last executing test programs: 10m55.715074137s ago: executing program 2 (id=291): r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0xfe, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xef8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x5, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x5f, 0xc2]}}, &(0x7f0000000180)=""/181, 0x28, 0xb5, 0x0, 0x2b, 0x10000, @value=r3}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f0000000180), 0x0, 0x10, &(0x7f0000000300), 0x0, 0x0, 0xe6, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) socketpair(0x28, 0x2, 0x28, &(0x7f0000001400)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (fail_nth: 3) 10m54.823507328s ago: executing program 2 (id=294): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="06ff03076844268cb89e14f00806", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m54.469456039s ago: executing program 2 (id=297): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x1}) (async) ioctl$TUNSETVNETHDRSZ(r3, 0x8927, &(0x7f0000000140)) (async, rerun: 32) r4 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000080)=[{&(0x7f00000000c0)="6000000011007f059e", 0xc}, {&(0x7f0000000200)="78cabf2dfb73fc020a00000000000602258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e72572c9f9b06f96137c8af12b66cb08fc63b", 0x57}], 0x2}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0x4, 0x0, &(0x7f0000000100)="5c71f91b", 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x20e}) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/248, 0xf8}], 0x1, &(0x7f0000000480)=""/2, 0x2}, 0x101) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 10m54.016596995s ago: executing program 2 (id=302): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x33, &(0x7f0000000100), 0x120) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xfc00) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9fb0307683a060000000037888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@fallback=r3, 0x26, 0x0, 0x5e7b, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[0x0, 0x0]}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000002c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000100)="0e46d44a9f58694bd5800c69baf044fdb25fe872728f0bd08444efdd902b4ad0ce9bfa71fcd810182d902eb9014b88595eff32cc4d8cc553d9", 0x39}, {&(0x7f0000000200)="0543d1ac10baafa22d4f0cc74dcdf762355e6072a301c3ef84223cfd55321e8cee495e27098883b34b1ee7aaeee0a26b9977083bb0ffe608fdf6dd79f4a7c33e2f3a7c3766f1", 0x46}, {&(0x7f0000000340)="0be1548ab8b50f8641a24ceffcca4ec8516f4923d4bc0c55c5cd17700ebb258a907c62cc7c1a2e246e3243b48fbb1afce4a77f79b4ba8768f39c2c12ed116ae83408e27ea3652553610c98c6470f20fed11348f92bdb61719d38238c30743f961d1dfdad06d841caba60987fbad26bb7952a7241a0cd8a42c198fc8bb4b878a9e684516df378a34081abcc81fea76a1a5194ad4c96d43544245909facd7cc6d0efb8ca65ec36522f24857eb00ad315f34e5d6b8549a0fb1a4333201aeef2a565c6efb0bc738886a874236169e5fa09654add7680", 0xd4}, {&(0x7f0000000440)="3525214f7fb4fa1849cfadbb8390d2e69e6c5b85aece5f5a4a88eba0798200a5e2b07a01b99bb51746c7b69f4a39bca5b6094d62f15b59ee24d20be2a79fe8e26734cb31c253edf35c52a62bc88447b5d9e3373eb0ba1d36a09d123f5b510bcecc0da91463aea513c50ea39a311d2dbd3220d69591a2f13caba2a52749564d87d16b30751264f8720e0c6828b14679b069764aea781d4d482de47d65181c372808365a5fcd74471be0ac84692486", 0xae}, {&(0x7f0000000500)="849b3fd1b66841cca2b1546cbf01c58143a28702a336db0ee6bd6fc0e41b9e1980eb3f598085c5db2af8b1accfd6aa5e68d3a9d45b4d52f3fc7835fd4e7f7d577c455f32aec69ef8456d59944d78768df6ae32a73e309962ce96b3f68ca9ba9e7923d4ae67266da7549f31ff736e6211e83c2a21a83f5b335aa01931a73b02f06b09d800eb6802a30b1a909f6080c2e988b55e1da1fd873e309a59b09f011e40c7a66e3386437115984ffb5ee71136fe380b41c7346e6954", 0xb8}, {&(0x7f0000000280)}, {&(0x7f00000005c0)="a546d5495a144ab7a209a2879742f55b5df7af583c8749aec5488df62fe0ff66d3c973b72072dcb2c0c37d558cfc6d52ce76378dbaf83442d8d9a94749e1324b5b963b790fef888f44ff882cfe1ede0e63bc54b1ad2ce2205176d4852ff7d1e455268ddc68cf11c434ad212eb69a9c458c3c52a4776fcdbf1ce3f827a6b78510a165be005364a6c605e81d6fbad6cad9c13ef079d113eb276f847d97da4d0cf0b8f839c230314fa84bebf77ce24acbc2eddef8831ea12b2df75d601e04", 0xbd}, {&(0x7f0000000680)="9e869767ed34f4be33aa91c52662d1a35645248b24c7f391cec892bbd70428e728370dea1e4417ab63d21ba61a98af4d3644621625232e9f8c40c354d38c30cdafa25abdb90f268fb8f13f28c28221a3a056c0d602f6c961fd6ac042d1d0fe9a126645114a98e038d398546f9ecec9e2cd0894a57a745fd00f136aa91e1044232bb1ae753d75166ae375ece9a29bed0118694050ddbd949b5452a2235e1b4b9b418493e943501d1fccf41bfccf864559b6c05702eeccc784d241164ae0fc144dae02863c1c", 0xc5}], 0x8, 0x0, 0x0, 0x4000000}, 0x20008084) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c003", 0x31}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="8a1336ec50247c9e751ee540915d74b10d3168cf9da64169ecb06837c58d4a9b47e1e0f55346fb93de010084df624e82c21392585a69be23940b5f99d7ed5ecc05088551e13251c1849a1ba32eeb9668760332ad1f3dd0e72394ae03d800b7d1e5a762650705227a2263bcef3c71e37fbe6bbeec09a1599247edb29a64277437a4f7d939655377a893f0ddd0708cfee36859"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0xfffffd86) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10m53.415446039s ago: executing program 2 (id=308): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000780)='..SN\xd5\xa8\xe7\x13\x9d\x11\x85\xb2\xda\xda%\x00\xe9\a\xd9\x12s\x03\x00\xd0O\x87\x8fI\xa5\xbbHd\xfd\x19l\xca\x89\x8e)P\x18\x14\'\x81\n\x02\\\xca\f\xc30p{\x94\xd8wn>\btn\xc3\xfd\xca\x0f\xdb\xab\xae\x04\x0e*\xb4\x06@v\xfd\x86\x9d\xb7\x801\x80\x9a\xc0N,\x8d\x13\x11eJ\x10CQ\xb9ab\xf311\xf9\x03\xd5\xec\x9fa7S\x8b\xdan\xd9W#\x06&P)\x1ak~LB\xa4\f@\xff\xb2]\xddk\xa9\xbd}\xefp}\x90\xd0\xdb\xcc\xf9\xe8\":O\f\x98D\xf07\\F\b\xe2\x82\xfa\xe3L\xb5\x8d\xe3\x87\xa6v\x9a\xb6\xf4\x80\x85\";\xe5\xdf\xa2\xbd\xf9}\\\xbe?\x93|\xcbg\x1c~\xb6Y\xaa\xf3\xd6%\x89\xe4\x1b\xb6.f\x12\xe5\xabm \xb6\\\xb9T\fZma\xb9\xd7xzS\xd3\x8b\x02Qj\xf5\xb7X\xc6\b\x19.\xae\xdd\xa9\xd0\xf2\xdc\x1f\xf1z\v\xf9\xc3\xf0V5D&a\xf6^\x94\x19\xe0\b\xf0\xdcD{(\x1b\xf9|\xe9\xa1]\xdc\xe8\xb8\xdb\xd5<2\x96\'s\xe7\x84\x82\xea\xbb\xff\xb7\xb8%-?\x83\x9cwOe|\xb4\xef\xb6\xf4\xdf\xbf\x1e\xc6OSs\xc4_6H\xde\x9eN\x12\x9cH\x86\x824\xaf\x177\t:\xe3_w-\xbf\x1b\x14\xc7\x1d\xb4\x99\x1f\xadf\x9e\xc7X\x040\x9e^ \xc9m\x9ek\x86\t\x9f \xc8\xcf\xf5\x80(\xd9l\x91\xf7x\x7f\xaa\xd9\xd4nO\xa0\xa0M6\v.\xd8[\xc9\xa4` ') socket$kcm(0x29, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0800000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="000000000000000000ff5a00100000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r2, &(0x7f0000000280), 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x63, 0xcfb5, 0x1, 0x0, 0x6, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8940, &(0x7f0000000080)) close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000600), 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1b, 0x8001}, 0x215, 0x3ff, 0xfffffffd, 0x0, 0x5, 0xffffffff, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) 10m52.866618421s ago: executing program 2 (id=312): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) socket$kcm(0x2, 0x3, 0x84) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000e0ff00000000000000000000000010200000", @ANYRES32=r2, @ANYBLOB="da0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) r4 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000100)=r4, 0xfffffffffffffdf8) 10m37.785708423s ago: executing program 32 (id=312): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) socket$kcm(0x2, 0x3, 0x84) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000e0ff00000000000000000000000010200000", @ANYRES32=r2, @ANYBLOB="da0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) r4 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000100)=r4, 0xfffffffffffffdf8) 21.35832832s ago: executing program 1 (id=6077): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f0000000240), 0x0, 0x61, &(0x7f0000000240), 0x0, 0x10, &(0x7f0000000c40), &(0x7f00000002c0), 0x8, 0xac, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffff7ffffffffffb, 0xffffffffffffffff, 0xb) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8}, 0x2, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, r4, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000080), 0x12) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8be0, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba80000012014a36f4b3ae6b0b583cf6382371", 0x3b}], 0x1}, 0x4040000) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x2, 0x7, &(0x7f0000000580)=""/7, 0x41000, 0x16, '\x00', r2, 0x0, r8, 0x8, &(0x7f00000005c0)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x209cc, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[r9], &(0x7f0000000d40), 0x10, 0x1}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r11, @ANYRES8=r5, @ANYRESOCT, @ANYRES64=r6, @ANYRES16=r8, @ANYRESHEX=r4], 0x50) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000c00), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)=ANY=[@ANYRES32=r14, @ANYRES32=r13, @ANYBLOB="0300000010200000000000074ad413fd0457a5ec76b3dbb2cb210eeedf0fe984c0dbb99d44f10995c93fd4d8fc576d0c11f96a81a94cb7ea03a0d121d93441048a046d3d0a0735c7e9cbc885617b357d70c2e0c7c6384a793abd8888e88464a799d19e79677c13d22cbf4e1496ac4dd1807a70ce8b5f15bc6af22a57bcc2461335f97c72c640a8db1610b72ebbc3c9caf932cf591958830a7dfcb071edefbaee87a0b829e3a8f22d30b70d535436bacd67591c6c6b9111e1aa0fff62fdfb96958c3d51247f6630d68b9fe24f8b7287b2997b37c65ac9ca9270d57e993cc462521a3c72f9825a7a718335a087042b924b5090c670cb90", @ANYRESHEX=r8, @ANYRES16, @ANYRES64], 0x20) recvmsg$unix(r11, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x24, &(0x7f0000000000)=r15, 0x4) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 21.061013907s ago: executing program 1 (id=6083): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) socketpair(0xf, 0x1, 0x0, &(0x7f0000000740)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.events\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000004c0)={'virt_wifi0\x00'}) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000faffffff850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) 20.102772343s ago: executing program 1 (id=6089): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0x9}, 0x14185, 0x20032, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x4}, 0x1400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0xd, &(0x7f0000000480), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) getpid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000010006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c3000200340031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446", 0x51}, {&(0x7f0000000600)="f0faf25c2c7670bdf4bdc6", 0xb}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000080000000800000040000000b71f08c03bd5c0389a62d05f72ac6ab5c0192ffaf080f1617438fb9d8260a5e393e9cf81d27fdade07e7d528a78842771eadc39f66bf3f1df71e90433dddfa35c40c10fb55f968099a9213db7e23b8e673c042432104ad66d4997c4ca16c685ab8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 19.736057234s ago: executing program 1 (id=6093): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000000}, 0x50) r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000e0080000000000000700000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009dc7cf20b5e7c71618120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x8b, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x22cb1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x2a}, 0x10, 0x0}, 0x0) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000700)={0x10001}, 0x8) socket$kcm(0x10, 0x2, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x3, 0x73) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x0) 19.349396957s ago: executing program 1 (id=6096): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x33, &(0x7f0000000100), 0x120) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r2 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x53c}], 0x1, &(0x7f0000000580)}, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xfc00) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9fb0307683a060000000037888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0xfffffe48, 0x10000000}, 0xd24c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@fallback=r4, 0x26, 0x0, 0x5e7b, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000980)=[0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0]}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000002c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000100)="0e46d44a9f58694bd5800c69baf044fdb25fe872728f0bd08444efdd902b4ad0ce9bfa71fcd810182d902eb9014b88595eff32cc4d8cc553d9", 0x39}, {&(0x7f0000000200)="0543d1ac10baafa22d4f0cc74dcdf762355e6072a301c3ef84223cfd55321e8cee495e27098883b34b1ee7aaeee0a26b9977083bb0ffe608fdf6dd79f4a7c33e2f3a7c3766f1", 0x46}, {&(0x7f0000000340)="0be1548ab8b50f8641a24ceffcca4ec8516f4923d4bc0c55c5cd17700ebb258a907c62cc7c1a2e246e3243b48fbb1afce4a77f79b4ba8768f39c2c12ed116ae83408e27ea3652553610c98c6470f20fed11348f92bdb61719d38238c30743f961d1dfdad06d841caba60987fbad26bb7952a7241a0cd8a42c198fc8bb4b878a9e684516df378a34081abcc81fea76a1a5194ad4c96d43544245909facd7cc6d0efb8ca65ec36522f24857eb00ad315f34e5d6b8549a0fb1a4333201aeef2a565c6efb0bc738886a874236169e5fa09654add7680", 0xd4}, {&(0x7f0000000440)="3525214f7fb4fa1849cfadbb8390d2e69e6c5b85aece5f5a4a88eba0798200a5e2b07a01b99bb51746c7b69f4a39bca5b6094d62f15b59ee24d20be2a79fe8e26734cb31c253edf35c52a62bc88447b5d9e3373eb0ba1d36a09d123f5b510bcecc0da91463aea513c50ea39a311d2dbd3220d69591a2f13caba2a52749564d87d16b30751264f8720e0c6828b14679b069764aea781d4d482de47d65181c372808365a5fcd74471be0ac84692486", 0xae}, {&(0x7f0000000500)="849b3fd1b66841cca2b1546cbf01c58143a28702a336db0ee6bd6fc0e41b9e1980eb3f598085c5db2af8b1accfd6aa5e68d3a9d45b4d52f3fc7835fd4e7f7d577c455f32aec69ef8456d59944d78768df6ae32a73e309962ce96b3f68ca9ba9e7923d4ae67266da7549f31ff736e6211e83c2a21a83f5b335aa01931a73b02f06b09d800eb6802a30b1a909f6080c2e988b55e1da1fd873e309a59b09f011e40c7a66e3386437115984ffb5ee71136fe380b41c7346e6954", 0xb8}, {&(0x7f0000000280)}, {&(0x7f00000005c0)="a546d5495a144ab7a209a2879742f55b5df7af583c8749aec5488df62fe0ff66d3c973b72072dcb2c0c37d558cfc6d52ce76378dbaf83442d8d9a94749e1324b5b963b790fef888f44ff882cfe1ede0e63bc54b1ad2ce2205176d4852ff7d1e455268ddc68cf11c434ad212eb69a9c458c3c52a4776fcdbf1ce3f827a6b78510a165be005364a6c605e81d6fbad6cad9c13ef079d113eb276f847d97da4d0cf0b8f839c230314fa84bebf77ce24acbc2eddef8831ea12b2df75d601e04", 0xbd}, {&(0x7f0000000680)="9e869767ed34f4be33aa91c52662d1a35645248b24c7f391cec892bbd70428e728370dea1e4417ab63d21ba61a98af4d3644621625232e9f8c40c354d38c30cdafa25abdb90f268fb8f13f28c28221a3a056c0d602f6c961fd6ac042d1d0fe9a126645114a98e038d398546f9ecec9e2cd0894a57a745fd00f136aa91e1044232bb1ae753d75166ae375ece9a29bed0118694050ddbd949b5452a2235e1b4b9b418493e943501d1fccf41bfccf864559b6c05702eeccc784d241164ae0fc144dae02863c1c", 0xc5}], 0x8, 0x0, 0x0, 0x4000000}, 0x20008084) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c003", 0x31}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="8a1336ec50247c9e751ee540915d74b10d3168cf9da64169ecb06837c58d4a9b47e1e0f55346fb93de010084df624e82c21392585a69be23940b5f99d7ed5ecc05088551e13251c1849a1ba32eeb9668760332ad1f3dd0e72394ae03d800b7d1e5a762650705227a2263bcef3c71e37fbe6bbeec09a1599247edb29a64277437a4f7d939655377a893f0ddd0708cfee36859"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0xfffffd86) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 16.320942912s ago: executing program 1 (id=6102): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000805000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r4 = syz_clone(0x100, &(0x7f0000000100)="27b865dc4edd8ca6bd78ab62a748a8f59620143eac73b5c3e5896f7454e2f8c41fe84515e2c42b263bbc1cbab54185643ffb64389543072dfb005d7f10cef9c5317c827ac686beefc3793645ffbfb8e98fb154dd39f6fda490e6674a2c4c3bee09fa", 0x62, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0)="a2a6d63963a7edfa0039a7c7f1fbb41f2b7befa4c5688f42d023bcc67692e0cb1823fb860b56e6dee1955fbb38329a96da2c9f7f0a254e3bac7c7a28feaaa6ea41541bcde95abb6bf4107e1241e5a354612506a361730c476eb09c924c4be0384b29cf64e60d49fac58ca9b6f44d19270991b2a49f1b2e4b8fa3292f4d75ea0265a26080bbbe683e2d757f49d83a68e2bffc62db91272d037f8595f836ca48ed2c") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7a0a00ff000000005010850000000000950000000000000024c9742f4ca8c0356f8c34f98ddd88138da573ca11bca5f8f5479e058bb06d027dfe47c2cbde06c193051623d801b462f027ae1473868a64ab21b44ab57a2cfdbeb896361b3d1affdcdb956c5199b510fde1de91bb256c0ea66a207672a0c770f86b224419806aa4dd415a6bd16899fb1f642d92c8d3e43d77ff28756722ddddc9ddf5cd119e94f6fd6fc74f97148a7ae97814e066cab080"], 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_pid(r3, &(0x7f00000000c0)=r4, 0x12) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) write$cgroup_subtree(r6, &(0x7f0000000380)={[{0x2d, 'net_cls'}, {0x2b, 'blkio'}, {0x2d, 'net_prio'}, {0x2d, 'net'}, {0x2d, 'net_cls'}, {0x2d, 'hugetlb'}]}, 0x31) socketpair(0x1f, 0x2, 0x10001, &(0x7f0000000240)) r7 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000002980), 0x12) 4.209042706s ago: executing program 4 (id=6154): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x18522, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0xd, &(0x7f0000000000), 0x143}, 0x48) 4.034752806s ago: executing program 0 (id=6156): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e28, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x8840) sendmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)="a780f845c1", 0x5}], 0x1}, 0x8044) sendmsg$inet(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x20000840) 3.851523196s ago: executing program 3 (id=6158): socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.718648294s ago: executing program 0 (id=6159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b702000002000000"], 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') 