last executing test programs: 5.046337895s ago: executing program 3 (id=2121): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xffffffff}, 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xffffffff}, 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76cc"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x10000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76cc"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x10000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r2, @ANYBLOB="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", @ANYBLOB="3c3ded12b360c3f52e95345812ef89e1efa883c6773a469aa04d2871963408cb137ee31b7ea19b698ccd544ef444f01732338158b891dd8488f97903703423ce7604661ba916b5f9336a98db0611a0b0f26f085f4b014d", @ANYRESDEC=r1, @ANYRES64=0x0], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r2, @ANYBLOB="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", @ANYBLOB="3c3ded12b360c3f52e95345812ef89e1efa883c6773a469aa04d2871963408cb137ee31b7ea19b698ccd544ef444f01732338158b891dd8488f97903703423ce7604661ba916b5f9336a98db0611a0b0f26f085f4b014d", @ANYRESDEC=r1, @ANYRES64=0x0], 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f00000000c0)=0x1) (async) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f00000000c0)=0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.995769244s ago: executing program 3 (id=2134): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000060100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0xffffff7f00000000) 2.888397137s ago: executing program 3 (id=2137): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a2010000000028000001294", 0x2e}], 0x1}, 0x4004850) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) sendmsg$kcm(r2, &(0x7f0000001000)={&(0x7f0000000600)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000ac0)="5eb4d4a770e8", 0x6}], 0x1}, 0x800) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f91124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.603815266s ago: executing program 3 (id=2142): openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000501000000000000000000130400000000302e6100"], 0x0, 0x29, 0x0, 0x1}, 0x28) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x80, 0x10000, 0x9e4, 0x5, 0xb, 0x20005, 0x0, 0x0, 0xb, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x7fffffff, 0xa2e}, 0xc501, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x104, 0x8, 0x2}, 0x50) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3542, 0x1ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640f1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x4001, 0x35, 0x43a1bd76, 0x7, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x1, 0xd, 0x82, 0x0, 0x58, 0x91, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x57, 0x2, @perf_config_ext={0x401, 0xde}, 0x1e0a, 0x6b7, 0x20e7, 0x9, 0x2, 0x3ff, 0x5, 0x0, 0x3ff, 0x0, 0xad}, 0x0, 0x2, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) 1.947004364s ago: executing program 0 (id=2147): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5d2d, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x2}, 0x0, 0x3, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=r4, @ANYRES32], 0x50) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x48840) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f3", 0xb7}], 0x1, &(0x7f00000001c0)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x3}, @generic={0x0, 0x3, "96"}, @generic={0x0, 0xf, "206a77bdd1a004129054e7704a"}]}}}], 0xa0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x17, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000018000", @ANYBLOB="ebbf9abb3229a677a81b3d8b6c089312cbda31d4534cb791fc22ac4972ae9fdad20d583233c736fa1eeb41dc6a8fc6d55e3311e19f26a39de81e2258eb1598468ddc0e67c27cbbed94fb9f6e5b929c9adc292c1e5ff2e282ddfa1c8a5f6792a64eb34eb5217bd5aa020e41d078c3fab1b7bf5d03784d2aecb53095ab8d1ecf9c40e6d731aec67316e7ff91f16ffd768fd995995c68d5ac344df2ef32adbccbff77ec5864f13883f2e9aff54b53e12cee199eeb51eb0a3e5c9778e28c9605e2155114044b9d7224fb39b449", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000faff00008500000086000000181100", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b7020000000800008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r6, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x8e, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r8, 0xc008240a, &(0x7f0000000100)={0x1, 0x0, [0x0]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000002000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000001200)={'wlan1\x00', @random="f7280200e700"}) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)="f4000900062b3325fe80000000000000dc8b850f238466ccfff57a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 1.916293616s ago: executing program 1 (id=2148): unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f00000004c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000007026980c84d000000000000000006199420a99d5d704982c6f4e34ee189ed942803310431fd59f4f2e7129fa9f786d4bdc65b914361bee4f888ab2e486b75a53c4281c66d4ad9b9e8bed8ad671"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200004018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7638300c000000000000e900feff", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB='-cpu'], 0x5) r6 = openat$cgroup_type(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000080), 0x9) 1.859724247s ago: executing program 3 (id=2149): socket$kcm(0xa, 0x2, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (rerun: 32) r1 = socket$kcm(0x10, 0x3, 0x10) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f00000000c0)="b8cb8e9bf388098bff220aa73696374fd884d3f11ab68f2db96a9bfd7aa8407c3852f71aa0fe1bf308851a7f098a62fce19a24859271", 0x36}], 0x2}, 0x40010) (async) socketpair(0x21, 0x1, 0x1, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x2f0}, 0x8011) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 32) r3 = socket$kcm(0xa, 0x6, 0x0) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0x10, &(0x7f0000000040)=r4, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18003200"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) close(0x3) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x40) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x40) (rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x884) (async) socket$kcm(0x10, 0x2, 0x0) 1.713532521s ago: executing program 0 (id=2151): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff4100007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000002300)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000001000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) 1.623979544s ago: executing program 3 (id=2152): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xf710, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1000da}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x5, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8942, &(0x7f0000000740)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') bpf$BPF_BTF_LOAD(0x12, 0x0, 0xffffffffffffff21) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x0, 0x0, 0x0, 0x4, 0xa, 0x3, 0xe000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xb, 0x2, 0x7, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x105440, 0xd, 0x2, 0x6, 0x400000000f, 0x0, 0x8, 0x0, 0x164}, 0x0, 0x1, 0xffffffffffffffff, 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80, &(0x7f0000000680)}, 0x10) 1.623474444s ago: executing program 2 (id=2153): r0 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2070a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x800, 0xfff6, 0x6, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd) r1 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) 1.622970984s ago: executing program 1 (id=2154): socket$kcm(0x10, 0x2, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x4, 0x0, 0x0, 0x66c47, r1, 0xbb0, '\x00', 0x0, r1, 0x5, 0x4, 0x0, 0xc}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRESOCT], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, r1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x3}, 0x50) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000480)=""/187, 0xbb, 0x0, &(0x7f0000000540)=""/124, 0x7c}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x2, 0x5, 0xee, 0x108c4, r5, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff8, 0x20}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 1.517434357s ago: executing program 2 (id=2155): r0 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x2, 0x0, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) (async) close(r2) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120a000d85c8af0401a80016000a003a40ff7f000000000000070003003a00004dcf5c0461c1a1b36f94007134cf6ee08000a0e408e8d8e752a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29bf1d809d5e1cace81ed0bff0fe1b42a9ecbee5de6ccd40dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x4000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r2, r1, 0x2f}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a83116752ddb11cfafffa3837841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e30df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cd17b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0544c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf80300cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9874620e322d9348900000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a35df8574eb49e972f7976eafee43a6c17009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d5040000000000000000000000000000074f21ec2b57bb2daf8fab7cd564d1e84c93af254ab029e6cd168007b9a10a6664d9d264aceede0183b2306c440b2c81c9e120ece36a61b0b015ea6716decf8783e0845fa975b6e5f7f4dd4abe2a95e764ae13288d4439ec2906659bc9f26212615423c3d8d58901a6b51a93c8aacb19c416d5260662031a295f2b33295a60db77b5f082bdc48cd06c6cd01e7a40e456d829d277c77c2ca9159c82a391a24d5f6193228d93e2fd99cd0cdeefa9b7c5ea02c5454ef4c6631e6766ffcba3cce4ab13c69622675683ab1f05edbb09641c9dba535b319a21a00287645449a61eefc00a2a8f6955d6573023325bc00ca0facb69d67c8b95e29b36c4a5f84a959262c382de9a411be7b9b500ca329e5eefcd323490eed4bcbcba4764618bf51a08498a64b0e19c00e33480b27c2b12c326e6bf10234f883b3082512e9ad2fbdf6bae"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) 1.356064821s ago: executing program 1 (id=2156): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x39}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='cpu\t&0\x91f\xdbV\xef\xc7\xf0\xc8$\xe1x\xad&&\t') perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, 0x0}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000780)=@framed={{}, [@jmp={0x5, 0x1, 0x8, 0x0, 0xa, 0x6, 0x1}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59c2bc0413a181014100000000010000000000000e000a000f00fe0002800200121f", 0x2e}], 0x1}, 0x0) 1.269939724s ago: executing program 0 (id=2157): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x3b70, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb51}, 0x4582, 0x32, 0xfffffbff, 0x5, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x3, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6400}, 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 1.006041431s ago: executing program 2 (id=2158): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4080, 0x40000000, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/177, 0xb1}, {&(0x7f00000008c0)=""/153, 0x99}], 0x2}, 0x40010360) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 855.684206ms ago: executing program 0 (id=2159): socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x9, 0x1, r1, 0x15b4}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x2d, 'freezer'}, {0x2d, 'memory'}, {0x2d, 'rdma'}, {0x2b, 'net_cls'}, {0x2d, 'io'}]}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2, 0x0, 0x0, 0x0, 0x1fffffff}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x456c4997c6f4bb71, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8640, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4004743b, &(0x7f0000001200)) 774.668948ms ago: executing program 1 (id=2160): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500030000120800040043000000a8001600a400014020000500feff849a09eb288e6d3d5924083574ff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db7010000b29cfad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf", 0xd8}], 0x1}, 0x0) (async) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000000) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) socket$kcm(0x29, 0x2, 0x0) (async) r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r5) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) 683.100121ms ago: executing program 2 (id=2161): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6, 0x1, 0x9, 0x4, 0x0, 0x9, 0xf8, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xeb29, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x7}, 0x100201, 0xffffffff, 0xa319, 0x4, 0x9, 0x0, 0x3, 0x0, 0x7fffffff, 0x0, 0x7}, 0x0, 0x3, r0, 0x8) perf_event_open$cgroup(&(0x7f0000000040)={0xe, 0x80, 0x7, 0x1, 0x9, 0x7, 0x0, 0xfc, 0x8200, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x18c48, 0x3, 0x2, 0x5, 0xa0d, 0xe, 0x4, 0x0, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0x7, r1, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 416.123338ms ago: executing program 0 (id=2162): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 415.263668ms ago: executing program 1 (id=2163): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x31, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x21, &(0x7f0000000080)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xebaf, 0x0, 0x0, 0x0, 0x201c}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xc}, @ldst={0x3, 0x2, 0x0, 0xb, 0x3, 0x1, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x7a, &(0x7f0000000200)=""/122, 0x40f00, 0x0, '\x00', r2, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x1, 0x6, 0x7f, 0x2c}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[0x1, r5, 0xffffffffffffffff, r6], &(0x7f0000000780)=[{0x3, 0x3, 0x5, 0x2}, {0x1, 0x2, 0xf, 0x6}, {0x1, 0x3, 0xb, 0xc}, {0x1, 0x2, 0x0, 0x7}, {0x3, 0x2, 0x9, 0x9}], 0x10, 0x2}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000900)="0e12330088551d12be50fe6478fb15848018511128193d15db4ea2ee11b7c865ec2d550c17d9baa500fafbf8fae7b0eab0250c3e671b348901eda56517a0fa77df5332", 0x43}], 0x1}, 0x44800) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1d, 0xc53, 0x6, 0x1, 0x2000, r6, 0x1, '\x00', r2, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000ac0)=@o_path={&(0x7f0000000a80)='./file0\x00', 0x0, 0x4010, r9}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000b40)=@o_path={&(0x7f0000000b00)='./file0\x00', r6, 0x4000, r0}, 0x18) r11 = perf_event_open$cgroup(&(0x7f0000000b80)={0x4, 0x80, 0x4f, 0x8, 0x6, 0xd, 0x0, 0x314, 0x400, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fc, 0x1, @perf_config_ext={0x101}, 0x21, 0x2, 0x7, 0x2, 0x9, 0x0, 0x4, 0x0, 0xffff324d, 0x0, 0x2}, 0xffffffffffffffff, 0x8, r1, 0xa52e694487f43e30) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x40042409, 0x0) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000dc0)=r3, 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@bloom_filter={0x1e, 0x8001, 0x7, 0x735, 0x1, r9, 0xfffffffe, '\x00', r2, r4, 0x4, 0x0, 0x1, 0x10001}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_ext={0x1c, 0x17, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @generic={0x2b, 0x7, 0x2, 0x8, 0xa234}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000cc0)='syzkaller\x00', 0x7f, 0xbb, &(0x7f0000000d00)=""/187, 0x41100, 0x0, '\x00', r2, 0x0, r12, 0x8, &(0x7f0000000e00)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1ea6c, 0xffffffffffffffff, 0x0, &(0x7f0000000ec0)=[r13], 0x0, 0x10, 0x3}, 0x94) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000fc0), 0x383101, 0x0) ioctl$TUNSETFILTEREBPF(r14, 0x800454e1, &(0x7f0000001000)=r10) ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x89e1, &(0x7f0000001040)={r8}) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x5, [@volatile={0xd, 0x0, 0x0, 0x9, 0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x4, 0x1}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x3, 0x4}, {0x6, 0x4}, {0x5}, {0xb, 0x5}, {0x5, 0x4}, {0x7, 0x5}]}]}, {0x0, [0x5f, 0x61, 0x5f]}}, &(0x7f0000001200)=""/21, 0x75, 0x15, 0x0, 0x6, 0x10000, @value=r10}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0xb, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x160}, @alu={0x7, 0x1, 0xa, 0x8, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000001100)='GPL\x00', 0xec8, 0x33, &(0x7f0000001140)=""/51, 0x41000, 0x0, '\x00', r2, 0x25, r15, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r6, r6], 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001480)={@map=r13, 0xa, 0x0, 0x7, &(0x7f0000001380)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001540)={0x0, r11, 0x0, 0xa, &(0x7f0000001500)='syzkaller\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000014c0)={@map=r5, r7, 0x25, 0x4020, 0x0, @void, @void, @void, @value=r17, r16}, 0x20) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@bloom_filter={0x1e, 0x7, 0xfffffff7, 0x7f, 0x1800, 0xffffffffffffffff, 0x1, '\x00', r2, r15, 0x5, 0x3, 0x4, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001600)={0x2, 0x4, 0x8, 0x1, 0x80, r18, 0x2, '\x00', r2, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001680)) ioctl$TUNSETQUEUE(r14, 