last executing test programs: 1m26.799849877s ago: executing program 0 (id=1180): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000040000000008000000000dd0000"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000880)=ANY=[@ANYBLOB="1e000000050000000900000078b0000003c00400", @ANYRES32=0x1, @ANYBLOB="100100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000050000000d00000000000000", @ANYRES32, @ANYBLOB="d69181745bc2da9d3d1596e5946cf59ba300"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000018110000c712ac3091a177e726856152f4d0d05fdbf7f58ccfb7c333a681fd02", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x19, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x160, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xed, 0x7, 0x7f, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r7, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1m26.775351949s ago: executing program 3 (id=1181): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800110000000000fd090000000000009520000200000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'vlan0\x00', 0x8000}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200"/12], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002fffffffff3b9b300592d95ce008600000087920406fa01000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000008a000000851000000800000018190000", @ANYRES32=r4, @ANYBLOB="00000000000000005a2000010000000095000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x3, 0x2, &(0x7f0000000340)=""/2, 0x40f00, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0x0, 0x2, 0x3eec4b6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000400), &(0x7f00000005c0)=[{0x5, 0x3, 0x9, 0xb}, {0x2, 0x4, 0x4, 0xb}, {0x5, 0x1, 0xa, 0x1}, {0x1, 0x4, 0x7, 0x6}, {0x4, 0x2, 0x0, 0x3}, {0x5, 0x3, 0x9, 0xc}, {0x1, 0x2, 0x5, 0xc}, {0x1, 0x3, 0x10, 0x7}, {0x5, 0x2, 0x2, 0x1}], 0x10, 0x3b}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a4402789", 0x18}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000bc0)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1080001000002000000000000080005007a010401a80016002000034004020000035c0461c9d67f4f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c851dc0c1cd706ff2f41398d8e7429039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x67857fc2948d4534, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m26.394828601s ago: executing program 1 (id=1184): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xc, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a80016002000014003", 0x39}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m26.212628912s ago: executing program 3 (id=1186): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[], 0x0, 0x4a}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/uts\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1m26.010769223s ago: executing program 1 (id=1188): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="ec000900062b2c25fe800000f7ffffffdc8b851a238466cc80007a000000ad6e911b51818462b4003a00000182", 0x2d}], 0x1}, 0x0) (fail_nth: 2) 1m25.622589376s ago: executing program 0 (id=1189): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xc, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x4000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) 1m25.622191156s ago: executing program 1 (id=1190): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 1m25.412403268s ago: executing program 1 (id=1191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x8, 0x4, 0x9, 0x8, r0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, 0x0, 0x3000c085) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x1, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\x00\x00\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x400, 0xc8, 0x0, 0x2, 0x78, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x5452, &(0x7f0000000600)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\xa1h\xf52\xe4\xc7\xcc!\xe5\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xc5.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96p~\xde\xe0\xc9e\xa2\x96\xa8SW\xfb-3\xafM\xd7\x98\xbdN\x1d\xdc\xf98\xda\xe6\x04\xa0\xac\x1a\xa8\xa1\x12Q\xc0\xbb\xbe\xf1\xdd') r8 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r8, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x0, 0xfffffffd}, 0x80, 0x0}, 0x24040080) 1m25.124396835s ago: executing program 3 (id=1193): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r1}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xb, 0x0, 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9365, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffff7a, 0x0, 0xffffffffffffff4a}, 0x0) r5 = getpid() sendmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="b6bbe7300dd0", 0x6}], 0x1, &(0x7f0000000080)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20}, 0x40000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', r2, 0x4000, r0}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x11, 0x0, 0xb6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@fallback=r3, r2, 0x1b, 0x8, 0x0, @void, @value=r2, @void, @void, r6}, 0x20) 1m25.114480996s ago: executing program 0 (id=1194): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000004000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m25.000024143s ago: executing program 1 (id=1196): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xc, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a80016002000014003", 0x39}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m24.905822438s ago: executing program 0 (id=1197): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000040000000008000000000dd0000"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000880)=ANY=[@ANYBLOB="1e000000050000000900000078b0000003c00400", @ANYRES32=0x1, @ANYBLOB="100100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000050000000d00000000000000", @ANYRES32, @ANYBLOB="d69181745bc2da9d3d1596e5946cf59ba300"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000018110000c712ac3091a177e726856152f4d0d05fdbf7f58ccfb7c333a681fd02", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x19, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x160, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xed, 0x7, 0x7f, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r7, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1m24.860228991s ago: executing program 3 (id=1198): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5c00000014006b", 0x7}, {&(0x7f00000001c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f5189a46cb56c776afa8ec3d4d4d9c0648fc1235d60cb5af5c5a69e10ed9fd4eab69ddc2aaa164899a98ddf3917e3cf33c268b1e65edb1cc7b79e4fa078fd468b9ba0c8b9ecca67339aa435b5b07560e9efc796b2cd8365b072d139c91d164d91b3ed13baff88d2f907aa872f941759607cf723828ff8ca7cbd23522b87271e2a21833dadd8441d17fbe16396d6b7be7dd36744ab593ab1088e1b289f155fff54f2607e86d0ca4fc359285a3c623f60e7886845d6bde1166944a199c9375346532daa770bd9b210be153a7134d86f59081580348bbd2fd6b882e602378331e8b2378de0d366129d512532133a468984aa897575d8b6f684f73dc0445673166f9541dd54fd85acf6bdb952d8ffe52eb4a10851f0bce6e3b5f937a94a22da1c8cd843d5569ddb0600"/331, 0x14b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) r6 = getpid() sendmsg$unix(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="b6bbe7300dd0", 0x6}], 0x1, &(0x7f0000000080)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20}, 0x40000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x23, 0x5, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9, r8}, 0xc) sendmsg(r7, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x40c0) close(0xffffffffffffffff) r13 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114815, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, 0xffffffffffffffff) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x40000c1) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) 1m24.788069454s ago: executing program 2 (id=1199): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 1m24.587143546s ago: executing program 2 (id=1200): perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x26, 0x1, 0x2, &(0x7f0000000080)) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:2'], 0xa) 1m24.52521709s ago: executing program 1 (id=1201): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000008400000000010000010000", @ANYRES32], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000400)=ANY=[@ANYBLOB='c ', @ANYRESOCT], 0x6f) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e033c004d8c71ef288563"], 0xffdd) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000008400000000010000010000", @ANYRES32], 0x50) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async) write$cgroup_devices(r2, &(0x7f0000000400)=ANY=[@ANYBLOB='c ', @ANYRESOCT], 0x6f) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) (async) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) (async) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e033c004d8c71ef288563"], 0xffdd) (async) 1m24.398673067s ago: executing program 2 (id=1202): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b2c25fe80200000000000000000000009ffffffe000"/40, 0xfd1b}], 0x1}, 0x20040000) 1m24.236264787s ago: executing program 2 (id=1203): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xc, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x4000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) 1m23.956939163s ago: executing program 2 (id=1204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x8, 0x4, 0x9, 0x8, r0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, 0x0, 0x3000c085) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x1, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\x00\x00\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x400, 0xc8, 0x0, 0x2, 0x78, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x5452, &(0x7f0000000600)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\xa1h\xf52\xe4\xc7\xcc!\xe5\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xc5.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96p~\xde\xe0\xc9e\xa2\x96\xa8SW\xfb-3\xafM\xd7\x98\xbdN\x1d\xdc\xf98\xda\xe6\x04\xa0\xac\x1a\xa8\xa1\x12Q\xc0\xbb\xbe\xf1\xdd') r8 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r8, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x0, 0xfffffffd}, 0x80, 0x0}, 0x24040080) 1m23.933624635s ago: executing program 0 (id=1205): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x100002, 0x67, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4, &(0x7f0000000040), 0x4) 1m23.794411123s ago: executing program 3 (id=1206): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x1}, 0x50) (fail_nth: 45) 1m23.684168479s ago: executing program 0 (id=1207): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="03", 0x1}], 0x1}, 0xa) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x16021, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x802b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x2, 0x402, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x9a) recvmsg$unix(r2, &(0x7f0000000240)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/202, 0xca}], 0x1, &(0x7f00000006c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000000)) write$cgroup_devices(r1, 0x0, 0xffdd) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000200)='io.weight\x00', 0x2, 0x0) 1m23.67037465s ago: executing program 3 (id=1208): socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1005a2, 0x0, 0x5, 0x6, 0x10000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x5, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b82, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x100004, 0x32, 0x8, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0x3, &(0x7f00000010c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7d}, 0x94) r2 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$kcm(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x4081) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000), 0x8) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x7, 0x83}, 0x80, 0x0}, 0x800) r3 = socket$kcm(0x11, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='j', 0x1}], 0x1}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0xfffffffffffffffd) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0xa2532, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x100, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001040)=@o_path={0x0, r4}, 0x18) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000140), 0x2, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 1m23.610993103s ago: executing program 2 (id=1209): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xc, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a80016002000014003", 0x39}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 32 (id=1207): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="03", 0x1}], 0x1}, 0xa) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x16021, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x802b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x2, 0x402, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x9a) recvmsg$unix(r2, &(0x7f0000000240)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/202, 0xca}], 0x1, &(0x7f00000006c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000000)) write$cgroup_devices(r1, 0x0, 0xffdd) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000200)='io.weight\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): nown bytes. [ 128.064710][ T6283] netlink: 'syz.0.140': attribute type 10 has an invalid length. [ 128.072865][ T6283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.140'. [ 128.082802][ T6283] team0: entered promiscuous mode [ 128.088055][ T6283] team_slave_0: entered promiscuous mode [ 128.101484][ T6283] team_slave_1: entered promiscuous mode [ 128.107348][ T6283] team0: entered allmulticast mode [ 128.115091][ T6283] team_slave_0: entered allmulticast mode [ 128.121321][ T6283] team_slave_1: entered allmulticast mode [ 128.128271][ T6283] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 128.151395][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.133'. [ 128.369964][ T6300] syz.2.136[6300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.370134][ T6300] syz.2.136[6300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.500516][ T6302] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 128.602487][ T6304] netlink: 'syz.2.136': attribute type 21 has an invalid length. [ 128.660273][ T6305] syz.1.138[6305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.660446][ T6305] syz.1.138[6305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.883218][ T6307] netlink: 'syz.1.138': attribute type 21 has an invalid length. [ 128.981631][ T6314] syz.0.142[6314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.981799][ T6314] syz.0.142[6314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.057380][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.143'. [ 130.614024][ T6322] netlink: 'syz.1.144': attribute type 10 has an invalid length. [ 130.658629][ T6322] netlink: 40 bytes leftover after parsing attributes in process `syz.1.144'. [ 130.691756][ T6322] team0: entered promiscuous mode [ 130.722788][ T6322] team_slave_0: entered promiscuous mode [ 130.737029][ T6322] team_slave_1: entered promiscuous mode [ 130.747630][ T6322] team0: entered allmulticast mode [ 130.764292][ T6322] team_slave_0: entered allmulticast mode [ 130.770253][ T6322] team_slave_1: entered allmulticast mode [ 130.782061][ T6322] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 130.820105][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.145'. [ 131.077473][ T6342] syz.1.151[6342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.077649][ T6342] syz.1.151[6342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.112379][ T6345] syz.3.153[6345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.139304][ T6345] syz.3.153[6345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.186678][ T6348] syz.2.152[6348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.211450][ T6348] syz.2.152[6348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.349740][ T6349] netlink: 'syz.1.151': attribute type 21 has an invalid length. [ 131.419090][ T6351] netlink: 'syz.2.152': attribute type 21 has an invalid length. [ 131.745073][ T6358] FAULT_INJECTION: forcing a failure. [ 131.745073][ T6358] name failslab, interval 1, probability 0, space 0, times 0 [ 131.765441][ T6358] CPU: 1 PID: 6358 Comm: syz.1.155 Not tainted syzkaller #0 [ 131.772824][ T6358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 131.782950][ T6358] Call Trace: [ 131.786278][ T6358] [ 131.789253][ T6358] dump_stack_lvl+0x18c/0x250 [ 131.793992][ T6358] ? show_regs_print_info+0x20/0x20 [ 