last executing test programs: 14.109269065s ago: executing program 0 (id=5192): socket$kcm(0x22, 0x2, 0x26) perf_event_open(&(0x7f0000001580)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x800, 0x169911bf578c68dc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x40001, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe51e}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004160000000006916860000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf670000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000e80), 0xffffffffffffffd2}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0xac9a330e9bf16f29, @perf_bp={0x0, 0x2}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x202, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x11842, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xe, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000001180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f00000011c0), 0x3a, 0x10, &(0x7f0000001200), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f00000003c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)='\n', 0x1}], 0x1}, 0x24004091) setsockopt$sock_attach_bpf(r2, 0x84, 0x24, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8991, &(0x7f0000001240)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001e40)={r0}) perf_event_open(&(0x7f0000002540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000440)={0x5, &(0x7f0000000480)=[{0x2d, 0x0, 0x3, 0xffffeffc}, {0x15, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x6}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e0072", 0x54}], 0x1}, 0x20003f80) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map, 0xb, 0x0, 0xfffffff7, &(0x7f0000000500), 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0], 0x0}, 0x40) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4d2f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x4400, 0x2, 0x0, 0x7, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000760091"], 0xfe33) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000081}, 0x20050) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f00000001c0)=0x8000) socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f0000002980), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002d00)={0xd, 0x4, &(0x7f0000002dc0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) 9.497004244s ago: executing program 0 (id=5198): syz_clone(0x8000000, &(0x7f0000000500), 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000680)) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00'}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'ip6gre0\x00', 0x210}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6007f03000000000000040014000f000a000f0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb4a00f6985b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608463a3f", @ANYRES16=r1], 0xfe33) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000200)) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000a80)={'full', 0x20, 0x2, 0x20, 0x1000000}, 0x2f) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 9.428537876s ago: executing program 4 (id=5199): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c040, 0xec5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000001f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001f40)={0x4000}, 0x8, 0x10, &(0x7f0000000200), 0x10}, 0x94) r0 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000950000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f0000000480)) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, &(0x7f00000004c0)) socket$kcm(0xa, 0x2, 0x73) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="16b457e7a9f3c3310c53ddaea0123529e35feaccac03d8efbe1369b85bd5b08b7a0f9b16471eaaebf43e9f819a2c56b0ccfcaf40e4c5", @ANYBLOB="0000000000000000000000000000005ed200be6a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70000000000850000000c000000b70000001d0c8cd310af0896bc77108fce4d9000000000851000000300000018000000000000000000000000000000950000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="120000007f0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000800)={r4, &(0x7f0000000840), 0x0}, 0x20) r5 = socket$kcm(0xa, 0x2, 0x0) close(r5) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000880)={&(0x7f00000008c0)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055) setsockopt$sock_attach_bpf(r5, 0x0, 0x4, 0x0, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) close(r7) r8 = socket$kcm(0xa, 0x5, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f0000000a00)={&(0x7f0000000a40)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="7f", 0x1}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) close(r7) 8.43004853s ago: executing program 4 (id=5203): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)="8824", 0x2}], 0x1}, 0x45) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/131, 0xd}], 0x1}, 0x40) sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000740), 0x4) recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x40000120) 8.330778632s ago: executing program 1 (id=5205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0880, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200005d2f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xe139}, 0x8020, 0x0, 0x1780, 0x1, 0x4, 0x0, 0x92de, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000004c0), 0x4) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x2000c805) sendmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0x2, &(0x7f00000006c0)=r6, 0x4) recvmsg$kcm(r3, &(0x7f0000000700)={&(0x7f0000000740)=@nl=@unspec, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000840)=""/48, 0x30}, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz1\x00', 0x200002, 0x3f) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000640)={'vxcan1\x00', @random="2548e14dc71e"}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000940)=@o_path={0x0, r6, 0x4000, r2}, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000009c0)='./cgroup/file0\x00', 0xd0939199c36b4d28) mkdir(&(0x7f0000000a00)='./cgroup/file0/file0\x00', 0x81) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)=0x1) 8.315625942s ago: executing program 3 (id=5206): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801080040000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) 8.018192629s ago: executing program 3 (id=5207): socket$kcm(0x22, 0x2, 0x26) perf_event_open(&(0x7f0000001580)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x800, 0x169911bf578c68dc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x40001, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe51e}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000e80), 0xffffffffffffffd2}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0xac9a330e9bf16f29, @perf_bp={0x0, 0x2}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x202, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x11842, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xe, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000001180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f00000011c0), 0x3a, 0x10, &(0x7f0000001200), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f00000003c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)='\n', 0x1}], 0x1}, 0x24004091) setsockopt$sock_attach_bpf(r2, 0x84, 0x24, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8991, &(0x7f0000001240)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000200)) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000a80)={'full', 0x20, 0x2, 0x20, 0x1000000}, 0x2f) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 7.041548652s ago: executing program 4 (id=5210): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x2a9, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000000}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x2, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x16, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff0000000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000015010200e9ffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r4, 0x0, 0xe, 0x0, &(0x7f0000001200)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r1, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 6.370072378s ago: executing program 3 (id=5211): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x87, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x9d, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x52}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x7, 0x5, 0x9, 0x6, 0xd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xffc000}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0xfa, &(0x7f00000000c0)=""/250, 0x41100, 0x12, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xd, 0x100, 0x95}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x1, 0x5, 0x10, 0xb}], 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xe, 0x3, 0x9, 0x2, 0x0, 0x5, 0x1000, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x3, 0x5}, 0x100, 0x51d, 0x613a, 0xbdec3ecd69556694, 0xffff, 0xffff, 0x9, 0x0, 0x7fffffff, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x4, [@float={0x8, 0x0, 0x0, 0x10, 0x8}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x1, 0x1}, @struct={0x0, 0x8, 0x0, 0x4, 0x1, 0x7fffffff, [{0x3, 0x3, 0xfffffffd}, {0xe, 0x0, 0xfffffff7}, {0x1, 0x1, 0x18}, {0xe, 0x3}, {0x6, 0x0, 0x5afb376b}, {0x7, 0x3}, {0x10, 0x1, 0x4}, {0x9, 0x5, 0x3}]}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000a40)=""/203, 0xa4, 0xcb, 0x0, 0x7}, 0x28) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@generic={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x4}, 0x18) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_ext={0x1c, 0xd, &(0x7f0000000780)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @generic={0x9, 0xa, 0x7, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}, @ldst={0x2, 0x0, 0x1, 0xb, 0x5, 0xfffffffffffffffc, 0x10}, @exit, @jmp={0x5, 0x0, 0xc, 0x5, 0xa, 0xffffffffffffffe0, 0x8}], &(0x7f0000000800)='syzkaller\x00', 0x8, 0x4e, &(0x7f0000000840)=""/78, 0x41000, 0x21, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x3, 0x9, 0x3, 0x1}, 0x10, 0x9f95, r1, 0x9, &(0x7f0000000c80)=[r5, r6], &(0x7f0000000cc0)=[{0x5, 0x3, 0x6, 0x4}, {0x1, 0x4, 0x6, 0xb}, {0x1, 0x1, 0x6, 0x7}, {0x5, 0x3, 0x0, 0x3}, {0x3, 0x5, 0x3, 0x8}, {0x5, 0x2, 0x2, 0x1}, {0x3, 0x4, 0x5, 0xb}, {0x3, 0x1, 0x8, 0x7}, {0x2, 0x1, 0x1, 0x9}], 0x10, 0x80000000}, 0x94) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x6, '\x00', r3, 0xffffffffffffffff, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f40)={{r7, 0xffffffffffffffff}, &(0x7f0000000ec0), &(0x7f0000000f00)='%pK \x00'}, 0x20) (async) openat$cgroup_subtree(r1, &(0x7f0000000f80), 0x2, 0x0) (async) r9 = openat$cgroup_pressure(r5, &(0x7f0000000fc0)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000001000)={'full', 0x20, 0x2, 0x20, 0x3}, 0x2f) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f00000013c0)={&(0x7f0000001080)=@sco={0x1f, @none}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001100)=""/105, 0x69}, {&(0x7f0000001180)=""/47, 0x2f}, {&(0x7f00000011c0)=""/154, 0x9a}], 0x3, &(0x7f00000012c0)=""/234, 0xea}, 0x5e4d313d7a2eafb2) (async) r11 = openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000001400), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r11, &(0x7f0000001440)={'geneve0', 0x32, 0x36}, 0xa) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001480)='cpu.pressure\x00', 0x2, 0x0) (async, rerun: 64) sendmsg$inet(r10, &(0x7f00000019c0)={&(0x7f00000014c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001500)="6b5722095665087afb510fc6035198fd77", 0x11}, {&(0x7f0000001540)="be9be9e308b7622b3f24fb983102370f957635d54bea45a42375a153b24fe6ec7e158ac991f30b4f1d87584f570dfc4059d41d99ca1b375eaee3bcdf61a77ecdf15a28c63e8a3016067419306b14a4db765ecb4603d95851c4e8259573ada683f6c9da0090cce6162e3355d51b", 0x6d}, {&(0x7f00000015c0)="08efe45f985a0a403cb261937ce21ec3ac7876f393a32795442089b2ace79aff8e513c965979f4026d680944f85fe250f657baeb", 0x34}, {&(0x7f0000001600)="4a1c253e20ee4a99cfb40ee05a04f48695ae1f20c9797d595007177b01c9be4abb8d7ca59c22d42baa09a93ea63dd0685dbab26beb62d9807027fde2018d0d7d6e2fceefde4cae2dad66e6dc84960a3760f09dcb72fdd4eb97a310a328", 0x5d}, {&(0x7f0000001680)="f270027fdd306dd504f135481aa282173863475ca245bb39d3f3875ffc4cf99c1de79326e655e1e848658b31a5c755515f239189c7c0f09e3fc23623bffae301ba1e50defc34f746e210441013efabd34d20dcd84a7faf229ad0525ddb4a9d63b89f315ff5ffc47415084d90cde232542ec31dc9b4bbd0bd21bc53f943769035c9704f5d9a200ba6cb78fe3344b8e86a06507863967de3a1ad64dc33d6d7efab1d0b741d2aacdabd5b41c720b67d6f439aec2aa280fec9d4567ce04024c3b3e9b5ebd3ba5129d667", 0xc8}, {&(0x7f0000001780)="4de0617ead83de59bd6ebe060737c6673c02b02266301b7041dc0c8b00744f6e3f0988de87c8cfa1376f985182b847e9790e8bbeaf421bcbabd7d41617dcb2c01608e7d5fe0b717a36abcb6ed86dd642d6fb05b74f1d7477c33e5df6eb2104bfe17d2d21673960b60862665bb216390f556247ac7720bafba3f51fe3f9f5a4cab01f100aaa040bb74d5537f564057ef92818cb52d712", 0x96}, {&(0x7f0000001840)="094cb7beb7110527a9c58f41872e41841245e6b1f32b921621c0ed8271b61b6c21c1b71117f5d9edc45eadeee3ad2d2fbe429fd99726a0c472cee8fe707b6aa8ceab22bf170b2f2237b02f417006310990d8525eb3251bc8b082638672cd4100be394cfedc46603fd97ecdf426684c6636334799", 0x74}], 0x7, &(0x7f0000001940)=[@ip_ttl={{0x14, 0x0, 0x2, 0x328}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x60}, 0x8040) (rerun: 64) socket$kcm(0x29, 0x2, 0x0) (async, rerun: 64) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00), 0x80800, 0x0) (rerun: 64) ioctl$TUNSETSTEERINGEBPF(r12, 0x800454e0, &(0x7f0000001a40)=r1) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a80), 0x800, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000001ac0)={'wg2\x00', 0x1000}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001b80)={{r6}, &(0x7f0000001b00), &(0x7f0000001b40)='%pK \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001bc0)={r6, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001d00)={r14, &(0x7f0000001c00)="2e2e167e5c38de76124da6033fe32d1160f6d34d1998e8a75f670d338b2964b58881e9db36b4b41da2351f4c53b4287ecebc8f6a690b6cd413e8e0a1662709554c676600b5e9aae2d692498f97f6bb8ef66dba303fa3b669b4976476c5e78642d9121112964942c9ed8f656a07ff894ef7076a72bcd8d48527c23148b6506014f84a1dbeebc0d748bd8014ce908ec0ef8e889e16064b0732ecc73e311c8dbdfabc18f4b5400d235e73b570e44685d55f882ede4952179936329f307a11bc6eb21752b5805ef1494c12745f383fbf2ea6934b4f0276241faa1dc02933685e42b7e1e72d5d1b50da1c93e56f943d375fec9c7ad097"}, 0x20) (async) ioctl$TUNGETFILTER(r11, 0x801054db, &(0x7f0000001d40)=""/183) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000001e40)={'veth1_to_hsr\x00', 0x200}) 5.908194999s ago: executing program 0 (id=5212): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000030000000400000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x10, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0000fbff000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x8100, 0xe, 0x0, &(0x7f00000005c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffff9}, 0x0, 0xc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r4, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000001580)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000001680), &(0x7f00000016c0)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 5.908110429s ago: executing program 1 (id=5213): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1800}, 0x48) 5.749469453s ago: executing program 1 (id=5214): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1341, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x50, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfbca}, 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000580)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xed}, 0xfffffffffffffd6d) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000040)=[{&(0x7f0000000080)="6000000022007f029e607dd75fcb520003a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$sock(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x48044) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000340)=@in6={0xa, 0x6000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x38}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)="e50d374b6212df02080000021e49991a17fd108495110df1e40b73f534f616f48f30fffa4dad61d22c6e10637ad36589f8cc61f2da3498b04b5710c34c562fc5", 0x40}], 0x1, 0x0, 0x0, 0x900}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x3, &(0x7f0000000ac0)=ANY=[@ANYRES32=r0], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000b40)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x7, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$kcm(0x25, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0xffff, 0x6}, 0x0, 0xc, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.673096695s ago: executing program 4 (id=5216): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x39, 0x1, 0x40, 0x0, 0x0, 0x0, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0, 0x4}, 0x8061, 0x200000003, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000008c0)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10004, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10004, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x18, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x2, 0x200000000000006, 0x0) (async) r4 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5452, &(0x7f0000000b00)) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000b40), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000c00), 0x0, 0x8024, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000c40)={'batadv0\x00', 0x800}) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0xb, &(0x7f0000000c80), 0xe) sendmsg$inet(r5, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000d80)="8c3f60fa", 0x4}, {0x0}, {0x0}], 0x3}, 0x48055) (async) sendmsg$inet(r5, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000d80)="8c3f60fa", 0x4}, {0x0}, {0x0}], 0x3}, 0x48055) 5.358419442s ago: executing program 1 (id=5217): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f00000004c0)="b88a000000000200000000008100", 0xe}], 0x1}, 0x0) 4.937829092s ago: executing program 3 (id=5219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000140)=r6) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80800400000000", @ANYRESDEC], 0xffdd) 4.886487994s ago: executing program 1 (id=5220): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000740), 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000005347acbd9c842fb7bef70028000000280000000400000002000000000000110300000000000000000000000000000400000000020000000000"], 0x0, 0x44}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000840)={0x0, 0xffffffffffffffff, 0x5000000, 0x0, 0x0}, 0x30) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4004010) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000880)={0x0, 0xaa, &(0x7f00000008c0)=[{&(0x7f0000000900)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) 4.702156278s ago: executing program 4 (id=5221): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000300142603600e1208000f0000000401a8001600a400014005000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x4004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x5000, 0x80, 0x0, 0x0, 0x1000000000000000, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff000000000900000085000000360000001801000020646c2500000000003020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000001700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x5, 0xe, 0x23, &(0x7f0000000740)="0100400871a7832e6b7303c3cd59", 0x0, 0x1000000, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000280)) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[{0xfffffffc, 0x0, 0x1, 0xb}, {0x10000002}], 0x10, 0x316bb6af}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x52, &(0x7f00000008c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000900)=r6, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4040) recvmsg$unix(r7, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x100}, 0x0) r9 = socket$kcm(0x2, 0x5, 0x84) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x7c, &(0x7f0000000b40)=r10, 0x62) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x80204d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) 3.858492208s ago: executing program 0 (id=5223): syz_clone(0x8000000, &(0x7f0000000500), 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000680)) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00'}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'ip6gre0\x00', 0x210}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6007f03000000000000040014000f000a000f0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb4a00f6985b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608463a3f", @ANYRES16=r1], 0xfe33) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000200)) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000a80)={'full', 0x20, 0x2, 0x20, 0x1000000}, 0x2f) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 3.572269955s ago: executing program 1 (id=5224): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000b00)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)}, 0x0) recvmsg$kcm(r1, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8040) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000bc0), 0x43) setsockopt$sock_attach_bpf(r3, 0x1, 0x22, &(0x7f00000000c0)=r4, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000004010000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000220000000000000000f500000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r7, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r8, &(0x7f0000000340), 0x0}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848120000005e140602000000000e000a00100000000a800000", 0x2c}], 0x1}, 0x40400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r12, @ANYBLOB], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r12}, &(0x7f00000006c0), &(0x7f0000000700)=r13}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r12}, &(0x7f00000007c0), &(0x7f0000000880)='%ps \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xf, &(0x7f0000001b80)=ANY=[@ANYBLOB="1800000006000000000000006c0700000d005dff10000000182a0000", @ANYBLOB, @ANYRESHEX=r12, @ANYBLOB="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", @ANYBLOB="0000000000000000b702000000000000850000008600000018620000060000000000000007000000850000007c0000009500000000000000", @ANYRESHEX=r10, @ANYRESDEC=r9, @ANYRES16=r11, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESOCT=r14, @ANYRESOCT=r14, @ANYRES64=0x0, @ANYRES32, @ANYRES8=r0], &(0x7f0000000980)='syzkaller\x00', 0x405, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x0, 0x9, 0xc61a}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00), 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) 3.106462686s ago: executing program 2 (id=5225): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4003f00000000007910480000000000710445000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.710991215s ago: executing program 2 (id=5226): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x8fc, 0xfffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg$kcm(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/80, 0x50}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000340)="b8", 0x1}], 0x1}, 0x4000001) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x20048811) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/102, 0x66}], 0x1}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x2000, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000800), 0x4) socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) 1.922742534s ago: executing program 2 (id=5227): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x2a9, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000000}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x2, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x16, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff0000000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000015010200e9ffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r4, 0x0, 0xe, 0x0, &(0x7f0000001200)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r1, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 788.91049ms ago: executing program 2 (id=5228): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="39000000140081ae00002c000500015620618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 542.165327ms ago: executing program 2 (id=5229): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x8000000000000, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="d80000001800810804000000db44b904021d080010000000e8fe55a10a", 0x1d}], 0x1, 0x0, 0x0, 0x6000}, 0x6000800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0xb, 0x2, 0x2}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x40, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x18, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r3}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000b00)={r3, &(0x7f0000000b40), 0x0, 0x4}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000700)=ANY=[], 0x33fe0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r6 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r6, 0x29, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000300)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x1, @ANYRES32=r5, @ANYBLOB="4c07ff000000000000000015", @ANYBLOB], 0x20) r8 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)="d8000000320081024e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x54) 0s ago: executing program 2 (id=5230): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000073118a00000000008510006402000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0x29e, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000400), 0x4}, 0x3540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000800)='ns/ipc\x00') r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000840)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 313546][T16480] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3605'. [ 697.826226][T16497] netlink: 'syz.0.3606': attribute type 10 has an invalid length. [ 698.008977][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 698.083687][T16497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3606'. [ 698.399818][T16497] netlink: 'syz.0.3606': attribute type 10 has an invalid length. [ 698.582748][T16497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3606'. [ 698.916324][T16500] netlink: 'syz.0.3606': attribute type 10 has an invalid length. [ 698.934620][T16500] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3606'. [ 698.995387][T16521] netlink: 'syz.1.3611': attribute type 39 has an invalid length. [ 699.032360][T16523] device syzkaller0 