last executing test programs: 9.580344389s ago: executing program 3 (id=2389): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x314}, 0x200088d0) 9.459211195s ago: executing program 3 (id=2393): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)=""/4111, 0x100f}, {&(0x7f0000001a40)=""/4074, 0xfea}, {&(0x7f0000002a40)=""/235, 0xeb}, {&(0x7f0000000280)=""/199, 0xc7}, {&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f00000001c0)=""/131, 0x83}], 0x6}, 0x40000000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 9.328112301s ago: executing program 3 (id=2399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x10001, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x10, 0x9, 0x7d, 0x5}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 9.12430636s ago: executing program 3 (id=2406): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0x80000c}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x404c, 0x1ff, 0x4, 0x4, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="09000000170000000800000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r0}, 0x38) 9.12394868s ago: executing program 4 (id=2407): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) 8.306505489s ago: executing program 3 (id=2415): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040), 0x3b) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007000000000000001b000000a50000000e00000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0xa, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) 8.109125448s ago: executing program 4 (id=2416): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@s, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.05839593s ago: executing program 3 (id=2417): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x81) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20000a00, &(0x7f0000000240)="38fb9ebb2128bbcb287bc5a98b2f56cddc4469933b361aabab71a2dd8f39fa4d6c207a883b7c776f1269", 0x2a, &(0x7f0000000300), &(0x7f0000000340), 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8920, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) 6.872284636s ago: executing program 4 (id=2423): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0xd44d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc, 0x80, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 5.783713128s ago: executing program 4 (id=2426): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0xfe, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xd}, 0x104001, 0xc8, 0x0, 0x5, 0x6}, 0x0, 0xc, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800f3fe"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 5.630439545s ago: executing program 4 (id=2428): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 4.931203418s ago: executing program 4 (id=2435): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="0080000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x2b, 0xa, 0x80000000, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.070039026s ago: executing program 0 (id=2444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000900)={r0, &(0x7f00000007c0), &(0x7f00000008c0)=""/61}, 0x20) 2.685957594s ago: executing program 0 (id=2446): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu>-0||!') bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x149941, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000380)=r6) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.141555439s ago: executing program 1 (id=2447): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.072930203s ago: executing program 0 (id=2448): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_config_ext={0x4, 0x40}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x2000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) 1.819704585s ago: executing program 2 (id=2450): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfff, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000006c0)="65bb62e3371d2649bd75b49ecbaf38eee42a8a803343e8db9e3b55f867eb2556eee0dbefb32722d78229f04d917cf37d1e592e028d9fe1cc8f7106df0ffc9b2a91a7be") write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2e) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x86e46, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x0, 0x8, 0x80, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x5, 0xffffffffffffffff, 0x3) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x4e7c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r4}, 0x38) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) 1.5074704s ago: executing program 1 (id=2451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.387127015s ago: executing program 2 (id=2452): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xffffffffffffffbd) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x95, 0x1, 0x2, 0x0, 0x1fc00000000, 0x0, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0xa, 0x6, 0x6, 0x7, 0xecd, 0x401, 0x1, 0x0, 0x188, 0x0, 0xa}, r2, 0xe, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000340)='.d\x00\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 1.386252565s ago: executing program 1 (id=2453): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffdf) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 1.026454692s ago: executing program 2 (id=2454): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x3) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8941, &(0x7f0000000080)) 912.459847ms ago: executing program 2 (id=2455): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xffdd) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 874.67026ms ago: executing program 0 (id=2456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 772.240254ms ago: executing program 0 (id=2457): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000010000000000000000000000711813000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 753.596625ms ago: executing program 0 (id=2458): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x81) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={0xffffffffffffffff, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8920, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 728.990296ms ago: executing program 1 (id=2459): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea684533dc6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0731c4b839688b22c4da2a6bc4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) 530.003176ms ago: executing program 2 (id=2460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0xc}, 0x1000, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 375.559233ms ago: executing program 1 (id=2461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 137.906264ms ago: executing program 1 (id=2462): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x82200, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000100)=r6) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03400ebc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 0s ago: executing program 2 (id=2463): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_bp={0x0, 0xa}, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0xff, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0xfff, 0x6}, 0x401, 0xc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 09] netlink: 'syz.3.275': attribute type 10 has an invalid length. [ 106.235785][ T5209] __nla_validate_parse: 3 callbacks suppressed [ 106.235826][ T5209] netlink: 40 bytes leftover after parsing attributes in process `syz.3.275'. [ 106.313944][ T5209] batman_adv: batadv0: Adding interface: virt_wifi0 [ 106.331218][ T5209] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.453494][ T5209] batman_adv: batadv0: Interface activated: virt_wifi0 [ 106.486373][ T5217] netlink: 'syz.2.280': attribute type 40 has an invalid length. [ 106.588154][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.674844][ T5238] pimreg: tun_chr_ioctl cmd 1074812118 [ 106.704858][ T5239] netlink: 132 bytes leftover after parsing attributes in process `syz.1.284'. [ 106.761121][ T5246] pimreg: tun_chr_ioctl cmd 1074812118 [ 106.824157][ T5245] pimreg: tun_chr_ioctl cmd 1074025673 [ 106.846295][ T5229] delete_channel: no stack [ 107.072448][ T5229] delete_channel: no stack [ 107.310102][ T5273] netlink: 132 bytes leftover after parsing attributes in process `syz.0.295'. [ 108.018026][ T5310] validate_nla: 1 callbacks suppressed [ 108.018069][ T5310] netlink: 'syz.3.306': attribute type 2 has an invalid length. [ 108.087776][ T5311] netlink: 'syz.1.308': attribute type 29 has an invalid length. [ 108.108012][ T5310] netlink: 'syz.3.306': attribute type 8 has an invalid length. [ 108.127116][ T5315] netlink: 'syz.4.307': attribute type 3 has an invalid length. [ 108.145161][ T5310] netlink: 132 bytes leftover after parsing attributes in process `syz.3.306'. [ 108.161949][ T5315] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.307'. [ 108.253506][ T5313] netlink: 'syz.3.306': attribute type 2 has an invalid length. [ 108.261187][ T5313] netlink: 'syz.3.306': attribute type 8 has an invalid length. [ 108.290422][ T5313] netlink: 132 bytes leftover after parsing attributes in process `syz.3.306'. [ 108.316491][ T5311] netlink: 'syz.1.308': attribute type 29 has an invalid length. [ 108.364429][ T5319] netlink: 'syz.4.307': attribute type 17 has an invalid length. [ 108.391011][ T5319] netlink: 'syz.4.307': attribute type 16 has an invalid length. [ 108.402786][ T5319] netlink: 152 bytes leftover after parsing attributes in process `syz.4.307'. [ 108.446757][ T5317] netlink: 'syz.1.308': attribute type 29 has an invalid length. [ 110.035692][ T5373] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.326'. [ 110.858775][ T5411] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.338'. [ 111.092365][ T5420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.167823][ T5420] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 111.280874][ T5424] netlink: 152 bytes leftover after parsing attributes in process `syz.3.345'. [ 111.346246][ T5430] device macsec0 entered promiscuous mode [ 111.547497][ T5447] netlink: 198628 bytes leftover after parsing attributes in process `syz.0.349'. [ 112.008991][ T5460] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.352'. [ 112.156765][ T5457] netlink: 152 bytes leftover after parsing attributes in process `syz.3.352'. [ 112.646530][ T5479] netlink: 108 bytes leftover after parsing attributes in process `syz.2.361'. [ 113.048407][ T5497] sctp: [Deprecated]: syz.1.366 (pid 5497) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.048407][ T5497] Use struct sctp_sack_info instead [ 113.221328][ T5503] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.368'. [ 113.456823][ T5522] validate_nla: 12 callbacks suppressed [ 113.456856][ T5522] netlink: 'syz.4.375': attribute type 29 has an invalid length. [ 113.460361][ T5513] netlink: 'syz.3.373': attribute type 2 has an invalid length. [ 113.528709][ T5522] netlink: 'syz.4.375': attribute type 29 has an invalid length. [ 113.556414][ T5513] netlink: 171236 bytes leftover after parsing attributes in process `syz.3.373'. [ 113.557014][ T5524] netlink: 'syz.4.375': attribute type 29 has an invalid length. [ 114.099745][ T5553] netlink: 'syz.4.386': attribute type 25 has an invalid length. [ 114.114902][ T5553] netlink: 'syz.4.386': attribute type 29 has an invalid length. [ 115.112187][ T5598] netlink: 'syz.2.396': attribute type 7 has an invalid length. [ 115.183519][ T5598] netlink: 140 bytes leftover after parsing attributes in process `syz.2.396'. [ 115.224445][ T5606] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.396'. [ 115.600922][ T5623] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.404'. [ 115.744326][ T5620] netlink: 'syz.2.403': attribute type 25 has an invalid length. [ 115.752228][ T5620] netlink: 'syz.2.403': attribute type 29 has an invalid length. [ 115.770647][ T5626] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 115.968183][ T5630] netlink: 'syz.1.407': attribute type 29 has an invalid length. [ 116.403296][ T5657] __nla_validate_parse: 1 callbacks suppressed [ 116.403310][ T5657] netlink: 132 bytes leftover after parsing attributes in process `syz.1.414'. [ 116.459675][ T5667] netlink: 152 bytes leftover after parsing attributes in process `syz.2.416'. [ 118.557297][ T5716] netlink: 144 bytes leftover after parsing attributes in process `syz.3.432'. [ 118.662606][ T5725] netlink: 40 bytes leftover after parsing attributes in process `syz.4.435'. [ 118.692652][ T5725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 118.945103][ T5732] validate_nla: 5 callbacks suppressed [ 118.945149][ T5732] netlink: 'syz.1.436': attribute type 25 has an invalid length. [ 118.972659][ T5732] netlink: 'syz.1.436': attribute type 29 has an invalid length. [ 119.855760][ T5758] netlink: 'syz.4.457': attribute type 10 has an invalid length. [ 119.890075][ T5758] netlink: 2 bytes leftover after parsing attributes in process `syz.4.457'. [ 119.925995][ T5758] device hsr0 entered promiscuous mode [ 119.986051][ T5758] bridge0: port 3(hsr0) entered blocking state [ 120.026343][ T5758] bridge0: port 3(hsr0) entered disabled state [ 120.051176][ T5758] bridge0: port 3(hsr0) entered blocking state [ 120.058266][ T5758] bridge0: port 3(hsr0) entered listening state [ 120.380896][ T5790] netlink: 'syz.2.454': attribute type 21 has an invalid length. [ 120.657151][ T5796] netlink: 'syz.4.456': attribute type 25 has an invalid length. [ 120.674208][ T5796] netlink: 'syz.4.456': attribute type 29 has an invalid length. [ 120.924560][ T5801] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.458'. [ 120.961571][ T5801] openvswitch: netlink: Message has 20476 unknown bytes. [ 121.186082][ T5812] netlink: 'syz.4.462': attribute type 10 has an invalid length. [ 121.632642][ T5832] netlink: 'syz.0.469': attribute type 25 has an invalid length. [ 121.665412][ T5832] netlink: 'syz.0.469': attribute type 29 has an invalid length. [ 121.716224][ T5839] netlink: 'syz.4.472': attribute type 25 has an invalid length. [ 122.245135][ T5863] netlink: 55 bytes leftover after parsing attributes in process `syz.0.478'. [ 123.717464][ T5878] netlink: 40 bytes leftover after parsing attributes in process `syz.2.482'. [ 123.760595][ T5878] device dummy0 entered promiscuous mode [ 123.831554][ T5878] bond0: (slave dummy0): Releasing backup interface [ 123.880364][ T5878] bridge0: port 3(dummy0) entered blocking state [ 123.903430][ T5878] bridge0: port 3(dummy0) entered disabled state [ 123.997460][ T5890] validate_nla: 3 callbacks suppressed [ 123.997476][ T5890] netlink: 'syz.4.486': attribute type 25 has an invalid length. [ 124.037257][ T5899] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.487'. [ 124.109680][ T5890] netlink: 'syz.4.486': attribute type 29 has an invalid length. [ 124.139870][ T5903] delete_channel: no stack [ 124.306230][ T5911] netlink: 'syz.3.491': attribute type 22 has an invalid length. [ 124.345482][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.491'. [ 124.432954][ T5918] netlink: 'syz.0.492': attribute type 10 has an invalid length. [ 124.456225][ T5918] device veth0_macvtap left promiscuous mode [ 124.577489][ T5911] mac80211_hwsim hwsim7 : renamed from wlan0 [ 124.749533][ T5930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.500'. [ 125.154620][ T5944] netlink: 'syz.4.504': attribute type 25 has an invalid length. [ 125.182286][ T5944] netlink: 'syz.4.504': attribute type 29 has an invalid length. [ 125.358296][ T5961] netlink: 'syz.0.519': attribute type 10 has an invalid length. [ 125.399083][ T5961] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.519'. [ 125.449138][ T5961] openvswitch: netlink: Flow key attr not present in new flow. [ 125.701427][ T5970] netlink: 'syz.0.523': attribute type 10 has an invalid length. [ 125.771711][ T5970] netlink: 40 bytes leftover after parsing attributes in process `syz.0.523'. [ 125.826897][ T5970] bridge0: port 3(dummy0) entered disabled state [ 125.837716][ T5981] netlink: 'syz.0.523': attribute type 10 has an invalid length. [ 125.898716][ T5981] netlink: 162264 bytes leftover after parsing attributes in process `syz.0.523'. [ 125.941605][ T5981] openvswitch: netlink: Flow key attr not present in new flow. [ 125.959550][ T5970] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 126.063037][ T5988] netlink: 