131.799249][ T6358] ? load_image+0x400/0x400 [ 131.803798][ T6358] ? __might_sleep+0xe0/0xe0 [ 131.808443][ T6358] ? __lock_acquire+0x7d40/0x7d40 [ 131.813502][ T6358] should_fail_ex+0x39d/0x4d0 [ 131.818224][ T6358] should_failslab+0x9/0x20 [ 131.822764][ T6358] slab_pre_alloc_hook+0x59/0x310 [ 131.827824][ T6358] ? tomoyo_encode+0x28b/0x540 [ 131.832617][ T6358] ? tomoyo_encode+0x28b/0x540 [ 131.837406][ T6358] __kmem_cache_alloc_node+0x53/0x250 [ 131.842816][ T6358] ? tomoyo_encode+0x28b/0x540 [ 131.847609][ T6358] __kmalloc+0xa4/0x230 [ 131.851805][ T6358] tomoyo_encode+0x28b/0x540 [ 131.856426][ T6358] tomoyo_realpath_from_path+0x592/0x5d0 [ 131.862097][ T6358] tomoyo_path_number_perm+0x248/0x620 [ 131.867600][ T6358] ? tomoyo_path_number_perm+0x217/0x620 [ 131.873273][ T6358] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 131.878787][ T6358] ? ksys_write+0x1c4/0x260 [ 131.883371][ T6358] ? __fget_files+0x28/0x4b0 [ 131.887994][ T6358] ? __fget_files+0x28/0x4b0 [ 131.892630][ T6358] security_file_ioctl+0x70/0xa0 [ 131.897611][ T6358] __se_sys_ioctl+0x48/0x170 [ 131.902243][ T6358] do_syscall_64+0x55/0xa0 [ 131.906690][ T6358] ? clear_bhb_loop+0x40/0x90 [ 131.911386][ T6358] ? clear_bhb_loop+0x40/0x90 [ 131.916094][ T6358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.922016][ T6358] RIP: 0033:0x7f18b2d9bf79 [ 131.926479][ T6358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.946123][ T6358] RSP: 002b:00007f18b3bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.954568][ T6358] RAX: ffffffffffffffda RBX: 00007f18b3015fa0 RCX: 00007f18b2d9bf79 [ 131.962580][ T6358] RDX: 0000200000000080 RSI: 00000000000089f9 RDI: 0000000000000004 [ 131.970586][ T6358] RBP: 00007f18b3bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 131.978597][ T6358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.986600][ T6358] R13: 00007f18b3016038 R14: 00007f18b3015fa0 R15: 00007ffca6da2d48 [ 131.994618][ T6358] [ 132.031256][ T6358] ERROR: Out of memory at tomoyo_realpath_from_path. [ 132.097971][ T6362] netlink: 'syz.2.157': attribute type 10 has an invalid length. [ 132.112732][ T6362] team0: Device hsr_slave_0 failed to register rx_handler [ 132.309287][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 132.493114][ T6377] FAULT_INJECTION: forcing a failure. [ 132.493114][ T6377] name failslab, interval 1, probability 0, space 0, times 0 [ 132.543601][ T6380] syz.0.164[6380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.543754][ T6380] syz.0.164[6380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.549953][ T6377] CPU: 0 PID: 6377 Comm: syz.2.163 Not tainted syzkaller #0 [ 132.573554][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 132.583661][ T6377] Call Trace: [ 132.584816][ T6382] syz.3.165[6382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.586968][ T6377] [ 132.586978][ T6377] dump_stack_lvl+0x18c/0x250 [ 132.605911][ T6377] ? show_regs_print_info+0x20/0x20 [ 132.611175][ T6377] ? load_image+0x400/0x400 [ 132.615753][ T6377] ? __might_sleep+0xe0/0xe0 [ 132.620399][ T6377] ? __lock_acquire+0x7d40/0x7d40 [ 132.625482][ T6377] should_fail_ex+0x39d/0x4d0 [ 132.630251][ T6377] should_failslab+0x9/0x20 [ 132.634810][ T6377] slab_pre_alloc_hook+0x59/0x310 [ 132.639890][ T6377] ? lockdep_hardirqs_on+0x98/0x150 [ 132.645123][ T6377] kmem_cache_alloc_node+0x60/0x320 [ 132.650353][ T6377] ? __alloc_skb+0x103/0x2c0 [ 132.655014][ T6377] __alloc_skb+0x103/0x2c0 [ 132.659462][ T6377] netlink_ack+0x376/0x1180 [ 132.663992][ T6377] ? __dev_queue_xmit+0x26b/0x36b0 [ 132.669148][ T6377] ? netlink_dump+0xe50/0xe50 [ 132.673847][ T6377] ? ref_tracker_free+0x690/0x840 [ 132.678897][ T6377] netlink_rcv_skb+0x2c5/0x4d0 [ 132.683694][ T6377] ? rtnetlink_bind+0x80/0x80 [ 132.688392][ T6377] ? netlink_ack+0x1180/0x1180 [ 132.693190][ T6377] ? __lock_acquire+0x7d40/0x7d40 [ 132.698252][ T6377] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.703492][ T6377] netlink_unicast+0x751/0x8d0 [ 132.708297][ T6377] netlink_sendmsg+0x8d0/0xbf0 [ 132.713120][ T6377] ? netlink_getsockopt+0x590/0x590 [ 132.718354][ T6377] ? aa_sock_msg_perm+0x94/0x150 [ 132.723342][ T6377] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 132.728662][ T6377] ? security_socket_sendmsg+0x80/0xa0 [ 132.734141][ T6377] ? netlink_getsockopt+0x590/0x590 [ 132.739391][ T6377] ____sys_sendmsg+0x5ba/0x960 [ 132.744193][ T6377] ? __asan_memset+0x22/0x40 [ 132.748838][ T6377] ? __sys_sendmsg_sock+0x30/0x30 [ 132.753910][ T6377] ? __import_iovec+0x5f2/0x850 [ 132.758816][ T6377] ? import_iovec+0x73/0xa0 [ 132.763365][ T6377] ___sys_sendmsg+0x2a6/0x360 [ 132.768079][ T6377] ? get_pid_task+0x20/0x1e0 [ 132.772728][ T6377] ? __sys_sendmsg+0x2a0/0x2a0 [ 132.777569][ T6377] ? __lock_acquire+0x7d40/0x7d40 [ 132.782665][ T6377] __se_sys_sendmsg+0x1c2/0x2b0 [ 132.787556][ T6377] ? __x64_sys_sendmsg+0x80/0x80 [ 132.792528][ T6377] ? lockdep_hardirqs_on+0x98/0x150 [ 132.797755][ T6377] do_syscall_64+0x55/0xa0 [ 132.802291][ T6377] ? clear_bhb_loop+0x40/0x90 [ 132.807000][ T6377] ? clear_bhb_loop+0x40/0x90 [ 132.811708][ T6377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.817645][ T6377] RIP: 0033:0x7f090379bf79 [ 132.822085][ T6377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.841722][ T6377] RSP: 002b:00007f090463b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.850172][ T6377] RAX: ffffffffffffffda RBX: 00007f0903a15fa0 RCX: 00007f090379bf79 [ 132.858167][ T6377] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 132.866164][ T6377] RBP: 00007f090463b090 R08: 0000000000000000 R09: 0000000000000000 [ 132.874246][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.882256][ T6377] R13: 00007f0903a16038 R14: 00007f0903a15fa0 R15: 00007ffc61185d38 [ 132.890272][ T6377] [ 132.915399][ T6382] syz.3.165[6382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.048950][ T6383] netlink: 'syz.0.164': attribute type 21 has an invalid length. [ 133.278441][ T6379] netlink: 'syz.1.162': attribute type 10 has an invalid length. [ 133.287628][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.287860][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.358223][ T6379] netlink: 'syz.1.162': attribute type 10 has an invalid length. [ 133.368055][ T6379] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.162'. [ 133.386527][ T6379] openvswitch: netlink: Message has 4 unknown bytes. [ 133.743746][ T6387] syz.2.166 uses obsolete (PF_INET,SOCK_PACKET) [ 133.755378][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 134.081082][ T6399] netlink: 'syz.0.171': attribute type 21 has an invalid length. [ 134.100728][ T6399] netlink: 128 bytes leftover after parsing attributes in process `syz.0.171'. [ 134.110008][ T6405] netlink: 'syz.3.172': attribute type 29 has an invalid length. [ 134.160750][ T6399] netlink: 'syz.0.171': attribute type 5 has an invalid length. [ 134.168494][ T6399] netlink: 3 bytes leftover after parsing attributes in process `syz.0.171'. [ 134.177439][ T6405] netlink: 'syz.3.172': attribute type 3 has an invalid length. [ 134.230926][ T6405] netlink: 132 bytes leftover after parsing attributes in process `syz.3.172'. [ 134.573526][ T6412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.173'. [ 135.799571][ T6432] netlink: 'syz.3.179': attribute type 153 has an invalid length. [ 135.817693][ T6432] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.179'. [ 135.931106][ T6431] can: request_module (can-proto-5) failed. [ 135.978366][ T6436] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 136.678436][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.185'. [ 137.018805][ T6462] FAULT_INJECTION: forcing a failure. [ 137.018805][ T6462] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 137.053975][ T6462] CPU: 0 PID: 6462 Comm: syz.1.192 Not tainted syzkaller #0 [ 137.061397][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 137.071496][ T6462] Call Trace: [ 137.074850][ T6462] [ 137.077822][ T6462] dump_stack_lvl+0x18c/0x250 [ 137.082557][ T6462] ? show_regs_print_info+0x20/0x20 [ 137.087817][ T6462] ? load_image+0x400/0x400 [ 137.092377][ T6462] ? __might_fault+0xaa/0x120 [ 137.097106][ T6462] ? __lock_acquire+0x7d40/0x7d40 [ 137.102199][ T6462] should_fail_ex+0x39d/0x4d0 [ 137.106941][ T6462] _copy_from_iter+0x1d9/0x12e0 [ 137.111873][ T6462] ? slab_post_alloc_hook+0x8a/0x4b0 [ 137.117222][ T6462] ? __virt_addr_valid+0x18c/0x540 [ 137.122389][ T6462] ? __lock_acquire+0x7d40/0x7d40 [ 137.127464][ T6462] ? rcu_is_watching+0x15/0xb0 [ 137.132281][ T6462] ? copyout_mc+0x70/0x70 [ 137.136643][ T6462] ? __virt_addr_valid+0x18c/0x540 [ 137.141787][ T6462] ? __virt_addr_valid+0x18c/0x540 [ 137.146923][ T6462] ? __virt_addr_valid+0x469/0x540 [ 137.152070][ T6462] ? __check_object_size+0x506/0xa20 [ 137.157395][ T6462] netlink_sendmsg+0x76b/0xbf0 [ 137.162195][ T6462] ? netlink_getsockopt+0x590/0x590 [ 137.167431][ T6462] ? aa_sock_msg_perm+0x94/0x150 [ 137.172398][ T6462] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 137.177719][ T6462] ? security_socket_sendmsg+0x80/0xa0 [ 137.183252][ T6462] ? netlink_getsockopt+0x590/0x590 [ 137.188531][ T6462] ____sys_sendmsg+0x5ba/0x960 [ 137.193353][ T6462] ? __asan_memset+0x22/0x40 [ 137.197994][ T6462] ? __sys_sendmsg_sock+0x30/0x30 [ 137.203073][ T6462] ? __import_iovec+0x5f2/0x850 [ 137.207976][ T6462] ? import_iovec+0x73/0xa0 [ 137.212525][ T6462] ___sys_sendmsg+0x2a6/0x360 [ 137.217229][ T6462] ? get_pid_task+0x20/0x1e0 [ 137.221849][ T6462] ? __sys_sendmsg+0x2a0/0x2a0 [ 137.226661][ T6462] ? __lock_acquire+0x7d40/0x7d40 [ 137.231734][ T6462] __se_sys_sendmsg+0x1c2/0x2b0 [ 137.236611][ T6462] ? __x64_sys_sendmsg+0x80/0x80 [ 137.241603][ T6462] ? lockdep_hardirqs_on+0x98/0x150 [ 137.246833][ T6462] do_syscall_64+0x55/0xa0 [ 137.251301][ T6462] ? clear_bhb_loop+0x40/0x90 [ 137.256006][ T6462] ? clear_bhb_loop+0x40/0x90 [ 137.260712][ T6462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.266639][ T6462] RIP: 0033:0x7f18b2d9bf79 [ 137.271077][ T6462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.290711][ T6462] RSP: 002b:00007f18b3bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.299149][ T6462] RAX: ffffffffffffffda RBX: 00007f18b3015fa0 RCX: 00007f18b2d9bf79 [ 137.307146][ T6462] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 137.315141][ T6462] RBP: 00007f18b3bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 137.323136][ T6462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.331124][ T6462] R13: 00007f18b3016038 R14: 00007f18b3015fa0 R15: 00007ffca6da2d48 [ 137.339129][ T6462] [ 137.628023][ T6475] netlink: 'syz.0.195': attribute type 153 has an invalid length. [ 137.662334][ T6475] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.195'. [ 137.731404][ T6477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.198'. [ 138.162030][ T6486] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 139.484815][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 139.549181][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'. [ 139.800253][ T6519] netlink: 'syz.0.212': attribute type 153 has an invalid length. [ 139.826794][ T6519] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.212'. [ 140.105542][ T6528] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 140.621661][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.221'. [ 140.843578][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'. [ 141.456922][ T6566] FAULT_INJECTION: forcing a failure. [ 141.456922][ T6566] name failslab, interval 1, probability 0, space 0, times 0 [ 141.470290][ T6566] CPU: 0 PID: 6566 Comm: syz.0.232 Not tainted syzkaller #0 [ 141.477642][ T6566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 141.487757][ T6566] Call Trace: [ 141.491085][ T6566] [ 141.494070][ T6566] dump_stack_lvl+0x18c/0x250 [ 141.498802][ T6566] ? sctp_sendmsg+0x1575/0x28c0 [ 141.503701][ T6566] ? ___sys_sendmsg+0x2a6/0x360 [ 141.508614][ T6566] ? show_regs_print_info+0x20/0x20 [ 141.513860][ T6566] ? load_image+0x400/0x400 [ 141.518443][ T6566] should_fail_ex+0x39d/0x4d0 [ 141.523175][ T6566] should_failslab+0x9/0x20 [ 141.527739][ T6566] slab_pre_alloc_hook+0x59/0x310 [ 141.532840][ T6566] ? sctp_add_bind_addr+0x8c/0x360 [ 141.538018][ T6566] __kmem_cache_alloc_node+0x53/0x250 [ 141.543438][ T6566] ? sctp_add_bind_addr+0x8c/0x360 [ 141.548593][ T6566] kmalloc_trace+0x2a/0xe0 [ 141.553045][ T6566] sctp_add_bind_addr+0x8c/0x360 [ 141.558008][ T6566] sctp_copy_local_addr_list+0x315/0x4f0 [ 141.563674][ T6566] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 141.569422][ T6566] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 141.575532][ T6566] ? sctp_v6_is_any+0x64/0x70 [ 141.580235][ T6566] ? sctp_copy_one_addr+0x8c/0x350 [ 141.585385][ T6566] sctp_bind_addr_copy+0xb3/0x3c0 [ 141.590446][ T6566] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 141.596798][ T6566] sctp_connect_new_asoc+0x2f9/0x6a0 [ 141.602118][ T6566] ? __sctp_connect+0xd80/0xd80 [ 141.606995][ T6566] ? __local_bh_enable_ip+0x13a/0x1c0 [ 141.612407][ T6566] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 141.617982][ T6566] ? security_sctp_bind_connect+0x89/0xb0 [ 141.623730][ T6566] sctp_sendmsg+0x1575/0x28c0 [ 141.628438][ T6566] ? sctp_getsockopt+0xb60/0xb60 [ 141.633413][ T6566] ? aa_sk_perm+0x83c/0x970 [ 141.637951][ T6566] ? aa_af_perm+0x330/0x330 [ 141.642493][ T6566] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 141.648940][ T6566] ? sock_rps_record_flow+0x19/0x3f0 [ 141.654263][ T6566] ? inet_sendmsg+0xe9/0x2f0 [ 141.658886][ T6566] ? inet_send_prepare+0x260/0x260 [ 141.664027][ T6566] ____sys_sendmsg+0x5ba/0x960 [ 141.668850][ T6566] ? __lock_acquire+0x7d40/0x7d40 [ 141.673948][ T6566] ? __asan_memset+0x22/0x40 [ 141.678590][ T6566] ? __sys_sendmsg_sock+0x30/0x30 [ 141.683641][ T6566] ? __import_iovec+0x5f2/0x850 [ 141.688531][ T6566] ? import_iovec+0x73/0xa0 [ 141.693072][ T6566] ___sys_sendmsg+0x2a6/0x360 [ 141.697780][ T6566] ? get_pid_task+0x20/0x1e0 [ 141.702410][ T6566] ? __sys_sendmsg+0x2a0/0x2a0 [ 141.707238][ T6566] ? __lock_acquire+0x7d40/0x7d40 [ 141.712325][ T6566] __se_sys_sendmsg+0x1c2/0x2b0 [ 141.717202][ T6566] ? __x64_sys_sendmsg+0x80/0x80 [ 141.722189][ T6566] ? lockdep_hardirqs_on+0x98/0x150 [ 141.727427][ T6566] do_syscall_64+0x55/0xa0 [ 141.731871][ T6566] ? clear_bhb_loop+0x40/0x90 [ 141.736576][ T6566] ? clear_bhb_loop+0x40/0x90 [ 141.741285][ T6566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.747203][ T6566] RIP: 0033:0x7f803e99bf79 [ 141.751654][ T6566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.771286][ T6566] RSP: 002b:00007f803f7e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.779729][ T6566] RAX: ffffffffffffffda RBX: 00007f803ec15fa0 RCX: 00007f803e99bf79 [ 141.787744][ T6566] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 141.795753][ T6566] RBP: 00007f803f7e5090 R08: 0000000000000000 R09: 0000000000000000 [ 141.803746][ T6566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.811746][ T6566] R13: 00007f803ec16038 R14: 00007f803ec15fa0 R15: 00007ffcf154b8b8 [ 141.819771][ T6566] [ 141.914726][ T6568] netlink: 'syz.2.231': attribute type 153 has an invalid length. [ 141.932343][ T6568] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.231'. [ 141.999732][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.233'. [ 142.237405][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'. [ 142.380362][ T6580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.236'. [ 142.390490][ T6580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.236'. [ 142.493750][ T6583] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 144.634069][ T6600] netlink: 'syz.2.245': attribute type 153 has an invalid length. [ 144.643441][ T6600] __nla_validate_parse: 1 callbacks suppressed [ 144.643484][ T6600] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.245'. [ 145.523201][ T6603] netlink: 'syz.3.247': attribute type 10 has an invalid length. [ 145.629657][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.246'. [ 145.659953][ T6609] netlink: 'syz.0.254': attribute type 153 has an invalid length. [ 145.704652][ T6609] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.254'. [ 145.866935][ T6614] mac80211_hwsim hwsim5 O3ãc¤±: renamed from wlan1 (while UP) [ 145.887905][ T6616] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 146.857535][ T6639] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 147.198054][ T6648] netlink: 'syz.1.265': attribute type 153 has an invalid length. [ 147.271246][ T6643] netlink: 14 bytes leftover after parsing attributes in process `syz.0.264'. [ 147.290759][ T6648] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.265'. [ 147.303920][ T6643] netlink: get zone limit has 4 unknown bytes [ 148.214825][ T6660] netlink: 'syz.1.271': attribute type 10 has an invalid length. [ 148.358210][ T6660] team_slave_0: left promiscuous mode [ 148.394173][ T6660] team_slave_0: left allmulticast mode [ 148.472120][ T6670] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 148.528973][ T6660] team0 (unregistering): Port device team_slave_0 removed [ 148.602494][ T6660] team_slave_1: left promiscuous mode [ 148.608157][ T6660] team_slave_1: left allmulticast mode [ 148.649898][ T6660] team0 (unregistering): Port device team_slave_1 removed [ 148.742947][ T6664] netlink: 'syz.1.271': attribute type 21 has an invalid length. [ 148.766519][ T6664] netlink: 156 bytes leftover after parsing attributes in process `syz.1.271'. [ 148.998201][ T6679] netlink: 'syz.0.276': attribute type 153 has an invalid length. [ 149.015486][ T6679] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.276'. [ 149.028307][ T6673] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 149.061053][ T6673] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.275'. [ 149.644530][ T6695] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 149.889632][ T6703] netlink: 'syz.2.288': attribute type 10 has an invalid length. [ 149.922847][ T6706] syz.3.289[6706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.923022][ T6706] syz.3.289[6706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.059415][ T6703] team0 (unregistering): Port device team_slave_0 removed [ 150.119405][ T6703] team0 (unregistering): Port device team_slave_1 removed [ 150.160106][ T6708] netlink: 'syz.2.288': attribute type 21 has an invalid length. [ 150.169240][ T6708] netlink: 156 bytes leftover after parsing attributes in process `syz.2.288'. [ 150.178478][ T6711] netlink: 'syz.1.290': attribute type 21 has an invalid length. [ 150.189367][ T6711] netlink: 156 bytes leftover after parsing attributes in process `syz.1.290'. [ 150.524163][ T6722] netlink: 'syz.3.294': attribute type 11 has an invalid length. [ 150.532252][ T6722] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.294'. [ 150.757806][ T6727] validate_nla: 1 callbacks suppressed [ 150.757836][ T6727] netlink: 'syz.3.295': attribute type 153 has an invalid length. [ 150.791089][ T6727] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.295'. [ 150.960784][ T6735] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 151.187697][ T6738] syz.0.301[6738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.187865][ T6738] syz.0.301[6738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.416326][ T6746] netlink: 'syz.0.301': attribute type 21 has an invalid length. [ 151.775228][ T6754] netlink: 132 bytes leftover after parsing attributes in process `syz.2.307'. [ 152.061629][ T6765] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.306'. [ 155.285895][ T6785] netlink: 'syz.3.314': attribute type 153 has an invalid length. [ 155.305222][ T6773] netlink: 'syz.2.312': attribute type 10 has an invalid length. [ 155.339204][ T6785] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.314'. [ 155.665319][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 155.743157][ T6795] syz.1.320[6795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.743324][ T6795] syz.1.320[6795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.882603][ T6799] netlink: 'syz.2.321': attribute type 11 has an invalid length. [ 155.905009][ T6800] netlink: 'syz.1.320': attribute type 21 has an invalid length. [ 155.947769][ T6802] Illegal XDP return value 4294967274 on prog (id 244) dev N/A, expect packet loss! [ 155.975421][ T6799] netlink: 212832 bytes leftover after parsing attributes in process `syz.2.321'. [ 156.026983][ T6803] netlink: 132 bytes leftover after parsing attributes in process `syz.2.321'. [ 157.234849][ T6837] netlink: 'syz.3.331': attribute type 153 has an invalid length. [ 157.249024][ T6837] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.331'. [ 157.586067][ T6842] netlink: 2 bytes leftover after parsing attributes in process `syz.0.334'. [ 157.596337][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.608564][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.619394][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.632160][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.653107][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.675116][ T6844] syz.2.335[6844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.675297][ T6844] syz.2.335[6844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.681724][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.836420][ T6846] delete_channel: no stack [ 157.851630][ T6846] delete_channel: no stack [ 157.859748][ T6847] netlink: 'syz.2.335': attribute type 21 has an invalid length. [ 158.292549][ T6857] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.347'. [ 158.323904][ T6857] netlink: 2 bytes leftover after parsing attributes in process `syz.0.347'. [ 158.366922][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.380240][ T6855] syz.2.339[6855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.380404][ T6855] syz.2.339[6855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.402552][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.453383][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.499233][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.543235][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.590860][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.700013][ T6855] netlink: 'syz.2.339': attribute type 21 has an invalid length. [ 158.772799][ T6866] netlink: 'syz.1.342': attribute type 10 has an invalid length. [ 158.944311][ T6866] hsr_slave_0 (unregistering): left promiscuous mode [ 159.234455][ T6876] netlink: 'syz.3.346': attribute type 153 has an invalid length. [ 159.244857][ T6877] syz.0.348[6877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.245044][ T6877] syz.0.348[6877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.253864][ T6876] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.346'. [ 159.458126][ T6882] netlink: 'syz.0.348': attribute type 21 has an invalid length. [ 159.706853][ T6889] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.352'. [ 160.072164][ T6898] syz.3.355[6898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.072311][ T6898] syz.3.355[6898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.913790][ T6913] netlink: 'syz.0.360': attribute type 21 has an invalid length. [ 160.998270][ T6919] netlink: 168 bytes leftover after parsing attributes in process `syz.2.361'. [ 161.027511][ T6918] netlink: 168 bytes leftover after parsing attributes in process `syz.2.361'. [ 161.127482][ T6923] syz.0.362[6923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.127601][ T6923] syz.0.362[6923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.261883][ T6923] netlink: 'syz.0.362': attribute type 21 has an invalid length. [ 161.283731][ T6926] netlink: 'syz.2.363': attribute type 153 has an invalid length. [ 161.309839][ T6926] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.363'. [ 162.288123][ T6947] netlink: 'syz.0.371': attribute type 1 has an invalid length. [ 162.314135][ T6947] netlink: 165600 bytes leftover after parsing attributes in process `syz.0.371'. [ 162.396903][ T6943] syzkaller0: entered promiscuous mode [ 162.408542][ T6953] syz.1.373[6953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.408731][ T6953] syz.1.373[6953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.414729][ T6943] syzkaller0: entered allmulticast mode [ 162.604970][ T6956] netlink: 'syz.1.373': attribute type 21 has an invalid length. [ 163.813728][ T6982] netlink: 'syz.2.380': attribute type 153 has an invalid length. [ 163.829507][ T6982] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.380'. [ 164.338724][ T6986] netlink: 40 bytes leftover after parsing attributes in process `syz.0.382'. [ 165.285272][ T6986] netlink: 40 bytes leftover after parsing attributes in process `syz.0.382'. [ 165.494785][ T6995] syz.0.385[6995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.494949][ T6995] syz.0.385[6995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.671386][ T6999] netlink: 'syz.0.385': attribute type 21 has an invalid length. [ 165.918298][ T7005] syz.2.389[7005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.918460][ T7005] syz.2.389[7005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.103044][ T7010] netlink: 'syz.1.391': attribute type 153 has an invalid length. [ 166.138211][ T7012] netlink: 'syz.2.389': attribute type 21 has an invalid length. [ 166.160810][ T7010] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.391'. [ 166.173932][ T7009] netlink: 'syz.3.390': attribute type 10 has an invalid length. [ 166.357199][ T7015] netlink: 'syz.0.392': attribute type 153 has an invalid length. [ 166.367840][ T7015] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.392'. [ 166.398195][ T7009] team0: Device veth1_macvtap failed to register rx_handler [ 166.501436][ T7009] syz.3.390 (7009) used greatest stack depth: 19240 bytes left [ 166.954166][ T7027] netlink: 'syz.2.398': attribute type 10 has an invalid length. [ 166.985633][ T7027] geneve0: entered promiscuous mode [ 167.118052][ T7027] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 167.288122][ T7042] netlink: 'syz.1.401': attribute type 11 has an invalid length. [ 167.319785][ T7042] netlink: 212832 bytes leftover after parsing attributes in process `syz.1.401'. [ 167.350002][ T7047] netlink: 132 bytes leftover after parsing attributes in process `syz.1.401'. [ 167.476296][ T7051] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.406'. [ 167.889794][ T7056] delete_channel: no stack [ 167.956235][ T7063] FAULT_INJECTION: forcing a failure. [ 167.956235][ T7063] name failslab, interval 1, probability 0, space 0, times 0 [ 167.977949][ T7063] CPU: 0 PID: 7063 Comm: syz.2.411 Not tainted syzkaller #0 [ 167.985416][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 167.995527][ T7063] Call Trace: [ 167.998867][ T7063] [ 168.001850][ T7063] dump_stack_lvl+0x18c/0x250 [ 168.006622][ T7063] ? show_regs_print_info+0x20/0x20 [ 168.011880][ T7063] ? load_image+0x400/0x400 [ 168.016447][ T7063] ? __might_sleep+0xe0/0xe0 [ 168.021097][ T7063] ? __lock_acquire+0x7d40/0x7d40 [ 168.026205][ T7063] should_fail_ex+0x39d/0x4d0 [ 168.030948][ T7063] should_failslab+0x9/0x20 [ 168.035509][ T7063] slab_pre_alloc_hook+0x59/0x310 [ 168.040589][ T7063] ? __dev_change_flags+0x211/0x6a0 [ 168.045840][ T7063] ? dev_change_flags+0x88/0x1a0 [ 168.050837][ T7063] ? dev_ioctl+0x7b4/0x1140 [ 168.055392][ T7063] ? kvmalloc_node+0x70/0x180 [ 168.060140][ T7063] ? kvmalloc_node+0x70/0x180 [ 168.064956][ T7063] __kmem_cache_alloc_node+0x53/0x250 [ 168.070389][ T7063] ? kvmalloc_node+0x70/0x180 [ 168.075116][ T7063] __kmalloc_node+0xa4/0x230 [ 168.079806][ T7063] kvmalloc_node+0x70/0x180 [ 168.084369][ T7063] pfifo_fast_init+0x10d/0x6a0 [ 168.089190][ T7063] qdisc_create_dflt+0x11e/0x430 [ 168.094186][ T7063] dev_activate+0x397/0x11a0 [ 168.098862][ T7063] __dev_open+0x347/0x430 [ 168.103238][ T7063] ? dev_open+0x190/0x190 [ 168.107632][ T7063] __dev_change_flags+0x211/0x6a0 [ 168.112731][ T7063] ? dev_get_flags+0x1c0/0x1c0 [ 168.117553][ T7063] ? mutex_lock_nested+0x20/0x20 [ 168.122563][ T7063] dev_change_flags+0x88/0x1a0 [ 168.127391][ T7063] dev_ioctl+0x7b4/0x1140 [ 168.131799][ T7063] sock_do_ioctl+0x239/0x310 [ 168.136446][ T7063] ? sock_show_fdinfo+0xb0/0xb0 [ 168.141362][ T7063] sock_ioctl+0x5ba/0x7e0 [ 168.145747][ T7063] ? sock_poll+0x3e0/0x3e0 [ 168.150263][ T7063] ? bpf_lsm_file_ioctl+0x9/0x10 [ 168.155269][ T7063] ? security_file_ioctl+0x80/0xa0 [ 168.160443][ T7063] ? sock_poll+0x3e0/0x3e0 [ 168.164911][ T7063] __se_sys_ioctl+0xfd/0x170 [ 168.169562][ T7063] do_syscall_64+0x55/0xa0 [ 168.174030][ T7063] ? clear_bhb_loop+0x40/0x90 [ 168.178750][ T7063] ? clear_bhb_loop+0x40/0x90 [ 168.183485][ T7063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.189426][ T7063] RIP: 0033:0x7f090379bf79 [ 168.193892][ T7063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.213556][ T7063] RSP: 002b:00007f090463b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.222215][ T7063] RAX: ffffffffffffffda RBX: 00007f0903a15fa0 RCX: 00007f090379bf79 [ 168.230280][ T7063] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000005 [ 168.238394][ T7063] RBP: 00007f090463b090 R08: 0000000000000000 R09: 0000000000000000 [ 168.246427][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.254453][ T7063] R13: 00007f0903a16038 R14: 00007f0903a15fa0 R15: 00007ffc61185d38 [ 168.262511][ T7063] [ 168.272974][ T7063] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 168.281201][ T7063] syzkaller0: entered promiscuous mode [ 168.286966][ T7063] syzkaller0: entered allmulticast mode [ 168.362625][ T7065] syz.3.412[7065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.362795][ T7065] syz.3.412[7065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.517639][ T7066] netlink: 'syz.3.412': attribute type 21 has an invalid length. [ 168.635743][ T7068] syzkaller0: entered promiscuous mode [ 168.647042][ T7068] syzkaller0: entered allmulticast mode [ 168.831930][ T7072] tap0: tun_chr_ioctl cmd 1074025677 [ 168.838558][ T7072] tap0: linktype set to 805 [ 168.861071][ T7073] tap0: tun_chr_ioctl cmd 1074025673 [ 168.891724][ T7075] tap0: tun_chr_ioctl cmd 1074025677 [ 168.917075][ T7075] tap0: linktype set to 805 [ 168.988634][ T7076] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 168.997152][ T7078] syz.0.417[7078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.997318][ T7078] syz.0.417[7078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.171089][ T7081] netlink: 'syz.0.417': attribute type 21 has an invalid length. [ 170.293713][ T7109] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 170.323932][ T7107] netlink: 'syz.1.427': attribute type 10 has an invalid length. [ 170.356359][ T7107] geneve0: entered promiscuous mode [ 170.449348][ T7114] syz.0.431[7114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.449517][ T7114] syz.0.431[7114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.537231][ T7107] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 170.611494][ T7107] syz.1.427 (7107) used greatest stack depth: 19112 bytes left [ 170.700959][ T7115] netlink: 'syz.0.431': attribute type 21 has an invalid length. [ 170.966351][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'. [ 171.249198][ T7132] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 171.680118][ T7146] netlink: 'syz.3.443': attribute type 2 has an invalid length. [ 171.688951][ T7146] netlink: 'syz.3.443': attribute type 8 has an invalid length. [ 171.697037][ T7146] netlink: 132 bytes leftover after parsing attributes in process `syz.3.443'. [ 171.931646][ T7153] netlink: 'syz.3.446': attribute type 9 has an invalid length. [ 171.939614][ T7153] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.446'. [ 171.987500][ T7153] netlink: 'syz.3.446': attribute type 1 has an invalid length. [ 171.995785][ T7153] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.446'. [ 172.266651][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 172.395590][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.450'. [ 173.066679][ T7183] IPv6: Can't replace route, no match found [ 173.164272][ T7186] netlink: 'syz.0.459': attribute type 21 has an invalid length. [ 173.303156][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.461'. [ 173.478429][ T7198] netlink: 'syz.1.464': attribute type 153 has an invalid length. [ 173.488022][ T7198] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.464'. [ 173.648844][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.465'. [ 173.800209][ T7206] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 174.197481][ T7213] delete_channel: no stack [ 174.287726][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'. [ 174.591950][ T7236] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 174.861576][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.484'. [ 175.592708][ T7266] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 176.367049][ T7287] netlink: 'syz.1.502': attribute type 3 has an invalid length. [ 176.383607][ T7287] netlink: 'syz.1.502': attribute type 1 has an invalid length. [ 176.800421][ T7299] syz.3.507[7299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.800847][ T7299] syz.3.507[7299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.087480][ T7301] netlink: 'syz.3.507': attribute type 21 has an invalid length. [ 177.779614][ T7313] __nla_validate_parse: 5 callbacks suppressed [ 177.779726][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'. [ 177.913580][ T7312] delete_channel: no stack [ 177.940362][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 178.033616][ T7320] FAULT_INJECTION: forcing a failure. [ 178.033616][ T7320] name failslab, interval 1, probability 0, space 0, times 0 [ 178.050780][ T7320] CPU: 0 PID: 7320 Comm: syz.3.512 Not tainted syzkaller #0 [ 178.058159][ T7320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 178.068274][ T7320] Call Trace: [ 178.071622][ T7320] [ 178.074599][ T7320] dump_stack_lvl+0x18c/0x250 [ 178.079440][ T7320] ? show_regs_print_info+0x20/0x20 [ 178.084756][ T7320] ? load_image+0x400/0x400 [ 178.089308][ T7320] ? xsk_diag_handler_dump+0x1a1/0x240 [ 178.094837][ T7320] ? verify_lock_unused+0x140/0x140 [ 178.100091][ T7320] ? perf_trace_lock_acquire+0x104/0x410 [ 178.105836][ T7320] should_fail_ex+0x39d/0x4d0 [ 178.110593][ T7320] should_failslab+0x9/0x20 [ 178.115156][ T7320] slab_pre_alloc_hook+0x59/0x310 [ 178.120258][ T7320] kmem_cache_alloc+0x5a/0x2d0 [ 178.125077][ T7320] ? skb_clone+0x1eb/0x370 [ 178.129550][ T7320] skb_clone+0x1eb/0x370 [ 178.133870][ T7320] __netlink_deliver_tap+0x41c/0x830 [ 178.139245][ T7320] ? netlink_deliver_tap+0x2e/0x1b0 [ 178.144511][ T7320] netlink_deliver_tap+0x19c/0x1b0 [ 178.149694][ T7320] __netlink_sendskb+0x4b/0x90 [ 178.154512][ T7320] netlink_dump+0xa75/0xe50 [ 178.159060][ T7320] ? netlink_lookup+0x200/0x200 [ 178.163974][ T7320] ? netlink_autobind+0x300/0x300 [ 178.169038][ T7320] ? __local_bh_enable_ip+0x13a/0x1c0 [ 178.174443][ T7320] ? netlink_lookup+0x30/0x200 [ 178.179237][ T7320] ? netlink_lookup+0x30/0x200 [ 178.184030][ T7320] __netlink_dump_start+0x5f1/0x810 [ 178.189302][ T7320] xsk_diag_handler_dump+0x1a1/0x240 [ 178.194618][ T7320] ? __lock_acquire+0x7d40/0x7d40 [ 178.199663][ T7320] ? xp_dma_sync_for_device_slow+0x50/0x50 [ 178.205493][ T7320] ? xsk_diag_handler_dump+0x240/0x240 [ 178.210983][ T7320] ? sock_diag_lock_handler+0x19/0x280 [ 178.216494][ T7320] ? sock_diag_lock_handler+0x19/0x280 [ 178.221983][ T7320] ? xp_dma_sync_for_device_slow+0x50/0x50 [ 178.227829][ T7320] sock_diag_rcv_msg+0x3d8/0x600 [ 178.232807][ T7320] netlink_rcv_skb+0x241/0x4d0 [ 178.237605][ T7320] ? sock_diag_bind+0xb0/0xb0 [ 178.242313][ T7320] ? netlink_ack+0x1180/0x1180 [ 178.247124][ T7320] ? __lock_acquire+0x7d40/0x7d40 [ 178.252273][ T7320] ? netlink_deliver_tap+0x2e/0x1b0 [ 178.257504][ T7320] sock_diag_rcv+0x2a/0x40 [ 178.261950][ T7320] netlink_unicast+0x751/0x8d0 [ 178.266771][ T7320] netlink_sendmsg+0x8d0/0xbf0 [ 178.271678][ T7320] ? netlink_getsockopt+0x590/0x590 [ 178.276917][ T7320] ? aa_sock_msg_perm+0x94/0x150 [ 178.281891][ T7320] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 178.287214][ T7320] ? security_socket_sendmsg+0x80/0xa0 [ 178.292695][ T7320] ? netlink_getsockopt+0x590/0x590 [ 178.297946][ T7320] ____sys_sendmsg+0x5ba/0x960 [ 178.302776][ T7320] ? __asan_memset+0x22/0x40 [ 178.307395][ T7320] ? __sys_sendmsg_sock+0x30/0x30 [ 178.312451][ T7320] ? __import_iovec+0x5f2/0x850 [ 178.317345][ T7320] ? import_iovec+0x73/0xa0 [ 178.321891][ T7320] ___sys_sendmsg+0x2a6/0x360 [ 178.326595][ T7320] ? get_pid_task+0x20/0x1e0 [ 178.331309][ T7320] ? __sys_sendmsg+0x2a0/0x2a0 [ 178.336233][ T7320] ? __lock_acquire+0x7d40/0x7d40 [ 178.341333][ T7320] __se_sys_sendmsg+0x1c2/0x2b0 [ 178.346236][ T7320] ? __x64_sys_sendmsg+0x80/0x80 [ 178.351216][ T7320] ? lockdep_hardirqs_on+0x98/0x150 [ 178.356446][ T7320] do_syscall_64+0x55/0xa0 [ 178.360897][ T7320] ? clear_bhb_loop+0x40/0x90 [ 178.365627][ T7320] ? clear_bhb_loop+0x40/0x90 [ 178.370352][ T7320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.376277][ T7320] RIP: 0033:0x7fd21439bf79 [ 178.380745][ T7320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.400374][ T7320] RSP: 002b:00007fd215315028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.408812][ T7320] RAX: ffffffffffffffda RBX: 00007fd214615fa0 RCX: 00007fd21439bf79 [ 178.416812][ T7320] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 178.424811][ T7320] RBP: 00007fd215315090 R08: 0000000000000000 R09: 0000000000000000 [ 178.432898][ T7320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.440915][ T7320] R13: 00007fd214616038 R14: 00007fd214615fa0 R15: 00007ffd78b79c88 [ 178.448930][ T7320] [ 178.687639][ T7323] netlink: 159532 bytes leftover after parsing attributes in process `syz.1.513'. [ 178.708605][ T7323] netlink: zone id is out of range [ 178.730387][ T7323] netlink: zone id is out of range [ 178.759671][ T7323] netlink: zone id is out of range [ 178.811095][ T7323] netlink: zone id is out of range [ 178.816294][ T7323] netlink: zone id is out of range [ 178.855733][ T7335] netlink: 'syz.2.516': attribute type 153 has an invalid length. [ 178.873161][ T7323] netlink: zone id is out of range [ 178.886559][ T7335] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.516'. [ 178.918609][ T7337] syz.3.519[7337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.918770][ T7337] syz.3.519[7337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.942411][ T7323] netlink: zone id is out of range [ 179.002474][ T7323] netlink: zone id is out of range [ 179.193289][ T7337] netlink: 'syz.3.519': attribute type 21 has an invalid length. [ 179.309648][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'. [ 179.432918][ T7344] netlink: 'syz.1.522': attribute type 6 has an invalid length. [ 179.475822][ T7344] netlink: 140 bytes leftover after parsing attributes in process `syz.1.522'. [ 180.939279][ T7376] netlink: 'syz.2.533': attribute type 153 has an invalid length. [ 180.980305][ T7376] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.533'. [ 181.134661][ T7381] syz.0.536[7381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.134818][ T7381] syz.0.536[7381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.318831][ T7382] netlink: 'syz.3.535': attribute type 10 has an invalid length. [ 181.389150][ T7382] netlink: 40 bytes leftover after parsing attributes in process `syz.3.535'. [ 181.429521][ T7382] team0: entered promiscuous mode [ 181.436154][ T7382] team_slave_0: entered promiscuous mode [ 181.453428][ T7382] team_slave_1: entered promiscuous mode [ 181.464375][ T7382] team0: entered allmulticast mode [ 181.470326][ T7382] team_slave_0: entered allmulticast mode [ 181.478302][ T7382] team_slave_1: entered allmulticast mode [ 181.496992][ T7382] net_ratelimit: 376 callbacks suppressed [ 181.497031][ T7382] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 181.522226][ T7385] netlink: 'syz.0.536': attribute type 21 has an invalid length. [ 182.599366][ T7413] netlink: 'syz.2.547': attribute type 153 has an invalid length. [ 182.620140][ T7413] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.547'. [ 183.714920][ T7428] netlink: 'syz.3.554': attribute type 29 has an invalid length. [ 183.750653][ T7428] netlink: 'syz.3.554': attribute type 3 has an invalid length. [ 183.758388][ T7428] netlink: 132 bytes leftover after parsing attributes in process `syz.3.554'. [ 183.856755][ T7425] syz.1.551[7425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.856941][ T7425] syz.1.551[7425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.096524][ T7425] netlink: 'syz.1.551': attribute type 21 has an invalid length. [ 184.545993][ T7448] netlink: 'syz.3.561': attribute type 153 has an invalid length. [ 184.557285][ T7448] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.561'. [ 185.050966][ T7459] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 185.322434][ T7463] netlink: 'syz.0.568': attribute type 13 has an invalid length. [ 185.350726][ T7463] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.568'. [ 185.557679][ T7467] FAULT_INJECTION: forcing a failure. [ 185.557679][ T7467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.590672][ T7467] CPU: 1 PID: 7467 Comm: syz.2.569 Not tainted syzkaller #0 [ 185.598090][ T7467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 185.608251][ T7467] Call Trace: [ 185.611582][ T7467] [ 185.614554][ T7467] dump_stack_lvl+0x18c/0x250 [ 185.619316][ T7467] ? show_regs_print_info+0x20/0x20 [ 185.624611][ T7467] ? load_image+0x400/0x400 [ 185.629194][ T7467] ? __might_fault+0xaa/0x120 [ 185.633920][ T7467] should_fail_ex+0x39d/0x4d0 [ 185.638654][ T7467] copyin+0x1a/0x90 [ 185.642516][ T7467] _copy_from_iter+0x404/0x12e0 [ 185.647441][ T7467] ? copyout_mc+0x70/0x70 [ 185.651829][ T7467] ? dev_get_by_index+0x22/0x2d0 [ 185.656816][ T7467] ? dev_get_by_index+0x22/0x2d0 [ 185.661809][ T7467] ? dev_get_by_index+0x22/0x2d0 [ 185.666805][ T7467] packet_sendmsg+0x2e23/0x4d70 [ 185.671710][ T7467] ? aa_sk_perm+0x970/0x970 [ 185.676281][ T7467] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 185.682064][ T7467] ? perf_trace_preemptirq_template+0x269/0x330 [ 185.688375][ T7467] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 185.694415][ T7467] ? lock_chain_count+0x20/0x20 [ 185.699311][ T7467] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 185.705343][ T7467] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 185.711543][ T7467] ? lockdep_hardirqs_on+0x98/0x150 [ 185.716791][ T7467] ? packet_getsockopt+0xad0/0xad0 [ 185.721962][ T7467] ? security_socket_sendmsg+0x45/0xa0 [ 185.727474][ T7467] ? security_socket_sendmsg+0x80/0xa0 [ 185.732980][ T7467] ? packet_getsockopt+0xad0/0xad0 [ 185.738175][ T7467] ____sys_sendmsg+0x5ba/0x960 [ 185.743114][ T7467] ? __lock_acquire+0x7d40/0x7d40 [ 185.748227][ T7467] ? __asan_memset+0x22/0x40 [ 185.752878][ T7467] ? __sys_sendmsg_sock+0x30/0x30 [ 185.757961][ T7467] ? __import_iovec+0x3fa/0x850 [ 185.762894][ T7467] ? import_iovec+0x73/0xa0 [ 185.767460][ T7467] ___sys_sendmsg+0x2a6/0x360 [ 185.772199][ T7467] ? __sys_sendmsg+0x2a0/0x2a0 [ 185.777053][ T7467] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 185.783383][ T7467] __se_sys_sendmsg+0x1c2/0x2b0 [ 185.788289][ T7467] ? __x64_sys_sendmsg+0x80/0x80 [ 185.793292][ T7467] ? lockdep_hardirqs_on+0x98/0x150 [ 185.798549][ T7467] do_syscall_64+0x55/0xa0 [ 185.803017][ T7467] ? clear_bhb_loop+0x40/0x90 [ 185.807748][ T7467] ? clear_bhb_loop+0x40/0x90 [ 185.812476][ T7467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.818419][ T7467] RIP: 0033:0x7f090379bf79 [ 185.822885][ T7467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.842564][ T7467] RSP: 002b:00007f090463b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.851049][ T7467] RAX: ffffffffffffffda RBX: 00007f0903a15fa0 RCX: 00007f090379bf79 [ 185.859070][ T7467] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000a [ 185.867115][ T7467] RBP: 00007f090463b090 R08: 0000000000000000 R09: 0000000000000000 [ 185.875144][ T7467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.883166][ T7467] R13: 00007f0903a16038 R14: 00007f0903a15fa0 R15: 00007ffc61185d38 [ 185.891210][ T7467] [ 186.810008][ T7483] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 187.033750][ T7491] netlink: 'syz.0.578': attribute type 153 has an invalid length. [ 187.039678][ T7486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 187.049885][ T7491] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.578'. [ 187.503149][ T7504] FAULT_INJECTION: forcing a failure. [ 187.503149][ T7504] name failslab, interval 1, probability 0, space 0, times 0 [ 187.536531][ T7504] CPU: 0 PID: 7504 Comm: syz.1.582 Not tainted syzkaller #0 [ 187.543912][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 187.554016][ T7504] Call Trace: [ 187.557346][ T7504] [ 187.560322][ T7504] dump_stack_lvl+0x18c/0x250 [ 187.565072][ T7504] ? show_regs_print_info+0x20/0x20 [ 187.570326][ T7504] ? load_image+0x400/0x400 [ 187.574887][ T7504] ? verify_lock_unused+0x140/0x140 [ 187.580139][ T7504] should_fail_ex+0x39d/0x4d0 [ 187.584884][ T7504] should_failslab+0x9/0x20 [ 187.589443][ T7504] slab_pre_alloc_hook+0x59/0x310 [ 187.594533][ T7504] kmem_cache_alloc+0x5a/0x2d0 [ 187.599350][ T7504] ? skb_clone+0x1eb/0x370 [ 187.603820][ T7504] skb_clone+0x1eb/0x370 [ 187.608112][ T7504] __netlink_deliver_tap+0x41c/0x830 [ 187.613462][ T7504] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.618712][ T7504] netlink_deliver_tap+0x19c/0x1b0 [ 187.623904][ T7504] netlink_unicast+0x72c/0x8d0 [ 187.628733][ T7504] netlink_sendmsg+0x8d0/0xbf0 [ 187.633558][ T7504] ? netlink_getsockopt+0x590/0x590 [ 187.638828][ T7504] ? aa_sock_msg_perm+0x94/0x150 [ 187.643821][ T7504] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 187.649169][ T7504] ? security_socket_sendmsg+0x80/0xa0 [ 187.654675][ T7504] ? netlink_getsockopt+0x590/0x590 [ 187.659919][ T7504] ____sys_sendmsg+0x5ba/0x960 [ 187.664719][ T7504] ? __asan_memset+0x22/0x40 [ 187.669336][ T7504] ? __sys_sendmsg_sock+0x30/0x30 [ 187.674400][ T7504] ? __import_iovec+0x5f2/0x850 [ 187.679292][ T7504] ? import_iovec+0x73/0xa0 [ 187.683855][ T7504] ___sys_sendmsg+0x2a6/0x360 [ 187.688560][ T7504] ? get_pid_task+0x20/0x1e0 [ 187.693186][ T7504] ? __sys_sendmsg+0x2a0/0x2a0 [ 187.698012][ T7504] ? __lock_acquire+0x7d40/0x7d40 [ 187.703087][ T7504] __se_sys_sendmsg+0x1c2/0x2b0 [ 187.708013][ T7504] ? __x64_sys_sendmsg+0x80/0x80 [ 187.712995][ T7504] ? lockdep_hardirqs_on+0x98/0x150 [ 187.718227][ T7504] do_syscall_64+0x55/0xa0 [ 187.722675][ T7504] ? clear_bhb_loop+0x40/0x90 [ 187.727389][ T7504] ? clear_bhb_loop+0x40/0x90 [ 187.732092][ T7504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.738037][ T7504] RIP: 0033:0x7f18b2d9bf79 [ 187.742501][ T7504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.762132][ T7504] RSP: 002b:00007f18b3bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.770583][ T7504] RAX: ffffffffffffffda RBX: 00007f18b3015fa0 RCX: 00007f18b2d9bf79 [ 187.778579][ T7504] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 187.786594][ T7504] RBP: 00007f18b3bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 187.794588][ T7504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.802582][ T7504] R13: 00007f18b3016038 R14: 00007f18b3015fa0 R15: 00007ffca6da2d48 [ 187.810591][ T7504] [ 187.936859][ T7506] FAULT_INJECTION: forcing a failure. [ 187.936859][ T7506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.958504][ T7506] CPU: 1 PID: 7506 Comm: syz.0.584 Not tainted syzkaller #0 [ 187.965866][ T7506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 187.975984][ T7506] Call Trace: [ 187.979319][ T7506] [ 187.982288][ T7506] dump_stack_lvl+0x18c/0x250 [ 187.987023][ T7506] ? show_regs_print_info+0x20/0x20 [ 187.992277][ T7506] ? load_image+0x400/0x400 [ 187.996834][ T7506] ? __might_fault+0xaa/0x120 [ 188.001584][ T7506] ? __lock_acquire+0x7d40/0x7d40 [ 188.006681][ T7506] should_fail_ex+0x39d/0x4d0 [ 188.011423][ T7506] _copy_from_user+0x2f/0xe0 [ 188.016064][ T7506] generic_map_update_batch+0x54b/0x810 [ 188.021676][ T7506] ? rcu_read_unlock+0xa0/0xa0 [ 188.026487][ T7506] ? __fdget+0x180/0x210 [ 188.030777][ T7506] ? rcu_read_unlock+0xa0/0xa0 [ 188.035577][ T7506] bpf_map_do_batch+0x3d7/0x610 [ 188.040486][ T7506] __sys_bpf+0x381/0x890 [ 188.044785][ T7506] ? bpf_link_show_fdinfo+0x390/0x390 [ 188.050250][ T7506] ? lock_chain_count+0x20/0x20 [ 188.055191][ T7506] __x64_sys_bpf+0x7c/0x90 [ 188.059656][ T7506] do_syscall_64+0x55/0xa0 [ 188.064126][ T7506] ? clear_bhb_loop+0x40/0x90 [ 188.068856][ T7506] ? clear_bhb_loop+0x40/0x90 [ 188.073623][ T7506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.079570][ T7506] RIP: 0033:0x7f803e99bf79 [ 188.084112][ T7506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.103767][ T7506] RSP: 002b:00007f803f7e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.112211][ T7506] RAX: ffffffffffffffda RBX: 00007f803ec15fa0 RCX: 00007f803e99bf79 [ 188.120213][ T7506] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 188.128208][ T7506] RBP: 00007f803f7e5090 R08: 0000000000000000 R09: 0000000000000000 [ 188.136198][ T7506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.144228][ T7506] R13: 00007f803ec16038 R14: 00007f803ec15fa0 R15: 00007ffcf154b8b8 [ 188.152237][ T7506] [ 188.404396][ T7515] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 188.435724][ T7517] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 188.913050][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.590'. [ 189.312777][ T7531] netlink: 'syz.2.592': attribute type 153 has an invalid length. [ 189.340817][ T7531] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.592'. [ 189.555621][ T7533] netlink: 'syz.0.593': attribute type 10 has an invalid length. [ 189.572354][ T7533] netlink: 40 bytes leftover after parsing attributes in process `syz.0.593'. [ 189.605913][ T7533] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 190.154012][ T7547] netlink: 'syz.2.598': attribute type 10 has an invalid length. [ 190.173543][ T7547] netlink: 40 bytes leftover after parsing attributes in process `syz.2.598'. [ 190.208309][ T7547] batman_adv: batadv0: Adding interface: vlan1 [ 190.241259][ T7547] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.287882][ T7547] batman_adv: batadv0: Interface activated: vlan1 [ 190.515178][ T7551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.601'. [ 190.776685][ T7561] syz.3.605[7561] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.776854][ T7561] syz.3.605[7561] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.873888][ T7561] netlink: 'syz.3.605': attribute type 21 has an invalid length. [ 190.914978][ T7565] netlink: 'syz.1.607': attribute type 2 has an invalid length. [ 190.944212][ T7565] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.607'. [ 191.038020][ T7566] netlink: 'syz.2.606': attribute type 153 has an invalid length. [ 191.066917][ T7566] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.606'. [ 191.781087][ T7578] wg2: mtu less than device minimum [ 192.279194][ T7589] FAULT_INJECTION: forcing a failure. [ 192.279194][ T7589] name failslab, interval 1, probability 0, space 0, times 0 [ 192.292692][ T7589] CPU: 0 PID: 7589 Comm: syz.1.613 Not tainted syzkaller #0 [ 192.300061][ T7589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 192.310151][ T7589] Call Trace: [ 192.313463][ T7589] [ 192.316427][ T7589] dump_stack_lvl+0x18c/0x250 [ 192.321176][ T7589] ? sctp_sendmsg+0x1575/0x28c0 [ 192.326039][ T7589] ? ___sys_sendmsg+0x2a6/0x360 [ 192.330907][ T7589] ? show_regs_print_info+0x20/0x20 [ 192.336147][ T7589] ? load_image+0x400/0x400 [ 192.340692][ T7589] should_fail_ex+0x39d/0x4d0 [ 192.345419][ T7589] should_failslab+0x9/0x20 [ 192.350016][ T7589] slab_pre_alloc_hook+0x59/0x310 [ 192.355079][ T7589] ? sctp_add_bind_addr+0x8c/0x360 [ 192.360217][ T7589] __kmem_cache_alloc_node+0x53/0x250 [ 192.365631][ T7589] ? sctp_add_bind_addr+0x8c/0x360 [ 192.370777][ T7589] kmalloc_trace+0x2a/0xe0 [ 192.375222][ T7589] sctp_add_bind_addr+0x8c/0x360 [ 192.380192][ T7589] sctp_copy_local_addr_list+0x315/0x4f0 [ 192.385865][ T7589] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 192.391635][ T7589] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 192.397750][ T7589] ? sctp_v6_is_any+0x64/0x70 [ 192.402467][ T7589] ? sctp_copy_one_addr+0x8c/0x350 [ 192.407624][ T7589] sctp_bind_addr_copy+0xb3/0x3c0 [ 192.412686][ T7589] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 192.419044][ T7589] sctp_connect_new_asoc+0x2f9/0x6a0 [ 192.424354][ T7589] ? __sctp_connect+0xd80/0xd80 [ 192.429222][ T7589] ? __local_bh_enable_ip+0x13a/0x1c0 [ 192.434656][ T7589] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 192.440226][ T7589] ? security_sctp_bind_connect+0x89/0xb0 [ 192.445969][ T7589] sctp_sendmsg+0x1575/0x28c0 [ 192.450684][ T7589] ? sctp_getsockopt+0xb60/0xb60 [ 192.455658][ T7589] ? aa_sk_perm+0x83c/0x970 [ 192.460193][ T7589] ? aa_af_perm+0x330/0x330 [ 192.464721][ T7589] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 192.471171][ T7589] ? sock_rps_record_flow+0x19/0x3f0 [ 192.476491][ T7589] ? inet_sendmsg+0xe9/0x2f0 [ 192.481116][ T7589] ? inet_send_prepare+0x260/0x260 [ 192.486262][ T7589] ____sys_sendmsg+0x5ba/0x960 [ 192.491061][ T7589] ? __lock_acquire+0x7d40/0x7d40 [ 192.496109][ T7589] ? __asan_memset+0x22/0x40 [ 192.500730][ T7589] ? __sys_sendmsg_sock+0x30/0x30 [ 192.505782][ T7589] ? __import_iovec+0x5f2/0x850 [ 192.510790][ T7589] ? import_iovec+0x73/0xa0 [ 192.515327][ T7589] ___sys_sendmsg+0x2a6/0x360 [ 192.520025][ T7589] ? get_pid_task+0x20/0x1e0 [ 192.524652][ T7589] ? __sys_sendmsg+0x2a0/0x2a0 [ 192.529469][ T7589] ? __lock_acquire+0x7d40/0x7d40 [ 192.534630][ T7589] __se_sys_sendmsg+0x1c2/0x2b0 [ 192.539514][ T7589] ? __x64_sys_sendmsg+0x80/0x80 [ 192.544493][ T7589] ? lockdep_hardirqs_on+0x98/0x150 [ 192.549720][ T7589] do_syscall_64+0x55/0xa0 [ 192.554173][ T7589] ? clear_bhb_loop+0x40/0x90 [ 192.558876][ T7589] ? clear_bhb_loop+0x40/0x90 [ 192.563576][ T7589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.569498][ T7589] RIP: 0033:0x7f18b2d9bf79 [ 192.573946][ T7589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.593576][ T7589] RSP: 002b:00007f18b3bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.602019][ T7589] RAX: ffffffffffffffda RBX: 00007f18b3015fa0 RCX: 00007f18b2d9bf79 [ 192.610015][ T7589] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 192.618018][ T7589] RBP: 00007f18b3bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 192.626020][ T7589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.634016][ T7589] R13: 00007f18b3016038 R14: 00007f18b3015fa0 R15: 00007ffca6da2d48 [ 192.642031][ T7589] [ 194.210132][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.616'. [ 194.302950][ T7602] syz.2.617[7602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.303101][ T7602] syz.2.617[7602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.430385][ T7602] netlink: 'syz.2.617': attribute type 21 has an invalid length. [ 194.506693][ T7606] syz.3.618[7606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.506848][ T7606] syz.3.618[7606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.605401][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.630777][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.644901][ T7610] netlink: 'syz.0.619': attribute type 153 has an invalid length. [ 194.678026][ T7606] netlink: 'syz.3.618': attribute type 21 has an invalid length. [ 194.701293][ T7612] syz.1.620[7612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.701463][ T7612] syz.1.620[7612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.713134][ T7610] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.619'. [ 194.855336][ T7612] netlink: 'syz.1.620': attribute type 21 has an invalid length. [ 195.094969][ T7620] netlink: 'syz.3.622': attribute type 3 has an invalid length. [ 195.103646][ T7620] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.622'. [ 195.216581][ T7622] netlink: 'syz.1.624': attribute type 10 has an invalid length. [ 195.532041][ T7628] netlink: 'syz.0.634': attribute type 153 has an invalid length. [ 195.541109][ T7628] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.634'. [ 195.604536][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 196.142631][ T7637] syz.2.630[7637] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.142798][ T7637] syz.2.630[7637] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.341852][ T7637] netlink: 'syz.2.630': attribute type 21 has an invalid length. [ 196.589174][ T7643] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.633'. [ 196.726460][ T7644] netlink: 188 bytes leftover after parsing attributes in process `syz.3.633'. [ 196.918569][ T7648] netlink: 'syz.2.636': attribute type 3 has an invalid length. [ 196.929887][ T7648] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.636'. [ 196.967369][ T7648] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.636'. [ 197.010188][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.637'. [ 197.182759][ T7655] netlink: 'syz.1.638': attribute type 3 has an invalid length. [ 197.936838][ T7669] syz.2.645[7669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.937004][ T7669] syz.2.645[7669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.668474][ T7693] validate_nla: 4 callbacks suppressed [ 199.668521][ T7693] netlink: 'syz.2.655': attribute type 153 has an invalid length. [ 199.697438][ T7693] __nla_validate_parse: 5 callbacks suppressed [ 199.697473][ T7693] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.655'. [ 199.702854][ T7697] syz.1.657[7697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.723904][ T7697] syz.1.657[7697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.767429][ T7700] netlink: 14 bytes leftover after parsing attributes in process `syz.3.658'. [ 199.806430][ T7702] netlink: 'syz.0.656': attribute type 3 has an invalid length. [ 199.822099][ T7702] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.656'. [ 199.834985][ T7700] hsr_slave_0: left promiscuous mode [ 199.842651][ T7700] hsr_slave_1: left promiscuous mode [ 199.956617][ T7699] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.658'. [ 199.998540][ T7704] netlink: 'syz.1.657': attribute type 21 has an invalid length. [ 200.171182][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'. [ 200.814253][ T7725] syz.0.667[7725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.814406][ T7725] syz.0.667[7725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.873145][ T7727] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 201.024531][ T7732] netlink: 'syz.0.667': attribute type 21 has an invalid length. [ 201.123638][ T7730] netlink: 60 bytes leftover after parsing attributes in process `syz.2.669'. [ 201.260375][ T7735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.670'. [ 201.647885][ T7743] netlink: 132 bytes leftover after parsing attributes in process `syz.3.674'. [ 201.953037][ T7754] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 202.085285][ T7757] netlink: 'syz.3.677': attribute type 3 has an invalid length. [ 202.099066][ T7757] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.677'. [ 202.132801][ T7759] syz.1.680[7759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.132983][ T7759] syz.1.680[7759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.206136][ T7759] netlink: 763 bytes leftover after parsing attributes in process `syz.1.680'. [ 202.354689][ T7759] netlink: 'syz.1.680': attribute type 21 has an invalid length. [ 203.047857][ T7781] netlink: 'syz.0.689': attribute type 9 has an invalid length. [ 203.168263][ T7784] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 203.181525][ T7788] syz.1.691[7788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.181709][ T7788] syz.1.691[7788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.270131][ T7779] delete_channel: no stack [ 203.409851][ T7788] netlink: 'syz.1.691': attribute type 21 has an invalid length. [ 203.503663][ T7792] syz.2.693[7792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.503840][ T7792] syz.2.693[7792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.682136][ T7792] netlink: 'syz.2.693': attribute type 21 has an invalid length. [ 203.971148][ T7806] netlink: 'syz.0.694': attribute type 4 has an invalid length. [ 204.040362][ T7806] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 204.065017][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.082819][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.094732][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.106302][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.119401][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.138910][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.158317][ T7811] batadv_slave_1: entered promiscuous mode [ 204.415665][ T7820] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 204.773163][ T7838] syz.2.707[7838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.773324][ T7838] syz.2.707[7838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.824298][ T7838] __nla_validate_parse: 8 callbacks suppressed [ 204.824333][ T7838] netlink: 763 bytes leftover after parsing attributes in process `syz.2.707'. [ 204.997576][ T7838] netlink: 'syz.2.707': attribute type 21 has an invalid length. [ 205.476933][ T7858] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 205.662273][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.718'. [ 205.844503][ T7872] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.722'. [ 206.028837][ T7876] syz.2.723[7876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.028975][ T7876] syz.2.723[7876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.110440][ T7877] netlink: 703 bytes leftover after parsing attributes in process `syz.2.723'. [ 206.164989][ T7877] netlink: 'syz.2.723': attribute type 21 has an invalid length. [ 206.912547][ T7880] netlink: 'syz.1.724': attribute type 10 has an invalid length. [ 206.923095][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 206.929192][ T5774] Bluetooth: hci0: command 0x0406 tx timeout [ 206.936302][ T5769] Bluetooth: hci1: command 0x0406 tx timeout [ 206.943125][ T5769] Bluetooth: hci2: command 0x0406 tx timeout [ 206.971386][ T7880] netlink: 2 bytes leftover after parsing attributes in process `syz.1.724'. [ 207.009397][ T7880] bond0: entered promiscuous mode [ 207.024848][ T7880] bond_slave_0: entered promiscuous mode [ 207.043453][ T7880] bond_slave_1: entered promiscuous mode [ 207.155370][ T7893] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 207.195433][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.730'. [ 207.232348][ T7894] syz.0.729[7894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.232536][ T7894] syz.0.729[7894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.522639][ T7900] netlink: 'syz.2.732': attribute type 21 has an invalid length. [ 208.155665][ T7916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.740'. [ 208.221226][ T7919] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 208.441914][ T7925] syz.1.744[7925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.442093][ T7925] syz.1.744[7925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.489770][ T7925] netlink: 703 bytes leftover after parsing attributes in process `syz.1.744'. [ 208.624887][ T7925] netlink: 'syz.1.744': attribute type 21 has an invalid length. [ 209.367748][ T7945] netlink: 'syz.2.757': attribute type 153 has an invalid length. [ 209.406559][ T7945] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.757'. [ 209.566270][ T7947] À: port 1(vlan0) entered disabled state [ 209.593380][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.752'. [ 209.696254][ T55] À: port 1(vlan0) entered blocking state [ 209.702252][ T55] À: port 1(vlan0) entered forwarding state [ 209.795605][ T7954] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 210.017580][ T7961] syz.1.755[7961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.017798][ T7961] syz.1.755[7961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.225931][ T7961] netlink: 703 bytes leftover after parsing attributes in process `syz.1.755'. [ 210.409694][ T7963] netlink: 'syz.1.755': attribute type 21 has an invalid length. [ 210.428184][ T7965] syz.2.758[7965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.428345][ T7965] syz.2.758[7965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.538790][ T7965] netlink: 703 bytes leftover after parsing attributes in process `syz.2.758'. [ 210.738270][ T7972] syz.3.761[7972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.738434][ T7972] syz.3.761[7972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.783062][ T7965] netlink: 'syz.2.758': attribute type 21 has an invalid length. [ 210.844600][ T7972] netlink: 'syz.3.761': attribute type 21 has an invalid length. [ 211.057294][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.762'. [ 211.381460][ T7983] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 211.536823][ T7987] netlink: 'syz.1.766': attribute type 153 has an invalid length. [ 211.570074][ T7987] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.766'. [ 211.807081][ T7993] netlink: 76 bytes leftover after parsing attributes in process `syz.2.769'. [ 211.887478][ T7993] sctp: [Deprecated]: syz.2.769 (pid 7993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.887478][ T7993] Use struct sctp_sack_info instead [ 212.082939][ T7999] netlink: 'syz.3.772': attribute type 21 has an invalid length. [ 212.275042][ T8006] bpf_get_probe_write_proto: 2 callbacks suppressed [ 212.275063][ T8006] syz.0.775[8006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.309427][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.774'. [ 212.311514][ T8006] syz.0.775[8006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.404276][ T8006] netlink: 703 bytes leftover after parsing attributes in process `syz.0.775'. [ 212.436002][ T8009] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.776'. [ 212.464348][ T8009] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.776'. [ 212.506293][ T8012] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.776'. [ 212.548673][ T8006] netlink: 'syz.0.775': attribute type 21 has an invalid length. [ 212.637421][ T8014] netlink: 'syz.1.778': attribute type 153 has an invalid length. [ 212.922991][ T8022] À: port 1(vlan0) entered disabled state [ 213.039147][ T55] À: port 1(vlan0) entered blocking state [ 213.045169][ T55] À: port 1(vlan0) entered forwarding state [ 213.070335][ T8029] syz.1.784[8029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.070510][ T8029] syz.1.784[8029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.182206][ T8032] syz.2.785[8032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.230516][ T8032] syz.2.785[8032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.333007][ T8032] netlink: 'syz.2.785': attribute type 21 has an invalid length. [ 213.506219][ T8042] netlink: 'syz.0.789': attribute type 153 has an invalid length. [ 214.139329][ T8066] syz.0.799[8066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.139492][ T8066] syz.0.799[8066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.316248][ T8066] netlink: 'syz.0.799': attribute type 21 has an invalid length. [ 215.321932][ T8098] syz.3.813[8098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.322103][ T8098] syz.3.813[8098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.628755][ T8098] netlink: 'syz.3.813': attribute type 21 has an invalid length. [ 216.318668][ T8118] FAULT_INJECTION: forcing a failure. [ 216.318668][ T8118] name failslab, interval 1, probability 0, space 0, times 0 [ 216.356286][ T8118] CPU: 1 PID: 8118 Comm: syz.3.820 Not tainted syzkaller #0 [ 216.363673][ T8118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 216.373795][ T8118] Call Trace: [ 216.377115][ T8118] [ 216.380082][ T8118] dump_stack_lvl+0x18c/0x250 [ 216.384821][ T8118] ? show_regs_print_info+0x20/0x20 [ 216.390081][ T8118] ? load_image+0x400/0x400 [ 216.394641][ T8118] ? __might_sleep+0xe0/0xe0 [ 216.399286][ T8118] ? __lock_acquire+0x7d40/0x7d40 [ 216.404380][ T8118] should_fail_ex+0x39d/0x4d0 [ 216.409120][ T8118] should_failslab+0x9/0x20 [ 216.413684][ T8118] slab_pre_alloc_hook+0x59/0x310 [ 216.418832][ T8118] ? kvmalloc_node+0x70/0x180 [ 216.423566][ T8118] ? kvmalloc_node+0x70/0x180 [ 216.428292][ T8118] __kmem_cache_alloc_node+0x53/0x250 [ 216.433731][ T8118] ? kvmalloc_node+0x70/0x180 [ 216.438469][ T8118] __kmalloc_node+0xa4/0x230 [ 216.443115][ T8118] kvmalloc_node+0x70/0x180 [ 216.447707][ T8118] pfifo_fast_init+0x238/0x6a0 [ 216.452523][ T8118] qdisc_create_dflt+0x11e/0x430 [ 216.457508][ T8118] dev_activate+0x397/0x11a0 [ 216.462159][ T8118] __dev_open+0x347/0x430 [ 216.466537][ T8118] ? dev_open+0x190/0x190 [ 216.470933][ T8118] __dev_change_flags+0x211/0x6a0 [ 216.476014][ T8118] ? dev_get_flags+0x1c0/0x1c0 [ 216.480824][ T8118] ? mutex_lock_nested+0x20/0x20 [ 216.485822][ T8118] dev_change_flags+0x88/0x1a0 [ 216.490643][ T8118] dev_ioctl+0x7b4/0x1140 [ 216.495021][ T8118] sock_do_ioctl+0x239/0x310 [ 216.499657][ T8118] ? sock_show_fdinfo+0xb0/0xb0 [ 216.504576][ T8118] sock_ioctl+0x5ba/0x7e0 [ 216.508974][ T8118] ? sock_poll+0x3e0/0x3e0 [ 216.513528][ T8118] ? bpf_lsm_file_ioctl+0x9/0x10 [ 216.518513][ T8118] ? security_file_ioctl+0x80/0xa0 [ 216.523683][ T8118] ? sock_poll+0x3e0/0x3e0 [ 216.528162][ T8118] __se_sys_ioctl+0xfd/0x170 [ 216.532823][ T8118] do_syscall_64+0x55/0xa0 [ 216.537307][ T8118] ? clear_bhb_loop+0x40/0x90 [ 216.542116][ T8118] ? clear_bhb_loop+0x40/0x90 [ 216.546853][ T8118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.552798][ T8118] RIP: 0033:0x7fd21439bf79 [ 216.557252][ T8118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.576914][ T8118] RSP: 002b:00007fd215315028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.585397][ T8118] RAX: ffffffffffffffda RBX: 00007fd214615fa0 RCX: 00007fd21439bf79 [ 216.593428][ T8118] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000005 [ 216.601449][ T8118] RBP: 00007fd215315090 R08: 0000000000000000 R09: 0000000000000000 [ 216.609723][ T8118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.617743][ T8118] R13: 00007fd214616038 R14: 00007fd214615fa0 R15: 00007ffd78b79c88 [ 216.625883][ T8118] [ 216.682938][ T8118] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 216.700684][ T8118] syzkaller0: entered promiscuous mode [ 216.706305][ T8118] syzkaller0: entered allmulticast mode [ 217.230851][ T8133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.264901][ T8131] netlink: 'syz.1.825': attribute type 21 has an invalid length. [ 217.298988][ T8136] __nla_validate_parse: 5 callbacks suppressed [ 217.299010][ T8136] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.827'. [ 217.543783][ T8147] bpf_get_probe_write_proto: 2 callbacks suppressed [ 217.543800][ T8147] syz.3.831[8147] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.561461][ T8147] syz.3.831[8147] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.170275][ T8166] syz.2.839[8166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.189174][ T8166] syz.2.839[8166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.325469][ T8166] netlink: 'syz.2.839': attribute type 21 has an invalid length. [ 218.369024][ T8172] veth1_to_bond: entered allmulticast mode [ 218.712419][ T8185] syz.3.845[8185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.712582][ T8185] syz.3.845[8185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.961561][ T8194] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 219.242207][ T8202] syz.2.851[8202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.242386][ T8202] syz.2.851[8202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.392146][ T8203] netlink: 'syz.1.853': attribute type 10 has an invalid length. [ 219.599092][ T8202] netlink: 'syz.2.851': attribute type 21 has an invalid length. [ 219.628600][ T8215] syz.3.856[8215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.628785][ T8215] syz.3.856[8215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.645294][ T8201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.884128][ T8220] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 220.146337][ T8227] netlink: 132 bytes leftover after parsing attributes in process `syz.0.861'. [ 220.790437][ T8241] netlink: 'syz.0.866': attribute type 21 has an invalid length. [ 220.993404][ T8247] netlink: 'syz.1.868': attribute type 21 has an invalid length. [ 221.350434][ T8254] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 221.804505][ T8269] netlink: 'syz.2.877': attribute type 10 has an invalid length. [ 221.862043][ T8268] netlink: 'syz.2.877': attribute type 10 has an invalid length. [ 222.286007][ T8279] netlink: 'syz.3.880': attribute type 21 has an invalid length. [ 222.455170][ T8287] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 223.586250][ T8302] IPv6: Can't replace route, no match found [ 223.619434][ T8306] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 224.035346][ T8319] netlink: 'syz.0.894': attribute type 21 has an invalid length. [ 224.081268][ T8312] delete_channel: no stack [ 224.189414][ T8323] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 224.336652][ T8328] bpf_get_probe_write_proto: 8 callbacks suppressed [ 224.336684][ T8328] syz.2.899[8328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.357172][ T8328] syz.2.899[8328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.375494][ T8331] syz.1.900[8331] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.413385][ T8331] syz.1.900[8331] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.458954][ T8328] netlink: 'syz.2.899': attribute type 21 has an invalid length. [ 225.091217][ T8354] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 225.218990][ T8362] syz.0.911[8362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.219148][ T8362] syz.0.911[8362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.258199][ T8362] netlink: 'syz.0.911': attribute type 21 has an invalid length. [ 225.389614][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.912'. [ 225.465013][ T8367] syz.1.914[8367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.465169][ T8367] syz.1.914[8367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.692264][ T8374] FAULT_INJECTION: forcing a failure. [ 225.692264][ T8374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.746797][ T8374] CPU: 0 PID: 8374 Comm: syz.3.916 Not tainted syzkaller #0 [ 225.754170][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 225.764279][ T8374] Call Trace: [ 225.767604][ T8374] [ 225.770596][ T8374] dump_stack_lvl+0x18c/0x250 [ 225.775336][ T8374] ? show_regs_print_info+0x20/0x20 [ 225.780587][ T8374] ? load_image+0x400/0x400 [ 225.785154][ T8374] ? __lock_acquire+0x7d40/0x7d40 [ 225.790227][ T8374] ? snprintf+0xe9/0x140 [ 225.794523][ T8374] should_fail_ex+0x39d/0x4d0 [ 225.799269][ T8374] _copy_to_user+0x2f/0xa0 [ 225.803736][ T8374] simple_read_from_buffer+0xe7/0x150 [ 225.809188][ T8374] proc_fail_nth_read+0x1e8/0x260 [ 225.814262][ T8374] ? proc_fault_inject_write+0x360/0x360 [ 225.819956][ T8374] ? fsnotify_perm+0x271/0x5e0 [ 225.824782][ T8374] ? proc_fault_inject_write+0x360/0x360 [ 225.830466][ T8374] vfs_read+0x28b/0x970 [ 225.834686][ T8374] ? kernel_read+0x1e0/0x1e0 [ 225.839319][ T8374] ? __fget_files+0x28/0x4b0 [ 225.843952][ T8374] ? __fget_files+0x28/0x4b0 [ 225.848590][ T8374] ? __fget_files+0x43d/0x4b0 [ 225.853341][ T8374] ? __fdget_pos+0x2a3/0x330 [ 225.857975][ T8374] ? ksys_read+0x75/0x260 [ 225.862381][ T8374] ksys_read+0x150/0x260 [ 225.866678][ T8374] ? vfs_write+0x990/0x990 [ 225.871147][ T8374] ? lockdep_hardirqs_on+0x98/0x150 [ 225.876393][ T8374] do_syscall_64+0x55/0xa0 [ 225.880860][ T8374] ? clear_bhb_loop+0x40/0x90 [ 225.885578][ T8374] ? clear_bhb_loop+0x40/0x90 [ 225.890343][ T8374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.896375][ T8374] RIP: 0033:0x7fd21435c84e [ 225.900843][ T8374] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 225.920525][ T8374] RSP: 002b:00007fd215314fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 225.928999][ T8374] RAX: ffffffffffffffda RBX: 00007fd2153156c0 RCX: 00007fd21435c84e [ 225.937031][ T8374] RDX: 000000000000000f RSI: 00007fd2153150a0 RDI: 0000000000000004 [ 225.945064][ T8374] RBP: 00007fd215315090 R08: 0000000000000000 R09: 0000000000000000 [ 225.953085][ T8374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.961093][ T8374] R13: 00007fd214616038 R14: 00007fd214615fa0 R15: 00007ffd78b79c88 [ 225.969123][ T8374] [ 226.251919][ T8390] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 226.409465][ T8396] syz.3.924[8396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.409633][ T8396] syz.3.924[8396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.477078][ T8398] netlink: 'syz.1.920': attribute type 10 has an invalid length. [ 227.460024][ T8401] netlink: 'syz.3.924': attribute type 21 has an invalid length. [ 227.468919][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.925'. [ 227.705060][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.929'. [ 228.210297][ T8428] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 228.427027][ T8436] netlink: 'syz.0.936': attribute type 21 has an invalid length. [ 228.577735][ T8438] netlink: 'syz.2.937': attribute type 10 has an invalid length. [ 228.615118][ T8438] hsr_slave_0: left promiscuous mode [ 228.697687][ T8438] hsr_slave_1: left promiscuous mode [ 228.818235][ T8448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.940'. [ 229.104844][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.941'. [ 229.286974][ T8459] netlink: 'syz.2.943': attribute type 3 has an invalid length. [ 229.311781][ T8459] netlink: 132 bytes leftover after parsing attributes in process `syz.2.943'. [ 229.670686][ T8470] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 229.732777][ T8472] bpf_get_probe_write_proto: 6 callbacks suppressed [ 229.732798][ T8472] syz.3.948[8472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.751109][ T8472] syz.3.948[8472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.908389][ T8475] netlink: 'syz.3.948': attribute type 21 has an invalid length. [ 229.972192][ T8474] syz.0.949[8474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.972365][ T8474] syz.0.949[8474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.320039][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'. [ 230.352783][ T8485] netlink: 'syz.0.953': attribute type 10 has an invalid length. [ 230.394272][ T8485] hsr_slave_0: left promiscuous mode [ 230.454561][ T8485] hsr_slave_1: left promiscuous mode [ 231.045087][ T8503] syz.3.960[8503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.045273][ T8503] syz.3.960[8503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.219630][ T8503] netlink: 'syz.3.960': attribute type 21 has an invalid length. [ 231.280066][ T8505] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 231.378034][ T8507] syz.0.961[8507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.378198][ T8507] syz.0.961[8507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.581087][ T8515] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.964'. [ 231.618409][ T8515] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.964'. [ 231.662293][ T8515] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.964'. [ 231.710194][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.965'. [ 231.930800][ T8524] netlink: 'syz.1.968': attribute type 10 has an invalid length. [ 231.947892][ T8524] hsr_slave_1: left promiscuous mode [ 232.088403][ T8522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.976'. [ 232.450602][ T8536] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 232.463275][ T8534] syz.1.972[8534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.463433][ T8534] syz.1.972[8534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.750260][ T8534] netlink: 'syz.1.972': attribute type 21 has an invalid length. [ 232.967038][ T8553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.980'. [ 233.276925][ T8565] netlink: 'syz.2.984': attribute type 9 has an invalid length. [ 233.305578][ T8565] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.984'. [ 233.371077][ T8570] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 233.762050][ T8568] netlink: 'syz.2.984': attribute type 9 has an invalid length. [ 233.799387][ T8568] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.984'. [ 234.068842][ T8590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.991'. [ 234.099391][ T8587] netlink: 'syz.1.990': attribute type 21 has an invalid length. [ 234.163855][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'. [ 234.535652][ T8607] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 234.697827][ T8609] FAULT_INJECTION: forcing a failure. [ 234.697827][ T8609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.741146][ T8609] CPU: 0 PID: 8609 Comm: syz.0.997 Not tainted syzkaller #0 [ 234.748553][ T8609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 234.758667][ T8609] Call Trace: [ 234.761997][ T8609] [ 234.764974][ T8609] dump_stack_lvl+0x18c/0x250 [ 234.769715][ T8609] ? show_regs_print_info+0x20/0x20 [ 234.774995][ T8609] ? load_image+0x400/0x400 [ 234.779557][ T8609] ? __might_fault+0xaa/0x120 [ 234.784289][ T8609] ? __lock_acquire+0x7d40/0x7d40 [ 234.789372][ T8609] should_fail_ex+0x39d/0x4d0 [ 234.794110][ T8609] _copy_from_user+0x2f/0xe0 [ 234.798767][ T8609] kstrtouint_from_user+0xde/0x170 [ 234.803948][ T8609] ? kstrtol_from_user+0x190/0x190 [ 234.809149][ T8609] proc_fail_nth_write+0x8f/0x250 [ 234.814231][ T8609] ? proc_fail_nth_read+0x260/0x260 [ 234.819492][ T8609] ? proc_fail_nth_read+0x260/0x260 [ 234.824741][ T8609] vfs_write+0x296/0x990 [ 234.829047][ T8609] ? file_end_write+0x250/0x250 [ 234.833959][ T8609] ? __fget_files+0x28/0x4b0 [ 234.838605][ T8609] ? __fget_files+0x28/0x4b0 [ 234.843250][ T8609] ? __fget_files+0x43d/0x4b0 [ 234.847991][ T8609] ? __fdget_pos+0x2a3/0x330 [ 234.852639][ T8609] ? ksys_write+0x75/0x260 [ 234.857133][ T8609] ksys_write+0x150/0x260 [ 234.861527][ T8609] ? __ia32_sys_read+0x90/0x90 [ 234.866387][ T8609] ? lockdep_hardirqs_on+0x98/0x150 [ 234.871676][ T8609] do_syscall_64+0x55/0xa0 [ 234.876150][ T8609] ? clear_bhb_loop+0x40/0x90 [ 234.880876][ T8609] ? clear_bhb_loop+0x40/0x90 [ 234.885609][ T8609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.891568][ T8609] RIP: 0033:0x7f803e95c84e [ 234.896064][ T8609] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 234.915732][ T8609] RSP: 002b:00007f803f7e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.924238][ T8609] RAX: ffffffffffffffda RBX: 00007f803f7e56c0 RCX: 00007f803e95c84e [ 234.932266][ T8609] RDX: 0000000000000001 RSI: 00007f803f7e50a0 RDI: 0000000000000005 [ 234.940268][ T8609] RBP: 00007f803f7e5090 R08: 0000000000000000 R09: 0000000000000000 [ 234.948264][ T8609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.956265][ T8609] R13: 00007f803ec16038 R14: 00007f803ec15fa0 R15: 00007ffcf154b8b8 [ 234.964285][ T8609] [ 235.161819][ T8618] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 235.421610][ T8605] netlink: 'syz.2.995': attribute type 10 has an invalid length. [ 236.081766][ T8639] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 