last executing test programs: 11.741749125s ago: executing program 0 (id=2827): socket$kcm(0xa, 0x6, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x60, 0x8}, {}, {0x2}]}) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000001f40)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x5, 0xc9, &(0x7f0000000c40)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x6, r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f00000000c0), 0x4) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x0, 0x36, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000e9d3000000000000faffffff18110000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018000000030000000000000003000000af692000fcffffff182a0000", @ANYRES32, @ANYRES32=r4, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000091000000000000b7020000020000008500000084000000b7000000000000009500"/47], &(0x7f0000001bc0)='GPL\x00', 0x5, 0x33, &(0x7f0000001c00)=""/51, 0x40f00, 0x73, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000001c80)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001cc0)={0x4, 0xf, 0xffff, 0x3}, 0x10, 0x0, r3, 0x0, &(0x7f0000000100)=[r4, r4, 0xffffffffffffffff, r4], &(0x7f0000001d40), 0x10, 0x7fff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000002000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32], 0x50) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000840)="89d8cbe4d95a4858f35ecb43fae946a275dbd05ddf2aed10a290823a6bb37dd030aa23987f73eecca5ec371020805bad59a66195aa9ae4459285c8335d458eb8ce2c2e59f9cc4fc2a6553063a38f586643fa58ce064deffa45387b39c4eef93d5fe0df5ecf11f16e5105736a97", 0x6d}, {&(0x7f00000008c0)="6671978907213214e583c8fc9580ecd73887a30585dafbeef25cdd202555254fe7c5ffffc31915c36d85348dc6edebd65de3e129fa719a9f6ebc90d723ebbbff107e0bf4965554ae6ec74c5354fe6f5b791ca65c093d533371a49d09ead21fa95f29d3", 0x63}], 0x2, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast2}}}], 0x88}, 0x800) 11.553411127s ago: executing program 0 (id=2828): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x20}, 0x200040c4) 11.137302841s ago: executing program 0 (id=2830): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x35}, 0x60044084) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x10}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x5e61, 0x0, r5, 0x8e2c, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 10.435782759s ago: executing program 1 (id=2833): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x3}]}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x3e}, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.31723679s ago: executing program 0 (id=2835): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x82d7) recvmsg$kcm(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000980)=""/35, 0x23}, {&(0x7f0000000b00)=""/171, 0xab}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/4098, 0x1002}, {&(0x7f0000000040)=""/27, 0x1b}], 0x5}, 0x40012100) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x541b, 0x0) socket$kcm(0x2b, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00e1ff00bfa0e4000000000007011e58c001b7f9f5d347da799d0000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) r6 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0xfdef) 10.178592932s ago: executing program 2 (id=2836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000002a70000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x7}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffeffffffffffffc, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x3, 0x3, 0x64, 0x9}, {0x64, 0x1, 0x0, 0x9}, {0x6, 0x6, 0x0, 0x3}]}) 10.122929772s ago: executing program 4 (id=2837): bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x1}, 0x0, 0x0, 0xc2ba, 0x9, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 10.029971153s ago: executing program 1 (id=2839): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ad3700005c000000000000", @ANYRES32, @ANYBLOB="0000004c47000000008000b3ef194189c71983b4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x7, &(0x7f0000000000)=r0, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1849, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x102a, 0x0, 0x1, 0x0, 0x4, 0x800001, 0x2000, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x8, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x1800000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0074f1321eb38882652067603600"/28], 0x50) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000eeff0000000000000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r3], 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0xb, 0x1, 0x41, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)}, 0x40) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800ff207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 9.840173645s ago: executing program 2 (id=2840): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000010000000007000000"], 0x20}, 0x200040c4) 9.676298507s ago: executing program 2 (id=2842): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x22) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) unlink(&(0x7f0000000200)='./cgroup\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="6112a8000000000061134c0000000000bf20000000000000160005003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff0200"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(r4, 0x0, 0x90) socket$kcm(0xa, 0x0, 0x88) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r3}, 0xc) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.613939068s ago: executing program 4 (id=2843): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c202, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x26, 0x5, 0x0, &(0x7f0000000740)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c202, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socketpair(0x26, 0x5, 0x0, &(0x7f0000000740)) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 9.560477708s ago: executing program 1 (id=2844): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x1001, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x8, 0x4, 0x8, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000680), 0x4}, 0x10088, 0x7, 0x7, 0x9, 0x10001, 0xa8, 0x4, 0x0, 0x8, 0x0, 0xb0b7}, 0xffffffffffffffff, 0xc, r0, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r4, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000440)=""/45, 0x2d, 0x0, &(0x7f0000000500)=""/216, 0xd8}}, 0x10) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r4, @ANYBLOB="fffbffff00"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0105050000000002000000000000000000000000000086796a99753b96fe73a40073a2135795d7732faf2f19eac62a07539d8f54f08cac81cb6688def7dac1efc33229e1098703cec847235113239035ff800e5a5ad127695896f1e70621541cd2a412078eae49eec12a5c617e07cd2c1e542063cb3966"], 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0x3, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0xd, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xff}, @generic={0xd2, 0x1, 0xe, 0x99, 0xe}, @call={0x85, 0x0, 0x0, 0xb1}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @generic={0x0, 0x1, 0x4, 0xfdf, 0x10}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0xe8, &(0x7f0000000200)=""/232, 0x41100, 0x4, '\x00', r6, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x3, 0x8, 0x5}, 0x10, r7, r2, 0x4, &(0x7f0000000740)=[r4, r8, r9], &(0x7f0000000780)=[{0x4, 0x4, 0x9, 0xa}, {0x2, 0x2, 0x3, 0x5}, {0x3, 0x1, 0xf, 0x5}, {0x4, 0x4, 0xf, 0x5}], 0x10, 0x4}, 0x94) 9.46778365s ago: executing program 3 (id=2845): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x13, 0x3, 0x1, 0x7, 0x1206, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1800}, 0x50) 9.303144351s ago: executing program 4 (id=2846): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x401a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x9, 0x10, 0x0, 0xb}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x8) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000003000000dd0a0000000000007301a400000000009509000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x6}, 0x0, 0x100000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x64b}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) 9.253621781s ago: executing program 3 (id=2847): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x300, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) 9.160674333s ago: executing program 0 (id=2848): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f", 0x16}], 0x1}, 0x4010) socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe3a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001200), 0xc}, 0x104007, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socketpair(0x2, 0x2, 0x88, &(0x7f0000000400)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000011c0)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x80000003) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="080000000400000004000000080000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) socket$kcm(0xa, 0x2, 0x73) ioctl$TUNSETOFFLOAD(r1, 0x4004743b, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000001140)=r2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.826478106s ago: executing program 1 (id=2849): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x3}]}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x3e}, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.627420078s ago: executing program 3 (id=2850): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000080)="04000000df000000428b4c6588f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.43220573s ago: executing program 2 (id=2851): socket$kcm(0xa, 0x6, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x60, 0x8}, {}, {0x2}]}) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000001f40)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x5, 0xc9, &(0x7f0000000c40)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x6, r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f00000000c0), 0x4) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x0, 0x36, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000e9d3000000000000faffffff18110000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018000000030000000000000003000000af692000fcffffff182a0000", @ANYRES32, @ANYRES32=r4, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000091000000000000b7020000020000008500000084000000b7000000000000009500"/47], &(0x7f0000001bc0)='GPL\x00', 0x5, 0x33, &(0x7f0000001c00)=""/51, 0x40f00, 0x73, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000001c80)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001cc0)={0x4, 0xf, 0xffff, 0x3}, 0x10, 0x0, r3, 0x0, &(0x7f0000000100)=[r4, r4, 0xffffffffffffffff, r4], &(0x7f0000001d40), 0x10, 0x7fff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000002000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32], 0x50) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000840)="89d8cbe4d95a4858f35ecb43fae946a275dbd05ddf2aed10a290823a6bb37dd030aa23987f73eecca5ec371020805bad59a66195aa9ae4459285c8335d458eb8ce2c2e59f9cc4fc2a6553063a38f586643fa58ce064deffa45387b39c4eef93d5fe0df5ecf11f16e5105736a97", 0x6d}, {&(0x7f00000008c0)="6671978907213214e583c8fc9580ecd73887a30585dafbeef25cdd202555254fe7c5ffffc31915c36d85348dc6edebd65de3e129fa719a9f6ebc90d723ebbbff107e0bf4965554ae6ec74c5354fe6f5b791ca65c093d533371a49d09ead21fa95f29d3", 0x63}], 0x2, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast2}}}], 0x88}, 0x800) 8.43186376s ago: executing program 4 (id=2852): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000000000001"], 0x20}, 0x200040c4) 8.313701782s ago: executing program 3 (id=2853): bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 8.312571411s ago: executing program 4 (id=2854): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ad3700005c000000000000", @ANYRES32, @ANYBLOB="0000004c47000000008000b3ef194189c71983b4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x7, &(0x7f0000000000)=r0, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1849, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x102a, 0x0, 0x1, 0x0, 0x4, 0x800001, 0x2000, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x8, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x1800000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0074f1321eb38882652067603600"/28], 0x50) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000eeff0000000000000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r3], 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0xb, 0x1, 0x41, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)}, 0x40) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800ff207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 7.816624537s ago: executing program 2 (id=2855): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x50, 0x1, 0x0, 0x0, 0x20, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x219}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x68}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000005c0)=r1}, 0x20) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x10, r1}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a10850b0830b8fb2dcc009f476718ec977a2d4ba13e26370397a24064a8f4", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x22, &(0x7f0000000740)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @exit, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}], &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x5, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r0, r0, r3, r0, r0, r0, r0, r0, r4, r0], &(0x7f0000000a40)=[{0x5, 0x3, 0xd, 0x1}, {0x0, 0x3, 0x7, 0x2}, {0x0, 0x5, 0x4, 0xb}]}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000001, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r8) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x2}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc) 7.785845697s ago: executing program 1 (id=2856): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b40000000000f3ff7910900000000000630000000000000095000000000000008d92133deb6af19a615221a5e9c1c30b6e95cc8fea035580b99721396dc8eb6d5df6dc9e699a633176330ff919676a6af14926d2972f96f1b3b7e18b030df52a4f7a1c2f51146019dbb20ca845aa71fa9b92bea75cad145375cd89be1d82fabf57ee85c5e4129f42d848ed23f5b44542fe5be65239e37e6b198ca137e4432993b4576fa1ecf61a856a521d26758e4ddf6730903b5d22548be0ddaae1e6c1233841b2f6c7e7daef09f949ba0db2a1e1c43aba69adbed02c5d6cf115129ee07e25ca8518500d95e5e3ff3e7503dcf5347bee255eeba0f102d4c4c415eb56239c523a4dde580ed459f309797655222077a0442fb4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffda3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0}, 0x50) 7.54346856s ago: executing program 1 (id=2857): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac61, 0xfffffffe, 0x2, 0xfffffffffffffffd, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xe2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x48280, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000500)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4206}, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRES32=r4], 0x28, 0x200408cc}, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6, r5}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000000000c63e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r8, &(0x7f0000000100)}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5d31, 0x28408, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) r10 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0x19, 0x0, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x7, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 7.54076701s ago: executing program 3 (id=2858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0xc2, 0x1}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x10, r0}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) 7.54041857s ago: executing program 4 (id=2859): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50622, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) socket$kcm(0x21, 0x2, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x30}, 0x7e8166965e22236a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000580)}, 0x4) recvmsg$kcm(r2, &(0x7f0000003180)={&(0x7f0000000000)=@vsock, 0x80, &(0x7f0000003100)=[{&(0x7f0000000200)=""/165, 0xa5}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/42, 0x2a}, {&(0x7f0000002080)=""/85, 0x55}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x5}, 0x12022) 7.48083073s ago: executing program 0 (id=2860): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50622, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001600)}], 0x1}, 0x8811) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r7 = socket$kcm(0x21, 0x2, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c1"], 0xfdef) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c05"], 0x30}, 0x7e8166965e22236a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) recvmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, &(0x7f0000000940)=[{0x0}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) 1.3697ms ago: executing program 3 (id=2861): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ff"], 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x28) sendmsg$tipc(r9, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x2000, 0x64656461}}, 0x10, 0x0}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 0s ago: executing program 2 (id=2871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x8}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r1) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000016000000b40000007f00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000400000700000000000000f42f3b0f7ec1a221c0d66ce853ebdf69b0251c71df06ba9238ce989fe9782cb7c3ea1faa1b090e345409b5b660b5a8b49274", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000000000000000000000000000851364432b51ce1000000600000018249600", @ANYRES32=r3, @ANYBLOB="00000000000000000f08000000000000180000000000000000000000000000009500000000000000d50a0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000080)="27030200f00f00000600002fb9088965c7297a05a2019e6bafedef4e39ffffffffe1053742e0e4650058f7000000886411001144b6000300b8bf4a31accb", 