entered promiscuous mode [ 699.464340][T16527] netlink: 'syz.2.3613': attribute type 1 has an invalid length. [ 699.495298][T16530] device syzkaller0 entered promiscuous mode [ 699.757075][T16531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.788369][T16531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.817044][T16531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.832721][T16531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.019338][T16540] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3619'. [ 701.046141][T16562] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3624'. [ 701.490886][T16566] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3623'. [ 701.571848][T16566] device hsr_slave_0 left promiscuous mode [ 701.638563][T16566] device hsr_slave_1 left promiscuous mode [ 702.234538][T16578] netlink: 'syz.3.3629': attribute type 39 has an invalid length. [ 702.995785][T16590] device syzkaller0 entered promiscuous mode [ 703.971886][T16599] netlink: 'syz.0.3633': attribute type 1 has an invalid length. [ 704.116948][T16603] netlink: 'syz.1.3637': attribute type 3 has an invalid length. [ 704.208597][T16603] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3637'. [ 704.635461][T16615] netlink: 'syz.2.3638': attribute type 7 has an invalid length. [ 704.694652][T16615] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3638'. [ 705.302456][T16627] device syzkaller0 entered promiscuous mode [ 705.362406][T16631] netlink: 'syz.3.3642': attribute type 39 has an invalid length. [ 705.980030][T16637] device syzkaller0 entered promiscuous mode [ 707.360297][T16667] netlink: 'syz.4.3653': attribute type 39 has an invalid length. [ 708.250007][T16680] device syzkaller0 entered promiscuous mode [ 708.606016][T16685] netlink: 'syz.4.3658': attribute type 29 has an invalid length. [ 708.742855][T16691] netlink: 'syz.0.3659': attribute type 39 has an invalid length. [ 708.861406][T16685] netlink: 'syz.4.3658': attribute type 29 has an invalid length. [ 709.147435][T16688] netlink: 'syz.4.3658': attribute type 29 has an invalid length. [ 709.197113][T16690] netlink: 'syz.4.3658': attribute type 29 has an invalid length. [ 709.221880][T16697] netlink: 'syz.4.3658': attribute type 29 has an invalid length. [ 709.486727][T16703] device syzkaller0 entered promiscuous mode [ 709.706249][T16701] rxe_eth0 speed is unknown, defaulting to 1000 [ 710.169991][T16717] netlink: 131088 bytes leftover after parsing attributes in process `syz.1.3666'. [ 711.619119][T16736] device syzkaller0 entered promiscuous mode [ 711.736323][T16743] netlink: 'syz.2.3669': attribute type 39 has an invalid length. [ 712.142535][T16751] netlink: 'syz.4.3673': attribute type 39 has an invalid length. [ 712.690432][T16756] device syzkaller0 entered promiscuous mode [ 713.000780][T16760] netlink: 'syz.2.3676': attribute type 29 has an invalid length. [ 713.030175][T16760] netlink: 'syz.2.3676': attribute type 29 has an invalid length. [ 713.065815][T16763] netlink: 'syz.2.3676': attribute type 29 has an invalid length. [ 713.368515][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 713.629263][T16760] netlink: 'syz.2.3676': attribute type 29 has an invalid length. [ 713.669531][T16769] netlink: 'syz.1.3688': attribute type 10 has an invalid length. [ 713.698243][T16769] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3688'. [ 714.149748][T16776] netlink: 131088 bytes leftover after parsing attributes in process `syz.3.3679'. [ 714.183270][T16776] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 714.356375][T16789] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3691'. [ 714.620398][T16796] validate_nla: 1 callbacks suppressed [ 714.620493][T16796] netlink: 'syz.2.3682': attribute type 39 has an invalid length. [ 714.902270][T16799] device syzkaller0 entered promiscuous mode [ 715.554771][T16813] netlink: 'syz.0.3686': attribute type 10 has an invalid length. [ 715.815877][T16813] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 715.889386][T16817] netlink: 'syz.1.3687': attribute type 39 has an invalid length. [ 716.191095][T16826] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3701'. [ 716.419599][T16828] netlink: 'syz.4.3690': attribute type 1 has an invalid length. [ 717.187058][T16847] device syzkaller0 entered promiscuous mode [ 717.434517][T16851] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3696'. [ 717.505127][T16853] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 717.526012][T16853] syzkaller1: linktype set to 773 [ 717.735040][T16860] device syzkaller0 entered promiscuous mode [ 717.955529][T16868] netlink: 'syz.4.3700': attribute type 39 has an invalid length. [ 718.218577][T16875] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3704'. [ 718.347381][T16877] netlink: 'syz.2.3703': attribute type 39 has an invalid length. [ 720.090690][T16921] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3718'. [ 720.407210][T16930] FAULT_INJECTION: forcing a failure. [ 720.407210][T16930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.463725][T16930] CPU: 1 PID: 16930 Comm: syz.1.3723 Not tainted syzkaller #0 [ 720.471308][T16930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 720.481431][T16930] Call Trace: [ 720.484764][T16930] [ 720.487758][T16930] dump_stack_lvl+0x188/0x24e [ 720.492517][T16930] ? show_regs_print_info+0x12/0x12 [ 720.497788][T16930] ? load_image+0x410/0x410 [ 720.502372][T16930] ? __lock_acquire+0x7ea0/0x7ea0 [ 720.507477][T16930] should_fail_ex+0x390/0x4c0 [ 720.512243][T16930] _copy_from_user+0x2c/0x170 [ 720.516987][T16930] iovec_from_user+0x143/0x360 [ 720.521834][T16930] __import_iovec+0x6c/0x510 [ 720.526519][T16930] import_iovec+0x6f/0xa0 [ 720.531019][T16930] ___sys_sendmsg+0x252/0x360 [ 720.535783][T16930] ? __sys_sendmsg+0x2a0/0x2a0 [ 720.540662][T16930] ? __lock_acquire+0x7ea0/0x7ea0 [ 720.545812][T16930] __se_sys_sendmsg+0x1c3/0x2b0 [ 720.550732][T16930] ? __x64_sys_sendmsg+0x80/0x80 [ 720.555769][T16930] ? lockdep_hardirqs_on+0x94/0x140 [ 720.561054][T16930] do_syscall_64+0x4c/0xa0 [ 720.565537][T16930] ? clear_bhb_loop+0x60/0xb0 [ 720.570277][T16930] ? clear_bhb_loop+0x60/0xb0 [ 720.575023][T16930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 720.580969][T16930] RIP: 0033:0x7fdb5ef9e559 [ 720.585431][T16930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.605105][T16930] RSP: 002b:00007fdb5ff10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 720.613585][T16930] RAX: ffffffffffffffda RBX: 00007fdb5f225fa0 RCX: 00007fdb5ef9e559 [ 720.621621][T16930] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000004 [ 720.629653][T16930] RBP: 00007fdb5ff10090 R08: 0000000000000000 R09: 0000000000000000 [ 720.637688][T16930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.645715][T16930] R13: 00007fdb5f226038 R14: 00007fdb5f225fa0 R15: 00007fff86aacd38 [ 720.653789][T16930] [ 720.885699][T16937] netlink: 'syz.4.3724': attribute type 39 has an invalid length. [ 724.846936][T16973] rxe_eth0 speed is unknown, defaulting to 1000 [ 724.903010][T16990] netlink: 'syz.3.3737': attribute type 10 has an invalid length. [ 726.074614][T16990] team0: Device gre0 is of different type [ 726.204767][T16999] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3738'. [ 726.428724][T16999] device hsr_slave_0 left promiscuous mode [ 726.436778][T16999] device hsr_slave_1 left promiscuous mode [ 726.559521][T16995] rxe_eth0 speed is unknown, defaulting to 1000 [ 726.821076][T17016] device lo entered promiscuous mode [ 727.228930][T17022] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.3745'. [ 727.244919][T17022] netlink: zone id is out of range [ 727.272811][T17022] netlink: zone id is out of range [ 727.279685][T17022] netlink: zone id is out of range [ 727.299873][T17022] netlink: zone id is out of range [ 727.305072][T17022] netlink: zone id is out of range [ 727.352894][T17022] netlink: zone id is out of range [ 727.358101][T17022] netlink: zone id is out of range [ 727.402827][T17022] netlink: zone id is out of range [ 727.408038][T17022] netlink: zone id is out of range [ 727.448428][T17022] netlink: zone id is out of range [ 727.842209][T17041] netlink: 'syz.1.3749': attribute type 49 has an invalid length. [ 728.051907][T17047] FAULT_INJECTION: forcing a failure. [ 728.051907][T17047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.128485][T17047] CPU: 1 PID: 17047 Comm: syz.4.3751 Not tainted syzkaller #0 [ 728.136053][T17047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 728.146189][T17047] Call Trace: [ 728.149525][T17047] [ 728.152507][T17047] dump_stack_lvl+0x188/0x24e [ 728.157257][T17047] ? show_regs_print_info+0x12/0x12 [ 728.162528][T17047] ? load_image+0x410/0x410 [ 728.167110][T17047] ? __lock_acquire+0x7ea0/0x7ea0 [ 728.172222][T17047] should_fail_ex+0x390/0x4c0 [ 728.176976][T17047] _copy_from_user+0x2c/0x170 [ 728.181725][T17047] iovec_from_user+0x143/0x360 [ 728.186605][T17047] __import_iovec+0x6c/0x510 [ 728.191295][T17047] import_iovec+0x6f/0xa0 [ 728.195710][T17047] ___sys_sendmsg+0x252/0x360 [ 728.200462][T17047] ? __sys_sendmsg+0x2a0/0x2a0 [ 728.205330][T17047] ? __lock_acquire+0x7ea0/0x7ea0 [ 728.210481][T17047] __se_sys_sendmsg+0x1c3/0x2b0 [ 728.215413][T17047] ? __x64_sys_sendmsg+0x80/0x80 [ 728.220440][T17047] ? lockdep_hardirqs_on+0x94/0x140 [ 728.225744][T17047] do_syscall_64+0x4c/0xa0 [ 728.230234][T17047] ? clear_bhb_loop+0x60/0xb0 [ 728.235401][T17047] ? clear_bhb_loop+0x60/0xb0 [ 728.240148][T17047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 728.246122][T17047] RIP: 0033:0x7f03cb79e559 [ 728.250603][T17047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.270276][T17047] RSP: 002b:00007f03cc73b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.278758][T17047] RAX: ffffffffffffffda RBX: 00007f03cba25fa0 RCX: 00007f03cb79e559 [ 728.286782][T17047] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000005 [ 728.294806][T17047] RBP: 00007f03cc73b090 R08: 0000000000000000 R09: 0000000000000000 [ 728.302823][T17047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.310841][T17047] R13: 00007f03cba26038 R14: 00007f03cba25fa0 R15: 00007ffdf35ace28 [ 728.318902][T17047] [ 728.728475][ T4282] Bluetooth: hci5: command 0x0406 tx timeout [ 729.234836][T17078] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3761'. [ 729.505986][T17082] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.3762'. [ 731.755204][T17124] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3774'. [ 731.856802][T17132] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.3775'. [ 732.014485][T17141] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3787'. [ 732.071152][T17138] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.3778'. [ 732.273695][T17145] device lo entered promiscuous mode [ 732.955648][T17161] netlink: 'syz.3.3781': attribute type 10 has an invalid length. [ 733.108609][T17161] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3781'. [ 733.135669][T17166] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3783'. [ 733.233659][T17161] netlink: 'syz.3.3781': attribute type 10 has an invalid length. [ 733.289675][T17161] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3781'. [ 733.458050][T17167] netlink: 'syz.3.3781': attribute type 10 has an invalid length. [ 733.483182][T17167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3781'. [ 733.500331][T17173] netlink: 'syz.2.3785': attribute type 29 has an invalid length. [ 733.539109][T17173] netlink: 'syz.2.3785': attribute type 29 has an invalid length. [ 733.561201][T17173] netlink: 'syz.2.3785': attribute type 29 has an invalid length. [ 733.987520][T17184] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3791'. [ 734.268171][T17193] tap0: tun_chr_ioctl cmd 2147767511 [ 735.084682][T17200] device syzkaller0 entered promiscuous mode [ 735.370944][T17219] delete_channel: no stack [ 735.468904][T17227] netlink: 'syz.0.3801': attribute type 10 has an invalid length. [ 735.476819][T17227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3801'. [ 738.743660][T17227] netlink: 'syz.0.3801': attribute type 10 has an invalid length. [ 738.760616][T17227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3801'. [ 738.806732][T17237] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3803'. [ 738.888686][T17237] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 738.925702][T17237] net_ratelimit: 62 callbacks suppressed [ 738.925722][T17237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 739.077239][T17244] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3806'. [ 739.127120][T17250] netlink: 'syz.3.3810': attribute type 7 has an invalid length. [ 739.175728][T17250] netlink: 'syz.3.3810': attribute type 6 has an invalid length. [ 739.458089][T17257] netlink: 'syz.1.3811': attribute type 10 has an invalid length. [ 739.482791][T17257] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3811'. [ 739.508040][T17257] device hsr0 entered promiscuous mode [ 739.535569][T17265] netlink: 'syz.1.3811': attribute type 10 has an invalid length. [ 739.679737][T17266] netlink: 'syz.2.3812': attribute type 10 has an invalid length. [ 739.703386][T17266] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3812'. [ 739.776642][T17263] rxe_eth0 speed is unknown, defaulting to 1000 [ 740.119585][T17280] netlink: 'syz.1.3817': attribute type 10 has an invalid length. [ 740.252056][T17280] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3817'. [ 740.328722][T17280] netlink: 'syz.1.3817': attribute type 10 has an invalid length. [ 740.336638][T17280] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3817'. [ 740.441543][T17293] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3807'. [ 740.460338][T17291] netlink: 'syz.1.3817': attribute type 10 has an invalid length. [ 740.470790][T17291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3817'. [ 740.899428][T17300] netlink: 'syz.3.3820': attribute type 39 has an invalid length. [ 742.866820][T17323] device lo entered promiscuous mode [ 742.888943][T17323] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 742.980426][T17328] device syzkaller0 entered promiscuous mode [ 743.028776][T17332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3832'. [ 743.855632][T17364] validate_nla: 3 callbacks suppressed [ 743.855654][T17364] netlink: 'syz.3.3838': attribute type 10 has an invalid length. [ 743.900337][T17364] __nla_validate_parse: 3 callbacks suppressed [ 743.900366][T17364] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3838'. [ 743.977253][T17368] netlink: 'syz.1.3840': attribute type 10 has an invalid length. [ 744.048755][T17368] device hsr0 left promiscuous mode [ 744.068111][T17368] FAULT_INJECTION: forcing a failure. [ 744.068111][T17368] name failslab, interval 1, probability 0, space 0, times 0 [ 744.127454][T17368] CPU: 1 PID: 17368 Comm: syz.1.3840 Not tainted syzkaller #0 [ 744.134999][T17368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 744.145101][T17368] Call Trace: [ 744.148425][T17368] [ 744.151406][T17368] dump_stack_lvl+0x188/0x24e [ 744.156176][T17368] ? show_regs_print_info+0x12/0x12 [ 744.161444][T17368] ? load_image+0x410/0x410 [ 744.166012][T17368] should_fail_ex+0x390/0x4c0 [ 744.170754][T17368] should_failslab+0x5/0x20 [ 744.175313][T17368] slab_pre_alloc_hook+0x59/0x300 [ 744.180387][T17368] ? br_netlink_fini+0x30/0x30 [ 744.185220][T17368] kmem_cache_alloc_node+0x5a/0x310 [ 744.190474][T17368] ? if_nlmsg_size+0x659/0x960 [ 744.195286][T17368] ? __alloc_skb+0xf9/0x7d0 [ 744.199852][T17368] __alloc_skb+0xf9/0x7d0 [ 744.204298][T17368] rtmsg_ifinfo_build_skb+0x80/0x190 [ 744.209646][T17368] rtmsg_ifinfo+0xc4/0x200 [ 744.214113][T17368] __dev_notify_flags+0xef/0x310 [ 744.219091][T17368] ? __dev_change_flags+0x6a0/0x6a0 [ 744.224343][T17368] ? __dev_change_flags+0x4ce/0x6a0 [ 744.229611][T17368] ? dev_get_flags+0x1c0/0x1c0 [ 744.234419][T17368] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 744.240345][T17368] ? _raw_spin_unlock+0x40/0x40 [ 744.245248][T17368] dev_change_flags+0xda/0x1a0 [ 744.250048][T17368] do_setlink+0xbc7/0x29c0 [ 744.254499][T17368] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 744.260686][T17368] ? __nla_validate_parse+0x1f67/0x2970 [ 744.266283][T17368] ? __nla_validate+0x50/0x50 [ 744.271016][T17368] ? validate_linkmsg+0x3db/0x4c0 [ 744.276070][T17368] rtnl_newlink+0x16e4/0x1f90 [ 744.280799][T17368] ? rtnl_newlink+0x4e1/0x1f90 [ 744.285603][T17368] ? rtnl_setlink+0x510/0x510 [ 744.290301][T17368] ? trace_raw_output_contention_end+0xd0/0xd0 [ 744.296486][T17368] ? rcu_is_watching+0x11/0xa0 [ 744.301283][T17368] ? trace_contention_end+0x5f/0x170 [ 744.306605][T17368] ? __mutex_lock+0x1ab/0xae0 [ 744.311330][T17368] ? rcu_read_unlock+0x8c/0xa0 [ 744.316131][T17368] ? rtnl_setlink+0x510/0x510 [ 744.320831][T17368] rtnetlink_rcv_msg+0x863/0xfb0 [ 744.325827][T17368] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 744.330984][T17368] ? rtnetlink_bind+0x80/0x80 [ 744.335690][T17368] ? __local_bh_enable_ip+0x136/0x1c0 [ 744.341084][T17368] ? lockdep_hardirqs_on+0x94/0x140 [ 744.346311][T17368] ? __local_bh_enable_ip+0x136/0x1c0 [ 744.351710][T17368] ? _local_bh_enable+0xa0/0xa0 [ 744.356585][T17368] ? __dev_queue_xmit+0x281/0x3810 [ 744.361727][T17368] ? __dev_queue_xmit+0x281/0x3810 [ 744.366867][T17368] ? __dev_queue_xmit+0x1d84/0x3810 [ 744.372105][T17368] ? __dev_queue_xmit+0x281/0x3810 [ 744.377260][T17368] ? ref_tracker_free+0x682/0x830 [ 744.382319][T17368] ? refcount_inc+0x70/0x70 [ 744.386906][T17368] ? memcpy+0x3c/0x60 [ 744.390909][T17368] ? __copy_skb_header+0x3ba/0x4f0 [ 744.396048][T17368] ? __skb_clone+0x446/0x6c0 [ 744.400686][T17368] netlink_rcv_skb+0x1ef/0x440 [ 744.405474][T17368] ? rtnetlink_bind+0x80/0x80 [ 744.410177][T17368] ? netlink_ack+0x1160/0x1160 [ 744.414978][T17368] ? netlink_deliver_tap+0x2e/0x1b0 [ 744.420209][T17368] netlink_unicast+0x7ad/0x920 [ 744.425005][T17368] netlink_sendmsg+0x8ad/0xbd0 [ 744.429799][T17368] ? netlink_getsockopt+0x550/0x550 [ 744.435027][T17368] ? apparmor_socket_sendmsg+0x8a/0x330 [ 744.440609][T17368] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 744.445917][T17368] ? security_socket_sendmsg+0x7c/0xa0 [ 744.451412][T17368] ? netlink_getsockopt+0x550/0x550 [ 744.456660][T17368] ____sys_sendmsg+0x5ed/0x9a0 [ 744.461493][T17368] ? __sys_sendmsg_sock+0x30/0x30 [ 744.466558][T17368] ? __import_iovec+0x306/0x510 [ 744.471469][T17368] ? import_iovec+0x6f/0xa0 [ 744.476023][T17368] ___sys_sendmsg+0x2a2/0x360 [ 744.480732][T17368] ? __sys_sendmsg+0x2a0/0x2a0 [ 744.485536][T17368] ? __lock_acquire+0x7ea0/0x7ea0 [ 744.490616][T17368] __se_sys_sendmsg+0x1c3/0x2b0 [ 744.495494][T17368] ? __x64_sys_sendmsg+0x80/0x80 [ 744.500468][T17368] ? lockdep_hardirqs_on+0x94/0x140 [ 744.505700][T17368] do_syscall_64+0x4c/0xa0 [ 744.510142][T17368] ? clear_bhb_loop+0x60/0xb0 [ 744.514854][T17368] ? clear_bhb_loop+0x60/0xb0 [ 744.519557][T17368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 744.525490][T17368] RIP: 0033:0x7fdb5ef9e559 [ 744.529950][T17368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.549578][T17368] RSP: 002b:00007fdb5ff10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 744.558020][T17368] RAX: ffffffffffffffda RBX: 00007fdb5f225fa0 RCX: 00007fdb5ef9e559 [ 744.566011][T17368] RDX: 0000000004005040 RSI: 0000200000000900 RDI: 0000000000000003 [ 744.574013][T17368] RBP: 00007fdb5ff10090 R08: 0000000000000000 R09: 0000000000000000 [ 744.582003][T17368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.589992][T17368] R13: 00007fdb5f226038 R14: 00007fdb5f225fa0 R15: 00007fff86aacd38 [ 744.598023][T17368] [ 744.810931][T17368] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 744.894853][T17382] device syzkaller0 entered promiscuous mode [ 745.012521][T17384] netlink: 'syz.3.3847': attribute type 10 has an invalid length. [ 745.025315][T17384] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3847'. [ 745.051209][T17384] netlink: 'syz.3.3847': attribute type 10 has an invalid length. [ 745.071459][T17384] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3847'. [ 745.092435][T17387] netlink: 'syz.3.3847': attribute type 10 has an invalid length. [ 745.108612][T17387] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3847'. [ 745.149420][T17386] netlink: 'syz.4.3848': attribute type 21 has an invalid length. [ 745.862002][T17410] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3857'. [ 745.882898][T17410] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3857'. [ 745.920084][T17414] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3857'. [ 745.959037][T17411] netlink: 'syz.2.3856': attribute type 9 has an invalid length. [ 746.006483][T17411] netlink: 134516 bytes leftover after parsing attributes in process `syz.2.3856'. [ 746.072983][T17410] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3857'. [ 746.109518][T17410] netlink: 'syz.3.3857': attribute type 21 has an invalid length. [ 746.127646][T17410] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3857'. [ 746.477190][T17423] netlink: 'syz.0.3861': attribute type 10 has an invalid length. [ 746.494383][T17422] FAULT_INJECTION: forcing a failure. [ 746.494383][T17422] name failslab, interval 1, probability 0, space 0, times 0 [ 746.518597][T17423] netlink: 'syz.0.3861': attribute type 10 has an invalid length. [ 746.531006][T17422] CPU: 0 PID: 17422 Comm: syz.4.3859 Not tainted syzkaller #0 [ 746.538528][T17422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 746.548620][T17422] Call Trace: [ 746.551936][T17422] [ 746.554919][T17422] dump_stack_lvl+0x188/0x24e [ 746.559679][T17422] ? show_regs_print_info+0x12/0x12 [ 746.565113][T17422] ? load_image+0x410/0x410 [ 746.569691][T17422] ? __lock_acquire+0x7ea0/0x7ea0 [ 746.574789][T17422] should_fail_ex+0x390/0x4c0 [ 746.579525][T17422] should_failslab+0x5/0x20 [ 746.584089][T17422] slab_pre_alloc_hook+0x59/0x300 [ 746.589207][T17422] ? security_sk_alloc+0x47/0x130 [ 746.594289][T17422] __kmem_cache_alloc_node+0x4f/0x270 [ 746.599724][T17422] ? security_sk_alloc+0x47/0x130 [ 746.604807][T17422] __kmalloc+0xa3/0x240 [ 746.608999][T17422] ? sk_prot_alloc+0xe7/0x210 [ 746.610504][T17425] device syzkaller0 entered promiscuous mode [ 746.613715][T17422] security_sk_alloc+0x47/0x130 [ 746.624601][T17422] sk_prot_alloc+0x101/0x210 [ 746.629240][T17422] ? sk_alloc+0x20/0x330 [ 746.633535][T17422] sk_alloc+0x36/0x330 [ 746.637659][T17422] ? bpf_ctx_init+0x154/0x190 [ 746.642400][T17422] bpf_prog_test_run_skb+0x36d/0x18e0 [ 746.647844][T17422] ? __fget_files+0x28/0x460 [ 746.652493][T17422] ? __fget_files+0x3fc/0x460 [ 746.657212][T17422] ? cpu_online+0xa0/0xa0 [ 746.661584][T17422] bpf_prog_test_run+0x31c/0x390 [ 746.666565][T17422] __sys_bpf+0x62b/0x780 [ 746.670849][T17422] ? bpf_link_show_fdinfo+0x380/0x380 [ 746.676260][T17422] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 746.682452][T17422] __x64_sys_bpf+0x78/0x90 [ 746.686904][T17422] do_syscall_64+0x4c/0xa0 [ 746.691382][T17422] ? clear_bhb_loop+0x60/0xb0 [ 746.696092][T17422] ? clear_bhb_loop+0x60/0xb0 [ 746.700797][T17422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 746.706723][T17422] RIP: 0033:0x7f03cb79e559 [ 746.711169][T17422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.730806][T17422] RSP: 002b:00007f03cc73b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 746.739239][T17422] RAX: ffffffffffffffda RBX: 00007f03cba25fa0 RCX: 00007f03cb79e559 [ 746.747232][T17422] RDX: 0000000000000028 RSI: 00002000000008c0 RDI: 000000000000000a [ 746.755221][T17422] RBP: 00007f03cc73b090 R08: 0000000000000000 R09: 0000000000000000 [ 746.763208][T17422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.771200][T17422] R13: 00007f03cba26038 R14: 00007f03cba25fa0 R15: 00007ffdf35ace28 [ 746.779215][T17422] [ 747.141625][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.148107][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.119621][T17468] validate_nla: 2 callbacks suppressed [ 749.119648][T17468] netlink: 'syz.2.3874': attribute type 10 has an invalid length. [ 749.223246][T17468] __nla_validate_parse: 10 callbacks suppressed [ 749.223270][T17468] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3874'. [ 749.467567][T17468] netlink: 'syz.2.3874': attribute type 10 has an invalid length. [ 749.475698][T17468] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3874'. [ 749.565231][T17486] FAULT_INJECTION: forcing a failure. [ 749.565231][T17486] name failslab, interval 1, probability 0, space 0, times 0 [ 749.644112][T17486] CPU: 1 PID: 17486 Comm: syz.1.3879 Not tainted syzkaller #0 [ 749.651679][T17486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 749.661791][T17486] Call Trace: [ 749.665120][T17486] [ 749.668104][T17486] dump_stack_lvl+0x188/0x24e [ 749.672862][T17486] ? show_regs_print_info+0x12/0x12 [ 749.678135][T17486] ? load_image+0x410/0x410 [ 749.682708][T17486] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 749.688934][T17486] should_fail_ex+0x390/0x4c0 [ 749.693690][T17486] should_failslab+0x5/0x20 [ 749.698257][T17486] slab_pre_alloc_hook+0x59/0x300 [ 749.703346][T17486] kmem_cache_alloc+0x56/0x2f0 [ 749.708162][T17486] ? skb_clone+0x1e7/0x370 [ 749.712643][T17486] skb_clone+0x1e7/0x370 [ 749.716955][T17486] bpf_clone_redirect+0x169/0x4a0 [ 749.722060][T17486] bpf_prog_07257a6b71309cad+0x56/0x5b [ 749.727580][T17486] ? __kprobes_text_end+0x1d2e8/0x1d2e8 [ 749.733185][T17486] ? lockdep_hardirqs_on+0x94/0x140 [ 749.738460][T17486] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 749.744684][T17486] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 749.751036][T17486] ? seqcount_lockdep_reader_access+0x196/0x1d0 [ 749.757353][T17486] ? ktime_get_real_ts64+0x440/0x440 [ 749.762709][T17486] ? perf_trace_preemptirq_template+0xa8/0x320 [ 749.769279][T17486] ? read_lock_is_recursive+0x10/0x10 [ 749.774731][T17486] ? __cant_sleep+0x220/0x220 [ 749.779467][T17486] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 749.785529][T17486] ? bpf_test_timer_continue+0x142/0x380 [ 749.791240][T17486] bpf_test_run+0x2b6/0x830 [ 749.795836][T17486] ? dst_hold+0xb0/0xb0 [ 749.800101][T17486] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 749.805566][T17486] ? cpu_online+0xa0/0xa0 [ 749.809972][T17486] bpf_prog_test_run+0x31c/0x390 [ 749.815031][T17486] __sys_bpf+0x62b/0x780 [ 749.819368][T17486] ? bpf_link_show_fdinfo+0x380/0x380 [ 749.824824][T17486] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 749.831092][T17486] __x64_sys_bpf+0x78/0x90 [ 749.835581][T17486] do_syscall_64+0x4c/0xa0 [ 749.840054][T17486] ? clear_bhb_loop+0x60/0xb0 [ 749.844787][T17486] ? clear_bhb_loop+0x60/0xb0 [ 749.849536][T17486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 