last executing test programs: 6.600773479s ago: executing program 2 (id=1869): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fb, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x1, 0x2020007, 0xec49, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000540)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x10}, 0x20040090) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000200000085000000a600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9}, 0xb3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r7) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000900000000000000000000008510000002f0ff"], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x92, &(0x7f0000000240)=""/146}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9) r10 = openat$cgroup_int(r8, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000240)=ANY=[@ANYBLOB=','], 0x31) socket$kcm(0x11, 0xa, 0x300) ioctl$TUNGETVNETLE(r7, 0x8955, &(0x7f0000000040)) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x3b, 0x9, 0x73, 0x9, 0x0, 0x3, 0x40000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x6, 0xf62}, 0x200, 0x6, 0x1, 0x7, 0x3ff, 0x1, 0xf000, 0x0, 0x3, 0x0, 0x7}, r11, 0x10, r7, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11", 0x3}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r11, 0x1, 0x1, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000300)=r2, 0x4) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@cgroup=r13, r2, 0x19, 0x14, r7, @void, @value=r7, @void, @void, r12}, 0x20) 4.45488941s ago: executing program 2 (id=1879): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x48}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, &(0x7f0000000140), 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/10, 0xa}], 0x1}, 0x2020) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xb}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000001000000090000000100000000c20000", @ANYRES32, @ANYBLOB="0700000000020000000000000000755014a30000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="010000000200"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x1d, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0b1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, @map_val={0x18, 0xc, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x80000000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x2, &(0x7f0000000440)=""/2, 0x41100, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r5, r1, r4, r5, r6, r4], 0x0, 0x10, 0x10000}, 0x94) socket$kcm(0x10, 0x2, 0x4) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xa, 0x0, 0x0) sendmsg$sock(r7, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x20044041) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) 3.778088871s ago: executing program 3 (id=1885): r0 = socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1d, 0x20, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xab}}, @cb_func={0x18, 0xf, 0x4, 0x0, 0xfffffffffffffffb}, @generic={0x6, 0x6, 0x7, 0x8, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x5}]}, &(0x7f00000007c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="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"/4544], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="6ff402f12c96277bf7a0667562a4e2f947c3d5c146ce3214ecddaedce9", @ANYRES64=0x0], 0x20) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r2, r2, 0x2f, 0x10, 0x4, @void, @value=r4}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1804000000000000000000000001000018010000202070250000000000202020db1af8ffa0000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000a00000009500"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="d42c08a400c51e57f07e8cb3836f6d3caeff62dc9c3429355178592b03a0fb488f05e0c440907e6a80c7da02ada5ba30bbd7c5d0a982b4b79cf27964413805aa3e6000c400e0e091eb0a0a5849ae9c32", @ANYRES64=0x0], 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r6 = socket$kcm(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) r9 = openat$cgroup_devices(r7, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000001300)={0xa, 0x0, @empty=0x48000000}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)}, {&(0x7f0000001040)}], 0x2, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @empty}}}], 0x38}, 0x40) 3.155864921s ago: executing program 1 (id=1888): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000020ad6e911b51818462b400", 0x28}], 0x1}, 0x20000000) 2.992240919s ago: executing program 1 (id=1890): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000f0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) 2.991839049s ago: executing program 2 (id=1891): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000200)='memory.swap.current\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0xbb8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000079cb8c1f211dfe04bc11b8000000000004000819000000009500000c000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 2.187059266s ago: executing program 0 (id=1892): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f00000001c0), 0x0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2a, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trr\nD'], 0xa) r4 = socket$kcm(0x2, 0x3, 0x106) sendmsg$kcm(r4, &(0x7f0000003680)={&(0x7f0000000000)=@caif=@rfm={0x25, 0xffffffff, "1a57bb0573eb722ba642d3b193498723"}, 0x80, 0x0}, 0x20040804) sendmsg(r4, &(0x7f0000000c40)={&(0x7f0000000200)=@in={0x2, 0x4e23, @remote}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001300)="09cc51f4d17586d7a3a125b1528a9558d401c0299d0a9b6e2b57ae07f4f0ec4e0823de8fc8b9932c342b8ea46b4cc17f11894f0a4a8295fe73631cab4b06a669c278b3622e2dce7e5c9233f4e7d7c2ba4a5af4bca5d66561c9f5d7f96b1f3395881c90fe5373", 0x66}, {&(0x7f0000000340)="3f34e957a3ebca10ec2fb4bb89d4cff4c29c2434dc44897565", 0x19}, {&(0x7f00000013c0)="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", 0x3d0}, {&(0x7f00000023c0)="e61e3a796bdfe7bfc7739bf9d611617cd90ff468c6780e8e20cf71f31ae3ecec4e6cbf72a6091d8d1f2cc602071c2d7bbfaf9e3c6fce9c5e0f113db82210582a7fac2248bc41963ae977bb29b4d3037c46747118a502713f7cb48f86f5d2f0", 0x5f}], 0x4}, 0x4000880) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3efd7ab4c41335d9, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a69, 0x5}, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0xb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000028c0)={r0, 0xfffffffffffffe00, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x29, &(0x7f00000026c0), 0x0, 0x10, &(0x7f0000002700), &(0x7f0000002740), 0x8, 0x30, 0x8, 0xf, &(0x7f0000002780)}}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002980)={{r1, 0xffffffffffffffff}, &(0x7f0000002900), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x1c, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x80000001, 0x1000, &(0x7f0000001580)=""/4096, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, r0, 0x8, &(0x7f0000002580)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000025c0)={0x3, 0x4, 0x5, 0xd}, 0x10, r5, r0, 0x0, &(0x7f0000002a00)=[r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 2.186688397s ago: executing program 1 (id=1894): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0xc) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="d8000000210081044e810382db44b9040a00007ffefe0500002015000600142603600e1209000600ff7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000080)}], 0x2}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$kcm(0x2b, 0x1, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xe, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = getpid() sendmsg$unix(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x33880}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x18, 0x1, 0x1, [r8]}}], 0x38}, 0x8841) setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000000040), 0x2) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000c54d0001000000800000000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000000300"/28], 0x50) r11 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000001a40)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r11, @ANYBLOB="000000df00000000660000000300000018000000000000000000000001008000950000000000000097030000100000019548b08ad5040db0c34eb4ec148934ae5056c22b000e09c34a8f1b0a075206a1dfaf296dcfc9280ec3abaeaa25214b86a32beb5229c6a80ffd6a4fa863e212992242af6ca47fcff880e1aeca1d9519879b79e2c8957b9008f7c5a8d42acb2f44b81d42df7090822ef5bcf3184ab0fc2bb65e"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002cc0)=@o_path={0x0, 0x0, 0x10, r4}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b40)=@bpf_ext={0x1c, 0x1d, &(0x7f0000002ac0)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @alu={0x4, 0x1, 0xb, 0x3, 0x1, 0xfffffffffffffff0, 0x1}], &(0x7f0000002bc0)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000002c00)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000002c40)={0x0, 0x4, 0xfbff, 0x2}, 0x10, 0x19213, r8, 0x0, &(0x7f0000002d00)=[r12, r12], &(0x7f0000002d40), 0x10, 0x8f33}, 0x94) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x4000, r4}, 0x18) sendmsg$tipc(r3, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000001c0)="d7192f36352497115b5d71b7b7281bc976f9bd9ada392128ccab3e4e7a2dc2c7544f4110345be6a2bb4074a55dcc2e9c92821174550f9af65cf290dd7dfc149c1bd3b45eb987ee28ee4d7ea78b611d2ddaf44d129c367f4ec69e856c3dffd7337784ae091d2d573024baf09cbd65e1ce586617e4761aa477a9e86fdbfbf7f42d9bcc8ee8825cd372e8fa438c73521cb130974d9eb2b71d2ea39ca3a25b2b7e07b793c0d543f74b7cb089d581a62745b445230189736587368aa911505180b299f3c250f139edb50a829127c71fdefd14", 0xd0}, {&(0x7f00000002c0)="08fd9c7e858cd36abb36185352a9730eee558ebef0b54c3513fd856c9158b5c2dcd62f7d0cf55e22003f21b5a528793c10b89a8578459d6e54a94a7f8218478f97b353a6fa8cc7f87e4a139c0d849dde42982c07e473", 0x56}, {&(0x7f0000000700)="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", 0xf80}, {&(0x7f0000001700)="701d08fc096be1338b204a833656db2392ec5371763fee81d6b001a8425d4bf386a8a775e3f0aaa047f3d36cd386c8aac0f4dfab204a30f6e0b11139ee4ed3ccf961ba56bbe10e4d7c7df3aec0031a3f04af4c3767ec2f5b1313094f", 0x5c}, {&(0x7f0000001780)="e525ee4a8c883747d349547e682933820dccd5b2c7a72b104b772fe6ed192b6787a153552af09bb5272a05ac2aa3d953872190c5ed85fabbb39e1eb311634b3ac1d5d3e1e68501e7657eb40351d1f646d6c42ce6a3c29fe8521b6fc720dc0e7daa2ed79fdf4c2a227ad4ce5274a2953541d23115a187fc43b219c985fdfe076230", 0x81}, {&(0x7f0000001840)="526aedc2848353eb1243b7130e4c344971480d17bbac4af721251d770d707be9a269eeb9960e4e5b6bbfbbe1a096dc77ab136a6bb3ca7568a7eb690b82899bac5df819e09cfb431fe65b418fb5eb354f37e139b15bfaedb5f82014", 0x5b}, {&(0x7f00000018c0)="1d518f5e1231d57d243e4459fb691149019bd04e3b1e845f2a9b94d4af8abd307a26877473fb6627279323e132f2af5af4049ad5308b176a1e3981ae6541fb370f2b6cc9cb4a6a29522bb83d601ae51e99ebbc7b708785d312d691ef2d7bb1e5d8c76311e8c6c2c8c0b4c81f6ba096505b068aada4ddd38013d5b500a22aef475afb", 0x82}, {&(0x7f0000001980)="f4607ec7c109826050d36a89cf33b1", 0xf}], 0x8, 0x0, 0x0, 0x4008094}, 0x24008854) ioctl$TUNSETOFFLOAD(r3, 0x40086602, 0x110e22fff2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x0, 0x26}, 0x28) 2.186324766s ago: executing program 2 (id=1895): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0xc) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="d8000000210081044e810382db44b9040a00007ffefe0500002015000600142603600e1209000600ff7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000080)}], 0x2}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$kcm(0x2b, 0x1, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xe, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = getpid() sendmsg$unix(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x33880}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x18, 0x1, 0x1, [r8]}}], 0x38}, 0x8841) setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000000040), 0x2) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000c54d0001000000800000000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000000300"/28], 0x50) r11 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000001a40)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r11, @ANYBLOB="000000df00000000660000000300000018000000000000000000000001008000950000000000000097030000100000019548b08ad5040db0c34eb4ec148934ae5056c22b000e09c34a8f1b0a075206a1dfaf296dcfc9280ec3abaeaa25214b86a32beb5229c6a80ffd6a4fa863e212992242af6ca47fcff880e1aeca1d9519879b79e2c8957b9008f7c5a8d42acb2f44b81d42df7090822ef5bcf3184ab0fc2bb65e"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002cc0)=@o_path={0x0, 0x0, 0x10, r4}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b40)=@bpf_ext={0x1c, 0x1d, &(0x7f0000002ac0)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @alu={0x4, 0x1, 0xb, 0x3, 0x1, 0xfffffffffffffff0, 0x1}], &(0x7f0000002bc0)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000002c00)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000002c40)={0x0, 0x4, 0xfbff, 0x2}, 0x10, 0x19213, r8, 0x0, &(0x7f0000002d00)=[r12, r12], &(0x7f0000002d40), 0x10, 0x8f33}, 0x94) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x4000, r4}, 0x18) sendmsg$tipc(r3, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000001c0)="d7192f36352497115b5d71b7b7281bc976f9bd9ada392128ccab3e4e7a2dc2c7544f4110345be6a2bb4074a55dcc2e9c92821174550f9af65cf290dd7dfc149c1bd3b45eb987ee28ee4d7ea78b611d2ddaf44d129c367f4ec69e856c3dffd7337784ae091d2d573024baf09cbd65e1ce586617e4761aa477a9e86fdbfbf7f42d9bcc8ee8825cd372e8fa438c73521cb130974d9eb2b71d2ea39ca3a25b2b7e07b793c0d543f74b7cb089d581a62745b445230189736587368aa911505180b299f3c250f139edb50a829127c71fdefd14", 0xd0}, {&(0x7f00000002c0)="08fd9c7e858cd36abb36185352a9730eee558ebef0b54c3513fd856c9158b5c2dcd62f7d0cf55e22003f21b5a528793c10b89a8578459d6e54a94a7f8218478f97b353a6fa8cc7f87e4a139c0d849dde42982c07e473", 0x56}, {&(0x7f0000000700)="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", 0xf80}, {&(0x7f0000001700)="701d08fc096be1338b204a833656db2392ec5371763fee81d6b001a8425d4bf386a8a775e3f0aaa047f3d36cd386c8aac0f4dfab204a30f6e0b11139ee4ed3ccf961ba56bbe10e4d7c7df3aec0031a3f04af4c3767ec2f5b1313094f", 0x5c}, {&(0x7f0000001780)="e525ee4a8c883747d349547e682933820dccd5b2c7a72b104b772fe6ed192b6787a153552af09bb5272a05ac2aa3d953872190c5ed85fabbb39e1eb311634b3ac1d5d3e1e68501e7657eb40351d1f646d6c42ce6a3c29fe8521b6fc720dc0e7daa2ed79fdf4c2a227ad4ce5274a2953541d23115a187fc43b219c985fdfe076230", 0x81}, {&(0x7f0000001840)="526aedc2848353eb1243b7130e4c344971480d17bbac4af721251d770d707be9a269eeb9960e4e5b6bbfbbe1a096dc77ab136a6bb3ca7568a7eb690b82899bac5df819e09cfb431fe65b418fb5eb354f37e139b15bfaedb5f82014", 0x5b}, {&(0x7f00000018c0)="1d518f5e1231d57d243e4459fb691149019bd04e3b1e845f2a9b94d4af8abd307a26877473fb6627279323e132f2af5af4049ad5308b176a1e3981ae6541fb370f2b6cc9cb4a6a29522bb83d601ae51e99ebbc7b708785d312d691ef2d7bb1e5d8c76311e8c6c2c8c0b4c81f6ba096505b068aada4ddd38013d5b500a22aef475afb", 0x82}, {&(0x7f0000001980)="f4607ec7c109826050d36a89cf33b1", 0xf}], 0x8, 0x0, 0x0, 0x4008094}, 0x24008854) ioctl$TUNSETOFFLOAD(r3, 0x40086602, 0x110e22fff2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x97}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 2.186246686s ago: executing program 3 (id=1896): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113f000000000016003f00000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.954344747s ago: executing program 3 (id=1897): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000900006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 1.519975578s ago: executing program 3 (id=1898): r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x102004, 0xc8, 0x0, 0x3, 0x1400, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x1000000, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000d00)={&(0x7f0000000240)=@ax25={{0x3, @netrom}, [@remote, @remote, @default, @null, @netrom, @default, @bcast, @rose]}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000440)=""/154, 0x9a}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000880)=""/102, 0x66}, {&(0x7f0000000900)=""/63, 0x3f}, {&(0x7f0000000940)=""/29, 0x1d}, {&(0x7f0000000980)=""/243, 0xf3}, {&(0x7f0000000a80)=""/114, 0x72}, {&(0x7f0000000b00)=""/218, 0xda}], 0xa, &(0x7f0000000cc0)=""/25, 0x19}, 0x23) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r2, 0x20, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/167, 0xa7}}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum64={0x3, 0x0, 0x0, 0x13, 0x0, 0x4}]}, {0x0, [0x30, 0x2e, 0x61]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0xef, &(0x7f0000000580)=""/239, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r7}, 0x36) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x1e, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r7, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) 1.201103693s ago: executing program 0 (id=1899): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x96cfba89e8b710d3, 0x4, 0xffffffff, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000780)=ANY=[], 0x9) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={0x0, 0x0, 0x45, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x54e}, 0x0, 0xf452, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="030000f803000000040000000a0000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2001b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0xb050, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x119}, 0x0, 0x8000000000003, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f0500000009000000030000000500000000000000002e"], 0x0, 0x37, 0x0, 0x9, 0x0, 0x19000000}, 0x28) 1.134674496s ago: executing program 3 (id=1900): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x8}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x13, &(0x7f0000000100), 0x120) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000007, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0xe, 0x0, 0x4a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x8040) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x12) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001200)="e15ef438c73534858e762b7013ee5a9529ba1dbb817b5beaf1b1766f64bc2efe8dacd7a906154c33ef431d85689123702dfb8e46d64d18dea048c5ddffb4f3b0eb941041c0ccfda8fdefeea9afe72216c2036deff1cb53d87ab8b48cf866aed2561a08f824e64924ab5e4eb3f7c53f8dd352cbea546cb55fea0026321bb3b576a854d670a5f9031ab2c482f5a98afc6453a9adf2b072567cc3138d1624adc411e6c68f169a1b57b8ef26513aa6e9273b575a3e438c9155eeb840d45af6f5c92d2f6737dacfd64346f0f838d14b621f257b72770a5ab23f43ba212c20c136e161dcb795", 