0x400454d9, &(0x7f00000016c0)={'ipvlan0\x00', 0x500}) socket$kcm(0x29, 0x5, 0x0) 414.823319ms ago: executing program 2 (id=2164): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0x20000000000000a, 0x300) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x7, 0x6, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(r1, &(0x7f0000000940)={&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x7ffe}, 0x80, 0x0}, 0x4000000) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000007c0)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e144658b7d300000e000a001000000002800000128ce06922386a24edcd07", 0x37}], 0x1, 0x0, 0x0, 0xfeffffff}, 0x240058cc) 242.103513ms ago: executing program 0 (id=2165): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5d2d, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x2}, 0x0, 0x3, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=r4, @ANYRES32], 0x50) r5 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5452, &(0x7f0000000000)) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x48840) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x3}, @generic={0x0, 0x3, "96"}, @generic={0x0, 0xf, "206a77bdd1a004129054e7704a"}]}}}], 0xa0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x17, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYBLOB="ebbf9abb3229a677a81b3d8b6c089312cbda31d4534cb791fc22ac4972ae9fdad20d583233c736fa1eeb41dc6a8fc6d55e3311e19f26a39de81e2258eb1598468ddc0e67c27cbbed94fb9f6e5b929c9adc292c1e5ff2e282ddfa1c8a5f6792a64eb34eb5217bd5aa020e41d078c3fab1b7bf5d03784d2aecb53095ab8d1ecf9c40e6d731aec67316e7ff91f16ffd768fd995995c68d5ac344df2ef32adbccbff77ec5864f13883f2e9aff54b53e12cee199eeb51eb0a3e5c9778e28c9605e2155114044b9d7224fb39b44928f3c9f13019897c592aa6f2979751441c77a09d", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000faff00008500000086000000181100", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b7020000000800008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r7, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x8e, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r9, 0xc008240a, &(0x7f0000000100)={0x1, 0x0, [0x0]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000200000000000000020000040800000000000000"], 0x0, 0x56}, 0x28) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000001200)={'wlan1\x00', @random="f7280200e700"}) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)="f4000900062b3325fe80000000000000dc8b850f238466ccb1627a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 167.231926ms ago: executing program 1 (id=2166): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfc42) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x10, 0x3, 0x10) (async) r5 = socket$kcm(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000200)={0x5, 0x80, 0x1, 0x5, 0xff, 0x4, 0x0, 0x4, 0x2020, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_bp={&(0x7f0000000140)}, 0x100000, 0x6, 0x4, 0x5, 0x4, 0x10001, 0xf2, 0x0, 0x4, 0x0, 0x3}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r7, 0x4) (async) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r7, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xfe, 0x4f, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xfe, 0x4f, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=2167): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) kernel console output (not intermixed with test programs): e_1 [ 111.228408][ T6336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.569005][ T6342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.576610][ T6342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.584691][ T6342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.593669][ T6342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.862680][ T6336] syz.0.171 (6336) used greatest stack depth: 20392 bytes left [ 111.969255][ T6351] netlink: 'syz.3.177': attribute type 10 has an invalid length. [ 111.992014][ T6353] netlink: 'syz.0.178': attribute type 11 has an invalid length. [ 112.000414][ T6353] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.178'. [ 112.011644][ T6351] hsr0: entered promiscuous mode [ 112.043822][ T6351] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 112.092772][ T6351] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 112.125507][ T6351] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 112.140588][ T6351] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 112.186994][ T6360] geneve0: entered promiscuous mode [ 112.318960][ T6369] netlink: 'syz.3.184': attribute type 64 has an invalid length. [ 112.398935][ T6369] netlink: 176 bytes leftover after parsing attributes in process `syz.3.184'. [ 112.564453][ T6374] netlink: 'syz.1.186': attribute type 10 has an invalid length. [ 112.598912][ T6374] hsr0: entered promiscuous mode [ 112.627591][ T6374] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 112.653243][ T6374] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 112.709035][ T6374] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 112.723722][ T6374] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 112.842713][ T6376] netlink: 'syz.3.187': attribute type 3 has an invalid length. [ 112.872292][ T6376] netlink: 'syz.3.187': attribute type 1 has an invalid length. [ 112.892757][ T6376] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.187'. [ 113.245423][ T6393] netlink: 64 bytes leftover after parsing attributes in process `syz.3.193'. [ 113.292077][ T6393] netlink: 'syz.3.193': attribute type 21 has an invalid length. [ 113.336769][ T6393] netlink: 'syz.3.193': attribute type 6 has an invalid length. [ 113.344673][ T6393] netlink: 132 bytes leftover after parsing attributes in process `syz.3.193'. [ 113.501740][ T6398] netlink: 'syz.0.195': attribute type 64 has an invalid length. [ 113.562895][ T6398] netlink: 176 bytes leftover after parsing attributes in process `syz.0.195'. [ 113.743888][ T6410] FAULT_INJECTION: forcing a failure. [ 113.743888][ T6410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.776815][ T6410] CPU: 0 PID: 6410 Comm: syz.1.199 Not tainted syzkaller #0 [ 113.784164][ T6410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.794252][ T6410] Call Trace: [ 113.797589][ T6410] [ 113.800532][ T6410] dump_stack_lvl+0x18c/0x250 [ 113.805264][ T6410] ? show_regs_print_info+0x20/0x20 [ 113.810493][ T6410] ? load_image+0x420/0x420 [ 113.815029][ T6410] ? __might_fault+0xaa/0x120 [ 113.819759][ T6410] ? __lock_acquire+0x7d80/0x7d80 [ 113.824817][ T6410] ? __virt_addr_valid+0x10c/0x380 [ 113.829961][ T6410] should_fail_ex+0x394/0x4c0 [ 113.834673][ T6410] _copy_from_user+0x2f/0xe0 [ 113.839373][ T6410] sctp_setsockopt+0x19e/0x11e0 [ 113.844249][ T6410] ? sock_common_recvmsg+0x190/0x190 [ 113.849560][ T6410] do_sock_setsockopt+0x175/0x1a0 [ 113.854600][ T6410] ? __fdget+0x180/0x210 [ 113.858864][ T6410] __x64_sys_setsockopt+0x182/0x200 [ 113.864090][ T6410] do_syscall_64+0x55/0xb0 [ 113.868522][ T6410] ? clear_bhb_loop+0x40/0x90 [ 113.873212][ T6410] ? clear_bhb_loop+0x40/0x90 [ 113.877910][ T6410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.883827][ T6410] RIP: 0033:0x7f5b9a79e0d9 [ 113.888279][ T6410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.908090][ T6410] RSP: 002b:00007f5b9b6d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 113.916531][ T6410] RAX: ffffffffffffffda RBX: 00007f5b9aa26090 RCX: 00007f5b9a79e0d9 [ 113.924557][ T6410] RDX: 000000000000001f RSI: 0000000000000084 RDI: 0000000000000008 [ 113.932547][ T6410] RBP: 00007f5b9b6d5090 R08: 0000000000000129 R09: 0000000000000000 [ 113.940536][ T6410] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 113.948881][ T6410] R13: 00007f5b9aa26128 R14: 00007f5b9aa26090 R15: 00007ffdb731e778 [ 113.956893][ T6410] [ 114.070489][ T6420] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.198'. [ 114.080877][ T6420] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.198'. [ 114.091407][ T6405] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.198'. [ 114.114223][ T6420] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.198'. [ 114.199965][ T6405] netlink: 40 bytes leftover after parsing attributes in process `syz.2.198'. [ 114.248813][ T6405] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 114.259030][ T6405] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.289313][ T6405] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 114.393508][ T6427] netlink: 132 bytes leftover after parsing attributes in process `syz.2.205'. [ 114.873406][ T6446] validate_nla: 1 callbacks suppressed [ 114.873437][ T6446] netlink: 'syz.2.209': attribute type 64 has an invalid length. [ 114.955998][ T6448] netlink: 'syz.3.212': attribute type 9 has an invalid length. [ 115.148873][ T6453] FAULT_INJECTION: forcing a failure. [ 115.148873][ T6453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.182301][ T6453] CPU: 1 PID: 6453 Comm: syz.1.213 Not tainted syzkaller #0 [ 115.189643][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.199889][ T6453] Call Trace: [ 115.203176][ T6453] [ 115.206107][ T6453] dump_stack_lvl+0x18c/0x250 [ 115.211053][ T6453] ? show_regs_print_info+0x20/0x20 [ 115.216249][ T6453] ? load_image+0x420/0x420 [ 115.220752][ T6453] ? __might_fault+0xaa/0x120 [ 115.225424][ T6453] ? __lock_acquire+0x7d80/0x7d80 [ 115.230446][ T6453] should_fail_ex+0x394/0x4c0 [ 115.235142][ T6453] _copy_from_user+0x2f/0xe0 [ 115.239750][ T6453] bpf_obj_get_info_by_fd+0x477/0x3120 [ 115.245213][ T6453] ? lock_chain_count+0x20/0x20 [ 115.250075][ T6453] ? verify_lock_unused+0x140/0x140 [ 115.255391][ T6453] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 115.261569][ T6453] ? lockdep_hardirqs_on+0x98/0x150 [ 115.266782][ T6453] ? bpf_map_get_fd_by_id+0x330/0x330 [ 115.272166][ T6453] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 115.278333][ T6453] ? lock_is_held_type+0x13e/0x190 [ 115.283469][ T6453] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 115.289827][ T6453] ? __might_fault+0xaa/0x120 [ 115.294605][ T6453] ? __might_fault+0xc6/0x120 [ 115.299273][ T6453] ? __might_fault+0xaa/0x120 [ 115.303942][ T6453] ? bpf_lsm_bpf+0x9/0x10 [ 115.308268][ T6453] ? security_bpf+0x7e/0xa0 [ 115.312767][ T6453] __sys_bpf+0x7eb/0x890 [ 115.317012][ T6453] ? bpf_link_show_fdinfo+0x390/0x390 [ 115.322393][ T6453] ? lock_chain_count+0x20/0x20 [ 115.327250][ T6453] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 115.333240][ T6453] __x64_sys_bpf+0x7c/0x90 [ 115.337655][ T6453] do_syscall_64+0x55/0xb0 [ 115.342070][ T6453] ? clear_bhb_loop+0x40/0x90 [ 115.346741][ T6453] ? clear_bhb_loop+0x40/0x90 [ 115.351415][ T6453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.357305][ T6453] RIP: 0033:0x7f5b9a79e0d9 [ 115.361713][ T6453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.381419][ T6453] RSP: 002b:00007f5b9b6f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.389841][ T6453] RAX: ffffffffffffffda RBX: 00007f5b9aa25fa0 RCX: 00007f5b9a79e0d9 [ 115.397900][ T6453] RDX: 0000000000000010 RSI: 0000200000000a00 RDI: 000000000000000f [ 115.405864][ T6453] RBP: 00007f5b9b6f6090 R08: 0000000000000000 R09: 0000000000000000 [ 115.413830][ T6453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.421791][ T6453] R13: 00007f5b9aa26038 R14: 00007f5b9aa25fa0 R15: 00007ffdb731e778 [ 115.429783][ T6453] [ 115.443845][ T6457] netlink: 'syz.0.214': attribute type 39 has an invalid length. [ 115.691218][ T6468] netlink: 'syz.1.219': attribute type 10 has an invalid length. [ 115.710176][ T6468] macvlan1: entered allmulticast mode [ 115.785522][ T6468] veth1_vlan: entered allmulticast mode [ 115.871438][ T6468] team0: Port device macvlan1 added [ 116.015435][ T6468] syz.1.219 (6468) used greatest stack depth: 19432 bytes left [ 116.155930][ T6484] netlink: 'syz.3.225': attribute type 3 has an invalid length. [ 116.165995][ T6484] netlink: 'syz.3.225': attribute type 4 has an invalid length. [ 117.793868][ T6517] netlink: 'syz.1.236': attribute type 3 has an invalid length. [ 117.814532][ T6517] netlink: 'syz.1.236': attribute type 1 has an invalid length. [ 117.845085][ T6527] netlink: 'syz.0.240': attribute type 5 has an invalid length. [ 117.973291][ T6535] __nla_validate_parse: 7 callbacks suppressed [ 117.973314][ T6535] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.242'. [ 118.062716][ T6535] netlink: 4548 bytes leftover after parsing attributes in process `syz.2.242'. [ 118.074801][ T6535] netlink: 'syz.2.242': attribute type 1 has an invalid length. [ 118.320440][ T6543] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.246'. [ 118.382025][ T6545] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.844592][ T6554] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.248'. [ 120.714760][ T6563] netlink: 'syz.0.253': attribute type 3 has an invalid length. [ 120.758489][ T6563] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 120.777757][ T6563] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.253'. [ 120.880056][ T6581] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.254'. [ 120.902308][ T6581] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.254'. [ 120.950736][ T6568] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.254'. [ 120.997909][ T6583] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.254'. [ 121.101783][ T6568] netlink: 'syz.3.254': attribute type 10 has an invalid length. [ 121.122021][ T6568] netlink: 40 bytes leftover after parsing attributes in process `syz.3.254'. [ 121.158545][ T6568] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 121.359723][ T6586] syzkaller0: entered promiscuous mode [ 121.378130][ T6586] syzkaller0: entered allmulticast mode [ 121.766695][ T6595] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 121.776611][ T6595] syzkaller0: linktype set to 0 [ 123.873786][ T6618] netlink: 'syz.1.272': attribute type 1 has an invalid length. [ 123.892505][ T6618] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.272'. [ 124.324272][ T6627] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.269'. [ 124.372885][ T6636] netlink: 63763 bytes leftover after parsing attributes in process `syz.2.279'. [ 124.389967][ T6627] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.269'. [ 124.409508][ T6619] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.269'. [ 124.435434][ T6638] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.269'. [ 124.603018][ T6619] netlink: 'syz.0.269': attribute type 10 has an invalid length. [ 124.620702][ T6619] netlink: 40 bytes leftover after parsing attributes in process `syz.0.269'. [ 124.651514][ T6619] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 124.872826][ T6649] syzkaller0: entered promiscuous mode [ 124.885546][ T6649] syzkaller0: entered allmulticast mode [ 128.937671][ T6709] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.295'. [ 128.956578][ T6709] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.295'. [ 128.981105][ T6702] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.295'. [ 129.229509][ T6709] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.295'. [ 129.240402][ T6724] netlink: 'syz.1.295': attribute type 10 has an invalid length. [ 129.249166][ T6724] netlink: 40 bytes leftover after parsing attributes in process `syz.1.295'. [ 129.260188][ T6724] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 129.271211][ T6724] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.316496][ T6724] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 129.573714][ T6729] syzkaller0: entered promiscuous mode [ 129.580801][ T6729] syzkaller0: entered allmulticast mode [ 129.843459][ T6741] netlink: 'syz.0.311': attribute type 10 has an invalid length. [ 129.858416][ T6741] hsr0: entered promiscuous mode [ 129.897711][ T6741] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 129.920987][ T6741] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 129.935504][ T6741] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 129.952893][ T6741] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 132.559090][ T6757] netlink: 'syz.1.316': attribute type 10 has an invalid length. [ 132.567270][ T6757] veth1_vlan: left allmulticast mode [ 132.595614][ T6763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.052865][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.066092][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.109866][ T6779] syzkaller0: entered promiscuous mode [ 133.115499][ T6779] syzkaller0: entered allmulticast mode [ 133.280048][ T6789] netlink: 132 bytes leftover after parsing attributes in process `syz.0.330'. [ 133.788443][ T6808] FAULT_INJECTION: forcing a failure. [ 133.788443][ T6808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.812705][ T6808] CPU: 1 PID: 6808 Comm: syz.3.335 Not tainted syzkaller #0 [ 133.820062][ T6808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.830125][ T6808] Call Trace: [ 133.833420][ T6808] [ 133.836359][ T6808] dump_stack_lvl+0x18c/0x250 [ 133.841057][ T6808] ? show_regs_print_info+0x20/0x20 [ 133.846250][ T6808] ? load_image+0x420/0x420 [ 133.850754][ T6808] ? __lock_acquire+0x7d80/0x7d80 [ 133.855780][ T6808] ? snprintf+0xe9/0x140 [ 133.860058][ T6808] should_fail_ex+0x394/0x4c0 [ 133.864769][ T6808] _copy_to_user+0x2f/0xa0 [ 133.869205][ T6808] simple_read_from_buffer+0xe7/0x150 [ 133.874577][ T6808] proc_fail_nth_read+0x1e8/0x260 [ 133.879612][ T6808] ? proc_fault_inject_write+0x360/0x360 [ 133.885249][ T6808] ? fsnotify_perm+0x271/0x5e0 [ 133.890012][ T6808] ? proc_fault_inject_write+0x360/0x360 [ 133.895646][ T6808] vfs_read+0x298/0x990 [ 133.899804][ T6808] ? kernel_read+0x1e0/0x1e0 [ 133.904389][ T6808] ? __fget_files+0x28/0x460 [ 133.908976][ T6808] ? __fget_files+0x3fc/0x460 [ 133.913709][ T6808] ? __fdget_pos+0x2a3/0x330 [ 133.918295][ T6808] ? ksys_read+0x74/0x260 [ 133.922624][ T6808] ksys_read+0x151/0x260 [ 133.926865][ T6808] ? vfs_write+0x9a0/0x9a0 [ 133.931279][ T6808] ? lockdep_hardirqs_on+0x98/0x150 [ 133.936492][ T6808] do_syscall_64+0x55/0xb0 [ 133.940992][ T6808] ? clear_bhb_loop+0x40/0x90 [ 133.945666][ T6808] ? clear_bhb_loop+0x40/0x90 [ 133.950339][ T6808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.956311][ T6808] RIP: 0033:0x7f42b6f5e90e [ 133.960719][ T6808] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 133.980323][ T6808] RSP: 002b:00007f42b7e91fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 133.988735][ T6808] RAX: ffffffffffffffda RBX: 00007f42b7e926c0 RCX: 00007f42b6f5e90e [ 133.996699][ T6808] RDX: 000000000000000f RSI: 00007f42b7e920a0 RDI: 000000000000000a [ 134.004661][ T6808] RBP: 00007f42b7e92090 R08: 0000000000000000 R09: 0000000000000000 [ 134.012624][ T6808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.020588][ T6808] R13: 00007f42b7226128 R14: 00007f42b7226090 R15: 00007ffdd4312408 [ 134.028572][ T6808] [ 134.185485][ T6815] netlink: 'syz.0.339': attribute type 9 has an invalid length. [ 134.193497][ T6815] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.339'. [ 135.645473][ T6834] FAULT_INJECTION: forcing a failure. [ 135.645473][ T6834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.690201][ T6834] CPU: 1 PID: 6834 Comm: syz.0.344 Not tainted syzkaller #0 [ 135.697571][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.707913][ T6834] Call Trace: [ 135.711206][ T6834] [ 135.714150][ T6834] dump_stack_lvl+0x18c/0x250 [ 135.718853][ T6834] ? show_regs_print_info+0x20/0x20 [ 135.724074][ T6834] ? load_image+0x420/0x420 [ 135.728619][ T6834] ? __might_fault+0xaa/0x120 [ 135.733317][ T6834] ? __lock_acquire+0x7d80/0x7d80 [ 135.738369][ T6834] should_fail_ex+0x394/0x4c0 [ 135.743075][ T6834] _copy_to_user+0x2f/0xa0 [ 135.747516][ T6834] bpf_obj_get_info_by_fd+0x2ab6/0x3120 [ 135.753103][ T6834] ? bpf_map_get_fd_by_id+0x330/0x330 [ 135.758492][ T6834] ? trace_call_bpf+0xc3/0x6c0 [ 135.763275][ T6834] ? __lock_acquire+0x7d80/0x7d80 [ 135.768359][ T6834] ? __might_fault+0xaa/0x120 [ 135.773052][ T6834] ? __might_fault+0xc6/0x120 [ 135.777743][ T6834] ? __might_fault+0xaa/0x120 [ 135.782443][ T6834] ? bpf_lsm_bpf+0x9/0x10 [ 135.786791][ T6834] ? security_bpf+0x7e/0xa0 [ 135.791321][ T6834] __sys_bpf+0x7eb/0x890 [ 135.795594][ T6834] ? bpf_link_show_fdinfo+0x390/0x390 [ 135.801178][ T6834] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 135.807372][ T6834] __x64_sys_bpf+0x7c/0x90 [ 135.811811][ T6834] do_syscall_64+0x55/0xb0 [ 135.816245][ T6834] ? clear_bhb_loop+0x40/0x90 [ 135.820949][ T6834] ? clear_bhb_loop+0x40/0x90 [ 135.825655][ T6834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.831576][ T6834] RIP: 0033:0x7f625f19e0d9 [ 135.836009][ T6834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.855635][ T6834] RSP: 002b:00007f6260075028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.864068][ T6834] RAX: ffffffffffffffda RBX: 00007f625f425fa0 RCX: 00007f625f19e0d9 [ 135.872051][ T6834] RDX: 0000000000000010 RSI: 0000200000000a00 RDI: 000000000000000f [ 135.880121][ T6834] RBP: 00007f6260075090 R08: 0000000000000000 R09: 0000000000000000 [ 135.888109][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.896096][ T6834] R13: 00007f625f426038 R14: 00007f625f425fa0 R15: 00007fff849b7868 [ 135.904101][ T6834] [ 136.235098][ T6846] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.348'. [ 136.592180][ T6860] syzkaller0: entered promiscuous mode [ 136.647213][ T6860] syzkaller0: entered allmulticast mode [ 138.789557][ T6880] tun0: tun_chr_ioctl cmd 1074025675 [ 138.795656][ T6880] tun0: persist enabled [ 138.802450][ T6881] tun0: tun_chr_ioctl cmd 1074025675 [ 138.809145][ T6881] tun0: persist disabled [ 138.822783][ T6893] netlink: 'syz.2.363': attribute type 2 has an invalid length. [ 138.832798][ T6893] netlink: 'syz.2.363': attribute type 8 has an invalid length. [ 138.842489][ T6893] netlink: 132 bytes leftover after parsing attributes in process `syz.2.363'. [ 138.995150][ T6898] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.367'. [ 139.011818][ T6898] netlink: 4548 bytes leftover after parsing attributes in process `syz.2.367'. [ 139.021777][ T6898] netlink: 'syz.2.367': attribute type 1 has an invalid length. [ 139.107168][ T6901] netlink: 'syz.1.368': attribute type 10 has an invalid length. [ 139.114982][ T6901] hsr0: left promiscuous mode [ 139.156887][ T6901] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 139.350727][ T6913] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.373'. [ 139.593456][ T6922] syzkaller0: entered promiscuous mode [ 139.609407][ T6922] syzkaller0: entered allmulticast mode [ 139.660579][ T6929] netlink: 'syz.3.377': attribute type 21 has an invalid length. [ 139.676748][ T6929] netlink: 'syz.3.377': attribute type 7 has an invalid length. [ 139.852501][ T6934] netlink: 168 bytes leftover after parsing attributes in process `syz.2.380'. [ 140.193361][ T6952] netlink: 'syz.3.385': attribute type 10 has an invalid length. [ 140.203706][ T6952] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.385'. [ 144.303696][ T7035] syzkaller0: entered promiscuous mode [ 144.330350][ T7035] syzkaller0: entered allmulticast mode [ 144.696908][ T7054] netlink: 'syz.3.427': attribute type 10 has an invalid length. [ 144.718254][ T7054] geneve0: entered promiscuous mode [ 144.830750][ T7054] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 144.895803][ T7060] netlink: 'syz.2.429': attribute type 10 has an invalid length. [ 144.908309][ T7060] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 146.813006][ T7085] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 146.830628][ T7085] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 147.396023][ T7106] netlink: 132 bytes leftover after parsing attributes in process `syz.3.447'. [ 147.642092][ T7111] syzkaller0: entered promiscuous mode [ 147.649829][ T7111] syzkaller0: entered allmulticast mode [ 148.069715][ T7124] netlink: 'syz.0.455': attribute type 10 has an invalid length. [ 148.106332][ T7124] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 148.283097][ T7134] netlink: 'syz.2.458': attribute type 12 has an invalid length. [ 148.315086][ T7134] netlink: 132 bytes leftover after parsing attributes in process `syz.2.458'. [ 148.963218][ T7144] netlink: 'syz.0.462': attribute type 9 has an invalid length. [ 148.978926][ T7144] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.462'. [ 149.163408][ T7149] FAULT_INJECTION: forcing a failure. [ 149.163408][ T7149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.177222][ T7149] CPU: 1 PID: 7149 Comm: syz.3.464 Not tainted syzkaller #0 [ 149.184565][ T7149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.194738][ T7149] Call Trace: [ 149.198038][ T7149] [ 149.201001][ T7149] dump_stack_lvl+0x18c/0x250 [ 149.205714][ T7149] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 149.211899][ T7149] ? show_regs_print_info+0x20/0x20 [ 149.217125][ T7149] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 149.223318][ T7149] ? dump_stack+0x9/0x20 [ 149.227590][ T7149] should_fail_ex+0x394/0x4c0 [ 149.232297][ T7149] _copy_to_user+0x2f/0xa0 [ 149.236738][ T7149] simple_read_from_buffer+0xe7/0x150 [ 149.242133][ T7149] proc_fail_nth_read+0x1e8/0x260 [ 149.247204][ T7149] ? proc_fault_inject_write+0x360/0x360 [ 149.252876][ T7149] ? fsnotify_perm+0x271/0x5e0 [ 149.257684][ T7149] ? proc_fault_inject_write+0x360/0x360 [ 149.263343][ T7149] vfs_read+0x298/0x990 [ 149.267534][ T7149] ? kernel_read+0x1e0/0x1e0 [ 149.272147][ T7149] ? __fget_files+0x28/0x460 [ 149.276774][ T7149] ? __fget_files+0x3fc/0x460 [ 149.281509][ T7149] ? __fdget_pos+0x2a3/0x330 [ 149.286126][ T7149] ? ksys_read+0x74/0x260 [ 149.290503][ T7149] ksys_read+0x151/0x260 [ 149.294778][ T7149] ? vfs_write+0x9a0/0x9a0 [ 149.299229][ T7149] ? syscall_enter_from_user_mode+0x2e/0x80 [ 149.305196][ T7149] do_syscall_64+0x55/0xb0 [ 149.309641][ T7149] ? clear_bhb_loop+0x40/0x90 [ 149.314343][ T7149] ? clear_bhb_loop+0x40/0x90 [ 149.319044][ T7149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.324957][ T7149] RIP: 0033:0x7f42b6f5e90e [ 149.329389][ T7149] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.349020][ T7149] RSP: 002b:00007f42b7eb2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 149.357459][ T7149] RAX: ffffffffffffffda RBX: 00007f42b7eb36c0 RCX: 00007f42b6f5e90e [ 149.365445][ T7149] RDX: 000000000000000f RSI: 00007f42b7eb30a0 RDI: 000000000000000a [ 149.373440][ T7149] RBP: 00007f42b7eb3090 R08: 0000000000000000 R09: 0000000000000000 [ 149.381424][ T7149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.389433][ T7149] R13: 00007f42b7226038 R14: 00007f42b7225fa0 R15: 00007ffdd4312408 [ 149.397433][ T7149] [ 150.908513][ T7155] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.466'. [ 151.157151][ T7169] syzkaller0: entered promiscuous mode [ 151.172060][ T7169] syzkaller0: entered allmulticast mode [ 151.228743][ T7170] syzkaller0: entered promiscuous mode [ 151.234306][ T7170] syzkaller0: entered allmulticast mode [ 151.248382][ T7169] FAULT_INJECTION: forcing a failure. [ 151.248382][ T7169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.262778][ T7169] CPU: 0 PID: 7169 Comm: syz.1.471 Not tainted syzkaller #0 [ 151.270178][ T7169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.280227][ T7169] Call Trace: [ 151.283507][ T7169] [ 151.286444][ T7169] dump_stack_lvl+0x18c/0x250 [ 151.291119][ T7169] ? show_regs_print_info+0x20/0x20 [ 151.296394][ T7169] ? load_image+0x420/0x420 [ 151.300898][ T7169] ? __might_fault+0xaa/0x120 [ 151.306002][ T7169] ? __lock_acquire+0x7d80/0x7d80 [ 151.311028][ T7169] should_fail_ex+0x394/0x4c0 [ 151.315703][ T7169] _copy_from_iter+0x1cd/0x1290 [ 151.320561][ T7169] ? copyout_mc+0x70/0x70 [ 151.324896][ T7169] tun_get_user+0x387/0x3d70 [ 151.329488][ T7169] ? aa_file_perm+0x3e3/0xee0 [ 151.334166][ T7169] ? rcu_read_unlock+0xa0/0xa0 [ 151.338927][ T7169] ? tun_get+0x1c/0x2e0 [ 151.343162][ T7169] ? __lock_acquire+0x7d80/0x7d80 [ 151.348187][ T7169] ? tun_get+0x1c/0x2e0 [ 151.352339][ T7169] tun_chr_write_iter+0x119/0x200 [ 151.357358][ T7169] vfs_write+0x474/0x9a0 [ 151.361596][ T7169] ? file_end_write+0x250/0x250 [ 151.366452][ T7169] ? __fget_files+0x3fc/0x460 [ 151.371134][ T7169] ? __fdget_pos+0x1d8/0x330 [ 151.375714][ T7169] ? ksys_write+0x74/0x260 [ 151.380125][ T7169] ksys_write+0x151/0x260 [ 151.384452][ T7169] ? __ia32_sys_read+0x90/0x90 [ 151.389214][ T7169] ? lockdep_hardirqs_on+0x98/0x150 [ 151.394410][ T7169] do_syscall_64+0x55/0xb0 [ 151.398822][ T7169] ? clear_bhb_loop+0x40/0x90 [ 151.403498][ T7169] ? clear_bhb_loop+0x40/0x90 [ 151.408169][ T7169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.414061][ T7169] RIP: 0033:0x7f5b9a79e0d9 [ 151.418470][ T7169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.438091][ T7169] RSP: 002b:00007f5b9b6f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 151.446499][ T7169] RAX: ffffffffffffffda RBX: 00007f5b9aa25fa0 RCX: 00007f5b9a79e0d9 [ 151.454476][ T7169] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000008 [ 151.462442][ T7169] RBP: 00007f5b9b6f6090 R08: 0000000000000000 R09: 0000000000000000 [ 151.470508][ T7169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.478485][ T7169] R13: 00007f5b9aa26038 R14: 00007f5b9aa25fa0 R15: 00007ffdb731e778 [ 151.486472][ T7169] [ 151.521534][ T7172] syzkaller0: entered promiscuous mode [ 151.527154][ T7172] syzkaller0: entered allmulticast mode [ 154.232793][ T7192] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.478'. [ 155.272872][ T7192] netlink: 4548 bytes leftover after parsing attributes in process `syz.0.478'. [ 155.296258][ T7192] netlink: 'syz.0.478': attribute type 1 has an invalid length. [ 155.420344][ T7198] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.481'. [ 155.615636][ T7199] syzkaller0: entered promiscuous mode [ 155.637463][ T7199] syzkaller0: entered allmulticast mode [ 155.963156][ T7218] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.486'. [ 155.988432][ T7218] netlink: 'syz.1.486': attribute type 2 has an invalid length. [ 156.211889][ T7218] netlink: 830 bytes leftover after parsing attributes in process `syz.1.486'. [ 156.468764][ T7228] netlink: 'syz.1.488': attribute type 29 has an invalid length. [ 158.851824][ T7228] netlink: 'syz.1.488': attribute type 29 has an invalid length. [ 158.969876][ T7250] netlink: 'syz.0.494': attribute type 10 has an invalid length. [ 158.997570][ T7250] netlink: 40 bytes leftover after parsing attributes in process `syz.0.494'. [ 159.015102][ T7250] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 159.206713][ T7255] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.496'. [ 159.304354][ T7259] syzkaller0: entered promiscuous mode [ 159.316747][ T7259] syzkaller0: entered allmulticast mode [ 159.541652][ T7269] netlink: 830 bytes leftover after parsing attributes in process `syz.2.497'. [ 159.550195][ T7263] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.497'. [ 159.560047][ T7263] netlink: 'syz.2.497': attribute type 2 has an invalid length. [ 159.887717][ T7279] netlink: 'syz.2.505': attribute type 10 has an invalid length. [ 159.896942][ T7279] hsr0: entered promiscuous mode [ 159.905329][ T7279] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 159.933330][ T7279] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 159.945744][ T7279] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 159.969435][ T7279] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 161.607845][ T7284] netlink: 'syz.0.503': attribute type 10 has an invalid length. [ 161.621649][ T7284] bond0: (slave geneve0): Releasing backup interface [ 161.895295][ T7300] FAULT_INJECTION: forcing a failure. [ 161.895295][ T7300] name failslab, interval 1, probability 0, space 0, times 0 [ 161.915469][ T7300] CPU: 1 PID: 7300 Comm: syz.0.511 Not tainted syzkaller #0 [ 161.922821][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.932908][ T7300] Call Trace: [ 161.936214][ T7300] [ 161.939169][ T7300] dump_stack_lvl+0x18c/0x250 [ 161.943889][ T7300] ? show_regs_print_info+0x20/0x20 [ 161.949115][ T7300] ? load_image+0x420/0x420 [ 161.953657][ T7300] ? __might_sleep+0xe0/0xe0 [ 161.955386][ T7305] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.512'. [ 161.958264][ T7300] ? __lock_acquire+0x7d80/0x7d80 [ 161.958293][ T7300] should_fail_ex+0x394/0x4c0 [ 161.958320][ T7300] should_failslab+0x9/0x20 [ 161.958342][ T7300] slab_pre_alloc_hook+0x59/0x300 [ 161.958371][ T7300] kmem_cache_alloc_node+0x5e/0x310 [ 161.958391][ T7300] ? __alloc_skb+0x103/0x2c0 [ 161.958414][ T7300] __alloc_skb+0x103/0x2c0 [ 161.969376][ T7305] netlink: 'syz.3.512': attribute type 2 has an invalid length. [ 161.972597][ T7300] netlink_ack+0x377/0x1160 [ 162.013179][ T7300] ? netlink_dump+0xec0/0xec0 [ 162.017893][ T7300] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 162.023653][ T7300] netlink_rcv_skb+0x2b3/0x4c0 [ 162.028448][ T7300] ? rtnetlink_bind+0x80/0x80 [ 162.033149][ T7300] ? netlink_ack+0x1160/0x1160 [ 162.037957][ T7300] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.044160][ T7300] netlink_unicast+0x7b1/0x930 [ 162.048975][ T7300] netlink_sendmsg+0x8d0/0xbf0 [ 162.053768][ T7300] ? lockdep_hardirqs_on+0x98/0x150 [ 162.058997][ T7300] ? netlink_getsockopt+0x590/0x590 [ 162.064230][ T7300] ? netlink_getsockopt+0x590/0x590 [ 162.069456][ T7300] ____sys_sendmsg+0x61b/0x980 [ 162.074257][ T7300] ? __asan_memset+0x22/0x40 [ 162.079011][ T7300] ? __sys_sendmsg_sock+0x30/0x30 [ 162.084091][ T7300] ? __import_iovec+0x5f2/0x850 [ 162.088976][ T7300] ? import_iovec+0x73/0xa0 [ 162.093707][ T7300] ___sys_sendmsg+0x2a6/0x360 [ 162.098430][ T7300] ? __sys_sendmsg+0x2b0/0x2b0 [ 162.103239][ T7300] __se_sys_sendmsg+0x1d0/0x2c0 [ 162.108107][ T7300] ? __x64_sys_sendmsg+0x80/0x80 [ 162.113176][ T7300] ? syscall_enter_from_user_mode+0x2e/0x80 [ 162.119081][ T7300] do_syscall_64+0x55/0xb0 [ 162.123504][ T7300] ? clear_bhb_loop+0x40/0x90 [ 162.128178][ T7300] ? clear_bhb_loop+0x40/0x90 [ 162.132848][ T7300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.138735][ T7300] RIP: 0033:0x7f625f19e0d9 [ 162.143146][ T7300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.162758][ T7300] RSP: 002b:00007f6260075028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.171169][ T7300] RAX: ffffffffffffffda RBX: 00007f625f425fa0 RCX: 00007f625f19e0d9 [ 162.179131][ T7300] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 162.187093][ T7300] RBP: 00007f6260075090 R08: 0000000000000000 R09: 0000000000000000 [ 162.195052][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.203012][ T7300] R13: 00007f625f426038 R14: 00007f625f425fa0 R15: 00007fff849b7868 [ 162.211000][ T7300] [ 162.279724][ T7305] netlink: 830 bytes leftover after parsing attributes