last executing test programs: 2.161831456s ago: executing program 2 (id=2421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x19140, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x66) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.668573648s ago: executing program 2 (id=2432): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000088000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 1.668388488s ago: executing program 3 (id=2433): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000680)="b90103600040f000009e0ff008001fffffe10000ba004d3277fb080600187f02832d", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) 1.61821238s ago: executing program 1 (id=2434): r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x100) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="3400000015000b63d25a9a01004a1df33417a927033c47c6a57b9badc9bc7c9e9173ad5084847a55637a2d4cc8cc8baa25b6154e", 0x34}], 0x1}, 0x2400c884) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e000000114000e1208000f0100810401a80016ea1f000840032e5f54c92011774dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101015ee4bd31445a7ba9599763001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e5e6d98031b68c76f9cefbbcbee5de6ccd40d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) 1.528561702s ago: executing program 2 (id=2435): r0 = getpid() r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040)=r0, 0x12) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7, 0x0, 0x62, 0x80, 0x0, 0x0, 0x1001, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x2, @perf_config_ext={0x5, 0x5}, 0x101009, 0x74, 0xb0, 0x8, 0x6, 0x5, 0x6502, 0x0, 0x0, 0x0, 0x4454}, 0x0, 0x6, r2, 0x1) r4 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000140), 0x2, 0x0) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f00000001c0)) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000200)={r2}) r7 = openat$cgroup_freezer_state(r2, &(0x7f0000000880), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000002c0)="b452608c6b58440dbf60d9a408a2a7512c2f536299de8f3a305c0f91291e7d30f3678efb19e684c89906e33868a4bcc06091b7a1f127827b4ee9dc5a385fed155a370f2a73978ae0717b45e3f36aef583548c32cefcb827750807651dd9bb8c9", 0x60}, {&(0x7f0000000340)="2798dfc36fc26cf9e8d7c5985fde42569c965bb8e4fb4c0774c13b1a8498911184b602c3aee3044564dcba4ca77a22220625468df32db123538bbff44eff7e9fc997e59bac37ac6178cbf77b288c5e52f34d97a130211b34a80ce0a554463d4c27299d317fa86b2e4a68da567a9a05b5d6c694b2ca4b8a24c2957d3d2987adf31c5772804400da240092b7664acd72480d0dc1b6062ebb8a8683ea083e03716edf4774914dddf95d0cd8468d1435cab226d9a6f850ed9cac30718c8ebe47c6bdcad06a6bf4c0fd0eba4126f4", 0xcc}, {&(0x7f0000000440)="9e47a031413bb7963b293a4c4d3cdb8715a3f0dc7d2c8e61c5", 0x19}, {&(0x7f0000000480)="ac0ca08d8fce9a35b61981c5b03618da0f4ac228f9d74c78ff6583c262afb8efabc1113202f3ddb1639e532dbbc9d9ce80f9842652f77bae5ec09a", 0x3b}, {&(0x7f00000004c0)="bcc58878dde8e0b9b143be951abb245c42ad6752acc12eea4934e1984e94", 0x1e}, {&(0x7f0000000500)="275255ea84502573be2fa605773b74976224d5ec21bffbe73e3f8810ddf13076fc58cf94cd9ad52957070b4fa630b9e9d819966f7b392d55a60cb806f097f82c67898159ec616307b2f4a973f13856e27816d00d1bdeffb4e966c74ccd3947cb702ad66cd9df3c4fdd60d4dc96d456b2fc2e3fc1be3378206a7d967b10b5f846dffe4c42929fa7373d8aa99d71f4b33f102381d30c73c78afbe28341cce1a95044592256dd0887dbe9ca151fc73c535b0a9b615e011afa26df4376795b69b8d8bf2c3b7a168a93b6dbb32fc192548cce36", 0xd1}, {&(0x7f0000000600)="a02e1cd96179fca53765246e968ee18a3cc7431ffd2aaca9769a247da9dae3b0ec1353503c232f115f", 0x29}, {&(0x7f0000000640)="32059c9b70ed1eb5cbab3218c5e6bac88af1ed42b6ace904372df213fe60123a2fc1031843bd5557a0233bd51852b26b9081f161a65150d8ed05eb0f950b0c74358094b891815f74e29a3a692a4422b820b689fff8b5f948a35f2c56d56a044e5da0a22f5f0f2c97561987e28075452771c47114b80109d9815c09400ae03d310976c8447795f90cd234c9209fd24a76840886fa36aff61ab8828b84c271876ba65af1f41b1a80884102103fcb53659359825c94c4bd50fc6d37a80e7cd4149ae81fd02c1128f3", 0xc7}, {&(0x7f0000000740)="3112268cdb45677d730237e05bfe21d0742ccf4d95b3c269a6b7c8e7ce4d1b9c3193e061a071bbd269689fdfb8209c", 0x2f}, {&(0x7f0000000780)="6e29665f2ab67a703fbaad890755", 0xe}], 0xa, &(0x7f00000008c0)=[@rights={{0x30, 0x1, 0x1, [r7, r6, r5, r2, r1, r2, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00, 0xee00}}}], 0x50, 0x40000}, 0x20000000) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000980)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@fallback=r6, 0xc, 0x1, 0x5, &(0x7f00000009c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)={@fallback=r3, r8, 0x29, 0x2016, r2, @value=r2, @void, @void, @void, r10}, 0x20) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@o_path={&(0x7f0000000b40)='./file1\x00', 0x0, 0x4018, r4}, 0x18) ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0x1) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000bc0)={0x6, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={r12, 0x2}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r9, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)=r9}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000d00)={0x0, r1}, 0x8) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000d40)={0x4, 0x80, 0x4f, 0x40, 0x0, 0x1, 0x0, 0x0, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x716}, 0x2448, 0xffffffff, 0x7, 0x4, 0x1, 0x9, 0x6, 0x0, 0x2, 0x0, 0x1000}, r0, 0x5, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000dc0)={'veth0_to_bond\x00', 0x2}) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x4ba0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000e00)=r11) mkdirat$cgroup(r2, &(0x7f0000000e40)='syz1\x00', 0x1ff) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000010c0)={&(0x7f0000000e80)="17b0eddcf8b4663f571461f4038ab499b60ed744afec55a433469c85914a7c23f5cdfee6e03c67456ee4cd092ed1cb21767b1d4bb9a7a968bc3be2ee3f6b8449d233e527ea34645f1ad086725ca2f4668de3e493e8cbba2fc81666", &(0x7f0000000f00)=""/167, &(0x7f0000000fc0)="5f8330e9f1b0200f1e620ef6db0ef1916565ee77cb0280a45b2f7f50e73f6c37790fd44cc42f07b71aec88f88dae6278472426b0f8dbd1d73addb360524c61508f9cb2f2c600cfe2ef981a505032fe67d9d6adf99cbbf194459bbcc52b74f3fef29d7a4489b7", &(0x7f0000001040)="1beacd2f88e59cc815db340399319e6732332e1d6381646073c64a44e9dc78cdb15d4a944f30f30c27c3997ea8e97315f6004a0b7fff9563caa17ae6ed0af1c39d6cf8b800c97f7146086edf8ab0546aa8b9b8cd39ac4f4e09a760c43c86fcdd35cf855984d4f1a1e5b3b3211b10974902d9", 0xb5, r13, 0x4}, 0x38) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000001100)={0x0, 0x7, [@empty, @broadcast, @broadcast, @random="21b930ea0b3c", @multicast, @multicast, @local]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f00000011c0)={0x2, &(0x7f0000001180)=[{0x4b5, 0x5, 0x1, 0x4}, {0x1, 0x1, 0x5}]}) 1.453715734s ago: executing program 3 (id=2437): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x29, 0xf, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000012c0)={0x6, 0x80, 0x0, 0x3, 0x0, 0x0, 0xfff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.381427406s ago: executing program 2 (id=2439): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x3f000000) 1.295317398s ago: executing program 3 (id=2440): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a92fe08000e40000200875a65969ff57b00ff02000089ffffff00000001ffaaaaaa"], 0xfdef) 1.295103688s ago: executing program 1 (id=2441): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000000000)="3eefebaf3cce00969b5ac4c10db33759f3", 0x11}], 0x1}, 0x40854) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000140081044e81f782dbe3ff040220080207000000040000a118000200e000000700000e1208000f0100810401a80016ea1f00040000005f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x30044084) 1.294980228s ago: executing program 4 (id=2442): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848030000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0xfd}, 0x24088054) 1.221096609s ago: executing program 3 (id=2443): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x4000, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/80, 0x50}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)}, 0x4000001) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x20048011) recvmsg$kcm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/102, 0x66}], 0x1}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x41) 1.2133536s ago: executing program 4 (id=2444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r2) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) socket$kcm(0x15, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) close(0x3) 1.067421434s ago: executing program 1 (id=2445): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 1.067281743s ago: executing program 0 (id=2446): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000024000000000000000000000007"], 0x48}, 0x200040c4) 1.055356283s ago: executing program 3 (id=2447): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x3, 0x6, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x20044804) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000180), 0x1}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910280000000000de500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x2b90, 0x10000000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)=[{0x0}], 0x1}, 0x2000c884) close(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0xa}, {0x2, 0x0, 0x7}], 0x10, 0x3}, 0x94) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x76, &(0x7f0000000000)=r10, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r8, 0x0) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x10) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[], 0xfdef) 1.039961404s ago: executing program 1 (id=2448): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.026585175s ago: executing program 0 (id=2449): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9, 0x80}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000580)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000bd6e911b51818462b40006000001", 0x2c}], 0x1, 0x0, 0x0, 0x6000}, 0x0) 971.009445ms ago: executing program 2 (id=2450): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188000f80ec59a4bc0413a1f848110000005e140600010000000e000a000000000002800000121f", 0x2e}], 0x1}, 0x12) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000000600)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}, {&(0x7f0000000580)="24a10f2a16837717b9ac706f53cbc1865aa4e9cedccce6e0f6cdd54704bfe2f26db6fd0918ff7915774192e5003559a7667bf77c485c4952a3d5647790cab7fef3989d2359387ade1a6b3c1d57dae491b8e93df2beee9bddd174f6bd022cd4f8f38b1e40f63e0eab48ddf3775067a0c5b648690d65f30a6c084c813c06e4e167"}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_ttl={{0x0, 0xf00}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x20004044) 970.091696ms ago: executing program 4 (id=2451): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xffffff90}, 0x2}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000140), 0x1, 0x0}, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)={'b', ' *:* ', 'r\x00'}, 0x8) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x31, 0x6000000000000000}, 0x50) 885.734208ms ago: executing program 0 (id=2452): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0100000003800100"/24], 0x50) 823.5234ms ago: executing program 4 (id=2453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 771.80883ms ago: executing program 0 (id=2454): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848120000005e140602000000000e000a001000fffe0a8000001294", 0x2e}], 0x1}, 0x40400) 708.990392ms ago: executing program 2 (id=2455): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000) r1 = socket$kcm(0x10, 0x2, 0x4) close(r0) sendmsg$kcm(r1, 0x0, 0x0) 708.629512ms ago: executing program 3 (id=2456): socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x2, @perf_bp={0x0, 0x1}, 0x2, 0x4, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0xe0, 0x10001, @local, 0x48, 0x4}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)='D', 0x1}], 0x1}, 0x30008041) r4 = socket$kcm(0x2b, 0x1, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d060b01000000e8fe55a1180015000600142603600e12080018", 0x2b}], 0x1}, 0x4048000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) (async, rerun: 64) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000090) (async, rerun: 64) setsockopt$sock_attach_bpf(r4, 0x6, 0x1f, 0x0, 0x41) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, 0x0, 0x0) (async) sendmsg$inet(r6, &(0x7f00000008c0)={&(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000340)="7d5719ccf0d9", 0x6}], 0x1}, 0x810) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 449.647569ms ago: executing program 0 (id=2457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000900}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 413.239019ms ago: executing program 4 (id=2458): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 107.316687ms ago: executing program 1 (id=2459): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000024000000000000000000000007"], 0x48}, 0x200040c4) 85.076998ms ago: executing program 0 (id=2460): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x7, 0x7, 0x40, 0x7fffffff}, {0x2, 0x4, 0xea}, {0x1, 0x3, 0xfb, 0x7fffffff}, {0x8, 0x3, 0xae}]}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000300e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x2, 0x73, &(0x7f0000000000)) (async) socketpair(0x2, 0x2, 0x73, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x68000, 0x7, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0xa4, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d00)={0x2, 0xa4, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, &(0x7f00000004c0)=[{0x0, 0x101d0}], 0x1}, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b0000000500000005000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4e23, 0x0, @mcast2, 0x18}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000100)="4749a3cb297455ce29a09bebc536df5ce19d414806000000595511d261d45ae3dc7db2a44124725e3952fc4995021a47ea3aa498b5775d82882af83360d1682df504ad776bbc9bb19062db2b4c3473ff816b78fa30cfa5090000", 0x5a}, {0x0}, {&(0x7f0000000bc0)="2c6498d06fe588d0d7a6e7c24b4df21a2427bfa0431c703cddf1944dc4c64293366fd6088f194754f3f39f7ca178f3366e4658f750b13ac5c65144673ac0fa1d8ca116c6c58323f2d6f139b5c6485ba28b6a3801e1d189525db0311a5075b003ae1e1112979753838333ee697d41da715662ce59b2ea8f6c468b844d552f4607a9c21d7e53424890c7c1edd9b1447aa0efef31e04df69b1d78aa6e", 0x9b}, {&(0x7f0000000d00)}, {&(0x7f0000000d80)="52a786cee28877345ed36a4e534470b48d64f97a9de1465bcb7647c70c2ff453820923674d60c34a29b07842711c", 0x2e}, {&(0x7f0000000e00)="bd50eb6ee01603d1a6186c82cf38e0da3cc351ba18184d32ad8de95e5afc6318e706bf95da58ec66bfd7358379b609b21267da4cc3", 0x35}, {&(0x7f0000000e80)="4e53b73d5ce53ff7af0bb17bc6021e1677d8374a691d9bd93e7721e8e0e824f1da5696bd861128080c8e10d36545fb7566d139263821c1605124cfc24772d999028c3820d76fec464f00099ece44c2e759581f96727519a030cd2ff36beedac1d527f3d6d6c6a0bd9a9d67043f9fbe40ef26ad968c716554ae45ba18052c153d3e997810710c1bcddb5588d388c4eb175ca82ff4dbf3be7ef4eb82009edd670de77b469b501356beb70b2e2cf6c012ed57389eb8ed88a52a29a29ca4619e04b63b93246e94660ed00635b2f40e079f48e24ec9303a4fc13518b7", 0xda}], 0x7, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x78}, 0x800) (async) sendmsg$sock(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000100)="4749a3cb297455ce29a09bebc536df5ce19d414806000000595511d261d45ae3dc7db2a44124725e3952fc4995021a47ea3aa498b5775d82882af83360d1682df504ad776bbc9bb19062db2b4c3473ff816b78fa30cfa5090000", 0x5a}, {0x0}, {&(0x7f0000000bc0)="2c6498d06fe588d0d7a6e7c24b4df21a2427bfa0431c703cddf1944dc4c64293366fd6088f194754f3f39f7ca178f3366e4658f750b13ac5c65144673ac0fa1d8ca116c6c58323f2d6f139b5c6485ba28b6a3801e1d189525db0311a5075b003ae1e1112979753838333ee697d41da715662ce59b2ea8f6c468b844d552f4607a9c21d7e53424890c7c1edd9b1447aa0efef31e04df69b1d78aa6e", 0x9b}, {&(0x7f0000000d00)}, {&(0x7f0000000d80)="52a786cee28877345ed36a4e534470b48d64f97a9de1465bcb7647c70c2ff453820923674d60c34a29b07842711c", 0x2e}, {&(0x7f0000000e00)="bd50eb6ee01603d1a6186c82cf38e0da3cc351ba18184d32ad8de95e5afc6318e706bf95da58ec66bfd7358379b609b21267da4cc3", 0x35}, {&(0x7f0000000e80)="4e53b73d5ce53ff7af0bb17bc6021e1677d8374a691d9bd93e7721e8e0e824f1da5696bd861128080c8e10d36545fb7566d139263821c1605124cfc24772d999028c3820d76fec464f00099ece44c2e759581f96727519a030cd2ff36beedac1d527f3d6d6c6a0bd9a9d67043f9fbe40ef26ad968c716554ae45ba18052c153d3e997810710c1bcddb5588d388c4eb175ca82ff4dbf3be7ef4eb82009edd670de77b469b501356beb70b2e2cf6c012ed57389eb8ed88a52a29a29ca4619e04b63b93246e94660ed00635b2f40e079f48e24ec9303a4fc13518b7", 0xda}], 0x7, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x78}, 0x800) socket$kcm(0x10, 0x2, 0x10) (async) socket$kcm(0x10, 0x2, 0x10) close(r5) (async) close(r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113e000000000020200000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 80.148748ms ago: executing program 4 (id=2461): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x180, 0xc8, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d033300fe08fff500000200875a65969ff57b00000000000000003b00000000ac1414aa"], 