.606144][T14785] CPU: 1 UID: 0 PID: 14785 Comm: syz.1.3080 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 529.606176][T14785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 529.606189][T14785] Call Trace: [ 529.606197][T14785] [ 529.606206][T14785] dump_stack_lvl+0x189/0x250 [ 529.606247][T14785] ? __pfx____ratelimit+0x10/0x10 [ 529.606269][T14785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.606301][T14785] ? __pfx__printk+0x10/0x10 [ 529.606324][T14785] ? __might_fault+0xb0/0x130 [ 529.606360][T14785] should_fail_ex+0x414/0x560 [ 529.606395][T14785] _copy_from_user+0x2d/0xb0 [ 529.606427][T14785] mptcp_setsockopt+0x2423/0x3460 [ 529.606455][T14785] ? vfs_write+0x8d8/0xa90 [ 529.606482][T14785] ? aa_sk_perm+0x81e/0x950 [ 529.606508][T14785] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 529.606541][T14785] ? __lock_acquire+0xab9/0xd20 [ 529.606576][T14785] ? aa_sock_opt_perm+0x74/0x110 [ 529.606605][T14785] ? sock_common_setsockopt+0x36/0xc0 [ 529.606629][T14785] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 529.606654][T14785] do_sock_setsockopt+0x25a/0x3e0 [ 529.606685][T14785] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 529.606712][T14785] ? __fget_files+0x2a/0x420 [ 529.606748][T14785] __x64_sys_setsockopt+0x18b/0x220 [ 529.606783][T14785] do_syscall_64+0xfa/0x3b0 [ 529.606803][T14785] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.606821][T14785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.606840][T14785] ? clear_bhb_loop+0x60/0xb0 [ 529.606866][T14785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.606886][T14785] RIP: 0033:0x7f133cb8e929 [ 529.606905][T14785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.606922][T14785] RSP: 002b:00007f133da80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 529.606943][T14785] RAX: ffffffffffffffda RBX: 00007f133cdb5fa0 RCX: 00007f133cb8e929 [ 529.606958][T14785] RDX: 000000000000000d RSI: 0000000000000001 RDI: 0000000000000005 [ 529.606969][T14785] RBP: 00007f133da80090 R08: 000000000000ff7b R09: 0000000000000000 [ 529.606982][T14785] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.606995][T14785] R13: 0000000000000000 R14: 00007f133cdb5fa0 R15: 00007ffc38121768 [ 529.607028][T14785] [ 530.041481][T14790] netlink: 'syz.1.3083': attribute type 39 has an invalid length. [ 530.179213][T14798] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3085'. [ 530.429769][T14803] netlink: 'syz.3.3086': attribute type 39 has an invalid length. [ 530.514840][T14803] syz_tun (unregistering): left allmulticast mode [ 530.562188][T14803] syz_tun (unregistering): left promiscuous mode [ 530.576361][T14803] : port 1(syz_tun) entered disabled state [ 530.652114][T14805] netlink: 'syz.4.3087': attribute type 39 has an invalid length. [ 531.795905][T14819] FAULT_INJECTION: forcing a failure. [ 531.795905][T14819] name failslab, interval 1, probability 0, space 0, times 0 [ 531.839884][T14819] CPU: 0 UID: 0 PID: 14819 Comm: syz.2.3093 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 531.839915][T14819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 531.839928][T14819] Call Trace: [ 531.839937][T14819] [ 531.839946][T14819] dump_stack_lvl+0x189/0x250 [ 531.839984][T14819] ? __pfx____ratelimit+0x10/0x10 [ 531.840005][T14819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.840047][T14819] ? __pfx__printk+0x10/0x10 [ 531.840077][T14819] ? __pfx___might_resched+0x10/0x10 [ 531.840110][T14819] ? fs_reclaim_acquire+0x7d/0x100 [ 531.840143][T14819] should_fail_ex+0x414/0x560 [ 531.840179][T14819] should_failslab+0xa8/0x100 [ 531.840206][T14819] __kmalloc_noprof+0xcb/0x4f0 [ 531.840227][T14819] ? kfree+0x4d/0x440 [ 531.840245][T14819] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 531.840284][T14819] tomoyo_realpath_from_path+0xe3/0x5d0 [ 531.840320][T14819] ? tomoyo_domain+0xd9/0x130 [ 531.840346][T14819] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 531.840374][T14819] tomoyo_path_number_perm+0x1e8/0x5a0 [ 531.840405][T14819] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 531.840453][T14819] ? __lock_acquire+0xab9/0xd20 [ 531.840506][T14819] ? __fget_files+0x2a/0x420 [ 531.840536][T14819] ? __fget_files+0x2a/0x420 [ 531.840561][T14819] ? __fget_files+0x3a0/0x420 [ 531.840585][T14819] ? __fget_files+0x2a/0x420 [ 531.840616][T14819] security_file_ioctl+0xcb/0x2d0 [ 531.840645][T14819] __se_sys_ioctl+0x47/0x170 [ 531.840669][T14819] do_syscall_64+0xfa/0x3b0 [ 531.840690][T14819] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.840710][T14819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.840731][T14819] ? clear_bhb_loop+0x60/0xb0 [ 531.840757][T14819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.840777][T14819] RIP: 0033:0x7fb68058e929 [ 531.840796][T14819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.840814][T14819] RSP: 002b:00007fb68144e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.840836][T14819] RAX: ffffffffffffffda RBX: 00007fb6807b5fa0 RCX: 00007fb68058e929 [ 531.840851][T14819] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 000000000000000e [ 531.840865][T14819] RBP: 00007fb68144e090 R08: 0000000000000000 R09: 0000000000000000 [ 531.840877][T14819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.840889][T14819] R13: 0000000000000000 R14: 00007fb6807b5fa0 R15: 00007ffcf9959378 [ 531.840922][T14819] [ 531.840930][T14819] ERROR: Out of memory at tomoyo_realpath_from_path. [ 532.711645][T14847] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.3104'. [ 532.735220][T14851] FAULT_INJECTION: forcing a failure. [ 532.735220][T14851] name failslab, interval 1, probability 0, space 0, times 0 [ 532.763525][T14847] netlink: 'syz.0.3104': attribute type 1 has an invalid length. [ 532.778368][T14851] CPU: 0 UID: 0 PID: 14851 Comm: syz.4.3106 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 532.778398][T14851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 532.778410][T14851] Call Trace: [ 532.778419][T14851] [ 532.778428][T14851] dump_stack_lvl+0x189/0x250 [ 532.778467][T14851] ? __pfx____ratelimit+0x10/0x10 [ 532.778488][T14851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.778522][T14851] ? __pfx__printk+0x10/0x10 [ 532.778552][T14851] ? __pfx___might_resched+0x10/0x10 [ 532.778590][T14851] should_fail_ex+0x414/0x560 [ 532.778625][T14851] should_failslab+0xa8/0x100 [ 532.778653][T14851] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 532.778679][T14851] ? __get_vm_area_node+0x13f/0x300 [ 532.778708][T14851] __get_vm_area_node+0x13f/0x300 [ 532.778739][T14851] __vmalloc_node_range_noprof+0x301/0x12f0 [ 532.778765][T14851] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 532.778798][T14851] ? is_bpf_text_address+0x26/0x2b0 [ 532.778857][T14851] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 532.778883][T14851] ? __might_fault+0xb0/0x130 [ 532.778905][T14851] ? __pfx_aa_get_newest_label+0x10/0x10 [ 532.778935][T14851] ? _parse_integer_limit+0x1ae/0x1f0 [ 532.778972][T14851] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 532.779000][T14851] __vmalloc_noprof+0xb1/0xf0 [ 532.779026][T14851] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 532.779059][T14851] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 532.779101][T14851] bpf_prog_alloc+0x3c/0x1a0 [ 532.779142][T14851] bpf_prog_load+0x735/0x1930 [ 532.779185][T14851] ? __pfx_bpf_prog_load+0x10/0x10 [ 532.779240][T14851] ? bpf_lsm_bpf+0x9/0x20 [ 532.779258][T14851] ? security_bpf+0x7e/0x300 [ 532.779288][T14851] __sys_bpf+0x5f1/0x860 [ 532.779319][T14851] ? __pfx___sys_bpf+0x10/0x10 [ 532.779365][T14851] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 532.779394][T14851] ? __pfx_ksys_write+0x10/0x10 [ 532.779427][T14851] __x64_sys_bpf+0x7c/0x90 [ 532.779452][T14851] do_syscall_64+0xfa/0x3b0 [ 532.779474][T14851] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.779493][T14851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.779513][T14851] ? clear_bhb_loop+0x60/0xb0 [ 532.779539][T14851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.779559][T14851] RIP: 0033:0x7fbea458e929 [ 532.779578][T14851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.779595][T14851] RSP: 002b:00007fbea535d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 532.779618][T14851] RAX: ffffffffffffffda RBX: 00007fbea47b5fa0 RCX: 00007fbea458e929 [ 532.779633][T14851] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 532.779647][T14851] RBP: 00007fbea535d090 R08: 0000000000000000 R09: 0000000000000000 [ 532.779659][T14851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.779671][T14851] R13: 0000000000000001 R14: 00007fbea47b5fa0 R15: 00007ffd0c09a1b8 [ 532.779705][T14851] [ 532.779885][T14851] syz.4.3106: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 532.835048][T14854] netlink: 'syz.2.3108': attribute type 10 has an invalid length. [ 532.846624][T14851] ,cpuset= [ 532.913912][T14854] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 532.970841][T14851] /,mems_allowed=0-1 [ 533.132815][T14851] CPU: 1 UID: 0 PID: 14851 Comm: syz.4.3106 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 533.132845][T14851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 533.132857][T14851] Call Trace: [ 533.132865][T14851] [ 533.132874][T14851] dump_stack_lvl+0x189/0x250 [ 533.132915][T14851] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 533.132945][T14851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.132979][T14851] ? __pfx__printk+0x10/0x10 [ 533.133002][T14851] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 533.133026][T14851] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 533.133058][T14851] warn_alloc+0x214/0x310 [ 533.133093][T14851] ? __pfx_warn_alloc+0x10/0x10 [ 533.133134][T14851] ? __get_vm_area_node+0x13f/0x300 [ 533.133164][T14851] ? __get_vm_area_node+0x2b5/0x300 [ 533.133197][T14851] __vmalloc_node_range_noprof+0x326/0x12f0 [ 533.133226][T14851] ? is_bpf_text_address+0x26/0x2b0 [ 533.133287][T14851] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 533.133312][T14851] ? __might_fault+0xb0/0x130 [ 533.133335][T14851] ? __pfx_aa_get_newest_label+0x10/0x10 [ 