in process `syz.3.512'. [ 162.565662][ T7309] netlink: 'syz.0.513': attribute type 39 has an invalid length. [ 162.655899][ T7319] netlink: 'syz.2.517': attribute type 13 has an invalid length. [ 162.672202][ T7319] netlink: 168 bytes leftover after parsing attributes in process `syz.2.517'. [ 162.891954][ T7330] netlink: 160 bytes leftover after parsing attributes in process `syz.0.522'. [ 162.930080][ T7330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.049850][ T7331] syzkaller0: entered promiscuous mode [ 163.055416][ T7331] syzkaller0: entered allmulticast mode [ 163.172081][ T7341] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.526'. [ 164.421505][ T7345] netlink: 'syz.1.528': attribute type 21 has an invalid length. [ 166.139904][ T7360] netlink: 128 bytes leftover after parsing attributes in process `syz.0.539'. [ 166.153982][ T7360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.172690][ T7361] netlink: 'syz.3.531': attribute type 39 has an invalid length. [ 166.215009][ T7377] netlink: 830 bytes leftover after parsing attributes in process `syz.1.536'. [ 166.231454][ T7379] netlink: 'syz.1.536': attribute type 10 has an invalid length. [ 166.530715][ T7386] syzkaller0: entered promiscuous mode [ 166.536248][ T7386] syzkaller0: entered allmulticast mode [ 166.567054][ T7390] FAULT_INJECTION: forcing a failure. [ 166.567054][ T7390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.630361][ T7390] CPU: 1 PID: 7390 Comm: syz.2.540 Not tainted syzkaller #0 [ 166.637706][ T7390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.647917][ T7390] Call Trace: [ 166.651214][ T7390] [ 166.654180][ T7390] dump_stack_lvl+0x18c/0x250 [ 166.658892][ T7390] ? show_regs_print_info+0x20/0x20 [ 166.664132][ T7390] ? load_image+0x420/0x420 [ 166.668686][ T7390] ? __might_fault+0xaa/0x120 [ 166.673392][ T7390] ? __lock_acquire+0x7d80/0x7d80 [ 166.678455][ T7390] should_fail_ex+0x394/0x4c0 [ 166.683175][ T7390] _copy_from_user+0x2f/0xe0 [ 166.687796][ T7390] kstrtouint_from_user+0xde/0x170 [ 166.692943][ T7390] ? kstrtol_from_user+0x190/0x190 [ 166.698101][ T7390] proc_fail_nth_write+0x8f/0x250 [ 166.703158][ T7390] ? proc_fail_nth_read+0x260/0x260 [ 166.708489][ T7390] ? proc_fail_nth_read+0x260/0x260 [ 166.713719][ T7390] vfs_write+0x299/0x9a0 [ 166.717995][ T7390] ? file_end_write+0x250/0x250 [ 166.722878][ T7390] ? __fget_files+0x28/0x460 [ 166.727502][ T7390] ? __fget_files+0x3fc/0x460 [ 166.732201][ T7390] ? __fdget_pos+0x2a3/0x330 [ 166.736886][ T7390] ? ksys_write+0x74/0x260 [ 166.741301][ T7390] ksys_write+0x151/0x260 [ 166.745633][ T7390] ? __ia32_sys_read+0x90/0x90 [ 166.750414][ T7390] ? lockdep_hardirqs_on+0x98/0x150 [ 166.755615][ T7390] do_syscall_64+0x55/0xb0 [ 166.760027][ T7390] ? clear_bhb_loop+0x40/0x90 [ 166.764698][ T7390] ? clear_bhb_loop+0x40/0x90 [ 166.769382][ T7390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.775264][ T7390] RIP: 0033:0x7f32c7f5e90e [ 166.779678][ T7390] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 166.799540][ T7390] RSP: 002b:00007f32c8e56fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 166.807951][ T7390] RAX: ffffffffffffffda RBX: 00007f32c8e576c0 RCX: 00007f32c7f5e90e [ 166.815915][ T7390] RDX: 0000000000000001 RSI: 00007f32c8e570a0 RDI: 0000000000000009 [ 166.823874][ T7390] RBP: 00007f32c8e57090 R08: 0000000000000000 R09: 0000000000000000 [ 166.831834][ T7390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.839796][ T7390] R13: 00007f32c8226218 R14: 00007f32c8226180 R15: 00007ffe7e948468 [ 166.847779][ T7390] [ 168.654079][ T7412] syzkaller0: entered promiscuous mode [ 168.659871][ T7412] syzkaller0: entered allmulticast mode [ 169.934230][ T7418] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 170.184804][ T7426] syzkaller0: entered promiscuous mode [ 170.191650][ T7426] syzkaller0: entered allmulticast mode [ 170.201102][ T7424] netlink: 'syz.2.551': attribute type 39 has an invalid length. [ 170.471805][ T7437] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.556'. [ 171.991827][ T7464] netlink: 'syz.0.564': attribute type 10 has an invalid length. [ 172.002089][ T7464] netlink: 9279 bytes leftover after parsing attributes in process `syz.0.564'. [ 172.079660][ T42] wlan1: Trigger new scan to find an IBSS to join [ 172.355185][ T7478] IPv6: pim6reg1: Disabled Multicast RS [ 172.930859][ T7485] syzkaller0: entered promiscuous mode [ 173.002059][ T7485] syzkaller0: entered allmulticast mode [ 173.585623][ T7495] netlink: 'syz.2.576': attribute type 10 has an invalid length. [ 173.635076][ T7495] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 173.693942][ T7495] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 173.744391][ T7495] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 173.776934][ T7495] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 175.949562][ T7509] netlink: 'syz.2.581': attribute type 17 has an invalid length. [ 175.958706][ T7509] netlink: 152 bytes leftover after parsing attributes in process `syz.2.581'. [ 175.971563][ T7509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.074113][ T7518] netlink: 'syz.0.582': attribute type 3 has an invalid length. [ 176.096611][ T7518] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.582'. [ 176.099061][ T42] wlan1: Trigger new scan to find an IBSS to join [ 176.541165][ T7534] netlink: 160 bytes leftover after parsing attributes in process `syz.0.589'. [ 176.573536][ T7538] FAULT_INJECTION: forcing a failure. [ 176.573536][ T7538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.591961][ T7534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.630878][ T7538] CPU: 0 PID: 7538 Comm: syz.2.591 Not tainted syzkaller #0 [ 176.638329][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.648415][ T7538] Call Trace: [ 176.651718][ T7538] [ 176.654680][ T7538] dump_stack_lvl+0x18c/0x250 [ 176.659390][ T7538] ? show_regs_print_info+0x20/0x20 [ 176.664678][ T7538] ? load_image+0x420/0x420 [ 176.669225][ T7538] ? __might_fault+0xaa/0x120 [ 176.673960][ T7538] ? __lock_acquire+0x7d80/0x7d80 [ 176.679024][ T7538] should_fail_ex+0x394/0x4c0 [ 176.683744][ T7538] _copy_from_user+0x2f/0xe0 [ 176.688466][ T7538] __sys_bpf+0x23e/0x890 [ 176.692791][ T7538] ? bpf_link_show_fdinfo+0x390/0x390 [ 176.698200][ T7538] ? lock_chain_count+0x20/0x20 [ 176.703082][ T7538] __x64_sys_bpf+0x7c/0x90 [ 176.707506][ T7538] do_syscall_64+0x55/0xb0 [ 176.712023][ T7538] ? clear_bhb_loop+0x40/0x90 [ 176.716721][ T7538] ? clear_bhb_loop+0x40/0x90 [ 176.721399][ T7538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.727291][ T7538] RIP: 0033:0x7f32c7f9e0d9 [ 176.731705][ T7538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.751663][ T7538] RSP: 002b:00007f32c8e99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.760073][ T7538] RAX: ffffffffffffffda RBX: 00007f32c8225fa0 RCX: 00007f32c7f9e0d9 [ 176.768041][ T7538] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 176.776002][ T7538] RBP: 00007f32c8e99090 R08: 0000000000000000 R09: 0000000000000000 [ 176.783979][ T7538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.791948][ T7538] R13: 00007f32c8226038 R14: 00007f32c8225fa0 R15: 00007ffe7e948468 [ 176.799926][ T7538] [ 177.059231][ T7543] syzkaller0: entered promiscuous mode [ 177.064996][ T7543] syzkaller0: entered allmulticast mode [ 178.106442][ T42] wlan1: Creating new IBSS network, BSSID ae:d6:0d:48:ab:6f [ 179.305471][ T7572] bridge_slave_1: left allmulticast mode [ 179.311300][ T7572] bridge_slave_1: left promiscuous mode [ 179.317903][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.328495][ T7572] bridge_slave_0: left allmulticast mode [ 179.334149][ T7572] bridge_slave_0: left promiscuous mode [ 179.340119][ T7572] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.427776][ T7588] netlink: 'syz.1.605': attribute type 10 has an invalid length. [ 179.441388][ T7588] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 179.623476][ T7598] netlink: 'syz.0.609': attribute type 9 has an invalid length. [ 179.631561][ T7598] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.609'. [ 179.762157][ T7605] vcan0: entered allmulticast mode [ 179.785266][ T7603] netlink: 'syz.1.607': attribute type 10 has an invalid length. [ 179.806953][ T7605] netlink: 'syz.1.607': attribute type 10 has an invalid length. [ 180.062835][ T7621] syzkaller0: entered promiscuous mode [ 180.070462][ T7621] syzkaller0: entered allmulticast mode [ 180.134413][ T7623] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.617'. [ 180.292761][ T7629] tc_dump_action: action bad kind [ 180.390344][ T7633] netlink: 'syz.2.622': attribute type 9 has an invalid length. [ 180.398889][ T7633] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.622'. [ 180.595242][ T7637] netlink: 196 bytes leftover after parsing attributes in process `syz.2.624'. [ 181.221033][ T7657] can: request_module (can-proto-4) failed. [ 181.234492][ T7661] netlink: 'syz.3.632': attribute type 9 has an invalid length. [ 181.242823][ T7661] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.632'. [ 183.339768][ T7688] netlink: 'syz.3.641': attribute type 10 has an invalid length. [ 183.368940][ T7688] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 183.384887][ T7688] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 183.421288][ T7688] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 183.435168][ T7688] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 183.604413][ T7690] syzkaller0: entered promiscuous mode [ 183.611342][ T7690] syzkaller0: entered allmulticast mode [ 183.897524][ T7708] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.648'. [ 184.184094][ T7721] netlink: 'syz.3.652': attribute type 21 has an invalid length. [ 184.193386][ T7721] netlink: 128 bytes leftover after parsing attributes in process `syz.3.652'. [ 184.203370][ T7721] netlink: 3 bytes leftover after parsing attributes in process `syz.3.652'. [ 184.551205][ T7729] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.655'. [ 185.778141][ T7731] netlink: 'syz.0.656': attribute type 10 has an invalid length. [ 185.789066][ T7734] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.797325][ T7734] netlink: 1 bytes leftover after parsing attributes in process `syz.3.657'. [ 185.821440][ T7732] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.656'. [ 185.833160][ T7738] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.657'. [ 185.984336][ T7743] netlink: 132 bytes leftover after parsing attributes in process `syz.1.660'. [ 186.102056][ T7749] netlink: 'syz.2.662': attribute type 4 has an invalid length. [ 186.111815][ T7749] netlink: 152 bytes leftover after parsing attributes in process `syz.2.662'. [ 186.142249][ T7750] netlink: 'syz.2.662': attribute type 4 has an invalid length. [ 186.162480][ T7750] netlink: 152 bytes leftover after parsing attributes in process `syz.2.662'. [ 186.363743][ T7762] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.663'. [ 186.669152][ T7773] syzkaller0: entered promiscuous mode [ 186.674143][ T7778] netlink: 'syz.2.671': attribute type 3 has an invalid length. [ 186.694063][ T7778] netlink: 'syz.2.671': attribute type 6 has an invalid length. [ 186.704754][ T7773] syzkaller0: entered allmulticast mode [ 186.710696][ T7778] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.671'. [ 186.987044][ T7792] netlink: 'syz.1.675': attribute type 6 has an invalid length. [ 186.995199][ T7792] netlink: 164 bytes leftover after parsing attributes in process `syz.1.675'. [ 187.280927][ T7800] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.678'. [ 189.061355][ T7810] netlink: 'syz.1.682': attribute type 1 has an invalid length. [ 189.071739][ T7817] netlink: 'syz.0.684': attribute type 10 has an invalid length. [ 189.082717][ T7817] hsr0: left promiscuous mode [ 189.090401][ T7817] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 189.352704][ T7824] netlink: 'syz.2.686': attribute type 46 has an invalid length. [ 192.625416][ T7834] __nla_validate_parse: 4 callbacks suppressed [ 192.625446][ T7834] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.692'. [ 192.821533][ T7845] netlink: 'syz.2.692': attribute type 10 has an invalid length. [ 192.841236][ T7847] netlink: 'syz.1.695': attribute type 11 has an invalid length. [ 192.864967][ T7847] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.695'. [ 192.930789][ T7845] team0: Port device wlan1 added [ 192.967409][ T7833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.265084][ T7856] syzkaller0: entered promiscuous mode [ 193.300924][ T7856] syzkaller0: entered allmulticast mode [ 194.483271][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.489835][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.672720][ T7892] netlink: 132 bytes leftover after parsing attributes in process `syz.3.712'. [ 195.885396][ T7901] netlink: 132 bytes leftover after parsing attributes in process `syz.3.716'. [ 196.377312][ T7915] netlink: 'syz.1.722': attribute type 10 has an invalid length. [ 196.425622][ T7915] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.722'. [ 196.483075][ T7917] netlink: 'syz.0.721': attribute type 25 has an invalid length. [ 196.506616][ T7917] netlink: 'syz.0.721': attribute type 3 has an invalid length. [ 196.522364][ T7917] netlink: 'syz.0.721': attribute type 10 has an invalid length. [ 196.531218][ T7917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.721'. [ 196.578947][ T7917] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 196.771686][ T7924] syzkaller0: entered promiscuous mode [ 196.797089][ T7924] syzkaller0: entered allmulticast mode [ 196.823640][ T7931] netlink: 132 bytes leftover after parsing attributes in process `syz.0.728'. [ 197.229529][ T7939] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.726'. [ 197.255510][ T7942] FAULT_INJECTION: forcing a failure. [ 197.255510][ T7942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.256550][ T7939] bridge_slave_1: default FDB implementation only supports local addresses [ 197.274288][ T7942] CPU: 1 PID: 7942 Comm: syz.2.731 Not tainted syzkaller #0 [ 197.285449][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.295653][ T7942] Call Trace: [ 197.298967][ T7942] [ 197.301930][ T7942] dump_stack_lvl+0x18c/0x250 [ 197.306659][ T7942] ? show_regs_print_info+0x20/0x20 [ 197.311890][ T7942] ? load_image+0x420/0x420 [ 197.316440][ T7942] ? __lock_acquire+0x7d80/0x7d80 [ 197.321505][ T7942] ? snprintf+0xe9/0x140 [ 197.325787][ T7942] should_fail_ex+0x394/0x4c0 [ 197.330507][ T7942] _copy_to_user+0x2f/0xa0 [ 197.334970][ T7942] simple_read_from_buffer+0xe7/0x150 [ 197.340383][ T7942] proc_fail_nth_read+0x1e8/0x260 [ 197.345592][ T7942] ? proc_fault_inject_write+0x360/0x360 [ 197.351292][ T7942] ? fsnotify_perm+0x271/0x5e0 [ 197.356102][ T7942] ? proc_fault_inject_write+0x360/0x360 [ 197.361783][ T7942] vfs_read+0x298/0x990 [ 197.366085][ T7942] ? kernel_read+0x1e0/0x1e0 [ 197.370717][ T7942] ? __fget_files+0x28/0x460 [ 197.375340][ T7942] ? __fget_files+0x3fc/0x460 [ 197.380095][ T7942] ? __fdget_pos+0x2a3/0x330 [ 197.384800][ T7942] ? ksys_read+0x74/0x260 [ 197.389252][ T7942] ksys_read+0x151/0x260 [ 197.393543][ T7942] ? vfs_write+0x9a0/0x9a0 [ 197.398000][ T7942] ? lockdep_hardirqs_on+0x98/0x150 [ 197.403232][ T7942] do_syscall_64+0x55/0xb0 [ 197.407669][ T7942] ? clear_bhb_loop+0x40/0x90 [ 197.412372][ T7942] ? clear_bhb_loop+0x40/0x90 [ 197.417088][ T7942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.423004][ T7942] RIP: 0033:0x7f32c7f5e90e [ 197.427443][ T7942] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 197.447300][ T7942] RSP: 002b:00007f32c8e98fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.455740][ T7942] RAX: ffffffffffffffda RBX: 00007f32c8e996c0 RCX: 00007f32c7f5e90e [ 197.463735][ T7942] RDX: 000000000000000f RSI: 00007f32c8e990a0 RDI: 0000000000000005 [ 197.471735][ T7942] RBP: 00007f32c8e99090 R08: 0000000000000000 R09: 0000000000000000 [ 197.479725][ T7942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.487723][ T7942] R13: 00007f32c8226038 R14: 00007f32c8225fa0 R15: 00007ffe7e948468 [ 197.495752][ T7942] [ 199.656178][ T7944] netlink: 'syz.0.732': attribute type 10 has an invalid length. [ 199.664372][ T7944] netlink: 55 bytes leftover after parsing attributes in process `syz.0.732'. [ 199.707331][ T7956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.714777][ T7956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.728495][ T7956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.746736][ T7956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.773705][ T7956] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 199.781955][ T7956] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 200.184411][ T7973] @0Ù: renamed from bridge_slave_0 (while UP) [ 200.198139][ T7971] netlink: 'syz.0.743': attribute type 9 has an invalid length. [ 200.211703][ T7971] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.743'. [ 200.424873][ T7979] syzkaller0: entered promiscuous mode [ 200.430617][ T7979] syzkaller0: entered allmulticast mode [ 200.528192][ T7986] netlink: 'syz.2.749': attribute type 2 has an invalid length. [ 200.536114][ T7986] netlink: 'syz.2.749': attribute type 8 has an invalid length. [ 200.546605][ T7986] netlink: 132 bytes leftover after parsing