0xe3}, {&(0x7f0000001300)="da0434ca1d8a8c74497ed3fe9a6d7eba65906e6e2fb5a266aa14df728185", 0x1e}, {&(0x7f0000001340)="d55fa46d108ff0fb911201239b94afd4480304a8a1acc89fb30c10b4bb239ab9e6ecf6d6080acafde4c5b0ffb188c15d7e77fbb005c16ab933f7b376187072986e19a38553ad34e72f8e85dd8263af1cee7c0162b5fe18bf042991de763fc8a657e8fac14fd7599f4016e16cdeba8653a99e1b", 0x73}], 0x3, &(0x7f0000001400)}, 0x90) socket$kcm(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000004000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x20, 0xf, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000010000800000", @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000faffffff850000008200000018330000030000000000000000000000b54208000100000095000000000000007d3f05088ab0b0a38af41c784054f800e5c9116d69622bdec2081af43fd405e9e0802a4609c039de0aff02ee9de9abcd97e08e680d243bf53beec29d87569ec88d486d9b63a20aa0eed4a3fb22e23a0256c409080719120e4cc083cd3de1e476d946cadcb2bacb6222caf2995fce8167d86ca98bd1ed756f43b07a64fea102410a95a86664aa8547db2b4208ad427bf5"], 0x0, 0x1000, 0x39, &(0x7f0000000380)=""/57, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000bc0), 0x10, 0x70d9ebf8}, 0x94) socket$kcm(0x10, 0x3, 0x10) 1.117105157s ago: executing program 1 (id=1901): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x3b35, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000340), 0x4) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff8c, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 786.765892ms ago: executing program 2 (id=1902): socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x121280, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66}, 0x94) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000300)) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d"], 0x0, 0x26}, 0x28) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0e"], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x87, &(0x7f0000000140)=""/135}, 0x62) 608.162431ms ago: executing program 1 (id=1903): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000b00000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) 607.858151ms ago: executing program 0 (id=1904): socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(r0, 0x10e, 0xa, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2000000a, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xc73, 0x6, 0x2, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x104010, 0x1, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000000000000000000100000d000000000000340000000000020000000000000c02000000000061"], 0x0, 0x4c}, 0x28) 542.979224ms ago: executing program 3 (id=1905): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x45) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 455.007628ms ago: executing program 1 (id=1906): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fb, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x1, 0x2020007, 0xec49, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000540)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x10}, 0x20040090) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000200000085000000a600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9}, 0xb3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r7) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000900000000000000000000008510000002f0ff"], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x92, &(0x7f0000000240)=""/146}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9) r10 = openat$cgroup_int(r8, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000240)=ANY=[@ANYBLOB=','], 0x31) socket$kcm(0x11, 0xa, 0x300) ioctl$TUNGETVNETLE(r7, 0x8955, &(0x7f0000000040)) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x3b, 0x9, 0x73, 0x9, 0x0, 0x3, 0x40000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x6, 0xf62}, 0x200, 0x6, 0x1, 0x7, 0x3ff, 0x1, 0xf000, 0x0, 0x3, 0x0, 0x7}, r11, 0x10, r7, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11", 0x3}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r11, 0x1, 0x1, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000300)=r2, 0x4) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@cgroup=r13, r2, 0x19, 0x14, r7, @void, @value=r7, @void, @void, r12}, 0x20) 318.510645ms ago: executing program 0 (id=1907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="61100c0000000000150003000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000060002000000000018110000", @ANYRES32=r1, @ANYBLOB="0000200000000000b702000000000000b7030000000000008500000033000000b70000000200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 287.345576ms ago: executing program 2 (id=1908): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22f, 0x5, @perf_bp={0x0, 0xb}, 0x1200, 0x4, 0x0, 0x8, 0x1b17, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0xfb, 0x6, 0x4, 0x1, 0x0, 0x8001, 0x9149a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x808, 0xfff, 0x80, 0x3, 0x9, 0x6, 0xed9, 0x0, 0xbb, 0x0, 0x7fffffffffffffff}, 0xffffffffffffffff, 0x5, r2, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b06d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3708500180040010200400", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000140)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff00"}) 125.194044ms ago: executing program 0 (id=1909): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 0s ago: executing program 0 (id=1910): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0xc) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="d8000000210081044e810382db44b9040a00007ffefe0500002015000600142603600e1209000600ff7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000080)}], 0x2}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$kcm(0x2b, 0x1, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xe, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = getpid() sendmsg$unix(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x33880}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x18, 0x1, 0x1, [r8]}}], 0x38}, 0x8841) setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000000040), 0x2) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000c54d0001000000800000000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000000300"/28], 0x50) r11 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000001a40)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r11, @ANYBLOB="000000df00000000660000000300000018000000000000000000000001008000950000000000000097030000100000019548b08ad5040db0c34eb4ec148934ae5056c22b000e09c34a8f1b0a075206a1dfaf296dcfc9280ec3abaeaa25214b86a32beb5229c6a80ffd6a4fa863e212992242af6ca47fcff880e1aeca1d9519879b79e2c8957b9008f7c5a8d42acb2f44b81d42df7090822ef5bcf3184ab0fc2bb65e"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002cc0)=@o_path={0x0, 0x0, 0x10, r4}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b40)=@bpf_ext={0x1c, 0x1d, &(0x7f0000002ac0)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @alu={0x4, 0x1, 0xb, 0x3, 0x1, 0xfffffffffffffff0, 0x1}], &(0x7f0000002bc0)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000002c00)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000002c40)={0x0, 0x4, 0xfbff, 0x2}, 0x10, 0x19213, r8, 0x0, &(0x7f0000002d00)=[r12, r12], &(0x7f0000002d40), 0x10, 0x8f33}, 0x94) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x4000, r4}, 0x18) sendmsg$tipc(r3, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000001c0)="d7192f36352497115b5d71b7b7281bc976f9bd9ada392128ccab3e4e7a2dc2c7544f4110345be6a2bb4074a55dcc2e9c92821174550f9af65cf290dd7dfc149c1bd3b45eb987ee28ee4d7ea78b611d2ddaf44d129c367f4ec69e856c3dffd7337784ae091d2d573024baf09cbd65e1ce586617e4761aa477a9e86fdbfbf7f42d9bcc8ee8825cd372e8fa438c73521cb130974d9eb2b71d2ea39ca3a25b2b7e07b793c0d543f74b7cb089d581a62745b445230189736587368aa911505180b299f3c250f139edb50a829127c71fdefd14", 0xd0}, {&(0x7f00000002c0)="08fd9c7e858cd36abb36185352a9730eee558ebef0b54c3513fd856c9158b5c2dcd62f7d0cf55e22003f21b5a528793c10b89a8578459d6e54a94a7f8218478f97b353a6fa8cc7f87e4a139c0d849dde42982c07e473", 0x56}, {&(0x7f0000000700)="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", 0xf80}, {&(0x7f0000001700)="701d08fc096be1338b204a833656db2392ec5371763fee81d6b001a8425d4bf386a8a775e3f0aaa047f3d36cd386c8aac0f4dfab204a30f6e0b11139ee4ed3ccf961ba56bbe10e4d7c7df3aec0031a3f04af4c3767ec2f5b1313094f", 0x5c}, {&(0x7f0000001780)="e525ee4a8c883747d349547e682933820dccd5b2c7a72b104b772fe6ed192b6787a153552af09bb5272a05ac2aa3d953872190c5ed85fabbb39e1eb311634b3ac1d5d3e1e68501e7657eb40351d1f646d6c42ce6a3c29fe8521b6fc720dc0e7daa2ed79fdf4c2a227ad4ce5274a2953541d23115a187fc43b219c985fdfe076230", 0x81}, {&(0x7f0000001840)="526aedc2848353eb1243b7130e4c344971480d17bbac4af721251d770d707be9a269eeb9960e4e5b6bbfbbe1a096dc77ab136a6bb3ca7568a7eb690b82899bac5df819e09cfb431fe65b418fb5eb354f37e139b15bfaedb5f82014", 0x5b}, {&(0x7f00000018c0)="1d518f5e1231d57d243e4459fb691149019bd04e3b1e845f2a9b94d4af8abd307a26877473fb6627279323e132f2af5af4049ad5308b176a1e3981ae6541fb370f2b6cc9cb4a6a29522bb83d601ae51e99ebbc7b708785d312d691ef2d7bb1e5d8c76311e8c6c2c8c0b4c81f6ba096505b068aada4ddd38013d5b500a22aef475afb", 0x82}, {&(0x7f0000001980)="f4607ec7c109826050d36a89cf33b1", 0xf}], 0x8, 0x0, 0x0, 0x4008094}, 0x24008854) ioctl$TUNSETOFFLOAD(r3, 0x40086602, 0x110e22fff2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x0, 0x26}, 0x28) kernel console output (not intermixed with test programs): [ 107.211899][ T5996] ? lock_chain_count+0x20/0x20 [ 107.216789][ T5996] __x64_sys_bpf+0x7c/0x90 [ 107.221239][ T5996] do_syscall_64+0x55/0xb0 [ 107.225670][ T5996] ? clear_bhb_loop+0x40/0x90 [ 107.230366][ T5996] ? clear_bhb_loop+0x40/0x90 [ 107.235064][ T5996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.240973][ T5996] RIP: 0033:0x7f435499e159 [ 107.245407][ T5996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.265025][ T5996] RSP: 002b:00007f43558de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.273456][ T5996] RAX: ffffffffffffffda RBX: 00007f4354c25fa0 RCX: 00007f435499e159 [ 107.281438][ T5996] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a [ 107.289442][ T5996] RBP: 00007f43558de090 R08: 0000000000000000 R09: 0000000000000000 [ 107.297428][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.305514][ T5996] R13: 00007f4354c26038 R14: 00007f4354c25fa0 R15: 00007ffed5263218 [ 107.313541][ T5996] [ 108.253653][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.53'. [ 108.598328][ T6021] Zero length message leads to an empty skb [ 108.873662][ T6030] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.59'. [ 111.044239][ T6056] Dead loop on virtual device ip6_vti0, fix it urgently! [ 111.103465][ T6051] netlink: 'syz.1.65': attribute type 21 has an invalid length. [ 111.137348][ T6051] netlink: 156 bytes leftover after parsing attributes in process `syz.1.65'. [ 112.041258][ T6063] syz.2.71 uses obsolete (PF_INET,SOCK_PACKET) [ 112.231110][ T6063] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 112.654959][ T6081] netlink: 'syz.2.74': attribute type 10 has an invalid length. [ 112.704348][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.738221][ T6081] bridge_slave_1: left allmulticast mode [ 112.744070][ T6081] bridge_slave_1: left promiscuous mode [ 112.752084][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.767767][ T6081] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 112.904809][ T6086] FAULT_INJECTION: forcing a failure. [ 112.904809][ T6086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.922908][ T6086] CPU: 0 PID: 6086 Comm: syz.0.78 Not tainted syzkaller #0 [ 112.930182][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.940271][ T6086] Call Trace: [ 112.943583][ T6086] [ 112.946529][ T6086] dump_stack_lvl+0x18c/0x250 [ 112.951244][ T6086] ? show_regs_print_info+0x20/0x20 [ 112.956503][ T6086] ? load_image+0x420/0x420 [ 112.961035][ T6086] ? __might_fault+0xaa/0x120 [ 112.965721][ T6086] ? __lock_acquire+0x7d80/0x7d80 [ 112.970753][ T6086] should_fail_ex+0x394/0x4c0 [ 112.975443][ T6086] _copy_from_user+0x2f/0xe0 [ 112.980130][ T6086] __sys_bpf+0x23e/0x890 [ 112.984377][ T6086] ? bpf_link_show_fdinfo+0x560/0x560 [ 112.989760][ T6086] ? lock_chain_count+0x20/0x20 [ 112.994620][ T6086] __x64_sys_bpf+0x7c/0x90 [ 112.999388][ T6086] do_syscall_64+0x55/0xb0 [ 113.003813][ T6086] ? clear_bhb_loop+0x40/0x90 [ 113.008506][ T6086] ? clear_bhb_loop+0x40/0x90 [ 113.013212][ T6086] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.019113][ T6086] RIP: 0033:0x7f4adcb9e159 [ 113.023548][ T6086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.043157][ T6086] RSP: 002b:00007f4adda9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.051588][ T6086] RAX: ffffffffffffffda RBX: 00007f4adce25fa0 RCX: 00007f4adcb9e159 [ 113.059567][ T6086] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 113.067543][ T6086] RBP: 00007f4adda9c090 R08: 0000000000000000 R09: 0000000000000000 [ 113.075516][ T6086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.083486][ T6086] R13: 00007f4adce26038 R14: 00007f4adce25fa0 R15: 00007ffd21db81d8 [ 113.091466][ T6086] [ 113.816698][ T6095] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 113.836752][ T6095] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.83'. [ 114.786690][ T6097] FAULT_INJECTION: forcing a failure. [ 114.786690][ T6097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.806526][ T6097] CPU: 0 PID: 6097 Comm: syz.1.84 Not tainted syzkaller #0 [ 114.813804][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.823889][ T6097] Call Trace: [ 114.827192][ T6097] [ 114.830145][ T6097] dump_stack_lvl+0x18c/0x250 [ 114.834845][ T6097] ? show_regs_print_info+0x20/0x20 [ 114.840069][ T6097] ? load_image+0x420/0x420 [ 114.844587][ T6097] ? __might_fault+0xaa/0x120 [ 114.849277][ T6097] ? __lock_acquire+0x7d80/0x7d80 [ 114.854317][ T6097] should_fail_ex+0x394/0x4c0 [ 114.859038][ T6097] _copy_from_user+0x2f/0xe0 [ 114.863676][ T6097] __sys_bpf+0x23e/0x890 [ 114.867962][ T6097] ? bpf_link_show_fdinfo+0x560/0x560 [ 114.873376][ T6097] ? lock_chain_count+0x20/0x20 [ 114.878262][ T6097] __x64_sys_bpf+0x7c/0x90 [ 114.882709][ T6097] do_syscall_64+0x55/0xb0 [ 114.887263][ T6097] ? clear_bhb_loop+0x40/0x90 [ 114.891958][ T6097] ? clear_bhb_loop+0x40/0x90 [ 114.896668][ T6097] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.902593][ T6097] RIP: 0033:0x7f641499e159 [ 114.907070][ T6097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.926687][ T6097] RSP: 002b:00007f64158cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.935118][ T6097] RAX: ffffffffffffffda RBX: 00007f6414c25fa0 RCX: 00007f641499e159 [ 114.943107][ T6097] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 114.951096][ T6097] RBP: 00007f64158cb090 R08: 0000000000000000 R09: 0000000000000000 [ 114.959082][ T6097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.967074][ T6097] R13: 00007f6414c26038 R14: 00007f6414c25fa0 R15: 00007ffd368359d8 [ 114.975073][ T6097] [ 117.226079][ T6130] netlink: 60 bytes leftover after parsing attributes in process `syz.1.94'. [ 118.347741][ T6130] netlink: 60 bytes leftover after parsing attributes in process `syz.1.94'. [ 118.457642][ T6138] FAULT_INJECTION: forcing a failure. [ 118.457642][ T6138] name failslab, interval 1, probability 0, space 0, times 1 [ 118.523572][ T6138] CPU: 0 PID: 6138 Comm: syz.2.96 Not tainted syzkaller #0 [ 118.530861][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.540965][ T6138] Call Trace: [ 118.544322][ T6138] [ 118.547294][ T6138] dump_stack_lvl+0x18c/0x250 [ 118.552072][ T6138] ? show_regs_print_info+0x20/0x20 [ 118.557316][ T6138] ? load_image+0x420/0x420 [ 118.561875][ T6138] ? __might_sleep+0xe0/0xe0 [ 118.566523][ T6138] ? __lock_acquire+0x7d80/0x7d80 [ 118.571598][ T6138] should_fail_ex+0x394/0x4c0 [ 118.576338][ T6138] should_failslab+0x9/0x20 [ 118.580903][ T6138] slab_pre_alloc_hook+0x59/0x300 [ 118.585976][ T6138] ? verify_lock_unused+0x140/0x140 [ 118.591219][ T6138] ? bpf_ctx_init+0xb2/0x190 [ 118.595853][ T6138] ? bpf_ctx_init+0xb2/0x190 [ 118.600488][ T6138] __kmem_cache_alloc_node+0x53/0x250 [ 118.605919][ T6138] ? bpf_ctx_init+0xb2/0x190 [ 118.610564][ T6138] __kmalloc+0xa7/0x240 [ 118.614780][ T6138] bpf_ctx_init+0xb2/0x190 [ 118.619252][ T6138] bpf_prog_test_run_xdp+0x2c4/0x1140 [ 118.624675][ T6138] ? __lock_acquire+0x7d80/0x7d80 [ 118.629760][ T6138] ? dev_put+0x80/0x80 [ 118.633892][ T6138] ? dev_put+0x80/0x80 [ 118.638012][ T6138] bpf_prog_test_run+0x31f/0x390 [ 118.642998][ T6138] __sys_bpf+0x49d/0x890 [ 118.647278][ T6138] ? bpf_link_show_fdinfo+0x560/0x560 [ 118.652721][ T6138] ? lock_chain_count+0x20/0x20 [ 118.657626][ T6138] __x64_sys_bpf+0x7c/0x90 [ 118.662084][ T6138] do_syscall_64+0x55/0xb0 [ 118.666557][ T6138] ? clear_bhb_loop+0x40/0x90 [ 118.671292][ T6138] ? clear_bhb_loop+0x40/0x90 [ 118.676026][ T6138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.682055][ T6138] RIP: 0033:0x7f435499e159 [ 118.686513][ T6138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.706172][ T6138] RSP: 002b:00007f43558de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.714638][ T6138] RAX: ffffffffffffffda RBX: 00007f4354c25fa0 RCX: 00007f435499e159 [ 118.722653][ T6138] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a [ 118.730669][ T6138] RBP: 00007f43558de090 R08: 0000000000000000 R09: 0000000000000000 [ 118.738692][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.746751][ T6138] R13: 00007f4354c26038 R14: 00007f4354c25fa0 R15: 00007ffed5263218 [ 118.754788][ T6138] [ 118.979974][ T6142] netlink: 'syz.0.98': attribute type 2 has an invalid length. [ 119.003213][ T6155] netlink: 'syz.3.101': attribute type 2 has an invalid length. [ 119.022025][ T6142] netlink: 'syz.0.98': attribute type 2 has an invalid length. [ 119.034631][ T6142] netlink: 'syz.0.98': attribute type 2 has an invalid length. [ 119.042838][ T6142] netlink: 'syz.0.98': attribute type 2 has an invalid length. [ 119.056731][ T6142] netlink: 'syz.0.98': attribute type 2 has an invalid length. [ 119.061691][ T6160] netlink: 'syz.2.102': attribute type 3 has an invalid length. [ 119.066923][ T6142] netlink: 'syz.0.98': attribute type 2 has an invalid length. [ 119.082233][ T6160] netlink: 'syz.2.102': attribute type 1 has an invalid