last executing test programs: 7.624097325s ago: executing program 4 (id=826): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async, rerun: 32) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) (async, rerun: 32) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000100)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[r1, 0x1, 0x1], &(0x7f0000000200)=[{0x5, 0x4, 0xc, 0x3}, {0x3, 0x3, 0xe}, {0x3, 0x2, 0x7, 0xc}, {0x3, 0x1, 0xb, 0xe}, {0x4, 0x4, 0x4, 0x2}]}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_tracing={0x1a, 0x13, &(0x7f0000001500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000015c0)='GPL\x00', 0x200, 0x37, &(0x7f0000001600)=""/55, 0x100, 0x44, '\x00', 0x0, 0x19, r0, 0x8, &(0x7f0000001640)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x0, 0x7fff, 0x8}, 0x10, 0xbdba, r2, 0x6, &(0x7f00000016c0)=[r1, r1, r1, r1, r1], &(0x7f0000001700)=[{0x5, 0x1, 0xf, 0x2}, {0x4, 0x5, 0x5, 0x9}, {0x0, 0x5, 0xd, 0x3}, {0x5, 0x4, 0x3, 0xa}, {0x2, 0x1, 0x9, 0xa}, {0x4, 0x4, 0x6, 0x4}], 0x10, 0x6}, 0x94) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (rerun: 32) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001940)=@bpf_ext={0x1c, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb2a4, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x0, 0x3, 0x7, 0x8, 0x10, 0xfffffffffffffff0}, @generic={0x3, 0x9, 0x1, 0x6, 0xc6}]}, &(0x7f0000000480)='syzkaller\x00', 0x8, 0x1000, &(0x7f00000004c0)=""/4096, 0x41000, 0x20, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000014c0)={0x2, 0x1, 0x9c7, 0xe72ec8a}, 0x10, 0xdd8c, r4, 0x7, &(0x7f0000001880)=[r1, r5, r1, r1, r1, r1, r1], &(0x7f00000018c0)=[{0x4, 0x3, 0x8, 0xa}, {0x0, 0x4, 0x7, 0xa}, {0x0, 0x2, 0x1, 0x1}, {0x2, 0x1, 0x10}, {0x5, 0x4, 0x5, 0x2}, {0x0, 0x2, 0x7, 0x3}, {0x0, 0x2, 0xa, 0x1}], 0x10, 0x7d4}, 0x94) (async, rerun: 64) r7 = socket$kcm(0x29, 0x0, 0x0) (rerun: 64) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x7f, 0x0, r1, 0x6, '\x00', 0x0, r7, 0x5, 0x3, 0x800}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b00)={{r1, 0xffffffffffffffff}, &(0x7f0000001a80), &(0x7f0000001ac0)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b40)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f40)={0x6, 0x33, &(0x7f0000001b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x1, 0x7, 0xa, 0xa, 0x40, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001d40)='syzkaller\x00', 0xa4b, 0x86, &(0x7f0000001d80)=""/134, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001e40)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000001e80)={0x4, 0x1, 0x0, 0xfffffffb}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001ec0)=[r5, r1], &(0x7f0000001f00)=[{0x3, 0x4, 0xf, 0x4}, {0x0, 0x4, 0xb, 0x1}, {0x0, 0x5, 0x3, 0xa}], 0x10, 0x9}, 0x94) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000002000), 0x200, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002280)={0x11, 0xa, &(0x7f0000002040)=@raw=[@alu={0x4, 0x0, 0x5, 0x9, 0x6, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000020c0)='syzkaller\x00', 0x8, 0x5d, &(0x7f0000002100)=""/93, 0x41000, 0x60, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000002180)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000021c0)={0x4, 0x7, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002200)=[r8, r3, r10, r8, r9, r1, r5], &(0x7f0000002240)=[{0x4, 0x3, 0x4, 0x6}, {0x3, 0x1ff, 0xc, 0x6}, {0x3, 0x5, 0x0, 0x4}, {0x0, 0x3, 0xe, 0x8}], 0x10, 0x4}, 0x94) ioctl$TUNSETFILTEREBPF(r11, 0x800454e1, &(0x7f0000002340)=r12) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000002380), 0x600000, 0x0) ioctl$TUNSETCARRIER(r13, 0x400454e2, &(0x7f00000023c0)) (async) ioctl$TUNSETLINK(r13, 0x400454cd, 0x0) (async) r14 = perf_event_open$cgroup(&(0x7f0000002440)={0x2, 0x80, 0xf, 0x0, 0x9, 0x80, 0x0, 0x6e05, 0x10002, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000002400), 0xa}, 0x240, 0xfffffffffffff169, 0x7, 0x6, 0xe, 0x13c, 0x7, 0x0, 0x80000000, 0x0, 0x3}, 0xffffffffffffffff, 0xb, r6, 0x7) ioctl$PERF_EVENT_IOC_SET_BPF(r14, 0x40042408, r6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002880)={r8, 0x58, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x11, 0x3a, &(0x7f00000024c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xab5, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7f}, @jmp={0x5, 0x0, 0x8, 0x1b, 0x7, 0x10, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff0001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000026c0)='GPL\x00', 0x1, 0xc7, &(0x7f0000002700)=""/199, 0x41100, 0x30, '\x00', r15, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000028c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000002900)={0x3, 0x4, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002940)=[r10, r8, r5, r3, r9, r9, r10, r10, r10], 0x0, 0x10, 0x2}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002a40)={r10, 0xffffffffffffffff}, 0x4) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002f80)={r6, 0xe0, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002c40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000002c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002d00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f0000002d40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000002dc0), &(0x7f0000002e00), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000002e40)}}, 0x10) (async, rerun: 64) r19 = bpf$MAP_CREATE(0x0, &(0x7f0000002fc0)=@base={0x1b, 0x0, 0x2, 0x8, 0x16000, r1, 0x8, '\x00', r15, r0, 0x5, 0x0, 0x3}, 0x50) (async) r20 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003040)={0x1b, 0x0, 0x0, 0x81, 0x0, r8, 0x5, '\x00', r15, r0, 0x2, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x11, 0x10, &(0x7f0000002a80)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r16}}, @ldst={0x0, 0x3, 0x4, 0x8, 0x9, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f0000002b00)='GPL\x00', 0xfffffffc, 0xe6, &(0x7f0000002b40)=""/230, 0x41100, 0x20, '\x00', r15, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r18, r1, 0x2, &(0x7f00000030c0)=[r5, r5, r19, r20, r8, r3], &(0x7f0000003100)=[{0x5, 0x1, 0x8, 0x4}, {0x0, 0x2, 0x2, 0xb}], 0x10, 0x8}, 0x94) (async) r21 = bpf$MAP_CREATE(0x0, &(0x7f0000003400)=@bloom_filter={0x1e, 0x3, 0x1c76, 0x6, 0x2044, r1, 0x8001, '\x00', r17, r0, 0x1, 0x3, 0x3, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003540)={0xd, 0x15, &(0x7f0000003200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0xa, 0xa, 0xb, 0xffffffffffffffc0, 0xffffffffffffffff}, @exit, @jmp={0x5, 0x1, 0xb, 0x5, 0x4, 0x1, 0x10}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @exit, @ringbuf_query, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff4}}]}, &(0x7f00000032c0)='syzkaller\x00', 0x5, 0x7e, &(0x7f0000003300)=""/126, 0x40f00, 0x4e, '\x00', r17, @fallback=0x21, r14, 0x8, &(0x7f0000003380)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000033c0)={0x1, 0xb, 0x3, 0x6}, 0x10, r18, 0xffffffffffffffff, 0x7, &(0x7f0000003480)=[r5, r21, r8, r3], &(0x7f00000034c0)=[{0x2, 0x4, 0x1, 0x4}, {0x4, 0x5, 0xd, 0x5}, {0x3, 0x1, 0x1, 0xd8c26b3f9a6f8fb}, {0x2, 0x1, 0x1, 0xc}, {0x1, 0x4, 0x4}, {0x1, 0x5, 0x10, 0x8}, {0x0, 0x4, 0x8, 0x8}], 0x10, 0x1}, 0x94) 6.766604705s ago: executing program 4 (id=831): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x9f1}, 0x100080, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x10000) 6.027276068s ago: executing program 0 (id=832): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0x4000000}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001040)="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", 0x2f0}], 0x1}, 0x8400) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="5c00000012006bab9a1fe3d86e17aa0a076b876c1d00489f8ed74c133c50d1650400010000001d009580472760bc06000000a7052c1e6182949a36510a84c9fa896e0a374841e1028b8f0b79c139977394e70e4509c5bb000011d600", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x80, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000740)="0a5a0574a497161d5689f0bea01f95bc4c6b6b0e0061c96e4c22b442bdc3ce33c78840f7f0037a7634a89802adb31b4d12ee5c0245ad1e82e4f78c0c8e103f1f873f554adb05ffffff97000000fe9e62ea344ea48a3b38cb01cb8ac92c768846b5d562e9a523b4", 0x67}, {&(0x7f0000000340)="b9bbee65f00997efd525c389e368337029b44ba03137ff773e36a0413e6d81543e81ae0cd5df98e0b53ac10d41263defa6bbd2007d65672bcd79160f3b800a1eee7ab9614fffb21e5d3b85906a1fa97ade5de7dc9b6fb676f417bd65721c688b7f924341b47be5a859f3725e9a7632df58558f2b64105d7b43b269d9aedaa7139e08656e0c348ffb21a57187a234a211e1f85f172f44f66dc9be23cfb6405c583dc57f3bce702d09b977d722faeb7dc57f91d66b7ea10662e27ae665481d9ef1cd65e8c81108e4900a6429597d", 0xcd}, {&(0x7f0000000540)="3bbf56fba7ce09119ea7175f38c076efa4fb2147a07d9af2f89af405ea11106786c51cb24c6fa16b95c8cc9784577030adc1c15abd56cce353fbd08d6db942e80838908114ecf8222e4661f4b8cbb4481ae21770787c5e9cbcdc94b50b54ef733405820e3ba4597037ba8d709432227ef6fa43f8075a0b90688555399d9330d2fb16a2ad3f40a220bba9480d55d68c21164873ebb5bc871145610e4aee712e149d2dd57f13dd251ec876283ed9c7d8d699b6c2e7549379d72374727e9638067a33732dd8315a5a5279388933a00ebbbc13a64343730afd228c", 0xd9}, {&(0x7f0000000100)="6bdd6c64fea6c7e4b09eb6254adcf4da75173981242daa906f4ece602b6e714b047fb5c24aba1ed8f6ec2319f911e221e2fe602e6d71e0cb9057e486bec21eb88b38a3ed2c7c192cd05a1f1f3a3075", 0x4f}, {&(0x7f0000000640)="308875af9078887118676e57d7df63a26ce7025b083e1ab5259be080b468a1441b930efa735acce9642205577993c19493d084692b48e7834393d79233101e77a460e98de97c93b7d730", 0x4a}], 0x5}, 0x0) 5.864195508s ago: executing program 1 (id=834): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000a00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000ffffffff00000000000000008500000050000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.665499319s ago: executing program 1 (id=836): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x20000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r0}, 0x38) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xa01, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="eaff"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff86dd632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 5.635489612s ago: executing program 2 (id=837): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b700000081f8003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 5.618824553s ago: executing program 0 (id=838): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x48, &(0x7f00000000c0)=r0, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x1c, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c", 0x26}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 5.440166533s ago: executing program 3 (id=839): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0x4000000}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001040)="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", 0x2f0}], 0x1}, 0x8400) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="5c00000012006bab9a1fe3d86e17aa0a076b876c1d00489f8ed74c133c50d1650400010000001d009580472760bc06000000a7052c1e6182949a36510a84c9fa896e0a374841e1028b8f0b79c139977394e70e4509c5bb000011d600", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x80, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000740)="0a5a0574a497161d5689f0bea01f95bc4c6b6b0e0061c96e4c22b442bdc3ce33c78840f7f0037a7634a89802adb31b4d12ee5c0245ad1e82e4f78c0c8e103f1f873f554adb0500600000000000fe9e62ea344ea48a3b38cb01cb8ac92c768846b5d562e9a523b4", 0x67}, {&(0x7f0000000340)="b9bbee65f00997efd525c389e368337029b44ba03137ff773e36a0413e6d81543e81ae0cd5df98e0b53ac10d41263defa6bbd2007d65672bcd79160f3b800a1eee7ab9614fffb21e5d3b85906a1fa97ade5de7dc9b6fb676f417bd65721c688b7f924341b47be5a859f3725e9a7632df58558f2b64105d7b43b269d9aedaa7139e08656e0c348ffb21a57187a234a211e1f85f172f44f66dc9be23cfb6405c583dc57f3bce702d09b977d722faeb7dc57f91d66b7ea10662e27ae665481d9ef1cd65e8c81108e4900a6429597d", 0xcd}, {&(0x7f0000000540)="3bbf56fba7ce09119ea7175f38c076efa4fb2147a07d9af2f89af405ea11106786c51cb24c6fa16b95c8cc9784577030adc1c15abd56cce353fbd08d6db942e80838908114ecf8222e4661f4b8cbb4481ae21770787c5e9cbcdc94b50b54ef733405820e3ba4597037ba8d709432227ef6fa43f8075a0b90688555399d9330d2fb16a2ad3f40a220bba9480d55d68c21164873ebb5bc871145610e4aee712e149d2dd57f13dd251ec876283ed9c7d8d699b6c2e7549379d72374727e9638067a33732dd8315a5a5279388933a00ebbbc13a64343730afd228c0a9f096d8ffba4ca053eab0aaabb9b20345ac20df5bdf70d8b2c61672ccbc2", 0xf8}, {&(0x7f0000000100)="6bdd6c64fea6c7e4b09eb6254adcf4da75173981242daa906f4ece602b6e714b047fb5c24aba1ed8f6ec2319f911e221e2fe602e6d71e0cb9057e486bec21eb88b38a3ed2c7c192cd05a1f1f3a3075", 0x4f}, {&(0x7f0000000640)="308875af9078887118676e57d7df63a26ce7025b083e1ab5259be080b468a1441b930efa735acce9642205577993c19493d084692b48e7834393d79233101e77a460e98de97c93b7d730", 0x4a}], 0x5}, 0x0) 5.370439847s ago: executing program 2 (id=840): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) 5.246420214s ago: executing program 0 (id=841): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, 0x0, 0x0}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5c00000014006b02c84e21100af32c6e0a0675f8d344604000050000be7937696182949a36c21b3b48dfd8cdbf9367b498fa51f6db64c9f4d493803792684b0000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5d, &(0x7f0000000680)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x1, 0x8, 0x1, 0x6, 0x1, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1b2, 0x0, 0x0, 0x0, 0x6}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa7f}}], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x13, 0x0, &(0x7f0000000440)="cc9f4d42ef21760fc9ae7ef1558f46be00d0b5", 0xfffffffffffffffd, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0xfeff, 0x0}, 0x20000000) recvmsg(r4, &(0x7f0000000800)={&(0x7f00000001c0)=@nfc_llcp, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000002c0)=""/250, 0xfa}, {&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/120, 0x78}, {&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f0000000680)=""/62, 0x3e}], 0x6, &(0x7f0000000740)=""/149, 0x95}, 0x10100) 5.075625204s ago: executing program 3 (id=842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400102, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000500)={0x0, 0x1, [@empty]}) socket$kcm(0x10, 0x3, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xd0}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', r4, 0x4000, r3}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x300, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'vcan0\x00', @random="5b9f45ff6cf9"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0812080003000601ff1fbdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg(r9, &(0x7f00000001c0)={&(0x7f0000000040)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)="7ec932db4fc612333f017a7567c774106c3099d27532efa9b9a567fa4f0f861368622bbca80affefe4fca9c84bcf1c4fe329afb8c51a30ebea163c3879c6d42aa28377d90691fc988a2018be09fc5d1262fa1da23899db306f0826bb79df405def25aab5cea9f3e3e4af0db4912562424431c7161a52553a92b0de42401e99927e679c52bec3dcce937fd88b4caf221d9efa1e3b911960116302f8c5c5cbc89b6bdf91d9f98217b2f14b0b26fd39ad0e628e487b7a1d48797f", 0xb9}, {&(0x7f00000000c0)="f917037ae35420729e915029fc73aeb19166b4bf7dc805da5bf8fbdbdaa5d59f966275675b3d49122fb9fff772f0434a87b3d2f6adbff733d31d57d2ec2cb31514ed762ccd2e107449cb0edba99b28330a8ca49ddaaaf60d40286186900cc1c3f952753271f4f7311c28758211d2bb1256602fb19cdc4da6f5", 0x79}, {&(0x7f0000000400)="5e2d20aad7b607b21ddf68fc58b86f2d2c77c039dc77b6dcfedd8bd272e9a4453782c6118b25f6363ec30d17915f16a52d78a7b70e6b5839193cb5cd523d79adf36db0f092e2", 0x46}, {&(0x7f0000000480)="078fdb7aa67bc3a9c7b4507c1cc8685ab25753599147eb74b963946b0ef9c5b2250f7bbc6d6adc274d29f39e2e9ade1d5b56efaacaeade150b2199dbebc416e7903a60419b5ce71c8032cda91c", 0x4d}, {&(0x7f0000000700)="d534c7251872d759c7d359d6f22d978a09bc1ba22fa8dfeb13f2577db67565ace5b63fe70a5749d398f73f6fe6e4ae8d2ce040f65addb6a07c07fbb89a569cea7596a5474baf690edddfb4f35faa46d0e84c0cc440ac60062d1c8bbeeab03ed3ec1dec7f5e928a5d174866515eeb325bc28395e69c552c0cc48350f7fddeb4319e60727a08563884290884977b3035a630b8db98851ce447b1f82dd800356267d79682498108d04a9572f7c6947fc19b45f85dd7512d5eaa9c36fbbfae327cf3", 0xc0}], 0x5, &(0x7f0000000640)=[{0x40, 0x0, 0x8, "1651476becd28b5ee5552ad10b8d786c90c8215cc0d0c74814989edae54d09a2d2de8b8a03c81125989eaecf8e22"}, {0x68, 0x108, 0x9, "b296d5ee97fbc373ec42aefa5f5c27f28b02e7065732531f09f910cb91a8454e3503400be1e3d9b7224652e1443ebeb0c2ffbc4895dfbef4781df5463dd5a85a5d3ed45d3a20f60013bb1539f10be735369874acdd"}], 0xa8}, 0x80) 5.075242164s ago: executing program 2 (id=843): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0xa, 0x73) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000140)={r1, r2}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00u\v\x00'/27], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x40800) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNSETVNETBE(r5, 0x400454de, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x36500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x62, 0x2}, 0xfe02, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009000000", @ANYBLOB="00000000000021b167d6c41d", @ANYBLOB], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000006000000800000000000", @ANYBLOB, @ANYRES32=0x0], 0x50) r7 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)={r7}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="00e10000d3a8"}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001802e640000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 4.963631121s ago: executing program 4 (id=844): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x3800, 0x7, 0x11, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x80010000}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x5, [@enum={0x4, 0x7, 0x0, 0x6, 0x4, [{0x0, 0x2}, {0x5}, {0x2, 0x7ff}, {0x2, 0xfffffff7}, {0x8, 0xa4}, {0x5, 0x10001}, {0x5, 0x81}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x7}}, @float={0x3, 0x0, 0x0, 0x10, 0x10}, @volatile={0xc, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x3706ac7d0e2ec844, 0x5f, 0x5f]}}, &(0x7f0000000340)=""/67, 0x91, 0x43, 0x0, 0x7f}, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="18080000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x21, 0x800, 0x1, 0x8, 0x40, r4, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000500)) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r4}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x3, 0xe, 0x4, 0x8, 0x38003, r5, 0x7, '\x00', r6, r7, 0x5, 0x2, 0x0, 0x0, @value, @void, @value=r8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x816, 0x7, 0x0, 0x2a602, r0, 0x3, '\x00', r1, r2, 0x5, 0x1, 0x0, 0x5, @value=r7}, 0x50) 4.789505681s ago: executing program 1 (id=845): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, &(0x7f0000000140), 0x4) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000780)="f1", 0x1}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500243209880bd320d98a61a90021e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22) 4.415707432s ago: executing program 1 (id=846): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}], 0x2}, 0x600040c4) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000004700)=""/4095, 0xfff}, {&(0x7f0000003700)=""/4064, 0xfe0}, {&(0x7f0000000c00)=""/129, 0x81}, {&(0x7f0000000a80)=""/191, 0xbf}, {&(0x7f0000001100)=""/195, 0xc3}, {&(0x7f0000000b40)=""/86, 0x56}, {&(0x7f0000000cc0)=""/69, 0x45}, {&(0x7f0000000d40)=""/236, 0xec}, {&(0x7f0000000e40)=""/182, 0xb6}], 0x9}, 0x10100) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)="f8c450", &(0x7f0000000280), 0x5, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000bc0)={0x0, &(0x7f0000000a00)=""/89, &(0x7f0000000a80), &(0x7f0000000b40), 0x3, r5}, 0x38) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r6, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x36, &(0x7f00000000c0), 0x0, 0x10, &(0x7f00000001c0), 0x0, 0x0, 0xf8, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x4d}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x22, 0x17, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x781f1502}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x7b}, @jmp={0x5, 0x0, 0x5, 0x1, 0x9, 0xfffffffffffffffe, 0x8}, @ldst={0x2, 0x3, 0x2, 0x3, 0xa, 0x0, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x2, 0xb3, &(0x7f00000003c0)=""/179, 0x41100, 0x40, '\x00', r7, 0x0, r9, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xc, 0x4, 0x8000}, 0x10, 0x0, 0x0, 0xe, &(0x7f0000000500)=[r4], &(0x7f0000000840)=[{0x1, 