attributes in process `syz.2.749'. [ 200.561065][ T7981] netlink: 'syz.0.747': attribute type 21 has an invalid length. [ 201.310872][ T8011] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.756'. [ 201.679610][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 201.679641][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 201.685736][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 201.692459][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 203.318908][ T8041] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.767'. [ 203.345837][ T8041] netlink: 4548 bytes leftover after parsing attributes in process `syz.2.767'. [ 203.367088][ T8041] netlink: 'syz.2.767': attribute type 1 has an invalid length. [ 203.374905][ T8043] netlink: 'syz.3.768': attribute type 10 has an invalid length. [ 203.382939][ T8043] hsr0: left promiscuous mode [ 203.393324][ T8043] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 203.566522][ T8050] netlink: 156 bytes leftover after parsing attributes in process `syz.1.770'. [ 203.617274][ T8049] netlink: 156 bytes leftover after parsing attributes in process `syz.1.770'. [ 204.798549][ T8101] bridge_slave_1: left allmulticast mode [ 204.804465][ T8101] bridge_slave_1: left promiscuous mode [ 204.837564][ T8101] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.932377][ T8101] bridge_slave_0: left allmulticast mode [ 204.980658][ T8101] bridge_slave_0: left promiscuous mode [ 205.018352][ T8101] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.672192][ T8122] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.797'. [ 205.687457][ T8122] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 208.179394][ T8169] netlink: 60 bytes leftover after parsing attributes in process `syz.1.815'. [ 208.431025][ T8175] syzkaller0: entered promiscuous mode [ 208.448421][ T8175] syzkaller0: entered allmulticast mode [ 208.508615][ T8169] netlink: 60 bytes leftover after parsing attributes in process `syz.1.815'. [ 208.584921][ T8170] netlink: 60 bytes leftover after parsing attributes in process `syz.1.815'. [ 208.643631][ T8173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.815'. [ 210.824390][ T8197] netlink: 'syz.0.826': attribute type 6 has an invalid length. [ 210.832409][ T8197] netlink: 164 bytes leftover after parsing attributes in process `syz.0.826'. [ 210.896204][ T8206] netlink: 'syz.1.828': attribute type 10 has an invalid length. [ 210.906792][ T8206] hsr0: entered promiscuous mode [ 210.918343][ T8206] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 210.944989][ T8206] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 210.956224][ T8206] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 210.973346][ T8206] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 211.384742][ T8223] netlink: 140 bytes leftover after parsing attributes in process `syz.0.835'. [ 211.759586][ T8234] netlink: 14562 bytes leftover after parsing attributes in process `syz.1.838'. [ 211.773221][ T8237] netlink: 14562 bytes leftover after parsing attributes in process `syz.1.838'. [ 211.843389][ T8239] netlink: 128 bytes leftover after parsing attributes in process `syz.0.840'. [ 211.868838][ T8239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.927879][ T8237] netlink: 'syz.1.838': attribute type 10 has an invalid length. [ 211.948264][ T8237] netlink: 168 bytes leftover after parsing attributes in process `syz.1.838'. [ 211.969285][ T8234] netlink: 'syz.1.838': attribute type 10 has an invalid length. [ 211.996551][ T8234] netlink: 168 bytes leftover after parsing attributes in process `syz.1.838'. [ 212.204658][ T8249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.226669][ T8249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.259724][ T8249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.277101][ T8249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.301110][ T8255] netlink: 'syz.0.845': attribute type 9 has an invalid length. [ 212.327910][ T8249] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 212.346210][ T8255] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.845'. [ 212.356148][ T8249] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 212.646592][ T8259] netlink: 'syz.1.847': attribute type 2 has an invalid length. [ 212.664051][ T8259] netlink: 'syz.1.847': attribute type 8 has an invalid length. [ 212.672531][ T8259] netlink: 132 bytes leftover after parsing attributes in process `syz.1.847'. [ 214.047029][ T8306] netlink: 'syz.2.862': attribute type 10 has an invalid length. [ 214.069135][ T8306] netlink: 55 bytes leftover after parsing attributes in process `syz.2.862'. [ 214.499989][ T8316] netlink: 'syz.0.866': attribute type 1 has an invalid length. [ 214.537484][ T8318] netlink: 'syz.1.868': attribute type 10 has an invalid length. [ 214.563904][ T8318] hsr0: left promiscuous mode [ 214.569913][ T8318] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 216.066477][ T8360] netlink: 'syz.2.884': attribute type 2 has an invalid length. [ 216.096892][ T8360] __nla_validate_parse: 2 callbacks suppressed [ 216.096910][ T8360] netlink: 132 bytes leftover after parsing attributes in process `syz.2.884'. [ 216.165527][ T8372] netlink: 'syz.1.888': attribute type 10 has an invalid length. [ 216.252001][ T8374] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.889'. [ 216.286488][ T8374] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.889'. [ 216.298293][ T8374] tipc: Started in network mode [ 216.303445][ T8374] tipc: Node identity b, cluster identity 73 [ 216.328247][ T8374] tipc: Node number set to 11 [ 216.345066][ T8372] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.888'. [ 217.295367][ T8411] netlink: 'syz.1.901': attribute type 10 has an invalid length. [ 217.353452][ T8412] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.901'. [ 217.534164][ T8414] netlink: 'syz.0.902': attribute type 10 has an invalid length. [ 217.611302][ T8414] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.633169][ T8414] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.697373][ T8414] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.716720][ T8414] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.838834][ T8414] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.857299][ T8414] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.866828][ T8414] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.876046][ T8414] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.922792][ T8414] team0: Port device geneve1 added [ 217.946614][ T8418] netlink: 132 bytes leftover after parsing attributes in process `syz.3.903'. [ 218.005829][ T8414] syz.0.902 (8414) used greatest stack depth: 18472 bytes left [ 218.347234][ T8432] netlink: 'syz.3.908': attribute type 3 has an invalid length. [ 218.361830][ T8432] netlink: 80540 bytes leftover after parsing attributes in process `syz.3.908'. [ 218.466071][ T8430] syzkaller0: entered promiscuous mode [ 218.472205][ T8430] syzkaller0: entered allmulticast mode [ 221.001529][ T8444] netlink: 'syz.3.911': attribute type 10 has an invalid length. [ 221.009577][ T8444] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 221.022261][ T8444] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 221.032599][ T8444] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 221.045161][ T8444] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 221.265256][ T8459] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 221.279228][ T8459] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.916'. [ 221.541770][ T8476] netlink: 'syz.1.924': attribute type 9 has an invalid length. [ 221.554486][ T8476] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.924'. [ 221.560572][ T8473] netlink: 'syz.2.922': attribute type 10 has an invalid length. [ 221.574720][ T8473] geneve0: entered promiscuous mode [ 221.598353][ T8471] netlink: 'syz.3.921': attribute type 10 has an invalid length. [ 221.676898][ T8471] team0: Port device geneve1 added [ 222.521541][ T5787] Bluetooth: hci2: ISO packet for unknown connection handle 53 [ 222.730267][ T8500] netlink: 'syz.3.934': attribute type 10 has an invalid length. [ 222.787369][ T8500] bond0: (slave geneve0): Releasing backup interface [ 222.828259][ T8504] netlink: 'syz.2.935': attribute type 10 has an invalid length. [ 222.843937][ T8504] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.863297][ T8504] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.873230][ T8504] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.883159][ T8504] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.936120][ T8504] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.952420][ T8504] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.968091][ T8504] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.978780][ T8504] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.011920][ T8504] team0: Port device geneve1 added [ 224.087488][ T8533] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.945'. [ 224.099880][ T8533] netlink: 4548 bytes leftover after parsing attributes in process `syz.3.945'. [ 224.134764][ T8533] netlink: 'syz.3.945': attribute type 1 has an invalid length. [ 224.337954][ T8539] netlink: 'syz.0.948': attribute type 10 has an invalid length. [ 224.416529][ T8543] netlink: 'syz.3.950': attribute type 10 has an invalid length. [ 224.424466][ T8543] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 224.818431][ T8564] netlink: 'syz.3.958': attribute type 9 has an invalid length. [ 224.826468][ T8564] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.958'. [ 224.963199][ T8574] : renamed from ip6tnl0 (while UP) [ 225.340346][ T8587] netlink: 105 bytes leftover after parsing attributes in process `syz.3.967'. [ 225.350952][ T8587] netlink: 105 bytes leftover after parsing attributes in process `syz.3.967'. [ 225.380611][ T8587] netlink: 160 bytes leftover after parsing attributes in process `syz.3.967'. [ 226.349958][ T8603] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 227.928119][ T8652] validate_nla: 1 callbacks suppressed [ 227.928155][ T8652] netlink: 'syz.3.990': attribute type 10 has an invalid length. [ 228.110571][ T8652] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.990'. [ 229.489493][ T8685] netlink: 'syz.0.1001': attribute type 10 has an invalid length. [ 229.885386][ T8698] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1006'. [ 229.948824][ T8698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.034962][ T8691] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1003'. [ 230.299094][ T8708] FAULT_INJECTION: forcing a failure. [ 230.299094][ T8708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.324493][ T8708] CPU: 0 PID: 8708 Comm: syz.3.1009 Not tainted syzkaller #0 [ 230.331931][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.342021][ T8708] Call Trace: [ 230.345302][ T8708] [ 230.348243][ T8708] dump_stack_lvl+0x18c/0x250 [ 230.352952][ T8708] ? show_regs_print_info+0x20/0x20 [ 230.358172][ T8708] ? load_image+0x420/0x420 [ 230.362702][ T8708] ? __might_fault+0xaa/0x120 [ 230.367382][ T8708] ? __lock_acquire+0x7d80/0x7d80 [ 230.372416][ T8708] should_fail_ex+0x394/0x4c0 [ 230.377187][ T8708] _copy_from_iter+0x1cd/0x1290 [ 230.382037][ T8708] ? __virt_addr_valid+0x10c/0x380 [ 230.387149][ T8708] ? __lock_acquire+0x7d80/0x7d80 [ 230.392172][ T8708] ? copyout_mc+0x70/0x70 [ 230.396499][ T8708] ? __virt_addr_valid+0x10c/0x380 [ 230.401604][ T8708] ? __virt_addr_valid+0x10c/0x380 [ 230.406735][ T8708] ? __virt_addr_valid+0x10c/0x380 [ 230.411979][ T8708] ? __check_object_size+0x4fc/0xa40 [ 230.417363][ T8708] kernfs_fop_write_iter+0x19e/0x520 [ 230.422664][ T8708] vfs_write+0x474/0x9a0 [ 230.427017][ T8708] ? file_end_write+0x250/0x250 [ 230.431962][ T8708] ? __fget_files+0x3fc/0x460 [ 230.436657][ T8708] ? __fdget_pos+0x2a3/0x330 [ 230.441261][ T8708] ? ksys_write+0x74/0x260 [ 230.445693][ T8708] ksys_write+0x151/0x260 [ 230.450038][ T8708] ? __ia32_sys_read+0x90/0x90 [ 230.454837][ T8708] ? lockdep_hardirqs_on+0x98/0x150 [ 230.460357][ T8708] do_syscall_64+0x55/0xb0 [ 230.464805][ T8708] ? clear_bhb_loop+0x40/0x90 [ 230.469495][ T8708] ? clear_bhb_loop+0x40/0x90 [ 230.474173][ T8708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.480149][ T8708] RIP: 0033:0x7f42b6f9e0d9 [ 230.484562][ T8708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.504160][ T8708] RSP: 002b:00007f42b7eb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.512656][ T8708] RAX: ffffffffffffffda RBX: 00007f42b7225fa0 RCX: 00007f42b6f9e0d9 [ 230.520637][ T8708] RDX: 0000000000000009 RSI: 0000200000000080 RDI: 0000000000000007 [ 230.528602][ T8708] RBP: 00007f42b7eb3090 R08: 0000000000000000 R09: 0000000000000000 [ 230.536564][ T8708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.544532][ T8708] R13: 00007f42b7226038 R14: 00007f42b7225fa0 R15: 00007ffdd4312408 [ 230.552511][ T8708] [ 231.094857][ T8722] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1013'. [ 231.282334][ T8722] syzkaller0: entered promiscuous mode [ 231.304973][ T8722] syzkaller0: entered allmulticast mode [ 231.381660][ T5787] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 231.381710][ T5787] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 231.837852][ T8725] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1015'. [ 233.676447][ T8725] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.1015'. [ 233.685866][ T8725] tipc: Started in network mode [ 233.692201][ T8725] tipc: Node identity b, cluster identity 57 [ 233.698399][ T8725] tipc: Node number set to 11 [ 234.325744][ T8775] netlink: 105 bytes leftover after parsing attributes in process `syz.0.1034'. [ 234.338295][ T8775] netlink: 105 bytes leftover after parsing attributes in process `syz.0.1034'. [ 234.354931][ T8775] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1034'. [ 234.445073][ T8779] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1036'. [ 235.210335][ T8808] netlink: 'syz.0.1046': attribute type 11 has an invalid length. [ 235.220984][ T8808] netlink: 212832 bytes leftover after parsing attributes in process `syz.0.1046'. [ 235.237302][ T8809] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1047'. [ 235.247504][ T8809] netlink: 4548 bytes leftover after parsing attributes in process `syz.2.1047'. [ 235.257468][ T8809] netlink: 'syz.2.1047': attribute type 1 has an invalid length. [ 236.331578][ T8831] netlink: 'syz.0.1053': attribute type 10 has an invalid length. [ 236.341559][ T8831] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 236.828104][ T8847] netlink: 'syz.2.1056': attribute type 39 has an invalid length. [ 237.692150][ T8863] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1064'. [ 238.101859][ T8883] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1069'. [ 238.391598][ T8887] netlink: 'syz.2.1073': attribute type 3 has an invalid length. [ 238.400242][ T8887] netlink: 'syz.2.1073': attribute type 1 has an invalid length. [ 239.082024][ T8909] netlink: 'syz.2.1082': attribute type 10 has an invalid length. [ 239.118651][ T8909] __nla_validate_parse: 5 callbacks suppressed [ 239.118694][ T8909] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1082'. [ 239.250097][ T8911] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1083'. [ 239.629041][ T8931] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.1090'. [ 240.237395][ T8942] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1093'. [ 240.796261][ T8952] FAULT_INJECTION: forcing a failure. [ 240.796261][ T8952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.817469][ T8952] CPU: 0 PID: 8952 Comm: syz.0.1104 Not tainted syzkaller #0 [ 240.824876][ T8952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.834963][ T8952] Call Trace: [ 240.838267][ T8952] [ 240.841219][ T8952] dump_stack_lvl+0x18c/0x250 [ 240.845926][ T8952] ? show_regs_print_info+0x20/0x20 [ 240.851150][ T8952] ? load_image+0x420/0x420 [ 240.855659][ T8952] ? __lock_acquire+0x7d80/0x7d80 [ 240.860682][ T8952] ? snprintf+0xe9/0x140 [ 240.864927][ T8952] should_fail_ex+0x394/0x4c0 [ 240.869601][ T8952] _copy_to_user+0x2f/0xa0 [ 240.874098][ T8952] simple_read_from_buffer+0xe7/0x150 [ 240.879475][ T8952] proc_fail_nth_read+0x1e8/0x260 [ 240.884498][ T8952] ? proc_fault_inject_write+0x360/0x360 [ 240.890221][ T8952] ? fsnotify_perm+0x271/0x5e0 [ 240.894998][ T8952] ? proc_fault_inject_write+0x360/0x360 [ 240.900638][ T8952] vfs_read+0x298/0x990 [ 240.904792][ T8952] ? kernel_read+0x1e0/0x1e0 [ 240.909381][ T8952] ? __fget_files+0x28/0x460 [ 240.913969][ T8952] ? __fget_files+0x3fc/0x460 [ 240.918647][ T8952] ? __fdget_pos+0x2a3/0x330 [ 240.923231][ T8952] ? ksys_read+0x74/0x260 [ 240.927558][ T8952] ksys_read+0x151/0x260 [ 240.931887][ T8952] ? vfs_write+0x9a0/0x9a0 [ 240.936302][ T8952] ? lockdep_hardirqs_on+0x98/0x150 [ 240.941511][ T8952] do_syscall_64+0x55/0xb0 [ 240.945936][ T8952] ? clear_bhb_loop+0x40/0x90 [ 240.950608][ T8952] ? clear_bhb_loop+0x40/0x90 [ 240.955283][ T8952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.961171][ T8952] RIP: 0033:0x7f625f15e90e [ 240.965587][ T8952] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 240.985191][ T8952] RSP: 002b:00007f6260074fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.993607][ T8952] RAX: ffffffffffffffda RBX: 00007f62600756c0 RCX: 