749.855491][T17486] RIP: 0033:0x7fdb5ef9e559 [ 749.859963][T17486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.879639][T17486] RSP: 002b:00007fdb5ff10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 749.888122][T17486] RAX: ffffffffffffffda RBX: 00007fdb5f225fa0 RCX: 00007fdb5ef9e559 [ 749.896165][T17486] RDX: 0000000000000048 RSI: 0000200000002f00 RDI: 000000000000000a [ 749.904191][T17486] RBP: 00007fdb5ff10090 R08: 0000000000000000 R09: 0000000000000000 [ 749.912216][T17486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 749.920248][T17486] R13: 00007fdb5f226038 R14: 00007fdb5f225fa0 R15: 00007fff86aacd38 [ 749.928307][T17486] [ 750.314068][T17475] netlink: 'syz.2.3874': attribute type 10 has an invalid length. [ 750.378612][T17475] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3874'. [ 750.393925][T17499] netlink: 'syz.0.3883': attribute type 3 has an invalid length. [ 750.402503][T17497] netlink: 'syz.4.3882': attribute type 9 has an invalid length. [ 750.470200][T17497] netlink: 134516 bytes leftover after parsing attributes in process `syz.4.3882'. [ 750.489888][T17499] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3883'. [ 751.543901][T17512] netlink: 'syz.0.3887': attribute type 29 has an invalid length. [ 751.973383][T17512] netlink: 'syz.0.3887': attribute type 29 has an invalid length. [ 752.024562][T17514] netlink: 'syz.0.3887': attribute type 29 has an invalid length. [ 752.131249][T17517] netlink: 'syz.0.3887': attribute type 29 has an invalid length. [ 752.201919][T17527] syzkaller1: tun_chr_ioctl cmd 2147767517 [ 752.394050][T17535] netlink: 'syz.2.3894': attribute type 39 has an invalid length. [ 752.523517][T17537] device geneve0 entered promiscuous mode [ 752.717440][T17546] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3896'. [ 752.797608][T17537] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 752.831298][T17546] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3896'. [ 752.851615][T17549] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3896'. [ 753.475562][T17564] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3912'. [ 754.328543][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 754.344448][T17584] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3907'. [ 755.562723][T17584] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3907'. [ 755.589418][T17589] validate_nla: 4 callbacks suppressed [ 755.589438][T17589] netlink: 'syz.0.3907': attribute type 21 has an invalid length. [ 755.614521][T17589] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3907'. [ 755.631135][T17589] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3907'. [ 755.651558][T17600] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 755.703764][T17601] netlink: 'syz.1.3911': attribute type 41 has an invalid length. [ 756.166836][T17616] netlink: 'syz.4.3916': attribute type 10 has an invalid length. [ 756.304388][T17616] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3916'. [ 756.379776][T17616] netlink: 'syz.4.3916': attribute type 10 has an invalid length. [ 756.387681][T17616] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3916'. [ 756.695648][T17624] netlink: 'syz.4.3916': attribute type 10 has an invalid length. [ 756.865665][T17624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3916'. [ 757.552938][T17652] FAULT_INJECTION: forcing a failure. [ 757.552938][T17652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.622851][T17652] CPU: 0 PID: 17652 Comm: syz.2.3925 Not tainted syzkaller #0 [ 757.630420][T17652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 757.640547][T17652] Call Trace: [ 757.643882][T17652] [ 757.646848][T17652] dump_stack_lvl+0x188/0x24e [ 757.651580][T17652] ? show_regs_print_info+0x12/0x12 [ 757.656824][T17652] ? load_image+0x410/0x410 [ 757.661374][T17652] ? __lock_acquire+0x7ea0/0x7ea0 [ 757.666476][T17652] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 757.672357][T17652] should_fail_ex+0x390/0x4c0 [ 757.677105][T17652] _copy_from_user+0x2c/0x170 [ 757.681847][T17652] ___sys_sendmsg+0x1c3/0x360 [ 757.686594][T17652] ? __sys_sendmsg+0x2a0/0x2a0 [ 757.691456][T17652] __se_sys_sendmsg+0x1c3/0x2b0 [ 757.696355][T17652] ? __x64_sys_sendmsg+0x80/0x80 [ 757.701388][T17652] ? syscall_enter_from_user_mode+0x2a/0x80 [ 757.707341][T17652] do_syscall_64+0x4c/0xa0 [ 757.711812][T17652] ? clear_bhb_loop+0x60/0xb0 [ 757.716547][T17652] ? clear_bhb_loop+0x60/0xb0 [ 757.721283][T17652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.727228][T17652] RIP: 0033:0x7f828119e559 [ 757.731688][T17652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.751347][T17652] RSP: 002b:00007f827f3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.759842][T17652] RAX: ffffffffffffffda RBX: 00007f8281425fa0 RCX: 00007f828119e559 [ 757.767859][T17652] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000005 [ 757.775866][T17652] RBP: 00007f827f3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 757.783879][T17652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.791889][T17652] R13: 00007f8281426038 R14: 00007f8281425fa0 R15: 00007ffd5b9bd2a8 [ 757.799917][T17652] [ 757.872819][T17663] FAULT_INJECTION: forcing a failure. [ 757.872819][T17663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.904252][T17663] CPU: 1 PID: 17663 Comm: syz.0.3927 Not tainted syzkaller #0 [ 757.911818][T17663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 757.921915][T17663] Call Trace: [ 757.925239][T17663] [ 757.928208][T17663] dump_stack_lvl+0x188/0x24e [ 757.932945][T17663] ? show_regs_print_info+0x12/0x12 [ 757.938206][T17663] ? load_image+0x410/0x410 [ 757.942759][T17663] ? __lock_acquire+0x7ea0/0x7ea0 [ 757.947859][T17663] should_fail_ex+0x390/0x4c0 [ 757.952599][T17663] _copy_from_user+0x2c/0x170 [ 757.957324][T17663] __sys_bpf+0x2ea/0x780 [ 757.961631][T17663] ? bpf_link_show_fdinfo+0x380/0x380 [ 757.967082][T17663] ? lock_chain_count+0x20/0x20 [ 757.972005][T17663] __x64_sys_bpf+0x78/0x90 [ 757.976498][T17663] do_syscall_64+0x4c/0xa0 [ 757.980969][T17663] ? clear_bhb_loop+0x60/0xb0 [ 757.985726][T17663] ? clear_bhb_loop+0x60/0xb0 [ 757.990468][T17663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.996400][T17663] RIP: 0033:0x7f752c99e559 [ 758.000866][T17663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.020563][T17663] RSP: 002b:00007f752d8e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 758.029035][T17663] RAX: ffffffffffffffda RBX: 00007f752cc26180 RCX: 00007f752c99e559 [ 758.037048][T17663] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a [ 758.045053][T17663] RBP: 00007f752d8e5090 R08: 0000000000000000 R09: 0000000000000000 [ 758.053063][T17663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.061075][T17663] R13: 00007f752cc26218 R14: 00007f752cc26180 R15: 00007ffc603fa148 [ 758.069102][T17663] [ 759.514010][T17682] netlink: 'syz.0.3933': attribute type 10 has an invalid length. [ 759.591500][T17682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3933'. [ 760.142883][T17682] netlink: 'syz.0.3933': attribute type 10 has an invalid length. [ 760.196302][T17682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3933'. [ 760.474438][T17672] netlink: 'syz.0.3933': attribute type 10 has an invalid length. [ 760.508502][T17672] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3933'. [ 760.613124][T17699] rxe_eth0 speed is unknown, defaulting to 1000 [ 760.676456][T17707] netlink: 'syz.1.3938': attribute type 29 has an invalid length. [ 760.719714][T17707] netlink: 'syz.1.3938': attribute type 29 has an invalid length. [ 760.846427][T17717] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3941'. [ 760.881885][T17717] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3941'. [ 760.909675][T17716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3941'. [ 761.907896][T17741] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3945'. [ 762.022470][T17741] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3945'. [ 762.149703][T17739] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3945'. [ 762.201844][T17740] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3945'. [ 763.050107][T17761] netlink: 'syz.0.3952': attribute type 10 has an invalid length. [ 763.155183][T17761] netlink: 'syz.0.3952': attribute type 10 has an invalid length. [ 763.467139][T17768] netlink: 'syz.0.3952': attribute type 10 has an invalid length. [ 763.797069][T17771] netlink: 'syz.2.3954': attribute type 29 has an invalid length. [ 763.842470][T17771] netlink: 'syz.2.3954': attribute type 29 has an invalid length. [ 764.720363][T17790] netlink: 'syz.0.3959': attribute type 29 has an invalid length. [ 764.778585][T17790] netlink: 'syz.0.3959': attribute type 29 has an invalid length. [ 764.901080][T17789] netlink: 'syz.0.3959': attribute type 29 has an invalid length. [ 765.390129][T17808] __nla_validate_parse: 3 callbacks suppressed [ 765.390176][T17808] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3963'. [ 765.711578][T17808] À: port 1(vlan0) entered blocking state [ 765.776897][T17808] À: port 1(vlan0) entered disabled state [ 765.975677][T17808] device vlan0 entered promiscuous mode [ 766.297290][T17827] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3970'. [ 766.359480][T17826] validate_nla: 2 callbacks suppressed [ 766.359504][T17826] netlink: 'syz.3.3969': attribute type 10 has an invalid length. [ 766.408486][T17827] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3970'. [ 766.468887][T17826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3969'. [ 766.516954][T17829] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3970'. [ 766.677485][T17832] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3970'. [ 766.798731][T17826] netlink: 'syz.3.3969': attribute type 10 has an invalid length. [ 766.806643][T17826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3969'. [ 766.962887][T17836] netlink: 'syz.3.3969': attribute type 10 has an invalid length. [ 767.022677][T17836] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3969'. [ 767.495056][T17846] rxe_eth0 speed is unknown, defaulting to 1000 [ 767.587327][T17855] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3975'. [ 767.664758][T17855] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 769.135879][T17888] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3987'. [ 769.377078][T17893] netlink: 'syz.1.3987': attribute type 10 has an invalid length. [ 769.395748][T17893] ¥: port 1(team0) entered disabled state [ 769.500900][T17893] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 770.187250][T17910] netlink: 'syz.4.3994': attribute type 29 has an invalid length. [ 770.263856][T17910] netlink: 'syz.4.3994': attribute type 29 has an invalid length. [ 770.344390][T17918] netlink: 'syz.4.3994': attribute type 29 has an invalid length. [ 770.406881][T17923] netlink: 'syz.4.3994': attribute type 29 has an invalid length. [ 770.474703][T17927] netlink: 'syz.4.3994': attribute type 29 has an invalid length. [ 770.544288][T17925] __nla_validate_parse: 4 callbacks suppressed [ 770.544334][T17925] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3998'. [ 770.778700][T17928] netlink: 'syz.2.3999': attribute type 3 has an invalid length. [ 770.807387][T17928] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3999'. [ 773.237834][T17948] netlink: 'syz.0.4012': attribute type 1 has an invalid length. [ 773.298618][T17948] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4012'. [ 773.884183][T17960] device syzkaller0 entered promiscuous mode [ 774.185771][T17957] rxe_eth0 speed is unknown, defaulting to 1000 [ 774.611119][T17958] rxe_eth0 speed is unknown, defaulting to 1000 [ 777.847133][T17992] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4017'. [ 778.029637][T18004] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4018'. [ 778.050934][T18004] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 778.134969][T18009] netlink: 'syz.3.4019': attribute type 10 has an invalid length. [ 778.160464][T18009] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4019'. [ 778.186175][T18009] device dummy0 entered promiscuous mode [ 778.230769][T18009] bridge0: port 3(dummy0) entered blocking state [ 778.252016][T18009] bridge0: port 3(dummy0) entered disabled state [ 778.392344][T18009] bridge0: port 3(dummy0) entered blocking state [ 778.401579][T18009] bridge0: port 3(dummy0) entered forwarding state [ 778.767795][T18021] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4025'. [ 778.909092][T18026] netlink: 'syz.0.4025': attribute type 10 has an invalid length. [ 778.984769][T18026] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4025'. [ 779.053910][T18026] device team0 entered promiscuous mode [ 779.109349][T18026] device team_slave_0 entered promiscuous mode [ 779.143680][T18026] device team_slave_1 entered promiscuous mode [ 779.202712][T18026] bridge0: port 3(team0) entered blocking state [ 779.238895][T18026] bridge0: port 3(team0) entered disabled state [ 779.280224][T18026] bridge0: port 3(team0) entered blocking state [ 779.286636][T18026] bridge0: port 3(team0) entered forwarding state [ 782.284290][T18051] delete_channel: no stack [ 782.545239][T18069] FAULT_INJECTION: forcing a failure. [ 782.545239][T18069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.582493][T18069] CPU: 1 PID: 18069 Comm: syz.4.4042 Not tainted syzkaller #0 [ 782.590056][T18069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 782.600153][T18069] Call Trace: [ 782.603463][T18069] [ 782.606438][T18069] dump_stack_lvl+0x188/0x24e [ 782.611171][T18069] ? show_regs_print_info+0x12/0x12 [ 782.616434][T18069] ? load_image+0x410/0x410 [ 782.621015][T18069] ? __lock_acquire+0x7ea0/0x7ea0 [ 782.626096][T18069] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 782.631866][T18069] should_fail_ex+0x390/0x4c0 [ 782.636597][T18069] _copy_from_user+0x2c/0x170 [ 782.641314][T18069] ___sys_sendmsg+0x1c3/0x360 [ 782.646038][T18069] ? __sys_sendmsg+0x2a0/0x2a0 [ 782.650886][T18069] ? __lock_acquire+0x7ea0/0x7ea0 [ 782.655994][T18069] __se_sys_sendmsg+0x1c3/0x2b0 [ 782.660891][T18069] ? __x64_sys_sendmsg+0x80/0x80 [ 782.665896][T18069] ? lockdep_hardirqs_on+0x94/0x140 [ 782.671146][T18069] do_syscall_64+0x4c/0xa0 [ 782.675602][T18069] ? clear_bhb_loop+0x60/0xb0 [ 782.680319][T18069] ? clear_bhb_loop+0x60/0xb0 [ 782.685046][T18069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 782.690978][T18069] RIP: 0033:0x7f03cb79e559 [ 782.695440][T18069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.715077][T18069] RSP: 002b:00007f03cc73b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 782.723527][T18069] RAX: ffffffffffffffda RBX: 00007f03cba25fa0 RCX: 00007f03cb79e559 [ 782.731532][T18069] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 782.739556][T18069] RBP: 00007f03cc73b090 R08: 0000000000000000 R09: 0000000000000000 [ 782.747561][T18069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.755578][T18069] R13: 00007f03cba26038 R14: 00007f03cba25fa0 R15: 00007ffdf35ace28 [ 782.763613][T18069] [ 783.284201][T18085] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4048'. [ 783.314461][T18085] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 783.341229][T18090] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.4049'. [ 783.954895][T18107] netlink: 'syz.3.4056': attribute type 2 has an invalid length. [ 784.175119][T18112] netlink: 'syz.4.4057': attribute type 19 has an invalid length. [ 784.193030][T18112] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4057'. [ 784.436592][T18123] device syzkaller0 entered promiscuous mode [ 786.203797][T18161] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.4076'. [ 786.273903][T18163] device syzkaller0 entered promiscuous mode [ 786.495782][T18166] netlink: 'syz.1.4079': attribute type 8 has an invalid length. [ 786.506051][T18166] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4079'. [ 787.012889][T18181] netlink: 'syz.0.4086': attribute type 9 has an invalid length. [ 787.058842][T18181] netlink: 125100 bytes leftover after parsing attributes in process `syz.0.4086'. [ 787.071349][T18182] netlink: 'syz.3.4085': attribute type 29 has an invalid length. [ 787.233806][T18182] netlink: 'syz.3.4085': attribute type 29 has an invalid length. [ 787.334151][T18192] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4089'. [ 787.353304][T18192] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 787.377904][T18192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 787.396533][T18186] netlink: 'syz.3.4085': attribute type 29 has an invalid length. [ 787.412317][T18187] netlink: 'syz.3.4085': attribute type 29 has an invalid length. [ 787.422608][T18190] netlink: 'syz.3.4085': attribute type 29 has an invalid length. [ 787.665160][T18199] device syzkaller0 entered promiscuous mode [ 788.175940][T18211] device lo left promiscuous mode [ 788.281454][T18212] Q±6ã`Ò˜: renamed from lo [ 788.466666][T18213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4094'. [ 789.039350][T18220] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.4097'. [ 789.527425][T18242] device syzkaller0 entered promiscuous mode [ 789.976167][T18251] netlink: 'syz.0.4103': attribute type 16 has an invalid length. [ 789.997385][T18251] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4103'. [ 790.479975][T18266] netlink: 'syz.1.4111': attribute type 10 has an invalid length. [ 790.672580][T18266] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4111'. [ 790.803690][T18266] netlink: 'syz.1.4111': attribute type 10 has an invalid length. [ 790.874030][T18266] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4111'. [ 791.012697][T18270] netlink: 'syz.1.4111': attribute type 10 has an invalid length. [ 791.063832][T18270] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4111'. [ 791.402548][T18284] device vcan0 entered promiscuous mode [ 791.500572][T18284] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 791.549641][T18293] device syzkaller0 entered promiscuous mode [ 791.675941][T18298] netlink: 'syz.0.4120': attribute type 10 has an invalid length. [ 791.733152][T18298] bridge0: port 3(team0) entered disabled state [ 791.740530][T18298] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.749978][T18298] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.894389][T18298] team0: Device bridge0 is already an upper device of the team interface [ 793.006368][T18319] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4129'. [ 793.636443][T18333] device syzkaller0 entered promiscuous mode [ 793.795738][T18336] netlink: 'syz.2.4133': attribute type 10 has an invalid length. [ 794.018945][T18341] netlink: 'syz.4.4135': attribute type 7 has an invalid length. [ 794.034821][T18336] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4133'. [ 794.324960][T18336] netlink: 'syz.2.4133': attribute type 10 has an invalid length. [ 794.458593][T18336] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4133'. [ 795.166952][T18369] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.174424][T18369] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.231737][T18371] device bridge_slave_1 left promiscuous mode [ 795.260571][T18371] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.386373][T18371] device bridge_slave_0 left promiscuous mode [ 795.424652][T18373] FAULT_INJECTION: forcing a failure. [ 795.424652][T18373] name failslab, interval 1, probability 0, space 0, times 0 [ 795.431528][T18371] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.495686][T18373] CPU: 0 PID: 18373 Comm: syz.3.4145 Not tainted syzkaller #0 [ 795.503270][T18373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 795.513373][T18373] Call Trace: [ 795.516698][T18373] [ 795.519666][T18373] dump_stack_lvl+0x188/0x24e [ 795.524479][T18373] ? lock_chain_count+0x20/0x20 [ 795.529392][T18373] ? show_regs_print_info+0x12/0x12 [ 795.534637][T18373] ? load_image+0x410/0x410 [ 795.539182][T18373] ? lockdep_hardirqs_on+0x94/0x140 [ 795.544490][T18373] should_fail_ex+0x390/0x4c0 [ 795.549263][T18373] should_failslab+0x5/0x20 [ 795.553805][T18373] slab_pre_alloc_hook+0x59/0x300 [ 795.558892][T18373] ? __get_vm_area_node+0x122/0x330 [ 795.564144][T18373] __kmem_cache_alloc_node+0x4f/0x270 [ 795.569569][T18373] ? __get_vm_area_node+0x122/0x330 [ 795.574817][T18373] kmalloc_node_trace+0x22/0xe0 [ 795.579717][T18373] __get_vm_area_node+0x122/0x330 [ 795.584794][T18373] __vmalloc_node_range+0x357/0x1380 [ 795.590149][T18373] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 795.595762][T18373] ? perf_trace_preemptirq_template+0xa8/0x320 [ 795.601967][T18373] ? irqentry_enter+0x33/0x50 [ 795.606708][T18373] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 795.612748][T18373] ? lock_chain_count+0x20/0x20 [ 795.617653][T18373] ? free_vm_area+0x50/0x50 [ 795.622289][T18373] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 795.628499][T18373] ? lockdep_hardirqs_on+0x94/0x140 [ 795.633756][T18373] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 795.639975][T18373] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 795.645589][T18373] __vmalloc+0x76/0x80 [ 795.649737][T18373] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 795.655334][T18373] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 795.660754][T18373] ? bpf_prog_alloc+0x13/0x1b0 [ 795.665571][T18373] bpf_prog_alloc+0x1c/0x1b0 [ 795.670215][T18373] bpf_prog_load+0x7d4/0x1530 [ 795.674962][T18373] ? map_freeze+0x390/0x390 [ 795.679515][T18373] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 795.685727][T18373] ? lockdep_hardirqs_on+0x94/0x140 [ 795.690987][T18373] ? copy_user_enhanced_fast_string+0xa/0x40 [ 795.697019][T18373] ? bpf_lsm_bpf+0x5/0x10 [ 795.701399][T18373] ? security_bpf+0x7a/0xa0 [ 795.705942][T18373] __sys_bpf+0x5b8/0x780 [ 795.710239][T18373] ? bpf_link_show_fdinfo+0x380/0x380 [ 795.715674][T18373] ? lock_chain_count+0x20/0x20 [ 795.720568][T18373] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 795.726605][T18373] __x64_sys_bpf+0x78/0x90 [ 795.731071][T18373] do_syscall_64+0x4c/0xa0 [ 795.735552][T18373] ? clear_bhb_loop+0x60/0xb0 [ 795.740278][T18373] ? clear_bhb_loop+0x60/0xb0 [ 795.745031][T18373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 795.750972][T18373] RIP: 0033:0x7f55f879e559 [ 795.755431][T18373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.775074][T18373] RSP: 002b:00007f55f96d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 795.783502][T18373] RAX: ffffffffffffffda RBX: 00007f55f8a25fa0 RCX: 00007f55f879e559 [ 795.791505][T18373] RDX: 0000000000000048 RSI: 0000200000001140 RDI: 0000000000000005 [ 795.799540][T18373] RBP: 00007f55f96d2090 R08: 0000000000000000 R09: 0000000000000000 [ 795.807556][T18373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.815570][T18373] R13: 00007f55f8a26038 R14: 00007f55f8a25fa0 R15: 00007fffe9d91a48 [ 795.823606][T18373] [ 795.942009][T18371] team0: Port device bridge0 removed [ 796.061931][T18378] device syzkaller0 entered promiscuous mode [ 796.388552][T18373] syz.3.4145: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 796.448519][T18373] CPU: 0 PID: 18373 Comm: syz.3.4145 Not tainted syzkaller #0 [ 796.456086][T18373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 796.466190][T18373] Call Trace: [ 796.469510][T18373] [ 796.472485][T18373] dump_stack_lvl+0x188/0x24e [ 796.477218][T18373] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 796.483710][T18373] ? show_regs_print_info+0x12/0x12 [ 796.488968][T18373] ? load_image+0x410/0x410 [ 796.493524][T18373] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 796.499997][T18373] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 796.506551][T18373] warn_alloc+0x242/0x330 [ 796.510931][T18373] ? __get_vm_area_node+0x122/0x330 [ 796.516178][T18373] ? zone_watermark_ok_safe+0x270/0x270 [ 796.521785][T18373] ? rcu_is_watching+0x11/0xa0 [ 796.526625][T18373] ? __get_vm_area_node+0x318/0x330 [ 796.531895][T18373] __vmalloc_node_range+0x37c/0x1380 [ 796.537269][T18373] ? perf_trace_preemptirq_template+0xa8/0x320 [ 796.543489][T18373] ? irqentry_enter+0x33/0x50 [ 796.548231][T18373] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 796.554273][T18373] ? lock_chain_count+0x20/0x20 [ 796.559197][T18373] ? free_vm_area+0x50/0x50 [ 796.563748][T18373] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 796.569938][T18373] ? lockdep_hardirqs_on+0x94/0x140 [ 796.575170][T18373] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 796.581356][T18373] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 796.586940][T18373] __vmalloc+0x76/0x80 [ 796.591047][T18373] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 796.596628][T18373] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 796.602034][T18373] ? bpf_prog_alloc+0x13/0x1b0 [ 796.606836][T18373] bpf_prog_alloc+0x1c/0x1b0 [ 796.611468][T18373] bpf_prog_load+0x7d4/0x1530 [ 796.616184][T18373] ? map_freeze+0x390/0x390 [ 796.620720][T18373] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 796.626897][T18373] ? lockdep_hardirqs_on+0x94/0x140 [ 796.632140][T18373] ? copy_user_enhanced_fast_string+0xa/0x40 [ 796.638152][T18373] ? bpf_lsm_bpf+0x5/0x10 [ 796.642591][T18373] ? security_bpf+0x7a/0xa0 [ 796.647122][T18373] __sys_bpf+0x5b8/0x780 [ 796.651410][T18373] ? bpf_link_show_fdinfo+0x380/0x380 [ 796.656821][T18373] ? lock_chain_count+0x20/0x20 [ 796.661718][T18373] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 796.667735][T18373] __x64_sys_bpf+0x78/0x90 [ 796.672183][T18373] do_syscall_64+0x4c/0xa0 [ 796.676627][T18373] ? clear_bhb_loop+0x60/0xb0 [ 796.681328][T18373] ? clear_bhb_loop+0x60/0xb0 [ 796.686036][T18373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 796.691962][T18373] RIP: 0033:0x7f55f879e559 [ 796.696398][T18373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.716027][T18373] RSP: 002b:00007f55f96d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 796.724473][T18373] RAX: ffffffffffffffda RBX: 00007f55f8a25fa0 RCX: 00007f55f879e559 [ 796.732465][T18373] RDX: 0000000000000048 RSI: 0000200000001140 RDI: 0000000000000005 [ 796.740459][T18373] RBP: 00007f55f96d2090 R08: 0000000000000000 R09: 0000000000000000 [ 796.748473][T18373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.756480][T18373] R13: 00007f55f8a26038 R14: 00007f55f8a25fa0 R15: 00007fffe9d91a48 [ 796.764518][T18373] [ 796.828468][T18373] Mem-Info: [ 796.831703][T18373] active_anon:23234 inactive_anon:0 isolated_anon:0 [ 796.831703][T18373] active_file:21310 inactive_file:40245 isolated_file:0 [ 796.831703][T18373] unevictable:768 dirty:145 writeback:0 [ 796.831703][T18373] slab_reclaimable:21643 slab_unreclaimable:98034 [ 796.831703][T18373] mapped:39787 