0x3e}, {&(0x7f0000002500)="4fc9316bdf97a94aa4c01a71f2b55527cb347f01679ab78becd1455755985051a9b55a7c5e6cb0a37cd9c92a4b8e06a53af164e81ae37d251ce1818e9e6973374feaab4d2422070084af233d99a2dd7106672e6520a5ab0801d45a30bc7923756426ed6029cea34be70fd52bfbde2bb1171c48961a58bc64c2dafc47263af31c8d405d712a94a8f88b4e74d1e510c60100010000000000b6d31f118703445f42717726b721981296ae4348b0767e6b67335a9da9d3d4936b861ea72bb996e01bb88357f9bed242d7c1bd6b09940e23a2f9903cd9925d22f8112f9741e5658b5e62a4b23a292c858fcb8362e401d3", 0xee}, {&(0x7f00000001c0)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b7880d6ce92860ccd4f7d6a5f4ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426dd3cc9eddeab744f710419fde96d", 0x75}, {&(0x7f0000000880)="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", 0x178}, {&(0x7f0000002400)="e20650bb69f596a001a9396df3e895da88d97ebd178d47b9119f9232ea20b1637429669dc4d0c0cf864240df51aff34230940425976a91424886f7569ab0a0ed75f495341eee79791236e5437400cf79a8e84ed65e993f6897444bb5d86d94215b781ae9918681a67968825e9f5fed8e3cf996d276f78c75101b6e188cc3b29c44b07b85c76fe40f20727d081a440ce84ced2c1d50c6879b422b03412a20f6d2d4b9226a87c0fe4de731da5c6a6edb4972a2f3e7966db1e8ff048f5b61600611bbbc0905a9a9c23fa6db92243e178f7793e83e82ead265afe54086", 0xdb}, {&(0x7f0000002600)}], 0x6}, 0x60404) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x8d2142, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x0, @perf_config_ext, 0x5601, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x5, 0x4, 0x6d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x147b8, 0xfffffffffffffffc, 0x0, 0x0, 0x3ffff, 0x7}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x378f}, 0x1, 0xfffffffffffffffe, 0x4, 0x6, 0xfffffffffffffffe, 0x2080000a, 0xfffc, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0xd) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x48084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) kernel console output (not intermixed with test programs): ytes leftover after parsing attributes in process `syz.1.1720'. [ 744.616293][ T9894] bond0: (slave geneve0): Error: Slave device does not support XDP [ 744.955592][ T9894] netlink: 'syz.2.1721': attribute type 10 has an invalid length. [ 745.124363][ T9904] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1723'. [ 745.188616][ T9905] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1724'. [ 745.244609][ T9905] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 745.279114][ T9905] CPU: 0 PID: 9905 Comm: syz.1.1724 Not tainted syzkaller #0 [ 745.286690][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 745.296806][ T9905] Call Trace: [ 745.300132][ T9905] [ 745.303111][ T9905] dump_stack_lvl+0x188/0x24e [ 745.307954][ T9905] ? show_regs_print_info+0x12/0x12 [ 745.313259][ T9905] ? load_image+0x400/0x400 [ 745.317851][ T9905] sysfs_warn_dup+0x8a/0xa0 [ 745.322506][ T9905] sysfs_do_create_link_sd+0xc0/0x110 [ 745.327955][ T9905] device_add+0x7ed/0xfb0 [ 745.332546][ T9905] wiphy_register+0x1d9f/0x2ac0 [ 745.337581][ T9905] ? cfg80211_event_work+0x40/0x40 [ 745.342852][ T9905] ? minstrel_ht_alloc+0x894/0xa20 [ 745.348569][ T9905] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 745.354750][ T9905] ieee80211_register_hw+0x2d00/0x39f0 [ 745.360309][ T9905] ? ieee80211_register_hw+0xf21/0x39f0 [ 745.365920][ T9905] ? ieee80211_register_hw+0xf21/0x39f0 [ 745.371547][ T9905] ? ieee80211_tasklet_handler+0x20/0x20 [ 745.377266][ T9905] ? memset+0x1e/0x40 [ 745.381298][ T9905] ? __hrtimer_init+0x186/0x270 [ 745.386213][ T9905] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 745.392035][ T9905] hwsim_new_radio_nl+0xafa/0xce0 [ 745.397151][ T9905] genl_family_rcv_msg_doit+0x22a/0x330 [ 745.402833][ T9905] ? end_current_label_crit_section+0x170/0x170 [ 745.409220][ T9905] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 745.415188][ T9905] ? bpf_lsm_capable+0x5/0x10 [ 745.420010][ T9905] ? security_capable+0x85/0xb0 [ 745.424927][ T9905] genl_rcv_msg+0x604/0x790 [ 745.429497][ T9905] ? genl_bind+0x360/0x360 [ 745.433955][ T9905] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 745.440378][ T9905] netlink_rcv_skb+0x1fb/0x450 [ 745.445197][ T9905] ? genl_bind+0x360/0x360 [ 745.449673][ T9905] ? netlink_ack+0x1170/0x1170 [ 745.454537][ T9905] ? down_read+0x1a8/0x2d0 [ 745.459189][ T9905] genl_rcv+0x24/0x40 [ 745.463216][ T9905] netlink_unicast+0x74d/0x8d0 [ 745.468064][ T9905] netlink_sendmsg+0x8ad/0xbd0 [ 745.472992][ T9905] ? netlink_getsockopt+0x550/0x550 [ 745.478258][ T9905] ? aa_sock_msg_perm+0x94/0x150 [ 745.483259][ T9905] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 745.488590][ T9905] ? security_socket_sendmsg+0x7c/0xa0 [ 745.494307][ T9905] ? netlink_getsockopt+0x550/0x550 [ 745.499557][ T9905] ____sys_sendmsg+0x5be/0x970 [ 745.504397][ T9905] ? __sys_sendmsg_sock+0x30/0x30 [ 745.509474][ T9905] ? __import_iovec+0x315/0x500 [ 745.514398][ T9905] ? import_iovec+0x6f/0xa0 [ 745.518957][ T9905] ___sys_sendmsg+0x2a2/0x360 [ 745.523865][ T9905] ? try_to_wake_up+0x67c/0x1080 [ 745.528866][ T9905] ? __sys_sendmsg+0x290/0x290 [ 745.533814][ T9905] __se_sys_sendmsg+0x1bb/0x2a0 [ 745.538730][ T9905] ? __x64_sys_sendmsg+0x80/0x80 [ 745.543778][ T9905] ? lockdep_hardirqs_on+0x94/0x140 [ 745.549039][ T9905] do_syscall_64+0x4c/0xa0 [ 745.553505][ T9905] ? clear_bhb_loop+0x60/0xb0 [ 745.558228][ T9905] ? clear_bhb_loop+0x60/0xb0 [ 745.562987][ T9905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.568933][ T9905] RIP: 0033:0x7f225f59cdd9 [ 745.573610][ T9905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.593267][ T9905] RSP: 002b:00007f22603cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.601731][ T9905] RAX: ffffffffffffffda RBX: 00007f225f815fa0 RCX: 00007f225f59cdd9 [ 745.609748][ T9905] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 745.617768][ T9905] RBP: 00007f225f632d69 R08: 0000000000000000 R09: 0000000000000000 [ 745.625785][ T9905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.633799][ T9905] R13: 00007f225f816038 R14: 00007f225f815fa0 R15: 00007fff12784858 [ 745.641856][ T9905] [ 747.352035][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.358594][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.754168][ T9935] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1732'. [ 747.882799][ T9925] netlink: 'syz.1.1728': attribute type 21 has an invalid length. [ 747.972920][ T9925] netlink: 'syz.1.1728': attribute type 6 has an invalid length. [ 747.988826][ T9925] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1728'. [ 748.074789][ T9937] netlink: 'syz.0.1731': attribute type 4 has an invalid length. [ 748.111098][ T9937] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1731'. [ 748.379276][ T9949] bond0: (slave geneve0): Error: Slave device does not support XDP [ 748.556266][ T9951] netlink: 'syz.2.1734': attribute type 10 has an invalid length. [ 748.647269][ T9953] netlink: 'syz.1.1736': attribute type 10 has an invalid length. [ 749.288497][ T9971] netlink: 'syz.1.1744': attribute type 15 has an invalid length. [ 749.340760][ T9971] netlink: 'syz.1.1744': attribute type 7 has an invalid length. [ 749.462780][ T9974] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 749.595568][ T9984] netlink: 'syz.1.1747': attribute type 21 has an invalid length. [ 749.671430][ T9984] netlink: 'syz.1.1747': attribute type 6 has an invalid length. [ 749.679363][ T9984] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1747'. [ 750.054443][ T9997] bond0: (slave geneve0): Error: Slave device does not support XDP [ 750.190322][ T9999] bond0: (slave geneve0): Error: Slave device does not support XDP [ 750.322062][ T9997] netlink: 'syz.0.1751': attribute type 10 has an invalid length. [ 750.340953][T10001] netlink: 'syz.4.1750': attribute type 10 has an invalid length. [ 751.346496][T10023] netlink: 'syz.3.1760': attribute type 11 has an invalid length. [ 751.399350][T10023] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1760'. [ 751.460001][T10021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 751.633383][T10030] netlink: 'syz.0.1762': attribute type 21 has an invalid length. [ 751.711162][T10030] netlink: 'syz.0.1762': attribute type 6 has an invalid length. [ 751.747194][T10030] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1762'. [ 751.833511][T10034] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 751.942542][ T4344] wlan1: Trigger new scan to find an IBSS to join [ 752.052939][T10036] bond0: (slave geneve0): Error: Slave device does not support XDP [ 753.657233][T10055] validate_nla: 1 callbacks suppressed [ 753.657253][T10055] netlink: 'syz.1.1781': attribute type 25 has an invalid length. [ 753.715833][T10055] netlink: 'syz.1.1781': attribute type 1 has an invalid length. [ 753.747182][T10055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.229436][T10068] netlink: 'syz.1.1775': attribute type 21 has an invalid length. [ 754.276022][T10068] netlink: 'syz.1.1775': attribute type 6 has an invalid length. [ 754.342083][T10068] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1775'. [ 755.941068][ T9] wlan1: Trigger new scan to find an IBSS to join [ 756.816758][T10104] netlink: 'syz.3.1789': attribute type 2 has an invalid length. [ 756.845358][T10104] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1789'. [ 756.855280][T10107] netlink: 'syz.2.1790': attribute type 2 has an invalid length. [ 756.863892][T10107] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1790'. [ 757.747558][T10133] netlink: 'syz.1.1797': attribute type 3 has an invalid length. [ 757.800982][T10133] netlink: 'syz.1.1797': attribute type 8 has an invalid length. [ 757.808798][T10133] netlink: 187680 bytes leftover after parsing attributes in process `syz.1.1797'. [ 758.646189][T10152] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1801'. [ 758.700211][T10147] netlink: 'syz.0.1810': attribute type 21 has an invalid length. [ 758.711270][T10147] netlink: 'syz.0.1810': attribute type 6 has an invalid length. [ 758.798205][T10147] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1810'. [ 758.983760][ T9] wlan1: Trigger new scan to find an IBSS to join [ 759.581697][ T9] wlan1: Creating new IBSS network, BSSID 92:87:fa:c7:a8:ed [ 759.865919][T10158] netlink: 'syz.1.1803': attribute type 2 has an invalid length. [ 759.962140][T10158] netlink: 'syz.1.1803': attribute type 21 has an invalid length. [ 760.016603][T10161] netlink: 'syz.2.1804': attribute type 2 has an invalid length. [ 760.036278][T10161] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1804'. [ 760.278248][T10171] netlink: 'syz.3.1807': attribute type 2 has an invalid length. [ 760.315314][T10171] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1807'. [ 760.354732][T10174] netlink: 'syz.4.1808': attribute type 1 has an invalid length. [ 761.554747][T10195] bond0: (slave geneve0): Error: Slave device does not support XDP [ 761.834566][T10198] netlink: 'syz.4.1814': attribute type 10 has an invalid length. [ 761.877705][T10201] netlink: 'syz.1.1816': attribute type 21 has an invalid length. [ 761.906622][T10201] netlink: 'syz.1.1816': attribute type 6 has an invalid length. [ 762.031052][T10201] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1816'. [ 762.444731][T10215] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1822'. [ 762.496881][T10215] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 762.581003][T10215] CPU: 1 PID: 10215 Comm: syz.1.1822 Not tainted syzkaller #0 [ 762.588573][T10215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 762.598797][T10215] Call Trace: [ 762.602119][T10215] [ 762.605126][T10215] dump_stack_lvl+0x188/0x24e [ 762.610059][T10215] ? show_regs_print_info+0x12/0x12 [ 762.615346][T10215] ? load_image+0x400/0x400 [ 762.619947][T10215] sysfs_warn_dup+0x8a/0xa0 [ 762.624515][T10215] sysfs_do_create_link_sd+0xc0/0x110 [ 762.630080][T10215] device_add+0x7ed/0xfb0 [ 762.634475][T10215] wiphy_register+0x1d9f/0x2ac0 [ 762.639396][T10215] ? cfg80211_event_work+0x40/0x40 [ 762.644663][T10215] ? minstrel_ht_alloc+0x894/0xa20 [ 762.649842][T10215] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 762.656039][T10215] ieee80211_register_hw+0x2d00/0x39f0 [ 762.661562][T10215] ? ieee80211_register_hw+0xf21/0x39f0 [ 762.667181][T10215] ? ieee80211_register_hw+0xf21/0x39f0 [ 762.672787][T10215] ? ieee80211_tasklet_handler+0x20/0x20 [ 762.678468][T10215] ? memset+0x1e/0x40 [ 762.682473][T10215] ? __hrtimer_init+0x186/0x270 [ 762.687350][T10215] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 762.693303][T10215] hwsim_new_radio_nl+0xafa/0xce0 [ 762.698384][T10215] genl_family_rcv_msg_doit+0x22a/0x330 [ 762.703961][T10215] ? end_current_label_crit_section+0x170/0x170 [ 762.710227][T10215] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 762.716161][T10215] ? bpf_lsm_capable+0x5/0x10 [ 762.720865][T10215] ? security_capable+0x85/0xb0 [ 762.725746][T10215] genl_rcv_msg+0x604/0x790 [ 762.730287][T10215] ? genl_bind+0x360/0x360 [ 762.734725][T10215] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 762.741105][T10215] netlink_rcv_skb+0x1fb/0x450 [ 762.745905][T10215] ? genl_bind+0x360/0x360 [ 762.750339][T10215] ? netlink_ack+0x1170/0x1170 [ 762.755145][T10215] ? down_read+0x1a8/0x2d0 [ 762.759589][T10215] genl_rcv+0x24/0x40 [ 762.763593][T10215] netlink_unicast+0x74d/0x8d0 [ 762.768396][T10215] netlink_sendmsg+0x8ad/0xbd0 [ 762.773291][T10215] ? netlink_getsockopt+0x550/0x550 [ 762.778516][T10215] ? aa_sock_msg_perm+0x94/0x150 [ 762.783563][T10215] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 762.788867][T10215] ? security_socket_sendmsg+0x7c/0xa0 [ 762.794355][T10215] ? netlink_getsockopt+0x550/0x550 [ 762.799577][T10215] ____sys_sendmsg+0x5be/0x970 [ 762.804387][T10215] ? __sys_sendmsg_sock+0x30/0x30 [ 762.809436][T10215] ? __import_iovec+0x315/0x500 [ 762.814319][T10215] ? import_iovec+0x6f/0xa0 [ 762.818854][T10215] ___sys_sendmsg+0x2a2/0x360 [ 762.823558][T10215] ? try_to_wake_up+0x67c/0x1080 [ 762.828522][T10215] ? __sys_sendmsg+0x290/0x290 [ 762.833369][T10215] __se_sys_sendmsg+0x1bb/0x2a0 [ 762.838273][T10215] ? __x64_sys_sendmsg+0x80/0x80 [ 762.843262][T10215] ? lockdep_hardirqs_on+0x94/0x140 [ 762.848488][T10215] do_syscall_64+0x4c/0xa0 [ 762.852930][T10215] ? clear_bhb_loop+0x60/0xb0 [ 762.857626][T10215] ? clear_bhb_loop+0x60/0xb0 [ 762.862362][T10215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 762.868285][T10215] RIP: 0033:0x7f225f59cdd9 [ 762.872813][T10215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.892453][T10215] RSP: 002b:00007f22603cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.900896][T10215] RAX: ffffffffffffffda RBX: 00007f225f815fa0 RCX: 00007f225f59cdd9 [ 762.908895][T10215] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 762.916973][T10215] RBP: 00007f225f632d69 R08: 0000000000000000 R09: 0000000000000000 [ 762.924970][T10215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.933049][T10215] R13: 00007f225f816038 R14: 00007f225f815fa0 R15: 00007fff12784858 [ 762.941074][T10215] [ 763.046375][T10225] FAULT_INJECTION: forcing a failure. [ 763.046375][T10225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.077800][T10225] CPU: 1 PID: 10225 Comm: syz.0.1824 Not tainted syzkaller #0 [ 763.085350][T10225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 763.095544][T10225] Call Trace: [ 763.098874][T10225] [ 763.101851][T10225] dump_stack_lvl+0x188/0x24e [ 763.106616][T10225] ? show_regs_print_info+0x12/0x12 [ 763.111953][T10225] ? load_image+0x400/0x400 [ 763.116511][T10225] ? __lock_acquire+0x7d10/0x7d10 [ 763.121599][T10225] ? perf_trace_lock_acquire+0x100/0x3e0 [ 763.127288][T10225] should_fail_ex+0x399/0x4d0 [ 763.132017][T10225] _copy_from_user+0x2c/0x170 [ 763.136753][T10225] ___sys_sendmsg+0x1c3/0x360 [ 763.141491][T10225] ? __sys_sendmsg+0x290/0x290 [ 763.146341][T10225] ? __lock_acquire+0x7d10/0x7d10 [ 763.151456][T10225] __se_sys_sendmsg+0x1bb/0x2a0 [ 763.156406][T10225] ? __x64_sys_sendmsg+0x80/0x80 [ 763.161425][T10225] ? lockdep_hardirqs_on+0x94/0x140 [ 763.166695][T10225] do_syscall_64+0x4c/0xa0 [ 763.171179][T10225] ? clear_bhb_loop+0x60/0xb0 [ 763.175996][T10225] ? clear_bhb_loop+0x60/0xb0 [ 763.180749][T10225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 763.187226][T10225] RIP: 0033:0x7efd62f9cdd9 [ 763.191703][T10225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.211475][T10225] RSP: 002b:00007efd63d8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 763.219939][T10225] RAX: ffffffffffffffda RBX: 00007efd63215fa0 RCX: 00007efd62f9cdd9 [ 763.227956][T10225] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 763.236041][T10225] RBP: 00007efd63d8f090 R08: 0000000000000000 R09: 0000000000000000 [ 763.244059][T10225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.252069][T10225] R13: 00007efd63216038 R14: 00007efd63215fa0 R15: 00007ffd0e47da08 [ 763.260218][T10225] [ 764.089925][T10240] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 764.193599][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1831'. [ 766.395270][T10262] netlink: 'syz.3.1835': attribute type 2 has an invalid length. [ 766.441203][T10262] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1835'. [ 766.641765][T10274] netlink: 'syz.4.1836': attribute type 2 has an invalid length. [ 766.690003][T10274] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1836'. [ 766.949354][T10286] netlink: 'syz.1.1843': attribute