00007f625f15e90e [ 241.001664][ T8952] RDX: 000000000000000f RSI: 00007f62600750a0 RDI: 0000000000000008 [ 241.009628][ T8952] RBP: 00007f6260075090 R08: 0000000000000000 R09: 0000000000000000 [ 241.017694][ T8952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.025657][ T8952] R13: 00007f625f426038 R14: 00007f625f425fa0 R15: 00007fff849b7868 [ 241.033892][ T8952] [ 241.605790][ T8977] netlink: 191788 bytes leftover after parsing attributes in process `syz.2.1105'. [ 241.751533][ T8977] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 243.596034][ T9003] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1116'. [ 243.656865][ T9003] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 243.916129][ T9018] syzkaller0: entered promiscuous mode [ 243.922117][ T9018] syzkaller0: entered allmulticast mode [ 246.817630][ T9053] netlink: 'syz.1.1131': attribute type 10 has an invalid length. [ 246.825892][ T9053] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1131'. [ 246.850900][ T9053] netlink: 'syz.1.1131': attribute type 2 has an invalid length. [ 246.860634][ T9053] netlink: 'syz.1.1131': attribute type 8 has an invalid length. [ 246.868780][ T9053] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1131'. [ 247.235722][ T9068] netlink: 'syz.0.1137': attribute type 9 has an invalid length. [ 247.249886][ T9068] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1137'. [ 248.238878][ T9081] netlink: 'syz.0.1142': attribute type 4 has an invalid length. [ 248.257263][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1142'. [ 248.294583][ T9081] netlink: 15974 bytes leftover after parsing attributes in process `syz.0.1142'. [ 248.308724][ T9084] netlink: 'syz.1.1143': attribute type 10 has an invalid length. [ 248.325551][ T9084] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 249.883785][ T9121] netlink: 'syz.1.1157': attribute type 10 has an invalid length. [ 249.933489][ T9121] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 249.987339][ T9122] netlink: 'syz.1.1157': attribute type 10 has an invalid length. [ 250.504710][ T9142] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1164'. [ 250.528986][ T9144] netlink: 'syz.2.1165': attribute type 4 has an invalid length. [ 250.546588][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1165'. [ 250.555870][ T9142] netlink: 4548 bytes leftover after parsing attributes in process `syz.1.1164'. [ 250.583045][ T9142] netlink: 'syz.1.1164': attribute type 1 has an invalid length. [ 250.598580][ T9144] netlink: 15974 bytes leftover after parsing attributes in process `syz.2.1165'. [ 250.616440][ T9135] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.1161'. [ 251.359539][ T9170] FAULT_INJECTION: forcing a failure. [ 251.359539][ T9170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.471926][ T9170] CPU: 0 PID: 9170 Comm: syz.0.1174 Not tainted syzkaller #0 [ 251.479408][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.489517][ T9170] Call Trace: [ 251.492837][ T9170] [ 251.495808][ T9170] dump_stack_lvl+0x18c/0x250 [ 251.500613][ T9170] ? show_regs_print_info+0x20/0x20 [ 251.505882][ T9170] ? load_image+0x420/0x420 [ 251.510468][ T9170] ? __lock_acquire+0x7d80/0x7d80 [ 251.515613][ T9170] ? snprintf+0xe9/0x140 [ 251.519931][ T9170] should_fail_ex+0x394/0x4c0 [ 251.524661][ T9170] _copy_to_user+0x2f/0xa0 [ 251.529116][ T9170] simple_read_from_buffer+0xe7/0x150 [ 251.534523][ T9170] proc_fail_nth_read+0x1e8/0x260 [ 251.539622][ T9170] ? proc_fault_inject_write+0x360/0x360 [ 251.545291][ T9170] ? fsnotify_perm+0x271/0x5e0 [ 251.550098][ T9170] ? proc_fault_inject_write+0x360/0x360 [ 251.555776][ T9170] vfs_read+0x298/0x990 [ 251.559984][ T9170] ? kernel_read+0x1e0/0x1e0 [ 251.564595][ T9170] ? __fget_files+0x28/0x460 [ 251.569205][ T9170] ? __fget_files+0x3fc/0x460 [ 251.573929][ T9170] ? __fdget_pos+0x2a3/0x330 [ 251.578529][ T9170] ? ksys_read+0x74/0x260 [ 251.582879][ T9170] ksys_read+0x151/0x260 [ 251.587147][ T9170] ? vfs_write+0x9a0/0x9a0 [ 251.591595][ T9170] ? lockdep_hardirqs_on+0x98/0x150 [ 251.596858][ T9170] do_syscall_64+0x55/0xb0 [ 251.601286][ T9170] ? clear_bhb_loop+0x40/0x90 [ 251.605986][ T9170] ? clear_bhb_loop+0x40/0x90 [ 251.610685][ T9170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.616591][ T9170] RIP: 0033:0x7f625f15e90e [ 251.621021][ T9170] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 251.640650][ T9170] RSP: 002b:00007f6260074fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.649090][ T9170] RAX: ffffffffffffffda RBX: 00007f62600756c0 RCX: 00007f625f15e90e [ 251.657079][ T9170] RDX: 000000000000000f RSI: 00007f62600750a0 RDI: 0000000000000006 [ 251.665062][ T9170] RBP: 00007f6260075090 R08: 0000000000000000 R09: 0000000000000000 [ 251.673048][ T9170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.681040][ T9170] R13: 00007f625f426038 R14: 00007f625f425fa0 R15: 00007fff849b7868 [ 251.689068][ T9170] [ 252.030071][ T9175] validate_nla: 3 callbacks suppressed [ 252.030106][ T9175] netlink: 'syz.1.1175': attribute type 10 has an invalid length. [ 252.171409][ T9175] team0: Port device geneve1 added [ 252.186115][ T9183] netlink: 'syz.3.1177': attribute type 4 has an invalid length. [ 252.208778][ T9186] netlink: 'syz.2.1179': attribute type 9 has an invalid length. [ 252.216918][ T9186] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1179'. [ 252.217164][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1177'. [ 252.328140][ T9183] netlink: 15974 bytes leftover after parsing attributes in process `syz.3.1177'. [ 252.604975][ T9196] netlink: 'syz.0.1183': attribute type 10 has an invalid length. [ 252.682409][ T9196] team0: Device nlmon0 is of different type [ 253.706197][ T9224] netlink: 'syz.1.1193': attribute type 4 has an invalid length. [ 253.714440][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1193'. [ 253.741929][ T9224] netlink: 15974 bytes leftover after parsing attributes in process `syz.1.1193'. [ 253.892331][ T9231] netlink: 'syz.1.1197': attribute type 29 has an invalid length. [ 253.901343][ T9231] netlink: 'syz.1.1197': attribute type 29 has an invalid length. [ 253.918019][ T9232] netlink: 'syz.1.1197': attribute type 29 has an invalid length. [ 254.114864][ T9241] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1204'. [ 254.150089][ T9241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.172234][ T9245] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.1203'. [ 254.259700][ T9247] netlink: 'syz.3.1205': attribute type 10 has an invalid length. [ 254.443180][ T5787] Bluetooth: hci1: unexpected event 0x10 length: 15 > 1 [ 254.444541][ T5787] Bluetooth: hci1: hardware error 0x0f [ 254.526655][ T9255] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1206'. [ 254.568566][ T9257] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.1209'. [ 254.613271][ T9257] netlink: 'syz.3.1209': attribute type 1 has an invalid length. [ 254.644149][ T9259] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1210'. [ 254.671419][ T9259] macvlan1: entered allmulticast mode [ 254.746852][ T9259] veth1_vlan: entered allmulticast mode [ 254.765538][ T9259] team0: Port device macvlan1 added [ 255.944590][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.951171][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.967718][ T9306] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 256.566500][ T5787] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 256.810109][ T9329] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 256.836468][ T9329] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 256.853868][ T9329] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 256.882114][ T9329] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 257.867313][ T9361] __nla_validate_parse: 6 callbacks suppressed [ 257.867331][ T9361] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1247'. [ 257.892856][ T9361] netlink: 4548 bytes leftover after parsing attributes in process `syz.3.1247'. [ 257.902788][ T9361] validate_nla: 7 callbacks suppressed [ 257.902805][ T9361] netlink: 'syz.3.1247': attribute type 1 has an invalid length. [ 258.311160][ T9379] syzkaller0: entered promiscuous mode [ 258.317535][ T9379] syzkaller0: entered allmulticast mode [ 261.530700][ T9463] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1267'. [ 261.553829][ T9468] netlink: 'syz.2.1267': attribute type 4 has an invalid length. [ 261.576802][ T9468] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1267'. [ 261.632270][ T9469] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1267'. [ 262.183334][ T9494] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1277'. [ 262.215454][ T9494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.557980][ T9508] syzkaller0: entered promiscuous mode [ 262.563608][ T9508] syzkaller0: entered allmulticast mode [ 262.594768][ T9506] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1281'. [ 262.698214][ T9510] netlink: 'syz.1.1281': attribute type 4 has an invalid length. [ 262.706082][ T9510] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1281'. [ 262.730883][ T9506] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1281'. [ 262.744512][ T9513] netlink: 'syz.3.1283': attribute type 10 has an invalid length. [ 262.874518][ T5787] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 262.874567][ T5787] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 262.977370][ T9522] netlink: 'syz.0.1286': attribute type 10 has an invalid length. [ 263.007520][ T9522] veth1_vlan: left allmulticast mode [ 263.119221][ T9520] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1287'. [ 264.741708][ T9555] netlink: 'syz.0.1299': attribute type 9 has an invalid length. [ 264.756389][ T9555] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1299'. [ 267.213476][ T9572] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1305'. [ 267.232956][ T9569] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1304'. [ 267.289281][ T9569] team0: Port device team_slave_0 removed [ 267.296884][ T9569] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 268.573000][ T9604] syzkaller0: entered promiscuous mode [ 268.581364][ T9604] syzkaller0: entered allmulticast mode [ 268.704215][ T9612] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1316'. [ 270.313594][ T9615] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1317'. [ 270.323706][ T9617] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1318'. [ 270.356681][ T9617] team0: Port device team_slave_0 removed [ 270.362953][ T9617] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 270.823734][ T9634] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1325'. [ 271.000910][ T9645] syzkaller0: entered promiscuous mode [ 271.007255][ T9645] syzkaller0: entered allmulticast mode [ 271.095809][ T9647] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1330'. [ 271.129611][ T9647] team0: Port device team_slave_0 removed [ 271.137364][ T9647] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 273.083172][ T9668] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.1339'. [ 274.304170][ T9679] netlink: 'syz.1.1343': attribute type 10 has an invalid length. [ 274.324354][ T9679] geneve0: entered promiscuous mode [ 274.434492][ T9683] netlink: 'syz.0.1344': attribute type 9 has an invalid length. [ 274.443283][ T9683] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1344'. [ 274.717806][ T9695] netlink: 'syz.3.1350': attribute type 10 has an invalid length. [ 274.734327][ T9695] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 274.930839][ T9703] netlink: 'syz.1.1354': attribute type 21 has an invalid length. [ 274.939466][ T9703] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1354'. [ 274.977122][ T9703] netlink: 'syz.1.1354': attribute type 16 has an invalid length. [ 274.997403][ T9703] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1354'. [ 275.140381][ T9707] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1356'. [ 275.162013][ T9707] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 275.292302][ T9720] Dead loop on virtual device ip6_vti0, fix it urgently! [ 275.461367][ T9725] pim6reg1: entered promiscuous mode [ 275.467889][ T9725] pim6reg1: entered allmulticast mode [ 275.592193][ T9732] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1365'. [ 275.604502][ T9732] netlink: 4548 bytes leftover after parsing attributes in process `syz.1.1365'. [ 275.616182][ T9732] netlink: 'syz.1.1365': attribute type 1 has an invalid length. [ 275.650049][ T9734] netlink: 'syz.2.1366': attribute type 21 has an invalid length. [ 275.658440][ T9734] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1366'. [ 275.674646][ T9734] netlink: 'syz.2.1366': attribute type 16 has an invalid length. [ 275.683780][ T9734] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1366'. [ 275.693318][ T9734] veth1_macvtap: entered allmulticast mode [ 276.713978][ T9763] netlink: 'syz.0.1378': attribute type 21 has an invalid length. [ 276.724311][ T9763] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1378'. [ 276.739107][ T9763] netlink: 'syz.0.1378': attribute type 16 has an invalid length. [ 276.747191][ T9763] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1378'. [ 276.756169][ T9763] veth1_macvtap: entered allmulticast mode [ 280.011143][ T9787] netlink: 'syz.3.1388': attribute type 10 has an invalid length. [ 280.080766][ T9787] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1388'. [ 280.657383][ T9807] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 280.669733][ T9807] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 281.038005][ T9832] netlink: 'syz.2.1405': attribute type 11 has an invalid length. [ 281.048997][ T9832] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.1405'. [ 281.071998][ T9832] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1405'. [ 281.328681][ T9840] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 281.338359][ T9840] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 282.311047][ T9867] netlink: 'syz.3.1420': attribute type 11 has an invalid length. [ 282.319156][ T9867] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.1420'. [ 282.347429][ T9867] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1420'. [ 282.406914][ T9869] netlink: 'syz.0.1421': attribute type 41 has an invalid length. [ 282.415422][ T9869] netlink: 'syz.0.1421': attribute type 4 has an invalid length. [ 282.423932][ T9869] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1421'. [ 282.468574][ T9869] netlink: 'syz.0.1421': attribute type 4 has an invalid length. [ 282.477316][ T9870] netlink: 'syz.0.1421': attribute type 4 has an invalid length. [ 282.492535][ T9870] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.1421'. [ 282.502696][ T9869] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.1421'. [ 283.519126][ T9900] netlink: 'syz.0.1433': attribute type 10 has an invalid length. [ 283.522264][ T9901] netlink: 'syz.1.1430': attribute type 11 has an invalid length. [ 283.538794][ T9900] hsr0: entered promiscuous mode [ 283.544332][ T9900] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 283.557428][ T9901] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.1430'. [ 283.569126][ T9900] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 283.599938][ T9900] bond0: (slave hsr0): Error -95 calling set_mac_address [ 283.720655][ T9907] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1430'. [ 283.989736][ T9913] Dead loop on virtual device ip6_vti0, fix it urgently! [ 284.290355][ T9922] netlink: 'syz.2.1443': attribute type 1 has an invalid length. [ 284.489749][ T9928] netlink: 'syz.2.1446': attribute type 10 has an invalid length. [ 284.509681][ T9928] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 284.536463][ T9928] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 284.558180][ T9928] bond0: (slave hsr0): Error -95 calling set_mac_address [ 285.221071][ T9945] netlink: 'syz.0.1449': attribute type 11 has an invalid length. [ 285.243891][ T9945] __nla_validate_parse: 2 callbacks suppressed [ 285.243910][ T9945] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.1449'. [ 285.353284][ T9948] netlink: 'syz.1.1450': attribute type 9 has an invalid length. [ 285.391381][ T9948] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1450'. [ 285.425692][ T9942] netlink: 'syz.2.1451': attribute type 27 has an invalid length. [ 285.434348][ T9941] netlink: 'syz.2.1451': attribute type 27 has an invalid length. [ 285.460711][ T9945] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1449'. [ 287.134334][ T9975] netlink: 'syz.1.1459': attribute type 3 has an invalid length. [ 287.172843][ T9975] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1459'. [ 287.763441][ T9980] netlink: 'syz.0.1460': attribute type 10 has an invalid length. [ 288.014671][ T9987] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1463'. [ 288.133771][ T9991] netlink: 'syz.0.1470': attribute type 10 has an invalid length. [ 288.144352][ T9991] syz_tun: entered promiscuous mode [ 288.202674][ T9991] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 288.213008][ T9995] netlink: 'syz.0.1470': attribute type 10 has an invalid length. [ 288.213856][ T9989] Dead loop on virtual device ip6_vti0, fix it urgently! [ 288.229586][ T9995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.238451][ T9995] team0: Port device bond0 added [ 288.528669][T10009] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1468'. [ 288.634487][T10012] netlink: 'syz.3.1472': attribute type 10 has an invalid length. [ 289.257496][T10021] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1476'. [ 289.314832][T10026] netlink: 'syz.0.1478': attribute type 2 has an invalid length. [ 289.370494][T10026] netlink: 'syz.0.1478': attribute type 8 has an invalid length. [ 289.378939][T10026] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1478'. [ 290.200118][T10051] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1487'. [ 290.359794][T10058] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1489'. [ 290.434869][T10062] validate_nla: 1 callbacks suppressed [ 290.434886][T10062] netlink: 'syz.1.1492': attribute type 29 has an invalid length. [ 290.452465][T10062] netlink: 'syz.1.1492': attribute type 29 has an invalid length. [ 290.481992][T10062] netlink: 'syz.1.1492': attribute type 29 has an invalid length. [ 290.490753][T10062] netlink: 'syz.1.1492': attribute type 29 has an invalid length. [ 290.504999][T10060] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1491'. [ 291.664475][T10082] netlink: 'syz.1.1497': attribute type 10 has an invalid length. [ 291.676574][T10086] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1500'. [ 291.687132][T10086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.734353][T10088] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1501'. [ 291.749065][T10086] netlink: 'syz.2.1500': attribute type 21 has an invalid length. [ 291.765068][T10086] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1500'. [ 291.934125][T10094] netlink: 'syz.2.1504': attribute type 21 has an invalid length. [ 291.942962][T10094] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1504'. [ 291.959825][T10094] netlink: 'syz.2.1504': attribute type 5 has an invalid length. [ 291.968195][T10094] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1504'. [ 292.412472][T10098] netlink: 'syz.3.1506': attribute type 3 has an invalid length. [ 292.423641][T10098] netlink: 109960 bytes leftover after parsing attributes in process `syz.3.1506'. [ 292.685677][T10117] netlink: 'syz.1.1513': attribute type 10 has an invalid length. [ 292.693680][T10117] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 292.720147][T10117] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 292.737964][T10117] bond0: (slave hsr0): Error -95 calling set_mac_address [ 292.868399][T10123] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1516'. [ 292.875256][T10119] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1514'. [ 293.179607][T10131] syzkaller0: entered promiscuous mode [ 293.189730][T10131] syzkaller0: entered allmulticast mode [ 294.041333][T10144] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 297.154324][T10156] validate_nla: 3 callbacks suppressed [ 297.154339][T10156] netlink: 'syz.1.1525': attribute type 21 has an invalid length. [ 297.167841][T10156] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1525'. [ 297.177303][T10156] netlink: 'syz.1.1525': attribute type 4 has an invalid length. [ 297.194147][T10165] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1528'. [ 297.304498][T10170] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1530'. [ 297.859646][T10198] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1539'. [ 298.133468][T10210] netlink: 'syz.1.1545': attribute type 21 has an invalid length. [ 298.157126][T10210] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1545'. [ 298.179145][T10210] netlink: 'syz.1.1545': attribute type 5 has an invalid length. [ 298.193576][T10210] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1545'. [ 298.216133][T10217] netlink: 'syz.0.1548': attribute type 2 has an invalid length. [ 298.224505][T10217] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1548'. [ 298.294250][T10219] netlink: 'syz.3.1549': attribute type 10 has an invalid length. [ 298.305372][T10219] macvlan1: entered allmulticast mode [ 298.362373][T10219] veth1_vlan: entered allmulticast mode [ 298.380311][T10224] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1549'. [ 298.435031][T10219] team0: Port device macvlan1 added [ 298.600235][T10234] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1554'. [ 298.693850][T10236] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1555'. [ 299.028202][T10256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.135114][T10252] bridge_slave_1: entered promiscuous mode [ 299.430710][T10269] netlink: 'syz.0.1566': attribute type 17 has an invalid length. [ 299.439752][T10269] netlink: 'syz.0.1566': attribute type 16 has an invalid length. [ 299.798117][T10281] netlink: 'syz.2.1571': attribute type 2 has an invalid length. [ 299.811727][T10279] Dead loop on virtual device ip6_vti0, fix it urgently! [ 299.837021][T10281] netlink: 'syz.2.1571': attribute type 8 has an invalid length. [ 303.094489][T10331] validate_nla: 2 callbacks suppressed [ 303.094525][T10331] netlink: 'syz.2.1588': attribute type 3 has an invalid length. [ 303.110577][T10331] __nla_validate_parse: 11 callbacks suppressed [ 303.110616][T10331] netlink: 109960 bytes leftover after parsing attributes in process `syz.2.1588'. [ 303.750030][T10345] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1591'. [ 303.788410][T10347] netlink: 703 bytes leftover after parsing attributes in process `syz.0.1592'. [ 304.111476][ T5787] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 304.495426][T10372] netlink: 'syz.0.1602': attribute type 10 has an invalid length. [ 304.524819][T10372] hsr0: left promiscuous mode [ 304.530407][T10372] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 304.554058][T10370] netlink: 'syz.3.1601': attribute type 10 has an invalid length. [ 304.725375][T10381] FAULT_INJECTION: forcing a failure. [ 304.725375][T10381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.764460][T10381] CPU: 1 PID: 10381 Comm: syz.1.1604 Not tainted syzkaller #0 [ 304.772081][T10381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.782167][T10381] Call Trace: [ 304.785465][T10381] [ 304.788423][T10381] dump_stack_lvl+0x18c/0x250 [ 304.793121][T10381] ? show_regs_print_info+0x20/0x20 [ 304.798339][T10381] ? load_image+0x420/0x420 [ 304.802874][T10381] ? __might_fault+0xaa/0x120 [ 304.807659][T10381] ? __lock_acquire+0x7d80/0x7d80 [ 304.812704][T10381] ? __virt_addr_valid+0x10c/0x380 [ 304.817841][T10381] should_fail_ex+0x394/0x4c0 [ 304.822551][T10381] _copy_from_user+0x2f/0xe0 [ 304.827169][T10381] sctp_setsockopt+0x19e/0x11e0 [ 304.832047][T10381] ? sock_common_recvmsg+0x190/0x190 [ 304.837353][T10381] do_sock_setsockopt+0x175/0x1a0 [ 304.842406][T10381] ? __fdget+0x180/0x210 [ 304.846669][T10381] __x64_sys_setsockopt+0x182/0x200 [ 304.851885][T10381] do_syscall_64+0x55/0xb0 [ 304.856313][T10381] ? clear_bhb_loop+0x40/0x90 [ 304.861004][T10381] ? clear_bhb_loop+0x40/0x90 [ 304.865698][T10381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.871609][T10381] RIP: 0033:0x7f5b9a79e0d9 [ 304.876035][T10381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.895749][T10381] RSP: 002b:00007f5b9b6f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 304.904194][T10381] RAX: ffffffffffffffda RBX: 00007f5b9aa25fa0 RCX: 00007f5b9a79e0d9 [ 304.912189][T10381] RDX: 000000000000001f RSI: 0000000000000084 RDI: 0000000000000003 [ 304.920178][T10381] RBP: 00007f5b9b6f6090 R08: 0000000000000129 R09: 0000000000000000 [ 304.928184][T10381] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 304.936183][T10381] R13: 00007f5b9aa26038 R14: 00007f5b9aa25fa0 R15: 00007ffdb731e778 [ 304.944274][T10381] [ 305.164979][T10386] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1606'. [ 305.177805][T10389] netlink: 'syz.0.1607': attribute type 9 has an invalid length. [ 305.192633][T10389] netlink: 'syz.0.1607': attribute type 23 has an invalid length. [ 305.228911][T10389] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.1607'. [ 305.295648][T10391] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1608'. [ 305.309639][T10391] netlink: 4548 bytes leftover after parsing attributes in process `syz.1.1608'. [ 305.320047][T10391] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 305.611626][T10409] netlink: 'syz.3.1614': attribute type 9 has an invalid length. [ 305.628805][T10409] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1614'. [ 305.863691][T10416] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1618'. [ 305.901952][T10418] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1619'. [ 305.942905][T10418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.279958][T10457] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 308.149632][T10477] __nla_validate_parse: 1 callbacks suppressed [ 308.149651][T10477] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1640'. [ 308.195244][T10477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.746799][T10479] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1641'. [ 312.098134][T10512] netlink: 'syz.1.1653': attribute type 10 has an invalid length. [ 312.153266][T10512] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1653'. [ 312.998044][T10527] syzkaller0: entered promiscuous mode [ 313.003576][T10527] syzkaller0: entered allmulticast mode [ 313.019716][T10530] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.1659'. [ 313.222352][T10532] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1660'. [ 314.096442][T10558] netlink: 'syz.1.1670': attribute type 1 has an invalid length. [ 314.112920][T10558] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1670'. [ 314.122709][T10558] netlink: 'syz.1.1670': attribute type 1 has an invalid length. [ 316.665164][T10569] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1672'. [ 316.750725][T10574] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1671'. [ 316.765444][T10574] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 317.178498][T10600] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1681'. [ 317.359938][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.366490][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.472052][T10609] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1686'. [ 318.832224][T10643] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1696'. [ 318.937228][T10642] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1699'. [ 319.604916][T10655] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1702'. [ 319.635815][T10655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.706518][T10657] netlink: 'syz.1.1704': attribute type 2 has an invalid length. [ 319.795092][T10663] netlink: 'syz.3.1706': attribute type 10 has an invalid length. [ 319.829137][T10663] veth1_vlan: left allmulticast mode [ 319.882118][T10668] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1706'. [ 319.968502][T10672] netlink: 'syz.2.1703': attribute type 1 has an invalid length. [ 319.997629][T10672] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1703'. [ 320.015096][T10672] netlink: 'syz.2.1703': attribute type 1 has an invalid length. [ 320.182338][T10681] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1711'. [ 320.274342][T10683] netlink: 'syz.1.1712': attribute type 2 has an invalid length. [ 320.293415][T10683] netlink: 'syz.1.1712': attribute type 8 has an invalid length. [ 320.308000][T10683] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1712'. [ 320.478005][T10692] netlink: 'syz.2.1715': attribute type 10 has an invalid length. [ 320.486217][T10692] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1715'. [ 320.528414][T10692] bond0: entered promiscuous mode [ 320.533525][T10692] bond_slave_0: entered promiscuous mode [ 320.567755][T10692] bond_slave_1: entered promiscuous mode [ 320.577959][T10692] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 320.702022][T10691] Dead loop on virtual device ip6_vti0, fix it urgently! [ 321.203206][T10717] syzkaller0: entered promiscuous mode [ 321.218913][T10717] syzkaller0: entered allmulticast mode [ 321.295058][T10723] netlink: 'syz.3.1724': attribute type 1 has an invalid length. [ 321.308930][T10723] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1724'. [ 321.328894][T10723] netlink: 'syz.3.1724': attribute type 1 has an invalid length. [ 326.979634][T10767] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.1740'. [ 327.113884][T10773] netlink: 'syz.0.1738': attribute type 1 has an invalid length. [ 327.122921][T10773] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1738'. [ 327.145110][T10773] netlink: 'syz.0.1738': attribute type 1 has an invalid length. [ 327.285596][T10782] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.1742'. [ 327.299176][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1742'. [ 328.276087][T10791] syzkaller0: entered promiscuous mode [ 328.323102][T10791] syzkaller0: entered allmulticast mode [ 331.872080][T10810] netlink: 'syz.1.1753': attribute type 1 has an invalid length. [ 331.885595][T10810] netlink: 'syz.1.1753': attribute type 3 has an invalid length. [ 331.895727][T10810] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1753'. [ 332.000203][T10812] netlink: 'syz.2.1755': attribute type 10 has an invalid length. [ 332.034532][T10812] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 332.414055][T10835] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1764'. [ 332.434531][T10835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.775504][T10842] syzkaller0: entered promiscuous mode [ 332.799363][T10842] syzkaller0: entered allmulticast mode [ 332.832022][T10851] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1769'. [ 332.858572][T10848] netlink: 'syz.0.1769': attribute type 10 has an invalid length. [ 333.037231][T10852] netlink: 'syz.1.1770': attribute type 10 has an invalid length. [ 333.173602][T10852] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 334.004147][T10872] netlink: 'syz.1.1776': attribute type 9 has an invalid length. [ 334.026553][T10872] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1776'. [ 335.980335][T10870] netlink: 'syz.0.1775': attribute type 10 has an invalid length. [ 335.988511][T10870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1775'. [ 335.998807][T10870] ipvlan1: entered promiscuous mode [ 336.004024][T10870] ipvlan1: entered allmulticast mode [ 336.009398][T10870] veth0_vlan: entered allmulticast mode [ 336.016954][T10870] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 336.137418][T10878] netlink: 'syz.0.1777': attribute type 2 has an invalid length. [ 336.145202][T10878] netlink: 'syz.0.1777': attribute type 8 has an invalid length. [ 336.169851][T10878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1777'. [ 336.284375][T10882] syzkaller0: entered promiscuous mode [ 336.290296][T10882] syzkaller0: entered allmulticast mode [ 337.654365][T10893] netlink: 'syz.0.1782': attribute type 10 has an invalid length. [ 337.673504][T10893] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 338.358426][T10909] syzkaller0: entered promiscuous mode [ 338.426544][T10909] syzkaller0: entered allmulticast mode [ 339.099959][T10918] syzkaller0: entered promiscuous mode [ 339.116524][T10918] syzkaller0: entered allmulticast mode [ 342.488219][T10947] syzkaller0: entered promiscuous mode [ 342.493767][T10947] syzkaller0: entered allmulticast mode [ 342.501647][T10946] netlink: 'syz.3.1795': attribute type 10 has an invalid length. [ 342.529195][T10952] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.1799'. [ 342.536108][T10946] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 342.555660][T10953] netlink: 'syz.1.1798': attribute type 1 has an invalid length. [ 342.564070][T10953] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1798'. [ 343.807990][T10974] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1807'. [ 345.072975][T10978] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1809'. [ 345.530544][T11004] netlink: 'syz.2.1818': attribute type 3 has an invalid length. [ 345.552744][T11008] netlink: 'syz.0.1819': attribute type 10 has an invalid length. [ 345.561628][T11004] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1818'. [ 345.605635][T11008] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1819'. [ 345.853533][T11016] syzkaller0: entered promiscuous mode [ 345.884444][T11016] syzkaller0: entered allmulticast mode [ 345.897105][T11023] netlink: 'syz.2.1825': attribute type 2 has an invalid length. [ 346.283653][T11043] netlink: 'syz.3.1833': attribute type 6 has an invalid length. [ 346.292281][T11043] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1833'. [ 346.428128][T11048] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1834'. [ 346.613204][T11058] netlink: 'syz.2.1837': attribute type 9 has an invalid length. [ 346.627265][T11058] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1837'. [ 346.638714][T11061] netlink: 'syz.0.1838': attribute type 2 has an invalid length. [ 346.646961][T11061] netlink: 'syz.0.1838': attribute type 8 has an invalid length. [ 346.655025][T11061] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1838'. [ 348.583988][T11073] syzkaller0: entered promiscuous mode [ 348.590994][T11073] syzkaller0: entered allmulticast mode [ 348.736452][T11079] netlink: 7807 bytes