0x1, 0x0, 0x2}, {0x2, 0x2, 0x8, 0xd}, {0x5, 0x3, 0x8, 0x2}, {0x5, 0x3, 0x3}, {0x4, 0x4, 0x4, 0x4}, {0x5, 0x2, 0x4, 0x2}, {0x4, 0x2, 0x9, 0x8}, {0x1, 0x3, 0x4, 0x4}, {0x2, 0x1, 0xa, 0x5}, {0x1, 0x5, 0x6}, {0x4, 0x1, 0x8, 0xd}, {0x2, 0x5, 0x3, 0x6}, {0x4, 0x4, 0xd, 0xb}, {0x0, 0x5, 0xf, 0x1}], 0x10, 0x6}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={0xffffffffffffffff, r3}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000007000000030000000000000700000000000000000000000f03000000c3f3ea000000000000000f0300000053c175000000000000000f06000000ae8c00000061"], 0x0, 0x57}, 0x28) setsockopt$sock_attach_bpf(r10, 0x84, 0x19, &(0x7f0000000000), 0x8) r11 = socket$kcm(0x10, 0x2, 0x4) close(r11) socket$kcm(0x10, 0x400000002, 0x0) 4.11099703s ago: executing program 0 (id=847): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000200)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000480)="62042700a80f00000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c11d4b8bf4a81cb3e247345af2155427a000000f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82b01000000000000006fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff34526b546717701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xe0}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c7", 0x113}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0", 0xbd}, {&(0x7f0000001ac0)="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", 0xd4b}], 0x4}, 0x4008001) 1.88875171s ago: executing program 4 (id=848): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0x4000000}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001040)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d80000000000000004007d002ae359e2b5d768e71db355cf220bb96b7a64e1d2629c3e21c5decd0e2e6f107e35a8081587d3dc42a0bc0d0c5e85c355c9cbadd6e8f8014acb52d24b961a3989d5102d540829ad660fdca299e7e74a71ed264d75a3e1dfb8331f1b441972bc5941fa418cfee6139c15eda91b1ecf8887e108b15c4c7505c31efe205c875a7c854aa65bcc2e04ea6739f968547df4ae455ecd6b0566ef02705630df27d81e2a544ecc09f8c73cec559d206644acdc56c717e19f04613456b8d7a386c0a700c032d0165c3b3f5716aa7f24e6fca522f91350793d13ba7f887e7b48cd3e6e41139d0deb8de9aeac59bf750ce0000000000000000000000000f18d233cdc36efdead60d008963851bc819e1b4551b3f13bbf6c18ea0165c66f5261c9ec61f0914c6ffb8506596b61392aa5d906994608b36096a2f5c0f3feff5bf6ddb78c8d07eee5e815c9a2a3d21a054e6fd032be118e9a3f4d016db35b5048e20f1859680e5571822934769e6f9361babb4766dc073d1dabfb220daa1cf4e7206b2b8aa7b55d1396273690ec7a8d36ffbfe2a68a9547758d3ece744be07d320147c0e92e0b63f9b86ec19670ea43b7f596b347d8b9116506356d0279d21f6a0cab3056c27dec074e8dac12c1d99afcd84f82a47a0cb5093c7a221f7fb624e2f6e9eeca4e5050fc3be50bbdc62d41333b4243336a5590e49658a10b5c8624eb2410d68e64f230fdcf4689495c0bf62403c2eaad20d1d8fb185ebefac64aa0eb1d36ccacf61ec28b4ec24dba53f21ed5c5f727cccb0d614884908957138d2c30560e88f128af21ccc9fd64d229f35b2f76d0ee9e25f9e4390a55a8600449774ca116e3ba523c9c5d39abcf09a36127c17fc6194711f20307ead0d5bbbe2aa3f677156b8856411a8045159df771ac3e3d5828e359c24a59d65e92f4112fb6825536751f82e9d55e89853a03c693d418c4d2cccb61c6f60ad304a68d15fc20edaec9", 0x2f0}], 0x1}, 0x8400) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="5c00000012006bab9a1fe3d86e17aa0a076b876c1d00489f8ed74c133c50d1650400010000001d009580472760bc06000000a7052c1e6182949a36510a84c9fa896e0a374841e1028b8f0b79c139977394e70e4509c5bb000011d600", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x80, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000740)="0a5a0574a497161d5689f0bea01f95bc4c6b6b0e0061c96e4c22b442bdc3ce33c78840f7f0037a7634a89802adb31b4d12ee5c0245ad1e82e4f78c0c8e103f1f873f554adb05ffffff97000000fe9e62ea344ea48a3b38cb01cb8ac92c768846b5d562e9a523b4", 0x67}, {&(0x7f0000000340)="b9bbee65f00997efd525c389e368337029b44ba03137ff773e36a0413e6d81543e81ae0cd5df98e0b53ac10d41263defa6bbd2007d65672bcd79160f3b800a1eee7ab9614fffb21e5d3b85906a1fa97ade5de7dc9b6fb676f417bd65721c688b7f924341b47be5a859f3725e9a7632df58558f2b64105d7b43b269d9aedaa7139e08656e0c348ffb21a57187a234a211e1f85f172f44f66dc9be23cfb6405c583dc57f3bce702d09b977d722faeb7dc57f91d66b7ea10662e27ae665481d9ef1cd65e8c81108e4900a6429597d", 0xcd}, {&(0x7f0000000540)="3bbf56fba7ce09119ea7175f38c076efa4fb2147a07d9af2f89af405ea11106786c51cb24c6fa16b95c8cc9784577030adc1c15abd56cce353fbd08d6db942e80838908114ecf8222e4661f4b8cbb4481ae21770787c5e9cbcdc94b50b54ef733405820e3ba4597037ba8d709432227ef6fa43f8075a0b90688555399d9330d2fb16a2ad3f40a220bba9480d55d68c21164873ebb5bc871145610e4aee712e149d2dd57f13dd251ec876283ed9c7d8d699b6c2e7549379d72374727e9638067a33732dd8315a5a5279388933a00ebbbc13a64343730afd228c0a9f096d8ffba4ca053eab0aaabb9b20", 0xe9}, {&(0x7f0000000100)="6bdd6c64fea6c7e4b09eb6254adcf4da75173981242daa906f4ece602b6e714b047fb5c24aba1ed8f6ec2319f911e221e2fe602e6d71e0cb9057e486bec21eb88b38a3ed2c7c192cd05a1f1f3a3075", 0x4f}, {&(0x7f0000000640)="308875af9078887118676e57d7df63a26ce7025b083e1ab5259be080b468a1441b930efa735acce9642205577993c19493d084692b48e7834393d79233101e77a460e98de97c93b7d730", 0x4a}], 0x5}, 0x0) 1.834194313s ago: executing program 0 (id=849): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x104000, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2063) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x0, 0x1, 0x0, 0x0, 0x0, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x9, 0xffffffffffffbbfe, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.833466653s ago: executing program 1 (id=850): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="174dbbef770b00000005400000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000940)={0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x10001, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f00000008c0)=ANY=[@ANYRES64=r5, @ANYRES32=r7, @ANYRES8], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000060000000000006000000ead31a7efe1a7d3507b0ae89f3dc24ea4d95727cca9442ddee1b8dced45eeddd4b37073628c6201204f4ebb6712d933aeed85c523b59b3d1a5ed55e465077dc00b155540297cb127101d"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000d7be3d1f37f5f36d3c5f3eaf8fbffa7d6de30e58aabe3bca1cc5bfe7e010c7787909dd83aea4f8bf5ef3665dfa259276052fc15222134bf6094e0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x19}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd00100000000040007d007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000a00)=""/250, 0x0, 0x0, '\x00', r9}, 0x94) 1.812485224s ago: executing program 2 (id=851): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x0, 0x0}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800110000000000340000003400000006000000040000000000000e040000000000000000000000000000020000000002000000000000080200000000000000000000090300000000005f0061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x0, 0x15, &(0x7f0000000500)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000be050000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000006da82000f0ffffff18110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000640)='GPL\x00', 0x0, 0x2a, &(0x7f0000000840)=""/42, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x3, 0x2, 0x3ff, 0x4}, 0x10, 0x1fe98, 0xffffffffffffffff, 0x6, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f0000000940)=[{0x4, 0x3, 0xd, 0x4}, {0x0, 0x1, 0x6, 0xa}, {0x0, 0x3, 0x6, 0xb}, {0x0, 0x1, 0x9, 0x3}, {0x1, 0x2, 0x6, 0xa}, {0x1, 0x4, 0x5, 0x9}], 0x10, 0xd016}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1c, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="18b7d5d02ed69888d324e0ff01000000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x11, &(0x7f00000002c0)=""/17, 0x41100, 0x42, '\x00', 0x0, @fallback=0x1d, r4, 0x8, &(0x7f0000000300)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, r5, r6, 0x7, &(0x7f0000000c80)=[r7], &(0x7f0000000cc0)=[{0x3, 0x1, 0x0, 0x7}, {0x0, 0x4, 0xa, 0xb}, {0x5, 0x3, 0x4, 0x5}, {0x0, 0x3, 0x1, 0xb}, {0x2, 0x4, 0x10, 0x7}, {0x1, 0x5, 0x6, 0x2}, {0x0, 0x2, 0xf, 0x9}], 0x10, 0x9}, 0x94) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x80}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0xadf0, 0x2700, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="1e031800dd5c980128854d4a828e00000000002f"], 0xffdd) 1.794810885s ago: executing program 3 (id=852): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000500)={0x2, 0x80, 0x5, 0xd, 0x40, 0x5, 0x0, 0xf, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x80000001, 0x9}, 0x100, 0x7f, 0x5, 0x7, 0xffff, 0x2, 0x0, 0x0, 0x15e, 0x0, 0x7}) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000) unlink(&(0x7f0000000000)='./file0\x00') sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x101, 0x4000}, 0x80, 0x0}, 0x20000000) 1.512831662s ago: executing program 3 (id=853): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000090000008500000076000000186000000e000000000000000800d878b9f5cd2b94ee00009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x4, &(0x7f0000000140)=[r0, r0, r0], &(0x7f0000000180)=[{0x4, 0x3, 0xb, 0x6}, {0x3, 0x5, 0xc, 0xa}, {0x0, 0x5, 0x9, 0x1}, {0x2, 0x2, 0xa, 0xc}], 0x10, 0x1}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r2, r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x2, 0x3, 0xa, 0x0}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.073324427s ago: executing program 2 (id=854): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x5, 0x1011, &(0x7f00000016c0)=""/4113}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) (fail_nth: 27) 1.02911554s ago: executing program 4 (id=855): r0 = socket$kcm(0x10, 0x3, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r5 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x1c, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES8=r1, @ANYBLOB="11fffe3003d9544e3784cd2272b82466b23186630afa242f025832724f393fcf7ac7ee334d18e3468ed3bb9fa3987a6b4763c78756ff8f59190e4beb0fb9d5b6c69350353ada1a3f1c648c7ef9babb02b2729fd22e0aa58ad9631e5a360848c87bd9adbdd53599aa8298efa78aa66e768534b979e3edda91389671d601bf3faff84aa6bb6d28c59d294e03"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3cffea0033000b1229ae3f7f03b261130124fc60100c03400180ffff000300119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) 908.146837ms ago: executing program 3 (id=856): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$kcm(0xa, 0x3, 0x73) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x41}], 0x1}, 0x0) 875.056729ms ago: executing program 0 (id=857): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x4, 0x18}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r3, r2}) r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:2'], 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x4802}) write$cgroup_devices(r6, 0x0, 0xffdd) socketpair(0x10, 0x3, 0x4, &(0x7f0000000400)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x5, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x3}]}, @restrict={0x8, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x0, 0x5f, 0x2e]}}, 0x0, 0x71}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 680.569131ms ago: executing program 1 (id=858): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000000000400"/38], 0x0, 0x26}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x118002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r2}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pB \x00'}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x3, 0x30}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x15, &(0x7f0000000540)=@raw=[@map_fd={0x18, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}, @alu={0xe, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff0}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @ldst={0x3, 0x2, 0x4, 0xa, 0xa, 0xc, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000280)='GPL\x00', 0x0, 0x95, &(0x7f0000000680)=""/149, 0x41000, 0x44, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0xe, 0xd9, 0x7}, 0x10, 0x0, r1, 0x1, &(0x7f0000000940)=[0xffffffffffffffff, r2, r3, 0x1, r4, r5, r6, r7], &(0x7f0000000980)=[{0x0, 0x5, 0xa, 0x6}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200000001"], 0x0, 0x42}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) 508.04666ms ago: executing program 3 (id=859): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 455.604773ms ago: executing program 2 (id=860): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}], 0x2}, 0x600040c4) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000004700)=""/4095, 0xfff}, {&(0x7f0000003700)=""/4064, 0xfe0}, {&(0x7f0000000c00)=""/129, 0x81}, {&(0x7f0000000a80)=""/191, 0xbf}, {&(0x7f0000001100)=""/195, 0xc3}, {&(0x7f0000000b40)=""/86, 0x56}, {&(0x7f0000000cc0)=""/69, 0x45}, {&(0x7f0000000d40)=""/236, 0xec}, {&(0x7f0000000e40)=""/182, 0xb6}], 0x9}, 0x10100) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)="f8c450", &(0x7f0000000280), 0x5, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000bc0)={0x0, &(0x7f0000000a00)=""/89, &(0x7f0000000a80), &(0x7f0000000b40), 0x3, r5}, 0x38) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r6, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x36, &(0x7f00000000c0), 0x0, 0x10, &(0x7f00000001c0), 0x0, 0x0, 0xf8, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x4d}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x22, 0x17, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x781f1502}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x7b}, @jmp={0x5, 0x0, 0x5, 0x1, 0x9, 0xfffffffffffffffe, 0x8}, @ldst={0x2, 0x3, 0x2, 0x3, 0xa, 0x0, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x2, 0xb3, &(0x7f00000003c0)=""/179, 0x41100, 0x40, '\x00', r7, 0x0, r9, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xc, 0x4, 0x8000}, 0x10, 0x0, 0x0, 0xe, &(0x7f0000000500)=[r4], &(0x7f0000000840)=[{0x1, 0x1, 0x0, 0x2}, {0x2, 0x2, 0x8, 0xd}, {0x5, 0x3, 0x8, 0x2}, {0x5, 0x3, 0x3}, {0x4, 0x4, 0x4, 0x4}, {0x5, 0x2, 0x4, 0x2}, {0x4, 0x2, 0x9, 0x8}, {0x1, 0x3, 0x4, 0x4}, {0x2, 0x1, 0xa, 0x5}, {0x1, 0x5, 0x6}, {0x4, 0x1, 0x8, 0xd}, {0x2, 0x5, 0x3, 0x6}, {0x4, 0x4, 0xd, 0xb}, {0x0, 0x5, 0xf, 0x1}], 0x10, 0x6}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={0xffffffffffffffff, r3}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000007000000030000000000000700000000000000000000000f03000000c3f3ea000000000000000f0300000053c175000000000000000f06000000ae8c00000061"], 0x0, 0x57}, 0x28) setsockopt$sock_attach_bpf(r10, 0x84, 0x19, &(0x7f0000000000), 0x8) r11 = socket$kcm(0x10, 0x2, 0x4) close(r11) socket$kcm(0x10, 0x400000002, 0x0) 0s ago: executing program 4 (id=861): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0xa, 0x73) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000140)={r1, r2}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00u\v\x00'/27], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x40800) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNSETVNETBE(r5, 0x400454de, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x36500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x62, 0x2}, 0xfe02, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009000000", @ANYBLOB="00000000000021b167d6c41d", @ANYBLOB], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000006000000800000000000", @ANYBLOB, @ANYRES32=0x0], 0x50) r7 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)={r7}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="00e10000d3a8"}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001802e640000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) kernel console output (not intermixed with test programs): 5371][ T4293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.763577][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.772811][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.781512][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.788633][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.797381][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.807333][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.816487][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.825162][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.833448][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.842089][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.850668][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.860660][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.869606][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.877492][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.885695][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.913292][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.958339][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.975463][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.025722][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.068290][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.100189][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.130667][ T4268] device veth0_vlan entered promiscuous mode [ 71.150476][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.165967][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.174924][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.203145][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.219244][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.246245][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.256154][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.265338][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.275046][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.283609][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.293823][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.313751][ T4268] device veth1_vlan entered promiscuous mode [ 71.323303][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.339433][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.354448][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.365051][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.372584][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.447421][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.453976][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.466023][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.485470][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.505129][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.519273][ T4268] device veth0_macvtap entered promiscuous mode [ 71.539848][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.560604][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.585628][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.640347][ T4268] device veth1_macvtap entered promiscuous mode [ 71.678838][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.689733][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.705621][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.713170][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.727750][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.736540][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.744577][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.763452][ T4278] device veth0_vlan entered promiscuous mode [ 71.783011][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.792299][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.800393][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.827993][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.839754][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.857851][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.873533][ T4278] device veth1_vlan entered promiscuous mode [ 71.886799][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.901975][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.916902][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.933826][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.943182][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.977920][ T4268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.990156][ T4268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.007097][ T4268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.016262][ T4268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.043773][ T4278] device veth0_macvtap entered promiscuous mode [ 72.065077][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.074652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.085578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.093149][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.102291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.139164][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.159662][ T4278] device veth1_macvtap entered promiscuous mode [ 72.231733][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.249017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.259126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.275624][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.287495][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.300433][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.337127][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.348324][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.360542][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.373736][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.422907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.435642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.459489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.470374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.484589][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 72.487439][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.502393][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.518037][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.535779][ T4267] device veth0_vlan entered promiscuous mode [ 72.564561][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 72.564917][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 72.570609][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 72.587842][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.599588][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.610681][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.619464][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.628211][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.636803][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.645012][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 72.656425][ T4274] device veth0_vlan entered promiscuous mode [ 72.674360][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.682439][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.686760][ T4278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.699751][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.709015][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.717938][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.740200][ T4267] device veth1_vlan entered promiscuous mode [ 72.756617][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.765652][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.773691][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.783281][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.792331][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.830180][ T4274] device veth1_vlan entered promiscuous mode [ 72.872318][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.893703][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.902295][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.919431][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.928952][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.973838][ T4277] device veth0_vlan entered promiscuous mode [ 73.010857][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.035380][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.049946][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.059368][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.091603][ T4274] device veth0_macvtap entered promiscuous mode [ 73.108595][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.121562][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.135528][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.144828][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.157813][ T4267] device veth0_macvtap entered promiscuous mode [ 73.189577][ T4277] device veth1_vlan entered promiscuous mode [ 73.201636][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.229253][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.240490][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.251466][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.262044][ T4274] device veth1_macvtap entered promiscuous mode [ 73.289011][ T4267] device veth1_macvtap entered promiscuous mode [ 73.289033][ C1] hrtimer: interrupt took 30703 ns [ 73.307286][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.322880][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.352678][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.365808][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.377607][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.395102][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.412714][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.443428][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.467549][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.484199][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.501131][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.511408][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.525031][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.537372][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.549640][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.559458][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.570414][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.580625][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.601388][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.610584][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.621812][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.633912][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.644419][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.655420][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.667043][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.677784][ T4376] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 73.690377][ T4376] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'. [ 73.713927][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.728322][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.740338][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.754305][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.768212][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.779646][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.791474][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.803716][ T4277] device veth0_macvtap entered promiscuous mode [ 73.812528][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.820959][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.830022][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.839709][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.849477][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.877507][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.886826][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.898031][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.908596][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.926836][ T4267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.935860][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.944842][ T4267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.947660][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.953765][ T4267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.970194][ T4267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.987156][ T4277] device veth1_macvtap entered promiscuous mode [ 74.013826][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.030214][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.101735][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.121635][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.138093][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.148878][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.159320][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.170915][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.182156][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.200890][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.221735][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.258928][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.269501][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.306998][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.371194][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.390092][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.403350][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.419873][ T4380] netlink: 'syz.0.6': attribute type 3 has an invalid length. [ 74.424448][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.445030][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.462258][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.475783][ T4380] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6'. [ 74.487309][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.507830][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.564519][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 74.572409][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.604654][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.621424][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.636205][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.645151][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 74.652056][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.661016][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 74.661063][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 74.675873][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.724694][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 75.063816][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.074439][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.111320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.170587][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.184563][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.202675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.254634][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.262995][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.318056][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.343838][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.352089][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.373197][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.379764][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.433858][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.443407][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.453001][ T4393] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 75.508493][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.555018][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.603876][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.731450][ T4397] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 75.750194][ T4397] netlink: 'syz.1.2': attribute type 8 has an invalid length. [ 75.766948][ T4397] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2'. [ 76.121857][ T4401] netlink: 'syz.3.10': attribute type 2 has an invalid length. [ 76.212799][ T4404] device sit0 entered promiscuous mode [ 76.293203][ T4403] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 76.593198][ T4403] device veth0_vlan left promiscuous mode [ 76.706543][ T4403] device veth0_vlan entered promiscuous mode [ 76.730561][ T4403] team0: Device veth0_vlan failed to register rx_handler [ 76.783818][ T4410] netlink: 'syz.4.5': attribute type 2 has an invalid length. [ 76.839755][ T4420] netlink: 'syz.2.12': attribute type 27 has an invalid length. [ 76.848860][ T4420] netlink: 164 bytes leftover after parsing attributes in process `syz.2.12'. [ 76.893547][ T4401] device .d entered promiscuous mode [ 76.993959][ T4410] device .d entered promiscuous mode [ 78.015520][ T4431] Zero length message leads to an empty skb [ 78.220444][ T4416] device sit0 entered promiscuous mode [ 78.777168][ T4449] netlink: 'syz.3.18': attribute type 2 has an invalid length. [ 79.960463][ T4461] netlink: 'syz.4.21': attribute type 10 has an invalid length. [ 79.972024][ T4461] netlink: 55 bytes leftover after parsing attributes in process `syz.4.21'. [ 81.721445][ T129] cfg80211: failed to load regulatory.db [ 87.404888][ T4480] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.24'. [ 87.414275][ T4486] netlink: 'syz.3.26': attribute type 10 has an invalid length. [ 87.533719][ T4486] team0: Port device wlan1 added [ 88.144672][ T4501] syz.3.30 (4501) used obsolete PPPIOCDETACH ioctl [ 89.217599][ T4507] device wg2 entered promiscuous mode [ 89.234299][ T4511] netlink: 'syz.4.29': attribute type 21 has an invalid length. [ 89.860656][ T4524] device sit0 entered promiscuous mode [ 90.015743][ T4524] netlink: 'syz.2.35': attribute type 2 has an invalid length. [ 90.257218][ T4524] device .d entered promiscuous mode [ 90.751961][ T4539] netlink: 'syz.0.39': attribute type 2 has an invalid length. [ 90.858492][ T4541] netlink: 56 bytes leftover after parsing attributes in process `syz.2.40'. [ 90.870415][ T4538] device sit0 entered promiscuous mode [ 91.083229][ T4539] device .d entered promiscuous mode [ 91.102733][ T4541] netlink: 56 bytes leftover after parsing attributes in process `syz.2.40'. [ 91.628025][ T4546] netlink: 'syz.2.41': attribute type 10 has an invalid length. [ 91.996894][ T4546] team0: Port device wlan1 added [ 92.016516][ T4552] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.43'. [ 95.002966][ T4576] device sit0 entered promiscuous mode [ 95.411118][ T4583] netlink: 56 bytes leftover after parsing attributes in process `syz.0.52'. [ 95.494508][ T4583] netlink: 56 bytes leftover after parsing attributes in process `syz.0.52'. [ 95.514454][ T4584] netlink: 'syz.3.51': attribute type 2 has an invalid length. [ 95.548091][ T4584] netlink: 'syz.3.51': attribute type 8 has an invalid length. [ 95.594603][ T4584] netlink: 132 bytes leftover after parsing attributes in process `syz.3.51'. [ 95.883037][ T4589] netlink: 'syz.4.53': attribute type 2 has an invalid length. [ 95.984606][ T4584] netlink: 'syz.3.51': attribute type 10 has an invalid length. [ 104.605584][ T4584] device veth0_vlan left promiscuous mode [ 105.831075][ T4584] device veth0_vlan entered promiscuous mode [ 106.516197][ T4614] netlink: 'syz.0.59': attribute type 27 has an invalid length. [ 106.614472][ T4614] netlink: 164 bytes leftover after parsing attributes in process `syz.0.59'. [ 107.080433][ T4584] team0: Device veth0_vlan failed to register rx_handler [ 108.127142][ T4584] syz.3.51 (4584) used greatest stack depth: 18352 bytes left [ 108.312391][ T4609] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.58'. [ 108.768950][ T4638] netlink: 56 bytes leftover after parsing attributes in process `syz.3.65'. [ 109.019967][ T4638] netlink: 56 bytes leftover after parsing attributes in process `syz.3.65'. [ 109.442208][ T4649] pimreg0: tun_chr_ioctl cmd 35111 [ 113.231700][ T4665] netlink: 'syz.3.73': attribute type 27 has an invalid length. [ 113.253370][ T4666] netlink: 'syz.0.71': attribute type 2 has an invalid length. [ 113.290381][ T4665] netlink: 164 bytes leftover after parsing attributes in process `syz.3.73'. [ 113.682807][ T4672] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.75'. [ 113.739773][ T4677] netlink: 'syz.0.76': attribute type 3 has an invalid length. [ 113.822122][ T4677] netlink: 132 bytes leftover after parsing attributes in process `syz.0.76'. [ 114.143801][ T4687] netlink: 56 bytes leftover after parsing attributes in process `syz.3.80'. [ 114.178567][ T4687] netlink: 56 bytes leftover after parsing attributes in process `syz.3.80'. [ 115.009219][ T4703] netlink: 'syz.3.87': attribute type 2 has an invalid length. [ 115.817910][ T4713] netlink: 'syz.1.90': attribute type 1 has an invalid length. [ 115.838576][ T4713] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.90'. [ 116.225202][ T4722] netlink: 56 bytes leftover after parsing attributes in process `syz.3.94'. [ 116.294632][ T4722] netlink: 56 bytes leftover after parsing attributes in process `syz.3.94'. [ 117.272841][ T4736] netlink: 'syz.3.99': attribute type 2 has an invalid length. [ 122.117332][ T4842] netlink: 144 bytes leftover after parsing attributes in process `syz.3.134'. [ 122.278336][ T4842] team0: Port device team_slave_0 removed [ 122.293644][ T4842] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 122.475083][ T4857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.482910][ T4857] IPv6: NLM_F_CREATE should be set when creating new route [ 122.490628][ T4857] IPv6: NLM_F_CREATE should be set when creating new route [ 122.498021][ T4857] IPv6: NLM_F_CREATE should be set when creating new route [ 122.705420][ T4861] netlink: 'syz.4.139': attribute type 2 has an invalid length. [ 122.971479][ T4864] netlink: 'syz.3.140': attribute type 2 has an invalid length. [ 123.777737][ T4890] FAULT_INJECTION: forcing a failure. [ 123.777737][ T4890] name failslab, interval 1, probability 0, space 0, times 1 [ 123.858659][ T4890] CPU: 0 PID: 4890 Comm: syz.0.150 Not tainted syzkaller #0 [ 123.866026][ T4890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 123.876109][ T4890] Call Trace: [ 123.879408][ T4890] [ 123.882360][ T4890] dump_stack_lvl+0x188/0x24e [ 123.887076][ T4890] ? show_regs_print_info+0x12/0x12 [ 123.892309][ T4890] ? load_image+0x400/0x400 [ 123.896839][ T4890] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 123.902864][ T4890] should_fail_ex+0x399/0x4d0 [ 123.907591][ T4890] should_failslab+0x5/0x20 [ 123.912122][ T4890] slab_pre_alloc_hook+0x59/0x310 [ 123.917185][ T4890] kmem_cache_alloc+0x56/0x2f0 [ 123.921975][ T4890] ? __build_skb+0x2a/0x3c0 [ 123.926512][ T4890] __build_skb+0x2a/0x3c0 [ 123.930886][ T4890] build_skb+0x1e/0x230 [ 123.935079][ T4890] bpf_prog_test_run_skb+0x37e/0x12a0 [ 123.940475][ T4890] ? __fget_files+0x28/0x4b0 [ 123.945101][ T4890] ? __fget_files+0x43d/0x4b0 [ 123.949827][ T4890] ? cpu_online+0xa0/0xa0 [ 123.954193][ T4890] bpf_prog_test_run+0x31e/0x390 [ 123.959163][ T4890] __sys_bpf+0x62b/0x780 [ 123.963447][ T4890] ? bpf_link_show_fdinfo+0x380/0x380 [ 123.968878][ T4890] ? lock_chain_count+0x20/0x20 [ 123.973786][ T4890] __x64_sys_bpf+0x78/0x90 [ 123.978244][ T4890] do_syscall_64+0x4c/0xa0 [ 123.982689][ T4890] ? clear_bhb_loop+0x60/0xb0 [ 123.987391][ T4890] ? clear_bhb_loop+0x60/0xb0 [ 123.992097][ T4890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.998257][ T4890] RIP: 0033:0x7f7b8f19aeb9 [ 124.002850][ T4890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.022591][ T4890] RSP: 002b:00007f7b900d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.031139][ T4890] RAX: ffffffffffffffda RBX: 00007f7b8f415fa0 RCX: 00007f7b8f19aeb9 [ 124.039147][ T4890] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a [ 124.047234][ T4890] RBP: 00007f7b900d2090 R08: 0000000000000000 R09: 0000000000000000 [ 124.055231][ T4890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.063235][ T4890] R13: 00007f7b8f416038 R14: 00007f7b8f415fa0 R15: 00007ffee310eb28 [ 124.071259][ T4890] [ 127.037325][ T4908] netlink: 'syz.2.154': attribute type 2 has an invalid length. [ 127.237929][ T4909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.241178][ T4921] netlink: 'syz.0.158': attribute type 2 has an invalid length. [ 127.245484][ T4909] IPv6: NLM_F_CREATE should be set when creating new route [ 127.260909][ T4909] IPv6: NLM_F_CREATE should be set when creating new route [ 127.268417][ T4909] IPv6: NLM_F_CREATE should be set when creating new route [ 127.332913][ T4920] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 127.375138][ T4920] device syzkaller0 entered promiscuous mode [ 127.499095][ T4923] syz.2.159[4923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.499214][ T4923] syz.2.159[4923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.086340][ T4961] netlink: 'syz.0.169': attribute type 2 has an invalid length. [ 130.030787][ T4969] netlink: 'syz.1.172': attribute type 2 has an invalid length. [ 132.901077][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.907578][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.258228][ T4942] netlink: 'syz.4.166': attribute type 27 has an invalid length. [ 133.266315][ T4945] netlink: 144 bytes leftover after parsing