'syz.2.513': attribute type 10 has an invalid length. [ 126.189193][ T5988] device veth0_macvtap left promiscuous mode [ 126.326281][ T6001] FAULT_INJECTION: forcing a failure. [ 126.326281][ T6001] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 126.355588][ T6001] CPU: 0 PID: 6001 Comm: syz.1.522 Not tainted syzkaller #0 [ 126.362917][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.372998][ T6001] Call Trace: [ 126.376286][ T6001] [ 126.379222][ T6001] dump_stack_lvl+0x188/0x250 [ 126.383926][ T6001] ? show_regs_print_info+0x20/0x20 [ 126.389133][ T6001] ? load_image+0x410/0x410 [ 126.393661][ T6001] ? __lock_acquire+0x7b50/0x7b50 [ 126.398709][ T6001] should_fail+0x383/0x4b0 [ 126.403142][ T6001] _copy_from_user+0x2e/0x170 [ 126.407830][ T6001] __copy_msghdr_from_user+0xc9/0x630 [ 126.413210][ T6001] ? verify_lock_unused+0x140/0x140 [ 126.418416][ T6001] ? mark_lock+0x94/0x320 [ 126.422753][ T6001] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 126.428068][ T6001] ___sys_sendmsg+0x19a/0x2e0 [ 126.432767][ T6001] ? __sys_sendmsg+0x290/0x290 [ 126.437563][ T6001] ? trace_event_raw_event_lock+0x250/0x250 [ 126.443492][ T6001] __se_sys_sendmsg+0x1b7/0x2a0 [ 126.448360][ T6001] ? __x64_sys_sendmsg+0x80/0x80 [ 126.453306][ T6001] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 126.459311][ T6001] ? lockdep_hardirqs_on+0x94/0x140 [ 126.464527][ T6001] do_syscall_64+0x4c/0xa0 [ 126.468950][ T6001] ? clear_bhb_loop+0x30/0x80 [ 126.473633][ T6001] ? clear_bhb_loop+0x30/0x80 [ 126.478327][ T6001] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.484243][ T6001] RIP: 0033:0x7f724cb29159 [ 126.488667][ T6001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.508286][ T6001] RSP: 002b:00007f724ad81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.516722][ T6001] RAX: ffffffffffffffda RBX: 00007f724cdb0fa0 RCX: 00007f724cb29159 [ 126.524708][ T6001] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 126.532695][ T6001] RBP: 00007f724ad81090 R08: 0000000000000000 R09: 0000000000000000 [ 126.540680][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.548669][ T6001] R13: 00007f724cdb1038 R14: 00007f724cdb0fa0 R15: 00007ffd8d2f73c8 [ 126.556675][ T6001] [ 126.990920][ T6013] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.528'. [ 127.053611][ T6013] openvswitch: netlink: Flow key attr not present in new flow. [ 128.015666][ T6041] device veth0_macvtap left promiscuous mode [ 128.146700][ T6046] FAULT_INJECTION: forcing a failure. [ 128.146700][ T6046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.205991][ T6046] CPU: 1 PID: 6046 Comm: syz.4.538 Not tainted syzkaller #0 [ 128.213325][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.223387][ T6046] Call Trace: [ 128.226673][ T6046] [ 128.229606][ T6046] dump_stack_lvl+0x188/0x250 [ 128.234292][ T6046] ? show_regs_print_info+0x20/0x20 [ 128.239492][ T6046] ? load_image+0x410/0x410 [ 128.243986][ T6046] ? __lock_acquire+0x7b50/0x7b50 [ 128.249009][ T6046] should_fail+0x383/0x4b0 [ 128.253438][ T6046] _copy_from_user+0x2e/0x170 [ 128.258100][ T6046] iovec_from_user+0x142/0x370 [ 128.262847][ T6046] __import_iovec+0x70/0x490 [ 128.267421][ T6046] ? __lock_acquire+0x13dc/0x7b50 [ 128.272437][ T6046] import_iovec+0x6f/0xa0 [ 128.276752][ T6046] ___sys_sendmsg+0x1fd/0x2e0 [ 128.281417][ T6046] ? __sys_sendmsg+0x290/0x290 [ 128.286186][ T6046] __se_sys_sendmsg+0x1b7/0x2a0 [ 128.291024][ T6046] ? __x64_sys_sendmsg+0x80/0x80 [ 128.295945][ T6046] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 128.301919][ T6046] ? lockdep_hardirqs_on+0x94/0x140 [ 128.307103][ T6046] do_syscall_64+0x4c/0xa0 [ 128.311502][ T6046] ? clear_bhb_loop+0x30/0x80 [ 128.316162][ T6046] ? clear_bhb_loop+0x30/0x80 [ 128.320820][ T6046] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.326699][ T6046] RIP: 0033:0x7f180953e159 [ 128.331103][ T6046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.350690][ T6046] RSP: 002b:00007f1807796028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.359091][ T6046] RAX: ffffffffffffffda RBX: 00007f18097c5fa0 RCX: 00007f180953e159 [ 128.367049][ T6046] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 128.375003][ T6046] RBP: 00007f1807796090 R08: 0000000000000000 R09: 0000000000000000 [ 128.382956][ T6046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.390908][ T6046] R13: 00007f18097c6038 R14: 00007f18097c5fa0 R15: 00007ffe795d0cd8 [ 128.398874][ T6046] [ 131.122967][ T6064] validate_nla: 9 callbacks suppressed [ 131.122985][ T6064] netlink: 'syz.1.544': attribute type 10 has an invalid length. [ 131.159979][ T6064] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.544'. [ 131.183813][ T6064] openvswitch: netlink: Flow key attr not present in new flow. [ 131.396150][ T6075] netlink: 'syz.4.550': attribute type 25 has an invalid length. [ 131.412491][ T6075] netlink: 'syz.4.550': attribute type 29 has an invalid length. [ 131.434349][ T6079] netlink: 5 bytes leftover after parsing attributes in process `syz.2.551'. [ 131.452055][ T6087] FAULT_INJECTION: forcing a failure. [ 131.452055][ T6087] name failslab, interval 1, probability 0, space 0, times 1 [ 131.507658][ T6087] CPU: 0 PID: 6087 Comm: syz.1.553 Not tainted syzkaller #0 [ 131.514996][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.525056][ T6087] Call Trace: [ 131.528337][ T6087] [ 131.531261][ T6087] dump_stack_lvl+0x188/0x250 [ 131.535931][ T6087] ? show_regs_print_info+0x20/0x20 [ 131.541114][ T6087] ? load_image+0x410/0x410 [ 131.545604][ T6087] ? __might_sleep+0xf0/0xf0 [ 131.550178][ T6087] ? __lock_acquire+0x7b50/0x7b50 [ 131.555193][ T6087] ? __local_bh_enable_ip+0x136/0x1c0 [ 131.560553][ T6087] should_fail+0x383/0x4b0 [ 131.564962][ T6087] should_failslab+0x5/0x20 [ 131.569447][ T6087] slab_pre_alloc_hook+0x51/0xc0 [ 131.574373][ T6087] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 131.580075][ T6087] ? __get_vm_area_node+0x119/0x2d0 [ 131.585266][ T6087] __get_vm_area_node+0x119/0x2d0 [ 131.590282][ T6087] __vmalloc_node_range+0xef/0x8b0 [ 131.595377][ T6087] ? netlink_sendmsg+0x5ec/0xbe0 [ 131.600299][ T6087] ? netlink_data_ready+0x10/0x10 [ 131.605314][ T6087] ? netlink_sendmsg+0x5ec/0xbe0 [ 131.610231][ T6087] vmalloc+0x75/0x80 [ 131.614111][ T6087] ? netlink_sendmsg+0x5ec/0xbe0 [ 131.619029][ T6087] netlink_sendmsg+0x5ec/0xbe0 [ 131.623781][ T6087] ? netlink_getsockopt+0x570/0x570 [ 131.628958][ T6087] ? aa_sock_msg_perm+0x94/0x150 [ 131.633882][ T6087] ? apparmor_socket_sendmsg+0x88/0x230 [ 131.639409][ T6087] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 131.644678][ T6087] ? security_socket_sendmsg+0x7c/0xa0 [ 131.650119][ T6087] ? netlink_getsockopt+0x570/0x570 [ 131.655300][ T6087] ____sys_sendmsg+0x5be/0x8f0 [ 131.660052][ T6087] ? __sys_sendmsg_sock+0x30/0x30 [ 131.665066][ T6087] ? import_iovec+0x6f/0xa0 [ 131.669556][ T6087] ___sys_sendmsg+0x236/0x2e0 [ 131.674224][ T6087] ? __sys_sendmsg+0x290/0x290 [ 131.678995][ T6087] __se_sys_sendmsg+0x1b7/0x2a0 [ 131.683834][ T6087] ? __x64_sys_sendmsg+0x80/0x80 [ 131.688756][ T6087] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 131.694736][ T6087] ? lockdep_hardirqs_on+0x94/0x140 [ 131.699922][ T6087] do_syscall_64+0x4c/0xa0 [ 131.704320][ T6087] ? clear_bhb_loop+0x30/0x80 [ 131.708983][ T6087] ? clear_bhb_loop+0x30/0x80 [ 131.713644][ T6087] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.719523][ T6087] RIP: 0033:0x7f724cb29159 [ 131.723929][ T6087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.743522][ T6087] RSP: 002b:00007f724ad81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.751926][ T6087] RAX: ffffffffffffffda RBX: 00007f724cdb0fa0 RCX: 00007f724cb29159 [ 131.759881][ T6087] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 131.767839][ T6087] RBP: 00007f724ad81090 R08: 0000000000000000 R09: 0000000000000000 [ 131.775794][ T6087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.783745][ T6087] R13: 00007f724cdb1038 R14: 00007f724cdb0fa0 R15: 00007ffd8d2f73c8 [ 131.791713][ T6087] [ 131.816282][ T6087] syz.1.553: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 131.838006][ T6087] CPU: 1 PID: 6087 Comm: syz.1.553 Not tainted syzkaller #0 [ 131.845449][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.855511][ T6087] Call Trace: [ 131.858798][ T6087] [ 131.861731][ T6087] dump_stack_lvl+0x188/0x250 [ 131.866416][ T6087] ? rcu_lock_release+0x5/0x20 [ 131.871190][ T6087] ? show_regs_print_info+0x20/0x20 [ 131.876402][ T6087] ? load_image+0x410/0x410 [ 131.880921][ T6087] warn_alloc+0x245/0x320 [ 131.885261][ T6087] ? zone_watermark_ok_safe+0x250/0x250 [ 131.890817][ T6087] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 131.896803][ T6087] ? __get_vm_area_node+0x119/0x2d0 [ 131.902016][ T6087] __vmalloc_node_range+0x2b1/0x8b0 [ 131.907217][ T6087] ? netlink_data_ready+0x10/0x10 [ 131.912257][ T6087] ? netlink_sendmsg+0x5ec/0xbe0 [ 131.917195][ T6087] vmalloc+0x75/0x80 [ 131.921082][ T6087] ? netlink_sendmsg+0x5ec/0xbe0 [ 131.926001][ T6087] netlink_sendmsg+0x5ec/0xbe0 [ 131.930753][ T6087] ? netlink_getsockopt+0x570/0x570 [ 131.935934][ T6087] ? aa_sock_msg_perm+0x94/0x150 [ 131.940859][ T6087] ? apparmor_socket_sendmsg+0x88/0x230 [ 131.946388][ T6087] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 131.951657][ T6087] ? security_socket_sendmsg+0x7c/0xa0 [ 131.957099][ T6087] ? netlink_getsockopt+0x570/0x570 [ 131.962282][ T6087] ____sys_sendmsg+0x5be/0x8f0 [ 131.967038][ T6087] ? __sys_sendmsg_sock+0x30/0x30 [ 131.972052][ T6087] ? import_iovec+0x6f/0xa0 [ 131.976538][ T6087] ___sys_sendmsg+0x236/0x2e0 [ 131.981208][ T6087] ? __sys_sendmsg+0x290/0x290 [ 131.985983][ T6087] __se_sys_sendmsg+0x1b7/0x2a0 [ 131.990818][ T6087] ? __x64_sys_sendmsg+0x80/0x80 [ 131.995738][ T6087] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 132.001712][ T6087] ? lockdep_hardirqs_on+0x94/0x140 [ 132.006896][ T6087] do_syscall_64+0x4c/0xa0 [ 132.011299][ T6087] ? clear_bhb_loop+0x30/0x80 [ 132.015963][ T6087] ? clear_bhb_loop+0x30/0x80 [ 132.020623][ T6087] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.026500][ T6087] RIP: 0033:0x7f724cb29159 [ 132.030901][ T6087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.050488][ T6087] RSP: 002b:00007f724ad81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.058886][ T6087] RAX: ffffffffffffffda RBX: 00007f724cdb0fa0 RCX: 00007f724cb29159 [ 132.066841][ T6087] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 132.074795][ T6087] RBP: 00007f724ad81090 R08: 0000000000000000 R09: 0000000000000000 [ 132.082753][ T6087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.090706][ T6087] R13: 00007f724cdb1038 R14: 00007f724cdb0fa0 R15: 00007ffd8d2f73c8 [ 132.098676][ T6087] [ 132.151184][ T6087] Mem-Info: [ 132.158373][ T6087] active_anon:272 inactive_anon:7097 isolated_anon:0 [ 132.158373][ T6087] active_file:17974 inactive_file:37138 isolated_file:0 [ 132.158373][ T6087] unevictable:768 dirty:191 writeback:0 [ 132.158373][ T6087] slab_reclaimable:20673 slab_unreclaimable:96038 [ 132.158373][ T6087] mapped:29344 shmem:1632 pagetables:638 bounce:0 [ 132.158373][ T6087] kernel_misc_reclaimable:0 [ 132.158373][ T6087] free:1375511 free_pcp:9442 free_cma:0 [ 132.300747][ T6087] Node 0 active_anon:1056kB inactive_anon:27776kB active_file:71696kB inactive_file:148552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117376kB dirty:760kB writeback:0kB shmem:4448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10312kB pagetables:2352kB all_unreclaimable? no [ 132.338826][ T6087] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 132.372570][ T6087] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.406366][ T6098] netlink: 'syz.3.565': attribute type 25 has an invalid length. [ 132.414511][ T6087] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 132.420290][ T6087] Node 0 DMA32 free:1579144kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1056kB inactive_anon:27876kB active_file:71696kB inactive_file:148552kB unevictable:1536kB writepending:760kB present:3129332kB managed:2606508kB mlocked:0kB bounce:0kB free_pcp:27924kB local_pcp:20432kB free_cma:0kB [ 132.453953][ T6087] lowmem_reserve[]: 0 0 0 0 0 [ 132.457757][ T6098] netlink: 'syz.3.565': attribute type 29 has an invalid length. [ 132.463491][ T6087] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.496164][ T6100] netlink: 'syz.0.556': attribute type 22 has an invalid length. [ 132.512637][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'. [ 132.574772][ T6087] lowmem_reserve[]: 0 0 0 0 0 [ 132.579663][ T6087] Node 1 Normal free:3907048kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:10588kB local_pcp:5696kB free_cma:0kB [ 132.610002][ T6110] mac80211_hwsim hwsim6 : renamed from wlan0 [ 132.645701][ T6087] lowmem_reserve[]: 0 0 0 0 0 [ 132.650707][ T6087] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 132.663936][ T6087] Node 0 DMA32: 985*4kB (UME) 1126*8kB (UME) 684*16kB (ME) 2063*32kB (UME) 906*64kB (UME) 574*128kB (UM) 345*256kB (UME) 140*512kB (UME) 47*1024kB (UM) 28*2048kB (UME) 266*4096kB (UM) = 1576372kB [ 132.669804][ T6108] netlink: 'syz.4.557': attribute type 3 has an invalid length. [ 132.683822][ T6087] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 132.703882][ T6108] netlink: 152 bytes leftover after parsing attributes in process `syz.4.557'. [ 132.713550][ T6087] Node 1 Normal: 142*4kB (UE) 30*8kB (UME) 24*16kB (UME) 100*32kB (UE) 53*64kB (UME) 19*128kB (UME) 8*256kB (UME) 1*512kB (U) 1*1024kB (U) 3*2048kB (UME) 949*4096kB (M) = 3907048kB [ 132.758242][ T6087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.795685][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.801997][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.828620][ T6087] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.863434][ T6087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.878304][ T6087] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.898697][ T6087] 59633 total pagecache pages [ 132.903897][ T6087] 0 pages in swap cache [ 132.908068][ T6087] Swap cache stats: add 0, delete 0, find 0/0 [ 132.918537][ T6087] Free swap = 124996kB [ 132.922747][ T6087] Total swap = 124996kB [ 132.932110][ T6087] 2097051 pages RAM [ 132.936252][ T6087] 0 pages HighMem/MovableOnly [ 132.941057][ T6087] 411501 pages reserved [ 132.946117][ T6087] 0 pages cma reserved [ 133.117007][ T6116] device syzkaller0 entered promiscuous mode [ 133.203038][ T6135] netlink: 'syz.1.564': attribute type 10 has an invalid length. [ 133.220115][ T6135] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.564'. [ 133.231903][ T6135] openvswitch: netlink: Flow key attr not present in new flow. [ 133.359408][ T6138] netlink: 6527 bytes leftover after parsing attributes in process `syz.4.566'. [ 133.538407][ T6149] netlink: 'syz.0.570': attribute type 25 has an invalid length. [ 133.594527][ T6149] netlink: 'syz.0.570': attribute type 29 has an invalid length. [ 133.660949][ T6151] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.572'. [ 133.674539][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 133.901089][ T6154] mac80211_hwsim hwsim2 : renamed from wlan0 [ 134.000926][ T6168] netlink: 12735 bytes leftover after parsing attributes in process `syz.3.576'. [ 134.195071][ T6175] netlink: 2639 bytes leftover after parsing attributes in process `syz.4.581'. [ 135.147972][ T6221] device syzkaller0 entered promiscuous mode [ 135.181475][ T6222] netlink: get zone limit has 4 unknown bytes [ 135.231907][ T6221] netlink: get zone limit has 4 unknown bytes [ 135.353895][ C0] bridge0: port 3(hsr0) entered learning state [ 135.890742][ T6226] mac80211_hwsim hwsim10 : renamed from wlan0 [ 136.247633][ T6250] __nla_validate_parse: 3 callbacks suppressed [ 136.247650][ T6250] netlink: 164 bytes leftover after parsing attributes in process `syz.2.597'. [ 136.504713][ T6250] team0: Port device team_slave_0 removed [ 136.511011][ T6250] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 136.593509][ T6253] netlink: 14 bytes leftover after parsing attributes in process `syz.4.598'. [ 136.676676][ T6263] validate_nla: 4 callbacks suppressed [ 136.676707][ T6263] netlink: 'syz.1.603': attribute type 25 has an invalid length. [ 136.725184][ T6263] netlink: 'syz.1.603': attribute type 29 has an invalid length. [ 136.947180][ T6272] netlink: 'syz.2.606': attribute type 25 has an invalid