leftover after parsing attributes in process `syz.1.1842'. [ 348.948046][T11083] netlink: 'syz.1.1844': attribute type 3 has an invalid length. [ 348.955942][T11083] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1844'. [ 349.264965][T11087] Dead loop on virtual device ip6_vti0, fix it urgently! [ 351.012316][T11102] syzkaller0: entered promiscuous mode [ 351.023536][T11102] syzkaller0: entered allmulticast mode [ 351.304900][T11115] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.1856'. [ 351.617778][T11118] netlink: 'syz.3.1857': attribute type 5 has an invalid length. [ 351.644159][T11119] netlink: 'syz.3.1857': attribute type 5 has an invalid length. [ 353.190021][T11140] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1864'. [ 354.248248][T11140] netlink: 4548 bytes leftover after parsing attributes in process `syz.1.1864'. [ 354.257922][T11140] netlink: 'syz.1.1864': attribute type 1 has an invalid length. [ 354.266232][T11144] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1865'. [ 354.595614][T11160] netlink: 'syz.0.1868': attribute type 10 has an invalid length. [ 354.689523][T11160] team0: Port device wlan1 added [ 354.738007][T11163] netlink: 'syz.3.1871': attribute type 10 has an invalid length. [ 354.788459][T11163] veth0_vlan: entered allmulticast mode [ 354.939729][T11163] veth0_vlan: left promiscuous mode [ 354.980890][T11163] veth0_vlan: entered promiscuous mode [ 355.017749][T11163] team0: Device veth0_vlan failed to register rx_handler [ 355.206829][T11163] syz.3.1871 (11163) used greatest stack depth: 17896 bytes left [ 355.328879][T11171] netlink: 'syz.1.1881': attribute type 1 has an invalid length. [ 355.357775][T11171] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.1881'. [ 355.755455][T11182] syzkaller0: entered promiscuous mode [ 355.762000][T11182] syzkaller0: entered allmulticast mode [ 356.052049][T11192] netlink: 'syz.2.1882': attribute type 10 has an invalid length. [ 356.071922][T11192] veth0_vlan: entered allmulticast mode [ 356.376074][T11192] veth0_vlan: left promiscuous mode [ 356.407769][T11192] veth0_vlan: entered promiscuous mode [ 356.448574][T11192] team0: Device veth0_vlan failed to register rx_handler [ 358.375150][T11223] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1893'. [ 358.458746][T11227] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1894'. [ 358.547529][T11227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.808459][T11233] netlink: 'syz.1.1897': attribute type 10 has an invalid length. [ 358.827203][T11233] veth0_vlan: entered allmulticast mode [ 359.037174][T11233] veth0_vlan: left promiscuous mode [ 359.064780][T11233] veth0_vlan: entered promiscuous mode [ 359.108480][T11233] team0: Device veth0_vlan failed to register rx_handler [ 359.187755][T11239] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1899'. [ 359.542681][T11259] syzkaller0: entered promiscuous mode [ 359.550718][T11259] syzkaller0: entered allmulticast mode [ 359.577275][T11255] Dead loop on virtual device ip6_vti0, fix it urgently! [ 359.598456][T11258] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1905'. [ 359.623353][T11264] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1906'. [ 360.021798][T11278] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1911'. [ 360.494757][T11290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.575650][T11340] netlink: 'syz.3.1933': attribute type 46 has an invalid length. [ 365.589937][T11340] netlink: 'syz.3.1933': attribute type 46 has an invalid length. [ 365.834846][T11344] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1935'. [ 366.204140][T11354] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1939'. [ 366.232655][T11354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.052404][T11367] Dead loop on virtual device ip6_vti0, fix it urgently! [ 367.137736][T11375] netlink: 'syz.0.1946': attribute type 39 has an invalid length. [ 367.169753][T11375] veth1_vlan: left promiscuous mode [ 367.226517][T11375] macvlan0: entered promiscuous mode [ 367.260466][T11375] macvlan0: entered allmulticast mode [ 367.281063][T11368] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1944'. [ 367.303650][T11375] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1946'. [ 367.600410][T11383] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1948'. [ 367.674215][T11386] netlink: 'syz.2.1950': attribute type 9 has an invalid length. [ 367.686939][T11386] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1950'. [ 368.281594][T11402] syzkaller0: entered promiscuous mode [ 368.308398][T11402] syzkaller0: entered allmulticast mode [ 368.346440][T11401] raw_sendmsg: syz.1.1954 forgot to set AF_INET. Fix it! [ 369.067644][T11416] netlink: 'syz.3.1960': attribute type 49 has an invalid length. [ 370.026566][T11424] Dead loop on virtual device ip6_vti0, fix it urgently! [ 370.435972][T11416] netlink: 'syz.3.1960': attribute type 49 has an invalid length. [ 370.542572][T11429] netlink: 207684 bytes leftover after parsing attributes in process `syz.2.1962'. [ 370.564619][T11429] netlink: 'syz.2.1962': attribute type 1 has an invalid length. [ 370.574583][T11429] netlink: 'syz.2.1962': attribute type 2 has an invalid length. [ 370.641043][T11433] netlink: 'syz.1.1965': attribute type 10 has an invalid length. [ 370.649907][T11433] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 370.675145][T11436] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.1966'. [ 371.095292][T11460] netlink: 'syz.1.1974': attribute type 10 has an invalid length. [ 371.114460][T11460] bond0: (slave geneve0): Releasing backup interface [ 371.534493][T11464] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1976'. [ 371.811853][T11474] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1979'. [ 371.856462][T11474] netlink: 4548 bytes leftover after parsing attributes in process `syz.3.1979'. [ 371.907498][T11474] netlink: 'syz.3.1979': attribute type 1 has an invalid length. [ 372.319757][T11492] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1987'. [ 372.360585][T11492] netlink: 'syz.0.1987': attribute type 16 has an invalid length. [ 372.374942][T11492] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1987'. [ 372.463199][T11498] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1988'. [ 372.685011][T11507] netlink: 'syz.0.1993': attribute type 3 has an invalid length. [ 372.701203][T11507] netlink: 'syz.0.1993': attribute type 4 has an invalid length. [ 372.725024][T11507] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.1993'. [ 372.771207][T11506] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1993'. [ 372.802104][T11507] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1993'. [ 373.268397][T11533] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2002'. [ 374.298357][T11550] macvlan1: entered allmulticast mode [ 375.500761][T11583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.804350][T11592] netlink: 'syz.3.2027': attribute type 3 has an invalid length. [ 375.844126][T11592] netlink: 'syz.3.2027': attribute type 4 has an invalid length. [ 375.895528][T11592] netlink: 'syz.3.2027': attribute type 7 has an invalid length. [ 375.932215][T11592] netlink: 'syz.3.2027': attribute type 8 has an invalid length. [ 375.961749][T11592] netlink: 'syz.3.2027': attribute type 7 has an invalid length. [ 376.016006][T11596] Dead loop on virtual device ip6_vti0, fix it urgently! [ 378.079432][T11626] netlink: 'syz.2.2040': attribute type 9 has an invalid length. [ 378.096482][T11626] __nla_validate_parse: 7 callbacks suppressed [ 378.096503][T11626] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2040'. [ 378.710576][T11639] syzkaller0: entered promiscuous mode [ 378.725404][T11639] syzkaller0: entered allmulticast mode [ 378.760706][T11645] netlink: 'syz.1.2044': attribute type 10 has an invalid length. [ 378.814867][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.825848][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.864994][ T49] syzkaller0: tun_net_xmit 48 [ 381.154623][T11676] netlink: 'syz.0.2056': attribute type 10 has an invalid length. [ 381.180469][T11676] bond0: (slave geneve0): Releasing backup interface [ 381.404752][T11680] netlink: 'syz.0.2058': attribute type 17 has an invalid length. [ 381.418030][T11680] netlink: 'syz.0.2058': attribute type 16 has an invalid length. [ 381.426938][T11680] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2058'. [ 381.857037][T11700] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2065'. [ 382.008531][T11706] syzkaller0: entered promiscuous mode [ 382.016734][T11706] syzkaller0: entered allmulticast mode [ 382.439781][T11726] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2077'. [ 384.521608][T11756] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2088'. [ 384.540959][T11756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.678477][T11758] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2089'. [ 385.141166][T11804] Dead loop on virtual device ip6_vti0, fix it urgently! [ 385.316654][T11811] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 385.324307][T11811] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 385.663376][T11825] netlink: 'syz.2.2102': attribute type 10 has an invalid length. [ 385.768253][T11825] bond0: (slave geneve0): Releasing backup interface [ 385.831300][T11833] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2105'. [ 385.855894][T11832] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2106'. [ 385.866876][T11835] netlink: 'syz.0.2107': attribute type 10 has an invalid length. [ 385.885955][T11835] hsr0: entered promiscuous mode [ 385.891735][T11835] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 385.904960][T11835] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 385.916142][T11835] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 385.941181][T11835] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 386.163800][T11844] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2111'. [ 386.168981][T11841] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2109'. [ 386.201879][T11844] netlink: 4548 bytes leftover after parsing attributes in process `syz.2.2111'. [ 386.220028][T11844] netlink: 'syz.2.2111': attribute type 1 has an invalid length. [ 386.381216][T11851] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2114'. [ 386.621615][T11857] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2117'. [ 386.697676][T11859] netlink: 'syz.0.2118': attribute type 15 has an invalid length. [ 386.705917][T11859] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.2118'. [ 386.930691][T11866] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 386.988221][T11866] syzkaller0: entered promiscuous mode [ 386.994517][T11866] syzkaller0: entered allmulticast mode [ 388.766371][T11893] netlink: 'syz.2.2131': attribute type 10 has an invalid length. [ 388.902671][T11901] netlink: 'syz.3.2134': attribute type 2 has an invalid length. [ 388.920035][T11901] netlink: 'syz.3.2134': attribute type 8 has an invalid length. [ 389.343102][T11918] netlink: 'syz.0.2140': attribute type 10 has an invalid length. [ 390.517117][T11956] netlink: 'syz.2.2155': attribute type 58 has an invalid length. [ 390.560519][T11956] __nla_validate_parse: 4 callbacks suppressed [ 390.560537][T11956] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2155'. [ 390.735014][T11959] netlink: 'syz.1.2156': attribute type 10 has an invalid length. [ 391.212163][T11969] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2160'. [ 391.268768][T11969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.563224][T11977] netlink: 'syz.2.2164': attribute type 10 has an invalid length. [ 391.586676][T11977] hsr0: left promiscuous mode [ 391.599387][T11977] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 391.919728][ T11] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 391.947278][ T11] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 391.982474][ T42] ------------[ cut here ]------------ [ 391.988447][ T42] WARNING: CPU: 0 PID: 42 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3cb/0x430 [ 391.998596][ T42] Modules linked in: [ 392.002586][ T42] CPU: 0 PID: 42 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 392.010476][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.020928][ T42] Workqueue: cfg80211 cfg80211_event_work [ 392.027145][ T42] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 392.033382][ T42] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6e 16 98 f7 0f 0b eb bf e8 65 16 98 f7 <0f> 0b eb b6 e8 5c 16 98 f7 0f 0b e9 e2 fd ff ff e8 50 16 98 f7 0f [ 392.053768][ T42] RSP: 0018:ffffc90000b2fa40 EFLAGS: 00010293 [ 392.060163][ T42] RAX: ffffffff89ef5bbb RBX: dffffc0000000000 RCX: ffff888018ea1e00 [ 392.068394][ T42] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 392.077470][ T42] RBP: ffffc90000b2faf8 R08: ffffffff911ed56f R09: 1ffffffff223daad [ 392.085535][ T42] R10: dffffc0000000000 R11: fffffbfff223daae R12: ffff88805e97cd10 [ 392.093845][ T42] R13: ffff88807db9b658 R14: 1ffff92000165f4c R15: 000000000000001f [ 392.101989][ T42] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 392.111195][ T42] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.118077][ T42] CR2: 0000000100000000 CR3: 000000004a695000 CR4: 00000000003506f0 [ 392.126133][ T42] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 392.134707][ T42] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 392.142890][ T42] Call Trace: [ 392.146440][ T42] [ 392.149462][ T42] ? trace_rdev_return_void+0x1c0/0x1c0 [ 392.155170][ T42] cfg80211_process_wdev_events+0x396/0x500 [ 392.161409][ T42] cfg80211_process_rdev_events+0xa1/0x110 [ 392.167598][ T42] cfg80211_event_work+0x2f/0x40 [ 392.172623][ T42] ? process_scheduled_works+0x975/0x1600 [ 392.178618][ T42] process_scheduled_works+0xa60/0x1600 [ 392.184361][ T42] ? worker_attach_to_pool+0x370/0x370 [ 392.190110][ T42] ? assign_work+0x3cc/0x5d0 [ 392.194820][ T42] worker_thread+0xa5e/0xfe0 [ 392.199781][ T42] ? _raw_spin_unlock+0x40/0x40 [ 392.204802][ T42] ? __kthread_parkme+0x71/0x1c0 [ 392.210077][ T42] kthread+0x2fa/0x390 [ 392.214220][ T42] ? pr_cont_work+0x550/0x550 [ 392.219171][ T42] ? kthread_blkcg+0xd0/0xd0 [ 392.223832][ T42] ret_from_fork+0x48/0x80 [ 392.228482][ T42] ? kthread_blkcg+0xd0/0xd0 [ 392.233419][ T42] ret_from_fork_asm+0x11/0x20 [ 392.238594][ T42] [ 392.241684][ T42] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 392.248996][ T42] CPU: 0 PID: 42 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 392.256403][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.266491][ T42] Workqueue: cfg80211 cfg80211_event_work [ 392.272306][ T42] Call Trace: [ 392.275615][ T42] [ 392.278578][ T42] dump_stack_lvl+0x18c/0x250 [ 392.283351][ T42] ? show_regs_print_info+0x20/0x20 [ 392.288598][ T42] ? load_image+0x420/0x420 [ 392.293240][ T42] panic+0x2ca/0x720 [ 392.297208][ T42] ? bpf_jit_dump+0xd0/0xd0 [ 392.301801][ T42] ? ret_from_fork_asm+0x11/0x20 [ 392.306808][ T42] __warn+0x2e0/0x470 [ 392.310831][ T42] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 392.316474][ T42] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 392.322077][ T42] report_bug+0x2be/0x4f0 [ 392.326472][ T42] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 392.332072][ T42] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 392.337666][ T42] ? __cfg80211_ibss_joined+0x3cd/0x430 [ 392.343267][ T42] handle_bug+0xcf/0x120 [ 392.347633][ T42] exc_invalid_op+0x1a/0x50 [ 392.352197][ T42] asm_exc_invalid_op+0x1a/0x20 [ 392.357176][ T42] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 392.363384][ T42] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6e 16 98 f7 0f 0b eb bf e8 65 16 98 f7 <0f> 0b eb b6 e8 5c 16 98 f7 0f 0b e9 e2 fd ff ff e8 50 16 98 f7 0f [ 392.383040][ T42] RSP: 0018:ffffc90000b2fa40 EFLAGS: 00010293 [ 392.389175][ T42] RAX: ffffffff89ef5bbb RBX: dffffc0000000000 RCX: ffff888018ea1e00 [ 392.397186][ T42] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 392.405201][ T42] RBP: ffffc90000b2faf8 R08: ffffffff911ed56f R09: 1ffffffff223daad [ 392.413652][ T42] R10: dffffc0000000000 R11: fffffbfff223daae R12: ffff88805e97cd10 [ 392.421675][ T42] R13: ffff88807db9b658 R14: 1ffff92000165f4c R15: 000000000000001f [ 392.429733][ T42] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 392.435386][ T42] ? trace_rdev_return_void+0x1c0/0x1c0 [ 392.441037][ T42] cfg80211_process_wdev_events+0x396/0x500 [ 392.447030][ T42] cfg80211_process_rdev_events+0xa1/0x110 [ 392.452904][ T42] cfg80211_event_work+0x2f/0x40 [ 392.457888][ T42] ? process_scheduled_works+0x975/0x1600 [ 392.463649][ T42] process_scheduled_works+0xa60/0x1600 [ 392.469361][ T42] ? worker_attach_to_pool+0x370/0x370 [ 392.474931][ T42] ? assign_work+0x3cc/0x5d0 [ 392.479599][ T42] worker_thread+0xa5e/0xfe0 [ 392.484290][ T42] ? _raw_spin_unlock+0x40/0x40 [ 392.489186][ T42] ? __kthread_parkme+0x71/0x1c0 [ 392.494211][ T42] kthread+0x2fa/0x390 [ 392.498318][ T42] ? pr_cont_work+0x550/0x550 [ 392.503048][ T42] ? kthread_blkcg+0xd0/0xd0 [ 392.507687][ T42] ret_from_fork+0x48/0x80 [ 392.512143][ T42] ? kthread_blkcg+0xd0/0xd0 [ 392.516783][ T42] ret_from_fork_asm+0x11/0x20 [ 392.521659][ T42] [ 392.524971][ T42] Kernel Offset: disabled [ 392.529369][ T42] Rebooting in 86400 seconds..