last executing test programs: 27.369773859s ago: executing program 2 (id=2866): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x104000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0xc0189436, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 26.632709462s ago: executing program 2 (id=2869): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[], 0xffffffffffffffff, 0x1e, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000", 0x4}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000180)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="337e69b2", 0x4}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) 25.565040664s ago: executing program 0 (id=2873): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791000000000000063040000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r0}, 0x8) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r1, 0x0, 0x40004000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90724fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a0002", 0x1b}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) (fail_nth: 5) 24.671330736s ago: executing program 0 (id=2876): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 23.992941265s ago: executing program 0 (id=2882): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00D'], 0x30}, 0x7e8166965e22236a) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x24, &(0x7f0000000000), 0x1}, 0x4008820) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="e6593f97fa0cb4fc1cfaaf4a4a7f13abfef52ef35250520eea5e64c34c28b1fae5c63659c3125da8a3895c2e9d794fd5518bfb880813b5901512421cf1c127c3ab70baefc2bc4674e9abd579b8a291a356ed577fe6bafab0ff6725607d488f997b3dcd97d42dea09bea0dc3e3a257367155998125941a520c04356fe56195106a856cfefb0929278cf20cdedfc21173390a9e877de8fb2c6e9c8776c4aafb50b82e189f658323d63eb51ea52c7182804726b8020bf30bd50ccb73be72dc438c754bb15309b592c38c800d896e95eadb1f112df6ff57f1a3cb9781897e7e483b225b81ac379f6d819a7", 0xe9}, {&(0x7f0000000080)="5b0852ded17a60be3bdc70b2edc2e22fbf9715e1f6fea4d5e52cb9f53394f89c579bc705b761ccc01f5a1e3f27508afbacc625f4f32d48d30764a0e26c5ee7bd36d841047f977f2c75a53d831e4a6d068a4ab8febc3ae44cd833b3202aac083aa6d70aec12d9cf7b91ec6bcda54c35a73d517fea3c928ef617f530e5ee5bf6877b68c118be40a37188bf1404907e1964cec3d2a0e0c4e9aba449c611cd579fc8fec0e7386f94149b6000d274aa43e1a517f40c4d058c3148", 0xb8}], 0x2, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x34, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x46}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x5, [@multicast1]}, @ssrr={0x89, 0xb, 0x27, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x82, 0x8, "5c1cc06489ef"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x126}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @dev={0xac, 0x14, 0x14, 0x35}}}}], 0xb8}, 0x4df6fe611edf6c67) 23.513828744s ago: executing program 0 (id=2884): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xcb4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f97c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000004}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r2}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b00088500000071000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x0, 0x54, 0x0, &(0x7f0000000100)="c9188e9bb95d02ff4284860186dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$sock(r5, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x13, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.523332571s ago: executing program 0 (id=2886): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x104000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0xc0189436, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.225676267s ago: executing program 0 (id=2895): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x800000ecc}, 0x0, 0x0, 0x81}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000440)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x9) syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001e00)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a118000600014002020a600e41b0000900ac00040211000000160012000a00ffc56548035c4c61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb7d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79866835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bff0700b42a9ecbee5de61fccd4c47870ae1d092665c07a81eba034c5f9fbb42dd0f98a952c795c0e9703920723f9000000008af26c8b7b00"/216, 0xd8}], 0x1}, 0x4000000) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe58c9300, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="c40e415161e9e046218c2f73bb0f26030f36335e4f8697d8984e6009aa34bd7e7e6cdf5862a39a0ddafd9e33e45d5f248ca14b038e70b3dc8a62a0fb1e00fb562d25deccbfbf88007b0643407391f2a6cfb5072c5881d4ad4aefc703200972c53fa812f693358b55551b3974c3360e8dea46a7a2f7ebd27324348339e9576032d004a911", 0x84}], 0x1, 0x0, 0xfffffffffffffe88, 0x5865}, 0x20000010) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)=r5) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)="5716f9065265075561d8bc9f0010aeb7af2ccb4eba06ed00000000000000b5921273d03277c983bd814a905096c06f8a3eaa40140000", 0x0, r8}, 0x38) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) 6.058056368s ago: executing program 32 (id=2895): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x800000ecc}, 0x0, 0x0, 0x81}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000440)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x9) syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001e00)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a118000600014002020a600e41b0000900ac00040211000000160012000a00ffc56548035c4c61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb7d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79866835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bff0700b42a9ecbee5de61fccd4c47870ae1d092665c07a81eba034c5f9fbb42dd0f98a952c795c0e9703920723f9000000008af26c8b7b00"/216, 0xd8}], 0x1}, 0x4000000) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe58c9300, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="c40e415161e9e046218c2f73bb0f26030f36335e4f8697d8984e6009aa34bd7e7e6cdf5862a39a0ddafd9e33e45d5f248ca14b038e70b3dc8a62a0fb1e00fb562d25deccbfbf88007b0643407391f2a6cfb5072c5881d4ad4aefc703200972c53fa812f693358b55551b3974c3360e8dea46a7a2f7ebd27324348339e9576032d004a911", 0x84}], 0x1, 0x0, 0xfffffffffffffe88, 0x5865}, 0x20000010) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)=r5) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)="5716f9065265075561d8bc9f0010aeb7af2ccb4eba06ed00000000000000b5921273d03277c983bd814a905096c06f8a3eaa40140000", 0x0, r8}, 0x38) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) 6.03167515s ago: executing program 1 (id=2940): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000300)=0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000085000000500000009500000000010000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x56, 0x1, 0x0, 0xee, 0x0, 0x210e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000600), 0xb}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) getpid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x20040014) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40080d0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000440), 0x4) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, &(0x7f0000000000)={'wlan1\x00', @random="c300"}) 3.842611687s ago: executing program 2 (id=2872): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r0, &(0x7f0000000140)="6bd12791c68f9bc76546b6daf23d513d8306b2ccfa871ed0fc3940d38feb07f2cce30f5de8d776bb56b4c0ae7c11657fd3bf1b537e711c44cf1bae40438548fdbadc3a643c4d9856f86c405adbd3211e73d764d5d60c2292502e6220a4cf1193", &(0x7f0000000040)}, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) 3.674389777s ago: executing program 2 (id=2945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123f51c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e3962dcddef6af1a11972a6b4975022278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd0971d379380bf63432872cfed453870000b219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d3f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d3112874ec51d6fe048ba6866adebab53168770a71ad901ace383e7927de217d6bf74daf41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e490f241999085afabdd529f62ca0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637f99f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec737555392a0b06491cba71f897144910fe050038ec9e475e89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb6179d257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) socket$kcm(0x2, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x10, 0xfffff363, 0x2, 0x14000, r2, 0x80000000, '\x00', r4, 0xffffffffffffffff, 0x3, 0x1ff, 0x4, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x5}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x80000000}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @ldst={0x0, 0x3, 0x0, 0x7, 0x1, 0xffffffffffffffc0, 0x6dc7b99096996271}]}, &(0x7f0000000500)='GPL\x00', 0x270, 0x57, &(0x7f0000000680)=""/87, 0x41100, 0x1, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x4, 0x200, 0x1000}, 0x10, r5, 0x0, 0xa, &(0x7f00000007c0)=[r6, r2, r2, r2, r2, r7], &(0x7f0000000800)=[{0x3, 0x1, 0x3, 0x6}, {0x1, 0x2, 0xc, 0xc}, {0x4, 0x5, 0x6, 0x3}, {0x5, 0x1, 0x4, 0xb}, {0x0, 0x2, 0x10, 0x3}, {0x3, 0x5, 0xe, 0x5}, {0x0, 0x2, 0x0, 0x3}, {0x2, 0x3, 0x10, 0x3}, {0x0, 0x2, 0x9, 0x5}, {0x3, 0x1, 0x6, 0xa}], 0x10, 0x7}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r8, 0x0, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4002, 0x1}, 0x50) perf_event_open(&(0x7f0000001ac0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x14, 0x57}, 0x0, 0x0, 0x510a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)) r9 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x4, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xf16, 0x9}, 0x50, 0x1, 0x0, 0x0, 0x20, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.263756621s ago: executing program 1 (id=2949): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4212, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x95fa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, &(0x7f0000000280), &(0x7f0000000340)='syzkaller\x00', 0x2, 0x68, &(0x7f0000000380)=""/104, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r2], &(0x7f0000000580), 0x10, 0x1}, 0x94) r3 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x40049409, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f00000000c0)=""/189, 0x32, 0xbd, 0x1}, 0x28) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000840)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fd05142603600e12080005007a010401a80016002000034004000000035c0461c902006f940071342e875fab7cb6cec6cf6efb8000a0277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b020193c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca0100350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d83452a92954b43370ed8862ffd5ab1a8f095", 0xd8}], 0x1}, 0x0) socket$kcm(0x23, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0x20}, 0x10, 0x0}, 0x814) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503"], 0x30}, 0x40880) 2.865765814s ago: executing program 4 (id=2950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.315204566s ago: executing program 3 (id=2952): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xcb4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f97c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000004}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r2}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b00088500000071000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$sock(r5, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x13, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.310518686s ago: executing program 4 (id=2961): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b633"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r2}, 0x4) 2.25331027s ago: executing program 2 (id=2953): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4212, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x95fa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, &(0x7f0000000280), &(0x7f0000000340)='syzkaller\x00', 0x2, 0x68, &(0x7f0000000380)=""/104, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r2], &(0x7f0000000580), 0x10, 0x1}, 0x94) r3 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x40049409, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f00000000c0)=""/189, 0x32, 0xbd, 0x1}, 0x28) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000840)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fd05142603600e12080005007a010401a80016002000034004000000035c0461c902006f940071342e875fab7cb6cec6cf6efb8000a0277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b020193c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca0100350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d83452a92954b43370ed8862ffd5ab1a8f095", 0xd8}], 0x1}, 0x0) socket$kcm(0x23, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0x20}, 0x10, 0x0}, 0x814) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503"], 0x30}, 0x40880) 1.973214986s ago: executing program 1 (id=2954): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, &(0x7f00000004c0)=""/192}, 0x20) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r0, &(0x7f0000000140)="6bd12791c68f9bc76546b6daf23d513d8306b2ccfa871ed0fc3940d38feb07f2cce30f5de8d776bb56b4c0ae7c11657fd3bf1b537e711c44cf1bae40438548fdbadc3a643c4d9856f86c405adbd3211e73d764d5d60c2292502e6220a4cf1193", &(0x7f0000000040)}, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) 1.887869751s ago: executing program 4 (id=2955): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7fffffff}, 0x48) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000080)=""/47) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r7) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r9) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x89, 0xc1, &(0x7f0000000200)="37482e6a03f31f44179b55024a3b04c31cb7b9fc2e4905c91cc31ec391bb73cc46c870631c1ce3bb37e6f813247cb8707740f741a335923f133bb584cfbd92509acef2b2d9983814c691b8b26505d408b0a642d017c874dce1066339cec1b5dfb83fb7e3cef12ea1846a45348a2523bc3383509d5317095488c1f01f185f356d9c18884515f523b320", &(0x7f0000000340)=""/193, 0x0, 0x0, 0x2d, 0x8c, &(0x7f00000000c0)="47854ede9678f22fa81a1dfd2d1575163c927fe57b5cddaf231b9eaf1a264cdf8c33a42232377b23a01f4d6dc9", &(0x7f0000000440)="9e490993eb74335c889129e7d3500536547d90551b747fc561c3528320d388518f18bd01f180b11e1ef8dd9284ba7d9f15b8dd05f248c0cecc8b5aa62f51d690a4719a377faed58817d97af296683d26351b93ba458781fc4c716839ca3929cafcd258356d9a9bdb84bf1e9b15eaaeeffdce2b9093a9c5eb3a4f079c57977daba00bf9581bb2afa19b0a8f8e", 0x2, 0x0, 0x4}, 0x50) 1.73153786s ago: executing program 3 (id=2956): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 2) 1.277037127s ago: executing program 1 (id=2957): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c05"], 0x30}, 0x7e8166965e22236a) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x24, &(0x7f0000000000), 0x1}, 0x4008820) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="e6593f97fa0cb4fc1cfaaf4a4a7f13abfef52ef35250520eea5e64c34c28b1fae5c63659c3125da8a3895c2e9d794fd5518bfb880813b5901512421cf1c127c3ab70baefc2bc4674e9abd579b8a291a356ed577fe6bafab0ff6725607d488f997b3dcd97d42dea09bea0dc3e3a257367155998125941a520c04356fe56195106a856cfefb0929278cf20cdedfc21173390a9e877de8fb2c6e9c8776c4aafb50b82e189f658323d63eb51ea52c7182804726b8020bf30bd50ccb73be72dc438c754bb15309b592c38c800d896e95eadb1f112df6ff57f1a3cb9781897e7e483b225b81ac379f6d819a7", 0xe9}, {&(0x7f0000000080)="5b0852ded17a60be3bdc70b2edc2e22fbf9715e1f6fea4d5e52cb9f53394f89c579bc705b761ccc01f5a1e3f27508afbacc625f4f32d48d30764a0e26c5ee7bd36d841047f977f2c75a53d831e4a6d068a4ab8febc3ae44cd833b3202aac083aa6d70aec12d9cf7b91ec6bcda54c35a73d517fea3c928ef617f530e5ee5bf6877b68c118be40a37188bf1404907e1964cec3d2a0e0c4e9aba449c611cd579fc8fec0e7386f94149b6000d274aa43e1a517f40c4d058c3148", 0xb8}], 0x2, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x34, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x46}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x5, [@multicast1]}, @ssrr={0x89, 0xb, 0x27, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x82, 0x8, "5c1cc06489ef"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x126}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x35}}}}], 0xb8}, 0x4df6fe611edf6c67) 903.544688ms ago: executing program 2 (id=2958): bpf$BPF_BTF_GET_NEXT_ID(0x7, &(0x7f0000000680)={0x20ffffff, 0x0}, 0x8) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000004c0), 0x1000, r2}, 0x38) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000280)=[0x0], 0x0, 0xb7, &(0x7f0000000a40)=[{}, {}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x61, 0x8, 0x5a, &(0x7f0000000380)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1000000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000046966f49000000000000000099e7bf4e6e6467be09a4fa3330de5d80ccc6e06371867bc23670e024d6dd2665642bdc104985dd78ba39077614fe7204d22971f57b493b0447d13239e8965723a69b1fd1d7e02fb8305d91253a5e148235e37fae901f3da90c103e24bccf931e5716da3ad5de03689aa7dc8eb47d8ad7b60d2e49fd4ff2ef3c71ebe9044cfdce2c8fa7ce17b972d0f2f22adb037a924b845a95014dd124e959247544e5e3b9b7ea79c368d90f416e2f1ca42f2369696debc12fe6231b812bb2effdf6c2addacc561c6b6c749cb44d57f365035f145f14f00d494871205f2408a651"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0xb, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x0, 0x9}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x5b, &(0x7f0000000940)=""/91, 0x1e00, 0x4, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000640)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x2, 0x1, 0xff, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r2], 0x0, 0x10, 0x6}, 0x94) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="cf", 0x1}], 0x1}, 0x4000) setsockopt$sock_attach_bpf(r7, 0x1, 0x10, &(0x7f0000000300), 0x4) sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='u', 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="78000000000000000000000007000000070fb27f000001e0000002ac1414bb8927cce0000002e0000001e0000001ffffffff00000000ac141423e00000017f000001ac14144300440cc401ac1e010100000fff94040100000bba416311049117549344142cb1e00000010000c6707f000001fffffc01000014000000000000000000000001000000f70c0000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffffffffffff0000000014000000000000000000000001000000090000000000000011000000000000000000000001000000b400000000000000110000000000000000000000010000007a000000000000001c"], 