type 21 has an invalid length. [ 766.999836][T10286] netlink: 'syz.1.1843': attribute type 6 has an invalid length. [ 767.014522][T10286] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1843'. [ 767.255019][T10291] FAULT_INJECTION: forcing a failure. [ 767.255019][T10291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.341531][T10291] CPU: 1 PID: 10291 Comm: syz.1.1846 Not tainted syzkaller #0 [ 767.349267][T10291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 767.359371][T10291] Call Trace: [ 767.362691][T10291] [ 767.365665][T10291] dump_stack_lvl+0x188/0x24e [ 767.370399][T10291] ? show_regs_print_info+0x12/0x12 [ 767.375647][T10291] ? load_image+0x400/0x400 [ 767.380199][T10291] ? __lock_acquire+0x7d10/0x7d10 [ 767.385268][T10291] ? lockdep_hardirqs_on+0x94/0x140 [ 767.390526][T10291] should_fail_ex+0x399/0x4d0 [ 767.395264][T10291] _copy_from_user+0x2c/0x170 [ 767.400078][T10291] sk_setsockopt+0x2f1/0x28a0 [ 767.404821][T10291] ? sockopt_capable+0x60/0x60 [ 767.409636][T10291] ? rcu_is_watching+0x11/0xa0 [ 767.414482][T10291] ? lockdep_hardirqs_on+0x94/0x140 [ 767.419735][T10291] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 767.425949][T10291] ? audit_tree_destroy_watch+0x20/0x20 [ 767.431552][T10291] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 767.437139][T10291] ? security_socket_setsockopt+0x7a/0xa0 [ 767.442905][T10291] __sys_setsockopt+0x2f6/0x3d0 [ 767.447814][T10291] __x64_sys_setsockopt+0xb1/0xc0 [ 767.452904][T10291] do_syscall_64+0x4c/0xa0 [ 767.457375][T10291] ? clear_bhb_loop+0x60/0xb0 [ 767.462100][T10291] ? clear_bhb_loop+0x60/0xb0 [ 767.466837][T10291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.472865][T10291] RIP: 0033:0x7f225f59cdd9 [ 767.477327][T10291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.497155][T10291] RSP: 002b:00007f22603cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 767.505623][T10291] RAX: ffffffffffffffda RBX: 00007f225f815fa0 RCX: 00007f225f59cdd9 [ 767.513774][T10291] RDX: 000000000000000d RSI: 0000000000000001 RDI: 0000000000000005 [ 767.521872][T10291] RBP: 00007f22603cf090 R08: 0000000000000004 R09: 0000000000000000 [ 767.529892][T10291] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 767.537916][T10291] R13: 00007f225f816038 R14: 00007f225f815fa0 R15: 00007fff12784858 [ 767.546048][T10291] [ 767.642487][T10299] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 767.676221][T10305] netlink: 'syz.2.1847': attribute type 2 has an invalid length. [ 767.704081][T10305] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1847'. [ 767.817975][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1845'. [ 768.748956][T10314] netlink: 'syz.2.1852': attribute type 2 has an invalid length. [ 768.831165][T10314] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1852'. [ 769.189926][T10326] netlink: 'syz.3.1856': attribute type 2 has an invalid length. [ 769.300113][T10326] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1856'. [ 770.118048][T10330] netlink: 'syz.4.1857': attribute type 21 has an invalid length. [ 770.141868][T10330] netlink: 'syz.4.1857': attribute type 6 has an invalid length. [ 770.159141][T10330] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1857'. [ 770.701410][T10356] netlink: 'syz.0.1867': attribute type 21 has an invalid length. [ 770.714313][T10356] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1867'. [ 771.337111][T10370] : port 1(ip6gretap0) entered blocking state [ 771.361199][T10370] : port 1(ip6gretap0) entered disabled state [ 771.434811][T10370] device ip6gretap0 entered promiscuous mode [ 771.515494][T10369] device ip6gretap0 left promiscuous mode [ 771.734470][T10369] : port 1(ip6gretap0) entered disabled state [ 771.999352][T10374] validate_nla: 1 callbacks suppressed [ 771.999372][T10374] netlink: 'syz.1.1869': attribute type 2 has an invalid length. [ 772.029418][T10374] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1869'. [ 772.399825][T10390] netlink: 'syz.0.1877': attribute type 21 has an invalid length. [ 772.473719][T10390] netlink: 'syz.0.1877': attribute type 6 has an invalid length. [ 772.539927][T10390] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1877'. [ 772.999035][T10400] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1880'. [ 773.009302][T10400] netlink: zone id is out of range [ 773.103845][T10400] netlink: del zone limit has 4 unknown bytes [ 773.268927][T10405] bond0: (slave geneve0): Error: Slave device does not support XDP [ 773.348154][T10405] netlink: 'syz.4.1882': attribute type 10 has an invalid length. [ 773.479998][T10407] bond0: (slave geneve0): Error: Slave device does not support XDP [ 773.609128][T10407] netlink: 'syz.0.1883': attribute type 10 has an invalid length. [ 773.727707][T10415] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1885'. [ 774.579105][T10426] netlink: 'syz.2.1889': attribute type 21 has an invalid length. [ 774.611201][T10426] netlink: 'syz.2.1889': attribute type 6 has an invalid length. [ 774.647867][T10426] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1889'. [ 775.439577][T10454] bond0: (slave geneve0): Error: Slave device does not support XDP [ 775.653457][T10457] netlink: 'syz.0.1898': attribute type 10 has an invalid length. [ 775.985808][T10469] delete_channel: no stack [ 776.020643][T10471] FAULT_INJECTION: forcing a failure. [ 776.020643][T10471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.095702][T10471] CPU: 0 PID: 10471 Comm: syz.2.1904 Not tainted syzkaller #0 [ 776.103278][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 776.113421][T10471] Call Trace: [ 776.116816][T10471] [ 776.119764][T10471] dump_stack_lvl+0x188/0x24e [ 776.124482][T10471] ? show_regs_print_info+0x12/0x12 [ 776.129787][T10471] ? load_image+0x400/0x400 [ 776.134309][T10471] ? __lock_acquire+0x7d10/0x7d10 [ 776.139360][T10471] should_fail_ex+0x399/0x4d0 [ 776.144062][T10471] _copy_from_user+0x2c/0x170 [ 776.148760][T10471] __copy_msghdr+0x3b7/0x580 [ 776.153382][T10471] ___sys_sendmsg+0x210/0x360 [ 776.158084][T10471] ? __sys_sendmsg+0x290/0x290 [ 776.162885][T10471] ? __lock_acquire+0x7d10/0x7d10 [ 776.167948][T10471] __se_sys_sendmsg+0x1bb/0x2a0 [ 776.172938][T10471] ? __x64_sys_sendmsg+0x80/0x80 [ 776.177918][T10471] ? lockdep_hardirqs_on+0x94/0x140 [ 776.183138][T10471] do_syscall_64+0x4c/0xa0 [ 776.187579][T10471] ? clear_bhb_loop+0x60/0xb0 [ 776.192277][T10471] ? clear_bhb_loop+0x60/0xb0 [ 776.196992][T10471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 776.203076][T10471] RIP: 0033:0x7f3cbc99cdd9 [ 776.207518][T10471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.227310][T10471] RSP: 002b:00007f3cbd8c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 776.235764][T10471] RAX: ffffffffffffffda RBX: 00007f3cbcc15fa0 RCX: 00007f3cbc99cdd9 [ 776.243776][T10471] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 776.251769][T10471] RBP: 00007f3cbd8c0090 R08: 0000000000000000 R09: 0000000000000000 [ 776.259752][T10471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.267735][T10471] R13: 00007f3cbcc16038 R14: 00007f3cbcc15fa0 R15: 00007fffc8173358 [ 776.275753][T10471] [ 776.681987][T10485] netlink: 'syz.2.1908': attribute type 7 has an invalid length. [ 777.274370][T10495] bond0: (slave geneve0): Error: Slave device does not support XDP [ 777.340195][T10491] netlink: 'syz.1.1911': attribute type 21 has an invalid length. [ 777.448990][T10491] netlink: 'syz.1.1911': attribute type 6 has an invalid length. [ 777.467603][T10491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1911'. [ 777.479252][T10499] netlink: 'syz.0.1913': attribute type 10 has an invalid length. [ 777.502932][T10496] netlink: 'syz.3.1912': attribute type 21 has an invalid length. [ 777.530497][T10496] netlink: 'syz.3.1912': attribute type 6 has an invalid length. [ 777.559374][T10496] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1912'. [ 777.765360][T10503] netlink: 'syz.2.1914': attribute type 21 has an invalid length. [ 777.791093][T10503] netlink: 'syz.2.1914': attribute type 6 has an invalid length. [ 777.799353][T10503] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1914'. [ 777.871997][T10509] bond0: (slave geneve0): Error: Slave device does not support XDP [ 778.569631][T10536] bond0: (slave geneve0): Error: Slave device does not support XDP [ 778.646935][T10538] netlink: 'syz.3.1925': attribute type 21 has an invalid length. [ 778.731492][T10538] netlink: 'syz.3.1925': attribute type 6 has an invalid length. [ 778.769980][T10538] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1925'. [ 778.786561][T10536] netlink: 'syz.4.1926': attribute type 10 has an invalid length. [ 778.857580][T10531] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1924'. [ 778.955815][T10543] bond0: (slave geneve0): Error: Slave device does not support XDP [ 779.009594][T10545] bond0: (slave geneve0): Error: Slave device does not support XDP [ 779.516177][T10559] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1931'. [ 779.566369][T10559] device ipvlan1 left promiscuous mode [ 779.578725][T10559] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 779.891382][T10563] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 779.898315][T10563] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 780.218478][T10573] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1933'. [ 782.861547][T10582] validate_nla: 5 callbacks suppressed [ 782.861567][T10582] netlink: 'syz.2.1940': attribute type 10 has an invalid length. [ 783.018111][T10582] bond0: (slave wlan1): Releasing backup interface [ 783.069860][T10582] device wlan1 entered promiscuous mode [ 783.090271][T10582] team0: Port device wlan1 added [ 783.100116][T10586] netlink: 'syz.1.1939': attribute type 21 has an invalid length. [ 783.125048][T10586] netlink: 'syz.1.1939': attribute type 6 has an invalid length. [ 783.144821][T10586] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1939'. [ 783.156230][T10585] netlink: 'syz.3.1941': attribute type 10 has an invalid length. [ 783.440349][T10597] netlink: 'syz.0.1945': attribute type 3 has an invalid length. [ 783.473453][T10597] netlink: 163968 bytes leftover after parsing attributes in process `syz.0.1945'. [ 783.488459][T10602] FAULT_INJECTION: forcing a failure. [ 783.488459][T10602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.614926][T10602] CPU: 0 PID: 10602 Comm: syz.1.1946 Not tainted syzkaller #0 [ 783.622646][T10602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 783.632834][T10602] Call Trace: [ 783.636237][T10602] [ 783.639291][T10602] dump_stack_lvl+0x188/0x24e [ 783.644111][T10602] ? show_regs_print_info+0x12/0x12 [ 783.649352][T10602] ? load_image+0x400/0x400 [ 783.653903][T10602] ? __lock_acquire+0x7d10/0x7d10 [ 783.659063][T10602] ? snprintf+0xe5/0x140 [ 783.663526][T10602] should_fail_ex+0x399/0x4d0 [ 783.668249][T10602] _copy_to_user+0x2c/0x130 [ 783.672807][T10602] simple_read_from_buffer+0xe3/0x150 [ 783.678405][T10602] proc_fail_nth_read+0x1a6/0x220 [ 783.683501][T10602] ? proc_fault_inject_write+0x310/0x310 [ 783.689187][T10602] ? fsnotify_perm+0x248/0x550 [ 783.693998][T10602] ? proc_fault_inject_write+0x310/0x310 [ 783.699675][T10602] vfs_read+0x2de/0xa00 [ 783.703883][T10602] ? kernel_read+0x1e0/0x1e0 [ 783.708532][T10602] ? __fget_files+0x28/0x4b0 [ 783.713434][T10602] ? __fget_files+0x28/0x4b0 [ 783.718070][T10602] ? __fget_files+0x43d/0x4b0 [ 783.722810][T10602] ? __fdget_pos+0x2ae/0x360 [ 783.727436][T10602] ? ksys_read+0x71/0x250 [ 783.731814][T10602] ksys_read+0x14c/0x250 [ 783.736093][T10602] ? vfs_write+0xa30/0xa30 [ 783.740734][T10602] ? lockdep_hardirqs_on+0x94/0x140 [ 783.745977][T10602] do_syscall_64+0x4c/0xa0 [ 783.750434][T10602] ? clear_bhb_loop+0x60/0xb0 [ 783.755170][T10602] ? clear_bhb_loop+0x60/0xb0 [ 783.760054][T10602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 783.765995][T10602] RIP: 0033:0x7f225f55d60e [ 783.770461][T10602] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 783.790200][T10602] RSP: 002b:00007f22603cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 783.798657][T10602] RAX: ffffffffffffffda RBX: 00007f22603cf6c0 RCX: 00007f225f55d60e [ 783.806748][T10602] RDX: 000000000000000f RSI: 00007f22603cf0a0 RDI: 0000000000000004 [ 783.814743][T10602] RBP: 00007f22603cf090 R08: 0000000000000000 R09: 0000000000000000 [ 783.822742][T10602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.830858][T10602] R13: 00007f225f816038 R14: 00007f225f815fa0 R15: 00007fff12784858 [ 783.838876][T10602] [ 784.545181][T10620] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1949'. [ 784.728310][T10620] device caif0 entered promiscuous mode [ 784.796518][T10629] netlink: 'syz.1.1951': attribute type 21 has an invalid length. [ 784.819050][T10629] netlink: 'syz.1.1951': attribute type 6 has an invalid length. [ 784.833113][T10629] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1951'. [ 785.581823][T10636] bond0: (slave geneve0): Error: Slave device does not support XDP [ 785.593765][T10640] netlink: 'syz.1.1953': attribute type 10 has an invalid length. [ 785.605400][T10645] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1955'. [ 786.146856][T10661] netlink: 'syz.2.1957': attribute type 21 has an invalid length. [ 786.166630][T10661] netlink: 'syz.2.1957': attribute type 6 has an invalid length. [ 786.187701][T10661] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1957'. [ 786.229309][T10666] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.1960'. [ 786.253771][T10667] netlink: 'syz.0.1963': attribute type 11 has an invalid length. [ 787.412597][T10682] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1967'. [ 787.585637][T10682] ksmbd: Unknown IPC event: 10, ignore. [ 787.895157][T10681] bond0: (slave geneve0): Error: Slave device does not support XDP [ 787.909830][T10683] netlink: 'syz.4.1968': attribute type 10 has an invalid length. [ 788.582950][T10704] netlink: 'syz.2.1977': attribute type 21 has an invalid length. [ 788.606689][T10704] netlink: 'syz.2.1977': attribute type 6 has an invalid length. [ 788.620005][T10704] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1977'. [ 789.318822][T10720] netlink: 'syz.2.1980': attribute type 2 has an invalid length. [ 789.328161][T10720] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1980'. [ 790.074306][T10740] bond0: (slave geneve0): Error: Slave device does not support XDP [ 790.270834][T10740] netlink: 'syz.1.1985': attribute type 10 has an invalid length. [ 790.647996][T10753] netlink: 'syz.1.1990': attribute type 21 has an invalid length. [ 790.676419][T10753] netlink: 'syz.1.1990': attribute type 6 has an invalid length. [ 790.712345][T10753] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1990'. [ 791.476370][T10771] netlink: 'syz.2.1995': attribute type 1 has an invalid length. [ 791.760476][T10771] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1995'. [ 792.543501][T10780] netlink: 'syz.1.1997': attribute type 2 has an invalid length. [ 792.583395][T10780] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1997'. [ 792.769474][T10786] bond0: (slave geneve0): Error: Slave device does not support XDP [ 792.897381][T10786] netlink: 'syz.1.2000': attribute type 10 has an invalid length. [ 793.519741][T10799] netlink: 'syz.4.2004': attribute type 21 has an invalid length. [ 793.530298][T10799] netlink: 'syz.4.2004': attribute type 6 has an invalid length. [ 793.540264][T10799] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2004'. [ 794.045948][T10815] netlink: 'syz.4.2008': attribute type 1 has an invalid length. [ 794.054309][T10815] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.2008'. [ 797.112089][T10827] bond0: (slave geneve0): Error: Slave device does not support XDP [ 797.219795][T10827] netlink: 'syz.2.2013': attribute type 10 has an invalid length. [ 797.265314][T10828] netlink: 'syz.0.2012': attribute type 2 has an invalid length. [ 797.274026][T10828] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2012'. [ 800.734484][T10846] netlink: 'syz.0.2018': attribute type 21 has an invalid length. [ 800.763166][T10846] netlink: 'syz.0.2018': attribute type 6 has an invalid length. [ 800.777142][T10846] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2018'. [ 801.522334][T10872] netlink: 'syz.0.2025': attribute type 1 has an invalid length. [ 801.530421][T10872] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2025'. [ 801.630283][T10876] bond0: (slave geneve0): Error: Slave device does not support XDP [ 801.768146][T10876] netlink: 'syz.0.2026': attribute type 10 has an invalid length. [ 803.154719][T10911] bond0: (slave geneve0): Error: Slave device does not support XDP [ 803.238541][T10907] netlink: 'syz.2.2036': attribute type 21 has an invalid length. [ 803.283543][T10907] netlink: 'syz.2.2036': attribute type 6 has an invalid length. [ 803.321376][T10907] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2036'. [ 803.343015][T10911] netlink: 'syz.4.2038': attribute type 10 has an invalid length. [ 803.646361][T10923] bond0: (slave geneve0): Error: Slave device does not support XDP [ 803.778425][T10929] FAULT_INJECTION: forcing a failure. [ 803.778425][T10929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.797293][T10931] netlink: 'syz.0.2050': attribute type 10 has an invalid length. [ 803.826147][T10929] CPU: 0 PID: 10929 Comm: syz.3.2042 Not tainted syzkaller #0 [ 803.833688][T10929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 803.843776][T10929] Call Trace: [ 803.847080][T10929] [ 803.850051][T10929] dump_stack_lvl+0x188/0x24e [ 803.854788][T10929] ? show_regs_print_info+0x12/0x12 [ 803.860031][T10929] ? load_image+0x400/0x400 [ 803.864591][T10929] ? __lock_acquire+0x7d10/0x7d10 [ 803.869653][T10929] should_fail_ex+0x399/0x4d0 [ 803.874350][T10929] _copy_from_user+0x2c/0x170 [ 803.879057][T10929] __copy_msghdr+0x3b7/0x580 [ 803.883679][T10929] ___sys_sendmsg+0x210/0x360 [ 803.888380][T10929] ? __sys_sendmsg+0x290/0x290 [ 803.893178][T10929] ? __lock_acquire+0x7d10/0x7d10 [ 803.898244][T10929] __se_sys_sendmsg+0x1bb/0x2a0 [ 803.903118][T10929] ? __x64_sys_sendmsg+0x80/0x80 [ 803.908096][T10929] ? lockdep_hardirqs_on+0x94/0x140 [ 803.913310][T10929] do_syscall_64+0x4c/0xa0 [ 803.917747][T10929] ? clear_bhb_loop+0x60/0xb0 [ 803.922444][T10929] ? clear_bhb_loop+0x60/0xb0 [ 803.927138][T10929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 803.933047][T10929] RIP: 0033:0x7fa0a399cdd9 [ 803.937481][T10929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.957101][T10929] RSP: 002b:00007fa0a4832028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 803.965533][T10929] RAX: ffffffffffffffda RBX: 00007fa0a3c15fa0 RCX: 00007fa0a399cdd9 [ 803.973516][T10929] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 803.981497][T10929] RBP: 00007fa0a4832090 R08: 0000000000000000 R09: 0000000000000000 [ 803.989482][T10929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.997462][T10929] R13: 00007fa0a3c16038 R14: 00007fa0a3c15fa0 R15: 00007fffa6543598 [ 804.005462][T10929] [ 805.618517][T10961] netlink: 'syz.1.2052': attribute type 21 has an invalid length. [ 805.692904][T10961] netlink: 'syz.1.2052': attribute type 6 has an invalid length. [ 805.741742][T10961] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2052'. [ 806.045429][T10971] netlink: 'syz.2.2053': attribute type 21 has an invalid length. [ 806.093613][T10971] netlink: 'syz.2.2053': attribute type 6 has an invalid length. [ 806.109451][T10971] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2053'. [ 806.152171][T10969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.219759][T10969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.304132][T10969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.314041][T10969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.537676][T10980] bond0: (slave geneve0): Error: Slave device does not support XDP [ 806.559837][T10981] netlink: 'syz.4.2056': attribute type 10 has an invalid length. [ 806.873376][T10992] netlink: 'syz.3.2058': attribute type 2 has an invalid length. [ 806.905548][T10992] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2058'. [ 807.436409][T11015] netlink: 'syz.1.2064': attribute type 21 has an invalid length. [ 807.458590][T11015] netlink: 'syz.1.2064': attribute type 6 has an invalid length. [ 807.501790][T11015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2064'. [ 808.743022][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.749477][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.223354][T11027] bond0: (slave geneve0): Error: Slave device does not support XDP [ 809.277301][T11029] netlink: 'syz.4.2071': attribute type 3 has an invalid length. [ 809.331397][T11029] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2071'. [ 809.341816][T11031] netlink: 'syz.2.2069': attribute type 10 has an invalid length. [ 809.680696][T11043] bond0: (slave geneve0): Error: Slave device does not support XDP [ 809.865621][T11043] netlink: 'syz.2.2084': attribute type 10 has an invalid length. [ 810.181178][T11059] netlink: 'syz.4.2078': attribute type 21 has an invalid length. [ 810.201004][T11059] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2078'. [ 810.246662][T11062] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2080'. [ 810.565916][T11068] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2081'. [ 810.932852][T11075] FAULT_INJECTION: forcing a failure. [ 810.932852][T11075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.994881][T11075] CPU: 1 PID: 11075 Comm: syz.3.2086 Not tainted syzkaller #0 [ 811.002453][T11075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 811.012647][T11075] Call Trace: [ 811.015972][T11075] [ 811.018976][T11075] dump_stack_lvl+0x188/0x24e [ 811.023814][T11075] ? show_regs_print_info+0x12/0x12 [ 811.029074][T11075] ? load_image+0x400/0x400 [ 811.033630][T11075] ? __lock_acquire+0x7d10/0x7d10 [ 811.038712][T11075] should_fail_ex+0x399/0x4d0 [ 811.043433][T11075] _copy_from_user+0x2c/0x170 [ 811.048161][T11075] get_user_ifreq+0x67/0x170 [ 811.052798][T11075] sock_ioctl+0x637/0x710 [ 811.057173][T11075] ? sock_poll+0x410/0x410 [ 811.061645][T11075] ? bpf_lsm_file_ioctl+0x5/0x10 [ 811.066635][T11075] ? security_file_ioctl+0x7c/0xa0 [ 811.071975][T11075] ? sock_poll+0x410/0x410 [ 811.076441][T11075] __se_sys_ioctl+0xfa/0x170 [ 811.081180][T11075] do_syscall_64+0x4c/0xa0 [ 811.085634][T11075] ? clear_bhb_loop+0x60/0xb0 [ 811.090339][T11075] ? clear_bhb_loop+0x60/0xb0 [ 811.095046][T11075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.101073][T11075] RIP: 0033:0x7fa0a399cdd9 [ 811.105543][T11075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.125356][T11075] RSP: 002b:00007fa0a4832028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 811.133802][T11075] RAX: ffffffffffffffda RBX: 00007fa0a3c15fa0 RCX: 00007fa0a399cdd9 [ 811.141974][T11075] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 811.149967][T11075] RBP: 00007fa0a4832090 R08: 0000000000000000 R09: 0000000000000000 [ 811.158061][T11075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.166048][T11075] R13: 00007fa0a3c16038 R14: 00007fa0a3c15fa0 R15: 00007fffa6543598 [ 811.174056][T11075] [ 811.180302][T11080] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2085'. [ 811.204516][T11080] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2085'. [ 811.223228][T11076] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2085'. [ 811.505434][T11089] bond0: (slave geneve0): Error: Slave device does not support XDP [ 811.678020][T11089] validate_nla: 3 callbacks suppressed [ 811.678129][T11089] netlink: 'syz.0.2090': attribute type 10 has an invalid length. [ 812.214419][T11099] netlink: 'syz.3.2093': attribute type 21 has an invalid length. [ 812.238367][T11099] netlink: 'syz.3.2093': attribute type 6 has an invalid length. [ 812.263801][T11099] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2093'. [ 812.493026][T11105] netlink: 'syz.2.2094': attribute type 2 has an invalid length. [ 812.531528][T11105] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2094'. [ 813.130115][T11109] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2095'. [ 813.199092][T11116] delete_channel: no stack [ 813.281747][T11116] delete_channel: no stack [ 813.879376][T11124] FAULT_INJECTION: forcing a failure. [ 813.879376][T11124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.977576][T11124] CPU: 0 PID: 11124 Comm: syz.2.2099 Not tainted syzkaller #0 [ 813.985235][T11124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 813.995335][T11124] Call Trace: [ 813.998641][T11124] [ 814.001598][T11124] dump_stack_lvl+0x188/0x24e [ 814.006326][T11124] ? show_regs_print_info+0x12/0x12 [ 814.011648][T11124] ? load_image+0x400/0x400 [ 814.016188][T11124] ? lockdep_hardirqs_on+0x94/0x140 [ 814.021552][T11124] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 814.027846][T11124] should_fail_ex+0x399/0x4d0 [ 814.032562][T11124] copyin+0x1b/0x120 [ 814.036579][T11124] _copy_from_iter+0x447/0x1130 [ 814.041632][T11124] ? lockdep_hardirqs_on+0x94/0x140 [ 814.046882][T11124] ? copyout_mc+0x110/0x110 [ 814.051526][T11124] ? __check_object_size+0x441/0xa40 [ 814.056869][T11124] ? 0xffffffff81000000 [ 814.061154][T11124] ? __check_object_size+0x47c/0xa40 [ 814.066501][T11124] ? __check_object_size+0x500/0xa40 [ 814.071848][T11124] netlink_sendmsg+0x755/0xbd0 [ 814.076668][T11124] ? netlink_getsockopt+0x550/0x550 [ 814.081927][T11124] ? netlink_getsockopt+0x550/0x550 [ 814.087173][T11124] ____sys_sendmsg+0x5be/0x970 [ 814.091996][T11124] ? __sys_sendmsg_sock+0x30/0x30 [ 814.097087][T11124] ? __import_iovec+0x315/0x500 [ 814.101989][T11124] ? import_iovec+0x6f/0xa0 [ 814.106550][T11124] ___sys_sendmsg+0x2a2/0x360 [ 814.111468][T11124] ? __sys_sendmsg+0x290/0x290 [ 814.116385][T11124] ? ktime_get_real_ts64+0x440/0x440 [ 814.121832][T11124] __se_sys_sendmsg+0x1bb/0x2a0 [ 814.126735][T11124] ? __x64_sys_sendmsg+0x80/0x80 [ 814.131832][T11124] ? lockdep_hardirqs_on+0x94/0x140 [ 814.137070][T11124] do_syscall_64+0x4c/0xa0 [ 814.141529][T11124] ? clear_bhb_loop+0x60/0xb0 [ 814.146264][T11124] ? clear_bhb_loop+0x60/0xb0 [ 814.151069][T11124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 814.156999][T11124] RIP: 0033:0x7f3cbc99cdd9 [ 814.161682][T11124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.181504][T11124] RSP: 002b:00007f3cbd8c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 814.189966][T11124] RAX: ffffffffffffffda RBX: 00007f3cbcc15fa0 RCX: 00007f3cbc99cdd9 [ 814.197999][T11124] RDX: 0000000000008810 RSI: 0000200000000000 RDI: 0000000000000005 [ 814.206001][T11124] RBP: 00007f3cbd8c0090 R08: 0000000000000000 R09: 0000000000000000 [ 814.214013][T11124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.222116][T11124] R13: 00007f3cbcc16038 R14: 00007f3cbcc15fa0 R15: 00007fffc8173358 [ 814.230240][T11124] [ 815.332246][T11148] netlink: 'syz.3.2106': attribute type 21 has an invalid length. [ 815.398890][T11148] netlink: 'syz.3.2106': attribute type 6 has an invalid length. [ 815.411063][T11148] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2106'. [ 815.426074][T11150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.445614][T11150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.547669][T11150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 815.592753][T11150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.582108][ T51] batman_adv: batadv_iv_ogm_emit: soft interface switch for queued OGM [ 818.023650][T11153] netlink: 'syz.4.2107': attribute type 21 has an invalid length. [ 818.062283][T11153] netlink: 'syz.4.2107': attribute type 6 has an invalid length. [ 818.070914][T11153] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2107'. [ 818.199283][T11168] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2110'. [ 818.248228][T11168] bridge_slave_1: default FDB implementation only supports local addresses [ 819.089593][T11195] bond0: (slave geneve0): Error: Slave device does not support XDP [ 819.251332][T11195] netlink: 'syz.2.2121': attribute type 10 has an invalid length. [ 819.557456][T11206] netlink: 'syz.3.2124': attribute type 10 has an invalid length. [ 819.596512][T11206] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2124'. [ 820.213320][T11215] netlink: 'syz.4.2127': attribute type 9 has an invalid length. [ 820.243546][T11215] netlink: 399 bytes leftover after parsing attributes in process `syz.4.2127'. [ 820.392688][T11217] netlink: 'syz.0.2126': attribute type 21 has an invalid length. [ 820.417215][T11217] netlink: 'syz.0.2126': attribute type 6 has an invalid length. [ 820.440332][T11217] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2126'. [ 822.818237][T11232] netlink: 'syz.3.2129': attribute type 3 has an invalid length. [ 822.856924][T11232] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2129'. [ 822.873256][T11225] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2128'. [ 822.906261][T11225] bridge_slave_1: default FDB implementation only supports local addresses [ 823.722154][T11248] netlink: 'syz.2.2134': attribute type 21 has an invalid length. [ 823.759345][T11248] netlink: 'syz.2.2134': attribute type 6 has an invalid length. [ 823.816635][T11248] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2134'. [ 824.609418][T11251] netlink: 'syz.3.2136': attribute type 10 has an invalid length. [ 824.871709][T11260] netlink: 'syz.2.2139': attribute type 10 has an invalid length. [ 824.988148][T11260] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.053992][T11260] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.073228][T11260] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.133289][T11260] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.469196][T11260] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.590783][T11260] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.617201][T11260] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.628547][T11260] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.650412][T11260] device geneve1 entered promiscuous mode [ 825.669326][T11260] team0: Port device geneve1 added [ 825.698722][T11291] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2146'. [ 825.725430][T11291] bridge_slave_1: default FDB implementation only supports local addresses [ 826.091818][T11303] netlink: 'syz.1.2149': attribute type 21 has an invalid length. [ 826.107069][T11303] netlink: 'syz.1.2149': attribute type 6 has an invalid length. [ 826.115392][T11303] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2149'. [ 826.364029][T11315] bond0: (slave geneve0): Error: Slave device does not support XDP [ 826.412529][T11317] FAULT_INJECTION: forcing a failure. [ 826.412529][T11317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.460130][T11317] CPU: 1 PID: 11317 Comm: syz.1.2153 Not tainted syzkaller #0 [ 826.467680][T11317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 826.477897][T11317] Call Trace: [ 826.481205][T11317] [ 826.484176][T11317] dump_stack_lvl+0x188/0x24e [ 826.488908][T11317] ? show_regs_print_info+0x12/0x12 [ 826.494149][T11317] ? load_image+0x400/0x400 [ 826.498694][T11317] ? __lock_acquire+0x7d10/0x7d10 [ 826.503774][T11317] should_fail_ex+0x399/0x4d0 [ 826.508589][T11317] _copy_from_user+0x2c/0x170 [ 826.513491][T11317] __copy_msghdr+0x3b7/0x580 [ 826.518134][T11317] ___sys_sendmsg+0x210/0x360 [ 826.522852][T11317] ? lockdep_hardirqs_on+0x94/0x140 [ 826.528099][T11317] ? __sys_sendmsg+0x290/0x290 [ 826.532932][T11317] ? ct_irq_enter_irqson+0x170/0x170 [ 826.538282][T11317] __se_sys_sendmsg+0x1bb/0x2a0 [ 826.543176][T11317] ? __x64_sys_sendmsg+0x80/0x80 [ 826.548180][T11317] do_syscall_64+0x4c/0xa0 [ 826.552636][T11317] ? clear_bhb_loop+0x60/0xb0 [ 826.557349][T11317] ? clear_bhb_loop+0x60/0xb0 [ 826.562252][T11317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 826.568284][T11317] RIP: 0033:0x7f225f59cdd9 [ 826.572911][T11317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.592658][T11317] RSP: 002b:00007f22603cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.601208][T11317] RAX: ffffffffffffffda RBX: 00007f225f815fa0 RCX: 00007f225f59cdd9 [ 826.609217][T11317] RDX: 0000000000040810 RSI: 0000200000000580 RDI: 0000000000000003 [ 826.617225][T11317] RBP: 00007f22603cf090 R08: 0000000000000000 R09: 0000000000000000 [ 826.625225][T11317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.633227][T11317] R13: 00007f225f816038 R14: 00007f225f815fa0 R15: 00007fff12784858 [ 826.641253][T11317] [ 827.084861][T11319] netlink: 'syz.4.2151': attribute type 10 has an invalid length. [ 828.162162][T11339] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2161'. [ 828.254976][T11339] bridge_slave_1: default FDB implementation only supports local addresses [ 828.380960][T11351] netlink: 'syz.3.2163': attribute type 21 has an invalid length. [ 828.390737][T11351] netlink: 'syz.3.2163': attribute type 6 has an invalid length. [ 828.466735][T11351] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2163'. [ 828.549999][T11362] netlink: 'syz.2.2158': attribute type 10 has an invalid length. [ 828.612363][T11362] device veth1_macvtap left promiscuous mode [ 828.802876][T11368] netlink: 'syz.1.2166': attribute type 10 has an invalid length. [ 828.856390][T11368] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2166'. [ 828.898489][T11368] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 830.359096][T11413] bond0: (slave geneve0): Error: Slave device does not support XDP [ 830.673448][T11413] netlink: 'syz.1.2182': attribute type 10 has an invalid length. [ 830.694780][T11409] netlink: 'syz.2.2181': attribute type 41 has an invalid length. [ 830.720885][T11419] netlink: 'syz.0.2185': attribute type 10 has an invalid length. [ 830.838074][T11425] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2186'. [ 831.553783][T11444] netlink: 'syz.0.2192': attribute type 10 has an invalid length. [ 831.800947][T11444] team0 (unregistering): Port device team_slave_0 removed [ 832.402836][T11444] team0 (unregistering): Port device team_slave_1 removed [ 832.445706][T11459] bond0: (slave geneve0): Error: Slave device does not support XDP [ 832.455579][T11462] netlink: 'syz.4.2196': attribute type 10 has an invalid length. [ 834.794820][T11476] delete_channel: no stack [ 835.258903][ T47] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 835.512220][T11505] netlink: 'syz.3.2207': attribute type 2 has an invalid length. [ 835.520044][T11505] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2207'. [ 835.569631][T11510] device bond0 entered promiscuous mode [ 835.583613][T11510] device bond_slave_0 entered promiscuous mode [ 835.597232][T11510] device bond_slave_1 entered promiscuous mode [ 835.613089][T11509] bond0: (slave geneve0): Error: Slave device does not support XDP [ 835.638634][T11509] netlink: 'syz.1.2209': attribute type 10 has an invalid length. [ 836.181709][T11522] netlink: 'syz.0.2214': attribute type 10 has an invalid length. [ 837.059494][T11539] netlink: 'syz.1.2227': attribute type 2 has an invalid length. [ 837.092519][T11539] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2227'. [ 838.282503][T11558] bond0: (slave geneve0): Error: Slave device does not support XDP [ 838.440017][T11558] netlink: 'syz.1.2223': attribute type 10 has an invalid length. [ 838.567162][T11565] tap0: tun_chr_ioctl cmd 1074025677 [ 838.581215][T11565] tap0: linktype set to 805 [ 838.817311][T11573] netlink: 'syz.4.2231': attribute type 10 has an invalid length. [ 