3.646240479s ago: executing program 5 (id=6160): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a0c0000000000d500ffff01000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000000700000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0x2f}, 0x94) 3.407022922s ago: executing program 5 (id=6161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, 0x0, 0x200000000000000}, 0x20) 3.28545915s ago: executing program 4 (id=6162): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa10000001d000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2006300, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.285182339s ago: executing program 5 (id=6163): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x8, 0x4, 0x4, 0x200ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 1.828904684s ago: executing program 0 (id=6164): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x1c161, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.744785269s ago: executing program 4 (id=6165): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 686.64896ms ago: executing program 5 (id=6166): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x5, 0x7, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10000010000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x50be34c2, 0x0, 0x0, 0x0, 0x0, 0x1004000}) 686.19542ms ago: executing program 0 (id=6167): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003700)=""/4064, 0xfe0}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000500)=""/176, 0xb0}], 0x4}, 0x10100) 686.00269ms ago: executing program 3 (id=6168): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000090000000400000003000093010000000700000001000000ffffff7f01000000020001000500000000000000000001000300000000615f5f2e5f005f"], 0x0, 0x51, 0x0, 0x9}, 0x28) 605.850985ms ago: executing program 3 (id=6169): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 605.643345ms ago: executing program 4 (id=6170): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x6}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 524.18825ms ago: executing program 0 (id=6171): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x4, 0x4, 0x1}, 0x48) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_subtree(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004000000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a2, &(0x7f0000000080)) 450.749384ms ago: executing program 4 (id=6172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000080)) 343.148831ms ago: executing program 3 (id=6173): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 274.866855ms ago: executing program 5 (id=6174): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000240)=""/153}, 0x94) 134.893653ms ago: executing program 5 (id=6175): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c00000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7679b6df}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x37) 134.757873ms ago: executing program 3 (id=6176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r0, 0xc00}, 0x38) 132.679433ms ago: executing program 4 (id=6177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 112.243014ms ago: executing program 0 (id=6178): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r0}, 0xc) 0s ago: executing program 3 (id=6179): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) kernel console output (not intermixed with test programs): 0049] ? __lock_acquire+0x13bc/0x7d10 [ 638.164126][T20049] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 638.169906][T20049] ? verify_lock_unused+0x140/0x140 [ 638.175170][T20049] ? perf_trace_lock_acquire+0x340/0x3e0 [ 638.180878][T20049] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 638.187825][T20049] ? __mutex_trylock_common+0x155/0x260 [ 638.193436][T20049] ? rcu_lock_release+0x20/0x20 [ 638.198341][T20049] ? perf_trace_lock+0xe4/0x390 [ 638.203275][T20049] ? rtnetlink_rcv_msg+0x7ee/0xf30 [ 638.208432][T20049] ? __mutex_lock_common+0x465/0x2400 [ 638.213874][T20049] ? mutex_lock_io_nested+0x60/0x60 [ 638.219126][T20049] ? rtnl_setlink+0x500/0x500 [ 638.223854][T20049] rtnetlink_rcv_msg+0x844/0xf30 [ 638.228840][T20049] ? rtnetlink_bind+0x80/0x80 [ 638.233547][T20049] ? __local_bh_enable_ip+0x136/0x1c0 [ 638.238972][T20049] ? lockdep_hardirqs_on+0x94/0x140 [ 638.244233][T20049] ? __local_bh_enable_ip+0x136/0x1c0 [ 638.249740][T20049] ? _local_bh_enable+0xa0/0xa0 [ 638.254648][T20049] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 638.259915][T20049] ? perf_trace_lock+0xe4/0x390 [ 638.264808][T20049] ? trace_event_raw_event_lock+0x270/0x270 [ 638.270748][T20049] ? __skb_clone+0x480/0x790 [ 638.275379][T20049] netlink_rcv_skb+0x1f5/0x440 [ 638.280177][T20049] ? rtnetlink_bind+0x80/0x80 [ 638.284977][T20049] ? netlink_ack+0xb50/0xb50 [ 638.289618][T20049] netlink_unicast+0x774/0x920 [ 638.294431][T20049] netlink_sendmsg+0x8ba/0xbe0 [ 638.299237][T20049] ? netlink_getsockopt+0x570/0x570 [ 638.304656][T20049] ? aa_sock_msg_perm+0x94/0x150 [ 638.309750][T20049] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 638.315111][T20049] ? security_socket_sendmsg+0x7c/0xa0 [ 638.320795][T20049] ? netlink_getsockopt+0x570/0x570 [ 638.326020][T20049] ____sys_sendmsg+0x5b7/0x8f0 [ 638.330840][T20049] ? __sys_sendmsg_sock+0x30/0x30 [ 638.335904][T20049] ? import_iovec+0x6f/0xa0 [ 638.340444][T20049] ___sys_sendmsg+0x236/0x2e0 [ 638.345256][T20049] ? __sys_sendmsg+0x2a0/0x2a0 [ 638.350118][T20049] __se_sys_sendmsg+0x1af/0x290 [ 638.355001][T20049] ? __x64_sys_sendmsg+0x80/0x80 [ 638.359991][T20049] ? syscall_enter_from_user_mode+0x2a/0x70 [ 638.365930][T20049] do_syscall_64+0x4c/0xa0 [ 638.370371][T20049] ? clear_bhb_loop+0x30/0x80 [ 638.375072][T20049] ? clear_bhb_loop+0x30/0x80 [ 638.379785][T20049] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 638.385702][T20049] RIP: 0033:0x7faae7480f79 [ 638.390153][T20049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.409794][T20049] RSP: 002b:00007faae56db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.418237][T20049] RAX: ffffffffffffffda RBX: 00007faae76fafa0 RCX: 00007faae7480f79 [ 638.426463][T20049] RDX: 0000000020000800 RSI: 0000200000000600 RDI: 0000000000000008 [ 638.434876][T20049] RBP: 00007faae56db090 R08: 0000000000000000 R09: 0000000000000000 [ 638.442883][T20049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.450882][T20049] R13: 00007faae76fb038 R14: 00007faae76fafa0 R15: 00007ffe96af7e18 [ 638.458917][T20049] [ 638.474198][T20055] netlink: 'syz.0.5505': attribute type 17 has an invalid length. [ 638.490726][T20055] __nla_validate_parse: 1 callbacks suppressed [ 638.490742][T20055] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5505'. [ 638.644854][T20060] netlink: 'syz.0.5508': attribute type 1 has an invalid length. [ 638.653621][T20060] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.5508'. [ 638.677953][T20061] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5509'. [ 638.933003][T20071] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5512'. [ 639.926349][T20082] netlink: 'syz.5.5516': attribute type 10 has an invalid length. [ 640.428499][T20089] sctp: [Deprecated]: syz.3.5528 (pid 20089) Use of int in maxseg socket option. [ 640.428499][T20089] Use struct sctp_assoc_value instead [ 640.731683][T20093] netlink: 'syz.3.5528': attribute type 49 has an invalid length. [ 641.052136][T20098] netlink: 'syz.1.5519': attribute type 22 has an invalid length. [ 641.100610][T20107] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5524'. [ 641.114828][T20098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5519'. [ 641.160572][T20104] netlink: 'syz.0.5523': attribute type 10 has an invalid length. [ 641.193341][T20104] team0: Device ip6_vti0 is of different type [ 641.241232][T20110] netlink: 'syz.0.5523': attribute type 17 has an invalid length. [ 641.285565][T20110] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5523'. [ 641.308264][T20109] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5525'. [ 641.547766][T20119] netlink: 'syz.4.5527': attribute type 21 has an invalid length. [ 641.556865][T20119] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5527'. [ 641.682618][T20122] netlink: 'syz.0.5530': attribute type 10 has an invalid length. [ 642.091729][T20138] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5538'. [ 642.145645][T20142] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.189132][T20140] sctp: [Deprecated]: syz.5.5537 (pid 20140) Use of int in maxseg socket option. [ 642.189132][T20140] Use struct sctp_assoc_value instead [ 642.256324][T20140] netlink: 'syz.5.5537': attribute type 49 has an invalid length. [ 643.317633][T20168] FAULT_INJECTION: forcing a failure. [ 643.317633][T20168] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 643.353855][T20168] CPU: 1 PID: 20168 Comm: syz.4.5545 Not tainted syzkaller #0 [ 643.361395][T20168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 643.371492][T20168] Call Trace: [ 643.374820][T20168] [ 643.377785][T20168] dump_stack_lvl+0x188/0x250 [ 643.382520][T20168] ? __might_sleep+0xf0/0xf0 [ 643.387153][T20168] ? show_regs_print_info+0x20/0x20 [ 643.392390][T20168] ? load_image+0x400/0x400 [ 643.397122][T20168] should_fail+0x38c/0x4c0 [ 643.401679][T20168] prepare_alloc_pages+0x1e4/0x5f0 [ 643.407010][T20168] __alloc_pages+0x11b/0x480 [ 643.411752][T20168] ? zone_statistics+0x170/0x170 [ 643.416719][T20168] ? __phys_addr_symbol+0x2b/0x70 [ 643.421771][T20168] ? __check_object_size+0x30c/0x410 [ 643.427194][T20168] ? alloc_pages+0x438/0x550 [ 643.431928][T20168] skb_page_frag_refill+0x225/0x4c0 [ 643.437162][T20168] sk_page_frag_refill+0x4a/0x200 [ 643.442229][T20168] __ip6_append_data+0x15d7/0x38c0 [ 643.447390][T20168] ? ip6_setup_cork+0x11e0/0x11e0 [ 643.452437][T20168] ? ip6_setup_cork+0xc63/0x11e0 [ 643.457571][T20168] ip6_make_skb+0x402/0x530 [ 643.462135][T20168] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 643.467028][T20168] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 643.471915][T20168] ? __ip6_flush_pending_frames+0x3a0/0x3a0 [ 643.477862][T20168] udpv6_sendmsg+0x1dd7/0x2650 [ 643.482661][T20168] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 643.487538][T20168] ? udp_v6_early_demux+0xec0/0xec0 [ 643.492787][T20168] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 643.498795][T20168] ? __local_bh_enable_ip+0x136/0x1c0 [ 643.504196][T20168] ? lockdep_hardirqs_on+0x94/0x140 [ 643.509436][T20168] ? inet_send_prepare+0x1af/0x260 [ 643.514582][T20168] ? inet6_sendmsg+0x5b/0xd0 [ 643.519206][T20168] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 643.524434][T20168] ____sys_sendmsg+0x5b7/0x8f0 [ 643.529233][T20168] ? __sys_sendmsg_sock+0x30/0x30 [ 643.534645][T20168] ? import_iovec+0x6f/0xa0 [ 643.539182][T20168] ___sys_sendmsg+0x236/0x2e0 [ 643.543890][T20168] ? __sys_sendmsg+0x2a0/0x2a0 [ 643.548690][T20168] ? vfs_write+0x8b2/0xd60 [ 643.553160][T20168] __se_sys_sendmsg+0x1af/0x290 [ 643.558037][T20168] ? __x64_sys_sendmsg+0x80/0x80 [ 643.563016][T20168] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 643.569063][T20168] ? lockdep_hardirqs_on+0x94/0x140 [ 643.574301][T20168] do_syscall_64+0x4c/0xa0 [ 643.580393][T20168] ? clear_bhb_loop+0x30/0x80 [ 643.585114][T20168] ? clear_bhb_loop+0x30/0x80 [ 643.589824][T20168] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 643.595753][T20168] RIP: 0033:0x7fd0cebbdf79 [ 643.600204][T20168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.619842][T20168] RSP: 002b:00007fd0cce18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.628287][T20168] RAX: ffffffffffffffda RBX: 00007fd0cee37fa0 RCX: 00007fd0cebbdf79 [ 643.636284][T20168] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 643.644279][T20168] RBP: 00007fd0cce18090 R08: 0000000000000000 R09: 0000000000000000 [ 643.652275][T20168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.660281][T20168] R13: 00007fd0cee38038 R14: 00007fd0cee37fa0 R15: 00007fff22d73c38 [ 643.668295][T20168] [ 643.825866][T20178] __nla_validate_parse: 3 callbacks suppressed [ 643.825884][T20178] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5549'. [ 644.925053][T20198] sctp: [Deprecated]: syz.0.5554 (pid 20198) Use of int in maxseg socket option. [ 644.925053][T20198] Use struct sctp_assoc_value instead [ 644.967268][T20198] validate_nla: 3 callbacks suppressed [ 644.967330][T20198] netlink: 'syz.0.5554': attribute type 49 has an invalid length. [ 646.997975][T20204] netlink: 'syz.3.5557': attribute type 10 has an invalid length. [ 647.041611][T20207] netlink: 'syz.4.5558': attribute type 3 has an invalid length. [ 647.101834][T20207] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5558'. [ 647.157533][T20211] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5558'. [ 647.212039][T20212] sctp: [Deprecated]: syz.5.5561 (pid 20212) Use of int in maxseg socket option. [ 647.212039][T20212] Use struct sctp_assoc_value instead [ 647.268415][T20216] netlink: 'syz.5.5561': attribute type 49 has an invalid length. [ 647.436513][T20219] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5563'. [ 647.569684][T20229] sctp: [Deprecated]: syz.1.5567 (pid 20229) Use of int in maxseg socket option. [ 647.569684][T20229] Use struct sctp_assoc_value instead [ 647.609652][T20229] netlink: 'syz.1.5567': attribute type 49 has an invalid length. [ 650.075831][T20241] sctp: [Deprecated]: syz.3.5572 (pid 20241) Use of int in maxseg socket option. [ 650.075831][T20241] Use struct sctp_assoc_value instead [ 650.155166][T20241] netlink: 'syz.3.5572': attribute type 49 has an invalid length. [ 650.170263][T20247] netlink: 'syz.0.5574': attribute type 3 has an invalid length. [ 650.192537][T20247] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5574'. [ 650.264356][T20247] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5574'. [ 650.318668][T20256] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5577'. [ 650.453867][T20262] sctp: [Deprecated]: syz.3.5580 (pid 20262) Use of int in maxseg socket option. [ 650.453867][T20262] Use struct sctp_assoc_value instead [ 650.490553][T20262] netlink: 'syz.3.5580': attribute type 49 has an invalid length. [ 650.623900][T20266] device sit0 entered promiscuous mode [ 651.873876][T20284] sctp: [Deprecated]: syz.0.5588 (pid 20284) Use of int in maxseg socket option. [ 651.873876][T20284] Use struct sctp_assoc_value instead [ 653.424590][T20295] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5591'. [ 653.586247][T20298] netlink: 'syz.5.5589': attribute type 10 has an invalid length. [ 653.755532][T20302] netlink: 'syz.1.5593': attribute type 3 has an invalid length. [ 653.769888][T20302] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5593'. [ 653.803467][T20307] sctp: [Deprecated]: syz.5.5596 (pid 20307) Use of int in maxseg socket option. [ 653.803467][T20307] Use struct sctp_assoc_value instead [ 653.894568][T20302] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5593'. [ 654.056032][T20307] netlink: 'syz.5.5596': attribute type 49 has an invalid length. [ 655.195961][T20333] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.5606'. [ 656.358638][T20339] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5618'. [ 656.449041][T20337] netlink: 'syz.1.5607': attribute type 10 has an invalid length. [ 656.768008][T20351] sctp: [Deprecated]: syz.1.5612 (pid 20351) Use of int in maxseg socket option. [ 656.768008][T20351] Use struct sctp_assoc_value instead [ 657.115132][T20351] netlink: 'syz.1.5612': attribute type 49 has an invalid length. [ 657.143795][T20356] device sit0 entered promiscuous mode [ 657.280138][T20362] netlink: 207976 bytes leftover after parsing attributes in process `syz.4.5614'. [ 657.837177][T20369] netlink: 'syz.4.5620': attribute type 3 has an invalid length. [ 657.848188][T20369] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5620'. [ 659.826286][T20384] netlink: 'syz.0.5623': attribute type 10 has an invalid length. [ 660.196724][T20397] FAULT_INJECTION: forcing a failure. [ 660.196724][T20397] name failslab, interval 1, probability 0, space 0, times 0 [ 660.224872][T20397] CPU: 1 PID: 20397 Comm: syz.4.5628 Not tainted syzkaller #0 [ 660.232490][T20397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 660.242669][T20397] Call Trace: [ 660.245985][T20397] [ 660.248951][T20397] dump_stack_lvl+0x188/0x250 [ 660.253762][T20397] ? show_regs_print_info+0x20/0x20 [ 660.259007][T20397] ? load_image+0x400/0x400 [ 660.263553][T20397] ? __might_sleep+0xf0/0xf0 [ 660.268181][T20397] ? __lock_acquire+0x7d10/0x7d10 [ 660.273336][T20397] should_fail+0x38c/0x4c0 [ 660.277796][T20397] should_failslab+0x5/0x20 [ 660.282462][T20397] slab_pre_alloc_hook+0x51/0xc0 [ 660.287464][T20397] kmem_cache_alloc_trace+0x47/0x2a0 [ 660.292783][T20397] ? sctp_copy_one_addr+0x324/0x660 [ 660.298025][T20397] sctp_copy_one_addr+0x324/0x660 [ 660.303094][T20397] sctp_bind_addr_copy+0xaf/0x3c0 [ 660.308174][T20397] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 660.314556][T20397] sctp_connect_new_asoc+0x2f5/0x6a0 [ 660.319889][T20397] ? __sctp_connect+0xd80/0xd80 [ 660.324788][T20397] ? security_sctp_bind_connect+0x38/0xb0 [ 660.330580][T20397] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 660.336178][T20397] ? security_sctp_bind_connect+0x85/0xb0 [ 660.341958][T20397] sctp_sendmsg+0x158d/0x2900 [ 660.346683][T20397] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 660.352890][T20397] ? aa_sk_perm+0x7dc/0x910 [ 660.357433][T20397] ? sctp_getsockopt+0x8a0/0x8a0 [ 660.362430][T20397] ? aa_af_perm+0x340/0x340 [ 660.366980][T20397] ? sock_rps_record_flow+0x17/0x3b0 [ 660.372307][T20397] ? inet_sendmsg+0x78/0x2f0 [ 660.376928][T20397] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 660.382256][T20397] ? security_socket_sendmsg+0x7c/0xa0 [ 660.387761][T20397] ? inet_send_prepare+0x260/0x260 [ 660.392921][T20397] ____sys_sendmsg+0x5b7/0x8f0 [ 660.397736][T20397] ? __sys_sendmsg_sock+0x30/0x30 [ 660.402809][T20397] ? ___sys_sendmsg+0x21b/0x2e0 [ 660.407721][T20397] ___sys_sendmsg+0x236/0x2e0 [ 660.412546][T20397] ? __sys_sendmsg+0x2a0/0x2a0 [ 660.417526][T20397] __se_sys_sendmsg+0x1af/0x290 [ 660.422462][T20397] ? __x64_sys_sendmsg+0x80/0x80 [ 660.427638][T20397] ? syscall_enter_from_user_mode+0x2a/0x70 [ 660.433579][T20397] do_syscall_64+0x4c/0xa0 [ 660.438042][T20397] ? clear_bhb_loop+0x30/0x80 [ 660.442754][T20397] ? clear_bhb_loop+0x30/0x80 [ 660.447479][T20397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 660.453417][T20397] RIP: 0033:0x7fd0cebbdf79 [ 660.457901][T20397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.477544][T20397] RSP: 002b:00007fd0cce18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.486018][T20397] RAX: ffffffffffffffda RBX: 00007fd0cee37fa0 RCX: 00007fd0cebbdf79 [ 660.494040][T20397] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000007 [ 660.502052][T20397] RBP: 00007fd0cce18090 R08: 0000000000000000 R09: 0000000000000000 [ 660.510063][T20397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.518084][T20397] R13: 00007fd0cee38038 R14: 00007fd0cee37fa0 R15: 00007fff22d73c38 [ 660.526118][T20397] [ 660.640797][T20406] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5631'. [ 660.905780][T20406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.935687][T20406] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 660.991817][T20406] bond0 (unregistering): (slave team0): Releasing backup interface [ 661.326925][T20406] bond0 (unregistering): Released all slaves [ 663.344613][T20415] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5635'. [ 663.357121][T20417] netlink: 'syz.0.5636': attribute type 10 has an invalid length. [ 663.653617][T20434] sctp: [Deprecated]: syz.4.5642 (pid 20434) Use of int in maxseg socket option. [ 663.653617][T20434] Use struct sctp_assoc_value instead [ 663.718194][T20435] netlink: 'syz.5.5643': attribute type 3 has an invalid length. [ 663.734962][T20434] netlink: 'syz.4.5642': attribute type 49 has an invalid length. [ 663.751737][T20435] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5643'. [ 664.136542][T20452] FAULT_INJECTION: forcing a failure. [ 664.136542][T20452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.140759][T20449] netlink: 'syz.4.5649': attribute type 10 has an invalid length. [ 664.150389][T20452] CPU: 1 PID: 20452 Comm: syz.0.5650 Not tainted syzkaller #0 [ 664.165349][T20452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 664.175548][T20452] Call Trace: [ 664.178871][T20452] [ 664.181836][T20452] dump_stack_lvl+0x188/0x250 [ 664.186608][T20452] ? show_regs_print_info+0x20/0x20 [ 664.191859][T20452] ? load_image+0x400/0x400 [ 664.196405][T20452] ? __lock_acquire+0x7d10/0x7d10 [ 664.201631][T20452] should_fail+0x38c/0x4c0 [ 664.206193][T20452] _copy_to_user+0x2e/0x130 [ 664.210759][T20452] simple_read_from_buffer+0xe3/0x150 [ 664.216162][T20452] proc_fail_nth_read+0x1a6/0x220 [ 664.221534][T20452] ? proc_fault_inject_write+0x310/0x310 [ 664.227220][T20452] ? fsnotify_perm+0x254/0x560 [ 664.232054][T20452] ? proc_fault_inject_write+0x310/0x310 [ 664.238026][T20452] vfs_read+0x301/0xd60 [ 664.242226][T20452] ? kernel_read+0x1e0/0x1e0 [ 664.246851][T20452] ? __fget_files+0x40f/0x480 [ 664.251570][T20452] ? mutex_lock_nested+0x17/0x20 [ 664.256544][T20452] ? __fdget_pos+0x2bf/0x370 [ 664.261165][T20452] ? ksys_read+0x71/0x260 [ 664.265515][T20452] ksys_read+0x152/0x260 [ 664.269784][T20452] ? vfs_write+0xd60/0xd60 [ 664.274249][T20452] ? lockdep_hardirqs_on+0x94/0x140 [ 664.279471][T20452] do_syscall_64+0x4c/0xa0 [ 664.283937][T20452] ? clear_bhb_loop+0x30/0x80 [ 664.288669][T20452] ? clear_bhb_loop+0x30/0x80 [ 664.293390][T20452] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 664.299306][T20452] RIP: 0033:0x7faae744184e [ 664.303884][T20452] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 664.323579][T20452] RSP: 002b:00007faae56dafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 664.332031][T20452] RAX: ffffffffffffffda RBX: 00007faae56db6c0 RCX: 00007faae744184e [ 664.340048][T20452] RDX: 000000000000000f RSI: 00007faae56db0a0 RDI: 0000000000000005 [ 664.348036][T20452] RBP: 00007faae56db090 R08: 0000000000000000 R09: 0000000000000000 [ 664.356051][T20452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.364064][T20452] R13: 00007faae76fb038 R14: 00007faae76fafa0 R15: 00007ffe96af7e18 [ 664.372101][T20452] [ 665.113469][T20465] sctp: [Deprecated]: syz.3.5656 (pid 20465) Use of int in maxseg socket option. [ 665.113469][T20465] Use struct sctp_assoc_value instead [ 665.159518][T20466] netlink: 'syz.3.5656': attribute type 49 has an invalid length. [ 667.212635][T20473] netlink: 'syz.1.5657': attribute type 3 has an invalid length. [ 667.230855][T20473] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5657'. [ 667.503975][T20483] netlink: 'syz.1.5662': attribute type 10 has an invalid length. [ 667.755193][T20487] netlink: 'syz.5.5663': attribute type 3 has an invalid length. [ 667.782343][T20490] FAULT_INJECTION: forcing a failure. [ 667.782343][T20490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.805536][T20491] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5666'. [ 667.818078][T20487] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5663'. [ 667.844127][T20490] CPU: 0 PID: 20490 Comm: syz.4.5665 Not tainted syzkaller #0 [ 667.851753][T20490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 667.861862][T20490] Call Trace: [ 667.865193][T20490] [ 667.868171][T20490] dump_stack_lvl+0x188/0x250 [ 667.872926][T20490] ? show_regs_print_info+0x20/0x20 [ 667.878186][T20490] ? load_image+0x400/0x400 [ 667.882782][T20490] ? __lock_acquire+0x7d10/0x7d10 [ 667.887884][T20490] should_fail+0x38c/0x4c0 [ 667.892379][T20490] _copy_to_user+0x2e/0x130 [ 667.896947][T20490] simple_read_from_buffer+0xe3/0x150 [ 667.902492][T20490] proc_fail_nth_read+0x1a6/0x220 [ 667.907591][T20490] ? proc_fault_inject_write+0x310/0x310 [ 667.913302][T20490] ? fsnotify_perm+0x254/0x560 [ 667.918133][T20490] ? proc_fault_inject_write+0x310/0x310 [ 667.923835][T20490] vfs_read+0x301/0xd60 [ 667.928186][T20490] ? kernel_read+0x1e0/0x1e0 [ 667.932854][T20490] ? __fget_files+0x40f/0x480 [ 667.937617][T20490] ? mutex_lock_nested+0x17/0x20 [ 667.942611][T20490] ? __fdget_pos+0x2bf/0x370 [ 667.947251][T20490] ? ksys_read+0x71/0x260 [ 667.951641][T20490] ksys_read+0x152/0x260 [ 667.956077][T20490] ? vfs_write+0xd60/0xd60 [ 667.960571][T20490] ? lockdep_hardirqs_on+0x94/0x140 [ 667.965840][T20490] do_syscall_64+0x4c/0xa0 [ 667.970306][T20490] ? clear_bhb_loop+0x30/0x80 [ 667.975046][T20490] ? clear_bhb_loop+0x30/0x80 [ 667.979786][T20490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 667.985730][T20490] RIP: 0033:0x7fd0ceb7e84e [ 667.990325][T20490] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 668.010076][T20490] RSP: 002b:00007fd0cce17fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 668.018562][T20490] RAX: ffffffffffffffda RBX: 00007fd0cce186c0 RCX: 00007fd0ceb7e84e [ 668.026585][T20490] RDX: 000000000000000f RSI: 00007fd0cce180a0 RDI: 0000000000000004 [ 668.034603][T20490] RBP: 00007fd0cce18090 R08: 0000000000000000 R09: 0000000000000000 [ 668.042617][T20490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.050632][T20490] R13: 00007fd0cee38038 R14: 00007fd0cee37fa0 R15: 00007fff22d73c38 [ 668.058705][T20490] [ 668.733663][T20505] sctp: [Deprecated]: syz.0.5671 (pid 20505) Use of int in maxseg socket option. [ 668.733663][T20505] Use struct sctp_assoc_value instead [ 668.886584][T20505] netlink: 'syz.0.5671': attribute type 49 has an invalid length. [ 668.966886][T20508] netlink: 'syz.1.5672': attribute type 3 has an invalid length. [ 668.977359][T20508] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5672'. [ 669.051082][T20513] netlink: 'syz.3.5674': attribute type 12 has an invalid length. [ 669.061792][T20513] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.5674'. [ 669.241706][T20519] netlink: 'syz.3.5676': attribute type 10 has an invalid length. [ 669.325127][T20523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5679'. [ 669.427265][T20529] sctp: [Deprecated]: syz.0.5681 (pid 20529) Use of int in maxseg socket option. [ 669.427265][T20529] Use struct sctp_assoc_value instead [ 669.548643][T20529] netlink: 'syz.0.5681': attribute type 49 has an invalid length. [ 669.573681][T20538] FAULT_INJECTION: forcing a failure. [ 669.573681][T20538] name failslab, interval 1, probability 0, space 0, times 0 [ 669.619755][T20538] CPU: 1 PID: 20538 Comm: syz.3.5685 Not tainted syzkaller #0 [ 669.627286][T20538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 669.637382][T20538] Call Trace: [ 669.640698][T20538] [ 669.643665][T20538] dump_stack_lvl+0x188/0x250 [ 669.648184][T20539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 669.655673][T20538] ? show_regs_print_info+0x20/0x20 [ 669.655713][T20538] ? load_image+0x400/0x400 [ 669.655740][T20538] ? __might_sleep+0xf0/0xf0 [ 669.655762][T20538] ? __lock_acquire+0x7d10/0x7d10 [ 669.655800][T20538] should_fail+0x38c/0x4c0 [ 669.655830][T20538] should_failslab+0x5/0x20 [ 669.655852][T20538] slab_pre_alloc_hook+0x51/0xc0 [ 669.655878][T20538] kmem_cache_alloc_node_trace+0x4a/0x300 [ 669.661326][T20539] IPv6: NLM_F_CREATE should be set when creating new route [ 669.665624][T20538] ? __get_vm_area_node+0x119/0x2d0 [ 669.665657][T20538] __get_vm_area_node+0x119/0x2d0 [ 669.665684][T20538] __vmalloc_node_range+0xef/0x8b0 [ 669.665707][T20538] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 669.665734][T20538] ? end_current_label_crit_section+0x170/0x170 [ 669.665761][T20538] ? __lock_acquire+0x7d10/0x7d10 [ 669.665785][T20538] ? __lock_acquire+0x13bc/0x7d10 [ 669.665815][T20538] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 669.671847][T20539] IPv6: NLM_F_CREATE should be set when creating new route [ 669.675450][T20538] __vmalloc+0x76/0x80 [ 669.675476][T20538] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 669.675503][T20538] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 669.675531][T20538] bpf_prog_alloc+0x1a/0x1e0 [ 669.675559][T20538] bpf_prog_load+0x7c6/0x1510 [ 669.675594][T20538] ? map_freeze+0x350/0x350 [ 669.681136][T20539] IPv6: NLM_F_CREATE should be set when creating new route [ 669.684557][T20538] ? __might_fault+0xb7/0x110 [ 669.684596][T20538] ? __might_fault+0xb3/0x110 [ 669.684620][T20538] ? bpf_lsm_bpf+0x5/0x10 [ 669.684644][T20538] ? security_bpf+0x7a/0xa0 [ 669.684672][T20538] __sys_bpf+0x532/0x6f0 [ 669.684699][T20538] ? bpf_link_show_fdinfo+0x380/0x380 [ 669.684734][T20538] ? vtime_user_exit+0x2c8/0x3e0 [ 669.684765][T20538] __x64_sys_bpf+0x78/0x90 [ 669.684790][T20538] do_syscall_64+0x4c/0xa0 [ 669.684812][T20538] ? clear_bhb_loop+0x30/0x80 [ 669.782626][T20540] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5686'. [ 669.788842][T20538] ? clear_bhb_loop+0x30/0x80 [ 669.788876][T20538] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 669.788900][T20538] RIP: 0033:0x7f75e6712f79 [ 669.788928][T20538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.879625][T20538] RSP: 002b:00007f75e496d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 669.888274][T20538] RAX: ffffffffffffffda RBX: 00007f75e698cfa0 RCX: 00007f75e6712f79 [ 669.896286][T20538] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 669.904279][T20538] RBP: 00007f75e496d090 R08: 0000000000000000 R09: 0000000000000000 [ 669.912275][T20538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.920357][T20538] R13: 00007f75e698d038 R14: 00007f75e698cfa0 R15: 00007ffcbaf9b4b8 [ 669.928452][T20538] [ 669.978791][T20538] syz.3.5685: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 669.996372][T20538] CPU: 1 PID: 20538 Comm: syz.3.5685 Not tainted syzkaller #0 [ 670.003880][T20538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 670.007968][T20543] netlink: 'syz.5.5687': attribute type 12 has an invalid length. [ 670.013958][T20538] Call Trace: [ 670.013969][T20538] [ 670.013978][T20538] dump_stack_lvl+0x188/0x250 [ 670.014009][T20538] ? rcu_lock_release+0x5/0x20 [ 670.014032][T20538] ? show_regs_print_info+0x20/0x20 [ 670.014057][T20538] ? load_image+0x400/0x400 [ 670.014102][T20538] warn_alloc+0x243/0x320 [ 670.014132][T20538] ? zone_watermark_ok_safe+0x240/0x240 [ 670.014165][T20538] ? __get_vm_area_node+0x2b5/0x2d0 [ 670.014194][T20538] __vmalloc_node_range+0x2b1/0x8b0 [ 670.014216][T20538] ? end_current_label_crit_section+0x170/0x170 [ 670.014241][T20538] ? __lock_acquire+0x7d10/0x7d10 [ 670.014265][T20538] ? __lock_acquire+0x13bc/0x7d10 [ 670.014294][T20538] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 670.014319][T20538] __vmalloc+0x76/0x80 [ 670.014340][T20538] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 670.014365][T20538] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 670.014393][T20538] bpf_prog_alloc+0x1a/0x1e0 [ 670.014419][T20538] bpf_prog_load+0x7c6/0x1510 [ 670.014453][T20538] ? map_freeze+0x350/0x350 [ 670.014477][T20538] ? __might_fault+0xb7/0x110 [ 670.014511][T20538] ? __might_fault+0xb3/0x110 [ 670.014535][T20538] ? bpf_lsm_bpf+0x5/0x10 [ 670.014557][T20538] ? security_bpf+0x7a/0xa0 [ 670.014581][T20538] __sys_bpf+0x532/0x6f0 [ 670.014606][T20538] ? bpf_link_show_fdinfo+0x380/0x380 [ 670.014641][T20538] ? vtime_user_exit+0x2c8/0x3e0 [ 670.014671][T20538] __x64_sys_bpf+0x78/0x90 [ 670.044841][T20543] netlink: 14585 bytes leftover after parsing attributes in process `syz.5.5687'. [ 670.047964][T20538] do_syscall_64+0x4c/0xa0 [ 670.047996][T20538] ? clear_bhb_loop+0x30/0x80 [ 670.048022][T20538] ? clear_bhb_loop+0x30/0x80 [ 670.179654][T20538] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 670.185573][T20538] RIP: 0033:0x7f75e6712f79 [ 670.190008][T20538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.209632][T20538] RSP: 002b:00007f75e496d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 670.218063][T20538] RAX: ffffffffffffffda RBX: 00007f75e698cfa0 RCX: 00007f75e6712f79 [ 670.226053][T20538] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 670.234146][T20538] RBP: 00007f75e496d090 R08: 0000000000000000 R09: 0000000000000000 [ 670.242220][T20538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.250203][T20538] R13: 00007f75e698d038 R14: 00007f75e698cfa0 R15: 00007ffcbaf9b4b8 [ 670.258201][T20538] [ 670.272167][T20538] Mem-Info: [ 670.275674][T20538] active_anon:286 inactive_anon:6250 isolated_anon:0 [ 670.275674][T20538] active_file:15819 inactive_file:41763 isolated_file:0 [ 670.275674][T20538] unevictable:768 dirty:175 writeback:0 [ 670.275674][T20538] slab_reclaimable:20887 slab_unreclaimable:111274 [ 670.275674][T20538] mapped:30362 shmem:1641 pagetables:657 bounce:0 [ 670.275674][T20538] kernel_misc_reclaimable:0 [ 670.275674][T20538] free:1355042 free_pcp:10544 free_cma:0 [ 670.331563][T20538] Node 0 active_anon:1112kB inactive_anon:24392kB active_file:63072kB inactive_file:167052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121448kB dirty:700kB writeback:0kB shmem:4488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11864kB pagetables:2628kB all_unreclaimable? no [ 670.375438][T20538] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 670.435883][T20538] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 670.466590][T20538] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 670.472724][T20538] Node 0 DMA32 free:1480844kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1112kB inactive_anon:24492kB active_file:63072kB inactive_file:167052kB unevictable:1536kB writepending:700kB present:3129332kB managed:2606556kB mlocked:0kB bounce:0kB free_pcp:42144kB local_pcp:20768kB free_cma:0kB [ 670.508434][T20538] lowmem_reserve[]: 0 0 0 0 0 [ 670.515184][T20538] Node 0 Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 670.541543][T20538] lowmem_reserve[]: 0 0 0 0 0 [ 670.546707][T20538] Node 1 Normal free:3924748kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 670.576326][T20538] lowmem_reserve[]: 0 0 0 0 0 [ 670.581209][T20538] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 670.594933][T20538] Node 0 DMA32: 1749*4kB (UME) 2027*8kB (UME) 1192*16kB (UME) 3410*32kB (UME) 921*64kB (UME) 398*128kB (UME) 222*256kB (UME) 103*512kB (UM) 34*1024kB (UME) 13*2048kB (UME) 256*4096kB (UM) = 1480876kB [ 670.615399][T20538] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 670.629373][T20538] Node 1 Normal: 233*4kB (UME) 35*8kB (UME) 19*16kB (UME) 203*32kB (UME) 89*64kB (UME) 27*128kB (UE) 10*256kB (UM) 7*512kB (UE) 0*1024kB 1*2048kB (M) 952*4096kB (M) = 3924748kB [ 670.647797][T20538] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 670.665838][T20538] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 670.683468][T20538] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 670.696887][T20538] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 670.708151][T20538] 59223 total pagecache pages [ 670.713659][T20538] 0 pages in swap cache [ 670.718092][T20538] Swap cache stats: add 0, delete 0, find 0/0 [ 670.725054][T20538] Free swap = 124996kB [ 670.729708][T20538] Total swap = 124996kB [ 670.735890][T20538] 2097051 pages RAM [ 670.740030][T20538] 0 pages HighMem/MovableOnly [ 670.745128][T20538] 411489 pages reserved [ 670.749464][T20538] 0 pages cma reserved [ 670.818498][T20552] netlink: 'syz.3.5691': attribute type 10 has an invalid length. [ 671.353916][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5695'. [ 671.483610][T20569] netlink: 'syz.4.5697': attribute type 41 has an invalid length. [ 671.511516][T20569] netlink: 'syz.4.5697': attribute type 41 has an invalid length. [ 671.526664][T20569] netlink: 'syz.4.5697': attribute type 8 has an invalid length. [ 671.536493][T20569] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5697'. [ 671.746372][T20574] sctp: [Deprecated]: syz.4.5699 (pid 20574) Use of int in maxseg socket option. [ 671.746372][T20574] Use struct sctp_assoc_value instead [ 671.978241][T20579] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.5700'. [ 672.396721][T20596] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5709'. [ 672.496280][T20599] syz.1.5710[20599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 672.496610][T20599] syz.1.5710[20599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 672.867960][T20601] sctp: [Deprecated]: syz.3.5712 (pid 20601) Use of int in maxseg socket option. [ 672.867960][T20601] Use struct sctp_assoc_value instead [ 675.400626][T20601] validate_nla: 4 callbacks suppressed [ 675.400644][T20601] netlink: 'syz.3.5712': attribute type 49 has an invalid length. [ 675.431415][T20605] netlink: 'syz.0.5713': attribute type 12 has an invalid length. [ 675.442494][T20605] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5713'. [ 675.506336][T20611] netlink: 'syz.1.5714': attribute type 12 has an invalid length. [ 675.522453][T20611] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.5714'. [ 675.535158][T20612] FAULT_INJECTION: forcing a failure. [ 675.535158][T20612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.560812][T20612] CPU: 0 PID: 20612 Comm: syz.4.5715 Not tainted syzkaller #0 [ 675.568465][T20612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 675.578696][T20612] Call Trace: [ 675.582026][T20612] [ 675.585010][T20612] dump_stack_lvl+0x188/0x250 [ 675.589893][T20612] ? show_regs_print_info+0x20/0x20 [ 675.595155][T20612] ? load_image+0x400/0x400 [ 675.599715][T20612] ? __lock_acquire+0x7d10/0x7d10 [ 675.604793][T20612] ? __fget_files+0x40f/0x480 [ 675.609510][T20612] should_fail+0x38c/0x4c0 [ 675.613968][T20612] _copy_from_user+0x2e/0x170 [ 675.618683][T20612] generic_map_update_batch+0x4d5/0x7d0 [ 675.624290][T20612] ? rcu_read_unlock+0x90/0x90 [ 675.629096][T20612] ? __fdget+0x18b/0x210 [ 675.633370][T20612] ? rcu_read_unlock+0x90/0x90 [ 675.638155][T20612] bpf_map_do_batch+0x466/0x600 [ 675.643042][T20612] __sys_bpf+0x671/0x6f0 [ 675.647319][T20612] ? bpf_link_show_fdinfo+0x380/0x380 [ 675.652858][T20612] ? vtime_user_exit+0x2c8/0x3e0 [ 675.657849][T20612] __x64_sys_bpf+0x78/0x90 [ 675.662301][T20612] do_syscall_64+0x4c/0xa0 [ 675.666749][T20612] ? clear_bhb_loop+0x30/0x80 [ 675.671449][T20612] ? clear_bhb_loop+0x30/0x80 [ 675.676157][T20612] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 675.682083][T20612] RIP: 0033:0x7fd0cebbdf79 [ 675.686531][T20612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.706165][T20612] RSP: 002b:00007fd0cce18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 675.714613][T20612] RAX: ffffffffffffffda RBX: 00007fd0cee37fa0 RCX: 00007fd0cebbdf79 [ 675.722607][T20612] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 675.730597][T20612] RBP: 00007fd0cce18090 R08: 0000000000000000 R09: 0000000000000000 [ 675.738592][T20612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.746582][T20612] R13: 00007fd0cee38038 R14: 00007fd0cee37fa0 R15: 00007fff22d73c38 [ 675.754602][T20612] [ 675.854807][T20620] netlink: 'syz.0.5718': attribute type 10 has an invalid length. [ 676.129083][T20625] netlink: 'syz.5.5720': attribute type 2 has an invalid length. [ 676.145414][T20625] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5720'. [ 676.261654][T20627] netlink: 'syz.0.5721': attribute type 21 has an invalid length. [ 676.273188][T20627] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5721'. [ 676.361064][T20637] syz.1.5724[20637] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 676.361232][T20637] syz.1.5724[20637] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 676.567916][T20644] sctp: [Deprecated]: syz.3.5726 (pid 20644) Use of int in maxseg socket option. [ 676.567916][T20644] Use struct sctp_assoc_value instead [ 676.658635][T20644] netlink: 'syz.3.5726': attribute type 49 has an invalid length. [ 679.370570][T20658] netlink: 'syz.0.5729': attribute type 9 has an invalid length. [ 679.391076][T20658] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5729'. [ 679.449882][T20661] netlink: 'syz.1.5731': attribute type 10 has an invalid length. [ 679.896411][T20684] netlink: 'syz.3.5740': attribute type 21 has an invalid length. [ 679.913152][T20684] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5740'. [ 680.093934][T20696] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5742'. [ 680.147489][T20698] syz.1.5743[20698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 680.148172][T20698] syz.1.5743[20698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 680.202661][T20700] sctp: [Deprecated]: syz.3.5744 (pid 20700) Use of int in maxseg socket option. [ 680.202661][T20700] Use struct sctp_assoc_value instead [ 680.800366][T20702] validate_nla: 1 callbacks suppressed [ 680.811742][T20702] netlink: 'syz.5.5745': attribute type 10 has an invalid length. [ 682.970067][T20728] TCP: TCP_TX_DELAY enabled [ 683.034572][T20730] netlink: 'syz.5.5753': attribute type 21 has an invalid length. [ 683.072176][T20730] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5753'. [ 683.092720][T20723] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5752'. [ 683.184045][T20732] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5754'. [ 683.229890][T20734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 683.237572][T20734] IPv6: NLM_F_CREATE should be set when creating new route [ 683.245636][T20734] IPv6: NLM_F_CREATE should be set when creating new route [ 683.253390][T20734] IPv6: NLM_F_CREATE should be set when creating new route [ 683.317099][T20738] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5756'. [ 683.549217][T20748] syz.5.5760[20748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 683.551178][T20748] syz.5.5760[20748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 683.617747][T20750] sctp: [Deprecated]: syz.4.5761 (pid 20750) Use of int in maxseg socket option. [ 683.617747][T20750] Use struct sctp_assoc_value instead [ 683.883593][T20759] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5763'. [ 683.896105][T20754] netlink: 'syz.3.5763': attribute type 29 has an invalid length. [ 683.940474][T20754] netlink: 'syz.3.5763': attribute type 29 has an invalid length. [ 683.992411][T20758] netlink: 'syz.3.5763': attribute type 29 has an invalid length. [ 685.683712][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.690047][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.626424][T20766] FAULT_INJECTION: forcing a failure. [ 686.626424][T20766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.653530][T20766] CPU: 0 PID: 20766 Comm: syz.3.5767 Not tainted syzkaller #0 [ 686.661185][T20766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 686.671277][T20766] Call Trace: [ 686.674592][T20766] [ 686.677548][T20766] dump_stack_lvl+0x188/0x250 [ 686.682265][T20766] ? show_regs_print_info+0x20/0x20 [ 686.687496][T20766] ? load_image+0x400/0x400 [ 686.692038][T20766] ? __lock_acquire+0x7d10/0x7d10 [ 686.697092][T20766] ? __lock_acquire+0x7d10/0x7d10 [ 686.702152][T20766] should_fail+0x38c/0x4c0 [ 686.706608][T20766] _copy_from_user+0x2e/0x170 [ 686.711318][T20766] ____sys_sendmsg+0x30a/0x8f0 [ 686.716139][T20766] ? __sys_sendmsg_sock+0x30/0x30 [ 686.721209][T20766] ? import_iovec+0x6f/0xa0 [ 686.725749][T20766] ___sys_sendmsg+0x236/0x2e0 [ 686.730466][T20766] ? __sys_sendmsg+0x2a0/0x2a0 [ 686.735274][T20766] ? vfs_write+0x8b2/0xd60 [ 686.739742][T20766] __se_sys_sendmsg+0x1af/0x290 [ 686.744628][T20766] ? __x64_sys_sendmsg+0x80/0x80 [ 686.749592][T20766] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 686.755614][T20766] ? lockdep_hardirqs_on+0x94/0x140 [ 686.760849][T20766] do_syscall_64+0x4c/0xa0 [ 686.765301][T20766] ? clear_bhb_loop+0x30/0x80 [ 686.770003][T20766] ? clear_bhb_loop+0x30/0x80 [ 686.774711][T20766] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 686.780640][T20766] RIP: 0033:0x7f75e6712f79 [ 686.785110][T20766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.804744][T20766] RSP: 002b:00007f75e496d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 686.813225][T20766] RAX: ffffffffffffffda RBX: 00007f75e698cfa0 RCX: 00007f75e6712f79 [ 686.821245][T20766] RDX: 0000000000004840 RSI: 0000200000000380 RDI: 0000000000000008 [ 686.829251][T20766] RBP: 00007f75e496d090 R08: 0000000000000000 R09: 0000000000000000 [ 686.837260][T20766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.845276][T20766] R13: 00007f75e698d038 R14: 00007f75e698cfa0 R15: 00007ffcbaf9b4b8 [ 686.853303][T20766] [ 686.891710][T20770] FAULT_INJECTION: forcing a failure. [ 686.891710][T20770] name failslab, interval 1, probability 0, space 0, times 0 [ 686.927832][T20772] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5768'. [ 686.937286][T20770] CPU: 0 PID: 20770 Comm: syz.5.5766 Not tainted syzkaller #0 [ 686.944863][T20770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 686.954963][T20770] Call Trace: [ 686.958278][T20770] [ 686.961242][T20770] dump_stack_lvl+0x188/0x250 [ 686.965962][T20770] ? show_regs_print_info+0x20/0x20 [ 686.971205][T20770] ? load_image+0x400/0x400 [ 686.975743][T20770] ? __might_sleep+0xf0/0xf0 [ 686.980379][T20770] ? __lock_acquire+0x7d10/0x7d10 [ 686.985450][T20770] should_fail+0x38c/0x4c0 [ 686.989895][T20770] should_failslab+0x5/0x20 [ 686.994594][T20770] slab_pre_alloc_hook+0x51/0xc0 [ 686.999555][T20770] kmem_cache_alloc_trace+0x47/0x2a0 [ 687.004864][T20770] ? apparmor_sk_alloc_security+0x74/0x100 [ 687.010696][T20770] apparmor_sk_alloc_security+0x74/0x100 [ 687.016435][T20770] security_sk_alloc+0x6a/0xa0 [ 687.021219][T20770] sk_prot_alloc+0x101/0x210 [ 687.025833][T20770] ? sk_alloc+0x1d/0x310 [ 687.030106][T20770] sk_alloc+0x2f/0x310 [ 687.034195][T20770] bpf_prog_test_run_skb+0x240/0x1180 [ 687.039586][T20770] ? __fget_files+0x40f/0x480 [ 687.044292][T20770] ? cpu_online+0x60/0x60 [ 687.048646][T20770] bpf_prog_test_run+0x31e/0x390 [ 687.053618][T20770] __sys_bpf+0x5a5/0x6f0 [ 687.057885][T20770] ? bpf_link_show_fdinfo+0x380/0x380 [ 687.063289][T20770] ? vtime_user_exit+0x2c8/0x3e0 [ 687.068254][T20770] __x64_sys_bpf+0x78/0x90 [ 687.072690][T20770] do_syscall_64+0x4c/0xa0 [ 687.077126][T20770] ? clear_bhb_loop+0x30/0x80 [ 687.081814][T20770] ? clear_bhb_loop+0x30/0x80 [ 687.086600][T20770] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 687.092521][T20770] RIP: 0033:0x7f48120e1f79 [ 687.096964][T20770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.116585][T20770] RSP: 002b:00007f481033c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 687.125076][T20770] RAX: ffffffffffffffda RBX: 00007f481235bfa0 RCX: 00007f48120e1f79 [ 687.133081][T20770] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 687.141076][T20770] RBP: 00007f481033c090 R08: 0000000000000000 R09: 0000000000000000 [ 687.149071][T20770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.157078][T20770] R13: 00007f481235c038 R14: 00007f481235bfa0 R15: 00007fff183c9cd8 [ 687.165178][T20770] [ 687.919381][T20805] syz.3.5778[20805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 687.919471][T20805] syz.3.5778[20805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 688.599560][T20809] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.5781'. [ 689.758979][T20815] sctp: [Deprecated]: syz.0.5782 (pid 20815) Use of int in maxseg socket option. [ 689.758979][T20815] Use struct sctp_assoc_value instead [ 689.826828][T20815] netlink: 'syz.0.5782': attribute type 49 has an invalid length. [ 689.910349][T20793] chnl_net:caif_netlink_parms(): no params data found [ 689.922525][ T7457] Bluetooth: hci2: command 0x0409 tx timeout [ 690.074421][T20793] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.104969][T20833] netlink: 'syz.0.5790': attribute type 3 has an invalid length. [ 690.113611][T20833] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5790'. [ 690.114958][T20793] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.137062][T20793] device bridge_slave_0 entered promiscuous mode [ 690.147870][T20793] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.155351][T20793] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.167336][T20793] device bridge_slave_1 entered promiscuous mode [ 690.213212][T20793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.244773][T20793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.333155][T20793] team0: Port device team_slave_0 added [ 690.341763][T20793] team0: Port device team_slave_1 added [ 690.375428][T20793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.392039][T20793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.429179][T20793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.446774][T20840] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5793'. [ 690.464656][T20793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.471825][T20793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.499838][T20793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.591525][T20793] device hsr_slave_0 entered promiscuous mode [ 690.601290][T20793] device hsr_slave_1 entered promiscuous mode [ 690.609321][T20793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 690.617310][T20793] Cannot create hsr debugfs directory [ 690.659049][T20842] syz.0.5794[20842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 690.659154][T20842] syz.0.5794[20842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 691.006970][T20847] sctp: [Deprecated]: syz.1.5796 (pid 20847) Use of int in maxseg socket option. [ 691.006970][T20847] Use struct sctp_assoc_value instead [ 692.002000][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 692.568496][T20793] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.601690][T20848] netlink: 'syz.1.5796': attribute type 49 has an invalid length. [ 692.679186][T20856] FAULT_INJECTION: forcing a failure. [ 692.679186][T20856] name failslab, interval 1, probability 0, space 0, times 0 [ 692.733435][T20793] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.751331][T20856] CPU: 0 PID: 20856 Comm: syz.0.5799 Not tainted syzkaller #0 [ 692.758970][T20856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 692.769081][T20856] Call Trace: [ 692.772409][T20856] [ 692.775391][T20856] dump_stack_lvl+0x188/0x250 [ 692.780144][T20856] ? show_regs_print_info+0x20/0x20 [ 692.785414][T20856] ? load_image+0x400/0x400 [ 692.789999][T20856] ? __might_sleep+0xf0/0xf0 [ 692.794645][T20856] ? __lock_acquire+0x7d10/0x7d10 [ 692.799809][T20856] ? perf_trace_buf_alloc+0x12c/0x300 [ 692.805246][T20856] should_fail+0x38c/0x4c0 [ 692.809731][T20856] should_failslab+0x5/0x20 [ 692.814277][T20856] slab_pre_alloc_hook+0x51/0xc0 [ 692.819278][T20856] kmem_cache_alloc_node+0x47/0x2d0 [ 692.824529][T20856] ? __alloc_skb+0xf4/0x750 [ 692.829101][T20856] __alloc_skb+0xf4/0x750 [ 692.833507][T20856] alloc_skb_with_frags+0xa7/0x730 [ 692.838680][T20856] ? __lock_acquire+0x7d10/0x7d10 [ 692.843778][T20856] sock_alloc_send_pskb+0x87f/0x9a0 [ 692.849026][T20856] ? migrate_enable+0x13e/0x200 [ 692.853998][T20856] ? sock_kzfree_s+0x50/0x50 [ 692.858712][T20856] tun_get_user+0x7c8/0x3a70 [ 692.863356][T20856] ? perf_trace_lock+0x301/0x390 [ 692.868405][T20856] ? tun_ring_recv+0xc40/0xc40 [ 692.873278][T20856] ? rcu_lock_release+0x5/0x20 [ 692.878107][T20856] ? __lock_acquire+0x7d10/0x7d10 [ 692.883260][T20856] tun_chr_write_iter+0x112/0x1e0 [ 692.888350][T20856] vfs_write+0x745/0xd60 [ 692.892664][T20856] ? file_end_write+0x250/0x250 [ 692.897591][T20856] ? __fget_files+0x40f/0x480 [ 692.902348][T20856] ? __fdget_pos+0x1e2/0x370 [ 692.906981][T20856] ? ksys_write+0x71/0x260 [ 692.911451][T20856] ksys_write+0x152/0x260 [ 692.915834][T20856] ? __ia32_sys_read+0x80/0x80 [ 692.920665][T20856] ? lockdep_hardirqs_on+0x94/0x140 [ 692.925921][T20856] do_syscall_64+0x4c/0xa0 [ 692.930465][T20856] ? clear_bhb_loop+0x30/0x80 [ 692.935184][T20856] ? clear_bhb_loop+0x30/0x80 [ 692.939912][T20856] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 692.945851][T20856] RIP: 0033:0x7faae7480f79 [ 692.950320][T20856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.970067][T20856] RSP: 002b:00007faae56db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 692.978542][T20856] RAX: ffffffffffffffda RBX: 00007faae76fafa0 RCX: 00007faae7480f79 [ 692.986696][T20856] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 692.994727][T20856] RBP: 00007faae56db090 R08: 0000000000000000 R09: 0000000000000000 [ 693.002751][T20856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.010768][T20856] R13: 00007faae76fb038 R14: 00007faae76fafa0 R15: 00007ffe96af7e18 [ 693.018837][T20856] [ 693.104081][T20793] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.157174][T20859] netlink: 'syz.5.5800': attribute type 3 has an invalid length. [ 693.189592][T20859] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5800'. [ 693.254241][T20864] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5803'. [ 693.282104][T20793] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.489822][T20878] netlink: 'syz.0.5806': attribute type 1 has an invalid length. [ 693.502187][T20878] netlink: 'syz.0.5806': attribute type 4 has an invalid length. [ 693.510071][T20878] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5806'. [ 693.524114][T20793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 693.614730][T20793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 693.639295][T20886] sctp: [Deprecated]: syz.0.5810 (pid 20886) Use of int in maxseg socket option. [ 693.639295][T20886] Use struct sctp_assoc_value instead [ 693.683595][T20793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 693.697969][T20793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 693.709547][T20886] netlink: 'syz.0.5810': attribute type 49 has an invalid length. [ 693.739757][T20891] FAULT_INJECTION: forcing a failure. [ 693.739757][T20891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.792538][T20891] CPU: 0 PID: 20891 Comm: syz.1.5812 Not tainted syzkaller #0 [ 693.800164][T20891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 693.810261][T20891] Call Trace: [ 693.813570][T20891] [ 693.816531][T20891] dump_stack_lvl+0x188/0x250 [ 693.821267][T20891] ? show_regs_print_info+0x20/0x20 [ 693.826519][T20891] ? load_image+0x400/0x400 [ 693.831068][T20891] ? __lock_acquire+0x7d10/0x7d10 [ 693.836147][T20891] should_fail+0x38c/0x4c0 [ 693.840612][T20891] _copy_from_user+0x2e/0x170 [ 693.845331][T20891] __copy_msghdr_from_user+0xc9/0x630 [ 693.850752][T20891] ? verify_lock_unused+0x140/0x140 [ 693.855994][T20891] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 693.861369][T20891] ___sys_sendmsg+0x19a/0x2e0 [ 693.866100][T20891] ? __sys_sendmsg+0x2a0/0x2a0 [ 693.870914][T20891] ? vfs_write+0x8b2/0xd60 [ 693.875393][T20891] __se_sys_sendmsg+0x1af/0x290 [ 693.880282][T20891] ? __x64_sys_sendmsg+0x80/0x80 [ 693.885370][T20891] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 693.891409][T20891] ? lockdep_hardirqs_on+0x94/0x140 [ 693.896658][T20891] do_syscall_64+0x4c/0xa0 [ 693.901114][T20891] ? clear_bhb_loop+0x30/0x80 [ 693.905818][T20891] ? clear_bhb_loop+0x30/0x80 [ 693.910536][T20891] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 693.916465][T20891] RIP: 0033:0x7f9af16c4f79 [ 693.920952][T20891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.940603][T20891] RSP: 002b:00007f9aef91f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.949059][T20891] RAX: ffffffffffffffda RBX: 00007f9af193efa0 RCX: 00007f9af16c4f79 [ 693.957067][T20891] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 693.965073][T20891] RBP: 00007f9aef91f090 R08: 0000000000000000 R09: 0000000000000000 [ 693.973085][T20891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.981096][T20891] R13: 00007f9af193f038 R14: 00007f9af193efa0 R15: 00007ffecaf05e78 [ 693.989139][T20891] [ 694.082049][ T7457] Bluetooth: hci2: command 0x040f tx timeout [ 694.129823][T20793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.153928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 694.175256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 694.206608][T20793] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.256000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 694.272944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 694.292823][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.300112][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.314299][T20908] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5816'. [ 694.336162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 694.348547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 694.369547][T20906] netlink: 'syz.5.5817': attribute type 3 has an invalid length. [ 694.377744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 694.387915][T20906] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5817'. [ 694.414608][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.421764][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.492438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 694.530111][T20914] FAULT_INJECTION: forcing a failure. [ 694.530111][T20914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.558802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 694.566680][T20914] CPU: 0 PID: 20914 Comm: syz.0.5819 Not tainted syzkaller #0 [ 694.574338][T20914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 694.584427][T20914] Call Trace: [ 694.587733][T20914] [ 694.590847][T20914] dump_stack_lvl+0x188/0x250 [ 694.595593][T20914] ? show_regs_print_info+0x20/0x20 [ 694.600219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 694.600839][T20914] ? load_image+0x400/0x400 [ 694.613273][T20914] ? __lock_acquire+0x7d10/0x7d10 [ 694.618362][T20914] should_fail+0x38c/0x4c0 [ 694.622840][T20914] _copy_from_user+0x2e/0x170 [ 694.627569][T20914] ___sys_recvmsg+0x173/0x5c0 [ 694.632292][T20914] ? __sys_recvmsg+0x280/0x280 [ 694.637111][T20914] ? __lock_acquire+0x7d10/0x7d10 [ 694.642289][T20914] __x64_sys_recvmsg+0x1f9/0x2c0 [ 694.647272][T20914] ? ___sys_recvmsg+0x5c0/0x5c0 [ 694.647839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 694.652194][T20914] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 694.652234][T20914] ? lockdep_hardirqs_on+0x94/0x140 [ 694.671271][T20914] do_syscall_64+0x4c/0xa0 [ 694.675736][T20914] ? clear_bhb_loop+0x30/0x80 [ 694.680488][T20914] ? clear_bhb_loop+0x30/0x80 [ 694.685217][T20914] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 694.691158][T20914] RIP: 0033:0x7faae7480f79 [ 694.691924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 694.695617][T20914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.695639][T20914] RSP: 002b:00007faae56ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 694.730901][T20914] RAX: ffffffffffffffda RBX: 00007faae76fb090 RCX: 00007faae7480f79 [ 694.738916][T20914] RDX: 0000000000012000 RSI: 0000200000000440 RDI: 0000000000000008 [ 694.746939][T20914] RBP: 00007faae56ba090 R08: 0000000000000000 R09: 0000000000000000 [ 694.755027][T20914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.763131][T20914] R13: 00007faae76fb128 R14: 00007faae76fb090 R15: 00007ffe96af7e18 [ 694.771162][T20914] [ 694.792439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 694.808149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 694.828864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 694.838279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 694.848679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 694.864234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 694.876010][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 695.065138][T20926] sctp: [Deprecated]: syz.5.5823 (pid 20926) Use of int in maxseg socket option. [ 695.065138][T20926] Use struct sctp_assoc_value instead [ 695.128693][T20926] netlink: 'syz.5.5823': attribute type 49 has an invalid length. [ 695.215060][T20932] FAULT_INJECTION: forcing a failure. [ 695.215060][T20932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.228862][T20932] CPU: 1 PID: 20932 Comm: syz.1.5824 Not tainted syzkaller #0 [ 695.236377][T20932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 695.246475][T20932] Call Trace: [ 695.249843][T20932] [ 695.252810][T20932] dump_stack_lvl+0x188/0x250 [ 695.257556][T20932] ? show_regs_print_info+0x20/0x20 [ 695.262823][T20932] ? load_image+0x400/0x400 [ 695.267477][T20932] ? __lock_acquire+0x7d10/0x7d10 [ 695.272719][T20932] ? aa_sk_perm+0x910/0x910 [ 695.277262][T20932] should_fail+0x38c/0x4c0 [ 695.281702][T20932] _copy_from_user+0x2e/0x170 [ 695.286406][T20932] sock_setsockopt+0x291/0x24c0 [ 695.291302][T20932] ? __sock_set_mark+0x150/0x150 [ 695.296302][T20932] ? __lock_acquire+0x7d10/0x7d10 [ 695.301374][T20932] ? aa_sk_perm+0x7dc/0x910 [ 695.306043][T20932] ? aa_af_perm+0x340/0x340 [ 695.310625][T20932] ? __fget_files+0x40f/0x480 [ 695.315383][T20932] ? aa_sock_opt_perm+0x74/0x100 [ 695.320375][T20932] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 695.325981][T20932] ? security_socket_setsockopt+0x7a/0xa0 [ 695.331763][T20932] __sys_setsockopt+0x2f6/0x3d0 [ 695.336664][T20932] __x64_sys_setsockopt+0xb1/0xc0 [ 695.341748][T20932] do_syscall_64+0x4c/0xa0 [ 695.346199][T20932] ? clear_bhb_loop+0x30/0x80 [ 695.350928][T20932] ? clear_bhb_loop+0x30/0x80 [ 695.355655][T20932] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 695.361591][T20932] RIP: 0033:0x7f9af16c4f79 [ 695.366045][T20932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.385703][T20932] RSP: 002b:00007f9aef91f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 695.394173][T20932] RAX: ffffffffffffffda RBX: 00007f9af193efa0 RCX: 00007f9af16c4f79 [ 695.402191][T20932] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000009 [ 695.410199][T20932] RBP: 00007f9aef91f090 R08: 0000000000000004 R09: 0000000000000000 [ 695.418268][T20932] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 695.426532][T20932] R13: 00007f9af193f038 R14: 00007f9af193efa0 R15: 00007ffecaf05e78 [ 695.434581][T20932] [ 695.450085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 695.460961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 695.480171][T20793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.749902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 695.760312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 695.792528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 695.810409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 695.821020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 695.830161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 695.849813][T20793] device veth0_vlan entered promiscuous mode [ 695.866428][T20793] device veth1_vlan entered promiscuous mode [ 695.901091][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 695.912981][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 695.921560][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 695.934990][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 695.951746][T20793] device veth0_macvtap entered promiscuous mode [ 695.993635][T20793] device veth1_macvtap entered promiscuous mode [ 696.021323][T20793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.029310][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 696.039164][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 696.048400][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 696.058150][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 696.076462][T20793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.085896][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 696.096106][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 696.108850][T20793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.124195][T20793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.133879][T20793] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.145266][T20793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.162246][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 696.308651][ T431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.318339][ T431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.390974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 696.475530][T20955] netlink: 'syz.3.5829': attribute type 3 has an invalid length. [ 696.515234][T20955] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5829'. [ 696.530344][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.559932][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.717163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 696.840538][T20963] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.5830'. [ 696.871029][T20966] netlink: 'syz.4.5770': attribute type 21 has an invalid length. [ 696.882590][T20966] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5770'. [ 696.898892][T20966] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 696.978719][T20968] netlink: 'syz.1.5831': attribute type 28 has an invalid length. [ 697.000053][T20968] netlink: 'syz.1.5831': attribute type 4 has an invalid length. [ 697.027269][T20968] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5831'. [ 697.325769][T20980] sctp: [Deprecated]: syz.1.5835 (pid 20980) Use of int in maxseg socket option. [ 697.325769][T20980] Use struct sctp_assoc_value instead [ 697.444412][T20980] netlink: 'syz.1.5835': attribute type 49 has an invalid length. [ 697.551662][T20984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.581635][T20984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.635763][T20984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.682666][T20984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.938366][T20998] netlink: 'syz.1.5843': attribute type 3 has an invalid length. [ 697.948960][T20998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5843'. [ 698.468013][T21015] sctp: [Deprecated]: syz.1.5850 (pid 21015) Use of int in maxseg socket option. [ 698.468013][T21015] Use struct sctp_assoc_value instead [ 698.536331][T21015] netlink: 'syz.1.5850': attribute type 49 has an invalid length. [ 698.961689][T21033] netlink: 'syz.1.5856': attribute type 3 has an invalid length. [ 698.990157][T21033] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5856'. [ 699.616482][T21053] sctp: [Deprecated]: syz.0.5863 (pid 21053) Use of int in maxseg socket option. [ 699.616482][T21053] Use struct sctp_assoc_value instead [ 699.704809][T21053] netlink: 'syz.0.5863': attribute type 49 has an invalid length. [ 699.823019][T21059] FAULT_INJECTION: forcing a failure. [ 699.823019][T21059] name failslab, interval 1, probability 0, space 0, times 0 [ 699.837768][T21059] CPU: 1 PID: 21059 Comm: syz.4.5865 Not tainted syzkaller #0 [ 699.845290][T21059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 699.855386][T21059] Call Trace: [ 699.858702][T21059] [ 699.861661][T21059] dump_stack_lvl+0x188/0x250 [ 699.866374][T21059] ? show_regs_print_info+0x20/0x20 [ 699.871614][T21059] ? load_image+0x400/0x400 [ 699.876165][T21059] ? __might_sleep+0xf0/0xf0 [ 699.880788][T21059] ? __lock_acquire+0x7d10/0x7d10 [ 699.885829][T21059] ? mark_lock+0x94/0x320 [ 699.890179][T21059] should_fail+0x38c/0x4c0 [ 699.894622][T21059] should_failslab+0x5/0x20 [ 699.899158][T21059] slab_pre_alloc_hook+0x51/0xc0 [ 699.904114][T21059] __kmalloc+0x6b/0x330 [ 699.908307][T21059] ? tomoyo_realpath_from_path+0x118/0x610 [ 699.914145][T21059] tomoyo_realpath_from_path+0x118/0x610 [ 699.919811][T21059] tomoyo_path_number_perm+0x242/0x660 [ 699.925299][T21059] ? verify_lock_unused+0x140/0x140 [ 699.930538][T21059] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 699.936023][T21059] ? ksys_write+0x1c6/0x260 [ 699.940585][T21059] security_file_ioctl+0x6c/0xa0 [ 699.945548][T21059] __se_sys_ioctl+0x48/0x170 [ 699.950164][T21059] do_syscall_64+0x4c/0xa0 [ 699.954601][T21059] ? clear_bhb_loop+0x30/0x80 [ 699.959296][T21059] ? clear_bhb_loop+0x30/0x80 [ 699.964012][T21059] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 699.970016][T21059] RIP: 0033:0x7f5f19ee7f79 [ 699.974469][T21059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.994102][T21059] RSP: 002b:00007f5f18142028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 700.002544][T21059] RAX: ffffffffffffffda RBX: 00007f5f1a161fa0 RCX: 00007f5f19ee7f79 [ 700.010534][T21059] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000004 [ 700.018547][T21059] RBP: 00007f5f18142090 R08: 0000000000000000 R09: 0000000000000000 [ 700.026536][T21059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.034664][T21059] R13: 00007f5f1a162038 R14: 00007f5f1a161fa0 R15: 00007fffd5258748 [ 700.042676][T21059] [ 700.054974][T21059] ERROR: Out of memory at tomoyo_realpath_from_path. [ 700.253685][T21064] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 700.268990][T21064] device syzkaller0 entered promiscuous mode [ 700.383652][T21071] netlink: 'syz.1.5870': attribute type 3 has an invalid length. [ 700.391626][T21071] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5870'. [ 704.937022][T21120] FAULT_INJECTION: forcing a failure. [ 704.937022][T21120] name failslab, interval 1, probability 0, space 0, times 0 [ 704.986942][T21120] CPU: 0 PID: 21120 Comm: syz.0.5889 Not tainted syzkaller #0 [ 704.994471][T21120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 705.004565][T21120] Call Trace: [ 705.007874][T21120] [ 705.010870][T21120] dump_stack_lvl+0x188/0x250 [ 705.015590][T21120] ? show_regs_print_info+0x20/0x20 [ 705.020836][T21120] ? load_image+0x400/0x400 [ 705.025381][T21120] ? __might_sleep+0xf0/0xf0 [ 705.030016][T21120] ? __lock_acquire+0x7d10/0x7d10 [ 705.035078][T21120] should_fail+0x38c/0x4c0 [ 705.039537][T21120] should_failslab+0x5/0x20 [ 705.044076][T21120] slab_pre_alloc_hook+0x51/0xc0 [ 705.049072][T21120] kmem_cache_alloc_trace+0x47/0x2a0 [ 705.054385][T21120] ? apparmor_sk_alloc_security+0x74/0x100 [ 705.060239][T21120] apparmor_sk_alloc_security+0x74/0x100 [ 705.065908][T21120] security_sk_alloc+0x6a/0xa0 [ 705.070709][T21120] sk_prot_alloc+0x101/0x210 [ 705.075514][T21120] ? sk_alloc+0x1d/0x310 [ 705.079798][T21120] sk_alloc+0x2f/0x310 [ 705.083904][T21120] bpf_prog_test_run_skb+0x240/0x1180 [ 705.089313][T21120] ? __fget_files+0x40f/0x480 [ 705.094025][T21120] ? cpu_online+0x60/0x60 [ 705.098379][T21120] bpf_prog_test_run+0x31e/0x390 [ 705.103338][T21120] __sys_bpf+0x5a5/0x6f0 [ 705.107597][T21120] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 705.113860][T21120] ? bpf_link_show_fdinfo+0x380/0x380 [ 705.119278][T21120] ? rcu_nmi_exit+0x6f/0xf0 [ 705.123836][T21120] ? vtime_user_exit+0x2c8/0x3e0 [ 705.128797][T21120] __x64_sys_bpf+0x78/0x90 [ 705.133263][T21120] do_syscall_64+0x4c/0xa0 [ 705.137726][T21120] ? clear_bhb_loop+0x30/0x80 [ 705.142427][T21120] ? clear_bhb_loop+0x30/0x80 [ 705.147136][T21120] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 705.153151][T21120] RIP: 0033:0x7faae7480f79 [ 705.157615][T21120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.177381][T21120] RSP: 002b:00007faae56db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 705.185941][T21120] RAX: ffffffffffffffda RBX: 00007faae76fafa0 RCX: 00007faae7480f79 [ 705.193946][T21120] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 705.201948][T21120] RBP: 00007faae56db090 R08: 0000000000000000 R09: 0000000000000000 [ 705.209964][T21120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.217972][T21120] R13: 00007faae76fb038 R14: 00007faae76fafa0 R15: 00007ffe96af7e18 [ 705.225989][T21120] [ 705.905965][T21135] sctp: [Deprecated]: syz.5.5895 (pid 21135) Use of int in maxseg socket option. [ 705.905965][T21135] Use struct sctp_assoc_value instead [ 705.977657][T21137] netlink: 'syz.1.5896': attribute type 10 has an invalid length. [ 705.994313][T21135] netlink: 'syz.5.5895': attribute type 49 has an invalid length. [ 708.680187][T21162] device syzkaller0 entered promiscuous mode [ 708.700785][ T4290] syzkaller0: tun_net_xmit 48 [ 708.855865][T21162] netlink: 'syz.4.5904': attribute type 3 has an invalid length. [ 708.866504][T21162] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5904'. [ 709.497143][T21187] sctp: [Deprecated]: syz.0.5914 (pid 21187) Use of int in maxseg socket option. [ 709.497143][T21187] Use struct sctp_assoc_value instead [ 711.134605][T21192] netlink: 'syz.5.5915': attribute type 10 has an invalid length. [ 711.212343][T21191] sock: sock_timestamping_bind_phc: sock not bind to device [ 712.210857][T21203] FAULT_INJECTION: forcing a failure. [ 712.210857][T21203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.261945][T21203] CPU: 1 PID: 21203 Comm: syz.4.5920 Not tainted syzkaller #0 [ 712.269578][T21203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 712.279693][T21203] Call Trace: [ 712.283113][T21203] [ 712.286111][T21203] dump_stack_lvl+0x188/0x250 [ 712.290854][T21203] ? show_regs_print_info+0x20/0x20 [ 712.296104][T21203] ? load_image+0x400/0x400 [ 712.300662][T21203] ? __lock_acquire+0x7d10/0x7d10 [ 712.305742][T21203] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 712.311612][T21203] should_fail+0x38c/0x4c0 [ 712.316116][T21203] _copy_from_user+0x2e/0x170 [ 712.320849][T21203] __copy_msghdr_from_user+0xc9/0x630 [ 712.326369][T21203] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 712.332124][T21203] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 712.337471][T21203] ___sys_sendmsg+0x19a/0x2e0 [ 712.342238][T21203] ? __sys_sendmsg+0x2a0/0x2a0 [ 712.347113][T21203] __se_sys_sendmsg+0x1af/0x290 [ 712.352031][T21203] ? __x64_sys_sendmsg+0x80/0x80 [ 712.356990][T21203] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 712.363060][T21203] ? lockdep_hardirqs_on+0x94/0x140 [ 712.368309][T21203] do_syscall_64+0x4c/0xa0 [ 712.372747][T21203] ? clear_bhb_loop+0x30/0x80 [ 712.377443][T21203] ? clear_bhb_loop+0x30/0x80 [ 712.382144][T21203] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 712.388062][T21203] RIP: 0033:0x7f5f19ee7f79 [ 712.392514][T21203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.412147][T21203] RSP: 002b:00007f5f18142028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.420591][T21203] RAX: ffffffffffffffda RBX: 00007f5f1a161fa0 RCX: 00007f5f19ee7f79 [ 712.428609][T21203] RDX: 0000000024005001 RSI: 0000200000000080 RDI: 0000000000000004 [ 712.436617][T21203] RBP: 00007f5f18142090 R08: 0000000000000000 R09: 0000000000000000 [ 712.444613][T21203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.452742][T21203] R13: 00007f5f1a162038 R14: 00007f5f1a161fa0 R15: 00007fffd5258748 [ 712.460776][T21203] [ 713.123786][T21222] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5928'. [ 713.288612][T21231] FAULT_INJECTION: forcing a failure. [ 713.288612][T21231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.302255][T21231] CPU: 0 PID: 21231 Comm: syz.1.5932 Not tainted syzkaller #0 [ 713.309786][T21231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 713.319899][T21231] Call Trace: [ 713.323235][T21231] [ 713.326210][T21231] dump_stack_lvl+0x188/0x250 [ 713.330965][T21231] ? show_regs_print_info+0x20/0x20 [ 713.336217][T21231] ? load_image+0x400/0x400 [ 713.340780][T21231] ? __lock_acquire+0x7d10/0x7d10 [ 713.345864][T21231] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 713.351750][T21231] should_fail+0x38c/0x4c0 [ 713.356269][T21231] _copy_from_user+0x2e/0x170 [ 713.361006][T21231] __copy_msghdr_from_user+0xc9/0x630 [ 713.366444][T21231] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 713.372215][T21231] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 713.377582][T21231] ___sys_sendmsg+0x19a/0x2e0 [ 713.382333][T21231] ? __sys_sendmsg+0x2a0/0x2a0 [ 713.387181][T21231] ? trace_event_raw_event_lock+0x270/0x270 [ 713.393305][T21231] ? vfs_write+0x8b2/0xd60 [ 713.397823][T21231] __se_sys_sendmsg+0x1af/0x290 [ 713.402748][T21231] ? __x64_sys_sendmsg+0x80/0x80 [ 713.407728][T21231] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 713.413779][T21231] ? lockdep_hardirqs_on+0x94/0x140 [ 713.419056][T21231] do_syscall_64+0x4c/0xa0 [ 713.423530][T21231] ? clear_bhb_loop+0x30/0x80 [ 713.428284][T21231] ? clear_bhb_loop+0x30/0x80 [ 713.433006][T21231] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 713.439502][T21231] RIP: 0033:0x7f9af16c4f79 [ 713.443966][T21231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.463620][T21231] RSP: 002b:00007f9aef91f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.472094][T21231] RAX: ffffffffffffffda RBX: 00007f9af193efa0 RCX: 00007f9af16c4f79 [ 713.480113][T21231] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 713.488137][T21231] RBP: 00007f9aef91f090 R08: 0000000000000000 R09: 0000000000000000 [ 713.496152][T21231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.504181][T21231] R13: 00007f9af193f038 R14: 00007f9af193efa0 R15: 00007ffecaf05e78 [ 713.512236][T21231] [ 716.193621][T21262] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5942'. [ 716.643978][T21264] chnl_net:caif_netlink_parms(): no params data found [ 716.736648][T21270] pim6reg: tun_chr_ioctl cmd 1074025677 [ 716.750456][T21270] pim6reg: linktype set to 776 [ 716.780991][T21264] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.802716][T21264] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.810785][T21264] device bridge_slave_0 entered promiscuous mode [ 716.854764][T21264] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.863372][T21279] FAULT_INJECTION: forcing a failure. [ 716.863372][T21279] name failslab, interval 1, probability 0, space 0, times 0 [ 716.869307][T21264] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.876540][T21279] CPU: 1 PID: 21279 Comm: syz.1.5946 Not tainted syzkaller #0 [ 716.876603][T21279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 716.876617][T21279] Call Trace: [ 716.876624][T21279] [ 716.876633][T21279] dump_stack_lvl+0x188/0x250 [ 716.876669][T21279] ? show_regs_print_info+0x20/0x20 [ 716.895219][T21264] device bridge_slave_1 entered promiscuous mode [ 716.901243][T21279] ? load_image+0x400/0x400 [ 716.901275][T21279] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 716.901301][T21279] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 716.901322][T21279] ? _raw_spin_unlock+0x40/0x40 [ 716.945009][T21279] should_fail+0x38c/0x4c0 [ 716.949592][T21279] should_failslab+0x5/0x20 [ 716.954131][T21279] slab_pre_alloc_hook+0x51/0xc0 [ 716.959103][T21279] ? skb_clone+0x1bd/0x350 [ 716.963561][T21279] kmem_cache_alloc+0x3d/0x290 [ 716.968389][T21279] skb_clone+0x1bd/0x350 [ 716.972702][T21279] ? __neigh_event_send+0xe63/0x1470 [ 716.978068][T21279] __neigh_event_send+0xe70/0x1470 [ 716.983235][T21279] neigh_resolve_output+0x1b3/0x6a0 [ 716.988469][T21279] ? __ipv6_neigh_lookup_noref+0x5b2/0x7d0 [ 716.994315][T21279] ? rcu_lock_release+0x9/0x20 [ 716.999114][T21279] ip6_finish_output2+0x108c/0x1510 [ 717.004389][T21279] ? nf_hook+0x360/0x360 [ 717.008674][T21279] ? ip6_finish_output+0x64c/0x7d0 [ 717.013835][T21279] ip6_send_skb+0x1b9/0x360 [ 717.018376][T21279] rawv6_push_pending_frames+0x655/0x810 [ 717.024042][T21279] ? ip6_append_data+0x1d4/0x310 [ 717.029006][T21279] ? rawv6_send_hdrinc+0x1690/0x1690 [ 717.034321][T21279] ? raw6_getfrag+0x2d0/0x2d0 [ 717.039025][T21279] ? rawv6_send_hdrinc+0x1690/0x1690 [ 717.044355][T21279] rawv6_sendmsg+0x1291/0x1700 [ 717.049166][T21279] ? compat_rawv6_ioctl+0x60/0x60 [ 717.054270][T21279] ? aa_af_perm+0x340/0x340 [ 717.058826][T21279] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 717.065279][T21279] ? sock_rps_record_flow+0x17/0x3b0 [ 717.070607][T21279] ? inet_sendmsg+0x78/0x2f0 [ 717.075234][T21279] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 717.080549][T21279] ? security_socket_sendmsg+0x7c/0xa0 [ 717.086067][T21279] ? inet_send_prepare+0x260/0x260 [ 717.091219][T21279] ____sys_sendmsg+0x5b7/0x8f0 [ 717.096033][T21279] ? __sys_sendmsg_sock+0x30/0x30 [ 717.101104][T21279] ? import_iovec+0x6f/0xa0 [ 717.105657][T21279] ___sys_sendmsg+0x236/0x2e0 [ 717.110389][T21279] ? __sys_sendmsg+0x2a0/0x2a0 [ 717.110717][T21264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.115203][T21279] ? vfs_write+0x8b2/0xd60 [ 717.115254][T21279] __se_sys_sendmsg+0x1af/0x290 [ 717.115282][T21279] ? __x64_sys_sendmsg+0x80/0x80 [ 717.115305][T21279] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 717.115345][T21279] ? lockdep_hardirqs_on+0x94/0x140 [ 717.115374][T21279] do_syscall_64+0x4c/0xa0 [ 717.154269][T21279] ? clear_bhb_loop+0x30/0x80 [ 717.158980][T21279] ? clear_bhb_loop+0x30/0x80 [ 717.163700][T21279] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 717.169636][T21279] RIP: 0033:0x7f9af16c4f79 [ 717.174079][T21279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.191585][T21264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.193712][T21279] RSP: 002b:00007f9aef91f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.193740][T21279] RAX: ffffffffffffffda RBX: 00007f9af193efa0 RCX: 00007f9af16c4f79 [ 717.193757][T21279] RDX: 0000000024040080 RSI: 0000200000000480 RDI: 0000000000000003 [ 717.193771][T21279] RBP: 00007f9aef91f090 R08: 0000000000000000 R09: 0000000000000000 [ 717.193785][T21279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.193797][T21279] R13: 00007f9af193f038 R14: 00007f9af193efa0 R15: 00007ffecaf05e78 [ 717.251191][T21279] [ 717.328924][T21264] team0: Port device team_slave_0 added [ 718.322206][ T6952] Bluetooth: hci4: command 0x0409 tx timeout [ 719.958551][T21264] team0: Port device team_slave_1 added [ 720.402053][ T6952] Bluetooth: hci4: command 0x041b tx timeout [ 721.707834][T21299] syz.4.5952[21299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 721.708264][T21299] syz.4.5952[21299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 722.482087][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 724.562038][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 724.775231][T21264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.804957][T21264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.839151][T21264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.852255][T21264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.866216][T21264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.905458][T21307] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.5955'. [ 724.915798][T21264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.037990][T21264] device hsr_slave_0 entered promiscuous mode [ 725.053026][T21264] device hsr_slave_1 entered promiscuous mode [ 725.091981][T21264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.108386][T21264] Cannot create hsr debugfs directory [ 725.123867][T21314] sctp: [Deprecated]: syz.5.5957 (pid 21314) Use of int in maxseg socket option. [ 725.123867][T21314] Use struct sctp_assoc_value instead [ 725.176529][T21314] netlink: 'syz.5.5957': attribute type 49 has an invalid length. [ 725.277555][T21317] device syzkaller0 entered promiscuous mode [ 725.311707][T19114] syzkaller0: tun_net_xmit 48 [ 725.343478][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.468317][T21326] sctp: [Deprecated]: syz.5.5963 (pid 21326) Use of int in maxseg socket option. [ 725.468317][T21326] Use struct sctp_assoc_value instead [ 725.494843][T21317] netlink: 'syz.0.5958': attribute type 3 has an invalid length. [ 725.509166][T21317] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5958'. [ 725.555836][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.568760][T21330] netlink: 'syz.5.5963': attribute type 49 has an invalid length. [ 725.596377][T21328] netlink: 'syz.1.5964': attribute type 21 has an invalid length. [ 725.605275][T21328] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5964'. [ 725.629629][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.997333][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.069034][T21337] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5967'. [ 728.277864][T21344] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5970'. [ 728.631523][T21353] sctp: [Deprecated]: syz.1.5974 (pid 21353) Use of int in maxseg socket option. [ 728.631523][T21353] Use struct sctp_assoc_value instead [ 728.737874][T21353] netlink: 'syz.1.5974': attribute type 49 has an invalid length. [ 731.009009][T21360] netlink: 'syz.5.5976': attribute type 21 has an invalid length. [ 731.019255][T21360] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5976'. [ 731.366371][T21381] device syzkaller0 entered promiscuous mode [ 731.400667][ T6952] syzkaller0: tun_net_xmit 48 [ 731.454346][T21386] syz.5.5981 (21386) used obsolete PPPIOCDETACH ioctl [ 731.559349][T21264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 731.576689][T21381] netlink: 'syz.0.5979': attribute type 3 has an invalid length. [ 731.599379][T21381] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5979'. [ 731.645015][T21264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 731.776027][T21264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 731.995748][T21264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 732.755474][T21413] netlink: 'syz.0.5985': attribute type 10 has an invalid length. [ 732.879750][T21264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.952715][T21426] sctp: [Deprecated]: syz.0.5990 (pid 21426) Use of int in maxseg socket option. [ 732.952715][T21426] Use struct sctp_assoc_value instead [ 735.127045][T21426] netlink: 'syz.0.5990': attribute type 49 has an invalid length. [ 735.176618][T21437] netlink: 'syz.4.5992': attribute type 1 has an invalid length. [ 735.317162][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 735.340797][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 735.376557][T21264] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.436234][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 735.463520][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 735.474247][ T431] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.481367][ T431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.524762][T21443] device syzkaller0 entered promiscuous mode [ 735.548803][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 735.577168][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 735.588803][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 735.597736][ T431] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.604869][ T431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.616111][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 735.642395][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 735.663423][T21450] netlink: 'syz.5.5994': attribute type 3 has an invalid length. [ 735.673109][T21450] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5994'. [ 735.683363][T19117] syzkaller0: tun_net_xmit 48 [ 735.712479][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 735.731485][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 735.765475][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 735.784729][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 735.813576][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 735.893448][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 735.904987][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 735.920817][T21264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 735.934336][T21264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 735.948202][ T144] device hsr_slave_0 left promiscuous mode [ 735.960380][ T144] device hsr_slave_1 left promiscuous mode [ 735.991184][ T144] device bridge_slave_1 left promiscuous mode [ 736.004203][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.017499][ T144] device bridge_slave_0 left promiscuous mode [ 736.024347][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.039031][ T144] device veth1_macvtap left promiscuous mode [ 736.045486][ T144] device veth0_macvtap left promiscuous mode [ 736.051690][ T144] device veth1_vlan left promiscuous mode [ 736.059972][ T144] device veth0_vlan left promiscuous mode [ 736.428562][ T144] team0 (unregistering): Port device team_slave_1 removed [ 736.455891][ T144] team0 (unregistering): Port device team_slave_0 removed [ 736.742475][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 736.766157][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 736.818732][T21459] netlink: 'syz.1.5999': attribute type 10 has an invalid length. [ 737.336699][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 737.348094][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 737.395028][T21264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.437183][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 737.462868][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 737.479532][T21480] sctp: [Deprecated]: syz.4.6005 (pid 21480) Use of int in maxseg socket option. [ 737.479532][T21480] Use struct sctp_assoc_value instead [ 737.538634][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 737.555577][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 737.588507][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 737.618100][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 737.645140][T21480] netlink: 'syz.4.6005': attribute type 49 has an invalid length. [ 737.665536][T21264] device veth0_vlan entered promiscuous mode [ 737.705021][T21264] device veth1_vlan entered promiscuous mode [ 737.753175][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 737.774056][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 737.811347][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 