0x118}, 0x0) recvmsg(r7, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x42) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) close(r8) socket$kcm(0x15, 0x5, 0x0) ioctl$TUNATTACHFILTER(r8, 0x401054d5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0x9, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x441e, 0xc2, &(0x7f0000000180)=""/194, 0x41100, 0x0, '\x00', r3, @fallback=0xf, r4, 0x8, &(0x7f0000000540)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xc, 0x7fffffff, 0x100}, 0x10, r0, r9, 0x8, 0x0, &(0x7f00000005c0)=[{0x0, 0x5, 0x10, 0x6}, {0x1, 0x3, 0xc, 0x9}, {0x1, 0x1, 0x5, 0xe}, {0x4, 0x2, 0x8, 0x4}, {0x3, 0x4, 0x4, 0x5}, {0x0, 0x5, 0x6, 0x2}, {0x5, 0x1, 0xa, 0x4}, {0x5, 0x4, 0x20000c, 0x4}], 0x10, 0x7}, 0x94) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x0) 804.162664ms ago: executing program 4 (id=2959): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 772.954316ms ago: executing program 3 (id=2960): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c"], 0x30}, 0x7e8166965e22236a) 754.494867ms ago: executing program 1 (id=2962): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xe}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3", 0x2d}], 0x2}, 0x0) 675.228381ms ago: executing program 4 (id=2963): r0 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x500, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000", 0x5dc}], 0x1}, 0x0) 510.610051ms ago: executing program 3 (id=2964): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4212, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x95fa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, &(0x7f0000000280), &(0x7f0000000340)='syzkaller\x00', 0x2, 0x68, &(0x7f0000000380)=""/104, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r2], &(0x7f0000000580), 0x10, 0x1}, 0x94) r3 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x40049409, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f00000000c0)=""/189, 0x32, 0xbd, 0x1}, 0x28) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000840)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fd05142603600e12080005007a010401a80016002000034004000000035c0461c902006f940071342e875fab7cb6cec6cf6efb8000a0277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b020193c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca0100350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d83452a92954b43370ed8862ffd5ab1a8f095", 0xd8}], 0x1}, 0x0) socket$kcm(0x23, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0), 0x161) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0x20}, 0x10, 0x0}, 0x814) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503"], 0x30}, 0x40880) 203.890729ms ago: executing program 3 (id=2965): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r2}, 0x4) 202.834969ms ago: executing program 4 (id=2966): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 178.64611ms ago: executing program 1 (id=2967): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, &(0x7f00000004c0)=""/192}, 0x20) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r0, &(0x7f0000000140)="6bd12791c68f9bc76546b6daf23d513d8306b2ccfa871ed0fc3940d38feb07f2cce30f5de8d776bb56b4c0ae7c11657fd3bf1b537e711c44cf1bae40438548fdbadc3a643c4d9856f86c405adbd3211e73d764d5d60c2292502e6220a4cf1193", &(0x7f0000000040)}, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) 0s ago: executing program 3 (id=2968): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000ef000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): e name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 308.603995][ T9295] Call Trace: [ 308.607312][ T9295] [ 308.610282][ T9295] dump_stack_lvl+0x188/0x250 [ 308.615003][ T9295] ? show_regs_print_info+0x20/0x20 [ 308.620258][ T9295] ? load_image+0x400/0x400 [ 308.624931][ T9295] should_fail+0x38c/0x4c0 [ 308.629399][ T9295] should_failslab+0x5/0x20 [ 308.633946][ T9295] slab_pre_alloc_hook+0x51/0xc0 [ 308.638930][ T9295] kmem_cache_alloc_trace+0x47/0x2a0 [ 308.644262][ T9295] ? sctp_add_bind_addr+0x89/0x350 [ 308.649417][ T9295] sctp_add_bind_addr+0x89/0x350 [ 308.654412][ T9295] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 308.660096][ T9295] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 308.666216][ T9295] ? sctp_v6_is_any+0x60/0x70 [ 308.670937][ T9295] ? sctp_copy_one_addr+0x93/0x660 [ 308.676202][ T9295] sctp_bind_addr_copy+0xaf/0x3c0 [ 308.681272][ T9295] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 308.687651][ T9295] sctp_connect_new_asoc+0x2f5/0x6a0 [ 308.692979][ T9295] ? __sctp_connect+0xd80/0xd80 [ 308.697873][ T9295] ? __local_bh_enable_ip+0x136/0x1c0 [ 308.703285][ T9295] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 308.708871][ T9295] ? security_sctp_bind_connect+0x85/0xb0 [ 308.714741][ T9295] sctp_sendmsg+0x158d/0x2900 [ 308.719475][ T9295] ? aa_sk_perm+0x7dc/0x910 [ 308.724020][ T9295] ? sctp_getsockopt+0x8a0/0x8a0 [ 308.729025][ T9295] ? aa_af_perm+0x340/0x340 [ 308.733575][ T9295] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 308.740046][ T9295] ? sock_rps_record_flow+0x17/0x3b0 [ 308.745380][ T9295] ? inet_sendmsg+0xe5/0x2f0 [ 308.750014][ T9295] ? inet_send_prepare+0x260/0x260 [ 308.755160][ T9295] ____sys_sendmsg+0x5b7/0x8f0 [ 308.759979][ T9295] ? __sys_sendmsg_sock+0x30/0x30 [ 308.765054][ T9295] ? import_iovec+0x6f/0xa0 [ 308.769603][ T9295] ___sys_sendmsg+0x236/0x2e0 [ 308.774326][ T9295] ? __sys_sendmsg+0x2a0/0x2a0 [ 308.779143][ T9295] ? vfs_write+0x8b2/0xd60 [ 308.783623][ T9295] __se_sys_sendmsg+0x1af/0x290 [ 308.788535][ T9295] ? __x64_sys_sendmsg+0x80/0x80 [ 308.793520][ T9295] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 308.799578][ T9295] ? lockdep_hardirqs_on+0x94/0x140 [ 308.804833][ T9295] do_syscall_64+0x4c/0xa0 [ 308.809291][ T9295] ? clear_bhb_loop+0x30/0x80 [ 308.814004][ T9295] ? clear_bhb_loop+0x30/0x80 [ 308.818815][ T9295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 308.824934][ T9295] RIP: 0033:0x7ff777359f79 [ 308.829391][ T9295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.849178][ T9295] RSP: 002b:00007ff7755b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.858044][ T9295] RAX: ffffffffffffffda RBX: 00007ff7775d3fa0 RCX: 00007ff777359f79 [ 308.866062][ T9295] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 308.874084][ T9295] RBP: 00007ff7755b4090 R08: 0000000000000000 R09: 0000000000000000 [ 308.882103][ T9295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.890126][ T9295] R13: 00007ff7775d4038 R14: 00007ff7775d3fa0 R15: 00007ffc0401daf8 [ 308.898186][ T9295] [ 309.813804][ T4281] tipc: Subscription rejected, illegal request [ 311.005783][ T9344] FAULT_INJECTION: forcing a failure. [ 311.005783][ T9344] name failslab, interval 1, probability 0, space 0, times 0 [ 311.075774][ T9344] CPU: 0 PID: 9344 Comm: syz.0.1646 Not tainted syzkaller #0 [ 311.083218][ T9344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 311.093326][ T9344] Call Trace: [ 311.096645][ T9344] [ 311.099613][ T9344] dump_stack_lvl+0x188/0x250 [ 311.104336][ T9344] ? show_regs_print_info+0x20/0x20 [ 311.109573][ T9344] ? load_image+0x400/0x400 [ 311.114140][ T9344] ? mark_lock+0x94/0x320 [ 311.118509][ T9344] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 311.124544][ T9344] should_fail+0x38c/0x4c0 [ 311.129016][ T9344] should_failslab+0x5/0x20 [ 311.133557][ T9344] slab_pre_alloc_hook+0x51/0xc0 [ 311.138535][ T9344] kmem_cache_alloc_trace+0x47/0x2a0 [ 311.143854][ T9344] ? sctp_add_bind_addr+0x89/0x350 [ 311.149029][ T9344] sctp_add_bind_addr+0x89/0x350 [ 311.154015][ T9344] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 311.159683][ T9344] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 311.165881][ T9344] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 311.171999][ T9344] ? sctp_copy_one_addr+0x93/0x660 [ 311.177162][ T9344] sctp_bind_addr_copy+0xaf/0x3c0 [ 311.182226][ T9344] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 311.188806][ T9344] sctp_connect_new_asoc+0x2f5/0x6a0 [ 311.194137][ T9344] ? __sctp_connect+0xd80/0xd80 [ 311.199039][ T9344] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 311.204625][ T9344] ? security_sctp_bind_connect+0x85/0xb0 [ 311.210389][ T9344] sctp_sendmsg+0x158d/0x2900 [ 311.215137][ T9344] ? sctp_getsockopt+0x8a0/0x8a0 [ 311.220116][ T9344] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 311.226309][ T9344] ? lockdep_hardirqs_on+0x94/0x140 [ 311.231542][ T9344] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 311.237739][ T9344] ? sock_rps_record_flow+0x17/0x3b0 [ 311.243073][ T9344] ? inet_sendmsg+0x78/0x2f0 [ 311.247702][ T9344] ? inet_send_prepare+0x260/0x260 [ 311.252853][ T9344] ____sys_sendmsg+0x5b7/0x8f0 [ 311.257679][ T9344] ? __sys_sendmsg_sock+0x30/0x30 [ 311.262761][ T9344] ? import_iovec+0x6f/0xa0 [ 311.267315][ T9344] ___sys_sendmsg+0x236/0x2e0 [ 311.272083][ T9344] ? __sys_sendmsg+0x2a0/0x2a0 [ 311.276920][ T9344] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 311.283600][ T9344] __se_sys_sendmsg+0x1af/0x290 [ 311.288507][ T9344] ? __x64_sys_sendmsg+0x80/0x80 [ 311.293501][ T9344] ? syscall_enter_from_user_mode+0x2a/0x70 [ 311.299453][ T9344] do_syscall_64+0x4c/0xa0 [ 311.304109][ T9344] ? clear_bhb_loop+0x30/0x80 [ 311.308824][ T9344] ? clear_bhb_loop+0x30/0x80 [ 311.313535][ T9344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 311.319898][ T9344] RIP: 0033:0x7ff777359f79 [ 311.324349][ T9344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.344112][ T9344] RSP: 002b:00007ff7755b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.352691][ T9344] RAX: ffffffffffffffda RBX: 00007ff7775d3fa0 RCX: 00007ff777359f79 [ 311.360706][ T9344] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 311.368938][ T9344] RBP: 00007ff7755b4090 R08: 0000000000000000 R09: 0000000000000000 [ 311.377077][ T9344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 311.385097][ T9344] R13: 00007ff7775d4038 R14: 00007ff7775d3fa0 R15: 00007ffc0401daf8 [ 311.393131][ T9344] [ 312.325262][ T9373] netlink: 144304 bytes leftover after parsing attributes in process `syz.2.1657'. [ 313.484050][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 313.566085][ T9405] raw_sendmsg: syz.0.1668 forgot to set AF_INET. Fix it! [ 314.837173][ T9434] netlink: 'syz.4.1681': attribute type 21 has an invalid length. [ 314.865888][ T9434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 314.873254][ T9434] IPv6: NLM_F_CREATE should be set when creating new route [ 314.880682][ T9434] IPv6: NLM_F_CREATE should be set when creating new route [ 314.887999][ T9434] IPv6: NLM_F_CREATE should be set when creating new route [ 315.469511][ T9457] FAULT_INJECTION: forcing a failure. [ 315.469511][ T9457] name failslab, interval 1, probability 0, space 0, times 0 [ 315.498920][ T9457] CPU: 1 PID: 9457 Comm: syz.3.1689 Not tainted syzkaller #0 [ 315.506363][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 315.516586][ T9457] Call Trace: [ 315.519905][ T9457] [ 315.522869][ T9457] dump_stack_lvl+0x188/0x250 [ 315.527606][ T9457] ? show_regs_print_info+0x20/0x20 [ 315.532864][ T9457] ? load_image+0x400/0x400 [ 315.537438][ T9457] ? __might_sleep+0xf0/0xf0 [ 315.542072][ T9457] ? __lock_acquire+0x7d10/0x7d10 [ 315.547229][ T9457] ? perf_trace_lock+0xe4/0x390 [ 315.552115][ T9457] should_fail+0x38c/0x4c0 [ 315.556566][ T9457] should_failslab+0x5/0x20 [ 315.561098][ T9457] slab_pre_alloc_hook+0x51/0xc0 [ 315.566058][ T9457] kmem_cache_alloc_node+0x47/0x2d0 [ 315.571281][ T9457] ? __alloc_skb+0xf4/0x750 [ 315.575814][ T9457] __alloc_skb+0xf4/0x750 [ 315.580285][ T9457] alloc_skb_with_frags+0xa7/0x730 [ 315.585417][ T9457] ? mark_lock+0x94/0x320 [ 315.589777][ T9457] sock_alloc_send_pskb+0x87f/0x9a0 [ 315.595019][ T9457] ? sock_kzfree_s+0x50/0x50 [ 315.599649][ T9457] tun_get_user+0x7c8/0x3a70 [ 315.604814][ T9457] ? tun_ring_recv+0xc40/0xc40 [ 315.609731][ T9457] ? rcu_lock_release+0x5/0x20 [ 315.614738][ T9457] ? __lock_acquire+0x7d10/0x7d10 [ 315.619800][ T9457] tun_chr_write_iter+0x112/0x1e0 [ 315.624848][ T9457] vfs_write+0x745/0xd60 [ 315.629133][ T9457] ? file_end_write+0x250/0x250 [ 315.634011][ T9457] ? __fget_files+0x40f/0x480 [ 315.638719][ T9457] ? __fdget_pos+0x1e2/0x370 [ 315.643321][ T9457] ? ksys_write+0x71/0x260 [ 315.647784][ T9457] ksys_write+0x152/0x260 [ 315.652133][ T9457] ? __ia32_sys_read+0x80/0x80 [ 315.656915][ T9457] ? lockdep_hardirqs_on+0x94/0x140 [ 315.662131][ T9457] do_syscall_64+0x4c/0xa0 [ 315.666561][ T9457] ? clear_bhb_loop+0x30/0x80 [ 315.671258][ T9457] ? clear_bhb_loop+0x30/0x80 [ 315.675951][ T9457] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 315.681861][ T9457] RIP: 0033:0x7f75cbca6f79 [ 315.686295][ T9457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.705914][ T9457] RSP: 002b:00007f75c9f01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 315.714347][ T9457] RAX: ffffffffffffffda RBX: 00007f75cbf20fa0 RCX: 00007f75cbca6f79 [ 315.722336][ T9457] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 315.730320][ T9457] RBP: 00007f75c9f01090 R08: 0000000000000000 R09: 0000000000000000 [ 315.738307][ T9457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.746299][ T9457] R13: 00007f75cbf21038 R14: 00007f75cbf20fa0 R15: 00007ffdca9da798 [ 315.754311][ T9457] [ 315.983532][ T9468] netlink: 'syz.3.1693': attribute type 1 has an invalid length. [ 316.065243][ T9468] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1693'. [ 316.204987][ T9468] netlink: 'syz.3.1693': attribute type 23 has an invalid length. [ 318.399535][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.410336][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.644586][ T9535] netlink: 'syz.0.1715': attribute type 21 has an invalid length. [ 319.652529][ T9535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.659833][ T9535] IPv6: NLM_F_CREATE should be set when creating new route [ 319.667148][ T9535] IPv6: NLM_F_CREATE should be set when creating new route [ 320.463978][ T9566] netlink: 'syz.3.1726': attribute type 10 has an invalid length. [ 320.473518][ T9566] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.1726'. [ 320.488462][ T9566] openvswitch: netlink: Flow key attr not present in new flow. [ 320.939629][ T9581] syz.1.1732[9581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.939801][ T9581] syz.1.1732[9581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.964811][ T9576] netlink: 'syz.2.1731': attribute type 21 has an invalid length. [ 321.045848][ T9576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.124329][ T9579] netlink: 'syz.3.1728': attribute type 7 has an invalid length. [ 321.173811][ T9585] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1732'. [ 321.557288][ T9599] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1739'. [ 322.563785][ T9619] netlink: 'syz.1.1746': attribute type 21 has an invalid length. [ 322.608107][ T9619] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 324.032988][ T9659] netlink: 'syz.3.1763': attribute type 21 has an invalid length. [ 324.090020][ T9659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 324.477659][ T9671] syz.0.1768[9671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.477763][ T9671] syz.0.1768[9671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.632231][ T9672] bridge0: port 4(veth1_virt_wifi) entered blocking state [ 324.664397][ T9672] bridge0: port 4(veth1_virt_wifi) entered disabled state [ 324.672438][ T9671] FAULT_INJECTION: forcing a failure. [ 324.672438][ T9671] name failslab, interval 1, probability 0, space 0, times 0 [ 324.774410][ T9671] CPU: 1 PID: 9671 Comm: syz.0.1768 Not tainted syzkaller #0 [ 324.781863][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 324.791953][ T9671] Call Trace: [ 324.795259][ T9671] [ 324.798218][ T9671] dump_stack_lvl+0x188/0x250 [ 324.802941][ T9671] ? show_regs_print_info+0x20/0x20 [ 324.808176][ T9671] ? load_image+0x400/0x400 [ 324.812720][ T9671] ? __might_sleep+0xf0/0xf0 [ 324.817343][ T9671] ? __lock_acquire+0x7d10/0x7d10 [ 324.822858][ T9671] should_fail+0x38c/0x4c0 [ 324.827332][ T9671] should_failslab+0x5/0x20 [ 324.831877][ T9671] slab_pre_alloc_hook+0x51/0xc0 [ 324.836859][ T9671] __kmalloc_node+0x6e/0x3b0 [ 324.841494][ T9671] ? kvmalloc_node+0x84/0x130 [ 324.846222][ T9671] kvmalloc_node+0x84/0x130 [ 324.850775][ T9671] map_update_elem+0x2ff/0x770 [ 324.855595][ T9671] __sys_bpf+0x46b/0x6f0 [ 324.859884][ T9671] ? bpf_link_show_fdinfo+0x380/0x380 [ 324.865311][ T9671] ? vtime_user_exit+0x2c8/0x3e0 [ 324.870306][ T9671] __x64_sys_bpf+0x78/0x90 [ 324.874774][ T9671] do_syscall_64+0x4c/0xa0 [ 324.879232][ T9671] ? clear_bhb_loop+0x30/0x80 [ 324.883948][ T9671] ? clear_bhb_loop+0x30/0x80 [ 324.888661][ T9671] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 324.896320][ T9671] RIP: 0033:0x7ff777359f79 [ 324.901255][ T9671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.921455][ T9671] RSP: 002b:00007ff7755b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.929912][ T9671] RAX: ffffffffffffffda RBX: 00007ff7775d3fa0 RCX: 00007ff777359f79 [ 324.937929][ T9671] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000002 [ 324.945943][ T9671] RBP: 00007ff7755b4090 R08: 0000000000000000 R09: 0000000000000000 [ 324.953968][ T9671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.962056][ T9671] R13: 00007ff7775d4038 R14: 00007ff7775d3fa0 R15: 00007ffc0401daf8 [ 324.970081][ T9671] [ 325.900621][ T9695] netlink: 'syz.2.1776': attribute type 21 has an invalid length. [ 326.024714][ T9695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.571257][ T9710] syz.0.1782[9710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.571366][ T9710] syz.0.1782[9710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.011219][ T9724] netlink: 'syz.4.1784': attribute type 10 has an invalid length. [ 327.130609][ T9724] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1784'. [ 327.163463][ T9724] batman_adv: batadv0: Adding interface: virt_wifi0 [ 327.170780][ T9724] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.233119][ T9724] batman_adv: batadv0: Interface activated: virt_wifi0 [ 327.429287][ T9735] netlink: 'syz.2.1790': attribute type 21 has an invalid length. [ 327.482804][ T9735] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 327.829812][ T9746] netlink: 'syz.2.1803': attribute type 21 has an invalid length. [ 327.857869][ T9746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.353962][ T9757] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1796'. [ 329.487340][ T9791] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1809'. [ 329.658233][ T9793] netlink: 'syz.1.1808': attribute type 21 has an invalid length. [ 329.742183][ T9793] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 330.710421][ T9824] netlink: 'syz.1.1821': attribute type 21 has an invalid length. [ 330.785703][ T9824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 332.271490][ T9872] netlink: 'syz.3.1833': attribute type 10 has an invalid length. [ 332.430925][ T9872] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1833'. [ 332.745373][ T9872] batman_adv: batadv0: Adding interface: virt_wifi0 [ 332.840139][ T9872] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.964481][ T9872] batman_adv: batadv0: Interface activated: virt_wifi0 [ 333.020240][ T9876] bridge0: port 4(veth1_virt_wifi) entered blocking state [ 333.057168][ T9876] bridge0: port 4(veth1_virt_wifi) entered disabled state [ 333.483586][ T9901] FAULT_INJECTION: forcing a failure. [ 333.483586][ T9901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.522383][ T9901] CPU: 1 PID: 9901 Comm: syz.0.1848 Not tainted syzkaller #0 [ 333.529878][ T9901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 333.539973][ T9901] Call Trace: [ 333.543434][ T9901] [ 333.546404][ T9901] dump_stack_lvl+0x188/0x250 [ 333.551143][ T9901] ? show_regs_print_info+0x20/0x20 [ 333.556395][ T9901] ? load_image+0x400/0x400 [ 333.560959][ T9901] ? __lock_acquire+0x7d10/0x7d10 [ 333.566042][ T9901] should_fail+0x38c/0x4c0 [ 333.570511][ T9901] _copy_from_user+0x2e/0x170 [ 333.575357][ T9901] iovec_from_user+0x142/0x370 [ 333.580181][ T9901] __import_iovec+0x70/0x490 [ 333.584862][ T9901] import_iovec+0x6f/0xa0 [ 333.589352][ T9901] ___sys_sendmsg+0x1fd/0x2e0 [ 333.594082][ T9901] ? __sys_sendmsg+0x2a0/0x2a0 [ 333.598981][ T9901] ? trace_event_raw_event_lock+0x270/0x270 [ 333.604922][ T9901] ? vfs_write+0x8b2/0xd60 [ 333.609419][ T9901] __se_sys_sendmsg+0x1af/0x290 [ 333.614328][ T9901] ? __x64_sys_sendmsg+0x80/0x80 [ 333.619305][ T9901] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 333.625357][ T9901] ? lockdep_hardirqs_on+0x94/0x140 [ 333.630603][ T9901] do_syscall_64+0x4c/0xa0 [ 333.635059][ T9901] ? clear_bhb_loop+0x30/0x80 [ 333.639777][ T9901] ? clear_bhb_loop+0x30/0x80 [ 333.644495][ T9901] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 333.650429][ T9901] RIP: 0033:0x7ff777359f79 [ 333.654921][ T9901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.675086][ T9901] RSP: 002b:00007ff7755b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.683658][ T9901] RAX: ffffffffffffffda RBX: 00007ff7775d3fa0 RCX: 00007ff777359f79 [ 333.691674][ T9901] RDX: 0000000020000080 RSI: 00002000000006c0 RDI: 0000000000000003 [ 333.699696][ T9901] RBP: 00007ff7755b4090 R08: 0000000000000000 R09: 0000000000000000 [ 333.707713][ T9901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.715715][ T9901] R13: 00007ff7775d4038 R14: 00007ff7775d3fa0 R15: 00007ffc0401daf8 [ 333.723833][ T9901] [ 334.034674][ T9905] netlink: 'syz.0.1849': attribute type 21 has an invalid length. [ 334.134397][ T9905] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1849'. [ 334.228207][ T9905] netlink: 'syz.0.1849': attribute type 4 has an invalid length. [ 334.329826][ T9905] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1849'. [ 334.700883][ T9916] bridge0: port 4(veth1_virt_wifi) entered blocking state [ 334.782255][ T9916] bridge0: port 4(veth1_virt_wifi) entered disabled state [ 335.965571][ T9961] bridge0: port 4(veth1_virt_wifi) entered blocking state [ 336.014565][ T9961] bridge0: port 4(veth1_virt_wifi) entered disabled state [ 336.229306][ T9969] bridge0: port 4(veth1_virt_wifi) entered blocking state [ 336.305535][ T9969] bridge0: port 4(veth1_virt_wifi) entered disabled state [ 336.580303][ T9979] netlink: 'syz.4.1876': attribute type 2 has an invalid length. [ 336.688322][ T9979] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1876'. [ 336.899449][ T9989] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1879'. [ 339.118234][T10046] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1897'. [ 339.188575][T10046] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1897'. [ 339.321098][T10046] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1897'. [ 339.458721][T10057] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1900'. [ 339.524944][T10061] FAULT_INJECTION: forcing a failure. [ 339.524944][T10061] name failslab, interval 1, probability 0, space 0, times 0 [ 339.580262][T10057] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1900'. [ 339.708264][T10061] CPU: 0 PID: 10061 Comm: syz.1.1900 Not tainted syzkaller #0 [ 339.715811][T10061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 339.725910][T10061] Call Trace: [ 339.729225][T10061] [ 339.732182][T10061] dump_stack_lvl+0x188/0x250 [ 339.736899][T10061] ? show_regs_print_info+0x20/0x20 [ 339.742125][T10061] ? load_image+0x400/0x400 [ 339.746663][T10061] ? __might_sleep+0xf0/0xf0 [ 339.751278][T10061] ? __lock_acquire+0x7d10/0x7d10 [ 339.756425][T10061] should_fail+0x38c/0x4c0 [ 339.760900][T10061] should_failslab+0x5/0x20 [ 339.765438][T10061] slab_pre_alloc_hook+0x51/0xc0 [ 339.770557][T10061] __kmalloc+0x6b/0x330 [ 339.774745][T10061] ? iovec_from_user+0x83/0x370 [ 339.779631][T10061] iovec_from_user+0x83/0x370 [ 339.784350][T10061] __import_iovec+0x70/0x490 [ 339.789006][T10061] import_iovec+0x6f/0xa0 [ 339.793369][T10061] ___sys_recvmsg+0x4e9/0x5c0 [ 339.798090][T10061] ? __sys_recvmsg+0x280/0x280 [ 339.802895][T10061] ? trace_event_raw_event_lock+0x270/0x270 [ 339.808836][T10061] __x64_sys_recvmsg+0x1f9/0x2c0 [ 339.813818][T10061] ? ___sys_recvmsg+0x5c0/0x5c0 [ 339.818691][T10061] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 339.824712][T10061] ? lockdep_hardirqs_on+0x94/0x140 [ 339.829963][T10061] do_syscall_64+0x4c/0xa0 [ 339.834400][T10061] ? clear_bhb_loop+0x30/0x80 [ 339.839285][T10061] ? clear_bhb_loop+0x30/0x80 [ 339.843982][T10061] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 339.849904][T10061] RIP: 0033:0x7f6f85b5ff79 [ 339.854345][T10061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.873996][T10061] RSP: 002b:00007f6f83d99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 339.882643][T10061] RAX: ffffffffffffffda RBX: 00007f6f85dda090 RCX: 00007f6f85b5ff79 [ 339.890652][T10061] RDX: 0000000000012000 RSI: 0000200000000640 RDI: 0000000000000003 [ 339.898649][T10061] RBP: 00007f6f83d99090 R08: 0000000000000000 R09: 0000000000000000 [ 339.906662][T10061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.914650][T10061] R13: 00007f6f85dda128 R14: 00007f6f85dda090 R15: 00007ffc2c177aa8 [ 339.922672][T10061] [ 341.254555][T10104] netlink: 'syz.4.1916': attribute type 9 has an invalid length. [ 341.262502][T10104] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.1916'. [ 341.796207][T10126] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 342.771963][T10153] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1931'. [ 342.878673][T10153] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1931'. [ 342.966090][T10160] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1931'. [ 343.047804][T10168] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.1939'. [ 343.981952][T10197] netlink: 'syz.1.1944': attribute type 10 has an invalid length. [ 344.207675][T10197] batman_adv: batadv0: Adding interface: netdevsim0 [ 344.293958][T10197] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.345071][T10197] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 344.411547][T10204] bridge0: port 4(veth1_virt_wifi) entered blocking state [ 344.443893][T10204] bridge0: port 4(veth1_virt_wifi) entered disabled state [ 344.594538][T10207] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1952'. [ 345.770820][T10242] netlink: 'syz.1.1963': attribute type 21 has an invalid length. [ 346.292725][T10253] netlink: 'syz.3.1967': attribute type 10 has an invalid length. [ 347.040563][T10253] batman_adv: batadv0: Adding interface: netdevsim0 [ 347.064842][T10253] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.244242][T10253] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 347.297934][T10258] netlink: 'syz.4.1970': attribute type 21 has an invalid length. [ 347.310852][T10272] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1972'. [ 349.250335][T10326] FAULT_INJECTION: forcing a failure. [ 349.250335][T10326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.268446][T10317] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.1985'. [ 349.286508][T10326] CPU: 1 PID: 10326 Comm: syz.4.1988 Not tainted syzkaller #0 [ 349.294052][T10326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 349.304152][T10326] Call Trace: [ 349.307472][T10326] [ 349.310449][T10326] dump_stack_lvl+0x188/0x250 [ 349.315196][T10326] ? show_regs_print_info+0x20/0x20 [ 349.320456][T10326] ? load_image+0x400/0x400 [ 349.325018][T10326] ? __might_sleep+0xf0/0xf0 [ 349.329752][T10326] ? __lock_acquire+0x7d10/0x7d10 [ 349.335041][T10326] ? mark_lock+0x94/0x320 [ 349.339434][T10326] should_fail+0x38c/0x4c0 [ 349.343924][T10326] copy_page_from_iter+0x33c/0x760 [ 349.349119][T10326] pipe_write+0x96f/0x1aa0 [ 349.353610][T10326] ? pipe_write+0x191/0x1aa0 [ 349.358279][T10326] ? pipe_read+0x1260/0x1260 [ 349.362920][T10326] ? end_current_label_crit_section+0x14b/0x170 [ 349.369211][T10326] ? memset+0x1e/0x40 [ 349.373239][T10326] ? iov_iter_init+0xb4/0x170 [ 349.377962][T10326] vfs_write+0x745/0xd60 [ 349.382285][T10326] ? file_end_write+0x250/0x250 [ 349.387196][T10326] ? __fget_files+0x40f/0x480 [ 349.391919][T10326] ? __fdget_pos+0x1e2/0x370 [ 349.396541][T10326] ? ksys_write+0x71/0x260 [ 349.400993][T10326] ksys_write+0x152/0x260 [ 349.405367][T10326] ? __ia32_sys_read+0x80/0x80 [ 349.410194][T10326] ? lockdep_hardirqs_on+0x94/0x140 [ 349.415441][T10326] do_syscall_64+0x4c/0xa0 [ 349.419889][T10326] ? clear_bhb_loop+0x30/0x80 [ 349.424595][T10326] ? clear_bhb_loop+0x30/0x80 [ 349.429327][T10326] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 349.435505][T10326] RIP: 0033:0x7f31fd3f7f79 [ 349.439947][T10326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.460021][T10326] RSP: 002b:00007f31fb652028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 349.468849][T10326] RAX: ffffffffffffffda RBX: 00007f31fd671fa0 RCX: 00007f31fd3f7f79 [ 349.476860][T10326] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 349.484853][T10326] RBP: 00007f31fb652090 R08: 0000000000000000 R09: 0000000000000000 [ 349.492887][T10326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.500882][T10326] R13: 00007f31fd672038 R14: 00007f31fd671fa0 R15: 00007ffd120cef98 [ 349.508992][T10326] [ 352.899805][T10398] netlink: 'syz.3.2007': attribute type 39 has an invalid length. [ 354.111134][T10418] netlink: 'syz.0.2018': attribute type 39 has an invalid length. [ 354.705000][T10430] syz.3.2021 uses obsolete (PF_INET,SOCK_PACKET) [ 354.856001][T10430] netlink: 'syz.3.2021': attribute type 39 has an invalid length. [ 356.836857][T10472] netlink: 'syz.0.2036': attribute type 21 has an invalid length. [ 357.825032][T10498] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2045'. [ 360.567576][T10558] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2064'. [ 361.157210][T10568] netlink: 'syz.0.2067': attribute type 39 has an invalid length. [ 362.259184][T10595] netlink: 'syz.1.2071': attribute type 21 has an invalid length. [ 363.384887][T10621] netlink: 'syz.1.2080': attribute type 39 has an invalid length. [ 364.229409][T10637] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2084'. [ 364.430562][T10642] FAULT_INJECTION: forcing a failure. [ 364.430562][T10642] name failslab, interval 1, probability 0, space 0, times 0 [ 364.472189][T10642] CPU: 0 PID: 10642 Comm: syz.2.2087 Not tainted syzkaller #0 [ 364.479719][T10642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 364.489819][T10642] Call Trace: [ 364.493141][T10642] [ 364.496103][T10642] dump_stack_lvl+0x188/0x250 [ 364.500836][T10642] ? show_regs_print_info+0x20/0x20 [ 364.506085][T10642] ? load_image+0x400/0x400 [ 364.510633][T10642] ? perf_trace_lock_acquire+0xed/0x3e0 [ 364.516267][T10642] should_fail+0x38c/0x4c0 [ 364.520760][T10642] should_failslab+0x5/0x20 [ 364.525350][T10642] slab_pre_alloc_hook+0x51/0xc0 [ 364.530347][T10642] ? skb_clone+0x1bd/0x350 [ 364.534807][T10642] kmem_cache_alloc+0x3d/0x290 [ 364.539613][T10642] skb_clone+0x1bd/0x350 [ 364.543926][T10642] __netlink_deliver_tap+0x3cd/0x7c0 [ 364.549269][T10642] netlink_deliver_tap+0x16c/0x180 [ 364.554424][T10642] netlink_unicast+0x74f/0x920 [ 364.559244][T10642] netlink_sendmsg+0x8ba/0xbe0 [ 364.564159][T10642] ? netlink_getsockopt+0x570/0x570 [ 364.569401][T10642] ? aa_sock_msg_perm+0x94/0x150 [ 364.574385][T10642] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 364.579716][T10642] ? security_socket_sendmsg+0x7c/0xa0 [ 364.585220][T10642] ? netlink_getsockopt+0x570/0x570 [ 364.590462][T10642] ____sys_sendmsg+0x5b7/0x8f0 [ 364.595281][T10642] ? __sys_sendmsg_sock+0x30/0x30 [ 364.600368][T10642] ? import_iovec+0x6f/0xa0 [ 364.604911][T10642] ___sys_sendmsg+0x236/0x2e0 [ 364.609637][T10642] ? __sys_sendmsg+0x2a0/0x2a0 [ 364.614458][T10642] ? vfs_write+0x8b2/0xd60 [ 364.618941][T10642] __se_sys_sendmsg+0x1af/0x290 [ 364.623836][T10642] ? __x64_sys_sendmsg+0x80/0x80 [ 364.628987][T10642] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 364.635145][T10642] ? lockdep_hardirqs_on+0x94/0x140 [ 364.640402][T10642] do_syscall_64+0x4c/0xa0 [ 364.644861][T10642] ? clear_bhb_loop+0x30/0x80 [ 364.649573][T10642] ? clear_bhb_loop+0x30/0x80 [ 364.654329][T10642] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 364.660263][T10642] RIP: 0033:0x7f439f041f79 [ 364.664734][T10642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.684379][T10642] RSP: 002b:00007f439d29c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.692968][T10642] RAX: ffffffffffffffda RBX: 00007f439f2bbfa0 RCX: 00007f439f041f79 [ 364.700981][T10642] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 364.708996][T10642] RBP: 00007f439d29c090 R08: 0000000000000000 R09: 0000000000000000 [ 364.717012][T10642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.725127][T10642] R13: 00007f439f2bc038 R14: 00007f439f2bbfa0 R15: 00007ffdfdc95178 [ 364.733256][T10642] [ 364.984369][T10642] netlink: 'syz.2.2087': attribute type 2 has an invalid length. [ 365.118722][T10645] netlink: 'syz.1.2089': attribute type 9 has an invalid length. [ 365.216672][T10645] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2089'. [ 367.254385][T10679] netlink: 'syz.1.2101': attribute type 39 has an invalid length. [ 369.161508][T10730] netlink: 'syz.2.2116': attribute type 21 has an invalid length. [ 369.234378][T10730] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2116'. [ 369.731105][T10739] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2120'. [ 369.946441][T10743] netlink: 'syz.0.2122': attribute type 39 has an invalid length. [ 370.501289][T10743] device hsr_slave_1 left promiscuous mode [ 372.035359][T10786] FAULT_INJECTION: forcing a failure. [ 372.035359][T10786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.116772][T10786] CPU: 1 PID: 10786 Comm: syz.0.2135 Not tainted syzkaller #0 [ 372.124322][T10786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 372.134423][T10786] Call Trace: [ 372.137750][T10786] [ 372.140724][T10786] dump_stack_lvl+0x188/0x250 [ 372.145609][T10786] ? show_regs_print_info+0x20/0x20 [ 372.150864][T10786] ? load_image+0x400/0x400 [ 372.155542][T10786] ? __lock_acquire+0x7d10/0x7d10 [ 372.160632][T10786] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 372.166507][T10786] should_fail+0x38c/0x4c0 [ 372.170998][T10786] _copy_from_user+0x2e/0x170 [ 372.175846][T10786] __copy_msghdr_from_user+0xc9/0x630 [ 372.181298][T10786] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 372.187083][T10786] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 372.192459][T10786] ___sys_sendmsg+0x19a/0x2e0 [ 372.197216][T10786] ? __sys_sendmsg+0x2a0/0x2a0 [ 372.202055][T10786] ? trace_event_raw_event_lock+0x270/0x270 [ 372.207998][T10786] ? vfs_write+0x8b2/0xd60 [ 372.212507][T10786] __se_sys_sendmsg+0x1af/0x290 [ 372.217422][T10786] ? __x64_sys_sendmsg+0x80/0x80 [ 372.222410][T10786] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 372.228473][T10786] ? lockdep_hardirqs_on+0x94/0x140 [ 372.233736][T10786] do_syscall_64+0x4c/0xa0 [ 372.238192][T10786] ? clear_bhb_loop+0x30/0x80 [ 372.242903][T10786] ? clear_bhb_loop+0x30/0x80 [ 372.247623][T10786] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 372.253586][T10786] RIP: 0033:0x7ff777359f79 [ 372.258136][T10786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.277794][T10786] RSP: 002b:00007ff7755b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.286290][T10786] RAX: ffffffffffffffda RBX: 00007ff7775d3fa0 RCX: 00007ff777359f79 [ 372.294303][T10786] RDX: 0000000000080054 RSI: 00002000000000c0 RDI: 0000000000000003 [ 372.302349][T10786] RBP: 00007ff7755b4090 R08: 0000000000000000 R09: 0000000000000000 [ 372.310376][T10786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.318414][T10786] R13: 00007ff7775d4038 R14: 00007ff7775d3fa0 R15: 00007ffc0401daf8 [ 372.326482][T10786] [ 372.397124][T10784] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2134'. [ 373.463649][T10820] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2147'. [ 373.757707][T10834] FAULT_INJECTION: forcing a failure. [ 373.757707][T10834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.837406][T10834] CPU: 0 PID: 10834 Comm: syz.0.2151 Not tainted syzkaller #0 [ 373.844947][T10834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 373.855096][T10834] Call Trace: [ 373.858425][T10834] [ 373.861403][T10834] dump_stack_lvl+0x188/0x250 [ 373.866201][T10834] ? show_regs_print_info+0x20/0x20 [ 373.871473][T10834] ? load_image+0x400/0x400 [ 373.876043][T10834] ? __lock_acquire+0x7d10/0x7d10 [ 373.881135][T10834] ? lockdep_hardirqs_on+0x94/0x140 [ 373.886407][T10834] should_fail+0x38c/0x4c0 [ 373.890902][T10834] _copy_from_user+0x2e/0x170 [ 373.895649][T10834] __copy_msghdr_from_user+0x48a/0x630 [ 373.901167][T10834] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 373.906957][T10834] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 373.912363][T10834] ___sys_sendmsg+0x19a/0x2e0 [ 373.917132][T10834] ? __sys_sendmsg+0x2a0/0x2a0 [ 373.922008][T10834] ? trace_event_raw_event_lock+0x270/0x270 [ 373.927962][T10834] ? vfs_write+0x8b2/0xd60 [ 373.932512][T10834] __se_sys_sendmsg+0x1af/0x290 [ 373.937448][T10834] ? __x64_sys_sendmsg+0x80/0x80 [ 