last executing test programs: 6.624480275s ago: executing program 0 (id=798): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x9, &(0x7f0000000c40)=r0, 0x4) socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) setsockopt$sock_attach_bpf(r1, 0x84, 0x84, &(0x7f0000000000), 0x90) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x85, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x9, 0x7, 0xb, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000030000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000efffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x42}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.845888489s ago: executing program 2 (id=803): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c00e3d300ff03000000000000000000", @ANYRES32=0x0, @ANYBLOB="e000000264010100000000001000000000000000100100000d000000"], 0x30}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x44) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000090000000001011000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001940)=""/174, 0xae}, {&(0x7f0000001a00)=""/98, 0x62}, {&(0x7f0000000680)=""/56, 0x38}, {&(0x7f0000001a80)=""/176, 0xb0}, {&(0x7f0000001b40)=""/206, 0xce}, {&(0x7f00000007c0)=""/19, 0x13}], 0x6, &(0x7f0000001cc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}, 0x12041) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) sendmsg$inet(r2, &(0x7f0000000640)={&(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)="1e586c87c26d5b5bcfcd06695f96f9aef6cb579b4df0b51d4f3cb57e94c3dcc31567fc1e76b1eb", 0x27}, {&(0x7f00000002c0)}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f0000000300)="50b26696e85d3e7434cfe1cda04adbcb060349244a552a9d4bcaf1828fdf68098d63aaba30bd42e9664e59d37baeecd04681b335b49e9b4f23906a52064a5fe7fca96847436b8996c0f8e1af447a63c43cc881994c0a880fc59357ccc34a8f6164b51199dc11df119561ed58988f30cefb6bae9fbd19c08e309bfe72a2fbe62aeb33ababe85b55839b48b668c287e96681cf793dbafb73d3fcaa87cee5e88705b8b1d22873230082fc2c08735caba1dc53657985d89faa77ca6b7cf521205b835a463950668e2d3976ca26cf35ec2207732c6b9563be89b9010000df03bd70fe", 0xe0}, {&(0x7f0000000580)="09819af1a80052f33128af1afeddf662283982ea9bafdaa0ade2afca02dc5787cc31ebea6277e7705bd932300ee83e8104c71c33ac1a81f7186f9ff75c47b5836db9f4c4a2a80718a9ca7bbb5376339053c371465522a515c6a2ceefca77dc298971f8872734673a856d81430de78e64f36fdbf892900797de12e5041e84e5fbbd3512cc9ac4bf0f7bd1dee89599055249295ccb5baafe46020380fe3484dc54c5223cd8f7cba2137565679c0b8f9a896d300439dc3cc9387551666a3d7db7", 0xbf}], 0x5, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xd3, [@multicast2]}, @generic={0x7, 0x2}, @timestamp_addr={0x44, 0x2c, 0xc1, 0x1, 0x5, [{@rand_addr=0x64010102, 0x1b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@private=0xa010100, 0xf}, {@loopback, 0x4}, {@multicast1, 0x7f}]}, @rr={0x7, 0xf, 0x3d, [@rand_addr=0x64010100, @multicast2, @empty]}, @generic={0x86, 0x8, "fd8b62f3d3af"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x98}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001e80)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000009000000000000000100000d0000000006000000020000000700000000000008010000000000302e5f30615f008feab56747f1c001ef1f9b34fb8bd5ca2cc24696b0c00b7172c2e7f02087e1c3e8350d1d18e2687e636596953c3fcd07f6b6677107065dc8fc10a652b010d53b52223648c482e01db5b8cbf18325bba383388c7ac81b4495e8e1a39e484edcd3cd7d8d5aaa861231b650a128f2bc55b81523d59c2398d4fbdea4d2e61de1ec06b19d45"], 0x0, 0x41}, 0x28) 5.739846596s ago: executing program 1 (id=804): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x164, &(0x7f00000005c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x10001, 0x12b5, 0x1410, r4, 0x4, '\x00', r5, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x2}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='memory.swap.current\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0xc8f, 0x0, r1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x20, &(0x7f0000000680)=@raw=[@alu={0x4, 0x0, 0x1, 0x0, 0x9, 0xffffffffffffffff, 0xfffffffffffffff0}, @exit, @exit, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x712}}, @exit, @generic={0x7f, 0x4, 0x5, 0x7f, 0x40}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}}, @alu={0x7, 0x0, 0xb, 0xa, 0x1, 0xfffffffffffffff4, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x10001}], &(0x7f0000000780)='syzkaller\x00', 0x3, 0xb3, &(0x7f00000007c0)=""/179, 0x41000, 0x43, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000980)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0xa, 0xfffffff2, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$kcm(0xa, 0x6, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x12, 0x0, &(0x7f00000001c0)='GPL\x00', 0x93, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000300)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x54a5, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0x10, 0x3}, {0x2, 0x3, 0x5, 0xc}, {0x4, 0x4, 0xe, 0x9}, {0x5, 0x2, 0x4, 0x3}, {0x2, 0x1, 0xb, 0xc}], 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r9, 0x1, 0x24, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) 5.723222807s ago: executing program 0 (id=805): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xfffffffd, 0x3, 0xf93e, 0x2088, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0xc}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r3}, @ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e000000100000000500000026d50000805d000cfa1b96ac59342a9f02bf071e0cc68ae987004d309a3dc43d7e81d0cf1f7b4da42b9458c8db045d357fcd5e646088df80002a598cfcc63065134e5e2d", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000040000000d00"/28], 0x50) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0x5, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x15, &(0x7f0000000380)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xd}, @tail_call, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffff114}}, @jmp={0x5, 0x0, 0xc, 0xa, 0xa, 0x40, 0x8}, @generic={0xff, 0x1, 0xc, 0x400, 0x4}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xa6b}], &(0x7f00000001c0)='GPL\x00', 0xc55, 0x17, &(0x7f0000000440)=""/23, 0x41100, 0x50, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x1, 0xd, 0x1000, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000740)=[r3, r4, r5, 0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x4, 0x5, 0x8}, {0x2, 0x1, 0xf, 0x4}, {0x1, 0x5, 0x2, 0xa}, {0x5, 0x2, 0x10, 0x6}], 0x10, 0x5}, 0x94) r6 = socket$kcm(0x10, 0x400000002, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x49, &(0x7f0000000180), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="dd54b48d678926cf0000000000000000f77069204c44f86c2ec023212acc636eff12170d6b6f325c38247382548afe700e02140386048a0404e2ddd36cb03b3853b46763d6c1bd8226fca6d9bad763107275c4589ac38d45df2a003afc24d653aea520d37eccdf5bcf7bc2cd0d620f1bede4873664508673178c3d7e78cd39140f3f66625615adafdbae1e9bb7c9ae20a10dc77c8ff8d485b4e266d6eb2665"], &(0x7f0000000940)='syzkaller\x00', 0x7fff, 0x2d, &(0x7f0000000980)=""/45, 0x40f00, 0x54, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x2, 0xf, 0x1, 0x619}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000a00)=[{0x3, 0x4, 0x2, 0xa}, {0x5, 0x2, 0x6, 0xa}, {0x2, 0x4, 0xd, 0x6}, {0x5, 0x2, 0xe, 0xa}, {0x2, 0x3}, {0x0, 0x6, 0xc, 0xc}], 0x10, 0x7}, 0x94) socket$kcm(0x25, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x5, &(0x7f0000000100)=@framed={{}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff08}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000800000002"], 0x0, 0x46, 0x0, 0x6}, 0x28) r9 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x186a8}, 0x0, 0xf, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x26, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xd40c}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_query, @ldst={0x1, 0x3, 0x6, 0x7, 0x7, 0x4, 0x10}]}, &(0x7f0000000c00)='GPL\x00', 0x6ce, 0x3c, &(0x7f0000000c40)=""/60, 0x41100, 0x0, '\x00', r1, 0x25, r8, 0x8, &(0x7f0000000c80)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000cc0)={0x3, 0x7, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r10 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000000)=[{&(0x7f0000000040)="020b000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x401c5820, &(0x7f0000000580)=0xa4) sendmsg$inet(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 5.582864685s ago: executing program 3 (id=806): r0 = socket$kcm(0x10, 0x2, 0x4) syz_clone(0x80000900, &(0x7f0000000080)="aabf4816919da70a9df61d6d17702874175c87ff9cddd120bdc72e8a41f22e8ef57a7a08ef290b53f80bc6c78359a90a9b834ed2678a2e18462d2cebfdb14547dd2f82d83eb9e2a393561a2fc2c02bc005cb95026d37f5982ddfac2cd12cfb6130b93161d4a3e5a7f06f888446eee488b2191325a883327c90b44b5cba3d6910580696c79831cb115495238be62c82a87d5da51d2d6500d884b1b7d046a2e0b42ea9b9901626d173b5501873d4c8977ef69b43ab4254a5ea334365748d3330c6d5f91dda9a00082cccb01a2442515ccd316d", 0xd2, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="abfbf22b75a92923de") sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b6c675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003c0a38a82000602000008000200", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5.545959307s ago: executing program 3 (id=807): recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x46}], 0x1, 0x0, 0xfffffffffffffe39}, 0x40000100) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x1e}, 0x4040000) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r0], 0xfe33) 5.489973551s ago: executing program 0 (id=808): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0xfffffffd, 0x61, 0x11, 0x94}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000140) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, r3, 0x5, 0x5, 0x1}, 0x50) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="1400000410003507d25a8034b5f46df903fc60c61c0957817b4250e86b7c0f", 0x1f}, {&(0x7f0000000400)="696c2f3cfa527af6d8757e10a99dffedc1521f9554ba773e4c9e026329c8f08a65b94acfb7e1f4cbea504697dbce56b9ec769cdf5aba5c97e4ad1e1b3d7c82b6205b1bf67cbb50b8f616cd642f03c44f6e92913cc7329fb5ce96766e84d85e729aab1c9c3a1a076f69be0f3717d218c553ca5f318968e5a8aecf4b647dcb3bd72de81338530106063fe5a715312d3d7698b28432405db026d995375f869bc72b334e5f664b9c813e057ab5748944b3d76965000000005c4f0c669a17585abdd46b981643cdfd22a75361eb5ef234c7405ad3a93730165b0cc71fee698fb94873764611693066f52616bcc46abbc8fedeaf3b97", 0xf3}, {&(0x7f0000000300)="38e68923ad84635311824b65fbba44119a91edcea3fb1af98e88050639e7064a0c1185dba89965973f9938fbd490d9a8fe6d3f8b2c090000008f9d4bbbb085b4d4bc012613af25751e6e54270b6635ec7aae6b2192c755fc1d324e6bbe16a625ae786a27f1b9a8ec345ed981211b974a", 0x70}], 0x3}, 0x0) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60100007000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) 5.337360639s ago: executing program 3 (id=809): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa0100fd}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000600)="ed", 0x1}], 0x1}, 0xe0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x10, &(0x7f0000001700)=[{&(0x7f0000000180)="d1ac14e84f230bd3aa414544adec944d1f612a866f4e186fa83bf36c300044e88f8efb9deeb31b0920bce6a5c1e898318b53b30d848fde877280f020e6f41f5fbe32c071f8c92160f846f6c3cbde02c62ede80b3d7ee9996ae5e68eddbac053c2ea9a9cb203f931859", 0x69}, {&(0x7f0000000100)="fbcb632b16de54f75fd744e85990d90fa48f7cd449b9aa243688abb4610fcd5ddbd4", 0x22}, {&(0x7f0000000200)="29f877b99bc09904b4601d93df27cb9c55a0d6d6476d2df965131dab3a4e4d65fe35bd6383c616e53832e7f77e8838f80029177c5d98c051a7028feb934a258a8dd333673e945970bd7b50559e7ccb5284f6a4460b25c5b208ef6f7af573df4bbcf9cb4d7a3aebe063f607353a2c83a5aa237cb67cc1b50293244d0db1e143e291aed2d9396cd405a66e29c8e43d8383de6dfdd5bb482628f4af7023413aa2c5ab7c5a719b0cb5537bdcf6511d2bf8cacbf6c7d5df7277de158858655627ba", 0xbf}, {&(0x7f0000000340)="afda892adea0e7e016a3fc6ca107e0dd42ded5f0f267f013c90e11573be54328276ba20531622579542d6c35df886786eb5967e827eed49e7247781505801354da00c26593ff0ac8069944269dfa662f14b78feab671ba23edc548b9c3da86718cf9a147dee47048bac8c3fd253b490c38ad628bfd81e9edee68cb6752fe469f1931a263ffd139ef7e8aa186f1b5bafb7ba9326bdf099579b16290ba291143ca60a95b97406bd35b", 0xa8}, {&(0x7f0000000400)="ce5970068db33185da6db3ea4d61554b155fec084723038651e90a944946d29eaaf9cab6b2e3d3b6af9e", 0x2a}, {&(0x7f0000000440)="8fa91c91bde8fca48a69ec4ed356da51f18ec0b406c65299d827c1ae5fe6ba4ead57c7c0f967ddf1f7d2e65cd420e62c8d02374a8c0231664d91f744982e5b5d43ca52f9e6c9e0e016db85ac25ee49ca3a3cc59dc0333c740a7b37ef5ba8def5856666d7d33740854da322225edaf6cd93e49c0b547b7b19060351259814daa8ff99ca85e76c845192cb8cb9a066dd9343852cee14048f406c0ff24be58e5bf9927ee4", 0xa3}, {&(0x7f0000000140)="a96ad5a2dc56c50e9f97cab2", 0xc}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000540)="4e6603a3747f2ea58fd569026ba0173386f677e632b8ae7c1afc88da711ab8f75b237c58a6c76d2e61c5be8239d8b8c7c501d349e4eb6d7573dd5a75d618132c9335f9f2cbd551194177300a5e49ba85ac600648952acbd371db13e231faac1af88fc3e875a2bca528b223ab569c4d3160f979952ea6c9d8e9b98ce85c63e558a19fcba41defeb7b34482f0afa3b86bc114d653b881d925c06304f437348f51966befdd098f9028af438a5fdbd84da77c69bfefff9f3af4d8905e3", 0xbb}], 0x9}, 0x4000040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x16, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f00000001c0), 0x0}, 0x23) socket$kcm(0x11, 0xa, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @local}, 0x80, 0x0}, 0xb80b) r7 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x21, &(0x7f0000000100), 0x120) gettid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r2}, &(0x7f0000000640), &(0x7f0000000900)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r3}, 0x20) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xb) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000000100000002", @ANYRESOCT=r1, @ANYRES32=r1], 0x0, 0x4e, 0x0, 0x2, 0x0, 0x10000}, 0x28) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x40000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000500)={'veth0_to_team\x00', @local}) close(r0) 5.009081809s ago: executing program 2 (id=810): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xe, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000002c0), 0x1003, r3}, 0x38) (fail_nth: 82) 4.955786112s ago: executing program 1 (id=811): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="140000000000"], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd"], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) recvmsg$kcm(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0xffffff8c}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x8}, 0x0) recvmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) recvmsg$kcm(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000840000000000000001"], 0x18}, 0x41) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/112, 0x70}, 0x42) 4.738595974s ago: executing program 3 (id=812): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) (async) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r2, &(0x7f0000000b40)={&(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x20008810) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0xfffffffffffffdd9, &(0x7f00000004c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd70000000000000000e7b07158df9b", 0x5c}, {&(0x7f0000000280)="768bd3a8712fa6afcb66f511de827d0b6703a75acbcfbd483b29263027af4d45cf8260f49ad2762cd7a65b8fad319134baf9f5e32811a30eb719f21eb0781d09dc089afdc93cd2d2864e95b7f8fcb533d11fdddd61ef6ba0c36096d9645b356640670d0f1d7590e7a641d57c3576c0b2557c05bb"}, {&(0x7f0000000700)="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"}, {&(0x7f0000000380)="5b1e27917fa8b4082174a641d265e9d5b7e3c323fcb4cf30be63fbc17fe2944119afbe05b041860085103cfd878d2a0db7d63c2b44e3347834f62b5931fdf14e4ba96cdb6d9b2648e64532951cf91a20298d6e68b93e1314400b256d0e"}, {&(0x7f0000000400)="2fd02b6c9dd40ec6f73781603299c7e94fafd4d00a133a3a28d0f9ea2082d7255680dda1b5b2d710417d6414522633a29a268ceaadbf180612435663d401081add8e4bd08cc60075ec46f8e98ba6e6babd32788788061475a46b9213a183b3a8c85b5c89a8718d567ce4a959f9eb6d718f7d22b5c64008f57015c710f6c809bde279b4070fc961397fa562d8bf6649d937a144ed4c09e39596e6269fb85454bf5825bd4cd2d69ff30f48aabe85e160da32af345783063c6a29b7e7"}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2, 0x0, 0xfe7b}, 0x40002000) 4.492425029s ago: executing program 2 (id=813): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x94, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0x18, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r2, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000640), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x7f, 0x7b, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000007c0)={r3, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x14, &(0x7f0000001a80)=ANY=[], &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r4}, 0x4) socket$kcm(0x2, 0x200000000000001, 0x106) 4.489227609s ago: executing program 0 (id=814): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x22, &(0x7f0000000100), 0x120) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r5, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 4.394131304s ago: executing program 1 (id=815): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000001000aac14140ce000000d49e832f0", 0x0, 0x10804, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) gettid() 4.29551406s ago: executing program 0 (id=816): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x2003, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3a}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/time_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/time\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.629066769s ago: executing program 3 (id=817): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x0, 0x3d, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f80)={0xffffffffffffffff, 0x20, &(0x7f0000000f40)={&(0x7f0000000d40)=""/13, 0xd, 0x0, &(0x7f0000000ec0)=""/116, 0x74}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000004f4ffff11000000000008000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r4, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xd, 0x2b, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x4, 0x0, 0x0, 0x2, 0x1, 0x20, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0xc2f00, 0x24, '\x00', r1, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x5, &(0x7f0000001040)=[r4, r6], &(0x7f0000001080)=[{0x0, 0x1, 0x1, 0xc}, {0x4, 0x1, 0x5, 0x7}, {0x5, 0x2, 0xc, 0x5}, {0x3, 0x4, 0x6, 0x5}, {0x0, 0x1, 0x3, 0x4}], 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000100008000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000300)={&(0x7f0000000580), 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/221, 0xdd}], 0x1, &(0x7f0000000a00)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}, 0x2022) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffff231de040b5a1ef380008000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r10, @ANYRES32=r2, @ANYRES64=r10, @ANYRES8=r10], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) r11 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r11, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r11, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0xfffd}], 0x1}, 0x40) 1.21386804s ago: executing program 0 (id=818): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800400000000000280000002800000003000000010000000000000c02000000000000000200000d000000000000007f000500000000000000000000006100"], 0x0, 0x43}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/14], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r7, 0x0, 0x600) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) r9 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r9, 0x12) ioctl$TUNSETOFFLOAD(r8, 0x80086601, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe6c, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9b}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a, 0x0, @perf_config_ext={0xa, 0x5}, 0x104002, 0xa1b7, 0x0, 0x5, 0x6f00000000000, 0xffffffff, 0x0, 0x0, 0xffffbffe, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x2) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r11) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 1.212085169s ago: executing program 1 (id=819): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x164, &(0x7f00000005c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x10001, 0x12b5, 0x1410, r4, 0x4, '\x00', r5, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x2}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='memory.swap.current\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0xc8f, 0x0, r1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x20, &(0x7f0000000680)=@raw=[@alu={0x4, 0x0, 0x1, 0x0, 0x9, 0xffffffffffffffff, 0xfffffffffffffff0}, @exit, @exit, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x712}}, @exit, @generic={0x7f, 0x4, 0x5, 0x7f, 0x40}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}}, @alu={0x7, 0x0, 0xb, 0xa, 0x1, 0xfffffffffffffff4, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x10001}], &(0x7f0000000780)='syzkaller\x00', 0x3, 0xb3, &(0x7f00000007c0)=""/179, 0x41000, 0x43, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000980)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0xa, 0xfffffff2, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$kcm(0xa, 0x6, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x12, 0x0, &(0x7f00000001c0)='GPL\x00', 0x93, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000300)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x54a5, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0x10, 0x3}, {0x2, 0x3, 0x5, 0xc}, {0x4, 0x4, 0xe, 0x9}, {0x5, 0x2, 0x4, 0x3}, {0x2, 0x1, 0xb, 0xc}], 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r9, 0x1, 0x24, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) 1.20209099s ago: executing program 3 (id=820): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup, 0xffffffffffffffff, 0x20, 0x20, 0x0, @void, @void, @void, @value=0xffffffffffffffff}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x2000) socket$kcm(0x10, 0x2, 0x0) r10 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0x1e, &(0x7f0000000500), 0x4) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r1, 0x0, 0x0}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r11) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="2e00000011008188040f80ec59acbc04005e140602000000000e0027001000004556df17f9000200000000000000", 0x2e}], 0x1}, 0x0) 1.129166694s ago: executing program 2 (id=821): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500), 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x30000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x13, &(0x7f0000000100), 0x120) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) recvmsg$kcm(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2002) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00'], 0x30}, 0x7e8166965e22236a) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fc"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r5, &(0x7f0000000200)="c4"}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x4, 0x0, 0x9, 0x9, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9c}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x10, 0x3, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x10, 0x2}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) 701.985239ms ago: executing program 2 (id=822): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xe, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000002c0), 0x1003, r3}, 0x38) (fail_nth: 83) 593.780346ms ago: executing program 1 (id=823): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x48, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) close(r0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 401.387327ms ago: executing program 2 (id=824): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00W\x00'/29], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0xa2532, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(0xffffffffffffffff, 0x0, 0x121) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0x1005, &(0x7f0000000940)=""/4101}, 0x94) 0s ago: executing program 1 (id=825): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080a2, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x7, 0x0, 0xa}, {0x10000002, 0x2, 0x8000000, 0xc}]}, 0x94) close(0x3) (async, rerun: 64) socket$kcm(0xa, 0x5, 0x0) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1}, 0x30) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="2b6370752054052c0884c161edf9e1bf995c857bec5a46ddfaa5927433d7d2f42eef8e3617dd487865a4c9dd91d9f4fa8d90e15296154724478d3fa1084b9f8ed241677d1d6c31d74dc7809e98839b1dfa23951a98263a4e71a500"], 0x5) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 64) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) openat$cgroup_int(r8, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) (async) write$cgroup_subtree(r7, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r9, 0x400454e2, &(0x7f0000000440)=0x1) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 64.983398][ T7210] ? clear_bhb_loop+0x40/0x90 [ 164.988125][ T7210] ? clear_bhb_loop+0x40/0x90 [ 164.992866][ T7210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.998809][ T7210] RIP: 0033:0x7f3b7079aeb9 [ 165.003266][ T7210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.022948][ T7210] RSP: 002b:00007f3b7170b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 165.031399][ T7210] RAX: ffffffffffffffda RBX: 00007f3b70a16090 RCX: 00007f3b7079aeb9 [ 165.039400][ T7210] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 165.047502][ T7210] RBP: 00007f3b7170b090 R08: 0000000000000000 R09: 0000000000000000 [ 165.055502][ T7210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.063498][ T7210] R13: 00007f3b70a16128 R14: 00007f3b70a16090 R15: 00007fffe09a67e8 [ 165.071523][ T7210] [ 165.237833][ T7214] netlink: 'syz.0.389': attribute type 10 has an invalid length. [ 165.283866][ T7214] netlink: 'syz.0.389': attribute type 16 has an invalid length. [ 165.350187][ T7214] netlink: 156 bytes leftover after parsing attributes in process `syz.0.389'. [ 165.721633][ T7232] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.394'. [ 165.876454][ T7234] netlink: 'syz.0.394': attribute type 13 has an invalid length. [ 165.888147][ T7234] netlink: 160 bytes leftover after parsing attributes in process `syz.0.394'. [ 165.915302][ T7234] erspan0: refused to change device tx_queue_len [ 165.929575][ T7234] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 166.195673][ T7240] mac80211_hwsim hwsim9 .3ãc¤±: renamed from wlan1 (while UP) [ 166.326464][ T7246] FAULT_INJECTION: forcing a failure. [ 166.326464][ T7246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.390393][ T7246] CPU: 0 PID: 7246 Comm: syz.0.399 Not tainted syzkaller #0 [ 166.397764][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.407868][ T7246] Call Trace: [ 166.411187][ T7246] [ 166.414155][ T7246] dump_stack_lvl+0x18c/0x250 [ 166.420235][ T7246] ? show_regs_print_info+0x20/0x20 [ 166.425566][ T7246] ? load_image+0x400/0x400 [ 166.430132][ T7246] ? __might_fault+0xaa/0x120 [ 166.434874][ T7246] ? __lock_acquire+0x7d40/0x7d40 [ 166.439979][ T7246] should_fail_ex+0x39d/0x4d0 [ 166.444727][ T7246] _copy_from_user+0x2f/0xe0 [ 166.449392][ T7246] generic_map_update_batch+0x54b/0x810 [ 166.455002][ T7246] ? rcu_read_unlock+0xa0/0xa0 [ 166.459826][ T7246] ? __fdget+0x180/0x210 [ 166.464133][ T7246] ? rcu_read_unlock+0xa0/0xa0 [ 166.468946][ T7246] bpf_map_do_batch+0x3d7/0x610 [ 166.473862][ T7246] __sys_bpf+0x381/0x890 [ 166.478165][ T7246] ? bpf_link_show_fdinfo+0x390/0x390 [ 166.483614][ T7246] ? lock_chain_count+0x20/0x20 [ 166.488515][ T7246] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 166.494564][ T7246] __x64_sys_bpf+0x7c/0x90 [ 166.499033][ T7246] do_syscall_64+0x55/0xa0 [ 166.503504][ T7246] ? clear_bhb_loop+0x40/0x90 [ 166.508226][ T7246] ? clear_bhb_loop+0x40/0x90 [ 166.512940][ T7246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.518858][ T7246] RIP: 0033:0x7f59db59aeb9 [ 166.523302][ T7246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.543039][ T7246] RSP: 002b:00007f59dc40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.551519][ T7246] RAX: ffffffffffffffda RBX: 00007f59db815fa0 RCX: 00007f59db59aeb9 [ 166.559608][ T7246] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 166.567606][ T7246] RBP: 00007f59dc40e090 R08: 0000000000000000 R09: 0000000000000000 [ 166.575602][ T7246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.583621][ T7246] R13: 00007f59db816038 R14: 00007f59db815fa0 R15: 00007ffed9e47938 [ 166.591636][ T7246] [ 166.844674][ T7255] netlink: 'syz.1.400': attribute type 10 has an invalid length. [ 167.035325][ T7255] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.097212][ T7255] bond0: (slave team0): Enslaving as an active interface with an up link [ 167.259312][ T2981] .3ãc¤±: Trigger new scan to find an IBSS to join [ 167.392460][ T7270] syzkaller0: entered promiscuous mode [ 167.409637][ T7270] syzkaller0: entered allmulticast mode [ 168.052643][ T7278] delete_channel: no stack [ 168.090719][ T7283] IPv6: Can't replace route, no match found [ 168.228387][ T1115] .3ãc¤±: Creating new IBSS network, BSSID f6:3a:11:92:a1:4e [ 168.291309][ T7287] FAULT_INJECTION: forcing a failure. [ 168.291309][ T7287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.309822][ T7289] bond0: entered allmulticast mode [ 168.324123][ T7287] CPU: 1 PID: 7287 Comm: syz.1.412 Not tainted syzkaller #0 [ 168.331478][ T7287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.341579][ T7287] Call Trace: [ 168.344900][ T7287] [ 168.346368][ T7289] bond_slave_0: entered allmulticast mode [ 168.347860][ T7287] dump_stack_lvl+0x18c/0x250 [ 168.353607][ T7289] bond_slave_1: entered allmulticast mode [ 168.358287][ T7287] ? show_regs_print_info+0x20/0x20 [ 168.358319][ T7287] ? load_image+0x400/0x400 [ 168.358347][ T7287] ? __might_fault+0xaa/0x120 [ 168.358369][ T7287] ? __lock_acquire+0x7d40/0x7d40 [ 168.358398][ T7287] should_fail_ex+0x39d/0x4d0 [ 168.358435][ T7287] _copy_from_user+0x2f/0xe0 [ 168.358463][ T7287] generic_map_update_batch+0x59a/0x810 [ 168.358497][ T7287] ? rcu_read_unlock+0xa0/0xa0 [ 168.358521][ T7287] ? __fdget+0x180/0x210 [ 168.407720][ T7287] ? rcu_read_unlock+0xa0/0xa0 [ 168.412522][ T7287] bpf_map_do_batch+0x3d7/0x610 [ 168.417416][ T7287] __sys_bpf+0x381/0x890 [ 168.421693][ T7287] ? bpf_link_show_fdinfo+0x390/0x390 [ 168.427123][ T7287] ? lock_chain_count+0x20/0x20 [ 168.432001][ T7287] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 168.438050][ T7287] __x64_sys_bpf+0x7c/0x90 [ 168.442497][ T7287] do_syscall_64+0x55/0xa0 [ 168.446945][ T7287] ? clear_bhb_loop+0x40/0x90 [ 168.451644][ T7287] ? clear_bhb_loop+0x40/0x90 [ 168.456347][ T7287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.462268][ T7287] RIP: 0033:0x7f3b7079aeb9 [ 168.466722][ T7287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.486542][ T7287] RSP: 002b:00007f3b7172c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.494999][ T7287] RAX: ffffffffffffffda RBX: 00007f3b70a15fa0 RCX: 00007f3b7079aeb9 [ 168.503025][ T7287] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 168.511031][ T7287] RBP: 00007f3b7172c090 R08: 0000000000000000 R09: 0000000000000000 [ 168.519042][ T7287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.527056][ T7287] R13: 00007f3b70a16038 R14: 00007f3b70a15fa0 R15: 00007fffe09a67e8 [ 168.535077][ T7287] [ 168.787846][ T7302] netlink: 'syz.0.418': attribute type 10 has an invalid length. [ 168.972084][ T7302] team0: Port device hsr_slave_0 added [ 169.279142][ T7314] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.419'. [ 169.391098][ T7318] IPv6: Can't replace route, no match found [ 169.694884][ T7326] FAULT_INJECTION: forcing a failure. [ 169.694884][ T7326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.722243][ T7326] CPU: 1 PID: 7326 Comm: syz.1.425 Not tainted syzkaller #0 [ 169.729611][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.739799][ T7326] Call Trace: [ 169.743122][ T7326] [ 169.746093][ T7326] dump_stack_lvl+0x18c/0x250 [ 169.750855][ T7326] ? show_regs_print_info+0x20/0x20 [ 169.756114][ T7326] ? load_image+0x400/0x400 [ 169.760670][ T7326] ? __might_fault+0xaa/0x120 [ 169.765400][ T7326] ? __lock_acquire+0x7d40/0x7d40 [ 169.770484][ T7326] should_fail_ex+0x39d/0x4d0 [ 169.775233][ T7326] _copy_from_user+0x2f/0xe0 [ 169.779878][ T7326] generic_map_update_batch+0x54b/0x810 [ 169.785575][ T7326] ? rcu_read_unlock+0xa0/0xa0 [ 169.790391][ T7326] ? __fdget+0x180/0x210 [ 169.794702][ T7326] ? rcu_read_unlock+0xa0/0xa0 [ 169.799522][ T7326] bpf_map_do_batch+0x3d7/0x610 [ 169.804424][ T7326] __sys_bpf+0x381/0x890 [ 169.808718][ T7326] ? bpf_link_show_fdinfo+0x390/0x390 [ 169.814147][ T7326] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 169.820370][ T7326] __x64_sys_bpf+0x7c/0x90 [ 169.824840][ T7326] do_syscall_64+0x55/0xa0 [ 169.829311][ T7326] ? clear_bhb_loop+0x40/0x90 [ 169.834036][ T7326] ? clear_bhb_loop+0x40/0x90 [ 169.838765][ T7326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.844704][ T7326] RIP: 0033:0x7f3b7079aeb9 [ 169.849183][ T7326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.868837][ T7326] RSP: 002b:00007f3b7172c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.877303][ T7326] RAX: ffffffffffffffda RBX: 00007f3b70a15fa0 RCX: 00007f3b7079aeb9 [ 169.885324][ T7326] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 169.893346][ T7326] RBP: 00007f3b7172c090 R08: 0000000000000000 R09: 0000000000000000 [ 169.901369][ T7326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.909386][ T7326] R13: 00007f3b70a16038 R14: 00007f3b70a15fa0 R15: 00007fffe09a67e8 [ 169.917430][ T7326] [ 170.344254][ T7342] netlink: 156 bytes leftover after parsing attributes in process `syz.3.429'. [ 170.568314][ T7350] netlink: 'syz.2.430': attribute type 17 has an invalid length. [ 170.585263][ T7350] netlink: 160 bytes leftover after parsing attributes in process `syz.2.430'. [ 170.676506][ T7347] netlink: 830 bytes leftover after parsing attributes in process `syz.1.431'. [ 170.686376][ T7347] veth0_to_bond: entered promiscuous mode [ 171.011714][ T7361] FAULT_INJECTION: forcing a failure. [ 171.011714][ T7361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.045443][ T7361] CPU: 0 PID: 7361 Comm: syz.0.435 Not tainted syzkaller #0 [ 171.052886][ T7361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.062986][ T7361] Call Trace: [ 171.066310][ T7361] [ 171.069283][ T7361] dump_stack_lvl+0x18c/0x250 [ 171.074021][ T7361] ? show_regs_print_info+0x20/0x20 [ 171.079278][ T7361] ? load_image+0x400/0x400 [ 171.083836][ T7361] ? __might_fault+0xaa/0x120 [ 171.088568][ T7361] ? __lock_acquire+0x7d40/0x7d40 [ 171.093652][ T7361] should_fail_ex+0x39d/0x4d0 [ 171.098398][ T7361] _copy_from_user+0x2f/0xe0 [ 171.103053][ T7361] generic_map_update_batch+0x59a/0x810 [ 171.108672][ T7361] ? rcu_read_unlock+0xa0/0xa0 [ 171.113497][ T7361] ? __fdget+0x180/0x210 [ 171.117804][ T7361] ? rcu_read_unlock+0xa0/0xa0 [ 171.122611][ T7361] bpf_map_do_batch+0x3d7/0x610 [ 171.127520][ T7361] __sys_bpf+0x381/0x890 [ 171.131814][ T7361] ? bpf_link_show_fdinfo+0x390/0x390 [ 171.137250][ T7361] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 171.143472][ T7361] __x64_sys_bpf+0x7c/0x90 [ 171.147957][ T7361] do_syscall_64+0x55/0xa0 [ 171.152451][ T7361] ? clear_bhb_loop+0x40/0x90 [ 171.157174][ T7361] ? clear_bhb_loop+0x40/0x90 [ 171.161902][ T7361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.167823][ T7361] RIP: 0033:0x7f59db59aeb9 [ 171.172259][ T7361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.191894][ T7361] RSP: 002b:00007f59dc40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.200338][ T7361] RAX: ffffffffffffffda RBX: 00007f59db815fa0 RCX: 00007f59db59aeb9 [ 171.208344][ T7361] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 171.216338][ T7361] RBP: 00007f59dc40e090 R08: 0000000000000000 R09: 0000000000000000 [ 171.224333][ T7361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.232339][ T7361] R13: 00007f59db816038 R14: 00007f59db815fa0 R15: 00007ffed9e47938 [ 171.240370][ T7361] [ 171.277096][ T7367] IPv6: Can't replace route, no match found [ 172.301992][ T7391] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.444'. [ 172.331952][ T7391] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.444'. [ 172.560855][ T7403] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 172.654584][ T7405] FAULT_INJECTION: forcing a failure. [ 172.654584][ T7405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.684932][ T7405] CPU: 0 PID: 7405 Comm: syz.3.447 Not tainted syzkaller #0 [ 172.692295][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.702397][ T7405] Call Trace: [ 172.705772][ T7405] [ 172.708728][ T7405] dump_stack_lvl+0x18c/0x250 [ 172.713444][ T7405] ? show_regs_print_info+0x20/0x20 [ 172.718700][ T7405] ? load_image+0x400/0x400 [ 172.723238][ T7405] ? __might_fault+0xaa/0x120 [ 172.727947][ T7405] ? __lock_acquire+0x7d40/0x7d40 [ 172.733008][ T7405] should_fail_ex+0x39d/0x4d0 [ 172.737724][ T7405] _copy_from_user+0x2f/0xe0 [ 172.742340][ T7405] generic_map_update_batch+0x54b/0x810 [ 172.747918][ T7405] ? rcu_read_unlock+0xa0/0xa0 [ 172.752716][ T7405] ? __fdget+0x180/0x210 [ 172.756996][ T7405] ? rcu_read_unlock+0xa0/0xa0 [ 172.761785][ T7405] bpf_map_do_batch+0x3d7/0x610 [ 172.766674][ T7405] __sys_bpf+0x381/0x890 [ 172.770948][ T7405] ? bpf_link_show_fdinfo+0x390/0x390 [ 172.776352][ T7405] ? lock_chain_count+0x20/0x20 [ 172.781237][ T7405] __x64_sys_bpf+0x7c/0x90 [ 172.785682][ T7405] do_syscall_64+0x55/0xa0 [ 172.790128][ T7405] ? clear_bhb_loop+0x40/0x90 [ 172.794836][ T7405] ? clear_bhb_loop+0x40/0x90 [ 172.799560][ T7405] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.805491][ T7405] RIP: 0033:0x7f7803f9aeb9 [ 172.809938][ T7405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.829570][ T7405] RSP: 002b:00007f7804e6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.838008][ T7405] RAX: ffffffffffffffda RBX: 00007f7804215fa0 RCX: 00007f7803f9aeb9 [ 172.846034][ T7405] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 172.854024][ T7405] RBP: 00007f7804e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 172.863072][ T7405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.871084][ T7405] R13: 00007f7804216038 R14: 00007f7804215fa0 R15: 00007ffc54a77e78 [ 172.879104][ T7405] [ 172.964238][ T7414] IPv6: Can't replace route, no match found [ 173.146785][ T7410] netlink: 'syz.2.449': attribute type 33 has an invalid length. [ 173.206939][ T7410] netlink: 152 bytes leftover after parsing attributes in process `syz.2.449'. [ 173.350720][ T7421] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.360996][ T7423] syz.1.453: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 173.404540][ T7423] CPU: 0 PID: 7423 Comm: syz.1.453 Not tainted syzkaller #0 [ 173.411924][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.422034][ T7423] Call Trace: [ 173.425390][ T7423] [ 173.428372][ T7423] dump_stack_lvl+0x18c/0x250 [ 173.433116][ T7423] ? show_regs_print_info+0x20/0x20 [ 173.438382][ T7423] ? load_image+0x400/0x400 [ 173.442949][ T7423] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 173.449461][ T7423] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 173.456050][ T7423] warn_alloc+0x246/0x340 [ 173.460444][ T7423] ? stack_trace_save+0xaa/0x100 [ 173.465456][ T7423] ? zone_watermark_ok_safe+0x230/0x230 [ 173.471077][ T7423] ? kasan_set_track+0x5f/0x70 [ 173.475879][ T7423] ? kasan_set_track+0x4e/0x70 [ 173.480694][ T7423] ? __kasan_kmalloc+0x8f/0xa0 [ 173.485499][ T7423] ? xsk_init_queue+0xad/0x100 [ 173.490333][ T7423] ? xsk_setsockopt+0x4e5/0x760 [ 173.495222][ T7423] ? do_sock_setsockopt+0x175/0x1a0 [ 173.500464][ T7423] ? __x64_sys_setsockopt+0x182/0x200 [ 173.505892][ T7423] __vmalloc_node_range+0x126/0x1330 [ 173.511247][ T7423] ? free_vm_area+0x50/0x50 [ 173.515801][ T7423] vmalloc_user+0x74/0x80 [ 173.520172][ T7423] ? xskq_create+0xbf/0x170 [ 173.524705][ T7423] xskq_create+0xbf/0x170 [ 173.529082][ T7423] xsk_init_queue+0xad/0x100 [ 173.533747][ T7423] xsk_setsockopt+0x4e5/0x760 [ 173.538466][ T7423] ? xsk_poll+0x680/0x680 [ 173.542834][ T7423] ? __fget_files+0x28/0x4b0 [ 173.547466][ T7423] ? __fget_files+0x28/0x4b0 [ 173.552101][ T7423] ? aa_sock_opt_perm+0x74/0x100 [ 173.557073][ T7423] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 173.562650][ T7423] ? security_socket_setsockopt+0x7e/0xa0 [ 173.568399][ T7423] ? xsk_poll+0x680/0x680 [ 173.572761][ T7423] do_sock_setsockopt+0x175/0x1a0 [ 173.577824][ T7423] ? __fdget+0x180/0x210 [ 173.582107][ T7423] __x64_sys_setsockopt+0x182/0x200 [ 173.587351][ T7423] do_syscall_64+0x55/0xa0 [ 173.591808][ T7423] ? clear_bhb_loop+0x40/0x90 [ 173.596518][ T7423] ? clear_bhb_loop+0x40/0x90 [ 173.601253][ T7423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.607200][ T7423] RIP: 0033:0x7f3b7079aeb9 [ 173.611650][ T7423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.631307][ T7423] RSP: 002b:00007f3b7172c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 173.639851][ T7423] RAX: ffffffffffffffda RBX: 00007f3b70a15fa0 RCX: 00007f3b7079aeb9 [ 173.647855][ T7423] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 173.655849][ T7423] RBP: 00007f3b70808c1f R08: 0000000000000004 R09: 0000000000000000 [ 173.663842][ T7423] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 173.671845][ T7423] R13: 00007f3b70a16038 R14: 00007f3b70a15fa0 R15: 00007fffe09a67e8 [ 173.679867][ T7423] [ 173.692620][ T7421] netlink: 1 bytes leftover after parsing attributes in process `syz.3.452'. [ 173.745723][ T7423] Mem-Info: [ 173.753110][ T7423] active_anon:11715 inactive_anon:0 isolated_anon:0 [ 173.753110][ T7423] active_file:12340 inactive_file:39957 isolated_file:0 [ 173.753110][ T7423] unevictable:768 dirty:46 writeback:0 [ 173.753110][ T7423] slab_reclaimable:10098 slab_unreclaimable:91701 [ 173.753110][ T7423] mapped:24483 shmem:7721 pagetables:530 [ 173.753110][ T7423] sec_pagetables:0 bounce:0 [ 173.753110][ T7423] kernel_misc_reclaimable:0 [ 173.753110][ T7423] free:1345041 free_pcp:12017 free_cma:0 [ 173.853542][ T7423] Node 0 active_anon:46360kB inactive_anon:0kB active_file:49360kB inactive_file:159628kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97932kB dirty:184kB writeback:0kB shmem:28948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11544kB pagetables:2020kB sec_pagetables:0kB all_unreclaimable? no [ 173.916986][ T7423] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 173.983760][ T7423] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.094671][ T7423] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 174.100638][ T7423] Node 0 DMA32 free:1488608kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:45324kB inactive_anon:0kB active_file:49360kB inactive_file:158800kB unevictable:1536kB writepending:184kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:9588kB local_pcp:5148kB free_cma:0kB [ 174.187062][ T7423] lowmem_reserve[]: 0 0 0 0 0 [ 174.204121][ T7423] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.314227][ T7423] lowmem_reserve[]: 0 0 0 0 0 [ 174.319089][ T7423] Node 1 Normal free:3898152kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17924kB local_pcp:5920kB free_cma:0kB [ 174.394039][ T7423] lowmem_reserve[]: 0 0 0 0 0 [ 174.399112][ T7423] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 174.422566][ T7423] Node 0 DMA32: 2389*4kB (UM) 1551*8kB (UME) 1023*16kB (UM) 593*32kB (UM) 165*64kB (UME) 24*128kB (UME) 13*256kB (UME) 7*512kB (UME) 4*1024kB (UM) 4*2048kB (UME) 341*4096kB (UM) = 1486876kB [ 174.455041][ T7423] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 174.500577][ T7423] Node 1 Normal: 222*4kB (UME) 54*8kB (UME) 36*16kB (UME) 74*32kB (UME) 16*64kB (UE) 5*128kB (UME) 0*256kB 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3898152kB [ 174.535049][ T7423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 174.565736][ T7423] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 174.584393][ T7423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 174.599455][ T7423] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 174.624229][ T7423] 53668 total pagecache pages [ 174.628987][ T7423] 0 pages in swap cache [ 174.633180][ T7423] Free swap = 124996kB [ 174.637702][ T7423] Total swap = 124996kB [ 174.641913][ T7423] 2097051 pages RAM [ 174.645805][ T7423] 0 pages HighMem/MovableOnly [ 174.650608][ T7423] 416922 pages reserved [ 174.655144][ T7423] 0 pages cma reserved [ 175.121186][ T7452] FAULT_INJECTION: forcing a failure. [ 175.121186][ T7452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.140913][ T7452] CPU: 0 PID: 7452 Comm: syz.3.460 Not tainted syzkaller #0 [ 175.148279][ T7452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.158389][ T7452] Call Trace: [ 175.161710][ T7452] [ 175.164676][ T7452] dump_stack_lvl+0x18c/0x250 [ 175.169417][ T7452] ? show_regs_print_info+0x20/0x20 [ 175.174682][ T7452] ? load_image+0x400/0x400 [ 175.179263][ T7452] ? __might_fault+0xaa/0x120 [ 175.183994][ T7452] ? __lock_acquire+0x7d40/0x7d40 [ 175.189079][ T7452] should_fail_ex+0x39d/0x4d0 [ 175.193815][ T7452] _copy_from_user+0x2f/0xe0 [ 175.198462][ T7452] generic_map_update_batch+0x59a/0x810 [ 175.204068][ T7452] ? rcu_read_unlock+0xa0/0xa0 [ 175.208890][ T7452] ? rcu_read_unlock+0xa0/0xa0 [ 175.213691][ T7452] bpf_map_do_batch+0x3d7/0x610 [ 175.218572][ T7452] __sys_bpf+0x381/0x890 [ 175.222851][ T7452] ? bpf_link_show_fdinfo+0x390/0x390 [ 175.228270][ T7452] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 175.234477][ T7452] __x64_sys_bpf+0x7c/0x90 [ 175.239267][ T7452] do_syscall_64+0x55/0xa0 [ 175.243733][ T7452] ? clear_bhb_loop+0x40/0x90 [ 175.248456][ T7452] ? clear_bhb_loop+0x40/0x90 [ 175.253231][ T7452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.259163][ T7452] RIP: 0033:0x7f7803f9aeb9 [ 175.263618][ T7452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.283316][ T7452] RSP: 002b:00007f7804e6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.291772][ T7452] RAX: ffffffffffffffda RBX: 00007f7804215fa0 RCX: 00007f7803f9aeb9 [ 175.299771][ T7452] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 175.307773][ T7452] RBP: 00007f7804e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 175.315776][ T7452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.323772][ T7452] R13: 00007f7804216038 R14: 00007f7804215fa0 R15: 00007ffc54a77e78 [ 175.331787][ T7452] [ 175.449190][ T7455] IPv6: Can't replace route, no match found [ 176.236935][ T7467] delete_channel: no stack [ 176.255664][ T7467] delete_channel: no stack [ 177.334387][ T7499] FAULT_INJECTION: forcing a failure. [ 177.334387][ T7499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.348316][ T7499] CPU: 0 PID: 7499 Comm: syz.1.474 Not tainted syzkaller #0 [ 177.355661][ T7499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.365932][ T7499] Call Trace: [ 177.369250][ T7499] [ 177.372228][ T7499] dump_stack_lvl+0x18c/0x250 [ 177.376974][ T7499] ? show_regs_print_info+0x20/0x20 [ 177.382243][ T7499] ? load_image+0x400/0x400 [ 177.386795][ T7499] ? __might_fault+0xaa/0x120 [ 177.391516][ T7499] ? __lock_acquire+0x7d40/0x7d40 [ 177.396609][ T7499] should_fail_ex+0x39d/0x4d0 [ 177.401349][ T7499] _copy_from_user+0x2f/0xe0 [ 177.405991][ T7499] generic_map_update_batch+0x54b/0x810 [ 177.411587][ T7499] ? rcu_read_unlock+0xa0/0xa0 [ 177.416394][ T7499] ? bpf_map_do_batch+0x382/0x610 [ 177.421473][ T7499] ? rcu_read_unlock+0xa0/0xa0 [ 177.426283][ T7499] bpf_map_do_batch+0x3d7/0x610 [ 177.431188][ T7499] __sys_bpf+0x381/0x890 [ 177.435496][ T7499] ? bpf_link_show_fdinfo+0x390/0x390 [ 177.441015][ T7499] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.447237][ T7499] __x64_sys_bpf+0x7c/0x90 [ 177.451710][ T7499] do_syscall_64+0x55/0xa0 [ 177.456229][ T7499] ? clear_bhb_loop+0x40/0x90 [ 177.457321][ T7501] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.473'. [ 177.460940][ T7499] ? clear_bhb_loop+0x40/0x90 [ 177.460970][ T7499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.480912][ T7499] RIP: 0033:0x7f3b7079aeb9 [ 177.485375][ T7499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.505039][ T7499] RSP: 002b:00007f3b7172c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 177.513513][ T7499] RAX: ffffffffffffffda RBX: 00007f3b70a15fa0 RCX: 00007f3b7079aeb9 [ 177.521528][ T7499] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 177.529544][ T7499] RBP: 00007f3b7172c090 R08: 0000000000000000 R09: 0000000000000000 [ 177.537555][ T7499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.545565][ T7499] R13: 00007f3b70a16038 R14: 00007f3b70a15fa0 R15: 00007fffe09a67e8 [ 177.553613][ T7499] [ 177.851636][ T7508] syzkaller0: entered promiscuous mode [ 177.867783][ T7508] syzkaller0: entered allmulticast mode [ 180.074519][ T7532] delete_channel: no stack [ 180.079380][ T7532] delete_channel: no stack [ 180.431039][ T7528] netlink: 763 bytes leftover after parsing attributes in process `syz.0.482'. [ 180.444965][ T7534] netlink: 'syz.1.483': attribute type 10 has an invalid length. [ 180.452742][ T7534] netlink: 40 bytes leftover after parsing attributes in process `syz.1.483'. [ 180.479529][ T7534] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 180.501200][ T7534] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.564065][ T7534] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 180.951019][ T7547] FAULT_INJECTION: forcing a failure. [ 180.951019][ T7547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.984083][ T7547] CPU: 1 PID: 7547 Comm: syz.1.487 Not tainted syzkaller #0 [ 180.991455][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.001570][ T7547] Call Trace: [ 181.004890][ T7547] [ 181.007868][ T7547] dump_stack_lvl+0x18c/0x250 [ 181.012605][ T7547] ? show_regs_print_info+0x20/0x20 [ 181.017863][ T7547] ? load_image+0x400/0x400 [ 181.022429][ T7547] ? __might_fault+0xaa/0x120 [ 181.027173][ T7547] ? __lock_acquire+0x7d40/0x7d40 [ 181.032257][ T7547] should_fail_ex+0x39d/0x4d0 [ 181.036993][ T7547] _copy_from_user+0x2f/0xe0 [ 181.041642][ T7547] generic_map_update_batch+0x59a/0x810 [ 181.047226][ T7547] ? rcu_read_unlock+0xa0/0xa0 [ 181.052012][ T7547] ? rcu_read_unlock+0xa0/0xa0 [ 181.056802][ T7547] ? bpf_map_do_batch+0x3c9/0x610 [ 181.061862][ T7547] ? rcu_read_unlock+0xa0/0xa0 [ 181.066652][ T7547] bpf_map_do_batch+0x3d7/0x610 [ 181.071546][ T7547] __sys_bpf+0x381/0x890 [ 181.075843][ T7547] ? bpf_link_show_fdinfo+0x390/0x390 [ 181.081258][ T7547] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 181.087453][ T7547] __x64_sys_bpf+0x7c/0x90 [ 181.091915][ T7547] do_syscall_64+0x55/0xa0 [ 181.096365][ T7547] ? clear_bhb_loop+0x40/0x90 [ 181.101076][ T7547] ? clear_bhb_loop+0x40/0x90 [ 181.105833][ T7547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.111750][ T7547] RIP: 0033:0x7f3b7079aeb9 [ 181.116194][ T7547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.135848][ T7547] RSP: 002b:00007f3b7172c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 181.144297][ T7547] RAX: ffffffffffffffda RBX: 00007f3b70a15fa0 RCX: 00007f3b7079aeb9 [ 181.152293][ T7547] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 181.160283][ T7547] RBP: 00007f3b7172c090 R08: 0000000000000000 R09: 0000000000000000 [ 181.168272][ T7547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.176269][ T7547] R13: 00007f3b70a16038 R14: 00007f3b70a15fa0 R15: 00007fffe09a67e8 [ 181.184284][ T7547] [ 182.082919][ T7568] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.492'. [ 182.486178][ T7584] FAULT_INJECTION: forcing a failure. [ 182.486178][ T7584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.532567][ T7584] CPU: 1 PID: 7584 Comm: syz.1.497 Not tainted syzkaller #0 [ 182.539965][ T7584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.550067][ T7584] Call Trace: [ 182.553391][ T7584] [ 182.556363][ T7584] dump_stack_lvl+0x18c/0x250 [ 182.561102][ T7584] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 182.567312][ T7584] ? show_regs_print_info+0x20/0x20 [ 182.572591][ T7584] ? load_image+0x400/0x400 [ 182.577178][ T7584] should_fail_ex+0x39d/0x4d0 [ 182.581924][ T7584] _copy_from_user+0x2f/0xe0 [ 182.586613][ T7584] generic_map_update_batch+0x54b/0x810 [ 182.592244][ T7584] ? rcu_read_unlock+0xa0/0xa0 [ 182.597073][ T7584] ? __fdget+0x180/0x210 [ 182.601366][ T7584] ? rcu_read_unlock+0xa0/0xa0 [ 182.606168][ T7584] bpf_map_do_batch+0x3d7/0x610 [ 182.611069][ T7584] __sys_bpf+0x381/0x890 [ 182.615347][ T7584] ? bpf_link_show_fdinfo+0x390/0x390 [ 182.620788][ T7584] ? lock_chain_count+0x20/0x20 [ 182.625689][ T7584] __x64_sys_bpf+0x7c/0x90 [ 182.630123][ T7584] do_syscall_64+0x55/0xa0 [ 182.634572][ T7584] ? clear_bhb_loop+0x40/0x90 [ 182.639298][ T7584] ? clear_bhb_loop+0x40/0x90 [ 182.644043][ T7584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.649989][ T7584] RIP: 0033:0x7f3b7079aeb9 [ 182.654441][ T7584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.674072][ T7584] RSP: 002b:00007f3b7172c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.682553][ T7584] RAX: ffffffffffffffda RBX: 00007f3b70a15fa0 RCX: 00007f3b7079aeb9 [ 182.690555][ T7584] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 182.698546][ T7584] RBP: 00007f3b7172c090 R08: 0000000000000000 R09: 0000000000000000 [ 182.706530][ T7584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.714542][ T7584] R13: 00007f3b70a16038 R14: 00007f3b70a15fa0 R15: 00007fffe09a67e8 [ 182.722541][ T7584] [ 182.980548][ T7596] IPv6: Can't replace route, no match found [ 183.388861][ T7611] netlink: 'syz.3.504': attribute type 1 has an invalid length. [ 183.414203][ T7611] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.504'. [ 183.445565][ T7611] syz.3.504: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 183.492708][ T7611] CPU: 1 PID: 7611 Comm: syz.3.504 Not tainted syzkaller #0 [ 183.500109][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.510226][ T7611] Call Trace: [ 183.513571][ T7611] [ 183.516596][ T7611] dump_stack_lvl+0x18c/0x250 [ 183.521377][ T7611] ? show_regs_print_info+0x20/0x20 [ 183.526663][ T7611] ? load_image+0x400/0x400 [ 183.531266][ T7611] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 183.537784][ T7611] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 183.544381][ T7611] warn_alloc+0x246/0x340 [ 183.548821][ T7611] ? stack_trace_save+0xaa/0x100 [ 183.553864][ T7611] ? zone_watermark_ok_safe+0x230/0x230 [ 183.559536][ T7611] ? kasan_set_track+0x5f/0x70 [ 183.564485][ T7611] ? kasan_set_track+0x4e/0x70 [ 183.569312][ T7611] ? __kasan_kmalloc+0x8f/0xa0 [ 183.574144][ T7611] ? xsk_init_queue+0xad/0x100 [ 183.578981][ T7611] ? xsk_setsockopt+0x4e5/0x760 [ 183.583915][ T7611] ? do_sock_setsockopt+0x175/0x1a0 [ 183.589193][ T7611] ? __x64_sys_setsockopt+0x182/0x200 [ 183.594665][ T7611] __vmalloc_node_range+0x126/0x1330 [ 183.600145][ T7611] ? free_vm_area+0x50/0x50 [ 183.604768][ T7611] vmalloc_user+0x74/0x80 [ 183.609173][ T7611] ? xskq_create+0xbf/0x170 [ 183.613758][ T7611] xskq_create+0xbf/0x170 [ 183.618195][ T7611] xsk_init_queue+0xad/0x100 [ 183.622887][ T7611] xsk_setsockopt+0x4e5/0x760 [ 183.627637][ T7611] ? xsk_poll+0x680/0x680 [ 183.632023][ T7611] ? __fget_files+0x28/0x4b0 [ 183.636657][ T7611] ? __fget_files+0x28/0x4b0 [ 183.641301][ T7611] ? aa_sock_opt_perm+0x74/0x100 [ 183.646312][ T7611] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 183.651914][ T7611] ? security_socket_setsockopt+0x7e/0xa0 [ 183.657713][ T7611] ? xsk_poll+0x680/0x680 [ 183.662096][ T7611] do_sock_setsockopt+0x175/0x1a0 [ 183.667173][ T7611] ? __fdget+0x180/0x210 [ 183.671473][ T7611] __x64_sys_setsockopt+0x182/0x200 [ 183.676767][ T7611] do_syscall_64+0x55/0xa0 [ 183.681228][ T7611] ? clear_bhb_loop+0x40/0x90 [ 183.685948][ T7611] ? clear_bhb_loop+0x40/0x90 [ 183.690689][ T7611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.696629][ T7611] RIP: 0033:0x7f7803f9aeb9 [ 183.701089][ T7611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.720741][ T7611] RSP: 002b:00007f7804e6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 183.729200][ T7611] RAX: ffffffffffffffda RBX: 00007f7804215fa0 RCX: 00007f7803f9aeb9 [ 183.737206][ T7611] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 183.745225][ T7611] RBP: 00007f7804008c1f R08: 0000000000000004 R09: 0000000000000000 [ 183.753236][ T7611] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 183.761253][ T7611] R13: 00007f7804216038 R14: 00007f7804215fa0 R15: 00007ffc54a77e78 [ 183.769303][ T7611] [ 183.802615][ T7611] Mem-Info: [ 183.806344][ T7611] active_anon:5393 inactive_anon:0 isolated_anon:0 [ 183.806344][ T7611] active_file:13364 inactive_file:39961 isolated_file:0 [ 183.806344][ T7611] unevictable:768 dirty:45 writeback:0 [ 183.806344][ T7611] slab_reclaimable:10234 slab_unreclaimable:91521 [ 183.806344][ T7611] mapped:24474 shmem:1361 pagetables:559 [ 183.806344][ T7611] sec_pagetables:0 bounce:0 [ 183.806344][ T7611] kernel_misc_reclaimable:0 [ 183.806344][ T7611] free:1351417 free_pcp:9755 free_cma:0 [ 183.856197][ T7611] Node 0 active_anon:21572kB inactive_anon:0kB active_file:53456kB inactive_file:159644kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97896kB dirty:180kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11612kB pagetables:2236kB sec_pagetables:0kB all_unreclaimable? no [ 184.044963][ T7611] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 184.234388][ T7611] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 184.308843][ T7611] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 184.384489][ T7611] Node 0 DMA32 free:1491200kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21572kB inactive_anon:0kB active_file:53456kB inactive_file:158816kB unevictable:1536kB writepending:144kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:22552kB local_pcp:13196kB free_cma:0kB [ 184.481634][ T7611] lowmem_reserve[]: 0 0 0 0 0 [ 184.491463][ T7611] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 184.555115][ T7624] FAULT_INJECTION: forcing a failure. [ 184.555115][ T7624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.584253][ T7611] lowmem_reserve[]: 0 0 0 0 0 [ 184.589075][ T7611] Node 1 Normal free:3898152kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17924kB local_pcp:5920kB free_cma:0kB [ 184.619624][ T7624] CPU: 1 PID: 7624 Comm: syz.0.509 Not tainted syzkaller #0 [ 184.626967][ T7624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.637061][ T7624] Call Trace: [ 184.640379][ T7624] [ 184.643357][ T7624] dump_stack_lvl+0x18c/0x250 [ 184.648096][ T7624] ? show_regs_print_info+0x20/0x20 [ 184.653346][ T7624] ? load_image+0x400/0x400 [ 184.657900][ T7624] ? __might_fault+0xaa/0x120 [ 184.662629][ T7624] ? __lock_acquire+0x7d40/0x7d40 [ 184.667719][ T7624] should_fail_ex+0x39d/0x4d0 [ 184.672463][ T7624] _copy_from_user+0x2f/0xe0 [ 184.677122][ T7624] generic_map_update_batch+0x59a/0x810 [ 184.682772][ T7624] ? rcu_read_unlock+0xa0/0xa0 [ 184.687584][ T7624] ? rcu_read_unlock+0xa0/0xa0 [ 184.692381][ T7624] ? bpf_map_do_batch+0x3c9/0x610 [ 184.697458][ T7624] ? rcu_read_unlock+0xa0/0xa0 [ 184.702252][ T7624] bpf_map_do_batch+0x3d7/0x610 [ 184.707142][ T7624] __sys_bpf+0x381/0x890 [ 184.711412][ T7624] ? bpf_link_show_fdinfo+0x390/0x390 [ 184.716816][ T7624] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 184.723004][ T7624] __x64_sys_bpf+0x7c/0x90 [ 184.727446][ T7624] do_syscall_64+0x55/0xa0 [ 184.731896][ T7624] ? clear_bhb_loop+0x40/0x90 [ 184.736593][ T7624] ? clear_bhb_loop+0x40/0x90 [ 184.741329][ T7624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.747240][ T7624] RIP: 0033:0x7f59db59aeb9 [ 184.751681][ T7624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.771313][ T7624] RSP: 002b:00007f59dc40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.779750][ T7624] RAX: ffffffffffffffda RBX: 00007f59db815fa0 RCX: 00007f59db59aeb9 [ 184.787753][ T7624] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 184.795754][ T7624] RBP: 00007f59dc40e090 R08: 0000000000000000 R09: 0000000000000000 [ 184.803763][ T7624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.811774][ T7624] R13: 00007f59db816038 R14: 00007f59db815fa0 R15: 00007ffed9e47938 [ 184.819788][ T7624] [ 184.869587][ T7611] lowmem_reserve[]: 0 0 0 0 0 [ 184.876855][ T7611] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 184.890106][ T7611] Node 0 DMA32: 1135*4kB (UM) 1578*8kB (UME) 942*16kB (UME) 745*32kB (UME) 236*64kB (UME) 36*128kB (UME) 16*256kB (UME) 11*512kB (UME) 4*1024kB (UM) 4*2048kB (UME) 340*4096kB (UM) = 1490444kB [ 184.921488][ T7611] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 184.939557][ T7611] Node 1 Normal: 222*4kB (UME) 54*8kB (UME) 36*16kB (UME) 74*32kB (UME) 16*64kB (UE) 5*128kB (UME) 0*256kB 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3898152kB [ 184.957546][ T7611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.973778][ T7622] netlink: 'syz.1.508': attribute type 10 has an invalid length. [ 184.984043][ T7611] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.997895][ T7611] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 185.011461][ T7611] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 185.027374][ T7611] 54686 total pagecache pages [ 185.032187][ T7611] 0 pages in swap cache [ 185.038018][ T7611] Free swap = 124996kB [ 185.042294][ T7611] Total swap = 124996kB [ 185.051104][ T7611] 2097051 pages RAM [ 185.059821][ T7611] 0 pages HighMem/MovableOnly [ 185.083388][ T7611] 416922 pages reserved [ 185.088780][ T7611] 0 pages cma reserved [ 185.204722][ T7622] team0: Port device wlan1 added [ 185.321177][ T7633] netlink: 14 bytes leftover after parsing attributes in process `syz.0.510'. [ 185.376206][ T7636] netlink: 196 bytes leftover after parsing attributes in process `syz.0.510'. [ 185.410958][ T7636] netlink: 'syz.0.510': attribute type 29 has an invalid length. [ 185.428263][ T7633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.442917][ T7633] bond_slave_0: left allmulticast mode [ 185.474111][ T7633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.485946][ T7633] bond_slave_1: left allmulticast mode [ 185.511532][ T7633] bond0 (unregistering): Released all slaves [ 185.554055][ T7636] netlink: 'syz.0.510': attribute type 29 has an invalid length. [ 185.566412][ T7639] netlink: 'syz.0.510': attribute type 29 has an invalid length. [ 185.684731][ T7641] netlink: 'syz.0.510': attribute type 29 has an invalid length. [ 185.727648][ T7646] IPv6: Can't replace route, no match found [ 186.012634][ T7654] netlink: 'syz.2.516': attribute type 9 has an invalid length. [ 186.020759][ T7654] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.516'. [ 186.041798][ T7655] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.515'. [ 186.053269][ T7655] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 186.111873][ T7656] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.516'. [ 186.126689][ T7656] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 186.286435][ T7659] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.517'. [ 186.325313][ T7659] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.517'. [ 186.352389][ T7659] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.517'. [ 186.512441][ T7661] netlink: 'syz.3.518': attribute type 10 has an invalid length. [ 186.520638][ T7658] netlink: 'syz.0.517': attribute type 9 has an invalid length. [ 186.533827][ T7651] delete_channel: no stack [ 186.544926][ T7658] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.517'. [ 186.683028][ T7659] netlink: 'syz.0.517': attribute type 9 has an invalid length. [ 186.717245][ T7668] netlink: 'syz.2.520': attribute type 1 has an invalid length. [ 186.758094][ T7666] FAULT_INJECTION: forcing a failure. [ 186.758094][ T7666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.810575][ T7666] CPU: 1 PID: 7666 Comm: syz.3.519 Not tainted syzkaller #0 [ 186.817939][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.828031][ T7666] Call Trace: [ 186.831373][ T7666] [ 186.834347][ T7666] dump_stack_lvl+0x18c/0x250 [ 186.839112][ T7666] ? show_regs_print_info+0x20/0x20 [ 186.844369][ T7666] ? load_image+0x400/0x400 [ 186.848924][ T7666] ? __might_fault+0xaa/0x120 [ 186.853662][ T7666] ? __lock_acquire+0x7d40/0x7d40 [ 186.858740][ T7666] should_fail_ex+0x39d/0x4d0 [ 186.863491][ T7666] _copy_from_user+0x2f/0xe0 [ 186.868203][ T7666] generic_map_update_batch+0x54b/0x810 [ 186.873805][ T7666] ? rcu_read_unlock+0xa0/0xa0 [ 186.878621][ T7666] ? __fdget+0x180/0x210 [ 186.882958][ T7666] ? rcu_read_unlock+0xa0/0xa0 [ 186.887771][ T7666] bpf_map_do_batch+0x3d7/0x610 [ 186.892686][ T7666] __sys_bpf+0x381/0x890 [ 186.896986][ T7666] ? bpf_link_show_fdinfo+0x390/0x390 [ 186.902442][ T7666] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 186.908658][ T7666] __x64_sys_bpf+0x7c/0x90 [ 186.913122][ T7666] do_syscall_64+0x55/0xa0 [ 186.917591][ T7666] ? clear_bhb_loop+0x40/0x90 [ 186.922333][ T7666] ? clear_bhb_loop+0x40/0x90 [ 186.927065][ T7666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.933010][ T7666] RIP: 0033:0x7f7803f9aeb9 [ 186.937494][ T7666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.957147][ T7666] RSP: 002b:00007f7804e6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 186.965615][ T7666] RAX: ffffffffffffffda RBX: 00007f7804215fa0 RCX: 00007f7803f9aeb9 [ 186.973663][ T7666] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 186.981680][ T7666] RBP: 00007f7804e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 186.989701][ T7666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.997719][ T7666] R13: 00007f7804216038 R14: 00007f7804215fa0 R15: 00007ffc54a77e78 [ 187.005747][ T7666] [ 187.349558][ T7685] IPv6: Can't replace route, no match found [ 187.411482][ T7686] netlink: 'syz.1.525': attribute type 16 has an invalid length. [ 187.424046][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.530485][ T7691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.557389][ T7691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.636040][ T7691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.661896][ T7691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.158308][ T7721] FAULT_INJECTION: forcing a failure. [ 188.158308][ T7721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.184541][ T7721] CPU: 0 PID: 7721 Comm: syz.2.532 Not tainted syzkaller #0 [ 188.191914][ T7721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.202029][ T7721] Call Trace: [ 188.205349][ T7721] [ 188.208318][ T7721] dump_stack_lvl+0x18c/0x250 [ 188.213066][ T7721] ? show_regs_print_info+0x20/0x20 [ 188.218333][ T7721] ? load_image+0x400/0x400 [ 188.222906][ T7721] ? __might_fault+0xaa/0x120 [ 188.227647][ T7721] ? __lock_acquire+0x7d40/0x7d40 [ 188.232742][ T7721] should_fail_ex+0x39d/0x4d0 [ 188.237489][ T7721] _copy_from_user+0x2f/0xe0 [ 188.242126][ T7721] generic_map_update_batch+0x59a/0x810 [ 188.247755][ T7721] ? rcu_read_unlock+0xa0/0xa0 [ 188.252572][ T7721] ? __fdget+0x180/0x210 [ 188.256872][ T7721] ? rcu_read_unlock+0xa0/0xa0 [ 188.261682][ T7721] bpf_map_do_batch+0x3d7/0x610 [ 188.266607][ T7721] __sys_bpf+0x381/0x890 [ 188.270925][ T7721] ? bpf_link_show_fdinfo+0x390/0x390 [ 188.276364][ T7721] ? lock_chain_count+0x20/0x20 [ 188.281268][ T7721] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 188.287314][ T7721] __x64_sys_bpf+0x7c/0x90 [ 188.291779][ T7721] do_syscall_64+0x55/0xa0 [ 188.296254][ T7721] ? clear_bhb_loop+0x40/0x90 [ 188.300979][ T7721] ? clear_bhb_loop+0x40/0x90 [ 188.305699][ T7721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.311623][ T7721] RIP: 0033:0x7fa98899aeb9 [ 188.316152][ T7721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.335800][ T7721] RSP: 002b:00007fa986bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.344259][ T7721] RAX: ffffffffffffffda RBX: 00007fa988c15fa0 RCX: 00007fa98899aeb9 [ 188.352257][ T7721] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 188.360246][ T7721] RBP: 00007fa986bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 188.368242][ T7721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.376237][ T7721] R13: 00007fa988c16038 R14: 00007fa988c15fa0 R15: 00007ffd6fb91018 [ 188.384250][ T7721] [ 188.722453][ T7739] IPv6: Can't replace route, no match found [ 188.913338][ T7749] __nla_validate_parse: 4 callbacks suppressed [ 188.913356][ T7749] netlink: 60 bytes leftover after parsing attributes in process `syz.3.540'. [ 188.932644][ T7749] netlink: 60 bytes leftover after parsing attributes in process `syz.3.540'. [ 188.949445][ T7749] netlink: 60 bytes leftover after parsing attributes in process `syz.3.540'. [ 188.962876][ T7749] netlink: 60 bytes leftover after parsing attributes in process `syz.3.540'. [ 189.145827][ T7752] netlink: 'syz.3.542': attribute type 13 has an invalid length. [ 189.157292][ T7752] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.542'. [ 189.928702][ T7765] FAULT_INJECTION: forcing a failure. [ 189.928702][ T7765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.961683][ T7768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.544'. [ 190.001513][ T7765] CPU: 0 PID: 7765 Comm: syz.3.545 Not tainted syzkaller #0 [ 190.008905][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.019038][ T7765] Call Trace: [ 190.022387][ T7765] [ 190.025416][ T7765] dump_stack_lvl+0x18c/0x250 [ 190.030195][ T7765] ? show_regs_print_info+0x20/0x20 [ 190.035477][ T7765] ? load_image+0x400/0x400 [ 190.040064][ T7765] ? __might_fault+0xaa/0x120 [ 190.044818][ T7765] ? __lock_acquire+0x7d40/0x7d40 [ 190.049940][ T7765] should_fail_ex+0x39d/0x4d0 [ 190.054724][ T7765] _copy_from_user+0x2f/0xe0 [ 190.059400][ T7765] generic_map_update_batch+0x54b/0x810 [ 190.065057][ T7765] ? rcu_read_unlock+0xa0/0xa0 [ 190.069928][ T7765] ? __fdget+0x180/0x210 [ 190.074308][ T7765] ? rcu_read_unlock+0xa0/0xa0 [ 190.079154][ T7765] bpf_map_do_batch+0x3d7/0x610 [ 190.084100][ T7765] __sys_bpf+0x381/0x890 [ 190.088462][ T7765] ? bpf_link_show_fdinfo+0x390/0x390 [ 190.093976][ T7765] ? lock_chain_count+0x20/0x20 [ 190.098974][ T7765] __x64_sys_bpf+0x7c/0x90 [ 190.103490][ T7765] do_syscall_64+0x55/0xa0 [ 190.108006][ T7765] ? clear_bhb_loop+0x40/0x90 [ 190.112755][ T7765] ? clear_bhb_loop+0x40/0x90 [ 190.117594][ T7765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.123536][ T7765] RIP: 0033:0x7f7803f9aeb9 [ 190.127999][ T7765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.147664][ T7765] RSP: 002b:00007f7804e6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 190.156139][ T7765] RAX: ffffffffffffffda RBX: 00007f7804215fa0 RCX: 00007f7803f9aeb9 [ 190.164153][ T7765] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 190.172167][ T7765] RBP: 00007f7804e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 190.180182][ T7765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.188205][ T7765] R13: 00007f7804216038 R14: 00007f7804215fa0 R15: 00007ffc54a77e78 [ 190.196352][ T7765] [ 190.227730][ T7769] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.546'. [ 191.666801][ T7813] FAULT_INJECTION: forcing a failure. [ 191.666801][ T7813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.702225][ T7813] CPU: 1 PID: 7813 Comm: syz.3.558 Not tainted syzkaller #0 [ 191.709593][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.719704][ T7813] Call Trace: [ 191.723027][ T7813] [ 191.726000][ T7813] dump_stack_lvl+0x18c/0x250 [ 191.730732][ T7813] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 191.736950][ T7813] ? show_regs_print_info+0x20/0x20 [ 191.742229][ T7813] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 191.748448][ T7813] should_fail_ex+0x39d/0x4d0 [ 191.753191][ T7813] _copy_from_user+0x2f/0xe0 [ 191.757839][ T7813] generic_map_update_batch+0x59a/0x810 [ 191.763458][ T7813] ? rcu_read_unlock+0xa0/0xa0 [ 191.768282][ T7813] ? __fdget+0x180/0x210 [ 191.772590][ T7813] ? rcu_read_unlock+0xa0/0xa0 [ 191.777407][ T7813] bpf_map_do_batch+0x3d7/0x610 [ 191.782317][ T7813] __sys_bpf+0x381/0x890 [ 191.786636][ T7813] ? bpf_link_show_fdinfo+0x390/0x390 [ 191.792081][ T7813] ? lock_chain_count+0x20/0x20 [ 191.797006][ T7813] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 191.803051][ T7813] __x64_sys_bpf+0x7c/0x90 [ 191.807524][ T7813] do_syscall_64+0x55/0xa0 [ 191.811993][ T7813] ? clear_bhb_loop+0x40/0x90 [ 191.816714][ T7813] ? clear_bhb_loop+0x40/0x90 [ 191.821431][ T7813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.827352][ T7813] RIP: 0033:0x7f7803f9aeb9 [ 191.831812][ T7813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.851460][ T7813] RSP: 002b:00007f7804e6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 191.859917][ T7813] RAX: ffffffffffffffda RBX: 00007f7804215fa0 RCX: 00007f7803f9aeb9 [ 191.867953][ T7813] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 191.875982][ T7813] RBP: 00007f7804e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 191.883982][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.891991][ T7813] R13: 00007f7804216038 R14: 00007f7804215fa0 R15: 00007ffc54a77e78 [ 191.900026][ T7813] [ 192.094353][ T7816] validate_nla: 1 callbacks suppressed [ 192.094556][ T7816] netlink: 'syz.1.559': attribute type 10 has an invalid length. [ 192.134239][ T7816] bridge0: port 3(netdevsim0) entered disabled state [ 192.143293][ T7816] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.263232][ T7816] bridge0: port 3(netdevsim0) entered blocking state [ 192.270784][ T7816] bridge0: port 3(netdevsim0) entered forwarding state [ 192.279221][ T7816] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.287420][ T7816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.328909][ T7816] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 192.363871][ T7821] netlink: 'syz.2.562': attribute type 22 has an invalid length. [ 192.390541][ T7830] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.563'. [ 192.836671][ T7828] syzkaller0: entered promiscuous mode [ 192.854874][ T7828] syzkaller0: entered allmulticast mode [ 192.877009][ T7836] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.564'. [ 192.888191][ T7823] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.561'. [ 192.973878][ T7843] netlink: 'syz.0.566': attribute type 1 has an invalid length. [ 193.192203][ T7849] netlink: zone id is out of range [ 193.204524][ T7849] netlink: zone id is out of range [ 193.210009][ T7849] netlink: zone id is out of range [ 193.580793][ T7855] FAULT_INJECTION: forcing a failure. [ 193.580793][ T7855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.663699][ T7855] CPU: 1 PID: 7855 Comm: syz.0.570 Not tainted syzkaller #0 [ 193.671079][ T7855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.681173][ T7855] Call Trace: [ 193.684508][ T7855] [ 193.687481][ T7855] dump_stack_lvl+0x18c/0x250 [ 193.692219][ T7855] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 193.698429][ T7855] ? show_regs_print_info+0x20/0x20 [ 193.703678][ T7855] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 193.709884][ T7855] ? dump_stack+0x9/0x20 [ 193.714194][ T7855] should_fail_ex+0x39d/0x4d0 [ 193.718938][ T7855] _copy_from_user+0x2f/0xe0 [ 193.723579][ T7855] generic_map_update_batch+0x54b/0x810 [ 193.729208][ T7855] ? rcu_read_unlock+0xa0/0xa0 [ 193.734028][ T7855] ? __fdget+0x180/0x210 [ 193.738324][ T7855] ? rcu_read_unlock+0xa0/0xa0 [ 193.743123][ T7855] bpf_map_do_batch+0x3d7/0x610 [ 193.748026][ T7855] __sys_bpf+0x381/0x890 [ 193.752320][ T7855] ? bpf_link_show_fdinfo+0x390/0x390 [ 193.757783][ T7855] ? lock_chain_count+0x20/0x20 [ 193.762685][ T7855] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 193.768731][ T7855] __x64_sys_bpf+0x7c/0x90 [ 193.773213][ T7855] do_syscall_64+0x55/0xa0 [ 193.777720][ T7855] ? clear_bhb_loop+0x40/0x90 [ 193.782483][ T7855] ? clear_bhb_loop+0x40/0x90 [ 193.787209][ T7855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.793145][ T7855] RIP: 0033:0x7f59db59aeb9 [ 193.797639][ T7855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.817294][ T7855] RSP: 002b:00007f59dc40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 193.825777][ T7855] RAX: ffffffffffffffda RBX: 00007f59db815fa0 RCX: 00007f59db59aeb9 [ 193.833794][ T7855] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 193.841809][ T7855] RBP: 00007f59dc40e090 R08: 0000000000000000 R09: 0000000000000000 [ 193.849823][ T7855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.857837][ T7855] R13: 00007f59db816038 R14: 00007f59db815fa0 R15: 00007ffed9e47938 [ 193.865894][ T7855] [ 194.168499][ T7862] __nla_validate_parse: 1 callbacks suppressed [ 194.168540][ T7862] netlink: 156 bytes leftover after parsing attributes in process `syz.0.572'. [ 194.443314][ T7871] netlink: 'syz.2.575': attribute type 4 has an invalid length. [ 194.463249][ T7871] netlink: 189948 bytes leftover after parsing attributes in process `syz.2.575'. [ 194.697777][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.707400][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.825515][ T7881] netlink: 'syz.3.577': attribute type 10 has an invalid length. [ 194.833553][ T7881] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.577'. [ 194.852058][ T7881] openvswitch: netlink: Flow key attr not present in new flow. [ 194.871177][ T7872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.893495][ T7872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.912702][ T7872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.953457][ T7872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.991998][ T7872] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 195.019851][ T7872] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 195.437402][ T7889] FAULT_INJECTION: forcing a failure. [ 195.437402][ T7889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.479217][ T7889] CPU: 0 PID: 7889 Comm: syz.0.580 Not tainted syzkaller #0 [ 195.486689][ T7889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.496790][ T7889] Call Trace: [ 195.500108][ T7889] [ 195.503070][ T7889] dump_stack_lvl+0x18c/0x250 [ 195.507826][ T7889] ? show_regs_print_info+0x20/0x20 [ 195.513061][ T7889] ? load_image+0x400/0x400 [ 195.517599][ T7889] ? __might_fault+0xaa/0x120 [ 195.522303][ T7889] ? __lock_acquire+0x7d40/0x7d40 [ 195.527348][ T7889] should_fail_ex+0x39d/0x4d0 [ 195.532066][ T7889] _copy_from_user+0x2f/0xe0 [ 195.536688][ T7889] generic_map_update_batch+0x59a/0x810 [ 195.542264][ T7889] ? rcu_read_unlock+0xa0/0xa0 [ 195.547052][ T7889] ? __fdget+0x180/0x210 [ 195.551347][ T7889] ? rcu_read_unlock+0xa0/0xa0 [ 195.556147][ T7889] bpf_map_do_batch+0x3d7/0x610 [ 195.561030][ T7889] __sys_bpf+0x381/0x890 [ 195.565316][ T7889] ? bpf_link_show_fdinfo+0x390/0x390 [ 195.570727][ T7889] ? lock_chain_count+0x20/0x20 [ 195.575611][ T7889] __x64_sys_bpf+0x7c/0x90 [ 195.580048][ T7889] do_syscall_64+0x55/0xa0 [ 195.584513][ T7889] ? clear_bhb_loop+0x40/0x90 [ 195.589229][ T7889] ? clear_bhb_loop+0x40/0x90 [ 195.593939][ T7889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.599877][ T7889] RIP: 0033:0x7f59db59aeb9 [ 195.604316][ T7889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.623969][ T7889] RSP: 002b:00007f59dc40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 195.632404][ T7889] RAX: ffffffffffffffda RBX: 00007f59db815fa0 RCX: 00007f59db59aeb9 [ 195.640427][ T7889] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 195.648418][ T7889] RBP: 00007f59dc40e090 R08: 0000000000000000 R09: 0000000000000000 [ 195.656406][ T7889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.664391][ T7889] R13: 00007f59db816038 R14: 00007f59db815fa0 R15: 00007ffed9e47938 [ 195.672405][ T7889] [ 195.745263][ T7894] netlink: 'syz.3.583': attribute type 10 has an invalid length. [ 195.753101][ T7894] netlink: 55 bytes leftover after parsing attributes in process `syz.3.583'. [ 195.789125][ T7894] veth0_macvtap: left promiscuous mode [ 195.888331][ T7902] netlink: 'syz.0.585': attribute type 27 has an invalid length. [ 195.902545][ T7902] netlink: 164 bytes leftover after parsing attributes in process `syz.0.585'. [ 195.957776][ T7891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.758624][ T7923] FAULT_INJECTION: forcing a failure. [ 196.758624][ T7923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.794308][ T7923] CPU: 0 PID: 7923 Comm: syz.2.593 Not tainted syzkaller #0 [ 196.801669][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.811760][ T7923] Call Trace: [ 196.815161][ T7923] [ 196.818117][ T7923] dump_stack_lvl+0x18c/0x250 [ 196.822832][ T7923] ? show_regs_print_info+0x20/0x20 [ 196.828068][ T7923] ? load_image+0x400/0x400 [ 196.832976][ T7923] ? __might_fault+0xaa/0x120 [ 196.837687][ T7923] ? __lock_acquire+0x7d40/0x7d40 [ 196.842740][ T7923] should_fail_ex+0x39d/0x4d0 [ 196.847485][ T7923] _copy_from_user+0x2f/0xe0 [ 196.852098][ T7923] generic_map_update_batch+0x54b/0x810 [ 196.857681][ T7923] ? rcu_read_unlock+0xa0/0xa0 [ 196.862489][ T7923] ? __fdget+0x180/0x210 [ 196.866763][ T7923] ? rcu_read_unlock+0xa0/0xa0 [ 196.871571][ T7923] bpf_map_do_batch+0x3d7/0x610 [ 196.876455][ T7923] __sys_bpf+0x381/0x890 [ 196.880723][ T7923] ? bpf_link_show_fdinfo+0x390/0x390 [ 196.886146][ T7923] ? lock_chain_count+0x20/0x20 [ 196.891022][ T7923] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 196.897040][ T7923] __x64_sys_bpf+0x7c/0x90 [ 196.901482][ T7923] do_syscall_64+0x55/0xa0 [ 196.905929][ T7923] ? clear_bhb_loop+0x40/0x90 [ 196.910654][ T7923] ? clear_bhb_loop+0x40/0x90 [ 196.915357][ T7923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.921265][ T7923] RIP: 0033:0x7fa98899aeb9 [ 196.925707][ T7923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.945328][ T7923] RSP: 002b:00007fa986bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.953766][ T7923] RAX: ffffffffffffffda RBX: 00007fa988c15fa0 RCX: 00007fa98899aeb9 [ 196.961765][ T7923] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 196.969762][ T7923] RBP: 00007fa986bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 196.977753][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.985750][ T7923] R13: 00007fa988c16038 R14: 00007fa988c15fa0 R15: 00007ffd6fb91018 [ 196.993758][ T7923] [ 197.537513][ T7957] netlink: 'syz.3.601': attribute type 3 has an invalid length. [ 197.584326][ T7957] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.601'. [ 198.041771][ T7964] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.602'. [ 198.086090][ T7964] netlink: 'syz.1.602': attribute type 2 has an invalid length. [ 198.316994][ T2966] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 198.343379][ T7973] FAULT_INJECTION: forcing a failure. [ 198.343379][ T7973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.392331][ T7973] CPU: 1 PID: 7973 Comm: syz.2.606 Not tainted syzkaller #0 [ 198.399736][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.409832][ T7973] Call Trace: [ 198.413153][ T7973] [ 198.416122][ T7973] dump_stack_lvl+0x18c/0x250 [ 198.420849][ T7973] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 198.427073][ T7973] ? show_regs_print_info+0x20/0x20 [ 198.432344][ T7973] ? load_image+0x400/0x400 [ 198.436925][ T7973] should_fail_ex+0x39d/0x4d0 [ 198.441670][ T7973] _copy_from_user+0x2f/0xe0 [ 198.446326][ T7973] generic_map_update_batch+0x59a/0x810 [ 198.451928][ T7973] ? rcu_read_unlock+0xa0/0xa0 [ 198.456742][ T7973] ? __fdget+0x180/0x210 [ 198.461046][ T7973] ? rcu_read_unlock+0xa0/0xa0 [ 198.465945][ T7973] bpf_map_do_batch+0x3d7/0x610 [ 198.470859][ T7973] __sys_bpf+0x381/0x890 [ 198.475148][ T7973] ? bpf_link_show_fdinfo+0x390/0x390 [ 198.480572][ T7973] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 198.486777][ T7973] __x64_sys_bpf+0x7c/0x90 [ 198.491233][ T7973] do_syscall_64+0x55/0xa0 [ 198.495704][ T7973] ? clear_bhb_loop+0x40/0x90 [ 198.500432][ T7973] ? clear_bhb_loop+0x40/0x90 [ 198.505139][ T7973] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.511055][ T7973] RIP: 0033:0x7fa98899aeb9 [ 198.515506][ T7973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.535138][ T7973] RSP: 002b:00007fa986bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.543597][ T7973] RAX: ffffffffffffffda RBX: 00007fa988c15fa0 RCX: 00007fa98899aeb9 [ 198.551625][ T7973] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 198.559614][ T7973] RBP: 00007fa986bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 198.567615][ T7973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.575605][ T7973] R13: 00007fa988c16038 R14: 00007fa988c15fa0 R15: 00007ffd6fb91018 [ 198.583624][ T7973] [ 199.543335][ T8017] netlink: 'syz.1.617': attribute type 9 has an invalid length. [ 199.569391][ T8017] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.617'. [ 199.663398][ T8017] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.617'. [ 199.772141][ T8025] sctp: [Deprecated]: syz.0.621 (pid 8025) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.772141][ T8025] Use struct sctp_sack_info instead [ 199.790677][ T8023] FAULT_INJECTION: forcing a failure. [ 199.790677][ T8023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.814482][ T8023] CPU: 0 PID: 8023 Comm: syz.3.620 Not tainted syzkaller #0 [ 199.821837][ T8023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.831924][ T8023] Call Trace: [ 199.835256][ T8023] [ 199.838221][ T8023] dump_stack_lvl+0x18c/0x250 [ 199.842951][ T8023] ? lockdep_hardirqs_on+0x98/0x150 [ 199.848197][ T8023] ? show_regs_print_info+0x20/0x20 [ 199.853471][ T8023] ? dump_stack+0x9/0x20 [ 199.857777][ T8023] ? dump_stack_lvl+0xc/0x250 [ 199.862544][ T8023] should_fail_ex+0x39d/0x4d0 [ 199.867287][ T8023] _copy_from_user+0x2f/0xe0 [ 199.871950][ T8023] generic_map_update_batch+0x54b/0x810 [ 199.877559][ T8023] ? rcu_read_unlock+0xa0/0xa0 [ 199.882556][ T8023] ? __fdget+0x180/0x210 [ 199.886860][ T8023] ? rcu_read_unlock+0xa0/0xa0 [ 199.891671][ T8023] bpf_map_do_batch+0x3d7/0x610 [ 199.896572][ T8023] __sys_bpf+0x381/0x890 [ 199.900861][ T8023] ? bpf_link_show_fdinfo+0x390/0x390 [ 199.906299][ T8023] ? lock_chain_count+0x20/0x20 [ 199.911208][ T8023] __x64_sys_bpf+0x7c/0x90 [ 199.915669][ T8023] do_syscall_64+0x55/0xa0 [ 199.920139][ T8023] ? clear_bhb_loop+0x40/0x90 [ 199.924863][ T8023] ? clear_bhb_loop+0x40/0x90 [ 199.929589][ T8023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.935543][ T8023] RIP: 0033:0x7f7803f9aeb9 [ 199.939979][ T8023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.959706][ T8023] RSP: 002b:00007f7804e6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.968140][ T8023] RAX: ffffffffffffffda RBX: 00007f7804215fa0 RCX: 00007f7803f9aeb9 [ 199.976129][ T8023] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 199.984117][ T8023] RBP: 00007f7804e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 199.992119][ T8023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.000110][ T8023] R13: 00007f7804216038 R14: 00007f7804215fa0 R15: 00007ffc54a77e78 [ 200.008116][ T8023] [ 200.233776][ T8032] netlink: 'syz.0.624': attribute type 46 has an invalid length. [ 200.249246][ T8032] netlink: 36 bytes leftover after parsing attributes in process `syz.0.624'. [ 201.119107][ T8062] FAULT_INJECTION: forcing a failure. [ 201.119107][ T8062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.155182][ T8062] CPU: 0 PID: 8062 Comm: syz.2.632 Not tainted syzkaller #0 [ 201.162548][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.172649][ T8062] Call Trace: [ 201.175987][ T8062] [ 201.178952][ T8062] dump_stack_lvl+0x18c/0x250 [ 201.183688][ T8062] ? show_regs_print_info+0x20/0x20 [ 201.188958][ T8062] ? load_image+0x400/0x400 [ 201.193534][ T8062] ? __might_fault+0xaa/0x120 [ 201.198268][ T8062] ? __lock_acquire+0x7d40/0x7d40 [ 201.203346][ T8062] should_fail_ex+0x39d/0x4d0 [ 201.208081][ T8062] _copy_from_user+0x2f/0xe0 [ 201.212717][ T8062] generic_map_update_batch+0x59a/0x810 [ 201.218325][ T8062] ? rcu_read_unlock+0xa0/0xa0 [ 201.223134][ T8062] ? __fdget+0x180/0x210 [ 201.227451][ T8062] ? rcu_read_unlock+0xa0/0xa0 [ 201.232247][ T8062] bpf_map_do_batch+0x3d7/0x610 [ 201.237191][ T8062] __sys_bpf+0x381/0x890 [ 201.241478][ T8062] ? bpf_link_show_fdinfo+0x390/0x390 [ 201.246940][ T8062] ? lock_chain_count+0x20/0x20 [ 201.251843][ T8062] __x64_sys_bpf+0x7c/0x90 [ 201.256306][ T8062] do_syscall_64+0x55/0xa0 [ 201.260771][ T8062] ? clear_bhb_loop+0x40/0x90 [ 201.265491][ T8062] ? clear_bhb_loop+0x40/0x90 [ 201.270216][ T8062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.276152][ T8062] RIP: 0033:0x7fa98899aeb9 [ 201.280605][ T8062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.300264][ T8062] RSP: 002b:00007fa986bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.308741][ T8062] RAX: ffffffffffffffda RBX: 00007fa988c16090 RCX: 00007fa98899aeb9 [ 201.316741][ T8062] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 201.324740][ T8062] RBP: 00007fa986bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 201.332745][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.340752][ T8062] R13: 00007fa988c16128 R14: 00007fa988c16090 R15: 00007ffd6fb91018 [ 201.348796][ T8062] [ 203.472376][ T8095] FAULT_INJECTION: forcing a failure. [ 203.472376][ T8095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.486255][ T8091] netlink: 196 bytes leftover after parsing attributes in process `syz.1.640'. [ 203.494654][ T8095] CPU: 0 PID: 8095 Comm: syz.2.643 Not tainted syzkaller #0 [ 203.502589][ T8095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.512686][ T8095] Call Trace: [ 203.516010][ T8095] [ 203.518968][ T8095] dump_stack_lvl+0x18c/0x250 [ 203.523687][ T8095] ? show_regs_print_info+0x20/0x20 [ 203.528920][ T8095] ? load_image+0x400/0x400 [ 203.533460][ T8095] ? __might_fault+0xaa/0x120 [ 203.538171][ T8095] ? __lock_acquire+0x7d40/0x7d40 [ 203.543237][ T8095] should_fail_ex+0x39d/0x4d0 [ 203.547963][ T8095] _copy_from_user+0x2f/0xe0 [ 203.552605][ T8095] generic_map_update_batch+0x54b/0x810 [ 203.558197][ T8095] ? rcu_read_unlock+0xa0/0xa0 [ 203.562996][ T8095] ? __fdget+0x180/0x210 [ 203.567272][ T8095] ? rcu_read_unlock+0xa0/0xa0 [ 203.572057][ T8095] bpf_map_do_batch+0x3d7/0x610 [ 203.576938][ T8095] __sys_bpf+0x381/0x890 [ 203.581201][ T8095] ? bpf_link_show_fdinfo+0x390/0x390 [ 203.586607][ T8095] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 203.592811][ T8095] __x64_sys_bpf+0x7c/0x90 [ 203.597257][ T8095] do_syscall_64+0x55/0xa0 [ 203.601695][ T8095] ? clear_bhb_loop+0x40/0x90 [ 203.606397][ T8095] ? clear_bhb_loop+0x40/0x90 [ 203.611098][ T8095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.617019][ T8095] RIP: 0033:0x7fa98899aeb9 [ 203.621453][ T8095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.641087][ T8095] RSP: 002b:00007fa986bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.649528][ T8095] RAX: ffffffffffffffda RBX: 00007fa988c15fa0 RCX: 00007fa98899aeb9 [ 203.657548][ T8095] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 203.665542][ T8095] RBP: 00007fa986bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 203.673534][ T8095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.681534][ T8095] R13: 00007fa988c16038 R14: 00007fa988c15fa0 R15: 00007ffd6fb91018 [ 203.689540][ T8095] [ 203.800104][ T8091] netlink: 'syz.1.640': attribute type 29 has an invalid length. [ 204.007982][ T8091] netlink: 'syz.1.640': attribute type 29 has an invalid length. [ 204.101142][ T8092] netlink: 'syz.1.640': attribute type 29 has an invalid length. [ 204.168353][ T8101] netlink: 'syz.1.640': attribute type 29 has an invalid length. [ 204.327071][ T8109] netlink: 'syz.0.646': attribute type 9 has an invalid length. [ 204.384431][ T8109] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.646'. [ 204.771360][ T8117] netlink: 'syz.1.647': attribute type 4 has an invalid length. [ 204.847646][ T8110] netlink: 'syz.0.646': attribute type 9 has an invalid length. [ 204.949669][ T8110] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.646'. [ 206.014789][ T8129] netlink: 'syz.3.652': attribute type 21 has an invalid length. [ 206.589540][ T8140] FAULT_INJECTION: forcing a failure. [ 206.589540][ T8140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.686263][ T8140] CPU: 0 PID: 8140 Comm: syz.0.654 Not tainted syzkaller #0 [ 206.693731][ T8140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.703825][ T8140] Call Trace: [ 206.707136][ T8140] [ 206.710138][ T8140] dump_stack_lvl+0x18c/0x250 [ 206.714864][ T8140] ? show_regs_print_info+0x20/0x20 [ 206.720111][ T8140] ? load_image+0x400/0x400 [ 206.724667][ T8140] ? __might_fault+0xaa/0x120 [ 206.729391][ T8140] ? __lock_acquire+0x7d40/0x7d40 [ 206.734466][ T8140] should_fail_ex+0x39d/0x4d0 [ 206.739208][ T8140] _copy_from_user+0x2f/0xe0 [ 206.743843][ T8140] generic_map_update_batch+0x59a/0x810 [ 206.749441][ T8140] ? rcu_read_unlock+0xa0/0xa0 [ 206.754260][ T8140] ? rcu_read_unlock+0xa0/0xa0 [ 206.759073][ T8140] ? bpf_map_do_batch+0x3c9/0x610 [ 206.764130][ T8140] ? bpf_map_do_batch+0x382/0x610 [ 206.769211][ T8140] ? rcu_read_unlock+0xa0/0xa0 [ 206.774010][ T8140] bpf_map_do_batch+0x3d7/0x610 [ 206.778917][ T8140] __sys_bpf+0x381/0x890 [ 206.783203][ T8140] ? bpf_link_show_fdinfo+0x390/0x390 [ 206.788642][ T8140] ? lock_chain_count+0x20/0x20 [ 206.793557][ T8140] __x64_sys_bpf+0x7c/0x90 [ 206.798032][ T8140] do_syscall_64+0x55/0xa0 [ 206.802560][ T8140] ? clear_bhb_loop+0x40/0x90 [ 206.807277][ T8140] ? clear_bhb_loop+0x40/0x90 [ 206.811993][ T8140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.817929][ T8140] RIP: 0033:0x7f59db59aeb9 [ 206.822386][ T8140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.842046][ T8140] RSP: 002b:00007f59dc40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.850588][ T8140] RAX: ffffffffffffffda RBX: 00007f59db815fa0 RCX: 00007f59db59aeb9 [ 206.858586][ T8140] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 206.866580][ T8140] RBP: 00007f59dc40e090 R08: 0000000000000000 R09: 0000000000000000 [ 206.874593][ T8140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.882580][ T8140] R13: 00007f59db816038 R14: 00007f59db815fa0 R15: 00007ffed9e47938 [ 206.890587][ T8140] [ 211.439379][ T8183] netlink: 'syz.3.664': attribute type 39 has an invalid length. [ 211.818337][ T8194] netlink: 123072 bytes leftover after parsing attributes in process `syz.1.666'. [ 212.137757][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 212.137821][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 212.146124][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 212.151941][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 212.591567][ T8201] FAULT_INJECTION: forcing a failure. [ 212.591567][ T8201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.624191][ T8201] CPU: 0 PID: 8201 Comm: syz.3.667 Not tainted syzkaller #0 [ 212.631556][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.641655][ T8201] Call Trace: [ 212.644983][ T8201] [ 212.647961][ T8201] dump_stack_lvl+0x18c/0x250 [ 212.652704][ T8201] ? show_regs_print_info+0x20/0x20 [ 212.657962][ T8201] ? load_image+0x400/0x400 [ 212.662516][ T8201] ? __might_fault+0xaa/0x120 [ 212.667239][ T8201] ? __lock_acquire+0x7d40/0x7d40 [ 212.672316][ T8201] should_fail_ex+0x39d/0x4d0 [ 212.677062][ T8201] _copy_from_user+0x2f/0xe0 [ 212.681705][ T8201] generic_map_update_batch+0x54b/0x810 [ 212.687307][ T8201] ? rcu_read_unlock+0xa0/0xa0 [ 212.692124][ T8201] ? __fdget+0x180/0x210 [ 212.696411][ T8201] ? rcu_read_unlock+0xa0/0xa0 [ 212.701207][ T8201] bpf_map_do_batch+0x3d7/0x610 [ 212.706109][ T8201] __sys_bpf+0x381/0x890 [ 212.710415][ T8201] ? bpf_link_show_fdinfo+0x390/0x390 [ 212.715834][ T8201] ? lock_chain_count+0x20/0x20 [ 212.720711][ T8201] __x64_sys_bpf+0x7c/0x90 [ 212.725147][ T8201] do_syscall_64+0x55/0xa0 [ 212.729603][ T8201] ? clear_bhb_loop+0x40/0x90 [ 212.734304][ T8201] ? clear_bhb_loop+0x40/0x90 [ 212.739041][ T8201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.744962][ T8201] RIP: 0033:0x7f7803f9aeb9 [ 212.749401][ T8201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.769046][ T8201] RSP: 002b:00007f7804e6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 212.777480][ T8201] RAX: ffffffffffffffda RBX: 00007f7804215fa0 RCX: 00007f7803f9aeb9 [ 212.785464][ T8201] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 212.793454][ T8201] RBP: 00007f7804e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 212.801444][ T8201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.809439][ T8201] R13: 00007f7804216038 R14: 00007f7804215fa0 R15: 00007ffc54a77e78 [ 212.817442][ T8201] [ 213.028484][ T8217] netlink: 'syz.1.670': attribute type 21 has an invalid length. [ 213.041818][ T8217] netlink: 156 bytes leftover after parsing attributes in process `syz.1.670'. [ 213.147819][ T8217] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.670'. [ 213.341083][ T8230] netlink: 'syz.1.674': attribute type 2 has an invalid length. [ 213.359534][ T8235] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.675'. [ 213.811520][ T8257] FAULT_INJECTION: forcing a failure. [ 213.811520][ T8257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.827240][ T8258] netlink: 'syz.0.682': attribute type 16 has an invalid length. [ 213.835977][ T8258] netlink: 48 bytes leftover after parsing attributes in process `syz.0.682'. [ 213.846694][ T8258] veth1_macvtap: entered allmulticast mode [ 213.870179][ T8257] CPU: 0 PID: 8257 Comm: syz.3.681 Not tainted syzkaller #0 [ 213.877544][ T8257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 213.887673][ T8257] Call Trace: [ 213.890990][ T8257] [ 213.893965][ T8257] dump_stack_lvl+0x18c/0x250 [ 213.898696][ T8257] ? show_regs_print_info+0x20/0x20 [ 213.903942][ T8257] ? load_image+0x400/0x400 [ 213.908536][ T8257] ? __might_fault+0xaa/0x120 [ 213.913261][ T8257] ? __lock_acquire+0x7d40/0x7d40 [ 213.918343][ T8257] should_fail_ex+0x39d/0x4d0 [ 213.923084][ T8257] _copy_from_user+0x2f/0xe0 [ 213.927765][ T8257] generic_map_update_batch+0x59a/0x810 [ 213.933385][ T8257] ? rcu_read_unlock+0xa0/0xa0 [ 213.938214][ T8257] ? __fdget+0x180/0x210 [ 213.942539][ T8257] ? rcu_read_unlock+0xa0/0xa0 [ 213.947342][ T8257] bpf_map_do_batch+0x3d7/0x610 [ 213.952247][ T8257] __sys_bpf+0x381/0x890 [ 213.956537][ T8257] ? bpf_link_show_fdinfo+0x390/0x390 [ 213.961975][ T8257] ? lock_chain_count+0x20/0x20 [ 213.966875][ T8257] __x64_sys_bpf+0x7c/0x90 [ 213.971329][ T8257] do_syscall_64+0x55/0xa0 [ 213.975791][ T8257] ? clear_bhb_loop+0x40/0x90 [ 213.980514][ T8257] ? clear_bhb_loop+0x40/0x90 [ 213.985251][ T8257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.991189][ T8257] RIP: 0033:0x7f7803f9aeb9 [ 213.995645][ T8257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.015290][ T8257] RSP: 002b:00007f7804e4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.023765][ T8257] RAX: ffffffffffffffda RBX: 00007f7804216090 RCX: 00007f7803f9aeb9 [ 214.031782][ T8257] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 214.039808][ T8257] RBP: 00007f7804e4e090 R08: 0000000000000000 R09: 0000000000000000 [ 214.047827][ T8257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.055930][ T8257] R13: 00007f7804216128 R14: 00007f7804216090 R15: 00007ffc54a77e78 [ 214.063979][ T8257] [ 214.215450][ T8262] dvmrp1: tun_chr_ioctl cmd 1074812117 [ 214.279777][ T8264] syzkaller0: entered promiscuous mode [ 214.294124][ T8264] syzkaller0: entered allmulticast mode [ 214.307186][ T8266] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.684'. [ 214.683110][ T8279] delete_channel: no stack [ 214.908261][ T8290] FAULT_INJECTION: forcing a failure. [ 214.908261][ T8290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.922344][ T8290] CPU: 0 PID: 8290 Comm: syz.1.693 Not tainted syzkaller #0 [ 214.929708][ T8290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.939803][ T8290] Call Trace: [ 214.943124][ T8290] [ 214.946097][ T8290] dump_stack_lvl+0x18c/0x250 [ 214.950825][ T8290] ? show_regs_print_info+0x20/0x20 [ 214.956075][ T8290] ? load_image+0x400/0x400 [ 214.960660][ T8290] ? __might_fault+0xaa/0x120 [ 214.965379][ T8290] ? __lock_acquire+0x7d40/0x7d40 [ 214.970451][ T8290] should_fail_ex+0x39d/0x4d0 [ 214.975185][ T8290] _copy_from_user+0x2f/0xe0 [ 214.979831][ T8290] generic_map_update_batch+0x54b/0x810 [ 214.985439][ T8290] ? rcu_read_unlock+0xa0/0xa0 [ 214.990256][ T8290] ? __fdget+0x180/0x210 [ 214.994550][ T8290] ? rcu_read_unlock+0xa0/0xa0 [ 214.999348][ T8290] bpf_map_do_batch+0x3d7/0x610 [ 215.004249][ T8290] __sys_bpf+0x381/0x890 [ 215.008540][ T8290] ? bpf_link_show_fdinfo+0x390/0x390 [ 215.013979][ T8290] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 215.020191][ T8290] __x64_sys_bpf+0x7c/0x90 [ 215.024662][ T8290] do_syscall_64+0x55/0xa0 [ 215.029137][ T8290] ? clear_bhb_loop+0x40/0x90 [ 215.033852][ T8290] ? clear_bhb_loop+0x40/0x90 [ 215.038566][ T8290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.044498][ T8290] RIP: 0033:0x7f3b7079aeb9 [ 215.048938][ T8290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.069089][ T8290] RSP: 002b:00007f3b7170b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.077536][ T8290] RAX: ffffffffffffffda RBX: 00007f3b70a16090 RCX: 00007f3b7079aeb9 [ 215.085565][ T8290] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 215.093560][ T8290] RBP: 00007f3b7170b090 R08: 0000000000000000 R09: 0000000000000000 [ 215.101566][ T8290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.109562][ T8290] R13: 00007f3b70a16128 R14: 00007f3b70a16090 R15: 00007fffe09a67e8 [ 215.117573][ T8290] [ 215.833032][ T8318] netlink: 'syz.1.700': attribute type 16 has an invalid length. [ 215.848538][ T8318] netlink: 'syz.1.700': attribute type 3 has an invalid length. [ 215.857050][ T8318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.700'. [ 216.090632][ T8325] wg2: entered allmulticast mode [ 216.192290][ T8323] wg2: entered promiscuous mode [ 216.506966][ T8341] FAULT_INJECTION: forcing a failure. [ 216.506966][ T8341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.539656][ T8341] CPU: 0 PID: 8341 Comm: syz.1.706 Not tainted syzkaller #0 [ 216.547020][ T8341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.557112][ T8341] Call Trace: [ 216.560431][ T8341] [ 216.563397][ T8341] dump_stack_lvl+0x18c/0x250 [ 216.568133][ T8341] ? show_regs_print_info+0x20/0x20 [ 216.573383][ T8341] ? load_image+0x400/0x400 [ 216.577934][ T8341] ? __might_fault+0xaa/0x120 [ 216.582650][ T8341] ? __lock_acquire+0x7d40/0x7d40 [ 216.587718][ T8341] should_fail_ex+0x39d/0x4d0 [ 216.592448][ T8341] _copy_from_user+0x2f/0xe0 [ 216.597069][ T8341] generic_map_update_batch+0x59a/0x810 [ 216.602645][ T8341] ? rcu_read_unlock+0xa0/0xa0 [ 216.607444][ T8341] ? __fdget+0x180/0x210 [ 216.611732][ T8341] ? rcu_read_unlock+0xa0/0xa0 [ 216.616512][ T8341] bpf_map_do_batch+0x3d7/0x610 [ 216.621392][ T8341] __sys_bpf+0x381/0x890 [ 216.625666][ T8341] ? bpf_link_show_fdinfo+0x390/0x390 [ 216.631064][ T8341] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 216.637255][ T8341] __x64_sys_bpf+0x7c/0x90 [ 216.641698][ T8341] do_syscall_64+0x55/0xa0 [ 216.646140][ T8341] ? clear_bhb_loop+0x40/0x90 [ 216.650834][ T8341] ? clear_bhb_loop+0x40/0x90 [ 216.655546][ T8341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.661462][ T8341] RIP: 0033:0x7f3b7079aeb9 [ 216.665900][ T8341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.685527][ T8341] RSP: 002b:00007f3b7172c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 216.693988][ T8341] RAX: ffffffffffffffda RBX: 00007f3b70a15fa0 RCX: 00007f3b7079aeb9 [ 216.702000][ T8341] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 216.709983][ T8341] RBP: 00007f3b7172c090 R08: 0000000000000000 R09: 0000000000000000 [ 216.717983][ T8341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.725968][ T8341] R13: 00007f3b70a16038 R14: 00007f3b70a15fa0 R15: 00007fffe09a67e8 [ 216.733972][ T8341] [ 216.990213][ T8357] netlink: 'syz.1.711': attribute type 21 has an invalid length. [ 217.004068][ T8357] netlink: 128 bytes leftover after parsing attributes in process `syz.1.711'. [ 217.013200][ T8357] netlink: 'syz.1.711': attribute type 4 has an invalid length. [ 217.035547][ T8357] netlink: 'syz.1.711': attribute type 29 has an invalid length. [ 217.054640][ T8357] netlink: 'syz.1.711': attribute type 29 has an invalid length. [ 217.095493][ T8357] netlink: 14 bytes leftover after parsing attributes in process `syz.1.711'. [ 217.541328][ T8361] netlink: 152 bytes leftover after parsing attributes in process `syz.3.713'. [ 218.602508][ T8379] FAULT_INJECTION: forcing a failure. [ 218.602508][ T8379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.616481][ T8379] CPU: 1 PID: 8379 Comm: syz.1.720 Not tainted syzkaller #0 [ 218.623810][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.633924][ T8379] Call Trace: [ 218.637238][ T8379] [ 218.640195][ T8379] dump_stack_lvl+0x18c/0x250 [ 218.644936][ T8379] ? show_regs_print_info+0x20/0x20 [ 218.650190][ T8379] ? load_image+0x400/0x400 [ 218.654742][ T8379] ? __might_fault+0xaa/0x120 [ 218.659470][ T8379] ? __lock_acquire+0x7d40/0x7d40 [ 218.664545][ T8379] should_fail_ex+0x39d/0x4d0 [ 218.669275][ T8379] _copy_from_user+0x2f/0xe0 [ 218.673905][ T8379] generic_map_update_batch+0x54b/0x810 [ 218.679498][ T8379] ? rcu_read_unlock+0xa0/0xa0 [ 218.684295][ T8379] ? __fdget+0x180/0x210 [ 218.688568][ T8379] ? rcu_read_unlock+0xa0/0xa0 [ 218.693365][ T8379] bpf_map_do_batch+0x3d7/0x610 [ 218.698279][ T8379] __sys_bpf+0x381/0x890 [ 218.702566][ T8379] ? bpf_link_show_fdinfo+0x390/0x390 [ 218.707986][ T8379] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 218.714177][ T8379] __x64_sys_bpf+0x7c/0x90 [ 218.718636][ T8379] do_syscall_64+0x55/0xa0 [ 218.723092][ T8379] ? clear_bhb_loop+0x40/0x90 [ 218.727802][ T8379] ? clear_bhb_loop+0x40/0x90 [ 218.732543][ T8379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.738519][ T8379] RIP: 0033:0x7f3b7079aeb9 [ 218.742964][ T8379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.762613][ T8379] RSP: 002b:00007f3b7172c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 218.771056][ T8379] RAX: ffffffffffffffda RBX: 00007f3b70a15fa0 RCX: 00007f3b7079aeb9 [ 218.779073][ T8379] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 218.787062][ T8379] RBP: 00007f3b7172c090 R08: 0000000000000000 R09: 0000000000000000 [ 218.795060][ T8379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 218.803054][ T8379] R13: 00007f3b70a16038 R14: 00007f3b70a15fa0 R15: 00007fffe09a67e8 [ 218.811057][ T8379] [ 219.160780][ T8384] netlink: 'syz.0.722': attribute type 28 has an invalid length. [ 219.176248][ T8384] netlink: 'syz.0.722': attribute type 3 has an invalid length. [ 219.186372][ T8384] netlink: 132 bytes leftover after parsing attributes in process `syz.0.722'. [ 219.663024][ T8404] netlink: 'syz.1.729': attribute type 22 has an invalid length. [ 219.783413][ T8406] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.730'. [ 219.839319][ T8410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.731'. [ 220.134745][ T8410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.731'. [ 220.408148][ T8416] FAULT_INJECTION: forcing a failure. [ 220.408148][ T8416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.428172][ T8416] CPU: 1 PID: 8416 Comm: syz.0.732 Not tainted syzkaller #0 [ 220.435541][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.445624][ T8416] Call Trace: [ 220.448907][ T8416] [ 220.451861][ T8416] dump_stack_lvl+0x18c/0x250 [ 220.456600][ T8416] ? show_regs_print_info+0x20/0x20 [ 220.461858][ T8416] ? load_image+0x400/0x400 [ 220.466404][ T8416] ? __might_fault+0xaa/0x120 [ 220.471130][ T8416] ? __lock_acquire+0x7d40/0x7d40 [ 220.476218][ T8416] should_fail_ex+0x39d/0x4d0 [ 220.480946][ T8416] _copy_from_user+0x2f/0xe0 [ 220.485559][ T8416] generic_map_update_batch+0x59a/0x810 [ 220.491138][ T8416] ? rcu_read_unlock+0xa0/0xa0 [ 220.495934][ T8416] ? __fdget+0x180/0x210 [ 220.500232][ T8416] ? rcu_read_unlock+0xa0/0xa0 [ 220.505030][ T8416] bpf_map_do_batch+0x3d7/0x610 [ 220.509910][ T8416] __sys_bpf+0x381/0x890 [ 220.514167][ T8416] ? bpf_link_show_fdinfo+0x390/0x390 [ 220.519580][ T8416] __x64_sys_bpf+0x7c/0x90 [ 220.524012][ T8416] do_syscall_64+0x55/0xa0 [ 220.528480][ T8416] ? clear_bhb_loop+0x40/0x90 [ 220.533171][ T8416] ? clear_bhb_loop+0x40/0x90 [ 220.537881][ T8416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.543862][ T8416] RIP: 0033:0x7f59db59aeb9 [ 220.548317][ T8416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.567962][ T8416] RSP: 002b:00007f59dc40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 220.576424][ T8416] RAX: ffffffffffffffda RBX: 00007f59db815fa0 RCX: 00007f59db59aeb9 [ 220.584430][ T8416] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 220.592453][ T8416] RBP: 00007f59dc40e090 R08: 0000000000000000 R09: 0000000000000000 [ 220.600487][ T8416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.608499][ T8416] R13: 00007f59db816038 R14: 00007f59db815fa0 R15: 00007ffed9e47938 [ 220.616589][ T8416] [ 220.709900][ T8424] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.734'. [ 221.129825][ T8442] netlink: 14 bytes leftover after parsing attributes in process `syz.3.741'. [ 221.139191][ T8442] netlink: get zone limit has 4 unknown bytes [ 221.294241][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.743'. [ 221.294253][ T8444] FAULT_INJECTION: forcing a failure. [ 221.294253][ T8444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.362308][ T8444] CPU: 1 PID: 8444 Comm: syz.2.742 Not tainted syzkaller #0 [ 221.369658][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 221.379745][ T8444] Call Trace: [ 221.383056][ T8444] [ 221.386014][ T8444] dump_stack_lvl+0x18c/0x250 [ 221.390734][ T8444] ? show_regs_print_info+0x20/0x20 [ 221.395969][ T8444] ? load_image+0x400/0x400 [ 221.400525][ T8444] ? __might_fault+0xaa/0x120 [ 221.405264][ T8444] ? __lock_acquire+0x7d40/0x7d40 [ 221.410430][ T8444] should_fail_ex+0x39d/0x4d0 [ 221.415161][ T8444] _copy_from_user+0x2f/0xe0 [ 221.419796][ T8444] generic_map_update_batch+0x54b/0x810 [ 221.425391][ T8444] ? rcu_read_unlock+0xa0/0xa0 [ 221.430209][ T8444] ? __fdget+0x180/0x210 [ 221.434481][ T8444] ? rcu_read_unlock+0xa0/0xa0 [ 221.439259][ T8444] bpf_map_do_batch+0x3d7/0x610 [ 221.444141][ T8444] __sys_bpf+0x381/0x890 [ 221.448403][ T8444] ? bpf_link_show_fdinfo+0x390/0x390 [ 221.453800][ T8444] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.459990][ T8444] __x64_sys_bpf+0x7c/0x90 [ 221.464444][ T8444] do_syscall_64+0x55/0xa0 [ 221.468889][ T8444] ? clear_bhb_loop+0x40/0x90 [ 221.473607][ T8444] ? clear_bhb_loop+0x40/0x90 [ 221.478349][ T8444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.484282][ T8444] RIP: 0033:0x7fa98899aeb9 [ 221.488719][ T8444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.508353][ T8444] RSP: 002b:00007fa986bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.516830][ T8444] RAX: ffffffffffffffda RBX: 00007fa988c15fa0 RCX: 00007fa98899aeb9 [ 221.524827][ T8444] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 221.532812][ T8444] RBP: 00007fa986bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 221.540799][ T8444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.548915][ T8444] R13: 00007fa988c16038 R14: 00007fa988c15fa0 R15: 00007ffd6fb91018 [ 221.556925][ T8444] [ 222.545623][ T8474] netlink: 'syz.0.752': attribute type 17 has an invalid length. [ 222.566234][ T8478] __nla_validate_parse: 3 callbacks suppressed [ 222.566251][ T8478] netlink: 144 bytes leftover after parsing attributes in process `syz.2.753'. [ 222.870648][ T8488] FAULT_INJECTION: forcing a failure. [ 222.870648][ T8488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.896658][ T8488] CPU: 0 PID: 8488 Comm: syz.2.757 Not tainted syzkaller #0 [ 222.904124][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.914224][ T8488] Call Trace: [ 222.917549][ T8488] [ 222.920513][ T8488] dump_stack_lvl+0x18c/0x250 [ 222.925252][ T8488] ? show_regs_print_info+0x20/0x20 [ 222.930506][ T8488] ? load_image+0x400/0x400 [ 222.935069][ T8488] ? __might_fault+0xaa/0x120 [ 222.939785][ T8488] ? __lock_acquire+0x7d40/0x7d40 [ 222.944858][ T8488] should_fail_ex+0x39d/0x4d0 [ 222.949587][ T8488] _copy_from_user+0x2f/0xe0 [ 222.954230][ T8488] generic_map_update_batch+0x59a/0x810 [ 222.959842][ T8488] ? rcu_read_unlock+0xa0/0xa0 [ 222.964664][ T8488] ? __fdget+0x180/0x210 [ 222.968969][ T8488] ? rcu_read_unlock+0xa0/0xa0 [ 222.973803][ T8488] bpf_map_do_batch+0x3d7/0x610 [ 222.978737][ T8488] __sys_bpf+0x381/0x890 [ 222.983035][ T8488] ? bpf_link_show_fdinfo+0x390/0x390 [ 222.988475][ T8488] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 222.994704][ T8488] __x64_sys_bpf+0x7c/0x90 [ 222.999254][ T8488] do_syscall_64+0x55/0xa0 [ 223.003710][ T8488] ? clear_bhb_loop+0x40/0x90 [ 223.008409][ T8488] ? clear_bhb_loop+0x40/0x90 [ 223.013115][ T8488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.019057][ T8488] RIP: 0033:0x7fa98899aeb9 [ 223.023497][ T8488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.043139][ T8488] RSP: 002b:00007fa986bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 223.051612][ T8488] RAX: ffffffffffffffda RBX: 00007fa988c15fa0 RCX: 00007fa98899aeb9 [ 223.059620][ T8488] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 223.067701][ T8488] RBP: 00007fa986bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 223.075732][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.083750][ T8488] R13: 00007fa988c16038 R14: 00007fa988c15fa0 R15: 00007ffd6fb91018 [ 223.091779][ T8488] [ 223.360876][ T8500] netlink: 'syz.3.760': attribute type 10 has an invalid length. [ 223.390459][ T8500] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.760'. [ 223.405447][ T8500] openvswitch: netlink: Flow key attr not present in new flow. [ 223.515514][ T8509] netlink: 'syz.0.763': attribute type 21 has an invalid length. [ 223.523839][ T8509] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.763'. [ 224.282026][ T8532] netlink: 'syz.3.769': attribute type 21 has an invalid length. [ 224.323121][ T8532] netlink: 128 bytes leftover after parsing attributes in process `syz.3.769'. [ 224.374315][ T8532] netlink: 'syz.3.769': attribute type 4 has an invalid length. [ 224.382033][ T8532] netlink: 'syz.3.769': attribute type 5 has an invalid length. [ 224.423966][ T8532] netlink: 3 bytes leftover after parsing attributes in process `syz.3.769'. [ 224.505404][ T8536] FAULT_INJECTION: forcing a failure. [ 224.505404][ T8536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.519297][ T8536] CPU: 1 PID: 8536 Comm: syz.2.770 Not tainted syzkaller #0 [ 224.526626][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.536733][ T8536] Call Trace: [ 224.540045][ T8536] [ 224.543021][ T8536] dump_stack_lvl+0x18c/0x250 [ 224.547763][ T8536] ? show_regs_print_info+0x20/0x20 [ 224.553013][ T8536] ? load_image+0x400/0x400 [ 224.557574][ T8536] ? __might_fault+0xaa/0x120 [ 224.562297][ T8536] ? __lock_acquire+0x7d40/0x7d40 [ 224.567365][ T8536] should_fail_ex+0x39d/0x4d0 [ 224.572122][ T8536] _copy_from_user+0x2f/0xe0 [ 224.576773][ T8536] generic_map_update_batch+0x54b/0x810 [ 224.582366][ T8536] ? rcu_read_unlock+0xa0/0xa0 [ 224.587171][ T8536] ? __fdget+0x180/0x210 [ 224.591469][ T8536] ? rcu_read_unlock+0xa0/0xa0 [ 224.596291][ T8536] bpf_map_do_batch+0x3d7/0x610 [ 224.601205][ T8536] __sys_bpf+0x381/0x890 [ 224.605502][ T8536] ? bpf_link_show_fdinfo+0x390/0x390 [ 224.610966][ T8536] ? lock_chain_count+0x20/0x20 [ 224.615869][ T8536] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 224.621910][ T8536] __x64_sys_bpf+0x7c/0x90 [ 224.626373][ T8536] do_syscall_64+0x55/0xa0 [ 224.630845][ T8536] ? clear_bhb_loop+0x40/0x90 [ 224.635626][ T8536] ? clear_bhb_loop+0x40/0x90 [ 224.640368][ T8536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.646306][ T8536] RIP: 0033:0x7fa98899aeb9 [ 224.650758][ T8536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.670403][ T8536] RSP: 002b:00007fa986bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.678855][ T8536] RAX: ffffffffffffffda RBX: 00007fa988c15fa0 RCX: 00007fa98899aeb9 [ 224.686860][ T8536] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 224.694884][ T8536] RBP: 00007fa986bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 224.702900][ T8536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.710932][ T8536] R13: 00007fa988c16038 R14: 00007fa988c15fa0 R15: 00007ffd6fb91018 [ 224.718984][ T8536] [ 224.932104][ T8544] netlink: 52 bytes leftover after parsing attributes in process `syz.2.773'. [ 224.957053][ T8544] C: entered allmulticast mode [ 224.968379][ T8544] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 224.985848][ T8547] netlink: 'syz.0.774': attribute type 29 has an invalid length. [ 225.004902][ T8547] netlink: 'syz.0.774': attribute type 29 has an invalid length. [ 225.272779][ T8559] bridge0: port 3(netdevsim0) entered disabled state [ 225.279986][ T8559] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.287711][ T8559] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.300765][ T8559] bridge0: entered allmulticast mode [ 225.472263][ T8559] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 225.489684][ T8559] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 225.513745][ T8559] bridge0: port 3(netdevsim0) entered disabled state [ 225.572957][ T8559] bridge_slave_1: left allmulticast mode [ 225.585599][ T8559] bridge_slave_1: left promiscuous mode [ 225.592220][ T8559] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.604573][ T8559] bridge_slave_0: left allmulticast mode [ 225.610462][ T8559] bridge_slave_0: left promiscuous mode [ 225.617014][ T8559] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.678916][ T8570] FAULT_INJECTION: forcing a failure. [ 225.678916][ T8570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.692328][ T8570] CPU: 0 PID: 8570 Comm: syz.2.781 Not tainted syzkaller #0 [ 225.699667][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.709764][ T8570] Call Trace: [ 225.713077][ T8570] [ 225.716041][ T8570] dump_stack_lvl+0x18c/0x250 [ 225.720760][ T8570] ? show_regs_print_info+0x20/0x20 [ 225.726037][ T8570] ? load_image+0x400/0x400 [ 225.730573][ T8570] ? __might_fault+0xaa/0x120 [ 225.735271][ T8570] ? __lock_acquire+0x7d40/0x7d40 [ 225.740323][ T8570] should_fail_ex+0x39d/0x4d0 [ 225.745037][ T8570] _copy_from_user+0x2f/0xe0 [ 225.749678][ T8570] generic_map_update_batch+0x59a/0x810 [ 225.755259][ T8570] ? rcu_read_unlock+0xa0/0xa0 [ 225.760051][ T8570] ? __fdget+0x180/0x210 [ 225.764324][ T8570] ? rcu_read_unlock+0xa0/0xa0 [ 225.769121][ T8570] bpf_map_do_batch+0x3d7/0x610 [ 225.774019][ T8570] __sys_bpf+0x381/0x890 [ 225.778298][ T8570] ? bpf_link_show_fdinfo+0x390/0x390 [ 225.783715][ T8570] ? lock_chain_count+0x20/0x20 [ 225.788605][ T8570] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 225.794628][ T8570] __x64_sys_bpf+0x7c/0x90 [ 225.799066][ T8570] do_syscall_64+0x55/0xa0 [ 225.803515][ T8570] ? clear_bhb_loop+0x40/0x90 [ 225.808233][ T8570] ? clear_bhb_loop+0x40/0x90 [ 225.812940][ T8570] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.818859][ T8570] RIP: 0033:0x7fa98899aeb9 [ 225.823295][ T8570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.842928][ T8570] RSP: 002b:00007fa986bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.851384][ T8570] RAX: ffffffffffffffda RBX: 00007fa988c15fa0 RCX: 00007fa98899aeb9 [ 225.859386][ T8570] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 225.867382][ T8570] RBP: 00007fa986bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 225.875377][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.883365][ T8570] R13: 00007fa988c16038 R14: 00007fa988c15fa0 R15: 00007ffd6fb91018 [ 225.891376][ T8570] [ 225.928524][ T8572] netlink: 'syz.1.780': attribute type 3 has an invalid length. [ 225.936630][ T8572] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.780'. [ 226.173852][ T8580] netlink: 'syz.3.784': attribute type 3 has an invalid length. [ 226.194122][ T8580] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.784'. [ 226.441304][ T8582] netlink: 176 bytes leftover after parsing attributes in process `syz.0.783'. [ 226.560721][ T8580] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.784'. [ 227.221650][ T8603] FAULT_INJECTION: forcing a failure. [ 227.221650][ T8603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.250946][ T8603] CPU: 1 PID: 8603 Comm: syz.3.790 Not tainted syzkaller #0 [ 227.258480][ T8603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.268578][ T8603] Call Trace: [ 227.271892][ T8603] [ 227.274857][ T8603] dump_stack_lvl+0x18c/0x250 [ 227.279588][ T8603] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 227.285820][ T8603] ? show_regs_print_info+0x20/0x20 [ 227.291072][ T8603] ? load_image+0x400/0x400 [ 227.295652][ T8603] should_fail_ex+0x39d/0x4d0 [ 227.300396][ T8603] _copy_from_user+0x2f/0xe0 [ 227.305047][ T8603] generic_map_update_batch+0x54b/0x810 [ 227.310680][ T8603] ? rcu_read_unlock+0xa0/0xa0 [ 227.315503][ T8603] ? __fdget+0x180/0x210 [ 227.319816][ T8603] ? rcu_read_unlock+0xa0/0xa0 [ 227.324624][ T8603] bpf_map_do_batch+0x3d7/0x610 [ 227.329538][ T8603] __sys_bpf+0x381/0x890 [ 227.333826][ T8603] ? bpf_link_show_fdinfo+0x390/0x390 [ 227.339265][ T8603] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 227.345489][ T8603] __x64_sys_bpf+0x7c/0x90 [ 227.349956][ T8603] do_syscall_64+0x55/0xa0 [ 227.354428][ T8603] ? clear_bhb_loop+0x40/0x90 [ 227.359159][ T8603] ? clear_bhb_loop+0x40/0x90 [ 227.363898][ T8603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.369866][ T8603] RIP: 0033:0x7f7803f9aeb9 [ 227.374332][ T8603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.393993][ T8603] RSP: 002b:00007f7804e6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.402468][ T8603] RAX: ffffffffffffffda RBX: 00007f7804215fa0 RCX: 00007f7803f9aeb9 [ 227.410486][ T8603] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 227.418519][ T8603] RBP: 00007f7804e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 227.426544][ T8603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.434560][ T8603] R13: 00007f7804216038 R14: 00007f7804215fa0 R15: 00007ffc54a77e78 [ 227.442600][ T8603] [ 228.263649][ T8613] __nla_validate_parse: 8 callbacks suppressed [ 228.263695][ T8613] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.794'. [ 228.292255][ T8613] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 228.906999][ T8633] wg2: entered allmulticast mode [ 229.066226][ T8635] FAULT_INJECTION: forcing a failure. [ 229.066226][ T8635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.090765][ T8638] validate_nla: 4 callbacks suppressed [ 229.090781][ T8638] netlink: 'syz.0.798': attribute type 28 has an invalid length. [ 229.115107][ T8635] CPU: 1 PID: 8635 Comm: syz.3.799 Not tainted syzkaller #0 [ 229.122529][ T8635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.132612][ T8635] Call Trace: [ 229.135927][ T8635] [ 229.138883][ T8635] dump_stack_lvl+0x18c/0x250 [ 229.143621][ T8635] ? show_regs_print_info+0x20/0x20 [ 229.148843][ T8635] ? load_image+0x400/0x400 [ 229.153377][ T8635] ? __might_fault+0xaa/0x120 [ 229.158096][ T8635] ? __lock_acquire+0x7d40/0x7d40 [ 229.163188][ T8635] should_fail_ex+0x39d/0x4d0 [ 229.167902][ T8635] _copy_from_user+0x2f/0xe0 [ 229.172520][ T8635] generic_map_update_batch+0x59a/0x810 [ 229.178185][ T8635] ? rcu_read_unlock+0xa0/0xa0 [ 229.182998][ T8635] ? __fdget+0x180/0x210 [ 229.187299][ T8635] ? rcu_read_unlock+0xa0/0xa0 [ 229.192083][ T8635] bpf_map_do_batch+0x3d7/0x610 [ 229.196961][ T8635] __sys_bpf+0x381/0x890 [ 229.201233][ T8635] ? bpf_link_show_fdinfo+0x390/0x390 [ 229.206635][ T8635] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 229.212821][ T8635] __x64_sys_bpf+0x7c/0x90 [ 229.217266][ T8635] do_syscall_64+0x55/0xa0 [ 229.221705][ T8635] ? clear_bhb_loop+0x40/0x90 [ 229.226421][ T8635] ? clear_bhb_loop+0x40/0x90 [ 229.231139][ T8635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.237055][ T8635] RIP: 0033:0x7f7803f9aeb9 [ 229.241500][ T8635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.261125][ T8635] RSP: 002b:00007f7804e6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.269559][ T8635] RAX: ffffffffffffffda RBX: 00007f7804215fa0 RCX: 00007f7803f9aeb9 [ 229.277552][ T8635] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 229.285558][ T8635] RBP: 00007f7804e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 229.293558][ T8635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.301570][ T8635] R13: 00007f7804216038 R14: 00007f7804215fa0 R15: 00007ffc54a77e78 [ 229.309597][ T8635] [ 229.329410][ T8638] netlink: 'syz.0.798': attribute type 29 has an invalid length. [ 229.347951][ T8638] netlink: 132 bytes leftover after parsing attributes in process `syz.0.798'. [ 229.446079][ T55] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 229.573272][ T8652] netlink: 'syz.2.803': attribute type 39 has an invalid length. [ 229.697382][ T8656] netlink: 60 bytes leftover after parsing attributes in process `syz.0.805'. [ 229.841506][ T8664] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.807'. [ 230.023378][ T8670] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.808'. [ 230.055919][ T8671] tap0: tun_chr_ioctl cmd 1074025677 [ 230.066862][ T8671] tap0: linktype set to 778 [ 230.373281][ T8673] FAULT_INJECTION: forcing a failure. [ 230.373281][ T8673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.409266][ T8673] CPU: 1 PID: 8673 Comm: syz.2.810 Not tainted syzkaller #0 [ 230.416640][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.426748][ T8673] Call Trace: [ 230.430070][ T8673] [ 230.433051][ T8673] dump_stack_lvl+0x18c/0x250 [ 230.437907][ T8673] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 230.444126][ T8673] ? show_regs_print_info+0x20/0x20 [ 230.449383][ T8673] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 230.455617][ T8673] should_fail_ex+0x39d/0x4d0 [ 230.460359][ T8673] _copy_from_user+0x2f/0xe0 [ 230.465010][ T8673] generic_map_update_batch+0x54b/0x810 [ 230.470620][ T8673] ? rcu_read_unlock+0xa0/0xa0 [ 230.475432][ T8673] ? __fdget+0x180/0x210 [ 230.479728][ T8673] ? rcu_read_unlock+0xa0/0xa0 [ 230.484531][ T8673] bpf_map_do_batch+0x3d7/0x610 [ 230.489461][ T8673] __sys_bpf+0x381/0x890 [ 230.493753][ T8673] ? bpf_link_show_fdinfo+0x390/0x390 [ 230.499198][ T8673] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 230.505467][ T8673] __x64_sys_bpf+0x7c/0x90 [ 230.509948][ T8673] do_syscall_64+0x55/0xa0 [ 230.514417][ T8673] ? clear_bhb_loop+0x40/0x90 [ 230.519145][ T8673] ? clear_bhb_loop+0x40/0x90 [ 230.523900][ T8673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.529842][ T8673] RIP: 0033:0x7fa98899aeb9 [ 230.534302][ T8673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.553960][ T8673] RSP: 002b:00007fa986bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.562427][ T8673] RAX: ffffffffffffffda RBX: 00007fa988c15fa0 RCX: 00007fa98899aeb9 [ 230.570451][ T8673] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 230.578473][ T8673] RBP: 00007fa986bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 230.586490][ T8673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.594506][ T8673] R13: 00007fa988c16038 R14: 00007fa988c15fa0 R15: 00007ffd6fb91018 [ 230.595171][ T8675] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.811'. [ 230.602520][ T8673] [ 230.646851][ T8675] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.811'. [ 230.675818][ T8676] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.811'. [ 230.695345][ T8675] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.811'. [ 230.717880][ T8675] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.811'. [ 230.914602][ T5778] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 234.484408][ T8710] netlink: 14 bytes leftover after parsing attributes in process `syz.3.820'. [ 234.588890][ T8713] FAULT_INJECTION: forcing a failure. [ 234.588890][ T8713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.622020][ T8713] CPU: 0 PID: 8713 Comm: syz.2.822 Not tainted syzkaller #0 [ 234.629473][ T8713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.639572][ T8713] Call Trace: [ 234.642892][ T8713] [ 234.645862][ T8713] dump_stack_lvl+0x18c/0x250 [ 234.650576][ T8713] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.656758][ T8713] ? show_regs_print_info+0x20/0x20 [ 234.662013][ T8713] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.668230][ T8713] should_fail_ex+0x39d/0x4d0 [ 234.672964][ T8713] _copy_from_user+0x2f/0xe0 [ 234.677618][ T8713] generic_map_update_batch+0x59a/0x810 [ 234.683232][ T8713] ? rcu_read_unlock+0xa0/0xa0 [ 234.688063][ T8713] ? __fdget+0x180/0x210 [ 234.692389][ T8713] ? rcu_read_unlock+0xa0/0xa0 [ 234.697206][ T8713] bpf_map_do_batch+0x3d7/0x610 [ 234.702132][ T8713] __sys_bpf+0x381/0x890 [ 234.706426][ T8713] ? bpf_link_show_fdinfo+0x390/0x390 [ 234.711884][ T8713] ? lock_chain_count+0x20/0x20 [ 234.716796][ T8713] __x64_sys_bpf+0x7c/0x90 [ 234.721259][ T8713] do_syscall_64+0x55/0xa0 [ 234.725731][ T8713] ? clear_bhb_loop+0x40/0x90 [ 234.730460][ T8713] ? clear_bhb_loop+0x40/0x90 [ 234.735184][ T8713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.741124][ T8713] RIP: 0033:0x7fa98899aeb9 [ 234.745602][ T8713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.765265][ T8713] RSP: 002b:00007fa986bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.773735][ T8713] RAX: ffffffffffffffda RBX: 00007fa988c15fa0 RCX: 00007fa98899aeb9 [ 234.781752][ T8713] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 234.789772][ T8713] RBP: 00007fa986bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 234.797793][ T8713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.805812][ T8713] R13: 00007fa988c16038 R14: 00007fa988c15fa0 R15: 00007ffd6fb91018 [ 234.813856][ T8713] [ 235.079349][ T8723] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.824'. [ 250.533303][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.544607][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.554299][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.564813][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.576407][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 250.584178][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.768637][ T5778] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 250.794311][ T5778] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 250.807241][ T5778] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 250.816944][ T5778] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 250.825611][ T5778] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 250.833184][ T5778] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 251.721989][ T8731] chnl_net:caif_netlink_parms(): no params data found [ 252.068868][ T8735] chnl_net:caif_netlink_parms(): no params data found [ 252.260872][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.298763][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.324517][ T8731] bridge_slave_0: entered allmulticast mode [ 252.332472][ T8731] bridge_slave_0: entered promiscuous mode [ 252.472933][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.505329][ T5085] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.521411][ T5085] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.529754][ T5085] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.539729][ T5085] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.548492][ T5085] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 252.556003][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.563303][ T8731] bridge_slave_1: entered allmulticast mode [ 252.570585][ T5085] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 252.634014][ T8731] bridge_slave_1: entered promiscuous mode [ 252.656066][ T5778] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 252.674229][ T5778] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 252.682497][ T5778] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 252.691818][ T5778] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 252.699218][ T5778] Bluetooth: hci4: command tx timeout [ 252.706954][ T5778] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 252.714970][ T5775] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 252.897677][ T8731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.940221][ T5775] Bluetooth: hci5: command tx timeout [ 252.952831][ T8731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.064229][ T8735] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.079285][ T8735] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.092421][ T8735] bridge_slave_0: entered allmulticast mode [ 253.109191][ T8735] bridge_slave_0: entered promiscuous mode [ 253.143418][ T8731] team0: Port device team_slave_0 added [ 253.165604][ T8731] team0: Port device team_slave_1 added [ 253.171913][ T8735] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.186074][ T8735] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.193345][ T8735] bridge_slave_1: entered allmulticast mode [ 253.213266][ T8735] bridge_slave_1: entered promiscuous mode [ 253.357660][ T8735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.375296][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.382419][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.419832][ T8731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.459765][ T8735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.493531][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.507344][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.545934][ T8731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.637880][ T8735] team0: Port device team_slave_0 added [ 253.669112][ T8735] team0: Port device team_slave_1 added [ 254.614248][ T5775] Bluetooth: hci6: command tx timeout [ 254.774330][ T5085] Bluetooth: hci4: command tx timeout [ 254.781520][ T5775] Bluetooth: hci7: command tx timeout [ 255.014280][ T5775] Bluetooth: hci5: command tx timeout [ 256.694167][ T5775] Bluetooth: hci6: command tx timeout [ 256.854174][ T5085] Bluetooth: hci4: command tx timeout [ 256.860739][ T5775] Bluetooth: hci7: command tx timeout [ 257.094318][ T5775] Bluetooth: hci5: command tx timeout [ 258.774136][ T5775] Bluetooth: hci6: command tx timeout [ 258.934201][ T5775] Bluetooth: hci7: command tx timeout [ 258.939885][ T5775] Bluetooth: hci4: command tx timeout [ 259.174335][ T5775] Bluetooth: hci5: command tx timeout [ 260.854097][ T5775] Bluetooth: hci6: command tx timeout [ 261.014160][ T5775] Bluetooth: hci7: command tx timeout [ 275.257866][ T2966] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 311.829563][ T5085] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 311.839091][ T5085] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 311.847394][ T5085] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 311.856452][ T5085] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 311.865693][ T5085] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 311.890256][ T5085] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 312.004552][ T5085] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 312.013407][ T5085] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 312.022146][ T5085] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 312.030919][ T5085] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 312.041348][ T5085] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 312.056729][ T5085] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 313.095783][ T5085] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 313.106885][ T5085] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 313.115282][ T5085] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 313.124163][ T5085] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 313.133775][ T5085] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 313.141484][ T5085] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 313.231311][ T5085] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 313.247622][ T5085] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 313.266174][ T5085] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 313.279747][ T5085] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 313.290690][ T5085] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 313.303142][ T5085] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 313.974290][ T5085] Bluetooth: hci8: command tx timeout [ 314.135825][ T5085] Bluetooth: hci9: command tx timeout [ 315.174600][ T5085] Bluetooth: hci10: command tx timeout [ 315.414120][ T5085] Bluetooth: hci11: command tx timeout [ 316.054058][ T5085] Bluetooth: hci8: command tx timeout [ 316.217848][ T5085] Bluetooth: hci9: command tx timeout [ 317.254532][ T5085] Bluetooth: hci10: command tx timeout [ 317.495692][ T5085] Bluetooth: hci11: command tx timeout [ 318.134053][ T5085] Bluetooth: hci8: command tx timeout [ 318.297077][ T5085] Bluetooth: hci9: command tx timeout [ 319.334357][ T5085] Bluetooth: hci10: command tx timeout [ 319.574132][ T5085] Bluetooth: hci11: command tx timeout [ 320.214143][ T5085] Bluetooth: hci8: command tx timeout [ 320.376115][ T5085] Bluetooth: hci9: command tx timeout [ 320.613007][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.619574][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.414395][ T5085] Bluetooth: hci10: command tx timeout [ 321.654074][ T5085] Bluetooth: hci11: command tx timeout [ 340.063910][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 340.070701][ C0] rcu: 0-....: (9853 ticks this GP) idle=c67c/1/0x4000000000000000 softirq=24013/24013 fqs=4970 [ 340.082114][ C0] rcu: hardirqs softirqs csw/system [ 340.088618][ C0] rcu: number: 1262173 0 0 [ 340.095057][ C0] rcu: cputime: 16251 36238 64 ==> 52500(ms) [ 340.102899][ C0] rcu: (t=10501 jiffies g=27145 q=2291 ncpus=2) [ 340.109270][ C0] CPU: 0 PID: 8717 Comm: syz.2.824 Not tainted syzkaller #0 [ 340.116582][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 340.126667][ C0] RIP: 0010:lock_release+0x594/0x8c0 [ 340.131983][ C0] Code: 00 00 00 f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 2f 04 f8 75 70 f7 44 24 50 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 43 c7 44 2f 08 00 00 00 00 65 48 8b 04 25 [ 340.151628][ C0] RSP: 0018:ffffc90000007180 EFLAGS: 00000206 [ 340.157726][ C0] RAX: 0000000000000001 RBX: afbc8245d8d1a74e RCX: 1dce4769e0057b00 [ 340.165720][ C0] RDX: 0000000000000004 RSI: ffffffff8acada80 RDI: ffffffff8b1c81e0 [ 340.173730][ C0] RBP: ffffc90000007298 R08: ffffffff8e8adfaf R09: 1ffffffff1d15bf5 [ 340.181806][ C0] R10: dffffc0000000000 R11: fffffbfff1d15bf6 R12: ffff888018bc0b80 [ 340.189807][ C0] R13: dffffc0000000000 R14: ffff888018bc0ad0 R15: 1ffff92000000e3c [ 340.197802][ C0] FS: 00007fa986bf66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 340.206752][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.213363][ C0] CR2: 0000000100000000 CR3: 000000002bbb0000 CR4: 00000000003506f0 [ 340.221373][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 340.229367][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 340.237358][ C0] Call Trace: [ 340.240657][ C0] [ 340.243537][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 340.248772][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 340.253825][ C0] ? deref_stack_reg+0x1bd/0x240 [ 340.258804][ C0] is_bpf_text_address+0x28f/0x2a0 [ 340.263940][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 340.269156][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.275253][ C0] kernel_text_address+0xa0/0xd0 [ 340.280223][ C0] __kernel_text_address+0xd/0x30 [ 340.285283][ C0] unwind_get_return_address+0x5d/0xc0 [ 340.290759][ C0] ? stack_trace_save+0x100/0x100 [ 340.295888][ C0] arch_stack_walk+0x11d/0x190 [ 340.300692][ C0] stack_trace_save+0xaa/0x100 [ 340.305479][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 340.310658][ C0] kasan_set_track+0x4e/0x70 [ 340.315280][ C0] ? kasan_set_track+0x4e/0x70 [ 340.320058][ C0] ? __kasan_kmalloc+0x8f/0xa0 [ 340.324857][ C0] ? ref_tracker_alloc+0x162/0x4c0 [ 340.330098][ C0] ? dst_init+0xd9/0x460 [ 340.334446][ C0] ? dst_alloc+0x12e/0x170 [ 340.338892][ C0] ? icmp6_dst_alloc+0x7b/0x400 [ 340.343768][ C0] ? ndisc_send_skb+0x44e/0x14f0 [ 340.348741][ C0] ? addrconf_rs_timer+0x2d5/0x630 [ 340.354070][ C0] ? call_timer_fn+0x189/0x540 [ 340.358859][ C0] ? __run_timers+0x542/0x800 [ 340.363559][ C0] ? run_timer_softirq+0x67/0xf0 [ 340.368536][ C0] ? handle_softirqs+0x280/0x820 [ 340.373505][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 340.378309][ C0] ? irq_exit_rcu+0x9/0x20 [ 340.382746][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 340.388573][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 340.394750][ C0] ? generic_exec_single+0x481/0x4f0 [ 340.400060][ C0] ? smp_call_function_single+0x36d/0x5a0 [ 340.405799][ C0] ? perf_install_in_context+0x5be/0x920 [ 340.411539][ C0] ? __se_sys_perf_event_open+0x1836/0x1c50 [ 340.417450][ C0] ? do_syscall_64+0x55/0xa0 [ 340.422085][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.428192][ C0] ? rcu_is_watching+0x15/0xb0 [ 340.432999][ C0] __kasan_kmalloc+0x8f/0xa0 [ 340.437611][ C0] ref_tracker_alloc+0x162/0x4c0 [ 340.442605][ C0] ? ref_tracker_dir_exit+0x500/0x500 [ 340.448016][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 340.453060][ C0] ? slab_post_alloc_hook+0x8a/0x4b0 [ 340.458384][ C0] dst_init+0xd9/0x460 [ 340.462475][ C0] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 340.468154][ C0] dst_alloc+0x12e/0x170 [ 340.472423][ C0] icmp6_dst_alloc+0x7b/0x400 [ 340.477126][ C0] ndisc_send_skb+0x44e/0x14f0 [ 340.481909][ C0] ? ndisc_send_skb+0x1f5/0x14f0 [ 340.486869][ C0] ? ndisc_alloc_skb+0x18c/0x450 [ 340.491833][ C0] ? ndisc_mc_map+0x680/0x680 [ 340.496535][ C0] ? __build_skb_around+0x255/0x3d0 [ 340.501802][ C0] addrconf_rs_timer+0x2d5/0x630 [ 340.506771][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 340.512865][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 340.518874][ C0] call_timer_fn+0x189/0x540 [ 340.523482][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 340.529577][ C0] ? call_timer_fn+0xd2/0x540 [ 340.534306][ C0] ? __run_timers+0x800/0x800 [ 340.539015][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 340.545139][ C0] __run_timers+0x542/0x800 [ 340.549699][ C0] ? detach_timer+0x2b0/0x2b0 [ 340.554461][ C0] ? lock_chain_count+0x20/0x20 [ 340.559405][ C0] run_timer_softirq+0x67/0xf0 [ 340.564246][ C0] handle_softirqs+0x280/0x820 [ 340.569059][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 340.573860][ C0] ? do_softirq+0x1a0/0x1a0 [ 340.578400][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 340.583642][ C0] __irq_exit_rcu+0xd3/0x190 [ 340.588276][ C0] ? irq_exit_rcu+0x20/0x20 [ 340.592814][ C0] irq_exit_rcu+0x9/0x20 [ 340.597081][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 340.602739][ C0] [ 340.605689][ C0] [ 340.608645][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 340.614653][ C0] RIP: 0010:generic_exec_single+0x481/0x4f0 [ 340.620571][ C0] Code: 75 11 e8 02 02 0b 00 48 85 db 75 16 e8 f8 01 0b 00 eb 15 e8 f1 01 0b 00 e8 0c 29 08 09 48 85 db 74 ea e8 e2 01 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 340.640206][ C0] RSP: 0018:ffffc9001040fa00 EFLAGS: 00000246 [ 340.646298][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 340.654299][ C0] RDX: ffffc9000db4b000 RSI: 0000000000001c65 RDI: 0000000000001c66 [ 340.662296][ C0] RBP: ffffc9001040fad0 R08: ffffffff911bf5ff R09: 1ffffffff2237ebf [ 340.670287][ C0] R10: dffffc0000000000 R11: fffffbfff2237ec0 R12: 1ffff92002081f44 [ 340.678277][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92002081f65 [ 340.686290][ C0] ? event_function+0x300/0x300 [ 340.691170][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 340.696918][ C0] ? percpu_counter_add_batch+0x1f1/0x2a0 [ 340.702668][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 340.707890][ C0] ? smp_call_function_single+0xb0/0x5a0 [ 340.713548][ C0] smp_call_function_single+0x36d/0x5a0 [ 340.719131][ C0] ? event_function+0x300/0x300 [ 340.724011][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 340.730194][ C0] ? event_function+0x300/0x300 [ 340.735079][ C0] perf_install_in_context+0x5be/0x920 [ 340.740568][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 340.746577][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 340.751828][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 340.757061][ C0] ? perf_event__header_size+0x165/0x220 [ 340.762731][ C0] __se_sys_perf_event_open+0x1836/0x1c50 [ 340.768485][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 340.774164][ C0] ? lock_chain_count+0x20/0x20 [ 340.779059][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 340.784284][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 340.789941][ C0] do_syscall_64+0x55/0xa0 [ 340.794387][ C0] ? clear_bhb_loop+0x40/0x90 [ 340.799084][ C0] ? clear_bhb_loop+0x40/0x90 [ 340.803798][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.809718][ C0] RIP: 0033:0x7fa98899aeb9 [ 340.814156][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.833780][ C0] RSP: 002b:00007fa986bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 340.842214][ C0] RAX: ffffffffffffffda RBX: 00007fa988c15fa0 RCX: 00007fa98899aeb9 [ 340.850212][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 340.858205][ C0] RBP: 00007fa988a08c1f R08: 000000000000000a R09: 0000000000000000 [ 340.866195][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 340.874184][ C0] R13: 00007fa988c16038 R14: 00007fa988c15fa0 R15: 00007ffd6fb91018 [ 340.882186][ C0]