last executing test programs: 3.708072864s ago: executing program 0 (id=518): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14}, 0x94) 3.513042378s ago: executing program 0 (id=520): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000719bfcff840000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xfe, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x490, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r5, 0x29, 0x15, &(0x7f0000000100), 0x3d) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) sendmsg(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x61800}, 0x94) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) 2.418922651s ago: executing program 2 (id=525): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x24000811) socketpair(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfe33) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x1, &(0x7f0000000140)=@raw=[@ldst={0x2, 0x2, 0x4, 0x0, 0xa, 0x2, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x7e, 0xf4, &(0x7f00000001c0)=""/244, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x6, 0x7, 0xc395}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[r1, r1, r1, r1, r1, r1], &(0x7f0000000380)=[{0x5, 0x2, 0xa, 0x8eca6c29857a5e9e}], 0x10, 0xffffffb3}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) 2.333864642s ago: executing program 0 (id=526): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6143, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x800}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x96}, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x10020) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.332246752s ago: executing program 1 (id=527): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xdcb, 0x8}, 0x114905, 0x8, 0x2000000, 0x1, 0x0, 0xffffffff, 0x1}, 0x0, 0x8000000008, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000240), &(0x7f00000002c0), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4474, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x8, 0xe6, 0x8, 0x54, 0x0, 0x65, 0x80616, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c25, 0x0, @perf_bp={&(0x7f0000000380), 0x9}, 0x8928, 0x5, 0xfffff476, 0x2, 0xfff, 0x40, 0x5, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xe, 0xffffffffffffffff, 0x2) r6 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0}, 0x1004, 0x6dd700000, 0x1, 0x0, 0x6, 0xfb, 0x5a6, 0x0, 0x0, 0x0, 0x87}, 0x0, 0x400000, r5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r7}, 0xc) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0xb6, 0xd, 0xf2, 0x0, 0x3, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x3, 0x204}, 0x112000, 0x7fffffffffffffff, 0x1, 0x2, 0xf, 0x5, 0x7, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x4, r6, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x35, &(0x7f00000005c0), 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a0, &(0x7f0000000600)='\n?\x99=\xec\x9a\xc30\xcf\xd5\xdd\xd6\x99\x86R\xd40\xf3\xa6E\xee}\x00\xe1<\x8d\xf9\xe24.E\xeb\x96\x9b\x12A\x1d\x1b\xc5\x9d\"w\xa0\xcd\xf9\x7f\xaa\xaf%\xf83\xac\xbe\xbe\xef\xcf\xb3\x04\xbbA{2\x97\xdc\x18u\xa6\bQ4\x13wmj\x94\x17\xa5\x1a\x11\x90\xf5\xbf\xeaY\x14\x1eQ\x004\xf4N\xe2P\xf0A~K\xee\xba\xf2\xa6\"\xfa\xa6h{\xae\x97\x8fZ+\xf6\xf99\xae\xb0R[\x93\xf0\xfeF\xda%\a4TmH\f\x19T*\x9a\xa1\x1d\xa4$\xb0\xad\x9cc\xfc\'\xf7\xca\x85\x8aq\x92\x1c+q\x7fS\xa3|ny\xde=1\xe9\xc4L\xd8\xd34\x8bm\v\xa1\x90F\x94|5\x1d\xab)\xa3\x1f\xac4a.>K\xd5/D\xdd6\xa1W\x9do\x01\x83\x12\x13R\xd0 \xcb\xc4\r\v\xd2FJ\xdf\xd4:\x96\x17\xb8\xfa\xe1\x9dY\xa99\xe0\xc2\x18\'B\xee\xe0\xc1p\xe9E@\xba') r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f917a3c92b", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map, 0x2b, 0x1, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xc, 0x0, 0x0, &(0x7f0000000380), &(0x7f0000000180)=[0x0]}, 0x40) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) 1.900596301s ago: executing program 2 (id=529): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r0}, 0xc) 1.829939863s ago: executing program 1 (id=530): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @generic={0x81, 0x3, 0x4, 0xff7f, 0x1}, @alu={0x7, 0x0, 0xc, 0xc, 0x2, 0xfffffffffffffff8, 0xffffffffffffffe9}, @generic={0xab, 0x1, 0x2, 0x8, 0x7fffffff}]}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0xe, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8}, 0x38) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x792}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3}, 0x38) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x24048010) 1.785409534s ago: executing program 0 (id=531): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x1}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}, 0x2) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="cc3172a12e0b63b1f20ab856d921d2b53dcc96e1dd37a9b1c15982360cf50bc49bfb67da48d806ddbee490a44ef9bff03dc30d37630269fa81ec2ef3f833fa7833defc99a1e1bbd5550ef6e1874c9e87853d01407209882b2c94c32f06", 0x5d}], 0x1}, 0x20049110) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x1a, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES8=r4, @ANYRESOCT, @ANYBLOB="0000000000000000b708000000000000a20000000000000702000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x28846, 0x1, 0x0, 0x2, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffcbe, &(0x7f0000000140)="06f7", 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000380)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r10) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000ef32c2fbcaffeffffff85000000a8000000850000007d0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) 1.783734023s ago: executing program 3 (id=532): socket$kcm(0x10, 0x2, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000037c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 1.746132664s ago: executing program 2 (id=533): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)={@map, 0xffffffffffffffff, 0x19, 0x200c}, 0x20) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180040000100000000000000fefb1c00960000000000000074d0b56378fd6432b4a9fc74091aac03b2f74e51357a86548eb0d3d5d9da79ae6a955c065e9a8d778572cd5e15a8464bf44da81c4f7549cc02b4e12985213dc3a5e515efac5d34638b5719d8032e46cc05f4827bc2efcaa52ebc67a296417d432809c17a249e8f4e22bfd818bf9a4e64d185d2b010"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c", @ANYRES32, @ANYRES8=r1], 0xfe33) r2 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f00000008c0)=r11, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0xb7, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xd1, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 1.569845068s ago: executing program 3 (id=534): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0xa14, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x809, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x35, 0x43a1bd76, 0x1, 0x3, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x1e, 0x5, 0x0) (async) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r3, r4]}}], 0x18, 0xcc040}, 0x64004084) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) socket$kcm(0x2c, 0x3, 0x0) (async) r6 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x11b, 0x2, &(0x7f0000000900)=r5, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x42, 0x0, 0x0) r9 = openat$cgroup_devices(r7, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='c 75:'], 0x5d) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x8, 0x1}, 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x8, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r10, &(0x7f0000000140), &(0x7f0000000200)=""/221, 0x1000000}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x58, &(0x7f00000000c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x8, 0x4, 0xa, 0x4, r10, 0x1, '\x00', r11, r5, 0x4, 0x1, 0x1, 0x1}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x8, 0x4, 0xa, 0x4, r10, 0x1, '\x00', r11, r5, 0x4, 0x1, 0x1, 0x1}, 0x50) 1.48636511s ago: executing program 0 (id=535): socket$kcm(0xa, 0x2, 0x3a) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000100), 0x4) recvmsg$kcm(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x38}, 0x22) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x2ddbe3ea58606920) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) socket$kcm(0x2c, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x63, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000640000006400000006000000000000000000000300000000030000000200000000000000020000000100000f01000000000000000000000000000000990000000000000004c9d920c1926c72310afac149cd6b0c00000000000000000000000c00000000000000000100000f03000000000000000000de92fd95439d8e1360cd27affea9a60fd175e469fc8614637792fd723662be3ce48d75218da08682cc379178e7f65dbeb50bb60f164c4cf40f1819c905fc48a927c6162a6599e4287a430237631361ada20db458d7128b8db339af5d6057633bc3898ec07d900134813ba40171482700"/256], 0x0, 0x82, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8940, &(0x7f0000000080)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', r3}, 0x18) close(r5) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000003c0)={0xffffffffffffffff, r1, 0x4, r3}, 0xa) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x3, {0xa, 0x4e24, 0x7, @remote}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x100000000000012f, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000140)=@alg, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f0000000200)=""/147, 0x93}], 0x2, &(0x7f0000000300)=""/19, 0x13}, 0x40000003) 1.4858748s ago: executing program 1 (id=536): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x4000}, [@ldst={0x4}, @ldst={0x3, 0x0, 0x6, 0x0, 0xa, 0x0, 0xa1}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0xffffff04, 0x61e5cc96}, 0x22) 1.433785411s ago: executing program 2 (id=537): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000580)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000007a000000760000000000000f73cc9b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0xef, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='THAWED\x00', 0x7) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x20}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000080), 0x9) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000ab008500000005000000bf0980000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b609000018000000493a15d4d0d0acda2786d1277a95e350000000bf86000005366e73e356d3383a0e0b0d0000000006e8d4", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000004d9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000580)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000007a000000760000000000000f73cc9b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0xef, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) (async) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='THAWED\x00', 0x7) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x20}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) write$cgroup_type(r4, &(0x7f0000000080), 0x9) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000ab008500000005000000bf0980000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b609000018000000493a15d4d0d0acda2786d1277a95e350000000bf86000005366e73e356d3383a0e0b0d0000000006e8d4", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000004d9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.329820793s ago: executing program 3 (id=538): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xed, 0x0, 0x0, 0x8, 0x0, 0x0, 0x46000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$kcm(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1a63707520"], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='-cpu'], 0x5) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12804, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x5, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) 1.329272463s ago: executing program 1 (id=539): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000080)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)}, {&(0x7f0000000140)="1e051c31ac0516554b81000cbd345682ae139c110e4aac11759393e973b1baf95767f70463df2bfb2b937f33d80ad8386e20ee", 0x33}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="9fb6805f6e01e7784efc13ddc99e226dd21386e670b3eb64e3e073ee1396a200c54d60664f4c2cd5f2f41e7e0808776fc3b7a11f6860f0411e7e54bcd62c32c6fd464cf44ab617238a13f1a632e18fa2aaa394e7b625eb98b437bf0b9482bf5b1e3dfe7171d574b7a384cb05de626621eb49324e94440746a4e7b2de721ca1167e8447a136ce4c94219c4aae66fc4f48c763eb9a748ab9043d3cfa33900fb6b6b656ef60615a04d596f4e1abf3a74a9123923a68a5a386c56e08ebcfdd6d058a37906f2e96e425bdc72ffd1136070ca61f0baa", 0xd3}], 0x4}, 0x1) 1.219848205s ago: executing program 3 (id=540): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03e03003b000b05d25a806c8c6f94f90424fc600509000000153e3704000880fc0b09000300", 0x26}], 0x1}, 0x0) 1.142063347s ago: executing program 2 (id=541): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x297f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x18114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x27, &(0x7f0000000040), 0x4) close(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xffffffffffffffef}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0xfd122f3cb48753c8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xeffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x20000840) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 905.980972ms ago: executing program 3 (id=542): socket$kcm(0x10, 0x2, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000037c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 783.573454ms ago: executing program 1 (id=543): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)="0db123da989255382af5407f68603395e9feeec23375be8a79f2a491ef9e2302da25bcfc0e8442bec406f7e772996b4e72fedd0abaf517ab8a2e2cd047dcee5d17afb112c45d3cd410f3", 0x4a}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYRES32=r1], 0x98}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x594f, 0x3}, 0x1041a1, 0xc, 0x9, 0x1, 0x0, 0x300, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21", 0xe}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000001, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000005000000080000000f00", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000da6b1fe48cc1c63e7d221", @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=[{0x3, 0x5, 0xc}], 0x10, 0x10000}, 0x94) close(0xffffffffffffffff) 658.999937ms ago: executing program 3 (id=544): socketpair(0x18, 0x4, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x465412251ac37cff, 0x80, 0x1, 0x7, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x3}, 0x4, 0x1, 0x9, 0x2, 0x10000, 0xc, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x13}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) r5 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000300)={r5}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x14, &(0x7f0000000000), 0x8) sendmsg$inet(r6, &(0x7f0000000d80)={&(0x7f0000000b40)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000b80)="e0", 0x1}], 0x1}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x8, [@float={0x2, 0x0, 0x0, 0x10, 0xc}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x2}, @float={0x1, 0x0, 0x0, 0x10, 0x4}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x1}, @const={0xe, 0x0, 0x0, 0xa, 0x1}, @enum={0x10, 0x1, 0x0, 0x6, 0x4, [{0xe, 0x6}]}, @enum={0xc, 0x1, 0x0, 0x6, 0x4, [{0xe, 0x5}]}]}, {0x0, [0x61, 0x0, 0x6f, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000580)=""/116, 0x84, 0x74, 0x1, 0x4}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x22, 0x6, 0x1fc, 0x200, 0x1, 0x4, '\x00', 0x0, r7, 0x3, 0x4, 0x0, 0x4}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x6, 0x4, 0x2, 0x7, 0x10, r8, 0x1000001}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r10}, 0xc) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x3, 0x0, r9, 0x80000001, '\x00', 0x0, r7, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x15, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@generic={0xf9, 0x2, 0xf, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @call={0x85, 0x0, 0x0, 0x6c}, @map_val={0x18, 0x0, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x2d6}, @ldst={0x0, 0x0, 0x3, 0xb, 0x8, 0xfffffffffffffffe, 0xfffffffffffffff0}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000980)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f00000009c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0x2, 0xfffffffe, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[r9], &(0x7f0000000a80)=[{0x4, 0x3, 0x0, 0x4}, {0x3, 0x3, 0x1, 0x5}], 0x10, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001dc0)={&(0x7f0000000080)="d35415b2957557cc4a1b6de3869ddeb36b2065e21a75d6bc35f3901bed4ef737539d6fe502954362a09fcd2887342e812812eba91c2736acc333b2c5e5400bc684d91922622f0b9dbc6fea44dc5334bcc4c1f5e8dad9fe09ed4c2ac03c9c59c21823b25c88bc7099d899940cad9312a166a3f2a77b920c49091495ebbf9d2a", &(0x7f0000000100)=""/202, &(0x7f0000000200)="4de26f6aa001728140e4c61e31009da666af390deb838f4d0a5d3ddf2edd258b9d9b164164959a6f446b141365a86db4ba62206485954ab4f3ca42e131dcd4336bce7d6e2a011cb30a42217f7d9ddcd4788faf22204a111e6e2fb930056422a98ff263435873cb8c97d24c2df6b1dea07a6c5131ff4967c095b25ede48be83fcedd5d4d233604f275d70bf5ad45f61f527c3a9653ba2b221fd092f424943", &(0x7f0000000dc0)="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", 0x80, r9}, 0x38) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r12, 0x800454e0, &(0x7f0000000380)=r10) 46.025369ms ago: executing program 0 (id=545): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0xa, 0x1, 0x106) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc1, &(0x7f0000000400)=""/193, 0x0, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x19, &(0x7f0000000180), 0x4) 32.333439ms ago: executing program 1 (id=546): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={0x0, 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x1, 0x0, 0x1, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x6}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x15, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fafff8130000000000000000850000003600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x7}]}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000080)="5c0000007a006bcd9e3fe3dc6e081700070010131310db586ab96e23f468a9b603001d489868aa43bf33b823f924d78828a0043d4e82949a3651f6239787ed0800000057249063bf2f68c3664402682fb6b1c6f16e3f5f06d1dba91f", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, 0x0}, 0x80d1) socket$kcm(0x2, 0x1, 0x84) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x2001, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc00000000000000000000000000000200001e0000"], 0x0, 0xfc5f}, 0x20) 0s ago: executing program 2 (id=547): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="000000005f000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x6, 0xfa, 0x80, 0x0, 0x0, 0x9ef, 0x40000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x7bb4, 0x9}, 0x8000, 0x9, 0x0, 0x4, 0x0, 0x4, 0x3, 0x0, 0xe3ad, 0x0, 0x4}, 0x0, 0xb, r5, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r9}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x3ff, 0x8, 0x40, 0x42, 0x1}, 0x4f) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r10}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x65}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="63f48eeb93bf", 0x6}, {&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000009bb9ef7f75c9f12c0e000a000f000000", 0x28}, {&(0x7f0000000200)="0cb5d25eb9fe4bcf88b4e3fa24a8d6f9ae43da984401af01012bdbcc99b4b19f81f60f3629e75dcba58df24306a6e9a5c156fe2ed4058aeadde4fa9717d4fcd76614c439b6b9bfdf", 0x48}], 0x2}, 0x40) kernel console output (not intermixed with test programs): 2] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.142044][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.170287][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.192700][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.215696][ T5774] team0: Port device team_slave_0 added [ 76.228451][ T5774] team0: Port device team_slave_1 added [ 76.235479][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.243378][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.271174][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.283190][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.292219][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.321347][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.366512][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.376878][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.404987][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.420067][ T5773] team0: Port device team_slave_0 added [ 76.435315][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.443316][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.477771][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.495490][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.502697][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.529560][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.543666][ T5773] team0: Port device team_slave_1 added [ 76.593804][ T5772] hsr_slave_0: entered promiscuous mode [ 76.600307][ T5772] hsr_slave_1: entered promiscuous mode [ 76.654130][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.661381][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.689316][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.721429][ T5771] hsr_slave_0: entered promiscuous mode [ 76.728871][ T5771] hsr_slave_1: entered promiscuous mode [ 76.735805][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.744517][ T5771] Cannot create hsr debugfs directory [ 76.750966][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.760189][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.786898][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.817736][ T5774] hsr_slave_0: entered promiscuous mode [ 76.824940][ T5774] hsr_slave_1: entered promiscuous mode [ 76.832074][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.839880][ T5774] Cannot create hsr debugfs directory [ 76.858977][ T51] Bluetooth: hci0: command tx timeout [ 76.858989][ T5784] Bluetooth: hci2: command tx timeout [ 76.890279][ T5773] hsr_slave_0: entered promiscuous mode [ 76.896872][ T5773] hsr_slave_1: entered promiscuous mode [ 76.904780][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.912833][ T5773] Cannot create hsr debugfs directory [ 76.938298][ T51] Bluetooth: hci1: command tx timeout [ 76.938342][ T5784] Bluetooth: hci3: command tx timeout [ 77.285437][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.306532][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.317549][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.329083][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.390466][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.407469][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.417531][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.430433][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.537831][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.555931][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.566551][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.577005][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.669114][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.683961][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.702805][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.713529][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.726027][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.751753][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.779937][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.787723][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.840116][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.847335][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.864815][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.942901][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.983429][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.990745][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.014196][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.032407][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.039717][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.127802][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.154354][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.162015][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.192939][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.213398][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.220658][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.275337][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.347155][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.354727][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.367101][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.374441][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.472145][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.620903][ T5772] veth0_vlan: entered promiscuous mode [ 78.675692][ T5772] veth1_vlan: entered promiscuous mode [ 78.742775][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.827307][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.881910][ T5772] veth0_macvtap: entered promiscuous mode [ 78.921847][ T5772] veth1_macvtap: entered promiscuous mode [ 78.934759][ T5771] veth0_vlan: entered promiscuous mode [ 78.938544][ T5784] Bluetooth: hci0: command tx timeout [ 78.941346][ T51] Bluetooth: hci2: command tx timeout [ 78.969164][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.982369][ T5771] veth1_vlan: entered promiscuous mode [ 79.018913][ T51] Bluetooth: hci3: command tx timeout [ 79.019872][ T5784] Bluetooth: hci1: command tx timeout [ 79.050855][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.064383][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.081475][ T5771] veth0_macvtap: entered promiscuous mode [ 79.089534][ T5774] veth0_vlan: entered promiscuous mode [ 79.103500][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.114608][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.124518][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.133835][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.150141][ T5771] veth1_macvtap: entered promiscuous mode [ 79.169050][ T5774] veth1_vlan: entered promiscuous mode [ 79.240671][ T5773] veth0_vlan: entered promiscuous mode [ 79.255912][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.274878][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.290183][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.304092][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.315815][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.329590][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.371050][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.381568][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.391393][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.400396][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.412424][ T5773] veth1_vlan: entered promiscuous mode [ 79.428745][ T5774] veth0_macvtap: entered promiscuous mode [ 79.493111][ T5774] veth1_macvtap: entered promiscuous mode [ 79.510205][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.524378][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.565825][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.576805][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.594972][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.605840][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.618751][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.672338][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.683489][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.694352][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.706084][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.717366][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.726602][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.736962][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.752616][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.755091][ T5773] veth0_macvtap: entered promiscuous mode [ 79.764756][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.795774][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.819400][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.829266][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.838547][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.864877][ T5773] veth1_macvtap: entered promiscuous mode [ 79.914191][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.922694][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.937772][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.950015][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.960666][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.971785][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.982106][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.995407][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.015766][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.027128][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.038573][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.048660][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.060754][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.071639][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.082667][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.094768][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.132182][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.147681][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.161375][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.180198][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.366321][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.412958][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.490873][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.509569][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.547595][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.567790][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.654180][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.683496][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.978035][ C1] hrtimer: interrupt took 57410 ns [ 80.983372][ T5841] €Â0: renamed from batadv_slave_1 (while UP) [ 81.012497][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 81.039090][ T5784] Bluetooth: hci2: command tx timeout [ 81.039632][ T51] Bluetooth: hci0: command tx timeout [ 81.071047][ T5839] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.105309][ T51] Bluetooth: hci1: command tx timeout [ 81.105321][ T5784] Bluetooth: hci3: command tx timeout [ 81.114295][ T5841] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1'. [ 81.573893][ T5850] netlink: 'syz.2.7': attribute type 10 has an invalid length. [ 81.676917][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.695233][ T5850] bridge_slave_1: left allmulticast mode [ 81.702589][ T5850] bridge_slave_1: left promiscuous mode [ 81.706111][ T5858] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9'. [ 81.710418][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.771385][ T5850] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 81.931659][ T5850] syz.2.7 (5850) used greatest stack depth: 20456 bytes left [ 82.028903][ T5863] netlink: 'syz.0.10': attribute type 10 has an invalid length. [ 82.102698][ T5865] delete_channel: no stack [ 82.126558][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.142992][ T5863] bridge_slave_1: left allmulticast mode [ 82.152447][ T5863] bridge_slave_1: left promiscuous mode [ 82.165829][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.233142][ T5863] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 82.250342][ T5862] netlink: 'syz.3.11': attribute type 10 has an invalid length. [ 82.296915][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.315716][ T5862] bridge_slave_1: left allmulticast mode [ 82.323407][ T5862] bridge_slave_1: left promiscuous mode [ 82.333399][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.413623][ T5862] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 82.429963][ T5869] netlink: 'syz.2.12': attribute type 10 has an invalid length. [ 82.482442][ T5862] syz.3.11 (5862) used greatest stack depth: 20200 bytes left [ 82.750953][ T5886] netlink: 'syz.2.18': attribute type 39 has an invalid length. [ 83.099128][ T5784] Bluetooth: hci0: command tx timeout [ 83.105770][ T51] Bluetooth: hci2: command tx timeout [ 83.179060][ T51] Bluetooth: hci3: command tx timeout [ 83.185084][ T5784] Bluetooth: hci1: command tx timeout [ 83.729980][ T5898] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.22'. [ 83.786866][ T5897] €Â0: renamed from batadv_slave_1 (while UP) [ 83.881013][ T5897] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.23'. [ 83.896713][ T5905] Zero length message leads to an empty skb [ 84.000810][ T5905] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 84.059780][ T5904] delete_channel: no stack [ 84.131134][ T5911] netlink: 'syz.1.27': attribute type 39 has an invalid length. [ 84.609351][ T5918] netlink: 'syz.3.29': attribute type 3 has an invalid length. [ 84.617458][ T5918] netlink: 'syz.3.29': attribute type 1 has an invalid length. [ 84.637680][ T5918] netlink: 'syz.3.29': attribute type 6 has an invalid length. [ 84.647431][ T5918] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.29'. [ 84.664981][ T5919] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.29'. [ 84.702147][ T5919] netlink: zone id is out of range [ 84.707426][ T5919] netlink: zone id is out of range [ 84.741728][ T5919] netlink: zone id is out of range [ 84.749195][ T5919] netlink: zone id is out of range [ 84.759247][ T5921] netlink: 'syz.0.31': attribute type 10 has an invalid length. [ 84.802955][ T5919] netlink: zone id is out of range [ 84.808377][ T5919] netlink: zone id is out of range [ 84.814240][ T5919] netlink: zone id is out of range [ 84.822032][ T5919] netlink: zone id is out of range [ 84.827368][ T5919] netlink: zone id is out of range [ 84.832910][ T5919] netlink: zone id is out of range [ 84.981384][ T5927] €Â0: renamed from batadv_slave_1 (while UP) [ 85.046705][ T5927] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.32'. [ 85.252118][ T5933] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.36'. [ 85.537762][ T5943] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 85.674455][ T5941] delete_channel: no stack [ 85.717385][ T5947] €Â0: renamed from batadv_slave_1 (while UP) [ 85.811160][ T5947] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.40'. [ 86.395119][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.419711][ T5965] bridge_slave_1: left allmulticast mode [ 86.457488][ T5965] bridge_slave_1: left promiscuous mode [ 86.489804][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.584095][ T5965] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 86.635524][ T5976] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.46'. [ 86.672865][ T5977] validate_nla: 3 callbacks suppressed [ 86.672918][ T5977] netlink: 'syz.0.50': attribute type 3 has an invalid length. [ 86.691497][ T5977] netlink: 'syz.0.50': attribute type 1 has an invalid length. [ 86.692042][ T5965] syz.1.56 (5965) used greatest stack depth: 19944 bytes left [ 86.699774][ T5977] netlink: 'syz.0.50': attribute type 6 has an invalid length. [ 86.716523][ T5977] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.50'. [ 86.729626][ T5980] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.50'. [ 86.974198][ T5982] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.51'. [ 87.090201][ T5987] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 87.160086][ T5986] delete_channel: no stack [ 87.381989][ T5993] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.54'. [ 87.487168][ T5996] netlink: 'syz.2.55': attribute type 39 has an invalid length. [ 87.660128][ T6002] netlink: 'syz.0.58': attribute type 39 has an invalid length. [ 88.032148][ T6008] netlink: 'syz.3.60': attribute type 10 has an invalid length. [ 88.427599][ T6018] netlink: 'syz.1.66': attribute type 10 has an invalid length. [ 88.476743][ T6019] delete_channel: no stack [ 88.580952][ T6025] netlink: 'syz.2.67': attribute type 3 has an invalid length. [ 88.589137][ T6025] netlink: 'syz.2.67': attribute type 1 has an invalid length. [ 88.596907][ T6025] netlink: 'syz.2.67': attribute type 6 has an invalid length. [ 88.606566][ T6025] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.67'. [ 88.626430][ T6025] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.67'. [ 89.789513][ T6033] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.68'. [ 90.214682][ T6051] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.75'. [ 90.385722][ T6056] delete_channel: no stack [ 90.636990][ T6066] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.80'. [ 90.686247][ T6066] net_ratelimit: 404 callbacks suppressed [ 90.686265][ T6066] netlink: zone id is out of range [ 90.716437][ T6066] netlink: zone id is out of range [ 90.723119][ T6066] netlink: zone id is out of range [ 90.729553][ T6066] netlink: zone id is out of range [ 90.735901][ T6066] netlink: zone id is out of range [ 90.741752][ T6066] netlink: zone id is out of range [ 90.749956][ T6066] netlink: zone id is out of range [ 90.755795][ T6066] netlink: zone id is out of range [ 90.761713][ T6066] netlink: zone id is out of range [ 90.767314][ T6066] netlink: zone id is out of range [ 92.136517][ T6100] validate_nla: 10 callbacks suppressed [ 92.136559][ T6100] netlink: 'syz.0.93': attribute type 10 has an invalid length. [ 92.189556][ T6102] netlink: 'syz.1.94': attribute type 10 has an invalid length. [ 92.243883][ T788] cfg80211: failed to load regulatory.db [ 92.661703][ T6114] netlink: 'syz.1.97': attribute type 10 has an invalid length. [ 92.852749][ T6117] __nla_validate_parse: 2 callbacks suppressed [ 92.852786][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 92.856809][ T6120] FAULT_INJECTION: forcing a failure. [ 92.856809][ T6120] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.892657][ T6120] CPU: 1 PID: 6120 Comm: syz.1.99 Not tainted syzkaller #0 [ 92.900109][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 92.911346][ T6120] Call Trace: [ 92.914683][ T6120] [ 92.917763][ T6120] dump_stack_lvl+0x18c/0x250 [ 92.922703][ T6120] ? show_regs_print_info+0x20/0x20 [ 92.928477][ T6120] ? load_image+0x420/0x420 [ 92.933287][ T6120] ? __might_fault+0xaa/0x120 [ 92.939682][ T6120] ? __lock_acquire+0x7d80/0x7d80 [ 92.946274][ T6120] should_fail_ex+0x394/0x4c0 [ 92.951219][ T6120] _copy_from_user+0x2f/0xe0 [ 92.955939][ T6120] ___sys_recvmsg+0x174/0x590 [ 92.960645][ T6120] ? __sys_recvmsg+0x2a0/0x2a0 [ 92.965528][ T6120] ? ksys_write+0x1d2/0x260 [ 92.970058][ T6120] ? __fget_files+0x3fc/0x460 [ 92.975568][ T6120] __x64_sys_recvmsg+0x21e/0x2f0 [ 92.980630][ T6120] ? ___sys_recvmsg+0x590/0x590 [ 92.986348][ T6120] ? lockdep_hardirqs_on+0x98/0x150 [ 92.992219][ T6120] do_syscall_64+0x55/0xb0 [ 92.996949][ T6120] ? clear_bhb_loop+0x40/0x90 [ 93.001835][ T6120] ? clear_bhb_loop+0x40/0x90 [ 93.006663][ T6120] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.013209][ T6120] RIP: 0033:0x7f18d7f9de59 [ 93.017749][ T6120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.043537][ T6120] RSP: 002b:00007f18d8ee4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 93.054604][ T6120] RAX: ffffffffffffffda RBX: 00007f18d8225fa0 RCX: 00007f18d7f9de59 [ 93.065943][ T6120] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 93.077783][ T6120] RBP: 00007f18d8ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 93.088271][ T6120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.097683][ T6120] R13: 00007f18d8226038 R14: 00007f18d8225fa0 R15: 00007fff0ab0bfb8 [ 93.108815][ T6120] [ 93.192074][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 93.266879][ T6117] syz.0.98 (6117) used greatest stack depth: 19432 bytes left [ 94.195478][ T6147] netlink: 'syz.3.107': attribute type 10 has an invalid length. [ 95.010961][ T6163] netlink: 'syz.2.116': attribute type 29 has an invalid length. [ 95.023126][ T6163] netlink: 'syz.2.116': attribute type 29 has an invalid length. [ 95.035398][ T6163] netlink: 'syz.2.116': attribute type 29 has an invalid length. [ 95.050219][ T6163] netlink: 'syz.2.116': attribute type 29 has an invalid length. [ 95.052048][ T6167] netlink: 'syz.0.117': attribute type 1 has an invalid length. [ 95.060686][ T6163] netlink: 'syz.2.116': attribute type 29 has an invalid length. [ 95.073133][ T6167] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.117'. [ 95.288232][ T6177] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.053287][ T6183] team0: Device wg1 is of different type [ 96.805796][ T6195] netlink: 10 bytes leftover after parsing attributes in process `syz.3.127'. [ 96.844111][ T6198] netlink: 10 bytes leftover after parsing attributes in process `syz.3.127'. [ 97.136185][ T6209] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.131'. [ 97.180703][ T6211] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.134'. [ 97.195272][ T6213] netlink: 180 bytes leftover after parsing attributes in process `syz.2.135'. [ 97.211543][ T6211] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.134'. [ 97.256561][ T6211] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.134'. [ 98.187014][ T6225] FAULT_INJECTION: forcing a failure. [ 98.187014][ T6225] name failslab, interval 1, probability 0, space 0, times 1 [ 98.233275][ T6225] CPU: 0 PID: 6225 Comm: syz.1.140 Not tainted syzkaller #0 [ 98.241068][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 98.251763][ T6225] Call Trace: [ 98.255177][ T6225] [ 98.258156][ T6225] dump_stack_lvl+0x18c/0x250 [ 98.263232][ T6225] ? show_regs_print_info+0x20/0x20 [ 98.268913][ T6225] ? load_image+0x420/0x420 [ 98.273461][ T6225] ? __might_sleep+0xe0/0xe0 [ 98.278115][ T6225] ? __lock_acquire+0x7d80/0x7d80 [ 98.283187][ T6225] should_fail_ex+0x394/0x4c0 [ 98.288255][ T6225] should_failslab+0x9/0x20 [ 98.292894][ T6225] slab_pre_alloc_hook+0x59/0x300 [ 98.298001][ T6225] kmem_cache_alloc_node+0x5e/0x310 [ 98.303257][ T6225] ? __alloc_skb+0x103/0x2c0 [ 98.307977][ T6225] __alloc_skb+0x103/0x2c0 [ 98.312603][ T6225] alloc_skb_with_frags+0xcd/0x7a0 [ 98.317747][ T6225] sock_alloc_send_pskb+0x883/0x9a0 [ 98.323165][ T6225] ? sock_kzfree_s+0x50/0x50 [ 98.328137][ T6225] tun_get_user+0xa2e/0x3d70 [ 98.332950][ T6225] ? aa_file_perm+0x3e3/0xee0 [ 98.337759][ T6225] ? rcu_read_unlock+0xa0/0xa0 [ 98.342618][ T6225] ? tun_get+0x1c/0x2e0 [ 98.346787][ T6225] ? __lock_acquire+0x7d80/0x7d80 [ 98.352351][ T6225] ? tun_get+0x1c/0x2e0 [ 98.356620][ T6225] tun_chr_write_iter+0x119/0x200 [ 98.362241][ T6225] vfs_write+0x474/0x9a0 [ 98.367144][ T6225] ? file_end_write+0x250/0x250 [ 98.372566][ T6225] ? __fget_files+0x3fc/0x460 [ 98.377358][ T6225] ? __fdget_pos+0x1d8/0x330 [ 98.382145][ T6225] ? ksys_write+0x74/0x260 [ 98.386927][ T6225] ksys_write+0x151/0x260 [ 98.391287][ T6225] ? __ia32_sys_read+0x90/0x90 [ 98.396254][ T6225] ? lockdep_hardirqs_on+0x98/0x150 [ 98.401564][ T6225] do_syscall_64+0x55/0xb0 [ 98.406086][ T6225] ? clear_bhb_loop+0x40/0x90 [ 98.410773][ T6225] ? clear_bhb_loop+0x40/0x90 [ 98.415469][ T6225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.421549][ T6225] RIP: 0033:0x7f18d7f9de59 [ 98.426297][ T6225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.446009][ T6225] RSP: 002b:00007f18d8ee4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.454876][ T6225] RAX: ffffffffffffffda RBX: 00007f18d8225fa0 RCX: 00007f18d7f9de59 [ 98.462957][ T6225] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 00000000000000c8 [ 98.470949][ T6225] RBP: 00007f18d8ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 98.479373][ T6225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.487882][ T6225] R13: 00007f18d8226038 R14: 00007f18d8225fa0 R15: 00007fff0ab0bfb8 [ 98.495992][ T6225] [ 98.584755][ T6234] __nla_validate_parse: 30 callbacks suppressed [ 98.584772][ T6234] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.142'. [ 98.661578][ T6233] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.143'. [ 98.714613][ T6236] netlink: 10 bytes leftover after parsing attributes in process `syz.1.144'. [ 98.811310][ T6240] FAULT_INJECTION: forcing a failure. [ 98.811310][ T6240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.856440][ T6240] CPU: 1 PID: 6240 Comm: syz.2.146 Not tainted syzkaller #0 [ 98.863992][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 98.874077][ T6240] Call Trace: [ 98.877481][ T6240] [ 98.880620][ T6240] dump_stack_lvl+0x18c/0x250 [ 98.885340][ T6240] ? show_regs_print_info+0x20/0x20 [ 98.890664][ T6240] ? load_image+0x420/0x420 [ 98.895297][ T6240] ? __might_fault+0xaa/0x120 [ 98.900038][ T6240] ? __lock_acquire+0x7d80/0x7d80 [ 98.905282][ T6240] should_fail_ex+0x394/0x4c0 [ 98.910114][ T6240] _copy_from_user+0x2f/0xe0 [ 98.914748][ T6240] __sys_bpf+0x23e/0x890 [ 98.919120][ T6240] ? bpf_link_show_fdinfo+0x390/0x390 [ 98.924692][ T6240] ? lock_chain_count+0x20/0x20 [ 98.929675][ T6240] __x64_sys_bpf+0x7c/0x90 [ 98.934389][ T6240] do_syscall_64+0x55/0xb0 [ 98.939124][ T6240] ? clear_bhb_loop+0x40/0x90 [ 98.944025][ T6240] ? clear_bhb_loop+0x40/0x90 [ 98.948911][ T6240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.955284][ T6240] RIP: 0033:0x7f91d039de59 [ 98.959825][ T6240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.979897][ T6240] RSP: 002b:00007f91d1237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.988636][ T6240] RAX: ffffffffffffffda RBX: 00007f91d0625fa0 RCX: 00007f91d039de59 [ 98.996817][ T6240] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 99.005264][ T6240] RBP: 00007f91d1237090 R08: 0000000000000000 R09: 0000000000000000 [ 99.013537][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.022251][ T6240] R13: 00007f91d0626038 R14: 00007f91d0625fa0 R15: 00007ffdbbb23488 [ 99.031925][ T6240] [ 99.092057][ T6245] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.147'. [ 99.129148][ T6245] net_ratelimit: 128 callbacks suppressed [ 99.129184][ T6245] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 99.304719][ T6252] Illegal XDP return value 4294967294 on prog (id 162) dev N/A, expect packet loss! [ 99.489138][ T6258] FAULT_INJECTION: forcing a failure. [ 99.489138][ T6258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.525242][ T6258] CPU: 1 PID: 6258 Comm: syz.2.153 Not tainted syzkaller #0 [ 99.532695][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 99.542894][ T6258] Call Trace: [ 99.546264][ T6258] [ 99.549487][ T6258] dump_stack_lvl+0x18c/0x250 [ 99.554387][ T6258] ? show_regs_print_info+0x20/0x20 [ 99.559719][ T6258] ? load_image+0x420/0x420 [ 99.564529][ T6258] ? __might_fault+0xaa/0x120 [ 99.569413][ T6258] ? __lock_acquire+0x7d80/0x7d80 [ 99.574630][ T6258] should_fail_ex+0x394/0x4c0 [ 99.579752][ T6258] _copy_from_user+0x2f/0xe0 [ 99.584471][ T6258] __sys_bpf+0x23e/0x890 [ 99.588763][ T6258] ? bpf_link_show_fdinfo+0x390/0x390 [ 99.594285][ T6258] ? lock_chain_count+0x20/0x20 [ 99.599647][ T6258] __x64_sys_bpf+0x7c/0x90 [ 99.604087][ T6258] do_syscall_64+0x55/0xb0 [ 99.608767][ T6258] ? clear_bhb_loop+0x40/0x90 [ 99.613534][ T6258] ? clear_bhb_loop+0x40/0x90 [ 99.618491][ T6258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.625064][ T6258] RIP: 0033:0x7f91d039de59 [ 99.629933][ T6258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.650253][ T6258] RSP: 002b:00007f91d1237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.658881][ T6258] RAX: ffffffffffffffda RBX: 00007f91d0625fa0 RCX: 00007f91d039de59 [ 99.667676][ T6258] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 99.676066][ T6258] RBP: 00007f91d1237090 R08: 0000000000000000 R09: 0000000000000000 [ 99.684256][ T6258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.692493][ T6258] R13: 00007f91d0626038 R14: 00007f91d0625fa0 R15: 00007ffdbbb23488 [ 99.700479][ T6258] [ 99.817313][ T6267] FAULT_INJECTION: forcing a failure. [ 99.817313][ T6267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.834835][ T6267] CPU: 0 PID: 6267 Comm: syz.0.156 Not tainted syzkaller #0 [ 99.842279][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 99.852548][ T6267] Call Trace: [ 99.855843][ T6267] [ 99.858796][ T6267] dump_stack_lvl+0x18c/0x250 [ 99.863599][ T6267] ? show_regs_print_info+0x20/0x20 [ 99.868839][ T6267] ? load_image+0x420/0x420 [ 99.873379][ T6267] ? __lock_acquire+0x7d80/0x7d80 [ 99.878794][ T6267] ? snprintf+0xe9/0x140 [ 99.883177][ T6267] should_fail_ex+0x394/0x4c0 [ 99.887888][ T6267] _copy_to_user+0x2f/0xa0 [ 99.892337][ T6267] simple_read_from_buffer+0xe7/0x150 [ 99.897935][ T6267] proc_fail_nth_read+0x1e8/0x260 [ 99.903006][ T6267] ? proc_fault_inject_write+0x360/0x360 [ 99.908759][ T6267] ? fsnotify_perm+0x271/0x5e0 [ 99.913598][ T6267] ? proc_fault_inject_write+0x360/0x360 [ 99.919360][ T6267] vfs_read+0x298/0x990 [ 99.923641][ T6267] ? kernel_read+0x1e0/0x1e0 [ 99.928357][ T6267] ? __fget_files+0x28/0x460 [ 99.932977][ T6267] ? __fget_files+0x3fc/0x460 [ 99.937695][ T6267] ? __fdget_pos+0x2a3/0x330 [ 99.942295][ T6267] ? ksys_read+0x74/0x260 [ 99.947245][ T6267] ksys_read+0x151/0x260 [ 99.951592][ T6267] ? vfs_write+0x9a0/0x9a0 [ 99.956100][ T6267] ? lockdep_hardirqs_on+0x98/0x150 [ 99.961302][ T6267] do_syscall_64+0x55/0xb0 [ 99.965829][ T6267] ? clear_bhb_loop+0x40/0x90 [ 99.970607][ T6267] ? clear_bhb_loop+0x40/0x90 [ 99.975396][ T6267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.981300][ T6267] RIP: 0033:0x7f4487b5e68e [ 99.985804][ T6267] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 100.005521][ T6267] RSP: 002b:00007f448897ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.014144][ T6267] RAX: ffffffffffffffda RBX: 00007f44889806c0 RCX: 00007f4487b5e68e [ 100.022147][ T6267] RDX: 000000000000000f RSI: 00007f44889800a0 RDI: 0000000000000004 [ 100.030307][ T6267] RBP: 00007f4488980090 R08: 0000000000000000 R09: 0000000000000000 [ 100.038284][ T6267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.046352][ T6267] R13: 00007f4487e26038 R14: 00007f4487e25fa0 R15: 00007ffedb9a0028 [ 100.054435][ T6267] [ 100.348378][ T6280] validate_nla: 8 callbacks suppressed [ 100.348395][ T6280] netlink: 'syz.1.162': attribute type 19 has an invalid length. [ 100.387168][ T6280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.162'. [ 100.979086][ T6298] netlink: 'syz.2.170': attribute type 5 has an invalid length. [ 101.195239][ T6304] netlink: 'syz.3.171': attribute type 9 has an invalid length. [ 101.205733][ T6304] netlink: 399 bytes leftover after parsing attributes in process `syz.3.171'. [ 101.262213][ T6304] netlink: 'syz.3.171': attribute type 21 has an invalid length. [ 101.278551][ T6304] netlink: 128 bytes leftover after parsing attributes in process `syz.3.171'. [ 101.299584][ T6304] netlink: 'syz.3.171': attribute type 4 has an invalid length. [ 101.323415][ T6304] netlink: 'syz.3.171': attribute type 5 has an invalid length. [ 101.350286][ T6304] netlink: 3 bytes leftover after parsing attributes in process `syz.3.171'. [ 101.486204][ T6311] FAULT_INJECTION: forcing a failure. [ 101.486204][ T6311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.500105][ T6311] CPU: 1 PID: 6311 Comm: syz.1.175 Not tainted syzkaller #0 [ 101.507533][ T6311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.518240][ T6311] Call Trace: [ 101.521560][ T6311] [ 101.524524][ T6311] dump_stack_lvl+0x18c/0x250 [ 101.529532][ T6311] ? show_regs_print_info+0x20/0x20 [ 101.534877][ T6311] ? load_image+0x420/0x420 [ 101.539447][ T6311] ? __might_fault+0xaa/0x120 [ 101.544327][ T6311] ? __lock_acquire+0x7d80/0x7d80 [ 101.549865][ T6311] should_fail_ex+0x394/0x4c0 [ 101.555050][ T6311] _copy_from_user+0x2f/0xe0 [ 101.559698][ T6311] ___sys_sendmsg+0x1c7/0x360 [ 101.564538][ T6311] ? __sys_sendmsg+0x2b0/0x2b0 [ 101.569501][ T6311] ? __lock_acquire+0x7d80/0x7d80 [ 101.574625][ T6311] __se_sys_sendmsg+0x1d0/0x2c0 [ 101.579613][ T6311] ? __x64_sys_sendmsg+0x80/0x80 [ 101.584971][ T6311] ? lockdep_hardirqs_on+0x98/0x150 [ 101.590314][ T6311] do_syscall_64+0x55/0xb0 [ 101.594798][ T6311] ? clear_bhb_loop+0x40/0x90 [ 101.599860][ T6311] ? clear_bhb_loop+0x40/0x90 [ 101.604640][ T6311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.610574][ T6311] RIP: 0033:0x7f18d7f9de59 [ 101.615024][ T6311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.635534][ T6311] RSP: 002b:00007f18d8ee4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.643963][ T6311] RAX: ffffffffffffffda RBX: 00007f18d8225fa0 RCX: 00007f18d7f9de59 [ 101.652206][ T6311] RDX: 0000000000048010 RSI: 0000200000000100 RDI: 0000000000000003 [ 101.660479][ T6311] RBP: 00007f18d8ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 101.669278][ T6311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.677698][ T6311] R13: 00007f18d8226038 R14: 00007f18d8225fa0 R15: 00007fff0ab0bfb8 [ 101.685958][ T6311] [ 101.739693][ T6315] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.177'. [ 101.999885][ T6320] netlink: 'syz.3.178': attribute type 10 has an invalid length. [ 102.010577][ T6322] netlink: 204740 bytes leftover after parsing attributes in process `syz.0.180'. [ 102.700645][ T6338] FAULT_INJECTION: forcing a failure. [ 102.700645][ T6338] name failslab, interval 1, probability 0, space 0, times 0 [ 102.714709][ T6338] CPU: 0 PID: 6338 Comm: syz.1.185 Not tainted syzkaller #0 [ 102.722997][ T6338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 102.733175][ T6338] Call Trace: [ 102.736908][ T6338] [ 102.739946][ T6338] dump_stack_lvl+0x18c/0x250 [ 102.744761][ T6338] ? show_regs_print_info+0x20/0x20 [ 102.750080][ T6338] ? load_image+0x420/0x420 [ 102.754706][ T6338] ? __might_sleep+0xe0/0xe0 [ 102.759339][ T6338] ? __lock_acquire+0x7d80/0x7d80 [ 102.764444][ T6338] should_fail_ex+0x394/0x4c0 [ 102.769464][ T6338] should_failslab+0x9/0x20 [ 102.774640][ T6338] slab_pre_alloc_hook+0x59/0x300 [ 102.779723][ T6338] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 102.785574][ T6338] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 102.791453][ T6338] __kmem_cache_alloc_node+0x53/0x250 [ 102.796959][ T6338] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 102.802900][ T6338] __kmalloc+0xa7/0x240 [ 102.807251][ T6338] tomoyo_realpath_from_path+0xe6/0x5c0 [ 102.812899][ T6338] ? tomoyo_domain+0xd6/0x120 [ 102.817603][ T6338] tomoyo_path_number_perm+0x248/0x5e0 [ 102.823699][ T6338] ? tomoyo_path_number_perm+0x217/0x5e0 [ 102.829378][ T6338] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 102.830240][ T6340] netlink: 'syz.2.187': attribute type 39 has an invalid length. [ 102.835108][ T6338] ? trace_call_bpf+0xc3/0x6c0 [ 102.835149][ T6338] ? trace_call_bpf+0xc3/0x6c0 [ 102.835174][ T6338] ? trace_call_bpf+0x5e9/0x6c0 [ 102.835234][ T6338] ? __fget_files+0x28/0x460 [ 102.835272][ T6338] security_file_ioctl+0x70/0xa0 [ 102.835300][ T6338] __se_sys_ioctl+0x48/0x170 [ 102.835326][ T6338] do_syscall_64+0x55/0xb0 [ 102.877958][ T6338] ? clear_bhb_loop+0x40/0x90 [ 102.882856][ T6338] ? clear_bhb_loop+0x40/0x90 [ 102.887668][ T6338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.893791][ T6338] RIP: 0033:0x7f18d7f9de59 [ 102.898253][ T6338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.918676][ T6338] RSP: 002b:00007f18d8ec3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.927222][ T6338] RAX: ffffffffffffffda RBX: 00007f18d8226090 RCX: 00007f18d7f9de59 [ 102.935841][ T6338] RDX: 0000000000000006 RSI: 0000000000002401 RDI: 0000000000000006 [ 102.944188][ T6338] RBP: 00007f18d8ec3090 R08: 0000000000000000 R09: 0000000000000000 [ 102.953331][ T6338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.961885][ T6338] R13: 00007f18d8226128 R14: 00007f18d8226090 R15: 00007fff0ab0bfb8 [ 102.970479][ T6338] [ 102.987881][ T6338] ERROR: Out of memory at tomoyo_realpath_from_path. [ 103.436419][ T6359] FAULT_INJECTION: forcing a failure. [ 103.436419][ T6359] name failslab, interval 1, probability 0, space 0, times 0 [ 103.460587][ T6359] CPU: 0 PID: 6359 Comm: syz.2.192 Not tainted syzkaller #0 [ 103.468201][ T6359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.479102][ T6359] Call Trace: [ 103.482430][ T6359] [ 103.485381][ T6359] dump_stack_lvl+0x18c/0x250 [ 103.490107][ T6359] ? show_regs_print_info+0x20/0x20 [ 103.495881][ T6359] ? load_image+0x420/0x420 [ 103.500643][ T6359] ? __might_sleep+0xe0/0xe0 [ 103.505364][ T6359] ? __lock_acquire+0x7d80/0x7d80 [ 103.510448][ T6359] should_fail_ex+0x394/0x4c0 [ 103.515157][ T6359] should_failslab+0x9/0x20 [ 103.519680][ T6359] slab_pre_alloc_hook+0x59/0x300 [ 103.524996][ T6359] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 103.530313][ T6359] __kmem_cache_alloc_node+0x53/0x250 [ 103.535998][ T6359] ? __asan_memset+0x22/0x40 [ 103.540701][ T6359] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 103.546006][ T6359] kmalloc_trace+0x2a/0xe0 [ 103.551264][ T6359] __xdp_reg_mem_model+0x1e3/0x5a0 [ 103.556841][ T6359] ? kvmalloc_node+0x70/0x180 [ 103.561582][ T6359] ? kvmalloc_node+0x70/0x180 [ 103.566454][ T6359] ? xdp_reg_mem_model+0x40/0x40 [ 103.571425][ T6359] xdp_reg_mem_model+0x22/0x40 [ 103.576292][ T6359] bpf_test_run_xdp_live+0x262/0x1b30 [ 103.581875][ T6359] ? 0xffffffffa0004740 [ 103.586139][ T6359] ? 0xffffffffa0004740 [ 103.590306][ T6359] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 103.596321][ T6359] ? xdp_convert_md_to_buff+0x330/0x330 [ 103.601935][ T6359] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 103.608216][ T6359] ? _copy_from_user+0xa5/0xe0 [ 103.613441][ T6359] ? bpf_test_init+0x119/0x140 [ 103.618223][ T6359] ? xdp_convert_md_to_buff+0x5b/0x330 [ 103.623784][ T6359] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 103.629282][ T6359] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 103.636522][ T6359] ? dev_put+0x80/0x80 [ 103.640709][ T6359] ? dev_put+0x80/0x80 [ 103.644883][ T6359] bpf_prog_test_run+0x31f/0x390 [ 103.650120][ T6359] __sys_bpf+0x49d/0x890 [ 103.654623][ T6359] ? bpf_link_show_fdinfo+0x390/0x390 [ 103.660047][ T6359] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.666504][ T6359] __x64_sys_bpf+0x7c/0x90 [ 103.672414][ T6359] do_syscall_64+0x55/0xb0 [ 103.677324][ T6359] ? clear_bhb_loop+0x40/0x90 [ 103.682207][ T6359] ? clear_bhb_loop+0x40/0x90 [ 103.687082][ T6359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.693082][ T6359] RIP: 0033:0x7f91d039de59 [ 103.697609][ T6359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.717682][ T6359] RSP: 002b:00007f91d1237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.726162][ T6359] RAX: ffffffffffffffda RBX: 00007f91d0625fa0 RCX: 00007f91d039de59 [ 103.734153][ T6359] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 103.742227][ T6359] RBP: 00007f91d1237090 R08: 0000000000000000 R09: 0000000000000000 [ 103.750749][ T6359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.758827][ T6359] R13: 00007f91d0626038 R14: 00007f91d0625fa0 R15: 00007ffdbbb23488 [ 103.766925][ T6359] [ 104.521420][ T6381] netlink: 'syz.2.200': attribute type 10 has an invalid length. [ 104.677539][ T6381] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 105.485880][ T6399] FAULT_INJECTION: forcing a failure. [ 105.485880][ T6399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.508144][ T6399] CPU: 1 PID: 6399 Comm: syz.2.206 Not tainted syzkaller #0 [ 105.516478][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.526998][ T6399] Call Trace: [ 105.530304][ T6399] [ 105.533413][ T6399] dump_stack_lvl+0x18c/0x250 [ 105.538105][ T6399] ? show_regs_print_info+0x20/0x20 [ 105.543306][ T6399] ? load_image+0x420/0x420 [ 105.547811][ T6399] ? __might_fault+0xaa/0x120 [ 105.552488][ T6399] ? __lock_acquire+0x7d80/0x7d80 [ 105.557609][ T6399] ? __virt_addr_valid+0x10c/0x380 [ 105.562827][ T6399] should_fail_ex+0x394/0x4c0 [ 105.567625][ T6399] _copy_from_user+0x2f/0xe0 [ 105.572304][ T6399] btf_new_fd+0x366/0x9e0 [ 105.576740][ T6399] ? bpf_btf_show_fdinfo+0x80/0x80 [ 105.581849][ T6399] ? capable+0x88/0xe0 [ 105.585923][ T6399] __sys_bpf+0x670/0x890 [ 105.590343][ T6399] ? bpf_link_show_fdinfo+0x390/0x390 [ 105.596084][ T6399] ? lock_chain_count+0x20/0x20 [ 105.600938][ T6399] __x64_sys_bpf+0x7c/0x90 [ 105.605368][ T6399] do_syscall_64+0x55/0xb0 [ 105.609794][ T6399] ? clear_bhb_loop+0x40/0x90 [ 105.615604][ T6399] ? clear_bhb_loop+0x40/0x90 [ 105.620606][ T6399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.631083][ T6399] RIP: 0033:0x7f91d039de59 [ 105.637031][ T6399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.657214][ T6399] RSP: 002b:00007f91d1237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 105.666182][ T6399] RAX: ffffffffffffffda RBX: 00007f91d0625fa0 RCX: 00007f91d039de59 [ 105.674627][ T6399] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 105.682710][ T6399] RBP: 00007f91d1237090 R08: 0000000000000000 R09: 0000000000000000 [ 105.690776][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.698745][ T6399] R13: 00007f91d0626038 R14: 00007f91d0625fa0 R15: 00007ffdbbb23488 [ 105.707610][ T6399] [ 106.132488][ T6410] FAULT_INJECTION: forcing a failure. [ 106.132488][ T6410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.156562][ T6410] CPU: 1 PID: 6410 Comm: syz.3.211 Not tainted syzkaller #0 [ 106.163939][ T6410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 106.174437][ T6410] Call Trace: [ 106.177934][ T6410] [ 106.181236][ T6410] dump_stack_lvl+0x18c/0x250 [ 106.186255][ T6410] ? show_regs_print_info+0x20/0x20 [ 106.191955][ T6410] ? load_image+0x420/0x420 [ 106.196526][ T6410] ? __might_fault+0xaa/0x120 [ 106.201584][ T6410] ? __lock_acquire+0x7d80/0x7d80 [ 106.206832][ T6410] should_fail_ex+0x394/0x4c0 [ 106.211748][ T6410] _copy_from_user+0x2f/0xe0 [ 106.217506][ T6410] mptcp_setsockopt+0x1794/0x3370 [ 106.223008][ T6410] ? __fget_files+0x28/0x460 [ 106.227981][ T6410] ? pm_nl_exit_net+0x230/0x230 [ 106.233197][ T6410] ? aa_af_perm+0x330/0x330 [ 106.237832][ T6410] ? __fget_files+0x28/0x460 [ 106.242645][ T6410] ? aa_sock_opt_perm+0x74/0x100 [ 106.247895][ T6410] ? sock_common_setsockopt+0x36/0xc0 [ 106.253998][ T6410] ? sock_common_recvmsg+0x190/0x190 [ 106.260030][ T6410] do_sock_setsockopt+0x175/0x1a0 [ 106.265952][ T6410] ? __fdget+0x180/0x210 [ 106.270566][ T6410] __x64_sys_setsockopt+0x182/0x200 [ 106.276064][ T6410] do_syscall_64+0x55/0xb0 [ 106.280510][ T6410] ? clear_bhb_loop+0x40/0x90 [ 106.285194][ T6410] ? clear_bhb_loop+0x40/0x90 [ 106.289914][ T6410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.296110][ T6410] RIP: 0033:0x7fcde4b9de59 [ 106.300917][ T6410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.321151][ T6410] RSP: 002b:00007fcde5a5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 106.329701][ T6410] RAX: ffffffffffffffda RBX: 00007fcde4e25fa0 RCX: 00007fcde4b9de59 [ 106.337738][ T6410] RDX: 0000000000000005 RSI: 0000000000000006 RDI: 0000000000000007 [ 106.346027][ T6410] RBP: 00007fcde5a5f090 R08: 0000000000000004 R09: 0000000000000000 [ 106.355515][ T6410] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 106.364550][ T6410] R13: 00007fcde4e26038 R14: 00007fcde4e25fa0 R15: 00007ffe872e7d48 [ 106.372828][ T6410] [ 106.421207][ T6411] netlink: 'syz.2.210': attribute type 2 has an invalid length. [ 106.468197][ T6411] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.210'. [ 106.991306][ T6428] netlink: 6 bytes leftover after parsing attributes in process `syz.3.218'. [ 107.002436][ T6428] openvswitch: netlink: Flow key attr not present in new flow. [ 107.084288][ T6430] delete_channel: no stack [ 107.098953][ T6430] delete_channel: no stack [ 107.324455][ T6433] netlink: 'syz.0.217': attribute type 2 has an invalid length. [ 107.347397][ T6433] netlink: 1045 bytes leftover after parsing attributes in process `syz.0.217'. [ 108.210202][ T6449] netlink: 'syz.1.224': attribute type 9 has an invalid length. [ 108.241364][ T6449] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.224'. [ 108.523054][ T6451] netlink: 'syz.2.225': attribute type 10 has an invalid length. [ 108.752652][ T6451] veth0_vlan: left promiscuous mode [ 108.841063][ T6451] veth0_vlan: entered promiscuous mode [ 108.875010][ T6451] team0: Device veth0_vlan failed to register rx_handler [ 109.417751][ T6464] netlink: 'syz.1.229': attribute type 21 has an invalid length. [ 109.430793][ T6464] netlink: 156 bytes leftover after parsing attributes in process `syz.1.229'. [ 109.449345][ T6451] syz.2.225 (6451) used greatest stack depth: 18376 bytes left [ 109.625934][ T6468] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.230'. [ 109.648214][ T6468] openvswitch: netlink: Tunnel attr 2 has unexpected len 145 expected 4 [ 109.747211][ T6471] syzkaller0: entered promiscuous mode [ 109.797399][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 109.806309][ T6471] syzkaller0: entered allmulticast mode [ 109.849236][ T6476] FAULT_INJECTION: forcing a failure. [ 109.849236][ T6476] name failslab, interval 1, probability 0, space 0, times 0 [ 109.880604][ T6476] CPU: 0 PID: 6476 Comm: syz.2.234 Not tainted syzkaller #0 [ 109.888053][ T6476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.898392][ T6476] Call Trace: [ 109.901769][ T6476] [ 109.904732][ T6476] dump_stack_lvl+0x18c/0x250 [ 109.909623][ T6476] ? show_regs_print_info+0x20/0x20 [ 109.914869][ T6476] ? load_image+0x420/0x420 [ 109.919417][ T6476] ? __might_sleep+0xe0/0xe0 [ 109.924183][ T6476] ? __lock_acquire+0x7d80/0x7d80 [ 109.929341][ T6476] should_fail_ex+0x394/0x4c0 [ 109.934166][ T6476] should_failslab+0x9/0x20 [ 109.938710][ T6476] slab_pre_alloc_hook+0x59/0x300 [ 109.943948][ T6476] ? sock_kmalloc+0x96/0xf0 [ 109.948480][ T6476] ? sock_kmalloc+0x96/0xf0 [ 109.953091][ T6476] __kmem_cache_alloc_node+0x53/0x250 [ 109.958674][ T6476] ? sock_kmalloc+0x96/0xf0 [ 109.963280][ T6476] __kmalloc+0xa7/0x240 [ 109.968112][ T6476] sock_kmalloc+0x96/0xf0 [ 109.972579][ T6476] ____sys_sendmsg+0x1d4/0x980 [ 109.977827][ T6476] ? __asan_memset+0x22/0x40 [ 109.982708][ T6476] ? __sys_sendmsg_sock+0x30/0x30 [ 109.987750][ T6476] ? __import_iovec+0x3fa/0x850 [ 109.992728][ T6476] ? import_iovec+0x73/0xa0 [ 109.997485][ T6476] ___sys_sendmsg+0x2a6/0x360 [ 110.002243][ T6476] ? get_pid_task+0x20/0x1e0 [ 110.007147][ T6476] ? __sys_sendmsg+0x2b0/0x2b0 [ 110.011943][ T6476] ? __lock_acquire+0x7d80/0x7d80 [ 110.017147][ T6476] __se_sys_sendmsg+0x1d0/0x2c0 [ 110.022310][ T6476] ? __x64_sys_sendmsg+0x80/0x80 [ 110.027912][ T6476] ? lockdep_hardirqs_on+0x98/0x150 [ 110.033227][ T6476] do_syscall_64+0x55/0xb0 [ 110.038010][ T6476] ? clear_bhb_loop+0x40/0x90 [ 110.042717][ T6476] ? clear_bhb_loop+0x40/0x90 [ 110.047607][ T6476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.053870][ T6476] RIP: 0033:0x7f91d039de59 [ 110.058380][ T6476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.079118][ T6476] RSP: 002b:00007f91d1237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.087821][ T6476] RAX: ffffffffffffffda RBX: 00007f91d0625fa0 RCX: 00007f91d039de59 [ 110.095998][ T6476] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000005 [ 110.104342][ T6476] RBP: 00007f91d1237090 R08: 0000000000000000 R09: 0000000000000000 [ 110.113396][ T6476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.121670][ T6476] R13: 00007f91d0626038 R14: 00007f91d0625fa0 R15: 00007ffdbbb23488 [ 110.130065][ T6476] [ 110.447880][ T6485] FAULT_INJECTION: forcing a failure. [ 110.447880][ T6485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.475147][ T6485] CPU: 1 PID: 6485 Comm: syz.3.239 Not tainted syzkaller #0 [ 110.482593][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 110.493152][ T6485] Call Trace: [ 110.496471][ T6485] [ 110.500158][ T6485] dump_stack_lvl+0x18c/0x250 [ 110.505146][ T6485] ? show_regs_print_info+0x20/0x20 [ 110.510484][ T6485] ? load_image+0x420/0x420 [ 110.515159][ T6485] ? __might_fault+0xaa/0x120 [ 110.520352][ T6485] ? __lock_acquire+0x7d80/0x7d80 [ 110.525422][ T6485] should_fail_ex+0x394/0x4c0 [ 110.530233][ T6485] _copy_to_user+0x2f/0xa0 [ 110.534703][ T6485] bpf_test_finish+0x25a/0x650 [ 110.539576][ T6485] ? bpf_test_run+0x174/0x870 [ 110.544692][ T6485] ? convert_skb_to___skb+0x420/0x420 [ 110.550449][ T6485] bpf_prog_test_run_skb+0x1135/0x18f0 [ 110.557192][ T6485] ? cpu_online+0x60/0x60 [ 110.562078][ T6485] bpf_prog_test_run+0x31f/0x390 [ 110.567137][ T6485] __sys_bpf+0x49d/0x890 [ 110.571663][ T6485] ? bpf_link_show_fdinfo+0x390/0x390 [ 110.577774][ T6485] ? lock_chain_count+0x20/0x20 [ 110.583085][ T6485] __x64_sys_bpf+0x7c/0x90 [ 110.587629][ T6485] do_syscall_64+0x55/0xb0 [ 110.592263][ T6485] ? clear_bhb_loop+0x40/0x90 [ 110.596955][ T6485] ? clear_bhb_loop+0x40/0x90 [ 110.601912][ T6485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.607893][ T6485] RIP: 0033:0x7fcde4b9de59 [ 110.612487][ T6485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.633506][ T6485] RSP: 002b:00007fcde5a5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.642658][ T6485] RAX: ffffffffffffffda RBX: 00007fcde4e25fa0 RCX: 00007fcde4b9de59 [ 110.651531][ T6485] RDX: 0000000000000050 RSI: 00002000000007c0 RDI: 000000000000000a [ 110.662318][ T6485] RBP: 00007fcde5a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 110.671930][ T6485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.681387][ T6485] R13: 00007fcde4e26038 R14: 00007fcde4e25fa0 R15: 00007ffe872e7d48 [ 110.690968][ T6485] [ 114.329554][ T6561] netlink: 'syz.1.264': attribute type 4 has an invalid length. [ 114.408748][ T6561] netlink: 168 bytes leftover after parsing attributes in process `syz.1.264'. [ 115.082441][ T6572] netlink: 148 bytes leftover after parsing attributes in process `syz.2.268'. [ 116.445299][ T6592] FAULT_INJECTION: forcing a failure. [ 116.445299][ T6592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.463445][ T6592] CPU: 0 PID: 6592 Comm: syz.2.275 Not tainted syzkaller #0 [ 116.471717][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.482506][ T6592] Call Trace: [ 116.486249][ T6592] [ 116.489284][ T6592] dump_stack_lvl+0x18c/0x250 [ 116.494747][ T6592] ? show_regs_print_info+0x20/0x20 [ 116.499968][ T6592] ? load_image+0x420/0x420 [ 116.504567][ T6592] ? __might_fault+0xaa/0x120 [ 116.509298][ T6592] ? __lock_acquire+0x7d80/0x7d80 [ 116.515151][ T6592] should_fail_ex+0x394/0x4c0 [ 116.520399][ T6592] _copy_from_user+0x2f/0xe0 [ 116.525143][ T6592] br_dev_siocdevprivate+0x119/0x15e0 [ 116.531104][ T6592] ? do_raw_spin_unlock+0x121/0x230 [ 116.536893][ T6592] ? br_handle_local_finish+0x20/0x20 [ 116.542541][ T6592] ? __mutex_lock+0x923/0xc80 [ 116.547604][ T6592] ? __mutex_lock+0x4d2/0xc80 [ 116.552672][ T6592] ? dev_ioctl+0x83c/0x1140 [ 116.557293][ T6592] ? mutex_lock_nested+0x20/0x20 [ 116.562254][ T6592] ? full_name_hash+0x92/0xe0 [ 116.567166][ T6592] ? dev_ifsioc+0x957/0xc40 [ 116.571805][ T6592] dev_ioctl+0x84c/0x1140 [ 116.576367][ T6592] sock_ioctl+0x74c/0x7e0 [ 116.580717][ T6592] ? sock_poll+0x3e0/0x3e0 [ 116.585206][ T6592] ? bpf_lsm_file_ioctl+0x9/0x10 [ 116.590506][ T6592] ? security_file_ioctl+0x80/0xa0 [ 116.595889][ T6592] ? sock_poll+0x3e0/0x3e0 [ 116.601561][ T6592] __se_sys_ioctl+0xfd/0x170 [ 116.606555][ T6592] do_syscall_64+0x55/0xb0 [ 116.611514][ T6592] ? clear_bhb_loop+0x40/0x90 [ 116.616406][ T6592] ? clear_bhb_loop+0x40/0x90 [ 116.621207][ T6592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.628009][ T6592] RIP: 0033:0x7f91d039de59 [ 116.633719][ T6592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.654507][ T6592] RSP: 002b:00007f91d1237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.663309][ T6592] RAX: ffffffffffffffda RBX: 00007f91d0625fa0 RCX: 00007f91d039de59 [ 116.672395][ T6592] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 116.681700][ T6592] RBP: 00007f91d1237090 R08: 0000000000000000 R09: 0000000000000000 [ 116.689883][ T6592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.698012][ T6592] R13: 00007f91d0626038 R14: 00007f91d0625fa0 R15: 00007ffdbbb23488 [ 116.706632][ T6592] [ 116.933359][ T6604] bridge0: port 2(batadv0) entered blocking state [ 116.949322][ T6604] bridge0: port 2(batadv0) entered disabled state [ 116.956617][ T6604] batadv0: entered allmulticast mode [ 116.990655][ T6604] batadv0: entered promiscuous mode [ 117.001826][ T6604] bridge0: port 2(batadv0) entered blocking state [ 117.009821][ T6606] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.278'. [ 117.010128][ T6604] bridge0: port 2(batadv0) entered forwarding state [ 117.256377][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 117.266832][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 117.436981][ T6628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.682954][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.746691][ T6655] bridge0: entered allmulticast mode [ 117.861815][ T6649] netlink: 'syz.3.287': attribute type 10 has an invalid length. [ 117.919142][ T6649] netlink: 2 bytes leftover after parsing attributes in process `syz.3.287'. [ 118.002512][ T6649] hsr0: entered promiscuous mode [ 118.016414][ T6649] bridge0: port 2(hsr0) entered blocking state [ 118.027824][ T6649] bridge0: port 2(hsr0) entered disabled state [ 