shmem:17205 pagetables:653 [ 796.831703][T18373] sec_pagetables:0 bounce:0 [ 796.831703][T18373] kernel_misc_reclaimable:0 [ 796.831703][T18373] free:1296127 free_pcp:10163 free_cma:0 [ 796.946191][T18373] Node 0 active_anon:95936kB inactive_anon:0kB active_file:85240kB inactive_file:160780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159148kB dirty:580kB writeback:0kB shmem:70184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10068kB pagetables:2612kB sec_pagetables:0kB all_unreclaimable? no [ 797.049809][T18373] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 797.133990][T18373] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 797.319302][T18373] lowmem_reserve[]: 0 2511 2513 2513 2513 [ 797.346560][T18373] Node 0 DMA32 free:1264352kB boost:0kB min:34556kB low:43192kB high:51828kB reserved_highatomic:0KB active_anon:102436kB inactive_anon:0kB active_file:85240kB inactive_file:160780kB unevictable:1536kB writepending:580kB present:3129332kB managed:2576776kB mlocked:0kB bounce:0kB free_pcp:20328kB local_pcp:10832kB free_cma:0kB [ 797.438052][T18392] netlink: 'syz.2.4151': attribute type 10 has an invalid length. [ 797.486928][T18392] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4151'. [ 797.565736][T18373] lowmem_reserve[]: 0 0 1 1 1 [ 797.613266][T18373] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1680kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 797.619027][T18392] netlink: 'syz.2.4151': attribute type 10 has an invalid length. [ 797.707111][T18373] lowmem_reserve[]: 0 0 0 0 0 [ 797.712097][T18373] Node 1 Normal free:3893568kB boost:0kB min:55324kB low:69152kB high:82980kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19436kB local_pcp:8356kB free_cma:0kB [ 797.818563][T18373] lowmem_reserve[]: 0 0 0 0 0 [ 797.823409][T18373] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 797.888416][T18373] Node 0 DMA32: 124*4kB (UE) 900*8kB (U) 521*16kB (UE) 108*32kB (UE) 969*64kB (UME) 912*128kB (UME) 339*256kB (UME) 143*512kB (UM) 73*1024kB (UME) 6*2048kB (UM) 198*4096kB (UM) = 1256288kB [ 797.976998][T18373] Node 0 Normal: 2*4kB (U) 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 798.005349][T18373] Node 1 Normal: 230*4kB (UME) 61*8kB (UME) 22*16kB (UME) 31*32kB (UE) 22*64kB (UME) 10*128kB (UME) 6*256kB (UME) 3*512kB (UME) 0*1024kB 1*2048kB (E) 948*4096kB (M) = 3893568kB [ 798.058517][T18373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 798.071740][T18392] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4151'. [ 798.085056][T18373] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 798.115153][T18373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 798.136424][T18373] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 798.158031][T18373] 84374 total pagecache pages [ 798.166467][T18373] 0 pages in swap cache [ 798.177184][T18373] Free swap = 124996kB [ 798.185181][T18373] Total swap = 124996kB [ 798.195684][T18373] 2097051 pages RAM [ 798.203250][T18373] 0 pages HighMem/MovableOnly [ 798.211557][T18373] 419192 pages reserved [ 798.223439][T18373] 0 pages cma reserved [ 798.458564][T18414] device syzkaller0 entered promiscuous mode [ 799.278523][T18437] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4169'. [ 799.302209][T18437] : renamed from caif0 [ 799.420448][T18437] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 799.520880][T18441] netlink: 'syz.2.4171': attribute type 3 has an invalid length. [ 799.558521][T18441] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4171'. [ 799.632791][T18443] netlink: 'syz.2.4171': attribute type 3 has an invalid length. [ 799.659573][T18443] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4171'. [ 799.906809][T18448] netlink: 'syz.3.4172': attribute type 10 has an invalid length. [ 799.958737][T18448] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4172'. [ 799.974356][T18441] rxe_eth0 speed is unknown, defaulting to 1000 [ 800.202362][T18448] netlink: 'syz.3.4172': attribute type 10 has an invalid length. [ 800.438412][T18448] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4172'. [ 800.457777][T18450] netlink: 'syz.3.4172': attribute type 10 has an invalid length. [ 800.488087][T18450] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4172'. [ 801.161836][T18464] netlink: 'syz.0.4179': attribute type 10 has an invalid length. [ 801.169940][T18464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4179'. [ 801.273273][T18468] device syzkaller0 entered promiscuous mode [ 801.555033][T18474] bridge0: port 3(team0) entered disabled state [ 801.574386][T18474] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.590129][T18474] device bridge_slave_0 left promiscuous mode [ 801.605205][T18474] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.046326][T18496] netlink: 'syz.0.4187': attribute type 10 has an invalid length. [ 803.098655][T18496] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4187'. [ 803.123218][T18505] FAULT_INJECTION: forcing a failure. [ 803.123218][T18505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.136972][T18496] netlink: 'syz.0.4187': attribute type 10 has an invalid length. [ 803.152659][T18505] CPU: 0 PID: 18505 Comm: syz.4.4190 Not tainted syzkaller #0 [ 803.160254][T18505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 803.170394][T18505] Call Trace: [ 803.173763][T18505] [ 803.176740][T18505] dump_stack_lvl+0x188/0x24e [ 803.181485][T18505] ? show_regs_print_info+0x12/0x12 [ 803.186735][T18505] ? load_image+0x410/0x410 [ 803.191294][T18505] ? __lock_acquire+0x7ea0/0x7ea0 [ 803.196395][T18505] should_fail_ex+0x390/0x4c0 [ 803.201159][T18505] _copy_to_user+0x2c/0x130 [ 803.205720][T18505] bpf_test_finish+0x4a2/0x600 [ 803.210556][T18505] ? convert_skb_to___skb+0x420/0x420 [ 803.216006][T18505] ? __build_skb+0x24b/0x3b0 [ 803.220657][T18505] bpf_prog_test_run_skb+0x1129/0x18e0 [ 803.226189][T18505] ? cpu_online+0xa0/0xa0 [ 803.230587][T18505] bpf_prog_test_run+0x31c/0x390 [ 803.235603][T18505] __sys_bpf+0x62b/0x780 [ 803.239915][T18505] ? bpf_link_show_fdinfo+0x380/0x380 [ 803.245362][T18505] ? lock_chain_count+0x20/0x20 [ 803.250287][T18505] __x64_sys_bpf+0x78/0x90 [ 803.254757][T18505] do_syscall_64+0x4c/0xa0 [ 803.259218][T18505] ? clear_bhb_loop+0x60/0xb0 [ 803.263928][T18505] ? clear_bhb_loop+0x60/0xb0 [ 803.268635][T18505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 803.274581][T18505] RIP: 0033:0x7f03cb79e559 [ 803.279025][T18505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.298757][T18505] RSP: 002b:00007f03cc73b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 803.307228][T18505] RAX: ffffffffffffffda RBX: 00007f03cba25fa0 RCX: 00007f03cb79e559 [ 803.315225][T18505] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 803.323236][T18505] RBP: 00007f03cc73b090 R08: 0000000000000000 R09: 0000000000000000 [ 803.331247][T18505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.339240][T18505] R13: 00007f03cba26038 R14: 00007f03cba25fa0 R15: 00007ffdf35ace28 [ 803.347255][T18505] [ 803.405491][T18496] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4187'. [ 803.508999][T18509] netlink: 'syz.0.4187': attribute type 10 has an invalid length. [ 803.534186][T18509] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4187'. [ 803.716185][T18500] delete_channel: no stack [ 804.050328][T18518] device syzkaller0 entered promiscuous mode [ 804.691839][T18533] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 804.871265][T18533] syzkaller1: linktype set to 773 [ 805.089646][T18541] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 805.095761][T18541] syzkaller1: linktype set to 773 [ 806.150084][T18563] FAULT_INJECTION: forcing a failure. [ 806.150084][T18563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 806.239382][T18563] CPU: 0 PID: 18563 Comm: syz.1.4203 Not tainted syzkaller #0 [ 806.246991][T18563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 806.257112][T18563] Call Trace: [ 806.260441][T18563] [ 806.263418][T18563] dump_stack_lvl+0x188/0x24e [ 806.268153][T18563] ? show_regs_print_info+0x12/0x12 [ 806.273440][T18563] ? load_image+0x410/0x410 [ 806.277985][T18563] ? __lock_acquire+0x7ea0/0x7ea0 [ 806.283340][T18563] ? ktime_get+0x7b/0x270 [ 806.287738][T18563] should_fail_ex+0x390/0x4c0 [ 806.292483][T18563] _copy_from_user+0x2c/0x170 [ 806.297222][T18563] __sys_bpf+0x2ea/0x780 [ 806.301523][T18563] ? bpf_link_show_fdinfo+0x380/0x380 [ 806.306953][T18563] ? lock_chain_count+0x20/0x20 [ 806.311836][T18563] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 806.317885][T18563] __x64_sys_bpf+0x78/0x90 [ 806.322333][T18563] do_syscall_64+0x4c/0xa0 [ 806.326782][T18563] ? clear_bhb_loop+0x60/0xb0 [ 806.331487][T18563] ? clear_bhb_loop+0x60/0xb0 [ 806.336191][T18563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 806.342109][T18563] RIP: 0033:0x7fdb5ef9e559 [ 806.346721][T18563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.366406][T18563] RSP: 002b:00007fdb5ff10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 806.374871][T18563] RAX: ffffffffffffffda RBX: 00007fdb5f225fa0 RCX: 00007fdb5ef9e559 [ 806.382871][T18563] RDX: 0000000000000028 RSI: 00002000000008c0 RDI: 000000000000000a [ 806.390863][T18563] RBP: 00007fdb5ff10090 R08: 0000000000000000 R09: 0000000000000000 [ 806.398853][T18563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.406850][T18563] R13: 00007fdb5f226038 R14: 00007fdb5f225fa0 R15: 00007fff86aacd38 [ 806.414863][T18563] [ 806.666672][T18571] netlink: 'syz.2.4204': attribute type 10 has an invalid length. [ 806.767424][T18571] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4204'. [ 807.013290][T18571] netlink: 'syz.2.4204': attribute type 10 has an invalid length. [ 807.278660][T18571] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4204'. [ 807.336978][T18575] netlink: 'syz.2.4204': attribute type 10 has an invalid length. [ 807.590388][T18575] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4204'. [ 807.759140][T18591] netlink: 'syz.4.4211': attribute type 4 has an invalid length. [ 807.810995][T18589] device syzkaller0 entered promiscuous mode [ 808.138132][T18614] sctp: [Deprecated]: syz.4.4213 (pid 18614) Use of struct sctp_assoc_value in delayed_ack socket option. [ 808.138132][T18614] Use struct sctp_sack_info instead [ 808.584225][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.590762][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.038099][T18631] FAULT_INJECTION: forcing a failure. [ 809.038099][T18631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.115149][T18631] CPU: 0 PID: 18631 Comm: syz.4.4218 Not tainted syzkaller #0 [ 809.122720][T18631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 809.132829][T18631] Call Trace: [ 809.136154][T18631] [ 809.139123][T18631] dump_stack_lvl+0x188/0x24e [ 809.143868][T18631] ? show_regs_print_info+0x12/0x12 [ 809.149136][T18631] ? load_image+0x410/0x410 [ 809.153698][T18631] ? __lock_acquire+0x7ea0/0x7ea0 [ 809.158828][T18631] should_fail_ex+0x390/0x4c0 [ 809.163585][T18631] _copy_from_user+0x2c/0x170 [ 809.168331][T18631] bpf_prog_test_run_skb+0x263/0x18e0 [ 809.173782][T18631] ? __fget_files+0x28/0x460 [ 809.178440][T18631] ? __fget_files+0x3fc/0x460 [ 809.183177][T18631] ? cpu_online+0xa0/0xa0 [ 809.187592][T18631] bpf_prog_test_run+0x31c/0x390 [ 809.192666][T18631] __sys_bpf+0x62b/0x780 [ 809.196975][T18631] ? bpf_link_show_fdinfo+0x380/0x380 [ 809.202447][T18631] ? lock_chain_count+0x20/0x20 [ 809.207412][T18631] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 809.213518][T18631] __x64_sys_bpf+0x78/0x90 [ 809.218029][T18631] do_syscall_64+0x4c/0xa0 [ 809.222530][T18631] ? clear_bhb_loop+0x60/0xb0 [ 809.227274][T18631] ? clear_bhb_loop+0x60/0xb0 [ 809.232080][T18631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 809.238088][T18631] RIP: 0033:0x7f03cb79e559 [ 809.242601][T18631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.262263][T18631] RSP: 002b:00007f03cc73b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 809.270751][T18631] RAX: ffffffffffffffda RBX: 00007f03cba25fa0 RCX: 00007f03cb79e559 [ 809.278771][T18631] RDX: 0000000000000050 RSI: 0000200000002040 RDI: 000000000000000a [ 809.286814][T18631] RBP: 00007f03cc73b090 R08: 0000000000000000 R09: 0000000000000000 [ 809.294828][T18631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.302836][T18631] R13: 00007f03cba26038 R14: 00007f03cba25fa0 R15: 00007ffdf35ace28 [ 809.311048][T18631] [ 810.015643][T18639] netlink: 'syz.4.4222': attribute type 21 has an invalid length. [ 810.041390][T18639] netlink: 'syz.4.4222': attribute type 1 has an invalid length. [ 810.660833][T18659] netlink: 'syz.4.4225': attribute type 10 has an invalid length. [ 810.792539][T18659] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4225'. [ 810.829090][T18658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4226'. [ 810.874871][T18658] netlink: 'syz.2.4226': attribute type 1 has an invalid length. [ 810.942349][T18658] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4226'. [ 811.028562][T18659] netlink: 'syz.4.4225': attribute type 10 has an invalid length. [ 811.157111][T18659] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4225'. [ 811.325731][T18671] device syzkaller0 entered promiscuous mode [ 811.653036][T18681] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4232'. [ 811.814066][T18680] netlink: 'syz.2.4231': attribute type 10 has an invalid length. [ 812.364394][T18693] netlink: 'syz.4.4236': attribute type 7 has an invalid length. [ 812.432244][T18693] netlink: 191184 bytes leftover after parsing attributes in process `syz.4.4236'. [ 813.488088][T18703] device veth1_macvtap left promiscuous mode [ 813.514648][T18703] device macsec0 entered promiscuous mode [ 813.679015][T18707] netlink: 'syz.3.4242': attribute type 10 has an invalid length. [ 813.686974][T18707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4242'. [ 813.938821][T18707] netlink: 'syz.3.4242': attribute type 10 has an invalid length. [ 814.058246][T18707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4242'. [ 814.155351][T18710] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4243'. [ 814.288165][T18710] netlink: 'syz.1.4243': attribute type 1 has an invalid length. [ 814.338506][T18710] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4243'. [ 814.548711][T18713] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4242'. [ 815.591259][T18749] FAULT_INJECTION: forcing a failure. [ 815.591259][T18749] name failslab, interval 1, probability 0, space 0, times 0 [ 815.718469][T18749] CPU: 1 PID: 18749 Comm: syz.3.4252 Not tainted syzkaller #0 [ 815.726067][T18749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 815.736189][T18749] Call Trace: [ 815.739526][T18749] [ 815.742516][T18749] dump_stack_lvl+0x188/0x24e [ 815.747272][T18749] ? show_regs_print_info+0x12/0x12 [ 815.752566][T18749] ? load_image+0x410/0x410 [ 815.757137][T18749] ? __might_sleep+0xd0/0xd0 [ 815.761790][T18749] ? __lock_acquire+0x7ea0/0x7ea0 [ 815.766916][T18749] should_fail_ex+0x390/0x4c0 [ 815.771657][T18749] should_failslab+0x5/0x20 [ 815.776217][T18749] slab_pre_alloc_hook+0x59/0x300 [ 815.781575][T18749] kmem_cache_alloc_node+0x5a/0x310 [ 815.786825][T18749] ? __alloc_skb+0xf9/0x7d0 [ 815.791565][T18749] __alloc_skb+0xf9/0x7d0 [ 815.795999][T18749] netlink_sendmsg+0x654/0xbd0 [ 815.800852][T18749] ? netlink_getsockopt+0x550/0x550 [ 815.806116][T18749] ? apparmor_socket_sendmsg+0x8a/0x330 [ 815.811730][T18749] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 815.817079][T18749] ? security_socket_sendmsg+0x7c/0xa0 [ 815.822610][T18749] ? netlink_getsockopt+0x550/0x550 [ 815.827879][T18749] ____sys_sendmsg+0x5ed/0x9a0 [ 815.832719][T18749] ? __sys_sendmsg_sock+0x30/0x30 [ 815.837810][T18749] ? __import_iovec+0x306/0x510 [ 815.842825][T18749] ? import_iovec+0x6f/0xa0 [ 815.847386][T18749] ___sys_sendmsg+0x2a2/0x360 [ 815.852116][T18749] ? __sys_sendmsg+0x2a0/0x2a0 [ 815.856950][T18749] ? __lock_acquire+0x7ea0/0x7ea0 [ 815.862061][T18749] __se_sys_sendmsg+0x1c3/0x2b0 [ 815.866965][T18749] ? __x64_sys_sendmsg+0x80/0x80 [ 815.871977][T18749] ? lockdep_hardirqs_on+0x94/0x140 [ 815.877237][T18749] do_syscall_64+0x4c/0xa0 [ 815.881697][T18749] ? clear_bhb_loop+0x60/0xb0 [ 815.886421][T18749] ? clear_bhb_loop+0x60/0xb0 [ 815.891147][T18749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 815.897085][T18749] RIP: 0033:0x7f55f879e559 [ 815.901546][T18749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.921300][T18749] RSP: 002b:00007f55f96d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 815.929770][T18749] RAX: ffffffffffffffda RBX: 00007f55f8a25fa0 RCX: 00007f55f879e559 [ 815.937811][T18749] RDX: 0000000004040000 RSI: 0000200000001080 RDI: 0000000000000003 [ 815.946018][T18749] RBP: 00007f55f96d2090 R08: 0000000000000000 R09: 0000000000000000 [ 815.954357][T18749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.962436][T18749] R13: 00007f55f8a26038 R14: 00007f55f8a25fa0 R15: 00007fffe9d91a48 [ 815.970596][T18749] [ 816.174387][T18755] device syzkaller0 entered promiscuous mode [ 816.398964][T18750] rxe_eth0 speed is unknown, defaulting to 1000 [ 817.089298][T18766] validate_nla: 1 callbacks suppressed [ 817.089328][T18766] netlink: 'syz.4.4255': attribute type 10 has an invalid length. [ 817.235701][T18766] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4255'. [ 817.439594][T18766] netlink: 'syz.4.4255': attribute type 10 has an invalid length. [ 817.447524][T18766] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4255'. [ 817.568967][T18769] netlink: 'syz.4.4255': attribute type 10 has an invalid length. [ 817.592179][T18769] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4255'. [ 818.505770][T18781] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4258'. [ 818.708551][T18781] netlink: 'syz.3.4258': attribute type 1 has an invalid length. [ 818.716448][T18781] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4258'. [ 818.924251][T18786] netlink: 'syz.0.4270': attribute type 10 has an invalid length. [ 818.982153][T18786] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4270'. [ 819.043408][T18794] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4261'. [ 819.142405][T18786] netlink: 'syz.0.4270': attribute type 10 has an invalid length. [ 819.228541][T18786] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4270'. [ 819.358699][T18793] netlink: 'syz.0.4270': attribute type 10 has an invalid length. [ 819.422400][T18793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4270'. [ 819.809001][T18808] FAULT_INJECTION: forcing a failure. [ 819.809001][T18808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.867866][T18808] CPU: 1 PID: 18808 Comm: syz.0.4265 Not tainted syzkaller #0 [ 819.875456][T18808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 819.885560][T18808] Call Trace: [ 819.888878][T18808] [ 819.891846][T18808] dump_stack_lvl+0x188/0x24e [ 819.896590][T18808] ? show_regs_print_info+0x12/0x12 [ 819.901850][T18808] ? load_image+0x410/0x410 [ 819.906407][T18808] ? __lock_acquire+0x7ea0/0x7ea0 [ 819.911498][T18808] should_fail_ex+0x390/0x4c0 [ 819.916274][T18808] _copy_from_user+0x2c/0x170 [ 819.921010][T18808] bpf_prog_test_run_skb+0x263/0x18e0 [ 819.926457][T18808] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 819.932675][T18808] ? lockdep_hardirqs_on+0x94/0x140 [ 819.937930][T18808] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 819.944161][T18808] ? cpu_online+0xa0/0xa0 [ 819.948567][T18808] bpf_prog_test_run+0x31c/0x390 [ 819.953594][T18808] __sys_bpf+0x62b/0x780 [ 819.957914][T18808] ? bpf_link_show_fdinfo+0x380/0x380 [ 819.963364][T18808] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 819.969597][T18808] __x64_sys_bpf+0x78/0x90 [ 819.974100][T18808] do_syscall_64+0x4c/0xa0 [ 819.978641][T18808] ? clear_bhb_loop+0x60/0xb0 [ 819.983394][T18808] ? clear_bhb_loop+0x60/0xb0 [ 819.988169][T18808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 819.994126][T18808] RIP: 0033:0x7f752c99e559 [ 819.998595][T18808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.018269][T18808] RSP: 002b:00007f752d927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 820.026758][T18808] RAX: ffffffffffffffda RBX: 00007f752cc25fa0 RCX: 00007f752c99e559 [ 820.034818][T18808] RDX: 0000000000000050 RSI: 0000200000002040 RDI: 000000000000000a [ 820.042863][T18808] RBP: 00007f752d927090 R08: 0000000000000000 R09: 0000000000000000 [ 820.050892][T18808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.058913][T18808] R13: 00007f752cc26038 R14: 00007f752cc25fa0 R15: 00007ffc603fa148 [ 820.066958][T18808] [ 820.595590][T18813] device syzkaller0 entered promiscuous mode [ 821.122670][T18818] netlink: 763 bytes leftover after parsing attributes in process `syz.1.4268'. [ 823.079096][T18857] netlink: 'syz.4.4276': attribute type 10 has an invalid length. [ 823.279327][T18857] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4276'. [ 824.348716][T18857] netlink: 'syz.4.4276': attribute type 10 has an invalid length. [ 824.356652][T18857] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4276'. [ 824.560573][T18881] device syzkaller0 entered promiscuous mode [ 825.506878][T18892] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4286'. [ 825.552135][T18889] netlink: 'syz.3.4284': attribute type 10 has an invalid length. [ 826.905064][T18907] netlink: 'syz.2.4291': attribute type 10 has an invalid length. [ 827.168163][T18907] team0: Device wg1 is of different type [ 827.472204][T18920] netlink: 'syz.1.4305': attribute type 19 has an invalid length. [ 828.354303][T18932] netlink: 'syz.3.4296': attribute type 10 has an invalid length. [ 828.492104][T18932] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4296'. [ 828.772246][T18932] netlink: 'syz.3.4296': attribute type 10 has an invalid length. [ 828.928522][T18932] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4296'. [ 829.037547][T18942] netlink: 'syz.3.4296': attribute type 10 has an invalid length. [ 829.088506][T18942] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4296'. [ 829.239126][T18949] device syzkaller0 entered promiscuous mode [ 829.266797][T18965] netlink: 'syz.1.4301': attribute type 29 has an invalid length. [ 829.535547][T18965] netlink: 'syz.1.4301': attribute type 29 has an invalid length. [ 829.750236][T18967] netlink: 'syz.1.4301': attribute type 29 has an invalid length. [ 830.550344][T18977] netlink: 'syz.4.4307': attribute type 10 has an invalid length. [ 831.942711][T18977] team0: Device gre0 is of different type [ 832.504401][T18986] netlink: 'syz.3.4309': attribute type 10 has an invalid length. [ 832.758294][T18986] team0: Device wg1 is of different type [ 833.146120][T18983] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.4307'. [ 833.262485][T19007] netlink: 'syz.0.4314': attribute type 10 has an invalid length. [ 833.523377][T19033] FAULT_INJECTION: forcing a failure. [ 833.523377][T19033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 833.549613][T19033] CPU: 0 PID: 19033 Comm: syz.3.4317 Not tainted syzkaller #0 [ 833.557205][T19033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 833.567322][T19033] Call Trace: [ 833.570655][T19033] [ 833.573627][T19033] dump_stack_lvl+0x188/0x24e [ 833.578372][T19033] ? show_regs_print_info+0x12/0x12 [ 833.583661][T19033] ? load_image+0x410/0x410 [ 833.588220][T19033] ? __might_fault+0xa6/0x120 [ 833.592960][T19033] should_fail_ex+0x390/0x4c0 [ 833.597704][T19033] copyin+0x1b/0x120 [ 833.601656][T19033] _copy_from_iter+0x447/0x1130 [ 833.606574][T19033] ? copyout_mc+0x110/0x110 [ 833.611146][T19033] ? __virt_addr_valid+0x188/0x540 [ 833.616315][T19033] ? __virt_addr_valid+0x188/0x540 [ 833.621493][T19033] ? __virt_addr_valid+0x467/0x540 [ 833.626661][T19033] ? __phys_addr_symbol+0x2b/0x70 [ 833.631739][T19033] ? __check_object_size+0x4f6/0xa70 [ 833.637094][T19033] netlink_sendmsg+0x755/0xbd0 [ 833.641917][T19033] ? netlink_getsockopt+0x550/0x550 [ 833.647186][T19033] ? apparmor_socket_sendmsg+0x16c/0x330 [ 833.652881][T19033] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 833.658214][T19033] ? security_socket_sendmsg+0x7c/0xa0 [ 833.663725][T19033] ? netlink_getsockopt+0x550/0x550 [ 833.668982][T19033] ____sys_sendmsg+0x5ed/0x9a0 [ 833.673808][T19033] ? __sys_sendmsg_sock+0x30/0x30 [ 833.678886][T19033] ? __import_iovec+0x306/0x510 [ 833.683804][T19033] ? import_iovec+0x6f/0xa0 [ 833.688372][T19033] ___sys_sendmsg+0x2a2/0x360 [ 833.693229][T19033] ? __sys_sendmsg+0x2a0/0x2a0 [ 833.698065][T19033] ? __lock_acquire+0x7ea0/0x7ea0 [ 833.703170][T19033] __se_sys_sendmsg+0x1c3/0x2b0 [ 833.708073][T19033] ? __x64_sys_sendmsg+0x80/0x80 [ 833.713083][T19033] ? lockdep_hardirqs_on+0x94/0x140 [ 833.718347][T19033] do_syscall_64+0x4c/0xa0 [ 833.722805][T19033] ? clear_bhb_loop+0x60/0xb0 [ 833.727533][T19033] ? clear_bhb_loop+0x60/0xb0 [ 833.732273][T19033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 833.738225][T19033] RIP: 0033:0x7f55f879e559 [ 833.742773][T19033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.762435][T19033] RSP: 002b:00007f55f96d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 833.770911][T19033] RAX: ffffffffffffffda RBX: 00007f55f8a25fa0 RCX: 00007f55f879e559 [ 833.778949][T19033] RDX: 0000000020004000 RSI: 0000200000000500 RDI: 0000000000000003 [ 833.787165][T19033] RBP: 00007f55f96d2090 R08: 0000000000000000 R09: 0000000000000000 [ 833.795190][T19033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.803208][T19033] R13: 00007f55f8a26038 R14: 00007f55f8a25fa0 R15: 00007fffe9d91a48 [ 833.811343][T19033] [ 834.175252][T19011] device syzkaller0 entered promiscuous mode [ 834.209033][T18976] rxe_eth0 speed is unknown, defaulting to 1000 [ 835.599726][T19057] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4326'. [ 835.670529][T19057] bond0: (slave bond_slave_0): Releasing backup interface [ 835.798205][T19057] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 836.297760][T19076] netlink: 'syz.4.4330': attribute type 3 has an invalid length. [ 836.346552][T19076] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.4330'. [ 836.365757][T19074] netlink: 'syz.1.4331': attribute type 10 has an invalid length. [ 839.534761][T19145] device syzkaller0 entered promiscuous mode [ 839.908072][T19153] netlink: 'syz.2.4350': attribute type 10 has an invalid length. [ 840.530909][T19171] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4358'. [ 840.639949][T19171] bond0: (slave bond_slave_0): Releasing backup interface [ 840.807458][T19171] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 840.871067][T19181] netlink: 'syz.1.4362': attribute type 21 has an invalid length. [ 840.905889][T19181] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4362'. [ 841.386670][T19188] device syzkaller0 entered promiscuous mode [ 842.786127][T19228] FAULT_INJECTION: forcing a failure. [ 842.786127][T19228] name failslab, interval 1, probability 0, space 0, times 0 [ 842.809314][T19228] CPU: 0 PID: 19228 Comm: syz.0.4389 Not tainted syzkaller #0 [ 842.816941][T19228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 842.827071][T19228] Call Trace: [ 842.830547][T19228] [ 842.833556][T19228] dump_stack_lvl+0x188/0x24e [ 842.838336][T19228] ? show_regs_print_info+0x12/0x12 [ 842.843670][T19228] ? load_image+0x410/0x410 [ 842.848261][T19228] ? __might_sleep+0xd0/0xd0 [ 842.852936][T19228] ? __lock_acquire+0x7ea0/0x7ea0 [ 842.858087][T19228] should_fail_ex+0x390/0x4c0 [ 842.862876][T19228] should_failslab+0x5/0x20 [ 842.867634][T19228] slab_pre_alloc_hook+0x59/0x300 [ 842.872754][T19228] ? trace_event_raw_event_lock+0x230/0x230 [ 842.878754][T19228] ? sock_kmalloc+0x92/0xf0 [ 842.883467][T19228] __kmem_cache_alloc_node+0x4f/0x270 [ 842.888944][T19228] ? sock_kmalloc+0x92/0xf0 [ 842.893549][T19228] __kmalloc+0xa3/0x240 [ 842.897804][T19228] sock_kmalloc+0x92/0xf0 [ 842.902234][T19228] ____sys_sendmsg+0x1bf/0x9a0 [ 842.907095][T19228] ? __lock_acquire+0x7ea0/0x7ea0 [ 842.912346][T19228] ? __sys_sendmsg_sock+0x30/0x30 [ 842.917462][T19228] ? __import_iovec+0x306/0x510 [ 842.922519][T19228] ? import_iovec+0x6f/0xa0 [ 842.927144][T19228] ___sys_sendmsg+0x2a2/0x360 [ 842.931948][T19228] ? __sys_sendmsg+0x2a0/0x2a0 [ 842.936884][T19228] ? __lock_acquire+0x7ea0/0x7ea0 [ 842.942100][T19228] __se_sys_sendmsg+0x1c3/0x2b0 [ 842.947037][T19228] ? ct_nmi_exit+0x145/0x1c0 [ 842.951726][T19228] ? __x64_sys_sendmsg+0x80/0x80 [ 842.956804][T19228] ? lockdep_hardirqs_on+0x94/0x140 [ 842.962107][T19228] do_syscall_64+0x4c/0xa0 [ 842.966600][T19228] ? clear_bhb_loop+0x60/0xb0 [ 842.971363][T19228] ? clear_bhb_loop+0x60/0xb0 [ 842.976120][T19228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 842.982095][T19228] RIP: 0033:0x7f752c99e559 [ 842.986584][T19228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.006369][T19228] RSP: 002b:00007f752d927028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 843.014881][T19228] RAX: ffffffffffffffda RBX: 00007f752cc25fa0 RCX: 00007f752c99e559 [ 843.022949][T19228] RDX: 0000000020028814 RSI: 0000200000000580 RDI: 0000000000000005 [ 843.031004][T19228] RBP: 00007f752d927090 R08: 0000000000000000 R09: 0000000000000000 [ 843.039051][T19228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.047104][T19228] R13: 00007f752cc26038 R14: 00007f752cc25fa0 R15: 00007ffc603fa148 [ 843.055304][T19228] [ 843.228018][T19218] delete_channel: no stack [ 843.489496][T19241] device syzkaller0 entered promiscuous mode [ 843.687489][T19247] FAULT_INJECTION: forcing a failure. [ 843.687489][T19247] name failslab, interval 1, probability 0, space 0, times 0 [ 843.758898][T19247] CPU: 1 PID: 19247 Comm: syz.0.4385 Not tainted syzkaller #0 [ 843.766608][T19247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 843.776768][T19247] Call Trace: [ 843.780128][T19247] [ 843.783142][T19247] dump_stack_lvl+0x188/0x24e [ 843.787996][T19247] ? show_regs_print_info+0x12/0x12 [ 843.793339][T19247] ? load_image+0x410/0x410 [ 843.798149][T19247] ? __might_sleep+0xd0/0xd0 [ 843.802851][T19247] ? __lock_acquire+0x7ea0/0x7ea0 [ 843.808192][T19247] should_fail_ex+0x390/0x4c0 [ 843.813012][T19247] should_failslab+0x5/0x20 [ 843.817644][T19247] slab_pre_alloc_hook+0x59/0x300 [ 843.822797][T19247] kmem_cache_alloc_node+0x5a/0x310 [ 843.828086][T19247] ? __alloc_skb+0xf9/0x7d0 [ 843.832811][T19247] __alloc_skb+0xf9/0x7d0 [ 843.837262][T19247] netlink_sendmsg+0x654/0xbd0 [ 843.842175][T19247] ? netlink_getsockopt+0x550/0x550 [ 843.847489][T19247] ? apparmor_socket_sendmsg+0x8a/0x330 [ 843.853136][T19247] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 843.859004][T19247] ? security_socket_sendmsg+0x7c/0xa0 [ 843.864542][T19247] ? netlink_getsockopt+0x550/0x550 [ 843.869819][T19247] ____sys_sendmsg+0x5ed/0x9a0 [ 843.874704][T19247] ? __sys_sendmsg_sock+0x30/0x30 [ 843.879779][T19247] ? __import_iovec+0x306/0x510 [ 843.884722][T19247] ? import_iovec+0x6f/0xa0 [ 843.889402][T19247] ___sys_sendmsg+0x2a2/0x360 [ 843.894164][T19247] ? __sys_sendmsg+0x2a0/0x2a0 [ 843.899096][T19247] ? __lock_acquire+0x7ea0/0x7ea0 [ 843.904276][T19247] __se_sys_sendmsg+0x1c3/0x2b0 [ 843.909218][T19247] ? __x64_sys_sendmsg+0x80/0x80 [ 843.914299][T19247] ? lockdep_hardirqs_on+0x94/0x140 [ 843.919617][T19247] do_syscall_64+0x4c/0xa0 [ 843.924131][T19247] ? clear_bhb_loop+0x60/0xb0 [ 843.929148][T19247] ? clear_bhb_loop+0x60/0xb0 [ 843.933916][T19247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 843.939901][T19247] RIP: 0033:0x7f752c99e559 [ 843.944409][T19247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.964099][T19247] RSP: 002b:00007f752d927028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 843.972618][T19247] RAX: ffffffffffffffda RBX: 00007f752cc25fa0 RCX: 00007f752c99e559 [ 843.980666][T19247] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000005 [ 843.988744][T19247] RBP: 00007f752d927090 R08: 0000000000000000 R09: 0000000000000000 [ 843.996792][T19247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.004814][T19247] R13: 00007f752cc26038 R14: 00007f752cc25fa0 R15: 00007ffc603fa148 [ 844.012898][T19247] [ 844.032507][T19249] netlink: 'syz.1.4386': attribute type 3 has an invalid length. [ 844.072956][T19249] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4386'. [ 844.678756][T19264] device syzkaller0 entered promiscuous mode [ 844.882648][ T4279] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 848.770556][T19312] netlink: 'syz.4.4402': attribute type 10 has an invalid length. [ 848.792183][T19312] team0: Device veth1_to_bridge is up. Set it down before adding it as a team port [ 849.047638][T19316] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.4415'. [ 849.255595][T19316] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4415'. [ 849.564829][T19314] netlink: 'syz.3.4403': attribute type 21 has an invalid length. [ 849.587160][T19314] netlink: 'syz.3.4403': attribute type 4 has an invalid length. [ 849.649623][T19314] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4403'. [ 851.756667][T19370] device syzkaller0 entered promiscuous mode [ 851.801295][T19359] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 851.820175][T19359] device syzkaller0 entered promiscuous mode [ 852.447016][T19373] delete_channel: no stack [ 853.147088][T19396] netlink: 'syz.0.4430': attribute type 10 has an invalid length. [ 853.229056][T19396] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4430'. [ 856.592412][T19392] netlink: 'syz.4.4428': attribute type 6 has an invalid length. [ 856.600447][T19392] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4428'. [ 856.616677][T19396] netlink: 'syz.0.4430': attribute type 10 has an invalid length. [ 856.627253][T19396] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4430'. [ 856.877240][T19412] netlink: 'syz.0.4435': attribute type 10 has an invalid length. [ 856.912742][T19417] device syzkaller0 entered promiscuous mode [ 857.577677][T19434] netlink: 'syz.3.4444': attribute type 7 has an invalid length. [ 857.619660][T19434] netlink: 'syz.3.4444': attribute type 6 has an invalid length. [ 857.949820][T19445] netlink: 'syz.0.4447': attribute type 10 has an invalid length. [ 857.974338][T19445] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4447'. [ 857.997543][T19445] netlink: 'syz.0.4447': attribute type 10 has an invalid length. [ 858.024500][T19445] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4447'. [ 859.617728][T19453] netlink: 'syz.4.4451': attribute type 10 has an invalid length. [ 860.046371][T19475] netlink: 'syz.0.4458': attribute type 10 has an invalid length. [ 860.074293][T19475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4458'. [ 860.523811][T19475] netlink: 'syz.0.4458': attribute type 10 has an invalid length. [ 860.532206][T19475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4458'. [ 860.549252][T19482] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4459'. [ 860.577644][T19487] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4459'. [ 861.719842][T19532] device syzkaller0 entered promiscuous mode [ 862.068054][T19548] validate_nla: 5 callbacks suppressed [ 862.068080][T19548] netlink: 'syz.2.4483': attribute type 29 has an invalid length. [ 862.230890][T19548] netlink: 'syz.2.4483': attribute type 29 has an invalid length. [ 862.674143][T19534] delete_channel: no stack [ 862.956295][T19565] netlink: 'syz.3.4490': attribute type 10 has an invalid length. [ 863.172190][T19578] device syzkaller0 entered promiscuous mode [ 863.725309][T19589] tap0: tun_chr_ioctl cmd 1074025677 [ 863.731331][T19589] tap0: linktype set to 776 [ 863.829792][T19566] delete_channel: no stack [ 864.383777][T19608] device syzkaller0 entered promiscuous mode [ 864.483835][T19606] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4505'. [ 864.517409][T19606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 864.596472][T19603] rxe_eth0 speed is unknown, defaulting to 1000 [ 864.992838][T19622] netlink: 'syz.0.4513': attribute type 1 has an invalid length. [ 865.764307][T19618] delete_channel: no stack [ 866.001744][T19646] device syzkaller0 entered promiscuous mode [ 866.328656][T19656] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4525'. [ 866.443169][T19656] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4525'. [ 867.274487][T19684] device syzkaller0 entered promiscuous mode [ 867.547258][T19691] netlink: 'syz.3.4538': attribute type 10 has an invalid length. [ 867.568492][T19691] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4538'. [ 867.639024][T19691] netlink: 'syz.3.4538': attribute type 10 has an invalid length. [ 867.646950][T19691] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4538'. [ 867.753379][T19692] netlink: 'syz.3.4538': attribute type 10 has an invalid length. [ 867.811405][T19692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4538'. [ 867.811816][T19672] delete_channel: no stack [ 867.873134][T19701] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4542'. [ 868.125863][T19704] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4542'. [ 868.192861][T19708] FAULT_INJECTION: forcing a failure. [ 868.192861][T19708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 868.247682][T19710] netlink: 'syz.2.4545': attribute type 10 has an invalid length. [ 868.257532][T19708] CPU: 0 PID: 19708 Comm: syz.4.4544 Not tainted syzkaller #0 [ 868.265064][T19708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 868.275200][T19708] Call Trace: [ 868.278526][T19708] [ 868.281495][T19708] dump_stack_lvl+0x188/0x24e [ 868.286231][T19708] ? show_regs_print_info+0x12/0x12 [ 868.291483][T19708] ? load_image+0x410/0x410 [ 868.296045][T19708] ? __might_fault+0xa6/0x120 [ 868.300785][T19708] should_fail_ex+0x390/0x4c0 [ 868.305522][T19708] copyin+0x1b/0x120 [ 868.309479][T19708] _copy_from_iter+0x447/0x1130 [ 868.314385][T19708] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 868.319819][T19708] ? copyout_mc+0x110/0x110 [ 868.324377][T19708] ? __virt_addr_valid+0x188/0x540 [ 868.329544][T19708] ? __virt_addr_valid+0x188/0x540 [ 868.334730][T19708] ? __virt_addr_valid+0x467/0x540 [ 868.339903][T19708] ? __check_object_size+0x4f6/0xa70 [ 868.345247][T19708] skb_copy_datagram_from_iter+0xee/0x6b0 [ 868.351038][T19708] ? unix_scm_to_skb+0x336/0x4e0 [ 868.356067][T19708] ? skb_put+0x10e/0x200 [ 868.360374][T19708] unix_dgram_sendmsg+0x683/0x16f0 [ 868.365540][T19708] ? aa_sk_perm+0x81f/0x950 [ 868.370110][T19708] ? aa_af_perm+0x340/0x340 [ 868.374684][T19708] ? __might_fault+0xa6/0x120 [ 868.379415][T19708] ? unix_dgram_poll+0x680/0x680 [ 868.384394][T19708] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 868.390867][T19708] ? apparmor_socket_sendmsg+0x16c/0x330 [ 868.396564][T19708] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 868.401899][T19708] ? security_socket_sendmsg+0x7c/0xa0 [ 868.407424][T19708] ? unix_dgram_poll+0x680/0x680 [ 868.412422][T19708] ____sys_sendmsg+0x5ed/0x9a0 [ 868.417249][T19708] ? __sys_sendmsg_sock+0x30/0x30 [ 868.422333][T19708] ? __import_iovec+0x306/0x510 [ 868.427253][T19708] ? import_iovec+0x6f/0xa0 [ 868.431828][T19708] ___sys_sendmsg+0x2a2/0x360 [ 868.436557][T19708] ? __sys_sendmsg+0x2a0/0x2a0 [ 868.441404][T19708] ? __lock_acquire+0x7ea0/0x7ea0 [ 868.446511][T19708] __se_sys_sendmsg+0x1c3/0x2b0 [ 868.451413][T19708] ? __x64_sys_sendmsg+0x80/0x80 [ 868.456425][T19708] ? lockdep_hardirqs_on+0x94/0x140 [ 868.461691][T19708] do_syscall_64+0x4c/0xa0 [ 868.466162][T19708] ? clear_bhb_loop+0x60/0xb0 [ 868.470889][T19708] ? clear_bhb_loop+0x60/0xb0 [ 868.475629][T19708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 868.481582][T19708] RIP: 0033:0x7f03cb79e559 [ 868.486047][T19708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.505710][T19708] RSP: 002b:00007f03cc73b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 868.514187][T19708] RAX: ffffffffffffffda RBX: 00007f03cba25fa0 RCX: 00007f03cb79e559 [ 868.522207][T19708] RDX: 0000000020000000 RSI: 0000200000001d40 RDI: 0000000000000006 [ 868.530232][T19708] RBP: 00007f03cc73b090 R08: 0000000000000000 R09: 0000000000000000 [ 868.538253][T19708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.546273][T19708] R13: 00007f03cba26038 R14: 00007f03cba25fa0 R15: 00007ffdf35ace28 [ 868.554319][T19708] [ 868.800484][T19716] device syzkaller0 entered promiscuous mode [ 869.455273][T19737] FAULT_INJECTION: forcing a failure. [ 869.455273][T19737] name failslab, interval 1, probability 0, space 0, times 0 [ 869.526797][T19737] CPU: 0 PID: 19737 Comm: syz.2.4557 Not tainted syzkaller #0 [ 869.534381][T19737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 869.544618][T19737] Call Trace: [ 869.547937][T19737] [ 869.550896][T19737] dump_stack_lvl+0x188/0x24e [ 869.555612][T19737] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 869.561793][T19737] ? show_regs_print_info+0x12/0x12 [ 869.567021][T19737] ? load_image+0x410/0x410 [ 869.571569][T19737] should_fail_ex+0x390/0x4c0 [ 869.576284][T19737] should_failslab+0x5/0x20 [ 869.580814][T19737] slab_pre_alloc_hook+0x59/0x300 [ 869.585894][T19737] kmem_cache_alloc+0x56/0x2f0 [ 869.590680][T19737] ? __build_skb+0x27/0x3b0 [ 869.595217][T19737] __build_skb+0x27/0x3b0 [ 869.599567][T19737] ? build_skb+0x14/0x230 [ 869.603917][T19737] build_skb+0x1e/0x230 [ 869.608093][T19737] bpf_prog_test_run_skb+0x38d/0x18e0 [ 869.613526][T19737] ? __fget_files+0x28/0x460 [ 869.618148][T19737] ? __fget_files+0x3fc/0x460 [ 869.622862][T19737] ? cpu_online+0xa0/0xa0 [ 869.627217][T19737] bpf_prog_test_run+0x31c/0x390 [ 869.632186][T19737] __sys_bpf+0x62b/0x780 [ 869.636464][T19737] ? bpf_link_show_fdinfo+0x380/0x380 [ 869.641879][T19737] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 869.648070][T19737] __x64_sys_bpf+0x78/0x90 [ 869.652546][T19737] do_syscall_64+0x4c/0xa0 [ 869.657015][T19737] ? clear_bhb_loop+0x60/0xb0 [ 869.661716][T19737] ? clear_bhb_loop+0x60/0xb0 [ 869.666424][T19737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 869.672351][T19737] RIP: 0033:0x7f828119e559 [ 869.676875][T19737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.696511][T19737] RSP: 002b:00007f827f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 869.704948][T19737] RAX: ffffffffffffffda RBX: 00007f8281425fa0 RCX: 00007f828119e559 [ 869.712944][T19737] RDX: 0000000000000028 RSI: 00002000000008c0 RDI: 000000000000000a [ 869.720935][T19737] RBP: 00007f827f3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 869.728936][T19737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.736952][T19737] R13: 00007f8281426038 R14: 00007f8281425fa0 R15: 00007ffd5b9bd2a8 [ 869.744963][T19737] [ 870.027150][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.033610][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.068977][T19726] rxe_eth0 speed is unknown, defaulting to 1000 [ 870.079505][T19728] delete_channel: no stack [ 870.305758][T19747] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4560'. [ 870.640687][T19752] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4560'. [ 870.701966][T19753] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4559'. [ 870.862847][T19753] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 871.282358][T19772] netlink: 'syz.2.4563': attribute type 10 has an invalid length. [ 871.434257][T19766] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4559'. [ 871.535421][T19776] FAULT_INJECTION: forcing a failure. [ 871.535421][T19776] name failslab, interval 1, probability 0, space 0, times 0 [ 871.615183][T19776] CPU: 1 PID: 19776 Comm: syz.1.4564 Not tainted syzkaller #0 [ 871.622774][T19776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 871.632892][T19776] Call Trace: [ 871.636231][T19776] [ 871.639220][T19776] dump_stack_lvl+0x188/0x24e [ 871.643990][T19776] ? show_regs_print_info+0x12/0x12 [ 871.649281][T19776] ? load_image+0x410/0x410 [ 871.653868][T19776] ? __might_sleep+0xd0/0xd0 [ 871.658526][T19776] ? __lock_acquire+0x7ea0/0x7ea0 [ 871.663642][T19776] should_fail_ex+0x390/0x4c0 [ 871.668418][T19776] should_failslab+0x5/0x20 [ 871.672983][T19776] slab_pre_alloc_hook+0x59/0x300 [ 871.678092][T19776] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 871.683897][T19776] __kmem_cache_alloc_node+0x4f/0x270 [ 871.689355][T19776] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 871.695154][T19776] __kmalloc+0xa3/0x240 [ 871.699389][T19776] tomoyo_realpath_from_path+0xe2/0x5c0 [ 871.705006][T19776] ? tomoyo_domain+0xd2/0x120 [ 871.709784][T19776] ? tomoyo_path_number_perm+0x205/0x650 [ 871.715517][T19776] tomoyo_path_number_perm+0x22f/0x650 [ 871.721068][T19776] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 871.726608][T19776] ? ksys_write+0x1ce/0x260 [ 871.731188][T19776] ? common_file_perm+0x171/0x1c0 [ 871.736406][T19776] ? __fget_files+0x28/0x460 [ 871.741154][T19776] security_file_ioctl+0x6c/0xa0 [ 871.746178][T19776] __se_sys_ioctl+0x48/0x170 [ 871.750859][T19776] do_syscall_64+0x4c/0xa0 [ 871.755348][T19776] ? clear_bhb_loop+0x60/0xb0 [ 871.760093][T19776] ? clear_bhb_loop+0x60/0xb0 [ 871.764845][T19776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 871.770807][T19776] RIP: 0033:0x7fdb5ef9e559 [ 871.775308][T19776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.795087][T19776] RSP: 002b:00007fdb5ff10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 871.803584][T19776] RAX: ffffffffffffffda RBX: 00007fdb5f225fa0 RCX: 00007fdb5ef9e559 [ 871.811624][T19776] RDX: 0000200000001ec0 RSI: 00000000000089a0 RDI: 000000000000000d [ 871.819662][T19776] RBP: 00007fdb5ff10090 R08: 0000000000000000 R09: 0000000000000000 [ 871.827692][T19776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.835733][T19776] R13: 00007fdb5f226038 R14: 00007fdb5f225fa0 R15: 00007fff86aacd38 [ 871.843831][T19776] [ 871.927312][T19766] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 872.000794][T19766] CPU: 0 PID: 19766 Comm: syz.3.4559 Not tainted syzkaller #0 [ 872.008572][T19766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 872.018685][T19766] Call Trace: [ 872.022014][T19766] [ 872.024980][T19766] dump_stack_lvl+0x188/0x24e [ 872.029725][T19766] ? show_regs_print_info+0x12/0x12 [ 872.034971][T19766] ? load_image+0x410/0x410 [ 872.039552][T19766] sysfs_warn_dup+0x8a/0xa0 [ 872.044114][T19766] sysfs_do_create_link_sd+0xc0/0x110 [ 872.049546][T19766] device_add+0x83b/0x1050 [ 872.054040][T19766] wiphy_register+0x1d8b/0x2aa0 [ 872.058897][T19776] ERROR: Out of memory at tomoyo_realpath_from_path. [ 872.065654][T19766] ? cfg80211_event_work+0x40/0x40 [ 872.070827][T19766] ? minstrel_ht_alloc+0x894/0xa20 [ 872.076009][T19766] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 872.082171][T19766] ieee80211_register_hw+0x2e33/0x3b00 [ 872.087707][T19766] ? ieee80211_register_hw+0xf31/0x3b00 [ 872.093324][T19766] ? ieee80211_register_hw+0xf31/0x3b00 [ 872.099004][T19766] ? ieee80211_tasklet_handler+0x20/0x20 [ 872.104691][T19766] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 872.110654][T19766] ? __debug_object_init+0xed/0x440 [ 872.115918][T19766] ? memset+0x1e/0x40 [ 872.119936][T19766] ? __hrtimer_init+0x189/0x270 [ 872.124824][T19766] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 872.130597][T19766] ? memcpy+0x3c/0x60 [ 872.134636][T19766] hwsim_new_radio_nl+0xab7/0xc90 [ 872.139719][T19766] genl_family_rcv_msg_doit+0x22f/0x350 [ 872.145329][T19766] ? end_current_label_crit_section+0x170/0x170 [ 872.151653][T19766] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 872.157594][T19766] ? bpf_lsm_capable+0x5/0x10 [ 872.162323][T19766] ? security_capable+0x85/0xb0 [ 872.167211][T19766] genl_rcv_msg+0x601/0x790 [ 872.171759][T19766] ? genl_bind+0x360/0x360 [ 872.176205][T19766] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 872.182581][T19766] netlink_rcv_skb+0x1ef/0x440 [ 872.187374][T19766] ? genl_bind+0x360/0x360 [ 872.191915][T19766] ? netlink_ack+0x1160/0x1160 [ 872.196724][T19766] ? down_read+0x1a8/0x2d0 [ 872.201192][T19766] genl_rcv+0x24/0x40 [ 872.205206][T19766] netlink_unicast+0x7ad/0x920 [ 872.210020][T19766] netlink_sendmsg+0x8ad/0xbd0 [ 872.214833][T19766] ? netlink_getsockopt+0x550/0x550 [ 872.220060][T19766] ? apparmor_socket_sendmsg+0x8a/0x330 [ 872.225645][T19766] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 872.230961][T19766] ? security_socket_sendmsg+0x7c/0xa0 [ 872.236449][T19766] ? netlink_getsockopt+0x550/0x550 [ 872.241674][T19766] ____sys_sendmsg+0x5ed/0x9a0 [ 872.246478][T19766] ? __sys_sendmsg_sock+0x30/0x30 [ 872.251532][T19766] ? __import_iovec+0x306/0x510 [ 872.256435][T19766] ? import_iovec+0x6f/0xa0 [ 872.260981][T19766] ___sys_sendmsg+0x2a2/0x360 [ 872.265688][T19766] ? handle_mm_fault+0x33f5/0x3d40 [ 872.270836][T19766] ? __sys_sendmsg+0x2a0/0x2a0 [ 872.275685][T19766] __se_sys_sendmsg+0x1c3/0x2b0 [ 872.280590][T19766] ? __x64_sys_sendmsg+0x80/0x80 [ 872.285572][T19766] ? lockdep_hardirqs_on+0x94/0x140 [ 872.290813][T19766] do_syscall_64+0x4c/0xa0 [ 872.295259][T19766] ? clear_bhb_loop+0x60/0xb0 [ 872.299971][T19766] ? clear_bhb_loop+0x60/0xb0 [ 872.304676][T19766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 872.310596][T19766] RIP: 0033:0x7f55f879e559 [ 872.315052][T19766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.334692][T19766] RSP: 002b:00007f55f95ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.343133][T19766] RAX: ffffffffffffffda RBX: 00007f55f8a26720 RCX: 00007f55f879e559 [ 872.351128][T19766] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 872.359120][T19766] RBP: 00007f55f88358b0 R08: 0000000000000000 R09: 0000000000000000 [ 872.367112][T19766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.375106][T19766] R13: 00007f55f8a267b8 R14: 00007f55f8a26720 R15: 00007fffe9d91a48 [ 872.383124][T19766] [ 872.429610][T19774] device syzkaller0 entered promiscuous mode [ 873.325531][T19802] netlink: 'syz.1.4572': attribute type 10 has an invalid length. [ 874.300213][T19816] netlink: 'syz.3.4578': attribute type 10 has an invalid length. [ 874.503916][T19816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4578'. [ 874.625305][T19816] netlink: 'syz.3.4578': attribute type 10 has an invalid length. [ 874.625838][T19793] delete_channel: no stack [ 874.785166][T19816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4578'. [ 875.068792][T19818] netlink: 'syz.3.4578': attribute type 10 has an invalid length. [ 875.201750][T19818] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4578'. [ 875.443750][T19839] netlink: 'syz.2.4583': attribute type 10 has an invalid length. [ 875.981167][T19848] netlink: 'syz.2.4585': attribute type 39 has an invalid length. [ 876.016612][T19848] device macvlan0 entered promiscuous mode [ 876.349389][T19854] netlink: 'syz.1.4594': attribute type 10 has an invalid length. [ 876.357320][T19854] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4594'. [ 876.397214][T19859] netlink: 'syz.0.4586': attribute type 10 has an invalid length. [ 876.552289][T19854] netlink: 'syz.1.4594': attribute type 10 has an invalid length. [ 876.667925][T19854] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4594'. [ 876.802291][T19862] netlink: 'syz.1.4594': attribute type 10 has an invalid length. [ 876.861159][T19862] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4594'. [ 876.948535][T19866] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4589'. [ 876.956492][T19870] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.4589'. [ 877.098963][T19866] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 877.205876][T19867] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4589'. [ 877.483397][T19870] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.4589'. [ 877.740389][T19870] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.4589'. [ 877.827974][T19870] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.4589'. [ 877.921777][T19870] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.4589'. [ 878.053310][T19885] delete_channel: no stack [ 878.183234][T19897] syzkaller1: tun_chr_ioctl cmd 2147767517 [ 878.397856][T19896] FAULT_INJECTION: forcing a failure. [ 878.397856][T19896] name failslab, interval 1, probability 0, space 0, times 0 [ 878.436461][T19902] device syzkaller0 entered promiscuous mode [ 878.472457][T19896] CPU: 0 PID: 19896 Comm: syz.1.4593 Not tainted syzkaller #0 [ 878.480053][T19896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 878.490166][T19896] Call Trace: [ 878.493492][T19896] [ 878.496468][T19896] dump_stack_lvl+0x188/0x24e [ 878.501209][T19896] ? show_regs_print_info+0x12/0x12 [ 878.506462][T19896] ? load_image+0x410/0x410 [ 878.511025][T19896] ? __might_sleep+0xd0/0xd0 [ 878.515675][T19896] ? __lock_acquire+0x7ea0/0x7ea0 [ 878.520813][T19896] should_fail_ex+0x390/0x4c0 [ 878.525555][T19896] should_failslab+0x5/0x20 [ 878.530104][T19896] slab_pre_alloc_hook+0x59/0x300 [ 878.535184][T19896] ? kvmalloc_node+0x6c/0x180 [ 878.539910][T19896] __kmem_cache_alloc_node+0x4f/0x270 [ 878.545335][T19896] ? kvmalloc_node+0x6c/0x180 [ 878.550057][T19896] __kmalloc_node+0xa2/0x240 [ 878.554696][T19896] kvmalloc_node+0x6c/0x180 [ 878.559250][T19896] bpf_test_run_xdp_live+0x206/0x1a90 [ 878.564682][T19896] ? 0xffffffffa0004b40 [ 878.568883][T19896] ? text_poke_copy+0x7b/0x90 [ 878.573615][T19896] ? 