0xfdef) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x160) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000040000"], 0x0, 0x4, 0x8f, &(0x7f0000000100)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x818, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c0000000000000000000001040000002000000005000000010000040400000001000000"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)=@isdn, 0x80, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x1) r5 = getpid() syz_open_procfs$namespace(r5, &(0x7f0000000340)='ns/user\x00') r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x6, &(0x7f0000000040), 0x4) 0s ago: executing program 1 (id=2462): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x8, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xbd54, 0x5, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0xffffffffffffffff, 0x10000000, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={0xffffffffffffffff, r0}, 0xc) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) r4 = socket$kcm(0x2c, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000001a80)={&(0x7f00000002c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x4}, 0x2}}, 0x80, 0x0}, 0x408d0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x1, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000510000009500575b1eb02c0b35000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xda, &(0x7f0000000100)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0xffffff04, 0x61e5cc96}, 0x22) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): 66.111896][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.121528][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.132622][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.140977][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.150212][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.159570][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.178575][ T4190] device veth0_macvtap entered promiscuous mode [ 66.188044][ T4192] device veth0_vlan entered promiscuous mode [ 66.236201][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.248883][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.258770][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.280354][ T4190] device veth1_macvtap entered promiscuous mode [ 66.305193][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.313740][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.322874][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.331593][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.340926][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.350100][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.360924][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.369178][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.377699][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.388111][ T4192] device veth1_vlan entered promiscuous mode [ 66.394971][ T4196] device veth0_vlan entered promiscuous mode [ 66.403920][ T4194] device veth0_vlan entered promiscuous mode [ 66.419078][ T4196] device veth1_vlan entered promiscuous mode [ 66.434996][ T439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.456108][ T439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.489322][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.497595][ T439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.498731][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.507580][ T439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.527080][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.536773][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.544947][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.553052][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.561035][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.573863][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.584867][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.596139][ T4194] device veth1_vlan entered promiscuous mode [ 66.617124][ T4192] device veth0_macvtap entered promiscuous mode [ 66.627249][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.636615][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.645350][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.654391][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.664114][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.675380][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.686663][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.698513][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.722382][ T4192] device veth1_macvtap entered promiscuous mode [ 66.737932][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.748295][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.759761][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.779862][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.794405][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.807759][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.817155][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.858143][ T4196] device veth0_macvtap entered promiscuous mode [ 66.870374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.880075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.891075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.912190][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.931181][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.941986][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.958206][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.969469][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.979191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.988089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.998188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.007249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.026874][ T4194] device veth0_macvtap entered promiscuous mode [ 67.068219][ T4196] device veth1_macvtap entered promiscuous mode [ 67.079223][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.091092][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.103108][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.113690][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.125707][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.147791][ T4194] device veth1_macvtap entered promiscuous mode [ 67.166296][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.181418][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.190717][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.205870][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.215540][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.233780][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 67.243645][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.253073][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.261834][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.271909][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.290441][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.301173][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.311618][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.313203][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 67.328543][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 67.330443][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.344716][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.355418][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.367050][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.395220][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.406215][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.411649][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 67.417812][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.434308][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.444850][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.455693][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.465850][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.472505][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 67.486653][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.498125][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.505737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.514935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.524233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.532896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.549182][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.560473][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.570817][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.581315][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.591704][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.603026][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.614564][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.635833][ T521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.646150][ T521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.657029][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.666329][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.676623][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.695837][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.705694][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.726107][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.735700][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.742101][ C0] hrtimer: interrupt took 45192 ns [ 67.755965][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.773829][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.783825][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.796902][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.807020][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.817759][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.828056][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.840751][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.853475][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.874604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.884038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.917474][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.927773][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.937073][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.947956][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.971583][ T439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.981991][ T439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.030109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.045235][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.054427][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.085476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.120159][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.130786][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.149150][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.170355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.180722][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.202631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.227200][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.251544][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.259026][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.271543][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.298673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.307131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.479396][ T662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.501872][ T662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.528204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.830238][ T4294] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12'. [ 69.169874][ T4297] netlink: 'syz.1.11': attribute type 10 has an invalid length. [ 69.218313][ T4294] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12'. [ 69.235060][ T4304] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12'. [ 69.315988][ T1345] Bluetooth: hci0: command 0x0419 tx timeout [ 69.392796][ T4233] Bluetooth: hci1: command 0x0419 tx timeout [ 69.409356][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 69.428337][ T4317] netlink: 'syz.3.21': attribute type 10 has an invalid length. [ 69.472367][ T1345] Bluetooth: hci3: command 0x0419 tx timeout [ 69.705060][ T1345] Bluetooth: hci4: command 0x0419 tx timeout [ 69.725993][ T4317] team0: Device gre0 is of different type [ 69.915821][ T4317] syz.3.21 (4317) used greatest stack depth: 18480 bytes left [ 70.351544][ T4348] netlink: 60 bytes leftover after parsing attributes in process `syz.1.32'. [ 70.361792][ T4348] netlink: 60 bytes leftover after parsing attributes in process `syz.1.32'. [ 70.506803][ T4348] netlink: 60 bytes leftover after parsing attributes in process `syz.1.32'. [ 70.561050][ T4351] netlink: 'syz.3.33': attribute type 10 has an invalid length. [ 71.116818][ T4386] netlink: 60 bytes leftover after parsing attributes in process `syz.4.51'. [ 71.444442][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.451150][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.503822][ T4386] netlink: 60 bytes leftover after parsing attributes in process `syz.4.51'. [ 71.611817][ T4386] netlink: 60 bytes leftover after parsing attributes in process `syz.4.51'. [ 72.007309][ T4402] netlink: 'syz.4.56': attribute type 10 has an invalid length. [ 72.121523][ T4412] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 72.304903][ T4414] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.62'. [ 73.095386][ T4463] netlink: 'syz.2.76': attribute type 10 has an invalid length. [ 73.262604][ T4470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.435155][ T4492] FAULT_INJECTION: forcing a failure. [ 73.435155][ T4492] name failslab, interval 1, probability 0, space 0, times 1 [ 73.466955][ T4492] CPU: 0 PID: 4492 Comm: syz.3.94 Not tainted syzkaller #0 [ 73.474197][ T4492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 73.484280][ T4492] Call Trace: [ 73.487573][ T4492] [ 73.490512][ T4492] dump_stack_lvl+0x188/0x250 [ 73.495215][ T4492] ? show_regs_print_info+0x20/0x20 [ 73.500420][ T4492] ? load_image+0x410/0x410 [ 73.504934][ T4492] ? __lock_acquire+0x7d40/0x7d40 [ 73.509983][ T4492] should_fail+0x383/0x4b0 [ 73.514419][ T4492] should_failslab+0x5/0x20 [ 73.518924][ T4492] slab_pre_alloc_hook+0x51/0xc0 [ 73.523869][ T4492] ? getname_flags+0xb7/0x4f0 [ 73.528548][ T4492] kmem_cache_alloc+0x3d/0x280 [ 73.533328][ T4492] getname_flags+0xb7/0x4f0 [ 73.537841][ T4492] __x64_sys_mkdir+0x5b/0x80 [ 73.542434][ T4492] do_syscall_64+0x4c/0xa0 [ 73.546853][ T4492] ? clear_bhb_loop+0x30/0x80 [ 73.551527][ T4492] ? clear_bhb_loop+0x30/0x80 [ 73.556213][ T4492] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.562122][ T4492] RIP: 0033:0x7f2b1a94c199 [ 73.566558][ T4492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.586166][ T4492] RSP: 002b:00007f2b18ba4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 73.594586][ T4492] RAX: ffffffffffffffda RBX: 00007f2b1abd3fa0 RCX: 00007f2b1a94c199 [ 73.602565][ T4492] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000200000000040 [ 73.610534][ T4492] RBP: 00007f2b18ba4090 R08: 0000000000000000 R09: 0000000000000000 [ 73.618602][ T4492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.626627][ T4492] R13: 00007f2b1abd4038 R14: 00007f2b1abd3fa0 R15: 00007ffeec8e7868 [ 73.634639][ T4492] [ 73.656923][ T4500] netlink: 'syz.4.97': attribute type 4 has an invalid length. [ 73.753054][ T4500] openvswitch: netlink: Tunnel attr 2 has unexpected len 8 expected 4 [ 74.000826][ T4515] netlink: 'syz.3.100': attribute type 3 has an invalid length. [ 74.017520][ T4515] netlink: 'syz.3.100': attribute type 6 has an invalid length. [ 74.070152][ T4515] __nla_validate_parse: 5 callbacks suppressed [ 74.070165][ T4515] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.100'. [ 74.240348][ T4524] device syzkaller0 entered promiscuous mode [ 74.405163][ T4537] Zero length message leads to an empty skb [ 74.593222][ T4554] netlink: 'syz.2.115': attribute type 21 has an invalid length. [ 74.604597][ T4554] IPv6: NLM_F_CREATE should be specified when creating new route [ 74.613896][ T4554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.621421][ T4554] IPv6: NLM_F_CREATE should be set when creating new route [ 74.628701][ T4554] IPv6: NLM_F_CREATE should be set when creating new route [ 74.695940][ T4556] netlink: set zone limit has 8 unknown bytes [ 74.770534][ T4556] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.777965][ T4556] IPv6: NLM_F_CREATE should be set when creating new route [ 74.785555][ T4556] IPv6: NLM_F_CREATE should be set when creating new route [ 74.793027][ T4556] IPv6: NLM_F_CREATE should be set when creating new route [ 78.839867][ T4628] netlink: 'syz.1.143': attribute type 9 has an invalid length. [ 78.885708][ T4628] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.143'. [ 80.263517][ T4687] netlink: 'syz.0.165': attribute type 10 has an invalid length. [ 80.385106][ T4685] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.164'. [ 