839.402397][T11573] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.418384][T11573] device bridge_slave_1 left promiscuous mode [ 839.424806][T11573] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.439640][T11573] device bridge_slave_1 entered promiscuous mode [ 839.447216][T11573] team0: Port device bridge_slave_1 added [ 839.667506][T11577] netlink: 'syz.0.2233': attribute type 10 has an invalid length. [ 839.877515][T11587] netlink: 'syz.3.2232': attribute type 10 has an invalid length. [ 839.974081][T11587] team0: Device veth0_vlan is already a lower device of the team interface [ 840.139125][T11588] netlink: 'syz.4.2235': attribute type 2 has an invalid length. [ 840.189297][T11588] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2235'. [ 840.652213][T11602] bond0: (slave geneve0): Error: Slave device does not support XDP [ 840.713111][T11602] netlink: 'syz.0.2240': attribute type 10 has an invalid length. [ 840.988764][T11612] netlink: 'syz.4.2243': attribute type 41 has an invalid length. [ 841.002139][T11615] bond0: (slave geneve0): Error: Slave device does not support XDP [ 841.206227][T11623] FAULT_INJECTION: forcing a failure. [ 841.206227][T11623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 841.261133][T11623] CPU: 1 PID: 11623 Comm: syz.2.2245 Not tainted syzkaller #0 [ 841.268680][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 841.278753][T11623] Call Trace: [ 841.282141][T11623] [ 841.285276][T11623] dump_stack_lvl+0x188/0x24e [ 841.290333][T11623] ? show_regs_print_info+0x12/0x12 [ 841.295566][T11623] ? load_image+0x400/0x400 [ 841.300304][T11623] ? __lock_acquire+0x7d10/0x7d10 [ 841.305375][T11623] should_fail_ex+0x399/0x4d0 [ 841.310106][T11623] _copy_from_user+0x2c/0x170 [ 841.314804][T11623] iovec_from_user+0x143/0x360 [ 841.319604][T11623] __import_iovec+0x6d/0x500 [ 841.324305][T11623] import_iovec+0x6f/0xa0 [ 841.328742][T11623] ___sys_sendmsg+0x252/0x360 [ 841.333538][T11623] ? __sys_sendmsg+0x290/0x290 [ 841.338347][T11623] ? __lock_acquire+0x7d10/0x7d10 [ 841.343496][T11623] __se_sys_sendmsg+0x1bb/0x2a0 [ 841.348568][T11623] ? __x64_sys_sendmsg+0x80/0x80 [ 841.353626][T11623] ? lockdep_hardirqs_on+0x94/0x140 [ 841.358874][T11623] do_syscall_64+0x4c/0xa0 [ 841.363309][T11623] ? clear_bhb_loop+0x60/0xb0 [ 841.368053][T11623] ? clear_bhb_loop+0x60/0xb0 [ 841.372759][T11623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 841.378675][T11623] RIP: 0033:0x7f3cbc99cdd9 [ 841.383108][T11623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.403023][T11623] RSP: 002b:00007f3cbd8c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.411579][T11623] RAX: ffffffffffffffda RBX: 00007f3cbcc15fa0 RCX: 00007f3cbc99cdd9 [ 841.419725][T11623] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 841.427724][T11623] RBP: 00007f3cbd8c0090 R08: 0000000000000000 R09: 0000000000000000 [ 841.435827][T11623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.443827][T11623] R13: 00007f3cbcc16038 R14: 00007f3cbcc15fa0 R15: 00007fffc8173358 [ 841.452008][T11623] [ 843.755067][T11621] netlink: 'syz.0.2255': attribute type 10 has an invalid length. [ 843.992174][T11640] netlink: 'syz.3.2248': attribute type 21 has an invalid length. [ 844.180509][T11639] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2250'. [ 844.358515][T11646] FAULT_INJECTION: forcing a failure. [ 844.358515][T11646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.381120][T11646] CPU: 0 PID: 11646 Comm: syz.2.2251 Not tainted syzkaller #0 [ 844.388657][T11646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 844.398758][T11646] Call Trace: [ 844.402085][T11646] [ 844.405053][T11646] dump_stack_lvl+0x188/0x24e [ 844.409811][T11646] ? show_regs_print_info+0x12/0x12 [ 844.415152][T11646] ? load_image+0x400/0x400 [ 844.419906][T11646] ? __lock_acquire+0x7d10/0x7d10 [ 844.424990][T11646] ? snprintf+0xe5/0x140 [ 844.429291][T11646] should_fail_ex+0x399/0x4d0 [ 844.434043][T11646] _copy_to_user+0x2c/0x130 [ 844.438614][T11646] simple_read_from_buffer+0xe3/0x150 [ 844.444130][T11646] proc_fail_nth_read+0x1a6/0x220 [ 844.449206][T11646] ? proc_fault_inject_write+0x310/0x310 [ 844.454955][T11646] ? fsnotify_perm+0x248/0x550 [ 844.459755][T11646] ? proc_fault_inject_write+0x310/0x310 [ 844.465419][T11646] vfs_read+0x2de/0xa00 [ 844.469609][T11646] ? kernel_read+0x1e0/0x1e0 [ 844.474254][T11646] ? __fget_files+0x28/0x4b0 [ 844.478950][T11646] ? __fget_files+0x28/0x4b0 [ 844.483564][T11646] ? __fget_files+0x43d/0x4b0 [ 844.488363][T11646] ? __fdget_pos+0x2ae/0x360 [ 844.492980][T11646] ? ksys_read+0x71/0x250 [ 844.497338][T11646] ksys_read+0x14c/0x250 [ 844.501607][T11646] ? vfs_write+0xa30/0xa30 [ 844.506049][T11646] ? lockdep_hardirqs_on+0x94/0x140 [ 844.511358][T11646] do_syscall_64+0x4c/0xa0 [ 844.515799][T11646] ? clear_bhb_loop+0x60/0xb0 [ 844.520579][T11646] ? clear_bhb_loop+0x60/0xb0 [ 844.525275][T11646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 844.531189][T11646] RIP: 0033:0x7f3cbc95d60e [ 844.535621][T11646] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 844.555253][T11646] RSP: 002b:00007f3cbd8bffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 844.563685][T11646] RAX: ffffffffffffffda RBX: 00007f3cbd8c06c0 RCX: 00007f3cbc95d60e [ 844.571766][T11646] RDX: 000000000000000f RSI: 00007f3cbd8c00a0 RDI: 0000000000000004 [ 844.579769][T11646] RBP: 00007f3cbd8c0090 R08: 0000000000000000 R09: 0000000000000000 [ 844.588001][T11646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 844.596025][T11646] R13: 00007f3cbcc16038 R14: 00007f3cbcc15fa0 R15: 00007fffc8173358 [ 844.604045][T11646] [ 844.893379][T11661] netlink: 'syz.0.2254': attribute type 2 has an invalid length. [ 844.920888][T11661] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2254'. [ 845.049527][T11667] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 845.190681][T11665] netlink: 'syz.2.2259': attribute type 2 has an invalid length. [ 845.198951][T11665] netlink: 'syz.2.2259': attribute type 3 has an invalid length. [ 845.229256][T11665] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2259'. [ 845.283082][T11671] bond0: (slave geneve0): Error: Slave device does not support XDP [ 845.443487][T11671] netlink: 'syz.4.2260': attribute type 10 has an invalid length. [ 846.382275][T11688] netlink: 'syz.1.2264': attribute type 41 has an invalid length. [ 848.859604][T11709] netlink: 'syz.2.2272': attribute type 2 has an invalid length. [ 848.899158][T11709] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2272'. [ 848.984031][T11711] bond0: (slave geneve0): Error: Slave device does not support XDP [ 849.108439][T11718] netlink: 'syz.0.2274': attribute type 10 has an invalid length. [ 849.212745][T11722] netlink: 'syz.0.2278': attribute type 3 has an invalid length. [ 849.221203][T11722] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2278'. [ 850.207971][T11741] netlink: 'syz.2.2281': attribute type 21 has an invalid length. [ 850.917660][T11751] bond0: (slave geneve0): Error: Slave device does not support XDP [ 851.055931][T11751] netlink: 'syz.0.2288': attribute type 10 has an invalid length. [ 851.719557][T11767] netlink: 'syz.0.2292': attribute type 3 has an invalid length. [ 851.740967][T11767] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2292'. [ 851.936173][T11769] netlink: 'syz.4.2291': attribute type 2 has an invalid length. [ 852.017353][T11769] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2291'. [ 852.502514][ T47] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 852.513343][ T47] Bluetooth: hci0: Injecting HCI hardware error event [ 852.521796][ T47] Bluetooth: hci0: hardware error 0x00 [ 854.039944][T11799] bond0: (slave geneve0): Error: Slave device does not support XDP [ 854.113957][T11807] netlink: 'syz.3.2306': attribute type 3 has an invalid length. [ 854.146323][T11802] netlink: 'syz.2.2302': attribute type 10 has an invalid length. [ 854.188635][T11810] netlink: 'syz.0.2305': attribute type 21 has an invalid length. [ 854.197127][T11807] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2306'. [ 854.254925][T11810] netlink: 'syz.0.2305': attribute type 6 has an invalid length. [ 854.281070][T11810] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2305'. [ 854.386679][T11817] FAULT_INJECTION: forcing a failure. [ 854.386679][T11817] name failslab, interval 1, probability 0, space 0, times 0 [ 854.401263][T11817] CPU: 0 PID: 11817 Comm: syz.2.2307 Not tainted syzkaller #0 [ 854.408788][T11817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 854.418931][T11817] Call Trace: [ 854.422323][T11817] [ 854.425271][T11817] dump_stack_lvl+0x188/0x24e [ 854.429990][T11817] ? show_regs_print_info+0x12/0x12 [ 854.435222][T11817] ? load_image+0x400/0x400 [ 854.439757][T11817] ? __might_sleep+0xd0/0xd0 [ 854.444367][T11817] ? __lock_acquire+0x7d10/0x7d10 [ 854.449426][T11817] should_fail_ex+0x399/0x4d0 [ 854.454128][T11817] should_failslab+0x5/0x20 [ 854.458646][T11817] slab_pre_alloc_hook+0x59/0x310 [ 854.463705][T11817] kmem_cache_alloc+0x56/0x2f0 [ 854.468493][T11817] ? skb_clone+0x1e7/0x370 [ 854.472980][T11817] skb_clone+0x1e7/0x370 [ 854.477251][T11817] ? pfkey_broadcast_one+0x7d/0x340 [ 854.482569][T11817] pfkey_broadcast_one+0x9b/0x340 [ 854.487617][T11817] ? pfkey_broadcast+0x39c/0x3e0 [ 854.492577][T11817] pfkey_broadcast+0x3a9/0x3e0 [ 854.497419][T11817] ? pfkey_broadcast+0x48/0x3e0 [ 854.502382][T11817] pfkey_sendmsg+0xe3c/0x1090 [ 854.507103][T11817] ? pfkey_release+0x310/0x310 [ 854.511928][T11817] ? aa_sock_msg_perm+0x94/0x150 [ 854.516915][T11817] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 854.522229][T11817] ? security_socket_sendmsg+0x7c/0xa0 [ 854.527720][T11817] ? pfkey_release+0x310/0x310 [ 854.532509][T11817] ____sys_sendmsg+0x5be/0x970 [ 854.537323][T11817] ? __sys_sendmsg_sock+0x30/0x30 [ 854.542461][T11817] ? __import_iovec+0x315/0x500 [ 854.547344][T11817] ? import_iovec+0x6f/0xa0 [ 854.551957][T11817] ___sys_sendmsg+0x2a2/0x360 [ 854.556675][T11817] ? __sys_sendmsg+0x290/0x290 [ 854.561580][T11817] ? __lock_acquire+0x7d10/0x7d10 [ 854.566778][T11817] __se_sys_sendmsg+0x1bb/0x2a0 [ 854.571667][T11817] ? __x64_sys_sendmsg+0x80/0x80 [ 854.576652][T11817] ? lockdep_hardirqs_on+0x94/0x140 [ 854.581873][T11817] do_syscall_64+0x4c/0xa0 [ 854.586310][T11817] ? clear_bhb_loop+0x60/0xb0 [ 854.591010][T11817] ? clear_bhb_loop+0x60/0xb0 [ 854.595715][T11817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 854.601630][T11817] RIP: 0033:0x7f3cbc99cdd9 [ 854.606087][T11817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.626345][T11817] RSP: 002b:00007f3cbd8c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 854.634801][T11817] RAX: ffffffffffffffda RBX: 00007f3cbcc15fa0 RCX: 00007f3cbc99cdd9 [ 854.642801][T11817] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 854.650789][T11817] RBP: 00007f3cbd8c0090 R08: 0000000000000000 R09: 0000000000000000 [ 854.658927][T11817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.666934][T11817] R13: 00007f3cbcc16038 R14: 00007f3cbcc15fa0 R15: 00007fffc8173358 [ 854.675038][T11817] [ 854.678468][ T47] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 855.057643][T11827] netlink: 'syz.4.2309': attribute type 2 has an invalid length. [ 855.109202][T11827] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2309'. [ 855.880141][T11835] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2314'. [ 855.925313][T11834] delete_channel: no stack [ 855.969080][T11843] bond0: (slave geneve0): Error: Slave device does not support XDP [ 857.065426][T11845] netlink: 'syz.4.2317': attribute type 10 has an invalid length. [ 857.704426][ T47] Bluetooth: hci1: ISO packet for unknown connection handle 255 [ 857.900243][T11857] netlink: 'syz.3.2318': attribute type 2 has an invalid length. [ 857.930547][T11857] netlink: 'syz.3.2318': attribute type 3 has an invalid length. [ 857.936961][T11862] netlink: 'syz.2.2321': attribute type 3 has an invalid length. [ 857.951322][T11857] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2318'. [ 858.048869][T11862] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2321'. [ 858.098890][T11866] FAULT_INJECTION: forcing a failure. [ 858.098890][T11866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.164427][T11866] CPU: 1 PID: 11866 Comm: syz.0.2322 Not tainted syzkaller #0 [ 858.172081][T11866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 858.182269][T11866] Call Trace: [ 858.185682][T11866] [ 858.188745][T11866] dump_stack_lvl+0x188/0x24e [ 858.193494][T11866] ? show_regs_print_info+0x12/0x12 [ 858.198886][T11866] ? load_image+0x400/0x400 [ 858.203513][T11866] ? __lock_acquire+0x7d10/0x7d10 [ 858.208636][T11866] should_fail_ex+0x399/0x4d0 [ 858.213369][T11866] _copy_from_user+0x2c/0x170 [ 858.218210][T11866] kstrtouint_from_user+0xda/0x170 [ 858.223484][T11866] ? kstrtol_from_user+0x190/0x190 [ 858.228820][T11866] proc_fail_nth_write+0x8b/0x200 [ 858.233894][T11866] ? proc_fail_nth_read+0x220/0x220 [ 858.239152][T11866] ? common_file_perm+0x171/0x1c0 [ 858.244235][T11866] ? proc_fail_nth_read+0x220/0x220 [ 858.249571][T11866] vfs_write+0x2e6/0xa30 [ 858.253892][T11866] ? file_end_write+0x250/0x250 [ 858.258929][T11866] ? __fget_files+0x28/0x4b0 [ 858.263609][T11866] ? __fget_files+0x28/0x4b0 [ 858.268244][T11866] ? __fget_files+0x43d/0x4b0 [ 858.273157][T11866] ? __fdget_pos+0x2ae/0x360 [ 858.278229][T11866] ? ksys_write+0x71/0x250 [ 858.282690][T11866] ksys_write+0x14c/0x250 [ 858.287067][T11866] ? __ia32_sys_read+0x80/0x80 [ 858.291885][T11866] ? lockdep_hardirqs_on+0x94/0x140 [ 858.297132][T11866] do_syscall_64+0x4c/0xa0 [ 858.301686][T11866] ? clear_bhb_loop+0x60/0xb0 [ 858.306417][T11866] ? clear_bhb_loop+0x60/0xb0 [ 858.311149][T11866] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.317084][T11866] RIP: 0033:0x7efd62f5d60e [ 858.321534][T11866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 858.341194][T11866] RSP: 002b:00007efd63d6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 858.349684][T11866] RAX: ffffffffffffffda RBX: 00007efd63d6e6c0 RCX: 00007efd62f5d60e [ 858.357902][T11866] RDX: 0000000000000001 RSI: 00007efd63d6e0a0 RDI: 0000000000000008 [ 858.365919][T11866] RBP: 00007efd63d6e090 R08: 0000000000000000 R09: 0000000000000000 [ 858.374021][T11866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 858.382116][T11866] R13: 00007efd63216128 R14: 00007efd63216090 R15: 00007ffd0e47da08 [ 858.390323][T11866] [ 858.510482][T11874] netlink: 'syz.4.2324': attribute type 29 has an invalid length. [ 858.552615][T11874] netlink: 'syz.4.2324': attribute type 29 has an invalid length. [ 858.592696][T11875] netlink: 'syz.4.2324': attribute type 29 has an invalid length. [ 858.633587][T11874] netlink: 'syz.4.2324': attribute type 29 has an invalid length. [ 858.937904][T11879] netlink: 'syz.0.2327': attribute type 2 has an invalid length. [ 859.002331][T11879] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2327'. [ 859.285707][T11892] bond0: (slave geneve0): Error: Slave device does not support XDP [ 859.496926][T11892] netlink: 'syz.4.2330': attribute type 10 has an invalid length. [ 859.656322][T11894] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2331'. [ 859.897881][T11906] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2335'. [ 860.753615][T11916] FAULT_INJECTION: forcing a failure. [ 860.753615][T11916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.813627][T11916] CPU: 0 PID: 11916 Comm: syz.2.2338 Not tainted syzkaller #0 [ 860.821178][T11916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 860.831287][T11916] Call Trace: [ 860.834629][T11916] [ 860.837646][T11916] dump_stack_lvl+0x188/0x24e [ 860.842395][T11916] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 860.848591][T11916] ? show_regs_print_info+0x12/0x12 [ 860.853822][T11916] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 860.860288][T11916] should_fail_ex+0x399/0x4d0 [ 860.865122][T11916] _copy_from_user+0x2c/0x170 [ 860.869837][T11916] bpf_test_init+0xde/0x140 [ 860.874380][T11916] bpf_prog_test_run_xdp+0x484/0xf10 [ 860.879890][T11916] ? dev_put+0x80/0x80 [ 860.884016][T11916] ? dev_put+0x80/0x80 [ 860.888146][T11916] bpf_prog_test_run+0x31e/0x390 [ 860.893311][T11916] __sys_bpf+0x62b/0x780 [ 860.897602][T11916] ? bpf_link_show_fdinfo+0x380/0x380 [ 860.903467][T11916] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 860.909666][T11916] __x64_sys_bpf+0x78/0x90 [ 860.914120][T11916] do_syscall_64+0x4c/0xa0 [ 860.918577][T11916] ? clear_bhb_loop+0x60/0xb0 [ 860.923296][T11916] ? clear_bhb_loop+0x60/0xb0 [ 860.928007][T11916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 860.933929][T11916] RIP: 0033:0x7f3cbc99cdd9 [ 860.938378][T11916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.958206][T11916] RSP: 002b:00007f3cbd8c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 860.966753][T11916] RAX: ffffffffffffffda RBX: 00007f3cbcc15fa0 RCX: 00007f3cbc99cdd9 [ 860.974965][T11916] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 860.982998][T11916] RBP: 00007f3cbd8c0090 R08: 0000000000000000 R09: 0000000000000000 [ 860.991022][T11916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.999031][T11916] R13: 00007f3cbcc16038 R14: 00007f3cbcc15fa0 R15: 00007fffc8173358 [ 861.007134][T11916] [ 861.258917][T11927] netlink: 69544 bytes leftover after parsing attributes in process `syz.1.2340'. [ 861.591521][T11929] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2342'. [ 862.020974][T11935] bond0: (slave geneve0): Error: Slave device does not support XDP [ 862.085088][T11937] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2345'. [ 862.142228][T11935] validate_nla: 5 callbacks suppressed [ 862.142321][T11935] netlink: 'syz.4.2344': attribute type 10 has