length. [ 137.062603][ T6272] netlink: 'syz.2.606': attribute type 29 has an invalid length. [ 137.215595][ T6286] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.610'. [ 138.009473][ T6295] netlink: 'syz.1.612': attribute type 22 has an invalid length. [ 138.100405][ T6295] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.612'. [ 138.493095][ T6307] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.617'. [ 138.660446][ T6307] netlink: del zone limit has 8 unknown bytes [ 138.841919][ T6317] netlink: 'syz.1.622': attribute type 25 has an invalid length. [ 138.934362][ T6317] netlink: 'syz.1.622': attribute type 29 has an invalid length. [ 138.988073][ T6321] netlink: 'syz.4.623': attribute type 10 has an invalid length. [ 139.023243][ T6321] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.623'. [ 139.103666][ T6319] netlink: 'syz.2.621': attribute type 25 has an invalid length. [ 139.192616][ T6319] netlink: 'syz.2.621': attribute type 29 has an invalid length. [ 139.536219][ T6344] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.627'. [ 139.801632][ T6339] netlink: 128 bytes leftover after parsing attributes in process `syz.1.627'. [ 139.811911][ T6339] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 139.855255][ T6339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.097822][ T6351] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.630'. [ 140.425133][ T6359] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.634'. [ 140.842926][ T6365] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 140.972951][ T6365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.394158][ T6391] __nla_validate_parse: 1 callbacks suppressed [ 141.394175][ T6391] netlink: 132 bytes leftover after parsing attributes in process `syz.1.643'. [ 141.691698][ T6400] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.646'. [ 141.772814][ T6400] netlink: zone id is out of range [ 141.794434][ T6400] netlink: zone id is out of range [ 141.810905][ T6400] netlink: zone id is out of range [ 141.824870][ T6400] netlink: zone id is out of range [ 141.860948][ T6400] netlink: zone id is out of range [ 141.913390][ T6400] netlink: zone id is out of range [ 141.932781][ T6400] netlink: zone id is out of range [ 143.131781][ T6456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.662'. [ 143.524698][ T6464] netlink: 128 bytes leftover after parsing attributes in process `syz.1.666'. [ 143.558213][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 143.947072][ T6483] netlink: 168 bytes leftover after parsing attributes in process `syz.2.669'. [ 144.000125][ T6482] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.670'. [ 146.696739][ T6550] netlink: 36 bytes leftover after parsing attributes in process `syz.3.690'. [ 146.726531][ T6550] validate_nla: 2 callbacks suppressed [ 146.726567][ T6550] netlink: 'syz.3.690': attribute type 1 has an invalid length. [ 146.741162][ T6550] netlink: 6 bytes leftover after parsing attributes in process `syz.3.690'. [ 147.097011][ T6562] netlink: 'syz.3.695': attribute type 21 has an invalid length. [ 147.159866][ T6562] netlink: 128 bytes leftover after parsing attributes in process `syz.3.695'. [ 147.207061][ T6562] netlink: 3 bytes leftover after parsing attributes in process `syz.3.695'. [ 147.301673][ T6567] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.696'. [ 147.767803][ T6574] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.699'. [ 148.191848][ T6580] device pim6reg1 entered promiscuous mode [ 148.326285][ T6585] netlink: 'syz.3.703': attribute type 28 has an invalid length. [ 148.363194][ T6585] netlink: 'syz.3.703': attribute type 29 has an invalid length. [ 148.396986][ T6585] netlink: 132 bytes leftover after parsing attributes in process `syz.3.703'. [ 148.597178][ T6588] netlink: 'syz.4.705': attribute type 9 has an invalid length. [ 148.608743][ T6588] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.705'. [ 148.673573][ T6590] netlink: 'syz.1.706': attribute type 10 has an invalid length. [ 148.705834][ T6590] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.706'. [ 148.771242][ T6590] net_ratelimit: 370 callbacks suppressed [ 148.771256][ T6590] openvswitch: netlink: Flow key attr not present in new flow. [ 148.840352][ T6594] netlink: 'syz.3.707': attribute type 3 has an invalid length. [ 148.877063][ T6594] netlink: 'syz.3.707': attribute type 1 has an invalid length. [ 148.928113][ T6596] netlink: 'syz.3.707': attribute type 25 has an invalid length. [ 148.969757][ T6594] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.707'. [ 149.003306][ T6596] netlink: 'syz.3.707': attribute type 25 has an invalid length. [ 150.573386][ T6667] openvswitch: netlink: Flow key attr not present in new flow. [ 150.714221][ C0] bridge0: port 3(hsr0) entered forwarding state [ 150.720640][ C0] bridge0: topology change detected, propagating [ 151.726060][ T6727] __nla_validate_parse: 43 callbacks suppressed [ 151.726078][ T6727] netlink: 14 bytes leftover after parsing attributes in process `syz.4.734'. [ 151.921285][ T6732] validate_nla: 59 callbacks suppressed [ 151.921303][ T6732] netlink: 'syz.1.735': attribute type 2 has an invalid length. [ 152.013695][ T6732] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.735'. [ 152.046304][ T6738] netlink: 56 bytes leftover after parsing attributes in process `syz.3.737'. [ 152.158370][ T6738] netlink: 10 bytes leftover after parsing attributes in process `syz.3.737'. [ 152.424203][ T6756] netlink: 'syz.4.744': attribute type 16 has an invalid length. [ 152.485247][ T6756] netlink: 168 bytes leftover after parsing attributes in process `syz.4.744'. [ 152.505558][ T6761] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.745'. [ 152.635147][ T6761] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.745'. [ 152.648786][ T6759] netlink: 'syz.0.746': attribute type 25 has an invalid length. [ 152.663319][ T6759] netlink: 'syz.0.746': attribute type 29 has an invalid length. [ 152.796986][ T6773] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.748'. [ 153.170283][ T6789] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 153.431307][ T6810] netlink: 'syz.3.760': attribute type 10 has an invalid length. [ 153.467045][ T6810] team0: Device hsr_slave_0 failed to register rx_handler [ 153.633868][ T6813] netlink: 'syz.4.761': attribute type 25 has an invalid length. [ 153.641762][ T6813] netlink: 'syz.4.761': attribute type 29 has an invalid length. [ 153.750905][ T6816] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.763'. [ 153.840336][ T6823] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.765'. [ 153.896589][ T6825] netlink: 'syz.3.775': attribute type 25 has an invalid length. [ 153.939218][ T6825] netlink: 'syz.3.775': attribute type 29 has an invalid length. [ 154.471265][ T6853] netlink: 'syz.2.776': attribute type 15 has an invalid length. [ 155.901537][ T6915] device macvlan0 entered promiscuous mode [ 156.940743][ T6951] validate_nla: 9 callbacks suppressed [ 156.940759][ T6951] netlink: 'syz.3.808': attribute type 10 has an invalid length. [ 157.130859][ T6951] team0: Device wg1 is of different type [ 157.157441][ T6961] __nla_validate_parse: 6 callbacks suppressed [ 157.157457][ T6961] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.809'. [ 157.206581][ T6961] netlink: 'syz.2.809': attribute type 10 has an invalid length. [ 157.240236][ T6961] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.809'. [ 157.250891][ T6966] FAULT_INJECTION: forcing a failure. [ 157.250891][ T6966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.318508][ T6966] CPU: 1 PID: 6966 Comm: syz.1.812 Not tainted syzkaller #0 [ 157.325836][ T6966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.327046][ T6961] openvswitch: netlink: Flow key attr not present in new flow. [ 157.335894][ T6966] Call Trace: [ 157.335905][ T6966] [ 157.335913][ T6966] dump_stack_lvl+0x188/0x250 [ 157.335940][ T6966] ? show_regs_print_info+0x20/0x20 [ 157.335958][ T6966] ? load_image+0x410/0x410 [ 157.335978][ T6966] ? __lock_acquire+0x7b50/0x7b50 [ 157.336006][ T6966] should_fail+0x383/0x4b0 [ 157.336028][ T6966] _copy_from_user+0x2e/0x170 [ 157.336047][ T6966] __copy_msghdr_from_user+0xc9/0x630 [ 157.336069][ T6966] ? verify_lock_unused+0x140/0x140 [ 157.336090][ T6966] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 157.336123][ T6966] ___sys_sendmsg+0x19a/0x2e0 [ 157.336150][ T6966] ? __sys_sendmsg+0x290/0x290 [ 157.336182][ T6966] ? trace_event_raw_event_lock+0x250/0x250 [ 157.336230][ T6966] __se_sys_sendmsg+0x1b7/0x2a0 [ 157.336250][ T6966] ? __x64_sys_sendmsg+0x80/0x80 [ 157.336267][ T6966] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 157.336298][ T6966] ? lockdep_hardirqs_on+0x94/0x140 [ 157.336323][ T6966] do_syscall_64+0x4c/0xa0 [ 157.336338][ T6966] ? clear_bhb_loop+0x30/0x80 [ 157.336356][ T6966] ? clear_bhb_loop+0x30/0x80 [ 157.336373][ T6966] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.336390][ T6966] RIP: 0033:0x7f724cb29159 [ 157.454431][ T6966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.474034][ T6966] RSP: 002b:00007f724ad81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.482438][ T6966] RAX: ffffffffffffffda RBX: 00007f724cdb0fa0 RCX: 00007f724cb29159 [ 157.490398][ T6966] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 157.498355][ T6966] RBP: 00007f724ad81090 R08: 0000000000000000 R09: 0000000000000000 [ 157.506313][ T6966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.514272][ T6966] R13: 00007f724cdb1038 R14: 00007f724cdb0fa0 R15: 00007ffd8d2f73c8 [ 157.522258][ T6966] [ 157.839980][ T6980] FAULT_INJECTION: forcing a failure. [ 157.839980][ T6980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.870395][ T6983] netlink: 'syz.3.817': attribute type 25 has an invalid length. [ 157.892333][ T6983] netlink: 'syz.3.817': attribute type 29 has an invalid length. [ 157.966576][ T6980] CPU: 0 PID: 6980 Comm: syz.1.816 Not tainted syzkaller #0 [ 157.973912][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.983976][ T6980] Call Trace: [ 157.987267][ T6980] [ 157.990207][ T6980] dump_stack_lvl+0x188/0x250 [ 157.994900][ T6980] ? show_regs_print_info+0x20/0x20 [ 158.000109][ T6980] ? load_image+0x410/0x410 [ 158.004625][ T6980] ? __lock_acquire+0x7b50/0x7b50 [ 158.009675][ T6980] should_fail+0x383/0x4b0 [ 158.014116][ T6980] _copy_from_user+0x2e/0x170 [ 158.018805][ T6980] __sys_bpf+0x26d/0x6f0 [ 158.023058][ T6980] ? bpf_link_show_fdinfo+0x380/0x380 [ 158.028464][ T6980] __x64_sys_bpf+0x78/0x90 [ 158.032893][ T6980] do_syscall_64+0x4c/0xa0 [ 158.037315][ T6980] ? clear_bhb_loop+0x30/0x80 [ 158.042003][ T6980] ? clear_bhb_loop+0x30/0x80 [ 158.046689][ T6980] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.052603][ T6980] RIP: 0033:0x7f724cb29159 [ 158.057025][ T6980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.076637][ T6980] RSP: 002b:00007f724ad60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 158.085069][ T6980] RAX: ffffffffffffffda RBX: 00007f724cdb1090 RCX: 00007f724cb29159 [ 158.093053][ T6980] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 158.101039][ T6980] RBP: 00007f724ad60090 R08: 0000000000000000 R09: 0000000000000000 [ 158.109022][ T6980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.117006][ T6980] R13: 00007f724cdb1128 R14: 00007f724cdb1090 R15: 00007ffd8d2f73c8 [ 158.125008][ T6980] [ 160.794680][ T6985] netlink: 'syz.0.818': attribute type 3 has an invalid length. [ 160.805964][ T6985] netlink: 152 bytes leftover after parsing attributes in process `syz.0.818'. [ 161.356796][ T7028] netlink: 'syz.3.828': attribute type 10 has an invalid length. [ 161.430582][ T7028] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.828'. [ 161.445772][ T7029] netlink: 'syz.4.831': attribute type 25 has an invalid length. [ 161.468534][ T7028] openvswitch: netlink: Flow key attr not present in new flow. [ 161.476487][ T7029] netlink: 'syz.4.831': attribute type 29 has an invalid length. [ 161.499995][ T7031] FAULT_INJECTION: forcing a failure. [ 161.499995][ T7031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.544902][ T7031] CPU: 0 PID: 7031 Comm: syz.2.830 Not tainted syzkaller #0 [ 161.552233][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.562296][ T7031] Call Trace: [ 161.565583][ T7031] [ 161.568513][ T7031] dump_stack_lvl+0x188/0x250 [ 161.573202][ T7031] ? show_regs_print_info+0x20/0x20 [ 161.578407][ T7031] ? load_image+0x410/0x410 [ 161.582926][ T7031] ? __lock_acquire+0x7b50/0x7b50 [ 161.587965][ T7031] should_fail+0x383/0x4b0 [ 161.592396][ T7031] _copy_from_user+0x2e/0x170 [ 161.597084][ T7031] iovec_from_user+0x142/0x370 [ 161.601858][ T7031] __import_iovec+0x70/0x490 [ 161.606479][ T7031] import_iovec+0x6f/0xa0 [ 161.610824][ T7031] ___sys_sendmsg+0x1fd/0x2e0 [ 161.615527][ T7031] ? __sys_sendmsg+0x290/0x290 [ 161.620315][ T7031] ? trace_event_raw_event_lock+0x250/0x250 [ 161.626283][ T7031] __se_sys_sendmsg+0x1b7/0x2a0 [ 161.631149][ T7031] ? __x64_sys_sendmsg+0x80/0x80 [ 161.636097][ T7031] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 161.642103][ T7031] ? lockdep_hardirqs_on+0x94/0x140 [ 161.647313][ T7031] do_syscall_64+0x4c/0xa0 [ 161.651739][ T7031] ? clear_bhb_loop+0x30/0x80 [ 161.656427][ T7031] ? clear_bhb_loop+0x30/0x80 [ 161.661113][ T7031] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.667013][ T7031] RIP: 0033:0x7ffbbd538159 [ 161.671436][ T7031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.691043][ T7031] RSP: 002b:00007ffbbb790028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.699474][ T7031] RAX: ffffffffffffffda RBX: 00007ffbbd7bffa0 RCX: 00007ffbbd538159 [ 161.707459][ T7031] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 161.715442][ T7031] RBP: 00007ffbbb790090 R08: 0000000000000000 R09: 0000000000000000 [ 161.723425][ T7031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.731407][ T7031] R13: 00007ffbbd7c0038 R14: 00007ffbbd7bffa0 R15: 00007fff686cf9d8 [ 161.739413][ T7031] [ 165.789768][ T7071] FAULT_INJECTION: forcing a failure. [ 165.789768][ T7071] name failslab, interval 1, probability 0, space 0, times 0 [ 165.869593][ T7071] CPU: 0 PID: 7071 Comm: syz.3.846 Not tainted syzkaller #0 [ 165.876925][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.887001][ T7071] Call Trace: [ 165.890289][ T7071] [ 165.893229][ T7071] dump_stack_lvl+0x188/0x250 [ 165.897929][ T7071] ? show_regs_print_info+0x20/0x20 [ 165.903144][ T7071] ? load_image+0x410/0x410 [ 165.905026][ T7073] netlink: 'syz.2.845': attribute type 25 has an invalid length. [ 165.907664][ T7071] ? __might_sleep+0xf0/0xf0 [ 165.907689][ T7071] ? __lock_acquire+0x7b50/0x7b50 [ 165.907708][ T7071] ? netlink_insert+0xe90/0x11f0 [ 165.915974][ T7073] netlink: 'syz.2.845': attribute type 29 has an invalid length. [ 165.919992][ T7071] should_fail+0x383/0x4b0 [ 165.920022][ T7071] should_failslab+0x5/0x20 [ 165.920038][ T7071] slab_pre_alloc_hook+0x51/0xc0 [ 165.920058][ T7071] kmem_cache_alloc_node+0x47/0x2c0 [ 165.920074][ T7071] ? __alloc_skb+0xf4/0x750 [ 165.961163][ T7071] __alloc_skb+0xf4/0x750 [ 165.965539][ T7071] netlink_sendmsg+0x654/0xbe0 [ 165.970327][ T7071] ? netlink_getsockopt+0x570/0x570 [ 165.975529][ T7071] ? aa_sock_msg_perm+0x94/0x150 [ 165.980476][ T7071] ? apparmor_socket_sendmsg+0x88/0x230 [ 165.986028][ T7071] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 165.991415][ T7071] ? security_socket_sendmsg+0x7c/0xa0 [ 165.996882][ T7071] ? netlink_getsockopt+0x570/0x570 [ 166.002065][ T7071] ____sys_sendmsg+0x5be/0x8f0 [ 166.006817][ T7071] ? __sys_sendmsg_sock+0x30/0x30 [ 166.011828][ T7071] ? import_iovec+0x6f/0xa0 [ 166.016329][ T7071] ___sys_sendmsg+0x236/0x2e0 [ 166.021007][ T7071] ? __sys_sendmsg+0x290/0x290 [ 166.025797][ T7071] __se_sys_sendmsg+0x1b7/0x2a0 [ 166.030688][ T7071] ? __x64_sys_sendmsg+0x80/0x80 [ 166.035700][ T7071] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 166.041705][ T7071] ? lockdep_hardirqs_on+0x94/0x140 [ 166.046907][ T7071] do_syscall_64+0x4c/0xa0 [ 166.051330][ T7071] ? clear_bhb_loop+0x30/0x80 [ 166.056006][ T7071] ? clear_bhb_loop+0x30/0x80 [ 166.060674][ T7071] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.066569][ T7071] RIP: 0033:0x7f786dff5159 [ 166.070967][ T7071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.090557][ T7071] RSP: 