attributes in process `syz.4.166'. [ 133.301367][ T4945] team0: Port device team_slave_0 removed [ 133.308108][ T4945] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 133.358162][ T4969] device .d entered promiscuous mode [ 133.783857][ T4978] delete_channel: no stack [ 133.799631][ T4976] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.175'. [ 133.916436][ T4989] FAULT_INJECTION: forcing a failure. [ 133.916436][ T4989] name failslab, interval 1, probability 0, space 0, times 0 [ 133.944353][ T4989] CPU: 1 PID: 4989 Comm: syz.1.178 Not tainted syzkaller #0 [ 133.951776][ T4989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 133.961882][ T4989] Call Trace: [ 133.965285][ T4989] [ 133.968415][ T4989] dump_stack_lvl+0x188/0x24e [ 133.973143][ T4989] ? show_regs_print_info+0x12/0x12 [ 133.978397][ T4989] ? load_image+0x400/0x400 [ 133.982979][ T4989] ? __might_sleep+0xd0/0xd0 [ 133.987621][ T4989] ? __lock_acquire+0x7d10/0x7d10 [ 133.992711][ T4989] should_fail_ex+0x399/0x4d0 [ 133.997460][ T4989] should_failslab+0x5/0x20 [ 134.002018][ T4989] slab_pre_alloc_hook+0x59/0x310 [ 134.007107][ T4989] kmem_cache_alloc+0x56/0x2f0 [ 134.011912][ T4989] ? security_file_alloc+0x30/0x110 [ 134.017164][ T4989] security_file_alloc+0x30/0x110 [ 134.022238][ T4989] __alloc_file+0xc2/0x230 [ 134.026702][ T4989] alloc_empty_file+0x90/0x180 [ 134.031507][ T4989] path_openat+0x10f/0x2ee0 [ 134.036119][ T4989] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 134.041902][ T4989] ? do_filp_open+0x430/0x430 [ 134.046623][ T4989] ? perf_trace_lock+0x301/0x390 [ 134.051637][ T4989] ? trace_event_raw_event_lock+0x250/0x250 [ 134.057600][ T4989] do_filp_open+0x1f1/0x430 [ 134.062168][ T4989] ? vfs_tmpfile+0x480/0x480 [ 134.066860][ T4989] ? _raw_spin_unlock+0x24/0x40 [ 134.071754][ T4989] ? alloc_fd+0x58f/0x630 [ 134.076165][ T4989] do_sys_openat2+0x150/0x4b0 [ 134.080886][ T4989] ? ct_nmi_exit+0x145/0x1c0 [ 134.085505][ T4989] ? perf_trace_preemptirq_template+0xa8/0x320 [ 134.091698][ T4989] ? do_sys_open+0xe0/0xe0 [ 134.096165][ T4989] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 134.102157][ T4989] ? lock_chain_count+0x20/0x20 [ 134.107044][ T4989] __x64_sys_openat+0x135/0x160 [ 134.112023][ T4989] do_syscall_64+0x4c/0xa0 [ 134.116450][ T4989] ? clear_bhb_loop+0x60/0xb0 [ 134.121156][ T4989] ? clear_bhb_loop+0x60/0xb0 [ 134.125951][ T4989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.131871][ T4989] RIP: 0033:0x7fe4f1d5b78e [ 134.136294][ T4989] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 134.155913][ T4989] RSP: 002b:00007fe4f2ca0ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 134.164356][ T4989] RAX: ffffffffffffffda RBX: 00007fe4f2ca16c0 RCX: 00007fe4f1d5b78e [ 134.172384][ T4989] RDX: 0000000000000000 RSI: 00007fe4f2ca0f90 RDI: ffffffffffffff9c [ 134.180392][ T4989] RBP: 00007fe4f2ca1090 R08: 0000000000000000 R09: 0000000000000000 [ 134.188385][ T4989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.196468][ T4989] R13: 00007fe4f2016038 R14: 00007fe4f2015fa0 R15: 00007ffc9c3fe908 [ 134.204498][ T4989] [ 134.232838][ T4990] netlink: 'syz.0.175': attribute type 10 has an invalid length. [ 134.425470][ T4976] netlink: 'syz.0.175': attribute type 2 has an invalid length. [ 134.433198][ T4976] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.175'. [ 134.757585][ T5007] netlink: 'syz.3.183': attribute type 3 has an invalid length. [ 134.784127][ T5007] netlink: 'syz.3.183': attribute type 1 has an invalid length. [ 134.824138][ T5007] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.183'. [ 134.943657][ T5013] netlink: 'syz.4.185': attribute type 2 has an invalid length. [ 135.107511][ T5018] syzkaller1: tun_chr_ioctl cmd 1074025684 [ 138.001328][ T5030] netlink: 'syz.3.198': attribute type 2 has an invalid length. [ 138.038117][ T5027] netlink: 'syz.4.188': attribute type 2 has an invalid length. [ 138.239864][ T5035] FAULT_INJECTION: forcing a failure. [ 138.239864][ T5035] name failslab, interval 1, probability 0, space 0, times 0 [ 138.270169][ T5035] CPU: 1 PID: 5035 Comm: syz.0.191 Not tainted syzkaller #0 [ 138.277517][ T5035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 138.287714][ T5035] Call Trace: [ 138.291016][ T5035] [ 138.293971][ T5035] dump_stack_lvl+0x188/0x24e [ 138.298771][ T5035] ? sctp_sendmsg+0x15b0/0x2940 [ 138.303662][ T5035] ? ___sys_sendmsg+0x2a2/0x360 [ 138.308554][ T5035] ? show_regs_print_info+0x12/0x12 [ 138.313791][ T5035] ? load_image+0x400/0x400 [ 138.318335][ T5035] should_fail_ex+0x399/0x4d0 [ 138.323061][ T5035] should_failslab+0x5/0x20 [ 138.327603][ T5035] slab_pre_alloc_hook+0x59/0x310 [ 138.332655][ T5035] ? sctp_add_bind_addr+0x89/0x350 [ 138.337825][ T5035] __kmem_cache_alloc_node+0x4f/0x260 [ 138.343225][ T5035] ? sctp_add_bind_addr+0x89/0x350 [ 138.348372][ T5035] kmalloc_trace+0x26/0xe0 [ 138.352829][ T5035] sctp_add_bind_addr+0x89/0x350 [ 138.357807][ T5035] sctp_copy_local_addr_list+0x311/0x4e0 [ 138.363501][ T5035] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 138.369267][ T5035] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 138.375379][ T5035] ? sctp_v4_is_any+0x31/0x50 [ 138.380107][ T5035] ? sctp_copy_one_addr+0x93/0x660 [ 138.385278][ T5035] sctp_bind_addr_copy+0xaf/0x3c0 [ 138.390349][ T5035] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 138.396721][ T5035] sctp_connect_new_asoc+0x2f5/0x6a0 [ 138.402048][ T5035] ? __sctp_connect+0xd80/0xd80 [ 138.406929][ T5035] ? __local_bh_enable_ip+0x136/0x1c0 [ 138.412307][ T5035] ? _local_bh_enable+0xa0/0xa0 [ 138.417169][ T5035] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 138.423017][ T5035] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 138.428865][ T5035] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 138.434441][ T5035] ? security_sctp_bind_connect+0x85/0xb0 [ 138.440218][ T5035] sctp_sendmsg+0x15b0/0x2940 [ 138.444967][ T5035] ? aa_sk_perm+0x721/0x950 [ 138.449500][ T5035] ? sctp_getsockopt+0x8a0/0x8a0 [ 138.454554][ T5035] ? __might_fault+0xa6/0x120 [ 138.459275][ T5035] ? aa_af_perm+0x340/0x340 [ 138.463832][ T5035] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 138.470307][ T5035] ? inet_sendmsg+0x78/0x2f0 [ 138.474948][ T5035] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 138.480265][ T5035] ? security_socket_sendmsg+0x7c/0xa0 [ 138.485767][ T5035] ? inet_send_prepare+0x260/0x260 [ 138.490919][ T5035] ____sys_sendmsg+0x5be/0x970 [ 138.495727][ T5035] ? __sys_sendmsg_sock+0x30/0x30 [ 138.500781][ T5035] ? __import_iovec+0x315/0x500 [ 138.505681][ T5035] ? import_iovec+0x6f/0xa0 [ 138.510226][ T5035] ___sys_sendmsg+0x2a2/0x360 [ 138.514955][ T5035] ? __sys_sendmsg+0x290/0x290 [ 138.519788][ T5035] ? __lock_acquire+0x7d10/0x7d10 [ 138.524890][ T5035] __se_sys_sendmsg+0x1bb/0x2a0 [ 138.529797][ T5035] ? __x64_sys_sendmsg+0x80/0x80 [ 138.534889][ T5035] ? lockdep_hardirqs_on+0x94/0x140 [ 138.540122][ T5035] do_syscall_64+0x4c/0xa0 [ 138.544575][ T5035] ? clear_bhb_loop+0x60/0xb0 [ 138.549287][ T5035] ? clear_bhb_loop+0x60/0xb0 [ 138.553999][ T5035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.559933][ T5035] RIP: 0033:0x7f7b8f19aeb9 [ 138.564386][ T5035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.584036][ T5035] RSP: 002b:00007f7b900d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.592585][ T5035] RAX: ffffffffffffffda RBX: 00007f7b8f415fa0 RCX: 00007f7b8f19aeb9 [ 138.600610][ T5035] RDX: 000000002000c055 RSI: 0000200000000140 RDI: 0000000000000003 [ 138.608620][ T5035] RBP: 00007f7b900d2090 R08: 0000000000000000 R09: 0000000000000000 [ 138.616625][ T5035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.624833][ T5035] R13: 00007f7b8f416038 R14: 00007f7b8f415fa0 R15: 00007ffee310eb28 [ 138.632862][ T5035] [ 138.654973][ T5033] netlink: 'syz.2.190': attribute type 11 has an invalid length. [ 138.663071][ T5033] netlink: 148 bytes leftover after parsing attributes in process `syz.2.190'. [ 140.572725][ T5079] netlink: 'syz.0.205': attribute type 29 has an invalid length. [ 140.663516][ T5079] netlink: 'syz.0.205': attribute type 29 has an invalid length. [ 141.497668][ T5089] delete_channel: no stack [ 141.807117][ T5098] netlink: 'syz.3.209': attribute type 2 has an invalid length. [ 142.577631][ T5126] syz.1.212[5126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.577797][ T5126] syz.1.212[5126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.473411][ T5131] netlink: 'syz.2.216': attribute type 29 has an invalid length. [ 144.693478][ T5106] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.211'. [ 144.750029][ T5117] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 144.781412][ T5117] device syzkaller0 entered promiscuous mode [ 144.834653][ T5131] netlink: 'syz.2.216': attribute type 29 has an invalid length. [ 144.996760][ T5136] netlink: 'syz.0.218': attribute type 10 has an invalid length. [ 145.118886][ T5136] device veth0_vlan left promiscuous mode [ 145.142059][ T5136] device veth0_vlan entered promiscuous mode [ 145.177978][ T5136] team0: Device veth0_vlan failed to register rx_handler [ 145.532470][ T5145] FAULT_INJECTION: forcing a failure. [ 145.532470][ T5145] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 145.654081][ T5145] CPU: 0 PID: 5145 Comm: syz.3.221 Not tainted syzkaller #0 [ 145.661458][ T5145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 145.671551][ T5145] Call Trace: [ 145.674862][ T5145] [ 145.677821][ T5145] dump_stack_lvl+0x188/0x24e [ 145.682536][ T5145] ? show_regs_print_info+0x12/0x12 [ 145.687773][ T5145] ? load_image+0x400/0x400 [ 145.692316][ T5145] ? __lock_acquire+0x7d10/0x7d10 [ 145.697374][ T5145] ? __fget_files+0x28/0x4b0 [ 145.702010][ T5145] should_fail_ex+0x399/0x4d0 [ 145.706743][ T5145] _copy_from_user+0x2c/0x170 [ 145.711458][ T5145] generic_map_update_batch+0x4a1/0x810 [ 145.717053][ T5145] ? rcu_read_unlock+0xa0/0xa0 [ 145.721875][ T5145] ? __fdget+0x17c/0x200 [ 145.726148][ T5145] ? rcu_read_unlock+0xa0/0xa0 [ 145.730931][ T5145] bpf_map_do_batch+0x466/0x600 [ 145.735812][ T5145] __sys_bpf+0x6f7/0x780 [ 145.740077][ T5145] ? bpf_link_show_fdinfo+0x380/0x380 [ 145.745479][ T5145] ? lock_chain_count+0x20/0x20 [ 145.750352][ T5145] __x64_sys_bpf+0x78/0x90 [ 145.754782][ T5145] do_syscall_64+0x4c/0xa0 [ 145.759208][ T5145] ? clear_bhb_loop+0x60/0xb0 [ 145.763898][ T5145] ? clear_bhb_loop+0x60/0xb0 [ 145.768631][ T5145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.774539][ T5145] RIP: 0033:0x7fcae379aeb9 [ 145.778960][ T5145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.798577][ T5145] RSP: 002b:00007fcae45f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 145.806999][ T5145] RAX: ffffffffffffffda RBX: 00007fcae3a15fa0 RCX: 00007fcae379aeb9 [ 145.814976][ T5145] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 145.822950][ T5145] RBP: 00007fcae45f8090 R08: 0000000000000000 R09: 0000000000000000 [ 145.830926][ T5145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.838905][ T5145] R13: 00007fcae3a16038 R14: 00007fcae3a15fa0 R15: 00007ffd2389a9d8 [ 145.846892][ T5145] [ 146.111515][ T5152] netlink: 830 bytes leftover after parsing attributes in process `syz.2.223'. [ 146.262186][ T5155] netlink: 'syz.4.224': attribute type 2 has an invalid length. [ 146.530301][ T5159] netlink: 'syz.2.227': attribute type 25 has an invalid length. [ 148.023663][ T5174] netlink: 56 bytes leftover after parsing attributes in process `syz.4.230'. [ 148.083897][ T5176] FAULT_INJECTION: forcing a failure. [ 148.083897][ T5176] name failslab, interval 1, probability 0, space 0, times 0 [ 148.112699][ T5176] CPU: 1 PID: 5176 Comm: syz.3.231 Not tainted syzkaller #0 [ 148.120072][ T5176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 148.130168][ T5176] Call Trace: [ 148.133581][ T5176] [ 148.136667][ T5176] dump_stack_lvl+0x188/0x24e [ 148.141447][ T5176] ? show_regs_print_info+0x12/0x12 [ 148.146667][ T5176] ? load_image+0x400/0x400 [ 148.151269][ T5176] ? __might_sleep+0xd0/0xd0 [ 148.155879][ T5176] ? __lock_acquire+0x7d10/0x7d10 [ 148.160971][ T5176] should_fail_ex+0x399/0x4d0 [ 148.165731][ T5176] should_failslab+0x5/0x20 [ 148.170304][ T5176] slab_pre_alloc_hook+0x59/0x310 [ 148.175396][ T5176] kmem_cache_alloc+0x56/0x2f0 [ 148.180211][ T5176] ? security_inode_alloc+0x30/0x110 [ 148.185564][ T5176] security_inode_alloc+0x30/0x110 [ 148.190740][ T5176] inode_init_always+0x8f8/0xc90 [ 148.195741][ T5176] ? memset+0x1e/0x40 [ 148.199775][ T5176] new_inode_pseudo+0x91/0x1c0 [ 148.204592][ T5176] new_inode+0x25/0x1c0 [ 148.208811][ T5176] proc_pid_make_inode+0x20/0x1c0 [ 148.213898][ T5176] proc_ns_dir_lookup+0x6a0/0x7c0 [ 148.218978][ T5176] ? proc_ns_dir_readdir+0x420/0x420 [ 148.224311][ T5176] path_openat+0xfce/0x2ee0 [ 148.228922][ T5176] ? do_filp_open+0x430/0x430 [ 148.233659][ T5176] ? trace_event_raw_event_lock+0x250/0x250 [ 148.239784][ T5176] do_filp_open+0x1f1/0x430 [ 148.244339][ T5176] ? vfs_tmpfile+0x480/0x480 [ 148.248991][ T5176] ? noop_direct_IO+0x10/0x10 [ 148.253731][ T5176] ? _raw_spin_unlock+0x24/0x40 [ 148.258616][ T5176] ? alloc_fd+0x58f/0x630 [ 148.263106][ T5176] do_sys_openat2+0x150/0x4b0 [ 148.267824][ T5176] ? atomic_notifier_call_chain+0x282/0x2b0 [ 148.273763][ T5176] ? perf_trace_preemptirq_template+0xa8/0x320 [ 148.280057][ T5176] ? do_sys_open+0xe0/0xe0 [ 148.284527][ T5176] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 148.290557][ T5176] ? lock_chain_count+0x20/0x20 [ 148.295478][ T5176] __x64_sys_openat+0x135/0x160 [ 148.300399][ T5176] do_syscall_64+0x4c/0xa0 [ 148.304946][ T5176] ? clear_bhb_loop+0x60/0xb0 [ 148.309659][ T5176] ? clear_bhb_loop+0x60/0xb0 [ 148.314422][ T5176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.320363][ T5176] RIP: 0033:0x7fcae375b78e [ 148.324823][ T5176] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 148.344487][ T5176] RSP: 002b:00007fcae45f7ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 148.353044][ T5176] RAX: ffffffffffffffda RBX: 00007fcae45f86c0 RCX: 00007fcae375b78e [ 148.361066][ T5176] RDX: 0000000000000002 RSI: 00007fcae45f7f90 RDI: ffffffffffffff9c [ 148.369085][ T5176] RBP: 00007fcae45f8090 R08: 0000000000000000 R09: 0000000000000000 [ 148.377102][ T5176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.385217][ T5176] R13: 00007fcae3a16038 R14: 00007fcae3a15fa0 R15: 00007ffd2389a9d8 [ 148.393275][ T5176] [ 149.714260][ T5197] netlink: 'syz.0.238': attribute type 2 has an invalid length. [ 150.346121][ T5174] netlink: 56 bytes leftover after parsing attributes in process `syz.4.230'. [ 150.621009][ T5202] syz.4.239[5202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.621184][ T5202] syz.4.239[5202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.762340][ T5225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.247'. [ 154.462675][ T5248] netlink: 'syz.0.251': attribute type 2 has an invalid length. [ 154.594257][ T5257] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 154.632948][ T5257] device syzkaller0 entered promiscuous mode [ 154.827715][ T5258] syz.4.253[5258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.827834][ T5258] syz.4.253[5258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.608019][ T5279] netlink: 'syz.3.261': attribute type 3 has an invalid length. [ 155.695284][ T5279] netlink: 'syz.3.261': attribute type 1 has an invalid length. [ 155.784234][ T5279] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.261'. [ 156.166682][ T5297] netlink: 'syz.2.268': attribute type 29 has an invalid length. [ 158.625795][ T5297] netlink: 'syz.2.268': attribute type 29 has an invalid length. [ 158.889357][ T5320] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.274'. [ 158.925595][ T5320] openvswitch: netlink: Flow actions attr not present in new flow. [ 159.075626][ T5323] FAULT_INJECTION: forcing a failure. [ 159.075626][ T5323] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 159.092631][ T5323] CPU: 1 PID: 5323 Comm: syz.1.276 Not tainted syzkaller #0 [ 159.099972][ T5323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 159.110059][ T5323] Call Trace: [ 159.113418][ T5323] [ 159.116374][ T5323] dump_stack_lvl+0x188/0x24e [ 159.121089][ T5323] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 159.127283][ T5323] ? show_regs_print_info+0x12/0x12 [ 159.132510][ T5323] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 159.138701][ T5323] should_fail_ex+0x399/0x4d0 [ 159.143444][ T5323] prepare_alloc_pages+0x1e2/0x5f0 [ 159.148601][ T5323] __alloc_pages+0x130/0x4f0 [ 159.153222][ T5323] ? zone_statistics+0x170/0x170 [ 159.158184][ T5323] ? __sanitizer_cov_trace_switch+0x4/0xe0 [ 159.164010][ T5323] ? do_raw_spin_unlock+0x11d/0x230 [ 159.169217][ T5323] __get_free_pages+0x8/0x30 [ 159.173818][ T5323] kasan_populate_vmalloc_pte+0x31/0xf0 [ 159.179371][ T5323] ? __apply_to_page_range+0x977/0xd10 [ 159.184851][ T5323] __apply_to_page_range+0x989/0xd10 [ 159.190165][ T5323] ? kasan_populate_vmalloc+0x70/0x70 [ 159.195550][ T5323] alloc_vmap_area+0x178f/0x18c0 [ 159.200521][ T5323] ? vm_map_ram+0xab0/0xab0 [ 159.205034][ T5323] ? alloc_vmap_area+0xd/0x18c0 [ 159.209901][ T5323] __get_vm_area_node+0x158/0x330 [ 159.214941][ T5323] __vmalloc_node_range+0x357/0x13b0 [ 159.220247][ T5323] ? sock_map_alloc+0x1ce/0x2e0 [ 159.225113][ T5323] ? perf_trace_preemptirq_template+0x268/0x320 [ 159.231383][ T5323] ? memset+0x1e/0x40 [ 159.235370][ T5323] ? lockdep_init_map_type+0x98/0x8d0 [ 159.240761][ T5323] ? free_vm_area+0x50/0x50 [ 159.245283][ T5323] bpf_map_area_alloc+0xd4/0xe0 [ 159.250142][ T5323] ? sock_map_alloc+0x1ce/0x2e0 [ 159.255005][ T5323] sock_map_alloc+0x1ce/0x2e0 [ 159.259703][ T5323] map_create+0x534/0x1000 [ 159.264129][ T5323] ? bpf_lsm_bpf+0x5/0x10 [ 159.268472][ T5323] __sys_bpf+0x38b/0x780 [ 159.272726][ T5323] ? bpf_link_show_fdinfo+0x380/0x380 [ 159.278123][ T5323] ? lock_chain_count+0x20/0x20 [ 159.282982][ T5323] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 159.288981][ T5323] __x64_sys_bpf+0x78/0x90 [ 159.293419][ T5323] do_syscall_64+0x4c/0xa0 [ 159.297846][ T5323] ? clear_bhb_loop+0x60/0xb0 [ 159.302527][ T5323] ? clear_bhb_loop+0x60/0xb0 [ 159.307222][ T5323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.313127][ T5323] RIP: 0033:0x7fe4f1d9aeb9 [ 159.317556][ T5323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.337174][ T5323] RSP: 002b:00007fe4f2ca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.345603][ T5323] RAX: ffffffffffffffda RBX: 00007fe4f2015fa0 RCX: 00007fe4f1d9aeb9 [ 159.353579][ T5323] RDX: 0000000000000050 RSI: 0000200000000880 RDI: 0000000000000000 [ 159.361561][ T5323] RBP: 00007fe4f2ca1090 R08: 0000000000000000 R09: 0000000000000000 [ 159.369543][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.377525][ T5323] R13: 00007fe4f2016038 R14: 00007fe4f2015fa0 R15: 00007ffc9c3fe908 [ 159.385520][ T5323] [ 159.507319][ T5329] netlink: 'syz.0.278': attribute type 3 has an invalid length. [ 159.526439][ T5319] delete_channel: no stack [ 159.632362][ T5329] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 159.671158][ T5329] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.278'. [ 161.131282][ T5355] netlink: 'syz.2.285': attribute type 2 has an invalid length. [ 161.272922][ T5350] netlink: 'syz.1.295': attribute type 3 has an invalid length. [ 161.447353][ T5350] netlink: 'syz.1.295': attribute type 1 has an invalid length. [ 161.711424][ T5350] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.295'. [ 165.302549][ T5404] netlink: 'syz.2.299': attribute type 2 has an invalid length. [ 165.703017][ T5406] netlink: 'syz.1.301': attribute type 10 has an invalid length. [ 165.848531][ T5406] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.963422][ T5406] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.664871][ T5406] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.672097][ T5406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.680309][ T5406] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.687508][ T5406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.707591][ T5406] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 166.743699][ T5429] netlink: 'syz.2.307': attribute type 2 has an invalid length. [ 167.174784][ T5446] netlink: 830 bytes leftover after parsing attributes in process `syz.0.313'. [ 167.443626][ T5458] netlink: 'syz.3.315': attribute type 2 has an invalid length. [ 167.960561][ T5473] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.321'. [ 