80.412526][ T4669] netlink: 'syz.4.160': attribute type 39 has an invalid length. [ 81.184231][ T4719] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.395841][ T26] cfg80211: failed to load regulatory.db [ 81.412272][ T4727] netlink: 'syz.1.181': attribute type 2 has an invalid length. [ 81.419937][ T4727] netlink: 'syz.1.181': attribute type 8 has an invalid length. [ 81.473746][ T4727] netlink: 132 bytes leftover after parsing attributes in process `syz.1.181'. [ 81.811223][ T4750] netlink: 'syz.3.188': attribute type 9 has an invalid length. [ 81.853344][ T4750] netlink: 200636 bytes leftover after parsing attributes in process `syz.3.188'. [ 82.231529][ T4760] netlink: 196 bytes leftover after parsing attributes in process `syz.1.193'. [ 82.356451][ T4770] netlink: 14 bytes leftover after parsing attributes in process `syz.3.197'. [ 82.399779][ T4770] device hsr_slave_0 left promiscuous mode [ 82.432420][ T4770] device hsr_slave_1 left promiscuous mode [ 83.015153][ T4776] netlink: 'syz.4.196': attribute type 33 has an invalid length. [ 83.052157][ T4776] netlink: 152 bytes leftover after parsing attributes in process `syz.4.196'. [ 83.081034][ T4776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.356034][ T4797] netlink: 'syz.4.207': attribute type 10 has an invalid length. [ 83.588279][ T4797] team0: Device gre0 is of different type [ 83.828445][ T4811] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.209'. [ 84.514447][ T4825] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.215'. [ 84.627472][ T4831] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.215'. [ 85.121056][ T4856] netlink: set zone limit has 8 unknown bytes [ 85.529652][ T4876] FAULT_INJECTION: forcing a failure. [ 85.529652][ T4876] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 85.552747][ T4876] CPU: 1 PID: 4876 Comm: syz.0.236 Not tainted syzkaller #0 [ 85.560086][ T4876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 85.570144][ T4876] Call Trace: [ 85.573419][ T4876] [ 85.576337][ T4876] dump_stack_lvl+0x188/0x250 [ 85.581011][ T4876] ? show_regs_print_info+0x20/0x20 [ 85.586198][ T4876] ? load_image+0x410/0x410 [ 85.590705][ T4876] ? __lock_acquire+0x7d40/0x7d40 [ 85.595730][ T4876] should_fail+0x383/0x4b0 [ 85.600139][ T4876] strncpy_from_user+0x32/0x350 [ 85.604980][ T4876] getname_flags+0xf2/0x4f0 [ 85.609477][ T4876] __x64_sys_mkdir+0x5b/0x80 [ 85.614055][ T4876] do_syscall_64+0x4c/0xa0 [ 85.618462][ T4876] ? clear_bhb_loop+0x30/0x80 [ 85.623133][ T4876] ? clear_bhb_loop+0x30/0x80 [ 85.627816][ T4876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.633705][ T4876] RIP: 0033:0x7f2698944199 [ 85.638118][ T4876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.657714][ T4876] RSP: 002b:00007f2696b9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 85.666120][ T4876] RAX: ffffffffffffffda RBX: 00007f2698bcbfa0 RCX: 00007f2698944199 [ 85.674091][ T4876] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000200000000040 [ 85.682215][ T4876] RBP: 00007f2696b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 85.690292][ T4876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.698306][ T4876] R13: 00007f2698bcc038 R14: 00007f2698bcbfa0 R15: 00007fff6808d158 [ 85.706296][ T4876] [ 85.759955][ T4878] netlink: 'syz.3.237': attribute type 5 has an invalid length. [ 86.367005][ T4909] netlink: 132 bytes leftover after parsing attributes in process `syz.2.246'. [ 86.701012][ T4906] netlink: 'syz.4.248': attribute type 10 has an invalid length. [ 86.729259][ T4906] netlink: 40 bytes leftover after parsing attributes in process `syz.4.248'. [ 86.818004][ T146] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 87.035701][ T4915] device syzkaller0 entered promiscuous mode [ 87.544993][ T4958] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.264'. [ 88.204541][ T4981] netlink: 'syz.0.274': attribute type 2 has an invalid length. [ 88.221851][ T4981] netlink: 'syz.0.274': attribute type 8 has an invalid length. [ 88.230032][ T4981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.274'. [ 88.425655][ T5008] netlink: 'syz.0.281': attribute type 10 has an invalid length. [ 88.513406][ T5008] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.281'. [ 88.540689][ T5008] openvswitch: netlink: Flow key attr not present in new flow. [ 88.929364][ T5032] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.285'. [ 88.966925][ T5032] openvswitch: netlink: IP tunnel dst address not specified [ 89.327678][ T5047] netlink: 'syz.3.292': attribute type 9 has an invalid length. [ 89.371758][ T5047] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.292'. [ 90.374169][ T5081] netlink: 'syz.3.307': attribute type 10 has an invalid length. [ 90.818139][ T5096] netlink: 'syz.1.314': attribute type 9 has an invalid length. [ 90.850753][ T5096] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.314'. [ 91.086245][ T5105] netlink: 'syz.0.318': attribute type 10 has an invalid length. [ 91.096744][ T5105] netlink: 128 bytes leftover after parsing attributes in process `syz.0.318'. [ 91.503516][ T5135] netlink: 'syz.2.327': attribute type 2 has an invalid length. [ 91.526006][ T5135] netlink: 'syz.2.327': attribute type 8 has an invalid length. [ 91.542148][ T5135] netlink: 132 bytes leftover after parsing attributes in process `syz.2.327'. [ 91.779617][ T5146] netlink: 'syz.3.333': attribute type 9 has an invalid length. [ 91.813616][ T5146] netlink: 200636 bytes leftover after parsing attributes in process `syz.3.333'. [ 92.197050][ T5169] netlink: 14 bytes leftover after parsing attributes in process `syz.0.343'. [ 92.226612][ T5169] device hsr_slave_0 left promiscuous mode [ 92.264022][ T5169] device hsr_slave_1 left promiscuous mode [ 92.296163][ T5175] netlink: 'syz.1.342': attribute type 3 has an invalid length. [ 92.315621][ T5175] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.342'. [ 92.452399][ T5179] netlink: 15119 bytes leftover after parsing attributes in process `syz.4.346'. [ 92.747506][ T5187] netlink: 'syz.4.350': attribute type 10 has an invalid length. [ 92.825301][ T5192] netlink: 'syz.2.353': attribute type 3 has an invalid length. [ 92.856021][ T5192] netlink: 132 bytes leftover after parsing attributes in process `syz.2.353'. [ 92.859910][ T5187] team0: Device gre0 is of different type [ 93.881517][ T5228] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.364'. [ 93.966178][ T5240] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.364'. [ 94.600821][ T5267] FAULT_INJECTION: forcing a failure. [ 94.600821][ T5267] name failslab, interval 1, probability 0, space 0, times 0 [ 94.644108][ T5267] CPU: 1 PID: 5267 Comm: syz.0.379 Not tainted syzkaller #0 [ 94.649103][ T5275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.651444][ T5267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 94.651472][ T5267] Call Trace: [ 94.651479][ T5267] [ 94.651487][ T5267] dump_stack_lvl+0x188/0x250 [ 94.651516][ T5267] ? show_regs_print_info+0x20/0x20 [ 94.651535][ T5267] ? load_image+0x410/0x410 [ 94.651557][ T5267] ? __lock_acquire+0x7d40/0x7d40 [ 94.658863][ T5275] IPv6: NLM_F_CREATE should be set when creating new route [ 94.668800][ T5267] should_fail+0x383/0x4b0 [ 94.668830][ T5267] should_failslab+0x5/0x20 [ 94.668846][ T5267] slab_pre_alloc_hook+0x51/0xc0 [ 94.668865][ T5267] ? __d_alloc+0x27/0x6d0 [ 94.668883][ T5267] kmem_cache_alloc+0x3d/0x280 [ 94.672320][ T5275] IPv6: NLM_F_CREATE should be set when creating new route [ 94.675071][ T5267] __d_alloc+0x27/0x6d0 [ 94.675097][ T5267] d_alloc+0x46/0x250 [ 94.679855][ T5275] IPv6: NLM_F_CREATE should be set when creating new route [ 94.684937][ T5267] lookup_one_qstr_excl+0xc6/0x240 [ 94.684960][ T5267] filename_create+0x242/0x450 [ 94.684984][ T5267] ? kern_path_create+0x190/0x190 [ 94.685006][ T5267] ? __virt_addr_valid+0x3c6/0x470 [ 94.685030][ T5267] do_mkdirat+0xa5/0x5c0 [ 94.705648][ T5278] netlink: 132 bytes leftover after parsing attributes in process `syz.2.381'. [ 94.706109][ T5267] ? strncpy_from_user+0x1f4/0x350 [ 94.722018][ T5278] netlink: 132 bytes leftover after parsing attributes in process `syz.2.381'. [ 94.724623][ T5267] ? vfs_mkdir+0x570/0x570 [ 94.724649][ T5267] ? getname_flags+0x1f9/0x4f0 [ 94.724670][ T5267] __x64_sys_mkdir+0x6a/0x80 [ 94.724689][ T5267] do_syscall_64+0x4c/0xa0 [ 94.724707][ T5267] ? clear_bhb_loop+0x30/0x80 [ 94.724724][ T5267] ? clear_bhb_loop+0x30/0x80 [ 94.827962][ T5267] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.833975][ T5267] RIP: 0033:0x7f2698944199 [ 94.838671][ T5267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.859665][ T5267] RSP: 002b:00007f2696b9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 94.868644][ T5267] RAX: ffffffffffffffda RBX: 00007f2698bcbfa0 RCX: 00007f2698944199 [ 94.876745][ T5267] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000200000000040 [ 94.884867][ T5267] RBP: 00007f2696b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 94.892855][ T5267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.900831][ T5267] R13: 00007f2698bcc038 R14: 00007f2698bcbfa0 R15: 00007fff6808d158 [ 94.909115][ T5267] [ 95.072687][ T5290] netlink: 'syz.2.384': attribute type 21 has an invalid length. [ 95.136300][ T5290] netlink: 'syz.2.384': attribute type 21 has an invalid length. [ 95.971414][ T5334] device syzkaller0 entered promiscuous mode [ 96.079951][ T5342] validate_nla: 34 callbacks suppressed [ 96.079970][ T5342] netlink: 'syz.2.403': attribute type 3 has an invalid length. [ 96.147651][ T5342] netlink: 'syz.2.403': attribute type 1 has an invalid length. [ 96.532035][ T5352] netlink: 'syz.1.407': attribute type 10 has an invalid length. [ 96.541826][ T5352] device ipvlan1 entered promiscuous mode [ 96.692934][ T5356] syz.4.409 uses obsolete (PF_INET,SOCK_PACKET) [ 96.693898][ T5352] bridge0: port 3(ipvlan1) entered blocking state [ 96.715200][ T5352] bridge0: port 3(ipvlan1) entered disabled state [ 96.791208][ T5352] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 97.095948][ T5373] netlink: 'syz.4.416': attribute type 3 has an invalid length. [ 97.165246][ T5373] netlink: 'syz.4.416': attribute type 1 has an invalid length. [ 97.206460][ T5373] __nla_validate_parse: 104 callbacks suppressed [ 97.206478][ T5373] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.416'. [ 97.716844][ T5407] netlink: 'syz.2.427': attribute type 27 has an invalid length. [ 97.831194][ T5408] netlink: 'syz.2.427': attribute type 4 has an invalid length. [ 97.882921][ T5416] netlink: 10 bytes leftover after parsing attributes in process `syz.1.428'. [ 97.909769][ T5408] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.427'. [ 97.946721][ T5418] netlink: 'syz.0.429': attribute type 9 has an invalid length. [ 98.062343][ T5418] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.429'. [ 98.120640][ T5421] netlink: 'syz.1.430': attribute type 3 has an invalid length. [ 98.187159][ T5421] netlink: 118424 bytes leftover after parsing attributes in process `syz.1.430'. [ 98.463620][ T5429] netlink: 'syz.0.434': attribute type 3 has an invalid length. [ 98.519782][ T5429] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.434'. [ 98.773693][ T5455] team0: Device vxcan1 is of different type [ 98.807508][ T5449] raw_sendmsg: syz.3.439 forgot to set AF_INET. Fix it! [ 99.591756][ T5502] netlink: 132 bytes leftover after parsing attributes in process `syz.2.461'. [ 100.768688][ T5545] netlink: 14 bytes leftover after parsing attributes in process `syz.1.478'. [ 100.803258][ T5545] device hsr_slave_0 left promiscuous mode [ 100.822646][ T5545] device hsr_slave_1 left promiscuous mode [ 101.166431][ T5571] validate_nla: 7 callbacks suppressed [ 101.166449][ T5571] netlink: 'syz.4.488': attribute type 10 has an invalid length. [ 101.278194][ T5571] team0: Device gre0 is of different type [ 101.492406][ T5599] netlink: 'syz.0.496': attribute type 21 has an invalid length. [ 101.524018][ T5599] netlink: 100 bytes leftover after parsing attributes in process `syz.0.496'. [ 101.688658][ T5577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.991141][ T5613] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.502'. [ 102.464136][ T5633] FAULT_INJECTION: forcing a failure. [ 102.464136][ T5633] name failslab, interval 1, probability 0, space 0, times 0 [ 102.504032][ T5633] CPU: 0 PID: 5633 Comm: syz.4.510 Not tainted syzkaller #0 [ 102.511721][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.521809][ T5633] Call Trace: [ 102.525109][ T5633] [ 102.528061][ T5633] dump_stack_lvl+0x188/0x250 [ 102.532774][ T5633] ? show_regs_print_info+0x20/0x20 [ 102.538004][ T5633] ? load_image+0x410/0x410 [ 102.542555][ T5633] ? __might_sleep+0xf0/0xf0 [ 102.547178][ T5633] ? __lock_acquire+0x7d40/0x7d40 [ 102.552339][ T5633] should_fail+0x383/0x4b0 [ 102.556839][ T5633] should_failslab+0x5/0x20 [ 102.561371][ T5633] slab_pre_alloc_hook+0x51/0xc0 [ 102.566364][ T5633] __kmalloc+0x6b/0x340 [ 102.570545][ T5633] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 102.576310][ T5633] tomoyo_realpath_from_path+0xed/0x5e0 [ 102.581913][ T5633] tomoyo_path_number_perm+0x251/0x6b0 [ 102.587443][ T5633] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 102.592955][ T5633] ? __lock_acquire+0x7d40/0x7d40 [ 102.598015][ T5633] ? do_raw_spin_lock+0x128/0x2f0 [ 102.603087][ T5633] ? do_raw_spin_unlock+0x11d/0x230 [ 102.608307][ T5633] ? d_set_d_op+0x25b/0x370 [ 102.612840][ T5633] ? simple_lookup+0xc1/0xf0 [ 102.617447][ T5633] ? lookup_one_qstr_excl+0x11c/0x240 [ 102.622841][ T5633] tomoyo_path_mkdir+0xad/0xf0 [ 102.627636][ T5633] ? tomoyo_path_unlink+0xf0/0xf0 [ 102.632689][ T5633] ? kern_path_create+0x190/0x190 [ 102.637753][ T5633] security_path_mkdir+0xe0/0x130 [ 102.642810][ T5633] do_mkdirat+0x15e/0x5c0 [ 102.647172][ T5633] ? strncpy_from_user+0x1f4/0x350 [ 102.652300][ T5633] ? vfs_mkdir+0x570/0x570 [ 102.656745][ T5633] ? getname_flags+0x1f9/0x4f0 [ 102.661551][ T5633] __x64_sys_mkdir+0x6a/0x80 [ 102.666166][ T5633] do_syscall_64+0x4c/0xa0 [ 102.670598][ T5633] ? clear_bhb_loop+0x30/0x80 [ 102.675293][ T5633] ? clear_bhb_loop+0x30/0x80 [ 102.680040][ T5633] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.685966][ T5633] RIP: 0033:0x7fc680f49199 [ 102.690414][ T5633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.710042][ T5633] RSP: 002b:00007fc67f1a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 102.718474][ T5633] RAX: ffffffffffffffda RBX: 00007fc6811d0fa0 RCX: 00007fc680f49199 [ 102.726466][ T5633] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000200000000040 [ 102.734438][ T5633] RBP: 00007fc67f1a1090 R08: 0000000000000000 R09: 0000000000000000 [ 102.742403][ T5633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.750361][ T5633] R13: 00007fc6811d1038 R14: 00007fc6811d0fa0 R15: 00007fff5cc09d18 [ 102.758360][ T5633] [ 102.818082][ T5633] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.865549][ T5651] FAULT_INJECTION: forcing a failure. [ 102.865549][ T5651] name failslab, interval 1, probability 0, space 0, times 0 [ 102.912748][ T5651] CPU: 0 PID: 5651 Comm: syz.2.515 Not tainted syzkaller #0 [ 102.920120][ T5651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.930194][ T5651] Call Trace: [ 102.933524][ T5651] [ 102.936469][ T5651] dump_stack_lvl+0x188/0x250 [ 102.941173][ T5651] ? show_regs_print_info+0x20/0x20 [ 102.946402][ T5651] ? load_image+0x410/0x410 [ 102.951057][ T5651] ? __might_sleep+0xf0/0xf0 [ 102.955674][ T5651] ? __lock_acquire+0x7d40/0x7d40 [ 102.960733][ T5651] should_fail+0x383/0x4b0 [ 102.965214][ T5651] should_failslab+0x5/0x20 [ 102.969842][ T5651] slab_pre_alloc_hook+0x51/0xc0 [ 102.974899][ T5651] __kmalloc+0x6b/0x340 [ 102.979077][ T5651] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 102.984826][ T5651] tomoyo_realpath_from_path+0xed/0x5e0 [ 102.990405][ T5651] ? tomoyo_path_number_perm+0x71/0x6b0 [ 102.995997][ T5651] tomoyo_path_number_perm+0x251/0x6b0 [ 103.001499][ T5651] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 103.007316][ T5651] security_file_ioctl+0x6c/0xa0 [ 103.012302][ T5651] __se_sys_ioctl+0x48/0x170 [ 103.016916][ T5651] do_syscall_64+0x4c/0xa0 [ 103.021442][ T5651] ? clear_bhb_loop+0x30/0x80 [ 103.026145][ T5651] ? clear_bhb_loop+0x30/0x80 [ 103.030844][ T5651] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.036931][ T5651] RIP: 0033:0x7f7edd706199 [ 103.041462][ T5651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.061958][ T5651] RSP: 002b:00007f7edb95e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.070493][ T5651] RAX: ffffffffffffffda RBX: 00007f7edd98dfa0 RCX: 00007f7edd706199 [ 103.078482][ T5651] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000008 [ 103.086475][ T5651] RBP: 00007f7edb95e090 R08: 0000000000000000 R09: 0000000000000000 [ 103.094468][ T5651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.102445][ T5651] R13: 00007f7edd98e038 R14: 00007f7edd98dfa0 R15: 00007ffcde2119f8 [ 103.110463][ T5651] [ 103.131823][ T5651] ERROR: Out of memory at tomoyo_realpath_from_path. [ 103.537274][ T5674] netlink: 'syz.2.521': attribute type 1 has an invalid length. [ 103.569377][ T5674] __nla_validate_parse: 3 callbacks suppressed [ 103.569392][ T5674] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.521'. [ 103.609137][ T5674] netlink: 1 bytes leftover after parsing attributes in process `syz.2.521'. [ 103.792933][ T5685] netlink: 'syz.0.526': attribute type 4 has an invalid length. [ 103.802737][ T5685] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.526'. [ 103.854358][ T5689] netlink: 'syz.2.527': attribute type 10 has an invalid length. [ 103.869389][ T5689] netlink: 40 bytes leftover after parsing attributes in process `syz.2.527'. [ 103.889582][ T5689] device ipvlan1 entered promiscuous mode [ 103.913768][ T5689] bridge0: port 3(ipvlan1) entered blocking state [ 103.928493][ T5689] bridge0: port 3(ipvlan1) entered disabled state [ 103.970449][ T5689] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 104.524805][ T5716] device syzkaller0 entered promiscuous mode [ 104.868706][ T5732] netlink: 'syz.1.542': attribute type 3 has an invalid length. [ 104.908942][ T5732] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.542'. [ 105.044614][ T5735] netlink: 156 bytes leftover after parsing attributes in process `syz.4.544'. [ 105.662857][ T5773] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.552'. [ 105.705679][ T5774] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.552'. [ 106.201474][ T5798] netlink: 'syz.0.565': attribute type 9 has an invalid length. [ 106.245833][ T5798] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.565'. [ 109.157487][ T5791] netlink: 3 bytes leftover after parsing attributes in process `syz.4.562'. [ 109.176345][ T5801] netlink: 144 bytes leftover after parsing attributes in process `syz.1.566'. [ 109.236646][ T5801] team0: Port device team_slave_0 removed [ 109.243403][ T5801] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 109.476840][ T5816] netlink: 10 bytes leftover after parsing attributes in process `syz.1.571'. [ 109.597089][ T5826] netlink: 'syz.0.576': attribute type 10 has an invalid length. [ 110.033205][ T5858] netlink: 'syz.0.587': attribute type 21 has an invalid length. [ 110.056825][ T5858] netlink: 156 bytes leftover after parsing attributes in process `syz.0.587'. [ 110.157240][ T5863] netlink: 'syz.4.593': attribute type 2 has an invalid length. [ 110.179404][ T5863] netlink: 'syz.4.593': attribute type 8 has an invalid length. [ 110.226147][ T5863] netlink: 132 bytes leftover after parsing attributes in process `syz.4.593'. [ 110.891798][ T5903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 110.920257][ T5903] netlink: 'syz.0.603': attribute type 4 has an invalid length. [ 110.950957][ T5903] netlink: 152 bytes leftover after parsing attributes in process `syz.0.603'. [ 111.067002][ T5913] netlink: 'syz.1.606': attribute type 10 has an invalid length. [ 111.112224][ T5913] netlink: 128 bytes leftover after parsing attributes in process `syz.1.606'. [ 111.159314][ T5914] netlink: 'syz.3.607': attribute type 3 has an invalid length. [ 111.232221][ T5914] netlink: 'syz.3.607': attribute type 1 has an invalid length. [ 111.258044][ T5914] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.607'. [ 112.440840][ T5945] netlink: 'syz.4.621': attribute type 3 has an invalid length. [ 112.500650][ T5945] netlink: 'syz.4.621': attribute type 1 has an invalid length. [ 112.563514][ T5945] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.621'. [ 114.427991][ T6007] __nla_validate_parse: 2 callbacks suppressed [ 114.428037][ T6007] netlink: 14 bytes leftover after parsing attributes in process `syz.0.647'. [ 114.440681][ T6002] netlink: 56 bytes leftover after parsing attributes in process `syz.4.644'. [ 114.534910][ T6002] netlink: 56 bytes leftover after parsing attributes in process `syz.4.644'. [ 114.781014][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'. [ 115.129558][ T6049] FAULT_INJECTION: forcing a failure. [ 115.129558][ T6049] name failslab, interval 1, probability 0, space 0, times 0 [ 115.193070][ T6049] CPU: 0 PID: 6049 Comm: syz.4.660 Not tainted syzkaller #0 [ 115.201011][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.211241][ T6049] Call Trace: [ 115.214638][ T6049] [ 115.217933][ T6049] dump_stack_lvl+0x188/0x250 [ 115.223105][ T6049] ? show_regs_print_info+0x20/0x20 [ 115.228321][ T6049] ? load_image+0x410/0x410 [ 115.233052][ T6049] ? __might_sleep+0xf0/0xf0 [ 115.237655][ T6049] ? __lock_acquire+0x7d40/0x7d40 [ 115.242687][ T6049] should_fail+0x383/0x4b0 [ 115.247109][ T6049] should_failslab+0x5/0x20 [ 115.251603][ T6049] slab_pre_alloc_hook+0x51/0xc0 [ 115.256540][ T6049] __kmalloc+0x6b/0x340 [ 115.260782][ T6049] ? tomoyo_encode+0x28a/0x550 [ 115.265548][ T6049] tomoyo_encode+0x28a/0x550 [ 115.270155][ T6049] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 115.275907][ T6049] tomoyo_path_number_perm+0x251/0x6b0 [ 115.281379][ T6049] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 115.286842][ T6049] ? lockdep_hardirqs_on+0x94/0x140 [ 115.292189][ T6049] security_file_ioctl+0x6c/0xa0 [ 115.297124][ T6049] __se_sys_ioctl+0x48/0x170 [ 115.301809][ T6049] do_syscall_64+0x4c/0xa0 [ 115.306220][ T6049] ? clear_bhb_loop+0x30/0x80 [ 115.310891][ T6049] ? clear_bhb_loop+0x30/0x80 [ 115.315693][ T6049] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.322209][ T6049] RIP: 0033:0x7fc680f49199 [ 115.326710][ T6049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.347614][ T6049] RSP: 002b:00007fc67f1a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.356304][ T6049] RAX: ffffffffffffffda RBX: 00007fc6811d0fa0 RCX: 00007fc680f49199 [ 115.364357][ T6049] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000008 [ 115.372496][ T6049] RBP: 00007fc67f1a1090 R08: 0000000000000000 R09: 0000000000000000 [ 115.380817][ T6049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.389089][ T6049] R13: 00007fc6811d1038 R14: 00007fc6811d0fa0 R15: 00007fff5cc09d18 [ 115.397517][ T6049] [ 115.457216][ T6054] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.663'. [ 115.491766][ T6049] ERROR: Out of memory at tomoyo_realpath_from_path. [ 115.940476][ T6077] netlink: 'syz.4.671': attribute type 10 has an invalid length. [ 115.964761][ T6077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.671'. [ 116.000649][ T6077] device ipvlan1 entered promiscuous mode [ 116.022684][ T6077] bridge0: port 3(ipvlan1) entered blocking state [ 116.040303][ T6077] bridge0: port 3(ipvlan1) entered disabled state [ 116.058699][ T6077] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 116.124211][ T6090] device syzkaller0 entered promiscuous mode [ 116.650533][ T6120] netlink: 'syz.4.689': attribute type 17 has an invalid length. [ 116.673673][ T6120] netlink: 'syz.4.689': attribute type 16 has an invalid length. [ 116.681969][ T6120] netlink: 152 bytes leftover after parsing attributes in process `syz.4.689'. [ 117.144913][ T6137] netlink: 'syz.4.692': attribute type 3 has an invalid length. [ 117.195062][ T6137] netlink: 'syz.4.692': attribute type 1 has an invalid length. [ 117.263763][ T6137] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.692'. [ 117.412585][ T6142] netlink: 132 bytes leftover after parsing attributes in process `syz.2.695'. [ 117.479516][ T6153] netlink: 'syz.3.697': attribute type 9 has an invalid length. [ 117.522434][ T6153] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.697'. [ 118.537969][ T6206] netlink: 'syz.2.722': attribute type 2 has an invalid length. [ 118.593244][ T6206] netlink: 'syz.2.722': attribute type 8 has an invalid length. [ 118.730402][ T6211] netlink: 'syz.3.724': attribute type 3 has an invalid length. [ 118.844414][ T6211] netlink: 'syz.3.724': attribute type 39 has an invalid length. [ 118.888448][ T6219] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 119.005747][ T6219] openvswitch: netlink: Message has 1 unknown bytes. [ 119.499416][ T6244] netlink: 'syz.1.734': attribute type 3 has an invalid length. [ 119.512416][ T6244] __nla_validate_parse: 4 callbacks suppressed [ 119.512452][ T6244] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.734'. [ 119.564277][ T6252] netlink: 156 bytes leftover after parsing attributes in process `syz.1.734'. [ 119.586560][ T6246] FAULT_INJECTION: forcing a failure. [ 119.586560][ T6246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.713466][ T6246] CPU: 0 PID: 6246 Comm: syz.0.733 Not tainted syzkaller #0 [ 119.720800][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 119.730866][ T6246] Call Trace: [ 119.734160][ T6246] [ 119.737096][ T6246] dump_stack_lvl+0x188/0x250 [ 119.741886][ T6246] ? show_regs_print_info+0x20/0x20 [ 119.747612][ T6246] ? load_image+0x410/0x410 [ 119.752126][ T6246] ? __lock_acquire+0x7d40/0x7d40 [ 119.757681][ T6246] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 119.763668][ T6246] should_fail+0x383/0x4b0 [ 119.768714][ T6246] _copy_from_user+0x2e/0x170 [ 119.774373][ T6246] wext_handle_ioctl+0xc4/0x1d0 [ 119.779507][ T6246] ? call_commit_handler+0xf0/0xf0 [ 119.784656][ T6246] sock_ioctl+0x143/0x700 [ 119.789095][ T6246] ? sock_poll+0x420/0x420 [ 119.793621][ T6246] ? bpf_lsm_file_ioctl+0x5/0x10 [ 119.799350][ T6246] ? security_file_ioctl+0x7c/0xa0 [ 119.804817][ T6246] ? sock_poll+0x420/0x420 [ 119.809701][ T6246] __se_sys_ioctl+0xfa/0x170 [ 119.814431][ T6246] do_syscall_64+0x4c/0xa0 [ 119.819136][ T6246] ? clear_bhb_loop+0x30/0x80 [ 119.823910][ T6246] ? clear_bhb_loop+0x30/0x80 [ 119.829439][ T6246] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.835968][ T6246] RIP: 0033:0x7f2698944199 [ 119.840418][ T6246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.860129][ T6246] RSP: 002b:00007f2696b9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.868587][ T6246] RAX: ffffffffffffffda RBX: 00007f2698bcbfa0 RCX: 00007f2698944199 [ 119.876569][ T6246] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000008 [ 119.884562][ T6246] RBP: 00007f2696b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 119.892538][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.900508][ T6246] R13: 00007f2698bcc038 R14: 00007f2698bcbfa0 R15: 00007fff6808d158 [ 119.908512][ T6246] [ 120.008631][ T6251] netlink: 132 bytes leftover after parsing attributes in process `syz.3.735'. [ 120.260145][ T6264] FAULT_INJECTION: forcing a failure. [ 120.260145][ T6264] name failslab, interval 1, probability 0, space 0, times 0 [ 120.282565][ T6264] CPU: 1 PID: 6264 Comm: syz.1.737 Not tainted syzkaller #0 [ 120.289904][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 120.300089][ T6264] Call Trace: [ 120.303406][ T6264] [ 120.306372][ T6264] dump_stack_lvl+0x188/0x250 [ 120.311087][ T6264] ? show_regs_print_info+0x20/0x20 [ 120.316319][ T6264] ? load_image+0x410/0x410 [ 120.320939][ T6264] ? __might_sleep+0xf0/0xf0 [ 120.325588][ T6264] ? __lock_acquire+0x7d40/0x7d40 [ 120.330685][ T6264] should_fail+0x383/0x4b0 [ 120.335256][ T6264] should_failslab+0x5/0x20 [ 120.339792][ T6264] slab_pre_alloc_hook+0x51/0xc0 [ 120.344806][ T6264] ? shmem_match+0x160/0x160 [ 120.349431][ T6264] ? shmem_alloc_inode+0x16/0x30 [ 120.354407][ T6264] kmem_cache_alloc+0x3d/0x280 [ 120.359228][ T6264] ? shmem_match+0x160/0x160 [ 120.363865][ T6264] shmem_alloc_inode+0x16/0x30 [ 120.368663][ T6264] new_inode_pseudo+0x5f/0x210 [ 120.373475][ T6264] new_inode+0x25/0x1d0 [ 120.377686][ T6264] shmem_get_inode+0x304/0xa40 [ 120.382525][ T6264] shmem_mknod+0x55/0x1b0 [ 120.386904][ T6264] ? shmem_mkdir+0x11/0x60 [ 120.391350][ T6264] shmem_mkdir+0x27/0x60 [ 120.395606][ T6264] vfs_mkdir+0x386/0x570 [ 120.399894][ T6264] do_mkdirat+0x1dd/0x5c0 [ 120.404235][ T6264] ? vfs_mkdir+0x570/0x570 [ 120.408659][ T6264] ? getname_flags+0x1f9/0x4f0 [ 120.413454][ T6264] __x64_sys_mkdir+0x6a/0x80 [ 120.418077][ T6264] do_syscall_64+0x4c/0xa0 [ 120.422495][ T6264] ? clear_bhb_loop+0x30/0x80 [ 120.427171][ T6264] ? clear_bhb_loop+0x30/0x80 [ 120.431852][ T6264] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.437749][ T6264] RIP: 0033:0x7fef5a405199 [ 120.442177][ T6264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.461957][ T6264] RSP: 002b:00007fef5865d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 120.470403][ T6264] RAX: ffffffffffffffda RBX: 00007fef5a68cfa0 RCX: 00007fef5a405199 [ 120.478380][ T6264] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000200000000040 [ 120.486354][ T6264] RBP: 00007fef5865d090 R08: 0000000000000000 R09: 0000000000000000 [ 120.494334][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.502403][ T6264] R13: 00007fef5a68d038 R14: 00007fef5a68cfa0 R15: 00007ffef7bb6bb8 [ 120.510500][ T6264] [ 120.913955][ T6271] device syzkaller0 entered promiscuous mode [ 121.272688][ T6280] netlink: 40 bytes leftover after parsing attributes in process `syz.0.743'. [ 121.338366][ T6280] device ipvlan1 entered promiscuous mode [ 121.446205][ T6300] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.748'. [ 121.622702][ T6280] bridge0: port 3(ipvlan1) entered blocking state [ 121.683852][ T6280] bridge0: port 3(ipvlan1) entered disabled state [ 121.757738][ T6280] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 121.802825][ T6297] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.748'. [ 122.151838][ T6316] validate_nla: 4 callbacks suppressed [ 122.151855][ T6316] netlink: 'syz.0.754': attribute type 33 has an invalid length. [ 122.323133][ T6316] netlink: 164 bytes leftover after parsing attributes in process `syz.0.754'. [ 122.770482][ T6338] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.763'. [ 122.865588][ T6339] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.763'. [ 123.119038][ T6341] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.766'. [ 123.577060][ T6341] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 124.376144][ T6389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.395443][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.452938][ T6389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.482957][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.630310][ T6395] __nla_validate_parse: 2 callbacks suppressed [ 124.630343][ T6395] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.781'. [ 124.729887][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 124.776195][ T6404] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 124.809255][ T6404] netlink: 40 bytes leftover after parsing attributes in process `syz.3.787'. [ 124.839340][ T6404] bridge0: port 3(ipvlan1) entered blocking state [ 124.862880][ T6404] bridge0: port 3(ipvlan1) entered disabled state [ 124.903185][ T6404] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 125.001802][ T6406] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.788'. [ 125.040847][ T6414] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.788'. [ 125.681561][ T6425] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.795'. [ 125.926125][ T6438] device syzkaller0 entered promiscuous mode [ 125.941588][ T6444] netlink: 'syz.1.803': attribute type 10 has an invalid length. [ 125.990569][ T6440] device syzkaller0 entered promiscuous mode [ 126.002796][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 126.164921][ T6451] netlink: 34075 bytes leftover after parsing attributes in process `syz.1.805'. [ 126.192830][ T6451] netlink: 794 bytes leftover after parsing attributes in process `syz.1.805'. [ 126.296058][ T6458] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.808'. [ 126.679546][ T6490] netlink: 'syz.4.821': attribute type 2 has an invalid length. [ 126.692355][ T6490] netlink: 'syz.4.821': attribute type 8 has an invalid length. [ 126.726797][ T6490] netlink: 132 bytes leftover after parsing attributes in process `syz.4.821'. [ 127.221737][ T6516] netlink: 'syz.2.834': attribute type 10 has an invalid length. [ 127.416743][ T6516] team0: Device gre0 is of different type [ 127.506083][ T6517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.519740][ T6517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.637261][ T6517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.645566][ T6517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.438231][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.469238][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.499563][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.515714][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.645589][ T6594] FAULT_INJECTION: forcing a failure. [ 128.645589][ T6594] name failslab, interval 1, probability 0, space 0, times 0 [ 128.689063][ T6594] CPU: 1 PID: 6594 Comm: syz.1.861 Not tainted syzkaller #0 [ 128.696387][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.706459][ T6594] Call Trace: [ 128.709771][ T6594] [ 128.712736][ T6594] dump_stack_lvl+0x188/0x250 [ 128.717438][ T6594] ? show_regs_print_info+0x20/0x20 [ 128.722661][ T6594] ? load_image+0x410/0x410 [ 128.727200][ T6594] should_fail+0x383/0x4b0 [ 128.731640][ T6594] should_failslab+0x5/0x20 [ 128.736158][ T6594] slab_pre_alloc_hook+0x51/0xc0 [ 128.741378][ T6594] __kmalloc_node_track_caller+0x68/0x3a0 [ 128.747123][ T6594] ? wireless_send_event+0x2ad/0xb60 [ 128.752429][ T6594] ? __alloc_skb+0xf4/0x750 [ 128.756953][ T6594] ? wireless_send_event+0x2ad/0xb60 [ 128.762528][ T6594] __alloc_skb+0x22c/0x750 [ 128.767150][ T6594] wireless_send_event+0x2ad/0xb60 [ 128.773162][ T6594] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 128.779603][ T6594] ? lockdep_hardirqs_on+0x94/0x140 [ 128.784906][ T6594] ? wireless_nlevent_flush+0x100/0x100 [ 128.790911][ T6594] ? ioctl_standard_call+0x116/0x250 [ 128.796214][ T6594] ioctl_standard_call+0x126/0x250 [ 128.801344][ T6594] ? __cfg80211_wext_giwname+0x30/0x30 [ 128.807129][ T6594] ? __cfg80211_wext_giwname+0x30/0x30 [ 128.812871][ T6594] wext_ioctl_dispatch+0x3da/0x470 [ 128.817997][ T6594] ? wext_ioctl_dispatch+0x470/0x470 [ 128.823287][ T6594] ? iw_handler_get_private+0x1e0/0x1e0 [ 128.828847][ T6594] wext_handle_ioctl+0x114/0x1d0 [ 128.833812][ T6594] ? call_commit_handler+0xf0/0xf0 [ 128.838951][ T6594] sock_ioctl+0x143/0x700 [ 128.843283][ T6594] ? sock_poll+0x420/0x420 [ 128.847709][ T6594] ? bpf_lsm_file_ioctl+0x5/0x10 [ 128.852642][ T6594] ? security_file_ioctl+0x7c/0xa0 [ 128.857840][ T6594] ? sock_poll+0x420/0x420 [ 128.862254][ T6594] __se_sys_ioctl+0xfa/0x170 [ 128.866845][ T6594] do_syscall_64+0x4c/0xa0 [ 128.871261][ T6594] ? clear_bhb_loop+0x30/0x80 [ 128.875951][ T6594] ? clear_bhb_loop+0x30/0x80 [ 128.880627][ T6594] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.886608][ T6594] RIP: 0033:0x7fef5a405199 [ 128.891020][ T6594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.910882][ T6594] RSP: 002b:00007fef5865d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.919395][ T6594] RAX: ffffffffffffffda RBX: 00007fef5a68cfa0 RCX: 00007fef5a405199 [ 128.927362][ T6594] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000008 [ 128.935329][ T6594] RBP: 00007fef5865d090 R08: 0000000000000000 R09: 0000000000000000 [ 128.943650][ T6594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.951619][ T6594] R13: 00007fef5a68d038 R14: 00007fef5a68cfa0 R15: 00007ffef7bb6bb8 [ 128.959599][ T6594] [ 129.223637][ T6617] netlink: 'syz.4.871': attribute type 10 has an invalid length. [ 129.270521][ T6617] team0: Device nlmon0 is of different type [ 129.361746][ T6625] device syzkaller0 entered promiscuous mode [ 130.003483][ T6657] netlink: 'syz.1.885': attribute type 10 has an invalid length. [ 130.022517][ T6657] __nla_validate_parse: 6 callbacks suppressed [ 130.022532][ T6657] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.885'. [ 130.100963][ T6655] netlink: 'syz.3.884': attribute type 29 has an invalid length. [ 130.132608][ T6657] netlink: 'syz.1.885': attribute type 39 has an invalid length. [ 130.880718][ T6655] netlink: 'syz.3.884': attribute type 29 has an invalid length. [ 130.898326][ T6667] netlink: 'syz.4.888': attribute type 2 has an invalid length. [ 130.922430][ T6667] netlink: 'syz.4.888': attribute type 8 has an invalid length. [ 130.944374][ T6667] netlink: 132 bytes leftover after parsing attributes in process `syz.4.888'. [ 131.350098][ T6694] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.899'. [ 131.616516][ T6696] device syzkaller0 entered promiscuous mode [ 132.269629][ T6721] sock: sock_timestamping_bind_phc: sock not bind to device [ 132.285989][ T6718] device syzkaller0 entered promiscuous mode [ 132.595677][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.602117][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.922378][ T6747] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.920'. [ 132.994952][ T6750] netlink: 'syz.3.918': attribute type 39 has an invalid length. [ 133.130332][ T6751] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.920'. [ 133.457969][ T6768] netlink: 'syz.4.925': attribute type 10 has an invalid length. [ 133.512455][ T6768] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.925'. [ 133.693647][ T6765] netlink: 'syz.4.925': attribute type 39 has an invalid length. [ 133.909784][ T6781] netlink: 'syz.3.931': attribute type 10 has an invalid length. [ 134.248236][ T6792] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.937'. [ 134.295200][ T6794] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.937'. [ 134.510434][ T6808] netlink: 'syz.1.939': attribute type 39 has an invalid length. [ 134.891138][ T6806] netlink: 'syz.4.941': attribute type 1 has an invalid length. [ 134.902173][ T6806] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.941'. [ 134.931090][ T6806] netlink: 9 bytes leftover after parsing attributes in process `syz.4.941'. [ 135.068025][ T6821] netlink: 'syz.0.947': attribute type 10 has an invalid length. [ 135.098014][ T6821] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.947'. [ 135.196790][ T6825] device syzkaller0 entered promiscuous mode [ 135.224371][ T6821] netlink: 'syz.0.947': attribute type 39 has an invalid length. [ 135.228861][ T6827] netlink: 'syz.4.949': attribute type 2 has an invalid length. [ 135.283092][ T6827] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.949'. [ 136.094069][ T6860] netlink: 'syz.0.954': attribute type 39 has an invalid length. [ 136.285872][ T6864] netlink: 200636 bytes leftover after parsing attributes in process `syz.3.958'. [ 136.301900][ T6865] IPv6: NLM_F_CREATE should be specified when creating new route [ 136.737427][ T6888] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.965'. [ 137.650562][ T6905] netlink: 40 bytes leftover after parsing attributes in process `syz.3.972'. [ 137.683464][ T6905] device ipvlan1 entered promiscuous mode [ 137.752488][ T6905] bridge0: port 3(ipvlan1) entered blocking state [ 137.768686][ T6905] bridge0: port 3(ipvlan1) entered disabled state [ 137.833088][ T6905] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 138.178988][ T6928] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.980'. [ 139.919376][ T6978] validate_nla: 2 callbacks suppressed [ 139.919405][ T6978] netlink: 'syz.3.1001': attribute type 21 has an invalid length. [ 139.950319][ T6978] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1001'. [ 140.499886][ T7006] netlink: 'syz.2.1010': attribute type 16 has an invalid length. [ 140.521095][ T7006] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1010'. [ 140.696463][ T7009] device syzkaller0 entered promiscuous mode [ 140.831216][ T7016] device veth1_macvtap left promiscuous mode [ 141.063122][ T7029] netlink: 'syz.0.1018': attribute type 10 has an invalid length. [ 141.420786][ T7040] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1022'. [ 141.497543][ T7049] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1022'. [ 141.995104][ T7071] netlink: 'syz.0.1035': attribute type 9 has an invalid length. [ 142.012245][ T7071] netlink: 200636 bytes leftover after parsing attributes in process `syz.0.1035'. [ 142.141985][ T7086] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1040'. [ 142.161434][ T7086] device hsr_slave_0 left promiscuous mode [ 142.168643][ T7086] device hsr_slave_1 left promiscuous mode [ 142.356860][ T7101] netlink: 'syz.4.1047': attribute type 2 has an invalid length. [ 142.365084][ T7101] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1047'. [ 142.959207][ T7128] delete_channel: no stack [ 142.971576][ T7128] delete_channel: no stack [ 143.230229][ T7144] device veth1_macvtap left promiscuous mode [ 143.296326][ T7149] netlink: 191644 bytes leftover after parsing attributes in process `syz.0.1064'. [ 143.633787][ T7173] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1071'. [ 144.208216][ T7193] device veth1_macvtap left promiscuous mode [ 144.678065][ T7224] netlink: 'syz.3.1090': attribute type 10 has an invalid length. [ 145.129475][ T7256] netlink: 'syz.0.1103': attribute type 9 has an invalid length. [ 145.142785][ T7256] netlink: 200636 bytes leftover after parsing attributes in process `syz.0.1103'. [ 145.276273][ T7272] netlink: 'syz.3.1108': attribute type 12 has an invalid length. [ 145.285086][ T7272] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1108'. [ 145.285317][ T7264] netlink: 'syz.2.1105': attribute type 3 has an invalid length. [ 145.441902][ T7282] device syzkaller0 entered promiscuous mode [ 145.456831][ T7284] netlink: 'syz.2.1114': attribute type 10 has an invalid length. [ 145.456894][ T7281] FAULT_INJECTION: forcing a failure. [ 145.456894][ T7281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.471699][ T7284] bridge0: port 3(ipvlan1) entered blocking state [ 145.505407][ T7284] bridge0: port 3(ipvlan1) entered disabled state [ 145.519468][ T7281] CPU: 0 PID: 7281 Comm: syz.4.1111 Not tainted syzkaller #0 [ 145.521181][ T7284] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 145.526871][ T7281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.526886][ T7281] Call Trace: [ 145.526892][ T7281] [ 145.526901][ T7281] dump_stack_lvl+0x188/0x250 [ 145.526929][ T7281] ? show_regs_print_info+0x20/0x20 [ 145.526948][ T7281] ? load_image+0x410/0x410 [ 145.526972][ T7281] ? __lock_acquire+0x7d40/0x7d40 [ 145.526991][ T7281] ? lockdep_hardirqs_on+0x94/0x140 [ 145.527015][ T7281] should_fail+0x383/0x4b0 [ 145.527041][ T7281] _copy_to_user+0x2e/0x130 [ 145.527060][ T7281] simple_read_from_buffer+0xe3/0x150 [ 145.527086][ T7281] proc_fail_nth_read+0x1a6/0x220 [ 145.527110][ T7281] ? proc_fault_inject_write+0x310/0x310 [ 145.527135][ T7281] ? fsnotify_perm+0x254/0x560 [ 145.527154][ T7281] ? proc_fault_inject_write+0x310/0x310 [ 145.527175][ T7281] vfs_read+0x2ff/0xd50 [ 145.527196][ T7281] ? __lock_acquire+0x7d40/0x7d40 [ 145.527219][ T7281] ? kernel_read+0x1e0/0x1e0 [ 145.527234][ T7281] ? rcu_nmi_exit+0x6f/0xf0 [ 145.527274][ T7281] ? mutex_lock_nested+0x17/0x20 [ 145.527292][ T7281] ? __fdget_pos+0x2bf/0x370 [ 145.527307][ T7281] ? ksys_read+0x70/0x260 [ 145.527327][ T7281] ksys_read+0x153/0x260 [ 145.527355][ T7281] ? vfs_write+0xd70/0xd70 [ 145.527377][ T7281] ? syscall_enter_from_user_mode+0x2a/0x70 [ 145.527402][ T7281] do_syscall_64+0x4c/0xa0 [ 145.527419][ T7281] ? clear_bhb_loop+0x30/0x80 [ 145.527436][ T7281] ? clear_bhb_loop+0x30/0x80 [ 145.527455][ T7281] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.527473][ T7281] RIP: 0033:0x7fc680f099ce [ 145.527491][ T7281] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 145.527505][ T7281] RSP: 002b:00007fc67f1a0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.527526][ T7281] RAX: ffffffffffffffda RBX: 00007fc67f1a16c0 RCX: 00007fc680f099ce [ 145.527539][ T7281] RDX: 000000000000000f RSI: 00007fc67f1a10a0 RDI: 0000000000000009 [ 145.527550][ T7281] RBP: 00007fc67f1a1090 R08: 0000000000000000 R09: 0000000000000000 [ 145.527562][ T7281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.527572][ T7281] R13: 00007fc6811d1038 R14: 00007fc6811d0fa0 R15: 00007fff5cc09d18 [ 145.527603][ T7281] [ 145.781848][ T7298] netlink: 'syz.1.1119': attribute type 10 has an invalid length. [ 145.799224][ T7298] __nla_validate_parse: 3 callbacks suppressed [ 145.799455][ T7298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1119'. [ 145.820188][ T7298] bridge0: port 3(ipvlan1) entered blocking state [ 145.836310][ T7298] bridge0: port 3(ipvlan1) entered disabled state [ 145.857751][ T7298] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 146.588430][ T7337] netlink: 'syz.3.1136': attribute type 29 has an invalid length. [ 146.647318][ T7337] netlink: 'syz.3.1136': attribute type 29 has an invalid length. [ 146.679505][ T7340] netlink: 'syz.3.1136': attribute type 29 has an invalid length. [ 146.710575][ T7341] netlink: 'syz.3.1136': attribute type 29 has an invalid length. [ 146.728746][ T7337] netlink: 'syz.3.1136': attribute type 29 has an invalid length. [ 148.821780][ T7367] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1143'. [ 149.181779][ T7395] device syzkaller0 entered promiscuous mode [ 149.398778][ T7400] team0: Device gre0 is of different type [ 149.418718][ T7409] netlink: 200636 bytes leftover after parsing attributes in process `syz.1.1158'. [ 150.055066][ T7414] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1159'. [ 150.065563][ T7414] device hsr_slave_0 left promiscuous mode [ 150.075650][ T7414] device hsr_slave_1 left promiscuous mode [ 150.411293][ T7435] validate_nla: 10 callbacks suppressed [ 150.411307][ T7435] netlink: 'syz.3.1167': attribute type 2 has an invalid length. [ 150.487139][ T7435] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1167'. [ 150.569064][ T7443] netlink: 'syz.1.1171': attribute type 21 has an invalid length. [ 150.581985][ T7443] netlink: 'syz.1.1171': attribute type 6 has an invalid length. [ 150.595939][ T7443] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1171'. [ 150.687657][ T7460] device syzkaller0 entered promiscuous mode [ 150.969372][ T7467] netlink: 'syz.0.1176': attribute type 2 has an invalid length. [ 151.011372][ T7467] netlink: 'syz.0.1176': attribute type 8 has an invalid length. [ 151.022873][ T7467] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1176'. [ 151.236190][ T7476] netlink: 'syz.0.1178': attribute type 29 has an invalid length. [ 151.254360][ T7476] netlink: 'syz.0.1178': attribute type 29 has an invalid length. [ 151.280615][ T7479] netlink: 'syz.0.1178': attribute type 29 has an invalid length. [ 151.335786][ T7476] netlink: 'syz.0.1178': attribute type 29 has an invalid length. [ 151.350691][ T7482] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 151.372673][ T7483] netlink: 'syz.3.1182': attribute type 9 has an invalid length. [ 151.380421][ T7483] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1182'. [ 151.663837][ T7497] netlink: 13951 bytes leftover after parsing attributes in process `syz.2.1186'. [ 151.730762][ T7505] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1186'. [ 151.828515][ T7508] device syzkaller0 entered promiscuous mode [ 152.056744][ T7523] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1196'. [ 152.207252][ T7528] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1198'. [ 152.302929][ T7503] syz.0.1191 (7503) used greatest stack depth: 16640 bytes left [ 152.535174][ T7535] team0: Device gre0 is of different type [ 152.611961][ T7538] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1202'. [ 152.814628][ T7539] device syzkaller0 entered promiscuous mode [ 153.423918][ T7581] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1217'. [ 153.470678][ T7581] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 153.583017][ T7591] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1222'. [ 153.657692][ T7596] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1223'. [ 153.771913][ T7596] bridge0: port 3(ipvlan1) entered blocking state [ 153.785680][ T7596] bridge0: port 3(ipvlan1) entered disabled state [ 153.806926][ T7596] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 154.829781][ T7650] device syzkaller0 entered promiscuous mode [ 154.927045][ T7656] device syzkaller0 entered promiscuous mode [ 155.037332][ T7661] team0: Port device geneve1 added [ 155.078815][ T7668] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 155.167488][ T7664] device veth1_macvtap left promiscuous mode [ 155.342963][ T7683] device wlan1 entered promiscuous mode [ 155.447103][ T7680] device wlan1 left promiscuous mode [ 155.697001][ T7696] device syzkaller0 entered promiscuous mode [ 156.366136][ T7756] validate_nla: 17 callbacks suppressed [ 156.366150][ T7756] netlink: 'syz.1.1284': attribute type 10 has an invalid length. [ 156.376978][ T7760] __nla_validate_parse: 8 callbacks suppressed [ 156.376992][ T7760] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1286'. [ 156.477067][ T7765] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1286'. [ 156.546807][ T7765] netlink: zone id is out of range [ 156.630735][ T7765] netlink: zone id is out of range [ 157.017966][ T7812] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1294'. [ 158.248829][ T7870] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1316'. [ 158.376015][ T7876] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1316'. [ 158.776320][ T7895] netlink: 'syz.0.1324': attribute type 41 has an invalid length. [ 158.895710][ T7903] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1330'. [ 159.037017][ T7913] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1334'. [ 159.044853][ T7911] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1333'. [ 159.089773][ T7903] netlink: 'syz.1.1330': attribute type 9 has an invalid length. [ 159.117203][ T7903] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1330'. [ 159.149300][ T7922] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.1337'. [ 159.162801][ T7922] openvswitch: netlink: Flow key attr not present in new flow. [ 159.569790][ T7932] openvswitch: netlink: Flow actions attr not present in new flow. [ 159.772607][ T7946] netlink: 'syz.0.1347': attribute type 27 has an invalid length. [ 159.785726][ T7946] netlink: 'syz.0.1347': attribute type 3 has an invalid length. [ 159.905029][ T7960] netlink: 'syz.1.1353': attribute type 9 has an invalid length. [ 160.103200][ T7974] netlink: 'syz.4.1358': attribute type 1 has an invalid length. [ 160.111643][ T7973] netlink: 'syz.4.1358': attribute type 1 has an invalid length. [ 160.191455][ T7984] netlink: 'syz.4.1362': attribute type 10 has an invalid length. [ 160.218161][ T7984] team0: Device gre0 is of different type [ 160.575235][ T7993] netlink: 'syz.0.1366': attribute type 4 has an invalid length. [ 161.282516][ T8025] bridge0: port 3(ipvlan1) entered blocking state [ 161.289865][ T8025] bridge0: port 3(ipvlan1) entered disabled state [ 161.340271][ T8025] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 161.371696][ T8030] bridge0: port 3(ipvlan1) entered blocking state [ 161.379653][ T8030] bridge0: port 3(ipvlan1) entered disabled state [ 161.400117][ T8030] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 161.527358][ T8041] __nla_validate_parse: 12 callbacks suppressed [ 161.527373][ T8041] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1382'. [ 161.666786][ T8048] validate_nla: 3 callbacks suppressed [ 161.666801][ T8048] netlink: 'syz.1.1385': attribute type 2 has an invalid length. [ 161.685352][ T8048] netlink: 'syz.1.1385': attribute type 8 has an invalid length. [ 161.697407][ T8048] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1385'. [ 161.860173][ T8074] netlink: 'syz.3.1393': attribute type 9 has an invalid length. [ 161.868818][ T8074] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1393'. [ 162.134783][ T8084] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1397'. [ 162.234697][ T8094] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1402'. [ 162.276064][ T8097] netlink: 'syz.4.1403': attribute type 3 has an invalid length. [ 162.312608][ T8097] netlink: 'syz.4.1403': attribute type 1 has an invalid length. [ 162.331286][ T8098] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1402'. [ 162.345847][ T8097] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1403'. [ 162.768170][ T8124] netlink: 'syz.0.1408': attribute type 21 has an invalid length. [ 162.813712][ T8124] netlink: 'syz.0.1408': attribute type 1 has an invalid length. [ 162.989645][ T8135] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 163.586415][ T8150] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1420'. [ 163.814217][ T8160] netlink: 'syz.3.1424': attribute type 21 has an invalid length. [ 163.961959][ T8160] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1424'. [ 163.994825][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 164.070068][ T8160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.227538][ T8189] device syzkaller0 entered promiscuous mode [ 164.272139][ T8191] netlink: 'syz.2.1434': attribute type 10 has an invalid length. [ 164.877358][ T8208] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1440'. [ 164.901612][ T8208] : renamed from caif0 [ 164.909348][ T8208] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 164.944226][ T8208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.951520][ T8208] IPv6: NLM_F_CREATE should be set when creating new route [ 164.958833][ T8208] IPv6: NLM_F_CREATE should be set when creating new route [ 164.966085][ T8208] IPv6: NLM_F_CREATE should be set when creating new route [ 165.210135][ T8226] pimreg1: tun_chr_ioctl cmd 1074025677 [ 165.236655][ T8226] pimreg1: linktype set to 774 [ 165.336512][ T8233] netlink: 'syz.0.1449': attribute type 2 has an invalid length. [ 165.565715][ T8238] device syzkaller0 entered promiscuous mode [ 166.105361][ T8271] pimreg: tun_chr_ioctl cmd 1074025677 [ 166.120836][ T8271] pimreg: linktype set to 6 [ 166.536901][ T8274] __nla_validate_parse: 3 callbacks suppressed [ 166.536916][ T8274] netlink: 200636 bytes leftover after parsing attributes in process `syz.2.1462'. [ 166.680600][ T8285] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1464'. [ 166.851638][ T8289] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1467'. [ 166.931758][ T8298] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1467'. [ 167.107130][ T8313] validate_nla: 2 callbacks suppressed [ 167.107147][ T8313] netlink: 'syz.2.1478': attribute type 29 has an invalid length. [ 167.144481][ T8313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1478'. [ 167.186496][ T8310] device syzkaller0 entered promiscuous mode [ 167.219279][ T8313] netlink: 'syz.2.1478': attribute type 29 has an invalid length. [ 167.241317][ T8313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1478'. [ 167.297420][ T8321] FAULT_INJECTION: forcing a failure. [ 167.297420][ T8321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.397475][ T8321] CPU: 0 PID: 8321 Comm: syz.1.1480 Not tainted syzkaller #0 [ 167.405192][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.415474][ T8321] Call Trace: [ 167.418799][ T8321] [ 167.421969][ T8321] dump_stack_lvl+0x188/0x250 [ 167.426723][ T8321] ? show_regs_print_info+0x20/0x20 [ 167.432584][ T8321] ? load_image+0x410/0x410 [ 167.437440][ T8321] ? __lock_acquire+0x7d40/0x7d40 [ 167.442776][ T8321] should_fail+0x383/0x4b0 [ 167.447384][ T8321] _copy_from_user+0x2e/0x170 [ 167.452438][ T8321] perf_copy_attr+0x167/0x820 [ 167.457464][ T8321] __se_sys_perf_event_open+0xf5/0x1bb0 [ 167.463293][ T8321] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 167.469073][ T8321] ? lockdep_hardirqs_on+0x94/0x140 [ 167.474577][ T8321] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 167.480272][ T8321] do_syscall_64+0x4c/0xa0 [ 167.484735][ T8321] ? clear_bhb_loop+0x30/0x80 [ 167.489453][ T8321] ? clear_bhb_loop+0x30/0x80 [ 167.494208][ T8321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.500234][ T8321] RIP: 0033:0x7fef5a405199 [ 167.504708][ T8321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.524353][ T8321] RSP: 002b:00007fef5865d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 167.532850][ T8321] RAX: ffffffffffffffda RBX: 00007fef5a68cfa0 RCX: 00007fef5a405199 [ 167.540870][ T8321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000012c0 [ 167.548896][ T8321] RBP: 00007fef5865d090 R08: 0000000000000000 R09: 0000000000000000 [ 167.557007][ T8321] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 167.565199][ T8321] R13: 00007fef5a68d038 R14: 00007fef5a68cfa0 R15: 00007ffef7bb6bb8 [ 167.573310][ T8321] [ 167.636201][ T8313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.646411][ T8313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.655053][ T8313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.667458][ T8313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.728495][ T8327] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1482'. [ 167.738602][ T8332] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1484'. [ 167.864122][ T8342] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1489'. [ 168.121914][ T8364] netlink: 'syz.0.1495': attribute type 10 has an invalid length. [ 168.156701][ T8366] netlink: 'syz.3.1496': attribute type 9 has an invalid length. [ 168.192880][ T8366] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1496'. [ 168.354862][ T8370] netlink: 'syz.2.1498': attribute type 25 has an invalid length. [ 168.375815][ T8370] netlink: 'syz.2.1498': attribute type 25 has an invalid length. [ 168.473858][ T8379] device syzkaller0 entered promiscuous mode [ 168.559294][ T8380] device syzkaller0 entered promiscuous mode [ 169.006264][ T8402] netlink: 'syz.1.1506': attribute type 10 has an invalid length. [ 169.287147][ T8402] team0: Device gre0 is of different type [ 169.563169][ T8418] netlink: 'syz.0.1513': attribute type 10 has an invalid length. [ 169.713870][ T8425] netlink: 'syz.1.1514': attribute type 10 has an invalid length. [ 169.753944][ T8425] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 169.792252][ T8426] netlink: 'syz.3.1516': attribute type 2 has an invalid length. [ 170.436751][ T8444] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 170.495023][ T8452] IPv6: syzkaller: Disabled Multicast RS [ 171.436910][ T8479] device syzkaller0 entered promiscuous mode [ 171.758492][ T8503] __nla_validate_parse: 7 callbacks suppressed [ 171.758508][ T8503] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1541'. [ 171.896311][ T8511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1545'. [ 171.917955][ T8509] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1544'. [ 171.986549][ T8517] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1544'. [ 172.000496][ T8518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1547'. [ 172.082218][ T8518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1547'. [ 172.422215][ T8533] device syzkaller0 entered promiscuous mode [ 172.518267][ T8539] validate_nla: 7 callbacks suppressed [ 172.518322][ T8539] netlink: 'syz.0.1557': attribute type 10 has an invalid length. [ 172.545182][ T8539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.607306][ T8539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.675032][ T8539] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 172.757901][ T8549] netlink: 'syz.3.1561': attribute type 10 has an invalid length. [ 172.853866][ T8560] netlink: 'syz.3.1567': attribute type 9 has an invalid length. [ 172.879364][ T8560] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1567'. [ 172.903064][ T8564] netlink: 'syz.0.1565': attribute type 29 has an invalid length. [ 172.911091][ T8564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1565'. [ 172.965476][ T8564] netlink: 'syz.0.1565': attribute type 29 has an invalid length. [ 172.995055][ T8564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1565'. [ 173.078834][ T8569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.099641][ T8569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.741408][ T8590] device syzkaller0 entered promiscuous mode [ 173.895055][ T8595] device syzkaller0 entered promiscuous mode [ 173.911319][ T8601] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1580'. [ 174.021227][ T8604] netlink: 'syz.0.1581': attribute type 10 has an invalid length. [ 174.208246][ T8604] team0: Device gre0 is of different type [ 174.919716][ T8632] device syzkaller0 entered promiscuous mode [ 175.398515][ T8684] IPv6: pim6reg1: Disabled Multicast RS [ 175.448274][ T8685] netlink: 'syz.3.1606': attribute type 8 has an invalid length. [ 175.522620][ T8684] netlink: 'syz.3.1606': attribute type 13 has an invalid length. [ 175.989615][ T8706] netlink: 'syz.4.1610': attribute type 17 has an invalid length. [ 176.271589][ T8716] netlink: 'syz.0.1614': attribute type 29 has an invalid length. [ 177.325555][ T8770] __nla_validate_parse: 3 callbacks suppressed [ 177.325570][ T8770] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1634'. [ 178.758651][ T8785] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1637'. [ 178.868919][ T8784] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1637'. [ 180.325988][ T8797] validate_nla: 3 callbacks suppressed [ 180.326103][ T8797] netlink: 'syz.2.1641': attribute type 10 has an invalid length. [ 180.428255][ T8797] team0: Device vxcan1 is of different type [ 180.514720][ T8799] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1642'. [ 180.550538][ T8800] netlink: 'syz.4.1639': attribute type 21 has an invalid length. [ 180.581191][ T8800] netlink: 'syz.4.1639': attribute type 6 has an invalid length. [ 180.603482][ T8800] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1639'. [ 180.676508][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1645'. [ 180.705744][ T8809] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1645'. [ 181.068963][ T8827] netlink: 'syz.0.1652': attribute type 3 has an invalid length. [ 181.422503][ T8844] FAULT_INJECTION: forcing a failure. [ 181.422503][ T8844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.461718][ T8844] CPU: 0 PID: 8844 Comm: syz.0.1659 Not tainted syzkaller #0 [ 181.469145][ T8844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 181.479240][ T8844] Call Trace: [ 181.482533][ T8844] [ 181.485475][ T8844] dump_stack_lvl+0x188/0x250 [ 181.490185][ T8844] ? show_regs_print_info+0x20/0x20 [ 181.495393][ T8844] ? load_image+0x410/0x410 [ 181.499930][ T8844] ? __lock_acquire+0x7d40/0x7d40 [ 181.504996][ T8844] should_fail+0x383/0x4b0 [ 181.509443][ T8844] _copy_from_user+0x2e/0x170 [ 181.514144][ T8844] strndup_user+0xae/0x150 [ 181.518584][ T8844] perf_uprobe_init+0x5d/0x190 [ 181.523377][ T8844] perf_uprobe_event_init+0xe2/0x170 [ 181.528688][ T8844] perf_try_init_event+0x12b/0x3d0 [ 181.533818][ T8844] perf_event_alloc+0xf78/0x21d0 [ 181.538785][ T8844] ? _raw_spin_unlock+0x24/0x40 [ 181.543678][ T8844] __se_sys_perf_event_open+0x6f5/0x1bb0 [ 181.549354][ T8844] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 181.555043][ T8844] ? lockdep_hardirqs_on+0x94/0x140 [ 181.560250][ T8844] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 181.565897][ T8844] do_syscall_64+0x4c/0xa0 [ 181.570321][ T8844] ? clear_bhb_loop+0x30/0x80 [ 181.575005][ T8844] ? clear_bhb_loop+0x30/0x80 [ 181.579699][ T8844] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.585607][ T8844] RIP: 0033:0x7f2698944199 [ 181.590047][ T8844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.609680][ T8844] RSP: 002b:00007f2696b9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 181.618119][ T8844] RAX: ffffffffffffffda RBX: 00007f2698bcbfa0 RCX: 00007f2698944199 [ 181.626104][ T8844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000012c0 [ 181.634084][ T8844] RBP: 00007f2696b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 181.642063][ T8844] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 181.650040][ T8844] R13: 00007f2698bcc038 R14: 00007f2698bcbfa0 R15: 00007fff6808d158 [ 181.658064][ T8844] [ 181.702348][ T8847] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1661'. [ 181.788491][ T8847] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1661'. [ 181.911587][ T8852] device syzkaller0 entered promiscuous mode [ 182.355913][ T8870] netlink: 'syz.0.1668': attribute type 2 has an invalid length. [ 182.416344][ T8870] netlink: 'syz.0.1668': attribute type 8 has an invalid length. [ 182.433982][ T8870] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1668'. [ 182.624957][ T8884] bridge0: port 3(ip6gretap0) entered blocking state [ 182.645845][ T8884] bridge0: port 3(ip6gretap0) entered disabled state [ 182.666937][ T8884] device ip6gretap0 entered promiscuous mode [ 182.686298][ T8884] bridge0: port 3(ip6gretap0) entered blocking state [ 182.693531][ T8884] bridge0: port 3(ip6gretap0) entered forwarding state [ 182.739770][ T8885] netlink: 'syz.0.1673': attribute type 10 has an invalid length. [ 182.804560][ T8885] team0: Device vxcan1 is of different type [ 183.055170][ T8899] device syzkaller0 entered promiscuous mode [ 184.110646][ T8949] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1698'. [ 184.170409][ T8952] netlink: 'syz.4.1699': attribute type 9 has an invalid length. [ 184.214975][ T8952] netlink: 200636 bytes leftover after parsing attributes in process `syz.4.1699'. [ 184.549861][ T8962] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1702'. [ 184.569091][ T8965] netlink: 'syz.0.1704': attribute type 10 has an invalid length. [ 184.630252][ T8967] netlink: 'syz.1.1705': attribute type 9 has an invalid length. [ 184.655708][ T8967] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1705'. [ 184.683358][ T8976] delete_channel: no stack [ 184.687910][ T8976] delete_channel: no stack [ 184.729039][ T8970] device syzkaller0 entered promiscuous mode [ 185.068740][ T8990] FAULT_INJECTION: forcing a failure. [ 185.068740][ T8990] name failslab, interval 1, probability 0, space 0, times 0 [ 185.098884][ T8990] CPU: 1 PID: 8990 Comm: syz.3.1713 Not tainted syzkaller #0 [ 185.106323][ T8990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 185.116404][ T8990] Call Trace: [ 185.119704][ T8990] [ 185.122651][ T8990] dump_stack_lvl+0x188/0x250 [ 185.127364][ T8990] ? show_regs_print_info+0x20/0x20 [ 185.132580][ T8990] ? load_image+0x410/0x410 [ 185.137111][ T8990] ? __lock_acquire+0x7d40/0x7d40 [ 185.142177][ T8990] should_fail+0x383/0x4b0 [ 185.146633][ T8990] should_failslab+0x5/0x20 [ 185.151153][ T8990] slab_pre_alloc_hook+0x51/0xc0 [ 185.156115][ T8990] ? getname_kernel+0x56/0x2e0 [ 185.160901][ T8990] kmem_cache_alloc+0x3d/0x280 [ 185.165702][ T8990] getname_kernel+0x56/0x2e0 [ 185.170354][ T8990] kern_path+0x1f/0x190 [ 185.174548][ T8990] create_local_trace_uprobe+0xaa/0x660 [ 185.180136][ T8990] ? bpf_get_uprobe_info+0x480/0x480 [ 185.185462][ T8990] ? _copy_from_user+0x111/0x170 [ 185.190437][ T8990] perf_uprobe_init+0xef/0x190 [ 185.195232][ T8990] perf_uprobe_event_init+0xe2/0x170 [ 185.200543][ T8990] perf_try_init_event+0x12b/0x3d0 [ 185.205685][ T8990] perf_event_alloc+0xf78/0x21d0 [ 185.210666][ T8990] ? _raw_spin_unlock+0x24/0x40 [ 185.215570][ T8990] __se_sys_perf_event_open+0x6f5/0x1bb0 [ 185.221253][ T8990] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 185.226961][ T8990] ? lockdep_hardirqs_on+0x94/0x140 [ 185.232180][ T8990] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 185.237839][ T8990] do_syscall_64+0x4c/0xa0 [ 185.242272][ T8990] ? clear_bhb_loop+0x30/0x80 [ 185.246966][ T8990] ? clear_bhb_loop+0x30/0x80 [ 185.251667][ T8990] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.257574][ T8990] RIP: 0033:0x7f2b1a94c199 [ 185.262009][ T8990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.281636][ T8990] RSP: 002b:00007f2b18ba4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 185.290083][ T8990] RAX: ffffffffffffffda RBX: 00007f2b1abd3fa0 RCX: 00007f2b1a94c199 [ 185.298081][ T8990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000012c0 [ 185.306071][ T8990] RBP: 00007f2b18ba4090 R08: 0000000000000000 R09: 0000000000000000 [ 185.314065][ T8990] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 185.322049][ T8990] R13: 00007f2b1abd4038 R14: 00007f2b1abd3fa0 R15: 00007ffeec8e7868 [ 185.330080][ T8990] [ 185.688067][ T9014] netlink: 'syz.0.1722': attribute type 9 has an invalid length. [ 185.711722][ T9014] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1722'. [ 185.872307][ T1325] Bluetooth: hci0: command 0x0406 tx timeout [ 185.879707][ T1325] Bluetooth: hci1: command 0x0406 tx timeout [ 185.895152][ T1325] Bluetooth: hci2: command 0x0406 tx timeout [ 185.909199][ T1325] Bluetooth: hci3: command 0x0406 tx timeout [ 185.922241][ T1325] Bluetooth: hci4: command 0x0406 tx timeout [ 186.456042][ T9018] device syzkaller0 entered promiscuous mode [ 186.508879][ T9028] netlink: 'syz.1.1728': attribute type 3 has an invalid length. [ 186.518541][ T9028] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1728'. [ 186.546646][ T9024] netlink: 'syz.2.1726': attribute type 9 has an invalid length. [ 186.564473][ T9024] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1726'. [ 186.584874][ T9031] delete_channel: no stack [ 186.613154][ T9031] delete_channel: no stack [ 186.926320][ T9043] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1733'. [ 186.980040][ T9050] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1736'. [ 187.018514][ T9053] netlink: 'syz.0.1735': attribute type 2 has an invalid length. [ 187.261364][ T9058] netlink: 'syz.1.1736': attribute type 15 has an invalid length. [ 187.269642][ T9058] netlink: 'syz.1.1736': attribute type 7 has an invalid length. [ 187.313583][ T9062] device syzkaller0 entered promiscuous mode [ 187.397043][ T9073] netlink: 'syz.4.1745': attribute type 9 has an invalid length. [ 187.454072][ T9076] delete_channel: no stack [ 187.477414][ T9076] delete_channel: no stack [ 187.766874][ T9097] __nla_validate_parse: 4 callbacks suppressed [ 187.766906][ T9097] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1754'. [ 187.940330][ T9097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.251460][ T9097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.409866][ T9097] bond0 (unregistering): Released all slaves [ 188.599161][ T9108] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1757'. [ 188.664356][ T9123] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1764'. [ 188.680117][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1764'. [ 189.317104][ T9149] netlink: 'syz.4.1775': attribute type 3 has an invalid length. [ 189.325949][ T9149] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1775'. [ 189.436224][ T9154] device syzkaller0 entered promiscuous mode [ 190.004466][ T9210] netlink: 'syz.2.1788': attribute type 9 has an invalid length. [ 190.022674][ T9210] netlink: 200636 bytes leftover after parsing attributes in process `syz.2.1788'. [ 190.036505][ T9212] netlink: 'syz.3.1789': attribute type 10 has an invalid length. [ 190.285812][ T9221] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1792'. [ 190.583863][ T9234] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1796'. [ 190.972451][ T9244] validate_nla: 2 callbacks suppressed [ 190.972468][ T9244] netlink: 'syz.2.1800': attribute type 33 has an invalid length. [ 191.039472][ T9244] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1800'. [ 191.078958][ T9250] netlink: 'syz.0.1804': attribute type 10 has an invalid length. [ 191.097387][ T9250] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1804'. [ 191.127666][ T9244] netlink: 'syz.2.1800': attribute type 39 has an invalid length. [ 191.270395][ T9259] netlink: 'syz.4.1807': attribute type 27 has an invalid length. [ 191.329825][ T9261] netlink: 'syz.3.1805': attribute type 2 has an invalid length. [ 191.381592][ T9268] netlink: 'syz.2.1810': attribute type 3 has an invalid length. [ 191.868575][ T9293] netlink: 'syz.0.1822': attribute type 3 has an invalid length. [ 192.380065][ T9313] netlink: 'syz.0.1830': attribute type 10 has an invalid length. [ 192.494663][ T9313] team0: Device gre0 is of different type [ 193.830879][ T9365] netlink: 'syz.0.1851': attribute type 9 has an invalid length. [ 193.851833][ T9365] __nla_validate_parse: 5 callbacks suppressed [ 193.851850][ T9365] netlink: 200636 bytes leftover after parsing attributes in process `syz.0.1851'. [ 194.039802][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.046289][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.223778][ T9389] netlink: 'syz.2.1861': attribute type 9 has an invalid length. [ 194.231560][ T9389] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1861'. [ 194.540265][ T9399] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1866'. [ 195.533502][ T9422] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1875'. [ 196.203968][ T9448] device syzkaller0 entered promiscuous mode [ 196.221591][ T9453] validate_nla: 1 callbacks suppressed [ 196.221607][ T9453] netlink: 'syz.0.1887': attribute type 10 has an invalid length. [ 196.273536][ T9453] team0: Device gre0 is of different type [ 196.400418][ T9462] netlink: 'syz.4.1891': attribute type 13 has an invalid length. [ 196.413337][ T9462] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1891'. [ 196.465627][ T9462] device syzkaller1 entered promiscuous mode [ 196.501291][ T9468] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1893'. [ 197.264961][ T9513] FAULT_INJECTION: forcing a failure. [ 197.264961][ T9513] name failslab, interval 1, probability 0, space 0, times 0 [ 197.321435][ T9513] CPU: 0 PID: 9513 Comm: syz.4.1911 Not tainted syzkaller #0 [ 197.328867][ T9513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 197.338952][ T9513] Call Trace: [ 197.342255][ T9513] [ 197.345214][ T9513] dump_stack_lvl+0x188/0x250 [ 197.349932][ T9513] ? show_regs_print_info+0x20/0x20 [ 197.355165][ T9513] ? load_image+0x410/0x410 [ 197.359713][ T9513] ? __might_sleep+0xf0/0xf0 [ 197.364340][ T9513] ? __lock_acquire+0x7d40/0x7d40 [ 197.369408][ T9513] should_fail+0x383/0x4b0 [ 197.373876][ T9513] should_failslab+0x5/0x20 [ 197.378450][ T9513] slab_pre_alloc_hook+0x51/0xc0 [ 197.383423][ T9513] ? trace_probe_init+0x295/0x560 [ 197.388493][ T9513] __kmalloc_track_caller+0x69/0x330 [ 197.393803][ T9513] ? trace_probe_init+0x295/0x560 [ 197.398959][ T9513] kstrdup+0x32/0x70 [ 197.402887][ T9513] trace_probe_init+0x295/0x560 [ 197.407803][ T9513] create_local_trace_uprobe+0x17f/0x660 [ 197.413492][ T9513] ? bpf_get_uprobe_info+0x480/0x480 [ 197.418897][ T9513] ? _copy_from_user+0x111/0x170 [ 197.423888][ T9513] perf_uprobe_init+0xef/0x190 [ 197.428684][ T9513] perf_uprobe_event_init+0xe2/0x170 [ 197.433996][ T9513] perf_try_init_event+0x12b/0x3d0 [ 197.439139][ T9513] perf_event_alloc+0xf78/0x21d0 [ 197.444113][ T9513] ? _raw_spin_unlock+0x24/0x40 [ 197.449011][ T9513] __se_sys_perf_event_open+0x6f5/0x1bb0 [ 197.454697][ T9513] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 197.460405][ T9513] ? lockdep_hardirqs_on+0x94/0x140 [ 197.465626][ T9513] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 197.471286][ T9513] do_syscall_64+0x4c/0xa0 [ 197.475718][ T9513] ? clear_bhb_loop+0x30/0x80 [ 197.480411][ T9513] ? clear_bhb_loop+0x30/0x80 [ 197.485128][ T9513] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.491048][ T9513] RIP: 0033:0x7fc680f49199 [ 197.495494][ T9513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.515123][ T9513] RSP: 002b:00007fc67f1a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 197.523576][ T9513] RAX: ffffffffffffffda RBX: 00007fc6811d0fa0 RCX: 00007fc680f49199 [ 197.531580][ T9513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000012c0 [ 197.539578][ T9513] RBP: 00007fc67f1a1090 R08: 0000000000000000 R09: 0000000000000000 [ 197.547582][ T9513] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 197.555585][ T9513] R13: 00007fc6811d1038 R14: 00007fc6811d0fa0 R15: 00007fff5cc09d18 [ 197.563639][ T9513] [ 197.779897][ T9513] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 198.038745][ T9550] netlink: 'syz.4.1925': attribute type 9 has an invalid length. [ 198.062123][ T9550] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1925'. [ 198.587118][ T9569] netlink: 'syz.0.1930': attribute type 23 has an invalid length. [ 198.615587][ T9569] netlink: 'syz.0.1930': attribute type 23 has an invalid length. [ 198.624349][ T9569] netlink: 'syz.0.1930': attribute type 23 has an invalid length. [ 198.659917][ T9569] netlink: 'syz.0.1930': attribute type 23 has an invalid length. [ 198.765423][ T9574] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.1932'. [ 199.440070][ T9614] netlink: 'syz.4.1948': attribute type 10 has an invalid length. [ 199.505382][ T9614] team0: Device gre0 is of different type [ 199.644023][ T9627] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1953'. [ 199.793992][ T9632] netlink: 'syz.3.1955': attribute type 1 has an invalid length. [ 199.833900][ T9632] netlink: 63743 bytes leftover after parsing attributes in process `syz.3.1955'. [ 199.916846][ T9628] netlink: 'syz.0.1949': attribute type 21 has an invalid length. [ 199.952422][ T9628] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1949'. [ 200.060254][ T9640] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1958'. [ 200.372445][ T9647] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1961'. [ 200.425451][ T9652] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1961'. [ 200.681116][ T9651] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1962'. [ 200.999955][ T9674] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1970'. [ 201.098761][ T9693] FAULT_INJECTION: forcing a failure. [ 201.098761][ T9693] name failslab, interval 1, probability 0, space 0, times 0 [ 201.142725][ T9693] CPU: 0 PID: 9693 Comm: syz.4.1975 Not tainted syzkaller #0 [ 201.150155][ T9693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 201.160236][ T9693] Call Trace: [ 201.163547][ T9693] [ 201.166498][ T9693] dump_stack_lvl+0x188/0x250 [ 201.171206][ T9693] ? show_regs_print_info+0x20/0x20 [ 201.176438][ T9693] ? load_image+0x410/0x410 [ 201.180980][ T9693] ? __might_sleep+0xf0/0xf0 [ 201.185598][ T9693] ? __lock_acquire+0x7d40/0x7d40 [ 201.190665][ T9693] should_fail+0x383/0x4b0 [ 201.195119][ T9693] should_failslab+0x5/0x20 [ 201.199641][ T9693] slab_pre_alloc_hook+0x51/0xc0 [ 201.204595][ T9693] ? trace_probe_init+0x2d1/0x560 [ 201.209659][ T9693] __kmalloc_track_caller+0x69/0x330 [ 201.214958][ T9693] ? trace_probe_init+0x2d1/0x560 [ 201.220015][ T9693] kstrdup+0x32/0x70 [ 201.223927][ T9693] trace_probe_init+0x2d1/0x560 [ 201.228825][ T9693] create_local_trace_uprobe+0x17f/0x660 [ 201.234500][ T9693] ? bpf_get_uprobe_info+0x480/0x480 [ 201.239815][ T9693] ? _copy_from_user+0x111/0x170 [ 201.244788][ T9693] perf_uprobe_init+0xef/0x190 [ 201.249576][ T9693] perf_uprobe_event_init+0xe2/0x170 [ 201.254891][ T9693] perf_try_init_event+0x12b/0x3d0 [ 201.260039][ T9693] perf_event_alloc+0xf78/0x21d0 [ 201.265015][ T9693] ? _raw_spin_unlock+0x24/0x40 [ 201.269914][ T9693] __se_sys_perf_event_open+0x6f5/0x1bb0 [ 201.275603][ T9693] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 201.281309][ T9693] ? lockdep_hardirqs_on+0x94/0x140 [ 201.286528][ T9693] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 201.292281][ T9693] do_syscall_64+0x4c/0xa0 [ 201.296722][ T9693] ? clear_bhb_loop+0x30/0x80 [ 201.301428][ T9693] ? clear_bhb_loop+0x30/0x80 [ 201.306138][ T9693] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.312054][ T9693] RIP: 0033:0x7fc680f49199 [ 201.316490][ T9693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.336121][ T9693] RSP: 002b:00007fc67f1a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 201.344562][ T9693] RAX: ffffffffffffffda RBX: 00007fc6811d0fa0 RCX: 00007fc680f49199 [ 201.352548][ T9693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000012c0 [ 201.360530][ T9693] RBP: 00007fc67f1a1090 R08: 0000000000000000 R09: 0000000000000000 [ 201.368499][ T9693] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 201.376468][ T9693] R13: 00007fc6811d1038 R14: 00007fc6811d0fa0 R15: 00007fff5cc09d18 [ 201.384476][ T9693] [ 201.412640][ T9693] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 201.673848][ T9710] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.1980'. [ 201.716207][ T9710] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 201.779314][ T9719] validate_nla: 4 callbacks suppressed [ 201.779333][ T9719] netlink: 'syz.1.1985': attribute type 9 has an invalid length. [ 201.795351][ T9719] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1985'. [ 201.941324][ T9725] netlink: 'syz.0.1986': attribute type 2 has an invalid length. [ 201.995478][ T9733] netlink: 'syz.4.1987': attribute type 29 has an invalid length. [ 202.024705][ T9733] netlink: 'syz.4.1987': attribute type 29 has an invalid length. [ 202.074033][ T9737] netlink: 'syz.4.1987': attribute type 29 has an invalid length. [ 202.104218][ T9733] netlink: 'syz.4.1987': attribute type 29 has an invalid length. [ 202.483319][ T9742] netlink: 'syz.1.1994': attribute type 21 has an invalid length. [ 202.728456][ T9759] netlink: 'syz.4.2001': attribute type 5 has an invalid length. [ 203.126372][ T9771] netlink: 'syz.4.2006': attribute type 2 has an invalid length. [ 203.443865][ T9798] netlink: 'syz.0.2013': attribute type 33 has an invalid length. [ 204.074710][ T9822] device syzkaller0 entered promiscuous mode [ 204.125663][ T9822] syzkaller0: tun_net_xmit 1280 [ 204.131129][ T9822] syzkaller0: create flow: hash 3952265438 index 1 [ 204.166528][ T9821] syzkaller0: delete flow: hash 3952265438 index 1 [ 204.688723][ T9849] __nla_validate_parse: 10 callbacks suppressed [ 204.688740][ T9849] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2033'. [ 204.788215][ T9849] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 204.909343][ T9852] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2034'. [ 206.735795][ T9953] device syzkaller0 entered promiscuous mode [ 206.952690][ T9969] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2073'. [ 207.547169][ T9996] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.2082'. [ 208.005931][T10010] device syzkaller0 entered promiscuous mode [ 208.501520][T10032] validate_nla: 6 callbacks suppressed [ 208.501607][T10032] netlink: 'syz.0.2099': attribute type 10 has an invalid length. [ 209.488935][T10032] team0: Port device hsr_slave_0 added [ 209.782153][T10047] device syzkaller0 entered promiscuous mode [ 209.990144][T10052] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2105'. [ 211.179746][T10104] netlink: 'syz.1.2122': attribute type 1 has an invalid length. [ 211.221346][T10105] device syzkaller0 entered promiscuous mode [ 211.227479][T10104] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2122'. [ 211.407600][T10113] netlink: 'syz.3.2128': attribute type 2 has an invalid length. [ 211.436795][T10113] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2128'. [ 211.519228][T10130] netlink: 'syz.2.2131': attribute type 2 has an invalid length. [ 211.541666][T10130] netlink: 'syz.2.2131': attribute type 8 has an invalid length. [ 211.572416][T10130] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2131'. [ 211.826805][T10136] pimreg: tun_chr_ioctl cmd 1074025677 [ 211.841835][T10136] pimreg: linktype set to 6 [ 212.029813][T10150] netlink: 'syz.1.2142': attribute type 10 has an invalid length. [ 212.275272][T10168] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2145'. [ 212.840572][T10186] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2152'. [ 212.901258][T10195] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2152'. [ 213.760103][T10211] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.2159'. [ 214.475978][T10236] netlink: 'syz.3.2168': attribute type 2 has an invalid length. [ 214.587304][T10236] netlink: 'syz.3.2168': attribute type 8 has an invalid length. [ 214.650914][T10236] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2168'. [ 214.791765][T10246] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2171'. [ 214.906204][T10248] netlink: 'syz.0.2172': attribute type 2 has an invalid length. [ 215.258599][T10292] __nla_validate_parse: 3 callbacks suppressed [ 215.258655][T10292] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2187'. [ 215.279324][T10290] netlink: 'syz.4.2187': attribute type 21 has an invalid length. [ 215.301307][T10285] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2185'. [ 215.386426][T10306] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.2190'. [ 215.390791][T10300] netlink: 'syz.0.2189': attribute type 29 has an invalid length. [ 215.438376][T10308] netlink: 'syz.2.2191': attribute type 21 has an invalid length. [ 215.463126][T10308] netlink: 'syz.2.2191': attribute type 1 has an invalid length. [ 215.484984][T10300] netlink: 'syz.0.2189': attribute type 29 has an invalid length. [ 215.515423][T10297] netlink: 'syz.0.2189': attribute type 29 has an invalid length. [ 215.666613][T10322] device sit0 entered promiscuous mode [ 215.790950][T10326] netlink: 'syz.4.2197': attribute type 2 has an invalid length. [ 215.806372][T10326] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2197'. [ 216.076332][T10349] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.2203'. [ 216.278519][T10368] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2215'. [ 216.299105][T10368] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 216.757109][T10397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2226'. [ 216.774525][T10397] device team0 entered promiscuous mode [ 216.785115][T10397] device team_slave_1 entered promiscuous mode [ 216.798052][T10397] bridge0: port 3(team0) entered blocking state [ 216.814919][T10397] bridge0: port 3(team0) entered disabled state [ 216.835755][T10397] bridge0: port 3(team0) entered blocking state [ 216.842519][T10397] bridge0: port 3(team0) entered forwarding state [ 217.021228][T10400] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2227'. [ 217.125281][T10406] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2227'. [ 217.433636][T10427] FAULT_INJECTION: forcing a failure. [ 217.433636][T10427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.467258][T10427] CPU: 1 PID: 10427 Comm: syz.0.2238 Not tainted syzkaller #0 [ 217.474806][T10427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 217.484872][T10427] Call Trace: [ 217.488160][T10427] [ 217.491102][T10427] dump_stack_lvl+0x188/0x250 [ 217.495797][T10427] ? show_regs_print_info+0x20/0x20 [ 217.501006][T10427] ? load_image+0x410/0x410 [ 217.505525][T10427] ? __lock_acquire+0x7d40/0x7d40 [ 217.510567][T10427] should_fail+0x383/0x4b0 [ 217.514998][T10427] _copy_from_user+0x2e/0x170 [ 217.519690][T10427] __sys_bpf+0x26d/0x6f0 [ 217.523949][T10427] ? bpf_link_show_fdinfo+0x380/0x380 [ 217.529351][T10427] __x64_sys_bpf+0x78/0x90 [ 217.533786][T10427] do_syscall_64+0x4c/0xa0 [ 217.538218][T10427] ? clear_bhb_loop+0x30/0x80 [ 217.542910][T10427] ? clear_bhb_loop+0x30/0x80 [ 217.547596][T10427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.553498][T10427] RIP: 0033:0x7f2698944199 [ 217.557919][T10427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.577540][T10427] RSP: 002b:00007f2696b9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.585974][T10427] RAX: ffffffffffffffda RBX: 00007f2698bcbfa0 RCX: 00007f2698944199 [ 217.593961][T10427] RDX: 0000000000000020 RSI: 0000200000001800 RDI: 0000000000000004 [ 217.601947][T10427] RBP: 00007f2696b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 217.609933][T10427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.617919][T10427] R13: 00007f2698bcc038 R14: 00007f2698bcbfa0 R15: 00007fff6808d158 [ 217.625917][T10427] [ 220.731949][T10493] validate_nla: 5 callbacks suppressed [ 220.731963][T10493] netlink: 'syz.3.2256': attribute type 6 has an invalid length. [ 220.747752][T10490] netlink: 'syz.2.2257': attribute type 3 has an invalid length. [ 220.750453][T10493] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2256'. [ 220.755942][T10490] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2257'. [ 220.765676][T10492] netlink: 'syz.4.2258': attribute type 10 has an invalid length. [ 221.273109][T10516] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2265'. [ 221.293112][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2265'. [ 221.558216][T10537] FAULT_INJECTION: forcing a failure. [ 221.558216][T10537] name failslab, interval 1, probability 0, space 0, times 0 [ 221.630761][T10535] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2272'. [ 221.645984][T10537] CPU: 1 PID: 10537 Comm: syz.0.2273 Not tainted syzkaller #0 [ 221.653479][T10537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 221.663542][T10537] Call Trace: [ 221.666835][T10537] [ 221.669770][T10537] dump_stack_lvl+0x188/0x250 [ 221.674461][T10537] ? show_regs_print_info+0x20/0x20 [ 221.679670][T10537] ? load_image+0x410/0x410 [ 221.684188][T10537] ? __might_sleep+0xf0/0xf0 [ 221.688787][T10537] ? __lock_acquire+0x7d40/0x7d40 [ 221.693837][T10537] should_fail+0x383/0x4b0 [ 221.698269][T10537] should_failslab+0x5/0x20 [ 221.702775][T10537] slab_pre_alloc_hook+0x51/0xc0 [ 221.707726][T10537] __kmalloc_node+0x6d/0x3a0 [ 221.712330][T10537] ? vmemdup_user+0x45/0x170 [ 221.717111][T10537] vmemdup_user+0x45/0x170 [ 221.721696][T10537] map_get_next_key+0x21d/0x5f0 [ 221.726746][T10537] ? bpf_lsm_bpf+0x5/0x10 [ 221.731094][T10537] __sys_bpf+0x3e5/0x6f0 [ 221.735359][T10537] ? bpf_link_show_fdinfo+0x380/0x380 [ 221.740760][T10537] __x64_sys_bpf+0x78/0x90 [ 221.745195][T10537] do_syscall_64+0x4c/0xa0 [ 221.749620][T10537] ? clear_bhb_loop+0x30/0x80 [ 221.754310][T10537] ? clear_bhb_loop+0x30/0x80 [ 221.759010][T10537] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.764920][T10537] RIP: 0033:0x7f2698944199 [ 221.769345][T10537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.789053][T10537] RSP: 002b:00007f2696b9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.797489][T10537] RAX: ffffffffffffffda RBX: 00007f2698bcbfa0 RCX: 00007f2698944199 [ 221.805475][T10537] RDX: 0000000000000020 RSI: 0000200000001800 RDI: 0000000000000004 [ 221.813460][T10537] RBP: 00007f2696b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 221.821442][T10537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.829423][T10537] R13: 00007f2698bcc038 R14: 00007f2698bcbfa0 R15: 00007fff6808d158 [ 221.837423][T10537] [ 221.923091][T10539] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2272'. [ 222.094701][T10549] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2276'. [ 222.660062][T10567] netlink: 'syz.4.2286': attribute type 10 has an invalid length. [ 222.768611][T10575] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2286'. [ 222.789518][T10572] tun0: tun_chr_ioctl cmd 1074025675 [ 222.812157][T10572] tun0: persist enabled [ 222.826279][T10572] tun0: tun_chr_ioctl cmd 1074025681 [ 222.966168][T10584] netlink: 'syz.3.2290': attribute type 3 has an invalid length. [ 223.000010][T10584] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2290'. [ 223.334113][T10598] netlink: 'syz.4.2295': attribute type 6 has an invalid length. [ 223.362283][T10598] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2295'. [ 223.710866][T10615] netlink: 'syz.3.2305': attribute type 9 has an invalid length. [ 223.804079][T10618] delete_channel: no stack [ 223.886029][T10626] netlink: 'syz.2.2307': attribute type 2 has an invalid length. [ 223.902590][T10626] netlink: 'syz.2.2307': attribute type 8 has an invalid length. [ 224.082992][T10638] netlink: 'syz.2.2312': attribute type 13 has an invalid length. [ 224.654101][T10677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.683796][T10677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.714624][T10677] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 224.748931][T10677] bond0 (unregistering): Released all slaves [ 225.545447][T10728] FAULT_INJECTION: forcing a failure. [ 225.545447][T10728] name failslab, interval 1, probability 0, space 0, times 0 [ 225.555226][T10729] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 225.581438][T10728] CPU: 1 PID: 10728 Comm: syz.0.2343 Not tainted syzkaller #0 [ 225.588952][T10728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 225.599027][T10728] Call Trace: [ 225.602309][T10728] [ 225.605242][T10728] dump_stack_lvl+0x188/0x250 [ 225.609958][T10728] ? show_regs_print_info+0x20/0x20 [ 225.615173][T10728] ? load_image+0x410/0x410 [ 225.619684][T10728] ? __might_sleep+0xf0/0xf0 [ 225.624287][T10728] ? __lock_acquire+0x7d40/0x7d40 [ 225.629311][T10728] ? rcu_lock_release+0x9/0x20 [ 225.634078][T10728] should_fail+0x383/0x4b0 [ 225.638519][T10728] should_failslab+0x5/0x20 [ 225.643017][T10728] slab_pre_alloc_hook+0x51/0xc0 [ 225.647953][T10728] ? __d_alloc+0x27/0x6d0 [ 225.652280][T10728] kmem_cache_alloc+0x3d/0x280 [ 225.657051][T10728] __d_alloc+0x27/0x6d0 [ 225.661205][T10728] ? d_alloc_pseudo+0xe/0x70 [ 225.665884][T10728] d_alloc_pseudo+0x19/0x70 [ 225.670382][T10728] alloc_file_pseudo+0xe0/0x200 [ 225.675231][T10728] ? alloc_empty_file_noaccount+0x80/0x80 [ 225.680971][T10728] anon_inode_getfile+0xc1/0x1a0 [ 225.685931][T10728] __se_sys_perf_event_open+0xc02/0x1bb0 [ 225.691603][T10728] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 225.697365][T10728] ? lockdep_hardirqs_on+0x94/0x140 [ 225.702568][T10728] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 225.708221][T10728] do_syscall_64+0x4c/0xa0 [ 225.712631][T10728] ? clear_bhb_loop+0x30/0x80 [ 225.717303][T10728] ? clear_bhb_loop+0x30/0x80 [ 225.721979][T10728] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 225.727883][T10728] RIP: 0033:0x7f2698944199 [ 225.732506][T10728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.752118][T10728] RSP: 002b:00007f2696b9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 225.760537][T10728] RAX: ffffffffffffffda RBX: 00007f2698bcbfa0 RCX: 00007f2698944199 [ 225.768501][T10728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000012c0 [ 225.776467][T10728] RBP: 00007f2696b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 225.784696][T10728] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 225.792665][T10728] R13: 00007f2698bcc038 R14: 00007f2698bcbfa0 R15: 00007fff6808d158 [ 225.800663][T10728] [ 225.934996][T10745] device syzkaller0 entered promiscuous mode [ 226.028866][T10748] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 226.163433][T10757] __nla_validate_parse: 11 callbacks suppressed [ 226.167265][T10757] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2350'. [ 226.949732][T10825] validate_nla: 71 callbacks suppressed [ 226.949747][T10825] netlink: 'syz.4.2375': attribute type 2 has an invalid length. [ 227.016753][T10825] netlink: 'syz.4.2375': attribute type 8 has an invalid length. [ 227.052537][T10825] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2375'. [ 227.343598][T10839] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2382'. [ 229.993337][T10970] netlink: 'syz.1.2434': attribute type 2 has an invalid length. [ 230.021650][T10970] netlink: 'syz.1.2434': attribute type 8 has an invalid length. [ 230.065316][T10970] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2434'. [ 230.186410][T10981] netlink: 'syz.2.2439': attribute type 9 has an invalid length. [ 230.232155][T10986] netlink: 'syz.1.2441': attribute type 2 has an invalid length. [ 230.235191][T10981] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2439'. [ 230.291668][T10986] netlink: 'syz.1.2441': attribute type 4 has an invalid length. [ 230.320425][T10986] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2441'. [ 230.530102][T10998] netlink: 'syz.3.2447': attribute type 10 has an invalid length. [ 230.636540][T10998] team0: Port device wlan1 added [ 230.650204][T11007] netlink: 'syz.2.2450': attribute type 10 has an invalid length. [ 230.660762][T10997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.881486][T11017] netlink: 'syz.0.2454': attribute type 10 has an invalid length. [ 230.890451][T11020] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2456'. [ 231.567930][ C0] [ 231.567938][ C0] ================================ [ 231.567944][ C0] WARNING: inconsistent lock state [ 231.567962][ C0] syzkaller #0 Not tainted [ 231.567970][ C0] -------------------------------- [ 231.567975][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 231.567981][ C0] syz.1.2462/11041 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 231.567997][ C0] ffff88807d53a238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x8e/0x620 [ 231.568041][ C0] {INITIAL USE} state was registered at: [ 231.568051][ C0] lock_acquire+0x19f/0x400 [ 231.568068][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 231.568082][ C0] trie_update_elem+0xb9/0xc10 [ 231.568096][ C0] bpf_map_update_value+0x57c/0x650 [ 231.568110][ C0] map_update_elem+0x603/0x760 [ 231.568124][ C0] __sys_bpf+0x46b/0x6f0 [ 231.568136][ C0] __x64_sys_bpf+0x78/0x90 [ 231.568148][ C0] do_syscall_64+0x4c/0xa0 [ 231.568163][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.568178][ C0] irq event stamp: 1016 [ 231.568183][ C0] hardirqs last enabled at (1015): [] syscall_enter_from_user_mode+0x21/0x70 [ 231.568208][ C0] hardirqs last disabled at (1016): [] exc_debug+0x6e/0x130 [ 231.568226][ C0] softirqs last enabled at (694): [] bpf_prog_load+0x10ee/0x14e0 [ 231.568245][ C0] softirqs last disabled at (692): [] bpf_ksym_add+0x28/0x330 [ 231.568261][ C0] [ 231.568261][ C0] other info that might help us debug this: [ 231.568265][ C0] Possible unsafe locking scenario: [ 231.568265][ C0] [ 231.568269][ C0] CPU0 [ 231.568272][ C0] ---- [ 231.568274][ C0] lock(&trie->lock); [ 231.568284][ C0] [ 231.568286][ C0] lock(&trie->lock); [ 231.568295][ C0] [ 231.568295][ C0] *** DEADLOCK *** [ 231.568295][ C0] [ 231.568298][ C0] no locks held by syz.1.2462/11041. [ 231.568305][ C0] [ 231.568305][ C0] stack backtrace: [ 231.568310][ C0] CPU: 0 PID: 11041 Comm: syz.1.2462 Not tainted syzkaller #0 [ 231.568325][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.568333][ C0] Call Trace: [ 231.568339][ C0] <#DB> [ 231.568347][ C0] dump_stack_lvl+0x188/0x250 [ 231.568368][ C0] ? show_regs_print_info+0x20/0x20 [ 231.568394][ C0] ? print_usage_bug+0x43d/0x6a0 [ 231.568410][ C0] ? verify_lock_unused+0x15/0x140 [ 231.568433][ C0] lock_acquire+0x2c3/0x400 [ 231.568457][ C0] ? trie_delete_elem+0x8e/0x620 [ 231.568477][ C0] ? read_lock_is_recursive+0x10/0x10 [ 231.568496][ C0] ? look_up_lock_class+0x71/0x110 [ 231.568514][ C0] ? verify_lock_unused+0x15/0x140 [ 231.568539][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 231.568555][ C0] ? trie_delete_elem+0x8e/0x620 [ 231.568572][ C0] ? _raw_spin_lock+0x40/0x40 [ 231.568592][ C0] ? read_lock_is_recursive+0x10/0x10 [ 231.568612][ C0] trie_delete_elem+0x8e/0x620 [ 231.568646][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e8 [ 231.568665][ C0] bpf_overflow_handler+0x1c2/0x4a0 [ 231.568692][ C0] ? perf_event_switch_output+0x730/0x730 [ 231.568722][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 231.568744][ C0] __perf_event_overflow+0x35f/0x550 [ 231.568769][ C0] perf_bp_event+0x276/0x320 [ 231.568788][ C0] ? perf_trace_lock_acquire+0x341/0x3f0 [ 231.568809][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 231.568857][ C0] ? rcu_lock_acquire+0x9/0x30 [ 231.568876][ C0] ? read_lock_is_recursive+0x10/0x10 [ 231.568904][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 231.568925][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 231.568948][ C0] notify_die+0x141/0x1a0 [ 231.568968][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 231.568993][ C0] ? exc_debug+0x6e/0x130 [ 231.569008][ C0] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 231.569030][ C0] notify_debug+0x20/0x30 [ 231.569047][ C0] exc_debug+0xcf/0x130 [ 231.569068][ C0] asm_exc_debug+0x1a/0x40 [ 231.569083][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 231.569101][ C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 231.569114][ C0] RSP: 0018:ffffc9000366fa60 EFLAGS: 00050202 [ 231.569127][ C0] RAX: ffffffff83e93a01 RBX: 0000000000000080 RCX: 0000000000000020 [ 231.569137][ C0] RDX: 0000000000000080 RSI: 0000200000000320 RDI: ffffc9000366fca0 [ 231.569148][ C0] RBP: 0000000000000000 R08: ffffc9000366fcbf R09: 1ffff920006cdf97 [ 231.569158][ C0] R10: dffffc0000000000 R11: fffff520006cdf98 R12: 00007ffffffff000 [ 231.569169][ C0] R13: 0000200000000340 R14: ffffc9000366fc40 R15: 00002000000002c0 [ 231.569223][ C0] ? _copy_from_user+0x71/0x170 [ 231.569248][ C0] [ 231.569252][ C0] [ 231.569256][ C0] _copy_from_user+0xfa/0x170 [ 231.569273][ C0] __copy_msghdr_from_user+0x48a/0x630 [ 231.569292][ C0] ? verify_lock_unused+0x140/0x140 [ 231.569314][ C0] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 231.569350][ C0] ___sys_sendmsg+0x19a/0x2e0 [ 231.569386][ C0] ? __sys_sendmsg+0x290/0x290 [ 231.569449][ C0] __se_sys_sendmsg+0x1b7/0x2a0 [ 231.569469][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 231.569483][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 231.569517][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 231.569541][ C0] do_syscall_64+0x4c/0xa0 [ 231.569555][ C0] ? clear_bhb_loop+0x30/0x80 [ 231.569570][ C0] ? clear_bhb_loop+0x30/0x80 [ 231.569589][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.569605][ C0] RIP: 0033:0x7fef5a405199 [ 231.569627][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.569640][ C0] RSP: 002b:00007fef5865d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.569656][ C0] RAX: ffffffffffffffda RBX: 00007fef5a68cfa0 RCX: 00007fef5a405199 [ 231.569666][ C0] RDX: 00000000000408d0 RSI: 0000200000001a80 RDI: 000000000000000c [ 231.569676][ C0] RBP: 00007fef5a49c0b8 R08: 0000000000000000 R09: 0000000000000000 [ 231.569686][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.569695][ C0] R13: 00007fef5a68d038 R14: 00007fef5a68cfa0 R15: 00007ffef7bb6bb8 [ 231.569723][ C0] [ 232.197445][T11043] caif:caif_disconnect_client(): nothing to disconnect