0xffffffffa0004b40 [ 878.577854][T19896] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 878.583815][T19896] ? irqentry_enter+0x33/0x50 [ 878.588565][T19896] ? xdp_convert_md_to_buff+0x330/0x330 [ 878.594207][T19896] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 878.600513][T19896] ? bpf_test_init+0x119/0x140 [ 878.605334][T19896] ? xdp_convert_md_to_buff+0x5b/0x330 [ 878.610857][T19896] bpf_prog_test_run_xdp+0x757/0xf80 [ 878.616214][T19896] ? __lock_acquire+0x7ea0/0x7ea0 [ 878.621315][T19896] ? dev_put+0x80/0x80 [ 878.625631][T19896] ? dev_put+0x80/0x80 [ 878.629761][T19896] bpf_prog_test_run+0x31c/0x390 [ 878.634751][T19896] __sys_bpf+0x62b/0x780 [ 878.639060][T19896] ? bpf_link_show_fdinfo+0x380/0x380 [ 878.644509][T19896] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 878.650723][T19896] __x64_sys_bpf+0x78/0x90 [ 878.655189][T19896] do_syscall_64+0x4c/0xa0 [ 878.659676][T19896] ? clear_bhb_loop+0x60/0xb0 [ 878.664398][T19896] ? clear_bhb_loop+0x60/0xb0 [ 878.669120][T19896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 878.675058][T19896] RIP: 0033:0x7fdb5ef9e559 [ 878.679514][T19896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.699175][T19896] RSP: 002b:00007fdb5ff10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 878.707644][T19896] RAX: ffffffffffffffda RBX: 00007fdb5f225fa0 RCX: 00007fdb5ef9e559 [ 878.715684][T19896] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 878.723711][T19896] RBP: 00007fdb5ff10090 R08: 0000000000000000 R09: 0000000000000000 [ 878.731726][T19896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.739737][T19896] R13: 00007fdb5f226038 R14: 00007fdb5f225fa0 R15: 00007fff86aacd38 [ 878.747770][T19896] [ 879.317823][T19923] validate_nla: 2 callbacks suppressed [ 879.317844][T19923] netlink: 'syz.0.4606': attribute type 39 has an invalid length. [ 879.356266][T19920] FAULT_INJECTION: forcing a failure. [ 879.356266][T19920] name failslab, interval 1, probability 0, space 0, times 0 [ 879.391912][T19917] netlink: 'syz.3.4601': attribute type 10 has an invalid length. [ 879.394371][T19920] CPU: 1 PID: 19920 Comm: syz.4.4605 Not tainted syzkaller #0 [ 879.407408][T19920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 879.417524][T19920] Call Trace: [ 879.420850][T19920] [ 879.423830][T19920] dump_stack_lvl+0x188/0x24e [ 879.428565][T19920] ? show_regs_print_info+0x12/0x12 [ 879.433812][T19920] ? load_image+0x410/0x410 [ 879.438363][T19920] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 879.444394][T19920] should_fail_ex+0x390/0x4c0 [ 879.449133][T19920] should_failslab+0x5/0x20 [ 879.453678][T19920] slab_pre_alloc_hook+0x59/0x300 [ 879.458764][T19920] kmem_cache_alloc+0x56/0x2f0 [ 879.463574][T19920] ? __build_skb+0x27/0x3b0 [ 879.468133][T19920] __build_skb+0x27/0x3b0 [ 879.472502][T19920] ? build_skb+0x14/0x230 [ 879.476882][T19920] build_skb+0x1e/0x230 [ 879.481084][T19920] bpf_prog_test_run_skb+0x38d/0x18e0 [ 879.486524][T19920] ? lockdep_hardirqs_on+0x94/0x140 [ 879.491791][T19920] ? cpu_online+0xa0/0xa0 [ 879.496181][T19920] ? cpu_online+0xa0/0xa0 [ 879.500561][T19920] bpf_prog_test_run+0x31c/0x390 [ 879.505554][T19920] __sys_bpf+0x62b/0x780 [ 879.509849][T19920] ? bpf_link_show_fdinfo+0x380/0x380 [ 879.515293][T19920] ? lock_chain_count+0x20/0x20 [ 879.520198][T19920] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 879.526257][T19920] __x64_sys_bpf+0x78/0x90 [ 879.530751][T19920] do_syscall_64+0x4c/0xa0 [ 879.535216][T19920] ? clear_bhb_loop+0x60/0xb0 [ 879.539941][T19920] ? clear_bhb_loop+0x60/0xb0 [ 879.544674][T19920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 879.550626][T19920] RIP: 0033:0x7f03cb79e559 [ 879.555088][T19920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.574767][T19920] RSP: 002b:00007f03cc73b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 879.583247][T19920] RAX: ffffffffffffffda RBX: 00007f03cba25fa0 RCX: 00007f03cb79e559 [ 879.591276][T19920] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 879.599346][T19920] RBP: 00007f03cc73b090 R08: 0000000000000000 R09: 0000000000000000 [ 879.607367][T19920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.615389][T19920] R13: 00007f03cba26038 R14: 00007f03cba25fa0 R15: 00007ffdf35ace28 [ 879.623433][T19920] [ 879.805082][T19922] netlink: 'syz.2.4604': attribute type 10 has an invalid length. [ 879.846745][T19922] netlink: 'syz.2.4604': attribute type 10 has an invalid length. [ 879.915364][T19922] netlink: 'syz.2.4604': attribute type 10 has an invalid length. [ 880.796873][T19946] device syzkaller0 entered promiscuous mode [ 881.157161][T19930] delete_channel: no stack [ 881.925441][T19961] netlink: 'syz.0.4620': attribute type 10 has an invalid length. [ 882.072132][T19961] __nla_validate_parse: 4 callbacks suppressed [ 882.072160][T19961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4620'. [ 882.168521][T19961] netlink: 'syz.0.4620': attribute type 10 has an invalid length. [ 882.229729][T19961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4620'. [ 882.274330][T19969] netlink: 'syz.0.4620': attribute type 10 has an invalid length. [ 882.338436][T19969] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4620'. [ 882.389682][T19979] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4622'. [ 882.447981][T19979] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4622'. [ 882.502696][T19975] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4622'. [ 882.548179][T19977] netlink: 'syz.4.4621': attribute type 10 has an invalid length. [ 882.792037][T19977] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4621'. [ 882.868699][T19977] netlink: 'syz.4.4621': attribute type 10 has an invalid length. [ 882.876637][T19977] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4621'. [ 883.152593][T19977] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4621'. [ 884.067863][T19997] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.4626'. [ 884.111443][T20000] device syzkaller0 entered promiscuous mode [ 884.126449][T19997] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 884.681420][T20001] rxe_eth0 speed is unknown, defaulting to 1000 [ 884.958531][T19993] delete_channel: no stack [ 885.459892][T20018] validate_nla: 1 callbacks suppressed [ 885.459923][T20018] netlink: 'syz.1.4634': attribute type 10 has an invalid length. [ 885.598832][T20018] netlink: 'syz.1.4634': attribute type 10 has an invalid length. [ 885.883928][T20023] netlink: 'syz.1.4634': attribute type 10 has an invalid length. [ 887.692765][T20049] device syzkaller0 entered promiscuous mode [ 887.907747][T20036] rxe_eth0 speed is unknown, defaulting to 1000 [ 888.727870][T20055] netlink: 'syz.0.4644': attribute type 1 has an invalid length. [ 888.798507][T20055] __nla_validate_parse: 3 callbacks suppressed [ 888.798530][T20055] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.4644'. [ 889.829465][T20074] netlink: 'syz.1.4649': attribute type 10 has an invalid length. [ 889.909819][T20074] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4649'. [ 890.048517][T20074] netlink: 'syz.1.4649': attribute type 10 has an invalid length. [ 890.107542][T20074] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4649'. [ 890.219869][T20078] netlink: 'syz.1.4649': attribute type 10 has an invalid length. [ 890.228074][T20078] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4649'. [ 891.703953][T20113] FAULT_INJECTION: forcing a failure. [ 891.703953][T20113] name failslab, interval 1, probability 0, space 0, times 0 [ 891.753655][T20113] CPU: 1 PID: 20113 Comm: syz.0.4659 Not tainted syzkaller #0 [ 891.761247][T20113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 891.771384][T20113] Call Trace: [ 891.774703][T20113] [ 891.777671][T20113] dump_stack_lvl+0x188/0x24e [ 891.782408][T20113] ? show_regs_print_info+0x12/0x12 [ 891.787662][T20113] ? load_image+0x410/0x410 [ 891.792217][T20113] ? __might_sleep+0xd0/0xd0 [ 891.796846][T20113] ? __lock_acquire+0x7ea0/0x7ea0 [ 891.801936][T20113] should_fail_ex+0x390/0x4c0 [ 891.806686][T20113] should_failslab+0x5/0x20 [ 891.811235][T20113] slab_pre_alloc_hook+0x59/0x300 [ 891.816310][T20113] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 891.822090][T20113] __kmem_cache_alloc_node+0x4f/0x270 [ 891.827517][T20113] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 891.833295][T20113] __kmalloc+0xa3/0x240 [ 891.837502][T20113] tomoyo_realpath_from_path+0xe2/0x5c0 [ 891.843110][T20113] ? tomoyo_domain+0xd2/0x120 [ 891.847855][T20113] ? tomoyo_path_number_perm+0x205/0x650 [ 891.853546][T20113] tomoyo_path_number_perm+0x22f/0x650 [ 891.859053][T20113] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 891.864553][T20113] ? ksys_write+0x1ce/0x260 [ 891.869104][T20113] ? common_file_perm+0x171/0x1c0 [ 891.874188][T20113] ? __fget_files+0x28/0x460 [ 891.878817][T20113] security_file_ioctl+0x6c/0xa0 [ 891.883786][T20113] __se_sys_ioctl+0x48/0x170 [ 891.888420][T20113] do_syscall_64+0x4c/0xa0 [ 891.892866][T20113] ? clear_bhb_loop+0x60/0xb0 [ 891.897574][T20113] ? clear_bhb_loop+0x60/0xb0 [ 891.902305][T20113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.908230][T20113] RIP: 0033:0x7f752c99e559 [ 891.912691][T20113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.932329][T20113] RSP: 002b:00007f752d927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 891.940800][T20113] RAX: ffffffffffffffda RBX: 00007f752cc25fa0 RCX: 00007f752c99e559 [ 891.948795][T20113] RDX: 00002000000008c0 RSI: 00000000401054d5 RDI: 0000000000000003 [ 891.956787][T20113] RBP: 00007f752d927090 R08: 0000000000000000 R09: 0000000000000000 [ 891.964787][T20113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.972804][T20113] R13: 00007f752cc26038 R14: 00007f752cc25fa0 R15: 00007ffc603fa148 [ 891.980846][T20113] [ 892.322988][T20113] ERROR: Out of memory at tomoyo_realpath_from_path. [ 892.588553][T20136] device syzkaller0 entered promiscuous mode [ 892.620132][T20135] netlink: 'syz.2.4667': attribute type 21 has an invalid length. [ 892.691157][T20135] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4667'. [ 892.778546][T20135] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4667'. [ 892.931676][T20138] netlink: 'syz.4.4668': attribute type 10 has an invalid length. [ 893.648527][T20155] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4674'. [ 893.754078][T20155] netlink: 'syz.0.4674': attribute type 10 has an invalid length. [ 893.768634][T20155] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4674'. [ 893.811422][T20155] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 893.959402][T20148] rxe_eth0 speed is unknown, defaulting to 1000 [ 894.192819][T20163] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4675'. [ 894.228548][T20163] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 894.731787][T20168] netlink: 'syz.1.4676': attribute type 27 has an invalid length. [ 894.909971][T20168] netlink: 'syz.1.4676': attribute type 3 has an invalid length. [ 895.631256][T20191] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4681'. [ 896.213450][T20198] device syzkaller0 entered promiscuous mode [ 896.263248][T20195] netlink: 'syz.2.4682': attribute type 10 has an invalid length. [ 896.577941][T20203] FAULT_INJECTION: forcing a failure. [ 896.577941][T20203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 896.647522][T20203] CPU: 1 PID: 20203 Comm: syz.1.4685 Not tainted syzkaller #0 [ 896.655098][T20203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 896.665246][T20203] Call Trace: [ 896.668565][T20203] [ 896.671543][T20203] dump_stack_lvl+0x188/0x24e [ 896.676277][T20203] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 896.682577][T20203] ? show_regs_print_info+0x12/0x12 [ 896.687825][T20203] ? load_image+0x410/0x410 [ 896.692377][T20203] ? ___ratelimit+0x508/0x610 [ 896.697108][T20203] should_fail_ex+0x390/0x4c0 [ 896.701854][T20203] _copy_from_user+0x2c/0x170 [ 896.706587][T20203] bpf_prog_test_run_skb+0x263/0x18e0 [ 896.712023][T20203] ? __fget_files+0x28/0x460 [ 896.716674][T20203] ? __fget_files+0x3fc/0x460 [ 896.721421][T20203] ? cpu_online+0xa0/0xa0 [ 896.725807][T20203] bpf_prog_test_run+0x31c/0x390 [ 896.730808][T20203] __sys_bpf+0x62b/0x780 [ 896.735110][T20203] ? bpf_link_show_fdinfo+0x380/0x380 [ 896.740566][T20203] ? lock_chain_count+0x20/0x20 [ 896.745477][T20203] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 896.751519][T20203] __x64_sys_bpf+0x78/0x90 [ 896.755977][T20203] do_syscall_64+0x4c/0xa0 [ 896.760422][T20203] ? clear_bhb_loop+0x60/0xb0 [ 896.765125][T20203] ? clear_bhb_loop+0x60/0xb0 [ 896.769831][T20203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 896.775753][T20203] RIP: 0033:0x7fdb5ef9e559 [ 896.780194][T20203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.799831][T20203] RSP: 002b:00007fdb5ff10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 896.808275][T20203] RAX: ffffffffffffffda RBX: 00007fdb5f225fa0 RCX: 00007fdb5ef9e559 [ 896.816273][T20203] RDX: 000000000000002c RSI: 0000200000002840 RDI: 000000000000000a [ 896.824288][T20203] RBP: 00007fdb5ff10090 R08: 0000000000000000 R09: 0000000000000000 [ 896.832292][T20203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.840308][T20203] R13: 00007fdb5f226038 R14: 00007fdb5f225fa0 R15: 00007fff86aacd38 [ 896.848348][T20203] [ 897.920340][T20234] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.4696'. [ 898.701572][T20249] device syzkaller0 entered promiscuous mode [ 898.986676][T20245] netlink: 'syz.1.4698': attribute type 10 has an invalid length. [ 899.740275][T20271] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4707'. [ 899.831198][T20275] netlink: 'syz.2.4707': attribute type 10 has an invalid length. [ 900.029619][T20275] device syz_tun entered promiscuous mode [ 900.035545][T20275] FAULT_INJECTION: forcing a failure. [ 900.035545][T20275] name failslab, interval 1, probability 0, space 0, times 0 [ 900.142128][T20275] CPU: 0 PID: 20275 Comm: syz.2.4707 Not tainted syzkaller #0 [ 900.149759][T20275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 900.159924][T20275] Call Trace: [ 900.163254][T20275] [ 900.166240][T20275] dump_stack_lvl+0x188/0x24e [ 900.170980][T20275] ? show_regs_print_info+0x12/0x12 [ 900.176301][T20275] ? load_image+0x410/0x410 [ 900.180870][T20275] should_fail_ex+0x390/0x4c0 [ 900.185611][T20275] should_failslab+0x5/0x20 [ 900.190158][T20275] slab_pre_alloc_hook+0x59/0x300 [ 900.195234][T20275] ? br_netlink_fini+0x30/0x30 [ 900.200064][T20275] kmem_cache_alloc_node+0x5a/0x310 [ 900.205315][T20275] ? if_nlmsg_size+0x659/0x960 [ 900.210121][T20275] ? __alloc_skb+0xf9/0x7d0 [ 900.214682][T20275] __alloc_skb+0xf9/0x7d0 [ 900.219056][T20275] rtmsg_ifinfo_build_skb+0x80/0x190 [ 900.224394][T20275] rtmsg_ifinfo+0xc4/0x200 [ 900.228867][T20275] __dev_notify_flags+0xef/0x310 [ 900.233870][T20275] ? __dev_change_flags+0x6a0/0x6a0 [ 900.239128][T20275] ? __dev_change_flags+0x4ce/0x6a0 [ 900.244383][T20275] ? dev_get_flags+0x1c0/0x1c0 [ 900.249201][T20275] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 900.255138][T20275] ? _raw_spin_unlock+0x40/0x40 [ 900.260047][T20275] dev_change_flags+0xda/0x1a0 [ 900.264875][T20275] do_setlink+0xbc7/0x29c0 [ 900.269353][T20275] ? load_image+0x410/0x410 [ 900.273909][T20275] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 900.280114][T20275] ? __nla_validate_parse+0x1f67/0x2970 [ 900.285755][T20275] ? __nla_validate+0x50/0x50 [ 900.290541][T20275] ? validate_linkmsg+0x3db/0x4c0 [ 900.295615][T20275] rtnl_newlink+0x16e4/0x1f90 [ 900.300352][T20275] ? rtnl_newlink+0x4e1/0x1f90 [ 900.305174][T20275] ? rtnl_setlink+0x510/0x510 [ 900.309897][T20275] ? trace_raw_output_contention_end+0xd0/0xd0 [ 900.316106][T20275] ? rcu_is_watching+0x11/0xa0 [ 900.320926][T20275] ? trace_contention_end+0x5f/0x170 [ 900.326436][T20275] ? __mutex_lock+0x1ab/0xae0 [ 900.331173][T20275] ? rcu_read_unlock+0x8c/0xa0 [ 900.335999][T20275] ? rtnl_setlink+0x510/0x510 [ 900.340713][T20275] rtnetlink_rcv_msg+0x863/0xfb0 [ 900.345695][T20275] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 900.350883][T20275] ? rtnetlink_bind+0x80/0x80 [ 900.355614][T20275] ? __local_bh_enable_ip+0x136/0x1c0 [ 900.361031][T20275] ? lockdep_hardirqs_on+0x94/0x140 [ 900.366282][T20275] ? __local_bh_enable_ip+0x136/0x1c0 [ 900.371702][T20275] ? _local_bh_enable+0xa0/0xa0 [ 900.376596][T20275] ? __dev_queue_xmit+0x281/0x3810 [ 900.381752][T20275] ? __dev_queue_xmit+0x281/0x3810 [ 900.386922][T20275] ? __dev_queue_xmit+0x1d84/0x3810 [ 900.392175][T20275] ? __dev_queue_xmit+0x281/0x3810 [ 900.397360][T20275] ? perf_trace_lock+0xf8/0x390 [ 900.402272][T20275] ? trace_event_raw_event_lock+0x230/0x230 [ 900.408212][T20275] ? __copy_skb_header+0x3ba/0x4f0 [ 900.413381][T20275] ? __skb_clone+0x446/0x6c0 [ 900.418025][T20275] netlink_rcv_skb+0x1ef/0x440 [ 900.422846][T20275] ? rtnetlink_bind+0x80/0x80 [ 900.427576][T20275] ? netlink_ack+0x1160/0x1160 [ 900.432406][T20275] ? netlink_deliver_tap+0x2e/0x1b0 [ 900.437661][T20275] netlink_unicast+0x7ad/0x920 [ 900.442483][T20275] netlink_sendmsg+0x8ad/0xbd0 [ 900.447304][T20275] ? netlink_getsockopt+0x550/0x550 [ 900.452553][T20275] ? apparmor_socket_sendmsg+0x8a/0x330 [ 900.458159][T20275] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 900.463498][T20275] ? security_socket_sendmsg+0x7c/0xa0 [ 900.469015][T20275] ? netlink_getsockopt+0x550/0x550 [ 900.474265][T20275] ____sys_sendmsg+0x5ed/0x9a0 [ 900.479096][T20275] ? __sys_sendmsg_sock+0x30/0x30 [ 900.484182][T20275] ? __import_iovec+0x306/0x510 [ 900.489193][T20275] ? import_iovec+0x6f/0xa0 [ 900.493864][T20275] ___sys_sendmsg+0x2a2/0x360 [ 900.498596][T20275] ? __sys_sendmsg+0x2a0/0x2a0 [ 900.503429][T20275] ? lockdep_hardirqs_on+0x94/0x140 [ 900.508710][T20275] __se_sys_sendmsg+0x1c3/0x2b0 [ 900.513610][T20275] ? __x64_sys_sendmsg+0x80/0x80 [ 900.518625][T20275] ? lockdep_hardirqs_on+0x94/0x140 [ 900.523888][T20275] do_syscall_64+0x4c/0xa0 [ 900.528351][T20275] ? clear_bhb_loop+0x60/0xb0 [ 900.533083][T20275] ? clear_bhb_loop+0x60/0xb0 [ 900.537827][T20275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 900.543768][T20275] RIP: 0033:0x7f828119e559 [ 900.548240][T20275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.567933][T20275] RSP: 002b:00007f827f3d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 900.576412][T20275] RAX: ffffffffffffffda RBX: 00007f8281426090 RCX: 00007f828119e559 [ 900.584441][T20275] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 900.592473][T20275] RBP: 00007f827f3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 900.600504][T20275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.608524][T20275] R13: 00007f8281426128 R14: 00007f8281426090 R15: 00007ffd5b9bd2a8 [ 900.616567][T20275] [ 900.694074][T20282] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.4710'. [ 901.089854][T20275] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 901.568232][T20299] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4717'. [ 901.590716][T20296] device syzkaller0 entered promiscuous mode [ 901.965545][T20308] netlink: 'syz.0.4719': attribute type 10 has an invalid length. [ 902.090495][T20313] FAULT_INJECTION: forcing a failure. [ 902.090495][T20313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.108464][T20313] CPU: 0 PID: 20313 Comm: syz.3.4721 Not tainted syzkaller #0 [ 902.115998][T20313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 902.126096][T20313] Call Trace: [ 902.129410][T20313] [ 902.132370][T20313] dump_stack_lvl+0x188/0x24e [ 902.137098][T20313] ? show_regs_print_info+0x12/0x12 [ 902.142450][T20313] ? load_image+0x410/0x410 [ 902.147015][T20313] ? __lock_acquire+0x7ea0/0x7ea0 [ 902.152111][T20313] should_fail_ex+0x390/0x4c0 [ 902.156844][T20313] _copy_from_user+0x2c/0x170 [ 902.161571][T20313] iovec_from_user+0x143/0x360 [ 902.166405][T20313] __import_iovec+0x6c/0x510 [ 902.171059][T20313] import_iovec+0x6f/0xa0 [ 902.175447][T20313] ___sys_sendmsg+0x252/0x360 [ 902.180158][T20313] ? __sys_sendmsg+0x2a0/0x2a0 [ 902.184971][T20313] ? __lock_acquire+0x7ea0/0x7ea0 [ 902.190046][T20313] __se_sys_sendmsg+0x1c3/0x2b0 [ 902.194952][T20313] ? __x64_sys_sendmsg+0x80/0x80 [ 902.199941][T20313] ? lockdep_hardirqs_on+0x94/0x140 [ 902.205181][T20313] do_syscall_64+0x4c/0xa0 [ 902.209656][T20313] ? clear_bhb_loop+0x60/0xb0 [ 902.214392][T20313] ? clear_bhb_loop+0x60/0xb0 [ 902.219107][T20313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 902.225113][T20313] RIP: 0033:0x7f55f879e559 [ 902.229547][T20313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.249187][T20313] RSP: 002b:00007f55f96d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.257624][T20313] RAX: ffffffffffffffda RBX: 00007f55f8a25fa0 RCX: 00007f55f879e559 [ 902.265626][T20313] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 902.273626][T20313] RBP: 00007f55f96d2090 R08: 0000000000000000 R09: 0000000000000000 [ 902.281618][T20313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.289607][T20313] R13: 00007f55f8a26038 R14: 00007f55f8a25fa0 R15: 00007fffe9d91a48 [ 902.297617][T20313] [ 902.643347][T20316] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.4722'. [ 902.759337][T20334] FAULT_INJECTION: forcing a failure. [ 902.759337][T20334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.838471][T20334] CPU: 0 PID: 20334 Comm: syz.0.4726 Not tainted syzkaller #0 [ 902.846058][T20334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 902.856203][T20334] Call Trace: [ 902.859544][T20334] [ 902.862518][T20334] dump_stack_lvl+0x188/0x24e [ 902.867250][T20334] ? show_regs_print_info+0x12/0x12 [ 902.872505][T20334] ? load_image+0x410/0x410 [ 902.877066][T20334] ? __lock_acquire+0x7ea0/0x7ea0 [ 902.882250][T20334] should_fail_ex+0x390/0x4c0 [ 902.887013][T20334] _copy_from_user+0x2c/0x170 [ 902.891744][T20334] __sys_bpf+0x2ea/0x780 [ 902.896043][T20334] ? bpf_link_show_fdinfo+0x380/0x380 [ 902.901488][T20334] ? lock_chain_count+0x20/0x20 [ 902.906413][T20334] __x64_sys_bpf+0x78/0x90 [ 902.910888][T20334] do_syscall_64+0x4c/0xa0 [ 902.915351][T20334] ? clear_bhb_loop+0x60/0xb0 [ 902.920079][T20334] ? clear_bhb_loop+0x60/0xb0 [ 902.924827][T20334] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 902.930800][T20334] RIP: 0033:0x7f752c99e559 [ 902.935288][T20334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.954956][T20334] RSP: 002b:00007f752d927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 902.963445][T20334] RAX: ffffffffffffffda RBX: 00007f752cc25fa0 RCX: 00007f752c99e559 [ 902.971511][T20334] RDX: 0000000000000010 RSI: 00002000000010c0 RDI: 000000000000000f [ 902.979574][T20334] RBP: 00007f752d927090 R08: 0000000000000000 R09: 0000000000000000 [ 902.987604][T20334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.995637][T20334] R13: 00007f752cc26038 R14: 00007f752cc25fa0 R15: 00007ffc603fa148 [ 903.003788][T20334] [ 903.037632][T20316] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 903.098266][T20310] delete_channel: no stack [ 903.207915][T20329] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.4725'. [ 903.605902][T20340] netlink: 'syz.4.4728': attribute type 10 has an invalid length. [ 903.899213][T20354] netlink: 'syz.3.4733': attribute type 10 has an invalid length. [ 904.048211][T20352] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4729'. [ 904.131104][T20343] netlink: 'syz.1.4729': attribute type 10 has an invalid length. [ 904.191865][T20343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4729'. [ 904.237027][T20343] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 904.269105][T20363] netlink: 131088 bytes leftover after parsing attributes in process `syz.3.4737'. [ 904.293742][T20361] device syzkaller0 entered promiscuous mode [ 904.304419][T20363] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 904.323362][T20363] CPU: 1 PID: 20363 Comm: syz.3.4737 Not tainted syzkaller #0 [ 904.330929][T20363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 904.341058][T20363] Call Trace: [ 904.344400][T20363] [ 904.347395][T20363] dump_stack_lvl+0x188/0x24e [ 904.352164][T20363] ? show_regs_print_info+0x12/0x12 [ 904.357454][T20363] ? load_image+0x410/0x410 [ 904.362061][T20363] sysfs_warn_dup+0x8a/0xa0 [ 904.366648][T20363] sysfs_do_create_link_sd+0xc0/0x110 [ 904.372134][T20363] device_add+0x83b/0x1050 [ 904.376626][T20363] wiphy_register+0x1d8b/0x2aa0 [ 904.381553][T20363] ? cfg80211_event_work+0x40/0x40 [ 904.386708][T20363] ? minstrel_ht_alloc+0x894/0xa20 [ 904.391876][T20363] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 904.397999][T20363] ieee80211_register_hw+0x2e33/0x3b00 [ 904.403521][T20363] ? ieee80211_register_hw+0xf31/0x3b00 [ 904.409115][T20363] ? ieee80211_register_hw+0xf31/0x3b00 [ 904.414732][T20363] ? ieee80211_tasklet_handler+0x20/0x20 [ 904.420408][T20363] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 904.426341][T20363] ? __debug_object_init+0xed/0x440 [ 904.431581][T20363] ? memset+0x1e/0x40 [ 904.435619][T20363] ? __hrtimer_init+0x189/0x270 [ 904.440513][T20363] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 904.446293][T20363] ? memcpy+0x3c/0x60 [ 904.450319][T20363] hwsim_new_radio_nl+0xab7/0xc90 [ 904.455400][T20363] genl_family_rcv_msg_doit+0x22f/0x350 [ 904.460994][T20363] ? end_current_label_crit_section+0x170/0x170 [ 904.467293][T20363] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 904.473240][T20363] ? bpf_lsm_capable+0x5/0x10 [ 904.477955][T20363] ? security_capable+0x85/0xb0 [ 904.482858][T20363] genl_rcv_msg+0x601/0x790 [ 904.487420][T20363] ? genl_bind+0x360/0x360 [ 904.491891][T20363] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 904.498286][T20363] netlink_rcv_skb+0x1ef/0x440 [ 904.503097][T20363] ? genl_bind+0x360/0x360 [ 904.507564][T20363] ? netlink_ack+0x1160/0x1160 [ 904.512405][T20363] ? down_read+0x1a8/0x2d0 [ 904.516905][T20363] genl_rcv+0x24/0x40 [ 904.520945][T20363] netlink_unicast+0x7ad/0x920 [ 904.525815][T20363] netlink_sendmsg+0x8ad/0xbd0 [ 904.530642][T20363] ? netlink_getsockopt+0x550/0x550 [ 904.535903][T20363] ? apparmor_socket_sendmsg+0x8a/0x330 [ 904.541532][T20363] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 904.546876][T20363] ? security_socket_sendmsg+0x7c/0xa0 [ 904.552435][T20363] ? netlink_getsockopt+0x550/0x550 [ 904.557685][T20363] ____sys_sendmsg+0x5ed/0x9a0 [ 904.562512][T20363] ? __sys_sendmsg_sock+0x30/0x30 [ 904.567572][T20363] ? __import_iovec+0x306/0x510 [ 904.572484][T20363] ? import_iovec+0x6f/0xa0 [ 904.577043][T20363] ___sys_sendmsg+0x2a2/0x360 [ 904.581801][T20363] ? __sys_sendmsg+0x2a0/0x2a0 [ 904.586689][T20363] __se_sys_sendmsg+0x1c3/0x2b0 [ 904.591581][T20363] ? __x64_sys_sendmsg+0x80/0x80 [ 904.596588][T20363] ? lockdep_hardirqs_on+0x94/0x140 [ 904.601843][T20363] do_syscall_64+0x4c/0xa0 [ 904.606313][T20363] ? clear_bhb_loop+0x60/0xb0 [ 904.611029][T20363] ? clear_bhb_loop+0x60/0xb0 [ 904.615742][T20363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 904.621674][T20363] RIP: 0033:0x7f55f879e559 [ 