167.984283][ T5473] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 168.373674][ T5484] netlink: 'syz.0.322': attribute type 10 has an invalid length. [ 168.712365][ T5484] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.719971][ T5484] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.073522][ T5484] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.080792][ T5484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.088329][ T5484] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.095519][ T5484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.168280][ T5497] FAULT_INJECTION: forcing a failure. [ 169.168280][ T5497] name failslab, interval 1, probability 0, space 0, times 0 [ 169.207802][ T5484] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 169.220377][ T5493] delete_channel: no stack [ 169.234452][ T5497] CPU: 1 PID: 5497 Comm: syz.1.328 Not tainted syzkaller #0 [ 169.241808][ T5497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 169.251905][ T5497] Call Trace: [ 169.255219][ T5497] [ 169.258186][ T5497] dump_stack_lvl+0x188/0x24e [ 169.262912][ T5497] ? show_regs_print_info+0x12/0x12 [ 169.268149][ T5497] ? load_image+0x400/0x400 [ 169.272696][ T5497] ? __might_sleep+0xd0/0xd0 [ 169.277311][ T5497] ? __lock_acquire+0x7d10/0x7d10 [ 169.282382][ T5497] should_fail_ex+0x399/0x4d0 [ 169.287176][ T5497] should_failslab+0x5/0x20 [ 169.291686][ T5497] slab_pre_alloc_hook+0x59/0x310 [ 169.296725][ T5497] ? slab_free_freelist_hook+0x131/0x1a0 [ 169.302393][ T5497] ? create_local_trace_uprobe+0x154/0x6e0 [ 169.308261][ T5497] __kmem_cache_alloc_node+0x4f/0x260 [ 169.313632][ T5497] ? kern_path+0x3b/0x50 [ 169.317873][ T5497] ? create_local_trace_uprobe+0x154/0x6e0 [ 169.323697][ T5497] kmalloc_trace+0x26/0xe0 [ 169.328150][ T5497] create_local_trace_uprobe+0x154/0x6e0 [ 169.333833][ T5497] ? bpf_get_uprobe_info+0x520/0x520 [ 169.339159][ T5497] ? _copy_from_user+0x10b/0x170 [ 169.344134][ T5497] perf_uprobe_init+0xef/0x190 [ 169.348931][ T5497] perf_uprobe_event_init+0xe2/0x170 [ 169.354250][ T5497] perf_try_init_event+0x12b/0x3d0 [ 169.359403][ T5497] perf_event_alloc+0xf5c/0x21b0 [ 169.364380][ T5497] ? perf_event_alloc+0xbe2/0x21b0 [ 169.369534][ T5497] __se_sys_perf_event_open+0x5db/0x1ec0 [ 169.375174][ T5497] ? __fget_files+0x43d/0x4b0 [ 169.379862][ T5497] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 169.385512][ T5497] ? lockdep_hardirqs_on+0x94/0x140 [ 169.390709][ T5497] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 169.396348][ T5497] do_syscall_64+0x4c/0xa0 [ 169.400848][ T5497] ? clear_bhb_loop+0x60/0xb0 [ 169.405533][ T5497] ? clear_bhb_loop+0x60/0xb0 [ 169.410213][ T5497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.416116][ T5497] RIP: 0033:0x7fe4f1d9aeb9 [ 169.420550][ T5497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.440159][ T5497] RSP: 002b:00007fe4f2ca1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 169.448597][ T5497] RAX: ffffffffffffffda RBX: 00007fe4f2015fa0 RCX: 00007fe4f1d9aeb9 [ 169.456567][ T5497] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000001080 [ 169.464547][ T5497] RBP: 00007fe4f2ca1090 R08: 0000000000000000 R09: 0000000000000000 [ 169.472534][ T5497] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 169.480518][ T5497] R13: 00007fe4f2016038 R14: 00007fe4f2015fa0 R15: 00007ffc9c3fe908 [ 169.488600][ T5497] [ 169.494481][ T5497] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 169.930761][ T5513] netlink: 'syz.3.332': attribute type 29 has an invalid length. [ 170.081494][ T5513] netlink: 'syz.3.332': attribute type 29 has an invalid length. [ 170.129316][ T5517] netlink: 'syz.3.332': attribute type 29 has an invalid length. [ 170.131280][ T5508] netlink: 'syz.4.331': attribute type 2 has an invalid length. [ 170.207829][ T5513] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.332'. [ 170.231510][ T5513] openvswitch: netlink: Flow actions attr not present in new flow. [ 170.562578][ T5529] netlink: 56 bytes leftover after parsing attributes in process `syz.1.337'. [ 170.612964][ T5529] netlink: 56 bytes leftover after parsing attributes in process `syz.1.337'. [ 172.869352][ T5549] netlink: 'syz.1.342': attribute type 1 has an invalid length. [ 172.877312][ T5549] netlink: 5 bytes leftover after parsing attributes in process `syz.1.342'. [ 173.808899][ T5559] netlink: 'syz.4.345': attribute type 4 has an invalid length. [ 173.870468][ T5559] netlink: 156 bytes leftover after parsing attributes in process `syz.4.345'. [ 173.928726][ T5559] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 174.328447][ T5574] netlink: 'syz.1.348': attribute type 2 has an invalid length. [ 174.988666][ T5584] netlink: 'syz.3.351': attribute type 10 has an invalid length. [ 177.519271][ T5619] netlink: 'syz.0.360': attribute type 29 has an invalid length. [ 177.532799][ T5621] netlink: 56 bytes leftover after parsing attributes in process `syz.1.362'. [ 177.629242][ T5621] netlink: 56 bytes leftover after parsing attributes in process `syz.1.362'. [ 177.846417][ T5619] netlink: 'syz.0.360': attribute type 29 has an invalid length. [ 177.860440][ T5622] netlink: 'syz.0.360': attribute type 29 has an invalid length. [ 178.216669][ T5633] netlink: 'syz.1.363': attribute type 2 has an invalid length. [ 178.542948][ T5646] netlink: 132 bytes leftover after parsing attributes in process `syz.2.369'. [ 178.871562][ T5654] netlink: 56 bytes leftover after parsing attributes in process `syz.2.373'. [ 178.913806][ T5654] netlink: 56 bytes leftover after parsing attributes in process `syz.2.373'. [ 179.064201][ T5657] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.374'. [ 179.154344][ T5657] bridge_slave_1: default FDB implementation only supports local addresses [ 179.574409][ T5669] netlink: 'syz.4.377': attribute type 2 has an invalid length. [ 180.302851][ T5686] netlink: 'syz.0.382': attribute type 2 has an invalid length. [ 180.797726][ T5696] tipc: Started in network mode [ 180.804936][ T5696] tipc: Node identity 9215a268, cluster identity 4711 [ 180.811786][ T5696] tipc: Node number set to 2450891368 [ 181.324622][ T5703] netlink: 56 bytes leftover after parsing attributes in process `syz.0.386'. [ 181.333673][ T5703] netlink: 56 bytes leftover after parsing attributes in process `syz.0.386'. [ 183.126900][ T5735] netlink: 'syz.3.396': attribute type 2 has an invalid length. [ 183.317656][ T5745] netlink: 56 bytes leftover after parsing attributes in process `syz.1.401'. [ 183.374225][ T5745] netlink: 56 bytes leftover after parsing attributes in process `syz.1.401'. [ 183.445747][ T5748] netlink: 'syz.2.402': attribute type 2 has an invalid length. [ 185.285151][ T5782] netlink: 56 bytes leftover after parsing attributes in process `syz.0.414'. [ 185.312995][ T5782] netlink: 56 bytes leftover after parsing attributes in process `syz.0.414'. [ 185.617130][ T5791] netlink: 87536 bytes leftover after parsing attributes in process `syz.3.419'. [ 185.975685][ T5801] netlink: 188 bytes leftover after parsing attributes in process `syz.4.421'. [ 186.036731][ T5795] netlink: 40 bytes leftover after parsing attributes in process `syz.0.420'. [ 186.618422][ T5808] netlink: 132 bytes leftover after parsing attributes in process `syz.3.425'. [ 186.933588][ T5818] netlink: 'syz.2.439': attribute type 39 has an invalid length. [ 186.986712][ T5818] device veth0_macvtap left promiscuous mode [ 187.013364][ T5823] netlink: 'syz.3.429': attribute type 2 has an invalid length. [ 187.054171][ T5826] netlink: 56 bytes leftover after parsing attributes in process `syz.0.431'. [ 187.127312][ T5826] netlink: 56 bytes leftover after parsing attributes in process `syz.0.431'. [ 187.187859][ T5831] Illegal XDP return value 4294967294 on prog (id 291) dev N/A, expect packet loss! [ 187.890963][ T5851] netlink: 'syz.2.440': attribute type 41 has an invalid length. [ 187.955955][ T5851] netlink: 'syz.2.440': attribute type 41 has an invalid length. [ 188.522662][ T5861] netlink: 56 bytes leftover after parsing attributes in process `syz.3.444'. [ 188.600450][ T5861] netlink: 56 bytes leftover after parsing attributes in process `syz.3.444'. [ 189.031356][ T5880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.038761][ T5880] IPv6: NLM_F_CREATE should be set when creating new route [ 189.046085][ T5880] IPv6: NLM_F_CREATE should be set when creating new route [ 189.053330][ T5880] IPv6: NLM_F_CREATE should be set when creating new route [ 189.065230][ T5875] delete_channel: no stack [ 189.696225][ T4284] Bluetooth: hci1: unexpected event 0x35 length: 15 > 6 [ 191.316104][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 191.316127][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 191.316165][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 191.323125][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 191.329169][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 191.359640][ T5919] __nla_validate_parse: 3 callbacks suppressed [ 191.359674][ T5919] netlink: 160 bytes leftover after parsing attributes in process `syz.3.465'. [ 191.531446][ T5920] netlink: 'syz.3.465': attribute type 11 has an invalid length. [ 191.662771][ T5920] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.465'. [ 191.829334][ T5920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.856280][ T5933] netlink: 'syz.1.468': attribute type 2 has an invalid length. [ 191.938950][ T5935] netlink: 56 bytes leftover after parsing attributes in process `syz.0.471'. [ 191.940855][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 191.971675][ T5935] netlink: 56 bytes leftover after parsing attributes in process `syz.0.471'. [ 193.481455][ T5976] netlink: 56 bytes leftover after parsing attributes in process `syz.0.485'. [ 193.504152][ T5976] netlink: 56 bytes leftover after parsing attributes in process `syz.0.485'. [ 193.627676][ T5979] netlink: 'syz.4.486': attribute type 2 has an invalid length. [ 194.702597][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.709222][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.241265][ T6009] netlink: 60 bytes leftover after parsing attributes in process `syz.1.496'. [ 195.264402][ T6009] netlink: 60 bytes leftover after parsing attributes in process `syz.1.496'. [ 195.294350][ T6009] netlink: 60 bytes leftover after parsing attributes in process `syz.1.496'. [ 195.817927][ T6024] netlink: 56 bytes leftover after parsing attributes in process `syz.3.500'. [ 195.883185][ T6027] netlink: 'syz.2.501': attribute type 2 has an invalid length. [ 196.417173][ T6038] delete_channel: no stack [ 196.967571][ T6058] __nla_validate_parse: 1 callbacks suppressed [ 196.967616][ T6058] netlink: 160 bytes leftover after parsing attributes in process `syz.2.512'. [ 197.061425][ T6061] netlink: 'syz.2.512': attribute type 11 has an invalid length. [ 197.074462][ T6061] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.512'. [ 197.191413][ T6061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.263918][ T6058] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 197.387095][ T6069] netlink: 56 bytes leftover after parsing attributes in process `syz.0.515'. [ 197.459170][ T6069] netlink: 56 bytes leftover after parsing attributes in process `syz.0.515'. [ 198.027354][ T6079] netlink: 'syz.1.517': attribute type 2 has an invalid length. [ 198.873730][ T6089] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.522'. [ 199.125711][ T6103] netlink: 'syz.3.536': attribute type 10 has an invalid length. [ 199.202886][ T6103] netlink: 40 bytes leftover after parsing attributes in process `syz.3.536'. [ 199.235496][ T6103] device ipvlan1 entered promiscuous mode [ 199.274695][ T6103] bridge0: port 3(ipvlan1) entered blocking state [ 199.283083][ T6103] bridge0: port 3(ipvlan1) entered disabled state [ 199.317310][ T6103] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 199.708595][ T6116] netlink: 56 bytes leftover after parsing attributes in process `syz.3.530'. [ 199.728295][ T6116] netlink: 56 bytes leftover after parsing attributes in process `syz.3.530'. [ 199.964401][ T6119] netlink: 'syz.0.531': attribute type 2 has an invalid length. [ 200.125749][ T6124] netlink: 'syz.3.534': attribute type 2 has an invalid length. [ 200.167447][ T6126] netlink: 56 bytes leftover after parsing attributes in process `syz.2.544'. [ 200.184216][ T6124] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.534'. [ 200.641927][ T6138] netlink: 'syz.4.533': attribute type 11 has an invalid length. [ 200.784168][ T6138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.973800][ T6129] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 201.405082][ T6144] netlink: 'syz.0.539': attribute type 21 has an invalid length. [ 201.414470][ T6145] netlink: 'syz.1.540': attribute type 14 has an invalid length. [ 202.802832][ T6166] __nla_validate_parse: 4 callbacks suppressed [ 202.802849][ T6166] netlink: 56 bytes leftover after parsing attributes in process `syz.1.547'. [ 202.948011][ T6166] netlink: 56 bytes leftover after parsing attributes in process `syz.1.547'. [ 203.856269][ T6179] netlink: 'syz.2.550': attribute type 2 has an invalid length. [ 204.895346][ T6199] netlink: 'syz.3.559': attribute type 2 has an invalid length. [ 204.903155][ T6199] netlink: 'syz.3.559': attribute type 8 has an invalid length. [ 204.935446][ T6198] netlink: 56 bytes leftover after parsing attributes in process `syz.1.560'. [ 204.975439][ T6199] netlink: 132 bytes leftover after parsing attributes in process `syz.3.559'. [ 205.109817][ T6198] netlink: 56 bytes leftover after parsing attributes in process `syz.1.560'. [ 205.183330][ T6199] netlink: 'syz.3.559': attribute type 10 has an invalid length. [ 205.246777][ T6199] device veth0_vlan left promiscuous mode [ 205.285028][ T6199] device veth0_vlan entered promiscuous mode [ 205.292688][ T6199] team0: Device veth0_vlan failed to register rx_handler [ 206.665361][ T6218] netlink: 'syz.1.566': attribute type 10 has an invalid length. [ 206.673158][ T6218] netlink: 55 bytes leftover after parsing attributes in process `syz.1.566'. [ 207.286935][ T6231] netlink: 'syz.0.565': attribute type 2 has an invalid length. [ 207.386602][ T6226] device wg2 entered promiscuous mode [ 207.399485][ T6230] netlink: 'syz.2.568': attribute type 10 has an invalid length. [ 207.500032][ T6230] device veth0_vlan left promiscuous mode [ 207.560371][ T6230] device veth0_vlan entered promiscuous mode [ 207.619969][ T6230] team0: Device veth0_vlan failed to register rx_handler [ 207.802430][ T6234] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.569'. [ 207.936982][ T6234] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.569'. [ 207.979050][ T6234] netlink: 3 bytes leftover after parsing attributes in process `syz.4.569'. [ 208.025367][ T6240] netlink: 'syz.1.570': attribute type 10 has an invalid length. [ 208.245129][ T6250] netlink: 56 bytes leftover after parsing attributes in process `syz.4.574'. [ 208.294636][ T6250] netlink: 56 bytes leftover after parsing attributes in process `syz.4.574'. [ 208.322226][ T6252] netlink: 'syz.2.577': attribute type 10 has an invalid length. [ 208.374136][ T6252] netlink: 55 bytes leftover after parsing attributes in process `syz.2.577'. [ 208.717110][ T6260] netlink: 'syz.2.577': attribute type 1 has an invalid length. [ 208.778077][ T6260] netlink: 148288 bytes leftover after parsing attributes in process `syz.2.577'. [ 209.367717][ T6262] netlink: 'syz.3.576': attribute type 14 has an invalid length. [ 209.384162][ T6262] netlink: 34923 bytes leftover after parsing attributes in process `syz.3.576'. [ 209.400994][ T6267] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.579'. [ 209.544233][ T6263] device bridge_slave_1 left promiscuous mode [ 209.550647][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.592128][ T6263] device bridge_slave_0 left promiscuous mode [ 209.674509][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.770296][ T6263] bond0: (slave bridge0): Releasing backup interface [ 209.816687][ T6276] netlink: 'syz.2.581': attribute type 2 has an invalid length. [ 209.843121][ T6276] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.581'. [ 209.862170][ T6278] netlink: 'syz.3.582': attribute type 6 has an invalid length. [ 209.881454][ T6278] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.582'. [ 210.414384][ T6279] can: request_module (can-proto-0) failed. [ 210.606664][ T6285] netlink: 'syz.4.583': attribute type 2 has an invalid length. [ 210.877979][ T6297] netlink: 'syz.0.587': attribute type 2 has an invalid length. [ 212.019884][ T6327] netlink: 'syz.2.597': attribute type 3 has an invalid length. [ 212.384815][ T6343] device hsr_slave_0 left promiscuous mode [ 212.420980][ T6343] device hsr_slave_1 left promiscuous mode [ 212.709006][ T6341] netlink: 'syz.4.603': attribute type 2 has an invalid length. [ 213.046734][ T6359] __nla_validate_parse: 8 callbacks suppressed [ 213.046750][ T6359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.608'. [ 213.148736][ T6359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.608'. [ 213.184670][ T6358] netlink: 60 bytes leftover after parsing attributes in process `syz.0.608'. [ 214.023616][ T6389] netlink: 56 bytes leftover after parsing attributes in process `syz.4.615'. [ 214.086134][ T6389] netlink: 56 bytes leftover after parsing attributes in process `syz.4.615'. [ 214.333066][ T6396] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.616'. [ 215.761419][ T6426] netlink: 'syz.3.625': attribute type 3 has an invalid length. [ 215.813072][ T6426] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.625'. [ 216.199940][ T6431] netlink: 'syz.1.626': attribute type 2 has an invalid length. [ 216.307682][ T6435] netlink: 56 bytes leftover after parsing attributes in process `syz.0.629'. [ 216.324183][ T6435] netlink: 56 bytes leftover after parsing attributes in process `syz.0.629'. [ 216.358437][ T6437] netlink: 'syz.3.628': attribute type 10 has an invalid length. [ 216.444130][ T6437] netlink: 2 bytes leftover after parsing attributes in process `syz.3.628'. [ 216.453003][ T6437] device bond0 entered promiscuous mode [ 216.494055][ T6437] device bond_slave_0 entered promiscuous mode [ 216.500425][ T6437] device bond_slave_1 entered promiscuous mode [ 216.555983][ T6437] bridge0: port 3(bond0) entered blocking state [ 216.624729][ T6437] bridge0: port 3(bond0) entered disabled state [ 216.676925][ T6437] bridge0: port 3(bond0) entered blocking state [ 216.683364][ T6437] bridge0: port 3(bond0) entered forwarding state [ 217.377020][ T4282] Bluetooth: hci4: unexpected event 0x14 length: 15 > 6 [ 217.729593][ T6458] netlink: 'syz.0.637': attribute type 10 has an invalid length. [ 217.921602][ T6461] FAULT_INJECTION: forcing a failure. [ 217.921602][ T6461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.077872][ T6461] CPU: 0 PID: 6461 Comm: syz.3.639 Not tainted syzkaller #0 [ 218.085248][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 218.095333][ T6461] Call Trace: [ 218.098633][ T6461] [ 218.101583][ T6461] dump_stack_lvl+0x188/0x24e [ 218.106389][ T6461] ? show_regs_print_info+0x12/0x12 [ 218.111617][ T6461] ? load_image+0x400/0x400 [ 218.116151][ T6461] ? __lock_acquire+0x7d10/0x7d10 [ 218.121211][ T6461] ? __rcu_read_unlock+0x78/0xd0 [ 218.126185][ T6461] should_fail_ex+0x399/0x4d0 [ 218.130996][ T6461] _copy_to_user+0x2c/0x130 [ 218.135535][ T6461] bpf_test_finish+0x266/0x600 [ 218.140336][ T6461] ? convert___skb_to_skb+0x580/0x580 [ 218.145734][ T6461] ? convert_skb_to___skb+0x420/0x420 [ 218.151141][ T6461] ? __build_skb+0x257/0x3c0 [ 218.155763][ T6461] bpf_prog_test_run_skb+0xc99/0x12a0 [ 218.161163][ T6461] ? cpu_online+0xa0/0xa0 [ 218.165507][ T6461] bpf_prog_test_run+0x31e/0x390 [ 218.170465][ T6461] __sys_bpf+0x62b/0x780 [ 218.174728][ T6461] ? bpf_link_show_fdinfo+0x380/0x380 [ 218.180129][ T6461] ? lock_chain_count+0x20/0x20 [ 218.185001][ T6461] __x64_sys_bpf+0x78/0x90 [ 218.189432][ T6461] do_syscall_64+0x4c/0xa0 [ 218.193857][ T6461] ? clear_bhb_loop+0x60/0xb0 [ 218.198631][ T6461] ? clear_bhb_loop+0x60/0xb0 [ 218.203318][ T6461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.209219][ T6461] RIP: 0033:0x7fcae379aeb9 [ 218.213643][ T6461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.233346][ T6461] RSP: 002b:00007fcae45f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 