an invalid length. [ 862.472641][T11946] netlink: 'syz.4.2349': attribute type 3 has an invalid length. [ 862.480581][T11946] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2349'. [ 862.490713][T11942] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2347'. [ 862.672480][T11940] delete_channel: no stack [ 862.693787][T11950] netlink: 'syz.0.2348': attribute type 21 has an invalid length. [ 862.703423][T11950] netlink: 'syz.0.2348': attribute type 6 has an invalid length. [ 862.712647][T11950] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2348'. [ 863.609453][T11961] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 863.762990][T11961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 864.568908][T11974] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2356'. [ 864.587015][T11976] netlink: 'syz.2.2355': attribute type 2 has an invalid length. [ 864.611940][T11975] delete_channel: no stack [ 864.635643][T11976] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2355'. [ 864.762809][T11983] bond0: (slave geneve0): Error: Slave device does not support XDP [ 864.972152][T11986] netlink: 'syz.4.2359': attribute type 10 has an invalid length. [ 865.120076][T11990] netlink: 'syz.0.2360': attribute type 21 has an invalid length. [ 865.133576][T11990] netlink: 'syz.0.2360': attribute type 6 has an invalid length. [ 865.176079][T11990] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2360'. [ 865.306769][T11994] netlink: 'syz.3.2372': attribute type 10 has an invalid length. [ 865.376305][T12000] netlink: 'syz.1.2363': attribute type 3 has an invalid length. [ 865.427470][T12000] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2363'. [ 865.678106][T12009] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2364'. [ 866.915320][T12032] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2369'. [ 867.113470][T12040] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2371'. [ 867.814010][T12046] bond0: (slave geneve0): Error: Slave device does not support XDP [ 867.928700][T12046] validate_nla: 4 callbacks suppressed [ 867.928721][T12046] netlink: 'syz.1.2375': attribute type 10 has an invalid length. [ 868.213411][T12055] netlink: 'syz.2.2378': attribute type 3 has an invalid length. [ 868.226783][T12055] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2378'. [ 869.304239][T12073] netlink: 'syz.3.2385': attribute type 10 has an invalid length. [ 869.324219][T12073] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.350950][T12073] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.363865][T12073] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.373508][T12073] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.166752][T12073] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.178749][T12073] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.192592][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.192697][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.207323][T12073] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.216626][T12073] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.236805][T12073] team0: Port device geneve1 added [ 870.256184][T12065] netlink: 'syz.0.2383': attribute type 21 has an invalid length. [ 870.274749][T12065] netlink: 'syz.0.2383': attribute type 6 has an invalid length. [ 870.284170][T12065] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2383'. [ 870.295643][T12085] netlink: 'syz.4.2387': attribute type 2 has an invalid length. [ 870.321073][T12085] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2387'. [ 870.381733][T12095] bond0: (slave geneve0): Error: Slave device does not support XDP [ 870.496239][T12099] netlink: 'syz.4.2391': attribute type 3 has an invalid length. [ 870.504762][T12100] netlink: 'syz.2.2389': attribute type 10 has an invalid length. [ 870.551611][T12099] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2391'. [ 871.753937][T12114] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2396'. [ 872.510522][T12137] netlink: 'syz.3.2400': attribute type 21 has an invalid length. [ 872.541626][T12137] netlink: 'syz.3.2400': attribute type 6 has an invalid length. [ 872.582082][T12137] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2400'. [ 872.706861][T12150] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2401'. [ 872.789895][T12154] bond0: (slave geneve0): Error: Slave device does not support XDP [ 873.933318][T12155] validate_nla: 1 callbacks suppressed [ 873.933340][T12155] netlink: 'syz.4.2405': attribute type 10 has an invalid length. [ 874.086079][T12159] netlink: 'syz.3.2407': attribute type 3 has an invalid length. [ 874.134644][T12159] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2407'. [ 874.143499][T12161] netlink: 'syz.0.2406': attribute type 10 has an invalid length. [ 874.273814][T12161] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.313671][T12161] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.326897][T12161] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.338884][T12161] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.307756][T12188] netlink: 'syz.3.2411': attribute type 27 has an invalid length. [ 875.402437][T12188] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2411'. [ 876.138211][T12202] netlink: 'syz.2.2416': attribute type 21 has an invalid length. [ 876.146248][T12202] netlink: 'syz.2.2416': attribute type 6 has an invalid length. [ 876.156590][T12202] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2416'. [ 876.406472][T12207] bond0: (slave geneve0): Error: Slave device does not support XDP [ 876.542096][T12207] netlink: 'syz.0.2418': attribute type 10 has an invalid length. [ 876.585470][T12215] netlink: 'syz.4.2422': attribute type 3 has an invalid length. [ 876.700906][T12215] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2422'. [ 876.776087][T12218] netlink: 'syz.1.2420': attribute type 2 has an invalid length. [ 876.820898][T12218] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2420'. [ 877.785198][T12247] netlink: 'syz.1.2430': attribute type 10 has an invalid length. [ 878.463977][T12262] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2435'. [ 878.687075][T12247] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.696909][T12247] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.706091][T12247] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.715017][T12247] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.738794][T12247] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.757477][T12247] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.766473][T12247] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.775610][T12247] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.787508][T12247] team0: Port device geneve1 added [ 878.795117][T12253] bond0: (slave geneve0): Error: Slave device does not support XDP [ 879.113368][T12275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2437'. [ 879.256314][T12270] validate_nla: 2 callbacks suppressed [ 879.256335][T12270] netlink: 'syz.1.2437': attribute type 46 has an invalid length. [ 879.566660][T12280] netlink: 'syz.2.2440': attribute type 2 has an invalid length. [ 879.593219][T12280] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2440'. [ 880.617146][T12293] delete_channel: no stack [ 880.660726][T12304] netlink: 'syz.3.2447': attribute type 10 has an invalid length. [ 881.011582][T12295] delete_channel: no stack [ 881.289010][T12304] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.343294][T12304] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.363120][T12304] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.400916][T12304] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.509546][T12315] bond0: (slave geneve0): Error: Slave device does not support XDP [ 881.615302][T12319] netlink: 'syz.3.2451': attribute type 3 has an invalid length. [ 881.626671][T12315] netlink: 'syz.4.2448': attribute type 10 has an invalid length. [ 881.704391][T12319] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2451'. [ 881.923161][T12325] FAULT_INJECTION: forcing a failure. [ 881.923161][T12325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.977406][T12325] CPU: 0 PID: 12325 Comm: syz.2.2453 Not tainted syzkaller #0 [ 881.985127][T12325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 881.995408][T12325] Call Trace: [ 881.998727][T12325] [ 882.001694][T12325] dump_stack_lvl+0x188/0x24e [ 882.006522][T12325] ? show_regs_print_info+0x12/0x12 [ 882.011777][T12325] ? load_image+0x400/0x400 [ 882.016350][T12325] ? __lock_acquire+0x7d10/0x7d10 [ 882.021429][T12325] should_fail_ex+0x399/0x4d0 [ 882.026150][T12325] _copy_from_user+0x2c/0x170 [ 882.030883][T12325] iovec_from_user+0x143/0x360 [ 882.035709][T12325] __import_iovec+0x6d/0x500 [ 882.040541][T12325] ? __might_fault+0xa6/0x120 [ 882.045340][T12325] import_iovec+0x6f/0xa0 [ 882.049703][T12325] ___sys_recvmsg+0x4b6/0x590 [ 882.054415][T12325] ? __sys_recvmsg+0x290/0x290 [ 882.059305][T12325] ? common_file_perm+0x171/0x1c0 [ 882.064451][T12325] ? __fget_files+0x43d/0x4b0 [ 882.069178][T12325] __x64_sys_recvmsg+0x205/0x2e0 [ 882.074156][T12325] ? ___sys_recvmsg+0x590/0x590 [ 882.079217][T12325] ? lockdep_hardirqs_on+0x94/0x140 [ 882.084454][T12325] do_syscall_64+0x4c/0xa0 [ 882.088914][T12325] ? clear_bhb_loop+0x60/0xb0 [ 882.093610][T12325] ? clear_bhb_loop+0x60/0xb0 [ 882.098399][T12325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 882.104395][T12325] RIP: 0033:0x7f3cbc99cdd9 [ 882.108915][T12325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.128891][T12325] RSP: 002b:00007f3cbd8c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 882.137339][T12325] RAX: ffffffffffffffda RBX: 00007f3cbcc15fa0 RCX: 00007f3cbc99cdd9 [ 882.145516][T12325] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 882.153536][T12325] RBP: 00007f3cbd8c0090 R08: 0000000000000000 R09: 0000000000000000 [ 882.161712][T12325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 882.169736][T12325] R13: 00007f3cbcc16038 R14: 00007f3cbcc15fa0 R15: 00007fffc8173358 [ 882.178004][T12325] [ 882.197125][T12329] netlink: 'syz.4.2454': attribute type 2 has an invalid length. [ 882.207392][T12329] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2454'. [ 882.910542][T12338] delete_channel: no stack [ 882.958342][T12343] netlink: 'syz.3.2461': attribute type 10 has an invalid length. [ 883.087975][T12346] bond0: (slave geneve0): Error: Slave device does not support XDP [ 883.257553][T12346] netlink: 'syz.4.2462': attribute type 10 has an invalid length. [ 883.760621][T12363] netlink: 'syz.3.2466': attribute type 3 has an invalid length. [ 883.775680][T12363] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2466'. [ 883.905550][T12367] netlink: 'syz.4.2467': attribute type 10 has an invalid length. [ 883.940232][T12367] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.017950][T12367] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.123255][T12367] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.140544][T12367] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.327378][T12367] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.402275][T12367] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.482945][T12367] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.494187][T12367] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.544463][T12367] device geneve1 entered promiscuous mode [ 884.563043][T12367] team0: Port device geneve1 added [ 884.759896][T12370] netlink: 'syz.0.2468': attribute type 2 has an invalid length. [ 884.820480][T12370] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2468'. [ 885.151340][T12382] delete_channel: no stack [ 885.218966][T12390] netlink: 'syz.3.2475': attribute type 3 has an invalid length. [ 885.234644][T12391] bond0: (slave geneve0): Error: Slave device does not support XDP [ 885.241009][T12390] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2475'. [ 885.495851][T12401] netlink: 'syz.4.2479': attribute type 3 has an invalid length. [ 885.575007][T12401] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2479'. [ 886.142648][T12425] netlink: 'syz.2.2484': attribute type 2 has an invalid length. [ 886.153123][T12424] FAULT_INJECTION: forcing a failure. [ 886.153123][T12424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.216967][T12425] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2484'. [ 886.242462][T12424] CPU: 0 PID: 12424 Comm: syz.0.2487 Not tainted syzkaller #0 [ 886.250023][T12424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 886.260125][T12424] Call Trace: [ 886.263434][T12424] [ 886.266415][T12424] dump_stack_lvl+0x188/0x24e [ 886.271146][T12424] ? show_regs_print_info+0x12/0x12 [ 886.276389][T12424] ? load_image+0x400/0x400 [ 886.280936][T12424] ? __lock_acquire+0x7d10/0x7d10 [ 886.286014][T12424] should_fail_ex+0x399/0x4d0 [ 886.290736][T12424] _copy_from_user+0x2c/0x170 [ 886.295639][T12424] iovec_from_user+0x143/0x360 [ 886.300445][T12424] __import_iovec+0x6d/0x500 [ 886.305083][T12424] import_iovec+0x6f/0xa0 [ 886.309454][T12424] ___sys_sendmsg+0x252/0x360 [ 886.314189][T12424] ? __sys_sendmsg+0x290/0x290 [ 886.319034][T12424] ? __lock_acquire+0x7d10/0x7d10 [ 886.324130][T12424] __se_sys_sendmsg+0x1bb/0x2a0 [ 886.329023][T12424] ? __x64_sys_sendmsg+0x80/0x80 [ 886.334108][T12424] ? lockdep_hardirqs_on+0x94/0x140 [ 886.339435][T12424] do_syscall_64+0x4c/0xa0 [ 886.343892][T12424] ? clear_bhb_loop+0x60/0xb0 [ 886.348652][T12424] ? clear_bhb_loop+0x60/0xb0 [ 886.353389][T12424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 886.359333][T12424] RIP: 0033:0x7efd62f9cdd9 [ 886.363805][T12424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.383461][T12424] RSP: 002b:00007efd63d8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.391916][T12424] RAX: ffffffffffffffda RBX: 00007efd63215fa0 RCX: 00007efd62f9cdd9 [ 886.399929][T12424] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 886.408024][T12424] RBP: 00007efd63d8f090 R08: 0000000000000000 R09: 0000000000000000 [ 886.416030][T12424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.424302][T12424] R13: 00007efd63216038 R14: 00007efd63215fa0 R15: 00007ffd0e47da08 [ 886.432432][T12424] [ 886.609000][T12431] bond0: (slave geneve0): Error: Slave device does not support XDP [ 886.930298][T12433] delete_channel: no stack [ 887.000362][T12439] netlink: 'syz.0.2492': attribute type 3 has an invalid length. [ 887.008762][T12439] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2492'. [ 887.560262][T12451] netlink: 'syz.2.2495': attribute type 21 has an invalid length. [ 887.581512][T12451] netlink: 'syz.2.2495': attribute type 6 has an invalid length. [ 887.599883][T12451] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2495'. [ 888.155596][T12472] delete_channel: no stack [ 888.172770][T12481] netlink: 'syz.2.2501': attribute type 2 has an invalid length. [ 888.207967][T12481] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2501'. [ 888.988562][T12497] netlink: 'syz.0.2509': attribute type 3 has an invalid length. [ 889.062746][T12497] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2509'. [ 889.305986][T12506] netlink: 'syz.4.2511': attribute type 2 has an invalid length. [ 889.314941][T12506] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2511'. [ 889.364478][T12511] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2512'. [ 889.726716][T12521] bond0: (slave geneve0): Error: Slave device does not support XDP [ 890.922108][T12543] validate_nla: 2 callbacks suppressed [ 890.922128][T12543] netlink: 'syz.3.2520': attribute type 2 has an invalid length. [ 890.972527][T12543] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2520'. [ 891.024114][T12545] netlink: 'syz.1.2522': attribute type 10 has an invalid length. [ 891.037574][T12545] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2522'. [ 891.125357][T12551] FAULT_INJECTION: forcing a failure. [ 891.125357][T12551] name failslab, interval 1, probability 0, space 0, times 0 [ 891.171065][T12551] CPU: 1 PID: 12551 Comm: syz.0.2523 Not tainted syzkaller #0 [ 891.178619][T12551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 891.188709][T12551] Call Trace: [ 891.192025][T12551] [ 891.194990][T12551] dump_stack_lvl+0x188/0x24e [ 891.199721][T12551] ? show_regs_print_info+0x12/0x12 [ 891.205000][T12551] ? load_image+0x400/0x400 [ 891.209545][T12551] ? __might_sleep+0xd0/0xd0 [ 891.214166][T12551] ? __lock_acquire+0x7d10/0x7d10 [ 891.219234][T12551] should_fail_ex+0x399/0x4d0 [ 891.224039][T12551] should_failslab+0x5/0x20 [ 891.228826][T12551] slab_pre_alloc_hook+0x59/0x310 [ 891.233988][T12551] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 891.239868][T12551] __kmem_cache_alloc_node+0x4f/0x260 [ 891.245282][T12551] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 891.250888][T12551] __kmalloc+0xa0/0x240 [ 891.255104][T12551] bpf_prog_test_run_skb+0x234/0x12a0 [ 891.260528][T12551] ? __fget_files+0x28/0x4b0 [ 891.265163][T12551] ? __fget_files+0x28/0x4b0 [ 891.269803][T12551] ? __fget_files+0x43d/0x4b0 [ 891.274615][T12551] ? cpu_online+0xa0/0xa0 [ 891.278980][T12551] bpf_prog_test_run+0x31e/0x390 [ 891.283965][T12551] __sys_bpf+0x62b/0x780 [ 891.288426][T12551] ? bpf_link_show_fdinfo+0x380/0x380 [ 891.293857][T12551] ? lock_chain_count+0x20/0x20 [ 891.298767][T12551] __x64_sys_bpf+0x78/0x90 [ 891.303235][T12551] do_syscall_64+0x4c/0xa0 [ 891.307721][T12551] ? clear_bhb_loop+0x60/0xb0 [ 891.312610][T12551] ? clear_bhb_loop+0x60/0xb0 [ 891.317410][T12551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.323375][T12551] RIP: 0033:0x7efd62f9cdd9 [ 891.328027][T12551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.347786][T12551] RSP: 002b:00007efd63d8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 891.356237][T12551] RAX: ffffffffffffffda RBX: 00007efd63215fa0 RCX: 00007efd62f9cdd9 [ 891.364336][T12551] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 891.372458][T12551] RBP: 00007efd63d8f090 R08: 0000000000000000 R09: 0000000000000000 [ 891.380468][T12551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.388477][T12551] R13: 00007efd63216038 R14: 00007efd63215fa0 R15: 00007ffd0e47da08 [ 891.396512][T12551] [ 891.653174][T12561] netlink: 'syz.4.2526': attribute type 10 has an invalid length. [ 892.677281][T12561] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.689221][T12561] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.702365][T12561] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.728779][T12561] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.780530][T12570] netlink: 'syz.1.2527': attribute type 21 has an invalid length. [ 892.810946][T12570] netlink: 'syz.1.2527': attribute type 6 has an invalid length. [ 892.818751][T12570] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2527'. [ 892.930652][T12576] bond0: (slave geneve0): Error: Slave device does not support XDP [ 893.361245][T12582] netlink: 'syz.1.2533': attribute type 10 has an invalid length. [ 893.425497][T12582] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.453786][T12582] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.501764][T12582] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.511587][T12593] FAULT_INJECTION: forcing a failure. [ 893.511587][T12593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.542771][T12582] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.693113][T12593] CPU: 0 PID: 12593 Comm: syz.3.2537 Not tainted syzkaller #0 [ 893.700747][T12593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 893.710847][T12593] Call Trace: [ 893.714162][T12593] [ 893.717130][T12593] dump_stack_lvl+0x188/0x24e [ 893.721861][T12593] ? show_regs_print_info+0x12/0x12 [ 893.727121][T12593] ? load_image+0x400/0x400 [ 893.731678][T12593] ? __lock_acquire+0x7d10/0x7d10 [ 893.736753][T12593] should_fail_ex+0x399/0x4d0 [ 893.741474][T12593] _copy_from_user+0x2c/0x170 [ 893.746206][T12593] __sys_bpf+0x2ea/0x780 [ 893.750507][T12593] ? bpf_link_show_fdinfo+0x380/0x380 [ 893.756036][T12593] ? lock_chain_count+0x20/0x20 [ 893.760956][T12593] __x64_sys_bpf+0x78/0x90 [ 893.765520][T12593] do_syscall_64+0x4c/0xa0 [ 893.770006][T12593] ? clear_bhb_loop+0x60/0xb0 [ 893.774743][T12593] ? clear_bhb_loop+0x60/0xb0 [ 893.779835][T12593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 893.785866][T12593] RIP: 0033:0x7fa0a399cdd9 [ 893.790323][T12593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.809984][T12593] RSP: 002b:00007fa0a4832028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 893.818448][T12593] RAX: ffffffffffffffda RBX: 00007fa0a3c15fa0 RCX: 00007fa0a399cdd9 [ 893.826464][T12593] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 000000000000000a [ 893.834476][T12593] RBP: 00007fa0a4832090 R08: 0000000000000000 R09: 0000000000000000 [ 893.842577][T12593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.850768][T12593] R13: 00007fa0a3c16038 R14: 00007fa0a3c15fa0 R15: 00007fffa6543598 [ 893.858842][T12593] [ 894.102687][T12601] netlink: 'syz.4.2539': attribute type 2 has an invalid length. [ 894.157839][T12601] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2539'. [ 894.402918][T12609] netlink: 'syz.2.2542': attribute type 10 has an invalid length. [ 894.434372][T12609] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.452170][T12609] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.488575][T12609] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.505813][T12609] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.862984][T12622] netlink: 'syz.3.2544': attribute type 21 has an invalid length. [ 894.881043][T12622] netlink: 'syz.3.2544': attribute type 6 has an invalid length. [ 894.889039][T12622] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2544'. [ 894.935603][T12628] bond0: (slave geneve0): Error: Slave device does not support XDP [ 895.377646][T12645] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2549'. [ 895.476683][T12645] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2549'. [ 895.554433][T12645] syz_tun: refused to change device tx_queue_len [ 895.620891][T12645] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 897.210534][T12667] validate_nla: 1 callbacks suppressed [ 897.210555][T12667] netlink: 'syz.2.2557': attribute type 29 has an invalid length. [ 897.235147][T12667] netlink: 'syz.2.2557': attribute type 29 has an invalid length. [ 897.262942][T12669] netlink: 'syz.2.2557': attribute type 29 has an invalid length. [ 897.312685][T12667] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2557'. [ 897.331248][T12667] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2557'. [ 897.512691][T12674] netlink: 'syz.0.2558': attribute type 21 has an invalid length. [ 897.541793][T12674] netlink: 'syz.0.2558': attribute type 6 has an invalid length. [ 897.606713][T12674] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2558'. [ 898.338791][T12693] netlink: 'syz.3.2567': attribute type 3 has an invalid length. [ 898.354730][T12693] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2567'. [ 898.570259][T12700] netlink: 'syz.0.2566': attribute type 21 has an invalid length. [ 898.610237][T12700] netlink: 'syz.0.2566': attribute type 6 has an invalid length. [ 898.618631][T12700] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2566'. [ 900.064274][T12709] device syzkaller0 entered promiscuous mode [ 900.082055][T12715] FAULT_INJECTION: forcing a failure. [ 900.082055][T12715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.108636][T12715] CPU: 1 PID: 12715 Comm: syz.2.2573 Not tainted syzkaller #0 [ 900.116350][T12715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 900.126509][T12715] Call Trace: [ 900.129802][T12715] [ 900.132753][T12715] dump_stack_lvl+0x188/0x24e [ 900.137551][T12715] ? show_regs_print_info+0x12/0x12 [ 900.142795][T12715] ? load_image+0x400/0x400 [ 900.147349][T12715] ? __lock_acquire+0x7d10/0x7d10 [ 900.152426][T12715] should_fail_ex+0x399/0x4d0 [ 900.157654][T12715] _copy_from_user+0x2c/0x170 [ 900.162363][T12715] ___sys_recvmsg+0x172/0x590 [ 900.167067][T12715] ? __sys_recvmsg+0x290/0x290 [ 900.171861][T12715] ? common_file_perm+0x171/0x1c0 [ 900.176907][T12715] ? __fget_files+0x43d/0x4b0 [ 900.181717][T12715] __x64_sys_recvmsg+0x205/0x2e0 [ 900.186767][T12715] ? ___sys_recvmsg+0x590/0x590 [ 900.191709][T12715] ? lockdep_hardirqs_on+0x94/0x140 [ 900.196954][T12715] do_syscall_64+0x4c/0xa0 [ 900.201414][T12715] ? clear_bhb_loop+0x60/0xb0 [ 900.206163][T12715] ? clear_bhb_loop+0x60/0xb0 [ 900.210884][T12715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 900.216810][T12715] RIP: 0033:0x7f3cbc99cdd9 [ 900.221246][T12715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.240904][T12715] RSP: 002b:00007f3cbd8c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 900.249336][T12715] RAX: ffffffffffffffda RBX: 00007f3cbcc15fa0 RCX: 00007f3cbc99cdd9 [ 900.257425][T12715] RDX: 0000000000002000 RSI: 0000200000000300 RDI: 0000000000000003 [ 900.265650][T12715] RBP: 00007f3cbd8c0090 R08: 0000000000000000 R09: 0000000000000000 [ 900.273684][T12715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.281688][T12715] R13: 00007f3cbcc16038 R14: 00007f3cbcc15fa0 R15: 00007fffc8173358 [ 900.289808][T12715] [ 900.682918][T12722] netlink: 'syz.4.2574': attribute type 21 has an invalid length. [ 900.693492][T12722] netlink: 'syz.4.2574': attribute type 6 has an invalid length. [ 900.701849][T12722] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2574'. [ 901.185454][T12740] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2579'. [ 902.729976][T12721] validate_nla: 1 callbacks suppressed [ 902.729993][T12721] netlink: 'syz.1.2575': attribute type 10 has an invalid length. [ 902.747532][T12734] netlink: 'syz.4.2578': attribute type 10 has an invalid length. [ 902.756493][T12736] netlink: 'syz.2.2588': attribute type 21 has an invalid length. [ 902.776362][T12736] netlink: 'syz.2.2588': attribute type 6 has an invalid length. [ 902.811819][T12736] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2588'. [ 902.998026][T12750] netlink: 'syz.1.2593': attribute type 3 has an invalid length. [ 903.008961][T12749] netlink: 'syz.4.2581': attribute type 3 has an invalid length. [ 903.026927][T12749] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2581'. [ 903.045404][T12750] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2593'. [ 903.105019][T12758] netlink: 'syz.2.2583': attribute type 21 has an invalid length. [ 903.206659][T12758] netlink: 'syz.2.2583': attribute type 6 has an invalid length. [ 903.215156][T12758] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2583'. [ 903.383545][T12762] netlink: 'syz.3.2584': attribute type 2 has an invalid length. [ 903.423345][T12762] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2584'. [ 903.891531][T12768] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.2586'. [ 903.956346][T12768] netlink: 'syz.4.2586': attribute type 12 has an invalid length. [ 904.070978][T12768] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.2586'. [ 904.081946][T12769] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2587'. [ 904.675567][T12791] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2595'. [ 904.886194][T12800] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2598'. [ 905.008226][T12803] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2600'. [ 905.396486][T12814] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2602'. [ 906.063980][T12837] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2611'. [ 906.170735][T12840] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2615'. [ 907.926356][T12859] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 908.073560][T12859] batman_adv: batadv0: Removing interface: ipvlan1 [ 908.113095][T12859] team0: Port device vlan0 removed [ 908.659916][T12861] validate_nla: 15 callbacks suppressed [ 908.659935][T12861] netlink: 'syz.4.2623': attribute type 10 has an invalid length. [ 908.684062][T12873] netlink: 'syz.0.2626': attribute type 21 has an invalid length. [ 908.762906][T12873] netlink: 'syz.0.2626': attribute type 6 has an invalid length. [ 908.800883][T12873] __nla_validate_parse: 2 callbacks suppressed [ 908.800903][T12873] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2626'. [ 908.864680][T12885] netlink: 'syz.4.2630': attribute type 3 has an invalid length. [ 908.891062][T12885] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2630'. [ 909.008748][T12886] netlink: 'syz.3.2629': attribute type 10 has an invalid length. [ 909.730214][T12894] netlink: 'syz.4.2642': attribute type 3 has an invalid length. [ 909.749131][T12894] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2642'. [ 911.076671][T12922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 911.227433][T12921] netlink: 'syz.3.2641': attribute type 21 has an invalid length. [ 911.274014][T12921] netlink: 'syz.3.2641': attribute type 6 has an invalid length. [ 911.317061][T12921] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2641'. [ 911.590204][T12935] netlink: 'syz.1.2647': attribute type 3 has an invalid length. [ 911.625068][T12935] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2647'. [ 912.721565][T12942] netlink: 'syz.3.2649': attribute type 10 has an invalid length. [ 912.739779][T12942] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2649'. [ 913.263115][T12954] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2650'. [ 914.157454][T12987] validate_nla: 2 callbacks suppressed [ 914.157475][T12987] netlink: 'syz.0.2658': attribute type 21 has an invalid length. [ 914.172148][T12987] netlink: 'syz.0.2658': attribute type 6 has an invalid length. [ 914.180092][T12987] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2658'. [ 914.205627][T12985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 914.230471][T12992] netlink: 'syz.2.2661': attribute type 3 has an invalid length. [ 914.259292][T12992] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2661'. [ 916.506641][T13028] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2672'. [ 916.692184][T13028] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2672'. [ 918.193628][T13042] netlink: 'syz.4.2674': attribute type 21 has an invalid length. [ 918.280904][T13042] netlink: 'syz.4.2674': attribute type 6 has an invalid length. [ 918.320955][T13042] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2674'. [ 918.387024][T13050] netlink: 'syz.2.2677': attribute type 3 has an invalid length. [ 918.405102][T13050] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2677'. [ 919.437938][T13057] FAULT_INJECTION: forcing a failure. [ 919.437938][T13057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 919.573565][T13057] CPU: 0 PID: 13057 Comm: syz.4.2681 Not tainted syzkaller #0 [ 919.581303][T13057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 919.591657][T13057] Call Trace: [ 919.594972][T13057] [ 919.597942][T13057] dump_stack_lvl+0x188/0x24e [ 919.602687][T13057] ? show_regs_print_info+0x12/0x12 [ 919.607948][T13057] ? load_image+0x400/0x400 [ 919.612606][T13057] ? __lock_acquire+0x7d10/0x7d10 [ 919.617682][T13057] ? __kasan_slab_alloc+0x6b/0x80 [ 919.622772][T13057] should_fail_ex+0x399/0x4d0 [ 919.627519][T13057] strncpy_from_user+0x32/0x350 [ 919.632431][T13057] getname_flags+0xf2/0x500 [ 919.636994][T13057] do_sys_openat2+0xdd/0x4b0 [ 919.641651][T13057] ? do_sys_open+0xe0/0xe0 [ 919.646128][T13057] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 919.652166][T13057] ? lock_chain_count+0x20/0x20 [ 919.657255][T13057] __x64_sys_openat+0x135/0x160 [ 919.662182][T13057] do_syscall_64+0x4c/0xa0 [ 919.666739][T13057] ? clear_bhb_loop+0x60/0xb0 [ 919.671459][T13057] ? clear_bhb_loop+0x60/0xb0 [ 919.676188][T13057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 919.682131][T13057] RIP: 0033:0x7ffb8cf5d60e [ 919.686592][T13057] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 919.706328][T13057] RSP: 002b:00007ffb8de09ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 919.714800][T13057] RAX: ffffffffffffffda RBX: 00007ffb8de0a6c0 RCX: 00007ffb8cf5d60e [ 919.722812][T13057] RDX: 0000000000000002 RSI: 00007ffb8de09f90 RDI: ffffffffffffff9c [ 919.730954][T13057] RBP: 00007ffb8de0a090 R08: 0000000000000000 R09: 0000000000000000 [ 919.738964][T13057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.747079][T13057] R13: 00007ffb8d216038 R14: 00007ffb8d215fa0 R15: 00007ffe2fd59c98 [ 919.755214][T13057] [ 920.034669][T13059] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.2682'. [ 920.314795][T13068] netlink: 'syz.3.2687': attribute type 40 has an invalid length. [ 920.451029][T13079] netlink: 'syz.0.2690': attribute type 3 has an invalid length. [ 920.475471][T13079] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2690'. [ 920.698446][T13083] netlink: 'syz.1.2691': attribute type 3 has an invalid length. [ 920.708712][T13083] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2691'. [ 921.229367][T13080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 921.430041][T13090] netlink: 'syz.0.2692': attribute type 21 has an invalid length. [ 921.481568][T13094] netlink: 'syz.4.2703': attribute type 3 has an invalid length. [ 921.531465][T13090] netlink: 'syz.0.2692': attribute type 6 has an invalid length. [ 921.533647][T13094] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2703'. [ 921.539754][T13090] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2692'. [ 921.612233][T13099] netlink: 'syz.1.2695': attribute type 1 has an invalid length. [ 921.620058][T13099] netlink: 'syz.1.2695': attribute type 4 has an invalid length. [ 921.674730][T13099] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2695'. [ 922.375416][T13110] netlink: 'syz.4.2697': attribute type 40 has an invalid length. [ 923.154491][T13127] netlink: 'syz.0.2700': attribute type 40 has an invalid length. [ 923.576746][T13136] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2706'. [ 924.097928][T13143] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2708'. [ 924.315233][T13147] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2707'. [ 925.509719][T13151] team0: Port device macvlan0 added [ 925.918792][T13179] validate_nla: 7 callbacks suppressed [ 925.918811][T13179] netlink: 'syz.3.2719': attribute type 3 has an invalid length. [ 926.066351][T13179] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2719'. [ 926.763523][T13185] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.2720'. [ 928.920797][T13192] netlink: 'syz.0.2723': attribute type 21 has an invalid length. [ 928.935125][T13192] netlink: 'syz.0.2723': attribute type 6 has an invalid length. [ 928.958889][T13192] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2723'. [ 929.060675][T13204] : port 1(ip6gretap0) entered blocking state [ 929.086941][T13204] : port 1(ip6gretap0) entered disabled state [ 929.120091][T13204] device ip6gretap0 entered promiscuous mode [ 929.139284][T13194] device ip6gretap0 left promiscuous mode [ 929.157462][T13194] : port 1(ip6gretap0) entered disabled state [ 930.216786][T13217] netlink: 'syz.1.2732': attribute type 3 has an invalid length. [ 930.236282][T13220] netlink: 'syz.2.2730': attribute type 7 has an invalid length. [ 930.239054][T13216] netlink: 'syz.3.2731': attribute type 10 has an invalid length. [ 930.256482][T13217] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2732'. [ 930.789615][T13227] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.2733'. [ 930.815931][T13230] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2735'. [ 