373.942507][T10834] ? syscall_enter_from_user_mode+0x2a/0x70 [ 373.948482][T10834] do_syscall_64+0x4c/0xa0 [ 373.952954][T10834] ? clear_bhb_loop+0x30/0x80 [ 373.957691][T10834] ? clear_bhb_loop+0x30/0x80 [ 373.962435][T10834] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 373.968388][T10834] RIP: 0033:0x7ff777359f79 [ 373.972866][T10834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.992528][T10834] RSP: 002b:00007ff7755b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.001026][T10834] RAX: ffffffffffffffda RBX: 00007ff7775d3fa0 RCX: 00007ff777359f79 [ 374.009061][T10834] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000e [ 374.017239][T10834] RBP: 00007ff7755b4090 R08: 0000000000000000 R09: 0000000000000000 [ 374.025276][T10834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.033426][T10834] R13: 00007ff7775d4038 R14: 00007ff7775d3fa0 R15: 00007ffc0401daf8 [ 374.041617][T10834] [ 374.840200][T10858] netlink: 'syz.2.2161': attribute type 9 has an invalid length. [ 374.921744][T10858] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2161'. [ 376.743671][T10915] FAULT_INJECTION: forcing a failure. [ 376.743671][T10915] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 376.804637][T10915] CPU: 0 PID: 10915 Comm: syz.4.2179 Not tainted syzkaller #0 [ 376.812176][T10915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 376.822360][T10915] Call Trace: [ 376.825691][T10915] [ 376.828657][T10915] dump_stack_lvl+0x188/0x250 [ 376.833393][T10915] ? show_regs_print_info+0x20/0x20 [ 376.839172][T10915] ? load_image+0x400/0x400 [ 376.843748][T10915] should_fail+0x38c/0x4c0 [ 376.848341][T10915] prepare_alloc_pages+0x1e4/0x5f0 [ 376.853525][T10915] __alloc_pages+0x11b/0x480 [ 376.858175][T10915] ? zone_statistics+0x170/0x170 [ 376.863183][T10915] ? alloc_pages+0x438/0x550 [ 376.867834][T10915] skb_page_frag_refill+0x225/0x4c0 [ 376.873133][T10915] sk_page_frag_refill+0x4a/0x200 [ 376.878326][T10915] __ip6_append_data+0x15d7/0x38c0 [ 376.883535][T10915] ? ip6_setup_cork+0x11e0/0x11e0 [ 376.888623][T10915] ? ip6_setup_cork+0xc63/0x11e0 [ 376.893881][T10915] ip6_append_data+0x1d4/0x310 [ 376.898691][T10915] ? rawv6_send_hdrinc+0x1690/0x1690 [ 376.904042][T10915] ? rawv6_send_hdrinc+0x1690/0x1690 [ 376.909406][T10915] rawv6_sendmsg+0x1222/0x1700 [ 376.914264][T10915] ? compat_rawv6_ioctl+0x60/0x60 [ 376.919533][T10915] ? aa_af_perm+0x340/0x340 [ 376.924112][T10915] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 376.930689][T10915] ? sock_rps_record_flow+0x17/0x3b0 [ 376.936053][T10915] ? inet_sendmsg+0x78/0x2f0 [ 376.940709][T10915] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 376.946128][T10915] ? security_socket_sendmsg+0x7c/0xa0 [ 376.951643][T10915] ? inet_send_prepare+0x260/0x260 [ 376.956815][T10915] ____sys_sendmsg+0x5b7/0x8f0 [ 376.961739][T10915] ? __sys_sendmsg_sock+0x30/0x30 [ 376.966931][T10915] ? import_iovec+0x6f/0xa0 [ 376.971523][T10915] ___sys_sendmsg+0x236/0x2e0 [ 376.976362][T10915] ? __sys_sendmsg+0x2a0/0x2a0 [ 376.981249][T10915] __se_sys_sendmsg+0x1af/0x290 [ 376.986243][T10915] ? __x64_sys_sendmsg+0x80/0x80 [ 376.991238][T10915] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 376.997418][T10915] ? lockdep_hardirqs_on+0x94/0x140 [ 377.002676][T10915] do_syscall_64+0x4c/0xa0 [ 377.007146][T10915] ? clear_bhb_loop+0x30/0x80 [ 377.011965][T10915] ? clear_bhb_loop+0x30/0x80 [ 377.016701][T10915] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.022757][T10915] RIP: 0033:0x7f31fd3f7f79 [ 377.027329][T10915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.047120][T10915] RSP: 002b:00007f31fb652028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.055668][T10915] RAX: ffffffffffffffda RBX: 00007f31fd671fa0 RCX: 00007f31fd3f7f79 [ 377.063795][T10915] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 377.071806][T10915] RBP: 00007f31fb652090 R08: 0000000000000000 R09: 0000000000000000 [ 377.079846][T10915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 377.087970][T10915] R13: 00007f31fd672038 R14: 00007f31fd671fa0 R15: 00007ffd120cef98 [ 377.096010][T10915] [ 377.323681][T10923] netlink: 'syz.3.2182': attribute type 10 has an invalid length. [ 377.446749][T10923] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2182'. [ 378.322225][T10947] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2191'. [ 378.433232][T10946] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2191'. [ 378.638980][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.645376][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.370990][T10964] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2197'. [ 379.694500][T10974] netlink: 'syz.1.2201': attribute type 10 has an invalid length. [ 379.716370][T10974] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2201'. [ 381.559642][T11008] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2212'. [ 381.735744][T11019] netlink: 'syz.4.2216': attribute type 10 has an invalid length. [ 381.769006][T11019] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2216'. [ 382.792225][T11037] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2228'. [ 383.196062][T11048] netlink: 'syz.2.2221': attribute type 9 has an invalid length. [ 383.203983][T11048] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2221'. [ 383.330883][T11052] netlink: 'syz.2.2221': attribute type 21 has an invalid length. [ 383.899922][T11069] tap0: tun_chr_ioctl cmd 1074025675 [ 383.911939][T11069] tap0: persist disabled [ 383.919163][T11069] tap0: tun_chr_ioctl cmd 1074025675 [ 383.924943][T11069] tap0: persist enabled [ 384.158072][T11078] netlink: 'syz.1.2232': attribute type 10 has an invalid length. [ 384.175441][T11077] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2233'. [ 384.198500][T11078] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2232'. [ 385.653405][T11111] netlink: 'syz.0.2240': attribute type 10 has an invalid length. [ 385.686956][T11111] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2240'. [ 386.274675][T11129] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2246'. [ 386.413142][T11139] netlink: 'syz.3.2249': attribute type 4 has an invalid length. [ 387.091196][T11164] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2257'. [ 388.240471][T11194] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2268'. [ 388.369111][T11201] netlink: 'syz.0.2270': attribute type 1 has an invalid length. [ 388.413397][T11201] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.2270'. [ 388.682332][T11214] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2273'. [ 388.931958][T11223] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2277'. [ 389.157710][T11229] netlink: 'syz.1.2279': attribute type 11 has an invalid length. [ 389.198924][T11231] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2279'. [ 389.241897][T11232] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2280'. [ 389.277627][T11232] openvswitch: netlink: Duplicate key (type 0). [ 389.368252][T11235] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2281'. [ 389.442014][T11237] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2282'. [ 390.403448][T11275] FAULT_INJECTION: forcing a failure. [ 390.403448][T11275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.429298][T11273] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2294'. [ 390.480424][T11275] CPU: 0 PID: 11275 Comm: syz.2.2295 Not tainted syzkaller #0 [ 390.487970][T11275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 390.498098][T11275] Call Trace: [ 390.501413][T11275] [ 390.504392][T11275] dump_stack_lvl+0x188/0x250 [ 390.509128][T11275] ? show_regs_print_info+0x20/0x20 [ 390.514493][T11275] ? load_image+0x400/0x400 [ 390.519053][T11275] ? __lock_acquire+0x7d10/0x7d10 [ 390.524175][T11275] should_fail+0x38c/0x4c0 [ 390.528648][T11275] _copy_from_user+0x2e/0x170 [ 390.533380][T11275] iovec_from_user+0x142/0x370 [ 390.538308][T11275] __import_iovec+0x70/0x490 [ 390.542993][T11275] import_iovec+0x6f/0xa0 [ 390.547380][T11275] ___sys_sendmsg+0x1fd/0x2e0 [ 390.552222][T11275] ? __sys_sendmsg+0x2a0/0x2a0 [ 390.557042][T11275] ? trace_event_raw_event_lock+0x270/0x270 [ 390.562980][T11275] ? vfs_write+0x8b2/0xd60 [ 390.567464][T11275] __se_sys_sendmsg+0x1af/0x290 [ 390.572371][T11275] ? __x64_sys_sendmsg+0x80/0x80 [ 390.577440][T11275] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 390.583485][T11275] ? lockdep_hardirqs_on+0x94/0x140 [ 390.588771][T11275] do_syscall_64+0x4c/0xa0 [ 390.590396][T11279] FAULT_INJECTION: forcing a failure. [ 390.590396][T11279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.593258][T11275] ? clear_bhb_loop+0x30/0x80 [ 390.593284][T11275] ? clear_bhb_loop+0x30/0x80 [ 390.593308][T11275] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 390.621662][T11275] RIP: 0033:0x7f439f041f79 [ 390.626131][T11275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.645797][T11275] RSP: 002b:00007f439d29c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.654327][T11275] RAX: ffffffffffffffda RBX: 00007f439f2bbfa0 RCX: 00007f439f041f79 [ 390.663047][T11275] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 390.671058][T11275] RBP: 00007f439d29c090 R08: 0000000000000000 R09: 0000000000000000 [ 390.679424][T11275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.688703][T11275] R13: 00007f439f2bc038 R14: 00007f439f2bbfa0 R15: 00007ffdfdc95178 [ 390.696745][T11275] [ 390.699949][T11279] CPU: 1 PID: 11279 Comm: syz.0.2296 Not tainted syzkaller #0 [ 390.707778][T11279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 390.718106][T11279] Call Trace: [ 390.721429][T11279] [ 390.724384][T11279] dump_stack_lvl+0x188/0x250 [ 390.729121][T11279] ? show_regs_print_info+0x20/0x20 [ 390.734629][T11279] ? load_image+0x400/0x400 [ 390.739199][T11279] ? __lock_acquire+0x7d10/0x7d10 [ 390.744281][T11279] should_fail+0x38c/0x4c0 [ 390.748762][T11279] _copy_from_user+0x2e/0x170 [ 390.753496][T11279] iovec_from_user+0x142/0x370 [ 390.758336][T11279] __import_iovec+0x70/0x490 [ 390.763114][T11279] import_iovec+0x6f/0xa0 [ 390.767597][T11279] ___sys_sendmsg+0x1fd/0x2e0 [ 390.772442][T11279] ? __sys_sendmsg+0x2a0/0x2a0 [ 390.777263][T11279] ? trace_event_raw_event_lock+0x270/0x270 [ 390.783373][T11279] ? vfs_write+0x8b2/0xd60 [ 390.787870][T11279] __se_sys_sendmsg+0x1af/0x290 [ 390.792767][T11279] ? __x64_sys_sendmsg+0x80/0x80 [ 390.797860][T11279] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 390.804084][T11279] ? lockdep_hardirqs_on+0x94/0x140 [ 390.809332][T11279] do_syscall_64+0x4c/0xa0 [ 390.813810][T11279] ? clear_bhb_loop+0x30/0x80 [ 390.818527][T11279] ? clear_bhb_loop+0x30/0x80 [ 390.823255][T11279] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 390.829202][T11279] RIP: 0033:0x7ff777359f79 [ 390.833665][T11279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.853398][T11279] RSP: 002b:00007ff7755b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.862388][T11279] RAX: ffffffffffffffda RBX: 00007ff7775d3fa0 RCX: 00007ff777359f79 [ 390.870417][T11279] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 390.878541][T11279] RBP: 00007ff7755b4090 R08: 0000000000000000 R09: 0000000000000000 [ 390.886558][T11279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.894659][T11279] R13: 00007ff7775d4038 R14: 00007ff7775d3fa0 R15: 00007ffc0401daf8 [ 390.902820][T11279] [ 390.941884][T11280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.173173][T11304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.001766][T11321] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2310'. [ 393.037956][T11321] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2310'. [ 393.088698][T11325] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2310'. [ 393.129698][T11333] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2310'. [ 393.492598][T11338] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2315'. [ 394.563247][T11360] netlink: 204476 bytes leftover after parsing attributes in process `syz.4.2323'. [ 394.642732][T11360] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 396.340391][T11402] netlink: 'syz.0.2335': attribute type 7 has an invalid length. [ 396.603920][T11408] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.2338'. [ 396.656925][T11411] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2339'. [ 396.704093][T11411] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2339'. [ 396.734552][T11414] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2339'. [ 396.763057][T11413] FAULT_INJECTION: forcing a failure. [ 396.763057][T11413] name failslab, interval 1, probability 0, space 0, times 0 [ 396.864588][T11413] CPU: 0 PID: 11413 Comm: syz.1.2340 Not tainted syzkaller #0 [ 396.872217][T11413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 396.882559][T11413] Call Trace: [ 396.886126][T11413] [ 396.889104][T11413] dump_stack_lvl+0x188/0x250 [ 396.893928][T11413] ? show_regs_print_info+0x20/0x20 [ 396.899458][T11413] ? load_image+0x400/0x400 [ 396.904302][T11413] ? __might_sleep+0xf0/0xf0 [ 396.909286][T11413] ? __lock_acquire+0x7d10/0x7d10 [ 396.914680][T11413] ? __lock_acquire+0x7d10/0x7d10 [ 396.919784][T11413] should_fail+0x38c/0x4c0 [ 396.924692][T11413] should_failslab+0x5/0x20 [ 396.929560][T11413] slab_pre_alloc_hook+0x51/0xc0 [ 396.934654][T11413] ? __sys_setsockopt+0x2bf/0x3d0 [ 396.939847][T11413] __kmalloc_track_caller+0x69/0x330 [ 396.945535][T11413] ? __sys_setsockopt+0x2bf/0x3d0 [ 396.950842][T11413] sctp_setsockopt+0x7d/0xf80 [ 396.956095][T11413] ? sock_common_recvmsg+0x1c0/0x1c0 [ 396.961528][T11413] __sys_setsockopt+0x2bf/0x3d0 [ 396.966529][T11413] __x64_sys_setsockopt+0xb1/0xc0 [ 396.971811][T11413] do_syscall_64+0x4c/0xa0 [ 396.976362][T11413] ? clear_bhb_loop+0x30/0x80 [ 396.981182][T11413] ? clear_bhb_loop+0x30/0x80 [ 396.986151][T11413] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 396.992448][T11413] RIP: 0033:0x7f6f85b5ff79 [ 396.997061][T11413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.017256][T11413] RSP: 002b:00007f6f83dba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 397.025956][T11413] RAX: ffffffffffffffda RBX: 00007f6f85dd9fa0 RCX: 00007f6f85b5ff79 [ 397.033988][T11413] RDX: 0000000000000012 RSI: 0000000000000084 RDI: 0000000000000003 [ 397.042261][T11413] RBP: 00007f6f83dba090 R08: 0000000000000004 R09: 0000000000000000 [ 397.050438][T11413] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 397.058546][T11413] R13: 00007f6f85dda038 R14: 00007f6f85dd9fa0 R15: 00007ffc2c177aa8 [ 397.066803][T11413] [ 398.457485][T11444] __nla_validate_parse: 1 callbacks suppressed [ 398.457507][T11444] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.2348'. [ 400.746293][T11487] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2364'. [ 401.079927][T11502] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.2366'. [ 402.672467][T11545] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.2379'. [ 405.734962][T11627] netlink: 'syz.0.2394': attribute type 10 has an invalid length. [ 405.851424][T11627] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2394'. [ 407.044012][T11680] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2409'. [ 407.068572][T11680] bridge_slave_1: default FDB implementation only supports local addresses [ 410.447621][T11801] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2445'. [ 410.679280][T11809] netlink: 'syz.0.2446': attribute type 8 has an invalid length. [ 410.779388][T11809] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2446'. [ 411.202527][T11816] device syzkaller0 entered promiscuous mode [ 411.553977][T11835] netlink: 'syz.3.2453': attribute type 2 has an invalid length. [ 412.411877][T11861] netlink: 'syz.4.2462': attribute type 10 has an invalid length. [ 412.476119][T11861] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.2462'. [ 413.123307][T11866] netlink: 'syz.1.2463': attribute type 1 has an invalid length. [ 413.163793][T11873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2467'. [ 413.229109][T11866] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2463'. [ 413.373448][T11866] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2463'. [ 413.558785][T11881] FAULT_INJECTION: forcing a failure. [ 413.558785][T11881] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 413.617542][T11881] CPU: 0 PID: 11881 Comm: syz.2.2470 Not tainted syzkaller #0 [ 413.625356][T11881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 413.635556][T11881] Call Trace: [ 413.639222][T11881] [ 413.642314][T11881] dump_stack_lvl+0x188/0x250 [ 413.647133][T11881] ? rt_set_nexthop+0x4cb/0xa80 [ 413.652033][T11881] ? ip_route_output_key_hash+0x1c6/0x300 [ 413.658258][T11881] ? show_regs_print_info+0x20/0x20 [ 413.664283][T11881] ? load_image+0x400/0x400 [ 413.668868][T11881] should_fail+0x38c/0x4c0 [ 413.673581][T11881] prepare_alloc_pages+0x1e4/0x5f0 [ 413.678753][T11881] __alloc_pages+0x11b/0x480 [ 413.683396][T11881] ? zone_statistics+0x170/0x170 [ 413.688416][T11881] ? __lock_acquire+0x13bc/0x7d10 [ 413.693676][T11881] ? alloc_pages+0x438/0x550 [ 413.698551][T11881] skb_page_frag_refill+0x225/0x4c0 [ 413.704186][T11881] sk_page_frag_refill+0x4a/0x200 [ 413.709254][T11881] __ip_append_data+0x12b4/0x32d0 [ 413.714368][T11881] ? raw_send_hdrinc+0x1110/0x1110 [ 413.719530][T11881] ? ip_setup_cork+0x890/0x890 [ 413.724347][T11881] ? __local_bh_enable_ip+0x136/0x1c0 [ 413.729777][T11881] ip_append_data+0x132/0x1a0 [ 413.734595][T11881] ? raw_send_hdrinc+0x1110/0x1110 [ 413.739866][T11881] raw_sendmsg+0x1433/0x1aa0 [ 413.744624][T11881] ? compat_raw_ioctl+0x60/0x60 [ 413.749572][T11881] ? aa_sk_perm+0x7dc/0x910 [ 413.754501][T11881] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 413.760970][T11881] ? sock_rps_record_flow+0x17/0x3b0 [ 413.766308][T11881] ? inet_sendmsg+0x78/0x2f0 [ 413.770947][T11881] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 413.776535][T11881] ? security_socket_sendmsg+0x7c/0xa0 [ 413.782035][T11881] ? inet_send_prepare+0x260/0x260 [ 413.787201][T11881] ____sys_sendmsg+0x5b7/0x8f0 [ 413.792252][T11881] ? __sys_sendmsg_sock+0x30/0x30 [ 413.797446][T11881] ? import_iovec+0x6f/0xa0 [ 413.802000][T11881] ___sys_sendmsg+0x236/0x2e0 [ 413.806746][T11881] ? __sys_sendmsg+0x2a0/0x2a0 [ 413.811577][T11881] ? vfs_write+0x8b2/0xd60 [ 413.816059][T11881] __se_sys_sendmsg+0x1af/0x290 [ 413.820966][T11881] ? __x64_sys_sendmsg+0x80/0x80 [ 413.825950][T11881] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 413.832013][T11881] ? lockdep_hardirqs_on+0x94/0x140 [ 413.837270][T11881] do_syscall_64+0x4c/0xa0 [ 413.841840][T11881] ? clear_bhb_loop+0x30/0x80 [ 413.846563][T11881] ? clear_bhb_loop+0x30/0x80 [ 413.851367][T11881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 413.857409][T11881] RIP: 0033:0x7f439f041f79 [ 413.861951][T11881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.881769][T11881] RSP: 002b:00007f439d29c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.890462][T11881] RAX: ffffffffffffffda RBX: 00007f439f2bbfa0 RCX: 00007f439f041f79 [ 413.898522][T11881] RDX: 0000000020040000 RSI: 0000200000000a00 RDI: 0000000000000003 [ 413.906542][T11881] RBP: 00007f439d29c090 R08: 0000000000000000 R09: 0000000000000000 [ 413.914794][T11881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.922895][T11881] R13: 00007f439f2bc038 R14: 00007f439f2bbfa0 R15: 00007ffdfdc95178 [ 413.931029][T11881] [ 414.511837][T11898] FAULT_INJECTION: forcing a failure. [ 414.511837][T11898] name failslab, interval 1, probability 0, space 0, times 0 [ 414.614389][T11898] CPU: 0 PID: 11898 Comm: syz.3.2477 Not tainted syzkaller #0 [ 414.621922][T11898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 414.632016][T11898] Call Trace: [ 414.635430][T11898] [ 414.638512][T11898] dump_stack_lvl+0x188/0x250 [ 414.643328][T11898] ? show_regs_print_info+0x20/0x20 [ 414.648574][T11898] ? load_image+0x400/0x400 [ 414.653268][T11898] ? __might_sleep+0xf0/0xf0 [ 414.657899][T11898] ? __lock_acquire+0x7d10/0x7d10 [ 414.662976][T11898] should_fail+0x38c/0x4c0 [ 414.667451][T11898] should_failslab+0x5/0x20 [ 414.671994][T11898] slab_pre_alloc_hook+0x51/0xc0 [ 414.676978][T11898] __kmalloc_node_track_caller+0x68/0x3a0 [ 414.684305][T11898] ? netlink_sendmsg+0x654/0xbe0 [ 414.689500][T11898] ? kmem_cache_alloc_node+0x162/0x2d0 [ 414.695006][T11898] ? __alloc_skb+0xf4/0x750 [ 414.699552][T11898] ? netlink_sendmsg+0x654/0xbe0 [ 414.704710][T11898] __alloc_skb+0x22c/0x750 [ 414.709461][T11898] netlink_sendmsg+0x654/0xbe0 [ 414.714348][T11898] ? netlink_getsockopt+0x570/0x570 [ 414.719589][T11898] ? aa_sock_msg_perm+0x94/0x150 [ 414.724650][T11898] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 414.730232][T11898] ? security_socket_sendmsg+0x7c/0xa0 [ 414.735847][T11898] ? netlink_getsockopt+0x570/0x570 [ 414.741095][T11898] ____sys_sendmsg+0x5b7/0x8f0 [ 414.746175][T11898] ? __sys_sendmsg_sock+0x30/0x30 [ 414.751463][T11898] ? import_iovec+0x6f/0xa0 [ 414.756718][T11898] ___sys_sendmsg+0x236/0x2e0 [ 414.762092][T11898] ? __sys_sendmsg+0x2a0/0x2a0 [ 414.767011][T11898] ? trace_event_raw_event_lock+0x270/0x270 [ 414.772934][T11898] ? vfs_write+0x8b2/0xd60 [ 414.777399][T11898] __se_sys_sendmsg+0x1af/0x290 [ 414.782384][T11898] ? __x64_sys_sendmsg+0x80/0x80 [ 414.787347][T11898] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 414.793372][T11898] ? lockdep_hardirqs_on+0x94/0x140 [ 414.798604][T11898] do_syscall_64+0x4c/0xa0 [ 414.803055][T11898] ? clear_bhb_loop+0x30/0x80 [ 414.807804][T11898] ? clear_bhb_loop+0x30/0x80 [ 414.812527][T11898] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 414.818449][T11898] RIP: 0033:0x7f75cbca6f79 [ 414.822897][T11898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.842819][T11898] RSP: 002b:00007f75c9ee0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.851472][T11898] RAX: ffffffffffffffda RBX: 00007f75cbf21090 RCX: 00007f75cbca6f79 [ 414.859478][T11898] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000d [ 414.867483][T11898] RBP: 00007f75c9ee0090 R08: 0000000000000000 R09: 0000000000000000 [ 414.875650][T11898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.883654][T11898] R13: 00007f75cbf21128 R14: 00007f75cbf21090 R15: 00007ffdca9da798 [ 414.891681][T11898] [ 415.888346][T11916] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2481'. [ 415.994072][T11919] netlink: 'syz.2.2482': attribute type 27 has an invalid length. [ 416.040915][T11919] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2482'. [ 416.381957][T11923] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2483'. [ 417.872584][T11961] FAULT_INJECTION: forcing a failure. [ 417.872584][T11961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.877037][T11960] FAULT_INJECTION: forcing a failure. [ 417.877037][T11960] name failslab, interval 1, probability 0, space 0, times 0 [ 417.979701][T11961] CPU: 1 PID: 11961 Comm: syz.3.2494 Not tainted syzkaller #0 [ 417.987436][T11961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 417.997732][T11961] Call Trace: [ 418.001064][T11961] [ 418.004043][T11961] dump_stack_lvl+0x188/0x250 [ 418.008787][T11961] ? show_regs_print_info+0x20/0x20 [ 418.014050][T11961] ? load_image+0x400/0x400 [ 418.018625][T11961] ? __lock_acquire+0x7d10/0x7d10 [ 418.023709][T11961] should_fail+0x38c/0x4c0 [ 418.028269][T11961] _copy_from_user+0x2e/0x170 [ 418.033006][T11961] kstrtouint_from_user+0xd3/0x220 [ 418.038173][T11961] ? kstrtol_from_user+0x2a0/0x2a0 [ 418.043357][T11961] proc_fail_nth_write+0x8b/0x200 [ 418.048545][T11961] ? proc_fail_nth_read+0x220/0x220 [ 418.053923][T11961] ? common_file_perm+0x171/0x1c0 [ 418.059173][T11961] ? proc_fail_nth_read+0x220/0x220 [ 418.064436][T11961] vfs_write+0x30b/0xd60 [ 418.068746][T11961] ? file_end_write+0x250/0x250 [ 418.073947][T11961] ? __fget_files+0x40f/0x480 [ 418.078764][T11961] ? mutex_lock_nested+0x17/0x20 [ 418.083758][T11961] ? __fdget_pos+0x2bf/0x370 [ 418.088390][T11961] ? ksys_write+0x71/0x260 [ 418.092891][T11961] ksys_write+0x152/0x260 [ 418.097266][T11961] ? __ia32_sys_read+0x80/0x80 [ 418.102209][T11961] ? lockdep_hardirqs_on+0x94/0x140 [ 418.107471][T11961] do_syscall_64+0x4c/0xa0 [ 418.111935][T11961] ? clear_bhb_loop+0x30/0x80 [ 418.116796][T11961] ? clear_bhb_loop+0x30/0x80 [ 418.121536][T11961] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 418.127484][T11961] RIP: 0033:0x7f75cbc6784e [ 418.131944][T11961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 418.151981][T11961] RSP: 002b:00007f75c9edffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 418.160452][T11961] RAX: ffffffffffffffda RBX: 00007f75c9ee06c0 RCX: 00007f75cbc6784e [ 418.168832][T11961] RDX: 0000000000000001 RSI: 00007f75c9ee00a0 RDI: 0000000000000006 [ 418.176855][T11961] RBP: 00007f75c9ee0090 R08: 0000000000000000 R09: 0000000000000000 [ 418.184860][T11961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.193043][T11961] R13: 00007f75cbf21128 R14: 00007f75cbf21090 R15: 00007ffdca9da798 [ 418.201083][T11961] [ 418.211801][T11960] CPU: 0 PID: 11960 Comm: syz.1.2495 Not tainted syzkaller #0 [ 418.219335][T11960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 418.229523][T11960] Call Trace: [ 418.232842][T11960] [ 418.235813][T11960] dump_stack_lvl+0x188/0x250 [ 418.240559][T11960] ? show_regs_print_info+0x20/0x20 [ 418.245914][T11960] ? load_image+0x400/0x400 [ 418.250533][T11960] ? __might_sleep+0xf0/0xf0 [ 418.255251][T11960] ? __lock_acquire+0x7d10/0x7d10 [ 418.260530][T11960] should_fail+0x38c/0x4c0 [ 418.265040][T11960] should_failslab+0x5/0x20 [ 418.269593][T11960] slab_pre_alloc_hook+0x51/0xc0 [ 418.274565][T11960] kmem_cache_alloc_node+0x47/0x2d0 [ 418.280160][T11960] ? __alloc_skb+0xf4/0x750 [ 418.284716][T11960] __alloc_skb+0xf4/0x750 [ 418.289095][T11960] alloc_skb_with_frags+0xa7/0x730 [ 418.294418][T11960] ? __lock_acquire+0x7d10/0x7d10 [ 418.299492][T11960] sock_alloc_send_pskb+0x87f/0x9a0 [ 418.304956][T11960] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 418.310999][T11960] ? sock_kzfree_s+0x50/0x50 [ 418.315647][T11960] ? __local_bh_enable_ip+0x136/0x1c0 [ 418.321155][T11960] ? _local_bh_enable+0xa0/0xa0 [ 418.326065][T11960] rawv6_send_hdrinc+0x302/0x1690 [ 418.331602][T11960] ? rawv6_probe_proto_opt+0x300/0x300 [ 418.337105][T11960] ? txopt_get+0x303/0x3c0 [ 418.341642][T11960] ? fl6_sock_lookup+0xc0/0xc0 [ 418.346546][T11960] rawv6_sendmsg+0x11b1/0x1700 [ 418.351405][T11960] ? compat_rawv6_ioctl+0x60/0x60 [ 418.356761][T11960] ? aa_af_perm+0x340/0x340 [ 418.361332][T11960] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 418.368006][T11960] ? sock_rps_record_flow+0x17/0x3b0 [ 418.373339][T11960] ? inet_sendmsg+0x78/0x2f0 [ 418.377996][T11960] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 418.383497][T11960] ? security_socket_sendmsg+0x7c/0xa0 [ 418.389098][T11960] ? inet_send_prepare+0x260/0x260 [ 418.394271][T11960] ____sys_sendmsg+0x5b7/0x8f0 [ 418.399208][T11960] ? __sys_sendmsg_sock+0x30/0x30 [ 418.404382][T11960] ? import_iovec+0x6f/0xa0 [ 418.409316][T11960] ___sys_sendmsg+0x236/0x2e0 [ 418.414047][T11960] ? __sys_sendmsg+0x2a0/0x2a0 [ 418.419176][T11960] ? vfs_write+0x8b2/0xd60 [ 418.423953][T11960] __se_sys_sendmsg+0x1af/0x290 [ 418.428871][T11960] ? __x64_sys_sendmsg+0x80/0x80 [ 418.434188][T11960] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 418.440239][T11960] ? lockdep_hardirqs_on+0x94/0x140 [ 418.445492][T11960] do_syscall_64+0x4c/0xa0 [ 418.449946][T11960] ? clear_bhb_loop+0x30/0x80 [ 418.454669][T11960] ? clear_bhb_loop+0x30/0x80 [ 418.459396][T11960] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 418.465326][T11960] RIP: 0033:0x7f6f85b5ff79 [ 418.469811][T11960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.489466][T11960] RSP: 002b:00007f6f83dba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.498101][T11960] RAX: ffffffffffffffda RBX: 00007f6f85dd9fa0 RCX: 00007f6f85b5ff79 [ 418.506220][T11960] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 418.514434][T11960] RBP: 00007f6f83dba090 R08: 0000000000000000 R09: 0000000000000000 [ 418.522725][T11960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.530740][T11960] R13: 00007f6f85dda038 R14: 00007f6f85dd9fa0 R15: 00007ffc2c177aa8 [ 418.538781][T11960] [ 419.083387][T11976] netlink: 'syz.0.2502': attribute type 10 has an invalid length. [ 419.165483][T11976] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2502'. [ 419.287248][T11976] device ipvlan1 entered promiscuous mode [ 419.339815][T11979] netlink: 'syz.3.2504': attribute type 3 has an invalid length. [ 419.388477][T11979] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2504'. [ 419.467059][T11976] bridge0: port 4(ipvlan1) entered blocking state [ 419.546583][T11976] bridge0: port 4(ipvlan1) entered disabled state [ 419.673466][T11976] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 420.713328][T12006] FAULT_INJECTION: forcing a failure. [ 420.713328][T12006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.838874][T12006] CPU: 0 PID: 12006 Comm: syz.0.2512 Not tainted syzkaller #0 [ 420.846410][T12006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 420.856510][T12006] Call Trace: [ 420.859835][T12006] [ 420.862801][T12006] dump_stack_lvl+0x188/0x250 [ 420.867529][T12006] ? show_regs_print_info+0x20/0x20 [ 420.872882][T12006] ? load_image+0x400/0x400 [ 420.877440][T12006] ? __lock_acquire+0x7d10/0x7d10 [ 420.882538][T12006] should_fail+0x38c/0x4c0 [ 420.887129][T12006] _copy_to_user+0x2e/0x130 [ 420.891794][T12006] simple_read_from_buffer+0xe3/0x150 [ 420.897346][T12006] proc_fail_nth_read+0x1a6/0x220 [ 420.902460][T12006] ? proc_fault_inject_write+0x310/0x310 [ 420.908250][T12006] ? fsnotify_perm+0x254/0x560 [ 420.913061][T12006] ? proc_fault_inject_write+0x310/0x310 [ 420.918788][T12006] vfs_read+0x301/0xd60 [ 420.923004][T12006] ? kernel_read+0x1e0/0x1e0 [ 420.927652][T12006] ? __fget_files+0x40f/0x480 [ 420.932581][T12006] ? mutex_lock_nested+0x17/0x20 [ 420.937558][T12006] ? __fdget_pos+0x2bf/0x370 [ 420.942177][T12006] ? ksys_read+0x71/0x260 [ 420.946544][T12006] ksys_read+0x152/0x260 [ 420.950815][T12006] ? vfs_write+0xd60/0xd60 [ 420.955354][T12006] ? syscall_enter_from_user_mode+0x2a/0x70 [ 420.961279][T12006] do_syscall_64+0x4c/0xa0 [ 420.965756][T12006] ? clear_bhb_loop+0x30/0x80 [ 420.970460][T12006] ? clear_bhb_loop+0x30/0x80 [ 420.975251][T12006] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 420.981256][T12006] RIP: 0033:0x7ff77731a84e [ 420.986138][T12006] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 421.006269][T12006] RSP: 002b:00007ff7755b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.014714][T12006] RAX: ffffffffffffffda RBX: 00007ff7755b46c0 RCX: 00007ff77731a84e [ 421.022839][T12006] RDX: 000000000000000f RSI: 00007ff7755b40a0 RDI: 000000000000000b [ 421.031019][T12006] RBP: 00007ff7755b4090 R08: 0000000000000000 R09: 0000000000000000 [ 421.039236][T12006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.047412][T12006] R13: 00007ff7775d4038 R14: 00007ff7775d3fa0 R15: 00007ffc0401daf8 [ 421.055450][T12006] [ 421.269935][T12019] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2517'. [ 423.484940][T12066] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.661093][T12067] FAULT_INJECTION: forcing a failure. [ 423.661093][T12067] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 423.742414][T12077] netlink: 'syz.3.2534': attribute type 3 has an invalid length. [ 423.784303][T12077] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2534'. [ 423.819824][T12067] CPU: 1 PID: 12067 Comm: syz.1.2531 Not tainted syzkaller #0 [ 423.827469][T12067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 423.837752][T12067] Call Trace: [ 423.841162][T12067] [ 423.844126][T12067] dump_stack_lvl+0x188/0x250 [ 423.848856][T12067] ? show_regs_print_info+0x20/0x20 [ 423.854113][T12067] ? load_image+0x400/0x400 [ 423.858665][T12067] ? verify_lock_unused+0x140/0x140 [ 423.863925][T12067] should_fail+0x38c/0x4c0 [ 423.868435][T12067] prepare_alloc_pages+0x1e4/0x5f0 [ 423.873605][T12067] __alloc_pages+0x11b/0x480 [ 423.878245][T12067] ? zone_statistics+0x170/0x170 [ 423.883238][T12067] ? alloc_pages+0x438/0x550 [ 423.887874][T12067] new_slab+0xc0/0x4b0 [ 423.892000][T12067] ___slab_alloc+0x80a/0xdd0 [ 423.896631][T12067] ? __alloc_skb+0xf4/0x750 [ 423.901182][T12067] kmem_cache_alloc_node+0x1c3/0x2d0 [ 423.906507][T12067] ? __alloc_skb+0xf4/0x750 [ 423.911058][T12067] __alloc_skb+0xf4/0x750 [ 423.915463][T12067] rtmsg_ifinfo_build_skb+0x80/0x180 [ 423.920812][T12067] rtmsg_ifinfo+0x71/0x120 [ 423.925273][T12067] __dev_notify_flags+0xdc/0x300 [ 423.930259][T12067] ? __dev_change_flags+0x6a0/0x6a0 [ 423.935490][T12067] ? __dev_change_flags+0x525/0x6a0 [ 423.940792][T12067] ? dev_get_flags+0x1c0/0x1c0 [ 423.945606][T12067] ? __mutex_lock_common+0x155c/0x2400 [ 423.951123][T12067] dev_change_flags+0xe3/0x1a0 [ 423.955938][T12067] dev_ifsioc+0x130/0xd50 [ 423.960305][T12067] ? dev_ioctl+0xe30/0xe30 [ 423.964854][T12067] ? apparmor_capable+0x12c/0x190 [ 423.969926][T12067] ? full_name_hash+0x8e/0xe0 [ 423.974650][T12067] dev_ioctl+0x545/0xe30 [ 423.978936][T12067] ? _copy_from_user+0x111/0x170 [ 423.983944][T12067] sock_do_ioctl+0x245/0x320 [ 423.988800][T12067] ? sock_show_fdinfo+0xb0/0xb0 [ 423.993855][T12067] sock_ioctl+0x4d2/0x710 [ 423.998240][T12067] ? sock_poll+0x410/0x410 [ 424.002723][T12067] ? bpf_lsm_file_ioctl+0x5/0x10 [ 424.007701][T12067] ? security_file_ioctl+0x7c/0xa0 [ 424.012852][T12067] ? sock_poll+0x410/0x410 [ 424.017313][T12067] __se_sys_ioctl+0xfa/0x170 [ 424.021955][T12067] do_syscall_64+0x4c/0xa0 [ 424.026546][T12067] ? clear_bhb_loop+0x30/0x80 [ 424.031275][T12067] ? clear_bhb_loop+0x30/0x80 [ 424.036005][T12067] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 424.042028][T12067] RIP: 0033:0x7f6f85b5ff79 [ 424.046479][T12067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.066302][T12067] RSP: 002b:00007f6f83d99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.074932][T12067] RAX: ffffffffffffffda RBX: 00007f6f85dda090 RCX: 00007f6f85b5ff79 [ 424.083036][T12067] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000007 [ 424.091049][T12067] RBP: 00007f6f83d99090 R08: 0000000000000000 R09: 0000000000000000 [ 424.099061][T12067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.107166][T12067] R13: 00007f6f85dda128 R14: 00007f6f85dda090 R15: 00007ffc2c177aa8 [ 424.115200][T12067] [ 424.376078][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 424.397757][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.404983][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.448053][T12073] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2534'. [ 426.347184][T12131] netlink: 'syz.1.2552': attribute type 3 has an invalid length. [ 426.375201][T12131] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2552'. [ 426.425271][T12131] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2552'. [ 426.571112][T12136] netlink: 'syz.3.2553': attribute type 8 has an invalid length. [ 426.662352][T12136] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2553'. [ 426.804607][T12143] netlink: set zone limit has 8 unknown bytes [ 427.557930][T12155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 427.565273][T12155] IPv6: NLM_F_CREATE should be set when creating new route [ 427.572545][T12155] IPv6: NLM_F_CREATE should be set when creating new route [ 427.580056][T12155] IPv6: NLM_F_CREATE should be set when creating new route [ 427.889620][T12173] FAULT_INJECTION: forcing a failure. [ 427.889620][T12173] name failslab, interval 1, probability 0, space 0, times 0 [ 428.069659][T12173] CPU: 0 PID: 12173 Comm: syz.4.2565 Not tainted syzkaller #0 [ 428.077283][T12173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 428.087426][T12173] Call Trace: [ 428.090760][T12173] [ 428.093730][T12173] dump_stack_lvl+0x188/0x250 [ 428.098471][T12173] ? show_regs_print_info+0x20/0x20 [ 428.103729][T12173] ? load_image+0x400/0x400 [ 428.108552][T12173] ? __might_sleep+0xf0/0xf0 [ 428.113298][T12173] ? __lock_acquire+0x7d10/0x7d10 [ 428.118546][T12173] should_fail+0x38c/0x4c0 [ 428.123046][T12173] should_failslab+0x5/0x20 [ 428.127602][T12173] slab_pre_alloc_hook+0x51/0xc0 [ 428.132765][T12173] kmem_cache_alloc_trace+0x47/0x2a0 [ 428.138099][T12173] ? netdevice_event+0x324/0x900 [ 428.143089][T12173] netdevice_event+0x324/0x900 [ 428.147906][T12173] ? netdev_upper_walk+0x1f0/0x1f0 [ 428.153177][T12173] ? add_default_gids+0xe0/0xe0 [ 428.158073][T12173] ? is_ndev_for_default_gid_filter+0x2e0/0x2e0 [ 428.164464][T12173] ? enum_all_gids_of_dev_cb+0x260/0x260 [ 428.170328][T12173] ? netdevice_event+0x900/0x900 [ 428.175401][T12173] ? add_default_gids+0xe0/0xe0 [ 428.180319][T12173] ? netlbl_unlhsh_netdev_handler+0x187/0x260 [ 428.186446][T12173] raw_notifier_call_chain+0xcb/0x160 [ 428.192090][T12173] dev_set_mac_address+0x2e8/0x400 [ 428.197277][T12173] ? dev_pre_changeaddr_notify+0x120/0x120 [ 428.203141][T12173] ? rwsem_write_trylock+0x135/0x1c0 [ 428.208464][T12173] ? clear_nonspinnable+0x60/0x60 [ 428.213531][T12173] ? __mutex_lock_common+0x465/0x2400 [ 428.218971][T12173] ? full_name_hash+0x8e/0xe0 [ 428.223703][T12173] dev_set_mac_address_user+0x2d/0x50 [ 428.229105][T12173] dev_ifsioc+0x761/0xd50 [ 