length. [ 119.117077][ T6142] netlink: 'syz.0.98': attribute type 2 has an invalid length. [ 119.122435][ T6160] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.102'. [ 120.805130][ T6176] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.104'. [ 123.384128][ T6207] netlink: 142516 bytes leftover after parsing attributes in process `syz.1.114'. [ 127.229173][ T6247] netlink: 142516 bytes leftover after parsing attributes in process `syz.3.126'. [ 131.125392][ T6283] validate_nla: 26 callbacks suppressed [ 131.125412][ T6283] netlink: 'syz.3.137': attribute type 10 has an invalid length. [ 131.156468][ T6283] netlink: 40 bytes leftover after parsing attributes in process `syz.3.137'. [ 131.173923][ T6283] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 131.241132][ T6283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.475681][ T6287] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.139'. [ 133.244770][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.258950][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.344283][ T6313] Dead loop on virtual device ip6_vti0, fix it urgently! [ 134.797519][ T6344] FAULT_INJECTION: forcing a failure. [ 134.797519][ T6344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.814413][ T6344] CPU: 0 PID: 6344 Comm: syz.3.158 Not tainted syzkaller #0 [ 134.821764][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.831867][ T6344] Call Trace: [ 134.835182][ T6344] [ 134.838147][ T6344] dump_stack_lvl+0x18c/0x250 [ 134.842875][ T6344] ? show_regs_print_info+0x20/0x20 [ 134.848118][ T6344] ? load_image+0x420/0x420 [ 134.852655][ T6344] ? __lock_acquire+0x7d80/0x7d80 [ 134.857693][ T6344] should_fail_ex+0x394/0x4c0 [ 134.862400][ T6344] _copy_from_user+0x2f/0xe0 [ 134.867043][ T6344] bpf_prog_test_run_skb+0x267/0x18f0 [ 134.872466][ T6344] ? __fget_files+0x28/0x460 [ 134.877101][ T6344] ? __fget_files+0x3fc/0x460 [ 134.881835][ T6344] ? cpu_online+0x60/0x60 [ 134.886212][ T6344] bpf_prog_test_run+0x31f/0x390 [ 134.891194][ T6344] __sys_bpf+0x49d/0x890 [ 134.895473][ T6344] ? bpf_link_show_fdinfo+0x560/0x560 [ 134.900875][ T6344] ? lock_chain_count+0x20/0x20 [ 134.905753][ T6344] __x64_sys_bpf+0x7c/0x90 [ 134.910208][ T6344] do_syscall_64+0x55/0xb0 [ 134.914659][ T6344] ? clear_bhb_loop+0x40/0x90 [ 134.919349][ T6344] ? clear_bhb_loop+0x40/0x90 [ 134.924064][ T6344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.929999][ T6344] RIP: 0033:0x7f2de799e159 [ 134.934445][ T6344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.954083][ T6344] RSP: 002b:00007f2de87c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.962567][ T6344] RAX: ffffffffffffffda RBX: 00007f2de7c25fa0 RCX: 00007f2de799e159 [ 134.970572][ T6344] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 134.979023][ T6344] RBP: 00007f2de87c7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.987012][ T6344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.994994][ T6344] R13: 00007f2de7c26038 R14: 00007f2de7c25fa0 R15: 00007ffc271425f8 [ 135.002995][ T6344] [ 136.700220][ T6370] FAULT_INJECTION: forcing a failure. [ 136.700220][ T6370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.767936][ T6368] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.169'. [ 136.784994][ T6370] CPU: 0 PID: 6370 Comm: syz.1.167 Not tainted syzkaller #0 [ 136.792345][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.802417][ T6370] Call Trace: [ 136.805709][ T6370] [ 136.808652][ T6370] dump_stack_lvl+0x18c/0x250 [ 136.813354][ T6370] ? show_regs_print_info+0x20/0x20 [ 136.818596][ T6370] ? load_image+0x420/0x420 [ 136.823136][ T6370] ? __might_fault+0xaa/0x120 [ 136.827841][ T6370] ? __lock_acquire+0x7d80/0x7d80 [ 136.832897][ T6370] should_fail_ex+0x394/0x4c0 [ 136.837686][ T6370] _copy_to_user+0x2f/0xa0 [ 136.842121][ T6370] bpf_prog_test_run_raw_tp+0x4e2/0x680 [ 136.847687][ T6370] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 136.853173][ T6370] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 136.858645][ T6370] bpf_prog_test_run+0x31f/0x390 [ 136.863598][ T6370] __sys_bpf+0x49d/0x890 [ 136.867854][ T6370] ? bpf_link_show_fdinfo+0x560/0x560 [ 136.873251][ T6370] ? lock_chain_count+0x20/0x20 [ 136.878121][ T6370] __x64_sys_bpf+0x7c/0x90 [ 136.882577][ T6370] do_syscall_64+0x55/0xb0 [ 136.887045][ T6370] ? clear_bhb_loop+0x40/0x90 [ 136.891749][ T6370] ? clear_bhb_loop+0x40/0x90 [ 136.896455][ T6370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.902364][ T6370] RIP: 0033:0x7f641499e159 [ 136.906790][ T6370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.926499][ T6370] RSP: 002b:00007f64158cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.934927][ T6370] RAX: ffffffffffffffda RBX: 00007f6414c25fa0 RCX: 00007f641499e159 [ 136.942912][ T6370] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 136.950892][ T6370] RBP: 00007f64158cb090 R08: 0000000000000000 R09: 0000000000000000 [ 136.958865][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.966841][ T6370] R13: 00007f6414c26038 R14: 00007f6414c25fa0 R15: 00007ffd368359d8 [ 136.974834][ T6370] [ 137.507751][ T6389] netlink: 'syz.2.177': attribute type 11 has an invalid length. [ 137.516724][ T6389] netlink: 176 bytes leftover after parsing attributes in process `syz.2.177'. [ 137.526391][ T6390] netlink: 'syz.2.177': attribute type 11 has an invalid length. [ 137.536859][ T6390] netlink: 176 bytes leftover after parsing attributes in process `syz.2.177'. [ 140.676552][ T6401] netlink: 'syz.2.181': attribute type 2 has an invalid length. [ 140.759126][ T6401] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.181'. [ 140.887325][ T6404] netlink: 'syz.3.183': attribute type 10 has an invalid length. [ 141.093871][ T6408] netlink: 'syz.0.184': attribute type 1 has an invalid length. [ 141.119238][ T6408] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.184'. [ 141.349721][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.411221][ T6404] bridge_slave_1: left allmulticast mode [ 141.454671][ T6404] bridge_slave_1: left promiscuous mode [ 141.500379][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.571892][ T6404] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 141.582047][ T6401] netlink: 'syz.2.181': attribute type 10 has an invalid length. [ 141.592197][ T6404] syz.3.183 (6404) used greatest stack depth: 20008 bytes left [ 141.600708][ T6401] netlink: 40 bytes leftover after parsing attributes in process `syz.2.181'. [ 141.613937][ T6401] batman_adv: batadv0: Adding interface: virt_wifi0 [ 141.627224][ T6401] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.653881][ T6401] batman_adv: batadv0: Interface activated: virt_wifi0 [ 141.675239][ T6408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.691714][ T6408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.703587][ T6408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.711312][ T6408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.885942][ T6443] netlink: 'syz.1.195': attribute type 39 has an invalid length. [ 143.415352][ T6453] netlink: 'syz.0.199': attribute type 21 has an invalid length. [ 143.431591][ T6453] netlink: 132 bytes leftover after parsing attributes in process `syz.0.199'. [ 143.543192][ T6459] Dead loop on virtual device ip6_vti0, fix it urgently! [ 144.793951][ T6465] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.203'. [ 146.931322][ T6491] FAULT_INJECTION: forcing a failure. [ 146.931322][ T6491] name failslab, interval 1, probability 0, space 0, times 0 [ 146.946710][ T6491] CPU: 0 PID: 6491 Comm: syz.2.210 Not tainted syzkaller #0 [ 146.954054][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.964345][ T6491] Call Trace: [ 146.967637][ T6491] [ 146.970580][ T6491] dump_stack_lvl+0x18c/0x250 [ 146.975283][ T6491] ? show_regs_print_info+0x20/0x20 [ 146.980497][ T6491] ? load_image+0x420/0x420 [ 146.985023][ T6491] ? __might_sleep+0xe0/0xe0 [ 146.989635][ T6491] ? __lock_acquire+0x7d80/0x7d80 [ 146.994673][ T6491] should_fail_ex+0x394/0x4c0 [ 146.999373][ T6491] should_failslab+0x9/0x20 [ 147.003888][ T6491] slab_pre_alloc_hook+0x59/0x300 [ 147.008931][ T6491] ? sk_prot_alloc+0xe7/0x210 [ 147.013614][ T6491] ? sk_prot_alloc+0xe7/0x210 [ 147.018317][ T6491] __kmem_cache_alloc_node+0x53/0x250 [ 147.023711][ T6491] ? sk_prot_alloc+0xe7/0x210 [ 147.028421][ T6491] __kmalloc+0xa7/0x240 [ 147.032597][ T6491] sk_prot_alloc+0xe7/0x210 [ 147.037111][ T6491] ? sk_alloc+0x24/0x350 [ 147.041378][ T6491] sk_alloc+0x3a/0x350 [ 147.045456][ T6491] ? bpf_ctx_init+0x154/0x190 [ 147.050160][ T6491] bpf_prog_test_run_skb+0x371/0x18f0 [ 147.055565][ T6491] ? __fget_files+0x28/0x460 [ 147.060195][ T6491] ? __fget_files+0x3fc/0x460 [ 147.064903][ T6491] ? cpu_online+0x60/0x60 [ 147.069248][ T6491] bpf_prog_test_run+0x31f/0x390 [ 147.074206][ T6491] __sys_bpf+0x49d/0x890 [ 147.078463][ T6491] ? bpf_link_show_fdinfo+0x560/0x560 [ 147.083869][ T6491] ? lock_chain_count+0x20/0x20 [ 147.088741][ T6491] __x64_sys_bpf+0x7c/0x90 [ 147.093176][ T6491] do_syscall_64+0x55/0xb0 [ 147.097607][ T6491] ? clear_bhb_loop+0x40/0x90 [ 147.102299][ T6491] ? clear_bhb_loop+0x40/0x90 [ 147.106997][ T6491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.112932][ T6491] RIP: 0033:0x7f435499e159 [ 147.117363][ T6491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.136979][ T6491] RSP: 002b:00007f43558de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.145409][ T6491] RAX: ffffffffffffffda RBX: 00007f4354c25fa0 RCX: 00007f435499e159 [ 147.153393][ T6491] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 147.161400][ T6491] RBP: 00007f43558de090 R08: 0000000000000000 R09: 0000000000000000 [ 147.169381][ T6491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.177361][ T6491] R13: 00007f4354c26038 R14: 00007f4354c25fa0 R15: 00007ffed5263218 [ 147.185473][ T6491] [ 147.214105][ T6483] netlink: 'syz.0.207': attribute type 10 has an invalid length. [ 148.026427][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.248141][ T6483] bridge_slave_1: left allmulticast mode [ 148.271732][ T6483] bridge_slave_1: left promiscuous mode [ 148.277972][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.303532][ T6483] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 148.317980][ T6502] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.214'. [ 148.329128][ T6502] bridge_slave_1: default FDB implementation only supports local addresses [ 148.842206][ T6518] netlink: 142592 bytes leftover after parsing attributes in process `syz.1.215'. [ 148.865478][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'. [ 149.051381][ T6521] Â: renamed from ip6gretap0 (while UP) [ 150.750401][ T6525] netlink: 'syz.2.220': attribute type 41 has an invalid length. [ 151.098206][ T6534] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.247774][ T6534] netlink: 14 bytes leftover after parsing attributes in process `syz.0.224'. [ 151.295827][ T6534] hsr_slave_0: left promiscuous mode [ 151.340353][ T6540] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.224'. [ 151.374933][ T6534] hsr_slave_1: left promiscuous mode [ 151.971013][ T6538] netlink: 'syz.1.225': attribute type 10 has an invalid length. [ 151.983032][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.994884][ T6538] bridge_slave_1: left allmulticast mode [ 152.002083][ T6538] bridge_slave_1: left promiscuous mode [ 152.007848][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.021526][ T6538] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 152.054795][ T6550] netlink: 'syz.2.227': attribute type 10 has an invalid length. [ 152.365951][ T6555] netlink: 142516 bytes leftover after parsing attributes in process `syz.1.230'. [ 152.600034][ T6567] Dead loop on virtual device ip6_vti0, fix it urgently! [ 154.644634][ T6587] netlink: 14 bytes leftover after parsing attributes in process `syz.0.249'. [ 154.875249][ T6587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.897957][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.928669][ T6587] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 154.970120][ T6587] bond0 (unregistering): Released all slaves [ 155.027601][ T6586] netlink: 'syz.2.240': attribute type 10 has an invalid length. [ 155.331974][ T6598] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.245'. [ 155.420576][ T6602] netlink: 'syz.3.246': attribute type 3 has an invalid length. [ 155.465946][ T6602] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.246'. [ 155.530823][ T6608] netlink: 'syz.1.248': attribute type 2 has an invalid length. [ 155.571161][ T6609] netlink: 'syz.3.246': attribute type 3 has an invalid length. [ 155.615303][ T6609] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.246'. [ 155.630359][ T6608] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.248'. [ 155.724338][ T6614] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.250'. [ 155.760450][ T6614] bridge_slave_1: default FDB implementation only supports local addresses [ 158.185633][ T6643] Illegal XDP return value 515055784 on prog (id 221) dev N/A, expect packet loss! [ 158.187123][ T6636] netlink: 142516 bytes leftover after parsing attributes in process `syz.1.259'. [ 158.712812][ T6645] netlink: 'syz.3.260': attribute type 22 has an invalid length. [ 158.769133][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 158.862850][ T6644] netlink: 'syz.2.262': attribute type 10 has an invalid length. [ 158.925340][ T6644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.955705][ T6644] team0: Port device bond0 added [ 159.038378][ T6660] netlink: 132 bytes leftover after parsing attributes in process `syz.0.264'. [ 159.294291][ T6668] FAULT_INJECTION: forcing a failure. [ 159.294291][ T6668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.342253][ T6668] CPU: 0 PID: 6668 Comm: syz.1.269 Not tainted syzkaller #0 [ 159.349620][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.359719][ T6668] Call Trace: [ 159.363039][ T6668] [ 159.366006][ T6668] dump_stack_lvl+0x18c/0x250 [ 159.370735][ T6668] ? show_regs_print_info+0x20/0x20 [ 159.375978][ T6668] ? load_image+0x420/0x420 [ 159.380530][ T6668] ? __might_fault+0xaa/0x120 [ 159.385236][ T6668] ? __lock_acquire+0x7d80/0x7d80 [ 159.390289][ T6668] ? __virt_addr_valid+0x10c/0x380 [ 159.395434][ T6668] should_fail_ex+0x394/0x4c0 [ 159.400141][ T6668] _copy_from_user+0x2f/0xe0 [ 159.404750][ T6668] bpf_prog_test_run_xdp+0xd93/0x1140 [ 159.410161][ T6668] ? __lock_acquire+0x7d80/0x7d80 [ 159.415208][ T6668] ? dev_put+0x80/0x80 [ 159.419309][ T6668] ? dev_put+0x80/0x80 [ 159.423392][ T6668] bpf_prog_test_run+0x31f/0x390 [ 159.428350][ T6668] __sys_bpf+0x49d/0x890 [ 159.432609][ T6668] ? bpf_link_show_fdinfo+0x560/0x560 [ 159.438005][ T6668] ? lock_chain_count+0x20/0x20 [ 159.442879][ T6668] __x64_sys_bpf+0x7c/0x90 [ 159.447315][ T6668] do_syscall_64+0x55/0xb0 [ 159.451750][ T6668] ? clear_bhb_loop+0x40/0x90 [ 159.456444][ T6668] ? clear_bhb_loop+0x40/0x90 [ 159.461142][ T6668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.467051][ T6668] RIP: 0033:0x7f641499e159 [ 159.471478][ T6668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.491096][ T6668] RSP: 002b:00007f64158cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.499528][ T6668] RAX: ffffffffffffffda RBX: 00007f6414c25fa0 RCX: 00007f641499e159 [ 159.507513][ T6668] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a [ 159.515493][ T6668] RBP: 00007f64158cb090 R08: 0000000000000000 R09: 0000000000000000 [ 159.523475][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.531475][ T6668] R13: 00007f6414c26038 R14: 00007f6414c25fa0 R15: 00007ffd368359d8 [ 159.539474][ T6668] [ 159.768298][ T6676] netlink: 'syz.1.273': attribute type 10 has an invalid length. [ 159.817993][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 160.405829][ T6686] netlink: 'syz.3.276': attribute type 3 has an invalid length. [ 160.418586][ T6686] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.276'. [ 162.736689][ T6721] syzkaller0: entered promiscuous mode [ 162.756546][ T6721] syzkaller0: entered allmulticast mode [ 164.646729][ T6742] netlink: 142516 bytes leftover after parsing attributes in process `syz.3.293'. [ 165.137892][ T6748] FAULT_INJECTION: forcing a failure. [ 165.137892][ T6748] name failslab, interval 1, probability 0, space 0, times 0 [ 165.157441][ T6748] CPU: 1 PID: 6748 Comm: syz.3.296 Not tainted syzkaller #0 [ 165.164788][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.174876][ T6748] Call Trace: [ 165.178183][ T6748] [ 165.181148][ T6748] dump_stack_lvl+0x18c/0x250 [ 165.185910][ T6748] ? show_regs_print_info+0x20/0x20 [ 165.191154][ T6748] ? load_image+0x420/0x420 [ 165.195861][ T6748] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 165.201885][ T6748] ? __asan_memset+0x22/0x40 [ 165.206514][ T6748] should_fail_ex+0x394/0x4c0 [ 165.211233][ T6748] should_failslab+0x9/0x20 [ 165.215777][ T6748] slab_pre_alloc_hook+0x59/0x300 [ 165.220840][ T6748] ? __debug_object_init+0xec/0x450 [ 165.226079][ T6748] kmem_cache_alloc+0x5a/0x2c0 [ 165.230885][ T6748] ? slab_build_skb+0x28/0x3e0 [ 165.235685][ T6748] slab_build_skb+0x28/0x3e0 [ 165.240398][ T6748] bpf_prog_test_run_skb+0x38f/0x18f0 [ 165.245815][ T6748] ? __fget_files+0x28/0x460 [ 165.250442][ T6748] ? __fget_files+0x3fc/0x460 [ 165.255167][ T6748] ? cpu_online+0x60/0x60 [ 165.259539][ T6748] bpf_prog_test_run+0x31f/0x390 [ 165.264518][ T6748] __sys_bpf+0x49d/0x890 [ 165.268973][ T6748] ? bpf_link_show_fdinfo+0x560/0x560 [ 165.274393][ T6748] ? lock_chain_count+0x20/0x20 [ 165.279380][ T6748] __x64_sys_bpf+0x7c/0x90 [ 165.283827][ T6748] do_syscall_64+0x55/0xb0 [ 165.288281][ T6748] ? clear_bhb_loop+0x40/0x90 [ 165.293003][ T6748] ? clear_bhb_loop+0x40/0x90 [ 165.297722][ T6748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.303661][ T6748] RIP: 0033:0x7f2de799e159 [ 165.308107][ T6748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.327753][ T6748] RSP: 002b:00007f2de87c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 165.336203][ T6748] RAX: ffffffffffffffda RBX: 00007f2de7c25fa0 RCX: 00007f2de799e159 [ 165.344208][ T6748] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 165.352206][ T6748] RBP: 00007f2de87c7090 R08: 0000000000000000 R09: 0000000000000000 [ 165.360206][ T6748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.368210][ T6748] R13: 00007f2de7c26038 R14: 00007f2de7c25fa0 R15: 00007ffc271425f8 [ 165.376325][ T6748] [ 167.015853][ T6754] delete_channel: no stack [ 167.176542][ T6758] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.299'. [ 167.324523][ T6765] netlink: 60 bytes leftover after parsing attributes in process `syz.3.300'. [ 168.700151][ T6760] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.300'. [ 168.919862][ T6768] netlink: 142516 bytes leftover after parsing attributes in process `syz.3.302'. [ 169.259098][ T6782] netlink: 132 bytes leftover after parsing attributes in process `syz.3.306'. [ 169.902459][ T6798] FAULT_INJECTION: forcing a failure. [ 169.902459][ T6798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.942880][ T6798] CPU: 1 PID: 6798 Comm: syz.2.312 Not tainted syzkaller #0 [ 169.950249][ T6798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.960342][ T6798] Call Trace: [ 169.963652][ T6798] [ 169.966613][ T6798] dump_stack_lvl+0x18c/0x250 [ 169.971341][ T6798] ? show_regs_print_info+0x20/0x20 [ 169.976592][ T6798] ? load_image+0x420/0x420 [ 169.981140][ T6798] ? __might_fault+0xaa/0x120 [ 169.985860][ T6798] ? __lock_acquire+0x7d80/0x7d80 [ 169.990931][ T6798] should_fail_ex+0x394/0x4c0 [ 169.995656][ T6798] _copy_to_user+0x2f/0xa0 [ 170.000120][ T6798] bpf_test_finish+0x19f/0x650 [ 170.004933][ T6798] ? dst_hold+0x70/0x70 [ 170.009135][ T6798] ? convert_skb_to___skb+0x420/0x420 [ 170.014552][ T6798] ? __virt_addr_valid+0x10c/0x380 [ 170.019684][ T6798] ? __might_fault+0xaa/0x120 [ 170.019708][ T6798] ? __might_fault+0xaa/0x120 [ 170.019732][ T6798] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 170.019761][ T6798] ? __lock_acquire+0x7d80/0x7d80 [ 170.039565][ T6798] ? dev_put+0x80/0x80 [ 170.043695][ T6798] ? dev_put+0x80/0x80 [ 170.047790][ T6798] bpf_prog_test_run+0x31f/0x390 [ 170.052751][ T6798] __sys_bpf+0x49d/0x890 [ 170.052777][ T6798] ? bpf_link_show_fdinfo+0x560/0x560 [ 170.052812][ T6798] ? lock_chain_count+0x20/0x20 [ 170.052843][ T6798] __x64_sys_bpf+0x7c/0x90 [ 170.052866][ T6798] do_syscall_64+0x55/0xb0 [ 170.052889][ T6798] ? clear_bhb_loop+0x40/0x90 [ 170.052913][ T6798] ? clear_bhb_loop+0x40/0x90 [ 170.052939][ T6798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.052964][ T6798] RIP: 0033:0x7f435499e159 [ 170.052985][ T6798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.053000][ T6798] RSP: 002b:00007f43558de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.053023][ T6798] RAX: ffffffffffffffda RBX: 00007f4354c25fa0 RCX: 00007f435499e159 [ 170.053037][ T6798] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a [ 170.053050][ T6798] RBP: 00007f43558de090 R08: 0000000000000000 R09: 0000000000000000 [ 170.062677][ T6798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.071937][ T6798] R13: 00007f4354c26038 R14: 00007f4354c25fa0 R15: 00007ffed5263218 [ 170.071969][ T6798] [ 170.290521][ T6800] netlink: 142516 bytes leftover after parsing attributes in process `syz.1.314'. [ 170.462137][ T6808] netlink: 'syz.2.315': attribute type 29 has an invalid length. [ 170.475224][ T6808] netlink: 'syz.2.315': attribute type 29 has an invalid length. [ 171.897909][ T6834] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.325'. [ 172.217623][ T6849] Dead loop on virtual device ip6_vti0, fix it urgently! [ 172.500416][ T6856] netlink: 'syz.1.330': attribute type 3 has an invalid length. [ 172.521345][ T6856] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.330'. [ 173.349922][ T6871] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.338'. [ 173.606480][ T6876] FAULT_INJECTION: forcing a failure. [ 173.606480][ T6876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.634142][ T6876] CPU: 1 PID: 6876 Comm: syz.1.340 Not tainted syzkaller #0 [ 173.641508][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.651599][ T6876] Call Trace: [ 173.654908][ T6876] [ 173.657870][ T6876] dump_stack_lvl+0x18c/0x250 [ 173.662596][ T6876] ? show_regs_print_info+0x20/0x20 [ 173.667837][ T6876] ? load_image+0x420/0x420 [ 173.672378][ T6876] ? __might_fault+0xaa/0x120 [ 173.677092][ T6876] ? __lock_acquire+0x7d80/0x7d80 [ 173.682164][ T6876] should_fail_ex+0x394/0x4c0 [ 173.686888][ T6876] _copy_to_user+0x2f/0xa0 [ 173.691343][ T6876] bpf_test_finish+0x19f/0x650 [ 173.696153][ T6876] ? bpf_test_run+0x174/0x870 [ 173.700870][ T6876] ? convert_skb_to___skb+0x420/0x420 [ 173.706297][ T6876] bpf_prog_test_run_skb+0x1135/0x18f0 [ 173.711994][ T6876] ? cpu_online+0x60/0x60 [ 173.716364][ T6876] bpf_prog_test_run+0x31f/0x390 [ 173.721340][ T6876] __sys_bpf+0x49d/0x890 [ 173.725622][ T6876] ? bpf_link_show_fdinfo+0x560/0x560 [ 173.731050][ T6876] ? lock_chain_count+0x20/0x20 [ 173.735947][ T6876] __x64_sys_bpf+0x7c/0x90 [ 173.740401][ T6876] do_syscall_64+0x55/0xb0 [ 173.744853][ T6876] ? clear_bhb_loop+0x40/0x90 [ 173.749573][ T6876] ? clear_bhb_loop+0x40/0x90 [ 173.754287][ T6876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.760217][ T6876] RIP: 0033:0x7f641499e159 [ 173.764662][ T6876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.784308][ T6876] RSP: 002b:00007f64158cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.792794][ T6876] RAX: ffffffffffffffda RBX: 00007f6414c25fa0 RCX: 00007f641499e159 [ 173.800818][ T6876] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 173.808827][ T6876] RBP: 00007f64158cb090 R08: 0000000000000000 R09: 0000000000000000 [ 173.816833][ T6876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.824840][ T6876] R13: 00007f6414c26038 R14: 00007f6414c25fa0 R15: 00007ffd368359d8 [ 173.832869][ T6876] [ 174.183647][ T6887] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.345'. [ 174.233714][ T6887] bridge_slave_1: default FDB implementation only supports local addresses [ 175.076516][ T6908] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.352'. [ 175.413718][ T6915] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.354'. [ 176.898030][ T6942] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.363'. [ 177.583489][ T6970] netlink: 'syz.1.373': attribute type 29 has an invalid length. [ 178.676461][ T6979] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.376'. [ 179.551632][ T6970] netlink: 'syz.1.373': attribute type 29 has an invalid length. [ 179.560246][ T6974] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.375'. [ 180.061368][ T6993] netlink: 14875 bytes leftover after parsing attributes in process `syz.0.382'. [ 180.076766][ T6993] netlink: 48 bytes leftover after parsing attributes in process `syz.0.382'. [ 180.242291][ T7001] netlink: 'syz.0.386': attribute type 29 has an invalid length. [ 180.246977][ T6998] netlink: 'syz.1.384': attribute type 10 has an invalid length. [ 180.254625][ T7001] netlink: 'syz.0.386': attribute type 29 has an invalid length. [ 180.293996][ T6998] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.384'. [ 180.421611][ T7006] netlink: 1030 bytes leftover after parsing attributes in process `syz.0.387'. [ 180.436719][ T7006] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 180.465367][ T7002] netlink: 142516 bytes leftover after parsing attributes in process `syz.3.385'. [ 181.366070][ T7036] FAULT_INJECTION: forcing a failure. [ 181.366070][ T7036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.412696][ T7036] CPU: 0 PID: 7036 Comm: syz.0.396 Not tainted syzkaller #0 [ 181.420059][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.430164][ T7036] Call Trace: [ 181.433493][ T7036] [ 181.436460][ T7036] dump_stack_lvl+0x18c/0x250 [ 181.441181][ T7036] ? show_regs_print_info+0x20/0x20 [ 181.446400][ T7036] ? load_image+0x420/0x420 [ 181.450966][ T7036] ? __might_fault+0xaa/0x120 [ 181.455674][ T7036] ? __lock_acquire+0x7d80/0x7d80 [ 181.460718][ T7036] should_fail_ex+0x394/0x4c0 [ 181.465418][ T7036] _copy_to_user+0x2f/0xa0 [ 181.469849][ T7036] bpf_test_finish+0x25a/0x650 [ 181.474632][ T7036] ? bpf_test_run+0x174/0x870 [ 181.479327][ T7036] ? convert_skb_to___skb+0x420/0x420 [ 181.484726][ T7036] bpf_prog_test_run_skb+0x1135/0x18f0 [ 181.490221][ T7036] ? cpu_online+0x60/0x60 [ 181.494657][ T7036] bpf_prog_test_run+0x31f/0x390 [ 181.499613][ T7036] __sys_bpf+0x49d/0x890 [ 181.503871][ T7036] ? bpf_link_show_fdinfo+0x560/0x560 [ 181.509267][ T7036] ? lock_chain_count+0x20/0x20 [ 181.514145][ T7036] __x64_sys_bpf+0x7c/0x90 [ 181.518581][ T7036] do_syscall_64+0x55/0xb0 [ 181.523015][ T7036] ? clear_bhb_loop+0x40/0x90 [ 181.527710][ T7036] ? clear_bhb_loop+0x40/0x90 [ 181.532403][ T7036] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.538308][ T7036] RIP: 0033:0x7f4adcb9e159 [ 181.542734][ T7036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.562357][ T7036] RSP: 002b:00007f4adda9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 181.570784][ T7036] RAX: ffffffffffffffda RBX: 00007f4adce25fa0 RCX: 00007f4adcb9e159 [ 181.578771][ T7036] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 181.586759][ T7036] RBP: 00007f4adda9c090 R08: 0000000000000000 R09: 0000000000000000 [ 181.594744][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.602725][ T7036] R13: 00007f4adce26038 R14: 00007f4adce25fa0 R15: 00007ffd21db81d8 [ 181.610750][ T7036] [ 181.666648][ T7039] netlink: 142516 bytes leftover after parsing attributes in process `syz.3.398'. [ 181.880526][ T7042] netlink: set zone limit has 8 unknown bytes [ 181.941662][ T7046] netlink: set zone limit has 8 unknown bytes [ 183.855715][ T7054] sit0: entered allmulticast mode [ 183.872987][ T7057] sit0: entered promiscuous mode [ 184.300321][ T7071] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.409'. [ 184.475110][ T7076] netlink: 14875 bytes leftover after parsing attributes in process `syz.2.411'. [ 184.503952][ T7076] netlink: 48 bytes leftover after parsing attributes in process `syz.2.411'. [ 185.312143][ T7105] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.419'. [ 185.557829][ T7112] netlink: 142516 bytes leftover after parsing attributes in process `syz.1.421'. [ 186.372737][ T7138] netlink: 142516 bytes leftover after parsing attributes in process `syz.1.432'. [ 186.561317][ T7142] FAULT_INJECTION: forcing a failure. [ 186.561317][ T7142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.606958][ T7142] CPU: 1 PID: 7142 Comm: syz.1.434 Not tainted syzkaller #0 [ 186.614334][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.624436][ T7142] Call Trace: [ 186.627753][ T7142] [ 186.630722][ T7142] dump_stack_lvl+0x18c/0x250 [ 186.635451][ T7142] ? show_regs_print_info+0x20/0x20 [ 186.640698][ T7142] ? load_image+0x420/0x420 [ 186.645266][ T7142] ? __might_fault+0xaa/0x120 [ 186.649982][ T7142] ? __lock_acquire+0x7d80/0x7d80 [ 186.655062][ T7142] should_fail_ex+0x394/0x4c0 [ 186.659800][ T7142] _copy_to_user+0x2f/0xa0 [ 186.664239][ T7142] bpf_test_finish+0x4e7/0x650 [ 186.669042][ T7142] ? dst_hold+0x70/0x70 [ 186.673214][ T7142] ? convert_skb_to___skb+0x420/0x420 [ 186.678661][ T7142] ? __virt_addr_valid+0x10c/0x380 [ 186.683791][ T7142] ? __might_fault+0xaa/0x120 [ 186.688482][ T7142] ? __might_fault+0xaa/0x120 [ 186.693175][ T7142] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 186.698564][ T7142] ? __lock_acquire+0x7d80/0x7d80 [ 186.703613][ T7142] ? dev_put+0x80/0x80 [ 186.707711][ T7142] ? dev_put+0x80/0x80 [ 186.711798][ T7142] bpf_prog_test_run+0x31f/0x390 [ 186.716753][ T7142] __sys_bpf+0x49d/0x890 [ 186.721100][ T7142] ? bpf_link_show_fdinfo+0x560/0x560 [ 186.726500][ T7142] ? lock_chain_count+0x20/0x20 [ 186.731375][ T7142] __x64_sys_bpf+0x7c/0x90 [ 186.735807][ T7142] do_syscall_64+0x55/0xb0 [ 186.740239][ T7142] ? clear_bhb_loop+0x40/0x90 [ 186.744938][ T7142] ? clear_bhb_loop+0x40/0x90 [ 186.749634][ T7142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.755541][ T7142] RIP: 0033:0x7f641499e159 [ 186.759970][ T7142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.779593][ T7142] RSP: 002b:00007f64158cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 186.788025][ T7142] RAX: ffffffffffffffda RBX: 00007f6414c25fa0 RCX: 00007f641499e159 [ 186.796007][ T7142] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a [ 186.803989][ T7142] RBP: 00007f64158cb090 R08: 0000000000000000 R09: 0000000000000000 [ 186.811970][ T7142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.819952][ T7142] R13: 00007f6414c26038 R14: 00007f6414c25fa0 R15: 00007ffd368359d8 [ 186.827957][ T7142] [ 186.901216][ T7145] netlink: 14 bytes leftover after parsing attributes in process `syz.2.435'. [ 186.969827][ T7145] netlink: get zone limit has 4 unknown bytes [ 187.014545][ T7156] netlink: 'syz.1.438': attribute type 1 has an invalid length. [ 187.024463][ T7156] netlink: 'syz.1.438': attribute type 3 has an invalid length. [ 187.034120][ T7156] netlink: 132 bytes leftover after parsing attributes in process `syz.1.438'. [ 187.309118][ T7164] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.443'. [ 187.314765][ T7160] netlink: 'syz.3.442': attribute type 10 has an invalid length. [ 187.661217][ T7160] team0: Port device geneve1 added [ 187.864206][ T7160] syz.3.442 (7160) used greatest stack depth: 17896 bytes left [ 187.992216][ T7175] Dead loop on virtual device ip6_vti0, fix it urgently! [ 190.419377][ T7213] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.464'. [ 190.934708][ T7215] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.465'. [ 190.955887][ T7215] bridge_slave_1: default FDB implementation only supports local addresses [ 191.102421][ T7222] netlink: 'syz.1.468': attribute type 9 has an invalid length. [ 191.179023][ T7222] netlink: 'syz.1.468': attribute type 23 has an invalid length. [ 191.222791][ T7222] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.468'. [ 191.363861][ T7232] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.471'. [ 191.795981][ T7238] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.473'. [ 192.475395][ T7252] FAULT_INJECTION: forcing a failure. [ 192.475395][ T7252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.516703][ T7252] CPU: 0 PID: 7252 Comm: syz.2.479 Not tainted syzkaller #0 [ 192.524072][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.534174][ T7252] Call Trace: [ 192.537487][ T7252] [ 192.540456][ T7252] dump_stack_lvl+0x18c/0x250 [ 192.545182][ T7252] ? show_regs_print_info+0x20/0x20 [ 192.550429][ T7252] ? load_image+0x420/0x420 [ 192.554979][ T7252] ? __might_fault+0xaa/0x120 [ 192.559702][ T7252] ? __lock_acquire+0x7d80/0x7d80 [ 192.564773][ T7252] ? __virt_addr_valid+0x10c/0x380 [ 192.569932][ T7252] should_fail_ex+0x394/0x4c0 [ 192.574660][ T7252] _copy_to_user+0x2f/0xa0 [ 192.579125][ T7252] bpf_ctx_finish+0x12a/0x200 [ 192.583844][ T7252] ? bpf_test_finish+0x650/0x650 [ 192.588805][ T7252] ? __might_fault+0xaa/0x120 [ 192.593501][ T7252] ? __might_fault+0xaa/0x120 [ 192.598193][ T7252] bpf_prog_test_run_xdp+0x8fc/0x1140 [ 192.603590][ T7252] ? __lock_acquire+0x7d80/0x7d80 [ 192.608640][ T7252] ? dev_put+0x80/0x80 [ 192.612735][ T7252] ? dev_put+0x80/0x80 [ 192.616818][ T7252] bpf_prog_test_run+0x31f/0x390 [ 192.621775][ T7252] __sys_bpf+0x49d/0x890 [ 192.626032][ T7252] ? bpf_link_show_fdinfo+0x560/0x560 [ 192.631429][ T7252] ? lock_chain_count+0x20/0x20 [ 192.636306][ T7252] __x64_sys_bpf+0x7c/0x90 [ 192.640736][ T7252] do_syscall_64+0x55/0xb0 [ 192.645340][ T7252] ? clear_bhb_loop+0x40/0x90 [ 192.650038][ T7252] ? clear_bhb_loop+0x40/0x90 [ 192.654731][ T7252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.660645][ T7252] RIP: 0033:0x7f435499e159 [ 192.665079][ T7252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.685046][ T7252] RSP: 002b:00007f43558de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.693479][ T7252] RAX: ffffffffffffffda RBX: 00007f4354c25fa0 RCX: 00007f435499e159 [ 192.701468][ T7252] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a [ 192.709459][ T7252] RBP: 00007f43558de090 R08: 0000000000000000 R09: 0000000000000000 [ 192.717449][ T7252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.725436][ T7252] R13: 00007f4354c26038 R14: 00007f4354c25fa0 R15: 00007ffed5263218 [ 192.733459][ T7252] [ 192.974687][ T7262] netlink: 'syz.0.482': attribute type 10 has an invalid length. [ 193.008914][ T7265] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.483'. [ 193.153523][ T7267] netlink: 'syz.1.481': attribute type 10 has an invalid length. [ 193.203967][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.440377][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.448547][ T7267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.521945][ T7267] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 193.602960][ T7275] netlink: 'syz.3.488': attribute type 10 has an invalid length. [ 194.633459][ T7302] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.495'. [ 194.695115][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.701990][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.931651][ T7309] Dead loop on virtual device ip6_vti0, fix it urgently! [ 194.973892][ T7310] netlink: 'syz.3.498': attribute type 21 has an invalid length. [ 194.990136][ T7310] netlink: 132 bytes leftover after parsing attributes in process `syz.3.498'. [ 195.108104][ T7311] netlink: 'syz.3.498': attribute type 10 has an invalid length. [ 195.128215][ T7311] netlink: 40 bytes leftover after parsing attributes in process `syz.3.498'. [ 195.166379][ T7311] ipvlan1: entered promiscuous mode [ 195.209428][ T7311] ipvlan1: entered allmulticast mode [ 195.214822][ T7311] veth0_vlan: entered allmulticast mode [ 195.245206][ T7311] bridge0: port 2(ipvlan1) entered blocking state [ 195.262409][ T7311] bridge0: port 2(ipvlan1) entered disabled state [ 195.286277][ T7311] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 195.445346][ T7318] FAULT_INJECTION: forcing a failure. [ 195.445346][ T7318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.460470][ T7318] CPU: 1 PID: 7318 Comm: syz.1.501 Not tainted syzkaller #0 [ 195.467843][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.477949][ T7318] Call Trace: [ 195.481275][ T7318] [ 195.484244][ T7318] dump_stack_lvl+0x18c/0x250 [ 195.488980][ T7318] ? show_regs_print_info+0x20/0x20 [ 195.494243][ T7318] ? load_image+0x420/0x420 [ 195.498800][ T7318] ? __lock_acquire+0x7d80/0x7d80 [ 195.503883][ T7318] ? snprintf+0xe9/0x140 [ 195.508223][ T7318] should_fail_ex+0x394/0x4c0 [ 195.512964][ T7318] _copy_to_user+0x2f/0xa0 [ 195.517433][ T7318] simple_read_from_buffer+0xe7/0x150 [ 195.522854][ T7318] proc_fail_nth_read+0x1e8/0x260 [ 195.528011][ T7318] ? proc_fault_inject_write+0x360/0x360 [ 195.533717][ T7318] ? fsnotify_perm+0x271/0x5e0 [ 195.538533][ T7318] ? proc_fault_inject_write+0x360/0x360 [ 195.544223][ T7318] vfs_read+0x298/0x990 [ 195.548442][ T7318] ? kernel_read+0x1e0/0x1e0 [ 195.553095][ T7318] ? __fget_files+0x28/0x460 [ 195.557735][ T7318] ? __fget_files+0x3fc/0x460 [ 195.562450][ T7318] ? __fdget_pos+0x2a3/0x330 [ 195.567065][ T7318] ? ksys_read+0x74/0x260 [ 195.571413][ T7318] ksys_read+0x151/0x260 [ 195.575679][ T7318] ? vfs_write+0x9a0/0x9a0 [ 195.580113][ T7318] ? lockdep_hardirqs_on+0x98/0x150 [ 195.585326][ T7318] do_syscall_64+0x55/0xb0 [ 195.589755][ T7318] ? clear_bhb_loop+0x40/0x90 [ 195.594450][ T7318] ? clear_bhb_loop+0x40/0x90 [ 195.599142][ T7318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.605061][ T7318] RIP: 0033:0x7f641495e98e [ 195.609576][ T7318] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.629194][ T7318] RSP: 002b:00007f64158cafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.637620][ T7318] RAX: ffffffffffffffda RBX: 00007f64158cb6c0 RCX: 00007f641495e98e [ 195.645602][ T7318] RDX: 000000000000000f RSI: 00007f64158cb0a0 RDI: 0000000000000005 [ 195.653600][ T7318] RBP: 00007f64158cb090 R08: 0000000000000000 R09: 0000000000000000 [ 195.661601][ T7318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.669697][ T7318] R13: 00007f6414c26038 R14: 00007f6414c25fa0 R15: 00007ffd368359d8 [ 195.677710][ T7318] [ 196.659923][ T7333] netlink: 'syz.2.504': attribute type 10 has an invalid length. [ 196.693686][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.768208][ T7333] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.775630][ T7333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.892070][ T7333] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 197.407322][ T7354] netlink: 'syz.1.513': attribute type 21 has an invalid length. [ 197.417372][ T7354] netlink: 132 bytes leftover after parsing attributes in process `syz.1.513'. [ 197.543751][ T7354] netlink: 'syz.1.513': attribute type 10 has an invalid length. [ 197.551895][ T7354] netlink: 40 bytes leftover after parsing attributes in process `syz.1.513'. [ 197.563146][ T7354] ipvlan1: entered promiscuous mode [ 197.568435][ T7354] ipvlan1: entered allmulticast mode [ 197.577254][ T7354] veth0_vlan: entered allmulticast mode [ 197.588685][ T7354] bridge0: port 2(ipvlan1) entered blocking state [ 197.612695][ T7354] bridge0: port 2(ipvlan1) entered disabled state [ 197.627635][ T7354] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 198.234503][ T7357] Ÿë: port 1(ip6gretap0) entered blocking state [ 198.242672][ T7357] Ÿë: port 1(ip6gretap0) entered disabled state [ 198.251844][ T7357] ip6gretap0: entered allmulticast mode [ 198.285601][ T7357] ip6gretap0: entered promiscuous mode [ 200.919136][ T7386] netlink: 'syz.2.525': attribute type 21 has an invalid length. [ 200.940200][ T7386] netlink: 132 bytes leftover after parsing attributes in process `syz.2.525'. [ 201.042556][ T7390] netlink: 'syz.2.525': attribute type 10 has an invalid length. [ 201.072289][ T7390] netlink: 40 bytes leftover after parsing attributes in process `syz.2.525'. [ 201.119191][ T7390] ipvlan1: entered promiscuous mode [ 201.124521][ T7390] ipvlan1: entered allmulticast mode [ 201.190416][ T7390] veth0_vlan: entered allmulticast mode [ 201.251620][ T7390] bridge0: port 2(ipvlan1) entered blocking state [ 201.280377][ T7390] bridge0: port 2(ipvlan1) entered disabled state [ 201.368434][ T7390] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 201.416784][ T7394] netlink: 'syz.0.524': attribute type 10 has an invalid length. [ 201.580281][ T7394] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.879012][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 201.885157][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 201.885189][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 201.891822][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 202.177076][ T7403] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.528'. [ 202.188005][ T7403] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 202.277039][ T7409] FAULT_INJECTION: forcing a failure. [ 202.277039][ T7409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.291814][ T7409] CPU: 1 PID: 7409 Comm: syz.2.532 Not tainted syzkaller #0 [ 202.299151][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.309219][ T7409] Call Trace: [ 202.312541][ T7409] [ 202.315472][ T7409] dump_stack_lvl+0x18c/0x250 [ 202.320159][ T7409] ? show_regs_print_info+0x20/0x20 [ 202.325361][ T7409] ? load_image+0x420/0x420 [ 202.329868][ T7409] ? __might_fault+0xaa/0x120 [ 202.334548][ T7409] ? __lock_acquire+0x7d80/0x7d80 [ 202.339573][ T7409] ? __virt_addr_valid+0x10c/0x380 [ 202.344708][ T7409] should_fail_ex+0x394/0x4c0 [ 202.349447][ T7409] _copy_to_user+0x2f/0xa0 [ 202.354333][ T7409] bpf_ctx_finish+0x17c/0x200 [ 202.359028][ T7409] ? bpf_test_finish+0x650/0x650 [ 202.363969][ T7409] ? __might_fault+0xaa/0x120 [ 202.368661][ T7409] ? __might_fault+0xaa/0x120 [ 202.373365][ T7409] bpf_prog_test_run_xdp+0x8fc/0x1140 [ 202.378785][ T7409] ? __lock_acquire+0x7d80/0x7d80 [ 202.383830][ T7409] ? dev_put+0x80/0x80 [ 202.387918][ T7409] ? dev_put+0x80/0x80 [ 202.392000][ T7409] bpf_prog_test_run+0x31f/0x390 [ 202.396965][ T7409] __sys_bpf+0x49d/0x890 [ 202.401233][ T7409] ? bpf_link_show_fdinfo+0x560/0x560 [ 202.406660][ T7409] ? lock_chain_count+0x20/0x20 [ 202.411531][ T7409] __x64_sys_bpf+0x7c/0x90 [ 202.415987][ T7409] do_syscall_64+0x55/0xb0 [ 202.420424][ T7409] ? clear_bhb_loop+0x40/0x90 [ 202.425115][ T7409] ? clear_bhb_loop+0x40/0x90 [ 202.429810][ T7409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.435707][ T7409] RIP: 0033:0x7f435499e159 [ 202.440123][ T7409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.459731][ T7409] RSP: 002b:00007f43558de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.468148][ T7409] RAX: ffffffffffffffda RBX: 00007f4354c25fa0 RCX: 00007f435499e159 [ 202.476129][ T7409] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a [ 202.484359][ T7409] RBP: 00007f43558de090 R08: 0000000000000000 R09: 0000000000000000 [ 202.492329][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.500315][ T7409] R13: 00007f4354c26038 R14: 00007f4354c25fa0 R15: 00007ffed5263218 [ 202.508318][ T7409] [ 204.744109][ T7427] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.536'. [ 208.097155][ T7454] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.545'. [ 209.664904][ T7470] Dead loop on virtual device ip6_vti0, fix it urgently! [ 212.047817][ T7471] netlink: 'syz.1.549': attribute type 10 has an invalid length. [ 212.057745][ T7482] netlink: 132 bytes leftover after parsing attributes in process `syz.3.555'. [ 212.076953][ T7487] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.556'. [ 212.190264][ T7489] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.557'. [ 212.233860][ T7489] bridge_slave_1: default FDB implementation only supports local addresses [ 215.873613][ T7520] netlink: 14875 bytes leftover after parsing attributes in process `syz.1.567'. [ 215.905860][ T7520] netlink: 48 bytes leftover after parsing attributes in process `syz.1.567'. [ 215.949200][ T7521] netlink: 'syz.3.566': attribute type 10 has an invalid length. [ 215.957019][ T7521] netlink: 156 bytes leftover after parsing attributes in process `syz.3.566'. [ 216.028140][ T7518] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.564'. [ 216.075520][ T7518] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 216.197830][ T7526] netlink: 'syz.2.568': attribute type 21 has an invalid length. [ 216.208556][ T7526] netlink: 132 bytes leftover after parsing attributes in process `syz.2.568'. [ 218.025412][ T7545] netlink: 14875 bytes leftover after parsing attributes in process `syz.3.577'. [ 218.036229][ T7545] netlink: 48 bytes leftover after parsing attributes in process `syz.3.577'. [ 218.312264][ T7556] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.582'. [ 222.306455][ T7582] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.589'. [ 222.636155][ T7603] FAULT_INJECTION: forcing a failure. [ 222.636155][ T7603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.740735][ T7603] CPU: 0 PID: 7603 Comm: syz.1.596 Not tainted syzkaller #0 [ 222.748101][ T7603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.758198][ T7603] Call Trace: [ 222.761522][ T7603] [ 222.764488][ T7603] dump_stack_lvl+0x18c/0x250 [ 222.769306][ T7603] ? show_regs_print_info+0x20/0x20 [ 222.774557][ T7603] ? load_image+0x420/0x420 [ 222.779105][ T7603] ? __might_fault+0xaa/0x120 [ 222.783812][ T7603] ? __lock_acquire+0x7d80/0x7d80 [ 222.788901][ T7603] should_fail_ex+0x394/0x4c0 [ 222.793608][ T7603] _copy_from_iter+0x1cd/0x1290 [ 222.798474][ T7603] ? mark_lock+0x94/0x320 [ 222.802844][ T7603] ? copyout_mc+0x70/0x70 [ 222.807186][ T7603] ? __virt_addr_valid+0x10c/0x380 [ 222.812315][ T7603] ? __virt_addr_valid+0x10c/0x380 [ 222.817443][ T7603] ? __virt_addr_valid+0x10c/0x380 [ 222.822570][ T7603] ? __check_object_size+0x4fc/0xa40 [ 222.827870][ T7603] skb_copy_datagram_from_iter+0xf2/0x6f0 [ 222.833630][ T7603] ? napi_get_frags+0x20/0x150 [ 222.838425][ T7603] ? napi_get_frags+0xbb/0x150 [ 222.843214][ T7603] tun_get_user+0xc99/0x3d30 [ 222.847846][ T7603] ? rcu_read_unlock+0xa0/0xa0 [ 222.852638][ T7603] ? tun_get+0x1c/0x2e0 [ 222.856834][ T7603] ? __lock_acquire+0x7d80/0x7d80 [ 222.861904][ T7603] ? tun_get+0x1c/0x2e0 [ 222.866090][ T7603] tun_chr_write_iter+0x119/0x200 [ 222.871137][ T7603] vfs_write+0x474/0x9a0 [ 222.875400][ T7603] ? file_end_write+0x250/0x250 [ 222.880272][ T7603] ? __fget_files+0x3fc/0x460 [ 222.884978][ T7603] ? __fdget_pos+0x1d8/0x330 [ 222.889580][ T7603] ? ksys_write+0x74/0x260 [ 222.894012][ T7603] ksys_write+0x151/0x260 [ 222.898358][ T7603] ? __ia32_sys_read+0x90/0x90 [ 222.903143][ T7603] ? lockdep_hardirqs_on+0x98/0x150 [ 222.908359][ T7603] do_syscall_64+0x55/0xb0 [ 222.912790][ T7603] ? clear_bhb_loop+0x40/0x90 [ 222.917484][ T7603] ? clear_bhb_loop+0x40/0x90 [ 222.922173][ T7603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.928086][ T7603] RIP: 0033:0x7f641499e159 [ 222.932513][ T7603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.952216][ T7603] RSP: 002b:00007f64158aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 222.960646][ T7603] RAX: ffffffffffffffda RBX: 00007f6414c26090 RCX: 00007f641499e159 [ 222.968629][ T7603] RDX: 0000000000000013 RSI: 0000200000000100 RDI: 0000000000000003 [ 222.976872][ T7603] RBP: 00007f64158aa090 R08: 0000000000000000 R09: 0000000000000000 [ 222.984851][ T7603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.992832][ T7603] R13: 00007f6414c26128 R14: 00007f6414c26090 R15: 00007ffd368359d8 [ 223.000829][ T7603] [ 223.493756][ T7596] netlink: 'syz.0.595': attribute type 10 has an invalid length. [ 224.075449][ T7625] FAULT_INJECTION: forcing a failure. [ 224.075449][ T7625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.107862][ T7625] CPU: 0 PID: 7625 Comm: syz.3.600 Not tainted syzkaller #0 [ 224.115212][ T7625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.125268][ T7625] Call Trace: [ 224.128548][ T7625] [ 224.131479][ T7625] dump_stack_lvl+0x18c/0x250 [ 224.136178][ T7625] ? show_regs_print_info+0x20/0x20 [ 224.141418][ T7625] ? load_image+0x420/0x420 [ 224.145939][ T7625] ? __might_fault+0xaa/0x120 [ 224.150627][ T7625] ? __lock_acquire+0x7d80/0x7d80 [ 224.155678][ T7625] should_fail_ex+0x394/0x4c0 [ 224.160367][ T7625] _copy_from_user+0x2f/0xe0 [ 224.164982][ T7625] kstrtouint_from_user+0xde/0x170 [ 224.170115][ T7625] ? kstrtol_from_user+0x190/0x190 [ 224.175245][ T7625] proc_fail_nth_write+0x8f/0x250 [ 224.180275][ T7625] ? proc_fail_nth_read+0x260/0x260 [ 224.185481][ T7625] ? proc_fail_nth_read+0x260/0x260 [ 224.190679][ T7625] vfs_write+0x299/0x9a0 [ 224.194929][ T7625] ? file_end_write+0x250/0x250 [ 224.199792][ T7625] ? __fget_files+0x28/0x460 [ 224.204400][ T7625] ? __fget_files+0x3fc/0x460 [ 224.209101][ T7625] ? __fdget_pos+0x2a3/0x330 [ 224.213717][ T7625] ? ksys_write+0x74/0x260 [ 224.218145][ T7625] ksys_write+0x151/0x260 [ 224.222480][ T7625] ? __ia32_sys_read+0x90/0x90 [ 224.227252][ T7625] ? lockdep_hardirqs_on+0x98/0x150 [ 224.232451][ T7625] do_syscall_64+0x55/0xb0 [ 224.237047][ T7625] ? clear_bhb_loop+0x40/0x90 [ 224.241753][ T7625] ? clear_bhb_loop+0x40/0x90 [ 224.246550][ T7625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.252445][ T7625] RIP: 0033:0x7f2de795e98e [ 224.256864][ T7625] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 224.276491][ T7625] RSP: 002b:00007f2de87c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 224.284931][ T7625] RAX: ffffffffffffffda RBX: 00007f2de87c76c0 RCX: 00007f2de795e98e [ 224.292902][ T7625] RDX: 0000000000000001 RSI: 00007f2de87c70a0 RDI: 0000000000000004 [ 224.300886][ T7625] RBP: 00007f2de87c7090 R08: 0000000000000000 R09: 0000000000000000 [ 224.308860][ T7625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.316840][ T7625] R13: 00007f2de7c26038 R14: 00007f2de7c25fa0 R15: 00007ffc271425f8 [ 224.324824][ T7625] [ 225.931247][ T7631] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.601'. [ 225.941254][ T7635] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.603'. [ 226.138936][ T7641] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.605'. [ 226.294045][ T7649] netlink: 142592 bytes leftover after parsing attributes in process `syz.0.606'. [ 226.304804][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.606'. [ 230.668519][ T7666] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.613'. [ 230.678572][ T7672] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.614'. [ 231.023885][ T7687] netlink: 142592 bytes leftover after parsing attributes in process `syz.1.618'. [ 231.058847][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 231.147709][ T7689] netlink: 'syz.0.627': attribute type 58 has an invalid length. [ 231.162809][ T7689] netlink: 144 bytes leftover after parsing attributes in process `syz.0.627'. [ 233.297557][ T7707] netlink: 14875 bytes leftover after parsing attributes in process `syz.2.625'. [ 233.336712][ T7707] netlink: 48 bytes leftover after parsing attributes in process `syz.2.625'. [ 233.569374][ T7712] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.636'. [ 233.613695][ T7714] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.628'. [ 234.000848][ T7721] netlink: 142592 bytes leftover after parsing attributes in process `syz.3.630'. [ 234.051322][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.630'. [ 236.466361][ T7740] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.638'. [ 236.686937][ T7761] Dead loop on virtual device ip6_vti0, fix it urgently! [ 237.118362][ T7774] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.650'. [ 237.261274][ T7777] pim6reg1: entered promiscuous mode [ 237.268503][ T7777] pim6reg1: entered allmulticast mode [ 237.596719][ T7784] netlink: 'syz.1.654': attribute type 21 has an invalid length. [ 237.610828][ T7784] netlink: 156 bytes leftover after parsing attributes in process `syz.1.654'. [ 237.716678][ T7788] netlink: 'syz.1.654': attribute type 2 has an invalid length. [ 237.740275][ T7788] netlink: 'syz.1.654': attribute type 8 has an invalid length. [ 237.773372][ T7788] netlink: 132 bytes leftover after parsing attributes in process `syz.1.654'. [ 237.829012][ T7790] netlink: 144 bytes leftover after parsing attributes in process `syz.1.654'. [ 238.287424][ T63] tipc: Subscription rejected, illegal request [ 238.337367][ T7804] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.660'. [ 239.772144][ T7827] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 239.811442][ T7827] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.669'. [ 240.545771][ T7839] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.672'. [ 240.575240][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 245.539049][ T7875] netlink: 'syz.1.681': attribute type 10 has an invalid length. [ 245.612768][ T7875] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 245.957730][ T7893] netlink: 132 bytes leftover after parsing attributes in process `syz.3.687'. [ 246.085997][ T7889] netlink: 'syz.1.686': attribute type 10 has an invalid length. [ 246.121202][ T7895] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.685'. [ 246.854999][ T7902] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.689'. [ 246.969618][ T7910] FAULT_INJECTION: forcing a failure. [ 246.969618][ T7910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.019126][ T7910] CPU: 1 PID: 7910 Comm: syz.0.691 Not tainted syzkaller #0 [ 247.026497][ T7910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.036603][ T7910] Call Trace: [ 247.039923][ T7910] [ 247.042898][ T7910] dump_stack_lvl+0x18c/0x250 [ 247.047634][ T7910] ? show_regs_print_info+0x20/0x20 [ 247.052883][ T7910] ? load_image+0x420/0x420 [ 247.057422][ T7910] ? __might_fault+0xaa/0x120 [ 247.062105][ T7910] ? __lock_acquire+0x7d80/0x7d80 [ 247.067135][ T7910] should_fail_ex+0x394/0x4c0 [ 247.071843][ T7910] _copy_from_user+0x2f/0xe0 [ 247.076435][ T7910] kstrtouint_from_user+0xde/0x170 [ 247.081575][ T7910] ? kstrtol_from_user+0x190/0x190 [ 247.086724][ T7910] proc_fail_nth_write+0x8f/0x250 [ 247.091768][ T7910] ? proc_fail_nth_read+0x260/0x260 [ 247.096977][ T7910] ? proc_fail_nth_read+0x260/0x260 [ 247.102182][ T7910] vfs_write+0x299/0x9a0 [ 247.106430][ T7910] ? file_end_write+0x250/0x250 [ 247.111282][ T7910] ? __fget_files+0x28/0x460 [ 247.115872][ T7910] ? __fget_files+0x3fc/0x460 [ 247.120670][ T7910] ? __fdget_pos+0x2a3/0x330 [ 247.125310][ T7910] ? ksys_write+0x74/0x260 [ 247.129777][ T7910] ksys_write+0x151/0x260 [ 247.134148][ T7910] ? __ia32_sys_read+0x90/0x90 [ 247.138952][ T7910] ? lockdep_hardirqs_on+0x98/0x150 [ 247.144187][ T7910] do_syscall_64+0x55/0xb0 [ 247.148636][ T7910] ? clear_bhb_loop+0x40/0x90 [ 247.153342][ T7910] ? clear_bhb_loop+0x40/0x90 [ 247.158057][ T7910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.163983][ T7910] RIP: 0033:0x7f4adcb5e98e [ 247.168429][ T7910] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 