737.830719][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 737.856778][T21264] device veth0_macvtap entered promiscuous mode [ 737.868223][T21264] device veth1_macvtap entered promiscuous mode [ 737.919850][T21264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.938599][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 737.948517][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 737.969775][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 737.986036][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 738.015676][T21264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.036168][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 738.050577][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 738.077365][T21264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.096049][T21264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.118419][T21264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.140545][T21264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.629729][T21498] netlink: 'syz.0.6011': attribute type 3 has an invalid length. [ 740.655622][T21498] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6011'. [ 740.693933][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.715439][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.746140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 740.817911][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.829735][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.867047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 740.968932][T21507] netlink: 'syz.0.6014': attribute type 3 has an invalid length. [ 741.006820][T21507] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6014'. [ 741.247646][T21521] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 741.257006][T21521] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 741.267586][T21521] device veth0_to_bridge entered promiscuous mode [ 741.851443][T21535] netlink: 'syz.4.6023': attribute type 3 has an invalid length. [ 741.890028][T21535] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6023'. [ 741.920228][T21537] syz.3.6024[21537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 741.920763][T21537] syz.3.6024[21537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 741.949289][T21537] FAULT_INJECTION: forcing a failure. [ 741.949289][T21537] name failslab, interval 1, probability 0, space 0, times 0 [ 741.977285][T21537] CPU: 1 PID: 21537 Comm: syz.3.6024 Not tainted syzkaller #0 [ 741.984799][T21537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 741.994898][T21537] Call Trace: [ 741.998210][T21537] [ 742.001168][T21537] dump_stack_lvl+0x188/0x250 [ 742.005898][T21537] ? verify_lock_unused+0x140/0x140 [ 742.011146][T21537] ? show_regs_print_info+0x20/0x20 [ 742.016390][T21537] ? load_image+0x400/0x400 [ 742.020949][T21537] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 742.026990][T21537] should_fail+0x38c/0x4c0 [ 742.031547][T21537] should_failslab+0x5/0x20 [ 742.036088][T21537] slab_pre_alloc_hook+0x51/0xc0 [ 742.041155][T21537] ? skb_clone+0x1bd/0x350 [ 742.045608][T21537] kmem_cache_alloc+0x3d/0x290 [ 742.050423][T21537] skb_clone+0x1bd/0x350 [ 742.054798][T21537] bpf_clone_redirect+0x15f/0x470 [ 742.059972][T21537] ? ktime_get+0x247/0x270 [ 742.064432][T21537] bpf_prog_2ed4f07f6b249946+0x19/0xc54 [ 742.070147][T21537] bpf_test_run+0x2a8/0x800 [ 742.074707][T21537] ? convert___skb_to_skb+0x4c0/0x4c0 [ 742.080247][T21537] ? convert___skb_to_skb+0x3d/0x4c0 [ 742.085578][T21537] bpf_prog_test_run_skb+0x9cc/0x1180 [ 742.091010][T21537] ? cpu_online+0x60/0x60 [ 742.095378][T21537] bpf_prog_test_run+0x31e/0x390 [ 742.100495][T21537] __sys_bpf+0x5a5/0x6f0 [ 742.104788][T21537] ? bpf_link_show_fdinfo+0x380/0x380 [ 742.110243][T21537] ? vtime_user_exit+0x2c8/0x3e0 [ 742.115242][T21537] __x64_sys_bpf+0x78/0x90 [ 742.119708][T21537] do_syscall_64+0x4c/0xa0 [ 742.124164][T21537] ? clear_bhb_loop+0x30/0x80 [ 742.128896][T21537] ? clear_bhb_loop+0x30/0x80 [ 742.133624][T21537] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 742.140235][T21537] RIP: 0033:0x7f4d23935f79 [ 742.144682][T21537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.164334][T21537] RSP: 002b:00007f4d21b90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 742.172841][T21537] RAX: ffffffffffffffda RBX: 00007f4d23baffa0 RCX: 00007f4d23935f79 [ 742.180858][T21537] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 742.188864][T21537] RBP: 00007f4d21b90090 R08: 0000000000000000 R09: 0000000000000000 [ 742.196880][T21537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.204903][T21537] R13: 00007f4d23bb0038 R14: 00007f4d23baffa0 R15: 00007ffdf2d12948 [ 742.213017][T21537] [ 744.245390][T21568] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 744.252792][T21568] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 744.260888][T21568] device veth0_to_bridge entered promiscuous mode [ 745.081526][T21580] netlink: 'syz.4.6035': attribute type 3 has an invalid length. [ 745.129873][T21580] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6035'. [ 745.363070][T21590] FAULT_INJECTION: forcing a failure. [ 745.363070][T21590] name failslab, interval 1, probability 0, space 0, times 0 [ 745.393342][T21590] CPU: 0 PID: 21590 Comm: syz.4.6041 Not tainted syzkaller #0 [ 745.400961][T21590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 745.411050][T21590] Call Trace: [ 745.414357][T21590] [ 745.417320][T21590] dump_stack_lvl+0x188/0x250 [ 745.422567][T21590] ? show_regs_print_info+0x20/0x20 [ 745.427814][T21590] ? load_image+0x400/0x400 [ 745.432381][T21590] should_fail+0x38c/0x4c0 [ 745.436843][T21590] should_failslab+0x5/0x20 [ 745.441477][T21590] slab_pre_alloc_hook+0x51/0xc0 [ 745.446451][T21590] kmem_cache_alloc_trace+0x47/0x2a0 [ 745.451764][T21590] ? sctp_add_bind_addr+0x89/0x350 [ 745.456920][T21590] ? get_random_bytes+0x20/0x20 [ 745.461814][T21590] sctp_add_bind_addr+0x89/0x350 [ 745.466795][T21590] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 745.472473][T21590] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 745.478590][T21590] ? sctp_v4_is_any+0x31/0x50 [ 745.483318][T21590] ? sctp_copy_one_addr+0x93/0x660 [ 745.488469][T21590] sctp_bind_addr_copy+0xaf/0x3c0 [ 745.493527][T21590] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 745.499901][T21590] sctp_connect_new_asoc+0x2f5/0x6a0 [ 745.505225][T21590] ? __sctp_connect+0xd80/0xd80 [ 745.510114][T21590] ? __local_bh_enable_ip+0x136/0x1c0 [ 745.515558][T21590] ? _local_bh_enable+0xa0/0xa0 [ 745.520446][T21590] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 745.526024][T21590] ? security_sctp_bind_connect+0x85/0xb0 [ 745.531780][T21590] sctp_sendmsg+0x158d/0x2900 [ 745.536571][T21590] ? aa_sk_perm+0x7dc/0x910 [ 745.541111][T21590] ? sctp_getsockopt+0x8a0/0x8a0 [ 745.546087][T21590] ? aa_af_perm+0x340/0x340 [ 745.550618][T21590] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 745.557070][T21590] ? sock_rps_record_flow+0x17/0x3b0 [ 745.562431][T21590] ? inet_sendmsg+0x78/0x2f0 [ 745.567053][T21590] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 745.572369][T21590] ? security_socket_sendmsg+0x7c/0xa0 [ 745.577859][T21590] ? inet_send_prepare+0x260/0x260 [ 745.582997][T21590] ____sys_sendmsg+0x5b7/0x8f0 [ 745.587799][T21590] ? __sys_sendmsg_sock+0x30/0x30 [ 745.592874][T21590] ? import_iovec+0x6f/0xa0 [ 745.597667][T21590] ___sys_sendmsg+0x236/0x2e0 [ 745.602399][T21590] ? __sys_sendmsg+0x2a0/0x2a0 [ 745.607291][T21590] ? vfs_write+0x8b2/0xd60 [ 745.611770][T21590] __se_sys_sendmsg+0x1af/0x290 [ 745.616671][T21590] ? __x64_sys_sendmsg+0x80/0x80 [ 745.621658][T21590] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 745.627692][T21590] ? lockdep_hardirqs_on+0x94/0x140 [ 745.632952][T21590] do_syscall_64+0x4c/0xa0 [ 745.637398][T21590] ? clear_bhb_loop+0x30/0x80 [ 745.642110][T21590] ? clear_bhb_loop+0x30/0x80 [ 745.646839][T21590] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 745.652770][T21590] RIP: 0033:0x7f5f19ee7f79 [ 745.657220][T21590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.676863][T21590] RSP: 002b:00007f5f18142028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.685365][T21590] RAX: ffffffffffffffda RBX: 00007f5f1a161fa0 RCX: 00007f5f19ee7f79 [ 745.693360][T21590] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 745.701360][T21590] RBP: 00007f5f18142090 R08: 0000000000000000 R09: 0000000000000000 [ 745.709442][T21590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.717435][T21590] R13: 00007f5f1a162038 R14: 00007f5f1a161fa0 R15: 00007fffd5258748 [ 745.725444][T21590] [ 746.117671][T21617] netlink: 'syz.4.6051': attribute type 10 has an invalid length. [ 746.246066][T21617] bond0: (slave bond_slave_0): Releasing backup interface [ 746.351997][T21610] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 746.361342][T21610] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 746.392074][T21610] device veth0_to_bridge entered promiscuous mode [ 746.479676][T21629] device syzkaller0 entered promiscuous mode [ 746.523453][T19117] syzkaller0: tun_net_xmit 48 [ 747.124898][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.132585][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.386439][T21651] sctp: [Deprecated]: syz.4.6062 (pid 21651) Use of int in maxseg socket option. [ 747.386439][T21651] Use struct sctp_assoc_value instead [ 747.434787][T21656] syz.1.6063[21656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 747.435287][T21656] syz.1.6063[21656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 747.483757][T21655] netlink: 'syz.5.6061': attribute type 15 has an invalid length. [ 747.514425][T21655] netlink: 'syz.5.6061': attribute type 7 has an invalid length. [ 749.122051][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 749.911638][T21655] device syzkaller0 entered promiscuous mode [ 749.936483][T21659] netlink: 'syz.3.6064': attribute type 10 has an invalid length. [ 749.947053][T21659] bond0: (slave bond_slave_0): Releasing backup interface [ 750.208359][T21645] chnl_net:caif_netlink_parms(): no params data found [ 750.297269][T21683] device syzkaller0 entered promiscuous mode [ 750.312681][T19108] syzkaller0: tun_net_xmit 48 [ 750.366204][T21682] syz.5.6072[21682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 750.366636][T21682] syz.5.6072[21682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 750.445846][T21645] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.486497][T21645] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.511424][T21645] device bridge_slave_0 entered promiscuous mode [ 750.530652][T21645] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.547376][T21645] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.566073][T21645] device bridge_slave_1 entered promiscuous mode [ 750.640029][T21645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.669980][T21645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.760675][T21645] team0: Port device team_slave_0 added [ 750.785752][T21645] team0: Port device team_slave_1 added [ 750.855763][T21645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.874313][T21645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.959801][T21645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.009287][T21645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.046666][T21645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.184318][T21645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.202011][T19116] Bluetooth: hci5: command 0x041b tx timeout [ 752.876931][T21698] sctp: [Deprecated]: syz.3.6076 (pid 21698) Use of int in maxseg socket option. [ 752.876931][T21698] Use struct sctp_assoc_value instead [ 752.947689][T21645] device hsr_slave_0 entered promiscuous mode [ 752.977299][T21645] device hsr_slave_1 entered promiscuous mode [ 753.024280][T21645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 753.044294][T21645] Cannot create hsr debugfs directory [ 753.086001][T21701] netlink: 'syz.1.6077': attribute type 10 has an invalid length. [ 753.292187][T19108] Bluetooth: hci5: command 0x040f tx timeout [ 753.369169][T21645] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.402945][T21716] syz.5.6082[21716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 753.403061][T21716] syz.5.6082[21716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 753.589100][T21645] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.663140][T21645] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.757129][T21645] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.922415][T21645] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 753.933530][T21645] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 753.950906][T21645] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 753.989794][T21645] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 754.102848][T21645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.120261][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 754.133057][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 754.144980][T21645] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.192193][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 754.225291][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 754.261112][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.268297][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.279202][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 754.301374][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 754.311134][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 754.320036][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.327228][ T4265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.360390][T21740] sctp: [Deprecated]: syz.1.6089 (pid 21740) Use of int in maxseg socket option. [ 754.360390][T21740] Use struct sctp_assoc_value instead [ 754.401090][T21736] device syzkaller0 entered promiscuous mode [ 754.436890][ T4239] syzkaller0: tun_net_xmit 48 [ 754.456459][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 754.498554][T21744] netlink: 'syz.5.6092': attribute type 10 has an invalid length. [ 754.527469][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 754.562548][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 754.584503][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 754.607099][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 754.749741][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 754.791522][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 754.860236][T21645] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 754.873641][T21645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 754.896473][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 754.910105][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 754.921677][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 754.931458][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 754.944836][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 755.362254][T19114] Bluetooth: hci5: command 0x0419 tx timeout [ 757.695936][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 757.711324][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 757.726435][T21645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.755360][ T4279] team0: Port device wlan1 removed [ 757.819596][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 757.833833][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 757.931177][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 757.991706][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 758.097851][T21645] device veth0_vlan entered promiscuous mode [ 758.122127][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 758.134556][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 758.156026][T21645] device veth1_vlan entered promiscuous mode [ 758.210244][ T4279] device veth0_to_bridge left promiscuous mode [ 758.235305][ T4279] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 758.285404][ T4279] device hsr_slave_0 left promiscuous mode [ 758.298022][ T4279] device hsr_slave_1 left promiscuous mode [ 758.308431][ T4279] device bridge_slave_0 left promiscuous mode [ 758.320242][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.346328][ T4279] device veth1_macvtap left promiscuous mode [ 758.357276][ T4279] device veth0_macvtap left promiscuous mode [ 758.370005][ T4279] device veth0_vlan left promiscuous mode [ 758.733704][ T4279] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 758.938376][ T4279] team0 (unregistering): Port device team_slave_1 removed [ 758.961588][ T4279] team0 (unregistering): Port device team_slave_0 removed [ 758.979937][ T4279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.010437][ T4279] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 759.085077][ T4279] bond0 (unregistering): (slave team0): Releasing backup interface [ 759.113873][ T4279] bond0 (unregistering): Released all slaves [ 759.250257][T21779] netlink: 'syz.3.6103': attribute type 10 has an invalid length. [ 759.332394][T21785] device syzkaller0 entered promiscuous mode [ 759.339980][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 759.368397][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 759.387047][T21645] device veth0_macvtap entered promiscuous mode [ 759.407341][T19108] syzkaller0: tun_net_xmit 48 [ 759.464833][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 759.497094][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 759.529921][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 759.547545][T21645] device veth1_macvtap entered promiscuous mode [ 759.634967][T21645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.654717][T21645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.676433][T21645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.697347][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 