533.133365][T14851] ? _parse_integer_limit+0x1ae/0x1f0 [ 533.133403][T14851] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 533.133431][T14851] __vmalloc_noprof+0xb1/0xf0 [ 533.133457][T14851] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 533.133491][T14851] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 533.133527][T14851] bpf_prog_alloc+0x3c/0x1a0 [ 533.133560][T14851] bpf_prog_load+0x735/0x1930 [ 533.133603][T14851] ? __pfx_bpf_prog_load+0x10/0x10 [ 533.133675][T14851] ? bpf_lsm_bpf+0x9/0x20 [ 533.133695][T14851] ? security_bpf+0x7e/0x300 [ 533.133725][T14851] __sys_bpf+0x5f1/0x860 [ 533.133755][T14851] ? __pfx___sys_bpf+0x10/0x10 [ 533.133800][T14851] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 533.133829][T14851] ? __pfx_ksys_write+0x10/0x10 [ 533.133861][T14851] __x64_sys_bpf+0x7c/0x90 [ 533.133887][T14851] do_syscall_64+0xfa/0x3b0 [ 533.133908][T14851] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.133927][T14851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.133947][T14851] ? clear_bhb_loop+0x60/0xb0 [ 533.133973][T14851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.133993][T14851] RIP: 0033:0x7fbea458e929 [ 533.134012][T14851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.134029][T14851] RSP: 002b:00007fbea535d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 533.134050][T14851] RAX: ffffffffffffffda RBX: 00007fbea47b5fa0 RCX: 00007fbea458e929 [ 533.134065][T14851] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 533.134078][T14851] RBP: 00007fbea535d090 R08: 0000000000000000 R09: 0000000000000000 [ 533.134091][T14851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.134102][T14851] R13: 0000000000000001 R14: 00007fbea47b5fa0 R15: 00007ffd0c09a1b8 [ 533.134141][T14851] [ 533.134194][T14851] Mem-Info: [ 533.445144][T14851] active_anon:4746 inactive_anon:0 isolated_anon:0 [ 533.445144][T14851] active_file:21342 inactive_file:39997 isolated_file:0 [ 533.445144][T14851] unevictable:768 dirty:417 writeback:0 [ 533.445144][T14851] slab_reclaimable:13485 slab_unreclaimable:120069 [ 533.445144][T14851] mapped:29447 shmem:1361 pagetables:1050 [ 533.445144][T14851] sec_pagetables:0 bounce:0 [ 533.445144][T14851] kernel_misc_reclaimable:0 [ 533.445144][T14851] free:1287706 free_pcp:14175 free_cma:0 [ 533.496725][T14858] sctp: [Deprecated]: syz.0.3109 (pid 14858) Use of int in maxseg socket option. [ 533.496725][T14858] Use struct sctp_assoc_value instead [ 533.537416][T14851] Node 0 active_anon:19084kB inactive_anon:0kB active_file:85368kB inactive_file:159784kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117788kB dirty:1668kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11092kB pagetables:3876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 533.612736][T14851] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 533.647607][T14851] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 533.688439][T14851] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 533.694432][T14851] Node 0 DMA32 free:1239284kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19036kB inactive_anon:0kB active_file:85368kB inactive_file:157944kB unevictable:1536kB writepending:1668kB present:3129332kB managed:2560964kB mlocked:0kB bounce:0kB free_pcp:38204kB local_pcp:21956kB free_cma:0kB [ 533.791999][T14851] lowmem_reserve[]: 0 0 1 1 1 [ 533.881166][T14851] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 534.024993][T14851] lowmem_reserve[]: 0 0 0 0 0 [ 534.030358][T14851] Node 1 Normal free:3896076kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21216kB local_pcp:10720kB free_cma:0kB [ 534.294585][T14877] netlink: 'syz.2.3113': attribute type 13 has an invalid length. [ 534.303038][T14851] lowmem_reserve[]: 0 0 0 0 0 [ 534.343232][T14851] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 534.429363][T14877] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3113'. [ 534.439962][T14851] Node 0 DMA32: 2039*4kB (UM) 1143*8kB (UME) 1121*16kB (UME) 400*32kB (UME) 433*64kB (UME) 31*128kB (ME) 42*256kB (UME) 23*512kB (M) 16*1024kB (UM) 9*2048kB (UME) 269*4096kB (M) = 1238884kB [ 534.592711][T14851] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 534.661044][T14877] erspan0: refused to change device tx_queue_len [ 534.677365][T14851] Node 1 Normal: 211*4kB (UE) 58*8kB (UME) 41*16kB (UME) 97*32kB (UME) 23*64kB (UME) 9*128kB (UME) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3896076kB [ 534.725901][T14877] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 534.747336][T14851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.757043][T14851] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 534.797458][T14851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.807182][T14851] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 534.836472][T14851] 62697 total pagecache pages [ 534.841412][T14851] 0 pages in swap cache [ 534.845673][T14851] Free swap = 124996kB [ 534.849990][T14851] Total swap = 124996kB [ 534.854179][T14851] 2097051 pages RAM [ 534.877371][T14851] 0 pages HighMem/MovableOnly [ 534.895181][T14851] 424704 pages reserved [ 534.915492][T14851] 0 pages cma reserved [ 535.120332][T14890] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3119'. [ 535.293731][T14896] FAULT_INJECTION: forcing a failure. [ 535.293731][T14896] name failslab, interval 1, probability 0, space 0, times 0 [ 535.340930][T14896] CPU: 1 UID: 0 PID: 14896 Comm: syz.3.3122 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 535.340960][T14896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.340973][T14896] Call Trace: [ 535.340984][T14896] [ 535.340995][T14896] dump_stack_lvl+0x189/0x250 [ 535.341038][T14896] ? __pfx____ratelimit+0x10/0x10 [ 535.341064][T14896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.341103][T14896] ? __pfx__printk+0x10/0x10 [ 535.341150][T14896] ? __pfx___might_resched+0x10/0x10 [ 535.341202][T14896] should_fail_ex+0x414/0x560 [ 535.341253][T14896] should_failslab+0xa8/0x100 [ 535.341298][T14896] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 535.341327][T14896] ? __alloc_skb+0x112/0x2d0 [ 535.341371][T14896] __alloc_skb+0x112/0x2d0 [ 535.341416][T14896] netlink_sendmsg+0x5c6/0xb30 [ 535.341478][T14896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.341522][T14896] ? aa_sock_msg_perm+0x94/0x160 [ 535.341562][T14896] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 535.341594][T14896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.341629][T14896] __sock_sendmsg+0x219/0x270 [ 535.341666][T14896] ____sys_sendmsg+0x505/0x830 [ 535.341717][T14896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.341779][T14896] ? import_iovec+0x74/0xa0 [ 535.341820][T14896] ___sys_sendmsg+0x21f/0x2a0 [ 535.341863][T14896] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.342014][T14896] ? __fget_files+0x2a/0x420 [ 535.342042][T14896] ? __fget_files+0x3a0/0x420 [ 535.342105][T14896] __x64_sys_sendmsg+0x19b/0x260 [ 535.342149][T14896] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.342213][T14896] ? __pfx_ksys_write+0x10/0x10 [ 535.342234][T14896] ? rcu_is_watching+0x15/0xb0 [ 535.342287][T14896] ? do_syscall_64+0xbe/0x3b0 [ 535.342325][T14896] do_syscall_64+0xfa/0x3b0 [ 535.342346][T14896] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.342370][T14896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.342393][T14896] ? clear_bhb_loop+0x60/0xb0 [ 535.342428][T14896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.342449][T14896] RIP: 0033:0x7f5666f8e929 [ 535.342472][T14896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.342489][T14896] RSP: 002b:00007f5667d25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.342512][T14896] RAX: ffffffffffffffda RBX: 00007f56671b5fa0 RCX: 00007f5666f8e929 [ 535.342527][T14896] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 535.342540][T14896] RBP: 00007f5667d25090 R08: 0000000000000000 R09: 0000000000000000 [ 535.342553][T14896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.342565][T14896] R13: 0000000000000000 R14: 00007f56671b5fa0 R15: 00007ffe5a6762a8 [ 535.342631][T14896] [ 535.379352][T14902] netlink: 'syz.1.3125': attribute type 21 has an invalid length. [ 535.630120][T14902] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3125'. [ 535.790893][T14913] FAULT_INJECTION: forcing a failure. [ 535.790893][T14913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.809739][T14913] CPU: 0 UID: 0 PID: 14913 Comm: syz.1.3128 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 535.809770][T14913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.809782][T14913] Call Trace: [ 535.809790][T14913] [ 535.809800][T14913] dump_stack_lvl+0x189/0x250 [ 535.809838][T14913] ? __pfx____ratelimit+0x10/0x10 [ 535.809859][T14913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.809894][T14913] ? __pfx__printk+0x10/0x10 [ 535.809917][T14913] ? __might_fault+0xb0/0x130 [ 535.809953][T14913] should_fail_ex+0x414/0x560 [ 535.809988][T14913] _copy_from_user+0x2d/0xb0 [ 535.810013][T14913] kstrtouint_from_user+0xc4/0x170 [ 535.810048][T14913] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 535.810096][T14913] proc_fail_nth_write+0x88/0x240 [ 535.810125][T14913] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 535.810160][T14913] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 535.810191][T14913] vfs_write+0x27e/0xa90 [ 535.810223][T14913] ? __pfx_vfs_write+0x10/0x10 [ 535.810247][T14913] ? __fget_files+0x2a/0x420 [ 535.810277][T14913] ? __fget_files+0x3a0/0x420 [ 535.810300][T14913] ? __fget_files+0x2a/0x420 [ 535.810336][T14913] ksys_write+0x145/0x250 [ 535.810362][T14913] ? __pfx_ksys_write+0x10/0x10 [ 535.810380][T14913] ? rcu_is_watching+0x15/0xb0 [ 535.810418][T14913] ? do_syscall_64+0xbe/0x3b0 [ 535.810444][T14913] do_syscall_64+0xfa/0x3b0 [ 535.810464][T14913] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.810482][T14913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.810501][T14913] ? clear_bhb_loop+0x60/0xb0 [ 535.810526][T14913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.810544][T14913] RIP: 0033:0x7f133cb8d3df [ 535.810561][T14913] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 