930.950609][T13234] netlink: 'syz.1.2736': attribute type 10 has an invalid length. [ 930.970047][T13234] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2736'. [ 930.998096][T13234] device team0 entered promiscuous mode [ 931.013383][T13234] device team_slave_0 entered promiscuous mode [ 931.072593][T13234] device team_slave_1 entered promiscuous mode [ 931.116201][T13234] device geneve1 entered promiscuous mode [ 931.122924][T13234] device macvlan0 entered promiscuous mode [ 931.130147][T13234] bridge0: port 3(team0) entered blocking state [ 931.137279][T13234] bridge0: port 3(team0) entered disabled state [ 931.146117][T13234] bridge0: port 3(team0) entered blocking state [ 931.153613][T13234] bridge0: port 3(team0) entered forwarding state [ 931.332972][T13240] netlink: 'syz.3.2738': attribute type 21 has an invalid length. [ 931.352800][T13240] netlink: 'syz.3.2738': attribute type 6 has an invalid length. [ 931.411102][T13240] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2738'. [ 931.474393][T13247] netlink: 'syz.2.2739': attribute type 15 has an invalid length. [ 931.504020][T13247] netlink: 'syz.2.2739': attribute type 7 has an invalid length. [ 931.536020][T13247] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2739'. [ 931.563379][T13251] netlink: 'syz.1.2742': attribute type 10 has an invalid length. [ 931.623548][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.630111][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.004800][T13265] netlink: 'syz.1.2746': attribute type 3 has an invalid length. [ 932.032372][T13265] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2746'. [ 932.045868][T13263] : port 1(ip6gretap0) entered blocking state [ 932.055402][T13263] : port 1(ip6gretap0) entered disabled state [ 932.130256][T13263] device ip6gretap0 entered promiscuous mode [ 932.235197][T13267] device ip6gretap0 left promiscuous mode [ 932.249122][T13267] : port 1(ip6gretap0) entered disabled state [ 934.936572][T13283] netlink: 'syz.2.2751': attribute type 3 has an invalid length. [ 934.962959][T13287] FAULT_INJECTION: forcing a failure. [ 934.962959][T13287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.981732][T13283] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2751'. [ 935.002729][T13287] CPU: 1 PID: 13287 Comm: syz.1.2754 Not tainted syzkaller #0 [ 935.010428][T13287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 935.020601][T13287] Call Trace: [ 935.023901][T13287] [ 935.026845][T13287] dump_stack_lvl+0x188/0x24e [ 935.031643][T13287] ? show_regs_print_info+0x12/0x12 [ 935.036864][T13287] ? load_image+0x400/0x400 [ 935.041394][T13287] ? __lock_acquire+0x7d10/0x7d10 [ 935.046535][T13287] should_fail_ex+0x399/0x4d0 [ 935.051231][T13287] _copy_from_user+0x2c/0x170 [ 935.055932][T13287] iovec_from_user+0x143/0x360 [ 935.060713][T13287] __import_iovec+0x6d/0x500 [ 935.065417][T13287] ? __might_fault+0xc2/0x120 [ 935.070203][T13287] import_iovec+0x6f/0xa0 [ 935.074560][T13287] ___sys_sendmsg+0x252/0x360 [ 935.079360][T13287] ? __sys_sendmsg+0x290/0x290 [ 935.084350][T13287] ? __lock_acquire+0x7d10/0x7d10 [ 935.089654][T13287] __se_sys_sendmsg+0x1bb/0x2a0 [ 935.094531][T13287] ? ct_nmi_exit+0x145/0x1c0 [ 935.099148][T13287] ? __x64_sys_sendmsg+0x80/0x80 [ 935.104135][T13287] ? lockdep_hardirqs_on+0x94/0x140 [ 935.109354][T13287] do_syscall_64+0x4c/0xa0 [ 935.113797][T13287] ? clear_bhb_loop+0x60/0xb0 [ 935.118494][T13287] ? clear_bhb_loop+0x60/0xb0 [ 935.123200][T13287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 935.129200][T13287] RIP: 0033:0x7f225f59cdd9 [ 935.133637][T13287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.153438][T13287] RSP: 002b:00007f22603cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 935.161873][T13287] RAX: ffffffffffffffda RBX: 00007f225f815fa0 RCX: 00007f225f59cdd9 [ 935.169948][T13287] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 935.177936][T13287] RBP: 00007f22603cf090 R08: 0000000000000000 R09: 0000000000000000 [ 935.186012][T13287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.194198][T13287] R13: 00007f225f816038 R14: 00007f225f815fa0 R15: 00007fff12784858 [ 935.202374][T13287] [ 935.280303][T13288] netlink: 'syz.4.2753': attribute type 21 has an invalid length. [ 935.298138][T13288] netlink: 'syz.4.2753': attribute type 6 has an invalid length. [ 935.313902][T13288] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2753'. [ 935.594873][T13293] : port 1(ip6gretap0) entered blocking state [ 935.605213][T13293] : port 1(ip6gretap0) entered disabled state [ 935.636769][T13293] device ip6gretap0 entered promiscuous mode [ 935.695893][T13301] device ip6gretap0 left promiscuous mode [ 935.736517][T13301] : port 1(ip6gretap0) entered disabled state [ 935.777848][T13303] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2759'. [ 938.608025][T13313] device ip6gretap0 left promiscuous mode [ 938.624083][T13313] : port 1(ip6gretap0) entered disabled state [ 939.205683][T13336] validate_nla: 1 callbacks suppressed [ 939.205703][T13336] netlink: 'syz.3.2767': attribute type 21 has an invalid length. [ 939.219809][T13336] netlink: 'syz.3.2767': attribute type 6 has an invalid length. [ 939.229763][T13336] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2767'. [ 939.240465][T13335] netlink: 'syz.4.2768': attribute type 10 has an invalid length. [ 939.995826][T13349] netlink: 'syz.4.2771': attribute type 39 has an invalid length. [ 940.162728][T13357] netlink: 'syz.1.2774': attribute type 10 has an invalid length. [ 940.293134][T13361] netlink: 'syz.3.2775': attribute type 3 has an invalid length. [ 940.322582][T13361] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2775'. [ 940.826110][T13370] : port 1(ip6gretap0) entered blocking state [ 940.854957][T13370] : port 1(ip6gretap0) entered disabled state [ 940.898654][T13370] device ip6gretap0 entered promiscuous mode [ 940.983808][T13367] device ip6gretap0 left promiscuous mode [ 941.021908][T13367] : port 1(ip6gretap0) entered disabled state [ 941.120082][T13381] netlink: 'syz.1.2781': attribute type 21 has an invalid length. [ 941.128975][T13381] netlink: 'syz.1.2781': attribute type 6 has an invalid length. [ 941.137619][T13381] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2781'. [ 941.212035][T13372] : port 1(ip6gretap0) entered blocking state [ 941.254298][T13372] : port 1(ip6gretap0) entered disabled state [ 941.398779][T13372] device ip6gretap0 entered promiscuous mode [ 941.501666][T13383] device ip6gretap0 left promiscuous mode [ 941.519972][T13383] : port 1(ip6gretap0) entered disabled state [ 941.772708][T13397] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2786'. [ 942.222748][T13403] netlink: 'syz.2.2789': attribute type 3 has an invalid length. [ 942.312460][T13403] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2789'. [ 942.428966][T13409] netlink: 'syz.0.2791': attribute type 21 has an invalid length. [ 942.447608][T13409] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2791'. [ 942.760564][T13416] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2793'. [ 944.061642][T13439] : port 1(ip6gretap0) entered blocking state [ 944.078376][T13439] : port 1(ip6gretap0) entered disabled state [ 944.122015][T13439] device ip6gretap0 entered promiscuous mode [ 944.156808][T13430] device ip6gretap0 left promiscuous mode [ 944.260846][T13430] : port 1(ip6gretap0) entered disabled state [ 944.941029][T13455] validate_nla: 2 callbacks suppressed [ 944.941050][T13455] netlink: 'syz.2.2805': attribute type 3 has an invalid length. [ 944.981369][T13455] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2805'. [ 945.508618][T13467] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 946.624999][T13475] netlink: 'syz.3.2810': attribute type 21 has an invalid length. [ 946.651005][T13475] netlink: 'syz.3.2810': attribute type 6 has an invalid length. [ 946.658898][T13475] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2810'. [ 947.367309][T13502] netlink: 'syz.1.2819': attribute type 3 has an invalid length. [ 947.388171][T13502] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2819'. [ 947.764174][T13514] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 947.825727][T13515] netlink: 'syz.1.2823': attribute type 11 has an invalid length. [ 947.862408][T13515] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2823'. [ 947.941134][T13513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 947.972199][T13522] netlink: 'syz.2.2825': attribute type 21 has an invalid length. [ 947.980277][T13522] netlink: 'syz.2.2825': attribute type 6 has an invalid length. [ 948.039868][T13522] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2825'. [ 949.013380][T13544] FAULT_INJECTION: forcing a failure. [ 949.013380][T13544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.027357][T13544] CPU: 1 PID: 13544 Comm: syz.1.2832 Not tainted syzkaller #0 [ 949.034864][T13544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 949.044969][T13544] Call Trace: [ 949.048287][T13544] [ 949.051337][T13544] dump_stack_lvl+0x188/0x24e [ 949.056066][T13544] ? show_regs_print_info+0x12/0x12 [ 949.061307][T13544] ? load_image+0x400/0x400 [ 949.065940][T13544] ? __lock_acquire+0x7d10/0x7d10 [ 949.071021][T13544] should_fail_ex+0x399/0x4d0 [ 949.075840][T13544] _copy_from_user+0x2c/0x170 [ 949.080655][T13544] ___sys_sendmsg+0x1c3/0x360 [ 949.085526][T13544] ? __sys_sendmsg+0x290/0x290 [ 949.090414][T13544] ? __lock_acquire+0x7d10/0x7d10 [ 949.095597][T13544] __se_sys_sendmsg+0x1bb/0x2a0 [ 949.100506][T13544] ? ct_nmi_exit+0x145/0x1c0 [ 949.105380][T13544] ? __x64_sys_sendmsg+0x80/0x80 [ 949.110378][T13544] ? lockdep_hardirqs_on+0x94/0x140 [ 949.115627][T13544] do_syscall_64+0x4c/0xa0 [ 949.120346][T13544] ? clear_bhb_loop+0x60/0xb0 [ 949.125064][T13544] ? clear_bhb_loop+0x60/0xb0 [ 949.129786][T13544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 949.135718][T13544] RIP: 0033:0x7f225f59cdd9 [ 949.140178][T13544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.159823][T13544] RSP: 002b:00007f22603cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.168294][T13544] RAX: ffffffffffffffda RBX: 00007f225f815fa0 RCX: 00007f225f59cdd9 [ 949.176288][T13544] RDX: 0000000000004000 RSI: 0000200000000400 RDI: 0000000000000003 [ 949.184279][T13544] RBP: 00007f22603cf090 R08: 0000000000000000 R09: 0000000000000000 [ 949.192270][T13544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.200390][T13544] R13: 00007f225f816038 R14: 00007f225f815fa0 R15: 00007fff12784858 [ 949.208396][T13544] [ 949.230698][T13541] netlink: 'syz.0.2830': attribute type 4 has an invalid length. [ 949.248906][T13541] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2830'. [ 949.293300][T13541] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 949.329819][T13538] netlink: 'syz.0.2830': attribute type 10 has an invalid length. [ 949.388534][T13548] netlink: 'syz.1.2833': attribute type 3 has an invalid length. [ 949.413647][T13548] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2833'. [ 950.032648][T13566] netlink: 'syz.1.2839': attribute type 21 has an invalid length. [ 950.054879][T13566] netlink: 'syz.1.2839': attribute type 6 has an invalid length. [ 950.078285][T13566] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2839'. [ 951.030259][T13597] netlink: 'syz.1.2849': attribute type 3 has an invalid length. [ 951.127899][T13597] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2849'. [ 951.341325][T13600] IPv6: Can't replace route, no match found [ 951.738002][T13613] netlink: 'syz.4.2854': attribute type 21 has an invalid length. [ 951.746346][T13613] netlink: 'syz.4.2854': attribute type 6 has an invalid length. [ 951.754830][T13613] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2854'. [ 959.894120][T13632] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2861'. [ 979.001717][ T4361] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2632 jiffies s: 44253 root: 0x2/. [ 979.014506][ T4361] rcu: blocking rcu_node structures (internal RCU debug): [ 979.022107][ T4361] Sending NMI from CPU 0 to CPUs 1: [ 979.027360][ C1] NMI backtrace for cpu 1 [ 979.027372][ C1] CPU: 1 PID: 13627 Comm: syz.1.2857 Not tainted syzkaller #0 [ 979.027390][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 979.027399][ C1] RIP: 0010:native_apic_msr_eoi_write+0xb/0x10 [ 979.027426][ C1] Code: 8b 06 bf f0 03 00 00 89 de 5b 41 5e 41 5f ff e0 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b9 0b 08 00 00 31 c0 31 d2 0f 30 0f 1f 40 00 81 ff cf 00 00 00 7f 0c 83 ff 20 74 2a 83 ff 30 74 [ 979.027439][ C1] RSP: 0018:ffffc900001e0898 EFLAGS: 00000046 [ 979.027454][ C1] RAX: 0000000000000000 RBX: ffffffff8c653b30 RCX: 000000000000080b [ 979.027465][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000b0 [ 979.027476][ C1] RBP: 0000000000000000 R08: ffffffff8fa0e048 R09: ffffffff8fa0e058 [ 979.027486][ C1] R10: ffffffff8fa0e050 R11: ffffffff8fa0e043 R12: 0000000000000000 [ 979.027497][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 979.027508][ C1] FS: 00007f22603ae6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 979.027522][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 979.027533][ C1] CR2: 0000001b32712ff8 CR3: 000000007ae91000 CR4: 00000000003506e0 [ 979.027550][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 979.027560][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 979.027571][ C1] Call Trace: [ 979.027576][ C1] [ 979.027582][ C1] __sysvec_irq_work+0x53/0x350 [ 979.027602][ C1] sysvec_irq_work+0x4a/0xc0 [ 979.027618][ C1] asm_sysvec_irq_work+0x16/0x20 [ 979.027638][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 979.027655][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 979.027667][ C1] RSP: 0018:ffffc900001e0980 EFLAGS: 00000206 [ 979.027679][ C1] RAX: 214bf84f42940600 RBX: 1ffff9200003c138 RCX: 214bf84f42940600 [ 979.027691][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf1320 [ 979.027702][ C1] RBP: ffffc900001e0a80 R08: ffffffff90af9337 R09: 1ffffffff215f266 [ 979.027713][ C1] R10: dffffc0000000000 R11: fffffbfff215f267 R12: 0000000000000246 [ 979.027724][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 [ 979.027745][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 979.027765][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 979.027779][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 979.027801][ C1] __rcu_read_unlock+0x78/0xd0 [ 979.027817][ C1] hsr_announce+0x2ca/0x340 [ 979.027839][ C1] ? read_lock_is_recursive+0x10/0x10 [ 979.027858][ C1] ? hsr_announce+0x80/0x340 [ 979.027877][ C1] ? hsr_dev_finalize+0x840/0x840 [ 979.027896][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 979.027921][ C1] call_timer_fn+0x1ac/0x670 [ 979.027936][ C1] ? hsr_dev_finalize+0x840/0x840 [ 979.027956][ C1] ? call_timer_fn+0xcf/0x670 [ 979.027971][ C1] ? __run_timers+0x800/0x800 [ 979.027987][ C1] ? hsr_dev_finalize+0x840/0x840 [ 979.028009][ C1] ? hsr_dev_finalize+0x840/0x840 [ 979.028038][ C1] ? hsr_dev_finalize+0x840/0x840 [ 979.028059][ C1] __run_timers+0x53e/0x800 [ 979.028080][ C1] ? detach_timer+0x350/0x350 [ 979.028098][ C1] ? lock_chain_count+0x20/0x20 [ 979.028119][ C1] run_timer_softirq+0x63/0xf0 [ 979.028135][ C1] handle_softirqs+0x2a1/0x930 [ 979.028153][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 979.028170][ C1] ? do_softirq+0x210/0x210 [ 979.028189][ C1] __irq_exit_rcu+0x13b/0x230 [ 979.028203][ C1] ? irq_exit_rcu+0x20/0x20 [ 979.028222][ C1] irq_exit_rcu+0x5/0x20 [ 979.028235][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 979.028251][ C1] [ 979.028255][ C1] [ 979.028261][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 979.028280][ C1] RIP: 0010:perf_trace_init+0x9e/0x2d0 [ 979.028297][ C1] Code: 00 27 b8 8c 0f 84 75 01 00 00 4c 89 24 24 4c 8d 63 40 4c 89 e0 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 17 01 00 00 4d 63 24 24 <4c> 89 ff 4c 89 e6 e8 67 00 f8 ff 4d 39 e7 0f 85 a9 00 00 00 4c 8d [ 979.028309][ C1] RSP: 0018:ffffc900038e7c20 EFLAGS: 00000246 [ 979.028321][ C1] RAX: 0000000000000000 RBX: ffffffff8cfa9de0 RCX: 0000000000080000 [ 979.028331][ C1] RDX: ffffc9000f9d5000 RSI: 00000000000055f9 RDI: 00000000000055fa [ 979.028341][ C1] RBP: 0000000000000002 R08: ffffffff8e1ff3ef R09: 1ffffffff1c3fe7d [ 979.028352][ C1] R10: dffffc0000000000 R11: fffffbfff1c3fe7e R12: 0000000000000666 [ 979.028363][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 000000000000011c [ 979.028383][ C1] perf_tp_event_init+0x89/0x110 [ 979.028402][ C1] perf_try_init_event+0x12b/0x3d0 [ 979.028421][ C1] perf_event_alloc+0xf5c/0x21b0 [ 979.028435][ C1] ? perf_event_alloc+0xbe2/0x21b0 [ 979.028453][ C1] ? find_lively_task_by_vpid+0x19/0x290 [ 979.028472][ C1] __se_sys_perf_event_open+0x6fd/0x1ec0 [ 979.028492][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 979.028522][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 979.028537][ C1] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 979.028559][ C1] do_syscall_64+0x4c/0xa0 [ 979.028578][ C1] ? clear_bhb_loop+0x60/0xb0 [ 979.028596][ C1] ? clear_bhb_loop+0x60/0xb0 [ 979.028615][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 979.028633][ C1] RIP: 0033:0x7f225f59cdd9 [ 979.028646][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.028658][ C1] RSP: 002b:00007f22603ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 979.028673][ C1] RAX: ffffffffffffffda RBX: 00007f225f816090 RCX: 00007f225f59cdd9 [ 979.028684][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 979.028695][ C1] RBP: 00007f225f632d69 R08: 0000000000000009 R09: 0000000000000000 [ 979.028705][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 979.028715][ C1] R13: 00007f225f816128 R14: 00007f225f816090 R15: 00007fff12784858 [ 979.028734][ C1]