002b:00007f786c24d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.098970][ T7071] RAX: ffffffffffffffda RBX: 00007f786e27cfa0 RCX: 00007f786dff5159 [ 166.106959][ T7071] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 166.114932][ T7071] RBP: 00007f786c24d090 R08: 0000000000000000 R09: 0000000000000000 [ 166.122897][ T7071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.130857][ T7071] R13: 00007f786e27d038 R14: 00007f786e27cfa0 R15: 00007ffd4adbefa8 [ 166.138911][ T7071] [ 166.289846][ T7083] netlink: 'syz.1.849': attribute type 10 has an invalid length. [ 166.344180][ T7083] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.849'. [ 166.433296][ T7083] openvswitch: netlink: Flow key attr not present in new flow. [ 169.130112][ T7123] FAULT_INJECTION: forcing a failure. [ 169.130112][ T7123] name failslab, interval 1, probability 0, space 0, times 0 [ 169.154883][ T7120] netlink: 'syz.1.863': attribute type 25 has an invalid length. [ 169.193315][ T7120] netlink: 'syz.1.863': attribute type 29 has an invalid length. [ 169.197462][ T7123] CPU: 1 PID: 7123 Comm: syz.4.864 Not tainted syzkaller #0 [ 169.208412][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.218469][ T7123] Call Trace: [ 169.221746][ T7123] [ 169.224673][ T7123] dump_stack_lvl+0x188/0x250 [ 169.229362][ T7123] ? show_regs_print_info+0x20/0x20 [ 169.234571][ T7123] ? load_image+0x410/0x410 [ 169.239078][ T7123] ? __might_sleep+0xf0/0xf0 [ 169.243671][ T7123] ? __lock_acquire+0x7b50/0x7b50 [ 169.248706][ T7123] should_fail+0x383/0x4b0 [ 169.253128][ T7123] should_failslab+0x5/0x20 [ 169.257628][ T7123] slab_pre_alloc_hook+0x51/0xc0 [ 169.262566][ T7123] __kmalloc_node_track_caller+0x68/0x3a0 [ 169.268279][ T7123] ? netlink_sendmsg+0x654/0xbe0 [ 169.273211][ T7123] ? __alloc_skb+0xf4/0x750 [ 169.277711][ T7123] ? netlink_sendmsg+0x654/0xbe0 [ 169.282642][ T7123] __alloc_skb+0x22c/0x750 [ 169.287059][ T7123] netlink_sendmsg+0x654/0xbe0 [ 169.291824][ T7123] ? netlink_getsockopt+0x570/0x570 [ 169.297012][ T7123] ? aa_sock_msg_perm+0x94/0x150 [ 169.301944][ T7123] ? apparmor_socket_sendmsg+0x88/0x230 [ 169.307479][ T7123] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 169.312759][ T7123] ? security_socket_sendmsg+0x7c/0xa0 [ 169.318207][ T7123] ? netlink_getsockopt+0x570/0x570 [ 169.323400][ T7123] ____sys_sendmsg+0x5be/0x8f0 [ 169.328167][ T7123] ? __sys_sendmsg_sock+0x30/0x30 [ 169.333191][ T7123] ? import_iovec+0x6f/0xa0 [ 169.337693][ T7123] ___sys_sendmsg+0x236/0x2e0 [ 169.342368][ T7123] ? __sys_sendmsg+0x290/0x290 [ 169.347153][ T7123] __se_sys_sendmsg+0x1b7/0x2a0 [ 169.352003][ T7123] ? __x64_sys_sendmsg+0x80/0x80 [ 169.356931][ T7123] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 169.362917][ T7123] ? lockdep_hardirqs_on+0x94/0x140 [ 169.368113][ T7123] do_syscall_64+0x4c/0xa0 [ 169.372524][ T7123] ? clear_bhb_loop+0x30/0x80 [ 169.377199][ T7123] ? clear_bhb_loop+0x30/0x80 [ 169.381872][ T7123] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.387758][ T7123] RIP: 0033:0x7f180953e159 [ 169.392165][ T7123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.411759][ T7123] RSP: 002b:00007f1807796028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.420167][ T7123] RAX: ffffffffffffffda RBX: 00007f18097c5fa0 RCX: 00007f180953e159 [ 169.428136][ T7123] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 169.436101][ T7123] RBP: 00007f1807796090 R08: 0000000000000000 R09: 0000000000000000 [ 169.444066][ T7123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.452027][ T7123] R13: 00007f18097c6038 R14: 00007f18097c5fa0 R15: 00007ffe795d0cd8 [ 169.460003][ T7123] [ 173.597262][ T7177] netlink: 'syz.4.882': attribute type 25 has an invalid length. [ 173.628823][ T7177] netlink: 'syz.4.882': attribute type 29 has an invalid length. [ 173.703631][ T7182] netlink: 'syz.0.883': attribute type 16 has an invalid length. [ 173.721393][ T7182] netlink: 48 bytes leftover after parsing attributes in process `syz.0.883'. [ 173.773788][ T7185] FAULT_INJECTION: forcing a failure. [ 173.773788][ T7185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.804103][ T7185] CPU: 0 PID: 7185 Comm: syz.1.885 Not tainted syzkaller #0 [ 173.811433][ T7185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.821490][ T7185] Call Trace: [ 173.824906][ T7185] [ 173.827830][ T7185] dump_stack_lvl+0x188/0x250 [ 173.832503][ T7185] ? show_regs_print_info+0x20/0x20 [ 173.837690][ T7185] ? load_image+0x410/0x410 [ 173.842181][ T7185] ? __lock_acquire+0x7b50/0x7b50 [ 173.847194][ T7185] should_fail+0x383/0x4b0 [ 173.851596][ T7185] _copy_from_iter+0x234/0x1160 [ 173.856444][ T7185] ? __lock_acquire+0x7b50/0x7b50 [ 173.861473][ T7185] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 173.866859][ T7185] ? __virt_addr_valid+0x3c6/0x470 [ 173.871971][ T7185] ? __phys_addr_symbol+0x2b/0x70 [ 173.876986][ T7185] ? __check_object_size+0x30c/0x410 [ 173.882265][ T7185] netlink_sendmsg+0x758/0xbe0 [ 173.887023][ T7185] ? netlink_getsockopt+0x570/0x570 [ 173.892202][ T7185] ? aa_sock_msg_perm+0x94/0x150 [ 173.897121][ T7185] ? apparmor_socket_sendmsg+0x88/0x230 [ 173.902653][ T7185] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 173.907920][ T7185] ? security_socket_sendmsg+0x7c/0xa0 [ 173.913364][ T7185] ? netlink_getsockopt+0x570/0x570 [ 173.918548][ T7185] ____sys_sendmsg+0x5be/0x8f0 [ 173.923306][ T7185] ? __sys_sendmsg_sock+0x30/0x30 [ 173.928318][ T7185] ? import_iovec+0x6f/0xa0 [ 173.932808][ T7185] ___sys_sendmsg+0x236/0x2e0 [ 173.937477][ T7185] ? __sys_sendmsg+0x290/0x290 [ 173.942243][ T7185] __se_sys_sendmsg+0x1b7/0x2a0 [ 173.947078][ T7185] ? __x64_sys_sendmsg+0x80/0x80 [ 173.952000][ T7185] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 173.957970][ T7185] ? lockdep_hardirqs_on+0x94/0x140 [ 173.963158][ T7185] do_syscall_64+0x4c/0xa0 [ 173.967567][ T7185] ? clear_bhb_loop+0x30/0x80 [ 173.972228][ T7185] ? clear_bhb_loop+0x30/0x80 [ 173.976885][ T7185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 173.982761][ T7185] RIP: 0033:0x7f724cb29159 [ 173.987165][ T7185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.006760][ T7185] RSP: 002b:00007f724ad81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.015155][ T7185] RAX: ffffffffffffffda RBX: 00007f724cdb0fa0 RCX: 00007f724cb29159 [ 174.023116][ T7185] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 174.031076][ T7185] RBP: 00007f724ad81090 R08: 0000000000000000 R09: 0000000000000000 [ 174.039032][ T7185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.046994][ T7185] R13: 00007f724cdb1038 R14: 00007f724cdb0fa0 R15: 00007ffd8d2f73c8 [ 174.054961][ T7185] [ 180.402282][ T7217] netlink: 'syz.1.898': attribute type 25 has an invalid length. [ 180.422987][ T7217] netlink: 'syz.1.898': attribute type 29 has an invalid length. [ 180.708163][ T7228] FAULT_INJECTION: forcing a failure. [ 180.708163][ T7228] name failslab, interval 1, probability 0, space 0, times 0 [ 180.742261][ T7228] CPU: 1 PID: 7228 Comm: syz.3.900 Not tainted syzkaller #0 [ 180.749594][ T7228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.759667][ T7228] Call Trace: [ 180.762955][ T7228] [ 180.765885][ T7228] dump_stack_lvl+0x188/0x250 [ 180.770582][ T7228] ? show_regs_print_info+0x20/0x20 [ 180.775764][ T7228] ? load_image+0x410/0x410 [ 180.780263][ T7228] should_fail+0x383/0x4b0 [ 180.784678][ T7228] should_failslab+0x5/0x20 [ 180.789164][ T7228] slab_pre_alloc_hook+0x51/0xc0 [ 180.794085][ T7228] ? skb_clone+0x1bd/0x350 [ 180.798487][ T7228] kmem_cache_alloc+0x3d/0x280 [ 180.803236][ T7228] skb_clone+0x1bd/0x350 [ 180.807468][ T7228] __netlink_deliver_tap+0x3cb/0x7c0 [ 180.812747][ T7228] netlink_deliver_tap+0x16c/0x180 [ 180.817847][ T7228] netlink_unicast+0x759/0x940 [ 180.822602][ T7228] netlink_sendmsg+0x8ba/0xbe0 [ 180.827359][ T7228] ? netlink_getsockopt+0x570/0x570 [ 180.832542][ T7228] ? aa_sock_msg_perm+0x94/0x150 [ 180.837464][ T7228] ? apparmor_socket_sendmsg+0x88/0x230 [ 180.842995][ T7228] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 180.848262][ T7228] ? security_socket_sendmsg+0x7c/0xa0 [ 180.853706][ T7228] ? netlink_getsockopt+0x570/0x570 [ 180.858894][ T7228] ____sys_sendmsg+0x5be/0x8f0 [ 180.863653][ T7228] ? __sys_sendmsg_sock+0x30/0x30 [ 180.868668][ T7228] ? import_iovec+0x6f/0xa0 [ 180.873159][ T7228] ___sys_sendmsg+0x236/0x2e0 [ 180.877830][ T7228] ? __sys_sendmsg+0x290/0x290 [ 180.882604][ T7228] __se_sys_sendmsg+0x1b7/0x2a0 [ 180.887443][ T7228] ? __x64_sys_sendmsg+0x80/0x80 [ 180.892363][ T7228] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 180.898342][ T7228] ? lockdep_hardirqs_on+0x94/0x140 [ 180.903528][ T7228] do_syscall_64+0x4c/0xa0 [ 180.907927][ T7228] ? clear_bhb_loop+0x30/0x80 [ 180.912588][ T7228] ? clear_bhb_loop+0x30/0x80 [ 180.917251][ T7228] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.923133][ T7228] RIP: 0033:0x7f786dff5159 [ 180.927536][ T7228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.947138][ T7228] RSP: 002b:00007f786c24d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.955536][ T7228] RAX: ffffffffffffffda RBX: 00007f786e27cfa0 RCX: 00007f786dff5159 [ 180.963492][ T7228] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 180.971448][ T7228] RBP: 00007f786c24d090 R08: 0000000000000000 R09: 0000000000000000 [ 180.979404][ T7228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.987365][ T7228] R13: 00007f786e27d038 R14: 00007f786e27cfa0 R15: 00007ffd4adbefa8 [ 180.995343][ T7228] [ 181.194629][ T7243] netlink: 'syz.3.905': attribute type 29 has an invalid length. [ 183.529181][ T7243] netlink: 'syz.3.905': attribute type 29 has an invalid length. [ 183.967226][ T7253] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 184.016528][ T7253] netlink: 2 bytes leftover after parsing attributes in process `syz.0.911'. [ 184.075298][ T7253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.125607][ T7253] bridge0: port 3(hsr0) entered blocking state [ 184.132821][ T7253] bridge0: port 3(hsr0) entered disabled state [ 184.197326][ T7253] bridge0: port 3(hsr0) entered blocking state [ 184.204611][ T7253] bridge0: port 3(hsr0) entered listening state [ 184.247716][ T7261] netlink: 'syz.2.912': attribute type 25 has an invalid length. [ 184.278827][ T7261] netlink: 'syz.2.912': attribute type 29 has an invalid length. [ 184.424459][ T7267] device syzkaller0 entered promiscuous mode [ 184.433078][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 184.450488][ T7292] FAULT_INJECTION: forcing a failure. [ 184.450488][ T7292] name failslab, interval 1, probability 0, space 0, times 0 [ 184.463420][ T7292] CPU: 1 PID: 7292 Comm: syz.0.918 Not tainted syzkaller #0 [ 184.470722][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.480774][ T7292] Call Trace: [ 184.484053][ T7292] [ 184.486973][ T7292] dump_stack_lvl+0x188/0x250 [ 184.491645][ T7292] ? show_regs_print_info+0x20/0x20 [ 184.496832][ T7292] ? load_image+0x410/0x410 [ 184.501327][ T7292] should_fail+0x383/0x4b0 [ 184.505732][ T7292] should_failslab+0x5/0x20 [ 184.510219][ T7292] slab_pre_alloc_hook+0x51/0xc0 [ 184.515142][ T7292] ? skb_clone+0x1bd/0x350 [ 184.519545][ T7292] kmem_cache_alloc+0x3d/0x280 [ 184.524294][ T7292] skb_clone+0x1bd/0x350 [ 184.528521][ T7292] ? dev_queue_xmit_nit+0x1f2/0xae0 [ 184.533706][ T7292] dev_queue_xmit_nit+0x2db/0xae0 [ 184.538727][ T7292] dev_hard_start_xmit+0x140/0x7d0 [ 184.543835][ T7292] __dev_queue_xmit+0x195d/0x2e50 [ 184.548856][ T7292] ? dev_queue_xmit+0x20/0x20 [ 184.553515][ T7292] ? memcpy+0x3c/0x60 [ 184.557482][ T7292] ? __copy_skb_header+0x3ba/0x4f0 [ 184.562580][ T7292] ? __skb_clone+0x446/0x6c0 [ 184.567159][ T7292] ? skb_clone+0x1f1/0x350 [ 184.571565][ T7292] __netlink_deliver_tap+0x522/0x7c0 [ 184.576851][ T7292] netlink_deliver_tap+0x16c/0x180 [ 184.581952][ T7292] netlink_unicast+0x759/0x940 [ 184.586710][ T7292] netlink_sendmsg+0x8ba/0xbe0 [ 184.591464][ T7292] ? netlink_getsockopt+0x570/0x570 [ 184.596642][ T7292] ? aa_sock_msg_perm+0x94/0x150 [ 184.601569][ T7292] ? apparmor_socket_sendmsg+0x88/0x230 [ 184.607099][ T7292] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 184.612372][ T7292] ? security_socket_sendmsg+0x7c/0xa0 [ 184.617813][ T7292] ? netlink_getsockopt+0x570/0x570 [ 184.623004][ T7292] ____sys_sendmsg+0x5be/0x8f0 [ 184.627769][ T7292] ? __sys_sendmsg_sock+0x30/0x30 [ 184.632788][ T7292] ? import_iovec+0x6f/0xa0 [ 184.637280][ T7292] ___sys_sendmsg+0x236/0x2e0 [ 184.641951][ T7292] ? __sys_sendmsg+0x290/0x290 [ 184.646735][ T7292] __se_sys_sendmsg+0x1b7/0x2a0 [ 184.651582][ T7292] ? __x64_sys_sendmsg+0x80/0x80 [ 184.656503][ T7292] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 184.662479][ T7292] ? lockdep_hardirqs_on+0x94/0x140 [ 184.667672][ T7292] do_syscall_64+0x4c/0xa0 [ 184.672077][ T7292] ? clear_bhb_loop+0x30/0x80 [ 184.676740][ T7292] ? clear_bhb_loop+0x30/0x80 [ 184.681405][ T7292] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.687282][ T7292] RIP: 0033:0x7f36d935a159 [ 184.691690][ T7292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.711282][ T7292] RSP: 002b:00007f36d7591028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.719687][ T7292] RAX: ffffffffffffffda RBX: 00007f36d95e2090 RCX: 00007f36d935a159 [ 184.727645][ T7292] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 184.735600][ T7292] RBP: 00007f36d7591090 R08: 0000000000000000 R09: 0000000000000000 [ 184.743558][ T7292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.751516][ T7292] R13: 00007f36d95e2128 R14: 00007f36d95e2090 R15: 00007ffd39c1d0a8 [ 184.759486][ T7292] [ 184.796588][ T7291] netlink: 'syz.3.917': attribute type 10 has an invalid length. [ 184.881649][ T7291] batman_adv: batadv0: Adding interface: netdevsim0 [ 184.937892][ T7291] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.992662][ T7291] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 185.044069][ T7301] netlink: 'syz.4.919': attribute type 21 has an invalid length. [ 185.184450][ T7307] netlink: 152 bytes leftover after parsing attributes in process `syz.4.923'. [ 185.664983][ T7321] netlink: 'syz.4.927': attribute type 10 has an invalid length. [ 185.709489][ T7325] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.927'. [ 186.075413][ T4226] Bluetooth: hci3: command 0x0406 tx timeout [ 186.083519][ T6666] Bluetooth: hci2: command 0x0406 tx timeout [ 186.088041][ T4226] Bluetooth: hci4: command 0x0406 tx timeout [ 186.094037][ T6666] Bluetooth: hci0: command 0x0406 tx timeout [ 186.111915][ T6666] Bluetooth: hci1: command 0x0406 tx timeout [ 188.001844][ T7321] team0: Port device geneve1 added [ 188.026130][ T7332] netlink: 'syz.0.930': attribute type 25 has an invalid length. [ 188.043683][ T7332] netlink: 'syz.0.930': attribute type 29 has an invalid length. [ 188.082968][ T7340] FAULT_INJECTION: forcing a failure. [ 188.082968][ T7340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.133079][ T7340] CPU: 1 PID: 7340 Comm: syz.1.931 Not tainted syzkaller #0 [ 188.140415][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.150472][ T7340] Call Trace: [ 188.153754][ T7340] [ 188.156683][ T7340] dump_stack_lvl+0x188/0x250 [ 188.161372][ T7340] ? show_regs_print_info+0x20/0x20 [ 188.166583][ T7340] ? load_image+0x410/0x410 [ 188.171101][ T7340] ? __lock_acquire+0x7b50/0x7b50 [ 188.176143][ T7340] should_fail+0x383/0x4b0 [ 188.180571][ T7340] _copy_from_user+0x2e/0x170 [ 188.185258][ T7340] kstrtouint_from_user+0xd3/0x220 [ 188.190377][ T7340] ? kstrtol_from_user+0x2a0/0x2a0 [ 188.195494][ T7340] proc_fail_nth_write+0x8b/0x200 [ 188.200513][ T7340] ? proc_fail_nth_read+0x220/0x220 [ 188.205703][ T7340] ? common_file_perm+0x171/0x1c0 [ 188.210721][ T7340] ? proc_fail_nth_read+0x220/0x220 [ 188.215902][ T7340] vfs_write+0x304/0xd70 [ 188.220138][ T7340] ? file_end_write+0x250/0x250 [ 188.224987][ T7340] ? mutex_lock_nested+0x17/0x20 [ 188.229914][ T7340] ? __fdget_pos+0x2bf/0x370 [ 188.234485][ T7340] ? ksys_write+0x70/0x260 [ 188.238891][ T7340] ksys_write+0x153/0x260 [ 188.243207][ T7340] ? __ia32_sys_read+0x80/0x80 [ 188.247959][ T7340] ? lockdep_hardirqs_on+0x94/0x140 [ 188.253148][ T7340] do_syscall_64+0x4c/0xa0 [ 188.257548][ T7340] ? clear_bhb_loop+0x30/0x80 [ 188.262206][ T7340] ? clear_bhb_loop+0x30/0x80 [ 188.266864][ T7340] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.272740][ T7340] RIP: 0033:0x7f724cae998e [ 188.277180][ T7340] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 188.296769][ T7340] RSP: 002b:00007f724ad80fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 188.305170][ T7340] RAX: ffffffffffffffda RBX: 00007f724ad816c0 RCX: 00007f724cae998e [ 188.313125][ T7340] RDX: 0000000000000001 RSI: 00007f724ad810a0 RDI: 0000000000000005 [ 188.321083][ T7340] RBP: 00007f724ad81090 R08: 0000000000000000 R09: 0000000000000000 [ 188.329037][ T7340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.336996][ T7340] R13: 00007f724cdb1038 R14: 00007f724cdb0fa0 R15: 00007ffd8d2f73c8 [ 188.344965][ T7340] [ 188.659869][ T7364] can: request_module (can-proto-4) failed. [ 189.919847][ T7389] netlink: 'syz.3.947': attribute type 25 has an invalid length. [ 189.938369][ T7389] netlink: 'syz.3.947': attribute type 29 has an invalid length. [ 192.129387][ T7395] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.950'. [ 192.697674][ T7431] netlink: 'syz.2.961': attribute type 25 has an invalid length. [ 192.710042][ T7431] netlink: 'syz.2.961': attribute type 29 has an invalid length. [ 192.720643][ T7422] netlink: 'syz.0.958': attribute type 12 has an invalid length. [ 192.738756][ T7422] netlink: 104 bytes leftover after parsing attributes in process `syz.0.958'. [ 194.241480][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.247876][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.269039][ T7435] netlink: 2 bytes leftover after parsing attributes in process `syz.1.962'. [ 195.431665][ T7437] device syzkaller0 entered promiscuous mode [ 198.658014][ T7486] netlink: 'syz.3.975': attribute type 25 has an invalid length. [ 198.671370][ T7486] netlink: 'syz.3.975': attribute type 29 has an invalid length. [ 199.367526][ C1] bridge0: port 3(hsr0) entered learning state [ 200.900933][ T7520] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.979'. [ 201.166252][ T7629] netlink: 'syz.0.980': attribute type 10 has an invalid length. [ 201.216679][ T7635] netlink: 'syz.4.984': attribute type 1 has an invalid length. [ 201.237689][ T7635] netlink: 199572 bytes leftover after parsing attributes in process `syz.4.984'. [ 201.435827][ T7629] team0: Device hsr_slave_0 failed to register rx_handler [ 203.304978][ T7657] netlink: 'syz.4.992': attribute type 25 has an invalid length. [ 203.398189][ T7657] netlink: 'syz.4.992': attribute type 29 has an invalid length. [ 203.462423][ T7660] bridge0: port 3(dummy0) entered disabled state [ 206.319201][ T7660] device bridge_slave_1 left promiscuous mode [ 206.339877][ T7660] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.394337][ T7660] device bridge_slave_0 left promiscuous mode [ 206.400651][ T7660] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.603574][ T7660] team0: Port device bridge0 removed [ 209.283358][ T7716] sctp: [Deprecated]: syz.2.1005 (pid 7716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.283358][ T7716] Use struct sctp_sack_info instead [ 209.354399][ T7721] netlink: 'syz.4.1011': attribute type 3 has an invalid length. [ 209.408986][ T7724] netlink: 'syz.4.1011': attribute type 3 has an invalid length. [ 209.463476][ T7721] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1011'. [ 209.564681][ T7729] netlink: 'syz.1.1012': attribute type 21 has an invalid length. [ 209.584994][ T7724] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1011'. [ 209.599562][ T7729] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1012'. [ 209.970775][ T7733] netlink: 'syz.3.1013': attribute type 25 has an invalid length. [ 209.990325][ T7733] netlink: 'syz.3.1013': attribute type 29 has an invalid length. [ 210.648421][ T7747] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.1017'. [ 212.406538][ T7753] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1021'. [ 212.622461][ T7767] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1024'. [ 212.663067][ T7768] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1024'. [ 212.685179][ T7769] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1024'. [ 214.723378][ C1] bridge0: port 3(hsr0) entered forwarding state [ 214.729769][ C1] bridge0: topology change detected, propagating [ 215.113866][ T7798] netlink: 4093 bytes leftover after parsing attributes in process `syz.4.1032'. [ 215.207036][ T7795] netlink: 'syz.4.1032': attribute type 1 has an invalid length. [ 215.233344][ T7795] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1032'. [ 215.247799][ T7798] netlink: 4093 bytes leftover after parsing attributes in process `syz.4.1032'. [ 217.369906][ T7810] netlink: 'syz.4.1037': attribute type 6 has an invalid length. [ 217.414580][ T7810] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1037'. [ 217.689233][ T7827] netlink: 'syz.3.1040': attribute type 3 has an invalid length. [ 217.755210][ T7827] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1040'. [ 221.557308][ T7875] netlink: 'syz.3.1056': attribute type 39 has an invalid length. [ 221.683877][ T7888] netlink: 'syz.3.1056': attribute type 3 has an invalid length. [ 221.691646][ T7888] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1056'. [ 221.796293][ T7880] can: request_module (can-proto-0) failed. [ 224.614707][ T7933] netlink: 'syz.1.1073': attribute type 2 has an invalid length. [ 224.656559][ T7939] netlink: 'syz.4.1076': attribute type 21 has an invalid length. [ 224.662756][ T7933] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.1073'. [ 226.302476][ T7966] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1083'. [ 226.342876][ T7968] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1083'. [ 226.525841][ T7981] netlink: 'syz.1.1085': attribute type 25 has an invalid length. [ 226.592700][ T7981] netlink: 'syz.1.1085': attribute type 29 has an invalid length. [ 226.880646][ T8021] netlink: 'syz.3.1094': attribute type 11 has an invalid length. [ 226.927439][ T8021] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.1094'. [ 227.279935][ T8030] netlink: 'syz.3.1098': attribute type 3 has an invalid length. [ 227.288158][ T8030] netlink: 'syz.3.1098': attribute type 1 has an invalid length. [ 227.324116][ T8030] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1098'. [ 229.866569][ T8044] netlink: 'syz.4.1105': attribute type 25 has an invalid length. [ 229.904613][ T8044] netlink: 'syz.4.1105': attribute type 29 has an invalid length. [ 233.571584][ T8102] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1121'. [ 233.617350][ T8106] netlink: 'syz.1.1119': attribute type 5 has an invalid length. [ 233.654103][ T8105] netlink: 'syz.4.1122': attribute type 25 has an invalid length. [ 233.690432][ T8106] netlink: 'syz.1.1119': attribute type 2 has an invalid length. [ 233.698670][ T8106] netlink: 'syz.1.1119': attribute type 1 has an invalid length. [ 233.710670][ T8105] netlink: 'syz.4.1122': attribute type 29 has an invalid length. [ 233.729270][ T8106] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1119'. [ 233.783955][ T8113] netlink: 'syz.3.1124': attribute type 3 has an invalid length. [ 233.793179][ T8113] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1124'. [ 233.931059][ T8118] tap0: tun_chr_ioctl cmd 1074025677 [ 233.953538][ T8118] tap0: linktype set to 804 [ 234.188880][ T8127] netlink: 115288 bytes leftover after parsing attributes in process `syz.2.1128'. [ 236.857844][ T8147] netlink: 'syz.0.1137': attribute type 25 has an invalid length. [ 236.869437][ T8147] netlink: 'syz.0.1137': attribute type 29 has an invalid length. [ 237.451646][ T8174] device syzkaller0 entered promiscuous mode [ 237.648387][ T8195] netlink: 'syz.0.1149': attribute type 10 has an invalid length. [ 237.677646][ T8195] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1149'. [ 241.012685][ T8211] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1156'. [ 241.062772][ T8211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.158253][ T8232] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 241.516264][ T8250] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1162'. [ 241.843031][ T8264] netlink: 'syz.3.1168': attribute type 25 has an invalid length. [ 241.854665][ T8264] netlink: 'syz.3.1168': attribute type 29 has an invalid length. [ 242.193703][ T8280] netlink: 'syz.0.1172': attribute type 21 has an invalid length. [ 242.205989][ T8280] netlink: 'syz.0.1172': attribute type 4 has an invalid length. [ 242.214066][ T8280] netlink: 'syz.0.1172': attribute type 23 has an invalid length. [ 242.222085][ T8280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1172'. [ 242.600823][ T8291] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1177'. [ 242.647664][ T8289] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1176'. [ 242.762144][ T8297] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1179'. [ 242.919504][ T8301] netlink: 'syz.0.1181': attribute type 25 has an invalid length. [ 242.963211][ T8301] netlink: 'syz.0.1181': attribute type 29 has an invalid length. [ 243.272591][ T8324] netlink: 'syz.1.1184': attribute type 11 has an invalid length. [ 245.001188][ T8336] delete_channel: no stack [ 245.013640][ T8335] delete_channel: no stack [ 245.019390][ T8336] delete_channel: no stack [ 245.033391][ T8335] delete_channel: no stack [ 246.722645][ T8386] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1209'. [ 249.139381][ T8395] netlink: 'syz.3.1213': attribute type 21 has an invalid length. [ 249.174443][ T8395] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1213'. [ 249.220887][ T8395] netlink: 'syz.3.1213': attribute type 4 has an invalid length. [ 249.312333][ T8395] netlink: 'syz.3.1213': attribute type 5 has an invalid length. [ 249.352332][ T8395] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1213'. [ 249.382355][ T8398] netlink: 'syz.4.1214': attribute type 25 has an invalid length. [ 249.450875][ T8398] netlink: 'syz.4.1214': attribute type 29 has an invalid length. [ 249.608314][ T8420] netlink: 166 bytes leftover after parsing attributes in process `syz.3.1218'. [ 249.706539][ T8428] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1218'. [ 249.709292][ T8433] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1222'. [ 249.874243][ T8433] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1222'. [ 249.994896][ T8435] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1222'. [ 250.278517][ T8439] netlink: 'syz.3.1223': attribute type 26 has an invalid length. [ 250.373930][ T8439] netlink: 54695 bytes leftover after parsing attributes in process `syz.3.1223'. [ 250.638846][ T8448] netlink: 'syz.0.1227': attribute type 1 has an invalid length. [ 250.673350][ T8448] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1227'. [ 250.795728][ T8458] netlink: 'syz.4.1231': attribute type 3 has an invalid length. [ 250.933771][ T8464] netlink: 'syz.0.1232': attribute type 25 has an invalid length. [ 251.022681][ T8464] netlink: 'syz.0.1232': attribute type 29 has an invalid length. [ 252.577291][ T8513] delete_channel: no stack [ 252.587426][ T8513] delete_channel: no stack [ 253.982061][ T8537] __nla_validate_parse: 2 callbacks suppressed [ 253.982077][ T8537] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1255'. [ 254.001281][ T8537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1255'. [ 254.016094][ T8540] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1255'. [ 254.031387][ T8540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1255'. [ 254.087971][ T8539] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1251'. [ 254.535588][ T8568] validate_nla: 4 callbacks suppressed [ 254.535604][ T8568] netlink: 'syz.4.1262': attribute type 21 has an invalid length. [ 254.572990][ T8568] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1262'. [ 254.695654][ T8568] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.1262'. [ 254.777364][ T8568] netlink: 21648 bytes leftover after parsing attributes in process `syz.4.1262'. [ 254.792031][ T8568] tipc: Started in network mode [ 254.798896][ T8568] tipc: Node identity e, cluster identity 4711 [ 254.806989][ T8568] tipc: Node number set to 14 [ 255.226995][ T8601] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1273'. [ 255.352280][ T8612] tap0: tun_chr_ioctl cmd 1074025677 [ 255.376200][ T8612] tap0: linktype set to 773 [ 255.422446][ T8623] tap0: tun_chr_ioctl cmd 1074025673 [ 255.467937][ T8628] tap0: tun_chr_ioctl cmd 1074025677 [ 255.483957][ T8628] tap0: linktype set to 773 [ 255.684886][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.691256][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.854275][ T8637] netlink: 'syz.1.1280': attribute type 25 has an invalid length. [ 255.871685][ T8637] netlink: 'syz.1.1280': attribute type 29 has an invalid length. [ 256.527344][ T8682] netlink: 'syz.0.1295': attribute type 3 has an invalid length. [ 256.540615][ T8683] netlink: 'syz.0.1295': attribute type 3 has an invalid length. [ 256.551635][ T8682] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1295'. [ 256.776646][ T8692] netlink: 'syz.1.1296': attribute type 25 has an invalid length. [ 256.817062][ T8692] netlink: 'syz.1.1296': attribute type 29 has an invalid length. [ 257.097611][ T8703] netlink: 'syz.2.1302': attribute type 39 has an invalid length. [ 257.531015][ T8728] netlink: 'syz.2.1308': attribute type 10 has an invalid length. [ 257.822514][ T8751] netlink: 'syz.1.1316': attribute type 25 has an invalid length. [ 258.237740][ T8771] netlink: zone id is out of range [ 259.016282][ T8816] __nla_validate_parse: 6 callbacks suppressed [ 259.016299][ T8816] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1334'. [ 259.219877][ T8820] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1336'. [ 259.893258][ T8834] device syzkaller0 entered promiscuous mode [ 260.089065][ T8844] validate_nla: 2 callbacks suppressed [ 260.089112][ T8844] netlink: 'syz.0.1347': attribute type 25 has an invalid length. [ 260.113012][ T8844] netlink: 'syz.0.1347': attribute type 29 has an invalid length. [ 260.236201][ T8848] netlink: 'syz.2.1348': attribute type 10 has an invalid length. [ 260.486173][ T8847] can: request_module (can-proto-4) failed. [ 260.584749][ T8859] netlink: 134736 bytes leftover after parsing attributes in process `syz.1.1350'. [ 260.802050][ T8848] team0: Device gre0 is of different type [ 261.300505][ T8865] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1350'. [ 261.566373][ T8892] netlink: 'syz.3.1359': attribute type 3 has an invalid length. [ 261.583491][ T8892] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1359'. [ 261.641922][ T8894] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1360'. [ 261.705212][ T8906] netlink: 'syz.1.1361': attribute type 25 has an invalid length. [ 261.747926][ T8906] netlink: 'syz.1.1361': attribute type 29 has an invalid length. [ 262.036469][ T8915] device syzkaller0 entered promiscuous mode [ 263.297772][ T8968] netlink: 'syz.4.1379': attribute type 39 has an invalid length. [ 263.702910][ T8994] netlink: 'syz.0.1385': attribute type 29 has an invalid length. [ 263.725307][ T8994] netlink: 'syz.0.1385': attribute type 29 has an invalid length. [ 263.742922][ T8994] netlink: 'syz.0.1385': attribute type 29 has an invalid length. [ 264.882703][ T9051] device syzkaller0 entered promiscuous mode [ 265.711344][ T9063] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1404'. [ 265.800669][ T9067] validate_nla: 8 callbacks suppressed [ 265.800716][ T9067] netlink: 'syz.4.1406': attribute type 25 has an invalid length. [ 265.816590][ T9067] netlink: 'syz.4.1406': attribute type 29 has an invalid length. [ 267.006923][ T9118] netlink: 'syz.4.1421': attribute type 25 has an invalid length. [ 267.057800][ T9118] netlink: 'syz.4.1421': attribute type 29 has an invalid length. [ 267.298315][ T9132] netlink: 64771 bytes leftover after parsing attributes in process `syz.1.1424'. [ 267.423789][ T9131] netlink: 'syz.1.1424': attribute type 2 has an invalid length. [ 267.444177][ T9131] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1424'. [ 267.838830][ T9139] netlink: 'syz.0.1426': attribute type 19 has an invalid length. [ 267.856932][ T9147] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1429'. [ 267.919296][ T9139] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.1426'. [ 268.110915][ T9162] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1434'. [ 268.213908][ T9163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.221714][ T9163] IPv6: NLM_F_CREATE should be set when creating new route [ 268.229361][ T9163] IPv6: NLM_F_CREATE should be set when creating new route [ 268.236794][ T9163] IPv6: NLM_F_CREATE should be set when creating new route [ 268.254042][ T9175] netlink: 'syz.1.1435': attribute type 25 has an invalid length. [ 268.343760][ T9175] netlink: 'syz.1.1435': attribute type 29 has an invalid length. [ 268.507322][ T9189] netlink: 'syz.4.1437': attribute type 1 has an invalid length. [ 268.532731][ T9190] netlink: 'syz.3.1438': attribute type 3 has an invalid length. [ 268.553186][ T9189] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.1437'. [ 268.623031][ T9190] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1438'. [ 269.658297][ T9217] device syzkaller0 entered promiscuous mode [ 270.505723][ T9262] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1465'. [ 270.547096][ T9262] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1465'. [ 270.965810][ T9275] validate_nla: 6 callbacks suppressed [ 270.965821][ T9275] netlink: 'syz.4.1469': attribute type 25 has an invalid length. [ 271.023047][ T9275] netlink: 'syz.4.1469': attribute type 29 has an invalid length. [ 271.146528][ T9281] netlink: 'syz.2.1471': attribute type 10 has an invalid length. [ 271.247416][ T9281] team0: Device nlmon0 is of different type [ 271.325905][ T9289] __nla_validate_parse: 1 callbacks suppressed [ 271.325923][ T9289] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1474'. [ 271.458802][ T9289] netlink: 'syz.1.1474': attribute type 2 has an invalid length. [ 271.794819][ T9311] device syzkaller0 entered promiscuous mode [ 271.990362][ T9331] netlink: 'syz.0.1487': attribute type 25 has an invalid length. [ 272.003329][ T9331] netlink: 'syz.0.1487': attribute type 29 has an invalid length. [ 272.307075][ T9346] netlink: 'syz.2.1492': attribute type 21 has an invalid length. [ 272.380950][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1492'. [ 273.469264][ T9376] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1500'. [ 273.622603][ T9389] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1502'. [ 273.713848][ T9389] bridge_slave_1: default FDB implementation only supports local addresses [ 273.919243][ T9387] device syzkaller0 entered promiscuous mode [ 274.128766][ T9401] netlink: 'syz.3.1504': attribute type 25 has an invalid length. [ 274.155239][ T9401] netlink: 'syz.3.1504': attribute type 29 has an invalid length. [ 275.104234][ T9451] netlink: 'syz.1.1516': attribute type 3 has an invalid length. [ 275.112015][ T9451] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1516'. [ 275.323619][ T9457] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.1517'. [ 275.493286][ T9456] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1518'. [ 275.507798][ T9463] FAULT_INJECTION: forcing a failure. [ 275.507798][ T9463] name failslab, interval 1, probability 0, space 0, times 0 [ 275.599724][ T9463] CPU: 0 PID: 9463 Comm: syz.2.1521 Not tainted syzkaller #0 [ 275.607150][ T9463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.617214][ T9463] Call Trace: [ 275.620502][ T9463] [ 275.623439][ T9463] dump_stack_lvl+0x188/0x250 [ 275.628136][ T9463] ? show_regs_print_info+0x20/0x20 [ 275.633345][ T9463] ? load_image+0x410/0x410 [ 275.637869][ T9463] ? __might_sleep+0xf0/0xf0 [ 275.642475][ T9463] ? __lock_acquire+0x7b50/0x7b50 [ 275.647520][ T9463] should_fail+0x383/0x4b0 [ 275.651966][ T9463] should_failslab+0x5/0x20 [ 275.656481][ T9463] slab_pre_alloc_hook+0x51/0xc0 [ 275.661437][ T9463] __kmalloc+0x6b/0x340 [ 275.665605][ T9463] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 275.671343][ T9463] tomoyo_realpath_from_path+0xed/0x5e0 [ 275.676916][ T9463] tomoyo_path_number_perm+0x251/0x6b0 [ 275.682391][ T9463] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 275.687869][ T9463] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 275.694525][ T9463] security_file_ioctl+0x6c/0xa0 [ 275.699481][ T9463] __se_sys_ioctl+0x48/0x170 [ 275.704085][ T9463] do_syscall_64+0x4c/0xa0 [ 275.708509][ T9463] ? clear_bhb_loop+0x30/0x80 [ 275.713210][ T9463] ? clear_bhb_loop+0x30/0x80 [ 275.717896][ T9463] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 275.723800][ T9463] RIP: 0033:0x7ffbbd538159 [ 275.728219][ T9463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.738302][ T9469] device syzkaller0 entered promiscuous mode [ 275.748010][ T9463] RSP: 002b:00007ffbbb790028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.748047][ T9463] RAX: ffffffffffffffda RBX: 00007ffbbd7bffa0 RCX: 00007ffbbd538159 [ 275.748059][ T9463] RDX: 0604000000000000 RSI: 0000000000005421 RDI: 0000000000000008 [ 275.748070][ T9463] RBP: 00007ffbbb790090 R08: 0000000000000000 R09: 0000000000000000 [ 275.748080][ T9463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.748089][ T9463] R13: 00007ffbbd7c0038 R14: 00007ffbbd7bffa0 R15: 00007fff686cf9d8 [ 275.748114][ T9463] [ 276.023194][ T9463] ERROR: Out of memory at tomoyo_realpath_from_path. [ 276.088254][ T9465] validate_nla: 3 callbacks suppressed [ 276.088301][ T9465] netlink: 'syz.1.1522': attribute type 25 has an invalid length. [ 276.143174][ T9465] netlink: 'syz.1.1522': attribute type 29 has an invalid length. [ 276.739589][ T9505] bridge0: port 3(syz_tun) entered blocking state [ 276.771414][ T9505] bridge0: port 3(syz_tun) entered disabled state [ 276.817742][ T9505] device syz_tun entered promiscuous mode [ 276.834025][ T9505] bridge0: port 3(syz_tun) entered blocking state [ 276.840853][ T9505] bridge0: port 3(syz_tun) entered forwarding state [ 276.979838][ T9513] netlink: 'syz.1.1537': attribute type 25 has an invalid length. [ 277.001666][ T9513] netlink: 'syz.1.1537': attribute type 29 has an invalid length. [ 277.036151][ T9514] FAULT_INJECTION: forcing a failure. [ 277.036151][ T9514] name failslab, interval 1, probability 0, space 0, times 0 [ 277.148381][ T9514] CPU: 0 PID: 9514 Comm: syz.1.1537 Not tainted syzkaller #0 [ 277.155800][ T9514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.165862][ T9514] Call Trace: [ 277.169137][ T9514] [ 277.172060][ T9514] dump_stack_lvl+0x188/0x250 [ 277.176735][ T9514] ? show_regs_print_info+0x20/0x20 [ 277.181928][ T9514] ? load_image+0x410/0x410 [ 277.186429][ T9514] ? __might_sleep+0xf0/0xf0 [ 277.191013][ T9514] ? __lock_acquire+0x7b50/0x7b50 [ 277.196038][ T9514] should_fail+0x383/0x4b0 [ 277.200451][ T9514] should_failslab+0x5/0x20 [ 277.204949][ T9514] slab_pre_alloc_hook+0x51/0xc0 [ 277.209883][ T9514] __kmalloc+0x6b/0x340 [ 277.214029][ T9514] ? tomoyo_encode+0x28a/0x550 [ 277.218792][ T9514] tomoyo_encode+0x28a/0x550 [ 277.223385][ T9514] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 277.229031][ T9514] tomoyo_path_number_perm+0x251/0x6b0 [ 277.234486][ T9514] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 277.239982][ T9514] security_file_ioctl+0x6c/0xa0 [ 277.244915][ T9514] __se_sys_ioctl+0x48/0x170 [ 277.249500][ T9514] do_syscall_64+0x4c/0xa0 [ 277.253907][ T9514] ? clear_bhb_loop+0x30/0x80 [ 277.258580][ T9514] ? clear_bhb_loop+0x30/0x80 [ 277.263251][ T9514] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.269157][ T9514] RIP: 0033:0x7f724cb29159 [ 277.273582][ T9514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.293183][ T9514] RSP: 002b:00007f724ad60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.301600][ T9514] RAX: ffffffffffffffda RBX: 00007f724cdb1090 RCX: 00007f724cb29159 [ 277.309570][ T9514] RDX: 0604000000000000 RSI: 0000000000005421 RDI: 0000000000000008 [ 277.317534][ T9514] RBP: 00007f724ad60090 R08: 0000000000000000 R09: 0000000000000000 [ 277.325499][ T9514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.333462][ T9514] R13: 00007f724cdb1128 R14: 00007f724cdb1090 R15: 00007ffd8d2f73c8 [ 277.341444][ T9514] [ 277.521536][ T9527] netlink: 'syz.4.1539': attribute type 25 has an invalid length. [ 277.538731][ T9527] netlink: 'syz.4.1539': attribute type 29 has an invalid length. [ 277.670116][ T9514] ERROR: Out of memory at tomoyo_realpath_from_path. [ 277.817272][ T9540] netlink: 'syz.3.1544': attribute type 10 has an invalid length. [ 277.846231][ T9540] team0: Device hsr_slave_0 failed to register rx_handler [ 278.195843][ T9553] netlink: 'syz.3.1549': attribute type 29 has an invalid length. [ 278.243284][ T9553] netlink: 'syz.3.1549': attribute type 29 has an invalid length. [ 278.289635][ T9550] netlink: 'syz.3.1549': attribute type 29 has an invalid length. [ 278.564900][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 278.640466][ T9569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.882204][ T9591] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1558'. [ 279.200213][ T9603] FAULT_INJECTION: forcing a failure. [ 279.200213][ T9603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.250357][ T9603] CPU: 1 PID: 9603 Comm: syz.2.1563 Not tainted syzkaller #0 [ 279.257781][ T9603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.267847][ T9603] Call Trace: [ 279.271137][ T9603] [ 279.274081][ T9603] dump_stack_lvl+0x188/0x250 [ 279.278797][ T9603] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 279.285344][ T9603] ? show_regs_print_info+0x20/0x20 [ 279.290565][ T9603] ? load_image+0x410/0x410 [ 279.295110][ T9603] should_fail+0x383/0x4b0 [ 279.299553][ T9603] _copy_to_user+0x2e/0x130 [ 279.304069][ T9603] simple_read_from_buffer+0xe3/0x150 [ 279.309462][ T9603] proc_fail_nth_read+0x1a6/0x220 [ 279.314502][ T9603] ? proc_fault_inject_write+0x310/0x310 [ 279.320152][ T9603] ? fsnotify_perm+0x254/0x560 [ 279.324930][ T9603] ? proc_fault_inject_write+0x310/0x310 [ 279.330584][ T9603] vfs_read+0x2ff/0xd50 [ 279.334772][ T9603] ? __lock_acquire+0x7b50/0x7b50 [ 279.339814][ T9603] ? kernel_read+0x1e0/0x1e0 [ 279.344431][ T9603] ? mutex_lock_nested+0x17/0x20 [ 279.349377][ T9603] ? __fdget_pos+0x2bf/0x370 [ 279.353979][ T9603] ? ksys_read+0x70/0x260 [ 279.358318][ T9603] ksys_read+0x153/0x260 [ 279.362667][ T9603] ? vfs_write+0xd70/0xd70 [ 279.367097][ T9603] ? lockdep_hardirqs_on+0x94/0x140 [ 279.372310][ T9603] do_syscall_64+0x4c/0xa0 [ 279.376741][ T9603] ? clear_bhb_loop+0x30/0x80 [ 279.381429][ T9603] ? clear_bhb_loop+0x30/0x80 [ 279.386116][ T9603] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.392013][ T9603] RIP: 0033:0x7ffbbd4f898e [ 279.396435][ T9603] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 279.416047][ T9603] RSP: 002b:00007ffbbb78ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 279.424474][ T9603] RAX: ffffffffffffffda RBX: 00007ffbbb7906c0 RCX: 00007ffbbd4f898e [ 279.432456][ T9603] RDX: 000000000000000f RSI: 00007ffbbb7900a0 RDI: 0000000000000009 [ 279.440429][ T9603] RBP: 00007ffbbb790090 R08: 0000000000000000 R09: 0000000000000000 [ 279.448408][ T9603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.456378][ T9603] R13: 00007ffbbd7c0038 R14: 00007ffbbd7bffa0 R15: 00007fff686cf9d8 [ 279.464368][ T9603] [ 279.552923][ T9617] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1569'. [ 279.701710][ T9619] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1567'. [ 279.734160][ T9615] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1567'. [ 280.976143][ T9687] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1585'. [ 281.203877][ T9696] validate_nla: 7 callbacks suppressed [ 281.203911][ T9696] netlink: 'syz.0.1587': attribute type 25 has an invalid length. [ 281.231641][ T9696] netlink: 'syz.0.1587': attribute type 29 has an invalid length. [ 281.361020][ T9701] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1589'. [ 282.112107][ T9730] netlink: 'syz.4.1599': attribute type 10 has an invalid length. [ 282.205710][ T9730] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1599'. [ 282.300463][ T9733] netlink: 'syz.4.1599': attribute type 10 has an invalid length. [ 282.348730][ T9733] bridge0: port 3(hsr0) entered disabled state [ 282.355136][ T9733] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.539854][ T9733] bridge0: port 3(hsr0) entered blocking state [ 282.546453][ T9733] bridge0: port 3(hsr0) entered listening state [ 282.553913][ T9733] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.561022][ T9733] bridge0: port 1(bridge_slave_0) entered listening state [ 282.692732][ T9733] team0: Port device bridge0 added [ 282.722690][ T9754] netlink: 'syz.1.1604': attribute type 25 has an invalid length. [ 282.733353][ T9754] netlink: 'syz.1.1604': attribute type 29 has an invalid length. [ 282.765881][ T9758] netlink: 'syz.3.1607': attribute type 4 has an invalid length. [ 282.790769][ T9758] netlink: 63335 bytes leftover after parsing attributes in process `syz.3.1607'. [ 282.888689][ T9763] netlink: 'syz.2.1610': attribute type 10 has an invalid length. [ 282.908113][ T9763] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 282.950109][ T9763] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 282.995351][ T9763] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 283.026354][ T9763] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 283.322671][ T9787] netlink: 'syz.3.1617': attribute type 17 has an invalid length. [ 283.361428][ T9787] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1617'. [ 283.376137][ T9787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.510173][ T9798] netlink: 'syz.1.1620': attribute type 29 has an invalid length. [ 284.406918][ T9811] sctp: [Deprecated]: syz.4.1623 (pid 9811) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.406918][ T9811] Use struct sctp_sack_info instead [ 285.400134][ T9839] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1634'. [ 285.513789][ T9839] team0: Port device geneve0 added [ 285.531784][ T9842] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1634'. [ 286.037275][ T9854] team0: Device gre0 is of different type [ 286.627347][ T9868] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1642'. [ 286.663479][ T9872] validate_nla: 3 callbacks suppressed [ 286.663495][ T9872] netlink: 'syz.4.1642': attribute type 21 has an invalid length. [ 287.324212][ T9892] netlink: 'syz.4.1646': attribute type 10 has an invalid length. [ 287.482222][ T9892] team0: Device vxcan1 is of different type [ 290.802724][ T9918] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1655'. [ 290.823555][ T9918] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 290.922295][ T9918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.958636][ T9928] netlink: 'syz.4.1656': attribute type 29 has an invalid length. [ 290.995902][ T9928] netlink: 'syz.4.1656': attribute type 29 has an invalid length. [ 291.009339][ T9925] netlink: 'syz.4.1656': attribute type 29 has an invalid length. [ 291.321384][ T9931] netlink: 'syz.4.1658': attribute type 2 has an invalid length. [ 291.377100][ T9931] netlink: 'syz.4.1658': attribute type 8 has an invalid length. [ 291.389914][ T9931] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1658'. [ 291.477424][ T9936] netlink: 'syz.3.1659': attribute type 25 has an invalid length. [ 291.489769][ T9936] netlink: 'syz.3.1659': attribute type 29 has an invalid length. [ 291.913917][ T9946] netlink: 'syz.0.1663': attribute type 275 has an invalid length. [ 291.967871][ T9950] netlink: 'syz.0.1663': attribute type 2 has an invalid length. [ 291.978979][ T9959] netlink: 'syz.0.1663': attribute type 2 has an invalid length. [ 292.055430][ T9970] netlink: 'syz.4.1669': attribute type 21 has an invalid length. [ 292.075862][ T9970] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1669'. [ 292.433144][ T9982] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1672'. [ 292.488163][ T9982] netlink: zone id is out of range [ 292.503869][ T9982] netlink: zone id is out of range [ 292.543918][ T9982] netlink: zone id is out of range [ 292.554165][ T9982] netlink: zone id is out of range [ 292.563308][ T9989] netlink: 'syz.3.1671': attribute type 41 has an invalid length. [ 292.581130][ T9982] netlink: zone id is out of range [ 292.600583][ T9982] netlink: zone id is out of range [ 292.608887][ T9985] netlink: 'syz.4.1673': attribute type 25 has an invalid length. [ 292.627533][ T9982] netlink: zone id is out of range [ 292.639312][ T9985] netlink: 'syz.4.1673': attribute type 29 has an invalid length. [ 292.648707][ T9982] netlink: zone id is out of range [ 292.673615][ T9982] netlink: zone id is out of range [ 292.824432][T10002] netlink: 