428.233461][T12173] ? dev_ioctl+0xe30/0xe30 [ 428.237899][T12173] ? apparmor_capable+0x12c/0x190 [ 428.242952][T12173] ? full_name_hash+0x8e/0xe0 [ 428.247670][T12173] dev_ioctl+0x545/0xe30 [ 428.251937][T12173] ? _copy_from_user+0x111/0x170 [ 428.256910][T12173] sock_do_ioctl+0x245/0x320 [ 428.261538][T12173] ? sock_show_fdinfo+0xb0/0xb0 [ 428.266612][T12173] sock_ioctl+0x4d2/0x710 [ 428.270974][T12173] ? sock_poll+0x410/0x410 [ 428.275426][T12173] ? bpf_lsm_file_ioctl+0x5/0x10 [ 428.280392][T12173] ? security_file_ioctl+0x7c/0xa0 [ 428.285573][T12173] ? sock_poll+0x410/0x410 [ 428.290073][T12173] __se_sys_ioctl+0xfa/0x170 [ 428.294782][T12173] do_syscall_64+0x4c/0xa0 [ 428.299218][T12173] ? clear_bhb_loop+0x30/0x80 [ 428.303922][T12173] ? clear_bhb_loop+0x30/0x80 [ 428.308628][T12173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 428.314718][T12173] RIP: 0033:0x7f31fd3f7f79 [ 428.319252][T12173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.338970][T12173] RSP: 002b:00007f31fb652028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.347435][T12173] RAX: ffffffffffffffda RBX: 00007f31fd671fa0 RCX: 00007f31fd3f7f79 [ 428.355532][T12173] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000004 [ 428.363581][T12173] RBP: 00007f31fb652090 R08: 0000000000000000 R09: 0000000000000000 [ 428.371676][T12173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.379690][T12173] R13: 00007f31fd672038 R14: 00007f31fd671fa0 R15: 00007ffd120cef98 [ 428.387701][T12173] [ 428.508902][T12179] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2567'. [ 428.625240][T12180] netlink: 'syz.0.2566': attribute type 3 has an invalid length. [ 428.680816][T12180] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2566'. [ 429.137111][T12184] netlink: set zone limit has 8 unknown bytes [ 429.186516][T12188] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2569'. [ 429.207464][T12176] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2566'. [ 430.833332][T12220] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2580'. [ 430.849639][T12215] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.856962][T12215] IPv6: NLM_F_CREATE should be set when creating new route [ 430.864298][T12215] IPv6: NLM_F_CREATE should be set when creating new route [ 430.871658][T12215] IPv6: NLM_F_CREATE should be set when creating new route [ 431.866081][T12234] netlink: 'syz.0.2594': attribute type 10 has an invalid length. [ 432.213700][T12234] device veth0_macvtap left promiscuous mode [ 432.684871][T12236] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2583'. [ 433.062397][T12255] delete_channel: no stack [ 433.084556][T12255] delete_channel: no stack [ 433.192222][T12258] netlink: set zone limit has 8 unknown bytes [ 434.340114][T12278] netlink: 'syz.2.2600': attribute type 10 has an invalid length. [ 434.644186][T12278] device veth0_macvtap left promiscuous mode [ 435.256659][T12290] netlink: 'syz.4.2604': attribute type 10 has an invalid length. [ 435.338949][T12290] batman_adv: batadv0: Adding interface: netdevsim0 [ 435.364308][T12290] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.414401][T12290] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 436.077091][T12302] netlink: 'syz.0.2606': attribute type 4 has an invalid length. [ 436.129725][T12302] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2606'. [ 436.477243][T12322] netlink: 'syz.1.2615': attribute type 3 has an invalid length. [ 436.495806][T12322] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2615'. [ 436.596513][T12322] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2615'. [ 436.764673][T12332] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2616'. [ 437.903824][T12347] netlink: 'syz.1.2620': attribute type 10 has an invalid length. [ 438.085334][T12347] device veth0_macvtap left promiscuous mode [ 439.089800][T12368] netlink: 'syz.0.2629': attribute type 3 has an invalid length. [ 439.109245][T12368] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2629'. [ 439.349894][T12368] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2629'. [ 440.090124][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.096617][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.119897][T12386] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2635'. [ 441.271944][T12409] netlink: 'syz.0.2643': attribute type 3 has an invalid length. [ 441.306234][T12409] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2643'. [ 441.353095][T12411] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2643'. [ 442.211795][T12436] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2653'. [ 443.366482][T12459] netlink: 'syz.2.2659': attribute type 3 has an invalid length. [ 443.394762][T12459] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2659'. [ 443.488353][T12457] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2659'. [ 445.423616][T12495] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2670'. [ 445.643896][T12509] FAULT_INJECTION: forcing a failure. [ 445.643896][T12509] name failslab, interval 1, probability 0, space 0, times 0 [ 445.721778][T12509] CPU: 0 PID: 12509 Comm: syz.2.2673 Not tainted syzkaller #0 [ 445.729819][T12509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 445.740569][T12509] Call Trace: [ 445.743958][T12509] [ 445.746941][T12509] dump_stack_lvl+0x188/0x250 [ 445.751687][T12509] ? show_regs_print_info+0x20/0x20 [ 445.757068][T12509] ? load_image+0x400/0x400 [ 445.761733][T12509] ? __might_sleep+0xf0/0xf0 [ 445.766381][T12509] ? __lock_acquire+0x7d10/0x7d10 [ 445.771478][T12509] should_fail+0x38c/0x4c0 [ 445.776106][T12509] should_failslab+0x5/0x20 [ 445.780665][T12509] slab_pre_alloc_hook+0x51/0xc0 [ 445.785668][T12509] __kmalloc_node+0x6e/0x3b0 [ 445.790536][T12509] ? kvmalloc_node+0x84/0x130 [ 445.795944][T12509] ? __might_fault+0xb3/0x110 [ 445.800919][T12509] kvmalloc_node+0x84/0x130 [ 445.805749][T12509] map_update_elem+0x53d/0x770 [ 445.810854][T12509] __sys_bpf+0x46b/0x6f0 [ 445.815271][T12509] ? bpf_link_show_fdinfo+0x380/0x380 [ 445.821112][T12509] ? vtime_user_exit+0x2c8/0x3e0 [ 445.826945][T12509] __x64_sys_bpf+0x78/0x90 [ 445.831887][T12509] do_syscall_64+0x4c/0xa0 [ 445.836461][T12509] ? clear_bhb_loop+0x30/0x80 [ 445.841909][T12509] ? clear_bhb_loop+0x30/0x80 [ 445.847935][T12509] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 445.854545][T12509] RIP: 0033:0x7f439f041f79 [ 445.859525][T12509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.880103][T12509] RSP: 002b:00007f439d29c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 445.889156][T12509] RAX: ffffffffffffffda RBX: 00007f439f2bbfa0 RCX: 00007f439f041f79 [ 445.897771][T12509] RDX: 0000000000000090 RSI: 0000200000000680 RDI: 0000000000000002 [ 445.907051][T12509] RBP: 00007f439d29c090 R08: 0000000000000000 R09: 0000000000000000 [ 445.915366][T12509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.923489][T12509] R13: 00007f439f2bc038 R14: 00007f439f2bbfa0 R15: 00007ffdfdc95178 [ 445.931655][T12509] [ 446.081091][T12501] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2671'. [ 446.607629][T12528] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.2681'. [ 446.659160][T12528] netlink: 16770 bytes leftover after parsing attributes in process `syz.2.2681'. [ 446.680047][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2681'. [ 448.639451][T12561] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2692'. [ 449.035097][T12577] FAULT_INJECTION: forcing a failure. [ 449.035097][T12577] name failslab, interval 1, probability 0, space 0, times 0 [ 449.097769][T12580] netlink: 'syz.0.2699': attribute type 11 has an invalid length. [ 449.144229][T12577] CPU: 0 PID: 12577 Comm: syz.1.2698 Not tainted syzkaller #0 [ 449.151770][T12577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 449.162185][T12577] Call Trace: [ 449.165516][T12577] [ 449.168713][T12577] dump_stack_lvl+0x188/0x250 [ 449.173543][T12577] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 449.179763][T12577] ? show_regs_print_info+0x20/0x20 [ 449.185115][T12577] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 449.191424][T12577] should_fail+0x38c/0x4c0 [ 449.196008][T12577] should_failslab+0x5/0x20 [ 449.200552][T12577] slab_pre_alloc_hook+0x51/0xc0 [ 449.205556][T12577] __kmalloc+0x6b/0x330 [ 449.209837][T12577] ? sk_prot_alloc+0xe7/0x210 [ 449.214572][T12577] sk_prot_alloc+0xe7/0x210 [ 449.219340][T12577] ? sk_alloc+0x1d/0x310 [ 449.223664][T12577] sk_alloc+0x2f/0x310 [ 449.227835][T12577] bpf_prog_test_run_skb+0x240/0x1180 [ 449.233250][T12577] ? __fget_files+0x40f/0x480 [ 449.237999][T12577] ? cpu_online+0x60/0x60 [ 449.242672][T12577] bpf_prog_test_run+0x31e/0x390 [ 449.248615][T12577] __sys_bpf+0x5a5/0x6f0 [ 449.252921][T12577] ? bpf_link_show_fdinfo+0x380/0x380 [ 449.258451][T12577] __x64_sys_bpf+0x78/0x90 [ 449.262927][T12577] do_syscall_64+0x4c/0xa0 [ 449.267393][T12577] ? clear_bhb_loop+0x30/0x80 [ 449.272124][T12577] ? clear_bhb_loop+0x30/0x80 [ 449.276956][T12577] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 449.283180][T12577] RIP: 0033:0x7f6f85b5ff79 [ 449.287842][T12577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.308169][T12577] RSP: 002b:00007f6f83dba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 449.316996][T12577] RAX: ffffffffffffffda RBX: 00007f6f85dd9fa0 RCX: 00007f6f85b5ff79 [ 449.325171][T12577] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 449.333459][T12577] RBP: 00007f6f83dba090 R08: 0000000000000000 R09: 0000000000000000 [ 449.341612][T12577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.349640][T12577] R13: 00007f6f85dda038 R14: 00007f6f85dd9fa0 R15: 00007ffc2c177aa8 [ 449.358519][T12577] [ 450.956621][T12608] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2707'. [ 451.357789][T12618] netlink: 'syz.2.2711': attribute type 3 has an invalid length. [ 451.404564][T12618] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2711'. [ 451.509803][T12618] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2711'. [ 451.760439][T12628] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2715'. [ 451.967915][T12634] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2718'. [ 452.019825][T12634] device team_slave_0 left promiscuous mode [ 452.208772][T12634] team0: Port device team_slave_0 removed [ 452.236386][T12634] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 453.055515][T12654] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2734'. [ 453.152994][T12656] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2724'. [ 454.023923][T12679] FAULT_INJECTION: forcing a failure. [ 454.023923][T12679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.071232][T12679] CPU: 1 PID: 12679 Comm: syz.0.2732 Not tainted syzkaller #0 [ 454.078782][T12679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 454.088931][T12679] Call Trace: [ 454.092269][T12679] [ 454.095245][T12679] dump_stack_lvl+0x188/0x250 [ 454.099994][T12679] ? show_regs_print_info+0x20/0x20 [ 454.105309][T12679] ? load_image+0x400/0x400 [ 454.110012][T12679] ? __lock_acquire+0x7d10/0x7d10 [ 454.115111][T12679] should_fail+0x38c/0x4c0 [ 454.119604][T12679] _copy_to_user+0x2e/0x130 [ 454.124299][T12679] simple_read_from_buffer+0xe3/0x150 [ 454.129754][T12679] proc_fail_nth_read+0x1a6/0x220 [ 454.135281][T12679] ? proc_fault_inject_write+0x310/0x310 [ 454.141100][T12679] ? fsnotify_perm+0x254/0x560 [ 454.145937][T12679] ? proc_fault_inject_write+0x310/0x310 [ 454.151728][T12679] vfs_read+0x301/0xd60 [ 454.155982][T12679] ? kernel_read+0x1e0/0x1e0 [ 454.160661][T12679] ? __fget_files+0x40f/0x480 [ 454.165423][T12679] ? mutex_lock_nested+0x17/0x20 [ 454.170461][T12679] ? __fdget_pos+0x2bf/0x370 [ 454.175110][T12679] ? ksys_read+0x71/0x260 [ 454.179584][T12679] ksys_read+0x152/0x260 [ 454.183902][T12679] ? vfs_write+0xd60/0xd60 [ 454.188514][T12679] ? lockdep_hardirqs_on+0x94/0x140 [ 454.193802][T12679] do_syscall_64+0x4c/0xa0 [ 454.198879][T12679] ? clear_bhb_loop+0x30/0x80 [ 454.203700][T12679] ? clear_bhb_loop+0x30/0x80 [ 454.208472][T12679] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 454.214463][T12679] RIP: 0033:0x7ff77731a84e [ 454.219142][T12679] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 454.240868][T12679] RSP: 002b:00007ff7755b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 454.249448][T12679] RAX: ffffffffffffffda RBX: 00007ff7755b46c0 RCX: 00007ff77731a84e [ 454.257919][T12679] RDX: 000000000000000f RSI: 00007ff7755b40a0 RDI: 0000000000000005 [ 454.266249][T12679] RBP: 00007ff7755b4090 R08: 0000000000000000 R09: 0000000000000000 [ 454.274316][T12679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.282673][T12679] R13: 00007ff7775d4038 R14: 00007ff7775d3fa0 R15: 00007ffc0401daf8 [ 454.290856][T12679] [ 455.098742][T12708] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2741'. [ 455.940327][T12720] netlink: 'syz.1.2746': attribute type 11 has an invalid length. [ 455.970728][T12717] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2745'. [ 456.935891][T12746] FAULT_INJECTION: forcing a failure. [ 456.935891][T12746] name failslab, interval 1, probability 0, space 0, times 0 [ 456.984447][T12746] CPU: 1 PID: 12746 Comm: syz.4.2753 Not tainted syzkaller #0 [ 456.992006][T12746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 457.002273][T12746] Call Trace: [ 457.005620][T12746] [ 457.008596][T12746] dump_stack_lvl+0x188/0x250 [ 457.013339][T12746] ? show_regs_print_info+0x20/0x20 [ 457.018692][T12746] ? load_image+0x400/0x400 [ 457.023316][T12746] ? __might_sleep+0xf0/0xf0 [ 457.028072][T12746] ? __lock_acquire+0x7d10/0x7d10 [ 457.033392][T12746] should_fail+0x38c/0x4c0 [ 457.037900][T12746] should_failslab+0x5/0x20 [ 457.042458][T12746] slab_pre_alloc_hook+0x51/0xc0 [ 457.047599][T12746] __kmalloc+0x6b/0x330 [ 457.051815][T12746] ? bpf_test_init+0xf8/0x1b0 [ 457.056554][T12746] ? __lock_acquire+0x7d10/0x7d10 [ 457.061650][T12746] bpf_test_init+0xf8/0x1b0 [ 457.066240][T12746] bpf_prog_test_run_skb+0x181/0x1180 [ 457.071808][T12746] ? __fget_files+0x40f/0x480 [ 457.076589][T12746] ? cpu_online+0x60/0x60 [ 457.080985][T12746] bpf_prog_test_run+0x31e/0x390 [ 457.086148][T12746] __sys_bpf+0x5a5/0x6f0 [ 457.090517][T12746] ? bpf_link_show_fdinfo+0x380/0x380 [ 457.096000][T12746] ? vtime_user_exit+0x2c8/0x3e0 [ 457.101124][T12746] __x64_sys_bpf+0x78/0x90 [ 457.105625][T12746] do_syscall_64+0x4c/0xa0 [ 457.110097][T12746] ? clear_bhb_loop+0x30/0x80 [ 457.115340][T12746] ? clear_bhb_loop+0x30/0x80 [ 457.120075][T12746] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 457.126011][T12746] RIP: 0033:0x7f31fd3f7f79 [ 457.130488][T12746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.150247][T12746] RSP: 002b:00007f31fb652028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 457.158842][T12746] RAX: ffffffffffffffda RBX: 00007f31fd671fa0 RCX: 00007f31fd3f7f79 [ 457.167038][T12746] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 457.175078][T12746] RBP: 00007f31fb652090 R08: 0000000000000000 R09: 0000000000000000 [ 457.183199][T12746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.191229][T12746] R13: 00007f31fd672038 R14: 00007f31fd671fa0 R15: 00007ffd120cef98 [ 457.199325][T12746] [ 457.262749][T12741] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2751'. [ 457.377365][T12741] device team_slave_0 left promiscuous mode [ 457.452203][T12745] delete_channel: no stack [ 457.593834][T12741] team0: Port device team_slave_0 removed [ 457.674097][T12741] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 458.956453][T12781] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2764'. [ 460.068450][T12811] netlink: 'syz.4.2770': attribute type 3 has an invalid length. [ 460.101893][T12811] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2770'. [ 460.219196][T12811] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2770'. [ 462.173124][T12856] netlink: 205500 bytes leftover after parsing attributes in process `syz.2.2785'. [ 462.265362][T12856] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 462.576492][T12863] netlink: 'syz.0.2788': attribute type 3 has an invalid length. [ 462.622066][T12865] FAULT_INJECTION: forcing a failure. [ 462.622066][T12865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.636294][T12863] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2788'. [ 462.658616][T12866] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2788'. [ 462.676686][T12865] CPU: 1 PID: 12865 Comm: syz.2.2789 Not tainted syzkaller #0 [ 462.684313][T12865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 462.694841][T12865] Call Trace: [ 462.698191][T12865] [ 462.701153][T12865] dump_stack_lvl+0x188/0x250 [ 462.705981][T12865] ? show_regs_print_info+0x20/0x20 [ 462.711230][T12865] ? load_image+0x400/0x400 [ 462.715779][T12865] ? __lock_acquire+0x7d10/0x7d10 [ 462.720955][T12865] should_fail+0x38c/0x4c0 [ 462.725424][T12865] _copy_from_user+0x2e/0x170 [ 462.730143][T12865] iovec_from_user+0x142/0x370 [ 462.734949][T12865] __import_iovec+0x70/0x490 [ 462.739799][T12865] import_iovec+0x6f/0xa0 [ 462.744167][T12865] ___sys_sendmsg+0x1fd/0x2e0 [ 462.748898][T12865] ? __sys_sendmsg+0x2a0/0x2a0 [ 462.753728][T12865] ? vfs_write+0x8b2/0xd60 [ 462.758220][T12865] __se_sys_sendmsg+0x1af/0x290 [ 462.763109][T12865] ? __x64_sys_sendmsg+0x80/0x80 [ 462.768178][T12865] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 462.774338][T12865] ? lockdep_hardirqs_on+0x94/0x140 [ 462.779585][T12865] do_syscall_64+0x4c/0xa0 [ 462.784042][T12865] ? clear_bhb_loop+0x30/0x80 [ 462.788759][T12865] ? clear_bhb_loop+0x30/0x80 [ 462.793474][T12865] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 462.799402][T12865] RIP: 0033:0x7f439f041f79 [ 462.803952][T12865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.823795][T12865] RSP: 002b:00007f439d29c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.832262][T12865] RAX: ffffffffffffffda RBX: 00007f439f2bbfa0 RCX: 00007f439f041f79 [ 462.840286][T12865] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 462.848300][T12865] RBP: 00007f439d29c090 R08: 0000000000000000 R09: 0000000000000000 [ 462.856316][T12865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.864332][T12865] R13: 00007f439f2bc038 R14: 00007f439f2bbfa0 R15: 00007ffdfdc95178 [ 462.872370][T12865] [ 463.125598][T12876] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 463.381699][T12886] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2796'. [ 464.262697][T12904] FAULT_INJECTION: forcing a failure. [ 464.262697][T12904] name failslab, interval 1, probability 0, space 0, times 0 [ 464.312294][T12904] CPU: 1 PID: 