236.188355][ T8630] syzkaller0: entered promiscuous mode [ 236.202922][ T8630] syzkaller0: entered allmulticast mode [ 238.613287][ T8657] __nla_validate_parse: 1 callbacks suppressed [ 238.613305][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1013'. [ 238.733665][ T8669] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 238.822187][ T8671] netlink: 'syz.3.1019': attribute type 153 has an invalid length. [ 238.837680][ T8671] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1019'. [ 239.402899][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1027'. [ 239.418924][ T8697] FAULT_INJECTION: forcing a failure. [ 239.418924][ T8697] name failslab, interval 1, probability 0, space 0, times 0 [ 239.440002][ T8697] CPU: 1 PID: 8697 Comm: syz.2.1029 Not tainted syzkaller #0 [ 239.447471][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 239.457583][ T8697] Call Trace: [ 239.460906][ T8697] [ 239.463877][ T8697] dump_stack_lvl+0x18c/0x250 [ 239.468614][ T8697] ? show_regs_print_info+0x20/0x20 [ 239.473859][ T8697] ? load_image+0x400/0x400 [ 239.478399][ T8697] ? verify_lock_unused+0x140/0x140 [ 239.483643][ T8697] ? perf_trace_lock+0xfc/0x3b0 [ 239.488563][ T8697] should_fail_ex+0x39d/0x4d0 [ 239.493294][ T8697] should_failslab+0x9/0x20 [ 239.497823][ T8697] slab_pre_alloc_hook+0x59/0x310 [ 239.502903][ T8697] kmem_cache_alloc+0x5a/0x2d0 [ 239.507728][ T8697] ? skb_clone+0x1eb/0x370 [ 239.512193][ T8697] skb_clone+0x1eb/0x370 [ 239.516469][ T8697] __netlink_deliver_tap+0x41c/0x830 [ 239.521826][ T8697] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.527081][ T8697] netlink_deliver_tap+0x19c/0x1b0 [ 239.532274][ T8697] netlink_sendskb+0x68/0x130 [ 239.537024][ T8697] netlink_ack+0xce1/0x1180 [ 239.541587][ T8697] ? __dev_queue_xmit+0x26b/0x36b0 [ 239.546750][ T8697] ? netlink_dump+0xe50/0xe50 [ 239.551468][ T8697] ? perf_trace_lock+0xfc/0x3b0 [ 239.556386][ T8697] netlink_rcv_skb+0x2c5/0x4d0 [ 239.561224][ T8697] ? rtnetlink_bind+0x80/0x80 [ 239.565938][ T8697] ? netlink_ack+0x1180/0x1180 [ 239.570786][ T8697] ? __lock_acquire+0x7d40/0x7d40 [ 239.575861][ T8697] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.581093][ T8697] netlink_unicast+0x751/0x8d0 [ 239.585899][ T8697] netlink_sendmsg+0x8d0/0xbf0 [ 239.590709][ T8697] ? netlink_getsockopt+0x590/0x590 [ 239.595960][ T8697] ? aa_sock_msg_perm+0x94/0x150 [ 239.600924][ T8697] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 239.606235][ T8697] ? security_socket_sendmsg+0x80/0xa0 [ 239.611730][ T8697] ? netlink_getsockopt+0x590/0x590 [ 239.616978][ T8697] ____sys_sendmsg+0x5ba/0x960 [ 239.621797][ T8697] ? __asan_memset+0x22/0x40 [ 239.626427][ T8697] ? __sys_sendmsg_sock+0x30/0x30 [ 239.631523][ T8697] ? __import_iovec+0x5f2/0x850 [ 239.636453][ T8697] ? import_iovec+0x73/0xa0 [ 239.641009][ T8697] ___sys_sendmsg+0x2a6/0x360 [ 239.645716][ T8697] ? __sys_sendmsg+0x2a0/0x2a0 [ 239.650560][ T8697] ? __lock_acquire+0x7d40/0x7d40 [ 239.655747][ T8697] __se_sys_sendmsg+0x1c2/0x2b0 [ 239.660646][ T8697] ? __x64_sys_sendmsg+0x80/0x80 [ 239.665643][ T8697] ? lockdep_hardirqs_on+0x98/0x150 [ 239.670882][ T8697] do_syscall_64+0x55/0xa0 [ 239.675347][ T8697] ? clear_bhb_loop+0x40/0x90 [ 239.680044][ T8697] ? clear_bhb_loop+0x40/0x90 [ 239.684759][ T8697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.690705][ T8697] RIP: 0033:0x7f090379bf79 [ 239.695155][ T8697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.714790][ T8697] RSP: 002b:00007f090463b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.723247][ T8697] RAX: ffffffffffffffda RBX: 00007f0903a15fa0 RCX: 00007f090379bf79 [ 239.731280][ T8697] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 239.739275][ T8697] RBP: 00007f090463b090 R08: 0000000000000000 R09: 0000000000000000 [ 239.747270][ T8697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.755267][ T8697] R13: 00007f0903a16038 R14: 00007f0903a15fa0 R15: 00007ffc61185d38 [ 239.763291][ T8697] [ 239.971344][ T8705] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 240.004101][ T8706] netlink: 'syz.1.1031': attribute type 153 has an invalid length. [ 240.018813][ T8706] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1031'. [ 240.250330][ T8715] bpf_get_probe_write_proto: 2 callbacks suppressed [ 240.250350][ T8715] syz.2.1037[8715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.262336][ T8715] syz.2.1037[8715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.471709][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1039'. [ 240.893767][ T8735] netlink: 'syz.2.1045': attribute type 29 has an invalid length. [ 240.919764][ T8735] netlink: 'syz.2.1045': attribute type 3 has an invalid length. [ 240.928088][ T8735] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1045'. [ 240.962741][ T8741] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 241.129901][ T8746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1051'. [ 241.158903][ T8747] syz.1.1049[8747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.159058][ T8747] syz.1.1049[8747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.449499][ T8760] netlink: 'syz.2.1054': attribute type 153 has an invalid length. [ 241.490816][ T8760] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1054'. [ 241.554372][ T8763] FAULT_INJECTION: forcing a failure. [ 241.554372][ T8763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.589337][ T8765] netlink: 'syz.0.1057': attribute type 3 has an invalid length. [ 241.597774][ T8763] CPU: 1 PID: 8763 Comm: syz.3.1056 Not tainted syzkaller #0 [ 241.605208][ T8763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 241.615310][ T8763] Call Trace: [ 241.618633][ T8763] [ 241.621605][ T8763] dump_stack_lvl+0x18c/0x250 [ 241.626364][ T8763] ? show_regs_print_info+0x20/0x20 [ 241.631634][ T8763] ? load_image+0x400/0x400 [ 241.636195][ T8763] ? __might_fault+0xaa/0x120 [ 241.640915][ T8763] ? __lock_acquire+0x7d40/0x7d40 [ 241.645986][ T8763] should_fail_ex+0x39d/0x4d0 [ 241.650724][ T8763] _copy_from_user+0x2f/0xe0 [ 241.655360][ T8763] ___sys_sendmsg+0x1c7/0x360 [ 241.660087][ T8763] ? get_pid_task+0x20/0x1e0 [ 241.664733][ T8763] ? __sys_sendmsg+0x2a0/0x2a0 [ 241.669567][ T8763] ? __lock_acquire+0x7d40/0x7d40 [ 241.674685][ T8763] __se_sys_sendmsg+0x1c2/0x2b0 [ 241.679583][ T8763] ? __x64_sys_sendmsg+0x80/0x80 [ 241.684661][ T8763] ? lockdep_hardirqs_on+0x98/0x150 [ 241.689909][ T8763] do_syscall_64+0x55/0xa0 [ 241.694391][ T8763] ? clear_bhb_loop+0x40/0x90 [ 241.699118][ T8763] ? clear_bhb_loop+0x40/0x90 [ 241.703823][ T8763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.709745][ T8763] RIP: 0033:0x7fd21439bf79 [ 241.714186][ T8763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.733822][ T8763] RSP: 002b:00007fd215315028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.742279][ T8763] RAX: ffffffffffffffda RBX: 00007fd214615fa0 RCX: 00007fd21439bf79 [ 241.750280][ T8763] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 241.758348][ T8763] RBP: 00007fd215315090 R08: 0000000000000000 R09: 0000000000000000 [ 241.766345][ T8763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.774336][ T8763] R13: 00007fd214616038 R14: 00007fd214615fa0 R15: 00007ffd78b79c88 [ 241.782346][ T8763] [ 242.034916][ T8776] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 242.056039][ T8773] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1059'. [ 242.798067][ T8773] caif0: entered promiscuous mode [ 242.811360][ T8773] caif0: entered allmulticast mode [ 242.838416][ T8783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1062'. [ 242.976866][ T8786] syz.0.1063[8786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.977024][ T8786] syz.0.1063[8786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.334943][ T8796] netlink: 'syz.2.1066': attribute type 21 has an invalid length. [ 243.567755][ T8806] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 243.608833][ T8807] netlink: 'syz.3.1070': attribute type 153 has an invalid length. [ 243.650897][ T8807] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1070'. [ 243.812614][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1074'. [ 244.412360][ T8828] netlink: 'syz.1.1081': attribute type 21 has an invalid length. [ 244.500477][ T8832] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 244.670164][ T8843] FAULT_INJECTION: forcing a failure. [ 244.670164][ T8843] name failslab, interval 1, probability 0, space 0, times 0 [ 244.700593][ T8843] CPU: 1 PID: 8843 Comm: syz.2.1085 Not tainted syzkaller #0 [ 244.708097][ T8843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 244.718202][ T8843] Call Trace: [ 244.721575][ T8843] [ 244.724562][ T8843] dump_stack_lvl+0x18c/0x250 [ 244.729284][ T8843] ? show_regs_print_info+0x20/0x20 [ 244.734519][ T8843] ? load_image+0x400/0x400 [ 244.739060][ T8843] ? __might_sleep+0xe0/0xe0 [ 244.744205][ T8843] ? __lock_acquire+0x7d40/0x7d40 [ 244.749260][ T8843] should_fail_ex+0x39d/0x4d0 [ 244.753971][ T8843] should_failslab+0x9/0x20 [ 244.758500][ T8843] slab_pre_alloc_hook+0x59/0x310 [ 244.763559][ T8843] ? __inet_diag_dump_start+0x8b/0x9f0 [ 244.769051][ T8843] __kmem_cache_alloc_node+0x53/0x250 [ 244.774476][ T8843] ? __inet_diag_dump_start+0x8b/0x9f0 [ 244.779975][ T8843] kmalloc_trace+0x2a/0xe0 [ 244.784422][ T8843] __inet_diag_dump_start+0x8b/0x9f0 [ 244.789736][ T8843] ? netlink_lookup+0x30/0x200 [ 244.794540][ T8843] ? netlink_lookup+0x30/0x200 [ 244.799351][ T8843] __netlink_dump_start+0x4a9/0x810 [ 244.804603][ T8843] inet_diag_rcv_msg_compat+0x215/0x440 [ 244.810178][ T8843] ? __inet_diag_dump+0x380/0x380 [ 244.815236][ T8843] ? sock_diag_rcv_msg+0xd1/0x600 [ 244.820293][ T8843] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 244.826046][ T8843] ? inet_diag_dump_start_compat+0x20/0x20 [ 244.831883][ T8843] ? inet_diag_dump+0x50/0x50 [ 244.836602][ T8843] ? __inet_diag_dump+0x380/0x380 [ 244.841675][ T8843] sock_diag_rcv_msg+0x3d8/0x600 [ 244.846651][ T8843] netlink_rcv_skb+0x241/0x4d0 [ 244.851451][ T8843] ? sock_diag_bind+0xb0/0xb0 [ 244.856159][ T8843] ? netlink_ack+0x1180/0x1180 [ 244.860962][ T8843] ? __lock_acquire+0x7d40/0x7d40 [ 244.866028][ T8843] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.871257][ T8843] sock_diag_rcv+0x2a/0x40 [ 244.875713][ T8843] netlink_unicast+0x751/0x8d0 [ 244.880534][ T8843] netlink_sendmsg+0x8d0/0xbf0 [ 244.885350][ T8843] ? netlink_getsockopt+0x590/0x590 [ 244.890597][ T8843] ? aa_sock_msg_perm+0x94/0x150 [ 244.895568][ T8843] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 244.900889][ T8843] ? security_socket_sendmsg+0x80/0xa0 [ 244.906375][ T8843] ? netlink_getsockopt+0x590/0x590 [ 244.911605][ T8843] ____sys_sendmsg+0x5ba/0x960 [ 244.916416][ T8843] ? __asan_memset+0x22/0x40 [ 244.921038][ T8843] ? __sys_sendmsg_sock+0x30/0x30 [ 244.926098][ T8843] ? __import_iovec+0x5f2/0x850 [ 244.931048][ T8843] ? import_iovec+0x73/0xa0 [ 244.935603][ T8843] ___sys_sendmsg+0x2a6/0x360 [ 244.940394][ T8843] ? __sys_sendmsg+0x2a0/0x2a0 [ 244.945211][ T8843] ? __lock_acquire+0x7d40/0x7d40 [ 244.950418][ T8843] __se_sys_sendmsg+0x1c2/0x2b0 [ 244.955302][ T8843] ? __x64_sys_sendmsg+0x80/0x80 [ 244.960394][ T8843] ? lockdep_hardirqs_on+0x98/0x150 [ 244.965629][ T8843] do_syscall_64+0x55/0xa0 [ 244.970080][ T8843] ? clear_bhb_loop+0x40/0x90 [ 244.974877][ T8843] ? clear_bhb_loop+0x40/0x90 [ 244.979578][ T8843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.985502][ T8843] RIP: 0033:0x7f090379bf79 [ 244.990027][ T8843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.009925][ T8843] RSP: 002b:00007f090461a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.018454][ T8843] RAX: ffffffffffffffda RBX: 00007f0903a16090 RCX: 00007f090379bf79 [ 245.026449][ T8843] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 245.034478][ T8843] RBP: 00007f090461a090 R08: 0000000000000000 R09: 0000000000000000 [ 245.042479][ T8843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.050660][ T8843] R13: 00007f0903a16128 R14: 00007f0903a16090 R15: 00007ffc61185d38 [ 245.058681][ T8843] [ 245.202307][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1087'. [ 245.602984][ T8860] syz.3.1090[8860] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.603178][ T8860] syz.3.1090[8860] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.729910][ T8865] FAULT_INJECTION: forcing a failure. [ 245.729910][ T8865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.756750][ T8865] CPU: 0 PID: 8865 Comm: syz.1.1094 Not tainted syzkaller #0 [ 245.764205][ T8865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 245.774302][ T8865] Call Trace: [ 245.777624][ T8865] [ 245.780595][ T8865] dump_stack_lvl+0x18c/0x250 [ 245.785331][ T8865] ? show_regs_print_info+0x20/0x20 [ 245.790600][ T8865] ? load_image+0x400/0x400 [ 245.795154][ T8865] ? __might_fault+0xaa/0x120 [ 245.799883][ T8865] ? __lock_acquire+0x7d40/0x7d40 [ 245.804962][ T8865] should_fail_ex+0x39d/0x4d0 [ 245.809697][ T8865] _copy_from_user+0x2f/0xe0 [ 245.814334][ T8865] generic_map_update_batch+0x59a/0x810 [ 245.819929][ T8865] ? rcu_read_unlock+0xa0/0xa0 [ 245.824751][ T8865] ? __fdget+0x180/0x210 [ 245.829030][ T8865] ? rcu_read_unlock+0xa0/0xa0 [ 245.833819][ T8865] bpf_map_do_batch+0x3d7/0x610 [ 245.838726][ T8865] __sys_bpf+0x381/0x890 [ 245.843010][ T8865] ? bpf_link_show_fdinfo+0x390/0x390 [ 245.848418][ T8865] ? lock_chain_count+0x20/0x20 [ 245.853299][ T8865] __x64_sys_bpf+0x7c/0x90 [ 245.857752][ T8865] do_syscall_64+0x55/0xa0 [ 245.862201][ T8865] ? clear_bhb_loop+0x40/0x90 [ 245.866925][ T8865] ? clear_bhb_loop+0x40/0x90 [ 245.871663][ T8865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.877579][ T8865] RIP: 0033:0x7f18b2d9bf79 [ 245.882043][ T8865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.901694][ T8865] RSP: 002b:00007f18b3bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.910145][ T8865] RAX: ffffffffffffffda RBX: 00007f18b3015fa0 RCX: 00007f18b2d9bf79 [ 245.918184][ T8865] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 245.926177][ T8865] RBP: 00007f18b3bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 245.934166][ T8865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.942164][ T8865] R13: 00007f18b3016038 R14: 00007f18b3015fa0 R15: 00007ffca6da2d48 [ 245.950174][ T8865] [ 246.027564][ T8859] netlink: 'syz.2.1092': attribute type 153 has an invalid length. [ 246.036313][ T8859] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1092'. [ 246.136854][ T8868] netlink: 'syz.0.1095': attribute type 21 has an invalid length. [ 246.202365][ T8871] netlink: 'syz.3.1097': attribute type 10 has an invalid length. [ 246.210388][ T8871] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1097'. [ 246.521114][ T8881] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1100'. [ 246.843949][ T8882] netlink: 'syz.3.1098': attribute type 10 has an invalid length. [ 246.868409][ T8882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.974578][ T8882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.100185][ T8882] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 247.284416][ T8905] syz.0.1107[8905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.284582][ T8905] syz.0.1107[8905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.412365][ T8905] netlink: 'syz.0.1107': attribute type 21 has an invalid length. [ 247.664049][ T8914] netlink: 'syz.1.1109': attribute type 153 has an invalid length. [ 247.701862][ T8914] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1109'. [ 247.835284][ T8920] netlink: 703 bytes leftover after parsing attributes in process `syz.2.1111'. [ 248.292033][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1116'. [ 248.549961][ T8937] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1119'. [ 248.642803][ T8939] syz.2.1120[8939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.642955][ T8939] syz.2.1120[8939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.990004][ T8945] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1121'. [ 249.084655][ T8939] netlink: 'syz.2.1120': attribute type 21 has an invalid length. [ 250.067917][ T8967] netlink: 'syz.2.1127': attribute type 153 has an invalid length. [ 250.093439][ T8967] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1127'. [ 250.369555][ T8971] netlink: 'syz.3.1128': attribute type 21 has an invalid length. [ 250.623079][ T8976] netlink: 'syz.0.1131': attribute type 10 has an invalid length. [ 250.744738][ T8978] syz.3.1132[8978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.744899][ T8978] syz.3.1132[8978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.906161][ T8978] netlink: 'syz.3.1132': attribute type 21 has an invalid length. [ 251.508512][ T9001] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 251.875313][ T9018] netlink: 'syz.0.1142': attribute type 153 has an invalid length. [ 251.886789][ T9018] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1142'. [ 252.131682][ T9023] syz.2.1146[9023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.131842][ T9023] syz.2.1146[9023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.272149][ T9025] netlink: 'syz.3.1147': attribute type 5 has an invalid length. [ 252.559953][ T9037] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 253.101901][ T9057] syz.0.1158[9057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.102065][ T9057] syz.0.1158[9057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.512284][ T9066] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 253.559419][ T9067] netlink: 'syz.2.1161': attribute type 153 has an invalid length. [ 253.607801][ T9067] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1161'. [ 253.803440][ T9077] syz.0.1167[9077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.803611][ T9077] syz.0.1167[9077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.053206][ T9083] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 254.322094][ T9089] syz.0.1170[9089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.322271][ T9089] syz.0.1170[9089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.723445][ T9100] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 255.109579][ T9116] netlink: 'syz.0.1180': attribute type 153 has an invalid length. [ 255.133902][ T9116] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1180'. [ 255.239083][ T9119] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1181'. [ 255.287511][ T9113] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 255.298584][ T9113] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 255.473015][ T9121] netlink: 'syz.1.1184': attribute type 21 has an invalid length. [ 255.737630][ T9130] FAULT_INJECTION: forcing a failure. [ 255.737630][ T9130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.755677][ T9130] CPU: 0 PID: 9130 Comm: syz.1.1188 Not tainted syzkaller #0 [ 255.763115][ T9130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 255.773211][ T9130] Call Trace: [ 255.776535][ T9130] [ 255.779504][ T9130] dump_stack_lvl+0x18c/0x250 [ 255.784247][ T9130] ? show_regs_print_info+0x20/0x20 [ 255.789497][ T9130] ? load_image+0x400/0x400 [ 255.794056][ T9130] ? __lock_acquire+0x7d40/0x7d40 [ 255.799143][ T9130] should_fail_ex+0x39d/0x4d0 [ 255.803876][ T9130] _copy_from_user+0x2f/0xe0 [ 255.808515][ T9130] __copy_msghdr+0x3bb/0x580 [ 255.813168][ T9130] ___sys_sendmsg+0x214/0x360 [ 255.817894][ T9130] ? get_pid_task+0x20/0x1e0 [ 255.822545][ T9130] ? __sys_sendmsg+0x2a0/0x2a0 [ 255.827397][ T9130] ? __lock_acquire+0x7d40/0x7d40 [ 255.832490][ T9130] __se_sys_sendmsg+0x1c2/0x2b0 [ 255.837389][ T9130] ? __x64_sys_sendmsg+0x80/0x80 [ 255.842392][ T9130] ? lockdep_hardirqs_on+0x98/0x150 [ 255.847652][ T9130] do_syscall_64+0x55/0xa0 [ 255.852158][ T9130] ? clear_bhb_loop+0x40/0x90 [ 255.856876][ T9130] ? clear_bhb_loop+0x40/0x90 [ 255.861613][ T9130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.867564][ T9130] RIP: 0033:0x7f18b2d9bf79 [ 255.872050][ T9130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.891716][ T9130] RSP: 002b:00007f18b3bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.900265][ T9130] RAX: ffffffffffffffda RBX: 00007f18b3015fa0 RCX: 00007f18b2d9bf79 [ 255.908286][ T9130] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 255.916324][ T9130] RBP: 00007f18b3bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 255.924340][ T9130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.932360][ T9130] R13: 00007f18b3016038 R14: 00007f18b3015fa0 R15: 00007ffca6da2d48 [ 255.940390][ T9130] [ 256.052444][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.060199][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.131816][ T9133] bpf_get_probe_write_proto: 4 callbacks suppressed [ 256.131835][ T9133] syz.0.1189[9133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.142543][ T9133] syz.0.1189[9133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.445231][ T9139] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 256.768777][ T9148] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1195'. [ 256.813581][ T9150] syz.1.1196[9150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.813738][ T9150] syz.1.1196[9150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.933042][ T9150] netlink: 'syz.1.1196': attribute type 21 has an invalid length. [ 257.028025][ T9157] netlink: 'syz.3.1198': attribute type 3 has an invalid length. [ 257.039676][ T9157] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1198'. [ 257.095398][ T9159] netlink: 'syz.0.1197': attribute type 153 has an invalid length. [ 257.118602][ T9159] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1197'. [ 257.317955][ T9163] syzkaller0: entered promiscuous mode [ 257.327822][ T9163] syzkaller0: entered allmulticast mode [ 257.459017][ T9170] syz.2.1203[9170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.459217][ T9170] syz.2.1203[9170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.829313][ T9172] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 258.032462][ T49] tipc: Subscription rejected, illegal request [ 258.156666][ T9182] syz.2.1209[9182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.156812][ T9182] syz.2.1209[9182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.487557][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.506872][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 343.834697][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.850859][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.859025][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.873110][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.891229][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 343.898799][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.922554][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.940169][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.948451][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.974179][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.987077][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 343.995193][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.153892][ T5776] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 344.169881][ T5776] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 344.179127][ T5776] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 344.188352][ T5776] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 344.201382][ T5776] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 344.209037][ T5776] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.301670][ T5776] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 344.311598][ T5776] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 344.319513][ T5776] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 344.328096][ T5776] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 344.337007][ T5776] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 344.345556][ T5776] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 345.960895][ T5776] Bluetooth: hci4: command tx timeout [ 346.040803][ T5776] Bluetooth: hci5: command tx timeout [ 346.280829][ T5776] Bluetooth: hci6: command tx timeout [ 346.362450][ T5776] Bluetooth: hci7: command tx timeout [ 348.040697][ T5776] Bluetooth: hci4: command tx timeout [ 348.120690][ T5776] Bluetooth: hci5: command tx timeout [ 348.360752][ T5776] Bluetooth: hci6: command tx timeout [ 348.446331][ T5776] Bluetooth: hci7: command tx timeout [ 350.120738][ T5776] Bluetooth: hci4: command tx timeout [ 350.201005][ T5776] Bluetooth: hci5: command tx timeout [ 350.440740][ T5776] Bluetooth: hci6: command tx timeout [ 350.520751][ T5776] Bluetooth: hci7: command tx timeout [ 352.200923][ T5776] Bluetooth: hci4: command tx timeout [ 352.280722][ T5776] Bluetooth: hci5: command tx timeout [ 352.525760][ T5776] Bluetooth: hci6: command tx timeout [ 352.600721][ T5776] Bluetooth: hci7: command tx timeout [ 363.170506][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 363.177182][ C1] rcu: 1-....: (10497 ticks this GP) idle=2044/1/0x4000000000000000 softirq=25641/25642 fqs=4319 [ 363.188636][ C1] rcu: hardirqs softirqs csw/system [ 363.195075][ C1] rcu: number: 1181850 5 0 [ 363.201506][ C1] rcu: cputime: 15368 37131 70 ==> 52510(ms) [ 363.209338][ C1] rcu: (t=10502 jiffies g=33369 q=899 ncpus=2) [ 363.215729][ C1] CPU: 1 PID: 9180 Comm: syz.3.1208 Not tainted syzkaller #0 [ 363.223194][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 363.233299][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x19a/0x1d0 [ 363.240191][ C1] Code: 00 4d 85 e4 75 16 e8 45 c3 0f 00 eb 15 e8 3e c3 0f 00 e8 09 fb 0c 09 4d 85 e4 74 ea e8 2f c3 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 363.259830][ C1] RSP: 0018:ffffc900001efe40 EFLAGS: 00000246 [ 363.265921][ C1] RAX: ffffffff81775181 RBX: 0000000000000000 RCX: ffff888031ca3c00 [ 363.273915][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 363.281924][ C1] RBP: ffffc900001efef8 R08: ffffffff911bf5f7 R09: 1ffffffff2237ebe [ 363.289943][ C1] R10: dffffc0000000000 R11: fffffbfff2237ebf R12: 0000000000000200 [ 363.297940][ C1] R13: 000001fb63109b96 R14: 1ffff9200003dfc8 R15: dffffc0000000000 [ 363.305943][ C1] FS: 00007fd2153156c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 363.314909][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.321521][ C1] CR2: 00007f803f7c3ff8 CR3: 00000000783d7000 CR4: 00000000003506e0 [ 363.329622][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 363.337621][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 363.345630][ C1] Call Trace: [ 363.348940][ C1] [ 363.351811][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 363.357137][ C1] ? skb_network_protocol+0x529/0x780 [ 363.362546][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 363.368569][ C1] ktime_get_with_offset+0x94/0x330 [ 363.373813][ C1] netif_rx_internal+0x344/0x4e0 [ 363.378800][ C1] ? dev_forward_skb+0x50/0x50 [ 363.383595][ C1] ? rcu_is_watching+0x15/0xb0 [ 363.388382][ C1] __netif_rx+0x78/0xc0 [ 363.392560][ C1] veth_xmit+0x550/0x9f0 [ 363.396829][ C1] ? veth_xmit+0x60/0x9f0 [ 363.401195][ C1] dev_hard_start_xmit+0x246/0x740 [ 363.406357][ C1] __dev_queue_xmit+0x1ac2/0x36b0 [ 363.411411][ C1] ? __dev_queue_xmit+0x26b/0x36b0 [ 363.416557][ C1] ? lock_chain_count+0x20/0x20 [ 363.421433][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 363.427609][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 363.432929][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 363.439106][ C1] ? macvlan_broadcast+0x180/0x620 [ 363.444246][ C1] ? macvlan_broadcast+0x180/0x620 [ 363.449382][ C1] ? macvlan_broadcast+0x5aa/0x620 [ 363.454531][ C1] macvlan_start_xmit+0x2ff/0x670 [ 363.459594][ C1] ? macvlan_stop+0x3e0/0x3e0 [ 363.464317][ C1] ? macvlan_start_xmit+0xa/0x670 [ 363.469363][ C1] dev_hard_start_xmit+0x246/0x740 [ 363.474515][ C1] __dev_queue_xmit+0x1ac2/0x36b0 [ 363.479561][ C1] ? __dev_queue_xmit+0x26b/0x36b0 [ 363.484891][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 363.491086][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 363.496317][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 363.502497][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 363.507810][ C1] ? __asan_memcpy+0x40/0x70 [ 363.512438][ C1] ? eth_header+0x11b/0x200 [ 363.516982][ C1] ? macvlan_sync_address+0x810/0x810 [ 363.522477][ C1] ? neigh_resolve_output+0x618/0x730 [ 363.527905][ C1] ip6_finish_output2+0xe3d/0x1630 [ 363.533058][ C1] ? ip6_finish_output2+0x645/0x1630 [ 363.538381][ C1] ? ip6_mtu+0x7d/0x3f0 [ 363.542560][ C1] ? nf_hook+0x390/0x390 [ 363.546839][ C1] ? ip6_finish_output+0x57b/0x820 [ 363.551981][ C1] ndisc_send_skb+0xc26/0x14f0 [ 363.556778][ C1] ? ndisc_send_skb+0x1f5/0x14f0 [ 363.561758][ C1] ? ndisc_mc_map+0x680/0x680 [ 363.566481][ C1] ? skb_dst+0xd0/0xd0 [ 363.570702][ C1] addrconf_rs_timer+0x2d5/0x630 [ 363.575695][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 363.581791][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 363.587805][ C1] call_timer_fn+0x189/0x540 [ 363.592421][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 363.598528][ C1] ? call_timer_fn+0xd2/0x540 [ 363.603223][ C1] ? __run_timers+0x800/0x800 [ 363.607931][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 363.614032][ C1] __run_timers+0x542/0x800 [ 363.618569][ C1] ? detach_timer+0x2b0/0x2b0 [ 363.623364][ C1] ? lock_chain_count+0x20/0x20 [ 363.628244][ C1] run_timer_softirq+0x67/0xf0 [ 363.633039][ C1] handle_softirqs+0x280/0x820 [ 363.637838][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 363.642629][ C1] ? do_softirq+0x1a0/0x1a0 [ 363.647163][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 363.652394][ C1] __irq_exit_rcu+0xd3/0x190 [ 363.657010][ C1] ? irq_exit_rcu+0x20/0x20 [ 363.661587][ C1] irq_exit_rcu+0x9/0x20 [ 363.665878][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 363.671541][ C1] [ 363.674494][ C1] [ 363.677441][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 363.683449][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 363.689283][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 f0 93 30 09 e8 7b 23 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 363.708914][ C1] RSP: 0018:ffffc900194e77f8 EFLAGS: 00000282 [ 363.715007][ C1] RAX: 8297278c08d3ab00 RBX: 0000000000000000 RCX: 8297278c08d3ab00 [ 363.723006][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 363.731023][ C1] RBP: ffffc900194e7850 R08: ffffffff911bf5ff R09: 1ffffffff2237ebf [ 363.739021][ C1] R10: dffffc0000000000 R11: fffffbfff2237ec0 R12: ffff888031ca3c00 [ 363.747012][ C1] R13: dffffc0000000000 R14: ffff88805a4dbc00 R15: ffff8880b8f3cac8 [ 363.755043][ C1] ? finish_task_switch+0x265/0x8f0 [ 363.760275][ C1] __schedule+0x155b/0x45a0 [ 363.764816][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 363.770933][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 363.776956][ C1] ? asan.module_dtor+0x20/0x20 [ 363.781842][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 363.787088][ C1] preempt_schedule_irq+0xbf/0x150 [ 363.792256][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 363.798014][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 363.803852][ C1] irqentry_exit+0x67/0x70 [ 363.808288][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 363.814319][ C1] RIP: 0010:perf_install_in_context+0x5c0/0x920 [ 363.820607][ C1] Code: 4d 89 ec 49 c1 ec 03 43 0f b6 04 3c 84 c0 75 63 41 8b 7d 00 48 c7 c6 e0 bf af 81 4c 89 f2 b9 01 00 00 00 e8 b2 ac cc ff 89 c3 <31> ff 89 c6 e8 57 bc d7 ff 85 db 74 0c e8 9e b8 d7 ff 83 fb f5 74 [ 363.840250][ C1] RSP: 0018:ffffc900194e7be0 EFLAGS: 00000246 [ 363.846344][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 363.854340][ C1] RDX: ffffc9000d8cb000 RSI: 0000000000011359 RDI: 000000000001135a [ 363.862331][ C1] RBP: ffffc900194e7d30 R08: ffffffff911bf5ff R09: 1ffffffff2237ebf [ 363.870430][ C1] R10: dffffc0000000000 R11: fffffbfff2237ec0 R12: 1ffff11006394782 [ 363.878448][ C1] R13: ffff888031ca3c14 R14: ffffc900194e7c60 R15: dffffc0000000000 [ 363.886573][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 363.892587][ C1] ? add_event_to_ctx+0x1180/0x1180 [ 363.897830][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 363.903057][ C1] ? perf_event__header_size+0x165/0x220 [ 363.908715][ C1] __se_sys_perf_event_open+0x1836/0x1c50 [ 363.914464][ C1] ? security_bpf+0x7e/0xa0 [ 363.919021][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 363.924694][ C1] ? lock_chain_count+0x20/0x20 [ 363.929617][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 363.934870][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 363.940540][ C1] do_syscall_64+0x55/0xa0 [ 363.944995][ C1] ? clear_bhb_loop+0x40/0x90 [ 363.949700][ C1] ? clear_bhb_loop+0x40/0x90 [ 363.954402][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.960326][ C1] RIP: 0033:0x7fd21439bf79 [ 363.964769][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.984414][ C1] RSP: 002b:00007fd215315028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 363.992938][ C1] RAX: ffffffffffffffda RBX: 00007fd214615fa0 RCX: 00007fd21439bf79 [ 364.000936][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 364.008927][ C1] RBP: 00007fd2144327e0 R08: 0000000000000002 R09: 0000000000000000 [ 364.016923][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 364.024918][ C1] R13: 00007fd214616038 R14: 00007fd214615fa0 R15: 00007ffd78b79c88 [ 364.032928][ C1]