535.810578][T14913] RSP: 002b:00007f133da80030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 535.810599][T14913] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f133cb8d3df [ 535.810613][T14913] RDX: 0000000000000001 RSI: 00007f133da800a0 RDI: 0000000000000007 [ 535.810625][T14913] RBP: 00007f133da80090 R08: 0000000000000000 R09: 0000000000000000 [ 535.810650][T14913] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 535.810662][T14913] R13: 0000000000000000 R14: 00007f133cdb5fa0 R15: 00007ffc38121768 [ 535.810696][T14913] [ 536.227123][T14920] syzkaller0: entered promiscuous mode [ 536.233423][T14920] syzkaller0: entered allmulticast mode [ 536.684133][T14933] FAULT_INJECTION: forcing a failure. [ 536.684133][T14933] name failslab, interval 1, probability 0, space 0, times 0 [ 536.753410][T14933] CPU: 1 UID: 0 PID: 14933 Comm: syz.0.3135 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 536.753441][T14933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.753455][T14933] Call Trace: [ 536.753475][T14933] [ 536.753488][T14933] dump_stack_lvl+0x189/0x250 [ 536.753546][T14933] ? __pfx____ratelimit+0x10/0x10 [ 536.753597][T14933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.753663][T14933] ? __pfx__printk+0x10/0x10 [ 536.753751][T14933] ? __pfx___might_resched+0x10/0x10 [ 536.753800][T14933] ? fs_reclaim_acquire+0x7d/0x100 [ 536.753904][T14933] should_fail_ex+0x414/0x560 [ 536.754004][T14933] should_failslab+0xa8/0x100 [ 536.754064][T14933] __kmalloc_noprof+0xcb/0x4f0 [ 536.754101][T14933] ? tomoyo_encode+0x28b/0x550 [ 536.754199][T14933] tomoyo_encode+0x28b/0x550 [ 536.754325][T14933] tomoyo_realpath_from_path+0x58d/0x5d0 [ 536.754399][T14933] ? tomoyo_domain+0xd9/0x130 [ 536.754486][T14933] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 536.754539][T14933] tomoyo_path_number_perm+0x1e8/0x5a0 [ 536.754620][T14933] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 536.754666][T14933] ? perf_trace_run_bpf_submit+0xee/0x170 [ 536.755070][T14933] ? __fget_files+0x2a/0x420 [ 536.755143][T14933] ? __fget_files+0x2a/0x420 [ 536.755178][T14933] ? __fget_files+0x3a0/0x420 [ 536.755206][T14933] ? __fget_files+0x2a/0x420 [ 536.755301][T14933] security_file_ioctl+0xcb/0x2d0 [ 536.755374][T14933] __se_sys_ioctl+0x47/0x170 [ 536.755464][T14933] do_syscall_64+0xfa/0x3b0 [ 536.755493][T14933] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.755530][T14933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.755563][T14933] ? clear_bhb_loop+0x60/0xb0 [ 536.755632][T14933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.755660][T14933] RIP: 0033:0x7f2f1fd8e929 [ 536.755687][T14933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.755705][T14933] RSP: 002b:00007f2f20b78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.755726][T14933] RAX: ffffffffffffffda RBX: 00007f2f1ffb5fa0 RCX: 00007f2f1fd8e929 [ 536.755741][T14933] RDX: 0000200000000300 RSI: 00000000000089fe RDI: 0000000000000007 [ 536.755753][T14933] RBP: 00007f2f20b78090 R08: 0000000000000000 R09: 0000000000000000 [ 536.755765][T14933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.755777][T14933] R13: 0000000000000000 R14: 00007f2f1ffb5fa0 R15: 00007fff1bc0d3d8 [ 536.755958][T14933] [ 536.756034][T14933] ERROR: Out of memory at tomoyo_realpath_from_path. [ 537.793986][T14937] netlink: 'syz.1.3137': attribute type 39 has an invalid length. [ 537.918334][T14950] FAULT_INJECTION: forcing a failure. [ 537.918334][T14950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.972016][T14950] CPU: 0 UID: 0 PID: 14950 Comm: syz.0.3142 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 537.972051][T14950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 537.972065][T14950] Call Trace: [ 537.972075][T14950] [ 537.972085][T14950] dump_stack_lvl+0x189/0x250 [ 537.972126][T14950] ? __pfx____ratelimit+0x10/0x10 [ 537.972150][T14950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.972186][T14950] ? __pfx__printk+0x10/0x10 [ 537.972218][T14950] ? __might_fault+0xb0/0x130 [ 537.972252][T14950] should_fail_ex+0x414/0x560 [ 537.972290][T14950] _copy_from_user+0x2d/0xb0 [ 537.972318][T14950] __copy_msghdr+0x3c5/0x5b0 [ 537.972358][T14950] ___sys_sendmsg+0x1a5/0x2a0 [ 537.972394][T14950] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.972455][T14950] ? __fget_files+0x2a/0x420 [ 537.972501][T14950] ? __fget_files+0x2a/0x420 [ 537.972528][T14950] ? __fget_files+0x3a0/0x420 [ 537.972572][T14950] __x64_sys_sendmsg+0x19b/0x260 [ 537.972609][T14950] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.972656][T14950] ? __pfx_ksys_write+0x10/0x10 [ 537.972688][T14950] ? do_syscall_64+0xbe/0x3b0 [ 537.972726][T14950] do_syscall_64+0xfa/0x3b0 [ 537.972751][T14950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.972772][T14950] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.972794][T14950] ? clear_bhb_loop+0x60/0xb0 [ 537.972824][T14950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.972845][T14950] RIP: 0033:0x7f2f1fd8e929 [ 537.972865][T14950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.972885][T14950] RSP: 002b:00007f2f20b78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.972908][T14950] RAX: ffffffffffffffda RBX: 00007f2f1ffb5fa0 RCX: 00007f2f1fd8e929 [ 537.972925][T14950] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000009 [ 537.972939][T14950] RBP: 00007f2f20b78090 R08: 0000000000000000 R09: 0000000000000000 [ 537.972953][T14950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.972966][T14950] R13: 0000000000000000 R14: 00007f2f1ffb5fa0 R15: 00007fff1bc0d3d8 [ 537.973004][T14950] [ 538.507014][T14950] netlink: 'syz.0.3142': attribute type 39 has an invalid length. [ 538.665031][T14965] netlink: 'syz.1.3147': attribute type 10 has an invalid length. [ 538.903036][T14974] netlink: 'syz.2.3150': attribute type 10 has an invalid length. [ 538.982244][T14974] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 539.491688][T14993] netlink: 67 bytes leftover after parsing attributes in process `syz.0.3159'. [ 540.269212][T15011] netdevsim netdevsim1 ªªªªªª: renamed from netdevsim0 (while UP) [ 540.647918][T15024] FAULT_INJECTION: forcing a failure. [ 540.647918][T15024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.699366][T15024] CPU: 0 UID: 0 PID: 15024 Comm: syz.3.3171 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 540.699398][T15024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 540.699410][T15024] Call Trace: [ 540.699418][T15024] [ 540.699426][T15024] dump_stack_lvl+0x189/0x250 [ 540.699466][T15024] ? __pfx____ratelimit+0x10/0x10 [ 540.699487][T15024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.699520][T15024] ? __pfx__printk+0x10/0x10 [ 540.699543][T15024] ? __might_fault+0xb0/0x130 [ 540.699580][T15024] should_fail_ex+0x414/0x560 [ 540.699615][T15024] _copy_from_user+0x2d/0xb0 [ 540.699640][T15024] sock_do_ioctl+0x182/0x300 [ 540.699664][T15024] ? __pfx_sock_do_ioctl+0x10/0x10 [ 540.699680][T15024] ? __lock_acquire+0xab9/0xd20 [ 540.699727][T15024] sock_ioctl+0x576/0x790 [ 540.699761][T15024] ? __pfx_sock_ioctl+0x10/0x10 [ 540.699793][T15024] ? __fget_files+0x2a/0x420 [ 540.699817][T15024] ? __fget_files+0x3a0/0x420 [ 540.699841][T15024] ? __fget_files+0x2a/0x420 [ 540.699871][T15024] ? bpf_lsm_file_ioctl+0x9/0x20 [ 540.699890][T15024] ? __pfx_sock_ioctl+0x10/0x10 [ 540.699922][T15024] __se_sys_ioctl+0xf9/0x170 [ 540.699945][T15024] do_syscall_64+0xfa/0x3b0 [ 540.699965][T15024] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.699985][T15024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.700005][T15024] ? clear_bhb_loop+0x60/0xb0 [ 540.700031][T15024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.700050][T15024] RIP: 0033:0x7f5666f8e929 [ 540.700070][T15024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.700087][T15024] RSP: 002b:00007f5667d25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.700109][T15024] RAX: ffffffffffffffda RBX: 00007f56671b5fa0 RCX: 00007f5666f8e929 [ 540.700126][T15024] RDX: 00002000000007c0 RSI: 0000000000008923 RDI: 0000000000000003 [ 540.700139][T15024] RBP: 00007f5667d25090 R08: 0000000000000000 R09: 0000000000000000 [ 540.700152][T15024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.700163][T15024] R13: 0000000000000000 R14: 00007f56671b5fa0 R15: 00007ffe5a6762a8 [ 540.700196][T15024] [ 541.110301][T15032] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 541.274175][T15032] netlink: 'syz.4.3174': attribute type 10 has an invalid length. [ 541.313877][T15039] FAULT_INJECTION: forcing a failure. [ 541.313877][T15039] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 541.329101][T15039] CPU: 0 UID: 0 PID: 15039 Comm: syz.2.3178 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 541.329131][T15039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 541.329144][T15039] Call Trace: [ 541.329152][T15039] [ 541.329161][T15039] dump_stack_lvl+0x189/0x250 [ 541.329198][T15039] ? __pfx____ratelimit+0x10/0x10 [ 541.329221][T15039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.329253][T15039] ? __pfx__printk+0x10/0x10 [ 541.329278][T15039] ? fs_reclaim_acquire+0x7d/0x100 [ 541.329315][T15039] should_fail_ex+0x414/0x560 [ 541.329349][T15039] prepare_alloc_pages+0x213/0x610 [ 541.329386][T15039] __alloc_frozen_pages_noprof+0x123/0x370 [ 541.329420][T15039] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 541.329460][T15039] ? policy_nodemask+0x27c/0x720 [ 541.329481][T15039] ? __lock_acquire+0xab9/0xd20 [ 541.329523][T15039] alloc_pages_mpol+0x232/0x4a0 [ 541.329554][T15039] alloc_pages_noprof+0xa9/0x190 [ 541.329580][T15039] get_free_pages_noprof+0xf/0x80 [ 541.329609][T15039] kasan_populate_vmalloc+0x33/0x1a0 [ 541.329628][T15039] ? do_raw_spin_unlock+0x122/0x240 [ 541.329657][T15039] alloc_vmap_area+0xd51/0x1490 [ 541.329698][T15039] ? __pfx_alloc_vmap_area+0x10/0x10 [ 541.329720][T15039] ? __kasan_kmalloc+0x93/0xb0 [ 541.329762][T15039] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 541.329787][T15039] ? __get_vm_area_node+0x13f/0x300 [ 541.329810][T15039] ? copy_process+0x54b/0x3c00 [ 541.329831][T15039] __get_vm_area_node+0x1f8/0x300 [ 541.329863][T15039] __vmalloc_node_range_noprof+0x301/0x12f0 [ 541.329890][T15039] ? copy_process+0x54b/0x3c00 [ 541.329921][T15039] ? percpu_ref_get_many+0x19/0x140 [ 541.329948][T15039] ? percpu_ref_get_many+0x19/0x140 [ 541.329992][T15039] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 541.330022][T15039] ? memcpy_and_pad+0x48/0x80 [ 541.330055][T15039] __vmalloc_node_noprof+0xc2/0x110 [ 541.330081][T15039] ? copy_process+0x54b/0x3c00 [ 541.330098][T15039] ? copy_process+0x54b/0x3c00 [ 541.330120][T15039] dup_task_struct+0x3e7/0x860 [ 541.330146][T15039] copy_process+0x54b/0x3c00 [ 541.330199][T15039] ? __pfx_copy_process+0x10/0x10 [ 541.330220][T15039] ? migrate_enable+0x29c/0x3c0 [ 541.330253][T15039] kernel_clone+0x21e/0x870 [ 541.330284][T15039] ? __pfx_kernel_clone+0x10/0x10 [ 541.330328][T15039] __x64_sys_clone+0x18b/0x1e0 [ 541.330355][T15039] ? __pfx___x64_sys_clone+0x10/0x10 [ 541.330393][T15039] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 541.330422][T15039] ? __pfx_ksys_write+0x10/0x10 [ 541.330443][T15039] ? rcu_is_watching+0x15/0xb0 [ 541.330481][T15039] ? do_syscall_64+0xbe/0x3b0 [ 541.330515][T15039] do_syscall_64+0xfa/0x3b0 [ 541.330536][T15039] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.330557][T15039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.330578][T15039] ? clear_bhb_loop+0x60/0xb0 [ 541.330603][T15039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.330624][T15039] RIP: 0033:0x7fb68058e929 [ 541.330643][T15039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.330662][T15039] RSP: 002b:00007fb68144dfe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 541.330684][T15039] RAX: ffffffffffffffda RBX: 00007fb6807b5fa0 RCX: 00007fb68058e929 [ 541.330700][T15039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000160480 [ 541.330713][T15039] RBP: 00007fb68144e090 R08: 0000000000000000 R09: 0000000000000000 [ 541.330726][T15039] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 541.330740][T15039] R13: 0000000000000000 R14: 00007fb6807b5fa0 R15: 00007ffcf9959378 [ 541.330773][T15039] [ 541.836512][T15041] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3179'. [ 541.842920][T15032] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 541.892568][T15043] FAULT_INJECTION: forcing a failure. [ 541.892568][T15043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.906123][T15043] CPU: 0 UID: 0 PID: 15043 Comm: syz.2.3181 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 541.906159][T15043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 541.906172][T15043] Call Trace: [ 541.906181][T15043] [ 541.906191][T15043] dump_stack_lvl+0x189/0x250 [ 541.906228][T15043] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.906253][T15043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.906299][T15043] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 541.906330][T15043] should_fail_ex+0x414/0x560 [ 541.906366][T15043] _copy_to_user+0x31/0xb0 [ 541.906394][T15043] simple_read_from_buffer+0xe1/0x170 [ 541.906436][T15043] proc_fail_nth_read+0x1df/0x250 [ 541.906468][T15043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 541.906500][T15043] ? rw_verify_area+0x258/0x650 [ 541.906521][T15043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 541.906550][T15043] vfs_read+0x200/0x980 [ 541.906578][T15043] ? __pfx___mutex_lock+0x10/0x10 [ 541.906602][T15043] ? __pfx_vfs_read+0x10/0x10 [ 541.906625][T15043] ? __fget_files+0x2a/0x420 [ 541.906656][T15043] ? __fget_files+0x3a0/0x420 [ 541.906680][T15043] ? __fget_files+0x2a/0x420 [ 541.906716][T15043] ksys_read+0x145/0x250 [ 541.906740][T15043] ? __pfx_ksys_read+0x10/0x10 [ 541.906775][T15043] do_syscall_64+0xfa/0x3b0 [ 541.906798][T15043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.906817][T15043] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 541.906838][T15043] ? clear_bhb_loop+0x60/0xb0 [ 541.906863][T15043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.906883][T15043] RIP: 0033:0x7fb68058d33c [ 541.906901][T15043] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 541.906919][T15043] RSP: 002b:00007fb68144e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 541.906940][T15043] RAX: ffffffffffffffda RBX: 00007fb6807b5fa0 RCX: 00007fb68058d33c [ 541.906955][T15043] RDX: 000000000000000f RSI: 00007fb68144e0a0 RDI: 0000000000000006 [ 541.906968][T15043] RBP: 00007fb68144e090 R08: 0000000000000000 R09: 0000000000000000 [ 541.906980][T15043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.906993][T15043] R13: 0000000000000000 R14: 00007fb6807b5fa0 R15: 00007ffcf9959378 [ 541.907026][T15043] [ 542.360083][T15048] netlink: 'syz.2.3183': attribute type 39 has an invalid length. [ 543.117115][T15080] FAULT_INJECTION: forcing a failure. [ 543.117115][T15080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.133710][T15080] CPU: 0 UID: 0 PID: 15080 Comm: syz.2.3193 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 543.133742][T15080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 543.133756][T15080] Call Trace: [ 543.133764][T15080] [ 543.133774][T15080] dump_stack_lvl+0x189/0x250 [ 543.133811][T15080] ? __pfx____ratelimit+0x10/0x10 [ 543.133832][T15080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 543.133863][T15080] ? __pfx__printk+0x10/0x10 [ 543.133885][T15080] ? __might_fault+0xb0/0x130 [ 543.133936][T15080] should_fail_ex+0x414/0x560 [ 543.133963][T15080] _copy_from_iter+0x1db/0x16f0 [ 543.133980][T15080] ? rcu_is_watching+0x15/0xb0 [ 543.134009][T15080] ? __pfx__copy_from_iter+0x10/0x10 [ 543.134029][T15080] ? __build_skb_around+0x257/0x3e0 [ 543.134052][T15080] ? skb_put+0x11b/0x210 [ 543.134074][T15080] vhci_write+0x150/0x4a0 [ 543.134101][T15080] vfs_write+0x54b/0xa90 [ 543.134121][T15080] ? __pfx_vhci_write+0x10/0x10 [ 543.134144][T15080] ? __pfx_vfs_write+0x10/0x10 [ 543.134168][T15080] ? __fget_files+0x2a/0x420 [ 543.134194][T15080] ksys_write+0x145/0x250 [ 543.134212][T15080] ? __pfx_ksys_write+0x10/0x10 [ 543.134231][T15080] ? do_syscall_64+0xbe/0x3b0 [ 543.134250][T15080] do_syscall_64+0xfa/0x3b0 [ 543.134264][T15080] ? lockdep_hardirqs_on+0x9c/0x150 [ 543.134280][T15080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.134295][T15080] ? clear_bhb_loop+0x60/0xb0 [ 543.134313][T15080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.134326][T15080] RIP: 0033:0x7fb68058e929 [ 543.134340][T15080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.134353][T15080] RSP: 002b:00007fb68144e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 543.134369][T15080] RAX: ffffffffffffffda RBX: 00007fb6807b5fa0 RCX: 00007fb68058e929 [ 543.134380][T15080] RDX: 0000000000000012 RSI: 00002000000002c0 RDI: 00000000000000ca [ 543.134389][T15080] RBP: 00007fb68144e090 R08: 0000000000000000 R09: 0000000000000000 [ 543.134398][T15080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.134406][T15080] R13: 0000000000000000 R14: 00007fb6807b5fa0 R15: 00007ffcf9959378 [ 543.134428][T15080] [ 543.957548][ T1318] wlan1: Trigger new scan to find an IBSS to join [ 544.249970][T15107] FAULT_INJECTION: forcing a failure. [ 544.249970][T15107] name failslab, interval 1, probability 0, space 0, times 0 [ 544.262891][T15107] CPU: 0 UID: 0 PID: 15107 Comm: syz.2.3203 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 544.262919][T15107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 544.262933][T15107] Call Trace: [ 544.262941][T15107] [ 544.262950][T15107] dump_stack_lvl+0x189/0x250 [ 544.262989][T15107] ? __pfx____ratelimit+0x10/0x10 [ 544.263011][T15107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.263046][T15107] ? __pfx__printk+0x10/0x10 [ 544.263066][T15107] ? kasan_save_track+0x4f/0x80 [ 544.263089][T15107] ? dst_alloc+0x105/0x170 [ 544.263120][T15107] ? fib6_rule_lookup+0x1fc/0x6f0 [ 544.263144][T15107] ? ip6_route_output_flags+0x364/0x5d0 [ 544.263169][T15107] ? ip6_dst_lookup_tail+0x1ae/0x1510 [ 544.263198][T15107] ? udpv6_sendmsg+0x18e7/0x2710 [ 544.263224][T15107] ? __sock_sendmsg+0xe5/0x270 [ 544.263251][T15107] ? ____sys_sendmsg+0x505/0x830 [ 544.263278][T15107] ? ___sys_sendmsg+0x21f/0x2a0 [ 544.263303][T15107] ? __x64_sys_sendmsg+0x19b/0x260 [ 544.263330][T15107] ? do_syscall_64+0xfa/0x3b0 [ 544.263356][T15107] should_fail_ex+0x414/0x560 [ 544.263393][T15107] should_failslab+0xa8/0x100 [ 544.263421][T15107] __kmalloc_node_noprof+0xd1/0x4e0 [ 544.263444][T15107] ? alloc_slab_obj_exts+0x39/0xa0 [ 544.263473][T15107] alloc_slab_obj_exts+0x39/0xa0 [ 544.263495][T15107] __memcg_slab_post_alloc_hook+0x31e/0x7f0 [ 544.263542][T15107] kmem_cache_alloc_noprof+0x2bf/0x3c0 [ 544.263564][T15107] ? dst_alloc+0x105/0x170 [ 544.263595][T15107] ? __pfx_ip6_dst_gc+0x10/0x10 [ 544.263620][T15107] dst_alloc+0x105/0x170 [ 544.263657][T15107] ip6_pol_route+0xa21/0x1180 [ 544.263682][T15107] ? ip6_pol_route+0x162/0x1180 [ 544.263713][T15107] ? __pfx_ip6_pol_route+0x10/0x10 [ 544.263736][T15107] ? ip6_compressed_string+0xa9e/0xb70 [ 544.263764][T15107] ? __pfx_ip6_compressed_string+0x10/0x10 [ 544.263795][T15107] fib6_rule_lookup+0x1fc/0x6f0 [ 544.263823][T15107] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 544.263850][T15107] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 544.263892][T15107] ? dev_get_by_index_rcu+0xf4/0x110 [ 544.263922][T15107] ip6_route_output_flags+0x364/0x5d0 [ 544.263949][T15107] ? ip6_route_output_flags+0x2e/0x5d0 [ 544.263980][T15107] ip6_dst_lookup_tail+0x1ae/0x1510 [ 544.264025][T15107] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 544.264064][T15107] ? sk_dst_check+0x25/0x480 [ 544.264090][T15107] ? sk_dst_check+0x25/0x480 [ 544.264110][T15107] ? sk_dst_check+0x30e/0x480 [ 544.264134][T15107] ip6_sk_dst_lookup_flow+0x730/0x980 [ 544.264166][T15107] ? udpv6_sendmsg+0x16f2/0x2710 [ 544.264199][T15107] udpv6_sendmsg+0x18e7/0x2710 [ 544.264251][T15107] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 544.264276][T15107] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 544.264309][T15107] ? __lock_acquire+0xab9/0xd20 [ 544.264357][T15107] ? __local_bh_enable_ip+0x12d/0x1c0 [ 544.264390][T15107] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 