759.713950][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 759.725944][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 759.737075][T21645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.750832][T21645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.769226][T21645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.777815][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 759.790427][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 759.804747][T21645] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.817488][T21645] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.827331][T21645] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.839272][T21645] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.365492][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.396809][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.473308][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 762.548350][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.559397][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.587787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 762.772426][T21813] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.6115'. [ 762.788590][T21816] FAULT_INJECTION: forcing a failure. [ 762.788590][T21816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.814195][T21816] CPU: 0 PID: 21816 Comm: syz.3.6116 Not tainted syzkaller #0 [ 762.821771][T21816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 762.831867][T21816] Call Trace: [ 762.835192][T21816] [ 762.838151][T21816] dump_stack_lvl+0x188/0x250 [ 762.842875][T21816] ? show_regs_print_info+0x20/0x20 [ 762.848139][T21816] ? load_image+0x400/0x400 [ 762.852684][T21816] ? __lock_acquire+0x7d10/0x7d10 [ 762.857763][T21816] should_fail+0x38c/0x4c0 [ 762.862223][T21816] _copy_from_user+0x2e/0x170 [ 762.867038][T21816] __copy_msghdr_from_user+0xc9/0x630 [ 762.872471][T21816] ? verify_lock_unused+0x140/0x140 [ 762.877356][T21817] syz.0.6057[21817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 762.877716][T21816] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 762.877839][T21817] syz.0.6057[21817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 762.889226][T21816] ___sys_sendmsg+0x19a/0x2e0 [ 762.889270][T21816] ? __sys_sendmsg+0x2a0/0x2a0 [ 762.889320][T21816] ? vfs_write+0x8b2/0xd60 [ 762.920030][T21816] __se_sys_sendmsg+0x1af/0x290 [ 762.924942][T21816] ? __x64_sys_sendmsg+0x80/0x80 [ 762.929931][T21816] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 762.935985][T21816] ? lockdep_hardirqs_on+0x94/0x140 [ 762.941242][T21816] do_syscall_64+0x4c/0xa0 [ 762.945712][T21816] ? clear_bhb_loop+0x30/0x80 [ 762.950440][T21816] ? clear_bhb_loop+0x30/0x80 [ 762.955169][T21816] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 762.961110][T21816] RIP: 0033:0x7f4d23935f79 [ 762.965581][T21816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.985335][T21816] RSP: 002b:00007f4d21b90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.993806][T21816] RAX: ffffffffffffffda RBX: 00007f4d23baffa0 RCX: 00007f4d23935f79 [ 763.001829][T21816] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 763.009853][T21816] RBP: 00007f4d21b90090 R08: 0000000000000000 R09: 0000000000000000 [ 763.017887][T21816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.025903][T21816] R13: 00007f4d23bb0038 R14: 00007f4d23baffa0 R15: 00007ffdf2d12948 [ 763.034042][T21816] [ 763.095201][T21815] FAULT_INJECTION: forcing a failure. [ 763.095201][T21815] name failslab, interval 1, probability 0, space 0, times 0 [ 763.136912][T21815] CPU: 1 PID: 21815 Comm: syz.0.6057 Not tainted syzkaller #0 [ 763.144421][T21815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 763.154514][T21815] Call Trace: [ 763.157818][T21815] [ 763.160751][T21815] dump_stack_lvl+0x188/0x250 [ 763.165451][T21815] ? show_regs_print_info+0x20/0x20 [ 763.170697][T21815] ? load_image+0x400/0x400 [ 763.175332][T21815] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 763.181353][T21815] ? lock_chain_count+0x20/0x20 [ 763.186245][T21815] ? rcu_is_watching+0x11/0xa0 [ 763.191051][T21815] should_fail+0x38c/0x4c0 [ 763.195519][T21815] should_failslab+0x5/0x20 [ 763.200059][T21815] slab_pre_alloc_hook+0x51/0xc0 [ 763.205029][T21815] ? skb_clone+0x1bd/0x350 [ 763.209479][T21815] kmem_cache_alloc+0x3d/0x290 [ 763.214306][T21815] skb_clone+0x1bd/0x350 [ 763.218592][T21815] bpf_clone_redirect+0x15f/0x470 [ 763.223658][T21815] ? ktime_get+0x247/0x270 [ 763.228118][T21815] bpf_prog_2ed4f07f6b249946+0x19/0x464 [ 763.233895][T21815] bpf_test_run+0x2a8/0x800 [ 763.238449][T21815] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 763.244678][T21815] ? convert___skb_to_skb+0x4c0/0x4c0 [ 763.250096][T21815] ? eth_get_headlen+0x200/0x200 [ 763.255074][T21815] ? __build_skb+0x1e2/0x2e0 [ 763.259698][T21815] ? convert___skb_to_skb+0x3d/0x4c0 [ 763.265019][T21815] bpf_prog_test_run_skb+0x9cc/0x1180 [ 763.270440][T21815] ? cpu_online+0x60/0x60 [ 763.274796][T21815] bpf_prog_test_run+0x31e/0x390 [ 763.279773][T21815] __sys_bpf+0x5a5/0x6f0 [ 763.284053][T21815] ? bpf_link_show_fdinfo+0x380/0x380 [ 763.289496][T21815] __x64_sys_bpf+0x78/0x90 [ 763.293977][T21815] do_syscall_64+0x4c/0xa0 [ 763.298435][T21815] ? clear_bhb_loop+0x30/0x80 [ 763.303152][T21815] ? clear_bhb_loop+0x30/0x80 [ 763.307872][T21815] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 763.313827][T21815] RIP: 0033:0x7efcf3dd0f79 [ 763.318280][T21815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.328633][T21823] netlink: 'syz.5.6117': attribute type 10 has an invalid length. [ 763.338036][T21815] RSP: 002b:00007efcf202b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 763.338084][T21815] RAX: ffffffffffffffda RBX: 00007efcf404afa0 RCX: 00007efcf3dd0f79 [ 763.338101][T21815] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 763.338116][T21815] RBP: 00007efcf202b090 R08: 0000000000000000 R09: 0000000000000000 [ 763.338130][T21815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.338144][T21815] R13: 00007efcf404b038 R14: 00007efcf404afa0 R15: 00007ffdd110ab68 [ 763.338179][T21815] [ 764.130694][T21826] device syzkaller0 entered promiscuous mode [ 764.174320][T19108] syzkaller0: tun_net_xmit 48 [ 764.302431][T21828] netlink: 'syz.5.6119': attribute type 3 has an invalid length. [ 764.310241][T21828] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6119'. [ 768.642132][T19116] Bluetooth: hci3: command 0x0409 tx timeout [ 769.087629][T21854] netlink: 'syz.5.6129': attribute type 10 has an invalid length. [ 769.182928][T21861] device syzkaller0 entered promiscuous mode [ 769.207105][T21842] chnl_net:caif_netlink_parms(): no params data found [ 769.296888][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.344736][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.397477][T21842] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.415255][T21842] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.437427][T21842] device bridge_slave_0 entered promiscuous mode [ 769.464619][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.500832][T21842] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.510470][T21842] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.523167][T21842] device bridge_slave_1 entered promiscuous mode [ 769.560818][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.625732][T21842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.644197][T21893] netlink: 'syz.4.6144': attribute type 41 has an invalid length. [ 769.668177][T21842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.743226][T21842] team0: Port device team_slave_0 added [ 769.779670][T21842] team0: Port device team_slave_1 added [ 769.844432][T21842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.851529][T21842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.976629][T21842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.999426][T21842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.016928][T21842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.086917][T21842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.389527][T21842] device hsr_slave_0 entered promiscuous mode [ 770.446743][T21842] device hsr_slave_1 entered promiscuous mode [ 770.467428][T21842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 770.498873][T21842] Cannot create hsr debugfs directory [ 770.733289][T19116] Bluetooth: hci3: command 0x041b tx timeout [ 772.802279][T19116] Bluetooth: hci3: command 0x040f tx timeout [ 773.911633][T21977] Ÿë: port 1(gretap0) entered blocking state [ 773.931192][T21977] Ÿë: port 1(gretap0) entered disabled state [ 773.969101][T21977] device gretap0 entered promiscuous mode [ 774.038395][T21971] Ÿë: port 2(veth0_to_team) entered blocking state [ 774.049594][T21971] Ÿë: port 2(veth0_to_team) entered disabled state [ 774.068604][T21971] device veth0_to_team entered promiscuous mode [ 774.216324][T21990] ------------[ cut here ]------------ [ 774.229301][T21990] trace type BPF program uses run-time allocation [ 774.249647][T21990] WARNING: CPU: 0 PID: 21990 at kernel/bpf/verifier.c:11750 check_map_prog_compatibility+0x6cf/0x870 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 774.282790][T21990] Modules linked in: [ 774.297193][T21990] CPU: 0 PID: 21990 Comm: syz.5.6175 Not tainted syzkaller #0 [ 774.324544][T21990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 774.462419][T21842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 774.531948][T21990] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 774.581563][T21990] Code: ff e8 d5 b6 ef ff 48 c7 c6 20 42 31 8a e9 0d fd ff ff e8 c4 b6 ef ff c6 05 92 c7 ec 0b 01 48 c7 c7 80 3e 31 8a e8 d1 bd 27 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 774.696540][T21990] RSP: 0018:ffffc900031bf450 EFLAGS: 00010246 [ 774.732418][T21990] RAX: 1ae7d8fb53f65c00 RBX: 0000000000000001 RCX: 0000000000080000 [ 774.740551][T21990] RDX: ffffc90010861000 RSI: 0000000000002c2d RDI: 0000000000002c2e [ 774.801906][T21990] RBP: ffff888051360000 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 774.827274][T21990] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffffc900012be038 [ 774.872557][T21990] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000257c07 [ 774.880905][T21990] FS: 00007f481033c6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 774.909185][T19108] Bluetooth: hci3: command 0x0419 tx timeout [ 774.932262][T21990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 774.938928][T21990] CR2: 000055e411a70078 CR3: 0000000062f8c000 CR4: 00000000003506e0 [ 774.955280][T21990] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 774.978325][T21990] DR3: 0000000000000000 DR6: 00000000ffff0ff3 DR7: 0000000000000600 [ 774.988803][T21990] Call Trace: [ 774.997701][T21990] [ 775.000702][T21990] resolve_pseudo_ldimm64+0x681/0x1040 [ 775.006379][T21990] ? check_attach_btf_id+0xe70/0xe70 [ 775.032856][T21990] ? __mark_reg_known+0x1a0/0x1a0 [ 775.052872][T21990] bpf_check+0x4e00/0xf270 [ 775.057382][T21990] ? mark_lock+0x94/0x320 [ 775.061753][T21990] ? __lock_acquire+0x13bc/0x7d10 [ 775.086987][T21990] ? bpf_get_btf_vmlinux+0x10/0x10 [ 775.099186][T21990] ? mark_lock+0x94/0x320 [ 775.105290][T21990] ? verify_lock_unused+0x140/0x140 [ 775.110554][T21990] ? __mutex_trylock_common+0x155/0x260 [ 775.117558][T21990] ? verify_lock_unused+0x140/0x140 [ 775.123249][T21990] ? rcu_lock_release+0x5/0x20 [ 775.128078][T21990] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 775.154363][T21990] ? lock_chain_count+0x20/0x20 [ 775.159316][T21990] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 775.183961][T21990] ? lockdep_hardirqs_on+0x94/0x140 [ 775.189341][T21990] ? ktime_get_with_offset+0xff/0x320 [ 775.200205][T21990] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 775.208241][T21990] ? ktime_get_real_ts64+0x440/0x440 [ 775.219268][T21990] ? pcpu_alloc+0x1121/0x1770 [ 775.225898][T21990] ? __might_fault+0xb3/0x110 [ 775.230638][T21990] ? memset+0x1e/0x40 [ 775.261907][T21990] ? bpf_obj_name_cpy+0x190/0x1d0 [ 775.267017][T21990] bpf_prog_load+0xfec/0x1510 [ 775.271750][T21990] ? map_freeze+0x350/0x350 [ 775.281522][T21990] ? __might_fault+0xb7/0x110 [ 775.301920][T21990] ? __might_fault+0xb3/0x110 [ 775.306687][T21990] ? bpf_lsm_bpf+0x5/0x10 [ 775.311059][T21990] ? security_bpf+0x7a/0xa0 [ 775.319653][T21990] __sys_bpf+0x532/0x6f0 [ 775.329490][T21990] ? bpf_link_show_fdinfo+0x380/0x380 [ 775.336209][T21990] ? vtime_user_exit+0x2c8/0x3e0 [ 775.341303][T21990] __x64_sys_bpf+0x78/0x90 [ 775.346376][T21990] do_syscall_64+0x4c/0xa0 [ 775.350843][T21990] ? clear_bhb_loop+0x30/0x80 [ 775.359891][T21990] ? clear_bhb_loop+0x30/0x80 [ 775.365056][T21990] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 775.370996][T21990] RIP: 0033:0x7f48120e1f79 [ 775.385173][T21990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.461990][T21990] RSP: 002b:00007f481033c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 775.470503][T21990] RAX: ffffffffffffffda RBX: 00007f481235bfa0 RCX: 00007f48120e1f79 [ 775.516177][T21990] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 775.529670][T21990] RBP: 00007f48121787e0 R08: 0000000000000000 R09: 0000000000000000 [ 775.546579][T21990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.557644][T21990] R13: 00007f481235c038 R14: 00007f481235bfa0 R15: 00007fff183c9cd8 [ 775.569984][T21990] [ 775.581921][T21990] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 775.589265][T21990] CPU: 0 PID: 21990 Comm: syz.5.6175 Not tainted syzkaller #0 [ 775.596769][T21990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 775.606868][T21990] Call Trace: [ 775.610341][T21990] [ 775.613328][T21990] dump_stack_lvl+0x188/0x250 [ 775.618059][T21990] ? show_regs_print_info+0x20/0x20 [ 775.623264][T21990] ? load_image+0x400/0x400 [ 775.627785][T21990] panic+0x2e5/0x810 [ 775.631692][T21990] ? bpf_jit_dump+0xd0/0xd0 [ 775.636212][T21990] ? check_map_prog_compatibility+0x6cf/0x870 [ 775.642302][T21990] __warn+0x248/0x2b0 [ 775.646343][T21990] ? check_map_prog_compatibility+0x6cf/0x870 [ 775.652447][T21990] report_bug+0x1b7/0x2e0 [ 775.656821][T21990] handle_bug+0x3a/0x70 [ 775.661010][T21990] exc_invalid_op+0x16/0x40 [ 775.665548][T21990] asm_exc_invalid_op+0x16/0x20 [ 775.670443][T21990] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 775.677165][T21990] Code: ff e8 d5 b6 ef ff 48 c7 c6 20 42 31 8a e9 0d fd ff ff e8 c4 b6 ef ff c6 05 92 c7 ec 0b 01 48 c7 c7 80 3e 31 8a e8 d1 bd 27 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 775.696919][T21990] RSP: 0018:ffffc900031bf450 EFLAGS: 00010246 [ 775.703165][T21990] RAX: 1ae7d8fb53f65c00 RBX: 0000000000000001 RCX: 0000000000080000 [ 775.711176][T21990] RDX: ffffc90010861000 RSI: 0000000000002c2d RDI: 0000000000002c2e [ 775.719281][T21990] RBP: ffff888051360000 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 775.727292][T21990] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffffc900012be038 [ 775.735304][T21990] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000257c07 [ 775.743336][T21990] resolve_pseudo_ldimm64+0x681/0x1040 [ 775.748854][T21990] ? check_attach_btf_id+0xe70/0xe70 [ 775.754181][T21990] ? __mark_reg_known+0x1a0/0x1a0 [ 775.759252][T21990] bpf_check+0x4e00/0xf270 [ 775.763732][T21990] ? mark_lock+0x94/0x320 [ 775.768109][T21990] ? __lock_acquire+0x13bc/0x7d10 [ 775.773175][T21990] ? bpf_get_btf_vmlinux+0x10/0x10 [ 775.778318][T21990] ? mark_lock+0x94/0x320 [ 775.782676][T21990] ? verify_lock_unused+0x140/0x140 [ 775.787922][T21990] ? __mutex_trylock_common+0x155/0x260 [ 775.793511][T21990] ? verify_lock_unused+0x140/0x140 [ 775.798755][T21990] ? rcu_lock_release+0x5/0x20 [ 775.803589][T21990] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 775.809619][T21990] ? lock_chain_count+0x20/0x20 [ 775.814517][T21990] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 775.820805][T21990] ? lockdep_hardirqs_on+0x94/0x140 [ 775.826050][T21990] ? ktime_get_with_offset+0xff/0x320 [ 775.831460][T21990] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 775.837740][T21990] ? ktime_get_real_ts64+0x440/0x440 [ 775.843069][T21990] ? pcpu_alloc+0x1121/0x1770 [ 775.847794][T21990] ? __might_fault+0xb3/0x110 [ 775.852506][T21990] ? memset+0x1e/0x40 [ 775.856527][T21990] ? bpf_obj_name_cpy+0x190/0x1d0 [ 775.861609][T21990] bpf_prog_load+0xfec/0x1510 [ 775.866337][T21990] ? map_freeze+0x350/0x350 [ 775.870907][T21990] ? __might_fault+0xb7/0x110 [ 775.875634][T21990] ? __might_fault+0xb3/0x110 [ 775.880349][T21990] ? bpf_lsm_bpf+0x5/0x10 [ 775.884704][T21990] ? security_bpf+0x7a/0xa0 [ 775.889242][T21990] __sys_bpf+0x532/0x6f0 [ 775.893521][T21990] ? bpf_link_show_fdinfo+0x380/0x380 [ 775.898946][T21990] ? vtime_user_exit+0x2c8/0x3e0 [ 775.903917][T21990] __x64_sys_bpf+0x78/0x90 [ 775.908364][T21990] do_syscall_64+0x4c/0xa0 [ 775.912814][T21990] ? clear_bhb_loop+0x30/0x80 [ 775.917526][T21990] ? clear_bhb_loop+0x30/0x80 [ 775.922211][T21990] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 775.928107][T21990] RIP: 0033:0x7f48120e1f79 [ 775.932535][T21990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.952180][T21990] RSP: 002b:00007f481033c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 775.960720][T21990] RAX: ffffffffffffffda RBX: 00007f481235bfa0 RCX: 00007f48120e1f79 [ 775.968693][T21990] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 775.976676][T21990] RBP: 00007f48121787e0 R08: 0000000000000000 R09: 0000000000000000 [ 775.984683][T21990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.992796][T21990] R13: 00007f481235c038 R14: 00007f481235bfa0 R15: 00007fff183c9cd8 [ 776.000817][T21990] [ 776.004181][T21990] Kernel Offset: disabled [ 776.008518][T21990] Rebooting in 86400 seconds..