247.188159][ T7910] RSP: 002b:00007f4adda7afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 247.196611][ T7910] RAX: ffffffffffffffda RBX: 00007f4adda7b6c0 RCX: 00007f4adcb5e98e [ 247.204612][ T7910] RDX: 0000000000000001 RSI: 00007f4adda7b0a0 RDI: 0000000000000006 [ 247.212608][ T7910] RBP: 00007f4adda7b090 R08: 0000000000000000 R09: 0000000000000000 [ 247.220608][ T7910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.228604][ T7910] R13: 00007f4adce26128 R14: 00007f4adce26090 R15: 00007ffd21db81d8 [ 247.236624][ T7910] [ 249.657071][ T7933] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.701'. [ 249.667789][ T7937] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.702'. [ 251.664209][ T7976] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.716'. [ 255.759558][ T7986] sit0: entered allmulticast mode [ 255.894193][ T7992] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.720'. [ 256.123734][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.135466][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.650900][ T8002] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 256.872242][ T8008] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.728'. [ 257.751062][ T8034] netlink: 'syz.1.739': attribute type 10 has an invalid length. [ 257.796757][ T8034] netlink: 'syz.1.739': attribute type 4 has an invalid length. [ 257.854064][ T8034] netlink: 116 bytes leftover after parsing attributes in process `syz.1.739'. [ 257.943841][ T8034] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 257.962332][ T8032] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.738'. [ 257.989068][ T8036] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.742'. [ 258.466354][ T8051] Dead loop on virtual device ip6_vti0, fix it urgently! [ 260.002910][ T8060] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.750'. [ 260.031877][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 260.051695][ T8064] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.752'. [ 260.410500][ T8076] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.754'. [ 260.597621][ T8083] veth1_macvtap: left promiscuous mode [ 261.358282][ T8101] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.763'. [ 261.521539][ T8107] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.765'. [ 264.323627][ T8129] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.773'. [ 264.332922][ T8129] bridge_slave_1: default FDB implementation only supports local addresses [ 264.669307][ T8140] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.777'. [ 264.719376][ T8143] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.778'. [ 264.996808][ T8154] netlink: 142592 bytes leftover after parsing attributes in process `syz.2.781'. [ 265.079596][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'. [ 266.568207][ T8174] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.790'. [ 266.737341][ T8190] netlink: 142592 bytes leftover after parsing attributes in process `syz.1.793'. [ 266.747893][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'. [ 266.780056][ T8189] Dead loop on virtual device ip6_vti0, fix it urgently! [ 266.947287][ T8194] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.797'. [ 267.505526][ T8200] syzkaller0: entered promiscuous mode [ 267.538940][ T8200] syzkaller0: entered allmulticast mode [ 271.383028][ T8221] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.804'. [ 271.419594][ T8224] netlink: 'syz.1.805': attribute type 40 has an invalid length. [ 271.800584][ T8247] netlink: 'syz.1.810': attribute type 1 has an invalid length. [ 271.843747][ T8252] netlink: 142592 bytes leftover after parsing attributes in process `syz.0.809'. [ 271.878671][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 272.734262][ T8261] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.813'. [ 274.984000][ T8274] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.817'. [ 275.188000][ T8297] netlink: 'syz.1.826': attribute type 10 has an invalid length. [ 275.372189][ T8304] netlink: 142592 bytes leftover after parsing attributes in process `syz.0.825'. [ 275.381977][ T8301] syzkaller0: entered promiscuous mode [ 275.387498][ T8301] syzkaller0: entered allmulticast mode [ 275.410437][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.825'. [ 275.451893][ T8301] netlink: 'syz.2.827': attribute type 6 has an invalid length. [ 275.470291][ T8301] netlink: 164 bytes leftover after parsing attributes in process `syz.2.827'. [ 276.499387][ T8318] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.834'. [ 276.590897][ T8321] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.835'. [ 276.642316][ T8320] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.835'. [ 277.040517][ T8336] netlink: 142592 bytes leftover after parsing attributes in process `syz.1.839'. [ 277.151638][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.839'. [ 277.608925][ T8328] delete_channel: no stack [ 278.856618][ T8355] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.846'. [ 279.237551][ T8370] netlink: 142592 bytes leftover after parsing attributes in process `syz.2.850'. [ 279.268988][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'. [ 279.705860][ T8376] ref_ctr_offset mismatch. inode: 0x470 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 280.202218][ T8386] netlink: 'syz.0.855': attribute type 3 has an invalid length. [ 280.211056][ T8394] netlink: 'syz.0.855': attribute type 3 has an invalid length. [ 280.220679][ T8394] netlink: 'syz.0.855': attribute type 1 has an invalid length. [ 280.232790][ T8386] netlink: 'syz.0.855': attribute type 1 has an invalid length. [ 280.241088][ T8394] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.855'. [ 280.254590][ T8386] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.855'. [ 280.939006][ T8400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.946666][ T8400] IPv6: NLM_F_CREATE should be set when creating new route [ 280.954017][ T8400] IPv6: NLM_F_CREATE should be set when creating new route [ 280.961329][ T8400] IPv6: NLM_F_CREATE should be set when creating new route [ 281.056716][ T8403] netlink: 'syz.2.860': attribute type 10 has an invalid length. [ 284.043643][ T8425] __nla_validate_parse: 1 callbacks suppressed [ 284.043679][ T8425] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.868'. [ 284.061823][ T8427] netlink: 142592 bytes leftover after parsing attributes in process `syz.2.865'. [ 284.061851][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'. [ 286.806467][ T8457] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.879'. [ 287.269976][ T8475] netlink: 142592 bytes leftover after parsing attributes in process `syz.3.884'. [ 287.305521][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.884'. [ 291.743771][ T8528] netlink: 142592 bytes leftover after parsing attributes in process `syz.0.897'. [ 291.765788][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 292.956106][ T8552] Dead loop on virtual device ip6_vti0, fix it urgently! [ 294.262706][ T8525] bridge_slave_0: left allmulticast mode [ 294.268448][ T8525] bridge_slave_0: left promiscuous mode [ 294.275076][ T8525] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.322398][ T8525] bond0: (slave bridge0): Releasing backup interface [ 294.389061][ T8556] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 294.695215][ T8567] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.907'. [ 294.724493][ T8571] netlink: 152 bytes leftover after parsing attributes in process `syz.2.907'. [ 294.841308][ T8572] netlink: 142592 bytes leftover after parsing attributes in process `syz.1.906'. [ 294.898457][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'. [ 295.219531][ T8571] bond0: (slave bond_slave_0): Releasing backup interface [ 295.229324][ T8573] raw_sendmsg: syz.2.907 forgot to set AF_INET. Fix it! [ 295.230780][ T8571] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 295.685777][ T8581] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 296.275423][ T8601] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.918'. [ 297.424666][ T8606] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.920'. [ 297.475211][ T8611] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.922'. [ 297.707365][ T8614] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.923'. [ 297.744459][ T8619] netlink: 152 bytes leftover after parsing attributes in process `syz.0.923'. [ 297.782134][ T8617] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.925'. [ 297.794848][ T8617] bridge_slave_1: default FDB implementation only supports local addresses [ 297.965010][ T8623] netlink: 56 bytes leftover after parsing attributes in process `syz.2.927'. [ 297.985023][ T8623] delete_channel: no stack [ 298.002355][ T8623] delete_channel: no stack [ 298.013958][ T8623] delete_channel: no stack [ 298.018524][ T8624] netlink: 56 bytes leftover after parsing attributes in process `syz.2.927'. [ 298.032550][ T8623] delete_channel: no stack [ 298.094763][ T8628] Dead loop on virtual device ip6_vti0, fix it urgently! [ 298.414224][ T8634] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.932'. [ 298.825998][ T8643] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.934'. [ 299.365990][ T8654] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.937'. [ 300.412386][ T8654] bond0: (slave bond_slave_0): Releasing backup interface [ 300.481538][ T8654] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 301.514533][ T8678] netlink: 'syz.0.948': attribute type 1 has an invalid length. [ 303.686690][ T8690] __nla_validate_parse: 3 callbacks suppressed [ 303.686731][ T8690] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.951'. [ 303.729967][ T8692] netlink: 152 bytes leftover after parsing attributes in process `syz.1.951'. [ 303.815326][ T8692] bond0: (slave bond_slave_0): Releasing backup interface [ 303.906655][ T8692] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 303.962128][ T8693] netlink: 'syz.2.955': attribute type 10 has an invalid length. [ 304.852377][ T8724] netlink: 40 bytes leftover after parsing attributes in process `syz.1.963'. [ 304.896143][ T8724] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.050745][ T8724] bridge_slave_0 (unregistering): left allmulticast mode [ 305.082471][ T8724] bridge_slave_0 (unregistering): left promiscuous mode [ 305.130436][ T8724] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.530989][ T8734] netlink: 128 bytes leftover after parsing attributes in process `syz.3.967'. [ 305.553724][ T8734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.927418][ T8746] netlink: 152 bytes leftover after parsing attributes in process `syz.2.970'. [ 305.941889][ T8743] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.970'. [ 306.045733][ T8747] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.969'. [ 306.090893][ T8747] bridge_slave_1: default FDB implementation only supports local addresses [ 306.475317][ T8760] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.975'. [ 306.504529][ T8760] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 308.979429][ T8807] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.992'. [ 309.589002][ T8828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.998'. [ 309.701413][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.844311][ T8828] bridge_slave_0 (unregistering): left allmulticast mode [ 309.869336][ T8828] bridge_slave_0 (unregistering): left promiscuous mode [ 309.930053][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.888475][ T8847] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.1003'. [ 313.045022][ T8854] Dead loop on virtual device ip6_vti0, fix it urgently! [ 313.314934][ T8859] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1008'. [ 313.354949][ T8859] bridge_slave_1: default FDB implementation only supports local addresses [ 313.789472][ T8875] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1012'. [ 314.083181][ T8875] netlink: 'syz.3.1012': attribute type 2 has an invalid length. [ 314.125883][ T8875] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1012'. [ 314.156026][ T8879] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.1014'. [ 314.841481][ T8890] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1017'. [ 315.038048][ T8896] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1019'. [ 315.566907][ T8909] netlink: 539 bytes leftover after parsing attributes in process `syz.3.1022'. [ 315.742292][ T8911] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.1024'. [ 315.993153][ T8918] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.1027'. [ 316.362235][ T8918] netlink: 'syz.2.1027': attribute type 2 has an invalid length. [ 316.408226][ T8918] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1027'. [ 316.853597][ T8925] netlink: 142592 bytes leftover after parsing attributes in process `syz.1.1030'. [ 316.924597][ T8933] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1032'. [ 317.563831][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.571474][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.032606][ T8971] netlink: 'syz.0.1044': attribute type 2 has an invalid length. [ 320.175746][ T8981] netlink: 'syz.2.1054': attribute type 10 has an invalid length. [ 320.430729][ T8986] __nla_validate_parse: 11 callbacks suppressed [ 320.430750][ T8986] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1048'. [ 322.173088][ T8997] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1051'. [ 322.283504][ T8997] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1051'. [ 322.342903][ T9001] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 322.415280][ T8994] delete_channel: no stack [ 322.536601][ T9009] netlink: 'syz.2.1056': attribute type 1 has an invalid length. [ 322.545691][ T9009] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1056'. [ 322.949083][ T9014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.956577][ T9014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.017650][ T9014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.038941][ T9014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.074637][ T9014] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 323.084465][ T9014] batman_adv: batadv0: Removing interface: virt_wifi0 [ 323.401077][ T9024] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1060'. [ 323.430167][ T9022] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1060'. [ 323.636752][ T9026] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1061'. [ 323.697457][ T9026] bridge_slave_1: default FDB implementation only supports local addresses [ 324.635007][ T9044] FAULT_INJECTION: forcing a failure. [ 324.635007][ T9044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.673420][ T9044] CPU: 0 PID: 9044 Comm: syz.2.1065 Not tainted syzkaller #0 [ 324.680879][ T9044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.690992][ T9044] Call Trace: [ 324.694311][ T9044] [ 324.697271][ T9044] dump_stack_lvl+0x18c/0x250 [ 324.702005][ T9044] ? show_regs_print_info+0x20/0x20 [ 324.707242][ T9044] ? load_image+0x420/0x420 [ 324.711763][ T9044] ? __lock_acquire+0x7d80/0x7d80 [ 324.716803][ T9044] ? lockdep_hardirqs_on+0x98/0x150 [ 324.722108][ T9044] should_fail_ex+0x394/0x4c0 [ 324.726818][ T9044] _copy_to_user+0x2f/0xa0 [ 324.731341][ T9044] simple_read_from_buffer+0xe7/0x150 [ 324.736729][ T9044] proc_fail_nth_read+0x1e8/0x260 [ 324.741774][ T9044] ? proc_fault_inject_write+0x360/0x360 [ 324.747424][ T9044] ? fsnotify_perm+0x271/0x5e0 [ 324.752204][ T9044] ? proc_fault_inject_write+0x360/0x360 [ 324.757942][ T9044] vfs_read+0x298/0x990 [ 324.762126][ T9044] ? kernel_read+0x1e0/0x1e0 [ 324.766733][ T9044] ? __fget_files+0x28/0x460 [ 324.771345][ T9044] ? __fget_files+0x3fc/0x460 [ 324.776047][ T9044] ? __fdget_pos+0x2a3/0x330 [ 324.780651][ T9044] ? ksys_read+0x74/0x260 [ 324.784998][ T9044] ksys_read+0x151/0x260 [ 324.789267][ T9044] ? vfs_write+0x9a0/0x9a0 [ 324.793704][ T9044] ? lockdep_hardirqs_on+0x98/0x150 [ 324.798953][ T9044] do_syscall_64+0x55/0xb0 [ 324.803392][ T9044] ? clear_bhb_loop+0x40/0x90 [ 324.808093][ T9044] ? clear_bhb_loop+0x40/0x90 [ 324.812793][ T9044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.818706][ T9044] RIP: 0033:0x7f435495e98e [ 324.823151][ T9044] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 324.842767][ T9044] RSP: 002b:00007f43558bcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 324.851199][ T9044] RAX: ffffffffffffffda RBX: 00007f43558bd6c0 RCX: 00007f435495e98e [ 324.859183][ T9044] RDX: 000000000000000f RSI: 00007f43558bd0a0 RDI: 000000000000000b [ 324.867162][ T9044] RBP: 00007f43558bd090 R08: 0000000000000000 R09: 0000000000000000 [ 324.875145][ T9044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.883130][ T9044] R13: 00007f4354c26128 R14: 00007f4354c26090 R15: 00007ffed5263218 [ 324.891131][ T9044] [ 327.120091][ T9057] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1071'. [ 328.954871][ T9089] netlink: 'syz.2.1079': attribute type 21 has an invalid length. [ 328.981377][ T9089] IPv6: NLM_F_CREATE should be specified when creating new route [ 330.646455][ T9111] netlink: 'syz.3.1087': attribute type 21 has an invalid length. [ 331.382550][ T9124] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1091'. [ 331.656382][ T9127] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1092'. [ 331.937692][ T9135] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1095'. [ 333.371006][ T9168] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1106'. [ 333.897612][ T9177] netlink: 'syz.0.1110': attribute type 10 has an invalid length. [ 335.152935][ T9202] netlink: 'syz.1.1117': attribute type 21 has an invalid length. [ 335.179054][ T9202] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1117'. [ 335.227178][ T9206] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1119'. [ 335.797315][ T9222] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1124'. [ 335.828902][ T9222] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 335.909663][ T9227] netlink: 'syz.1.1122': attribute type 6 has an invalid length. [ 335.922841][ T9227] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1122'. [ 336.657539][ T9254] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1132'. [ 340.486748][ T9283] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.1141'. [ 340.510001][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'. [ 340.571413][ T9285] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1143'. [ 340.725327][ T9292] Dead loop on virtual device ip6_vti0, fix it urgently! [ 340.946843][ T9299] netlink: 'syz.0.1149': attribute type 10 has an invalid length. [ 341.467671][ T9308] netlink: 'syz.0.1152': attribute type 10 has an invalid length. [ 341.475952][ T9308] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1152'. [ 341.934209][ T9312] netlink: 'syz.0.1153': attribute type 10 has an invalid length. [ 342.596816][ T9330] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1158'. [ 343.061366][ T9347] netlink: 142516 bytes leftover after parsing attributes in process `syz.3.1163'. [ 343.074394][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 344.628238][ T9357] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1168'. [ 344.855761][ T9366] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1171'. [ 345.250421][ T9375] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.1175'. [ 345.363466][ T9378] netlink: 'syz.1.1176': attribute type 10 has an invalid length. [ 345.383118][ T9378] wlan1: mtu greater than device maximum [ 348.731644][ T9403] netlink: 'syz.3.1182': attribute type 21 has an invalid length. [ 348.752485][ T9403] netlink: 'syz.3.1182': attribute type 7 has an invalid length. [ 348.804725][ T9406] __nla_validate_parse: 1 callbacks suppressed [ 348.804794][ T9406] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1185'. [ 348.863638][ T9403] netlink: 'syz.3.1182': attribute type 10 has an invalid length. [ 349.083216][ T9412] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1187'. [ 349.262553][ T9419] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1190'. [ 349.292544][ T9420] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.1188'. [ 349.303803][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'. [ 349.667963][ T9427] netlink: 'syz.0.1184': attribute type 33 has an invalid length. [ 349.704846][ T9427] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1184'. [ 350.296803][ T9438] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1196'. [ 351.491454][ T9443] netlink: 'syz.1.1198': attribute type 2 has an invalid length. [ 351.506906][ T9443] netlink: 'syz.1.1198': attribute type 8 has an invalid length. [ 351.518026][ T9443] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1198'. [ 351.532683][ T9447] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1199'. [ 351.557001][ T9448] netlink: 'syz.2.1197': attribute type 10 has an invalid length. [ 351.913091][ T9455] netlink: 'syz.1.1202': attribute type 4 has an invalid length. [ 351.921408][ T9455] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1202'. [ 352.195385][ T9461] tap0: tun_chr_ioctl cmd 1074025680 [ 352.218013][ T9471] netlink: 'syz.1.1209': attribute type 21 has an invalid length. [ 352.227379][ T9471] netlink: 'syz.1.1209': attribute type 7 has an invalid length. [ 353.526097][ T9471] team0: Port device geneve1 added [ 354.568604][ T9497] __nla_validate_parse: 5 callbacks suppressed [ 354.568621][ T9497] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.1217'. [ 355.316716][ T9511] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1223'. [ 357.931457][ T9531] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.1227'. [ 357.956385][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'. [ 358.404646][ T9538] validate_nla: 1 callbacks suppressed [ 358.404691][ T9538] netlink: 'syz.3.1231': attribute type 10 has an invalid length. [ 359.431168][ T9560] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.1240'. [ 359.466889][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1240'. [ 359.818819][ T9565] netlink: 142516 bytes leftover after parsing attributes in process `syz.3.1242'. [ 359.841345][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1242'. [ 360.103644][ T9568] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.1243'. [ 360.813464][ T9574] Dead loop on virtual device ip6_vti0, fix it urgently! [ 362.511784][ T9593] netlink: 142516 bytes leftover after parsing attributes in process `syz.3.1253'. [ 362.528979][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1253'. [ 362.637979][ T9595] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1254'. [ 362.874759][ T9601] netlink: 'syz.1.1256': attribute type 21 has an invalid length. [ 363.612975][ T9609] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1266'. [ 363.642563][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'. [ 363.817045][ T9612] netlink: 'syz.1.1259': attribute type 10 has an invalid length. [ 364.119538][ T9615] netlink: 13439 bytes leftover after parsing attributes in process `syz.1.1260'. [ 365.237075][ T9634] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.1269'. [ 365.268945][ T9634] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 365.292844][ T9633] netlink: 'syz.1.1269': attribute type 29 has an invalid length. [ 365.342906][ T9633] netlink: 'syz.1.1269': attribute type 29 has an invalid length. [ 365.408645][ T9639] netlink: 13439 bytes leftover after parsing attributes in process `syz.3.1271'. [ 365.433856][ T9632] netlink: 'syz.1.1269': attribute type 29 has an invalid length. [ 365.458450][ T9643] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1273'. [ 365.521308][ T9644] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.1272'. [ 365.538897][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1272'. [ 365.908890][ T5777] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 365.975188][ T9655] Dead loop on virtual device ip6_vti0, fix it urgently! [ 367.837452][ T9674] netlink: 13439 bytes leftover after parsing attributes in process `syz.0.1284'. [ 368.058812][ T9682] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1288'. [ 368.080481][ T9680] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1287'. [ 368.112324][ T9682] hsr_slave_0: left promiscuous mode [ 368.155867][ T9682] hsr_slave_1: left promiscuous mode [ 368.469218][ T9696] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.1292'. [ 368.507115][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1292'. [ 368.611054][ T9700] netlink: 'syz.1.1295': attribute type 39 has an invalid length. [ 370.919821][ T9733] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1302'. [ 370.920322][ T9736] netlink: 'syz.1.1305': attribute type 21 has an invalid length. [ 370.980614][ T9736] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1305'. [ 371.000781][ T9736] netlink: 'syz.1.1305': attribute type 4 has an invalid length. [ 371.013326][ T9741] netlink: 142516 bytes leftover after parsing attributes in process `syz.3.1304'. [ 371.030609][ T9736] netlink: 'syz.1.1305': attribute type 5 has an invalid length. [ 371.040902][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1304'. [ 371.051654][ T9736] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1305'. [ 371.064950][ T9738] netlink: 'syz.1.1305': attribute type 21 has an invalid length. [ 371.073819][ T9738] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1305'. [ 371.101037][ T9738] netlink: 'syz.1.1305': attribute type 4 has an invalid length. [ 371.129525][ T9738] netlink: 'syz.1.1305': attribute type 5 has an invalid length. [ 371.163618][ T9738] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1305'. [ 371.333369][ T9749] Dead loop on virtual device ip6_vti0, fix it urgently! [ 373.718110][ T5777] Bluetooth: hci2: ISO packet for unknown connection handle 1 [ 374.493531][ T9786] netlink: 'syz.1.1320': attribute type 21 has an invalid length. [ 374.662942][ T9801] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.1322'. [ 374.686096][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1322'. [ 375.526247][ T9815] Dead loop on virtual device ip6_vti0, fix it urgently! [ 376.366811][ T9844] netlink: 142516 bytes leftover after parsing attributes in process `syz.3.1338'. [ 376.378033][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1338'. [ 377.952370][ T9860] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1343'. [ 378.114386][ T9852] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 378.155198][ T9852] syzkaller0: entered promiscuous mode [ 378.165005][ T9852] syzkaller0: entered allmulticast mode [ 379.003910][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.010316][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.357848][ T9878] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.1347'. [ 379.378940][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1347'. [ 380.907488][ T9899] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1356'. [ 381.190286][ T9910] Dead loop on virtual device ip6_vti0, fix it urgently! [ 381.715009][ T9922] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.1362'. [ 381.724943][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1362'. [ 382.610329][ T9937] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1368'. [ 383.502860][ T9951] wg2: entered promiscuous mode [ 383.521061][ T9951] wg2: entered allmulticast mode [ 383.539005][ T9954] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1373'. [ 383.561769][ T9954] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 383.924473][ T9966] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.1376'. [ 383.944143][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1376'. [ 384.353031][ T9970] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1379'. [ 384.425565][ T9972] netlink: 'syz.2.1380': attribute type 29 has an invalid length. [ 384.454550][ T9972] netlink: 'syz.2.1380': attribute type 29 has an invalid length. [ 384.478138][ T9973] netlink: 'syz.2.1380': attribute type 29 has an invalid length. [ 384.591748][ T9972] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1380'. [ 386.445655][ T9980] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1383'. [ 386.540535][ T9984] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1385'. [ 386.555512][ T9984] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 387.978834][T10004] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1391'. [ 388.124185][T10010] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.1390'. [ 388.206892][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 389.953573][T10032] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1398'. [ 390.069151][T10034] netlink: 'syz.1.1399': attribute type 10 has an invalid length. [ 390.203646][T10039] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1406'. [ 390.213519][T10039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1406'. [ 390.884139][T10050] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1403'. [ 391.934552][T10074] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.1412'. [ 391.948134][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1412'. [ 392.987274][T10079] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1414'. [ 393.114917][T10085] netlink: 142516 bytes leftover after parsing attributes in process `syz.1.1421'. [ 393.156327][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'. [ 393.418060][T10090] Dead loop on virtual device ip6_vti0, fix it urgently! [ 394.756921][T10123] netlink: 142516 bytes leftover after parsing attributes in process `syz.3.1431'. [ 394.780058][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1431'. [ 398.482270][T10137] netlink: 'syz.2.1436': attribute type 10 has an invalid length. [ 400.158046][T10159] netlink: 'syz.3.1445': attribute type 2 has an invalid length. [ 400.166348][T10159] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.1445'. [ 400.220467][T10161] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.1443'. [ 400.230029][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1443'. [ 401.942687][T10185] Dead loop on virtual device ip6_vti0, fix it urgently! [ 402.221079][T10197] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.1461'. [ 405.653398][T10216] netlink: 'syz.1.1467': attribute type 10 has an invalid length. [ 406.305887][T10221] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1469'. [ 406.315839][T10221] netlink: zone id is out of range [ 406.321550][T10221] netlink: zone id is out of range [ 406.329698][T10221] netlink: zone id is out of range [ 406.334987][T10221] netlink: zone id is out of range [ 406.342297][T10221] netlink: zone id is out of range [ 406.348306][T10221] netlink: zone id is out of range [ 406.361111][T10221] netlink: zone id is out of range [ 406.368566][T10221] netlink: zone id is out of range [ 406.391962][T10221] netlink: zone id is out of range [ 406.738497][T10226] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1471'. [ 406.763543][T10229] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1471'. [ 406.809440][T10231] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.1473'. [ 407.986802][T10260] IPv6: NLM_F_CREATE should be specified when creating new route [ 408.055629][T10260] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1483'. [ 408.172946][T10262] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.1484'. [ 409.602407][T10277] netlink: 'syz.0.1486': attribute type 2 has an invalid length. [ 409.718450][T10277] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1486'. [ 409.854329][T10283] netlink: 'syz.0.1486': attribute type 2 has an invalid length. [ 409.910515][T10283] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1486'. [ 410.104956][T10292] syz.3.1491[10292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.298308][T10297] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1491'. [ 411.104965][T10304] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1493'. [ 412.415867][T10316] __nla_validate_parse: 1 callbacks suppressed [ 412.415888][T10316] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1497'. [ 412.696522][T10326] net_ratelimit: 332 callbacks suppressed [ 412.696633][T10326] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 413.014619][T10334] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.1505'. [ 413.152265][T10339] Dead loop on virtual device ip6_vti0, fix it urgently! [ 413.204547][T10342] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1507'. [ 413.446111][T10349] netlink: 'syz.3.1510': attribute type 2 has an invalid length. [ 414.169198][T10363] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.1515'. [ 415.600892][T10375] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1518'. [ 416.385284][T10396] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.1525'. [ 417.303989][T10408] Dead loop on virtual device ip6_vti0, fix it urgently! [ 417.775140][T10414] syz.3.1534[10414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.775401][T10414] syz.3.1534[10414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.149415][T10431] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.1537'. [ 420.454641][T10440] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.1538'. [ 420.783388][T10453] Dead loop on virtual device ip6_vti0, fix it urgently! [ 420.933816][T10451] syzkaller0: entered promiscuous mode [ 421.025240][T10451] syzkaller0: entered allmulticast mode [ 421.382588][T10460] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.1548'. [ 424.000792][T10485] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1554'. [ 425.389116][ T5777] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 425.769995][T10502] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.1560'. [ 427.459798][T10530] Dead loop on virtual device ip6_vti0, fix it urgently! [ 427.744566][T10534] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.1568'. [ 427.755047][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1568'. [ 428.932979][T10562] netlink: 142516 bytes leftover after parsing attributes in process `syz.1.1582'. [ 428.956390][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'. [ 429.127329][ T5777] Bluetooth: hci0: ISO packet for unknown connection handle 300 [ 430.824113][T10592] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.1593'. [ 430.835424][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1593'. [ 430.984559][T10573] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1586'. [ 431.384887][T10610] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1601'. [ 431.473993][T10610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.499404][T10612] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1601'. [ 431.918474][T10619] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1603'. [ 433.274613][T10648] Dead loop on virtual device ip6_vti0, fix it urgently! [ 434.678249][T10672] netlink: 'syz.2.1625': attribute type 1 has an invalid length. [ 434.719230][T10672] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1625'. [ 435.688303][T10688] netlink: 'syz.2.1630': attribute type 21 has an invalid length. [ 435.702218][T10688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 435.710502][T10688] IPv6: NLM_F_CREATE should be set when creating new route [ 435.718784][T10688] IPv6: NLM_F_CREATE should be set when creating new route [ 435.726844][T10688] IPv6: NLM_F_CREATE should be set when creating new route [ 435.759325][T10689] netlink: 'syz.2.1630': attribute type 21 has an invalid length. [ 435.782155][T10689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 438.708532][T10739] „: port 1(team0) entered blocking state [ 438.718536][T10739] „: port 1(team0) entered disabled state [ 438.725888][T10739] team0: entered allmulticast mode [ 438.732389][T10739] team_slave_0: entered allmulticast mode [ 438.738553][T10739] team_slave_1: entered allmulticast mode [ 438.747503][T10739] bond0: entered allmulticast mode [ 438.753016][T10739] bond_slave_1: entered allmulticast mode [ 438.771620][T10739] bridge_slave_1: entered allmulticast mode [ 438.783299][T10739] team0: entered promiscuous mode [ 438.811254][T10739] team_slave_0: entered promiscuous mode [ 438.818061][T10739] team_slave_1: entered promiscuous mode [ 438.832420][T10739] bond0: entered promiscuous mode [ 438.842716][T10739] bond_slave_1: entered promiscuous mode [ 438.848611][T10739] bridge_slave_1: entered promiscuous mode [ 439.325020][T10750] delete_channel: no stack [ 439.966197][T10780] Dead loop on virtual device ip6_vti0, fix it urgently! [ 440.469287][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.475977][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.790954][T10820] netlink: 