904.626128][T20363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.645859][T20363] RSP: 002b:00007f55f96d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.654341][T20363] RAX: ffffffffffffffda RBX: 00007f55f8a25fa0 RCX: 00007f55f879e559 [ 904.662353][T20363] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 904.670368][T20363] RBP: 00007f55f88358b0 R08: 0000000000000000 R09: 0000000000000000 [ 904.678438][T20363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 904.686437][T20363] R13: 00007f55f8a26038 R14: 00007f55f8a25fa0 R15: 00007fffe9d91a48 [ 904.694474][T20363] [ 905.150670][T20379] device syzkaller0 entered promiscuous mode [ 905.157049][T20374] delete_channel: no stack [ 905.355853][T20384] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.4741'. [ 905.594376][T20395] device syzkaller0 entered promiscuous mode [ 905.628647][T20396] netlink: 'syz.4.4745': attribute type 10 has an invalid length. [ 905.659906][T20398] FAULT_INJECTION: forcing a failure. [ 905.659906][T20398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.695128][T20398] CPU: 1 PID: 20398 Comm: syz.3.4746 Not tainted syzkaller #0 [ 905.702690][T20398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 905.712813][T20398] Call Trace: [ 905.716164][T20398] [ 905.719155][T20398] dump_stack_lvl+0x188/0x24e [ 905.724095][T20398] ? show_regs_print_info+0x12/0x12 [ 905.729380][T20398] ? load_image+0x410/0x410 [ 905.733961][T20398] ? __lock_acquire+0x7ea0/0x7ea0 [ 905.739066][T20398] should_fail_ex+0x390/0x4c0 [ 905.743848][T20398] _copy_from_user+0x2c/0x170 [ 905.748606][T20398] iovec_from_user+0x143/0x360 [ 905.753459][T20398] __import_iovec+0x6c/0x510 [ 905.758145][T20398] import_iovec+0x6f/0xa0 [ 905.762549][T20398] ___sys_sendmsg+0x252/0x360 [ 905.767291][T20398] ? __sys_sendmsg+0x2a0/0x2a0 [ 905.772145][T20398] ? __lock_acquire+0x7ea0/0x7ea0 [ 905.777258][T20398] __se_sys_sendmsg+0x1c3/0x2b0 [ 905.782153][T20398] ? ct_nmi_exit+0x145/0x1c0 [ 905.786810][T20398] ? __x64_sys_sendmsg+0x80/0x80 [ 905.791821][T20398] ? lockdep_hardirqs_on+0x94/0x140 [ 905.797078][T20398] do_syscall_64+0x4c/0xa0 [ 905.801535][T20398] ? clear_bhb_loop+0x60/0xb0 [ 905.806252][T20398] ? clear_bhb_loop+0x60/0xb0 [ 905.810975][T20398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 905.816908][T20398] RIP: 0033:0x7f55f879e559 [ 905.821363][T20398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.841197][T20398] RSP: 002b:00007f55f96d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.849756][T20398] RAX: ffffffffffffffda RBX: 00007f55f8a25fa0 RCX: 00007f55f879e559 [ 905.857792][T20398] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 905.865810][T20398] RBP: 00007f55f96d2090 R08: 0000000000000000 R09: 0000000000000000 [ 905.873817][T20398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.881910][T20398] R13: 00007f55f8a26038 R14: 00007f55f8a25fa0 R15: 00007fffe9d91a48 [ 905.890032][T20398] [ 905.969054][T20372] delete_channel: no stack [ 906.124407][T20401] netlink: 'syz.2.4747': attribute type 10 has an invalid length. [ 906.267802][T20415] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.4748'. [ 906.342903][T20412] netlink: 131088 bytes leftover after parsing attributes in process `syz.1.4749'. [ 906.386912][T20412] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 906.417469][T20412] CPU: 1 PID: 20412 Comm: syz.1.4749 Not tainted syzkaller #0 [ 906.425060][T20412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 906.435184][T20412] Call Trace: [ 906.438507][T20412] [ 906.441483][T20412] dump_stack_lvl+0x188/0x24e [ 906.446235][T20412] ? show_regs_print_info+0x12/0x12 [ 906.451526][T20412] ? load_image+0x410/0x410 [ 906.456103][T20412] sysfs_warn_dup+0x8a/0xa0 [ 906.460676][T20412] sysfs_do_create_link_sd+0xc0/0x110 [ 906.466104][T20412] device_add+0x83b/0x1050 [ 906.470576][T20412] wiphy_register+0x1d8b/0x2aa0 [ 906.475481][T20412] ? cfg80211_event_work+0x40/0x40 [ 906.480624][T20412] ? minstrel_ht_alloc+0x894/0xa20 [ 906.485778][T20412] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 906.491893][T20412] ieee80211_register_hw+0x2e33/0x3b00 [ 906.497395][T20412] ? ieee80211_register_hw+0xf31/0x3b00 [ 906.502974][T20412] ? ieee80211_register_hw+0xf31/0x3b00 [ 906.508569][T20412] ? ieee80211_tasklet_handler+0x20/0x20 [ 906.514281][T20412] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 906.520212][T20412] ? __debug_object_init+0xed/0x440 [ 906.525444][T20412] ? memset+0x1e/0x40 [ 906.529461][T20412] ? __hrtimer_init+0x189/0x270 [ 906.534344][T20412] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 906.540105][T20412] ? memcpy+0x3c/0x60 [ 906.544120][T20412] hwsim_new_radio_nl+0xab7/0xc90 [ 906.549199][T20412] genl_family_rcv_msg_doit+0x22f/0x350 [ 906.554790][T20412] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 906.560741][T20412] ? bpf_lsm_capable+0x5/0x10 [ 906.565453][T20412] ? security_capable+0x85/0xb0 [ 906.570341][T20412] genl_rcv_msg+0x601/0x790 [ 906.574902][T20412] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 906.581097][T20412] ? genl_bind+0x360/0x360 [ 906.585543][T20412] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 906.591910][T20412] ? kasan_check_range+0x65/0x290 [ 906.596981][T20412] netlink_rcv_skb+0x1ef/0x440 [ 906.601780][T20412] ? genl_bind+0x360/0x360 [ 906.606234][T20412] ? netlink_ack+0x1160/0x1160 [ 906.611039][T20412] ? down_read+0x1a8/0x2d0 [ 906.615500][T20412] genl_rcv+0x24/0x40 [ 906.619519][T20412] netlink_unicast+0x7ad/0x920 [ 906.624326][T20412] netlink_sendmsg+0x8ad/0xbd0 [ 906.629130][T20412] ? netlink_getsockopt+0x550/0x550 [ 906.634365][T20412] ? apparmor_socket_sendmsg+0x8a/0x330 [ 906.639952][T20412] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 906.645271][T20412] ? security_socket_sendmsg+0x7c/0xa0 [ 906.650772][T20412] ? netlink_getsockopt+0x550/0x550 [ 906.656016][T20412] ____sys_sendmsg+0x5ed/0x9a0 [ 906.660823][T20412] ? __sys_sendmsg_sock+0x30/0x30 [ 906.665884][T20412] ? __import_iovec+0x306/0x510 [ 906.670878][T20412] ? import_iovec+0x6f/0xa0 [ 906.675691][T20412] ___sys_sendmsg+0x2a2/0x360 [ 906.680407][T20412] ? __sys_sendmsg+0x2a0/0x2a0 [ 906.685250][T20412] __se_sys_sendmsg+0x1c3/0x2b0 [ 906.690135][T20412] ? __x64_sys_sendmsg+0x80/0x80 [ 906.695120][T20412] ? lockdep_hardirqs_on+0x94/0x140 [ 906.700357][T20412] do_syscall_64+0x4c/0xa0 [ 906.704806][T20412] ? clear_bhb_loop+0x60/0xb0 [ 906.709513][T20412] ? clear_bhb_loop+0x60/0xb0 [ 906.714230][T20412] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 906.720246][T20412] RIP: 0033:0x7fdb5ef9e559 [ 906.724693][T20412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.744335][T20412] RSP: 002b:00007fdb5feef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.752790][T20412] RAX: ffffffffffffffda RBX: 00007fdb5f226090 RCX: 00007fdb5ef9e559 [ 906.760790][T20412] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000009 [ 906.768791][T20412] RBP: 00007fdb5f0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 906.776823][T20412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.784821][T20412] R13: 00007fdb5f226128 R14: 00007fdb5f226090 R15: 00007fff86aacd38 [ 906.792843][T20412] [ 907.389248][T20431] ¥: port 1(team0) entered blocking state [ 907.407006][T20431] ¥: port 1(team0) entered disabled state [ 907.429289][T20431] device team0 entered promiscuous mode [ 907.457933][T20431] device team_slave_0 entered promiscuous mode [ 907.484468][T20431] device team_slave_1 entered promiscuous mode [ 907.586196][T20432] device team0 left promiscuous mode [ 907.620446][T20432] device team_slave_0 left promiscuous mode [ 907.642780][T20432] device team_slave_1 left promiscuous mode [ 907.653071][T20432] ¥: port 1(team0) entered disabled state [ 908.246540][T20445] device syzkaller0 entered promiscuous mode [ 908.856086][T20441] delete_channel: no stack [ 909.103842][T20453] netlink: 'syz.2.4765': attribute type 10 has an invalid length. [ 909.207395][T20466] Â: renamed from pim6reg1 [ 909.723542][T20472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4772'. [ 909.739085][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4772'. [ 909.759069][T20472] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4772'. [ 909.803790][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4772'. [ 909.843047][T20472] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4772'. [ 909.882074][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4772'. [ 909.967158][T20472] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4772'. [ 910.161501][T20477] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 910.222510][T20477] CPU: 0 PID: 20477 Comm: syz.4.4774 Not tainted syzkaller #0 [ 910.230123][T20477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 910.240276][T20477] Call Trace: [ 910.243629][T20477] [ 910.246639][T20477] dump_stack_lvl+0x188/0x24e [ 910.251420][T20477] ? show_regs_print_info+0x12/0x12 [ 910.256720][T20477] ? load_image+0x410/0x410 [ 910.261547][T20477] sysfs_warn_dup+0x8a/0xa0 [ 910.266155][T20477] sysfs_do_create_link_sd+0xc0/0x110 [ 910.271682][T20477] device_add+0x83b/0x1050 [ 910.276256][T20477] wiphy_register+0x1d8b/0x2aa0 [ 910.281277][T20477] ? cfg80211_event_work+0x40/0x40 [ 910.286490][T20477] ? minstrel_ht_alloc+0x894/0xa20 [ 910.291722][T20477] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 910.297913][T20477] ieee80211_register_hw+0x2e33/0x3b00 [ 910.303502][T20477] ? ieee80211_register_hw+0xf31/0x3b00 [ 910.309140][T20477] ? ieee80211_register_hw+0xf31/0x3b00 [ 910.314815][T20477] ? ieee80211_tasklet_handler+0x20/0x20 [ 910.320533][T20477] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 910.326613][T20477] ? __debug_object_init+0xed/0x440 [ 910.331912][T20477] ? memset+0x1e/0x40 [ 910.335995][T20477] ? __hrtimer_init+0x189/0x270 [ 910.340960][T20477] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 910.346812][T20477] ? memcpy+0x3c/0x60 [ 910.350918][T20477] hwsim_new_radio_nl+0xab7/0xc90 [ 910.356196][T20477] genl_family_rcv_msg_doit+0x22f/0x350 [ 910.361862][T20477] ? end_current_label_crit_section+0x170/0x170 [ 910.368232][T20477] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 910.374267][T20477] ? bpf_lsm_capable+0x5/0x10 [ 910.379045][T20477] ? security_capable+0x85/0xb0 [ 910.384049][T20477] genl_rcv_msg+0x601/0x790 [ 910.388668][T20477] ? genl_bind+0x360/0x360 [ 910.393178][T20477] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 910.399641][T20477] netlink_rcv_skb+0x1ef/0x440 [ 910.404489][T20477] ? genl_bind+0x360/0x360 [ 910.409014][T20477] ? netlink_ack+0x1160/0x1160 [ 910.413974][T20477] ? down_read+0x1a8/0x2d0 [ 910.418486][T20477] genl_rcv+0x24/0x40 [ 910.422528][T20477] netlink_unicast+0x7ad/0x920 [ 910.427420][T20477] netlink_sendmsg+0x8ad/0xbd0 [ 910.432283][T20477] ? netlink_getsockopt+0x550/0x550 [ 910.437571][T20477] ? apparmor_socket_sendmsg+0x8a/0x330 [ 910.443188][T20477] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 910.448552][T20477] ? security_socket_sendmsg+0x7c/0xa0 [ 910.454201][T20477] ? netlink_getsockopt+0x550/0x550 [ 910.459495][T20477] ____sys_sendmsg+0x5ed/0x9a0 [ 910.464381][T20477] ? __sys_sendmsg_sock+0x30/0x30 [ 910.469498][T20477] ? __import_iovec+0x306/0x510 [ 910.474449][T20477] ? import_iovec+0x6f/0xa0 [ 910.479044][T20477] ___sys_sendmsg+0x2a2/0x360 [ 910.483820][T20477] ? __sys_sendmsg+0x2a0/0x2a0 [ 910.488724][T20477] ? trace_call_bpf+0xbf/0x6b0 [ 910.493646][T20477] __se_sys_sendmsg+0x1c3/0x2b0 [ 910.498570][T20477] ? perf_trace_preemptirq_template+0x268/0x320 [ 910.504910][T20477] ? __x64_sys_sendmsg+0x80/0x80 [ 910.509971][T20477] ? lockdep_hardirqs_on+0x94/0x140 [ 910.515267][T20477] do_syscall_64+0x4c/0xa0 [ 910.519757][T20477] ? clear_bhb_loop+0x60/0xb0 [ 910.524504][T20477] ? clear_bhb_loop+0x60/0xb0 [ 910.529259][T20477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 910.535218][T20477] RIP: 0033:0x7f03cb79e559 [ 910.539716][T20477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.559498][T20477] RSP: 002b:00007f03cc73b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 910.568010][T20477] RAX: ffffffffffffffda RBX: 00007f03cba25fa0 RCX: 00007f03cb79e559 [ 910.576036][T20477] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000009 [ 910.584055][T20477] RBP: 00007f03cb8358b0 R08: 0000000000000000 R09: 0000000000000000 [ 910.592074][T20477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.600103][T20477] R13: 00007f03cba26038 R14: 00007f03cba25fa0 R15: 00007ffdf35ace28 [ 910.608187][T20477] [ 911.233172][T20494] device syzkaller0 entered promiscuous mode [ 911.553386][T20499] netlink: 'syz.3.4777': attribute type 10 has an invalid length. [ 911.964462][T20509] netlink: 'syz.1.4782': attribute type 10 has an invalid length. [ 912.264604][T20501] delete_channel: no stack [ 912.862583][T20535] device syzkaller0 entered promiscuous mode [ 913.330240][T20551] netlink: 'syz.4.4796': attribute type 10 has an invalid length. [ 913.542041][T20558] __nla_validate_parse: 1 callbacks suppressed [ 913.542061][T20558] netlink: 111 bytes leftover after parsing attributes in process `syz.2.4799'. [ 914.377447][T20559] delete_channel: no stack [ 914.550136][T20592] device syzkaller0 entered promiscuous mode [ 915.278579][T20609] netlink: 'syz.2.4812': attribute type 10 has an invalid length. [ 915.996333][T20635] device syzkaller0 entered promiscuous mode [ 916.491810][T20648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4824'. [ 916.524881][T20648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4824'. [ 916.604137][T20648] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4824'. [ 916.639630][T20648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4824'. [ 916.715062][T20648] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4824'. [ 916.809584][T20648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4824'. [ 916.834841][T20648] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4824'. [ 916.904966][T20647] netlink: 'syz.1.4825': attribute type 10 has an invalid length. [ 917.174440][T20658] netlink: 'syz.2.4827': attribute type 29 has an invalid length. [ 917.228858][T20658] netlink: 'syz.2.4827': attribute type 29 has an invalid length. [ 917.258066][T20662] netlink: 'syz.2.4827': attribute type 29 has an invalid length. [ 917.301993][T20660] netlink: 'syz.0.4828': attribute type 10 has an invalid length. [ 918.049941][T20684] device syzkaller0 entered promiscuous mode [ 918.332699][T20691] netlink: 'syz.1.4839': attribute type 10 has an invalid length. [ 918.470431][T20699] netlink: 'syz.0.4838': attribute type 29 has an invalid length. [ 918.489166][T20699] netlink: 'syz.0.4838': attribute type 29 has an invalid length. [ 918.540299][T20696] netlink: 'syz.0.4838': attribute type 29 has an invalid length. [ 918.787885][T20699] netlink: 'syz.0.4838': attribute type 29 has an invalid length. [ 918.860261][T20697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4841'. [ 918.907181][T20697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4841'. [ 918.930531][T20697] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4841'. [ 918.952383][T20697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4841'. [ 918.964868][T20697] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4841'. [ 919.016691][T20697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4841'. [ 919.028166][T20697] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4841'. [ 919.096725][T20718] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4845'. [ 919.312870][T20721] ¥: port 1(team0) entered blocking state [ 919.338537][T20721] ¥: port 1(team0) entered disabled state [ 919.355180][T20721] device team0 entered promiscuous mode [ 919.375063][T20721] device team_slave_0 entered promiscuous mode [ 919.385413][T20721] device team_slave_1 entered promiscuous mode [ 919.410228][T20724] device team0 left promiscuous mode [ 919.427181][T20724] device team_slave_0 left promiscuous mode [ 919.446508][T20724] device team_slave_1 left promiscuous mode [ 919.485072][T20724] ¥: port 1(team0) entered disabled state [ 919.984431][T20739] device syzkaller0 entered promiscuous mode [ 920.495774][T20742] delete_channel: no stack [ 921.336266][T20777] device syzkaller0 entered promiscuous mode [ 922.363915][T20803] validate_nla: 5 callbacks suppressed [ 922.363937][T20803] netlink: 'syz.2.4872': attribute type 41 has an invalid length. [ 922.398798][T20793] delete_channel: no stack [ 923.046276][T20820] netlink: 'syz.4.4879': attribute type 21 has an invalid length. [ 923.338911][T20825] device syzkaller0 entered promiscuous mode [ 924.425589][T20845] netlink: 'syz.3.4888': attribute type 21 has an invalid length. [ 924.444846][T20845] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4888'. [ 924.524181][T20846] netlink: 'syz.4.4886': attribute type 41 has an invalid length. [ 924.757577][T20843] FAULT_INJECTION: forcing a failure. [ 924.757577][T20843] name failslab, interval 1, probability 0, space 0, times 0 [ 924.776836][T20843] CPU: 0 PID: 20843 Comm: syz.4.4886 Not tainted syzkaller #0 [ 924.784382][T20843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 924.794487][T20843] Call Trace: [ 924.797812][T20843] [ 924.800785][T20843] dump_stack_lvl+0x188/0x24e [ 924.805523][T20843] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 924.811725][T20843] ? show_regs_print_info+0x12/0x12 [ 924.816969][T20843] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 924.823189][T20843] should_fail_ex+0x390/0x4c0 [ 924.827939][T20843] should_failslab+0x5/0x20 [ 924.832500][T20843] slab_pre_alloc_hook+0x59/0x300 [ 924.837591][T20843] kmem_cache_alloc+0x56/0x2f0 [ 924.842410][T20843] ? skb_clone+0x1e7/0x370 [ 924.846883][T20843] skb_clone+0x1e7/0x370 [ 924.851177][T20843] __netlink_deliver_tap+0x3e4/0x7e0 [ 924.856528][T20843] ? netlink_deliver_tap+0x2e/0x1b0 [ 924.861786][T20843] netlink_deliver_tap+0x19c/0x1b0 [ 924.866945][T20843] netlink_unicast+0x777/0x920 [ 924.871768][T20843] netlink_sendmsg+0x8ad/0xbd0 [ 924.876591][T20843] ? netlink_getsockopt+0x550/0x550 [ 924.881843][T20843] ? apparmor_socket_sendmsg+0x8a/0x330 [ 924.887449][T20843] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 924.892781][T20843] ? security_socket_sendmsg+0x7c/0xa0 [ 924.898296][T20843] ? netlink_getsockopt+0x550/0x550 [ 924.903560][T20843] ____sys_sendmsg+0x5ed/0x9a0 [ 924.908383][T20843] ? __sys_sendmsg_sock+0x30/0x30 [ 924.913449][T20843] ? __import_iovec+0x306/0x510 [ 924.918368][T20843] ? import_iovec+0x6f/0xa0 [ 924.922938][T20843] ___sys_sendmsg+0x2a2/0x360 [ 924.927685][T20843] ? __sys_sendmsg+0x2a0/0x2a0 [ 924.932558][T20843] __se_sys_sendmsg+0x1c3/0x2b0 [ 924.937469][T20843] ? __x64_sys_sendmsg+0x80/0x80 [ 924.942517][T20843] do_syscall_64+0x4c/0xa0 [ 924.946987][T20843] ? clear_bhb_loop+0x60/0xb0 [ 924.951710][T20843] ? clear_bhb_loop+0x60/0xb0 [ 924.956444][T20843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 924.962383][T20843] RIP: 0033:0x7f03cb79e559 [ 924.966844][T20843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.986506][T20843] RSP: 002b:00007f03cc73b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 924.994974][T20843] RAX: ffffffffffffffda RBX: 00007f03cba25fa0 RCX: 00007f03cb79e559 [ 925.003079][T20843] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 000000000000000a [ 925.011107][T20843] RBP: 00007f03cc73b090 R08: 0000000000000000 R09: 0000000000000000 [ 925.019131][T20843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.027143][T20843] R13: 00007f03cba26038 R14: 00007f03cba25fa0 R15: 00007ffdf35ace28 [ 925.035178][T20843] [ 925.391152][T20866] netlink: 'syz.3.4893': attribute type 19 has an invalid length. [ 925.493452][T20863] netlink: 'syz.1.4892': attribute type 10 has an invalid length. [ 925.532668][T20874] device syzkaller0 entered promiscuous mode [ 927.036073][T20911] netlink: 'syz.1.4910': attribute type 10 has an invalid length. [ 927.100754][T20911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4910'. [ 927.279998][T20920] FAULT_INJECTION: forcing a failure. [ 927.279998][T20920] name failslab, interval 1, probability 0, space 0, times 0 [ 927.323838][T20917] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 927.339821][T20920] CPU: 1 PID: 20920 Comm: syz.0.4908 Not tainted syzkaller #0 [ 927.347364][T20920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 927.357459][T20920] Call Trace: [ 927.360778][T20920] [ 927.363756][T20920] dump_stack_lvl+0x188/0x24e [ 927.368481][T20920] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 927.374690][T20920] ? show_regs_print_info+0x12/0x12 [ 927.379936][T20920] ? load_image+0x410/0x410 [ 927.384494][T20920] should_fail_ex+0x390/0x4c0 [ 927.389235][T20920] should_failslab+0x5/0x20 [ 927.391047][T20917] device syzkaller0 entered promiscuous mode [ 927.393769][T20920] slab_pre_alloc_hook+0x59/0x300 [ 927.404840][T20920] ? security_sk_alloc+0x47/0x130 [ 927.409923][T20920] __kmem_cache_alloc_node+0x4f/0x270 [ 927.415349][T20920] ? security_sk_alloc+0x47/0x130 [ 927.420420][T20920] __kmalloc+0xa3/0x240 [ 927.424613][T20920] ? sk_prot_alloc+0xe7/0x210 [ 927.429331][T20920] security_sk_alloc+0x47/0x130 [ 927.434216][T20920] sk_prot_alloc+0x101/0x210 [ 927.438831][T20920] ? sk_alloc+0x20/0x330 [ 927.443100][T20920] sk_alloc+0x36/0x330 [ 927.447218][T20920] ? bpf_ctx_init+0x154/0x190 [ 927.451967][T20920] bpf_prog_test_run_skb+0x36d/0x18e0 [ 927.457370][T20920] ? lockdep_hardirqs_on+0x94/0x140 [ 927.462600][T20920] ? cpu_online+0xa0/0xa0 [ 927.466966][T20920] ? cpu_online+0xa0/0xa0 [ 927.471326][T20920] bpf_prog_test_run+0x31c/0x390 [ 927.476313][T20920] __sys_bpf+0x62b/0x780 [ 927.480617][T20920] ? bpf_link_show_fdinfo+0x380/0x380 [ 927.486033][T20920] ? lock_chain_count+0x20/0x20 [ 927.490914][T20920] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 927.496934][T20920] __x64_sys_bpf+0x78/0x90 [ 927.501391][T20920] do_syscall_64+0x4c/0xa0 [ 927.505837][T20920] ? clear_bhb_loop+0x60/0xb0 [ 927.510541][T20920] ? clear_bhb_loop+0x60/0xb0 [ 927.515248][T20920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 927.521164][T20920] RIP: 0033:0x7f752c99e559 [ 927.525602][T20920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.545229][T20920] RSP: 002b:00007f752d927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 927.553709][T20920] RAX: ffffffffffffffda RBX: 00007f752cc25fa0 RCX: 00007f752c99e559 [ 927.561702][T20920] RDX: 0000000000000050 RSI: 0000200000002040 RDI: 000000000000000a [ 927.569700][T20920] RBP: 00007f752d927090 R08: 0000000000000000 R09: 0000000000000000 [ 927.577695][T20920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.585685][T20920] R13: 00007f752cc26038 R14: 00007f752cc25fa0 R15: 00007ffc603fa148 [ 927.593699][T20920] [ 928.278432][T20934] netlink: 'syz.3.4917': attribute type 10 has an invalid length. [ 928.516888][T20934] team0: Device wg1 is of different type [ 928.617978][T20946] netlink: 'syz.2.4921': attribute type 10 has an invalid length. [ 928.840063][T20950] netlink: 'syz.3.4923': attribute type 10 has an invalid length. [ 929.016100][T20957] FAULT_INJECTION: forcing a failure. [ 929.016100][T20957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.070549][T20957] CPU: 1 PID: 20957 Comm: syz.2.4926 Not tainted syzkaller #0 [ 929.078107][T20957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 929.088215][T20957] Call Trace: [ 929.091539][T20957] [ 929.094517][T20957] dump_stack_lvl+0x188/0x24e [ 929.099257][T20957] ? show_regs_print_info+0x12/0x12 [ 929.104519][T20957] ? load_image+0x410/0x410 [ 929.109073][T20957] ? __lock_acquire+0x7ea0/0x7ea0 [ 929.114167][T20957] ? snprintf+0xe5/0x140 [ 929.118460][T20957] should_fail_ex+0x390/0x4c0 [ 929.123198][T20957] _copy_to_user+0x2c/0x130 [ 929.127754][T20957] simple_read_from_buffer+0xe3/0x150 [ 929.133184][T20957] proc_fail_nth_read+0x1a6/0x220 [ 929.138262][T20957] ? proc_fault_inject_write+0x310/0x310 [ 929.143957][T20957] ? fsnotify_perm+0x248/0x550 [ 929.148772][T20957] ? proc_fault_inject_write+0x310/0x310 [ 929.154467][T20957] vfs_read+0x2db/0x960 [ 929.158683][T20957] ? kernel_read+0x1e0/0x1e0 [ 929.163331][T20957] ? __fget_files+0x28/0x460 [ 929.168067][T20957] ? __fget_files+0x3fc/0x460 [ 929.172810][T20957] ? __fdget_pos+0x2ae/0x360 [ 929.177451][T20957] ? ksys_read+0x70/0x260 [ 929.181841][T20957] ksys_read+0x14d/0x260 [ 929.186143][T20957] ? vfs_write+0x9a0/0x9a0 [ 929.190622][T20957] ? lockdep_hardirqs_on+0x94/0x140 [ 929.195876][T20957] do_syscall_64+0x4c/0xa0 [ 929.200338][T20957] ? clear_bhb_loop+0x60/0xb0 [ 929.205067][T20957] ? clear_bhb_loop+0x60/0xb0 [ 929.209799][T20957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 929.215736][T20957] RIP: 0033:0x7f828115ed8e [ 929.220200][T20957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 929.239853][T20957] RSP: 002b:00007f827f3f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 929.248318][T20957] RAX: ffffffffffffffda RBX: 00007f827f3f66c0 RCX: 00007f828115ed8e [ 929.256340][T20957] RDX: 000000000000000f RSI: 00007f827f3f60a0 RDI: 0000000000000005 [ 929.264355][T20957] RBP: 00007f827f3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 929.272371][T20957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 929.280401][T20957] R13: 00007f8281426038 R14: 00007f8281425fa0 R15: 00007ffd5b9bd2a8 [ 929.288429][T20957] [ 929.298723][T20955] rxe_eth0 speed is unknown, defaulting to 1000 [ 929.620742][T20967] device syzkaller0 entered promiscuous mode [ 930.206169][T20974] netlink: 'syz.3.4929': attribute type 10 has an invalid length. [ 930.502853][T20979] delete_channel: no stack [ 931.451127][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.457602][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.549417][T20998] device sit0 entered promiscuous mode [ 932.705412][T21017] device syzkaller0 entered promiscuous mode [ 933.387252][T21028] netlink: 35840 bytes leftover after parsing attributes in process `syz.4.4945'. [ 934.707432][T21034] delete_channel: no stack [ 934.983780][T21065] device syzkaller0 entered promiscuous mode [ 935.218084][T21069] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 935.263899][T21069] syzkaller1: linktype set to 773 [ 936.295372][T21095] netlink: 'syz.1.4964': attribute type 10 has an invalid length. [ 936.471813][T21104] netlink: 'syz.3.4966': attribute type 10 has an invalid length. [ 936.748001][T21111] device syzkaller0 entered promiscuous mode [ 937.442688][T21094] delete_channel: no stack [ 937.684893][T21132] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4973'. [ 937.763203][T21132] netlink: 'syz.3.4973': attribute type 1 has an invalid length. [ 937.802308][T21132] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4973'. [ 938.434878][T21146] device sit0 entered promiscuous mode [ 939.443694][T21165] device syzkaller0 entered promiscuous mode [ 940.789323][T21175] delete_channel: no stack [ 941.225537][T21205] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4993'. [ 941.390038][T21208] FAULT_INJECTION: forcing a failure. [ 941.390038][T21208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 941.428493][T21208] CPU: 0 PID: 21208 Comm: syz.1.4994 Not tainted syzkaller #0 [ 941.436075][T21208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 941.446185][T21208] Call Trace: [ 941.449515][T21208] [ 941.452498][T21208] dump_stack_lvl+0x188/0x24e [ 941.457242][T21208] ? show_regs_print_info+0x12/0x12 [ 941.462504][T21208] ? load_image+0x410/0x410 [ 941.467070][T21208] ? __lock_acquire+0x7ea0/0x7ea0 [ 941.472166][T21208] should_fail_ex+0x390/0x4c0 [ 941.476911][T21208] _copy_from_user+0x2c/0x170 [ 941.481640][T21208] ___sys_sendmsg+0x1c3/0x360 [ 941.486358][T21208] ? __sys_sendmsg+0x2a0/0x2a0 [ 941.491187][T21208] ? __lock_acquire+0x7ea0/0x7ea0 [ 941.496271][T21208] __se_sys_sendmsg+0x1c3/0x2b0 [ 941.501161][T21208] ? __x64_sys_sendmsg+0x80/0x80 [ 941.506148][T21208] ? lockdep_hardirqs_on+0x94/0x140 [ 941.511428][T21208] do_syscall_64+0x4c/0xa0 [ 941.515898][T21208] ? clear_bhb_loop+0x60/0xb0 [ 941.520606][T21208] ? clear_bhb_loop+0x60/0xb0 [ 941.525335][T21208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.531258][T21208] RIP: 0033:0x7fdb5ef9e559 [ 941.535703][T21208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.555339][T21208] RSP: 002b:00007fdb5feef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 941.563810][T21208] RAX: ffffffffffffffda RBX: 00007fdb5f226090 RCX: 00007fdb5ef9e559 [ 941.571837][T21208] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 941.579835][T21208] RBP: 00007fdb5feef090 R08: 0000000000000000 R09: 0000000000000000 [ 941.587841][T21208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.595839][T21208] R13: 00007fdb5f226128 R14: 00007fdb5f226090 R15: 00007fff86aacd38 [ 941.603857][T21208] [ 941.910502][T21213] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4996'. [ 941.955064][T21210] netlink: 'syz.3.4995': attribute type 10 has an invalid length. [ 942.082581][T21210] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.111030][T21210] device bridge_slave_1 left promiscuous mode [ 942.123070][T21210] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.230193][T21210] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 942.536880][T21224] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 942.554314][T21224] device syzkaller0 entered promiscuous mode [ 943.885476][T21257] netlink: 'syz.2.5008': attribute type 10 has an invalid length. [ 943.938512][T21242] delete_channel: no stack [ 944.004027][T21267] FAULT_INJECTION: forcing a failure. [ 944.004027][T21267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 944.028496][T21267] CPU: 0 PID: 21267 Comm: syz.1.5011 Not tainted syzkaller #0 [ 944.036038][T21267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 944.046141][T21267] Call Trace: [ 944.049462][T21267] [ 944.052463][T21267] dump_stack_lvl+0x188/0x24e [ 944.057197][T21267] ? show_regs_print_info+0x12/0x12 [ 944.062451][T21267] ? load_image+0x410/0x410 [ 944.066999][T21267] ? __lock_acquire+0x7ea0/0x7ea0 [ 944.072081][T21267] should_fail_ex+0x390/0x4c0 [ 944.076825][T21267] _copy_from_user+0x2c/0x170 [ 944.081560][T21267] __copy_msghdr+0x384/0x560 [ 944.086202][T21267] ___sys_sendmsg+0x210/0x360 [ 944.090930][T21267] ? __sys_sendmsg+0x2a0/0x2a0 [ 944.095759][T21267] ? __lock_acquire+0x7ea0/0x7ea0 [ 944.100868][T21267] __se_sys_sendmsg+0x1c3/0x2b0 [ 944.105771][T21267] ? __x64_sys_sendmsg+0x80/0x80 [ 944.110784][T21267] ? lockdep_hardirqs_on+0x94/0x140 [ 944.116109][T21267] do_syscall_64+0x4c/0xa0 [ 944.120573][T21267] ? clear_bhb_loop+0x60/0xb0 [ 944.125314][T21267] ? clear_bhb_loop+0x60/0xb0 [ 944.130046][T21267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 944.135990][T21267] RIP: 0033:0x7fdb5ef9e559 [ 944.140456][T21267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.160200][T21267] RSP: 002b:00007fdb5ff10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 944.168670][T21267] RAX: ffffffffffffffda RBX: 00007fdb5f225fa0 RCX: 00007fdb5ef9e559 [ 944.176685][T21267] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000000000000003 [ 944.184730][T21267] RBP: 00007fdb5ff10090 R08: 0000000000000000 R09: 0000000000000000 [ 944.192748][T21267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.200756][T21267] R13: 00007fdb5f226038 R14: 00007fdb5f225fa0 R15: 00007fff86aacd38 [ 944.208785][T21267] [ 944.486633][T21277] device syzkaller0 entered promiscuous mode [ 944.523847][T21275] netlink: 'syz.4.5014': attribute type 10 has an invalid length. [ 944.740667][T21275] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 945.228681][T21294] delete_channel: no stack [ 945.443945][T21300] netlink: 'syz.2.5022': attribute type 10 has an invalid length. [ 945.597432][T21300] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 945.649188][T21304] netlink: 'syz.3.5023': attribute type 10 has an invalid length. [ 945.809897][T21300] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 945.827054][T21304] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5023'. [ 945.923294][T21300] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 946.044288][T21304] netlink: 'syz.3.5023': attribute type 10 has an invalid length. [ 946.140666][T21304] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5023'. [ 946.205315][T21313] netlink: 'syz.3.5023': attribute type 10 has an invalid length. [ 946.221357][T21313] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5023'. [ 947.357563][T21335] device syzkaller0 entered promiscuous mode [ 947.629134][T21340] netlink: 'syz.4.5034': attribute type 10 has an invalid length. [ 947.650733][T21340] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5034'. [ 948.055804][T21340] netlink: 'syz.4.5034': attribute type 10 has an invalid length. [ 949.211168][T21359] netlink: 'syz.1.5039': attribute type 10 has an invalid length. [ 949.292114][T21359] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5039'. [ 949.317855][T21359] netlink: 'syz.1.5039': attribute type 10 has an invalid length. [ 949.381439][T21359] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5039'. [ 949.445535][T21369] netlink: 'syz.3.5040': attribute type 27 has an invalid length. [ 949.497359][T21369] netlink: 'syz.3.5040': attribute type 25 has an invalid length. [ 949.582415][T21369] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5040'. [ 949.717495][T21371] netlink: 'syz.1.5039': attribute type 10 has an invalid length. [ 949.763120][T21371] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5039'. [ 950.626164][T21390] device syzkaller0 entered promiscuous mode [ 950.991544][T21389] netlink: 'syz.2.5045': attribute type 10 has an invalid length. [ 951.412234][T21389] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 951.516239][T21412] netlink: 'syz.4.5053': attribute type 10 has an invalid length. [ 951.565202][T21412] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5053'. [ 951.650035][T21412] netlink: 'syz.4.5053': attribute type 10 has an invalid length. [ 951.657978][T21412] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5053'. [ 951.830038][T21409] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5053'. [ 952.092968][T21426] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5059'. [ 952.825082][T21444] device syzkaller0 entered promiscuous mode [ 953.173110][T21453] FAULT_INJECTION: forcing a failure. [ 953.173110][T21453] name failslab, interval 1, probability 0, space 0, times 0 [ 953.218236][T21453] CPU: 0 PID: 21453 Comm: syz.2.5067 Not tainted syzkaller #0 [ 953.225821][T21453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 953.230960][T21455] validate_nla: 1 callbacks suppressed [ 953.231099][T21455] netlink: 'syz.0.5068': attribute type 10 has an invalid length. [ 953.235903][T21453] Call Trace: [ 953.235915][T21453] [ 953.235925][T21453] dump_stack_lvl+0x188/0x24e [ 953.235969][T21453] ? rcu_is_watching+0x11/0xa0 [ 953.236007][T21453] ? show_regs_print_info+0x12/0x12 [ 953.236036][T21453] ? load_image+0x410/0x410 [ 953.236057][T21453] ? lockdep_hardirqs_on+0x94/0x140 [ 953.280405][T21453] should_fail_ex+0x390/0x4c0 [ 953.285165][T21453] should_failslab+0x5/0x20 [ 953.286155][T21455] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 953.289705][T21453] slab_pre_alloc_hook+0x59/0x300 [ 953.289744][T21453] ? sk_prot_alloc+0xe7/0x210 [ 953.289776][T21453] __kmem_cache_alloc_node+0x4f/0x270 [ 953.289812][T21453] ? sk_prot_alloc+0xe7/0x210 [ 953.289846][T21453] __kmalloc+0xa3/0x240 [ 953.289876][T21453] sk_prot_alloc+0xe7/0x210 [ 953.289909][T21453] ? sk_alloc+0x20/0x330 [ 953.289941][T21453] sk_alloc+0x36/0x330 [ 953.339502][T21453] ? bpf_ctx_init+0x154/0x190 [ 953.344258][T21453] bpf_prog_test_run_skb+0x36d/0x18e0 [ 953.349716][T21453] ? __fget_files+0x28/0x460 [ 953.354383][T21453] ? __fget_files+0x3fc/0x460 [ 953.356123][T21455] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 953.359108][T21453] ? cpu_online+0xa0/0xa0 [ 953.359146][T21453] bpf_prog_test_run+0x31c/0x390 [ 953.359185][T21453] __sys_bpf+0x62b/0x780 [ 953.359220][T21453] ? bpf_link_show_fdinfo+0x380/0x380 [ 953.359265][T21453] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 953.359309][T21453] __x64_sys_bpf+0x78/0x90 [ 953.399943][T21453] do_syscall_64+0x4c/0xa0 [ 953.402334][T21455] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 953.404435][T21453] ? clear_bhb_loop+0x60/0xb0 [ 953.404470][T21453] ? clear_bhb_loop+0x60/0xb0 [ 953.404501][T21453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 953.427234][T21453] RIP: 0033:0x7f828119e559 [ 953.431717][T21453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.451485][T21453] RSP: 002b:00007f827f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 953.459972][T21453] RAX: ffffffffffffffda RBX: 00007f8281425fa0 RCX: 00007f828119e559 [ 953.468005][T21453] RDX: 0000000000000050 RSI: 0000200000002040 RDI: 000000000000000a [ 953.476042][T21453] RBP: 00007f827f3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 953.484130][T21453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.492177][T21453] R13: 00007f8281426038 R14: 00007f8281425fa0 R15: 00007ffd5b9bd2a8 [ 953.500234][T21453] [ 953.782022][T21463] device syzkaller0 entered promiscuous mode [ 953.919688][T21465] netlink: 'syz.1.5072': attribute type 10 has an invalid length. [ 953.958384][T21465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5072'. [ 954.018805][T21465] netlink: 'syz.1.5072': attribute type 10 has an invalid length. [ 954.027051][T21465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5072'. [ 954.093556][T21471] netlink: 'syz.1.5072': attribute type 10 has an invalid length. [ 954.178368][T21471] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5072'. [ 954.786756][T21485] device syzkaller0 entered promiscuous mode [ 955.329476][T21491] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5080'. [ 956.127892][T21508] device syzkaller0 entered promiscuous mode [ 956.499988][T21512] netlink: 'syz.2.5090': attribute type 10 has an invalid length. [ 956.557083][T21512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5090'. [ 956.609713][T21512] netlink: 'syz.2.5090': attribute type 10 has an invalid length. [ 956.638115][T21512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5090'. [ 956.767938][T21515] netlink: 'syz.2.5090': attribute type 10 has an invalid length. [ 956.830710][T21515] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5090'. [ 957.562310][T21540] netlink: 'syz.4.5096': attribute type 29 has an invalid length. [ 957.603670][T21540] netlink: 'syz.4.5096': attribute type 29 has an invalid length. [ 957.677688][T21543] netlink: 'syz.4.5096': attribute type 29 has an invalid length. [ 958.073362][T21552] FAULT_INJECTION: forcing a failure. [ 958.073362][T21552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.121719][T21552] CPU: 0 PID: 21552 Comm: syz.3.5102 Not tainted syzkaller #0 [ 958.129271][T21552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 958.139375][T21552] Call Trace: [ 958.142697][T21552] [ 958.145670][T21552] dump_stack_lvl+0x188/0x24e [ 958.150446][T21552] ? show_regs_print_info+0x12/0x12 [ 958.155750][T21552] ? load_image+0x410/0x410 [ 958.160305][T21552] ? __lock_acquire+0x7ea0/0x7ea0 [ 958.165390][T21552] should_fail_ex+0x390/0x4c0 [ 958.170132][T21552] _copy_from_user+0x2c/0x170 [ 958.174955][T21552] ___sys_recvmsg+0x170/0x590 [ 958.179680][T21552] ? __sys_recvmsg+0x2a0/0x2a0 [ 958.184497][T21552] ? common_file_perm+0x171/0x1c0 [ 958.189587][T21552] ? __fget_files+0x3fc/0x460 [ 958.194334][T21552] __x64_sys_recvmsg+0x20d/0x2e0 [ 958.199329][T21552] ? ___sys_recvmsg+0x590/0x590 [ 958.204246][T21552] ? lockdep_hardirqs_on+0x94/0x140 [ 958.209504][T21552] do_syscall_64+0x4c/0xa0 [ 958.213975][T21552] ? clear_bhb_loop+0x60/0xb0 [ 958.218700][T21552] ? clear_bhb_loop+0x60/0xb0 [ 958.223424][T21552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 958.229363][T21552] RIP: 0033:0x7f55f879e559 [ 958.233822][T21552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.253478][T21552] RSP: 002b:00007f55f96d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 958.261946][T21552] RAX: ffffffffffffffda RBX: 00007f55f8a25fa0 RCX: 00007f55f879e559 [ 958.269964][T21552] RDX: 0000000040000002 RSI: 0000200000000a80 RDI: 0000000000000003 [ 958.277977][T21552] RBP: 00007f55f96d2090 R08: 0000000000000000 R09: 0000000000000000 [ 958.285996][T21552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.294015][T21552] R13: 00007f55f8a26038 R14: 00007f55f8a25fa0 R15: 00007fffe9d91a48 [ 958.302062][T21552] [ 958.581019][T21558] netlink: 'syz.0.5104': attribute type 10 has an invalid length. [ 958.806206][T21562] device syzkaller0 entered promiscuous mode [ 958.963336][T21564] netlink: 'syz.0.5107': attribute type 10 has an invalid length. [ 958.998885][T21564] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5107'. [ 959.188566][T21564] netlink: 'syz.0.5107': attribute type 10 has an invalid length. [ 959.196503][T21564] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5107'. [ 959.317536][T21569] netlink: 'syz.0.5107': attribute type 10 has an invalid length. [ 959.392879][T21569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5107'. [ 960.032036][T21590] netlink: 'syz.3.5114': attribute type 10 has an invalid length. [ 960.078850][T21590] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5114'. [ 960.125970][T21588] netlink: 'syz.4.5112': attribute type 10 has an invalid length. [ 960.444665][T21600] netlink: 'syz.3.5117': attribute type 2 has an invalid length. [ 960.492269][T21600] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5117'. [ 960.625267][T21602] netlink: 'syz.0.5118': attribute type 29 has an invalid length. [ 960.682650][T21602] netlink: 'syz.0.5118': attribute type 29 has an invalid length. [ 960.760870][T21608] device syzkaller0 entered promiscuous mode [ 960.795762][T21604] netlink: 'syz.0.5118': attribute type 29 has an invalid length. [ 961.541518][T21621] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5125'. [ 961.649207][T21621] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5125'. [ 961.818845][T21623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5125'. [ 963.322152][T21652] device syzkaller0 entered promiscuous mode [ 964.141754][T21668] device syzkaller0 entered promiscuous mode [ 964.257161][T21672] validate_nla: 4 callbacks suppressed [ 964.257182][T21672] netlink: 'syz.1.5141': attribute type 10 has an invalid length. [ 964.326394][T21672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5141'. [ 964.406622][T21672] netlink: 'syz.1.5141': attribute type 10 has an invalid length. [ 964.490468][T21672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5141'. [ 964.568993][T21677] netlink: 'syz.1.5141': attribute type 10 has an invalid length. [ 964.682714][T21677] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5141'. [ 964.736477][T21683] netlink: 'syz.4.5145': attribute type 10 has an invalid length. [ 964.981860][T21691] FAULT_INJECTION: forcing a failure. [ 964.981860][T21691] name failslab, interval 1, probability 0, space 0, times 0 [ 965.029884][T21691] CPU: 1 PID: 21691 Comm: syz.3.5146 Not tainted syzkaller #0 [ 965.037475][T21691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 965.047579][T21691] Call Trace: [ 965.050934][T21691] [ 965.053913][T21691] dump_stack_lvl+0x188/0x24e [ 965.058647][T21691] ? show_regs_print_info+0x12/0x12 [ 965.063888][T21691] ? load_image+0x410/0x410 [ 965.068437][T21691] ? verify_lock_unused+0x140/0x140 [ 965.073693][T21691] should_fail_ex+0x390/0x4c0 [ 965.078424][T21691] should_failslab+0x5/0x20 [ 965.082968][T21691] slab_pre_alloc_hook+0x59/0x300 [ 965.088066][T21691] kmem_cache_alloc+0x56/0x2f0 [ 965.092870][T21691] ? skb_clone+0x1e7/0x370 [ 965.097340][T21691] skb_clone+0x1e7/0x370 [ 965.101628][T21691] __netlink_deliver_tap+0x3e4/0x7e0 [ 965.106975][T21691] ? netlink_deliver_tap+0x2e/0x1b0 [ 965.112230][T21691] netlink_deliver_tap+0x19c/0x1b0 [ 965.117386][T21691] netlink_unicast+0x777/0x920 [ 965.122213][T21691] netlink_sendmsg+0x8ad/0xbd0 [ 965.127032][T21691] ? netlink_getsockopt+0x550/0x550 [ 965.132275][T21691] ? apparmor_socket_sendmsg+0x16c/0x330 [ 965.137969][T21691] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 965.143301][T21691] ? security_socket_sendmsg+0x7c/0xa0 [ 965.148816][T21691] ? netlink_getsockopt+0x550/0x550 [ 965.154064][T21691] ____sys_sendmsg+0x5ed/0x9a0 [ 965.158879][T21691] ? __sys_sendmsg_sock+0x30/0x30 [ 965.163966][T21691] ? __import_iovec+0x306/0x510 [ 965.168897][T21691] ? import_iovec+0x6f/0xa0 [ 965.173461][T21691] ___sys_sendmsg+0x2a2/0x360 [ 965.178232][T21691] ? __sys_sendmsg+0x2a0/0x2a0 [ 965.183080][T21691] ? __lock_acquire+0x7ea0/0x7ea0 [ 965.188191][T21691] __se_sys_sendmsg+0x1c3/0x2b0 [ 965.193098][T21691] ? __x64_sys_sendmsg+0x80/0x80 [ 965.198129][T21691] ? lockdep_hardirqs_on+0x94/0x140 [ 965.203404][T21691] do_syscall_64+0x4c/0xa0 [ 965.207956][T21691] ? clear_bhb_loop+0x60/0xb0 [ 965.212688][T21691] ? clear_bhb_loop+0x60/0xb0 [ 965.217422][T21691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 965.223371][T21691] RIP: 0033:0x7f55f879e559 [ 965.227830][T21691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.247494][T21691] RSP: 002b:00007f55f96d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 965.255976][T21691] RAX: ffffffffffffffda RBX: 00007f55f8a25fa0 RCX: 00007f55f879e559 [ 965.264006][T21691] RDX: 0000000020004000 RSI: 0000200000000500 RDI: 0000000000000003 [ 965.272031][T21691] RBP: 00007f55f96d2090 R08: 0000000000000000 R09: 0000000000000000 [ 965.280040][T21691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 965.288055][T21691] R13: 00007f55f8a26038 R14: 00007f55f8a25fa0 R15: 00007fffe9d91a48 [ 965.296098][T21691] [ 966.099361][T21707] netlink: 'syz.3.5152': attribute type 11 has an invalid length. [ 966.107541][T21707] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5152'. [ 966.337303][T21709] device syzkaller0 entered promiscuous mode [ 966.806219][T21715] netlink: 'syz.4.5155': attribute type 10 has an invalid length. [ 967.331163][T21722] netlink: 'syz.1.5157': attribute type 10 has an invalid length. [ 967.449003][T21729] netlink: 'syz.2.5159': attribute type 10 has an invalid length. [ 967.508800][T21729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5159'. [ 967.567881][T21729] netlink: 'syz.2.5159': attribute type 10 has an invalid length. [ 967.648184][T21729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5159'. [ 967.689204][T21728] netlink: 'syz.2.5159': attribute type 10 has an invalid length. [ 967.758571][T21728] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5159'. [ 968.931865][T21762] device syzkaller0 entered promiscuous mode [ 969.110074][T21768] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5169'. [ 969.181648][T21768] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5169'. [ 969.233084][T21765] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5169'. [ 969.390396][T21770] validate_nla: 3 callbacks suppressed [ 969.390418][T21770] netlink: 'syz.1.5172': attribute type 10 has an invalid length. [ 971.237759][T21800] netlink: 'syz.2.5180': attribute type 10 has an invalid length. [ 971.271372][T21800] __nla_validate_parse: 1 callbacks suppressed [ 971.271395][T21800] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5180'. [ 971.628708][T21805] device syzkaller0 entered promiscuous mode [ 971.659835][T21800] netlink: 'syz.2.5180': attribute type 10 has an invalid length. [ 971.667740][T21800] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5180'. [ 971.873375][T21826] FAULT_INJECTION: forcing a failure. [ 971.873375][T21826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 971.899667][T21826] CPU: 1 PID: 21826 Comm: syz.0.5185 Not tainted syzkaller #0 [ 971.907212][T21826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 971.917315][T21826] Call Trace: [ 971.920634][T21826] [ 971.923613][T21826] dump_stack_lvl+0x188/0x24e [ 971.928351][T21826] ? show_regs_print_info+0x12/0x12 [ 971.933610][T21826] ? load_image+0x410/0x410 [ 971.938163][T21826] ? __lock_acquire+0x7ea0/0x7ea0 [ 971.943279][T21826] should_fail_ex+0x390/0x4c0 [ 971.948018][T21826] _copy_from_user+0x2c/0x170 [ 971.952744][T21826] ___sys_sendmsg+0x1c3/0x360 [ 971.957487][T21826] ? __sys_sendmsg+0x2a0/0x2a0 [ 971.962326][T21826] ? trace_call_bpf+0xbf/0x6b0 [ 971.967182][T21826] __se_sys_sendmsg+0x1c3/0x2b0 [ 971.972100][T21826] ? perf_trace_preemptirq_template+0x268/0x320 [ 971.978411][T21826] ? __x64_sys_sendmsg+0x80/0x80 [ 971.983415][T21826] ? lockdep_hardirqs_on+0x94/0x140 [ 971.988671][T21826] do_syscall_64+0x4c/0xa0 [ 971.993178][T21826] ? clear_bhb_loop+0x60/0xb0 [ 971.997917][T21826] ? clear_bhb_loop+0x60/0xb0 [ 972.002674][T21826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 972.008616][T21826] RIP: 0033:0x7f752c99e559 [ 972.013104][T21826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.032767][T21826] RSP: 002b:00007f752d927028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 972.041264][T21826] RAX: ffffffffffffffda RBX: 00007f752cc25fa0 RCX: 00007f752c99e559 [ 972.049292][T21826] RDX: 0000000000040800 RSI: 0000200000000040 RDI: 0000000000000003 [ 972.057314][T21826] RBP: 00007f752d927090 R08: 0000000000000000 R09: 0000000000000000 [ 972.065339][T21826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.073351][T21826] R13: 00007f752cc26038 R14: 00007f752cc25fa0 R15: 00007ffc603fa148 [ 972.081383][T21826] [ 972.100814][T21817] netlink: 'syz.2.5180': attribute type 10 has an invalid length. [ 972.119629][T21817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5180'. [ 972.462505][T21829] netlink: 'syz.4.5186': attribute type 10 has an invalid length. [ 974.223054][T21845] delete_channel: no stack [ 974.565230][T21870] netlink: 'syz.3.5196': attribute type 3 has an invalid length. [ 974.602556][T21870] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5196'. [ 974.622091][T21858] netlink: 'syz.1.5204': attribute type 3 has an invalid length. [ 974.754502][T21858] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.5204'. [ 975.453289][T21879] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5193'. Stopping sshd: stopped /usr/sbin/sshd (pid 4023) OK Stopping crond: stopped /usr/sbin/crond (pid 4010) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3933) Stopping network: [ 977.869434][T21899] netlink: 'syz.0.5198': attribute type 10 has an invalid length. [ 977.877383][T21899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5198'. [ 978.213324][T21899] netlink: 'syz.0.5198': attribute type 10 has an invalid length. [ 978.228522][T21899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5198'. [ 978.238864][T21908] netlink: 'syz.4.5199': attribute type 10 has an invalid length. [ 978.318096][T21911] netlink: 'syz.0.5198': attribute type 10 has an invalid length. [ 978.371329][T21911] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5198'. [ 978.759886][T21923] device syzkaller0 entered promiscuous mode OK [ 979.423623][T21945] netlink: 'syz.0.5218': attribute type 10 has an invalid length. [ 979.647704][T21945] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5218'. [ 980.065700][T21945] netlink: 'syz.0.5218': attribute type 10 has an invalid length. Stopping iptables: [ 980.108427][T21945] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5218'. OK [ 980.443606][T21934] delete_channel: no stack [ 980.473481][T21939] netlink: 'syz.0.5218': attribute type 10 has an invalid length. [ 980.565480][T21939] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5218'. [ 980.724777][T21957] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5209'. Stopping system message bus: done [ 982.102646][T21983] netlink: 'syz.2.5215': attribute type 10 has an invalid length. [ 982.609830][T21994] device syzkaller0 entered promiscuous mode [ 983.777398][T22020] netlink: 'syz.1.5224': attribute type 29 has an invalid length. [ 984.046061][T22016] netlink: 'syz.0.5223': attribute type 10 has an invalid length. [ 984.082650][T22016] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5223'. Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 3621) OK umount: can't remount debugfs read-only umount: can't remount tmpfs read-only umount: sysfs busy - remounted read-only [ 989.310888][T22020] netlink: 'syz.1.5224': attribute type 29 has an invalid length. umount: devtmpfs busy - remounted read-only [ 989.332469][T22016] netlink: 'syz.0.5223': attribute type 10 has an invalid length. umount: can't re[ 989.350906][T22016] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5223'. mount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 989.471074][T22058] netlink: 'syz.2.5230': attribute type 16 has an invalid length. Connection to 10.128.0.61 closed by remote host. [ 989.498865][T22058] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5230'. [ 989.514198][T22001] rxe_eth0 speed is unknown, defaulting to 1000 Sent SIGKILL to all processes [ 990.731775][T14160] bond0: (slave syz_tun): Releasing backup interface Requesting system poweroff [ 991.586762][ T6354] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.657658][ T6354] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.717324][ T6354] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.741865][T22067] kvm: exiting hardware virtualization [ 991.748203][T22067] smc: removing ib device rxe0 [ 991.765838][T22067] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 991.777010][T22067] ACPI: PM: Preparing to enter system sleep state S5 [ 991.786536][T22067] reboot: Power down serialport: VM disconnected.