12904 Comm: syz.0.2802 Not tainted syzkaller #0 [ 464.319845][T12904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 464.329939][T12904] Call Trace: [ 464.333510][T12904] [ 464.336474][T12904] dump_stack_lvl+0x188/0x250 [ 464.341201][T12904] ? show_regs_print_info+0x20/0x20 [ 464.346540][T12904] ? load_image+0x400/0x400 [ 464.351105][T12904] ? rcu_lock_release+0x9/0x20 [ 464.355921][T12904] ? iptable_mangle_hook+0x185/0x4a0 [ 464.361264][T12904] should_fail+0x38c/0x4c0 [ 464.365827][T12904] should_failslab+0x5/0x20 [ 464.370640][T12904] slab_pre_alloc_hook+0x51/0xc0 [ 464.375632][T12904] ? dst_alloc+0x101/0x160 [ 464.380094][T12904] kmem_cache_alloc+0x3d/0x290 [ 464.384982][T12904] dst_alloc+0x101/0x160 [ 464.389276][T12904] rt_dst_clone+0x54/0x6a0 [ 464.393834][T12904] ip_mc_finish_output+0xe8/0x250 [ 464.398908][T12904] ip_mc_output+0x2a1/0x5e0 [ 464.403468][T12904] ip_send_skb+0x129/0x1c0 [ 464.408014][T12904] raw_sendmsg+0x14b7/0x1aa0 [ 464.412752][T12904] ? compat_raw_ioctl+0x60/0x60 [ 464.418188][T12904] ? aa_sk_perm+0x7dc/0x910 [ 464.422744][T12904] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 464.429214][T12904] ? sock_rps_record_flow+0x17/0x3b0 [ 464.434700][T12904] ? inet_sendmsg+0x78/0x2f0 [ 464.439342][T12904] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 464.444676][T12904] ? security_socket_sendmsg+0x7c/0xa0 [ 464.450181][T12904] ? inet_send_prepare+0x260/0x260 [ 464.455912][T12904] ____sys_sendmsg+0x5b7/0x8f0 [ 464.460736][T12904] ? __sys_sendmsg_sock+0x30/0x30 [ 464.465934][T12904] ? import_iovec+0x6f/0xa0 [ 464.470492][T12904] ___sys_sendmsg+0x236/0x2e0 [ 464.475407][T12904] ? __sys_sendmsg+0x2a0/0x2a0 [ 464.480439][T12904] ? vfs_write+0x8b2/0xd60 [ 464.485017][T12904] __se_sys_sendmsg+0x1af/0x290 [ 464.490276][T12904] ? __x64_sys_sendmsg+0x80/0x80 [ 464.495352][T12904] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 464.501626][T12904] ? lockdep_hardirqs_on+0x94/0x140 [ 464.506978][T12904] do_syscall_64+0x4c/0xa0 [ 464.511431][T12904] ? clear_bhb_loop+0x30/0x80 [ 464.516142][T12904] ? clear_bhb_loop+0x30/0x80 [ 464.520868][T12904] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 464.526911][T12904] RIP: 0033:0x7ff777359f79 [ 464.531364][T12904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.551357][T12904] RSP: 002b:00007ff775593028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.559845][T12904] RAX: ffffffffffffffda RBX: 00007ff7775d4090 RCX: 00007ff777359f79 [ 464.567944][T12904] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000005 [ 464.576135][T12904] RBP: 00007ff775593090 R08: 0000000000000000 R09: 0000000000000000 [ 464.584145][T12904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 464.592259][T12904] R13: 00007ff7775d4128 R14: 00007ff7775d4090 R15: 00007ffc0401daf8 [ 464.600561][T12904] [ 465.371367][T12923] netlink: 'syz.2.2806': attribute type 3 has an invalid length. [ 465.416104][T12923] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2806'. [ 465.516219][T12921] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2806'. [ 465.856225][T12934] netlink: 'syz.4.2812': attribute type 10 has an invalid length. [ 465.922806][T12934] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.996163][T12934] device bridge_slave_1 left promiscuous mode [ 466.034883][T12934] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.205424][T12934] device bridge_slave_1 entered promiscuous mode [ 466.260914][T12934] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 467.216736][T12962] netlink: 'syz.2.2820': attribute type 3 has an invalid length. [ 467.240879][T12962] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2820'. [ 467.501728][T12968] netlink: 'syz.1.2823': attribute type 1 has an invalid length. [ 467.614468][T12968] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2823'. [ 467.749886][T12975] netlink: 'syz.1.2823': attribute type 3 has an invalid length. [ 468.111600][T12975] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2823'. [ 468.153929][T12985] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2825'. [ 470.588868][T13019] netlink: 'syz.3.2835': attribute type 3 has an invalid length. [ 470.754416][T13019] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2835'. [ 471.178801][T13023] netlink: 'syz.4.2837': attribute type 3 has an invalid length. [ 471.252503][T13031] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2837'. [ 471.294933][T13023] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2837'. [ 471.371293][T13043] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2843'. [ 471.410556][T13043] netlink: 38831 bytes leftover after parsing attributes in process `syz.3.2843'. [ 472.588406][T13035] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2840'. [ 472.668071][T13058] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2848'. [ 474.808914][T13093] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2860'. [ 474.941475][T13098] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2858'. [ 475.318714][T13104] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2864'. [ 477.652659][T13135] FAULT_INJECTION: forcing a failure. [ 477.652659][T13135] name failslab, interval 1, probability 0, space 0, times 0 [ 477.794231][T13135] CPU: 0 PID: 13135 Comm: syz.0.2873 Not tainted syzkaller #0 [ 477.801802][T13135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 477.812116][T13135] Call Trace: [ 477.815432][T13135] [ 477.818394][T13135] dump_stack_lvl+0x188/0x250 [ 477.823711][T13135] ? show_regs_print_info+0x20/0x20 [ 477.828976][T13135] ? load_image+0x400/0x400 [ 477.833565][T13135] ? rcu_lock_release+0x5/0x20 [ 477.838469][T13135] should_fail+0x38c/0x4c0 [ 477.843146][T13135] should_failslab+0x5/0x20 [ 477.847701][T13135] slab_pre_alloc_hook+0x51/0xc0 [ 477.852690][T13135] kmem_cache_alloc_trace+0x47/0x2a0 [ 477.858015][T13135] ? proc_self_get_link+0xe1/0x170 [ 477.863176][T13135] proc_self_get_link+0xe1/0x170 [ 477.868535][T13135] ? proc_setup_self+0x2f0/0x2f0 [ 477.873584][T13135] pick_link+0x707/0xdc0 [ 477.877882][T13135] step_into+0xaf9/0xd10 [ 477.882196][T13135] ? set_root+0x3a0/0x3a0 [ 477.886682][T13135] ? walk_component+0x1b7/0x460 [ 477.891760][T13135] link_path_walk+0x665/0xd70 [ 477.896607][T13135] ? handle_lookup_down+0x130/0x130 [ 477.902098][T13135] ? percpu_counter_add_batch+0x13b/0x160 [ 477.907959][T13135] path_openat+0x28d/0x2fa0 [ 477.912573][T13135] ? perf_trace_lock_acquire+0xed/0x3e0 [ 477.918157][T13135] ? do_filp_open+0x410/0x410 [ 477.922963][T13135] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 477.929605][T13135] do_filp_open+0x1e2/0x410 [ 477.934246][T13135] ? vfs_tmpfile+0x300/0x300 [ 477.939069][T13135] ? _raw_spin_unlock+0x24/0x40 [ 477.943962][T13135] ? alloc_fd+0x598/0x630 [ 477.948350][T13135] do_sys_openat2+0x150/0x4b0 [ 477.953143][T13135] ? __lock_acquire+0x7d10/0x7d10 [ 477.958318][T13135] ? do_sys_open+0xe0/0xe0 [ 477.962984][T13135] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 477.969146][T13135] ? lock_chain_count+0x20/0x20 [ 477.974034][T13135] ? vtime_user_exit+0x2c8/0x3e0 [ 477.979191][T13135] __x64_sys_openat+0x135/0x160 [ 477.984260][T13135] do_syscall_64+0x4c/0xa0 [ 477.988805][T13135] ? clear_bhb_loop+0x30/0x80 [ 477.993519][T13135] ? clear_bhb_loop+0x30/0x80 [ 477.998374][T13135] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 478.004481][T13135] RIP: 0033:0x7ff77731a84e [ 478.009129][T13135] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 478.029397][T13135] RSP: 002b:00007ff7755b3ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 478.038453][T13135] RAX: ffffffffffffffda RBX: 00007ff7755b46c0 RCX: 00007ff77731a84e [ 478.046701][T13135] RDX: 0000000000000002 RSI: 00007ff7755b3f90 RDI: ffffffffffffff9c [ 478.055154][T13135] RBP: 00007ff7755b4090 R08: 0000000000000000 R09: 0000000000000000 [ 478.063376][T13135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.071393][T13135] R13: 00007ff7775d4038 R14: 00007ff7775d3fa0 R15: 00007ffc0401daf8 [ 478.079424][T13135] [ 478.818224][ T4281] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.332716][ T4281] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.401126][T13140] chnl_net:caif_netlink_parms(): no params data found [ 479.529031][ T4281] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.638054][ T4281] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.324356][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 480.677558][T13140] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.702139][T13140] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.725806][T13140] device bridge_slave_0 entered promiscuous mode [ 480.780125][T13140] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.845368][T13140] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.899319][T13140] device bridge_slave_1 entered promiscuous mode [ 480.955438][T13184] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2888'. [ 481.049488][T13140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.110394][T13140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.225155][T13140] team0: Port device team_slave_0 added [ 481.233944][T13140] team0: Port device team_slave_1 added [ 481.326598][T13140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.333617][T13140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.454349][T13140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.520798][T13140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.541795][T13140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.651141][T13140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.948131][T13140] device hsr_slave_0 entered promiscuous mode [ 482.023018][T13140] device hsr_slave_1 entered promiscuous mode [ 482.042661][T13211] netlink: 'syz.4.2896': attribute type 3 has an invalid length. [ 482.088161][T13207] netlink: 'syz.0.2895': attribute type 6 has an invalid length. [ 482.156974][T13211] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2896'. [ 482.186024][T13207] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2895'. [ 482.394738][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 482.414253][T13222] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2896'. [ 484.496396][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 485.409207][T13140] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 485.628642][T13292] netlink: 'syz.1.2909': attribute type 3 has an invalid length. [ 485.642933][T13140] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 485.674530][T13140] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 485.716180][T13292] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2909'. [ 485.756559][T13140] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 485.887590][T13294] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2909'. [ 486.556430][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 486.652834][T13140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.769654][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 486.795155][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 487.059621][T13140] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.225275][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 487.256769][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 487.294789][T11617] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.302009][T11617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.354724][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 487.371195][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 487.400717][T11617] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.407914][T11617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.471531][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 487.914684][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 487.943773][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 487.985206][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 488.015208][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 488.075174][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 488.138128][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 488.217520][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 488.245104][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 488.284574][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 488.326406][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 488.355175][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 488.389378][T13140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 489.075650][ T4281] device hsr_slave_0 left promiscuous mode [ 489.123283][ T4281] device hsr_slave_1 left promiscuous mode [ 489.138273][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.169304][T13358] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2917'. [ 489.218024][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.318191][ T4281] bridge0: port 3(team0) entered disabled state [ 489.348598][T13360] netlink: 'syz.3.2918': attribute type 3 has an invalid length. [ 489.383207][ T4281] device bridge_slave_1 left promiscuous mode [ 489.414735][T13360] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2918'. [ 489.430741][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.505375][ T4281] device bridge_slave_0 left promiscuous mode [ 489.515989][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.805226][ T4281] device veth1_macvtap left promiscuous mode [ 489.812256][ T4281] device veth1_vlan left promiscuous mode [ 489.836080][ T4281] device veth0_vlan left promiscuous mode [ 490.420148][ T4281] device geneve1 left promiscuous mode [ 490.575893][ T4281] team0 (unregistering): Port device geneve1 removed [ 492.243441][ T4281] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 492.341699][ T4281] device batadv_slave_0 left promiscuous mode [ 492.390737][ T4281] device team_slave_1 left promiscuous mode [ 492.436272][ T4281] team0 (unregistering): Port device team_slave_1 removed [ 492.604940][ T4281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.780606][ T4281] device bond_slave_1 left promiscuous mode [ 492.861792][ T4281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.019417][ T4281] device bond_slave_0 left promiscuous mode [ 493.294904][ T4281] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 493.314939][ T4281] device batadv0 left promiscuous mode [ 493.417371][ T4281] device bond0 left promiscuous mode [ 493.492610][ T4281] team0 (unregistering): Port device bond0 removed [ 493.590468][ T4281] bond0 (unregistering): Released all slaves [ 493.987018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 494.001818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 494.085321][T13396] netlink: 'syz.1.2928': attribute type 25 has an invalid length. [ 494.224213][T13396] netlink: 'syz.1.2928': attribute type 1 has an invalid length. [ 494.232290][T13396] bridge0: port 1(bridge_slave_0) entered learning state [ 494.321149][T13401] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2930'. [ 494.545500][T13140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.689932][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 494.727416][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 494.809037][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 494.828281][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 494.876612][T13140] device veth0_vlan entered promiscuous mode [ 494.915867][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 494.933060][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 495.002120][T13140] device veth1_vlan entered promiscuous mode [ 495.037170][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 495.189413][T13419] netlink: 'syz.3.2933': attribute type 3 has an invalid length. [ 495.205349][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 495.241966][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 495.284801][T13140] device veth0_macvtap entered promiscuous mode [ 495.317316][T13424] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2933'. [ 495.395235][T13419] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2933'. [ 495.447581][T13140] device veth1_macvtap entered promiscuous mode [ 495.565584][T13140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.624587][T13140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.704153][T13140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.762040][T13140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.792858][T13140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.877957][T13140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.907758][T13140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.974278][T13140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.050638][T13140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.078031][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 496.111117][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 496.134827][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 496.171234][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 496.184763][T13140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.220306][T13140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.231206][T13140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.264296][T13140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.279956][T13140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.290969][T13140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.321966][T13140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.375417][T13140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.403419][T13140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.431093][T13140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.463175][T13140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.506075][T13140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.545567][T13140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.598742][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 496.610865][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 497.128711][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.157331][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.204969][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 497.296619][ T4394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.326478][ T4394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.347338][T13455] netlink: 'syz.1.2940': attribute type 10 has an invalid length. [ 497.845255][T13469] netlink: 'syz.4.2944': attribute type 3 has an invalid length. [ 497.975955][T13469] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2944'. [ 