'syz.1.1675': attribute type 4 has an invalid length. [ 441.847713][T10820] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1675'. [ 441.956361][T10832] netlink: 'syz.3.1681': attribute type 8 has an invalid length. [ 441.986443][T10832] netlink: 'syz.3.1681': attribute type 1 has an invalid length. [ 441.994909][T10832] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1681'. [ 442.439495][T10844] syz.1.1684: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 442.527762][T10844] CPU: 0 PID: 10844 Comm: syz.1.1684 Not tainted syzkaller #0 [ 442.535318][T10844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.545421][T10844] Call Trace: [ 442.548799][T10844] [ 442.551798][T10844] dump_stack_lvl+0x18c/0x250 [ 442.556655][T10844] ? show_regs_print_info+0x20/0x20 [ 442.561927][T10844] ? load_image+0x420/0x420 [ 442.566492][T10844] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 442.572987][T10844] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 442.579522][T10844] warn_alloc+0x246/0x340 [ 442.583917][T10844] ? zone_watermark_ok_safe+0x230/0x230 [ 442.589528][T10844] ? kasan_set_track+0x5f/0x70 [ 442.594356][T10844] ? kasan_set_track+0x4e/0x70 [ 442.599149][T10844] ? __kasan_kmalloc+0x8f/0xa0 [ 442.603946][T10844] ? xsk_init_queue+0xad/0x100 [ 442.608900][T10844] ? xsk_setsockopt+0x4c9/0x750 [ 442.613797][T10844] ? do_sock_setsockopt+0x175/0x1a0 [ 442.619149][T10844] ? __x64_sys_setsockopt+0x182/0x200 [ 442.624565][T10844] __vmalloc_node_range+0x129/0x1320 [ 442.629923][T10844] ? free_vm_area+0x50/0x50 [ 442.634500][T10844] vmalloc_user+0x74/0x80 [ 442.638866][T10844] ? xskq_create+0xbf/0x170 [ 442.643397][T10844] xskq_create+0xbf/0x170 [ 442.647764][T10844] xsk_init_queue+0xad/0x100 [ 442.652398][T10844] xsk_setsockopt+0x4c9/0x750 [ 442.657109][T10844] ? xsk_poll+0x670/0x670 [ 442.661477][T10844] ? bpf_lsm_socket_setsockopt+0x4/0x10 [ 442.667089][T10844] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 442.672688][T10844] ? security_socket_setsockopt+0x7e/0xa0 [ 442.678505][T10844] ? xsk_poll+0x670/0x670 [ 442.682881][T10844] do_sock_setsockopt+0x175/0x1a0 [ 442.687949][T10844] ? __fdget+0x180/0x210 [ 442.692438][T10844] __x64_sys_setsockopt+0x182/0x200 [ 442.697679][T10844] do_syscall_64+0x55/0xb0 [ 442.702126][T10844] ? clear_bhb_loop+0x40/0x90 [ 442.706932][T10844] ? clear_bhb_loop+0x40/0x90 [ 442.711656][T10844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.717584][T10844] RIP: 0033:0x7f641499e159 [ 442.722075][T10844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.741744][T10844] RSP: 002b:00007f64158cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 442.750191][T10844] RAX: ffffffffffffffda RBX: 00007f6414c25fa0 RCX: 00007f641499e159 [ 442.758190][T10844] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 442.766186][T10844] RBP: 00007f6414a3506b R08: 0000000000000004 R09: 0000000000000000 [ 442.774185][T10844] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 442.782184][T10844] R13: 00007f6414c26038 R14: 00007f6414c25fa0 R15: 00007ffd368359d8 [ 442.790205][T10844] [ 442.822578][T10844] Mem-Info: [ 442.825816][T10844] active_anon:6947 inactive_anon:0 isolated_anon:0 [ 442.825816][T10844] active_file:18470 inactive_file:40092 isolated_file:0 [ 442.825816][T10844] unevictable:768 dirty:72 writeback:0 [ 442.825816][T10844] slab_reclaimable:10251 slab_unreclaimable:90877 [ 442.825816][T10844] mapped:24538 shmem:1418 pagetables:543 [ 442.825816][T10844] sec_pagetables:0 bounce:0 [ 442.825816][T10844] kernel_misc_reclaimable:0 [ 442.825816][T10844] free:1346639 free_pcp:11843 free_cma:0 [ 442.877856][T10844] Node 0 active_anon:27688kB inactive_anon:0kB active_file:73880kB inactive_file:160164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98152kB dirty:288kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10480kB pagetables:2172kB sec_pagetables:0kB all_unreclaimable? no [ 442.878498][T10850] netlink: 'syz.0.1685': attribute type 4 has an invalid length. [ 442.913663][T10844] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 442.939506][T10850] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1685'. [ 442.991810][T10844] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 443.030182][T10844] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 443.036194][T10844] Node 0 DMA32 free:1480808kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27748kB inactive_anon:0kB active_file:73880kB inactive_file:159344kB unevictable:1536kB writepending:288kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:25260kB local_pcp:19176kB free_cma:0kB [ 443.078377][T10844] lowmem_reserve[]: 0 0 0 0 0 [ 443.084404][T10856] netlink: 'syz.3.1686': attribute type 2 has an invalid length. [ 443.093319][T10856] netlink: 'syz.3.1686': attribute type 8 has an invalid length. [ 443.101224][T10856] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1686'. [ 443.120773][T10844] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 443.217052][T10844] lowmem_reserve[]: 0 0 0 0 0 [ 443.237093][T10844] Node 1 Normal free:3890388kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21792kB local_pcp:8000kB free_cma:0kB [ 443.301308][T10859] Dead loop on virtual device ip6_vti0, fix it urgently! [ 443.340124][T10844] lowmem_reserve[]: 0 0 0 0 0 [ 443.345899][T10844] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 443.364013][T10844] Node 0 DMA32: 1696*4kB (UE) 1703*8kB (UME) 1497*16kB (UM) 1219*32kB (UME) 1481*64kB (UME) 589*128kB (UME) 216*256kB (UME) 83*512kB (UM) 17*1024kB (UM) 11*2048kB (UME) 266*4096kB (UM) = 1480808kB [ 443.384047][T10844] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 443.403122][T10844] Node 1 Normal: 179*4kB (U) 45*8kB (UME) 38*16kB (UME) 52*32kB (UME) 19*64kB (UE) 8*128kB (UME) 1*256kB (U) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3890388kB [ 443.439850][T10844] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 443.458902][T10844] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 443.479012][T10844] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 443.501388][T10844] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 443.527542][T10861] netlink: 'syz.3.1688': attribute type 29 has an invalid length. [ 443.537607][T10844] 59923 total pagecache pages [ 443.537630][T10844] 0 pages in swap cache [ 443.537645][T10844] Free swap = 124996kB [ 443.537658][T10844] Total swap = 124996kB [ 443.537673][T10844] 2097051 pages RAM [ 443.537686][T10844] 0 pages HighMem/MovableOnly [ 443.537699][T10844] 416965 pages reserved [ 443.537710][T10844] 0 pages cma reserved [ 443.648366][T10861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1688'. [ 443.680110][T10861] netlink: 'syz.3.1688': attribute type 29 has an invalid length. [ 443.696192][T10861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1688'. [ 444.339416][T10883] netlink: 'syz.0.1697': attribute type 2 has an invalid length. [ 444.366417][T10883] netlink: 'syz.0.1697': attribute type 8 has an invalid length. [ 444.396053][T10883] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1697'. [ 444.485588][T10885] syzkaller0: entered promiscuous mode [ 444.510776][T10885] syzkaller0: entered allmulticast mode [ 444.522694][T10882] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1698'. [ 444.559740][T10885] syzkaller0: left promiscuous mode [ 444.568920][T10885] syzkaller0: left allmulticast mode [ 444.618301][T10882] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1698'. [ 445.011504][T10911] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1702'. [ 446.638986][T10953] Dead loop on virtual device ip6_vti0, fix it urgently! [ 449.364652][T11006] validate_nla: 4 callbacks suppressed [ 449.364673][T11006] netlink: 'syz.3.1740': attribute type 10 has an invalid length. [ 449.390610][T11006] __nla_validate_parse: 2 callbacks suppressed [ 449.390627][T11006] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1740'. [ 450.332225][T11034] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1751'. [ 450.548433][T11040] Dead loop on virtual device ip6_vti0, fix it urgently! [ 451.308808][T11061] netlink: 'syz.3.1761': attribute type 21 has an invalid length. [ 451.320831][T11061] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1761'. [ 452.503475][T11084] netlink: 'syz.0.1772': attribute type 46 has an invalid length. [ 452.514007][T11084] netlink: 'syz.0.1772': attribute type 46 has an invalid length. [ 452.807586][T11091] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.1774'. [ 453.243355][T11111] netlink: 'syz.0.1781': attribute type 29 has an invalid length. [ 453.259700][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1781'. [ 453.276725][T11111] netlink: 'syz.0.1781': attribute type 29 has an invalid length. [ 453.309110][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1781'. [ 453.748192][T11129] Dead loop on virtual device ip6_vti0, fix it urgently! [ 454.004532][T11131] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.1789'. [ 454.135740][T11138] sit0: entered allmulticast mode [ 454.179834][T11138] sit0: entered promiscuous mode [ 457.869305][T11183] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1807'. [ 458.697972][T11195] netlink: 'syz.1.1810': attribute type 21 has an invalid length. [ 458.720113][T11195] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1810'. [ 459.013648][T11211] netlink: 'syz.2.1817': attribute type 3 has an invalid length. [ 459.071603][T11211] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1817'. [ 459.133645][T11210] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.1819'. [ 459.533326][T11220] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.1829'. [ 460.067938][T11230] C: renamed from team_slave_0 (while UP) [ 460.133678][T11230] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1823'. [ 460.333724][T11239] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1828'. [ 460.456542][T11244] netlink: 'syz.0.1830': attribute type 21 has an invalid length. [ 460.472316][T11244] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1830'. [ 460.878313][T11251] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.1833'. [ 462.151828][T11272] C: renamed from team_slave_0 (while UP) [ 464.397636][T11272] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1841'. [ 464.714961][T11287] mac80211_hwsim hwsim3 ..ăc€±: renamed from wlan1 (while UP) [ 464.913718][T11284] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.1845'. [ 467.868478][T11328] Dead loop on virtual device ip6_vti0, fix it urgently! [ 468.376797][T11338] netlink: 'syz.0.1860': attribute type 1 has an invalid length. [ 468.416015][T11338] netlink: 'syz.0.1860': attribute type 2 has an invalid length. [ 468.452979][T11338] netlink: 'syz.0.1860': attribute type 2 has an invalid length. [ 468.469591][T11338] netlink: 'syz.0.1860': attribute type 3 has an invalid length. [ 468.478552][T11338] netlink: 'syz.0.1860': attribute type 4 has an invalid length. [ 468.501593][T11338] netlink: 'syz.0.1860': attribute type 5 has an invalid length. [ 468.512304][T11338] netlink: 'syz.0.1860': attribute type 6 has an invalid length. [ 468.522743][T11338] netlink: 'syz.0.1860': attribute type 7 has an invalid length. [ 468.531649][T11338] netlink: 'syz.0.1860': attribute type 9 has an invalid length. [ 468.542519][T11338] netlink: 'syz.0.1860': attribute type 10 has an invalid length. [ 468.553039][T11338] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.1860'. [ 468.564086][T11333] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.1860'. [ 468.662642][T11344] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 471.250616][ T11] wlan1: Trigger new scan to find an IBSS to join [ 471.452032][T11401] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.1883'. [ 471.624986][T11402] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1882'. [ 472.391217][T11424] Dead loop on virtual device ip6_vti0, fix it urgently! [ 472.562374][T11431] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1891'. [ 473.968700][T11455] validate_nla: 15 callbacks suppressed [ 473.968723][T11455] netlink: 'syz.2.1895': attribute type 4 has an invalid length. [ 474.154845][T11455] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1895'. [ 474.216353][T11448] netlink: 'syz.1.1894': attribute type 4 has an invalid length. [ 474.243670][T11448] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1894'. [ 475.036390][T11474] can: request_module (can-proto-0) failed. [ 475.366731][ T49] wlan1: Trigger new scan to find an IBSS to join [ 475.717479][T11498] netlink: 'syz.0.1910': attribute type 4 has an invalid length. [ 475.728410][T11498] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1910'. [ 476.415826][ T49] wlan1: Creating new IBSS network, BSSID 5a:68:5c:6c:18:a8 [ 476.426562][ T145] ------------[ cut here ]------------ [ 476.432592][ T145] WARNING: CPU: 1 PID: 145 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3cb/0x430 [ 476.442573][ T145] Modules linked in: [ 476.446533][ T145] CPU: 1 PID: 145 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 476.454647][ T145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.465163][ T145] Workqueue: cfg80211 cfg80211_event_work [ 476.471838][ T145] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 476.478568][ T145] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9e 4a 96 f7 0f 0b eb bf e8 95 4a 96 f7 <0f> 0b eb b6 e8 8c 4a 96 f7 0f 0b e9 e2 fd ff ff e8 80 4a 96 f7 0f [ 476.498606][ T145] RSP: 0018:ffffc90002d5fa40 EFLAGS: 00010293 [ 476.505385][ T145] RAX: ffffffff89f140bb RBX: dffffc0000000000 RCX: ffff88801ab90000 [ 476.513783][ T145] RDX: 0000000000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d3ba0 [ 476.522168][ T145] RBP: ffffc90002d5faf8 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 476.531236][ T145] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: ffff88805d42cd10 [ 476.539729][ T145] R13: ffff88801fffb658 R14: 1ffff920005abf4c R15: 000000000000001f [ 476.547778][ T145] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 476.557134][ T145] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.564149][ T145] CR2: 0000001b2db0fff8 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 476.572525][ T145] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 476.580893][ T145] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 476.589613][ T145] Call Trace: [ 476.592970][ T145] [ 476.596328][ T145] ? trace_rdev_return_void+0x1c0/0x1c0 [ 476.602303][ T145] cfg80211_process_wdev_events+0x396/0x500 [ 476.608526][ T145] cfg80211_process_rdev_events+0xa1/0x110 [ 476.614602][ T145] cfg80211_event_work+0x2f/0x40 [ 476.619863][ T145] ? process_scheduled_works+0x975/0x1600 [ 476.625633][ T145] process_scheduled_works+0xa60/0x1600 [ 476.631559][ T145] ? worker_attach_to_pool+0x370/0x370 [ 476.637065][ T145] ? assign_work+0x3cc/0x5d0 [ 476.642079][ T145] worker_thread+0xa5e/0xfe0 [ 476.646693][ T145] ? _raw_spin_unlock+0x40/0x40 [ 476.652043][ T145] ? __kthread_parkme+0x71/0x1c0 [ 476.657022][ T145] kthread+0x2fa/0x390 [ 476.661459][ T145] ? pr_cont_work+0x550/0x550 [ 476.666166][ T145] ? kthread_blkcg+0xd0/0xd0 [ 476.671221][ T145] ret_from_fork+0x48/0x80 [ 476.676105][ T145] ? kthread_blkcg+0xd0/0xd0 [ 476.681365][ T145] ret_from_fork_asm+0x11/0x20 [ 476.686190][ T145] [ 476.689768][ T145] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 476.697080][ T145] CPU: 1 PID: 145 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 476.704555][ T145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.714618][ T145] Workqueue: cfg80211 cfg80211_event_work [ 476.720386][ T145] Call Trace: [ 476.723686][ T145] [ 476.726635][ T145] dump_stack_lvl+0x18c/0x250 [ 476.731345][ T145] ? show_regs_print_info+0x20/0x20 [ 476.736602][ T145] ? load_image+0x420/0x420 [ 476.741135][ T145] panic+0x2ca/0x720 [ 476.745048][ T145] ? bpf_jit_dump+0xd0/0xd0 [ 476.749573][ T145] ? ret_from_fork_asm+0x11/0x20 [ 476.754527][ T145] __warn+0x2e0/0x470 [ 476.758518][ T145] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 476.764079][ T145] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 476.769639][ T145] report_bug+0x2be/0x4f0 [ 476.774066][ T145] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 476.779624][ T145] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 476.785181][ T145] ? __cfg80211_ibss_joined+0x3cd/0x430 [ 476.790737][ T145] handle_bug+0xcf/0x120 [ 476.794994][ T145] exc_invalid_op+0x1a/0x50 [ 476.799515][ T145] asm_exc_invalid_op+0x1a/0x20 [ 476.804387][ T145] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 476.810575][ T145] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9e 4a 96 f7 0f 0b eb bf e8 95 4a 96 f7 <0f> 0b eb b6 e8 8c 4a 96 f7 0f 0b e9 e2 fd ff ff e8 80 4a 96 f7 0f [ 476.830191][ T145] RSP: 0018:ffffc90002d5fa40 EFLAGS: 00010293 [ 476.836267][ T145] RAX: ffffffff89f140bb RBX: dffffc0000000000 RCX: ffff88801ab90000 [ 476.844302][ T145] RDX: 0000000000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d3ba0 [ 476.852305][ T145] RBP: ffffc90002d5faf8 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 476.860292][ T145] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: ffff88805d42cd10 [ 476.868273][ T145] R13: ffff88801fffb658 R14: 1ffff920005abf4c R15: 000000000000001f [ 476.876264][ T145] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 476.881838][ T145] ? trace_rdev_return_void+0x1c0/0x1c0 [ 476.887412][ T145] cfg80211_process_wdev_events+0x396/0x500 [ 476.893328][ T145] cfg80211_process_rdev_events+0xa1/0x110 [ 476.899143][ T145] cfg80211_event_work+0x2f/0x40 [ 476.904099][ T145] ? process_scheduled_works+0x975/0x1600 [ 476.909833][ T145] process_scheduled_works+0xa60/0x1600 [ 476.915437][ T145] ? worker_attach_to_pool+0x370/0x370 [ 476.920914][ T145] ? assign_work+0x3cc/0x5d0 [ 476.925533][ T145] worker_thread+0xa5e/0xfe0 [ 476.930147][ T145] ? _raw_spin_unlock+0x40/0x40 [ 476.935011][ T145] ? __kthread_parkme+0x71/0x1c0 [ 476.939979][ T145] kthread+0x2fa/0x390 [ 476.944068][ T145] ? pr_cont_work+0x550/0x550 [ 476.948757][ T145] ? kthread_blkcg+0xd0/0xd0 [ 476.953353][ T145] ret_from_fork+0x48/0x80 [ 476.957781][ T145] ? kthread_blkcg+0xd0/0xd0 [ 476.962378][ T145] ret_from_fork_asm+0x11/0x20 [ 476.967175][ T145] [ 476.970440][ T145] Kernel Offset: disabled [ 476.974823][ T145] Rebooting in 86400 seconds..