544.264430][T15107] ? inet_send_prepare+0x1b9/0x270 [ 544.264455][T15107] ? inet_send_prepare+0x1b9/0x270 [ 544.264481][T15107] ? inet6_sendmsg+0xe4/0x120 [ 544.264507][T15107] __sock_sendmsg+0xe5/0x270 [ 544.264533][T15107] ____sys_sendmsg+0x505/0x830 [ 544.264570][T15107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 544.264611][T15107] ? import_iovec+0x74/0xa0 [ 544.264639][T15107] ___sys_sendmsg+0x21f/0x2a0 [ 544.264672][T15107] ? __pfx____sys_sendmsg+0x10/0x10 [ 544.264746][T15107] ? __fget_files+0x2a/0x420 [ 544.264771][T15107] ? __fget_files+0x3a0/0x420 [ 544.264811][T15107] __x64_sys_sendmsg+0x19b/0x260 [ 544.264844][T15107] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 544.264885][T15107] ? __pfx_ksys_write+0x10/0x10 [ 544.264904][T15107] ? rcu_is_watching+0x15/0xb0 [ 544.264943][T15107] ? do_syscall_64+0xbe/0x3b0 [ 544.264970][T15107] do_syscall_64+0xfa/0x3b0 [ 544.264991][T15107] ? lockdep_hardirqs_on+0x9c/0x150 [ 544.265012][T15107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.265032][T15107] ? clear_bhb_loop+0x60/0xb0 [ 544.265058][T15107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.265079][T15107] RIP: 0033:0x7fb68058e929 [ 544.265099][T15107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.265117][T15107] RSP: 002b:00007fb68144e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.265140][T15107] RAX: ffffffffffffffda RBX: 00007fb6807b5fa0 RCX: 00007fb68058e929 [ 544.265156][T15107] RDX: 000000000404f8ca RSI: 0000200000000200 RDI: 0000000000000003 [ 544.265169][T15107] RBP: 00007fb68144e090 R08: 0000000000000000 R09: 0000000000000000 [ 544.265182][T15107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.265194][T15107] R13: 0000000000000000 R14: 00007fb6807b5fa0 R15: 00007ffcf9959378 [ 544.265234][T15107] [ 545.209838][T15120] netlink: 'syz.4.3206': attribute type 29 has an invalid length. [ 545.307848][T15120] netlink: 'syz.4.3206': attribute type 29 has an invalid length. [ 547.412481][T15172] FAULT_INJECTION: forcing a failure. [ 547.412481][T15172] name failslab, interval 1, probability 0, space 0, times 0 [ 547.441480][T15172] CPU: 0 UID: 0 PID: 15172 Comm: syz.1.3223 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 547.441511][T15172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 547.441525][T15172] Call Trace: [ 547.441533][T15172] [ 547.441542][T15172] dump_stack_lvl+0x189/0x250 [ 547.441581][T15172] ? __pfx____ratelimit+0x10/0x10 [ 547.441602][T15172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 547.441635][T15172] ? __pfx__printk+0x10/0x10 [ 547.441661][T15172] ? __pfx___might_resched+0x10/0x10 [ 547.441695][T15172] ? fs_reclaim_acquire+0x7d/0x100 [ 547.441729][T15172] should_fail_ex+0x414/0x560 [ 547.441765][T15172] should_failslab+0xa8/0x100 [ 547.441793][T15172] __kmalloc_noprof+0xcb/0x4f0 [ 547.441815][T15172] ? fib6_info_alloc+0x30/0xf0 [ 547.441846][T15172] fib6_info_alloc+0x30/0xf0 [ 547.441874][T15172] ip6_route_info_create+0x142/0x860 [ 547.441921][T15172] ip6_route_add+0x49/0x1b0 [ 547.441953][T15172] addrconf_add_dev+0x24f/0x340 [ 547.441981][T15172] ? __pfx_addrconf_add_dev+0x10/0x10 [ 547.442032][T15172] ? __mutex_trylock_common+0x153/0x260 [ 547.442067][T15172] inet6_addr_add+0x1a1/0xc00 [ 547.442095][T15172] ? __mutex_lock+0x330/0xe80 [ 547.442121][T15172] ? __pfx_inet6_addr_add+0x10/0x10 [ 547.442149][T15172] ? addrconf_add_ifaddr+0x254/0x400 [ 547.442176][T15172] ? __pfx___mutex_lock+0x10/0x10 [ 547.442222][T15172] addrconf_add_ifaddr+0x27d/0x400 [ 547.442258][T15172] ? __pfx_addrconf_add_ifaddr+0x10/0x10 [ 547.442299][T15172] inet6_ioctl+0x13d/0x280 [ 547.442322][T15172] ? __pfx_inet6_ioctl+0x10/0x10 [ 547.442342][T15172] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 547.442370][T15172] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 547.442397][T15172] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 547.442426][T15172] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 547.442466][T15172] sock_do_ioctl+0xd9/0x300 [ 547.442492][T15172] ? __pfx_sock_do_ioctl+0x10/0x10 [ 547.442513][T15172] ? __lock_acquire+0xab9/0xd20 [ 547.442562][T15172] sock_ioctl+0x576/0x790 [ 547.442598][T15172] ? __pfx_sock_ioctl+0x10/0x10 [ 547.442632][T15172] ? __fget_files+0x2a/0x420 [ 547.442659][T15172] ? __fget_files+0x3a0/0x420 [ 547.442683][T15172] ? __fget_files+0x2a/0x420 [ 547.442714][T15172] ? bpf_lsm_file_ioctl+0x9/0x20 [ 547.442735][T15172] ? __pfx_sock_ioctl+0x10/0x10 [ 547.442767][T15172] __se_sys_ioctl+0xf9/0x170 [ 547.442791][T15172] do_syscall_64+0xfa/0x3b0 [ 547.442812][T15172] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.442833][T15172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.442854][T15172] ? clear_bhb_loop+0x60/0xb0 [ 547.442880][T15172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.442908][T15172] RIP: 0033:0x7f133cb8e929 [ 547.442927][T15172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.442946][T15172] RSP: 002b:00007f133da5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.442968][T15172] RAX: ffffffffffffffda RBX: 00007f133cdb6080 RCX: 00007f133cb8e929 [ 547.442983][T15172] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 000000000000000e [ 547.442997][T15172] RBP: 00007f133da5f090 R08: 0000000000000000 R09: 0000000000000000 [ 547.443010][T15172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.443022][T15172] R13: 0000000000000000 R14: 00007f133cdb6080 R15: 00007ffc38121768 [ 547.443056][T15172] [ 547.957700][ T36] wlan1: Trigger new scan to find an IBSS to join [ 548.047455][T15180] netlink: 'syz.1.3228': attribute type 39 has an invalid length. [ 548.523980][T15200] netlink: 'syz.3.3236': attribute type 29 has an invalid length. [ 549.383679][T15232] FAULT_INJECTION: forcing a failure. [ 549.383679][T15232] name failslab, interval 1, probability 0, space 0, times 0 [ 549.427797][T15232] CPU: 0 UID: 0 PID: 15232 Comm: syz.3.3247 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 549.427830][T15232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 549.427843][T15232] Call Trace: [ 549.427852][T15232] [ 549.427861][T15232] dump_stack_lvl+0x189/0x250 [ 549.427899][T15232] ? __pfx____ratelimit+0x10/0x10 [ 549.427920][T15232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.427953][T15232] ? __pfx__printk+0x10/0x10 [ 549.427981][T15232] ? __pfx___might_resched+0x10/0x10 [ 549.428019][T15232] should_fail_ex+0x414/0x560 [ 549.428053][T15232] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 549.428084][T15232] should_failslab+0xa8/0x100 [ 549.428113][T15232] __kvmalloc_node_noprof+0x161/0x5f0 [ 549.428138][T15232] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 549.428171][T15232] bpf_test_run_xdp_live+0x1b5/0x1b10 [ 549.428211][T15232] ? stack_depot_save_flags+0x40/0x900 [ 549.428253][T15232] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 549.428279][T15232] ? bpf_prog_test_run_xdp+0x37c/0x1000 [ 549.428303][T15232] ? bpf_prog_test_run+0x2c4/0x340 [ 549.428330][T15232] ? __sys_bpf+0x4a4/0x860 [ 549.428354][T15232] ? __x64_sys_bpf+0x7c/0x90 [ 549.428400][T15232] ? __lock_acquire+0xab9/0xd20 [ 549.428440][T15232] ? __might_fault+0xb0/0x130 [ 549.428474][T15232] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 549.428519][T15232] ? _copy_from_user+0x94/0xb0 [ 549.428543][T15232] ? bpf_test_init+0x133/0x170 [ 549.428565][T15232] ? xdp_convert_md_to_buff+0x5b/0x330 [ 549.428594][T15232] bpf_prog_test_run_xdp+0x713/0x1000 [ 549.428638][T15232] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 549.428670][T15232] ? __fget_files+0x2a/0x420 [ 549.428701][T15232] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 549.428729][T15232] bpf_prog_test_run+0x2c4/0x340 [ 549.428762][T15232] __sys_bpf+0x4a4/0x860 [ 549.428791][T15232] ? __pfx___sys_bpf+0x10/0x10 [ 549.428835][T15232] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 549.428864][T15232] ? __pfx_ksys_write+0x10/0x10 [ 549.428883][T15232] ? rcu_is_watching+0x15/0xb0 [ 549.428923][T15232] __x64_sys_bpf+0x7c/0x90 [ 549.428948][T15232] do_syscall_64+0xfa/0x3b0 [ 549.428968][T15232] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.428987][T15232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.429006][T15232] ? clear_bhb_loop+0x60/0xb0 [ 549.429032][T15232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.429069][T15232] RIP: 0033:0x7f5666f8e929 [ 549.429088][T15232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.429106][T15232] RSP: 002b:00007f5667d25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 549.429129][T15232] RAX: ffffffffffffffda RBX: 00007f56671b5fa0 RCX: 00007f5666f8e929 [ 549.429145][T15232] RDX: 0000000000000050 RSI: 0000200000000b00 RDI: 000000000000000a [ 549.429158][T15232] RBP: 00007f5667d25090 R08: 0000000000000000 R09: 0000000000000000 [ 549.429171][T15232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.429183][T15232] R13: 0000000000000000 R14: 00007f56671b5fa0 R15: 00007ffe5a6762a8 [ 549.429217][T15232] [ 550.029731][T15237] FAULT_INJECTION: forcing a failure. [ 550.029731][T15237] name failslab, interval 1, probability 0, space 0, times 0 [ 550.138108][T15237] CPU: 0 UID: 0 PID: 15237 Comm: syz.4.3249 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 550.138140][T15237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 550.138154][T15237] Call Trace: [ 550.138163][T15237] [ 550.138172][T15237] dump_stack_lvl+0x189/0x250 [ 550.138212][T15237] ? __pfx____ratelimit+0x10/0x10 [ 550.138234][T15237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.138269][T15237] ? __pfx__printk+0x10/0x10 [ 550.138304][T15237] ? ref_tracker_alloc+0x318/0x460 [ 550.138342][T15237] should_fail_ex+0x414/0x560 [ 550.138381][T15237] should_failslab+0xa8/0x100 [ 550.138411][T15237] kmem_cache_alloc_noprof+0x73/0x3c0 [ 550.138449][T15237] ? skb_clone+0x212/0x3a0 [ 550.138488][T15237] skb_clone+0x212/0x3a0 [ 550.138527][T15237] __netlink_deliver_tap+0x404/0x850 [ 550.138576][T15237] ? netlink_deliver_tap+0x2e/0x1b0 [ 550.138608][T15237] netlink_deliver_tap+0x19c/0x1b0 [ 550.138639][T15237] netlink_unicast+0x72f/0x8d0 [ 550.138683][T15237] netlink_sendmsg+0x805/0xb30 [ 550.138729][T15237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.138764][T15237] ? aa_sock_msg_perm+0x94/0x160 [ 550.138797][T15237] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 550.138829][T15237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.138860][T15237] __sock_sendmsg+0x219/0x270 [ 550.138889][T15237] ____sys_sendmsg+0x505/0x830 [ 550.138929][T15237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 550.138975][T15237] ? import_iovec+0x74/0xa0 [ 550.139006][T15237] ___sys_sendmsg+0x21f/0x2a0 [ 550.139042][T15237] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.139131][T15237] ? __fget_files+0x2a/0x420 [ 550.139157][T15237] ? __fget_files+0x3a0/0x420 [ 550.139201][T15237] __x64_sys_sendmsg+0x19b/0x260 [ 550.139237][T15237] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 550.139284][T15237] ? __pfx_ksys_write+0x10/0x10 [ 550.139305][T15237] ? rcu_is_watching+0x15/0xb0 [ 550.139347][T15237] ? do_syscall_64+0xbe/0x3b0 [ 550.139378][T15237] do_syscall_64+0xfa/0x3b0 [ 550.139399][T15237] ? lockdep_hardirqs_on+0x9c/0x150 [ 550.139421][T15237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.139456][T15237] ? clear_bhb_loop+0x60/0xb0 [ 550.139485][T15237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.139506][T15237] RIP: 0033:0x7fbea458e929 [ 550.139527][T15237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.139547][T15237] RSP: 002b:00007fbea533c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.139570][T15237] RAX: ffffffffffffffda RBX: 00007fbea47b6080 RCX: 00007fbea458e929 [ 550.139586][T15237] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 550.139600][T15237] RBP: 00007fbea533c090 R08: 0000000000000000 R09: 0000000000000000 [ 550.139613][T15237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.139626][T15237] R13: 0000000000000000 R14: 00007fbea47b6080 R15: 00007ffd0c09a1b8 [ 550.139667][T15237] [ 550.926215][ T729] wlan1: Trigger new scan to find an IBSS to join [ 551.061799][ T1318] wlan1: Creating new IBSS network, BSSID 32:e0:32:19:79:28 [ 551.287101][T15263] FAULT_INJECTION: forcing a failure. [ 551.287101][T15263] name failslab, interval 1, probability 0, space 0, times 0 [ 551.305586][T15263] CPU: 0 UID: 0 PID: 15263 Comm: syz.3.3260 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 551.305619][T15263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 551.305632][T15263] Call Trace: [ 551.305641][T15263] [ 551.305651][T15263] dump_stack_lvl+0x189/0x250 [ 551.305691][T15263] ? __pfx____ratelimit+0x10/0x10 [ 551.305712][T15263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 551.305745][T15263] ? __pfx__printk+0x10/0x10 [ 551.305776][T15263] ? __pfx___might_resched+0x10/0x10 [ 551.305808][T15263] ? fs_reclaim_acquire+0x7d/0x100 [ 551.305842][T15263] should_fail_ex+0x414/0x560 [ 551.305878][T15263] should_failslab+0xa8/0x100 [ 551.305906][T15263] __kmalloc_cache_noprof+0x70/0x3d0 [ 551.305930][T15263] ? ipv6_add_addr+0x530/0x1090 [ 551.305958][T15263] ipv6_add_addr+0x530/0x1090 [ 551.305987][T15263] ? __pfx_ipv6_add_addr+0x10/0x10 [ 551.306025][T15263] inet6_addr_add+0x387/0xc00 [ 551.306060][T15263] ? __pfx_inet6_addr_add+0x10/0x10 [ 551.306089][T15263] ? addrconf_add_ifaddr+0x254/0x400 [ 551.306117][T15263] ? __pfx___mutex_lock+0x10/0x10 [ 551.306164][T15263] addrconf_add_ifaddr+0x27d/0x400 [ 551.306200][T15263] ? __pfx_addrconf_add_ifaddr+0x10/0x10 [ 551.306242][T15263] inet6_ioctl+0x13d/0x280 [ 551.306265][T15263] ? __pfx_inet6_ioctl+0x10/0x10 [ 551.306286][T15263] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 551.306316][T15263] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 551.306342][T15263] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 551.306371][T15263] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 551.306429][T15263] sock_do_ioctl+0xd9/0x300 [ 551.306454][T15263] ? __pfx_sock_do_ioctl+0x10/0x10 [ 551.306471][T15263] ? __lock_acquire+0xab9/0xd20 [ 551.306518][T15263] sock_ioctl+0x576/0x790 [ 551.306554][T15263] ? __pfx_sock_ioctl+0x10/0x10 [ 551.306587][T15263] ? __fget_files+0x2a/0x420 [ 551.306612][T15263] ? __fget_files+0x3a0/0x420 [ 551.306636][T15263] ? __fget_files+0x2a/0x420 [ 551.306666][T15263] ? bpf_lsm_file_ioctl+0x9/0x20 [ 551.306687][T15263] ? __pfx_sock_ioctl+0x10/0x10 [ 551.306719][T15263] __se_sys_ioctl+0xf9/0x170 [ 551.306742][T15263] do_syscall_64+0xfa/0x3b0 [ 551.306763][T15263] ? lockdep_hardirqs_on+0x9c/0x150 [ 551.306783][T15263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.306801][T15263] ? clear_bhb_loop+0x60/0xb0 [ 551.306827][T15263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.306847][T15263] RIP: 0033:0x7f5666f8e929 [ 551.306865][T15263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.306884][T15263] RSP: 002b:00007f5667d25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 551.306906][T15263] RAX: ffffffffffffffda RBX: 00007f56671b5fa0 RCX: 00007f5666f8e929 [ 551.306922][T15263] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 000000000000000e [ 551.306935][T15263] RBP: 00007f5667d25090 R08: 0000000000000000 R09: 0000000000000000 [ 551.306948][T15263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.306960][T15263] R13: 0000000000000000 R14: 00007f56671b5fa0 R15: 00007ffe5a6762a8 [ 551.306993][T15263] [ 552.133148][T15272] FAULT_INJECTION: forcing a failure. [ 552.133148][T15272] name failslab, interval 1, probability 0, space 0, times 0 [ 552.146018][T15272] CPU: 1 UID: 0 PID: 15272 Comm: syz.2.3263 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 552.146046][T15272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 552.146059][T15272] Call Trace: [ 552.146069][T15272] [ 552.146079][T15272] dump_stack_lvl+0x189/0x250 [ 552.146117][T15272] ? __pfx____ratelimit+0x10/0x10 [ 552.146139][T15272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.146172][T15272] ? __pfx__printk+0x10/0x10 [ 552.146200][T15272] ? ip6_pol_route+0x162/0x1180 [ 552.146236][T15272] should_fail_ex+0x414/0x560 [ 552.146274][T15272] should_failslab+0xa8/0x100 [ 552.146300][T15272] ? __pfx_ip6_dst_gc+0x10/0x10 [ 552.146322][T15272] kmem_cache_alloc_noprof+0x73/0x3c0 [ 552.146346][T15272] ? dst_alloc+0x105/0x170 [ 552.146388][T15272] ? __pfx_ip6_dst_gc+0x10/0x10 [ 552.146412][T15272] dst_alloc+0x105/0x170 [ 552.146450][T15272] ip6_pol_route+0xa21/0x1180 [ 552.146471][T15272] ? ip6_pol_route+0x162/0x1180 [ 552.146516][T15272] ? __pfx_ip6_pol_route+0x10/0x10 [ 552.146552][T15272] ? fib6_rule_lookup+0x9b/0x6f0 [ 552.146585][T15272] fib6_rule_lookup+0x1fc/0x6f0 [ 552.146612][T15272] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 552.146638][T15272] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 552.146695][T15272] ip6_route_output_flags+0x364/0x5d0 [ 552.146721][T15272] ? ip6_route_output_flags+0x2e/0x5d0 [ 552.146752][T15272] ip6_dst_lookup_tail+0x1ae/0x1510 [ 552.146789][T15272] ? bpf_lsm_capable+0x9/0x20 [ 552.146810][T15272] ? security_capable+0x7e/0x2e0 [ 552.146845][T15272] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 552.146875][T15272] ? ip6_datagram_send_ctl+0x158a/0x17e0 [ 552.146930][T15272] ip6_dst_lookup_flow+0x47/0xe0 [ 552.146965][T15272] l2tp_ip6_sendmsg+0xfc6/0x17c0 [ 552.147009][T15272] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 552.147066][T15272] ? __pfx_aa_sk_perm+0x10/0x10 [ 552.147090][T15272] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 552.147136][T15272] ? inet_sendmsg+0x2f4/0x370 [ 552.147158][T15272] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 552.147192][T15272] __sock_sendmsg+0x19c/0x270 [ 552.147218][T15272] ____sys_sendmsg+0x505/0x830 [ 552.147256][T15272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.147297][T15272] ? import_iovec+0x74/0xa0 [ 552.147326][T15272] ___sys_sendmsg+0x21f/0x2a0 [ 552.147366][T15272] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.147447][T15272] ? __fget_files+0x2a/0x420 [ 552.147471][T15272] ? __fget_files+0x3a0/0x420 [ 552.147511][T15272] __x64_sys_sendmsg+0x19b/0x260 [ 552.147543][T15272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 552.147587][T15272] ? __pfx_ksys_write+0x10/0x10 [ 552.147618][T15272] ? do_syscall_64+0xbe/0x3b0 [ 552.147647][T15272] do_syscall_64+0xfa/0x3b0 [ 552.147670][T15272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.147689][T15272] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 552.147709][T15272] ? clear_bhb_loop+0x60/0xb0 [ 552.147736][T15272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.147756][T15272] RIP: 0033:0x7fb68058e929 [ 552.147776][T15272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.147794][T15272] RSP: 002b:00007fb68144e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.147815][T15272] RAX: ffffffffffffffda RBX: 00007fb6807b5fa0 RCX: 00007fb68058e929 [ 552.147830][T15272] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000009 [ 552.147843][T15272] RBP: 00007fb68144e090 R08: 0000000000000000 R09: 0000000000000000 [ 552.147856][T15272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.147868][T15272] R13: 0000000000000000 R14: 00007fb6807b5fa0 R15: 00007ffcf9959378 [ 552.147905][T15272] [ 552.525785][T15275] netlink: 'syz.2.3263': attribute type 39 has an invalid length. [ 553.194381][T15296] sctp: [Deprecated]: syz.0.3274 (pid 15296) Use of int in maxseg socket option. [ 553.194381][T15296] Use struct sctp_assoc_value instead [ 553.231733][T15303] netlink: 'syz.3.3277': attribute type 10 has an invalid length. [ 553.276085][T15303] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 553.508682][T15316] FAULT_INJECTION: forcing a failure. [ 553.508682][T15316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.561710][T15316] CPU: 0 UID: 0 PID: 15316 Comm: syz.1.3281 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 553.561745][T15316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 553.561759][T15316] Call Trace: [ 553.561767][T15316] [ 553.561777][T15316] dump_stack_lvl+0x189/0x250 [ 553.561817][T15316] ? __pfx____ratelimit+0x10/0x10 [ 553.561838][T15316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.561871][T15316] ? __pfx__printk+0x10/0x10 [ 553.561909][T15316] should_fail_ex+0x414/0x560 [ 553.561944][T15316] _copy_to_user+0x31/0xb0 [ 553.561971][T15316] simple_read_from_buffer+0xe1/0x170 [ 553.562002][T15316] proc_fail_nth_read+0x1df/0x250 [ 553.562035][T15316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 553.562067][T15316] ? rw_verify_area+0x258/0x650 [ 553.562088][T15316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 553.562119][T15316] vfs_read+0x200/0x980 [ 553.562147][T15316] ? __pfx___mutex_lock+0x10/0x10 [ 553.562170][T15316] ? __pfx_vfs_read+0x10/0x10 [ 553.562194][T15316] ? __fget_files+0x2a/0x420 [ 553.562226][T15316] ? __fget_files+0x3a0/0x420 [ 553.562251][T15316] ? __fget_files+0x2a/0x420 [ 553.562288][T15316] ksys_read+0x145/0x250 [ 553.562313][T15316] ? __pfx_ksys_read+0x10/0x10 [ 553.562333][T15316] ? rcu_is_watching+0x15/0xb0 [ 553.562372][T15316] ? do_syscall_64+0xbe/0x3b0 [ 553.562399][T15316] do_syscall_64+0xfa/0x3b0 [ 553.562420][T15316] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.562447][T15316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.562468][T15316] ? clear_bhb_loop+0x60/0xb0 [ 553.562495][T15316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.562515][T15316] RIP: 0033:0x7f133cb8d33c [ 553.562534][T15316] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 553.562554][T15316] RSP: 002b:00007f133da80030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 553.562576][T15316] RAX: ffffffffffffffda RBX: 00007f133cdb5fa0 RCX: 00007f133cb8d33c [ 553.562592][T15316] RDX: 000000000000000f RSI: 00007f133da800a0 RDI: 0000000000000005 [ 553.562605][T15316] RBP: 00007f133da80090 R08: 0000000000000000 R09: 0000000000000000 [ 553.562619][T15316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.562631][T15316] R13: 0000000000000000 R14: 00007f133cdb5fa0 R15: 00007ffc38121768 [ 553.562665][T15316] [ 553.986078][T15325] FAULT_INJECTION: forcing a failure. [ 553.986078][T15325] name failslab, interval 1, probability 0, space 0, times 0 [ 554.098206][T15325] CPU: 0 UID: 0 PID: 15325 Comm: syz.3.3284 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 554.098237][T15325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 554.098250][T15325] Call Trace: [ 554.098258][T15325] [ 554.098267][T15325] dump_stack_lvl+0x189/0x250 [ 554.098306][T15325] ? __pfx____ratelimit+0x10/0x10 [ 554.098329][T15325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.098361][T15325] ? __pfx__printk+0x10/0x10 [ 554.098402][T15325] ? __pfx___might_resched+0x10/0x10 [ 554.098433][T15325] ? fs_reclaim_acquire+0x7d/0x100 [ 554.098467][T15325] should_fail_ex+0x414/0x560 [ 554.098502][T15325] should_failslab+0xa8/0x100 [ 554.098531][T15325] kmem_cache_alloc_noprof+0x73/0x3c0 [ 554.098553][T15325] ? alloc_empty_file+0x55/0x1d0 [ 554.098588][T15325] alloc_empty_file+0x55/0x1d0 [ 554.098619][T15325] alloc_file_pseudo+0x13d/0x210 [ 554.098653][T15325] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 554.098680][T15325] ? __local_bh_enable_ip+0x12d/0x1c0 [ 554.098729][T15325] anon_inode_getfile+0xc5/0x1a0 [ 554.098761][T15325] bpf_link_prime+0xfc/0x220 [ 554.098789][T15325] tcx_link_attach+0x20d/0x8a0 [ 554.098831][T15325] ? __pfx_tcx_link_attach+0x10/0x10 [ 554.098859][T15325] ? __fget_files+0x2a/0x420 [ 554.098890][T15325] ? __fget_files+0x3a0/0x420 [ 554.098915][T15325] ? __fget_files+0x2a/0x420 [ 554.098945][T15325] ? bpf_prog_attach_check_attach_type+0x1e5/0x540 [ 554.098984][T15325] link_create+0x38a/0x8a0 [ 554.099032][T15325] __sys_bpf+0x599/0x860 [ 554.099062][T15325] ? __pfx___sys_bpf+0x10/0x10 [ 554.099103][T15325] ? ksys_write+0x22a/0x250 [ 554.099128][T15325] ? __pfx_ksys_write+0x10/0x10 [ 554.099146][T15325] ? rcu_is_watching+0x15/0xb0 [ 554.099187][T15325] __x64_sys_bpf+0x7c/0x90 [ 554.099212][T15325] do_syscall_64+0xfa/0x3b0 [ 554.099232][T15325] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.099251][T15325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.099271][T15325] ? clear_bhb_loop+0x60/0xb0 [ 554.099297][T15325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.099315][T15325] RIP: 0033:0x7f5666f8e929 [ 554.099334][T15325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.099351][T15325] RSP: 002b:00007f5667d25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 554.099380][T15325] RAX: ffffffffffffffda RBX: 00007f56671b5fa0 RCX: 00007f5666f8e929 [ 554.099395][T15325] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 000000000000001c [ 554.099408][T15325] RBP: 00007f5667d25090 R08: 0000000000000000 R09: 0000000000000000 [ 554.099421][T15325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.099433][T15325] R13: 0000000000000000 R14: 00007f56671b5fa0 R15: 00007ffe5a6762a8 [ 554.099466][T15325] [ 554.159860][T15332] netlink: 'syz.1.3289': attribute type 10 has an invalid length. [ 554.640260][T15345] netlink: 'syz.4.3294': attribute type 13 has an invalid length. [ 554.648724][T15345] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3294'. [ 554.659969][T15345] netlink: 'syz.4.3294': attribute type 10 has an invalid length. [ 555.606585][T15377] veth1_macvtap: entered allmulticast mode [ 555.880497][T15386] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3310'. [ 555.913795][T15386] bridge_slave_0: entered allmulticast mode [ 556.074564][T15397] tap0: tun_chr_ioctl cmd 1074025677 [ 556.084602][T15397] tap0: linktype set to 823 [ 556.106077][T15397] tap0: tun_chr_ioctl cmd 1074025673 [ 556.668418][T15415] netlink: 'syz.2.3321': attribute type 14 has an invalid length. [ 557.202303][T15429] netlink: 'syz.4.3325': attribute type 39 has an invalid length. [ 557.315209][T15437] netlink: 'syz.2.3331': attribute type 2 has an invalid length. [ 557.669563][T15450] FAULT_INJECTION: forcing a failure. [ 557.669563][T15450] name failslab, interval 1, probability 0, space 0, times 0 [ 557.701383][T15450] CPU: 0 UID: 0 PID: 15450 Comm: syz.2.3337 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 557.701417][T15450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 557.701430][T15450] Call Trace: [ 557.701440][T15450] [ 557.701450][T15450] dump_stack_lvl+0x189/0x250 [ 557.701488][T15450] ? __pfx____ratelimit+0x10/0x10 [ 557.701510][T15450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.701543][T15450] ? __pfx__printk+0x10/0x10 [ 557.701569][T15450] ? __pfx___might_resched+0x10/0x10 [ 557.701602][T15450] ? fs_reclaim_acquire+0x7d/0x100 [ 557.701637][T15450] should_fail_ex+0x414/0x560 [ 557.701672][T15450] should_failslab+0xa8/0x100 [ 557.701701][T15450] kmem_cache_alloc_noprof+0x73/0x3c0 [ 557.701723][T15450] ? security_file_alloc+0x34/0x330 [ 557.701755][T15450] security_file_alloc+0x34/0x330 [ 557.701782][T15450] init_file+0x93/0x2f0 [ 557.701816][T15450] alloc_empty_file+0x6e/0x1d0 [ 557.701847][T15450] alloc_file_pseudo+0x13d/0x210 [ 557.701881][T15450] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 557.701909][T15450] ? __local_bh_enable_ip+0x12d/0x1c0 [ 557.701958][T15450] anon_inode_getfile+0xc5/0x1a0 [ 557.701989][T15450] bpf_link_prime+0xfc/0x220 [ 557.702018][T15450] tcx_link_attach+0x20d/0x8a0 [ 557.702060][T15450] ? __pfx_tcx_link_attach+0x10/0x10 [ 557.702088][T15450] ? __fget_files+0x2a/0x420 [ 557.702138][T15450] ? __fget_files+0x3a0/0x420 [ 557.702163][T15450] ? __fget_files+0x2a/0x420 [ 557.702194][T15450] ? bpf_prog_attach_check_attach_type+0x1e5/0x540 [ 557.702233][T15450] link_create+0x38a/0x8a0 [ 557.702270][T15450] __sys_bpf+0x599/0x860 [ 557.702301][T15450] ? __pfx___sys_bpf+0x10/0x10 [ 557.702344][T15450] ? ksys_write+0x22a/0x250 [ 557.702370][T15450] ? __pfx_ksys_write+0x10/0x10 [ 557.702389][T15450] ? rcu_is_watching+0x15/0xb0 [ 557.702432][T15450] __x64_sys_bpf+0x7c/0x90 [ 557.702459][T15450] do_syscall_64+0xfa/0x3b0 [ 557.702479][T15450] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.702499][T15450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.702520][T15450] ? clear_bhb_loop+0x60/0xb0 [ 557.702547][T15450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.702567][T15450] RIP: 0033:0x7fb68058e929 [ 557.702587][T15450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.702605][T15450] RSP: 002b:00007fb68144e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 557.702628][T15450] RAX: ffffffffffffffda RBX: 00007fb6807b5fa0 RCX: 00007fb68058e929 [ 557.702644][T15450] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 000000000000001c [ 557.702657][T15450] RBP: 00007fb68144e090 R08: 0000000000000000 R09: 0000000000000000 [ 557.702670][T15450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.702683][T15450] R13: 0000000000000000 R14: 00007fb6807b5fa0 R15: 00007ffcf9959378 [ 557.702717][T15450] [ 557.706595][T15447] netlink: 'syz.4.3336': attribute type 29 has an invalid length. [ 558.095349][T15456] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3339'. [ 558.102887][T15452] netlink: 'syz.1.3338': attribute type 10 has an invalid length. [ 558.153586][T15447] netlink: 'syz.4.3336': attribute type 10 has an invalid length. [ 558.266540][T15456] ------------[ cut here ]------------ [ 558.272282][T15456] verifier bug: expected array map for tail call(1) [ 558.308471][T15456] WARNING: CPU: 1 PID: 15456 at kernel/bpf/verifier.c:11084 record_func_key+0x2d6/0x490 [ 558.323729][T15456] Modules linked in: [ 558.331010][T15456] CPU: 1 UID: 0 PID: 15456 Comm: syz.0.3339 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 558.342880][T15456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 558.353343][T15456] RIP: 0010:record_func_key+0x2d6/0x490 [ 558.364576][T15456] Code: 09 cc e8 cd 64 e3 ff 80 3d 78 15 ae 0d 01 74 ba e8 bf 64 e3 ff c6 05 6a 15 ae 0d 01 90 48 c7 c7 e0 e3 91 8b e8 bb 07 a7 ff 90 <0f> 0b 90 90 eb 9f e8 9f 64 e3 ff eb 05 e8 98 64 e3 ff 48 8b 5c 24 [ 558.384784][T15456] RSP: 0018:ffffc9001bf6ec70 EFLAGS: 00010246 [ 558.391133][T15456] RAX: a59fd94d9ec12100 RBX: dffffc0000000000 RCX: 0000000000080000 [ 558.399369][T15456] RDX: ffffc9000bd8b000 RSI: 000000000002833f RDI: 0000000000028340 [ 558.407652][T15456] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 558.423130][T15456] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888028263000 [ 558.434527][T15456] R13: ffff888075fc6000 R14: ffff888056ae8000 R15: 1ffff1100ad5d006 [ 558.443074][T15456] FS: 00007f2f20b786c0(0000) GS:ffff888125d4d000(0000) knlGS:0000000000000000 [ 558.452254][T15456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.459064][T15456] CR2: 00007f1b6cf39950 CR3: 000000007abf6000 CR4: 00000000003526f0 [ 558.467165][T15456] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 558.475649][T15456] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 558.483891][T15456] Call Trace: [ 558.487382][T15456] [ 558.490506][T15456] check_helper_call+0x2fb8/0x6b60 [ 558.496008][T15456] ? __pfx_check_helper_call+0x10/0x10 [ 558.501891][T15456] ? __up_read+0x280/0x680 [ 558.506550][T15456] ? bpf_prog_offload_verify_insn+0x10a/0x120 [ 558.512962][T15456] ? bpf_prog_offload_verify_insn+0x10a/0x120 [ 558.524218][T15456] do_check+0x95ec/0xe080 [ 558.531893][T15456] ? unwind_get_return_address+0x4d/0x90 [ 558.537801][T15456] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 558.544499][T15456] ? bpf_prog_load+0x1318/0x1930 [ 558.549782][T15456] ? __x64_sys_bpf+0x7c/0x90 [ 558.554501][T15456] ? do_syscall_64+0xfa/0x3b0 [ 558.559756][T15456] ? __pfx_do_check+0x10/0x10 [ 558.564703][T15456] ? __pfx_verbose+0x10/0x10 [ 558.569526][T15456] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 558.575137][T15456] ? __asan_memset+0x22/0x50 [ 558.580001][T15456] ? init_func_state+0x1ddf/0x2d20 [ 558.585383][T15456] do_check_common+0x188f/0x23f0 [ 558.590817][T15456] bpf_check+0x10252/0x1a5d0 [ 558.595570][T15456] ? __perf_event_account_interrupt+0x179/0x250 [ 558.602133][T15456] ? __perf_event_overflow+0x8c1/0xe10 [ 558.607956][T15456] ? __pfx___perf_event_overflow+0x10/0x10 [ 558.613996][T15456] ? __pfx_perf_tp_event+0x10/0x10 [ 558.624412][T15456] ? perf_swevent_event+0x2f4/0x5e0 [ 558.632994][T15456] ? __pfx_perf_swevent_event+0x10/0x10 [ 558.638837][T15456] ? perf_swevent_event+0x2f4/0x5e0 [ 558.644264][T15456] ? perf_tp_event+0x664/0x1380 [ 558.649628][T15456] ? __pfx_perf_tp_event+0x10/0x10 [ 558.654907][T15456] ? perf_tp_event+0x664/0x1380 [ 558.660133][T15456] ? lock_release+0x3b2/0x3e0 [ 558.665044][T15456] ? __pfx_bpf_check+0x10/0x10 [ 558.670348][T15456] ? rhashtable_lookup_fast+0xce/0x7e0 [ 558.676461][T15456] ? perf_trace_run_bpf_submit+0xee/0x170 [ 558.682649][T15456] ? perf_trace_lock+0x2f8/0x3b0 [ 558.701705][T15456] ? __pfx_perf_trace_lock+0x10/0x10 [ 558.707652][T15456] ? ktime_get_with_offset+0x8c/0x2a0 [ 558.713507][T15456] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 558.728320][T15456] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.733836][T15456] ? ktime_get_with_offset+0x8c/0x2a0 [ 558.739583][T15456] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 558.746172][T15456] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 558.753609][T15456] ? bpf_obj_name_cpy+0x194/0x1e0 [ 558.759068][T15456] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 558.764469][T15456] ? security_bpf_prog_load+0x7f/0x310 [ 558.770581][T15456] bpf_prog_load+0x1318/0x1930 [ 558.776096][T15456] ? __pfx_bpf_prog_load+0x10/0x10 [ 558.781617][T15456] ? __pfx_perf_trace_lock+0x10/0x10 [ 558.788015][T15456] ? bpf_lsm_bpf+0x9/0x20 [ 558.792507][T15456] ? security_bpf+0x7e/0x300 [ 558.797596][T15456] __sys_bpf+0x5f1/0x860 [ 558.802220][T15456] ? __pfx___sys_bpf+0x10/0x10 [ 558.808154][T15456] ? rcu_is_watching+0x15/0xb0 [ 558.813488][T15456] __x64_sys_bpf+0x7c/0x90 [ 558.818428][T15456] do_syscall_64+0xfa/0x3b0 [ 558.831400][T15456] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.836885][T15456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.843320][T15456] ? clear_bhb_loop+0x60/0xb0 [ 558.848476][T15456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.854572][T15456] RIP: 0033:0x7f2f1fd8e929 [ 558.859301][T15456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.879341][T15456] RSP: 002b:00007f2f20b78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 558.888023][T15456] RAX: ffffffffffffffda RBX: 00007f2f1ffb5fa0 RCX: 00007f2f1fd8e929 [ 558.896057][T15456] RDX: 0000000000000094 RSI: 00002000000008c0 RDI: 0000000000000005 [ 558.904152][T15456] RBP: 00007f2f1fe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 558.912265][T15456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.920936][T15456] R13: 0000000000000000 R14: 00007f2f1ffb5fa0 R15: 00007fff1bc0d3d8 [ 558.929122][T15456] [ 558.933014][T15456] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 558.940341][T15456] CPU: 1 UID: 0 PID: 15456 Comm: syz.0.3339 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 558.951997][T15456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 558.962071][T15456] Call Trace: [ 558.965374][T15456] [ 558.968326][T15456] dump_stack_lvl+0x99/0x250 [ 558.972949][T15456] ? __asan_memcpy+0x40/0x70 [ 558.977567][T15456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.982800][T15456] ? __pfx__printk+0x10/0x10 [ 558.987434][T15456] panic+0x2db/0x790 [ 558.991378][T15456] ? __pfx_panic+0x10/0x10 [ 558.995840][T15456] __warn+0x31b/0x4b0 [ 558.999851][T15456] ? record_func_key+0x2d6/0x490 [ 559.004821][T15456] ? record_func_key+0x2d6/0x490 [ 559.009793][T15456] report_bug+0x2be/0x4f0 [ 559.014158][T15456] ? record_func_key+0x2d6/0x490 [ 559.019124][T15456] ? record_func_key+0x2d6/0x490 [ 559.024111][T15456] ? record_func_key+0x2d8/0x490 [ 559.029093][T15456] handle_bug+0x84/0x160 [ 559.033366][T15456] exc_invalid_op+0x1a/0x50 [ 559.037906][T15456] asm_exc_invalid_op+0x1a/0x20 [ 559.042790][T15456] RIP: 0010:record_func_key+0x2d6/0x490 [ 559.048365][T15456] Code: 09 cc e8 cd 64 e3 ff 80 3d 78 15 ae 0d 01 74 ba e8 bf 64 e3 ff c6 05 6a 15 ae 0d 01 90 48 c7 c7 e0 e3 91 8b e8 bb 07 a7 ff 90 <0f> 0b 90 90 eb 9f e8 9f 64 e3 ff eb 05 e8 98 64 e3 ff 48 8b 5c 24 [ 559.067990][T15456] RSP: 0018:ffffc9001bf6ec70 EFLAGS: 00010246 [ 559.074087][T15456] RAX: a59fd94d9ec12100 RBX: dffffc0000000000 RCX: 0000000000080000 [ 559.082081][T15456] RDX: ffffc9000bd8b000 RSI: 000000000002833f RDI: 0000000000028340 [ 559.090158][T15456] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 559.098159][T15456] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888028263000 [ 559.106209][T15456] R13: ffff888075fc6000 R14: ffff888056ae8000 R15: 1ffff1100ad5d006 [ 559.114245][T15456] check_helper_call+0x2fb8/0x6b60 [ 559.119416][T15456] ? __pfx_check_helper_call+0x10/0x10 [ 559.124900][T15456] ? __up_read+0x280/0x680 [ 559.129357][T15456] ? bpf_prog_offload_verify_insn+0x10a/0x120 [ 559.135468][T15456] ? bpf_prog_offload_verify_insn+0x10a/0x120 [ 559.141568][T15456] do_check+0x95ec/0xe080 [ 559.145925][T15456] ? unwind_get_return_address+0x4d/0x90 [ 559.151588][T15456] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 559.157802][T15456] ? bpf_prog_load+0x1318/0x1930 [ 559.162769][T15456] ? __x64_sys_bpf+0x7c/0x90 [ 559.167377][T15456] ? do_syscall_64+0xfa/0x3b0 [ 559.172121][T15456] ? __pfx_do_check+0x10/0x10 [ 559.176836][T15456] ? __pfx_verbose+0x10/0x10 [ 559.181440][T15456] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 559.186918][T15456] ? __asan_memset+0x22/0x50 [ 559.191549][T15456] ? init_func_state+0x1ddf/0x2d20 [ 559.196699][T15456] do_check_common+0x188f/0x23f0 [ 559.201683][T15456] bpf_check+0x10252/0x1a5d0 [ 559.206330][T15456] ? __perf_event_account_interrupt+0x179/0x250 [ 559.212602][T15456] ? __perf_event_overflow+0x8c1/0xe10 [ 559.218097][T15456] ? __pfx___perf_event_overflow+0x10/0x10 [ 559.223943][T15456] ? __pfx_perf_tp_event+0x10/0x10 [ 559.229103][T15456] ? perf_swevent_event+0x2f4/0x5e0 [ 559.234360][T15456] ? __pfx_perf_swevent_event+0x10/0x10 [ 559.239960][T15456] ? perf_swevent_event+0x2f4/0x5e0 [ 559.245196][T15456] ? perf_tp_event+0x664/0x1380 [ 559.250106][T15456] ? __pfx_perf_tp_event+0x10/0x10 [ 559.255255][T15456] ? perf_tp_event+0x664/0x1380 [ 559.260140][T15456] ? lock_release+0x3b2/0x3e0 [ 559.264852][T15456] ? __pfx_bpf_check+0x10/0x10 [ 559.269749][T15456] ? rhashtable_lookup_fast+0xce/0x7e0 [ 559.275504][T15456] ? perf_trace_run_bpf_submit+0xee/0x170 [ 559.281260][T15456] ? perf_trace_lock+0x2f8/0x3b0 [ 559.286234][T15456] ? __pfx_perf_trace_lock+0x10/0x10 [ 559.291559][T15456] ? ktime_get_with_offset+0x8c/0x2a0 [ 559.296963][T15456] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 559.303228][T15456] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.308445][T15456] ? ktime_get_with_offset+0x8c/0x2a0 [ 559.313837][T15456] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 559.320099][T15456] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 559.326817][T15456] ? bpf_obj_name_cpy+0x194/0x1e0 [ 559.331868][T15456] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 559.337090][T15456] ? security_bpf_prog_load+0x7f/0x310 [ 559.342589][T15456] bpf_prog_load+0x1318/0x1930 [ 559.347426][T15456] ? __pfx_bpf_prog_load+0x10/0x10 [ 559.352567][T15456] ? __pfx_perf_trace_lock+0x10/0x10 [ 559.357951][T15456] ? bpf_lsm_bpf+0x9/0x20 [ 559.362314][T15456] ? security_bpf+0x7e/0x300 [ 559.366958][T15456] __sys_bpf+0x5f1/0x860 [ 559.371243][T15456] ? __pfx___sys_bpf+0x10/0x10 [ 559.376056][T15456] ? rcu_is_watching+0x15/0xb0 [ 559.380858][T15456] __x64_sys_bpf+0x7c/0x90 [ 559.385305][T15456] do_syscall_64+0xfa/0x3b0 [ 559.389832][T15456] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.395049][T15456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.401479][T15456] ? clear_bhb_loop+0x60/0xb0 [ 559.406177][T15456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.412087][T15456] RIP: 0033:0x7f2f1fd8e929 [ 559.416522][T15456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.436168][T15456] RSP: 002b:00007f2f20b78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 559.444667][T15456] RAX: ffffffffffffffda RBX: 00007f2f1ffb5fa0 RCX: 00007f2f1fd8e929 [ 559.452693][T15456] RDX: 0000000000000094 RSI: 00002000000008c0 RDI: 0000000000000005 [ 559.460690][T15456] RBP: 00007f2f1fe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 559.468686][T15456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.476673][T15456] R13: 0000000000000000 R14: 00007f2f1ffb5fa0 R15: 00007fff1bc0d3d8 [ 559.484688][T15456] [ 559.488105][T15456] Kernel Offset: disabled [ 559.492466][T15456] Rebooting in 86400 seconds..