498.676692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 498.865296][T13463] device syzkaller0 entered promiscuous mode [ 498.972657][T13465] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2944'. [ 499.815715][ T4290] Bluetooth: hci3: command 0x0409 tx timeout [ 499.917993][T13467] chnl_net:caif_netlink_parms(): no params data found [ 500.356661][T13492] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2949'. [ 500.923783][T13467] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.947658][T13467] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.962412][T13509] netlink: 'syz.2.2953': attribute type 3 has an invalid length. [ 500.975719][T13467] device bridge_slave_0 entered promiscuous mode [ 501.006651][T13509] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2953'. [ 501.028977][T13467] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.056902][T13467] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.104462][T13467] device bridge_slave_1 entered promiscuous mode [ 501.174758][T13509] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2953'. [ 501.261823][T13467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.316932][T13467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.374543][T13517] FAULT_INJECTION: forcing a failure. [ 501.374543][T13517] name failslab, interval 1, probability 0, space 0, times 0 [ 501.439069][T13467] team0: Port device team_slave_0 added [ 501.446886][T13517] CPU: 1 PID: 13517 Comm: syz.3.2956 Not tainted syzkaller #0 [ 501.454808][T13517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 501.465228][T13517] Call Trace: [ 501.468635][T13517] [ 501.471605][T13517] dump_stack_lvl+0x188/0x250 [ 501.476335][T13517] ? show_regs_print_info+0x20/0x20 [ 501.481589][T13517] ? load_image+0x400/0x400 [ 501.486236][T13517] ? __might_sleep+0xf0/0xf0 [ 501.490879][T13517] ? __lock_acquire+0x7d10/0x7d10 [ 501.496142][T13517] should_fail+0x38c/0x4c0 [ 501.500620][T13517] should_failslab+0x5/0x20 [ 501.505166][T13517] slab_pre_alloc_hook+0x51/0xc0 [ 501.505479][T13467] team0: Port device team_slave_1 added [ 501.510144][T13517] __kmalloc+0x6b/0x330 [ 501.510166][T13517] ? bpf_test_init+0xf8/0x1b0 [ 501.510188][T13517] ? __lock_acquire+0x7d10/0x7d10 [ 501.529890][T13517] bpf_test_init+0xf8/0x1b0 [ 501.534533][T13517] bpf_prog_test_run_skb+0x181/0x1180 [ 501.540160][T13517] ? __fget_files+0x40f/0x480 [ 501.545010][T13517] ? cpu_online+0x60/0x60 [ 501.549550][T13517] bpf_prog_test_run+0x31e/0x390 [ 501.554553][T13517] __sys_bpf+0x5a5/0x6f0 [ 501.556273][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.558843][T13517] ? bpf_link_show_fdinfo+0x380/0x380 [ 501.565599][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.570781][T13517] ? vtime_user_exit+0x2c8/0x3e0 [ 501.582095][T13517] __x64_sys_bpf+0x78/0x90 [ 501.586557][T13517] do_syscall_64+0x4c/0xa0 [ 501.591008][T13517] ? clear_bhb_loop+0x30/0x80 [ 501.595767][T13517] ? clear_bhb_loop+0x30/0x80 [ 501.600681][T13517] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 501.606809][T13517] RIP: 0033:0x7f75cbca6f79 [ 501.611447][T13517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.631907][T13517] RSP: 002b:00007f75c9f01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 501.640470][T13517] RAX: ffffffffffffffda RBX: 00007f75cbf20fa0 RCX: 00007f75cbca6f79 [ 501.648571][T13517] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 501.656852][T13517] RBP: 00007f75c9f01090 R08: 0000000000000000 R09: 0000000000000000 [ 501.665133][T13517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.673145][T13517] R13: 00007f75cbf21038 R14: 00007f75cbf20fa0 R15: 00007ffdca9da798 [ 501.681177][T13517] [ 501.715658][T13467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.722768][T13467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.750285][T13467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.763141][T13467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.771598][T13467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.805359][T13467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.844313][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 502.403645][T13467] device hsr_slave_0 entered promiscuous mode [ 502.412824][T13467] device hsr_slave_1 entered promiscuous mode [ 502.439855][T13467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.449795][T13467] Cannot create hsr debugfs directory [ 502.629020][T13534] netlink: 'syz.3.2964': attribute type 3 has an invalid length. [ 502.655066][T13534] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2964'. [ 502.682456][T13534] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2964'. [ 502.741526][ T4281] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.051718][ C0] [ 503.051728][ C0] ================================ [ 503.051734][ C0] WARNING: inconsistent lock state [ 503.051750][ C0] syzkaller #0 Not tainted [ 503.051762][ C0] -------------------------------- [ 503.051768][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 503.051776][ C0] syz.3.2968/13545 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 503.051799][ C0] ffff888044ba1868 (&htab->lockdep_key#2){....}-{2:2}, at: htab_lru_map_delete_elem+0x1b1/0x640 [ 503.051856][ C0] {INITIAL USE} state was registered at: [ 503.051864][ C0] lock_acquire+0x19e/0x400 [ 503.051886][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 503.051903][ C0] htab_lru_map_update_elem+0x37a/0xc40 [ 503.051919][ C0] bpf_map_update_value+0x57d/0x650 [ 503.051937][ C0] generic_map_update_batch+0x52d/0x7d0 [ 503.051955][ C0] bpf_map_do_batch+0x466/0x600 [ 503.051982][ C0] __sys_bpf+0x671/0x6f0 [ 503.051999][ C0] __x64_sys_bpf+0x78/0x90 [ 503.052016][ C0] do_syscall_64+0x4c/0xa0 [ 503.052033][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 503.052051][ C0] irq event stamp: 2002 [ 503.052057][ C0] hardirqs last enabled at (2001): [] ___slab_alloc+0xcd0/0xdd0 [ 503.052081][ C0] hardirqs last disabled at (2002): [] exc_debug+0x6e/0x130 [ 503.052104][ C0] softirqs last enabled at (1994): [] netlink_insert+0xe95/0x11f0 [ 503.052126][ C0] softirqs last disabled at (1992): [] release_sock+0x2b/0x1b0 [ 503.052148][ C0] [ 503.052148][ C0] other info that might help us debug this: [ 503.052153][ C0] Possible unsafe locking scenario: [ 503.052153][ C0] [ 503.052157][ C0] CPU0 [ 503.052160][ C0] ---- [ 503.052163][ C0] lock(&htab->lockdep_key#2); [ 503.052179][ C0] [ 503.052182][ C0] lock(&htab->lockdep_key#2); [ 503.052197][ C0] [ 503.052197][ C0] *** DEADLOCK *** [ 503.052197][ C0] [ 503.052201][ C0] no locks held by syz.3.2968/13545. [ 503.052209][ C0] [ 503.052209][ C0] stack backtrace: [ 503.052214][ C0] CPU: 0 PID: 13545 Comm: syz.3.2968 Not tainted syzkaller #0 [ 503.052232][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 503.052242][ C0] Call Trace: [ 503.052248][ C0] <#DB> [ 503.052254][ C0] dump_stack_lvl+0x188/0x250 [ 503.052277][ C0] ? show_regs_print_info+0x20/0x20 [ 503.052304][ C0] ? print_usage_bug+0x42a/0x690 [ 503.052320][ C0] ? verify_lock_unused+0x18/0x140 [ 503.052344][ C0] lock_acquire+0x2c3/0x400 [ 503.052364][ C0] ? rcu_lock_acquire+0x5/0x30 [ 503.052381][ C0] ? rcu_lock_release+0x5/0x40 [ 503.052400][ C0] ? htab_lru_map_delete_elem+0x1b1/0x640 [ 503.052419][ C0] ? read_lock_is_recursive+0x10/0x10 [ 503.052440][ C0] ? perf_trace_buf_update+0xa8/0x230 [ 503.052460][ C0] ? look_up_lock_class+0x71/0x110 [ 503.052482][ C0] ? verify_lock_unused+0x18/0x140 [ 503.052505][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 503.052523][ C0] ? htab_lru_map_delete_elem+0x1b1/0x640 [ 503.052541][ C0] ? _raw_spin_lock+0x40/0x40 [ 503.052560][ C0] ? htab_map_hash+0x329/0x6d0 [ 503.052579][ C0] htab_lru_map_delete_elem+0x1b1/0x640 [ 503.052611][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x9d4 [ 503.052635][ C0] bpf_overflow_handler+0x1c2/0x4a0 [ 503.052657][ C0] ? perf_get_page_size+0x430/0x430 [ 503.052683][ C0] ? perf_event_switch_output+0x730/0x730 [ 503.052718][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 503.052745][ C0] __perf_event_overflow+0x364/0x530 [ 503.052768][ C0] perf_bp_event+0x276/0x320 [ 503.052790][ C0] ? perf_event_free_bpf_prog+0x110/0x110 [ 503.052824][ C0] ? rcu_lock_acquire+0x9/0x30 [ 503.052845][ C0] ? read_lock_is_recursive+0x10/0x10 [ 503.052871][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 503.052894][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 503.052918][ C0] notify_die+0x141/0x1a0 [ 503.052939][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 503.052962][ C0] ? exc_debug+0x6e/0x130 [ 503.052985][ C0] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 503.053009][ C0] notify_debug+0x20/0x30 [ 503.053030][ C0] exc_debug+0xcf/0x130 [ 503.053050][ C0] asm_exc_debug+0x1a/0x40 [ 503.053067][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 503.053091][ C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 503.053108][ C0] RSP: 0018:ffffc9000325f7f8 EFLAGS: 00050202 [ 503.053124][ C0] RAX: ffffffff83e1be01 RBX: 0000000000000060 RCX: 000000000000005f [ 503.053138][ C0] RDX: 0000000000000060 RSI: 0000200000000301 RDI: ffff888062527801 [ 503.053152][ C0] RBP: ffffc9000325f950 R08: ffff88806252785f R09: 1ffff1100c4a4f0b [ 503.053166][ C0] R10: dffffc0000000000 R11: ffffed100c4a4f0c R12: ffff888062527800 [ 503.053181][ C0] R13: dffffc00000000ff R14: 0000200000000300 R15: 0000000000000000 [ 503.053198][ C0] ? _copy_from_iter+0x211/0x1170 [ 503.053223][ C0] [ 503.053228][ C0] [ 503.053233][ C0] _copy_from_iter+0x318/0x1170 [ 503.053269][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 503.053298][ C0] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 503.053322][ C0] ? __virt_addr_valid+0x3c6/0x470 [ 503.053340][ C0] ? __phys_addr_symbol+0x2b/0x70 [ 503.053358][ C0] ? __check_object_size+0x30c/0x410 [ 503.053381][ C0] netlink_sendmsg+0x758/0xbe0 [ 503.053403][ C0] ? netlink_getsockopt+0x570/0x570 [ 503.053422][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 503.053444][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 503.053465][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 503.053485][ C0] ? netlink_getsockopt+0x570/0x570 [ 503.053503][ C0] ____sys_sendmsg+0x5b7/0x8f0 [ 503.053528][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 503.053554][ C0] ? import_iovec+0x6f/0xa0 [ 503.053581][ C0] ___sys_sendmsg+0x236/0x2e0 [ 503.053607][ C0] ? __sys_sendmsg+0x2a0/0x2a0 [ 503.053633][ C0] ? percpu_counter_add_batch+0x13b/0x160 [ 503.053668][ C0] __se_sys_sendmsg+0x1af/0x290 [ 503.053690][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 503.053710][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 503.053740][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 503.053768][ C0] do_syscall_64+0x4c/0xa0 [ 503.053785][ C0] ? clear_bhb_loop+0x30/0x80 [ 503.053803][ C0] ? clear_bhb_loop+0x30/0x80 [ 503.053829][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 503.053849][ C0] RIP: 0033:0x7f75cbca6f79 [ 503.053864][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.053880][ C0] RSP: 002b:00007f75c9f01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.053899][ C0] RAX: ffffffffffffffda RBX: 00007f75cbf20fa0 RCX: 00007f75cbca6f79 [ 503.053914][ C0] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 503.053926][ C0] RBP: 00007f75cbd3d7e0 R08: 0000000000000000 R09: 0000000000000000 [ 503.053938][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.053949][ C0] R13: 00007f75cbf21038 R14: 00007f75cbf20fa0 R15: 00007ffdca9da798 [ 503.053977][ C0] [ 503.781449][ T4281] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.914722][ T4258] Bluetooth: hci3: command 0x040f tx timeout [ 504.023441][ T4281] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.170982][ T4281] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.390788][T13467] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 504.431117][T13467] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 504.490706][T13467] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 504.527496][T13467] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 504.760586][T13467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.826535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 504.854799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 504.864456][T13467] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.916724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 504.959860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 504.968877][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.976017][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.007179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 505.061700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 505.073586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 505.095729][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.102868][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.133813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 505.159452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 505.185122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 505.204796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 505.215015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 505.240486][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 505.255472][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 505.275868][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 505.293796][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 505.325944][T13467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.346330][T13467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 505.371525][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 505.386450][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 505.598249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 505.607353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 505.633676][T13467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.741221][ T4281] device hsr_slave_0 left promiscuous mode [ 505.753514][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.770674][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.781980][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.789679][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.800189][ T4281] batman_adv: batadv0: Interface deactivated: vlan1 [ 505.807491][ T4281] batman_adv: batadv0: Removing interface: vlan1 [ 505.815202][ T4281] bridge0: port 3(team0) entered disabled state [ 505.829353][ T4281] device bridge_slave_1 left promiscuous mode [ 505.843566][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.867546][ T4281] device bridge_slave_0 left promiscuous mode [ 505.874517][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.888132][ T4281] device veth1_macvtap left promiscuous mode [ 505.898928][ T4281] device veth1_vlan left promiscuous mode [ 505.908366][ T4281] device veth0_vlan left promiscuous mode [ 505.975020][ T4281] device geneve1 left promiscuous mode [ 505.981664][ T4281] team0 (unregistering): Port device geneve1 removed [ 506.004758][ T4258] Bluetooth: hci3: command 0x0419 tx timeout [ 506.067996][ T4281] device team_slave_1 left promiscuous mode [ 506.077038][ T4281] team0 (unregistering): Port device team_slave_1 removed [ 506.311381][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 506.322448][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 506.344713][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 506.356956][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 506.369210][T13467] device veth0_vlan entered promiscuous mode [ 506.376034][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 506.385159][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 506.397433][T13467] device veth1_vlan entered promiscuous mode [ 506.423537][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 506.432589][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 506.441275][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 506.454880][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 506.465603][T13467] device veth0_macvtap entered promiscuous mode [ 506.479892][T13467] device veth1_macvtap entered promiscuous mode [ 506.498255][T13467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.509496][T13467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.519895][T13467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.530946][T13467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.544210][T13467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.558675][T13467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.571386][T13467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.583246][T13467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.597347][T13467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.608240][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 506.617796][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 506.626498][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 506.643417][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 506.657527][T13467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.668550][T13467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.682087][T13467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.693302][T13467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.706486][T13467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.717736][T13467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.730581][T13467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.741432][T13467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.756372][T13467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.769157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 506.778696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 506.795601][T13467] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.805822][T13467] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.816160][T13467] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.826556][T13467] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.872265][T13467] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 506.902325][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.913437][T13467] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 506.915232][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.946122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 506.976807][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.985390][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.996929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready