last executing test programs: 10.362441502s ago: executing program 3 (id=5468): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="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", @ANYBLOB="1d139ea82bf95c2a5474d4a0d51d574c1e80c08468a1d0ffcaa5beda1d1e735401cddf133954ac1858a89458dfcc08fd460fd4095d862fefdd7b67249f863619a16200c3158d5c0f1d41e7e236a48ed97a83105f991550cd52d04afc5d4236e333c523630f55e3335db9f3008ffba8c0caf3b9cea8aa798e4b36b3cd801c9bb3c666bd5a41ea3c09e7583961eb53a6c5948b47502e0d4b2959fb217a2ea66fd7e4f5eaa78c31c69a1c9d5f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe6}, 0x94) 10.249346825s ago: executing program 0 (id=5470): r0 = perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x9, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0xc8, 0x6, 0x0, 0x3, 0x0, 0x400, 0x0, 0xffffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4800) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000040) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) 10.245718525s ago: executing program 3 (id=5471): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0xfffffffc, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000001280)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xfffffffe}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044080) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 10.220636876s ago: executing program 2 (id=5472): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000007a006111140000000000040000000000000095000000000000001abe5201462857a3db65e291772afa2114f5963ed660b870d974d2252829f8290f8d02e3b0096b3df3e6585851cb7efb50a982b66e14716ffe33a164c3d1ff5798fc4bd6d3e5ab096e9ad743eb00"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76}, 0x48) 9.735973657s ago: executing program 2 (id=5473): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@ptr={0xf, 0x0, 0x0, 0x2, 0x4}, @int={0x8, 0x0, 0x0, 0x1, 0x12, 0x6f, 0x0, 0x5, 0x1}, @fwd={0xf}]}, {0x0, [0x5f, 0x4ccdefe7beb0f506]}}, &(0x7f0000000b40)=""/45, 0x44, 0x2d, 0x1, 0x6, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c40)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x2, 0x0, 0x2, 0x7, 0x0, 0x50}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x1, 0x6, 0x4, 0x3, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x6, 0x3, 0x7, 0xfffffffffffffff8, 0x10}]}, &(0x7f00000009c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000bc0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x0, 0x7, 0x8, 0x61}, 0x10, r1, 0x0, 0x0, &(0x7f0000000c80), 0x0, 0x10, 0x4}, 0x94) r2 = perf_event_open(&(0x7f0000000e00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xa, 0x8000000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 9.589102992s ago: executing program 0 (id=5474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x4, 0x8, 0x9, 0x0, 0xfeffffff}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.216927141s ago: executing program 0 (id=5475): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x3, 0x1c, &(0x7f00000015c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r0, @ANYBLOB="00fe000000000000b702000014000000b703000000000000850000009e000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000017080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98f0ff0000000056080000000000008500000005000000b70000000000000095"], &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.993800136s ago: executing program 0 (id=5476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x1, &(0x7f0000000580)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x1}, 0x10, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f0000000240)) close(0xffffffffffffffff) r1 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="03000000040000000a00"/19, @ANYRESDEC=r0, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000001000000000000000000000000000756008bffc0635f98238ed725c8defea792079a45f73e0b306"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70000000000850000000c000000b70000001d0c8cd310af0896bc77108fce4d9000000000851000000300000018000000000000000000000000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000007f0000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000500), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="560a00000000000061110c000000ff00000000950000000000000053f45b4c8d38432194ed34627b5437ec7e44b5b9d4859954f38ae6154cc3c50e488c4e00"/75], &(0x7f0000000000)='GPL\x00'}, 0x80) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r6 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10004000) sendmsg$kcm(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0xc040) r7 = socket$kcm(0x2b, 0x1, 0x0) close(r7) r8 = socket$kcm(0xa, 0x5, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000800)=ANY=[@ANYRES64=r2, @ANYRESOCT=r4, @ANYRES64=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.728975402s ago: executing program 3 (id=5477): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x10, 0x5, &(0x7f0000000480)=@framed={{0x45, 0xa, 0x0, 0x0, 0xe0000001, 0x61, 0x11, 0x38}, [@initr0]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xfffffffe}, 0x90) 8.568837867s ago: executing program 3 (id=5478): socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x590f}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb0ff}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.160598932s ago: executing program 2 (id=5479): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="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", @ANYBLOB="1d139ea82bf95c2a5474d4a0d51d574c1e80c08468a1d0ffcaa5beda1d1e735401cddf133954ac1858a89458dfcc08fd460fd4095d862fefdd7b67249f863619a16200c3158d5c0f1d41e7e236a48ed97a83105f991550cd52d04afc5d4236e333c523630f55e3335db9f3008ffba8c0caf3b9cea8aa798e4b36b3cd801c9bb3c666bd5a41ea3c09e7583961eb53a6c5948b47502e0d4b2959fb217a2ea66fd7e4f5eaa78c31c69a1c9d5f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe6}, 0x94) 7.115410894s ago: executing program 0 (id=5480): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x36, 0x0, &(0x7f00000006c0)="52540012345652540012345786dd6000000000003b4000000000ffffffffffff80fe0000000100000000000000000000000001000001", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 7.062928455s ago: executing program 3 (id=5482): r0 = socket$kcm(0x2, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x2, 0x1, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000fcfffbffffff63695f4983356a1c7f4a65dc1459d51ab95babbf8905d851f6abd956683eb39aca04af50cb06252b8cc48f0502d4fbb5c3f09d4508f0bb7705904e732e2ee0d123b6fb9798852778a9e608ff7ee3b03bb5eb8afc710a590b240678225fbc2f78ccbef16cf12bb649b71732801dedbed9b1ec2327725b4cec9fd14589f2704495", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f00000009c0)="bc0a4703c8b57f000000d03a36f2", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000040), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000200)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000300)="27031c00590414001200002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000380)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000440)="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", 0x1a1}, {&(0x7f0000000600)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000180)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000700)=[{&(0x7f00000001c0)="e0", 0x1}], 0x1}, 0x20000000) 6.934330368s ago: executing program 2 (id=5483): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000003009500"/32], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000003009500"/32], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 6.807821801s ago: executing program 0 (id=5485): close(0xffffffffffffffff) socket$kcm(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xffffffff, 0x67f8}, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = gettid() perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0xe, 0x4, 0x9, 0x5, 0x0, 0x7, 0x10004, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff0bf8, 0x4, @perf_config_ext={0x38a, 0x5}, 0x4, 0xfffffffffffffffa, 0x9, 0x2, 0xffffffffffff1604, 0xb314, 0x3, 0x0, 0x1ff, 0x0, 0x80000000}, r1, 0xe, r0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x538, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000980)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xd, 0x7}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000a80)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0xaf70f6d0ee4308fc) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000ac0), 0x4) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000b00)={r4}, 0x8) socket$kcm(0x21, 0x2, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[], 0x0, 0x44, 0x0, 0x0, 0x80}, 0x28) bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r5, 0x4) sendmsg$kcm(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000002a00)}, 0x14040800) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x248b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x3fff7ffa}, 0x0, 0x5aeb, 0x43a1bd76, 0x7, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080002080000000000d0ec191b283ff493000000400000bd94114b9e6f36352052a7b5e8030165fa32ccd9678ffa9b643375ac4ad91e662562c38a8b23fe660a8bd7297b76f3e2f66879974853786ce647a973a093732712b8fc682b10f8483ffa355dbdc3066057788a016a16911f08c37f72af8cd3940488"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r8, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x96, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x6}, {@private=0xa010102, 0x3}, {@rand_addr=0x64010100, 0x1}, {@multicast1, 0x4a02}]}, @timestamp_prespec={0x44, 0x34, 0xf5, 0x3, 0x7, [{@empty, 0x2}, {@loopback, 0x5}, {@loopback, 0x57}, {@multicast2, 0xff}, {@multicast2, 0x3}, {@private=0xa010101, 0x9}]}, @noop, @ssrr={0x89, 0xf, 0x80, [@broadcast, @rand_addr=0x64010100, @loopback]}, @cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x2, 0xa, "fc7de7320d5b27e6"}, {0x0, 0xf, "dbe118f42127438f3f3bd1cec2"}, {0x6, 0x2}, {0x2, 0x2}, {0x1, 0xb, "617ff755a581994d65"}, {0x1, 0xf, "734c439989d7c56b9a2cf4ffc4"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x150}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0x0, r6, 0x0, 0x0, 0x0}, 0x30) socket$kcm(0x1e, 0x5, 0x0) socket$kcm(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 6.807247631s ago: executing program 3 (id=5486): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xb}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000580), 0x4) sendmsg$sock(r1, 0x0, 0x20044041) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000500850000000300000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000800)={r3}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000400000000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x5828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xc, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000001f00)={0x0, 0x0, 0x0}, 0x4000055) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) socket$kcm(0x10, 0x2, 0x0) 6.736642063s ago: executing program 2 (id=5487): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002440)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deda8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1b2ef4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f53d709959d7bd2f5cc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36fb0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4a7bce853249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8012392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccaca8154b8601213ee2296d2a27798c8ce2a305c0c8d1acf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c04701563816514f868a2b95319abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdff7f0000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977e37df17a321d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b5acd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2c6aea1d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb89243a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a01040000a35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92de6b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250054f84b0fccd4f810bce02322b489b79aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58f0225f3390343c12aa51810134d4b8123de6516737be55c06d9cdcfb1e20280e14700eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b19128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dceedb2ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e1000000b81b6790062e61cd000000acb1b33c38ddd302e28e8e30b5c180d38bb1cd770195799c541a7481f5d34ca75d74b3833d399371c8f09f6745d0e43d46f7c82ff1b7d6c04467d083fc708348f35ae9bb9b78f2984a0ee55647d4c4a63c4f438fdec726e7d8228eaff2374b2300b9c35f4259e3452b2f53ee114bb8a6c0ea6fc89a55fef6673013d7dd4597660865423e978dd6e41e201bb3a584d6fe6f24e290613b677271603c558ee2021be29c4a06a057b2acc5bfd34898afac0d839079bbcb3acd43532563367ac8ae6c4379fb5fdcdab5fe55e1a3a521284209871216817338073cbc4ec9903725b788a25b5a6003b579b8f0e20d78be3d885557292971e65f4f1daefad2c5ccbca608b46406ffff25610c3cbae9f56cd47678f482e2c1f7cdfc5ce2a67c1545c1192f2ac3990f9c850788401469fbca801e73cd9efbcc6e44b2f414cdff5c49e706d699b5bfa75526f700c4e32611b826b2787f99532c02262a9c60e4b07a09377c38747c7f05e38b6db5d8cc625873af8fc5a7d362334c509f6bb4e36e1c9e08949679e0ed9f84e668588b9f1b21069bd5ffe263b1e6860c305d1faca4d6e4680ab6a6d491ecc97a904cc9c643e489d1a5f7d8a359bea93ba2d95bd3341d98d4918118e5f7b6fa6f603274c561f63ee337ad8d0017bbd1e17b5ce71a18c8572810029fe5d0ac2a661d8b346240c46f0223981cd53c067b65b579c144a4c918504888132a19a6a1702afb8646cf8fbcc5a4f5fbc072388f7bd7955138fc4919d78cfc5f2fd7dccf3a20896045698d2b6770773412029db69c099fda38be5f37adc5bd48f7f11b5632bb63fa18718c1a24e0bad8d21f51f6bf3fbd3786a00c4e8f8536f6af28c9b8cd210bc0e82112f9943fc0fa81c08e456983cbdd8d08053c128e122da8b7583cb1ae4b505407721cf0b8779c45a82629828520af8e2600dc75ec3521378b54c307a59e"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x38}, 0x48) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xd, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0xc808, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x15, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x14, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{}, &(0x7f0000000a40), &(0x7f0000000a80)=r6}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r1, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0], 0x0, 0x5f, &(0x7f0000000cc0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xd, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000001100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001140)={{r8, 0xffffffffffffffff}, &(0x7f0000001180), &(0x7f0000001500)=r9}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001540)={r10, &(0x7f0000001580)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001680)={0x6, 0x15, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000e00a00000000000180000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0000009500000000000000186100000b0000000000000042000000852000000500000018000000ffffff7f0000000001000100851000ea015b000000bf91000000000000b702000000000000850000008400000000000000009500000000000000ba50a80934de739de1b0a9236d07e8798fd592be6330e56d0afbcfc3b2be2a79813b43"], &(0x7f0000000b80)='syzkaller\x00', 0x3, 0x22, &(0x7f0000000bc0)=""/34, 0x40f00, 0x20, '\x00', r7, 0x25, r2, 0x8, &(0x7f0000000f00)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000f40)={0x1, 0xd, 0x800, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000015c0)=[0xffffffffffffffff, r10], &(0x7f0000001600)=[{0x5, 0x5, 0x7, 0xc}, {0x3, 0x3, 0xf, 0xb}, {0x5, 0x4, 0xa}, {0x2, 0x1, 0xc}, {0x3, 0x4, 0x2, 0x3}], 0x10, 0x80000001}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000006c0)=r4, 0x4) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x80000001, 0x5, 0xd, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x9, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="0f02000039000511d25a80648c63940d0324fc600b003540280009", 0x1b}], 0x1}, 0xe000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="120000000a0000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r12}, &(0x7f0000000780), &(0x7f00000007c0)=r11}, 0x20) r13 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r13, &(0x7f0000000340)=ANY=[@ANYBLOB="33fe00006a"], 0xfe33) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500242f09880bd320d98a61a90057e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22) 6.560079397s ago: executing program 1 (id=5488): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@ptr={0xf, 0x0, 0x0, 0x2, 0x4}, @int={0x8, 0x0, 0x0, 0x1, 0x12, 0x6f, 0x0, 0x5, 0x1}, @fwd={0xf}]}, {0x0, [0x5f, 0x4ccdefe7beb0f506]}}, &(0x7f0000000b40)=""/45, 0x44, 0x2d, 0x1, 0x6, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c40)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x2, 0x0, 0x2, 0x7, 0x0, 0x50}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x1, 0x6, 0x4, 0x3, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x6, 0x3, 0x7, 0xfffffffffffffff8, 0x10}]}, &(0x7f00000009c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000bc0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x0, 0x7, 0x8, 0x61}, 0x10, r1, 0x0, 0x0, &(0x7f0000000c80), 0x0, 0x10, 0x4}, 0x94) r2 = perf_event_open(&(0x7f0000000e00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xa, 0x8000000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 5.512193154s ago: executing program 2 (id=5489): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x1, &(0x7f0000000580)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x1}, 0x10, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f0000000240)) close(0xffffffffffffffff) r1 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="03000000040000000a00"/19, @ANYRESDEC=r0, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000001000000000000000000000000000756008bffc0635f98238ed725c8defea792079a45f73e0b306"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70000000000850000000c000000b70000001d0c8cd310af0896bc77108fce4d9000000000851000000300000018000000000000000000000000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000007f0000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000500), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="560a00000000000061110c000000ff00000000950000000000000053f45b4c8d38432194ed34627b5437ec7e44b5b9d4859954f38ae6154cc3c50e488c4e00"/75], &(0x7f0000000000)='GPL\x00'}, 0x80) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r6 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10004000) sendmsg$kcm(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0xc040) r7 = socket$kcm(0x2b, 0x1, 0x0) close(r7) r8 = socket$kcm(0xa, 0x5, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000800)=ANY=[@ANYRES64=r2, @ANYRESOCT=r4, @ANYRES64=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.2889794s ago: executing program 1 (id=5490): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000e30f000000272002000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30020000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) 284.298513ms ago: executing program 1 (id=5491): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="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", @ANYBLOB="1d139ea82bf95c2a5474d4a0d51d574c1e80c08468a1d0ffcaa5beda1d1e735401cddf133954ac1858a89458dfcc08fd460fd4095d862fefdd7b67249f863619a16200c3158d5c0f1d41e7e236a48ed97a83105f991550cd52d04afc5d4236e333c523630f55e3335db9f3008ffba8c0caf3b9cea8aa798e4b36b3cd801c9bb3c666bd5a41ea3c09e7583961eb53a6c5948b47502e0d4b2959fb217a2ea66fd7e4f5eaa78c31c69a1c9d5f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe6}, 0x94) 210.795795ms ago: executing program 1 (id=5492): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000001b000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 131.260697ms ago: executing program 1 (id=5493): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000007c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0xf, &(0x7f00000008c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x1b}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0xe00}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=5494): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x105121, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1000000001, 0xffffffffffffffff, 0x8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) r2 = socket$kcm(0x10, 0x3, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x114905, 0x6, 0x9, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f0000000140)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000000480)=[{&(0x7f00000005c0)="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", 0xffa0}, {&(0x7f0000002680)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000026c0)=[@ip_tos_int={{0x18, 0x29, 0x37, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r6 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r6, &(0x7f00000003c0)={&(0x7f0000000400)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001680)="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", 0x1000}, {&(0x7f00000015c0)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001600)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x11, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0xff00) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) kernel console output (not intermixed with test programs): py_from_user+0x2f/0xe0 [ 889.175022][T17702] generic_map_update_batch+0x58c/0x800 [ 889.182574][T17702] ? rcu_read_unlock+0xa0/0xa0 [ 889.188280][T17702] ? __fdget+0x180/0x210 [ 889.193383][T17702] ? rcu_read_unlock+0xa0/0xa0 [ 889.200331][T17702] bpf_map_do_batch+0x3f2/0x600 [ 889.206126][T17702] ? bpf_lsm_xfrm_policy_lookup+0x10/0x10 [ 889.213034][T17702] __sys_bpf+0x381/0x890 [ 889.219268][T17702] ? bpf_link_show_fdinfo+0x560/0x560 [ 889.227330][T17702] ? lock_chain_count+0x20/0x20 [ 889.233553][T17702] __x64_sys_bpf+0x7c/0x90 [ 889.239750][T17702] do_syscall_64+0x55/0xb0 [ 889.245893][T17702] ? clear_bhb_loop+0x40/0x90 [ 889.252044][T17702] ? clear_bhb_loop+0x40/0x90 [ 889.256873][T17702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 889.263650][T17702] RIP: 0033:0x7f6fdf59e2d9 [ 889.268495][T17702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.290084][T17702] RSP: 002b:00007f6fe04b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 889.299613][T17702] RAX: ffffffffffffffda RBX: 00007f6fdf825fa0 RCX: 00007f6fdf59e2d9 [ 889.308000][T17702] RDX: 0000000000000038 RSI: 00002000000011c0 RDI: 000000000000001a [ 889.316127][T17702] RBP: 00007f6fe04b8090 R08: 0000000000000000 R09: 0000000000000000 [ 889.324510][T17702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 889.332709][T17702] R13: 00007f6fdf826038 R14: 00007f6fdf825fa0 R15: 00007ffd8928ba98 [ 889.340749][T17702] [ 889.510779][T17716] netlink: 'syz.0.3876': attribute type 3 has an invalid length. [ 889.534211][T17716] netlink: 199628 bytes leftover after parsing attributes in process `syz.0.3876'. [ 889.870311][T17725] syzkaller0: entered promiscuous mode [ 889.881398][T17725] syzkaller0: entered allmulticast mode [ 890.925850][T17749] netlink: 'syz.1.3888': attribute type 3 has an invalid length. [ 890.936338][T17749] netlink: 199628 bytes leftover after parsing attributes in process `syz.1.3888'. [ 893.314417][T17763] netlink: 'syz.2.3892': attribute type 1 has an invalid length. [ 893.328566][T17763] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3892'. [ 893.705761][T17776] netlink: 'syz.2.3897': attribute type 3 has an invalid length. [ 893.713758][T17776] netlink: 199628 bytes leftover after parsing attributes in process `syz.2.3897'. [ 893.977408][T17781] syzkaller0: entered promiscuous mode [ 893.983346][T17781] syzkaller0: entered allmulticast mode [ 896.906671][T17800] netlink: 'syz.1.3906': attribute type 3 has an invalid length. [ 896.918823][T17800] netlink: 198884 bytes leftover after parsing attributes in process `syz.1.3906'. [ 897.621340][T17819] syzkaller0: entered promiscuous mode [ 897.627179][T17819] syzkaller0: entered allmulticast mode [ 897.747379][T17823] netlink: 'syz.0.3916': attribute type 3 has an invalid length. [ 897.759643][T17823] netlink: 198884 bytes leftover after parsing attributes in process `syz.0.3916'. [ 901.463451][T17851] netlink: 'syz.2.3925': attribute type 3 has an invalid length. [ 901.494114][T17851] netlink: 198884 bytes leftover after parsing attributes in process `syz.2.3925'. [ 901.787865][T17859] syzkaller0: entered promiscuous mode [ 901.793971][T17859] syzkaller0: entered allmulticast mode [ 904.771908][T17884] netlink: 'syz.1.3937': attribute type 10 has an invalid length. [ 904.910678][T17888] netlink: 'syz.3.3938': attribute type 3 has an invalid length. [ 904.934957][T17888] netlink: 154916 bytes leftover after parsing attributes in process `syz.3.3938'. [ 905.858671][T17908] netlink: 'syz.0.3949': attribute type 3 has an invalid length. [ 905.883809][T17908] netlink: 154916 bytes leftover after parsing attributes in process `syz.0.3949'. [ 906.310796][T17917] syzkaller0: entered promiscuous mode [ 906.322503][T17917] syzkaller0: entered allmulticast mode [ 906.731505][T17934] netlink: 'syz.1.3959': attribute type 3 has an invalid length. [ 906.749813][T17934] netlink: 154916 bytes leftover after parsing attributes in process `syz.1.3959'. [ 907.134953][T17947] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3962'. [ 907.145329][T17948] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3962'. [ 910.521306][T17969] netlink: 'syz.2.3970': attribute type 3 has an invalid length. [ 910.550109][T17969] netlink: 154916 bytes leftover after parsing attributes in process `syz.2.3970'. [ 910.672296][T17971] syzkaller0: entered promiscuous mode [ 910.701647][T17971] syzkaller0: entered allmulticast mode [ 913.372635][T17989] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3976'. [ 913.591600][T18003] netlink: 'syz.2.3982': attribute type 3 has an invalid length. [ 913.620406][T18003] netlink: 154916 bytes leftover after parsing attributes in process `syz.2.3982'. [ 914.246172][T18025] syzkaller0: entered promiscuous mode [ 914.252718][T18025] syzkaller0: entered allmulticast mode [ 914.596700][T18034] netlink: 'syz.1.3995': attribute type 3 has an invalid length. [ 914.644448][T18034] netlink: 154916 bytes leftover after parsing attributes in process `syz.1.3995'. [ 917.335828][T18051] netlink: 'syz.3.3999': attribute type 22 has an invalid length. [ 917.355514][T18051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3999'. [ 917.609949][T18068] netlink: 'syz.3.4004': attribute type 3 has an invalid length. [ 917.621869][T18068] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4004'. [ 918.257386][T18077] syzkaller0: entered promiscuous mode [ 918.263003][T18077] syzkaller0: entered allmulticast mode [ 918.705842][T18095] netlink: 'syz.3.4014': attribute type 3 has an invalid length. [ 918.718022][T18095] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4014'. [ 920.923990][T18087] netlink: 'syz.2.4011': attribute type 10 has an invalid length. [ 921.433507][T18122] netlink: 'syz.0.4023': attribute type 3 has an invalid length. [ 921.442276][T18122] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4023'. [ 922.223545][T18138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4030'. [ 922.324219][T18138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4030'. [ 922.454689][T18138] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4030'. [ 923.291339][T18148] netlink: 'syz.3.4034': attribute type 3 has an invalid length. [ 923.351059][T18148] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4034'. [ 924.018489][T18172] netlink: 'syz.3.4044': attribute type 3 has an invalid length. [ 924.034877][T18172] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4044'. [ 924.359850][T18184] netlink: 142528 bytes leftover after parsing attributes in process `syz.0.4050'. [ 924.554150][T18192] netlink: 'syz.1.4052': attribute type 4 has an invalid length. [ 924.831457][T18201] netlink: 'syz.2.4057': attribute type 3 has an invalid length. [ 924.841072][T18201] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4057'. [ 925.027802][T18205] syzkaller0: entered promiscuous mode [ 925.033896][T18205] syzkaller0: entered allmulticast mode [ 925.699824][T18220] netlink: 'syz.2.4062': attribute type 29 has an invalid length. [ 927.769150][T18220] netlink: 'syz.2.4062': attribute type 29 has an invalid length. [ 927.925505][T18238] netlink: 'syz.1.4067': attribute type 3 has an invalid length. [ 927.953379][T18238] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4067'. [ 928.843774][T18255] netlink: 13951 bytes leftover after parsing attributes in process `syz.2.4073'. [ 929.500731][T18261] netlink: 'syz.1.4075': attribute type 9 has an invalid length. [ 929.509178][T18261] netlink: 'syz.1.4075': attribute type 23 has an invalid length. [ 929.532224][T18261] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.4075'. [ 930.087489][T18266] syzkaller0: entered promiscuous mode [ 930.098311][T18266] syzkaller0: entered allmulticast mode [ 930.306713][T18272] netlink: 'syz.2.4078': attribute type 3 has an invalid length. [ 930.325389][T18272] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4078'. [ 932.460665][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.468437][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.708310][T18277] netlink: 'syz.3.4080': attribute type 10 has an invalid length. [ 932.723015][T18277] team0: Device hsr_slave_0 failed to register rx_handler [ 933.053817][T18298] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4084'. [ 933.090296][T18300] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4084'. [ 933.104825][T18298] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4084'. [ 933.135281][T18294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4084'. [ 933.157810][T18295] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4084'. [ 933.840573][T18311] netlink: 'syz.2.4089': attribute type 3 has an invalid length. [ 933.857176][T18311] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4089'. [ 934.097111][T18317] syzkaller0: entered promiscuous mode [ 934.104248][T18317] syzkaller0: entered allmulticast mode [ 934.259293][T18325] netlink: 'syz.2.4094': attribute type 9 has an invalid length. [ 934.275338][T18325] netlink: 'syz.2.4094': attribute type 23 has an invalid length. [ 934.299968][T18325] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.4094'. [ 937.812579][T18360] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4106'. [ 938.314752][T18374] syzkaller0: entered promiscuous mode [ 938.321042][T18374] syzkaller0: entered allmulticast mode [ 938.674694][T18386] netlink: 'syz.2.4115': attribute type 3 has an invalid length. [ 938.742656][T18386] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4115'. [ 938.772380][T18389] netlink: 'syz.1.4114': attribute type 3 has an invalid length. [ 938.792337][T18389] netlink: 'syz.1.4114': attribute type 6 has an invalid length. [ 938.806879][T18389] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.4114'. [ 939.370204][T18402] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.4118'. [ 941.837833][T18418] netlink: 'syz.1.4125': attribute type 3 has an invalid length. [ 941.847057][T18418] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4125'. [ 942.264464][T18428] @0Ù: renamed from bond_slave_1 (while UP) [ 942.507367][T18434] syzkaller0: entered promiscuous mode [ 942.513384][T18434] syzkaller0: entered allmulticast mode [ 945.598186][T18459] netlink: 'syz.1.4141': attribute type 10 has an invalid length. [ 945.609320][T18459] veth1_vlan: left allmulticast mode [ 945.743222][T18469] syzkaller0: entered promiscuous mode [ 945.751144][T18469] syzkaller0: entered allmulticast mode [ 945.844676][T18480] FAULT_INJECTION: forcing a failure. [ 945.844676][T18480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.894095][T18480] CPU: 1 PID: 18480 Comm: syz.0.4147 Not tainted syzkaller #0 [ 945.902197][T18480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 945.912711][T18480] Call Trace: [ 945.917113][T18480] [ 945.920476][T18480] dump_stack_lvl+0x18c/0x250 [ 945.925922][T18480] ? show_regs_print_info+0x20/0x20 [ 945.931612][T18480] ? load_image+0x420/0x420 [ 945.937662][T18480] ? __might_fault+0xaa/0x120 [ 945.944465][T18480] ? __lock_acquire+0x7eb0/0x7eb0 [ 945.950411][T18480] ? bpf_percpu_hash_update+0x2b/0x200 [ 945.957261][T18480] ? __virt_addr_valid+0x10c/0x380 [ 945.963659][T18480] should_fail_ex+0x394/0x4c0 [ 945.969235][T18480] _copy_from_user+0x2f/0xe0 [ 945.976416][T18480] generic_map_update_batch+0x58c/0x800 [ 945.983561][T18480] ? rcu_read_unlock+0xa0/0xa0 [ 945.988721][T18480] ? __fdget+0x180/0x210 [ 945.994047][T18480] ? rcu_read_unlock+0xa0/0xa0 [ 946.002871][T18480] bpf_map_do_batch+0x3f2/0x600 [ 946.010156][T18480] ? bpf_lsm_xfrm_policy_lookup+0x10/0x10 [ 946.017280][T18480] __sys_bpf+0x381/0x890 [ 946.022771][T18480] ? bpf_link_show_fdinfo+0x560/0x560 [ 946.029448][T18480] ? lock_chain_count+0x20/0x20 [ 946.035149][T18480] __x64_sys_bpf+0x7c/0x90 [ 946.040650][T18480] do_syscall_64+0x55/0xb0 [ 946.046121][T18480] ? clear_bhb_loop+0x40/0x90 [ 946.051750][T18480] ? clear_bhb_loop+0x40/0x90 [ 946.058519][T18480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 946.065523][T18480] RIP: 0033:0x7f5a6979e2d9 [ 946.070212][T18480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.093251][T18480] RSP: 002b:00007f5a6a597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 946.101697][T18480] RAX: ffffffffffffffda RBX: 00007f5a69a25fa0 RCX: 00007f5a6979e2d9 [ 946.109900][T18480] RDX: 0000000000000038 RSI: 00002000000011c0 RDI: 000000000000001a [ 946.117906][T18480] RBP: 00007f5a6a597090 R08: 0000000000000000 R09: 0000000000000000 [ 946.126161][T18480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 946.134351][T18480] R13: 00007f5a69a26038 R14: 00007f5a69a25fa0 R15: 00007ffc4ed081c8 [ 946.142829][T18480] [ 950.012799][T18476] bond0: (slave bridge_slave_1): Releasing backup interface [ 950.026522][T18476] bridge_slave_1 (unregistering): left promiscuous mode [ 950.036603][T18476] bridge_slave_1 (unregistering): left allmulticast mode [ 950.303163][T18509] delete_channel: no stack [ 950.320329][T18509] delete_channel: no stack [ 950.429853][T18511] syzkaller0: entered promiscuous mode [ 950.454675][T18511] syzkaller0: entered allmulticast mode [ 950.937428][T18526] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.4162'. [ 953.818559][T18526] syzkaller0: entered promiscuous mode [ 953.824442][T18526] syzkaller0: entered allmulticast mode [ 956.081133][T18535] netlink: 'syz.0.4157': attribute type 10 has an invalid length. [ 956.322270][T18548] netlink: 'syz.0.4167': attribute type 10 has an invalid length. [ 956.618520][T18562] netlink: 'syz.3.4174': attribute type 21 has an invalid length. [ 956.629613][T18562] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.4174'. [ 956.745357][T18564] syzkaller0: entered promiscuous mode [ 956.754231][T18564] syzkaller0: entered allmulticast mode [ 956.812720][T18567] netlink: 'syz.3.4176': attribute type 10 has an invalid length. [ 959.901532][T18610] netlink: 'syz.3.4185': attribute type 4 has an invalid length. [ 959.998462][T18612] netlink: 'syz.1.4187': attribute type 10 has an invalid length. [ 960.211721][T18622] netlink: 'syz.2.4189': attribute type 30 has an invalid length. [ 960.354029][T18622] netlink: 'syz.2.4189': attribute type 21 has an invalid length. [ 960.378745][T18622] netlink: 'syz.2.4189': attribute type 10 has an invalid length. [ 960.388117][T18622] netlink: 'syz.2.4189': attribute type 12 has an invalid length. [ 960.404897][T18622] netlink: 12226 bytes leftover after parsing attributes in process `syz.2.4189'. [ 961.297586][T18652] syzkaller0: entered promiscuous mode [ 961.325670][T18652] syzkaller0: entered allmulticast mode [ 962.473300][T18679] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.4211'. [ 965.209466][T18735] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4238'. [ 965.217984][T18733] syzkaller0: entered promiscuous mode [ 965.234995][T18733] syzkaller0: entered allmulticast mode [ 966.111864][T18753] FAULT_INJECTION: forcing a failure. [ 966.111864][T18753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.131205][T18753] CPU: 1 PID: 18753 Comm: syz.3.4245 Not tainted syzkaller #0 [ 966.138992][T18753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 966.149897][T18753] Call Trace: [ 966.153591][T18753] [ 966.156756][T18753] dump_stack_lvl+0x18c/0x250 [ 966.161799][T18753] ? show_regs_print_info+0x20/0x20 [ 966.167064][T18753] ? load_image+0x420/0x420 [ 966.172067][T18753] ? __might_fault+0xaa/0x120 [ 966.177033][T18753] ? __lock_acquire+0x7eb0/0x7eb0 [ 966.183263][T18753] should_fail_ex+0x394/0x4c0 [ 966.188971][T18753] _copy_to_user+0x2f/0xa0 [ 966.193711][T18753] bpf_test_finish+0x19f/0x650 [ 966.198944][T18753] ? dst_hold+0x70/0x70 [ 966.203854][T18753] ? convert_skb_to___skb+0x420/0x420 [ 966.210114][T18753] ? bpf_test_init+0x119/0x140 [ 966.215473][T18753] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 966.221170][T18753] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 966.229141][T18753] ? dev_put+0x80/0x80 [ 966.234047][T18753] ? dev_put+0x80/0x80 [ 966.238202][T18753] bpf_prog_test_run+0x31f/0x390 [ 966.243402][T18753] __sys_bpf+0x49d/0x890 [ 966.247870][T18753] ? read_tsc+0x9/0x20 [ 966.252067][T18753] ? bpf_link_show_fdinfo+0x560/0x560 [ 966.257505][T18753] ? lock_chain_count+0x20/0x20 [ 966.262389][T18753] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 966.268599][T18753] __x64_sys_bpf+0x7c/0x90 [ 966.273412][T18753] do_syscall_64+0x55/0xb0 [ 966.277850][T18753] ? clear_bhb_loop+0x40/0x90 [ 966.282563][T18753] ? clear_bhb_loop+0x40/0x90 [ 966.287365][T18753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 966.293298][T18753] RIP: 0033:0x7f6fdf59e2d9 [ 966.297783][T18753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.318188][T18753] RSP: 002b:00007f6fe04b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 966.326745][T18753] RAX: ffffffffffffffda RBX: 00007f6fdf825fa0 RCX: 00007f6fdf59e2d9 [ 966.334905][T18753] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 966.343001][T18753] RBP: 00007f6fe04b8090 R08: 0000000000000000 R09: 0000000000000000 [ 966.351531][T18753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.359923][T18753] R13: 00007f6fdf826038 R14: 00007f6fdf825fa0 R15: 00007ffd8928ba98 [ 966.368479][T18753] [ 966.405007][T18761] validate_nla: 7 callbacks suppressed [ 966.405027][T18761] netlink: 'syz.2.4248': attribute type 29 has an invalid length. [ 968.721919][T18761] netlink: 'syz.2.4248': attribute type 29 has an invalid length. [ 969.369811][T18801] syzkaller0: entered promiscuous mode [ 969.386037][T18801] syzkaller0: entered allmulticast mode [ 969.848323][T18814] netlink: 21 bytes leftover after parsing attributes in process `syz.2.4269'. [ 969.862002][T18814] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 972.517372][T18813] netlink: 'syz.2.4269': attribute type 21 has an invalid length. [ 973.002212][T18849] netlink: 12671 bytes leftover after parsing attributes in process `syz.2.4284'. [ 973.818995][T18878] syzkaller0: entered promiscuous mode [ 973.833433][T18878] syzkaller0: entered allmulticast mode [ 977.814072][T18951] syzkaller0: entered promiscuous mode [ 977.844324][T18951] syzkaller0: entered allmulticast mode [ 981.383206][T18972] netlink: 'syz.2.4333': attribute type 10 has an invalid length. [ 981.567269][T19028] netlink: 4079 bytes leftover after parsing attributes in process `syz.3.4357'. [ 982.021361][T19040] netlink: 'syz.1.4363': attribute type 10 has an invalid length. [ 982.155880][T19044] syzkaller0: entered promiscuous mode [ 982.164613][T19044] syzkaller0: entered allmulticast mode [ 982.845584][T19065] FAULT_INJECTION: forcing a failure. [ 982.845584][T19065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 982.871324][T19065] CPU: 0 PID: 19065 Comm: syz.1.4374 Not tainted syzkaller #0 [ 982.879931][T19065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 982.891352][T19065] Call Trace: [ 982.895550][T19065] [ 982.899112][T19065] dump_stack_lvl+0x18c/0x250 [ 982.903958][T19065] ? show_regs_print_info+0x20/0x20 [ 982.909518][T19065] ? load_image+0x420/0x420 [ 982.915589][T19065] ? __might_fault+0xaa/0x120 [ 982.920782][T19065] ? __lock_acquire+0x7eb0/0x7eb0 [ 982.926045][T19065] ? bpf_percpu_hash_update+0x2b/0x200 [ 982.931837][T19065] ? __virt_addr_valid+0x10c/0x380 [ 982.937045][T19065] should_fail_ex+0x394/0x4c0 [ 982.941875][T19065] _copy_from_user+0x2f/0xe0 [ 982.946515][T19065] generic_map_update_batch+0x53e/0x800 [ 982.952387][T19065] ? rcu_read_unlock+0xa0/0xa0 [ 982.957191][T19065] ? __fdget+0x180/0x210 [ 982.961473][T19065] ? rcu_read_unlock+0xa0/0xa0 [ 982.966355][T19065] bpf_map_do_batch+0x3f2/0x600 [ 982.971325][T19065] ? bpf_lsm_xfrm_policy_lookup+0x10/0x10 [ 982.977208][T19065] __sys_bpf+0x381/0x890 [ 982.981832][T19065] ? bpf_link_show_fdinfo+0x560/0x560 [ 982.988117][T19065] ? lock_chain_count+0x20/0x20 [ 982.993100][T19065] __x64_sys_bpf+0x7c/0x90 [ 982.997569][T19065] do_syscall_64+0x55/0xb0 [ 983.002134][T19065] ? clear_bhb_loop+0x40/0x90 [ 983.006872][T19065] ? clear_bhb_loop+0x40/0x90 [ 983.011778][T19065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 983.017886][T19065] RIP: 0033:0x7f938959e2d9 [ 983.022678][T19065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.042580][T19065] RSP: 002b:00007f938a3a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 983.051811][T19065] RAX: ffffffffffffffda RBX: 00007f9389825fa0 RCX: 00007f938959e2d9 [ 983.060027][T19065] RDX: 0000000000000038 RSI: 00002000000011c0 RDI: 000000000000001a [ 983.068050][T19065] RBP: 00007f938a3a4090 R08: 0000000000000000 R09: 0000000000000000 [ 983.076058][T19065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 983.084080][T19065] R13: 00007f9389826038 R14: 00007f9389825fa0 R15: 00007ffcbd011d28 [ 983.092573][T19065] [ 985.344061][T19109] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.4392'. [ 986.567843][T19109] netlink: 4612 bytes leftover after parsing attributes in process `syz.2.4392'. [ 986.577847][T19109] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4392'. [ 987.264459][T19131] FAULT_INJECTION: forcing a failure. [ 987.264459][T19131] name failslab, interval 1, probability 0, space 0, times 0 [ 987.295271][T19131] CPU: 0 PID: 19131 Comm: syz.2.4403 Not tainted syzkaller #0 [ 987.303081][T19131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 987.313203][T19131] Call Trace: [ 987.316550][T19131] [ 987.319515][T19131] dump_stack_lvl+0x18c/0x250 [ 987.324338][T19131] ? show_regs_print_info+0x20/0x20 [ 987.329760][T19131] ? load_image+0x420/0x420 [ 987.334336][T19131] ? __might_sleep+0xe0/0xe0 [ 987.339051][T19131] ? __lock_acquire+0x7eb0/0x7eb0 [ 987.344210][T19131] should_fail_ex+0x394/0x4c0 [ 987.348951][T19131] should_failslab+0x9/0x20 [ 987.353556][T19131] slab_pre_alloc_hook+0x59/0x300 [ 987.358643][T19131] kmem_cache_alloc_node+0x5e/0x310 [ 987.363871][T19131] ? __alloc_skb+0x103/0x2c0 [ 987.368504][T19131] __alloc_skb+0x103/0x2c0 [ 987.372959][T19131] alloc_skb_with_frags+0xcd/0x7a0 [ 987.378184][T19131] sock_alloc_send_pskb+0x883/0x9a0 [ 987.383515][T19131] ? sock_kzfree_s+0x50/0x50 [ 987.388162][T19131] tun_get_user+0xa44/0x3d30 [ 987.393075][T19131] ? aa_file_perm+0x3e3/0xee0 [ 987.397927][T19131] ? rcu_read_unlock+0xa0/0xa0 [ 987.402758][T19131] ? tun_get+0x1c/0x2e0 [ 987.407032][T19131] ? __lock_acquire+0x7eb0/0x7eb0 [ 987.412291][T19131] ? tun_get+0x1c/0x2e0 [ 987.416605][T19131] tun_chr_write_iter+0x119/0x200 [ 987.421760][T19131] vfs_write+0x474/0x9a0 [ 987.426048][T19131] ? file_end_write+0x250/0x250 [ 987.430967][T19131] ? __fget_files+0x3fc/0x460 [ 987.435883][T19131] ? __fdget_pos+0x1d8/0x330 [ 987.440789][T19131] ? ksys_write+0x74/0x260 [ 987.445260][T19131] ksys_write+0x151/0x260 [ 987.449729][T19131] ? __ia32_sys_read+0x90/0x90 [ 987.454634][T19131] ? lockdep_hardirqs_on+0x98/0x150 [ 987.459906][T19131] do_syscall_64+0x55/0xb0 [ 987.464371][T19131] ? clear_bhb_loop+0x40/0x90 [ 987.469106][T19131] ? clear_bhb_loop+0x40/0x90 [ 987.474021][T19131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 987.480433][T19131] RIP: 0033:0x7f0a2399e2d9 [ 987.485922][T19131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.506266][T19131] RSP: 002b:00007f0a247ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 987.514991][T19131] RAX: ffffffffffffffda RBX: 00007f0a23c25fa0 RCX: 00007f0a2399e2d9 [ 987.523170][T19131] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 987.531246][T19131] RBP: 00007f0a247ea090 R08: 0000000000000000 R09: 0000000000000000 [ 987.539231][T19131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.547219][T19131] R13: 00007f0a23c26038 R14: 00007f0a23c25fa0 R15: 00007ffd5c1e9f08 [ 987.555223][T19131] [ 987.679431][T19135] syzkaller0: entered promiscuous mode [ 987.688836][T19135] syzkaller0: entered allmulticast mode [ 990.844279][T19169] delete_channel: no stack [ 990.862326][T19169] delete_channel: no stack [ 991.607145][T19189] syzkaller0: entered promiscuous mode [ 991.613615][T19189] syzkaller0: entered allmulticast mode [ 993.897935][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.904389][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.746525][T19244] netlink: 'syz.1.4447': attribute type 2 has an invalid length. [ 995.244437][T19250] syzkaller0: entered promiscuous mode [ 995.298625][T19250] syzkaller0: entered allmulticast mode [ 998.232353][T19307] netlink: 'syz.3.4467': attribute type 4 has an invalid length. [ 998.242956][T19307] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4467'. [ 999.310526][T19300] netlink: 'syz.2.4464': attribute type 4 has an invalid length. [ 1000.398122][T19350] syzkaller0: entered promiscuous mode [ 1000.414141][T19350] syzkaller0: entered allmulticast mode [ 1000.582101][T19362] netlink: 'syz.1.4488': attribute type 3 has an invalid length. [ 1000.605360][T19362] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4488'. [ 1000.935402][T19367] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.4489'. [ 1004.427024][T19364] netlink: 'syz.1.4488': attribute type 39 has an invalid length. [ 1005.538677][T19409] syzkaller0: entered promiscuous mode [ 1005.544337][T19409] syzkaller0: entered allmulticast mode [ 1005.728263][T19419] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.4510'. [ 1009.441960][T19446] syzkaller0: entered promiscuous mode [ 1009.459330][T19446] syzkaller0: entered allmulticast mode [ 1010.078950][T19460] netlink: 'syz.3.4526': attribute type 29 has an invalid length. [ 1012.514993][T19460] netlink: 'syz.3.4526': attribute type 29 has an invalid length. [ 1014.283626][T19488] syzkaller0: entered promiscuous mode [ 1014.320149][T19488] syzkaller0: entered allmulticast mode [ 1019.523747][T19557] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4562'. [ 1021.375974][T19590] syzkaller0: entered promiscuous mode [ 1021.478076][T19590] syzkaller0: entered allmulticast mode [ 1021.699322][T19607] netlink: 'syz.0.4582': attribute type 3 has an invalid length. [ 1021.739797][T19607] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4582'. [ 1027.828493][T19645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4597'. [ 1028.636591][T19669] netlink: 'syz.3.4608': attribute type 10 has an invalid length. [ 1028.812086][T19671] syzkaller0: entered promiscuous mode [ 1028.833021][T19671] syzkaller0: entered allmulticast mode [ 1029.130845][T19690] FAULT_INJECTION: forcing a failure. [ 1029.130845][T19690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1029.159797][T19690] CPU: 0 PID: 19690 Comm: syz.3.4615 Not tainted syzkaller #0 [ 1029.167825][T19690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1029.178822][T19690] Call Trace: [ 1029.182403][T19690] [ 1029.185459][T19690] dump_stack_lvl+0x18c/0x250 [ 1029.191266][T19690] ? show_regs_print_info+0x20/0x20 [ 1029.196730][T19690] ? load_image+0x420/0x420 [ 1029.201551][T19690] ? __might_fault+0xaa/0x120 [ 1029.206335][T19690] ? __lock_acquire+0x7eb0/0x7eb0 [ 1029.211483][T19690] ? bpf_percpu_hash_update+0x2b/0x200 [ 1029.217003][T19690] ? __virt_addr_valid+0x10c/0x380 [ 1029.222276][T19690] should_fail_ex+0x394/0x4c0 [ 1029.227092][T19690] _copy_from_user+0x2f/0xe0 [ 1029.232937][T19690] generic_map_update_batch+0x58c/0x800 [ 1029.238896][T19690] ? rcu_read_unlock+0xa0/0xa0 [ 1029.244166][T19690] ? __fdget+0x180/0x210 [ 1029.248931][T19690] ? rcu_read_unlock+0xa0/0xa0 [ 1029.255770][T19690] bpf_map_do_batch+0x3f2/0x600 [ 1029.261678][T19690] ? bpf_lsm_xfrm_policy_lookup+0x10/0x10 [ 1029.267869][T19690] __sys_bpf+0x381/0x890 [ 1029.272973][T19690] ? bpf_link_show_fdinfo+0x560/0x560 [ 1029.280461][T19690] ? lock_chain_count+0x20/0x20 [ 1029.286294][T19690] __x64_sys_bpf+0x7c/0x90 [ 1029.291806][T19690] do_syscall_64+0x55/0xb0 [ 1029.296624][T19690] ? clear_bhb_loop+0x40/0x90 [ 1029.301368][T19690] ? clear_bhb_loop+0x40/0x90 [ 1029.306163][T19690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1029.312092][T19690] RIP: 0033:0x7f6fdf59e2d9 [ 1029.316904][T19690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.337436][T19690] RSP: 002b:00007f6fe04b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1029.346450][T19690] RAX: ffffffffffffffda RBX: 00007f6fdf825fa0 RCX: 00007f6fdf59e2d9 [ 1029.354452][T19690] RDX: 0000000000000038 RSI: 00002000000011c0 RDI: 000000000000001a [ 1029.362894][T19690] RBP: 00007f6fe04b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.370982][T19690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1029.379188][T19690] R13: 00007f6fdf826038 R14: 00007f6fdf825fa0 R15: 00007ffd8928ba98 [ 1029.387243][T19690] [ 1030.967924][T19724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1030.981754][T19724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1030.995191][T19724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1031.016704][T19724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1031.048153][T19724] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1031.065811][T19724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1032.662533][T13500] bond0: (slave syz_tun): Releasing backup interface [ 1032.672717][T13500] syz_tun (unregistering): left allmulticast mode [ 1033.009227][ T8586] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.128598][ T8586] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.178475][T19724] Bluetooth: hci1: command tx timeout [ 1033.329807][ T8586] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.521171][ T8586] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.592715][T19754] syzkaller0: entered promiscuous mode [ 1033.600635][T19754] syzkaller0: entered allmulticast mode [ 1033.647550][T19721] chnl_net:caif_netlink_parms(): no params data found [ 1035.254792][T19724] Bluetooth: hci1: command tx timeout [ 1036.548891][T19770] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4641'. [ 1036.846071][T19721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.854229][T19721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.863103][T19721] bridge_slave_0: entered allmulticast mode [ 1036.871950][T19721] bridge_slave_0: entered promiscuous mode [ 1037.112804][T19721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.134766][T19721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.142758][T19721] bridge_slave_1: entered allmulticast mode [ 1037.176575][T19721] bridge_slave_1: entered promiscuous mode [ 1037.258702][T19791] FAULT_INJECTION: forcing a failure. [ 1037.258702][T19791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1037.309861][T19791] CPU: 0 PID: 19791 Comm: syz.0.4645 Not tainted syzkaller #0 [ 1037.318028][T19791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1037.328926][T19791] Call Trace: [ 1037.332260][T19791] [ 1037.335230][T19791] dump_stack_lvl+0x18c/0x250 [ 1037.340477][T19791] ? show_regs_print_info+0x20/0x20 [ 1037.340930][T19724] Bluetooth: hci1: command tx timeout [ 1037.345874][T19791] ? load_image+0x420/0x420 [ 1037.345907][T19791] ? __might_fault+0xaa/0x120 [ 1037.345932][T19791] ? __lock_acquire+0x7eb0/0x7eb0 [ 1037.366046][T19791] should_fail_ex+0x394/0x4c0 [ 1037.370961][T19791] _copy_from_user+0x2f/0xe0 [ 1037.376223][T19791] ___sys_sendmsg+0x1c7/0x360 [ 1037.381393][T19791] ? get_pid_task+0x20/0x1e0 [ 1037.386136][T19791] ? __sys_sendmsg+0x2b0/0x2b0 [ 1037.391800][T19791] ? __lock_acquire+0x7eb0/0x7eb0 [ 1037.397632][T19791] __se_sys_sendmsg+0x1d0/0x2c0 [ 1037.404657][T19791] ? perf_trace_preemptirq_template+0x269/0x330 [ 1037.411655][T19791] ? __x64_sys_sendmsg+0x80/0x80 [ 1037.417641][T19791] ? lockdep_hardirqs_on+0x98/0x150 [ 1037.423415][T19791] do_syscall_64+0x55/0xb0 [ 1037.428095][T19791] ? clear_bhb_loop+0x40/0x90 [ 1037.433025][T19791] ? clear_bhb_loop+0x40/0x90 [ 1037.438094][T19791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1037.444317][T19791] RIP: 0033:0x7f5a6979e2d9 [ 1037.449033][T19791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.468881][T19791] RSP: 002b:00007f5a6a597028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1037.477675][T19791] RAX: ffffffffffffffda RBX: 00007f5a69a25fa0 RCX: 00007f5a6979e2d9 [ 1037.487088][T19791] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1037.495400][T19791] RBP: 00007f5a6a597090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.505349][T19791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.514179][T19791] R13: 00007f5a69a26038 R14: 00007f5a69a25fa0 R15: 00007ffc4ed081c8 [ 1037.522674][T19791] [ 1037.577974][T19721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1037.652383][T19721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1037.913258][T19807] netlink: 'syz.3.4650': attribute type 3 has an invalid length. [ 1037.917222][T19721] team0: Port device team_slave_0 added [ 1037.947294][T19807] netlink: 'syz.3.4650': attribute type 6 has an invalid length. [ 1037.979005][T19812] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.4651'. [ 1037.993094][T19807] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.4650'. [ 1038.030426][T19810] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.4651'. [ 1038.058404][T19721] team0: Port device team_slave_1 added [ 1038.240475][T19721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.269165][T19721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1038.337821][T19721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.577880][T19813] syzkaller0: entered promiscuous mode [ 1038.584181][T19813] syzkaller0: entered allmulticast mode [ 1038.592357][T19721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.603767][T19721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1038.640673][T19721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.172135][T19841] netlink: 'syz.3.4657': attribute type 3 has an invalid length. [ 1039.202792][T19841] netlink: 189132 bytes leftover after parsing attributes in process `syz.3.4657'. [ 1039.414755][T19724] Bluetooth: hci1: command tx timeout [ 1041.989844][T19721] hsr_slave_0: entered promiscuous mode [ 1041.997830][T19721] hsr_slave_1: entered promiscuous mode [ 1042.023294][T19721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1042.032841][T19721] Cannot create hsr debugfs directory [ 1042.463298][ T8586] hsr0: left allmulticast mode [ 1042.506420][ T8586] hsr_slave_0: left allmulticast mode [ 1042.525376][ T8586] hsr_slave_1: left allmulticast mode [ 1042.531296][ T8586] hsr0: left promiscuous mode [ 1042.550488][ T8586] nr0: port 1(hsr0) entered disabled state [ 1042.597352][ T8586] hsr_slave_0: left promiscuous mode [ 1042.618606][ T8586] hsr_slave_1: left promiscuous mode [ 1042.656457][ T8586] team0: left allmulticast mode [ 1042.662242][ T8586] team_slave_0: left allmulticast mode [ 1042.676862][ T8586] team_slave_1: left allmulticast mode [ 1042.695243][ T8586] bond0: left allmulticast mode [ 1042.709412][ T8586] bond_slave_0: left allmulticast mode [ 1042.725055][ T8586] @0Ù: left allmulticast mode [ 1042.737300][ T8586] batadv_slave_0: left allmulticast mode [ 1042.761324][ T8586] team0: left promiscuous mode [ 1042.798264][ T8586] team_slave_0: left promiscuous mode [ 1042.862219][ T8586] team_slave_1: left promiscuous mode [ 1042.890837][ T8586] bond0: left promiscuous mode [ 1042.912048][ T8586] bond_slave_0: left promiscuous mode [ 1042.928213][ T8586] @0Ù: left promiscuous mode [ 1042.945078][ T8586] batadv_slave_0: left promiscuous mode [ 1042.961980][ T8586] bridge0: port 2(team0) entered disabled state [ 1042.993163][ T8586] bridge_slave_0: left promiscuous mode [ 1043.011333][ T8586] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.138043][ T8586] veth0_macvtap: left promiscuous mode [ 1043.145361][ T8586] veth1_vlan: left promiscuous mode [ 1043.694082][ T8586] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1044.030264][ T8586] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1044.098784][ T8586] team0 (unregistering): Port device team_slave_1 removed [ 1044.153334][ T8586] team0 (unregistering): Port device team_slave_0 removed [ 1044.201651][ T8586] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 1044.252605][ T8586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1044.601884][ T8586] team0 (unregistering): Port device bond0 removed [ 1044.642921][ T8586] bond0 (unregistering): Released all slaves [ 1044.944103][T19896] syzkaller0: entered promiscuous mode [ 1044.953417][T19896] syzkaller0: entered allmulticast mode [ 1048.390237][T19933] delete_channel: no stack [ 1048.406728][T19933] delete_channel: no stack [ 1049.011341][T19721] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1049.053159][T19721] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1049.092531][T19721] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1049.223789][T19956] syzkaller0: entered promiscuous mode [ 1049.267564][T19956] syzkaller0: entered allmulticast mode [ 1049.296513][T19721] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1052.097835][T19973] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4692'. [ 1052.226792][T19721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.288527][T19721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.340680][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.348762][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.399966][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.409488][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.453781][T20013] syzkaller0: entered promiscuous mode [ 1053.474600][T20013] syzkaller0: entered allmulticast mode [ 1053.553375][T19721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1055.347417][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.358680][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.341591][T19721] veth0_vlan: entered promiscuous mode [ 1057.407544][T19721] veth1_vlan: entered promiscuous mode [ 1057.509279][T19721] veth0_macvtap: entered promiscuous mode [ 1057.528196][T19721] veth1_macvtap: entered promiscuous mode [ 1057.614819][T19721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.649987][T19721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.669311][T19721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.706961][T19721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.730724][T19721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.764854][T19721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.792473][T19721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.859041][T19721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.908247][T19721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.947601][T19721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.989202][T19721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.030286][T19721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.080782][T19721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.123822][T19721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1058.246325][T19721] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.279100][T19721] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.309908][T19721] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.354747][T19721] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.732026][T20078] syzkaller0: entered promiscuous mode [ 1058.747002][T20078] syzkaller0: entered allmulticast mode [ 1058.783927][T20066] IPv6: Can't replace route, no match found [ 1062.715857][ T8586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.729785][ T8586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.797342][T13429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.834754][T13429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.500447][T20151] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4737'. [ 1063.665642][T20155] syzkaller0: entered promiscuous mode [ 1063.677055][T20155] syzkaller0: entered allmulticast mode [ 1063.748527][T20164] netlink: 'syz.1.4741': attribute type 4 has an invalid length. [ 1063.959179][T20168] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4743'. [ 1064.030224][T20172] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4743'. [ 1065.172439][T20206] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.4756'. [ 1067.775622][T20194] netlink: 'syz.1.4753': attribute type 23 has an invalid length. [ 1068.388408][T20236] syzkaller0: entered promiscuous mode [ 1068.394431][T20236] syzkaller0: entered allmulticast mode [ 1068.592983][T20238] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4768'. [ 1068.605009][T20238] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4768'. [ 1071.834385][T20259] syzkaller0: entered promiscuous mode [ 1071.872100][T20259] syzkaller0: entered allmulticast mode [ 1072.616485][T20280] netlink: 'syz.3.4783': attribute type 29 has an invalid length. [ 1075.033542][T20280] netlink: 'syz.3.4783': attribute type 29 has an invalid length. [ 1075.116626][T20290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.268934][T20290] bridge_slave_1 (unregistering): left allmulticast mode [ 1075.278623][T20290] bridge_slave_1 (unregistering): left promiscuous mode [ 1075.290790][T20290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.826330][T20298] syzkaller0: entered promiscuous mode [ 1075.837957][T20298] syzkaller0: entered allmulticast mode [ 1079.154238][T20331] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4798'. [ 1079.635661][T20349] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.4804'. [ 1082.064940][T20411] delete_channel: no stack [ 1082.105444][T20411] delete_channel: no stack [ 1082.668590][T20428] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4835'. [ 1082.708383][T20428] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4835'. [ 1083.087747][T20445] delete_channel: no stack [ 1083.099712][T20445] delete_channel: no stack [ 1084.565311][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1084.580421][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1084.601856][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1084.637510][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1084.651957][ T5790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1084.667930][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1084.708348][T12872] bond0: (slave syz_tun): Releasing backup interface [ 1084.848491][ T8587] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.948933][ T8587] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.043304][ T8587] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.067616][T20473] chnl_net:caif_netlink_parms(): no params data found [ 1085.131977][ T8587] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.183064][T20473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.194750][T20473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.202669][T20473] bridge_slave_0: entered allmulticast mode [ 1085.210815][T20473] bridge_slave_0: entered promiscuous mode [ 1085.225776][T20473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.236763][T20473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.245480][T20473] bridge_slave_1: entered allmulticast mode [ 1085.253595][T20473] bridge_slave_1: entered promiscuous mode [ 1085.299453][T20473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.322827][T20473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.367675][T20473] team0: Port device team_slave_0 added [ 1085.414381][T20473] team0: Port device team_slave_1 added [ 1085.505107][T20473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.513675][T20473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.545796][T20473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.559260][T20473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.566941][T20473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.594821][T20473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.728508][T20473] hsr_slave_0: entered promiscuous mode [ 1085.737592][T20473] hsr_slave_1: entered promiscuous mode [ 1086.647324][T20473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1086.660764][T20473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1086.683519][T20473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1086.705928][T20473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1086.775815][ T5790] Bluetooth: hci4: command tx timeout [ 1086.943568][T20473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.998540][ T8587] hsr0: left allmulticast mode [ 1087.006599][ T8587] hsr_slave_0: left allmulticast mode [ 1087.012705][ T8587] hsr_slave_1: left allmulticast mode [ 1087.025054][ T8587] hsr0: left promiscuous mode [ 1087.032151][ T8587] nr0: port 1(hsr0) entered disabled state [ 1087.058577][ T8587] hsr_slave_0: left promiscuous mode [ 1087.073598][ T8587] hsr_slave_1: left promiscuous mode [ 1087.083686][ T8587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1087.099271][ T8587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.108396][ T8587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1087.117708][ T8587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.152646][ T8587] veth1_macvtap: left promiscuous mode [ 1087.159094][ T8587] veth0_macvtap: left promiscuous mode [ 1087.895168][ T8587] team0 (unregistering): Port device team_slave_1 removed [ 1087.967614][ T8587] team0 (unregistering): Port device team_slave_0 removed [ 1088.037006][ T8587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1088.099083][ T8587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1088.473215][ T8587] team0 (unregistering): Port device bond0 removed [ 1088.517527][ T8587] bond0 (unregistering): Released all slaves [ 1088.584140][T20473] 8021q: adding VLAN 0 to HW filter on device team0 [ 1088.598055][ T8586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.605993][ T8586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.647647][ T8586] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.658680][ T8586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.854703][ T5790] Bluetooth: hci4: command tx timeout [ 1088.997747][T20473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1089.052070][T20473] veth0_vlan: entered promiscuous mode [ 1089.065694][T20473] veth1_vlan: entered promiscuous mode [ 1089.103835][T20473] veth0_macvtap: entered promiscuous mode [ 1089.116460][T20473] veth1_macvtap: entered promiscuous mode [ 1089.140503][T20473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.152248][T20473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.163400][T20473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.175798][T20473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.187291][T20473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.200104][T20473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.213308][T20473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.234923][T20473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.249740][T20473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.273633][T20473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.286331][T20473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.298749][T20473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.309441][T20473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.321178][T20473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.338600][T20473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.347704][T20473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.356803][T20473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.367719][T20473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.444940][ T8586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.459653][ T8586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.488111][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.496873][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.030400][T20527] delete_channel: no stack [ 1090.066649][T20527] delete_channel: no stack [ 1090.514985][T20547] FAULT_INJECTION: forcing a failure. [ 1090.514985][T20547] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.564724][T20547] CPU: 1 PID: 20547 Comm: syz.0.4871 Not tainted syzkaller #0 [ 1090.572644][T20547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1090.583963][T20547] Call Trace: [ 1090.587292][T20547] [ 1090.590387][T20547] dump_stack_lvl+0x18c/0x250 [ 1090.595237][T20547] ? show_regs_print_info+0x20/0x20 [ 1090.600579][T20547] ? load_image+0x420/0x420 [ 1090.605665][T20547] ? __might_sleep+0xe0/0xe0 [ 1090.610328][T20547] ? __lock_acquire+0x7eb0/0x7eb0 [ 1090.615501][T20547] should_fail_ex+0x394/0x4c0 [ 1090.620781][T20547] should_failslab+0x9/0x20 [ 1090.625821][T20547] slab_pre_alloc_hook+0x59/0x300 [ 1090.631305][T20547] ? __get_vm_area_node+0x125/0x370 [ 1090.637072][T20547] __kmem_cache_alloc_node+0x53/0x250 [ 1090.642769][T20547] ? __get_vm_area_node+0x125/0x370 [ 1090.648726][T20547] kmalloc_node_trace+0x26/0xe0 [ 1090.653793][T20547] __get_vm_area_node+0x125/0x370 [ 1090.658934][T20547] __vmalloc_node_range+0x36f/0x1320 [ 1090.664276][T20547] ? netlink_sendmsg+0x602/0xbf0 [ 1090.669408][T20547] ? netlink_insert+0x1094/0x1390 [ 1090.675691][T20547] ? netlink_insert+0x2ba/0x1390 [ 1090.681115][T20547] ? free_vm_area+0x50/0x50 [ 1090.686663][T20547] ? netlink_sendmsg+0x602/0xbf0 [ 1090.691763][T20547] vmalloc+0x79/0x90 [ 1090.695780][T20547] ? netlink_sendmsg+0x602/0xbf0 [ 1090.701482][T20547] netlink_sendmsg+0x602/0xbf0 [ 1090.707873][T20547] ? netlink_getsockopt+0x590/0x590 [ 1090.713612][T20547] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1090.721195][T20547] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1090.728314][T20547] ? security_socket_sendmsg+0x80/0xa0 [ 1090.734828][T20547] ? netlink_getsockopt+0x590/0x590 [ 1090.740364][T20547] ____sys_sendmsg+0x61b/0x980 [ 1090.746274][T20547] ? __asan_memset+0x22/0x40 [ 1090.751546][T20547] ? __sys_sendmsg_sock+0x30/0x30 [ 1090.757411][T20547] ? __import_iovec+0x5f2/0x850 [ 1090.762775][T20547] ? import_iovec+0x73/0xa0 [ 1090.767998][T20547] ___sys_sendmsg+0x2a6/0x360 [ 1090.773102][T20547] ? get_pid_task+0x20/0x1e0 [ 1090.778380][T20547] ? __sys_sendmsg+0x2b0/0x2b0 [ 1090.784384][T20547] ? __lock_acquire+0x7eb0/0x7eb0 [ 1090.790084][T20547] __se_sys_sendmsg+0x1d0/0x2c0 [ 1090.795316][T20547] ? perf_trace_preemptirq_template+0x269/0x330 [ 1090.802237][T20547] ? __x64_sys_sendmsg+0x80/0x80 [ 1090.809534][T20547] ? lockdep_hardirqs_on+0x98/0x150 [ 1090.815731][T20547] do_syscall_64+0x55/0xb0 [ 1090.820299][T20547] ? clear_bhb_loop+0x40/0x90 [ 1090.825629][T20547] ? clear_bhb_loop+0x40/0x90 [ 1090.831335][T20547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1090.837367][T20547] RIP: 0033:0x7f87a4f9e2d9 [ 1090.841814][T20547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.861794][T20547] RSP: 002b:00007f87a5eb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1090.870325][T20547] RAX: ffffffffffffffda RBX: 00007f87a5225fa0 RCX: 00007f87a4f9e2d9 [ 1090.878693][T20547] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1090.886976][T20547] RBP: 00007f87a5eb2090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.895285][T20547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.903401][T20547] R13: 00007f87a5226038 R14: 00007f87a5225fa0 R15: 00007ffe2f1d6518 [ 1090.911891][T20547] [ 1090.935774][ T5790] Bluetooth: hci4: command tx timeout [ 1090.959292][T20547] syz.0.4871: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1091.012538][T20547] CPU: 0 PID: 20547 Comm: syz.0.4871 Not tainted syzkaller #0 [ 1091.022631][T20547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1091.034988][T20547] Call Trace: [ 1091.039102][T20547] [ 1091.042094][T20547] dump_stack_lvl+0x18c/0x250 [ 1091.047652][T20547] ? show_regs_print_info+0x20/0x20 [ 1091.053461][T20547] ? load_image+0x420/0x420 [ 1091.059108][T20547] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1091.066343][T20547] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1091.073793][T20547] warn_alloc+0x246/0x340 [ 1091.078995][T20547] ? __get_vm_area_node+0x125/0x370 [ 1091.084539][T20547] ? zone_watermark_ok_safe+0x230/0x230 [ 1091.091998][T20547] ? rcu_is_watching+0x15/0xb0 [ 1091.097201][T20547] ? __get_vm_area_node+0x356/0x370 [ 1091.102645][T20547] __vmalloc_node_range+0x394/0x1320 [ 1091.108651][T20547] ? netlink_insert+0x1094/0x1390 [ 1091.114554][T20547] ? netlink_insert+0x2ba/0x1390 [ 1091.121032][T20547] ? free_vm_area+0x50/0x50 [ 1091.127529][T20547] ? netlink_sendmsg+0x602/0xbf0 [ 1091.133512][T20547] vmalloc+0x79/0x90 [ 1091.138405][T20547] ? netlink_sendmsg+0x602/0xbf0 [ 1091.145059][T20547] netlink_sendmsg+0x602/0xbf0 [ 1091.151212][T20547] ? netlink_getsockopt+0x590/0x590 [ 1091.157253][T20547] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1091.162890][T20547] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1091.170287][T20547] ? security_socket_sendmsg+0x80/0xa0 [ 1091.179281][T20547] ? netlink_getsockopt+0x590/0x590 [ 1091.185156][T20547] ____sys_sendmsg+0x61b/0x980 [ 1091.190995][T20547] ? __asan_memset+0x22/0x40 [ 1091.200293][T20547] ? __sys_sendmsg_sock+0x30/0x30 [ 1091.207893][T20547] ? __import_iovec+0x5f2/0x850 [ 1091.214653][T20547] ? import_iovec+0x73/0xa0 [ 1091.220818][T20547] ___sys_sendmsg+0x2a6/0x360 [ 1091.226512][T20547] ? get_pid_task+0x20/0x1e0 [ 1091.234096][T20547] ? __sys_sendmsg+0x2b0/0x2b0 [ 1091.240339][T20547] ? __lock_acquire+0x7eb0/0x7eb0 [ 1091.247914][T20547] __se_sys_sendmsg+0x1d0/0x2c0 [ 1091.253054][T20547] ? perf_trace_preemptirq_template+0x269/0x330 [ 1091.261887][T20547] ? __x64_sys_sendmsg+0x80/0x80 [ 1091.268561][T20547] ? lockdep_hardirqs_on+0x98/0x150 [ 1091.274625][T20547] do_syscall_64+0x55/0xb0 [ 1091.281207][T20547] ? clear_bhb_loop+0x40/0x90 [ 1091.288549][T20547] ? clear_bhb_loop+0x40/0x90 [ 1091.295234][T20547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1091.301941][T20547] RIP: 0033:0x7f87a4f9e2d9 [ 1091.309548][T20547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.335199][T20547] RSP: 002b:00007f87a5eb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1091.348018][T20547] RAX: ffffffffffffffda RBX: 00007f87a5225fa0 RCX: 00007f87a4f9e2d9 [ 1091.356694][T20547] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1091.367228][T20547] RBP: 00007f87a5eb2090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.375861][T20547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1091.384315][T20547] R13: 00007f87a5226038 R14: 00007f87a5225fa0 R15: 00007ffe2f1d6518 [ 1091.394449][T20547] [ 1091.412627][T20559] netlink: 'syz.2.4876': attribute type 3 has an invalid length. [ 1091.480746][T20559] netlink: 'syz.2.4876': attribute type 6 has an invalid length. [ 1091.494252][T20559] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.4876'. [ 1091.582923][T20547] Mem-Info: [ 1091.586604][T20547] active_anon:7450 inactive_anon:0 isolated_anon:0 [ 1091.586604][T20547] active_file:18193 inactive_file:40335 isolated_file:0 [ 1091.586604][T20547] unevictable:768 dirty:133 writeback:0 [ 1091.586604][T20547] slab_reclaimable:10503 slab_unreclaimable:92645 [ 1091.586604][T20547] mapped:24581 shmem:1361 pagetables:537 [ 1091.586604][T20547] sec_pagetables:0 bounce:0 [ 1091.586604][T20547] kernel_misc_reclaimable:0 [ 1091.586604][T20547] free:1339858 free_pcp:11497 free_cma:0 [ 1091.645459][T20547] Node 0 active_anon:29800kB inactive_anon:0kB active_file:72772kB inactive_file:161140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98324kB dirty:532kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10032kB pagetables:2148kB sec_pagetables:0kB all_unreclaimable? no [ 1091.754538][T20547] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1091.839515][T20547] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1091.932640][T20547] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 1091.976405][T20547] Node 0 DMA32 free:1445132kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:30180kB inactive_anon:0kB active_file:72772kB inactive_file:160060kB unevictable:1536kB writepending:528kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:27116kB local_pcp:13404kB free_cma:0kB [ 1092.062853][T20547] lowmem_reserve[]: 0 0 1 1 1 [ 1092.071928][T20547] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:1080kB unevictable:0kB writepending:4kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1092.107426][T20547] lowmem_reserve[]: 0 0 0 0 0 [ 1092.113522][T20547] Node 1 Normal free:3898688kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16180kB local_pcp:10732kB free_cma:0kB [ 1092.147843][T20547] lowmem_reserve[]: 0 0 0 0 0 [ 1092.153228][T20547] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1092.179252][T20547] Node 0 DMA32: 1*4kB (U) 177*8kB (UM) 788*16kB (ME) 1126*32kB (UME) 530*64kB (UME) 186*128kB (UME) 89*256kB (UM) 24*512kB (UM) 24*1024kB (UME) 10*2048kB (UM) 307*4096kB (UM) = 1445388kB [ 1092.206293][T20547] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1092.223048][T20547] Node 1 Normal: 244*4kB (UME) 62*8kB (UME) 32*16kB (UME) 54*32kB (UME) 21*64kB (UE) 3*128kB (ME) 0*256kB 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3898688kB [ 1092.284511][T20547] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1092.314618][T20547] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1092.324120][T20547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1092.334153][T20547] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1092.394681][T20547] 59889 total pagecache pages [ 1092.414938][T20547] 0 pages in swap cache [ 1092.420663][T20547] Free swap = 124996kB [ 1092.427262][T20547] Total swap = 124996kB [ 1092.436787][T20547] 2097051 pages RAM [ 1092.444900][T20547] 0 pages HighMem/MovableOnly [ 1092.453403][T20547] 421118 pages reserved [ 1092.461867][T20547] 0 pages cma reserved [ 1093.015040][ T5790] Bluetooth: hci4: command tx timeout [ 1094.419410][T20618] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4898'. [ 1094.593977][T20627] netlink: 'syz.2.4902': attribute type 4 has an invalid length. [ 1094.861707][T20632] netlink: 763 bytes leftover after parsing attributes in process `syz.2.4904'. [ 1094.908451][T20632] netlink: 'syz.2.4904': attribute type 39 has an invalid length. [ 1094.925228][T20632] macvlan0: entered promiscuous mode [ 1094.938594][T20632] macvlan0: entered allmulticast mode [ 1094.944396][T20632] veth1_vlan: entered allmulticast mode [ 1095.893722][T20660] netlink: 'syz.2.4912': attribute type 29 has an invalid length. [ 1095.915326][T20660] netlink: 'syz.2.4912': attribute type 29 has an invalid length. [ 1097.317401][T20692] netlink: 'syz.2.4921': attribute type 64 has an invalid length. [ 1097.354968][T20692] netlink: 'syz.2.4921': attribute type 64 has an invalid length. [ 1097.393629][T20691] netlink: 'syz.2.4921': attribute type 64 has an invalid length. [ 1098.264665][T19724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1098.279344][T19724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1098.290104][T19724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1098.297947][T20707] netlink: 763 bytes leftover after parsing attributes in process `syz.0.4927'. [ 1098.314643][T19724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1098.323702][T19724] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1098.324095][T20708] netlink: 'syz.0.4927': attribute type 39 has an invalid length. [ 1098.357845][T19724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1098.448222][T20708] macvlan0: entered promiscuous mode [ 1098.476646][T20708] macvlan0: entered allmulticast mode [ 1098.482616][T20708] veth1_vlan: entered allmulticast mode [ 1098.593047][ T8587] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.774776][ T8587] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.881024][ T8587] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.117351][ T8587] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.243385][T20713] chnl_net:caif_netlink_parms(): no params data found [ 1099.726259][T20713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.747011][T20713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.755979][T20713] bridge_slave_0: entered allmulticast mode [ 1099.768056][T20713] bridge_slave_0: entered promiscuous mode [ 1099.778581][T20752] netlink: 763 bytes leftover after parsing attributes in process `syz.1.4940'. [ 1099.861837][T20756] netlink: 'syz.1.4940': attribute type 39 has an invalid length. [ 1099.873351][T20756] macvlan0: entered promiscuous mode [ 1099.889580][T20756] macvlan0: entered allmulticast mode [ 1099.898803][T20756] veth1_vlan: entered allmulticast mode [ 1099.918215][T20713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.946674][T20713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.975362][T20713] bridge_slave_1: entered allmulticast mode [ 1100.002135][T20713] bridge_slave_1: entered promiscuous mode [ 1100.164937][T20713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.224143][T20713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.454788][T19724] Bluetooth: hci2: command tx timeout [ 1100.558270][T20713] team0: Port device team_slave_0 added [ 1100.687119][T20713] team0: Port device team_slave_1 added [ 1100.742819][T19724] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1101.180832][T20713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.210310][T20713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.288426][T20713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.451104][T20713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.471141][T20713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.575253][T20713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.258853][T20713] hsr_slave_0: entered promiscuous mode [ 1102.296977][T20713] hsr_slave_1: entered promiscuous mode [ 1102.303628][T20713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1102.312494][T20713] Cannot create hsr debugfs directory [ 1102.463605][T20809] netlink: 'syz.2.4955': attribute type 10 has an invalid length. [ 1102.509626][T20810] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4954'. [ 1103.236043][T19724] Bluetooth: hci2: command tx timeout [ 1104.204252][ T8587] hsr0: left allmulticast mode [ 1104.213893][ T8587] hsr_slave_0: left allmulticast mode [ 1104.220574][ T8587] hsr_slave_1: left allmulticast mode [ 1104.226767][ T8587] hsr0: left promiscuous mode [ 1104.232016][ T8587] nr0: port 1(hsr0) entered disabled state [ 1104.257315][ T8587] hsr_slave_0: left promiscuous mode [ 1104.274678][ T8587] hsr_slave_1: left promiscuous mode [ 1104.305147][ T8587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1104.312747][ T8587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.325658][ T8587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.344696][ T8587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.406202][ T8587] veth1_macvtap: left promiscuous mode [ 1104.415090][ T8587] veth0_macvtap: left promiscuous mode [ 1104.429130][ T8587] veth1_vlan: left promiscuous mode [ 1105.223120][ T8587] team0 (unregistering): Port device team_slave_1 removed [ 1105.273487][T19724] Bluetooth: hci2: command tx timeout [ 1105.284695][ T8587] team0 (unregistering): Port device team_slave_0 removed [ 1105.341917][ T8587] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 1105.432639][ T8587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.471280][ T8587] team0 (unregistering): Port device veth0_to_bond removed [ 1105.502101][ T8587] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1105.837744][ T8587] team0 (unregistering): Port device bond0 removed [ 1105.878446][ T8587] bond0 (unregistering): Released all slaves [ 1106.777716][T20870] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.4970'. [ 1107.212818][T20713] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1107.234325][T20713] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1107.248714][T20713] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1107.263574][T20713] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1107.335124][T19724] Bluetooth: hci2: command tx timeout [ 1107.420253][T20885] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.4975'. [ 1107.473157][T20885] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.4975'. [ 1107.491749][T20884] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.4975'. [ 1107.498424][T20889] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.4975'. [ 1107.547729][T20884] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.4975'. [ 1107.693287][T20713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.762782][T20713] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.801461][T13429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.809116][T13429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.863681][T13429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.871043][T13429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.538859][T20922] netlink: 'syz.1.4985': attribute type 21 has an invalid length. [ 1108.744790][T20922] syzkaller0: entered promiscuous mode [ 1108.758670][T20922] syzkaller0: entered allmulticast mode [ 1108.803554][T20713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.867961][T20947] syzkaller0: entered promiscuous mode [ 1111.873695][T20947] syzkaller0: entered allmulticast mode [ 1112.107180][T20713] veth0_vlan: entered promiscuous mode [ 1112.144285][T20713] veth1_vlan: entered promiscuous mode [ 1112.247427][T20713] veth0_macvtap: entered promiscuous mode [ 1112.290521][T20713] veth1_macvtap: entered promiscuous mode [ 1112.376588][T20713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.401982][T20713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.436992][T20713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.464221][T20713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.493233][T20713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.513448][T20713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.526902][T20713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.543016][T20962] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4993'. [ 1112.585378][T20962] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4993'. [ 1113.033363][T20713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.064692][T20713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.094841][T20713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.121032][T20713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.141799][T20713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.175052][T20713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.194330][T20713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1113.246801][T20713] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.264523][T20713] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.273404][T20713] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.282836][T20713] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.638583][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.682040][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.732141][T13429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.786097][T13429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.030094][T21003] netlink: 'syz.0.5000': attribute type 153 has an invalid length. [ 1114.097024][T21003] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5000'. [ 1114.195704][T21012] FAULT_INJECTION: forcing a failure. [ 1114.195704][T21012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1114.197756][T21001] syzkaller0: entered promiscuous mode [ 1114.263694][T21012] CPU: 1 PID: 21012 Comm: syz.2.5003 Not tainted syzkaller #0 [ 1114.271971][T21012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1114.282251][T21012] Call Trace: [ 1114.285575][T21012] [ 1114.286735][T21001] syzkaller0: entered allmulticast mode [ 1114.288584][T21012] dump_stack_lvl+0x18c/0x250 [ 1114.298893][T21012] ? show_regs_print_info+0x20/0x20 [ 1114.304231][T21012] ? load_image+0x420/0x420 [ 1114.308799][T21012] ? __might_fault+0xaa/0x120 [ 1114.313535][T21012] ? __lock_acquire+0x7eb0/0x7eb0 [ 1114.318652][T21012] should_fail_ex+0x394/0x4c0 [ 1114.323850][T21012] _copy_from_user+0x2f/0xe0 [ 1114.328701][T21012] kstrtouint_from_user+0xde/0x170 [ 1114.333901][T21012] ? kstrtol_from_user+0x190/0x190 [ 1114.339203][T21012] proc_fail_nth_write+0x8f/0x250 [ 1114.344530][T21012] ? proc_fail_nth_read+0x260/0x260 [ 1114.349990][T21012] ? proc_fail_nth_read+0x260/0x260 [ 1114.355378][T21012] vfs_write+0x299/0x9a0 [ 1114.359796][T21012] ? file_end_write+0x250/0x250 [ 1114.365069][T21012] ? __fget_files+0x28/0x460 [ 1114.370179][T21012] ? __fget_files+0x3fc/0x460 [ 1114.375463][T21012] ? __fdget_pos+0x2a3/0x330 [ 1114.380987][T21012] ? ksys_write+0x74/0x260 [ 1114.387031][T21012] ksys_write+0x151/0x260 [ 1114.391626][T21012] ? __ia32_sys_read+0x90/0x90 [ 1114.396641][T21012] ? lockdep_hardirqs_on+0x98/0x150 [ 1114.402089][T21012] do_syscall_64+0x55/0xb0 [ 1114.407172][T21012] ? clear_bhb_loop+0x40/0x90 [ 1114.412655][T21012] ? clear_bhb_loop+0x40/0x90 [ 1114.418585][T21012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1114.427158][T21012] RIP: 0033:0x7f0a2395eb0e [ 1114.432682][T21012] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1114.452519][T21012] RSP: 002b:00007f0a24786fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1114.461346][T21012] RAX: ffffffffffffffda RBX: 00007f0a247876c0 RCX: 00007f0a2395eb0e [ 1114.469572][T21012] RDX: 0000000000000001 RSI: 00007f0a247870a0 RDI: 000000000000000a [ 1114.477861][T21012] RBP: 00007f0a24787090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.485891][T21012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.494178][T21012] R13: 00007f0a23c26308 R14: 00007f0a23c26270 R15: 00007ffd5c1e9f08 [ 1114.502594][T21012] [ 1114.927749][T21014] syzkaller0: entered promiscuous mode [ 1114.944583][T21014] syzkaller0: entered allmulticast mode [ 1116.782624][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.794044][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.800628][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1118.828537][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1118.842665][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1118.868047][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1118.889595][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1118.902461][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1121.014861][T19724] Bluetooth: hci0: command tx timeout [ 1122.029644][T21111] netlink: 'syz.3.5017': attribute type 153 has an invalid length. [ 1122.051153][T21111] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.5017'. [ 1122.191357][T21106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.999362][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.093592][T21083] chnl_net:caif_netlink_parms(): no params data found [ 1123.094769][T19724] Bluetooth: hci0: command tx timeout [ 1123.493117][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.517109][T21135] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.5025'. [ 1123.964217][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.046054][T21083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.053370][T21083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.078300][T21083] bridge_slave_0: entered allmulticast mode [ 1124.096155][T21083] bridge_slave_0: entered promiscuous mode [ 1124.111520][T21083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.128851][T21083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.137664][T21083] bridge_slave_1: entered allmulticast mode [ 1124.148864][T21083] bridge_slave_1: entered promiscuous mode [ 1124.241804][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.418410][T21083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.483089][T21083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.497426][T21157] netlink: 'syz.3.5028': attribute type 10 has an invalid length. [ 1124.553458][T21157] team0: Device ipvlan1 failed to register rx_handler [ 1124.771577][T21157] netlink: 'syz.3.5028': attribute type 3 has an invalid length. [ 1124.817629][T21157] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5028'. [ 1124.841910][T21083] team0: Port device team_slave_0 added [ 1124.870785][T21083] team0: Port device team_slave_1 added [ 1124.952288][T21083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.974093][T21083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.074952][T21083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.182231][T19724] Bluetooth: hci0: command tx timeout [ 1125.273556][T21083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.324651][T21083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.516603][T21083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.077117][T21163] netlink: 'syz.1.5030': attribute type 153 has an invalid length. [ 1126.141702][T21163] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5030'. [ 1126.562916][T21166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1127.256505][T19724] Bluetooth: hci0: command tx timeout [ 1127.316137][T21083] hsr_slave_0: entered promiscuous mode [ 1127.336676][T21083] hsr_slave_1: entered promiscuous mode [ 1127.348378][T21083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1127.357658][T21083] Cannot create hsr debugfs directory [ 1127.397675][T21181] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5033'. [ 1128.303647][T21210] FAULT_INJECTION: forcing a failure. [ 1128.303647][T21210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1128.382117][T21210] CPU: 0 PID: 21210 Comm: syz.0.5040 Not tainted syzkaller #0 [ 1128.389675][T21210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1128.401138][T21210] Call Trace: [ 1128.405106][T21210] [ 1128.408089][T21210] dump_stack_lvl+0x18c/0x250 [ 1128.413031][T21210] ? show_regs_print_info+0x20/0x20 [ 1128.420340][T21210] ? load_image+0x420/0x420 [ 1128.425285][T21210] ? __might_fault+0xaa/0x120 [ 1128.431693][T21210] ? __lock_acquire+0x7eb0/0x7eb0 [ 1128.438449][T21210] ? __virt_addr_valid+0x10c/0x380 [ 1128.444418][T21210] should_fail_ex+0x394/0x4c0 [ 1128.449993][T21210] _copy_from_user+0x2f/0xe0 [ 1128.455586][T21210] ___bpf_copy_key+0xb0/0x100 [ 1128.463233][T21210] map_update_elem+0x265/0x710 [ 1128.468820][T21210] __sys_bpf+0x6b5/0x890 [ 1128.473742][T21210] ? bpf_link_show_fdinfo+0x560/0x560 [ 1128.479447][T21210] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1128.485927][T21210] __x64_sys_bpf+0x7c/0x90 [ 1128.490701][T21210] do_syscall_64+0x55/0xb0 [ 1128.495337][T21210] ? clear_bhb_loop+0x40/0x90 [ 1128.500327][T21210] ? clear_bhb_loop+0x40/0x90 [ 1128.505490][T21210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1128.511479][T21210] RIP: 0033:0x7f87a4f9e2d9 [ 1128.516123][T21210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.536689][T21210] RSP: 002b:00007f87a5eb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1128.545568][T21210] RAX: ffffffffffffffda RBX: 00007f87a5225fa0 RCX: 00007f87a4f9e2d9 [ 1128.553918][T21210] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000002 [ 1128.561920][T21210] RBP: 00007f87a5eb2090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.569997][T21210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.578833][T21210] R13: 00007f87a5226038 R14: 00007f87a5225fa0 R15: 00007ffe2f1d6518 [ 1128.587136][T21210] [ 1128.821899][T21217] netlink: 'syz.1.5042': attribute type 29 has an invalid length. [ 1128.875105][T21217] netlink: 'syz.1.5042': attribute type 29 has an invalid length. [ 1129.136979][T21230] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5043'. [ 1129.326257][T21226] syzkaller0: entered promiscuous mode [ 1129.332459][T21226] syzkaller0: entered allmulticast mode [ 1132.183266][T21083] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1132.205268][T21083] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1132.260206][ T49] hsr_slave_0: left promiscuous mode [ 1132.270382][ T49] hsr_slave_1: left promiscuous mode [ 1132.280604][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1132.289772][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.298492][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1132.314310][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.323163][ T49] hsr0: left allmulticast mode [ 1132.328655][ T49] bridge0: port 3(hsr0) entered disabled state [ 1132.338529][ T49] bridge_slave_0: left allmulticast mode [ 1132.345819][ T49] bridge_slave_0: left promiscuous mode [ 1132.351831][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.403361][ T49] veth1_macvtap: left promiscuous mode [ 1132.412938][ T49] veth0_macvtap: left promiscuous mode [ 1132.429558][ T49] veth1_vlan: left allmulticast mode [ 1132.440510][ T49] veth1_vlan: left promiscuous mode [ 1133.342640][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1133.400864][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1133.711308][ T49] bond0 (unregistering): Released all slaves [ 1133.776614][T21083] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1133.799893][T21083] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1134.011045][T21083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.096868][T21083] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.126806][ T8579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.134387][ T8579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.145578][ T8579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.153031][ T8579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.511136][T21083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.594822][T21083] veth0_vlan: entered promiscuous mode [ 1134.621224][T21083] veth1_vlan: entered promiscuous mode [ 1134.678058][T21083] veth0_macvtap: entered promiscuous mode [ 1134.693536][T21083] veth1_macvtap: entered promiscuous mode [ 1134.729178][T21083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.743101][T21083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.753656][T21083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.766352][T21083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.777456][T21083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.792133][T21083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.807164][T21083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.819871][T21083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.832148][T21083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.848776][T21083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.879254][T21083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.889844][T21083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.904061][T21083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.919083][T21083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.953572][T21083] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.963575][T21083] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.974197][T21083] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.984554][T21083] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.123972][ T8579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.142203][ T8579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.178341][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.193400][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.520553][T21282] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5013'. [ 1135.545149][T21282] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5013'. [ 1135.836573][T19724] Bluetooth: hci4: ACL packet for unknown connection handle 2816 [ 1136.306121][T21307] netlink: 'syz.2.5044': attribute type 153 has an invalid length. [ 1136.350545][T21307] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.5044'. [ 1136.888041][T21313] delete_channel: no stack [ 1136.914172][T21313] delete_channel: no stack [ 1137.171544][T21320] netlink: 'syz.0.5056': attribute type 21 has an invalid length. [ 1137.512710][T21330] FAULT_INJECTION: forcing a failure. [ 1137.512710][T21330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1137.545063][T21330] CPU: 0 PID: 21330 Comm: syz.0.5060 Not tainted syzkaller #0 [ 1137.553509][T21330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1137.564865][T21330] Call Trace: [ 1137.568581][T21330] [ 1137.571743][T21330] dump_stack_lvl+0x18c/0x250 [ 1137.577138][T21330] ? show_regs_print_info+0x20/0x20 [ 1137.582388][T21330] ? load_image+0x420/0x420 [ 1137.586960][T21330] ? __might_fault+0xaa/0x120 [ 1137.591758][T21330] ? __lock_acquire+0x7eb0/0x7eb0 [ 1137.596963][T21330] ? bpf_percpu_hash_update+0x2b/0x200 [ 1137.602750][T21330] ? __virt_addr_valid+0x10c/0x380 [ 1137.608465][T21330] should_fail_ex+0x394/0x4c0 [ 1137.613238][T21330] _copy_from_user+0x2f/0xe0 [ 1137.618351][T21330] generic_map_update_batch+0x58c/0x800 [ 1137.626402][T21330] ? rcu_read_unlock+0xa0/0xa0 [ 1137.631430][T21330] ? __fdget+0x180/0x210 [ 1137.636901][T21330] ? rcu_read_unlock+0xa0/0xa0 [ 1137.642670][T21330] bpf_map_do_batch+0x3f2/0x600 [ 1137.649174][T21330] ? bpf_lsm_xfrm_policy_lookup+0x10/0x10 [ 1137.655771][T21330] __sys_bpf+0x381/0x890 [ 1137.660205][T21330] ? bpf_link_show_fdinfo+0x560/0x560 [ 1137.665868][T21330] ? lock_chain_count+0x20/0x20 [ 1137.670855][T21330] __x64_sys_bpf+0x7c/0x90 [ 1137.675481][T21330] do_syscall_64+0x55/0xb0 [ 1137.680026][T21330] ? clear_bhb_loop+0x40/0x90 [ 1137.684720][T21330] ? clear_bhb_loop+0x40/0x90 [ 1137.689607][T21330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1137.695717][T21330] RIP: 0033:0x7f87a4f9e2d9 [ 1137.700249][T21330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.722422][T21330] RSP: 002b:00007f87a5eb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1137.731346][T21330] RAX: ffffffffffffffda RBX: 00007f87a5225fa0 RCX: 00007f87a4f9e2d9 [ 1137.739611][T21330] RDX: 0000000000000038 RSI: 00002000000011c0 RDI: 000000000000001a [ 1137.747785][T21330] RBP: 00007f87a5eb2090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.755782][T21330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1137.763971][T21330] R13: 00007f87a5226038 R14: 00007f87a5225fa0 R15: 00007ffe2f1d6518 [ 1137.772149][T21330] [ 1138.038359][T21335] delete_channel: no stack [ 1138.106111][T21335] delete_channel: no stack [ 1138.110530][T21340] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.5067'. [ 1138.372661][T21348] FAULT_INJECTION: forcing a failure. [ 1138.372661][T21348] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1138.436700][T21348] CPU: 1 PID: 21348 Comm: syz.2.5069 Not tainted syzkaller #0 [ 1138.447130][T21348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1138.461603][T21348] Call Trace: [ 1138.465670][T21348] [ 1138.469115][T21348] dump_stack_lvl+0x18c/0x250 [ 1138.474142][T21348] ? show_regs_print_info+0x20/0x20 [ 1138.479872][T21348] ? load_image+0x420/0x420 [ 1138.484562][T21348] ? __lock_acquire+0x7eb0/0x7eb0 [ 1138.491494][T21348] should_fail_ex+0x394/0x4c0 [ 1138.500545][T21348] prepare_alloc_pages+0x1e1/0x5b0 [ 1138.507474][T21348] __alloc_pages+0x134/0x460 [ 1138.514659][T21348] ? zone_statistics+0x170/0x170 [ 1138.521972][T21348] ? __build_skb_around+0x245/0x3c0 [ 1138.528571][T21348] ? alloc_pages+0x4e1/0x740 [ 1138.534271][T21348] alloc_skb_with_frags+0x23e/0x7a0 [ 1138.540428][T21348] sock_alloc_send_pskb+0x883/0x9a0 [ 1138.546949][T21348] ? sock_kzfree_s+0x50/0x50 [ 1138.552785][T21348] tun_get_user+0xa44/0x3d30 [ 1138.557722][T21348] ? aa_file_perm+0x3e3/0xee0 [ 1138.563383][T21348] ? rcu_read_unlock+0xa0/0xa0 [ 1138.569188][T21348] ? tun_get+0x1c/0x2e0 [ 1138.574357][T21348] ? __lock_acquire+0x7eb0/0x7eb0 [ 1138.581371][T21348] ? tun_get+0x1c/0x2e0 [ 1138.586512][T21348] tun_chr_write_iter+0x119/0x200 [ 1138.592565][T21348] vfs_write+0x474/0x9a0 [ 1138.597284][T21348] ? file_end_write+0x250/0x250 [ 1138.607296][T21348] ? __fget_files+0x3fc/0x460 [ 1138.614119][T21348] ? __fdget_pos+0x1d8/0x330 [ 1138.619738][T21348] ? ksys_write+0x74/0x260 [ 1138.625715][T21348] ksys_write+0x151/0x260 [ 1138.631925][T21348] ? __ia32_sys_read+0x90/0x90 [ 1138.637197][T21348] ? lockdep_hardirqs_on+0x98/0x150 [ 1138.645527][T21348] do_syscall_64+0x55/0xb0 [ 1138.652202][T21348] ? clear_bhb_loop+0x40/0x90 [ 1138.659901][T21348] ? clear_bhb_loop+0x40/0x90 [ 1138.665171][T21348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1138.671990][T21348] RIP: 0033:0x7f36e439e2d9 [ 1138.679291][T21348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.702776][T21348] RSP: 002b:00007f36e522d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1138.713175][T21348] RAX: ffffffffffffffda RBX: 00007f36e4625fa0 RCX: 00007f36e439e2d9 [ 1138.724417][T21348] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 1138.734999][T21348] RBP: 00007f36e522d090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.745791][T21348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.757028][T21348] R13: 00007f36e4626038 R14: 00007f36e4625fa0 R15: 00007fff7525e798 [ 1138.765929][T21348] [ 1140.708782][T21373] ¥: port 1(team0) entered blocking state [ 1140.723526][T21380] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.5078'. [ 1140.737261][T21373] ¥: port 1(team0) entered disabled state [ 1140.743834][T21373] team0: entered allmulticast mode [ 1140.757988][T21373] team_slave_0: entered allmulticast mode [ 1140.774664][T21373] team_slave_1: entered allmulticast mode [ 1140.789583][T21373] team0: entered promiscuous mode [ 1140.813053][T21373] team_slave_0: entered promiscuous mode [ 1140.836104][T21373] team_slave_1: entered promiscuous mode [ 1140.902349][T21380] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5078'. [ 1141.359645][T21396] netlink: 'syz.0.5086': attribute type 39 has an invalid length. [ 1142.357330][T21425] ¥: port 1(team0) entered blocking state [ 1142.363399][T21425] ¥: port 1(team0) entered disabled state [ 1142.397765][T21425] team0: entered allmulticast mode [ 1142.403427][T21425] team_slave_0: entered allmulticast mode [ 1142.431976][T21425] team_slave_1: entered allmulticast mode [ 1142.454203][T21425] team0: entered promiscuous mode [ 1142.469816][T21425] team_slave_0: entered promiscuous mode [ 1142.478299][T21425] team_slave_1: entered promiscuous mode [ 1143.240501][T21455] netlink: 'syz.1.5108': attribute type 21 has an invalid length. [ 1143.263130][T21455] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5108'. [ 1143.591579][T21462] netlink: 'syz.3.5112': attribute type 3 has an invalid length. [ 1143.666551][T21462] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5112'. [ 1143.780010][T21474] ¥: port 1(team0) entered blocking state [ 1143.822800][T21474] ¥: port 1(team0) entered disabled state [ 1143.864959][T21474] team0: entered allmulticast mode [ 1143.877092][T21474] team_slave_0: entered allmulticast mode [ 1143.898975][T21474] team_slave_1: entered allmulticast mode [ 1143.918418][T21474] team0: entered promiscuous mode [ 1143.936016][T21474] team_slave_0: entered promiscuous mode [ 1143.943965][T21474] team_slave_1: entered promiscuous mode [ 1144.096754][T21486] netlink: 10095 bytes leftover after parsing attributes in process `syz.2.5117'. [ 1144.602558][T21544] syzkaller0: entered promiscuous mode [ 1144.612717][T21544] syzkaller0: entered allmulticast mode [ 1145.328403][T21569] delete_channel: no stack [ 1145.362160][T21569] delete_channel: no stack [ 1147.158300][T21597] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5138'. [ 1149.797191][T21598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1149.805275][T21598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1149.813625][T21598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1149.821876][T21598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.038376][T21612] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.5142'. [ 1150.064594][T21612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5142'. [ 1150.474677][T21631] netlink: 'syz.2.5151': attribute type 4 has an invalid length. [ 1150.482999][T21631] netlink: 'syz.2.5151': attribute type 16 has an invalid length. [ 1150.491542][T21631] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5151'. [ 1150.496233][T21625] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.5148'. [ 1150.518576][T21627] netlink: 'syz.3.5150': attribute type 10 has an invalid length. [ 1150.547388][T21627] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5150'. [ 1150.572282][T21627] bridge0: port 3(dummy0) entered blocking state [ 1150.591957][T21627] bridge0: port 3(dummy0) entered disabled state [ 1150.602230][T21627] dummy0: entered allmulticast mode [ 1150.622077][T21627] dummy0: entered promiscuous mode [ 1150.638990][T21627] bridge0: port 3(dummy0) entered blocking state [ 1150.646792][T21627] bridge0: port 3(dummy0) entered forwarding state [ 1150.760998][T21627] netlink: 'syz.3.5150': attribute type 3 has an invalid length. [ 1150.785343][T21627] netlink: 'syz.3.5150': attribute type 6 has an invalid length. [ 1150.793984][T21627] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.5150'. [ 1150.894484][T21634] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5150'. [ 1151.535080][T21661] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.5162'. [ 1152.604189][T21680] netlink: 'syz.0.5166': attribute type 10 has an invalid length. [ 1152.646308][T21680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5166'. [ 1152.706244][T21680] bridge0: port 3(dummy0) entered blocking state [ 1152.755563][T21680] bridge0: port 3(dummy0) entered disabled state [ 1152.762957][T21680] dummy0: entered allmulticast mode [ 1152.865954][T21680] dummy0: entered promiscuous mode [ 1152.889143][T21694] netlink: 'syz.0.5166': attribute type 3 has an invalid length. [ 1152.898606][T21680] bridge0: port 3(dummy0) entered blocking state [ 1152.909797][T21680] bridge0: port 3(dummy0) entered forwarding state [ 1152.966940][T21694] netlink: 'syz.0.5166': attribute type 6 has an invalid length. [ 1152.986905][T21687] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5166'. [ 1153.064929][T21694] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.5166'. [ 1154.066327][T21736] netlink: 'syz.0.5187': attribute type 29 has an invalid length. [ 1154.103263][T21736] netlink: 'syz.0.5187': attribute type 29 has an invalid length. [ 1154.272029][T21744] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.5189'. [ 1154.299228][T21744] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 1154.590330][T21752] FAULT_INJECTION: forcing a failure. [ 1154.590330][T21752] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1154.609579][T21752] CPU: 0 PID: 21752 Comm: syz.3.5192 Not tainted syzkaller #0 [ 1154.617124][T21752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1154.627581][T21752] Call Trace: [ 1154.630895][T21752] [ 1154.634126][T21752] dump_stack_lvl+0x18c/0x250 [ 1154.638941][T21752] ? show_regs_print_info+0x20/0x20 [ 1154.644292][T21752] ? load_image+0x420/0x420 [ 1154.648843][T21752] ? __lock_acquire+0x7eb0/0x7eb0 [ 1154.654070][T21752] should_fail_ex+0x394/0x4c0 [ 1154.658802][T21752] prepare_alloc_pages+0x1e1/0x5b0 [ 1154.664181][T21752] __alloc_pages+0x134/0x460 [ 1154.669084][T21752] ? zone_statistics+0x170/0x170 [ 1154.674223][T21752] ? __build_skb_around+0x245/0x3c0 [ 1154.679577][T21752] ? alloc_pages+0x4e1/0x740 [ 1154.684418][T21752] alloc_skb_with_frags+0x23e/0x7a0 [ 1154.689823][T21752] sock_alloc_send_pskb+0x883/0x9a0 [ 1154.695342][T21752] ? sock_kzfree_s+0x50/0x50 [ 1154.700176][T21752] tun_get_user+0xa44/0x3d30 [ 1154.704825][T21752] ? aa_file_perm+0x3e3/0xee0 [ 1154.709917][T21752] ? rcu_read_unlock+0xa0/0xa0 [ 1154.715060][T21752] ? tun_get+0x1c/0x2e0 [ 1154.719604][T21752] ? __lock_acquire+0x7eb0/0x7eb0 [ 1154.725368][T21752] ? tun_get+0x1c/0x2e0 [ 1154.730232][T21752] tun_chr_write_iter+0x119/0x200 [ 1154.735295][T21752] vfs_write+0x474/0x9a0 [ 1154.739919][T21752] ? file_end_write+0x250/0x250 [ 1154.745087][T21752] ? __fget_files+0x3fc/0x460 [ 1154.749821][T21752] ? __fdget_pos+0x1d8/0x330 [ 1154.754451][T21752] ? ksys_write+0x74/0x260 [ 1154.758959][T21752] ksys_write+0x151/0x260 [ 1154.763612][T21752] ? __ia32_sys_read+0x90/0x90 [ 1154.768542][T21752] ? lockdep_hardirqs_on+0x98/0x150 [ 1154.773819][T21752] do_syscall_64+0x55/0xb0 [ 1154.778306][T21752] ? clear_bhb_loop+0x40/0x90 [ 1154.783477][T21752] ? clear_bhb_loop+0x40/0x90 [ 1154.788181][T21752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1154.794397][T21752] RIP: 0033:0x7f2b5479e2d9 [ 1154.798925][T21752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1154.818917][T21752] RSP: 002b:00007f2b5574e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1154.827568][T21752] RAX: ffffffffffffffda RBX: 00007f2b54a25fa0 RCX: 00007f2b5479e2d9 [ 1154.836687][T21752] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 1154.844962][T21752] RBP: 00007f2b5574e090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.853297][T21752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1154.861496][T21752] R13: 00007f2b54a26038 R14: 00007f2b54a25fa0 R15: 00007ffe6996f278 [ 1154.870033][T21752] [ 1154.896026][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 1154.999079][T21755] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5191'. [ 1155.048823][T21755] bridge0: port 3(dummy0) entered blocking state [ 1155.079495][T21755] bridge0: port 3(dummy0) entered disabled state [ 1155.103941][T21755] dummy0: entered allmulticast mode [ 1155.238916][T21755] dummy0: entered promiscuous mode [ 1155.309613][T21755] bridge0: port 3(dummy0) entered blocking state [ 1155.319849][T21755] bridge0: port 3(dummy0) entered forwarding state [ 1155.403452][T21770] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.5191'. [ 1155.419158][T21756] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5191'. [ 1156.412183][T21796] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.5209'. [ 1157.834918][T21836] validate_nla: 8 callbacks suppressed [ 1157.834941][T21836] netlink: 'syz.0.5222': attribute type 2 has an invalid length. [ 1157.866221][T21836] netlink: 1045 bytes leftover after parsing attributes in process `syz.0.5222'. [ 1157.915618][T21836] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5222'. [ 1157.978270][T21836] bond0: (slave bond_slave_0): Releasing backup interface [ 1158.045291][T21836] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1160.275226][T21906] FAULT_INJECTION: forcing a failure. [ 1160.275226][T21906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1160.362961][T21906] CPU: 1 PID: 21906 Comm: syz.1.5249 Not tainted syzkaller #0 [ 1160.371571][T21906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1160.376623][T21907] sctp: [Deprecated]: syz.0.5247 (pid 21907) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1160.376623][T21907] Use struct sctp_sack_info instead [ 1160.381661][T21906] Call Trace: [ 1160.381698][T21906] [ 1160.381710][T21906] dump_stack_lvl+0x18c/0x250 [ 1160.381744][T21906] ? show_regs_print_info+0x20/0x20 [ 1160.416042][T21906] ? load_image+0x420/0x420 [ 1160.421541][T21906] ? __lock_acquire+0x7eb0/0x7eb0 [ 1160.427386][T21906] ? snprintf+0xe9/0x140 [ 1160.432866][T21906] should_fail_ex+0x394/0x4c0 [ 1160.439233][T21906] _copy_to_user+0x2f/0xa0 [ 1160.444842][T21906] simple_read_from_buffer+0xe7/0x150 [ 1160.450846][T21906] proc_fail_nth_read+0x1e8/0x260 [ 1160.456534][T21906] ? proc_fault_inject_write+0x360/0x360 [ 1160.463089][T21906] ? fsnotify_perm+0x271/0x5e0 [ 1160.468637][T21906] ? proc_fault_inject_write+0x360/0x360 [ 1160.474386][T21906] vfs_read+0x298/0x990 [ 1160.478981][T21906] ? kernel_read+0x1e0/0x1e0 [ 1160.484580][T21906] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1160.491272][T21906] ? lockdep_hardirqs_on+0x98/0x150 [ 1160.496879][T21906] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1160.503264][T21906] ksys_read+0x151/0x260 [ 1160.508050][T21906] ? vfs_write+0x9a0/0x9a0 [ 1160.512815][T21906] ? __x64_sys_read+0xe/0x90 [ 1160.518699][T21906] do_syscall_64+0x55/0xb0 [ 1160.524329][T21906] ? clear_bhb_loop+0x40/0x90 [ 1160.529725][T21906] ? clear_bhb_loop+0x40/0x90 [ 1160.537308][T21906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1160.544736][T21906] RIP: 0033:0x7f903ff5eb0e [ 1160.550370][T21906] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1160.575650][T21906] RSP: 002b:00007f9040e55fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1160.584580][T21906] RAX: ffffffffffffffda RBX: 00007f9040e566c0 RCX: 00007f903ff5eb0e [ 1160.592778][T21906] RDX: 000000000000000f RSI: 00007f9040e560a0 RDI: 000000000000000b [ 1160.601254][T21906] RBP: 00007f9040e56090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.609803][T21906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.619145][T21906] R13: 00007f9040226038 R14: 00007f9040225fa0 R15: 00007fff098fbf58 [ 1160.627473][T21906] [ 1160.892783][T21922] netlink: 'syz.2.5253': attribute type 3 has an invalid length. [ 1160.916158][T21922] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5253'. [ 1161.053594][T21929] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.5253'. [ 1162.303468][T21975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1162.498235][T21984] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5275'. [ 1162.824388][T21989] delete_channel: no stack [ 1162.840544][T21989] delete_channel: no stack [ 1163.518455][T22003] FAULT_INJECTION: forcing a failure. [ 1163.518455][T22003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1163.533348][T22003] CPU: 0 PID: 22003 Comm: syz.1.5283 Not tainted syzkaller #0 [ 1163.540861][T22003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1163.551574][T22003] Call Trace: [ 1163.554985][T22003] [ 1163.558000][T22003] dump_stack_lvl+0x18c/0x250 [ 1163.562730][T22003] ? show_regs_print_info+0x20/0x20 [ 1163.568202][T22003] ? load_image+0x420/0x420 [ 1163.573001][T22003] ? __might_fault+0xaa/0x120 [ 1163.578414][T22003] ? __lock_acquire+0x7eb0/0x7eb0 [ 1163.583579][T22003] should_fail_ex+0x394/0x4c0 [ 1163.588301][T22003] _copy_from_iter+0x1cd/0x1290 [ 1163.593276][T22003] ? __might_fault+0xaa/0x120 [ 1163.598074][T22003] ? copyout_mc+0x70/0x70 [ 1163.603943][T22003] ? copyout_mc+0x70/0x70 [ 1163.608463][T22003] ? __virt_addr_valid+0x10c/0x380 [ 1163.614161][T22003] ? page_copy_sane+0x16a/0x270 [ 1163.620922][T22003] copy_page_from_iter+0x7b/0x100 [ 1163.626902][T22003] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 1163.635194][T22003] tun_get_user+0xc99/0x3d30 [ 1163.640854][T22003] ? aa_file_perm+0x3e3/0xee0 [ 1163.646382][T22003] ? rcu_read_unlock+0xa0/0xa0 [ 1163.651385][T22003] ? tun_get+0x1c/0x2e0 [ 1163.655760][T22003] ? __lock_acquire+0x7eb0/0x7eb0 [ 1163.661710][T22003] ? tun_get+0x1c/0x2e0 [ 1163.666126][T22003] tun_chr_write_iter+0x119/0x200 [ 1163.671203][T22003] vfs_write+0x474/0x9a0 [ 1163.676001][T22003] ? file_end_write+0x250/0x250 [ 1163.681330][T22003] ? __fget_files+0x3fc/0x460 [ 1163.686310][T22003] ? __fdget_pos+0x1d8/0x330 [ 1163.691110][T22003] ? ksys_write+0x74/0x260 [ 1163.695724][T22003] ksys_write+0x151/0x260 [ 1163.700078][T22003] ? __ia32_sys_read+0x90/0x90 [ 1163.705043][T22003] ? lockdep_hardirqs_on+0x98/0x150 [ 1163.710572][T22003] do_syscall_64+0x55/0xb0 [ 1163.715028][T22003] ? clear_bhb_loop+0x40/0x90 [ 1163.719737][T22003] ? clear_bhb_loop+0x40/0x90 [ 1163.725411][T22003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1163.732305][T22003] RIP: 0033:0x7f903ff9e2d9 [ 1163.737184][T22003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.756988][T22003] RSP: 002b:00007f9040e56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1163.765424][T22003] RAX: ffffffffffffffda RBX: 00007f9040225fa0 RCX: 00007f903ff9e2d9 [ 1163.773404][T22003] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 1163.781419][T22003] RBP: 00007f9040e56090 R08: 0000000000000000 R09: 0000000000000000 [ 1163.789419][T22003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1163.797410][T22003] R13: 00007f9040226038 R14: 00007f9040225fa0 R15: 00007fff098fbf58 [ 1163.805445][T22003] [ 1164.119232][T22012] delete_channel: no stack [ 1164.130368][T22012] delete_channel: no stack [ 1164.336530][T22022] syzkaller0: entered promiscuous mode [ 1164.364918][T22022] syzkaller0: entered allmulticast mode [ 1165.038510][T22029] netlink: 'syz.0.5293': attribute type 21 has an invalid length. [ 1165.055223][T22029] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5293'. [ 1166.140129][T22058] FAULT_INJECTION: forcing a failure. [ 1166.140129][T22058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.176483][T22058] CPU: 0 PID: 22058 Comm: syz.3.5303 Not tainted syzkaller #0 [ 1166.184308][T22058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1166.195082][T22058] Call Trace: [ 1166.198773][T22058] [ 1166.202041][T22058] dump_stack_lvl+0x18c/0x250 [ 1166.206886][T22058] ? show_regs_print_info+0x20/0x20 [ 1166.212559][T22058] ? load_image+0x420/0x420 [ 1166.217306][T22058] ? __might_fault+0xaa/0x120 [ 1166.222042][T22058] ? __lock_acquire+0x7eb0/0x7eb0 [ 1166.227731][T22058] should_fail_ex+0x394/0x4c0 [ 1166.233548][T22058] _copy_from_user+0x2f/0xe0 [ 1166.238402][T22058] csum_and_copy_from_iter+0x46e/0x1480 [ 1166.244094][T22058] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 1166.249848][T22058] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1166.256026][T22058] ? ip_generic_getfrag+0x83/0x2f0 [ 1166.261345][T22058] ip_generic_getfrag+0x163/0x2f0 [ 1166.266600][T22058] ? ip_skb_dst_mtu+0x870/0x870 [ 1166.271764][T22058] __ip6_append_data+0x1fa2/0x3d40 [ 1166.277149][T22058] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1166.283191][T22058] ? ip_skb_dst_mtu+0x870/0x870 [ 1166.288316][T22058] ? ip6_setup_cork+0x10f0/0x10f0 [ 1166.293925][T22058] ? kasan_check_range+0x89/0x290 [ 1166.298996][T22058] ip6_append_data+0x1b0/0x350 [ 1166.304146][T22058] ? ip_skb_dst_mtu+0x870/0x870 [ 1166.309037][T22058] udpv6_sendmsg+0xbef/0x2390 [ 1166.313888][T22058] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 1166.320006][T22058] ? ip_skb_dst_mtu+0x870/0x870 [ 1166.324983][T22058] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1166.330937][T22058] ? udp_v6_early_demux+0xf90/0xf90 [ 1166.336320][T22058] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1166.342358][T22058] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1166.347792][T22058] ? _local_bh_enable+0xa0/0xa0 [ 1166.353121][T22058] ? inet_send_prepare+0x1ae/0x250 [ 1166.358282][T22058] ? inet_send_prepare+0x1ae/0x250 [ 1166.363535][T22058] ? inet6_sendmsg+0x5f/0xd0 [ 1166.368163][T22058] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 1166.373419][T22058] ____sys_sendmsg+0x61b/0x980 [ 1166.378320][T22058] ? __asan_memset+0x22/0x40 [ 1166.383014][T22058] ? __sys_sendmsg_sock+0x30/0x30 [ 1166.388115][T22058] ? __import_iovec+0x3fa/0x850 [ 1166.393048][T22058] ? import_iovec+0x73/0xa0 [ 1166.397632][T22058] ___sys_sendmsg+0x2a6/0x360 [ 1166.402828][T22058] ? __sys_sendmsg+0x2b0/0x2b0 [ 1166.407685][T22058] __se_sys_sendmsg+0x1d0/0x2c0 [ 1166.412578][T22058] ? __x64_sys_sendmsg+0x80/0x80 [ 1166.418295][T22058] do_syscall_64+0x55/0xb0 [ 1166.423006][T22058] ? clear_bhb_loop+0x40/0x90 [ 1166.428593][T22058] ? clear_bhb_loop+0x40/0x90 [ 1166.433730][T22058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1166.439843][T22058] RIP: 0033:0x7f2b5479e2d9 [ 1166.444554][T22058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.466401][T22058] RSP: 002b:00007f2b5574e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1166.475896][T22058] RAX: ffffffffffffffda RBX: 00007f2b54a25fa0 RCX: 00007f2b5479e2d9 [ 1166.483983][T22058] RDX: 000000000000ff00 RSI: 0000200000000380 RDI: 000000000000000a [ 1166.492815][T22058] RBP: 00007f2b5574e090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.501389][T22058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.511256][T22058] R13: 00007f2b54a26038 R14: 00007f2b54a25fa0 R15: 00007ffe6996f278 [ 1166.521422][T22058] [ 1167.163899][T22094] FAULT_INJECTION: forcing a failure. [ 1167.163899][T22094] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1167.183300][T22094] CPU: 1 PID: 22094 Comm: syz.2.5315 Not tainted syzkaller #0 [ 1167.190952][T22094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1167.201925][T22094] Call Trace: [ 1167.205273][T22094] [ 1167.208244][T22094] dump_stack_lvl+0x18c/0x250 [ 1167.212994][T22094] ? show_regs_print_info+0x20/0x20 [ 1167.218340][T22094] ? load_image+0x420/0x420 [ 1167.222972][T22094] ? __lock_acquire+0x7eb0/0x7eb0 [ 1167.228238][T22094] should_fail_ex+0x394/0x4c0 [ 1167.233091][T22094] prepare_alloc_pages+0x1e1/0x5b0 [ 1167.239174][T22094] __alloc_pages+0x134/0x460 [ 1167.244102][T22094] ? zone_statistics+0x170/0x170 [ 1167.249201][T22094] ? __build_skb_around+0x245/0x3c0 [ 1167.254750][T22094] ? alloc_pages+0x4e1/0x740 [ 1167.260035][T22094] alloc_skb_with_frags+0x23e/0x7a0 [ 1167.265490][T22094] sock_alloc_send_pskb+0x883/0x9a0 [ 1167.270763][T22094] ? sock_kzfree_s+0x50/0x50 [ 1167.275714][T22094] tun_get_user+0xa44/0x3d30 [ 1167.280399][T22094] ? aa_file_perm+0x3e3/0xee0 [ 1167.285186][T22094] ? rcu_read_unlock+0xa0/0xa0 [ 1167.290890][T22094] ? tun_get+0x1c/0x2e0 [ 1167.295273][T22094] ? __lock_acquire+0x7eb0/0x7eb0 [ 1167.300446][T22094] ? tun_get+0x1c/0x2e0 [ 1167.305040][T22094] tun_chr_write_iter+0x119/0x200 [ 1167.310120][T22094] vfs_write+0x474/0x9a0 [ 1167.314704][T22094] ? file_end_write+0x250/0x250 [ 1167.319703][T22094] ? __fget_files+0x3fc/0x460 [ 1167.324640][T22094] ? __fdget_pos+0x1d8/0x330 [ 1167.329299][T22094] ? ksys_write+0x74/0x260 [ 1167.333775][T22094] ksys_write+0x151/0x260 [ 1167.338365][T22094] ? __ia32_sys_read+0x90/0x90 [ 1167.343295][T22094] ? lockdep_hardirqs_on+0x98/0x150 [ 1167.348733][T22094] do_syscall_64+0x55/0xb0 [ 1167.353279][T22094] ? clear_bhb_loop+0x40/0x90 [ 1167.358095][T22094] ? clear_bhb_loop+0x40/0x90 [ 1167.362924][T22094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1167.369318][T22094] RIP: 0033:0x7f36e439e2d9 [ 1167.373903][T22094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1167.393823][T22094] RSP: 002b:00007f36e522d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1167.402572][T22094] RAX: ffffffffffffffda RBX: 00007f36e4625fa0 RCX: 00007f36e439e2d9 [ 1167.410863][T22094] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 1167.419134][T22094] RBP: 00007f36e522d090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.427327][T22094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.435527][T22094] R13: 00007f36e4626038 R14: 00007f36e4625fa0 R15: 00007fff7525e798 [ 1167.443732][T22094] [ 1168.610845][T22144] netlink: 'syz.1.5336': attribute type 1 has an invalid length. [ 1168.720996][T22146] syzkaller0: entered promiscuous mode [ 1168.729851][T22146] syzkaller0: entered allmulticast mode [ 1173.803924][T22247] sit0: entered allmulticast mode [ 1173.905706][T22250] sit0: entered promiscuous mode [ 1174.601358][T22279] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5382'. [ 1174.781693][T22279] netlink: 'syz.1.5382': attribute type 12 has an invalid length. [ 1174.798913][T22279] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5382'. [ 1174.864023][T22279] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5382'. [ 1177.623481][T22308] netlink: 'syz.0.5389': attribute type 10 has an invalid length. [ 1177.654305][T22308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.677888][T22308] bridge_slave_1: left allmulticast mode [ 1177.684372][T22308] bridge_slave_1: left promiscuous mode [ 1177.690446][T22308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.355102][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.362534][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.814808][T22347] netlink: 'syz.3.5407': attribute type 10 has an invalid length. [ 1178.834376][T22347] netlink: 184852 bytes leftover after parsing attributes in process `syz.3.5407'. [ 1179.823890][T22379] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5421'. [ 1180.995317][T22396] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5425'. [ 1181.072567][T22396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1182.704933][T22420] syzkaller0: entered promiscuous mode [ 1182.740775][T22420] syzkaller0: entered allmulticast mode [ 1182.988348][T22439] netlink: 'syz.3.5441': attribute type 9 has an invalid length. [ 1183.025572][T22439] netlink: 463 bytes leftover after parsing attributes in process `syz.3.5441'. [ 1183.497803][T22454] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5446'. [ 1184.388306][T22468] delete_channel: no stack [ 1184.399168][T22468] delete_channel: no stack [ 1187.153275][T22454] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5446'. [ 1187.162849][T22459] netlink: 'syz.0.5446': attribute type 2 has an invalid length. [ 1187.171481][T22463] netlink: 'syz.3.5449': attribute type 7 has an invalid length. [ 1187.180515][T22470] netlink: 'syz.2.5452': attribute type 10 has an invalid length. [ 1187.200661][T22470] syz_tun: entered promiscuous mode [ 1187.268041][T22470] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1187.284093][T22472] netlink: 'syz.2.5452': attribute type 10 has an invalid length. [ 1187.341082][T22472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1187.377957][T22472] bond0: entered promiscuous mode [ 1187.383262][T22472] bond_slave_0: entered promiscuous mode [ 1187.396051][T22472] bond_slave_1: entered promiscuous mode [ 1187.402363][T22472] bond0: entered allmulticast mode [ 1187.411932][T22472] bond_slave_0: entered allmulticast mode [ 1187.432114][T22472] bond_slave_1: entered allmulticast mode [ 1187.439061][T22472] syz_tun: entered allmulticast mode [ 1187.450540][T22472] team0: Port device bond0 added [ 1188.205816][T22496] netlink: 'syz.2.5459': attribute type 10 has an invalid length. [ 1188.235162][T22496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.272941][T22496] bridge_slave_1: left allmulticast mode [ 1188.288163][T22496] bridge_slave_1: left promiscuous mode [ 1188.307836][T22496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.345133][T22496] bridge_slave_1: entered promiscuous mode [ 1188.361091][T22496] bridge_slave_1: entered allmulticast mode [ 1188.774302][T22516] netlink: 'syz.2.5467': attribute type 46 has an invalid length. [ 1188.775296][T22513] FAULT_INJECTION: forcing a failure. [ 1188.775296][T22513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1188.804732][T22516] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5467'. [ 1188.818344][T22517] netlink: 'syz.2.5467': attribute type 2 has an invalid length. [ 1188.818379][T22517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5467'. [ 1188.819202][T22516] netlink: 'syz.2.5467': attribute type 2 has an invalid length. [ 1188.819229][T22516] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5467'. [ 1188.934113][T22513] CPU: 0 PID: 22513 Comm: syz.3.5466 Not tainted syzkaller #0 [ 1188.944460][T22513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1188.959010][T22513] Call Trace: [ 1188.963772][T22513] [ 1188.968418][T22513] dump_stack_lvl+0x18c/0x250 [ 1188.974893][T22513] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1188.984189][T22513] ? show_regs_print_info+0x20/0x20 [ 1188.990699][T22513] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1188.999324][T22513] should_fail_ex+0x394/0x4c0 [ 1189.005117][T22513] _copy_from_user+0x2f/0xe0 [ 1189.011530][T22513] csum_and_copy_from_iter+0x46e/0x1480 [ 1189.019664][T22513] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1189.026857][T22513] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 1189.035343][T22513] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1189.044450][T22513] ip_generic_getfrag+0x163/0x2f0 [ 1189.049837][T22513] ? ip_skb_dst_mtu+0x870/0x870 [ 1189.054855][T22513] ? skb_page_frag_refill+0x199/0x310 [ 1189.061023][T22513] __ip6_append_data+0x1fa2/0x3d40 [ 1189.066852][T22513] ? ip_skb_dst_mtu+0x870/0x870 [ 1189.072147][T22513] ? ip6_setup_cork+0x10f0/0x10f0 [ 1189.078272][T22513] ip6_append_data+0x1b0/0x350 [ 1189.083539][T22513] ? ip_skb_dst_mtu+0x870/0x870 [ 1189.089416][T22513] udpv6_sendmsg+0xbef/0x2390 [ 1189.094454][T22513] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 1189.101493][T22513] ? ip_skb_dst_mtu+0x870/0x870 [ 1189.107016][T22513] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1189.113886][T22513] ? udp_v6_early_demux+0xf90/0xf90 [ 1189.119727][T22513] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1189.126204][T22513] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1189.132698][T22513] ? _local_bh_enable+0xa0/0xa0 [ 1189.138386][T22513] ? inet_send_prepare+0x1ae/0x250 [ 1189.145906][T22513] ? inet_send_prepare+0x1ae/0x250 [ 1189.151679][T22513] ? inet6_sendmsg+0x5f/0xd0 [ 1189.158586][T22513] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 1189.165219][T22513] ____sys_sendmsg+0x61b/0x980 [ 1189.170911][T22513] ? __asan_memset+0x22/0x40 [ 1189.176284][T22513] ? __sys_sendmsg_sock+0x30/0x30 [ 1189.182438][T22513] ? __import_iovec+0x3fa/0x850 [ 1189.188939][T22513] ? import_iovec+0x73/0xa0 [ 1189.196104][T22513] ___sys_sendmsg+0x2a6/0x360 [ 1189.203480][T22513] ? __sys_sendmsg+0x2b0/0x2b0 [ 1189.211623][T22513] ? __se_sys_sendmsg+0xd8/0x2c0 [ 1189.217464][T22513] ? __se_sys_sendmsg+0xf2/0x2c0 [ 1189.223804][T22513] __se_sys_sendmsg+0x1d0/0x2c0 [ 1189.229159][T22513] ? __x64_sys_sendmsg+0x80/0x80 [ 1189.235822][T22513] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1189.242682][T22513] do_syscall_64+0x55/0xb0 [ 1189.248233][T22513] ? clear_bhb_loop+0x40/0x90 [ 1189.253769][T22513] ? clear_bhb_loop+0x40/0x90 [ 1189.258692][T22513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1189.265451][T22513] RIP: 0033:0x7f2b5479e2d9 [ 1189.270442][T22513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.291017][T22513] RSP: 002b:00007f2b5574e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1189.299493][T22513] RAX: ffffffffffffffda RBX: 00007f2b54a25fa0 RCX: 00007f2b5479e2d9 [ 1189.307606][T22513] RDX: 000000000000ff00 RSI: 0000200000000380 RDI: 000000000000000a [ 1189.315801][T22513] RBP: 00007f2b5574e090 R08: 0000000000000000 R09: 0000000000000000 [ 1189.323878][T22513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1189.331888][T22513] R13: 00007f2b54a26038 R14: 00007f2b54a25fa0 R15: 00007ffe6996f278 [ 1189.340273][T22513] [ 1189.826134][T22525] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.5469'. [ 1241.737881][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 1306.304361][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1306.311673][ C1] rcu: 1-....: (10499 ticks this GP) idle=b22c/1/0x4000000000000000 softirq=101717/101717 fqs=4344 [ 1306.324846][ C1] rcu: hardirqs softirqs csw/system [ 1306.331827][ C1] rcu: number: 1003219 0 0 [ 1306.339659][ C1] rcu: cputime: 21719 30769 21 ==> 52490(ms) [ 1306.348348][ C1] rcu: (t=10500 jiffies g=173353 q=409 ncpus=2) [ 1306.354987][ C1] CPU: 1 PID: 22562 Comm: syz.0.5485 Not tainted syzkaller #0 [ 1306.362485][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1306.372906][ C1] RIP: 0010:queue_work_on+0x1a4/0x1f0 [ 1306.378404][ C1] Code: 4d 85 e4 75 16 e8 dc b6 2f 00 eb 15 e8 d5 b6 2f 00 e8 30 31 3b 09 4d 85 e4 74 ea e8 c6 b6 2f 00 fb 48 c7 44 24 20 0e 36 e0 45 <48> b8 00 00 00 00 00 fc ff df 49 c7 44 05 00 00 00 00 00 41 c7 44 [ 1306.398684][ C1] RSP: 0018:ffffc900001f0380 EFLAGS: 00000246 [ 1306.406171][ C1] RAX: ffffffff8157d9ea RBX: 0000000000000000 RCX: ffff88802cc25a00 [ 1306.414705][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1306.424311][ C1] RBP: ffffc900001f0448 R08: ffffffff91ff15f7 R09: 1ffffffff23fe2be [ 1306.433819][ C1] R10: dffffc0000000000 R11: fffffbfff23fe2bf R12: 0000000000000200 [ 1306.442201][ C1] R13: 1ffff9200003e074 R14: 0000000000000000 R15: ffff888031ed0001 [ 1306.450747][ C1] FS: 00007f87a5eb26c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1306.460132][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1306.467030][ C1] CR2: 00007f9040e55ff8 CR3: 0000000076263000 CR4: 00000000003506e0 [ 1306.475343][ C1] DR0: 0000200000000440 DR1: 0000000000000000 DR2: 0000000000000000 [ 1306.483867][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1306.493466][ C1] Call Trace: [ 1306.497308][ C1] [ 1306.500559][ C1] ? wq_worker_last_func+0x40/0x40 [ 1306.508759][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1306.517607][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1306.524152][ C1] ? wiphy_work_queue+0x133/0x180 [ 1306.531080][ C1] ieee80211_rx_h_mgmt+0x4f0/0x6e0 [ 1306.536812][ C1] ieee80211_rx_handlers+0x65b6/0xb450 [ 1306.545014][ C1] ? drv_event_callback+0x250/0x250 [ 1306.553397][ C1] ? __lock_acquire+0x135d/0x7eb0 [ 1306.561192][ C1] ieee80211_prepare_and_rx_handle+0x27de/0x6080 [ 1306.569301][ C1] ? ieee80211_rx_8023+0x1220/0x1220 [ 1306.576662][ C1] ? sta_info_get_bss+0x50/0x320 [ 1306.584384][ C1] ? sta_info_get_bss+0x50/0x320 [ 1306.590877][ C1] ? sta_info_get_bss+0x50/0x320 [ 1306.598629][ C1] ? sta_info_get_bss+0x309/0x320 [ 1306.604731][ C1] ? ieee80211_rx_data_set_sta+0x228/0x3e0 [ 1306.610891][ C1] ieee80211_rx_list+0x28d4/0x3240 [ 1306.616234][ C1] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 1306.625745][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1306.634638][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1306.643015][ C1] ? lock_chain_count+0x20/0x20 [ 1306.650873][ C1] ? ieee80211_rx_napi+0xd2/0x3c0 [ 1306.657786][ C1] ieee80211_rx_napi+0x1ae/0x3c0 [ 1306.664066][ C1] ? ieee80211_rx_list+0x3240/0x3240 [ 1306.670242][ C1] ? skb_dequeue+0x124/0x160 [ 1306.676637][ C1] ieee80211_handle_queued_frames+0x105/0x190 [ 1306.684995][ C1] ? ieee80211_reconfig_filter+0x20/0x20 [ 1306.692548][ C1] tasklet_action_common+0x2d4/0x460 [ 1306.699213][ C1] ? trace_raw_output_tasklet+0xc0/0xc0 [ 1306.705370][ C1] handle_softirqs+0x27d/0x820 [ 1306.710487][ C1] ? read_tsc+0x9/0x20 [ 1306.715519][ C1] ? ktime_get+0x24b/0x280 [ 1306.721140][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1306.726786][ C1] ? do_softirq+0x1a0/0x1a0 [ 1306.733004][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1306.740203][ C1] __irq_exit_rcu+0xd3/0x190 [ 1306.746518][ C1] ? irq_exit_rcu+0x20/0x20 [ 1306.751463][ C1] irq_exit_rcu+0x9/0x20 [ 1306.757110][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1306.763941][ C1] [ 1306.767725][ C1] [ 1306.771599][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1306.778354][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 1306.785851][ C1] Code: 35 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 e3 e9 3e 09 e8 2e 28 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 1306.808561][ C1] RSP: 0018:ffffc9000336f760 EFLAGS: 00000286 [ 1306.815301][ C1] RAX: a7136a93e10ea400 RBX: 0000000000000000 RCX: a7136a93e10ea400 [ 1306.824619][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacfe0 RDI: ffffffff8b1d5160 [ 1306.836042][ C1] RBP: ffffc9000336f7b0 R08: ffffffff91ff15ff R09: 1ffffffff23fe2bf [ 1306.845462][ C1] R10: dffffc0000000000 R11: fffffbfff23fe2c0 R12: ffff88802cc25a00 [ 1306.854052][ C1] R13: 1ffff110171a79a1 R14: dffffc0000000000 R15: ffff8880b8d3cd08 [ 1306.863265][ C1] __schedule+0x15b6/0x4660 [ 1306.869609][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1306.877238][ C1] ? lock_chain_count+0x20/0x20 [ 1306.882227][ C1] ? asan.module_dtor+0x20/0x20 [ 1306.887236][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1306.893852][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1306.899480][ C1] ? preempt_schedule+0xc0/0xd0 [ 1306.904548][ C1] preempt_schedule_common+0x82/0xc0 [ 1306.910088][ C1] preempt_schedule+0xc0/0xd0 [ 1306.915078][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 1306.921007][ C1] ? event_function+0x300/0x300 [ 1306.926143][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 1306.932948][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1306.938260][ C1] ? smp_call_function_single+0x488/0x5a0 [ 1306.944549][ C1] smp_call_function_single+0x48d/0x5a0 [ 1306.950759][ C1] ? event_function+0x300/0x300 [ 1306.956024][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 1306.962494][ C1] ? event_function+0x300/0x300 [ 1306.967604][ C1] ? perf_install_in_context+0x1f9/0x920 [ 1306.973382][ C1] perf_install_in_context+0x5bb/0x920 [ 1306.979030][ C1] ? alloc_file_pseudo+0x1ae/0x210 [ 1306.984452][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 1306.992036][ C1] ? add_event_to_ctx+0x1170/0x1170 [ 1306.997940][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1307.005207][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 1307.010917][ C1] ? perf_event__header_size+0x165/0x220 [ 1307.020467][ C1] __se_sys_perf_event_open+0x1818/0x1d40 [ 1307.029899][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1307.037707][ C1] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1307.047368][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1307.059109][ C1] do_syscall_64+0x55/0xb0 [ 1307.065582][ C1] ? clear_bhb_loop+0x40/0x90 [ 1307.071831][ C1] ? clear_bhb_loop+0x40/0x90 [ 1307.079483][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1307.086870][ C1] RIP: 0033:0x7f87a4f9e2d9 [ 1307.092095][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.118042][ C1] RSP: 002b:00007f87a5eb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1307.127343][ C1] RAX: ffffffffffffffda RBX: 00007f87a5225fa0 RCX: 00007f87a4f9e2d9 [ 1307.136197][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000800 [ 1307.146482][ C1] RBP: 00007f87a5035888 R08: 0000000000000002 R09: 0000000000000000 [ 1307.156236][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1307.166122][ C1] R13: 00007f87a5226038 R14: 00007f87a5225fa0 R15: 00007ffe2f1d6518 [ 1307.174491][ C1]