118.045965][ T6649] hsr0: entered allmulticast mode [ 118.054411][ T6649] hsr_slave_0: entered allmulticast mode [ 118.071994][ T6649] hsr_slave_1: entered allmulticast mode [ 118.195419][ T6649] bridge0: port 2(hsr0) entered blocking state [ 118.205106][ T6649] bridge0: port 2(hsr0) entered forwarding state [ 118.377787][ T6663] netlink: 'syz.2.290': attribute type 10 has an invalid length. [ 118.406418][ T6663] netlink: 2 bytes leftover after parsing attributes in process `syz.2.290'. [ 118.442395][ T6663] hsr0: entered promiscuous mode [ 118.479636][ T6663] bridge0: port 3(hsr0) entered blocking state [ 118.498393][ T6663] bridge0: port 3(hsr0) entered disabled state [ 118.515434][ T6663] hsr0: entered allmulticast mode [ 118.522585][ T6663] hsr_slave_0: entered allmulticast mode [ 118.565427][ T6663] hsr_slave_1: entered allmulticast mode [ 118.640060][ T6663] bridge0: port 3(hsr0) entered blocking state [ 118.647761][ T6663] bridge0: port 3(hsr0) entered forwarding state [ 120.062716][ T6673] netlink: 'syz.2.294': attribute type 10 has an invalid length. [ 120.078201][ T6673] netlink: 2 bytes leftover after parsing attributes in process `syz.2.294'. [ 120.195929][ T6694] FAULT_INJECTION: forcing a failure. [ 120.195929][ T6694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.240418][ T6694] CPU: 1 PID: 6694 Comm: syz.2.300 Not tainted syzkaller #0 [ 120.249176][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.262044][ T6694] Call Trace: [ 120.266251][ T6694] [ 120.269752][ T6694] dump_stack_lvl+0x18c/0x250 [ 120.275396][ T6694] ? show_regs_print_info+0x20/0x20 [ 120.280911][ T6694] ? load_image+0x420/0x420 [ 120.285840][ T6694] ? __might_fault+0xaa/0x120 [ 120.290656][ T6694] ? __lock_acquire+0x7d80/0x7d80 [ 120.295811][ T6694] should_fail_ex+0x394/0x4c0 [ 120.300705][ T6694] _copy_from_iter+0x1cd/0x1290 [ 120.306473][ T6694] ? rcu_is_watching+0x15/0xb0 [ 120.311514][ T6694] ? copyout_mc+0x70/0x70 [ 120.315938][ T6694] ? __virt_addr_valid+0x10c/0x380 [ 120.321141][ T6694] ? __virt_addr_valid+0x10c/0x380 [ 120.326457][ T6694] ? __virt_addr_valid+0x10c/0x380 [ 120.331568][ T6694] ? __check_object_size+0x4fc/0xa40 [ 120.337846][ T6694] netlink_sendmsg+0x76b/0xbf0 [ 120.342979][ T6694] ? netlink_getsockopt+0x590/0x590 [ 120.348403][ T6694] ? apparmor_socket_sendmsg+0x8e/0x330 [ 120.354052][ T6694] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 120.359435][ T6694] ? security_socket_sendmsg+0x80/0xa0 [ 120.364983][ T6694] ? netlink_getsockopt+0x590/0x590 [ 120.370214][ T6694] ____sys_sendmsg+0x61b/0x980 [ 120.375102][ T6694] ? __asan_memset+0x22/0x40 [ 120.379889][ T6694] ? __sys_sendmsg_sock+0x30/0x30 [ 120.385099][ T6694] ? __import_iovec+0x5f2/0x850 [ 120.390234][ T6694] ? import_iovec+0x73/0xa0 [ 120.394979][ T6694] ___sys_sendmsg+0x2a6/0x360 [ 120.399839][ T6694] ? get_pid_task+0x20/0x1e0 [ 120.404532][ T6694] ? __sys_sendmsg+0x2b0/0x2b0 [ 120.409603][ T6694] ? __lock_acquire+0x7d80/0x7d80 [ 120.414651][ T6694] __se_sys_sendmsg+0x1d0/0x2c0 [ 120.419601][ T6694] ? __x64_sys_sendmsg+0x80/0x80 [ 120.424733][ T6694] ? lockdep_hardirqs_on+0x98/0x150 [ 120.429972][ T6694] do_syscall_64+0x55/0xb0 [ 120.434393][ T6694] ? clear_bhb_loop+0x40/0x90 [ 120.439344][ T6694] ? clear_bhb_loop+0x40/0x90 [ 120.444233][ T6694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.450505][ T6694] RIP: 0033:0x7f91d039de59 [ 120.455451][ T6694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.475242][ T6694] RSP: 002b:00007f91d1237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.483921][ T6694] RAX: ffffffffffffffda RBX: 00007f91d0625fa0 RCX: 00007f91d039de59 [ 120.492162][ T6694] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 120.500309][ T6694] RBP: 00007f91d1237090 R08: 0000000000000000 R09: 0000000000000000 [ 120.508728][ T6694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.516703][ T6694] R13: 00007f91d0626038 R14: 00007f91d0625fa0 R15: 00007ffdbbb23488 [ 120.524783][ T6694] [ 121.320760][ T6709] netlink: 'syz.3.307': attribute type 10 has an invalid length. [ 121.415967][ T6712] netlink: 44 bytes leftover after parsing attributes in process `syz.2.309'. [ 121.709904][ T6722] netlink: 'syz.0.308': attribute type 39 has an invalid length. [ 122.974573][ T6744] netlink: 'syz.0.316': attribute type 10 has an invalid length. [ 123.110293][ T6747] FAULT_INJECTION: forcing a failure. [ 123.110293][ T6747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.125210][ T6744] team0: Device hsr_slave_0 failed to register rx_handler [ 123.138271][ T6747] CPU: 0 PID: 6747 Comm: syz.1.317 Not tainted syzkaller #0 [ 123.138299][ T6747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 123.138309][ T6747] Call Trace: [ 123.138317][ T6747] [ 123.138325][ T6747] dump_stack_lvl+0x18c/0x250 [ 123.138360][ T6747] ? show_regs_print_info+0x20/0x20 [ 123.138385][ T6747] ? load_image+0x420/0x420 [ 123.138410][ T6747] ? __might_fault+0xaa/0x120 [ 123.138429][ T6747] ? __lock_acquire+0x7d80/0x7d80 [ 123.138456][ T6747] should_fail_ex+0x394/0x4c0 [ 123.138484][ T6747] _copy_from_iter+0x1cd/0x1290 [ 123.138508][ T6747] ? rcu_is_watching+0x15/0xb0 [ 123.138536][ T6747] ? copyout_mc+0x70/0x70 [ 123.138555][ T6747] ? __virt_addr_valid+0x10c/0x380 [ 123.138576][ T6747] ? __virt_addr_valid+0x10c/0x380 [ 123.138598][ T6747] ? __virt_addr_valid+0x10c/0x380 [ 123.138623][ T6747] ? __check_object_size+0x4fc/0xa40 [ 123.138645][ T6747] netlink_sendmsg+0x76b/0xbf0 [ 123.138679][ T6747] ? netlink_getsockopt+0x590/0x590 [ 123.138705][ T6747] ? apparmor_socket_sendmsg+0x8e/0x330 [ 123.138726][ T6747] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 123.138747][ T6747] ? security_socket_sendmsg+0x80/0xa0 [ 123.138770][ T6747] ? netlink_getsockopt+0x590/0x590 [ 123.138795][ T6747] ____sys_sendmsg+0x61b/0x980 [ 123.138827][ T6747] ? __asan_memset+0x22/0x40 [ 123.138849][ T6747] ? __sys_sendmsg_sock+0x30/0x30 [ 123.138871][ T6747] ? __import_iovec+0x5f2/0x850 [ 123.138902][ T6747] ? import_iovec+0x73/0xa0 [ 123.138939][ T6747] ___sys_sendmsg+0x2a6/0x360 [ 123.138970][ T6747] ? __sys_sendmsg+0x2b0/0x2b0 [ 123.139016][ T6747] ? __lock_acquire+0x7d80/0x7d80 [ 123.139063][ T6747] __se_sys_sendmsg+0x1d0/0x2c0 [ 123.139091][ T6747] ? __x64_sys_sendmsg+0x80/0x80 [ 123.139132][ T6747] ? lockdep_hardirqs_on+0x98/0x150 [ 123.139156][ T6747] do_syscall_64+0x55/0xb0 [ 123.139178][ T6747] ? clear_bhb_loop+0x40/0x90 [ 123.139196][ T6747] ? clear_bhb_loop+0x40/0x90 [ 123.139215][ T6747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.139239][ T6747] RIP: 0033:0x7f18d7f9de59 [ 123.139258][ T6747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.139273][ T6747] RSP: 002b:00007f18d8ee4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.139296][ T6747] RAX: ffffffffffffffda RBX: 00007f18d8225fa0 RCX: 00007f18d7f9de59 [ 123.139309][ T6747] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 123.139321][ T6747] RBP: 00007f18d8ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 123.139333][ T6747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.139345][ T6747] R13: 00007f18d8226038 R14: 00007f18d8225fa0 R15: 00007fff0ab0bfb8 [ 123.139375][ T6747] [ 123.692459][ T6750] syzkaller0: entered promiscuous mode [ 123.698877][ T6750] syzkaller0: entered allmulticast mode [ 124.012287][ T6764] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 124.019799][ T6764] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 124.054890][ T6762] netlink: 'syz.0.322': attribute type 29 has an invalid length. [ 125.540697][ T6762] netlink: 'syz.0.322': attribute type 29 has an invalid length. [ 126.050620][ T6792] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.330'. [ 127.184947][ T6813] netlink: 32 bytes leftover after parsing attributes in process `syz.3.337'. [ 127.329667][ T6819] netlink: 'syz.3.339': attribute type 49 has an invalid length. [ 127.347264][ T6819] netlink: set zone limit has 8 unknown bytes [ 127.359445][ T6819] netlink: 32 bytes leftover after parsing attributes in process `syz.3.339'. [ 127.710531][ T6826] netlink: 830 bytes leftover after parsing attributes in process `syz.1.342'. [ 127.960148][ T6836] FAULT_INJECTION: forcing a failure. [ 127.960148][ T6836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.988197][ T6836] CPU: 1 PID: 6836 Comm: syz.2.347 Not tainted syzkaller #0 [ 127.995736][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.005824][ T6836] Call Trace: [ 128.009127][ T6836] [ 128.012091][ T6836] dump_stack_lvl+0x18c/0x250 [ 128.017071][ T6836] ? show_regs_print_info+0x20/0x20 [ 128.022391][ T6836] ? load_image+0x420/0x420 [ 128.026941][ T6836] ? __might_fault+0xaa/0x120 [ 128.031829][ T6836] ? __lock_acquire+0x7d80/0x7d80 [ 128.036967][ T6836] should_fail_ex+0x394/0x4c0 [ 128.041672][ T6836] _copy_from_iter+0x1cd/0x1290 [ 128.046524][ T6836] ? __might_fault+0xaa/0x120 [ 128.051201][ T6836] ? copyout_mc+0x70/0x70 [ 128.055629][ T6836] ? copyout_mc+0x70/0x70 [ 128.060078][ T6836] ? __virt_addr_valid+0x10c/0x380 [ 128.065971][ T6836] ? page_copy_sane+0x16a/0x270 [ 128.070929][ T6836] copy_page_from_iter+0x7b/0x100 [ 128.077130][ T6836] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 128.083165][ T6836] tun_get_user+0xc84/0x3d70 [ 128.088042][ T6836] ? aa_file_perm+0x3e3/0xee0 [ 128.092824][ T6836] ? rcu_read_unlock+0xa0/0xa0 [ 128.097687][ T6836] ? tun_get+0x1c/0x2e0 [ 128.102033][ T6836] ? __lock_acquire+0x7d80/0x7d80 [ 128.107392][ T6836] ? tun_get+0x1c/0x2e0 [ 128.111748][ T6836] tun_chr_write_iter+0x119/0x200 [ 128.117035][ T6836] vfs_write+0x474/0x9a0 [ 128.121857][ T6836] ? file_end_write+0x250/0x250 [ 128.126946][ T6836] ? __fget_files+0x3fc/0x460 [ 128.131939][ T6836] ? __fdget_pos+0x1d8/0x330 [ 128.136679][ T6836] ? ksys_write+0x74/0x260 [ 128.141192][ T6836] ksys_write+0x151/0x260 [ 128.145550][ T6836] ? __ia32_sys_read+0x90/0x90 [ 128.150335][ T6836] ? lockdep_hardirqs_on+0x98/0x150 [ 128.156454][ T6836] do_syscall_64+0x55/0xb0 [ 128.161761][ T6836] ? clear_bhb_loop+0x40/0x90 [ 128.166728][ T6836] ? clear_bhb_loop+0x40/0x90 [ 128.171937][ T6836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.178152][ T6836] RIP: 0033:0x7f91d039de59 [ 128.182944][ T6836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.202918][ T6836] RSP: 002b:00007f91d1237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.211513][ T6836] RAX: ffffffffffffffda RBX: 00007f91d0625fa0 RCX: 00007f91d039de59 [ 128.219669][ T6836] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 128.227993][ T6836] RBP: 00007f91d1237090 R08: 0000000000000000 R09: 0000000000000000 [ 128.237075][ T6836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.246036][ T6836] R13: 00007f91d0626038 R14: 00007f91d0625fa0 R15: 00007ffdbbb23488 [ 128.255213][ T6836] [ 128.896630][ T6848] netlink: 105 bytes leftover after parsing attributes in process `syz.2.351'. [ 128.962724][ T6848] netlink: 105 bytes leftover after parsing attributes in process `syz.2.351'. [ 129.236611][ T6855] netlink: 'syz.2.354': attribute type 9 has an invalid length. [ 129.252235][ T6855] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.354'. [ 132.389133][ T6863] netlink: 830 bytes leftover after parsing attributes in process `syz.0.356'. [ 132.460226][ T6866] raw_sendmsg: syz.2.358 forgot to set AF_INET. Fix it! [ 132.469000][ T6870] FAULT_INJECTION: forcing a failure. [ 132.469000][ T6870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.496563][ T6870] CPU: 0 PID: 6870 Comm: syz.1.359 Not tainted syzkaller #0 [ 132.504288][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 132.514401][ T6870] Call Trace: [ 132.517715][ T6870] [ 132.521210][ T6870] dump_stack_lvl+0x18c/0x250 [ 132.527006][ T6870] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 132.533233][ T6870] ? show_regs_print_info+0x20/0x20 [ 132.538675][ T6870] ? load_image+0x420/0x420 [ 132.543280][ T6870] should_fail_ex+0x394/0x4c0 [ 132.548134][ T6870] _copy_from_user+0x2f/0xe0 [ 132.552928][ T6870] sctp_setsockopt+0x19e/0x11e0 [ 132.558115][ T6870] ? sock_common_recvmsg+0x190/0x190 [ 132.563924][ T6870] do_sock_setsockopt+0x175/0x1a0 [ 132.569106][ T6870] ? __fdget+0x180/0x210 [ 132.573428][ T6870] __x64_sys_setsockopt+0x182/0x200 [ 132.578932][ T6870] do_syscall_64+0x55/0xb0 [ 132.584031][ T6870] ? clear_bhb_loop+0x40/0x90 [ 132.589050][ T6870] ? clear_bhb_loop+0x40/0x90 [ 132.593801][ T6870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.599752][ T6870] RIP: 0033:0x7f18d7f9de59 [ 132.604578][ T6870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.624697][ T6870] RSP: 002b:00007f18d8ee4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 132.633736][ T6870] RAX: ffffffffffffffda RBX: 00007f18d8225fa0 RCX: 00007f18d7f9de59 [ 132.641896][ T6870] RDX: 0000000000000083 RSI: 0000000000000084 RDI: 0000000000000005 [ 132.650331][ T6870] RBP: 00007f18d8ee4090 R08: 0000000000000008 R09: 0000000000000000 [ 132.658425][ T6870] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.666526][ T6870] R13: 00007f18d8226038 R14: 00007f18d8225fa0 R15: 00007fff0ab0bfb8 [ 132.674741][ T6870] [ 133.001030][ T6878] netlink: 'syz.2.361': attribute type 28 has an invalid length. [ 133.032150][ T6878] netlink: 2 bytes leftover after parsing attributes in process `syz.2.361'. [ 133.194811][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.201957][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.550109][ T6909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.561940][ T6909] IPv6: NLM_F_CREATE should be set when creating new route [ 134.571022][ T6909] IPv6: NLM_F_CREATE should be set when creating new route [ 134.580203][ T6909] IPv6: NLM_F_CREATE should be set when creating new route [ 134.846133][ T6921] netlink: 'syz.1.379': attribute type 39 has an invalid length. [ 135.086137][ T6927] netlink: 'syz.2.378': attribute type 10 has an invalid length. [ 135.193926][ T6927] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 135.963940][ T6939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.152995][ T6946] netlink: 10 bytes leftover after parsing attributes in process `syz.1.383'. [ 136.172415][ T6955] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.384'. [ 136.501579][ T6965] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 136.521916][ T6963] netlink: 'syz.0.388': attribute type 9 has an invalid length. [ 136.531487][ T6963] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.388'. [ 136.573715][ T6963] netlink: 'syz.0.388': attribute type 10 has an invalid length. [ 136.707907][ T6963] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 136.936767][ T6982] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 136.943384][ T6982] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 136.955714][ T6983] FAULT_INJECTION: forcing a failure. [ 136.955714][ T6983] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 137.000728][ T6983] CPU: 0 PID: 6983 Comm: syz.0.396 Not tainted syzkaller #0 [ 137.008168][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 137.018350][ T6983] Call Trace: [ 137.022164][ T6983] [ 137.025200][ T6983] dump_stack_lvl+0x18c/0x250 [ 137.030153][ T6983] ? show_regs_print_info+0x20/0x20 [ 137.035359][ T6983] ? load_image+0x420/0x420 [ 137.040440][ T6983] ? __lock_acquire+0x7d80/0x7d80 [ 137.045484][ T6983] should_fail_ex+0x394/0x4c0 [ 137.050189][ T6983] prepare_alloc_pages+0x1e1/0x5b0 [ 137.055775][ T6983] __alloc_pages+0x134/0x460 [ 137.060421][ T6983] ? zone_statistics+0x170/0x170 [ 137.065759][ T6983] ? alloc_pages+0x4e1/0x740 [ 137.070670][ T6983] ? do_raw_spin_unlock+0x121/0x230 [ 137.076187][ T6983] __get_free_pages+0xc/0x30 [ 137.081049][ T6983] kasan_populate_vmalloc_pte+0x35/0x100 [ 137.088012][ T6983] __apply_to_page_range+0x860/0xdd0 [ 137.093808][ T6983] ? kasan_populate_vmalloc+0x70/0x70 [ 137.099751][ T6983] ? apply_to_page_range+0x50/0x50 [ 137.105262][ T6983] ? do_raw_spin_unlock+0x121/0x230 [ 137.110536][ T6983] alloc_vmap_area+0x1d26/0x1e50 [ 137.115605][ T6983] ? vm_map_ram+0xcf0/0xcf0 [ 137.120280][ T6983] ? rcu_is_watching+0x15/0xb0 [ 137.125158][ T6983] __get_vm_area_node+0x162/0x370 [ 137.130346][ T6983] __vmalloc_node_range+0x36f/0x1320 [ 137.136154][ T6983] ? reuseport_array_alloc+0x98/0x120 [ 137.142071][ T6983] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 137.148064][ T6983] ? lock_chain_count+0x20/0x20 [ 137.152916][ T6983] ? aa_get_newest_label+0xfd/0x5c0 [ 137.158208][ T6983] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 137.164916][ T6983] ? end_current_label_crit_section+0x170/0x170 [ 137.171545][ T6983] ? free_vm_area+0x50/0x50 [ 137.176333][ T6983] ? apparmor_capable+0x137/0x1a0 [ 137.182537][ T6983] bpf_map_area_alloc+0xf1/0x110 [ 137.188023][ T6983] ? reuseport_array_alloc+0x98/0x120 [ 137.193790][ T6983] reuseport_array_alloc+0x98/0x120 [ 137.199080][ T6983] map_create+0x877/0x12f0 [ 137.204453][ T6983] __sys_bpf+0x651/0x890 [ 137.209256][ T6983] ? bpf_link_show_fdinfo+0x390/0x390 [ 137.214882][ T6983] ? lock_chain_count+0x20/0x20 [ 137.220362][ T6983] __x64_sys_bpf+0x7c/0x90 [ 137.224985][ T6983] do_syscall_64+0x55/0xb0 [ 137.229494][ T6983] ? clear_bhb_loop+0x40/0x90 [ 137.234256][ T6983] ? clear_bhb_loop+0x40/0x90 [ 137.239312][ T6983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.245416][ T6983] RIP: 0033:0x7f4487b9de59 [ 137.250018][ T6983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.270368][ T6983] RSP: 002b:00007f4488980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.279231][ T6983] RAX: ffffffffffffffda RBX: 00007f4487e25fa0 RCX: 00007f4487b9de59 [ 137.287940][ T6983] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000000 [ 137.296297][ T6983] RBP: 00007f4488980090 R08: 0000000000000000 R09: 0000000000000000 [ 137.304801][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.312902][ T6983] R13: 00007f4487e26038 R14: 00007f4487e25fa0 R15: 00007ffedb9a0028 [ 137.321337][ T6983] [ 137.600772][ T6994] sctp: [Deprecated]: syz.3.400 (pid 6994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.600772][ T6994] Use struct sctp_sack_info instead [ 137.726159][ T6996] netlink: 'syz.1.401': attribute type 10 has an invalid length. [ 137.768242][ T6996] netlink: 40 bytes leftover after parsing attributes in process `syz.1.401'. [ 137.854511][ T6996] batman_adv: batadv0: Adding interface: virt_wifi0 [ 137.872405][ T6996] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.923909][ T6996] batman_adv: batadv0: Interface activated: virt_wifi0 [ 138.182063][ T7020] FAULT_INJECTION: forcing a failure. [ 138.182063][ T7020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.205294][ T7009] syzkaller0: entered promiscuous mode [ 138.211896][ T7020] CPU: 1 PID: 7020 Comm: syz.1.406 Not tainted syzkaller #0 [ 138.219170][ T7009] syzkaller0: entered allmulticast mode [ 138.219288][ T7020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 138.219301][ T7020] Call Trace: [ 138.239090][ T7020] [ 138.242130][ T7020] dump_stack_lvl+0x18c/0x250 [ 138.247999][ T7020] ? show_regs_print_info+0x20/0x20 [ 138.253774][ T7020] ? load_image+0x420/0x420 [ 138.258676][ T7020] ? __might_fault+0xaa/0x120 [ 138.263715][ T7020] ? __lock_acquire+0x7d80/0x7d80 [ 138.268747][ T7020] ? bpf_percpu_hash_update+0x2b/0x200 [ 138.274306][ T7020] ? __virt_addr_valid+0x10c/0x380 [ 138.279434][ T7020] should_fail_ex+0x394/0x4c0 [ 138.284315][ T7020] _copy_from_user+0x2f/0xe0 [ 138.288925][ T7020] generic_map_update_batch+0x58c/0x800 [ 138.294489][ T7020] ? rcu_read_unlock+0xa0/0xa0 [ 138.299261][ T7020] ? __fdget+0x180/0x210 [ 138.303606][ T7020] ? rcu_read_unlock+0xa0/0xa0 [ 138.308804][ T7020] bpf_map_do_batch+0x3f2/0x600 [ 138.313926][ T7020] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 138.320781][ T7020] __sys_bpf+0x381/0x890 [ 138.325026][ T7020] ? read_tsc+0x9/0x20 [ 138.329364][ T7020] ? bpf_link_show_fdinfo+0x390/0x390 [ 138.335092][ T7020] ? lock_chain_count+0x20/0x20 [ 138.340033][ T7020] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 138.347784][ T7020] __x64_sys_bpf+0x7c/0x90 [ 138.352785][ T7020] do_syscall_64+0x55/0xb0 [ 138.357350][ T7020] ? clear_bhb_loop+0x40/0x90 [ 138.362306][ T7020] ? clear_bhb_loop+0x40/0x90 [ 138.367074][ T7020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.373146][ T7020] RIP: 0033:0x7f18d7f9de59 [ 138.377842][ T7020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.399022][ T7020] RSP: 002b:00007f18d8ee4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.407621][ T7020] RAX: ffffffffffffffda RBX: 00007f18d8225fa0 RCX: 00007f18d7f9de59 [ 138.416289][ T7020] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 138.424438][ T7020] RBP: 00007f18d8ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 138.432911][ T7020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.441164][ T7020] R13: 00007f18d8226038 R14: 00007f18d8225fa0 R15: 00007fff0ab0bfb8 [ 138.449237][ T7020] [ 140.980451][ T7032] netlink: 132 bytes leftover after parsing attributes in process `syz.1.409'. [ 141.252615][ T7051] netlink: 'syz.2.415': attribute type 28 has an invalid length. [ 141.267156][ T7051] netlink: 'syz.2.415': attribute type 29 has an invalid length. [ 141.279958][ T7051] netlink: 132 bytes leftover after parsing attributes in process `syz.2.415'. [ 141.284753][ T7057] netlink: 'syz.1.418': attribute type 28 has an invalid length. [ 141.295108][ T7051] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 141.345224][ T7057] netlink: 'syz.1.418': attribute type 29 has an invalid length. [ 141.415906][ T7057] netlink: 132 bytes leftover after parsing attributes in process `syz.1.418'. [ 141.709272][ T7071] FAULT_INJECTION: forcing a failure. [ 141.709272][ T7071] name failslab, interval 1, probability 0, space 0, times 0 [ 141.762155][ T7071] CPU: 0 PID: 7071 Comm: syz.2.422 Not tainted syzkaller #0 [ 141.769787][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 141.780237][ T7071] Call Trace: [ 141.783648][ T7071] [ 141.786629][ T7071] dump_stack_lvl+0x18c/0x250 [ 141.791446][ T7071] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 141.797348][ T7071] ? show_regs_print_info+0x20/0x20 [ 141.802601][ T7071] ? load_image+0x420/0x420 [ 141.807151][ T7071] ? mark_lock+0x94/0x320 [ 141.811533][ T7071] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 141.817657][ T7071] should_fail_ex+0x394/0x4c0 [ 141.819316][ T7079] FAULT_INJECTION: forcing a failure. [ 141.819316][ T7079] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 141.822704][ T7071] should_failslab+0x9/0x20 [ 141.841528][ T7071] slab_pre_alloc_hook+0x59/0x300 [ 141.847044][ T7071] ? lockdep_hardirqs_on+0x98/0x150 [ 141.852295][ T7071] ? sctp_add_bind_addr+0x8c/0x360 [ 141.857521][ T7071] __kmem_cache_alloc_node+0x53/0x250 [ 141.862920][ T7071] ? sctp_add_bind_addr+0x8c/0x360 [ 141.868155][ T7071] kmalloc_trace+0x2a/0xe0 [ 141.872832][ T7071] sctp_add_bind_addr+0x8c/0x360 [ 141.877885][ T7071] sctp_copy_local_addr_list+0x31b/0x4e0 [ 141.883678][ T7071] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 141.889444][ T7071] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 141.895815][ T7071] ? sctp_v4_is_any+0x35/0x60 [ 141.900890][ T7071] ? sctp_copy_one_addr+0x8c/0x350 [ 141.906039][ T7071] sctp_bind_addr_copy+0xb3/0x3c0 [ 141.911179][ T7071] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 141.917555][ T7071] sctp_connect_new_asoc+0x2f9/0x6a0 [ 141.923021][ T7071] ? __sctp_connect+0xd80/0xd80 [ 141.927899][ T7071] ? sctp_endpoint_lookup_assoc+0xbd/0x260 [ 141.933831][ T7071] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 141.939702][ T7071] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 141.945723][ T7071] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 141.951306][ T7071] ? security_sctp_bind_connect+0x89/0xb0 [ 141.957508][ T7071] sctp_sendmsg+0x1519/0x27b0 [ 141.962318][ T7071] ? sctp_getsockopt+0xb60/0xb60 [ 141.968510][ T7071] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 141.974718][ T7071] ? lockdep_hardirqs_on+0x98/0x150 [ 141.980050][ T7071] ? inet_sendmsg+0x147/0x2a0 [ 141.984761][ T7071] ? inet_sendmsg+0x7e/0x2a0 [ 141.989467][ T7071] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 141.994867][ T7071] ? inet_send_prepare+0x250/0x250 [ 142.000007][ T7071] ____sys_sendmsg+0x61b/0x980 [ 142.005178][ T7071] ? __asan_memset+0x22/0x40 [ 142.010430][ T7071] ? __sys_sendmsg_sock+0x30/0x30 [ 142.015926][ T7071] ? __import_iovec+0x5f2/0x850 [ 142.021233][ T7071] ? import_iovec+0x73/0xa0 [ 142.025963][ T7071] ___sys_sendmsg+0x2a6/0x360 [ 142.031103][ T7071] ? __sys_sendmsg+0x2b0/0x2b0 [ 142.036241][ T7071] ? ktime_get+0x7f/0x280 [ 142.040978][ T7071] __se_sys_sendmsg+0x1d0/0x2c0 [ 142.045960][ T7071] ? perf_trace_preemptirq_template+0x269/0x330 [ 142.052224][ T7071] ? __x64_sys_sendmsg+0x80/0x80 [ 142.057222][ T7071] ? lockdep_hardirqs_on+0x98/0x150 [ 142.062544][ T7071] do_syscall_64+0x55/0xb0 [ 142.066995][ T7071] ? clear_bhb_loop+0x40/0x90 [ 142.071930][ T7071] ? clear_bhb_loop+0x40/0x90 [ 142.076822][ T7071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.083306][ T7071] RIP: 0033:0x7f91d039de59 [ 142.088027][ T7071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.108649][ T7071] RSP: 002b:00007f91d1237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.117663][ T7071] RAX: ffffffffffffffda RBX: 00007f91d0625fa0 RCX: 00007f91d039de59 [ 142.125773][ T7071] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 142.133856][ T7071] RBP: 00007f91d1237090 R08: 0000000000000000 R09: 0000000000000000 [ 142.142480][ T7071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.150763][ T7071] R13: 00007f91d0626038 R14: 00007f91d0625fa0 R15: 00007ffdbbb23488 [ 142.159005][ T7071] [ 142.162654][ T7079] CPU: 1 PID: 7079 Comm: syz.3.425 Not tainted syzkaller #0 [ 142.170112][ T7079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 142.180373][ T7079] Call Trace: [ 142.183671][ T7079] [ 142.187043][ T7079] dump_stack_lvl+0x18c/0x250 [ 142.191826][ T7079] ? show_regs_print_info+0x20/0x20 [ 142.197051][ T7079] ? load_image+0x420/0x420 [ 142.201649][ T7079] ? __lock_acquire+0x7d80/0x7d80 [ 142.206799][ T7079] should_fail_ex+0x394/0x4c0 [ 142.211603][ T7079] prepare_alloc_pages+0x1e1/0x5b0 [ 142.216919][ T7079] __alloc_pages+0x134/0x460 [ 142.221716][ T7079] ? zone_statistics+0x170/0x170 [ 142.227114][ T7079] ? alloc_pages+0x4e1/0x740 [ 142.232577][ T7079] ? do_raw_spin_unlock+0x121/0x230 [ 142.237921][ T7079] __get_free_pages+0xc/0x30 [ 142.242747][ T7079] kasan_populate_vmalloc_pte+0x35/0x100 [ 142.249385][ T7079] __apply_to_page_range+0x860/0xdd0 [ 142.254987][ T7079] ? kasan_populate_vmalloc+0x70/0x70 [ 142.260473][ T7079] ? apply_to_page_range+0x50/0x50 [ 142.266087][ T7079] ? do_raw_spin_unlock+0x121/0x230 [ 142.271587][ T7079] alloc_vmap_area+0x1d26/0x1e50 [ 142.276555][ T7079] ? vm_map_ram+0xcf0/0xcf0 [ 142.281265][ T7079] ? rcu_is_watching+0x15/0xb0 [ 142.286142][ T7079] __get_vm_area_node+0x162/0x370 [ 142.291353][ T7079] __vmalloc_node_range+0x36f/0x1320 [ 142.296724][ T7079] ? sock_hash_alloc+0x25e/0x4e0 [ 142.301787][ T7079] ? free_vm_area+0x50/0x50 [ 142.306378][ T7079] ? bpf_map_area_alloc+0x5e/0x110 [ 142.311718][ T7079] ? rcu_is_watching+0x15/0xb0 [ 142.316491][ T7079] ? bpf_map_area_alloc+0x5e/0x110 [ 142.321963][ T7079] bpf_map_area_alloc+0xf1/0x110 [ 142.327733][ T7079] ? sock_hash_alloc+0x25e/0x4e0 [ 142.333080][ T7079] sock_hash_alloc+0x25e/0x4e0 [ 142.337860][ T7079] map_create+0x877/0x12f0 [ 142.342808][ T7079] __sys_bpf+0x651/0x890 [ 142.347182][ T7079] ? bpf_link_show_fdinfo+0x390/0x390 [ 142.352675][ T7079] ? lock_chain_count+0x20/0x20 [ 142.357635][ T7079] __x64_sys_bpf+0x7c/0x90 [ 142.362228][ T7079] do_syscall_64+0x55/0xb0 [ 142.366825][ T7079] ? clear_bhb_loop+0x40/0x90 [ 142.371554][ T7079] ? clear_bhb_loop+0x40/0x90 [ 142.376238][ T7079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.382234][ T7079] RIP: 0033:0x7fcde4b9de59 [ 142.388317][ T7079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.408562][ T7079] RSP: 002b:00007fcde5a5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.416980][ T7079] RAX: ffffffffffffffda RBX: 00007fcde4e25fa0 RCX: 00007fcde4b9de59 [ 142.425062][ T7079] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000 [ 142.433434][ T7079] RBP: 00007fcde5a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 142.441807][ T7079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.449886][ T7079] R13: 00007fcde4e26038 R14: 00007fcde4e25fa0 R15: 00007ffe872e7d48 [ 142.458067][ T7079] [ 142.907673][ T7097] netlink: 'syz.3.431': attribute type 1 has an invalid length. [ 142.925232][ T7097] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.431'. [ 142.940664][ T7093] netlink: 144 bytes leftover after parsing attributes in process `syz.0.429'. [ 143.037056][ T7100] FAULT_INJECTION: forcing a failure. [ 143.037056][ T7100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.055973][ T7100] CPU: 1 PID: 7100 Comm: syz.2.432 Not tainted syzkaller #0 [ 143.066130][ T7100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.078873][ T7100] Call Trace: [ 143.083756][ T7100] [ 143.087005][ T7100] dump_stack_lvl+0x18c/0x250 [ 143.093295][ T7100] ? show_regs_print_info+0x20/0x20 [ 143.099390][ T7100] ? load_image+0x420/0x420 [ 143.104667][ T7100] ? __lock_acquire+0x7d80/0x7d80 [ 143.110243][ T7100] ? snprintf+0xe9/0x140 [ 143.115000][ T7100] should_fail_ex+0x394/0x4c0 [ 143.120390][ T7100] _copy_to_user+0x2f/0xa0 [ 143.124953][ T7100] simple_read_from_buffer+0xe7/0x150 [ 143.130959][ T7100] proc_fail_nth_read+0x1e8/0x260 [ 143.136560][ T7100] ? proc_fault_inject_write+0x360/0x360 [ 143.142419][ T7100] ? fsnotify_perm+0x271/0x5e0 [ 143.147495][ T7100] ? proc_fault_inject_write+0x360/0x360 [ 143.153332][ T7100] vfs_read+0x298/0x990 [ 143.157519][ T7100] ? kernel_read+0x1e0/0x1e0 [ 143.162931][ T7100] ? __fget_files+0x28/0x460 [ 143.169450][ T7100] ? __fget_files+0x3fc/0x460 [ 143.178283][ T7100] ? __fdget_pos+0x2a3/0x330 [ 143.185025][ T7100] ? ksys_read+0x74/0x260 [ 143.189837][ T7100] ksys_read+0x151/0x260 [ 143.194209][ T7100] ? vfs_write+0x9a0/0x9a0 [ 143.198919][ T7100] ? lockdep_hardirqs_on+0x98/0x150 [ 143.204448][ T7100] do_syscall_64+0x55/0xb0 [ 143.210139][ T7100] ? clear_bhb_loop+0x40/0x90 [ 143.215155][ T7100] ? clear_bhb_loop+0x40/0x90 [ 143.221460][ T7100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.228853][ T7100] RIP: 0033:0x7f91d035e68e [ 143.234888][ T7100] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 143.257358][ T7100] RSP: 002b:00007f91d1236fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.268053][ T7100] RAX: ffffffffffffffda RBX: 00007f91d12376c0 RCX: 00007f91d035e68e [ 143.278395][ T7100] RDX: 000000000000000f RSI: 00007f91d12370a0 RDI: 0000000000000004 [ 143.287085][ T7100] RBP: 00007f91d1237090 R08: 0000000000000000 R09: 0000000000000000 [ 143.296320][ T7100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.304420][ T7100] R13: 00007f91d0626038 R14: 00007f91d0625fa0 R15: 00007ffdbbb23488 [ 143.315320][ T7100] [ 143.577565][ T7093] team0: Port device team_slave_0 removed [ 143.585018][ T7093] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 145.062402][ T7147] netlink: 'syz.3.448': attribute type 10 has an invalid length. [ 145.120547][ T7148] netlink: 'syz.2.450': attribute type 27 has an invalid length. [ 145.133621][ T7148] netlink: 'syz.2.450': attribute type 3 has an invalid length. [ 145.189692][ T7147] team0: Port device wlan1 added [ 145.212856][ T7148] hsr0: left allmulticast mode [ 145.222770][ T7148] hsr_slave_0: left allmulticast mode [ 145.263631][ T7148] hsr_slave_1: left allmulticast mode [ 145.288794][ T7148] bridge0: port 3(hsr0) entered disabled state [ 145.348468][ T7148] batadv0: left allmulticast mode [ 145.377140][ T7148] batadv0: left promiscuous mode [ 145.412868][ T7148] bridge0: port 2(batadv0) entered disabled state [ 145.452772][ T7148] bridge_slave_0: left allmulticast mode [ 145.459595][ T7148] bridge_slave_0: left promiscuous mode [ 145.466708][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.723018][ T7165] FAULT_INJECTION: forcing a failure. [ 148.723018][ T7165] name failslab, interval 1, probability 0, space 0, times 0 [ 148.788141][ T7165] CPU: 1 PID: 7165 Comm: syz.2.453 Not tainted syzkaller #0 [ 148.796946][ T7165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 148.807566][ T7165] Call Trace: [ 148.811051][ T7165] [ 148.814269][ T7165] dump_stack_lvl+0x18c/0x250 [ 148.819275][ T7165] ? sctp_sendmsg+0x1519/0x27b0 [ 148.824160][ T7165] ? ___sys_sendmsg+0x2a6/0x360 [ 148.829042][ T7165] ? show_regs_print_info+0x20/0x20 [ 148.834451][ T7165] ? load_image+0x420/0x420 [ 148.840532][ T7165] should_fail_ex+0x394/0x4c0 [ 148.845785][ T7165] should_failslab+0x9/0x20 [ 148.850582][ T7165] slab_pre_alloc_hook+0x59/0x300 [ 148.856098][ T7165] ? sctp_add_bind_addr+0x8c/0x360 [ 148.861415][ T7165] __kmem_cache_alloc_node+0x53/0x250 [ 148.866986][ T7165] ? sctp_add_bind_addr+0x8c/0x360 [ 148.872102][ T7165] kmalloc_trace+0x2a/0xe0 [ 148.876745][ T7165] sctp_add_bind_addr+0x8c/0x360 [ 148.882307][ T7165] sctp_copy_local_addr_list+0x31b/0x4e0 [ 148.887937][ T7165] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 148.894281][ T7165] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 148.900676][ T7165] ? sctp_v6_is_any+0x64/0x70 [ 148.905737][ T7165] ? sctp_copy_one_addr+0x8c/0x350 [ 148.910991][ T7165] sctp_bind_addr_copy+0xb3/0x3c0 [ 148.916500][ T7165] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 148.924605][ T7165] sctp_connect_new_asoc+0x2f9/0x6a0 [ 148.930275][ T7165] ? __sctp_connect+0xd80/0xd80 [ 148.935442][ T7165] ? __local_bh_enable_ip+0x13a/0x1c0 [ 148.940986][ T7165] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 148.947000][ T7165] ? security_sctp_bind_connect+0x89/0xb0 [ 148.954948][ T7165] sctp_sendmsg+0x1519/0x27b0 [ 148.960000][ T7165] ? sctp_getsockopt+0xb60/0xb60 [ 148.965693][ T7165] ? aa_af_perm+0x330/0x330 [ 148.970844][ T7165] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 148.977409][ T7165] ? sock_rps_record_flow+0x19/0x3f0 [ 148.983607][ T7165] ? inet_sendmsg+0xce/0x2a0 [ 148.988405][ T7165] ? inet_send_prepare+0x250/0x250 [ 148.993757][ T7165] ____sys_sendmsg+0x61b/0x980 [ 148.998691][ T7165] ? __asan_memset+0x22/0x40 [ 149.004116][ T7165] ? __sys_sendmsg_sock+0x30/0x30 [ 149.009953][ T7165] ? __import_iovec+0x5f2/0x850 [ 149.015648][ T7165] ? import_iovec+0x73/0xa0 [ 149.022723][ T7165] ___sys_sendmsg+0x2a6/0x360 [ 149.028189][ T7165] ? get_pid_task+0x20/0x1e0 [ 149.033664][ T7165] ? __sys_sendmsg+0x2b0/0x2b0 [ 149.038927][ T7165] ? __lock_acquire+0x7d80/0x7d80 [ 149.044564][ T7165] __se_sys_sendmsg+0x1d0/0x2c0 [ 149.049741][ T7165] ? __x64_sys_sendmsg+0x80/0x80 [ 149.054983][ T7165] ? lockdep_hardirqs_on+0x98/0x150 [ 149.060648][ T7165] do_syscall_64+0x55/0xb0 [ 149.066590][ T7165] ? clear_bhb_loop+0x40/0x90 [ 149.071387][ T7165] ? clear_bhb_loop+0x40/0x90 [ 149.076636][ T7165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.083267][ T7165] RIP: 0033:0x7f91d039de59 [ 149.088492][ T7165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.110047][ T7165] RSP: 002b:00007f91d1237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.119201][ T7165] RAX: ffffffffffffffda RBX: 00007f91d0625fa0 RCX: 00007f91d039de59 [ 149.127348][ T7165] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 149.135510][ T7165] RBP: 00007f91d1237090 R08: 0000000000000000 R09: 0000000000000000 [ 149.144464][ T7165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.153561][ T7165] R13: 00007f91d0626038 R14: 00007f91d0625fa0 R15: 00007ffdbbb23488 [ 149.161831][ T7165] [ 149.424020][ T7178] FAULT_INJECTION: forcing a failure. [ 149.424020][ T7178] name failslab, interval 1, probability 0, space 0, times 0 [ 149.478288][ T7178] CPU: 0 PID: 7178 Comm: syz.1.458 Not tainted syzkaller #0 [ 149.485739][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.496357][ T7178] Call Trace: [ 149.500133][ T7178] [ 149.503363][ T7178] dump_stack_lvl+0x18c/0x250 [ 149.508090][ T7178] ? show_regs_print_info+0x20/0x20 [ 149.513769][ T7178] ? load_image+0x420/0x420 [ 149.519114][ T7178] ? __might_sleep+0xe0/0xe0 [ 149.523885][ T7178] ? __lock_acquire+0x7d80/0x7d80 [ 149.528952][ T7178] should_fail_ex+0x394/0x4c0 [ 149.533758][ T7178] should_failslab+0x9/0x20 [ 149.538457][ T7178] slab_pre_alloc_hook+0x59/0x300 [ 149.543528][ T7178] ? finish_task_switch+0x262/0x8f0 [ 149.549450][ T7178] ? rtnl_newlink+0x10d/0x2170 [ 149.554753][ T7178] __kmem_cache_alloc_node+0x53/0x250 [ 149.560268][ T7178] ? rtnl_newlink+0x10d/0x2170 [ 149.565252][ T7178] kmalloc_trace+0x2a/0xe0 [ 149.569712][ T7178] rtnl_newlink+0x10d/0x2170 [ 149.574362][ T7178] ? __mutex_lock+0x919/0xc80 [ 149.579425][ T7178] ? __lock_acquire+0x7d80/0x7d80 [ 149.584504][ T7178] ? do_raw_spin_lock+0x11f/0x2b0 [ 149.589727][ T7178] ? rtnl_setlink+0x4e0/0x4e0 [ 149.594619][ T7178] ? __rwlock_init+0x150/0x150 [ 149.599442][ T7178] ? do_raw_spin_unlock+0x121/0x230 [ 149.604859][ T7178] ? __mutex_lock+0x923/0xc80 [ 149.608455][ T7185] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 149.609552][ T7178] ? __mutex_lock+0x4d2/0xc80 [ 149.609583][ T7178] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 149.609600][ T7178] ? mutex_lock_nested+0x20/0x20 [ 149.609626][ T7178] ? rtnl_setlink+0x4e0/0x4e0 [ 149.609647][ T7178] rtnetlink_rcv_msg+0x843/0xf90 [ 149.641906][ T7178] ? rtnetlink_rcv_msg+0x220/0xf90 [ 149.647118][ T7178] ? rtnetlink_bind+0x80/0x80 [ 149.651884][ T7178] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 149.658393][ T7178] ? lock_chain_count+0x20/0x20 [ 149.664556][ T7178] ? __local_bh_enable_ip+0x13a/0x1c0 [ 149.671710][ T7178] ? lockdep_hardirqs_on+0x98/0x150 [ 149.677260][ T7178] ? __local_bh_enable_ip+0x13a/0x1c0 [ 149.682752][ T7178] ? _local_bh_enable+0xa0/0xa0 [ 149.687736][ T7178] ? __dev_queue_xmit+0x275/0x3630 [ 149.693067][ T7178] ? __dev_queue_xmit+0x1bc2/0x3630 [ 149.698487][ T7178] ? __dev_queue_xmit+0x275/0x3630 [ 149.704202][ T7178] ? ref_tracker_free+0x686/0x830 [ 149.709352][ T7178] netlink_rcv_skb+0x235/0x4c0 [ 149.714662][ T7178] ? rtnetlink_bind+0x80/0x80 [ 149.719532][ T7178] ? netlink_ack+0x1160/0x1160 [ 149.724435][ T7178] ? __lock_acquire+0x7d80/0x7d80 [ 149.730611][ T7178] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.736312][ T7178] netlink_unicast+0x7b1/0x930 [ 149.741207][ T7178] netlink_sendmsg+0x8d0/0xbf0 [ 149.746180][ T7178] ? netlink_getsockopt+0x590/0x590 [ 149.751612][ T7178] ? apparmor_socket_sendmsg+0x8e/0x330 [ 149.757267][ T7178] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 149.762736][ T7178] ? security_socket_sendmsg+0x80/0xa0 [ 149.768855][ T7178] ? netlink_getsockopt+0x590/0x590 [ 149.774102][ T7178] ____sys_sendmsg+0x61b/0x980 [ 149.778987][ T7178] ? __asan_memset+0x22/0x40 [ 149.783889][ T7178] ? __sys_sendmsg_sock+0x30/0x30 [ 149.789030][ T7178] ? __import_iovec+0x5f2/0x850 [ 149.795026][ T7178] ? import_iovec+0x73/0xa0 [ 149.799834][ T7178] ___sys_sendmsg+0x2a6/0x360 [ 149.804805][ T7178] ? get_pid_task+0x20/0x1e0 [ 149.809492][ T7178] ? __sys_sendmsg+0x2b0/0x2b0 [ 149.815270][ T7178] ? __lock_acquire+0x7d80/0x7d80 [ 149.820427][ T7178] __se_sys_sendmsg+0x1d0/0x2c0 [ 149.825488][ T7178] ? __x64_sys_sendmsg+0x80/0x80 [ 149.830467][ T7178] ? lockdep_hardirqs_on+0x98/0x150 [ 149.836019][ T7178] do_syscall_64+0x55/0xb0 [ 149.840449][ T7178] ? clear_bhb_loop+0x40/0x90 [ 149.845221][ T7178] ? clear_bhb_loop+0x40/0x90 [ 149.850091][ T7178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.856076][ T7178] RIP: 0033:0x7f18d7f9de59 [ 149.860493][ T7178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.880637][ T7178] RSP: 002b:00007f18d8ee4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.889597][ T7178] RAX: ffffffffffffffda RBX: 00007f18d8225fa0 RCX: 00007f18d7f9de59 [ 149.897940][ T7178] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 149.905931][ T7178] RBP: 00007f18d8ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 149.914079][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.922394][ T7178] R13: 00007f18d8226038 R14: 00007f18d8225fa0 R15: 00007fff0ab0bfb8 [ 149.930728][ T7178] [ 150.212354][ T7191] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.464'. [ 150.508324][ T7198] netlink: 'syz.0.466': attribute type 10 has an invalid length. [ 150.548370][ T7198] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.559271][ T7198] bond0: (slave team0): Enslaving as an active interface with an up link [ 151.865695][ T7230] syzkaller0: entered promiscuous mode [ 151.871406][ T7230] syzkaller0: entered allmulticast mode [ 153.765235][ T7248] FAULT_INJECTION: forcing a failure. [ 153.765235][ T7248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.823782][ T7248] CPU: 1 PID: 7248 Comm: syz.2.481 Not tainted syzkaller #0 [ 153.831500][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.842222][ T7248] Call Trace: [ 153.846350][ T7248] [ 153.849834][ T7248] dump_stack_lvl+0x18c/0x250 [ 153.857464][ T7248] ? show_regs_print_info+0x20/0x20 [ 153.863547][ T7248] ? load_image+0x420/0x420 [ 153.868137][ T7248] ? __lock_acquire+0x7d80/0x7d80 [ 153.873218][ T7248] ? snprintf+0xe9/0x140 [ 153.877596][ T7248] should_fail_ex+0x394/0x4c0 [ 153.882496][ T7248] _copy_to_user+0x2f/0xa0 [ 153.886943][ T7248] simple_read_from_buffer+0xe7/0x150 [ 153.892464][ T7248] proc_fail_nth_read+0x1e8/0x260 [ 153.897803][ T7248] ? proc_fault_inject_write+0x360/0x360 [ 153.903845][ T7248] ? vfs_read+0x282/0x990 [ 153.908305][ T7248] ? proc_fault_inject_write+0x360/0x360 [ 153.914217][ T7248] vfs_read+0x298/0x990 [ 153.918511][ T7248] ? kernel_read+0x1e0/0x1e0 [ 153.923860][ T7248] ? __fget_files+0x28/0x460 [ 153.928718][ T7248] ? __fget_files+0x3fc/0x460 [ 153.933876][ T7248] ? __fdget_pos+0x2a3/0x330 [ 153.938785][ T7248] ? ksys_read+0x74/0x260 [ 153.943149][ T7248] ksys_read+0x151/0x260 [ 153.947603][ T7248] ? vfs_write+0x9a0/0x9a0 [ 153.952154][ T7248] ? syscall_enter_from_user_mode+0x2e/0x80 [ 153.959585][ T7248] do_syscall_64+0x55/0xb0 [ 153.964157][ T7248] ? clear_bhb_loop+0x40/0x90 [ 153.969394][ T7248] ? clear_bhb_loop+0x40/0x90 [ 153.974590][ T7248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.980628][ T7248] RIP: 0033:0x7f91d035e68e [ 153.985335][ T7248] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 154.005328][ T7248] RSP: 002b:00007f91d1236fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 154.013954][ T7248] RAX: ffffffffffffffda RBX: 00007f91d12376c0 RCX: 00007f91d035e68e [ 154.022498][ T7248] RDX: 000000000000000f RSI: 00007f91d12370a0 RDI: 0000000000000006 [ 154.030680][ T7248] RBP: 00007f91d1237090 R08: 0000000000000000 R09: 0000000000000000 [ 154.038818][ T7248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.047251][ T7248] R13: 00007f91d0626038 R14: 00007f91d0625fa0 R15: 00007ffdbbb23488 [ 154.055551][ T7248] [ 154.100632][ T7253] syz.0.484 uses obsolete (PF_INET,SOCK_PACKET) [ 157.777282][ T7268] netlink: 'syz.0.487': attribute type 11 has an invalid length. [ 157.809448][ T7268] netlink: 168 bytes leftover after parsing attributes in process `syz.0.487'. [ 157.918316][ T7272] netlink: 'syz.3.488': attribute type 10 has an invalid length. [ 159.750456][ T7309] netlink: 14 bytes leftover after parsing attributes in process `syz.2.498'. [ 159.791179][ T7309] FAULT_INJECTION: forcing a failure. [ 159.791179][ T7309] name failslab, interval 1, probability 0, space 0, times 0 [ 159.878203][ T7309] CPU: 0 PID: 7309 Comm: syz.2.498 Not tainted syzkaller #0 [ 159.885655][ T7309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 159.895822][ T7309] Call Trace: [ 159.899119][ T7309] [ 159.902070][ T7309] dump_stack_lvl+0x18c/0x250 [ 159.906783][ T7309] ? show_regs_print_info+0x20/0x20 [ 159.912015][ T7309] ? load_image+0x420/0x420 [ 159.916545][ T7309] ? __might_sleep+0xe0/0xe0 [ 159.921172][ T7309] ? __lock_acquire+0x7d80/0x7d80 [ 159.926341][ T7309] should_fail_ex+0x394/0x4c0 [ 159.931093][ T7309] should_failslab+0x9/0x20 [ 159.935626][ T7309] slab_pre_alloc_hook+0x59/0x300 [ 159.940773][ T7309] ? __lock_acquire+0x7d80/0x7d80 [ 159.945834][ T7309] kmem_cache_alloc_node+0x5e/0x310 [ 159.951907][ T7309] ? __alloc_skb+0x103/0x2c0 [ 159.956557][ T7309] __alloc_skb+0x103/0x2c0 [ 159.961102][ T7309] ovs_ct_limit_cmd_get+0x18c/0xfa0 [ 159.966616][ T7309] ? ovs_ct_limit_cmd_del+0x750/0x750 [ 159.972204][ T7309] ? __nla_parse+0x40/0x50 [ 159.976665][ T7309] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 159.983123][ T7309] genl_family_rcv_msg_doit+0x21a/0x310 [ 159.989063][ T7309] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 159.995015][ T7309] genl_rcv_msg+0x611/0x7a0 [ 159.999655][ T7309] ? genl_bind+0x360/0x360 [ 160.004236][ T7309] ? ovs_ct_limit_cmd_del+0x750/0x750 [ 160.009649][ T7309] ? ref_tracker_free+0x686/0x830 [ 160.014786][ T7309] netlink_rcv_skb+0x235/0x4c0 [ 160.019817][ T7309] ? genl_bind+0x360/0x360 [ 160.024552][ T7309] ? netlink_ack+0x1160/0x1160 [ 160.029421][ T7309] ? __lock_acquire+0x7d80/0x7d80 [ 160.034678][ T7309] ? down_read+0x1ac/0x2e0 [ 160.039324][ T7309] genl_rcv+0x28/0x40 [ 160.043587][ T7309] netlink_unicast+0x7b1/0x930 [ 160.048812][ T7309] netlink_sendmsg+0x8d0/0xbf0 [ 160.053640][ T7309] ? apparmor_socket_sendmsg+0x8e/0x330 [ 160.059234][ T7309] ? netlink_getsockopt+0x590/0x590 [ 160.064647][ T7309] ? __sanitizer_cov_trace_pc+0x36/0x60 [ 160.070580][ T7309] ? apparmor_socket_sendmsg+0x8e/0x330 [ 160.076604][ T7309] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 160.082107][ T7309] ? security_socket_sendmsg+0x80/0xa0 [ 160.087828][ T7309] ? netlink_getsockopt+0x590/0x590 [ 160.093612][ T7309] ____sys_sendmsg+0x61b/0x980 [ 160.098561][ T7309] ? __asan_memset+0x22/0x40 [ 160.103548][ T7309] ? __sys_sendmsg_sock+0x30/0x30 [ 160.108630][ T7309] ? __import_iovec+0x5f2/0x850 [ 160.113794][ T7309] ? import_iovec+0x73/0xa0 [ 160.118435][ T7309] ___sys_sendmsg+0x2a6/0x360 [ 160.123421][ T7309] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 160.129933][ T7309] ? get_pid_task+0x20/0x1e0 [ 160.135179][ T7309] ? __sys_sendmsg+0x2b0/0x2b0 [ 160.140086][ T7309] ? __lock_acquire+0x7d80/0x7d80 [ 160.145207][ T7309] __se_sys_sendmsg+0x1d0/0x2c0 [ 160.150242][ T7309] ? __x64_sys_sendmsg+0x80/0x80 [ 160.155258][ T7309] ? lockdep_hardirqs_on+0x98/0x150 [ 160.160683][ T7309] do_syscall_64+0x55/0xb0 [ 160.165386][ T7309] ? clear_bhb_loop+0x40/0x90 [ 160.170541][ T7309] ? clear_bhb_loop+0x40/0x90 [ 160.175255][ T7309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.181322][ T7309] RIP: 0033:0x7f91d039de59 [ 160.185876][ T7309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.205643][ T7309] RSP: 002b:00007f91d1237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.214401][ T7309] RAX: ffffffffffffffda RBX: 00007f91d0625fa0 RCX: 00007f91d039de59 [ 160.222684][ T7309] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 160.231135][ T7309] RBP: 00007f91d1237090 R08: 0000000000000000 R09: 0000000000000000 [ 160.240448][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.248555][ T7309] R13: 00007f91d0626038 R14: 00007f91d0625fa0 R15: 00007ffdbbb23488 [ 160.256944][ T7309] [ 160.519441][ T7322] netlink: 'syz.2.503': attribute type 10 has an invalid length. [ 160.556886][ T7320] netlink: 'syz.3.504': attribute type 3 has an invalid length. [ 160.587573][ T7324] netlink: 'syz.3.504': attribute type 3 has an invalid length. [ 160.624397][ T7320] netlink: 'syz.3.504': attribute type 1 has an invalid length. [ 160.632821][ T7320] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.504'. [ 160.638207][ T7324] netlink: 'syz.3.504': attribute type 1 has an invalid length. [ 160.688442][ T7324] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.504'. [ 160.753216][ T7325] FAULT_INJECTION: forcing a failure. [ 160.753216][ T7325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.789166][ T7325] CPU: 0 PID: 7325 Comm: syz.1.506 Not tainted syzkaller #0 [ 160.796785][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 160.807054][ T7325] Call Trace: [ 160.810375][ T7325] [ 160.813422][ T7325] dump_stack_lvl+0x18c/0x250 [ 160.818147][ T7325] ? show_regs_print_info+0x20/0x20 [ 160.823434][ T7325] ? load_image+0x420/0x420 [ 160.827990][ T7325] ? __might_fault+0xaa/0x120 [ 160.832797][ T7325] ? __lock_acquire+0x7d80/0x7d80 [ 160.837910][ T7325] should_fail_ex+0x394/0x4c0 [ 160.842637][ T7325] _copy_to_user+0x2f/0xa0 [ 160.847263][ T7325] bpf_test_finish+0x19f/0x650 [ 160.852244][ T7325] ? bpf_test_run+0x174/0x870 [ 160.856958][ T7325] ? convert_skb_to___skb+0x420/0x420 [ 160.862374][ T7325] bpf_prog_test_run_skb+0x1135/0x18f0 [ 160.867864][ T7325] ? cpu_online+0x60/0x60 [ 160.872289][ T7325] bpf_prog_test_run+0x31f/0x390 [ 160.877340][ T7325] __sys_bpf+0x49d/0x890 [ 160.881786][ T7325] ? bpf_link_show_fdinfo+0x390/0x390 [ 160.887192][ T7325] ? lock_chain_count+0x20/0x20 [ 160.892160][ T7325] __x64_sys_bpf+0x7c/0x90 [ 160.896613][ T7325] do_syscall_64+0x55/0xb0 [ 160.901041][ T7325] ? clear_bhb_loop+0x40/0x90 [ 160.905720][ T7325] ? clear_bhb_loop+0x40/0x90 [ 160.910399][ T7325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.916298][ T7325] RIP: 0033:0x7f18d7f9de59 [ 160.920723][ T7325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.940857][ T7325] RSP: 002b:00007f18d8ee4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.949365][ T7325] RAX: ffffffffffffffda RBX: 00007f18d8225fa0 RCX: 00007f18d7f9de59 [ 160.957451][ T7325] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 160.965965][ T7325] RBP: 00007f18d8ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 160.974583][ T7325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.982741][ T7325] R13: 00007f18d8226038 R14: 00007f18d8225fa0 R15: 00007fff0ab0bfb8 [ 160.990979][ T7325] [ 160.996139][ T7322] bond0: (slave wlan1): Releasing backup interface [ 161.031681][ T7322] team0: Port device wlan1 added [ 161.155498][ T7334] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.507'. [ 161.289339][ T7326] syzkaller0: entered promiscuous mode [ 161.294882][ T7326] syzkaller0: entered allmulticast mode [ 161.324499][ T7337] FAULT_INJECTION: forcing a failure. [ 161.324499][ T7337] name failslab, interval 1, probability 0, space 0, times 0 [ 161.358090][ T7337] CPU: 1 PID: 7337 Comm: syz.1.508 Not tainted syzkaller #0 [ 161.365732][ T7337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.376164][ T7337] Call Trace: [ 161.379644][ T7337] [ 161.382910][ T7337] dump_stack_lvl+0x18c/0x250 [ 161.387905][ T7337] ? show_regs_print_info+0x20/0x20 [ 161.393234][ T7337] ? load_image+0x420/0x420 [ 161.397778][ T7337] ? __might_sleep+0xe0/0xe0 [ 161.402407][ T7337] ? __lock_acquire+0x7d80/0x7d80 [ 161.407472][ T7337] should_fail_ex+0x394/0x4c0 [ 161.412208][ T7337] should_failslab+0x9/0x20 [ 161.416749][ T7337] slab_pre_alloc_hook+0x59/0x300 [ 161.421810][ T7337] ? ioctl_standard_iw_point+0x827/0xd50 [ 161.427496][ T7337] ? cfg80211_sinfo_alloc_tid_stats+0x73/0xf0 [ 161.433697][ T7337] __kmem_cache_alloc_node+0x53/0x250 [ 161.439203][ T7337] ? cfg80211_sinfo_alloc_tid_stats+0x73/0xf0 [ 161.445307][ T7337] kmalloc_trace+0x2a/0xe0 [ 161.449772][ T7337] cfg80211_sinfo_alloc_tid_stats+0x73/0xf0 [ 161.455893][ T7337] sta_set_sinfo+0x1e24/0x46f0 [ 161.460821][ T7337] __sta_info_destroy_part2+0x278/0x410 [ 161.466607][ T7337] __sta_info_flush+0x3e6/0x4f0 [ 161.471531][ T7337] ? sta_info_stop+0x40/0x40 [ 161.476601][ T7337] ? __local_bh_enable_ip+0x13a/0x1c0 [ 161.482107][ T7337] ? _local_bh_enable+0xa0/0xa0 [ 161.487148][ T7337] ? do_raw_spin_unlock+0x121/0x230 [ 161.492477][ T7337] ieee80211_ibss_disconnect+0x25a/0x6f0 [ 161.498253][ T7337] ieee80211_ibss_leave+0x25/0x140 [ 161.503500][ T7337] __cfg80211_leave_ibss+0x1d2/0x400 [ 161.509007][ T7337] cfg80211_ibss_wext_siwessid+0x163/0x390 [ 161.515128][ T7337] cfg80211_wext_siwessid+0xd8/0x120 [ 161.520655][ T7337] ioctl_standard_iw_point+0x827/0xd50 [ 161.526362][ T7337] ? cfg80211_wext_giwap+0x120/0x120 [ 161.531750][ T7337] ? iw_handler_get_iwstats+0x110/0x110 [ 161.537526][ T7337] ? wext_ioctl_dispatch+0x106/0x650 [ 161.542962][ T7337] ? mutex_lock_nested+0x20/0x20 [ 161.548217][ T7337] ioctl_standard_call+0xae/0x250 [ 161.553311][ T7337] ? cfg80211_wext_giwap+0x120/0x120 [ 161.558729][ T7337] ? cfg80211_wext_giwap+0x120/0x120 [ 161.564105][ T7337] wext_ioctl_dispatch+0x51a/0x650 [ 161.569283][ T7337] ? __lock_acquire+0x7d80/0x7d80 [ 161.574359][ T7337] ? wext_ioctl_dispatch+0x650/0x650 [ 161.580135][ T7337] ? iw_handler_get_private+0x1f0/0x1f0 [ 161.586346][ T7337] ? wext_handle_ioctl+0x1e0/0x1e0 [ 161.591514][ T7337] ? __might_fault+0xaa/0x120 [ 161.596242][ T7337] ? __might_fault+0xc6/0x120 [ 161.601155][ T7337] ? __might_fault+0xaa/0x120 [ 161.605962][ T7337] wext_handle_ioctl+0x118/0x1e0 [ 161.611040][ T7337] ? call_commit_handler+0xf0/0xf0 [ 161.616388][ T7337] sock_ioctl+0x15d/0x7e0 [ 161.620767][ T7337] ? sock_poll+0x3e0/0x3e0 [ 161.625414][ T7337] ? bpf_lsm_file_ioctl+0x9/0x10 [ 161.630917][ T7337] ? security_file_ioctl+0x80/0xa0 [ 161.636105][ T7337] ? sock_poll+0x3e0/0x3e0 [ 161.640566][ T7337] __se_sys_ioctl+0xfd/0x170 [ 161.645209][ T7337] do_syscall_64+0x55/0xb0 [ 161.649665][ T7337] ? clear_bhb_loop+0x40/0x90 [ 161.654556][ T7337] ? clear_bhb_loop+0x40/0x90 [ 161.659274][ T7337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.665307][ T7337] RIP: 0033:0x7f18d7f9de59 [ 161.670202][ T7337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.690107][ T7337] RSP: 002b:00007f18d8ee4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.698568][ T7337] RAX: ffffffffffffffda RBX: 00007f18d8225fa0 RCX: 00007f18d7f9de59 [ 161.706679][ T7337] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000003 [ 161.715146][ T7337] RBP: 00007f18d8ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 161.723187][ T7337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.731220][ T7337] R13: 00007f18d8226038 R14: 00007f18d8225fa0 R15: 00007fff0ab0bfb8 [ 161.739387][ T7337] [ 161.831375][ T7345] netlink: 'syz.3.510': attribute type 2 has an invalid length. [ 161.840717][ T7345] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.510'. [ 164.851374][ T7344] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.510'. [ 164.899887][ T7317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.042463][ T7367] netlink: 'syz.1.517': attribute type 6 has an invalid length. [ 165.057044][ T7367] netlink: 156 bytes leftover after parsing attributes in process `syz.1.517'. [ 165.068534][ T7365] netlink: 'syz.1.517': attribute type 6 has an invalid length. [ 165.077913][ T7365] netlink: 156 bytes leftover after parsing attributes in process `syz.1.517'. [ 165.079962][ T7366] netlink: 14 bytes leftover after parsing attributes in process `syz.3.516'. [ 165.108528][ T7366] netlink: get zone limit has 4 unknown bytes [ 165.116020][ T7370] netlink: 16375 bytes leftover after parsing attributes in process `syz.2.519'. [ 165.284779][ T7375] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 166.191490][ T7383] FAULT_INJECTION: forcing a failure. [ 166.191490][ T7383] name failslab, interval 1, probability 0, space 0, times 0 [ 166.248144][ T7383] CPU: 1 PID: 7383 Comm: syz.3.523 Not tainted syzkaller #0 [ 166.256122][ T7383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 166.266644][ T7383] Call Trace: [ 166.269957][ T7383] [ 166.272910][ T7383] dump_stack_lvl+0x18c/0x250 [ 166.277731][ T7383] ? verify_lock_unused+0x140/0x140 [ 166.282985][ T7383] ? show_regs_print_info+0x20/0x20 [ 166.288223][ T7383] ? load_image+0x420/0x420 [ 166.292989][ T7383] ? crng_make_state+0x411/0x700 [ 166.298059][ T7383] should_fail_ex+0x394/0x4c0 [ 166.302799][ T7383] should_failslab+0x9/0x20 [ 166.307438][ T7383] slab_pre_alloc_hook+0x59/0x300 [ 166.312503][ T7383] ? urandom_read_iter+0x140/0x140 [ 166.317648][ T7383] ? sctp_add_bind_addr+0x8c/0x360 [ 166.322969][ T7383] __kmem_cache_alloc_node+0x53/0x250 [ 166.328834][ T7383] ? sctp_add_bind_addr+0x8c/0x360 [ 166.335135][ T7383] kmalloc_trace+0x2a/0xe0 [ 166.339699][ T7383] sctp_add_bind_addr+0x8c/0x360 [ 166.344787][ T7383] sctp_copy_local_addr_list+0x31b/0x4e0 [ 166.350552][ T7383] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 166.356410][ T7383] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 166.362611][ T7383] ? sctp_v4_is_any+0x35/0x60 [ 166.367583][ T7383] ? sctp_copy_one_addr+0x8c/0x350 [ 166.373198][ T7383] sctp_bind_addr_copy+0xb3/0x3c0 [ 166.378255][ T7383] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 166.384811][ T7383] sctp_connect_new_asoc+0x2f9/0x6a0 [ 166.390398][ T7383] ? __sctp_connect+0xd80/0xd80 [ 166.395474][ T7383] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 166.401063][ T7383] ? security_sctp_bind_connect+0x89/0xb0 [ 166.406822][ T7383] sctp_sendmsg+0x1519/0x27b0 [ 166.411550][ T7383] ? sctp_getsockopt+0xb60/0xb60 [ 166.417141][ T7383] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 166.423343][ T7383] ? lockdep_hardirqs_on+0x98/0x150 [ 166.428799][ T7383] ? apparmor_socket_sendmsg+0x8e/0x330 [ 166.434370][ T7383] ? sock_rps_record_flow+0x19/0x3f0 [ 166.439678][ T7383] ? inet_sendmsg+0xce/0x2a0 [ 166.444377][ T7383] ? inet_send_prepare+0x250/0x250 [ 166.449905][ T7383] ____sys_sendmsg+0x61b/0x980 [ 166.454964][ T7383] ? __asan_memset+0x22/0x40 [ 166.459845][ T7383] ? __sys_sendmsg_sock+0x30/0x30 [ 166.464899][ T7383] ? __import_iovec+0x5f2/0x850 [ 166.469964][ T7383] ? import_iovec+0x73/0xa0 [ 166.474552][ T7383] ___sys_sendmsg+0x2a6/0x360 [ 166.479291][ T7383] ? __sys_sendmsg+0x2b0/0x2b0 [ 166.484410][ T7383] __se_sys_sendmsg+0x1d0/0x2c0 [ 166.489371][ T7383] ? __x64_sys_sendmsg+0x80/0x80 [ 166.494519][ T7383] ? syscall_enter_from_user_mode+0x2e/0x80 [ 166.500616][ T7383] do_syscall_64+0x55/0xb0 [ 166.505057][ T7383] ? clear_bhb_loop+0x40/0x90 [ 166.509787][ T7383] ? clear_bhb_loop+0x40/0x90 [ 166.514478][ T7383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.520474][ T7383] RIP: 0033:0x7fcde4b9de59 [ 166.524903][ T7383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.544799][ T7383] RSP: 002b:00007fcde5a5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.553333][ T7383] RAX: ffffffffffffffda RBX: 00007fcde4e25fa0 RCX: 00007fcde4b9de59 [ 166.561325][ T7383] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000008 [ 166.569926][ T7383] RBP: 00007fcde5a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 166.577917][ T7383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.589741][ T7383] R13: 00007fcde4e26038 R14: 00007fcde4e25fa0 R15: 00007ffe872e7d48 [ 166.597957][ T7383] [ 166.682196][ T7393] netlink: 132 bytes leftover after parsing attributes in process `syz.2.525'. [ 166.893598][ T7400] netlink: 'syz.1.530': attribute type 10 has an invalid length. [ 166.923281][ T7400] netlink: 55 bytes leftover after parsing attributes in process `syz.1.530'. [ 166.965946][ T7400] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 167.053027][ T7400] batman_adv: batadv0: Removing interface: virt_wifi0 [ 167.075224][ T7406] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.533'. [ 167.384778][ T7419] netlink: 'syz.1.539': attribute type 10 has an invalid length. [ 167.516085][ T7419] veth0_vlan: left promiscuous mode [ 167.573758][ T7419] veth0_vlan: entered promiscuous mode [ 167.603281][ T7419] team0: Device veth0_vlan failed to register rx_handler [ 168.432587][ T7432] netlink: 'syz.2.541': attribute type 21 has an invalid length. [ 168.465832][ T7441] netlink: 'syz.3.544': attribute type 10 has an invalid length. [ 168.474571][ T7441] netlink: 'syz.3.544': attribute type 19 has an invalid length. [ 168.492818][ T7441] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.544'. [ 168.769741][ T7451] ================================================================== [ 168.777966][ T7451] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 168.785892][ T7451] Write of size 72 at addr ffff888060003a10 by task syz.2.547/7451 [ 168.793804][ T7451] [ 168.796133][ T7451] CPU: 0 PID: 7451 Comm: syz.2.547 Not tainted syzkaller #0 [ 168.803723][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 168.814235][ T7451] Call Trace: [ 168.817527][ T7451] [ 168.820629][ T7451] dump_stack_lvl+0x18c/0x250 [ 168.825487][ T7451] ? read_lock_is_recursive+0x20/0x20 [ 168.830894][ T7451] ? show_regs_print_info+0x20/0x20 [ 168.836320][ T7451] ? load_image+0x420/0x420 [ 168.840862][ T7451] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 168.846351][ T7451] ? __virt_addr_valid+0x10c/0x380 [ 168.851492][ T7451] ? __virt_addr_valid+0x10c/0x380 [ 168.857327][ T7451] ? __virt_addr_valid+0x10c/0x380 [ 168.863447][ T7451] print_report+0xa8/0x210 [ 168.867896][ T7451] ? __bpf_get_stackid+0x6c7/0x900 [ 168.873035][ T7451] kasan_report+0x117/0x150 [ 168.877749][ T7451] ? __bpf_get_stackid+0x6c7/0x900 [ 168.883489][ T7451] kasan_check_range+0x241/0x290 [ 168.888546][ T7451] ? __bpf_get_stackid+0x6c7/0x900 [ 168.893868][ T7451] __asan_memcpy+0x40/0x70 [ 168.898491][ T7451] __bpf_get_stackid+0x6c7/0x900 [ 168.903563][ T7451] bpf_get_stackid_pe+0x343/0x410 [ 168.908868][ T7451] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 168.914978][ T7451] bpf_overflow_handler+0x1fc/0x510 [ 168.920667][ T7451] ? perf_prepare_header+0x1e0/0x1e0 [ 168.926137][ T7451] ? bpf_overflow_handler+0xde/0x510 [ 168.931722][ T7451] ? tp_perf_event_destroy+0x20/0x20 [ 168.937214][ T7451] ? perf_trace_preemptirq_template+0xac/0x330 [ 168.943780][ T7451] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 168.951594][ T7451] ? __perf_event_account_interrupt+0x187/0x280 [ 168.958126][ T7451] __perf_event_overflow+0x461/0x660 [ 168.963481][ T7451] perf_swevent_event+0x319/0x570 [ 168.968879][ T7451] ? perf_tp_event+0x1550/0x1550 [ 168.974103][ T7451] ___perf_sw_event+0x4ab/0x730 [ 168.979067][ T7451] ? ___perf_sw_event+0x19e/0x730 [ 168.984151][ T7451] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 168.990692][ T7451] ? __lock_acquire+0x1336/0x7d80 [ 168.996009][ T7451] ? rep_movs_alternative+0x4a/0x90 [ 169.001511][ T7451] ? verify_lock_unused+0x140/0x140 [ 169.007156][ T7451] ? kasan_set_track+0x5f/0x70 [ 169.012486][ T7451] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 169.018600][ T7451] ? do_syscall_64+0x55/0xb0 [ 169.023428][ T7451] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.029760][ T7451] ? lock_chain_count+0x20/0x20 [ 169.034749][ T7451] __perf_sw_event+0x139/0x270 [ 169.039551][ T7451] do_user_addr_fault+0x1242/0x12d0 [ 169.044860][ T7451] ? rcu_is_watching+0x15/0xb0 [ 169.049727][ T7451] exc_page_fault+0x64/0x100 [ 169.054546][ T7451] asm_exc_page_fault+0x26/0x30 [ 169.059602][ T7451] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 169.065777][ T7451] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 169.087150][ T7451] RSP: 0018:ffffc90003977bd0 EFLAGS: 00050206 [ 169.093439][ T7451] RAX: ffffffff84312701 RBX: 000000000000056d RCX: 00000000000004ed [ 169.101756][ T7451] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff88801b7c4080 [ 169.110024][ T7451] RBP: ffffc90003977d20 R08: 0000000000000004 R09: 0000000000000005 [ 169.118873][ T7451] R10: dffffc0000000000 R11: ffffed10036f88ad R12: 00002000000024ed [ 169.127237][ T7451] R13: 1ffff9200072efbd R14: ffff88801b7c4000 R15: 0000200000001f80 [ 169.135896][ T7451] ? _copy_from_user+0x51/0xe0 [ 169.140891][ T7451] _copy_from_user+0x8b/0xe0 [ 169.145600][ T7451] generic_map_update_batch+0x58c/0x800 [ 169.151434][ T7451] ? rcu_read_unlock+0xa0/0xa0 [ 169.156457][ T7451] ? __fdget+0x180/0x210 [ 169.160800][ T7451] ? rcu_read_unlock+0xa0/0xa0 [ 169.165578][ T7451] bpf_map_do_batch+0x3f2/0x600 [ 169.170642][ T7451] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 169.177543][ T7451] __sys_bpf+0x381/0x890 [ 169.182013][ T7451] ? bpf_link_show_fdinfo+0x390/0x390 [ 169.187935][ T7451] ? lock_chain_count+0x20/0x20 [ 169.193595][ T7451] __x64_sys_bpf+0x7c/0x90 [ 169.198133][ T7451] do_syscall_64+0x55/0xb0 [ 169.202711][ T7451] ? clear_bhb_loop+0x40/0x90 [ 169.207947][ T7451] ? clear_bhb_loop+0x40/0x90 [ 169.213007][ T7451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.219923][ T7451] RIP: 0033:0x7f91d039de59 [ 169.224438][ T7451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.245429][ T7451] RSP: 002b:00007f91d1237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.254223][ T7451] RAX: ffffffffffffffda RBX: 00007f91d0625fa0 RCX: 00007f91d039de59 [ 169.262583][ T7451] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 169.271482][ T7451] RBP: 00007f91d0433e6f R08: 0000000000000000 R09: 0000000000000000 [ 169.279558][ T7451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.287801][ T7451] R13: 00007f91d0626038 R14: 00007f91d0625fa0 R15: 00007ffdbbb23488 [ 169.296331][ T7451] [ 169.299360][ T7451] [ 169.301689][ T7451] Allocated by task 7451: [ 169.306236][ T7451] kasan_set_track+0x4e/0x70 [ 169.310870][ T7451] __kasan_kmalloc+0x8f/0xa0 [ 169.315858][ T7451] __kmalloc_node+0xb6/0x240 [ 169.320829][ T7451] bpf_map_area_alloc+0x5e/0x110 [ 169.325864][ T7451] prealloc_elems_and_freelist+0x86/0x1c0 [ 169.331788][ T7451] stack_map_alloc+0x32b/0x4b0 [ 169.337380][ T7451] map_create+0x877/0x12f0 [ 169.342000][ T7451] __sys_bpf+0x651/0x890 [ 169.346531][ T7451] __x64_sys_bpf+0x7c/0x90 [ 169.351520][ T7451] do_syscall_64+0x55/0xb0 [ 169.357289][ T7451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.363653][ T7451] [ 169.365974][ T7451] The buggy address belongs to the object at ffff888060003a00 [ 169.365974][ T7451] which belongs to the cache kmalloc-cg-64 of size 64 [ 169.381462][ T7451] The buggy address is located 16 bytes inside of [ 169.381462][ T7451] allocated 40-byte region [ffff888060003a00, ffff888060003a28) [ 169.396498][ T7451] [ 169.399002][ T7451] The buggy address belongs to the physical page: [ 169.405616][ T7451] page:ffffea00018000c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60003 [ 169.416013][ T7451] memcg:ffff888024d3aa01 [ 169.420358][ T7451] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 169.428100][ T7451] page_type: 0xffffffff() [ 169.432561][ T7451] raw: 00fff00000000800 ffff888017c4da00 ffffea0000aee580 0000000000000006 [ 169.441156][ T7451] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888024d3aa01 [ 169.449756][ T7451] page dumped because: kasan: bad access detected [ 169.456905][ T7451] page_owner tracks the page as allocated [ 169.462633][ T7451] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 5773, tgid 5773 (syz-executor), ts 75099783768, free_ts 26798710324 [ 169.481192][ T7451] post_alloc_hook+0x1c1/0x200 [ 169.485977][ T7451] get_page_from_freelist+0x2181/0x22a0 [ 169.491961][ T7451] __alloc_pages+0x1f0/0x460 [ 169.496644][ T7451] alloc_slab_page+0x5d/0x180 [ 169.501331][ T7451] new_slab+0x87/0x2d0 [ 169.505432][ T7451] ___slab_alloc+0xc5c/0x12f0 [ 169.510208][ T7451] __kmem_cache_alloc_node+0x11f/0x250 [ 169.516256][ T7451] __kmalloc_node+0xa6/0x240 [ 169.520880][ T7451] kvmalloc_node+0x70/0x180 [ 169.525599][ T7451] nf_hook_entries_grow+0x27c/0x710 [ 169.530840][ T7451] __nf_register_net_hook+0x2c9/0x910 [ 169.536264][ T7451] nf_register_net_hook+0xb2/0x190 [ 169.541758][ T7451] nf_register_net_hooks+0x44/0x1b0 [ 169.548235][ T7451] nf_ct_netns_do_get+0x3c0/0x5c0 [ 169.553919][ T7451] nf_ct_netns_inet_get+0x1f/0x150 [ 169.559473][ T7451] nf_conncount_init+0x127/0x380 [ 169.565635][ T7451] page last free stack trace: [ 169.570317][ T7451] free_unref_page_prepare+0x7d7/0x8f0 [ 169.576533][ T7451] free_unref_page+0x32/0x2e0 [ 169.581668][ T7451] free_contig_range+0xa1/0x150 [ 169.587330][ T7451] destroy_args+0x7d/0x840 [ 169.591864][ T7451] debug_vm_pgtable+0x411/0x440 [ 169.596935][ T7451] do_one_initcall+0x242/0x790 [ 169.601728][ T7451] do_initcall_level+0x13d/0x1f0 [ 169.606861][ T7451] do_initcalls+0x69/0xd0 [ 169.611479][ T7451] kernel_init_freeable+0x3d9/0x560 [ 169.618101][ T7451] kernel_init+0x1d/0x1c0 [ 169.622716][ T7451] ret_from_fork+0x48/0x80 [ 169.627481][ T7451] ret_from_fork_asm+0x11/0x20 [ 169.632928][ T7451] [ 169.635373][ T7451] Memory state around the buggy address: [ 169.641482][ T7451] ffff888060003900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 169.649821][ T7451] ffff888060003980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 169.658412][ T7451] >ffff888060003a00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 169.667132][ T7451] ^ [ 169.672706][ T7451] ffff888060003a80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 169.680778][ T7451] ffff888060003b00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 169.689489][ T7451] ================================================================== [ 169.697932][ T7451] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 169.705313][ T7451] CPU: 0 PID: 7451 Comm: syz.2.547 Not tainted syzkaller #0 [ 169.712696][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 169.722771][ T7451] Call Trace: [ 169.726075][ T7451] [ 169.729108][ T7451] dump_stack_lvl+0x18c/0x250 [ 169.733984][ T7451] ? show_regs_print_info+0x20/0x20 [ 169.739280][ T7451] ? load_image+0x420/0x420 [ 169.743893][ T7451] panic+0x2ca/0x720 [ 169.747931][ T7451] ? __lock_acquire+0x7d80/0x7d80 [ 169.753148][ T7451] ? bpf_jit_dump+0xd0/0xd0 [ 169.757675][ T7451] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 169.763669][ T7451] ? _raw_spin_unlock+0x40/0x40 [ 169.768557][ T7451] ? __bpf_get_stackid+0x6c7/0x900 [ 169.773958][ T7451] check_panic_on_warn+0x84/0xa0 [ 169.778920][ T7451] ? __bpf_get_stackid+0x6c7/0x900 [ 169.784056][ T7451] end_report+0x6f/0x130 [ 169.788405][ T7451] kasan_report+0x128/0x150 [ 169.792921][ T7451] ? __bpf_get_stackid+0x6c7/0x900 [ 169.798317][ T7451] kasan_check_range+0x241/0x290 [ 169.803622][ T7451] ? __bpf_get_stackid+0x6c7/0x900 [ 169.808843][ T7451] __asan_memcpy+0x40/0x70 [ 169.813878][ T7451] __bpf_get_stackid+0x6c7/0x900 [ 169.818848][ T7451] bpf_get_stackid_pe+0x343/0x410 [ 169.823892][ T7451] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 169.829622][ T7451] bpf_overflow_handler+0x1fc/0x510 [ 169.835017][ T7451] ? perf_prepare_header+0x1e0/0x1e0 [ 169.840319][ T7451] ? bpf_overflow_handler+0xde/0x510 [ 169.846142][ T7451] ? tp_perf_event_destroy+0x20/0x20 [ 169.851710][ T7451] ? perf_trace_preemptirq_template+0xac/0x330 [ 169.857897][ T7451] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 169.865835][ T7451] ? __perf_event_account_interrupt+0x187/0x280 [ 169.872641][ T7451] __perf_event_overflow+0x461/0x660 [ 169.878035][ T7451] perf_swevent_event+0x319/0x570 [ 169.883280][ T7451] ? perf_tp_event+0x1550/0x1550 [ 169.888429][ T7451] ___perf_sw_event+0x4ab/0x730 [ 169.893593][ T7451] ? ___perf_sw_event+0x19e/0x730 [ 169.898648][ T7451] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 169.905357][ T7451] ? __lock_acquire+0x1336/0x7d80 [ 169.910396][ T7451] ? rep_movs_alternative+0x4a/0x90 [ 169.915620][ T7451] ? verify_lock_unused+0x140/0x140 [ 169.920834][ T7451] ? kasan_set_track+0x5f/0x70 [ 169.925610][ T7451] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 169.931602][ T7451] ? do_syscall_64+0x55/0xb0 [ 169.936216][ T7451] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.942297][ T7451] ? lock_chain_count+0x20/0x20 [ 169.947262][ T7451] __perf_sw_event+0x139/0x270 [ 169.952144][ T7451] do_user_addr_fault+0x1242/0x12d0 [ 169.957466][ T7451] ? rcu_is_watching+0x15/0xb0 [ 169.962265][ T7451] exc_page_fault+0x64/0x100 [ 169.966873][ T7451] asm_exc_page_fault+0x26/0x30 [ 169.971827][ T7451] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 169.978079][ T7451] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 169.998054][ T7451] RSP: 0018:ffffc90003977bd0 EFLAGS: 00050206 [ 170.004139][ T7451] RAX: ffffffff84312701 RBX: 000000000000056d RCX: 00000000000004ed [ 170.012120][ T7451] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff88801b7c4080 [ 170.020190][ T7451] RBP: ffffc90003977d20 R08: 0000000000000004 R09: 0000000000000005 [ 170.028354][ T7451] R10: dffffc0000000000 R11: ffffed10036f88ad R12: 00002000000024ed [ 170.036543][ T7451] R13: 1ffff9200072efbd R14: ffff88801b7c4000 R15: 0000200000001f80 [ 170.044541][ T7451] ? _copy_from_user+0x51/0xe0 [ 170.049339][ T7451] _copy_from_user+0x8b/0xe0 [ 170.054126][ T7451] generic_map_update_batch+0x58c/0x800 [ 170.059783][ T7451] ? rcu_read_unlock+0xa0/0xa0 [ 170.064640][ T7451] ? __fdget+0x180/0x210 [ 170.068987][ T7451] ? rcu_read_unlock+0xa0/0xa0 [ 170.073928][ T7451] bpf_map_do_batch+0x3f2/0x600 [ 170.078886][ T7451] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 170.085242][ T7451] __sys_bpf+0x381/0x890 [ 170.089583][ T7451] ? bpf_link_show_fdinfo+0x390/0x390 [ 170.095069][ T7451] ? lock_chain_count+0x20/0x20 [ 170.100281][ T7451] __x64_sys_bpf+0x7c/0x90 [ 170.104882][ T7451] do_syscall_64+0x55/0xb0 [ 170.109417][ T7451] ? clear_bhb_loop+0x40/0x90 [ 170.114101][ T7451] ? clear_bhb_loop+0x40/0x90 [ 170.118795][ T7451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.124715][ T7451] RIP: 0033:0x7f91d039de59 [ 170.129149][ T7451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.148775][ T7451] RSP: 002b:00007f91d1237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.157306][ T7451] RAX: ffffffffffffffda RBX: 00007f91d0625fa0 RCX: 00007f91d039de59 [ 170.165686][ T7451] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 170.173932][ T7451] RBP: 00007f91d0433e6f R08: 0000000000000000 R09: 0000000000000000 [ 170.182016][ T7451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.190123][ T7451] R13: 00007f91d0626038 R14: 00007f91d0625fa0 R15: 00007ffdbbb23488 [ 170.198332][ T7451] [ 170.201884][ T7451] Kernel Offset: disabled [ 170.206856][ T7451] Rebooting in 86400 seconds..