'syz.1.1676': attribute type 3 has an invalid length. [ 292.843818][T10002] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1676'. [ 293.251470][T10028] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1683'. [ 293.525228][T10032] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1687'. [ 293.614720][T10043] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1687'. [ 294.227414][T10069] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1693'. [ 294.269476][T10069] netlink: 'syz.4.1693': attribute type 1 has an invalid length. [ 294.336214][T10069] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1693'. [ 295.341648][T10126] netlink: 'syz.4.1710': attribute type 3 has an invalid length. [ 295.732674][T10135] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 296.047909][T10143] __nla_validate_parse: 2 callbacks suppressed [ 296.047942][T10143] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1717'. [ 296.159672][T10150] -1O2~: renamed from syzkaller0 [ 296.281805][T10161] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.1721'. [ 297.035532][T10185] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1730'. [ 297.281599][T10193] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1733'. [ 297.866874][T10210] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1738'. [ 297.914142][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 297.921952][ C1] bridge0: port 3(hsr0) entered learning state [ 298.502068][T10229] validate_nla: 6 callbacks suppressed [ 298.502110][T10229] netlink: 'syz.0.1745': attribute type 25 has an invalid length. [ 298.555161][T10229] netlink: 'syz.0.1745': attribute type 29 has an invalid length. [ 298.632432][T10232] netlink: 'syz.1.1747': attribute type 21 has an invalid length. [ 298.680289][T10232] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1747'. [ 298.714893][T10234] netlink: 'syz.3.1748': attribute type 10 has an invalid length. [ 298.773648][T10237] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1747'. [ 298.883529][T10234] team0: Port device geneve1 added [ 298.926963][T10237] netlink: 21648 bytes leftover after parsing attributes in process `syz.1.1747'. [ 298.974601][T10237] tipc: Started in network mode [ 298.979840][T10237] tipc: Node identity e, cluster identity 4711 [ 299.031003][T10237] tipc: Node number set to 14 [ 299.482441][T10253] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1755'. [ 299.488657][T10255] netlink: 'syz.2.1756': attribute type 3 has an invalid length. [ 299.527778][T10255] netlink: 'syz.2.1756': attribute type 1 has an invalid length. [ 299.528012][T10253] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 299.590496][T10253] net_ratelimit: 163 callbacks suppressed [ 299.590528][T10253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.673025][T10255] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1756'. [ 301.461375][T10279] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1763'. [ 301.618747][T10289] netlink: 'syz.3.1766': attribute type 21 has an invalid length. [ 301.674712][T10284] delete_channel: no stack [ 301.675728][T10289] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1766'. [ 301.810916][T10293] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1766'. [ 301.893342][T10293] netlink: 21648 bytes leftover after parsing attributes in process `syz.3.1766'. [ 301.964023][T10293] tipc: Started in network mode [ 301.995578][T10293] tipc: Node identity e, cluster identity 4711 [ 302.030142][T10293] tipc: Node number set to 14 [ 302.476303][T10305] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1769'. [ 302.586569][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 302.723096][T10305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.661683][T10330] netlink: 'syz.0.1777': attribute type 25 has an invalid length. [ 303.725484][T10330] netlink: 'syz.0.1777': attribute type 29 has an invalid length. [ 307.446298][T10352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1786'. [ 307.719125][T10368] netlink: 'syz.4.1791': attribute type 25 has an invalid length. [ 307.729407][T10368] netlink: 'syz.4.1791': attribute type 29 has an invalid length. [ 310.892019][T10380] netlink: 'syz.4.1794': attribute type 25 has an invalid length. [ 310.915102][T10380] netlink: 'syz.4.1794': attribute type 29 has an invalid length. [ 311.712143][T10407] netlink: 'syz.3.1800': attribute type 2 has an invalid length. [ 311.723281][T10407] netlink: 'syz.3.1800': attribute type 4 has an invalid length. [ 311.738252][T10407] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1800'. [ 313.283196][ C1] bridge0: port 3(hsr0) entered forwarding state [ 313.289622][ C1] bridge0: topology change detected, propagating [ 313.297375][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.304624][ C1] bridge0: topology change detected, propagating [ 313.345659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 314.382386][T10419] netlink: 2220 bytes leftover after parsing attributes in process `syz.2.1810'. [ 314.414437][T10418] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1807'. [ 314.831164][T10442] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1819'. [ 314.973413][T10453] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1819'. [ 315.615398][T10465] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1822'. [ 316.318878][T10470] device syzkaller0 entered promiscuous mode [ 316.370929][T10490] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1828'. [ 316.436143][T10494] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1829'. [ 316.547029][T10494] netlink: 'syz.4.1829': attribute type 9 has an invalid length. [ 316.569299][T10494] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1829'. [ 317.133645][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.139985][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.539490][T10525] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1837'. [ 317.859167][T10547] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1841'. [ 317.904816][T10547] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 318.006166][T10550] netlink: 'syz.0.1842': attribute type 1 has an invalid length. [ 318.329638][T10564] device lo entered promiscuous mode [ 318.423918][T10564] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 318.527701][T10568] netlink: 'syz.4.1849': attribute type 29 has an invalid length. [ 318.560048][T10568] netlink: 'syz.4.1849': attribute type 29 has an invalid length. [ 318.646382][T10572] netlink: 'syz.4.1849': attribute type 29 has an invalid length. [ 318.918988][T10596] netlink: 'syz.4.1852': attribute type 29 has an invalid length. [ 319.015025][T10596] netlink: 'syz.4.1852': attribute type 29 has an invalid length. [ 319.068270][T10593] netlink: 'syz.4.1852': attribute type 29 has an invalid length. [ 319.103702][T10596] netlink: 'syz.4.1852': attribute type 29 has an invalid length. [ 319.174968][T10602] netlink: 'syz.4.1852': attribute type 29 has an invalid length. [ 319.464837][T10611] __nla_validate_parse: 3 callbacks suppressed [ 319.464854][T10611] netlink: 198628 bytes leftover after parsing attributes in process `syz.4.1858'. [ 319.607376][T10616] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1860'. [ 319.845416][T10625] syz.0.1862[10625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.845517][T10625] syz.0.1862[10625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.450919][T10650] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1870'. [ 320.646573][T10652] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1871'. [ 320.679164][T10653] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1871'. [ 321.123346][T10669] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1877'. [ 321.417868][T10678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.483620][T10678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.543666][T10678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.572845][T10678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.378838][T10698] validate_nla: 6 callbacks suppressed [ 322.378858][T10698] netlink: 'syz.2.1884': attribute type 11 has an invalid length. [ 323.141048][T10712] netlink: 'syz.4.1888': attribute type 25 has an invalid length. [ 323.157623][T10712] netlink: 'syz.4.1888': attribute type 29 has an invalid length. [ 323.179822][T10714] netlink: 'syz.4.1888': attribute type 21 has an invalid length. [ 323.229347][T10714] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1888'. [ 323.281461][T10714] netlink: 'syz.4.1888': attribute type 3 has an invalid length. [ 323.306705][T10714] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1888'. [ 323.595744][T10721] netlink: 'syz.2.1894': attribute type 21 has an invalid length. [ 323.675079][T10721] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1894'. [ 323.701629][T10721] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1894'. [ 323.777667][T10720] delete_channel: no stack [ 323.924207][T10738] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 323.949022][T10739] netlink: 'syz.3.1896': attribute type 3 has an invalid length. [ 323.977642][T10738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.374535][T10748] netlink: 'syz.2.1900': attribute type 1 has an invalid length. [ 324.836851][T10754] netlink: 'syz.3.1902': attribute type 7 has an invalid length. [ 325.039134][T10758] netlink: 'syz.3.1903': attribute type 25 has an invalid length. [ 325.237582][T10762] __nla_validate_parse: 3 callbacks suppressed [ 325.237605][T10762] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1901'. [ 325.335023][T10762] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1901'. [ 325.426116][T10762] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1901'. [ 325.565177][T10762] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1901'. [ 325.752248][T10762] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1901'. [ 326.451199][T10796] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1912'. [ 326.531156][T10796] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 327.314523][T10827] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1922'. [ 327.486667][T10829] device syzkaller0 entered promiscuous mode [ 329.264462][T10876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1935'. [ 329.307783][T10872] validate_nla: 9 callbacks suppressed [ 329.307827][T10872] netlink: 'syz.0.1936': attribute type 33 has an invalid length. [ 329.341523][T10872] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1936'. [ 329.364412][T10878] netlink: 'syz.2.1937': attribute type 40 has an invalid length. [ 329.404568][T10872] : renamed from pim6reg1 [ 330.095950][T10910] netlink: 'syz.4.1946': attribute type 1 has an invalid length. [ 330.126311][T10910] netlink: 'syz.4.1946': attribute type 3 has an invalid length. [ 330.151374][T10910] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1946'. [ 330.193761][T10908] netlink: 'syz.0.1944': attribute type 2 has an invalid length. [ 330.341810][T10908] netlink: 1045 bytes leftover after parsing attributes in process `syz.0.1944'. [ 330.642396][T10923] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1951'. [ 330.695068][T10926] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.1950'. [ 330.827549][T10926] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.1950'. [ 330.857564][T10933] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1953'. [ 330.897364][T10933] tc_dump_action: action bad kind [ 331.348705][T10967] netlink: 'syz.0.1963': attribute type 10 has an invalid length. [ 331.364452][T10967] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.1963'. [ 331.374342][T10967] openvswitch: netlink: Flow key attr not present in new flow. [ 331.712452][T10978] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1966'. [ 332.346329][T11003] device aaaaaaaaaaaaaaa entered promiscuous mode [ 332.375395][T11009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1975'. [ 332.409912][T11010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1975'. [ 332.606240][T11014] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1978'. [ 332.621569][T11020] netlink: 'syz.3.1977': attribute type 29 has an invalid length. [ 332.692988][T11020] netlink: 'syz.3.1977': attribute type 29 has an invalid length. [ 332.705186][T11017] netlink: 'syz.3.1977': attribute type 29 has an invalid length. [ 332.713697][T11007] netlink: 'syz.0.1975': attribute type 1 has an invalid length. [ 333.021964][T11035] device syzkaller0 entered promiscuous mode [ 334.800195][T11123] validate_nla: 3 callbacks suppressed [ 334.800241][T11123] netlink: 'syz.2.2002': attribute type 2 has an invalid length. [ 335.387814][T11148] netlink: 'syz.1.2012': attribute type 3 has an invalid length. [ 335.759932][T11176] __nla_validate_parse: 7 callbacks suppressed [ 335.759970][T11176] netlink: 191020 bytes leftover after parsing attributes in process `syz.4.2018'. [ 335.805236][T11182] netlink: 'syz.2.2019': attribute type 10 has an invalid length. [ 335.822545][T11182] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2019'. [ 335.839375][T11176] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 335.861192][T11176] CPU: 1 PID: 11176 Comm: syz.4.2018 Not tainted syzkaller #0 [ 335.868701][T11176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 335.878764][T11176] Call Trace: [ 335.882040][T11176] [ 335.884964][T11176] dump_stack_lvl+0x188/0x250 [ 335.889639][T11176] ? show_regs_print_info+0x20/0x20 [ 335.894826][T11176] ? load_image+0x410/0x410 [ 335.899324][T11176] sysfs_warn_dup+0x8a/0xa0 [ 335.903814][T11176] sysfs_do_create_link_sd+0xc0/0x110 [ 335.909177][T11176] device_add+0x83b/0x1050 [ 335.913588][T11176] wiphy_register+0x1e74/0x2c40 [ 335.918445][T11176] ? cfg80211_event_work+0x40/0x40 [ 335.923558][T11176] ? minstrel_ht_alloc+0x807/0x980 [ 335.928689][T11176] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 335.934768][T11176] ieee80211_register_hw+0x2a03/0x3a60 [ 335.940224][T11176] ? ieee80211_register_hw+0xb21/0x3a60 [ 335.945789][T11176] ? ieee80211_tasklet_handler+0x20/0x20 [ 335.951416][T11176] ? rcu_is_watching+0x11/0xa0 [ 335.956176][T11176] ? hrtimer_init+0x10c/0x220 [ 335.960850][T11176] mac80211_hwsim_new_radio+0x209d/0x4050 [ 335.966578][T11176] hwsim_new_radio_nl+0xa7d/0xc50 [ 335.971608][T11176] genl_rcv_msg+0xd0b/0xfa0 [ 335.976112][T11176] ? genl_bind+0x370/0x370 [ 335.980530][T11176] ? __dev_queue_xmit+0x1b64/0x2e50 [ 335.985715][T11176] ? verify_lock_unused+0x140/0x140 [ 335.990908][T11176] ? perf_trace_lock_acquire+0xed/0x3f0 [ 335.996454][T11176] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 336.003039][T11176] ? perf_trace_lock+0xe4/0x390 [ 336.007896][T11176] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 336.014233][T11176] netlink_rcv_skb+0x1e9/0x430 [ 336.019001][T11176] ? genl_bind+0x370/0x370 [ 336.023420][T11176] ? netlink_ack+0xb10/0xb10 [ 336.028015][T11176] ? down_read+0x1aa/0x2e0 [ 336.032430][T11176] genl_rcv+0x24/0x40 [ 336.036403][T11176] netlink_unicast+0x78f/0x940 [ 336.041180][T11176] netlink_sendmsg+0x8ba/0xbe0 [ 336.045952][T11176] ? netlink_getsockopt+0x570/0x570 [ 336.051144][T11176] ? aa_sock_msg_perm+0x94/0x150 [ 336.056078][T11176] ? apparmor_socket_sendmsg+0x88/0x230 [ 336.061616][T11176] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 336.066893][T11176] ? security_socket_sendmsg+0x7c/0xa0 [ 336.072343][T11176] ? netlink_getsockopt+0x570/0x570 [ 336.077533][T11176] ____sys_sendmsg+0x5be/0x8f0 [ 336.082302][T11176] ? __sys_sendmsg_sock+0x30/0x30 [ 336.087334][T11176] ? import_iovec+0x6f/0xa0 [ 336.091846][T11176] ___sys_sendmsg+0x236/0x2e0 [ 336.096522][T11176] ? __sys_sendmsg+0x290/0x290 [ 336.101286][T11176] ? trace_event_raw_event_lock+0x250/0x250 [ 336.107195][T11176] __se_sys_sendmsg+0x1b7/0x2a0 [ 336.112058][T11176] ? __x64_sys_sendmsg+0x80/0x80 [ 336.117024][T11176] ? syscall_enter_from_user_mode+0x2a/0x70 [ 336.122927][T11176] do_syscall_64+0x4c/0xa0 [ 336.127342][T11176] ? clear_bhb_loop+0x30/0x80 [ 336.132009][T11176] ? clear_bhb_loop+0x30/0x80 [ 336.136677][T11176] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 336.142561][T11176] RIP: 0033:0x7f180953e159 [ 336.146970][T11176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.166575][T11176] RSP: 002b:00007f1807796028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.174993][T11176] RAX: ffffffffffffffda RBX: 00007f18097c5fa0 RCX: 00007f180953e159 [ 336.182958][T11176] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 336.190920][T11176] RBP: 00007f18095d506b R08: 0000000000000000 R09: 0000000000000000 [ 336.198886][T11176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.206846][T11176] R13: 00007f18097c6038 R14: 00007f18097c5fa0 R15: 00007ffe795d0cd8 [ 336.214832][T11176] [ 337.340480][T11212] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2029'. [ 337.745239][T11242] netlink: 'syz.2.2038': attribute type 13 has an invalid length. [ 337.758006][T11242] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2038'. [ 340.556527][T11242] erspan0: refused to change device tx_queue_len [ 340.571511][T11242] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 340.597735][T11250] netlink: 'syz.2.2038': attribute type 21 has an invalid length. [ 340.615909][T11250] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.2038'. [ 341.125600][T11279] netlink: 'syz.4.2045': attribute type 2 has an invalid length. [ 341.163522][T11281] netlink: 'syz.4.2045': attribute type 7 has an invalid length. [ 341.175519][T11281] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2045'. [ 341.447387][T11285] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 341.559048][T11297] device syzkaller0 entered promiscuous mode [ 342.019725][T11306] netlink: 'syz.4.2057': attribute type 9 has an invalid length. [ 342.029385][T11306] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2057'. [ 342.465174][T11325] netlink: 'syz.4.2064': attribute type 19 has an invalid length. [ 342.524714][T11325] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2064'. [ 343.565517][T11365] netlink: 'syz.0.2072': attribute type 21 has an invalid length. [ 343.593282][T11365] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2072'. [ 344.138182][T11383] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2077'. [ 344.708705][T11394] tun0: tun_chr_ioctl cmd 1074025675 [ 344.757921][T11394] tun0: persist enabled [ 344.771288][T11401] tun0: tun_chr_ioctl cmd 1074025681 [ 344.996971][T11401] tun0: tun_chr_ioctl cmd 1074025677 [ 345.003657][T11401] tun0: linktype set to 1 [ 345.961709][T11449] netlink: 'syz.3.2100': attribute type 2 has an invalid length. [ 346.000293][T11449] netlink: 'syz.3.2100': attribute type 7 has an invalid length. [ 346.043514][T11449] netlink: 208644 bytes leftover after parsing attributes in process `syz.3.2100'. [ 346.094720][T11450] netlink: 'syz.2.2098': attribute type 9 has an invalid length. [ 346.108000][T11450] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2098'. [ 346.496289][T11466] netlink: 'syz.1.2104': attribute type 13 has an invalid length. [ 346.516928][T11466] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.2104'. [ 346.520199][T11463] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2103'. [ 347.459774][T11490] netlink: 'syz.2.2111': attribute type 10 has an invalid length. [ 347.558725][T11490] device veth0_vlan left promiscuous mode [ 347.581506][T11490] device veth0_vlan entered promiscuous mode [ 347.627772][T11490] team0: Device veth0_vlan failed to register rx_handler [ 347.695912][T11491] netlink: 'syz.2.2111': attribute type 10 has an invalid length. [ 347.713798][T11491] device veth0_vlan left promiscuous mode [ 347.785848][T11491] device veth0_vlan entered promiscuous mode [ 347.797983][T11491] team0: Device veth0_vlan failed to register rx_handler [ 347.941196][T11488] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2112'. [ 347.965043][T11489] netlink: 'syz.2.2111': attribute type 10 has an invalid length. [ 347.994283][T11489] team0: Device ipvlan1 failed to register rx_handler [ 348.209984][T11506] netlink: 'syz.1.2116': attribute type 39 has an invalid length. [ 348.272377][T11519] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.2121'. [ 348.282667][T11519] openvswitch: netlink: Key type 4112 is out of range max 29 [ 348.310291][T11513] netlink: 'syz.2.2118': attribute type 16 has an invalid length. [ 348.334716][T11515] netlink: 'syz.4.2120': attribute type 3 has an invalid length. [ 348.342712][T11513] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2118'. [ 348.388403][T11516] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2120'. [ 348.452798][T11515] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.2120'. [ 348.494549][T11516] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2120'. [ 349.758356][T11607] C: renamed from team_slave_0 [ 349.792139][T11607] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2158'. [ 349.872020][T11607] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 349.972242][T11620] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.031861][T11620] device bridge_slave_1 left promiscuous mode [ 350.045293][T11620] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.089979][T11620] device bridge_slave_0 left promiscuous mode [ 350.096649][T11620] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.618846][T11652] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2178'. [ 351.511773][T11718] validate_nla: 4 callbacks suppressed [ 351.511789][T11718] netlink: 'syz.1.2208': attribute type 29 has an invalid length. [ 351.574790][T11718] netlink: 'syz.1.2208': attribute type 29 has an invalid length. [ 351.615661][T11725] netlink: 'syz.1.2208': attribute type 29 has an invalid length. [ 351.632924][T11731] netlink: 'syz.1.2208': attribute type 29 has an invalid length. [ 352.677289][T11784] netlink: 'syz.1.2235': attribute type 13 has an invalid length. [ 352.725422][T11784] __nla_validate_parse: 2 callbacks suppressed [ 352.725438][T11784] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2235'. [ 355.358053][T11877] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 355.369124][T11877] device syzkaller0 entered promiscuous mode [ 355.442723][T11885] netlink: 'syz.0.2280': attribute type 29 has an invalid length. [ 355.457074][T11885] netlink: 'syz.0.2280': attribute type 29 has an invalid length. [ 355.467629][T11885] netlink: 'syz.0.2280': attribute type 29 has an invalid length. [ 355.481212][T11885] netlink: 'syz.0.2280': attribute type 29 has an invalid length. [ 355.772582][T11909] netlink: 'syz.4.2291': attribute type 29 has an invalid length. [ 356.077140][T11922] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2297'. [ 356.118124][T11922] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2297'. [ 356.129107][T11926] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2297'. [ 356.670085][T11962] validate_nla: 7 callbacks suppressed [ 356.670102][T11962] netlink: 'syz.1.2316': attribute type 29 has an invalid length. [ 356.715154][T11962] netlink: 'syz.1.2316': attribute type 29 has an invalid length. [ 356.772029][T11970] netlink: 'syz.1.2316': attribute type 29 has an invalid length. [ 356.824607][T11962] netlink: 'syz.1.2316': attribute type 29 has an invalid length. [ 356.901310][T11979] netlink: 'syz.1.2324': attribute type 29 has an invalid length. [ 356.954829][T11979] netlink: 'syz.1.2324': attribute type 29 has an invalid length. [ 356.968699][T11982] netlink: 'syz.1.2324': attribute type 29 has an invalid length. [ 357.087230][T11984] pimreg: tun_chr_ioctl cmd 1074025692 [ 357.251633][T11998] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2333'. [ 357.277251][T12001] netlink: 'syz.2.2334': attribute type 29 has an invalid length. [ 357.322609][T12001] netlink: 'syz.2.2334': attribute type 29 has an invalid length. [ 357.333565][T12006] netlink: 'syz.2.2334': attribute type 29 has an invalid length. [ 357.581858][T12022] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2343'. [ 358.420677][T12060] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2360'. [ 358.452107][T12060] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2360'. [ 358.469895][T12064] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2362'. [ 358.483761][T12065] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2360'. [ 358.500458][T12060] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2360'. [ 358.648637][T12077] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2368'. [ 358.703948][T12077] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2368'. [ 358.743575][T12082] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2370'. [ 358.761369][T12083] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2368'. [ 358.840309][T12068] netdevsim netdevsim1: Direct firmware load for ( failed with error -2 [ 358.868374][T12068] netdevsim netdevsim1: Falling back to sysfs fallback for: ( [ 359.002133][T12094] bridge0: port 3(syz_tun) entered disabled state [ 359.069015][T12094] device syz_tun left promiscuous mode [ 359.097501][T12094] bridge0: port 3(syz_tun) entered disabled state [ 359.646633][T12135] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2393'. [ 364.455204][T12245] device sit0 entered promiscuous mode [ 365.259672][T12258] device syzkaller0 entered promiscuous mode [ 366.555302][T12275] device syzkaller0 entered promiscuous mode [ 367.389887][T12284] device sit0 entered promiscuous mode [ 369.229458][T12316] device syzkaller0 entered promiscuous mode [ 369.282575][T12305] ------------[ cut here ]------------ [ 369.288255][T12305] WARNING: CPU: 0 PID: 12305 at kernel/events/core.c:6698 perf_pending_task+0x353/0x480 [ 369.298188][T12305] Modules linked in: [ 369.302169][T12305] CPU: 0 PID: 12305 Comm: syz.0.2458 Not tainted syzkaller #0 [ 369.309714][T12305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.319903][T12305] RIP: 0010:perf_pending_task+0x353/0x480 [ 369.325706][T12305] Code: e8 f2 3c de ff 84 db 75 10 e8 89 3a de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 79 3a de ff e8 fc a2 65 ff eb e9 e8 6d 3a de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 369.345447][T12305] RSP: 0018:ffffc90002def9c0 EFLAGS: 00010293 [ 369.351528][T12305] RAX: ffffffff819ada33 RBX: ffff88804d7f51e8 RCX: ffff888049371dc0 [ 369.359941][T12305] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 369.368026][T12305] RBP: ffff88804d7f4fb8 R08: ffff8880493727d3 R09: 1ffff1100926e4fa [ 369.376038][T12305] R10: dffffc0000000000 R11: ffffed100926e4fb R12: ffff888049371dc0 [ 369.384145][T12305] R13: ffff88802b35ed58 R14: 0000000000000000 R15: 1ffff11009afe9f7 [ 369.392199][T12305] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 369.401230][T12305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.407874][T12305] CR2: 0000000100000000 CR3: 0000000060f51000 CR4: 00000000003506f0 [ 369.415931][T12305] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000004 [ 369.423982][T12305] DR3: 0000000000000004 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 369.431964][T12305] Call Trace: [ 369.435347][T12305] [ 369.438280][T12305] task_work_run+0x125/0x1a0 [ 369.442883][T12305] do_exit+0x635/0x2110 [ 369.447151][T12305] ? put_task_struct+0x80/0x80 [ 369.451922][T12305] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 369.458041][T12305] ? cgroup_freezing+0x264/0x310 [ 369.463411][T12305] do_group_exit+0x12c/0x2f0 [ 369.468013][T12305] ? lockdep_hardirqs_on+0x94/0x140 [ 369.473364][T12305] get_signal+0x7eb/0x12e0 [ 369.477800][T12305] arch_do_signal_or_restart+0xe6/0x12a0 [ 369.483521][T12305] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 369.489769][T12305] ? ktime_get_real_ts64+0x440/0x440 [ 369.495135][T12305] ? futex_exit_release+0x1c0/0x1c0 [ 369.500340][T12305] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 369.506398][T12305] ? get_sigframe_size+0x10/0x10 [ 369.511343][T12305] ? lock_chain_count+0x20/0x20 [ 369.516263][T12305] ? exit_to_user_mode_loop+0x3b/0x130 [ 369.521729][T12305] exit_to_user_mode_loop+0x9e/0x130 [ 369.527112][T12305] exit_to_user_mode_prepare+0xee/0x180 [ 369.532660][T12305] syscall_exit_to_user_mode+0x16/0x40 [ 369.538200][T12305] do_syscall_64+0x58/0xa0 [ 369.542616][T12305] ? clear_bhb_loop+0x30/0x80 [ 369.547497][T12305] ? clear_bhb_loop+0x30/0x80 [ 369.552178][T12305] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 369.558135][T12305] RIP: 0033:0x7f36d935a159 [ 369.562558][T12305] Code: Unable to access opcode bytes at RIP 0x7f36d935a12f. [ 369.570002][T12305] RSP: 002b:00007f36d75b20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 369.578462][T12305] RAX: fffffffffffffe00 RBX: 00007f36d95e1fa8 RCX: 00007f36d935a159 [ 369.586522][T12305] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f36d95e1fa8 [ 369.594706][T12305] RBP: 00007f36d95e1fa0 R08: 0000000000000000 R09: 0000000000000000 [ 369.602692][T12305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.610764][T12305] R13: 00007f36d95e2038 R14: 00007ffd39c1cfc0 R15: 00007ffd39c1d0a8 [ 369.618797][T12305] [ 369.621847][T12305] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 369.629124][T12305] CPU: 0 PID: 12305 Comm: syz.0.2458 Not tainted syzkaller #0 [ 369.636584][T12305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.646642][T12305] Call Trace: [ 369.649929][T12305] [ 369.652860][T12305] dump_stack_lvl+0x188/0x250 [ 369.657574][T12305] ? show_regs_print_info+0x20/0x20 [ 369.662785][T12305] ? load_image+0x410/0x410 [ 369.667303][T12305] panic+0x2f8/0x850 [ 369.671291][T12305] ? bpf_jit_dump+0xd0/0xd0 [ 369.675811][T12305] ? perf_pending_task+0x353/0x480 [ 369.680930][T12305] __warn+0x248/0x2b0 [ 369.684931][T12305] ? perf_pending_task+0x353/0x480 [ 369.690054][T12305] report_bug+0x1b9/0x2e0 [ 369.694404][T12305] handle_bug+0x3a/0x70 [ 369.698562][T12305] exc_invalid_op+0x16/0x40 [ 369.703069][T12305] asm_exc_invalid_op+0x16/0x20 [ 369.707923][T12305] RIP: 0010:perf_pending_task+0x353/0x480 [ 369.713646][T12305] Code: e8 f2 3c de ff 84 db 75 10 e8 89 3a de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 79 3a de ff e8 fc a2 65 ff eb e9 e8 6d 3a de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 369.733255][T12305] RSP: 0018:ffffc90002def9c0 EFLAGS: 00010293 [ 369.739333][T12305] RAX: ffffffff819ada33 RBX: ffff88804d7f51e8 RCX: ffff888049371dc0 [ 369.747306][T12305] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 369.755288][T12305] RBP: ffff88804d7f4fb8 R08: ffff8880493727d3 R09: 1ffff1100926e4fa [ 369.763263][T12305] R10: dffffc0000000000 R11: ffffed100926e4fb R12: ffff888049371dc0 [ 369.771238][T12305] R13: ffff88802b35ed58 R14: 0000000000000000 R15: 1ffff11009afe9f7 [ 369.779227][T12305] ? perf_pending_task+0x353/0x480 [ 369.784362][T12305] task_work_run+0x125/0x1a0 [ 369.788975][T12305] do_exit+0x635/0x2110 [ 369.793147][T12305] ? put_task_struct+0x80/0x80 [ 369.797921][T12305] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 369.803915][T12305] ? cgroup_freezing+0x264/0x310 [ 369.808870][T12305] do_group_exit+0x12c/0x2f0 [ 369.813467][T12305] ? lockdep_hardirqs_on+0x94/0x140 [ 369.818671][T12305] get_signal+0x7eb/0x12e0 [ 369.823110][T12305] arch_do_signal_or_restart+0xe6/0x12a0 [ 369.828925][T12305] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 369.835172][T12305] ? ktime_get_real_ts64+0x440/0x440 [ 369.840472][T12305] ? futex_exit_release+0x1c0/0x1c0 [ 369.845675][T12305] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 369.851669][T12305] ? get_sigframe_size+0x10/0x10 [ 369.856616][T12305] ? lock_chain_count+0x20/0x20 [ 369.861484][T12305] ? exit_to_user_mode_loop+0x3b/0x130 [ 369.866947][T12305] exit_to_user_mode_loop+0x9e/0x130 [ 369.872234][T12305] exit_to_user_mode_prepare+0xee/0x180 [ 369.877783][T12305] syscall_exit_to_user_mode+0x16/0x40 [ 369.883252][T12305] do_syscall_64+0x58/0xa0 [ 369.887669][T12305] ? clear_bhb_loop+0x30/0x80 [ 369.892354][T12305] ? clear_bhb_loop+0x30/0x80 [ 369.897033][T12305] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 369.902940][T12305] RIP: 0033:0x7f36d935a159 [ 369.907361][T12305] Code: Unable to access opcode bytes at RIP 0x7f36d935a12f. [ 369.914725][T12305] RSP: 002b:00007f36d75b20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 369.923162][T12305] RAX: fffffffffffffe00 RBX: 00007f36d95e1fa8 RCX: 00007f36d935a159 [ 369.931141][T12305] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f36d95e1fa8 [ 369.939128][T12305] RBP: 00007f36d95e1fa0 R08: 0000000000000000 R09: 0000000000000000 [ 369.947108][T12305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.955093][T12305] R13: 00007f36d95e2038 R14: 00007ffd39c1cfc0 R15: 00007ffd39c1d0a8 [ 369.963091][T12305] [ 369.966554][T12305] Kernel Offset: disabled [ 369.970891][T12305] Rebooting in 86400 seconds..