218.242206][ T6461] RAX: ffffffffffffffda RBX: 00007fcae3a15fa0 RCX: 00007fcae379aeb9 [ 218.250188][ T6461] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 218.258181][ T6461] RBP: 00007fcae45f8090 R08: 0000000000000000 R09: 0000000000000000 [ 218.266157][ T6461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.274133][ T6461] R13: 00007fcae3a16038 R14: 00007fcae3a15fa0 R15: 00007ffd2389a9d8 [ 218.282123][ T6461] [ 218.339232][ T6463] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.638'. [ 218.815247][ T6477] netlink: 56 bytes leftover after parsing attributes in process `syz.3.644'. [ 218.871057][ T6477] netlink: 56 bytes leftover after parsing attributes in process `syz.3.644'. [ 218.910593][ T6480] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.643'. [ 218.953740][ T6480] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.643'. [ 218.996521][ T6483] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.643'. [ 219.043368][ T6480] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 219.050499][ T6480] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 219.093776][ T6480] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.643'. [ 219.626242][ T6500] netlink: 'syz.2.648': attribute type 2 has an invalid length. [ 220.246192][ T6507] FAULT_INJECTION: forcing a failure. [ 220.246192][ T6507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.370287][ T6507] CPU: 0 PID: 6507 Comm: syz.2.651 Not tainted syzkaller #0 [ 220.377646][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 220.387723][ T6507] Call Trace: [ 220.391020][ T6507] [ 220.393973][ T6507] dump_stack_lvl+0x188/0x24e [ 220.398694][ T6507] ? show_regs_print_info+0x12/0x12 [ 220.403925][ T6507] ? load_image+0x400/0x400 [ 220.408465][ T6507] ? __might_fault+0xa6/0x120 [ 220.413278][ T6507] should_fail_ex+0x399/0x4d0 [ 220.417999][ T6507] copyin+0x1b/0x120 [ 220.421933][ T6507] _copy_from_iter+0x447/0x1130 [ 220.426836][ T6507] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 220.432241][ T6507] ? copyout_mc+0x110/0x110 [ 220.436773][ T6507] ? __virt_addr_valid+0x188/0x540 [ 220.441917][ T6507] ? __virt_addr_valid+0x188/0x540 [ 220.447057][ T6507] ? __virt_addr_valid+0x465/0x540 [ 220.452201][ T6507] ? __check_object_size+0x500/0xa40 [ 220.457512][ T6507] skb_copy_datagram_from_iter+0xef/0x690 [ 220.463264][ T6507] ? skb_put+0x117/0x210 [ 220.467540][ T6507] packet_sendmsg+0x3727/0x4e60 [ 220.472457][ T6507] ? __might_sleep+0xd0/0xd0 [ 220.477266][ T6507] ? verify_lock_unused+0x140/0x140 [ 220.482517][ T6507] ? aa_sk_perm+0x81f/0x950 [ 220.487110][ T6507] ? packet_getsockopt+0x9a0/0x9a0 [ 220.492274][ T6507] ? aa_sock_msg_perm+0x94/0x150 [ 220.497249][ T6507] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 220.502560][ T6507] ? security_socket_sendmsg+0x7c/0xa0 [ 220.508055][ T6507] ? packet_getsockopt+0x9a0/0x9a0 [ 220.513219][ T6507] ____sys_sendmsg+0x5be/0x970 [ 220.518102][ T6507] ? __sys_sendmsg_sock+0x30/0x30 [ 220.523168][ T6507] ? __import_iovec+0x315/0x500 [ 220.528064][ T6507] ? import_iovec+0x6f/0xa0 [ 220.532600][ T6507] ___sys_sendmsg+0x2a2/0x360 [ 220.537331][ T6507] ? __sys_sendmsg+0x290/0x290 [ 220.542247][ T6507] ? __lock_acquire+0x7d10/0x7d10 [ 220.547344][ T6507] __se_sys_sendmsg+0x1bb/0x2a0 [ 220.552239][ T6507] ? __x64_sys_sendmsg+0x80/0x80 [ 220.557231][ T6507] ? lockdep_hardirqs_on+0x94/0x140 [ 220.562638][ T6507] do_syscall_64+0x4c/0xa0 [ 220.567092][ T6507] ? clear_bhb_loop+0x60/0xb0 [ 220.571800][ T6507] ? clear_bhb_loop+0x60/0xb0 [ 220.576516][ T6507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.582447][ T6507] RIP: 0033:0x7f493b79aeb9 [ 220.586980][ T6507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.606615][ T6507] RSP: 002b:00007f493c5c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.615065][ T6507] RAX: ffffffffffffffda RBX: 00007f493ba15fa0 RCX: 00007f493b79aeb9 [ 220.623065][ T6507] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 220.631062][ T6507] RBP: 00007f493c5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 220.639064][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.647064][ T6507] R13: 00007f493ba16038 R14: 00007f493ba15fa0 R15: 00007ffd174e4778 [ 220.655096][ T6507] [ 221.568693][ T6526] netlink: 56 bytes leftover after parsing attributes in process `syz.1.656'. [ 221.671055][ T6526] netlink: 56 bytes leftover after parsing attributes in process `syz.1.656'. [ 221.896884][ T6541] FAULT_INJECTION: forcing a failure. [ 221.896884][ T6541] name failslab, interval 1, probability 0, space 0, times 0 [ 221.975421][ T6541] CPU: 0 PID: 6541 Comm: syz.4.660 Not tainted syzkaller #0 [ 221.982786][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 221.992873][ T6541] Call Trace: [ 221.996256][ T6541] [ 221.999213][ T6541] dump_stack_lvl+0x188/0x24e [ 222.003921][ T6541] ? show_regs_print_info+0x12/0x12 [ 222.009148][ T6541] ? load_image+0x400/0x400 [ 222.013683][ T6541] should_fail_ex+0x399/0x4d0 [ 222.018469][ T6541] should_failslab+0x5/0x20 [ 222.022991][ T6541] slab_pre_alloc_hook+0x59/0x310 [ 222.028032][ T6541] kmem_cache_alloc+0x56/0x2f0 [ 222.032828][ T6541] ? dst_alloc+0x101/0x160 [ 222.037281][ T6541] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 222.042947][ T6541] dst_alloc+0x101/0x160 [ 222.047211][ T6541] ip6_rt_cache_alloc+0x3a1/0xa00 [ 222.052255][ T6541] ? rt6_find_cached_rt+0x270/0x270 [ 222.057470][ T6541] ? rt6_find_cached_rt+0x21d/0x270 [ 222.062688][ T6541] ip6_pol_route+0x1053/0x1290 [ 222.067479][ T6541] ? ip6_pol_route+0x16d/0x1290 [ 222.072350][ T6541] ? trace_fib6_table_lookup+0x250/0x250 [ 222.077998][ T6541] ? err_ptr+0x1a0/0x1a0 [ 222.082257][ T6541] fib6_rule_lookup+0x208/0x5d0 [ 222.087124][ T6541] ? ip6_route_output_flags_noref+0x390/0x390 [ 222.093208][ T6541] ? fib6_lookup+0x2d0/0x2d0 [ 222.097814][ T6541] ? dev_get_by_index_rcu+0xf0/0x110 [ 222.103121][ T6541] ? __ipv6_addr_type+0xce/0x2f0 [ 222.108073][ T6541] ? ip6_route_output_flags_noref+0x230/0x390 [ 222.114160][ T6541] ip6_route_output_flags+0xe3/0x330 [ 222.119457][ T6541] ? ip6_route_output_flags+0x27/0x330 [ 222.124930][ T6541] ip6_dst_lookup_tail+0x1aa/0x1510 [ 222.130154][ T6541] ? ip6_dst_lookup+0x60/0x60 [ 222.134843][ T6541] ? txopt_get+0x76/0x3f0 [ 222.139322][ T6541] ? txopt_get+0x76/0x3f0 [ 222.143664][ T6541] ? txopt_get+0x340/0x3f0 [ 222.148091][ T6541] ? tomoyo_check_acl+0x378/0x3f0 [ 222.153132][ T6541] ? fl6_sock_lookup+0xc0/0xc0 [ 222.157910][ T6541] ip6_dst_lookup_flow+0x44/0xd0 [ 222.162876][ T6541] rawv6_sendmsg+0xca6/0x1700 [ 222.167582][ T6541] ? compat_rawv6_ioctl+0x60/0x60 [ 222.172623][ T6541] ? aa_sk_perm+0x81f/0x950 [ 222.177145][ T6541] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 222.183581][ T6541] ? inet_sendmsg+0x78/0x2f0 [ 222.188183][ T6541] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 222.193668][ T6541] ? security_socket_sendmsg+0x7c/0xa0 [ 222.199158][ T6541] ? inet_send_prepare+0x260/0x260 [ 222.204298][ T6541] ____sys_sendmsg+0x5be/0x970 [ 222.209098][ T6541] ? __sys_sendmsg_sock+0x30/0x30 [ 222.214152][ T6541] ? __import_iovec+0x315/0x500 [ 222.219022][ T6541] ? import_iovec+0x6f/0xa0 [ 222.223637][ T6541] ___sys_sendmsg+0x2a2/0x360 [ 222.228505][ T6541] ? __sys_sendmsg+0x290/0x290 [ 222.233296][ T6541] ? __lock_acquire+0x7d10/0x7d10 [ 222.238361][ T6541] __se_sys_sendmsg+0x1bb/0x2a0 [ 222.243310][ T6541] ? ct_nmi_exit+0x145/0x1c0 [ 222.247962][ T6541] ? __x64_sys_sendmsg+0x80/0x80 [ 222.252924][ T6541] ? lockdep_hardirqs_on+0x94/0x140 [ 222.258132][ T6541] do_syscall_64+0x4c/0xa0 [ 222.262584][ T6541] ? clear_bhb_loop+0x60/0xb0 [ 222.267271][ T6541] ? clear_bhb_loop+0x60/0xb0 [ 222.271961][ T6541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.277868][ T6541] RIP: 0033:0x7f4eea39aeb9 [ 222.282331][ T6541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.302057][ T6541] RSP: 002b:00007f4ee85f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.310500][ T6541] RAX: ffffffffffffffda RBX: 00007f4eea615fa0 RCX: 00007f4eea39aeb9 [ 222.318482][ T6541] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 222.326463][ T6541] RBP: 00007f4ee85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 222.334446][ T6541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.342422][ T6541] R13: 00007f4eea616038 R14: 00007f4eea615fa0 R15: 00007ffc14788018 [ 222.350425][ T6541] [ 222.416945][ T6547] IPv6: Can't replace route, no match found [ 222.783292][ T6548] netlink: 166 bytes leftover after parsing attributes in process `syz.0.661'. [ 223.739347][ T6577] netlink: 56 bytes leftover after parsing attributes in process `syz.3.673'. [ 223.756314][ T6577] netlink: 56 bytes leftover after parsing attributes in process `syz.3.673'. [ 225.110404][ T6608] netlink: 'syz.3.681': attribute type 11 has an invalid length. [ 225.125073][ T6608] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.681'. [ 225.492512][ T6607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.526270][ T6615] netlink: 'syz.1.680': attribute type 2 has an invalid length. [ 225.829785][ T6619] netlink: 56 bytes leftover after parsing attributes in process `syz.2.685'. [ 225.839152][ T6619] netlink: 56 bytes leftover after parsing attributes in process `syz.2.685'. [ 227.498548][ T6658] sctp: [Deprecated]: syz.0.698 (pid 6658) Use of int in maxseg socket option. [ 227.498548][ T6658] Use struct sctp_assoc_value instead [ 227.556657][ T6660] netlink: 56 bytes leftover after parsing attributes in process `syz.1.699'. [ 227.765680][ T6660] netlink: 56 bytes leftover after parsing attributes in process `syz.1.699'. [ 227.924327][ T6662] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.700'. [ 227.939902][ T6662] openvswitch: netlink: Message has 48126 unknown bytes. [ 228.015690][ T6671] netlink: 'syz.2.701': attribute type 2 has an invalid length. [ 228.343642][ T6675] netlink: 56 bytes leftover after parsing attributes in process `syz.1.713'. [ 228.380309][ T6675] netlink: 56 bytes leftover after parsing attributes in process `syz.1.713'. [ 228.861383][ T6689] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.263063][ T6698] netlink: 132 bytes leftover after parsing attributes in process `syz.1.712'. [ 229.387097][ T6703] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.716'. [ 229.655788][ T6707] netlink: 'syz.4.714': attribute type 21 has an invalid length. [ 230.007870][ T6712] netlink: 'syz.0.717': attribute type 2 has an invalid length. [ 230.437508][ T6714] netlink: 56 bytes leftover after parsing attributes in process `syz.2.718'. [ 230.446827][ T6714] netlink: 56 bytes leftover after parsing attributes in process `syz.2.718'. [ 230.704731][ T6718] netlink: 'syz.4.720': attribute type 5 has an invalid length. [ 230.864503][ T6725] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.723'. [ 231.897772][ T6741] netlink: 'syz.3.727': attribute type 27 has an invalid length. [ 232.045760][ T6747] netlink: 56 bytes leftover after parsing attributes in process `syz.0.729'. [ 232.073808][ T6741] bond0: (slave bond_slave_0): Releasing backup interface [ 232.108180][ T6741] device bond_slave_0 left promiscuous mode [ 232.117061][ T6746] FAULT_INJECTION: forcing a failure. [ 232.117061][ T6746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.131086][ T6746] CPU: 1 PID: 6746 Comm: syz.2.730 Not tainted syzkaller #0 [ 232.138436][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 232.148546][ T6746] Call Trace: [ 232.151881][ T6746] [ 232.154837][ T6746] dump_stack_lvl+0x188/0x24e [ 232.159666][ T6746] ? show_regs_print_info+0x12/0x12 [ 232.164898][ T6746] ? load_image+0x400/0x400 [ 232.169407][ T6746] ? __might_fault+0xa6/0x120 [ 232.174105][ T6746] should_fail_ex+0x399/0x4d0 [ 232.179124][ T6746] copyin+0x1b/0x120 [ 232.183043][ T6746] _copy_from_iter+0x447/0x1130 [ 232.187923][ T6746] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 232.193350][ T6746] ? copyout_mc+0x110/0x110 [ 232.197891][ T6746] ? __virt_addr_valid+0x188/0x540 [ 232.203110][ T6746] ? __virt_addr_valid+0x188/0x540 [ 232.208223][ T6746] ? __virt_addr_valid+0x465/0x540 [ 232.213349][ T6746] ? __check_object_size+0x500/0xa40 [ 232.218640][ T6746] skb_copy_datagram_from_iter+0xef/0x690 [ 232.224391][ T6746] ? skb_put+0x117/0x210 [ 232.228644][ T6746] packet_sendmsg+0x3727/0x4e60 [ 232.233522][ T6746] ? __might_sleep+0xd0/0xd0 [ 232.238143][ T6746] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 232.244158][ T6746] ? lock_chain_count+0x20/0x20 [ 232.249041][ T6746] ? aa_sk_perm+0x81f/0x950 [ 232.253569][ T6746] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 232.259765][ T6746] ? packet_getsockopt+0x9a0/0x9a0 [ 232.264927][ T6746] ? aa_sock_msg_perm+0x94/0x150 [ 232.269881][ T6746] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 232.275172][ T6746] ? security_socket_sendmsg+0x7c/0xa0 [ 232.280643][ T6746] ? packet_getsockopt+0x9a0/0x9a0 [ 232.285775][ T6746] ____sys_sendmsg+0x5be/0x970 [ 232.290608][ T6746] ? __sys_sendmsg_sock+0x30/0x30 [ 232.295673][ T6746] ? __import_iovec+0x315/0x500 [ 232.300536][ T6746] ? import_iovec+0x6f/0xa0 [ 232.305049][ T6746] ___sys_sendmsg+0x2a2/0x360 [ 232.309744][ T6746] ? __sys_sendmsg+0x290/0x290 [ 232.314904][ T6746] ? __lock_acquire+0x7d10/0x7d10 [ 232.319997][ T6746] __se_sys_sendmsg+0x1bb/0x2a0 [ 232.324864][ T6746] ? ct_nmi_exit+0x145/0x1c0 [ 232.329490][ T6746] ? __x64_sys_sendmsg+0x80/0x80 [ 232.334504][ T6746] ? lockdep_hardirqs_on+0x94/0x140 [ 232.339761][ T6746] do_syscall_64+0x4c/0xa0 [ 232.344233][ T6746] ? clear_bhb_loop+0x60/0xb0 [ 232.348984][ T6746] ? clear_bhb_loop+0x60/0xb0 [ 232.353713][ T6746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.359650][ T6746] RIP: 0033:0x7f493b79aeb9 [ 232.364107][ T6746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.383745][ T6746] RSP: 002b:00007f493c5c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.392184][ T6746] RAX: ffffffffffffffda RBX: 00007f493ba15fa0 RCX: 00007f493b79aeb9 [ 232.400172][ T6746] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000009 [ 232.408243][ T6746] RBP: 00007f493c5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 232.416227][ T6746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.424210][ T6746] R13: 00007f493ba16038 R14: 00007f493ba15fa0 R15: 00007ffd174e4778 [ 232.432220][ T6746] [ 232.469845][ T6747] netlink: 56 bytes leftover after parsing attributes in process `syz.0.729'. [ 232.906221][ T6760] netlink: 'syz.2.734': attribute type 2 has an invalid length. [ 232.946882][ T6759] Dead loop on virtual device ip6_vti0, fix it urgently! [ 234.203069][ T6770] device wg2 left promiscuous mode [ 234.280097][ T6779] device wg2 entered promiscuous mode [ 234.395608][ T6788] netlink: 56 bytes leftover after parsing attributes in process `syz.4.743'. [ 234.452349][ T6788] netlink: 56 bytes leftover after parsing attributes in process `syz.4.743'. [ 234.737826][ T6791] netlink: 'syz.1.744': attribute type 2 has an invalid length. [ 234.805979][ T6791] netlink: 14 bytes leftover after parsing attributes in process `syz.1.744'. [ 235.686608][ T6813] netlink: 'syz.3.748': attribute type 2 has an invalid length. [ 236.565376][ T6832] netlink: 56 bytes leftover after parsing attributes in process `syz.0.756'. [ 236.599045][ T6832] netlink: 56 bytes leftover after parsing attributes in process `syz.0.756'. [ 237.372729][ T6858] FAULT_INJECTION: forcing a failure. [ 237.372729][ T6858] name failslab, interval 1, probability 0, space 0, times 0 [ 237.394069][ T6858] CPU: 1 PID: 6858 Comm: syz.4.765 Not tainted syzkaller #0 [ 237.401410][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 237.411488][ T6858] Call Trace: [ 237.414799][ T6858] [ 237.417758][ T6858] dump_stack_lvl+0x188/0x24e [ 237.422480][ T6858] ? show_regs_print_info+0x12/0x12 [ 237.427707][ T6858] ? load_image+0x400/0x400 [ 237.432250][ T6858] should_fail_ex+0x399/0x4d0 [ 237.436982][ T6858] should_failslab+0x5/0x20 [ 237.441528][ T6858] slab_pre_alloc_hook+0x59/0x310 [ 237.446586][ T6858] ? nf_ct_ext_add+0x1a7/0x3e0 [ 237.451386][ T6858] __kmem_cache_alloc_node+0x4f/0x260 [ 237.456798][ T6858] ? nf_ct_ext_add+0x1a7/0x3e0 [ 237.461577][ T6858] __kmalloc_node_track_caller+0x9e/0x230 [ 237.467322][ T6858] krealloc+0x6a/0x100 [ 237.471413][ T6858] nf_ct_ext_add+0x1a7/0x3e0 [ 237.476035][ T6858] init_conntrack+0x8af/0x11a0 [ 237.480818][ T6858] ? early_drop+0x870/0x870 [ 237.485342][ T6858] ? nf_conntrack_find_get+0x670/0x670 [ 237.490813][ T6858] ? __siphash_unaligned+0x25b/0x3a0 [ 237.496116][ T6858] nf_conntrack_in+0xd3e/0x17b0 [ 237.501005][ T6858] ? nf_ct_pernet+0x270/0x270 [ 237.505708][ T6858] ? ipt_do_table+0x2bd/0x15a0 [ 237.510493][ T6858] ? read_lock_is_recursive+0x10/0x10 [ 237.515880][ T6858] ? ipv4_conntrack_defrag+0x284/0x5b0 [ 237.521349][ T6858] ? ipv4_conntrack_local+0x11f/0x200 [ 237.526732][ T6858] ? ipv4_conntrack_in+0x20/0x20 [ 237.531677][ T6858] nf_hook_slow+0xb9/0x200 [ 237.536103][ T6858] ? nf_hook+0x390/0x390 [ 237.540365][ T6858] nf_hook+0x224/0x390 [ 237.544444][ T6858] ? nf_hook+0x9e/0x390 [ 237.548608][ T6858] ? __ip_local_out+0x5d0/0x5d0 [ 237.553496][ T6858] ? nf_hook+0x390/0x390 [ 237.557774][ T6858] ? ip_fast_csum+0x1ea/0x2b0 [ 237.562482][ T6858] __ip_local_out+0x49c/0x5d0 [ 237.567176][ T6858] ? nf_hook+0x390/0x390 [ 237.571434][ T6858] ip_send_skb+0x48/0x1c0 [ 237.575777][ T6858] raw_sendmsg+0x153d/0x1b20 [ 237.580383][ T6858] ? raw_sendmsg+0x520/0x1b20 [ 237.585088][ T6858] ? compat_raw_ioctl+0x60/0x60 [ 237.589974][ T6858] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 237.596409][ T6858] ? sock_rps_record_flow+0x19/0x3f0 [ 237.601706][ T6858] ? inet_sendmsg+0x78/0x2f0 [ 237.606312][ T6858] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 237.611698][ T6858] ? security_socket_sendmsg+0x7c/0xa0 [ 237.617174][ T6858] ? inet_send_prepare+0x260/0x260 [ 237.622297][ T6858] ____sys_sendmsg+0x5be/0x970 [ 237.627094][ T6858] ? __sys_sendmsg_sock+0x30/0x30 [ 237.632129][ T6858] ? __import_iovec+0x315/0x500 [ 237.636994][ T6858] ? import_iovec+0x6f/0xa0 [ 237.641509][ T6858] ___sys_sendmsg+0x2a2/0x360 [ 237.646300][ T6858] ? __sys_sendmsg+0x290/0x290 [ 237.651097][ T6858] ? __lock_acquire+0x7d10/0x7d10 [ 237.656155][ T6858] __se_sys_sendmsg+0x1bb/0x2a0 [ 237.661020][ T6858] ? __x64_sys_sendmsg+0x80/0x80 [ 237.666078][ T6858] ? lockdep_hardirqs_on+0x94/0x140 [ 237.671287][ T6858] do_syscall_64+0x4c/0xa0 [ 237.675807][ T6858] ? clear_bhb_loop+0x60/0xb0 [ 237.680499][ T6858] ? clear_bhb_loop+0x60/0xb0 [ 237.685217][ T6858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.691122][ T6858] RIP: 0033:0x7f4eea39aeb9 [ 237.695547][ T6858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.715159][ T6858] RSP: 002b:00007f4ee85f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.723591][ T6858] RAX: ffffffffffffffda RBX: 00007f4eea615fa0 RCX: 00007f4eea39aeb9 [ 237.731575][ T6858] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 237.739553][ T6858] RBP: 00007f4ee85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 237.747529][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.755528][ T6858] R13: 00007f4eea616038 R14: 00007f4eea615fa0 R15: 00007ffc14788018 [ 237.763544][ T6858] [ 237.874918][ T6853] netlink: 'syz.2.762': attribute type 2 has an invalid length. [ 238.409208][ T6870] netlink: 56 bytes leftover after parsing attributes in process `syz.0.768'. [ 238.494198][ T6870] netlink: 56 bytes leftover after parsing attributes in process `syz.0.768'. [ 239.133553][ T6886] FAULT_INJECTION: forcing a failure. [ 239.133553][ T6886] name failslab, interval 1, probability 0, space 0, times 0 [ 239.175804][ T6877] delete_channel: no stack [ 239.189069][ T6886] CPU: 0 PID: 6886 Comm: syz.1.773 Not tainted syzkaller #0 [ 239.196422][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 239.206518][ T6886] Call Trace: [ 239.209831][ T6886] [ 239.212787][ T6886] dump_stack_lvl+0x188/0x24e [ 239.217492][ T6886] ? trace_event_raw_event_lock+0x250/0x250 [ 239.223414][ T6886] ? show_regs_print_info+0x12/0x12 [ 239.228633][ T6886] ? load_image+0x400/0x400 [ 239.233148][ T6886] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 239.239426][ T6886] should_fail_ex+0x399/0x4d0 [ 239.244139][ T6886] should_failslab+0x5/0x20 [ 239.249011][ T6886] slab_pre_alloc_hook+0x59/0x310 [ 239.254069][ T6886] ? current_time+0x196/0x2b0 [ 239.258850][ T6886] ? proc_thread_self_get_link+0xf8/0x190 [ 239.264600][ T6886] __kmem_cache_alloc_node+0x4f/0x260 [ 239.270081][ T6886] ? proc_thread_self_get_link+0xf8/0x190 [ 239.275826][ T6886] kmalloc_trace+0x26/0xe0 [ 239.280270][ T6886] proc_thread_self_get_link+0xf8/0x190 [ 239.285838][ T6886] ? proc_setup_thread_self+0x2f0/0x2f0 [ 239.291404][ T6886] pick_link+0x6f3/0xe20 [ 239.295679][ T6886] step_into+0xc49/0xf20 [ 239.299946][ T6886] ? __d_lookup_rcu+0x43a/0x4c0 [ 239.304818][ T6886] ? set_root+0x3a0/0x3a0 [ 239.309175][ T6886] ? lookup_fast+0x15b/0x4d0 [ 239.313786][ T6886] ? security_inode_permission+0xac/0xf0 [ 239.319442][ T6886] link_path_walk+0x6c1/0xe70 [ 239.324162][ T6886] ? handle_lookup_down+0x130/0x130 [ 239.329394][ T6886] ? percpu_counter_add_batch+0x13b/0x160 [ 239.335149][ T6886] path_openat+0x286/0x2ee0 [ 239.339706][ T6886] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 239.345541][ T6886] ? do_filp_open+0x430/0x430 [ 239.350237][ T6886] ? perf_trace_lock+0x301/0x390 [ 239.355204][ T6886] ? trace_event_raw_event_lock+0x250/0x250 [ 239.361122][ T6886] do_filp_open+0x1f1/0x430 [ 239.365651][ T6886] ? vfs_tmpfile+0x480/0x480 [ 239.370293][ T6886] ? _raw_spin_unlock+0x24/0x40 [ 239.375156][ T6886] ? alloc_fd+0x58f/0x630 [ 239.379520][ T6886] do_sys_openat2+0x150/0x4b0 [ 239.384212][ T6886] ? ct_nmi_exit+0x145/0x1c0 [ 239.388821][ T6886] ? perf_trace_preemptirq_template+0xa8/0x320 [ 239.394998][ T6886] ? do_sys_open+0xe0/0xe0 [ 239.399534][ T6886] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 239.405540][ T6886] ? lock_chain_count+0x20/0x20 [ 239.410405][ T6886] ? exit_to_user_mode_loop+0xdc/0x110 [ 239.415896][ T6886] __x64_sys_openat+0x135/0x160 [ 239.420782][ T6886] do_syscall_64+0x4c/0xa0 [ 239.425216][ T6886] ? clear_bhb_loop+0x60/0xb0 [ 239.429907][ T6886] ? clear_bhb_loop+0x60/0xb0 [ 239.434602][ T6886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.440594][ T6886] RIP: 0033:0x7fe4f1d5b78e [ 239.445026][ T6886] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 239.464993][ T6886] RSP: 002b:00007fe4f2ca0ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 239.473427][ T6886] RAX: ffffffffffffffda RBX: 00007fe4f2ca16c0 RCX: 00007fe4f1d5b78e [ 239.481522][ T6886] RDX: 0000000000000000 RSI: 00007fe4f2ca0f90 RDI: ffffffffffffff9c [ 239.489535][ T6886] RBP: 00007fe4f2ca1090 R08: 0000000000000000 R09: 0000000000000000 [ 239.497544][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.505542][ T6886] R13: 00007fe4f2016038 R14: 00007fe4f2015fa0 R15: 00007ffc9c3fe908 [ 239.513567][ T6886] [ 240.055368][ T6897] netlink: 'syz.2.776': attribute type 3 has an invalid length. [ 240.104476][ T6897] netlink: 'syz.2.776': attribute type 1 has an invalid length. [ 240.112218][ T6897] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.776'. [ 240.615460][ T6909] netlink: 'syz.0.780': attribute type 2 has an invalid length. [ 241.061992][ T6915] netlink: 56 bytes leftover after parsing attributes in process `syz.3.782'. [ 241.088920][ T6915] netlink: 56 bytes leftover after parsing attributes in process `syz.3.782'. [ 241.716198][ T6931] netlink: 14 bytes leftover after parsing attributes in process `syz.0.789'. [ 242.005588][ T6932] device syzkaller0 entered promiscuous mode [ 242.081737][ T6940] FAULT_INJECTION: forcing a failure. [ 242.081737][ T6940] name failslab, interval 1, probability 0, space 0, times 0 [ 242.134226][ T6940] CPU: 0 PID: 6940 Comm: syz.2.791 Not tainted syzkaller #0 [ 242.141602][ T6940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 242.151776][ T6940] Call Trace: [ 242.155080][ T6940] [ 242.158040][ T6940] dump_stack_lvl+0x188/0x24e [ 242.162762][ T6940] ? sctp_sendmsg+0x15b0/0x2940 [ 242.167659][ T6940] ? ___sys_sendmsg+0x2a2/0x360 [ 242.172553][ T6940] ? show_regs_print_info+0x12/0x12 [ 242.177785][ T6940] ? load_image+0x400/0x400 [ 242.182429][ T6940] should_fail_ex+0x399/0x4d0 [ 242.187163][ T6940] should_failslab+0x5/0x20 [ 242.191718][ T6940] slab_pre_alloc_hook+0x59/0x310 [ 242.196819][ T6940] ? sctp_add_bind_addr+0x89/0x350 [ 242.201971][ T6940] __kmem_cache_alloc_node+0x4f/0x260 [ 242.207387][ T6940] ? sctp_add_bind_addr+0x89/0x350 [ 242.212538][ T6940] kmalloc_trace+0x26/0xe0 [ 242.217004][ T6940] sctp_add_bind_addr+0x89/0x350 [ 242.222162][ T6940] sctp_copy_local_addr_list+0x311/0x4e0 [ 242.227847][ T6940] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 242.233624][ T6940] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 242.239843][ T6940] ? sctp_v4_is_any+0x31/0x50 [ 242.244658][ T6940] ? sctp_copy_one_addr+0x93/0x660 [ 242.249817][ T6940] sctp_bind_addr_copy+0xaf/0x3c0 [ 242.254882][ T6940] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 242.261258][ T6940] sctp_connect_new_asoc+0x2f5/0x6a0 [ 242.266588][ T6940] ? __sctp_connect+0xd80/0xd80 [ 242.271473][ T6940] ? __local_bh_enable_ip+0x136/0x1c0 [ 242.276889][ T6940] ? _local_bh_enable+0xa0/0xa0 [ 242.281814][ T6940] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 242.287662][ T6940] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 242.293519][ T6940] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 242.299108][ T6940] ? security_sctp_bind_connect+0x85/0xb0 [ 242.304865][ T6940] sctp_sendmsg+0x15b0/0x2940 [ 242.309599][ T6940] ? aa_sk_perm+0x721/0x950 [ 242.314141][ T6940] ? sctp_getsockopt+0x8a0/0x8a0 [ 242.319132][ T6940] ? __might_fault+0xa6/0x120 [ 242.323842][ T6940] ? aa_af_perm+0x340/0x340 [ 242.328465][ T6940] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 242.334926][ T6940] ? inet_sendmsg+0x78/0x2f0 [ 242.339554][ T6940] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 242.344868][ T6940] ? security_socket_sendmsg+0x7c/0xa0 [ 242.350365][ T6940] ? inet_send_prepare+0x260/0x260 [ 242.355510][ T6940] ____sys_sendmsg+0x5be/0x970 [ 242.360319][ T6940] ? __sys_sendmsg_sock+0x30/0x30 [ 242.365390][ T6940] ? __import_iovec+0x315/0x500 [ 242.370286][ T6940] ? import_iovec+0x6f/0xa0 [ 242.374825][ T6940] ___sys_sendmsg+0x2a2/0x360 [ 242.379558][ T6940] ? __sys_sendmsg+0x290/0x290 [ 242.384471][ T6940] ? __lock_acquire+0x7d10/0x7d10 [ 242.389567][ T6940] __se_sys_sendmsg+0x1bb/0x2a0 [ 242.394478][ T6940] ? __x64_sys_sendmsg+0x80/0x80 [ 242.399479][ T6940] ? lockdep_hardirqs_on+0x94/0x140 [ 242.404721][ T6940] do_syscall_64+0x4c/0xa0 [ 242.409176][ T6940] ? clear_bhb_loop+0x60/0xb0 [ 242.413886][ T6940] ? clear_bhb_loop+0x60/0xb0 [ 242.418598][ T6940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.424523][ T6940] RIP: 0033:0x7f493b79aeb9 [ 242.428970][ T6940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.448716][ T6940] RSP: 002b:00007f493c5c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.457264][ T6940] RAX: ffffffffffffffda RBX: 00007f493ba15fa0 RCX: 00007f493b79aeb9 [ 242.465276][ T6940] RDX: 000000002000c055 RSI: 0000200000000140 RDI: 0000000000000003 [ 242.473285][ T6940] RBP: 00007f493c5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 242.481380][ T6940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.489395][ T6940] R13: 00007f493ba16038 R14: 00007f493ba15fa0 R15: 00007ffd174e4778 [ 242.497420][ T6940] [ 242.909499][ T6954] netlink: 'syz.4.795': attribute type 2 has an invalid length. [ 243.031468][ T6956] netlink: 56 bytes leftover after parsing attributes in process `syz.3.797'. [ 244.634929][ T6956] netlink: 56 bytes leftover after parsing attributes in process `syz.3.797'. [ 245.188332][ T6966] netlink: 'syz.0.800': attribute type 21 has an invalid length. [ 245.636561][ T6988] netlink: 'syz.2.808': attribute type 29 has an invalid length. [ 245.685057][ T6988] netlink: 'syz.2.808': attribute type 29 has an invalid length. [ 245.849128][ T6977] netlink: 'syz.3.802': attribute type 6 has an invalid length. [ 246.041896][ T6988] netlink: 'syz.2.808': attribute type 29 has an invalid length. [ 247.005981][ T7001] netlink: 'syz.4.810': attribute type 2 has an invalid length. [ 247.022794][ T7006] netlink: 'syz.3.814': attribute type 10 has an invalid length. [ 247.031043][ T7006] device veth0_vlan left promiscuous mode [ 247.039821][ T7007] netlink: 56 bytes leftover after parsing attributes in process `syz.1.812'. [ 247.043680][ T7006] device veth0_vlan entered promiscuous mode [ 247.058051][ T7006] team0: Device veth0_vlan failed to register rx_handler [ 247.603359][ T7007] netlink: 56 bytes leftover after parsing attributes in process `syz.1.812'. [ 247.616721][ T7019] FAULT_INJECTION: forcing a failure. [ 247.616721][ T7019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.667352][ T7019] CPU: 1 PID: 7019 Comm: syz.4.818 Not tainted syzkaller #0 [ 247.674726][ T7019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 247.684820][ T7019] Call Trace: [ 247.688128][ T7019] [ 247.691112][ T7019] dump_stack_lvl+0x188/0x24e [ 247.695840][ T7019] ? show_regs_print_info+0x12/0x12 [ 247.701075][ T7019] ? load_image+0x400/0x400 [ 247.705616][ T7019] ? __lock_acquire+0x7d10/0x7d10 [ 247.710675][ T7019] ? __fget_files+0x28/0x4b0 [ 247.715313][ T7019] should_fail_ex+0x399/0x4d0 [ 247.720039][ T7019] _copy_from_user+0x2c/0x170 [ 247.724762][ T7019] generic_map_update_batch+0x4f3/0x810 [ 247.730448][ T7019] ? rcu_read_unlock+0xa0/0xa0 [ 247.735269][ T7019] ? __fdget+0x17c/0x200 [ 247.739564][ T7019] ? rcu_read_unlock+0xa0/0xa0 [ 247.744362][ T7019] bpf_map_do_batch+0x466/0x600 [ 247.749261][ T7019] __sys_bpf+0x6f7/0x780 [ 247.753548][ T7019] ? bpf_link_show_fdinfo+0x380/0x380 [ 247.758980][ T7019] ? lock_chain_count+0x20/0x20 [ 247.763884][ T7019] __x64_sys_bpf+0x78/0x90 [ 247.768344][ T7019] do_syscall_64+0x4c/0xa0 [ 247.772799][ T7019] ? clear_bhb_loop+0x60/0xb0 [ 247.777515][ T7019] ? clear_bhb_loop+0x60/0xb0 [ 247.782229][ T7019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.788243][ T7019] RIP: 0033:0x7f4eea39aeb9 [ 247.792683][ T7019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.812490][ T7019] RSP: 002b:00007f4ee85f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.820925][ T7019] RAX: ffffffffffffffda RBX: 00007f4eea615fa0 RCX: 00007f4eea39aeb9 [ 247.828917][ T7019] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 247.836901][ T7019] RBP: 00007f4ee85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 247.844884][ T7019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.852868][ T7019] R13: 00007f4eea616038 R14: 00007f4eea615fa0 R15: 00007ffc14788018 [ 247.860886][ T7019] [ 248.177877][ T7022] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.819'. [ 248.411291][ T7032] FAULT_INJECTION: forcing a failure. [ 248.411291][ T7032] name failslab, interval 1, probability 0, space 0, times 0 [ 248.524829][ T7032] CPU: 1 PID: 7032 Comm: syz.3.823 Not tainted syzkaller #0 [ 248.532218][ T7032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 248.542327][ T7032] Call Trace: [ 248.545655][ T7032] [ 248.548641][ T7032] dump_stack_lvl+0x188/0x24e [ 248.553394][ T7032] ? show_regs_print_info+0x12/0x12 [ 248.558652][ T7032] ? load_image+0x400/0x400 [ 248.563240][ T7032] ? __might_sleep+0xd0/0xd0 [ 248.567886][ T7032] ? __lock_acquire+0x7d10/0x7d10 [ 248.572973][ T7032] ? skb_gro_incr_csum_unnecessary+0x300/0x300 [ 248.579291][ T7032] should_fail_ex+0x399/0x4d0 [ 248.584057][ T7032] should_failslab+0x5/0x20 [ 248.588808][ T7032] slab_pre_alloc_hook+0x59/0x310 [ 248.593892][ T7032] ? inet6_rtm_newroute+0x9f9/0x1bf0 [ 248.599245][ T7032] __kmem_cache_alloc_node+0x4f/0x260 [ 248.604700][ T7032] ? inet6_rtm_newroute+0x9f9/0x1bf0 [ 248.610050][ T7032] kmalloc_trace+0x26/0xe0 [ 248.614539][ T7032] inet6_rtm_newroute+0x9f9/0x1bf0 [ 248.619776][ T7032] ? ipv6_route_sysctl_init+0x270/0x270 [ 248.625472][ T7032] ? trace_contention_end+0x5f/0x170 [ 248.631022][ T7032] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 248.636209][ T7032] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 248.641376][ T7032] ? ipv6_route_sysctl_init+0x270/0x270 [ 248.646980][ T7032] rtnetlink_rcv_msg+0x87c/0xfc0 [ 248.651992][ T7032] ? rtnetlink_bind+0x80/0x80 [ 248.656799][ T7032] ? __dev_queue_xmit+0x1c61/0x37f0 [ 248.662101][ T7032] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 248.667908][ T7032] ? perf_trace_lock+0x301/0x390 [ 248.672911][ T7032] ? __copy_skb_header+0x3ba/0x4f0 [ 248.678079][ T7032] ? trace_event_raw_event_lock+0x250/0x250 [ 248.684013][ T7032] ? __skb_clone+0x480/0x790 [ 248.688650][ T7032] netlink_rcv_skb+0x1fb/0x450 [ 248.693453][ T7032] ? rtnetlink_bind+0x80/0x80 [ 248.698169][ T7032] ? netlink_ack+0x1170/0x1170 [ 248.702997][ T7032] ? netlink_deliver_tap+0x2e/0x1b0 [ 248.708239][ T7032] netlink_unicast+0x74d/0x8d0 [ 248.713062][ T7032] netlink_sendmsg+0x8ad/0xbd0 [ 248.717882][ T7032] ? netlink_getsockopt+0x550/0x550 [ 248.723238][ T7032] ? aa_sock_msg_perm+0x94/0x150 [ 248.728213][ T7032] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 248.733532][ T7032] ? security_socket_sendmsg+0x7c/0xa0 [ 248.739028][ T7032] ? netlink_getsockopt+0x550/0x550 [ 248.744433][ T7032] ____sys_sendmsg+0x5be/0x970 [ 248.749340][ T7032] ? __sys_sendmsg_sock+0x30/0x30 [ 248.754406][ T7032] ? __import_iovec+0x315/0x500 [ 248.759336][ T7032] ? import_iovec+0x6f/0xa0 [ 248.763913][ T7032] ___sys_sendmsg+0x2a2/0x360 [ 248.768683][ T7032] ? __sys_sendmsg+0x290/0x290 [ 248.773635][ T7032] ? __lock_acquire+0x7d10/0x7d10 [ 248.778769][ T7032] __se_sys_sendmsg+0x1bb/0x2a0 [ 248.783670][ T7032] ? __x64_sys_sendmsg+0x80/0x80 [ 248.788700][ T7032] ? lockdep_hardirqs_on+0x94/0x140 [ 248.793947][ T7032] do_syscall_64+0x4c/0xa0 [ 248.798398][ T7032] ? clear_bhb_loop+0x60/0xb0 [ 248.803133][ T7032] ? clear_bhb_loop+0x60/0xb0 [ 248.807844][ T7032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.813763][ T7032] RIP: 0033:0x7fcae379aeb9 [ 248.818208][ T7032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.837879][ T7032] RSP: 002b:00007fcae45f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.846329][ T7032] RAX: ffffffffffffffda RBX: 00007fcae3a15fa0 RCX: 00007fcae379aeb9 [ 248.854325][ T7032] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 248.862322][ T7032] RBP: 00007fcae45f8090 R08: 0000000000000000 R09: 0000000000000000 [ 248.870320][ T7032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.878577][ T7032] R13: 00007fcae3a16038 R14: 00007fcae3a15fa0 R15: 00007ffd2389a9d8 [ 248.886614][ T7032] [ 249.170603][ T7035] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 249.287452][ T7035] pim6reg0: linktype set to 5 [ 253.325995][ T7052] FAULT_INJECTION: forcing a failure. [ 253.325995][ T7052] name failslab, interval 1, probability 0, space 0, times 0 [ 253.391517][ T7056] netlink: 'syz.2.828': attribute type 2 has an invalid length. [ 253.419177][ T7052] CPU: 1 PID: 7052 Comm: syz.3.829 Not tainted syzkaller #0 [ 253.426553][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 253.436729][ T7052] Call Trace: [ 253.440039][ T7052] [ 253.443002][ T7052] dump_stack_lvl+0x188/0x24e [ 253.447734][ T7052] ? show_regs_print_info+0x12/0x12 [ 253.452979][ T7052] ? load_image+0x400/0x400 [ 253.457528][ T7052] ? __might_sleep+0xd0/0xd0 [ 253.462159][ T7052] ? __lock_acquire+0x7d10/0x7d10 [ 253.467248][ T7052] should_fail_ex+0x399/0x4d0 [ 253.471985][ T7052] should_failslab+0x5/0x20 [ 253.476530][ T7052] slab_pre_alloc_hook+0x59/0x310 [ 253.481610][ T7052] kmem_cache_alloc_lru+0x49/0x2e0 [ 253.486770][ T7052] ? new_inode_pseudo+0x7e/0x1c0 [ 253.491756][ T7052] new_inode_pseudo+0x7e/0x1c0 [ 253.496567][ T7052] ? __ns_get_path+0x2c/0x650 [ 253.501291][ T7052] __ns_get_path+0x251/0x650 [ 253.505945][ T7052] ns_get_path+0x50/0x90 [ 253.510316][ T7052] proc_ns_get_link+0xf4/0x200 [ 253.515128][ T7052] ? proc_ns_instantiate+0xf0/0xf0 [ 253.520292][ T7052] ? pick_link+0x10f/0xe20 [ 253.524750][ T7052] ? bpf_lsm_inode_follow_link+0x5/0x10 [ 253.530338][ T7052] ? security_inode_follow_link+0xb3/0x100 [ 253.536187][ T7052] ? proc_ns_instantiate+0xf0/0xf0 [ 253.541339][ T7052] pick_link+0x6b3/0xe20 [ 253.545654][ T7052] step_into+0xc49/0xf20 [ 253.549954][ T7052] ? rcu_read_lock_any_held+0xb0/0x130 [ 253.555459][ T7052] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 253.560790][ T7052] ? set_root+0x3a0/0x3a0 [ 253.565159][ T7052] ? d_splice_alias+0x110/0x320 [ 253.570074][ T7052] path_openat+0x15f3/0x2ee0 [ 253.574773][ T7052] ? do_filp_open+0x430/0x430 [ 253.579632][ T7052] ? trace_event_raw_event_lock+0x250/0x250 [ 253.585590][ T7052] do_filp_open+0x1f1/0x430 [ 253.590151][ T7052] ? vfs_tmpfile+0x480/0x480 [ 253.594832][ T7052] ? _raw_spin_unlock+0x24/0x40 [ 253.599803][ T7052] ? alloc_fd+0x58f/0x630 [ 253.604196][ T7052] do_sys_openat2+0x150/0x4b0 [ 253.608917][ T7052] ? atomic_notifier_call_chain+0x282/0x2b0 [ 253.615031][ T7052] ? perf_trace_preemptirq_template+0xa8/0x320 [ 253.621234][ T7052] ? do_sys_open+0xe0/0xe0 [ 253.625703][ T7052] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 253.631734][ T7052] ? lock_chain_count+0x20/0x20 [ 253.636649][ T7052] __x64_sys_openat+0x135/0x160 [ 253.641563][ T7052] do_syscall_64+0x4c/0xa0 [ 253.646024][ T7052] ? clear_bhb_loop+0x60/0xb0 [ 253.650920][ T7052] ? clear_bhb_loop+0x60/0xb0 [ 253.655652][ T7052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.661585][ T7052] RIP: 0033:0x7fcae375b78e [ 253.666048][ T7052] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 253.685970][ T7052] RSP: 002b:00007fcae45f7ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 253.694445][ T7052] RAX: ffffffffffffffda RBX: 00007fcae45f86c0 RCX: 00007fcae375b78e [ 253.702466][ T7052] RDX: 0000000000000002 RSI: 00007fcae45f7f90 RDI: ffffffffffffff9c [ 253.710478][ T7052] RBP: 00007fcae45f8090 R08: 0000000000000000 R09: 0000000000000000 [ 253.718492][ T7052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.726503][ T7052] R13: 00007fcae3a16038 R14: 00007fcae3a15fa0 R15: 00007ffd2389a9d8 [ 253.734547][ T7052] [ 254.033628][ T7061] netlink: 56 bytes leftover after parsing attributes in process `syz.0.832'. [ 254.134239][ T7061] netlink: 56 bytes leftover after parsing attributes in process `syz.0.832'. [ 254.363046][ T7073] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.838'. [ 254.546738][ T7078] netlink: 56 bytes leftover after parsing attributes in process `syz.3.839'. [ 254.576221][ T7078] netlink: 56 bytes leftover after parsing attributes in process `syz.3.839'. [ 255.107209][ T7091] netlink: 'syz.3.842': attribute type 7 has an invalid length. [ 255.233684][ T7092] netlink: 'syz.2.843': attribute type 2 has an invalid length. [ 255.245422][ T7096] device vcan0 entered promiscuous mode [ 255.251207][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 255.766509][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.773010][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.120851][ T7105] netlink: 56 bytes leftover after parsing attributes in process `syz.4.848'. [ 258.249718][ T7105] netlink: 56 bytes leftover after parsing attributes in process `syz.4.848'. [ 258.905946][ T7123] FAULT_INJECTION: forcing a failure. [ 258.905946][ T7123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.934942][ T7123] CPU: 1 PID: 7123 Comm: syz.2.854 Not tainted syzkaller #0 [ 258.942311][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 258.952404][ T7123] Call Trace: [ 258.955720][ T7123] [ 258.958774][ T7123] dump_stack_lvl+0x188/0x24e [ 258.963499][ T7123] ? show_regs_print_info+0x12/0x12 [ 258.968832][ T7123] ? load_image+0x400/0x400 [ 258.973380][ T7123] ? __lock_acquire+0x7d10/0x7d10 [ 258.978453][ T7123] should_fail_ex+0x399/0x4d0 [ 258.983182][ T7123] _copy_to_user+0x2c/0x130 [ 258.987724][ T7123] generic_map_lookup_batch+0x82c/0xc00 [ 258.993329][ T7123] ? bpf_map_update_value+0x670/0x670 [ 258.998758][ T7123] ? __fdget+0x17c/0x200 [ 259.003048][ T7123] ? bpf_map_update_value+0x670/0x670 [ 259.008464][ T7123] bpf_map_do_batch+0x2c8/0x600 [ 259.013359][ T7123] ? bpf_lsm_bpf+0x5/0x10 [ 259.017724][ T7123] ? security_bpf+0x7a/0xa0 [ 259.022259][ T7123] __sys_bpf+0x6f7/0x780 [ 259.026613][ T7123] ? bpf_link_show_fdinfo+0x380/0x380 [ 259.032189][ T7123] ? lock_chain_count+0x20/0x20 [ 259.037066][ T7123] __x64_sys_bpf+0x78/0x90 [ 259.041498][ T7123] do_syscall_64+0x4c/0xa0 [ 259.045941][ T7123] ? clear_bhb_loop+0x60/0xb0 [ 259.050632][ T7123] ? clear_bhb_loop+0x60/0xb0 [ 259.055319][ T7123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.061223][ T7123] RIP: 0033:0x7f493b79aeb9 [ 259.065652][ T7123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.085268][ T7123] RSP: 002b:00007f493c5c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 259.093779][ T7123] RAX: ffffffffffffffda RBX: 00007f493ba15fa0 RCX: 00007f493b79aeb9 [ 259.101759][ T7123] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 259.109775][ T7123] RBP: 00007f493c5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 259.117764][ T7123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.125815][ T7123] R13: 00007f493ba16038 R14: 00007f493ba15fa0 R15: 00007ffd174e4778 [ 259.133892][ T7123] [ 260.149398][ T7144] netlink: 'syz.4.861': attribute type 2 has an invalid length. [ 260.379964][ T7150] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.862'. [ 260.392035][ T7150] openvswitch: netlink: Flow actions attr not present in new flow. [ 276.384322][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.394456][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.404886][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.424141][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.432705][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.444267][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.970700][ T4281] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.979858][ T4281] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.988320][ T4281] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.998845][ T4281] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.007087][ T4281] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.014685][ T4281] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.250619][ T4281] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.259513][ T4281] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.268084][ T4282] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.277566][ T4282] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.291387][ T4282] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.299608][ T4282] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 277.873071][ T7161] chnl_net:caif_netlink_parms(): no params data found [ 278.484191][ T4275] Bluetooth: hci5: command 0x0409 tx timeout [ 278.651567][ T7154] chnl_net:caif_netlink_parms(): no params data found [ 278.668803][ T7160] chnl_net:caif_netlink_parms(): no params data found [ 278.883916][ T4281] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 278.904272][ T4281] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 278.912235][ T4281] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 278.928033][ T4281] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 278.935992][ T4281] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 278.943726][ T4281] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 279.044262][ T4282] Bluetooth: hci6: command 0x0409 tx timeout [ 279.115781][ T4284] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 279.125288][ T4284] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 279.133278][ T4284] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 279.142494][ T4284] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 279.151316][ T4284] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 279.159217][ T4284] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 279.364325][ T4275] Bluetooth: hci7: command 0x0409 tx timeout [ 279.558526][ T7161] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.566171][ T7161] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.584799][ T7161] device bridge_slave_0 entered promiscuous mode [ 279.739335][ T7161] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.754494][ T7161] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.774827][ T7161] device bridge_slave_1 entered promiscuous mode [ 280.062083][ T7160] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.091406][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.111078][ T7160] device bridge_slave_0 entered promiscuous mode [ 280.129102][ T7154] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.148350][ T7154] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.164819][ T7154] device bridge_slave_0 entered promiscuous mode [ 280.192664][ T7161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.221211][ T7160] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.235206][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.253662][ T7160] device bridge_slave_1 entered promiscuous mode [ 280.564076][ T4275] Bluetooth: hci5: command 0x041b tx timeout [ 280.964388][ T4275] Bluetooth: hci9: command 0x0409 tx timeout [ 281.124391][ T4275] Bluetooth: hci6: command 0x041b tx timeout [ 281.204354][ T4275] Bluetooth: hci8: command 0x0409 tx timeout [ 281.444326][ T4275] Bluetooth: hci7: command 0x041b tx timeout [ 282.644099][ T4275] Bluetooth: hci5: command 0x040f tx timeout [ 283.044346][ T4275] Bluetooth: hci9: command 0x041b tx timeout [ 283.204388][ T4275] Bluetooth: hci6: command 0x040f tx timeout [ 283.284255][ T4275] Bluetooth: hci8: command 0x041b tx timeout [ 283.524313][ T4275] Bluetooth: hci7: command 0x040f tx timeout [ 284.724093][ T4275] Bluetooth: hci5: command 0x0419 tx timeout [ 285.124394][ T4275] Bluetooth: hci9: command 0x040f tx timeout [ 285.284312][ T4275] Bluetooth: hci6: command 0x0419 tx timeout [ 285.364255][ T4275] Bluetooth: hci8: command 0x040f tx timeout [ 285.604533][ T4275] Bluetooth: hci7: command 0x0419 tx timeout [ 287.204329][ T4275] Bluetooth: hci9: command 0x0419 tx timeout [ 287.444236][ T4275] Bluetooth: hci8: command 0x0419 tx timeout [ 337.494901][ T4282] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 337.503853][ T4282] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 337.513039][ T4282] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 337.521998][ T4282] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 337.530342][ T4282] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 337.537966][ T4282] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 337.662404][ T4284] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 337.674785][ T4284] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 337.682879][ T4284] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 337.698737][ T4282] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 337.706784][ T4282] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 337.715460][ T4282] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 337.877630][ T4282] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 337.894728][ T4282] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 337.902874][ T4282] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 337.911837][ T4282] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 337.920031][ T4282] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 337.929036][ T4282] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 338.694433][ T4282] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 338.715069][ T4282] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 338.723274][ T4282] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 338.743803][ T4282] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 338.752388][ T4282] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 338.760533][ T4282] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 339.614054][ T4275] Bluetooth: hci11: command 0x0409 tx timeout [ 339.764328][ T4275] Bluetooth: hci10: command 0x0409 tx timeout [ 339.857775][ T4282] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 339.872476][ T4282] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 339.881788][ T4282] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 339.890345][ T4282] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 339.899021][ T4282] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 339.906652][ T4282] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 340.004105][ T4275] Bluetooth: hci12: command 0x0409 tx timeout [ 340.804211][ T4275] Bluetooth: hci13: command 0x0409 tx timeout [ 341.684054][ T4275] Bluetooth: hci11: command 0x041b tx timeout [ 341.844179][ T4275] Bluetooth: hci10: command 0x041b tx timeout [ 341.924261][ T4275] Bluetooth: hci14: command 0x0409 tx timeout [ 342.084062][ T4275] Bluetooth: hci12: command 0x041b tx timeout [ 342.884349][ T4275] Bluetooth: hci13: command 0x041b tx timeout [ 343.764164][ T4275] Bluetooth: hci11: command 0x040f tx timeout [ 343.924277][ T4275] Bluetooth: hci10: command 0x040f tx timeout [ 344.004064][ T4275] Bluetooth: hci14: command 0x041b tx timeout [ 344.164083][ T4275] Bluetooth: hci12: command 0x040f tx timeout [ 344.964107][ T4275] Bluetooth: hci13: command 0x040f tx timeout [ 345.844249][ T4275] Bluetooth: hci11: command 0x0419 tx timeout [ 346.004378][ T4275] Bluetooth: hci10: command 0x0419 tx timeout [ 346.084060][ T4275] Bluetooth: hci14: command 0x040f tx timeout [ 346.244055][ T4275] Bluetooth: hci12: command 0x0419 tx timeout [ 347.044262][ T4275] Bluetooth: hci13: command 0x0419 tx timeout [ 348.164094][ T4275] Bluetooth: hci14: command 0x0419 tx timeout [ 364.623930][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 364.630933][ C1] rcu: 0-...!: (0 ticks this GP) idle=4144/1/0x4000000000000000 softirq=20517/20517 fqs=0 [ 364.641739][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7130 [ 364.649082][ C1] (detected by 1, t=10502 jiffies, g=26521, q=2360 ncpus=2) [ 364.656473][ C1] Sending NMI from CPU 1 to CPUs 0: [ 364.661697][ C0] NMI backtrace for cpu 0 [ 364.661706][ C0] CPU: 0 PID: 7130 Comm: syz.1.858 Not tainted syzkaller #0 [ 364.661723][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 364.661731][ C0] RIP: 0010:sched_clock_cpu+0x1/0x260 [ 364.661781][ C0] Code: 5b 41 5c 41 5d 41 5e 41 5f c3 48 c7 c7 00 5c 9f 8c 48 89 de e8 00 8b d7 02 e9 44 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 80 00 00 [ 364.661795][ C0] RSP: 0018:ffffc90000007fb0 EFLAGS: 00000082 [ 364.661809][ C0] RAX: 0000000000000000 RBX: ffff8880b8e277b0 RCX: c8fd6b5ab9582200 [ 364.661820][ C0] RDX: 0000000000000000 RSI: ffffffff8adf0d00 RDI: 0000000000000000 [ 364.661831][ C0] RBP: 0000000000010000 R08: ffffffff8e1fcb6f R09: 1ffffffff1c3f96d [ 364.661842][ C0] R10: dffffc0000000000 R11: ffffc90000007ff8 R12: dffffc0000000000 [ 364.661853][ C0] R13: 0000000000000000 R14: ffff888056863b80 R15: ffffffff8c64f980 [ 364.661864][ C0] FS: 0000555568095500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 364.661879][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.661890][ C0] CR2: 0000001b2f914ff8 CR3: 000000007e516000 CR4: 00000000003506f0 [ 364.661906][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 364.661916][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 364.661926][ C0] Call Trace: [ 364.661933][ C0] [ 364.661940][ C0] irqtime_account_irq+0x6a/0x1b0 [ 364.661959][ C0] sysvec_irq_work+0x90/0xc0 [ 364.661981][ C0] [ 364.661986][ C0] [ 364.661990][ C0] asm_sysvec_irq_work+0x16/0x20 [ 364.662008][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 364.662026][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 92 31 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 364.662039][ C0] RSP: 0018:ffffc90006147c00 EFLAGS: 00000206 [ 364.662051][ C0] RAX: c8fd6b5ab9582200 RBX: 1ffff92000c28f88 RCX: c8fd6b5ab9582200 [ 364.662062][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 [ 364.662074][ C0] RBP: ffffc90006147cf8 R08: ffffffff90af424f R09: 1ffffffff215e849 [ 364.662085][ C0] R10: dffffc0000000000 R11: fffffbfff215e84a R12: 0000000000000246 [ 364.662096][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff8cb32c58 [ 364.662119][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 364.662134][ C0] ? __rwlock_init+0x140/0x140 [ 364.662149][ C0] ? read_lock_is_recursive+0x10/0x10 [ 364.662167][ C0] ? __debug_object_init+0xec/0x450 [ 364.662188][ C0] __rcu_read_unlock+0x78/0xd0 [ 364.662204][ C0] rcu_read_unlock+0x85/0xa0 [ 364.662223][ C0] ? dput+0x37/0x1d0 [ 364.662241][ C0] dput+0xe2/0x1d0 [ 364.662261][ C0] __fput+0x5e0/0x920 [ 364.662282][ C0] task_work_run+0x1d0/0x260 [ 364.662302][ C0] ? task_work_cancel+0x220/0x220 [ 364.662324][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 364.662346][ C0] exit_to_user_mode_loop+0xe6/0x110 [ 364.662367][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 364.662388][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 364.662403][ C0] do_syscall_64+0x58/0xa0 [ 364.662420][ C0] ? clear_bhb_loop+0x60/0xb0 [ 364.662437][ C0] ? clear_bhb_loop+0x60/0xb0 [ 364.662455][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.662472][ C0] RIP: 0033:0x7fe4f1d9aeb9 [ 364.662486][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.662498][ C0] RSP: 002b:00007ffc9c3fea68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 364.662515][ C0] RAX: 0000000000000000 RBX: 00007ffc9c3feb50 RCX: 00007fe4f1d9aeb9 [ 364.662525][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 364.662535][ C0] RBP: 000000000003f492 R08: 0000000000000001 R09: 0000000000000000 [ 364.662544][ C0] R10: 0000001b2e720000 R11: 0000000000000246 R12: 00007ffc9c3feb90 [ 364.662555][ C0] R13: 00007fe4f2015fac R14: 000000000003f629 R15: 00007fe4f2015fa0 [ 364.662573][ C0] [ 364.662693][ C1] task:syz.1.858 state:R running task stack:26224 pid:7130 ppid:4274 flags:0x0000400c [ 365.072292][ C1] Call Trace: [ 365.075609][ C1] [ 365.078588][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 365.084526][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 365.089326][ C1] ? trace_call_bpf+0x5d6/0x6b0 [ 365.094209][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 365.099003][ C1] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 365.104995][ C1] ? irqentry_enter+0x33/0x50 [ 365.109702][ C1] ? mark_lock+0x94/0x320 [ 365.114082][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 365.121336][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 365.127360][ C1] ? lock_chain_count+0x20/0x20 [ 365.132243][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 365.137483][ C1] ? trace_hardirqs_off_finish+0x86/0x180 [ 365.143264][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 365.148501][ C1] ? irqentry_enter+0x33/0x50 [ 365.153221][ C1] ? trace_hardirqs_on+0x34/0x40 [ 365.158197][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 365.163372][ C1] ? rcu_read_unlock_special+0x7f/0x510 [ 365.168957][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 365.173917][ C1] ? __rwlock_init+0x140/0x140 [ 365.178700][ C1] ? read_lock_is_recursive+0x10/0x10 [ 365.184116][ C1] ? __debug_object_init+0xec/0x450 [ 365.189370][ C1] ? __rcu_read_unlock+0x78/0xd0 [ 365.194522][ C1] ? rcu_read_unlock+0x85/0xa0 [ 365.199320][ C1] ? dput+0x37/0x1d0 [ 365.203242][ C1] ? dput+0xe2/0x1d0 [ 365.207170][ C1] ? __fput+0x5e0/0x920 [ 365.211533][ C1] ? task_work_run+0x1d0/0x260 [ 365.216342][ C1] ? task_work_cancel+0x220/0x220 [ 365.221398][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 365.226892][ C1] ? exit_to_user_mode_loop+0xe6/0x110 [ 365.232397][ C1] ? exit_to_user_mode_prepare+0xee/0x180 [ 365.238233][ C1] ? syscall_exit_to_user_mode+0x16/0x40 [ 365.243890][ C1] ? do_syscall_64+0x58/0xa0 [ 365.248505][ C1] ? clear_bhb_loop+0x60/0xb0 [ 365.253204][ C1] ? clear_bhb_loop+0x60/0xb0 [ 365.257904][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.264096][ C1] [ 365.267225][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g26521 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 365.279569][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=16033 [ 365.287469][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g26521 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 365.298850][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 365.308873][ C1] rcu: RCU grace-period kthread stack dump: [ 365.314782][ C1] task:rcu_preempt state:I stack:27856 pid:16 ppid:2 flags:0x00004000 [ 365.324020][ C1] Call Trace: [ 365.327323][ C1] [ 365.330281][ C1] __schedule+0x11d1/0x40e0 [ 365.334825][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 365.340742][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 365.346669][ C1] ? __sched_text_start+0x8/0x8 [ 365.351551][ C1] ? __mod_timer+0x91e/0xd00 [ 365.356179][ C1] schedule+0xb9/0x180 [ 365.360274][ C1] schedule_timeout+0x184/0x2d0 [ 365.365152][ C1] ? console_conditional_schedule+0x40/0x40 [ 365.371156][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 365.377159][ C1] ? update_process_times+0x1b0/0x1b0 [ 365.382556][ C1] ? prepare_to_swait_event+0x335/0x350 [ 365.388144][ C1] rcu_gp_fqs_loop+0x303/0x1340 [ 365.393021][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 365.397894][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 365.403971][ C1] ? rcu_gp_init+0x14e0/0x14e0 [ 365.408756][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 365.414512][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 365.419730][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 365.424952][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 365.430175][ C1] rcu_gp_kthread+0x99/0x3b0 [ 365.434797][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 365.439927][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 365.445839][ C1] ? __kthread_parkme+0x162/0x1c0 [ 365.450897][ C1] kthread+0x29d/0x330 [ 365.454981][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 365.460119][ C1] ? kthread_blkcg+0xd0/0xd0 [ 365.464782][ C1] ret_from_fork+0x1f/0x30 [ 365.469248][ C1] [ 365.472374][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 365.478731][ C1] Sending NMI from CPU 1 to CPUs 0: [ 365.483980][ C0] NMI backtrace for cpu 0 [ 365.483991][ C0] CPU: 0 PID: 7130 Comm: syz.1.858 Not tainted syzkaller #0 [ 365.484006][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 365.484014][ C0] RIP: 0010:asm_sysvec_irq_work+0x0/0x20 [ 365.484045][ C0] Code: e9 b5 03 00 00 90 90 90 90 90 0f 01 ca fc 6a ff e8 b5 02 00 00 48 89 c4 48 89 e7 e8 9a 60 ec ff e9 95 03 00 00 90 90 90 90 90 <0f> 01 ca fc 6a ff e8 95 02 00 00 48 89 c4 48 89 e7 e8 6a 65 ec ff [ 365.484058][ C0] RSP: 0018:ffffc90006147bd8 EFLAGS: 00000006 [ 365.484073][ C0] RAX: c8fd6b5ab9582200 RBX: 1ffff92000c28f88 RCX: c8fd6b5ab9582200 [ 365.484084][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 [ 365.484094][ C0] RBP: ffffc90006147cf8 R08: ffffffff90af424f R09: 1ffffffff215e849 [ 365.484104][ C0] R10: dffffc0000000000 R11: fffffbfff215e84a R12: 0000000000000246 [ 365.484115][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff8cb32c58 [ 365.484126][ C0] FS: 0000555568095500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 365.484139][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.484150][ C0] CR2: 0000001b2f914ff8 CR3: 000000007e516000 CR4: 00000000003506f0 [ 365.484165][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 365.484175][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 365.484184][ C0] Call Trace: [ 365.484190][ C0] [ 365.484195][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 365.484212][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 92 31 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 365.484224][ C0] RSP: 0018:ffffc90006147c00 EFLAGS: 00000206 [ 365.484242][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 365.484256][ C0] ? __rwlock_init+0x140/0x140 [ 365.484270][ C0] ? read_lock_is_recursive+0x10/0x10 [ 365.484287][ C0] ? __debug_object_init+0xec/0x450 [ 365.484307][ C0] __rcu_read_unlock+0x78/0xd0 [ 365.484322][ C0] rcu_read_unlock+0x85/0xa0 [ 365.484341][ C0] ? dput+0x37/0x1d0 [ 365.484358][ C0] dput+0xe2/0x1d0 [ 365.484376][ C0] __fput+0x5e0/0x920 [ 365.484396][ C0] task_work_run+0x1d0/0x260 [ 365.484416][ C0] ? task_work_cancel+0x220/0x220 [ 365.484436][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 365.484457][ C0] exit_to_user_mode_loop+0xe6/0x110 [ 365.484477][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 365.484497][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 365.484512][ C0] do_syscall_64+0x58/0xa0 [ 365.484529][ C0] ? clear_bhb_loop+0x60/0xb0 [ 365.484544][ C0] ? clear_bhb_loop+0x60/0xb0 [ 365.484560][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.484576][ C0] RIP: 0033:0x7fe4f1d9aeb9 [ 365.484589][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.484600][ C0] RSP: 002b:00007ffc9c3fea68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 365.484615][ C0] RAX: 0000000000000000 RBX: 00007ffc9c3feb50 RCX: 00007fe4f1d9aeb9 [ 365.484625][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 365.484634][ C0] RBP: 000000000003f492 R08: 0000000000000001 R09: 0000000000000000 [ 365.484642][ C0] R10: 0000001b2e720000 R11: 0000000000000246 R12: 00007ffc9c3feb90 [ 365.484652][ C0] R13: 00007fe4f2015fac R14: 000000000003f629 R15: 00007fe4f2015fa0 [ 365.484669][ C0]