last executing test programs: 4.614294592s ago: executing program 3 (id=3421): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) 3.332742476s ago: executing program 3 (id=3427): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000020000000000000000000000000850000008900000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x1f02) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x24000000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='?@-\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f00000001c0)={'pim6reg1\x00'}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 3.326675796s ago: executing program 2 (id=3428): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x5, 0xf1, &(0x7f0000000000)=""/241, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b3000000180100002020642500009b22ebacc8cd0236f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0xe, 0x17, &(0x7f00000001c0)=""/23, 0x40f00, 0x35, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0xc, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000400)=[r2], &(0x7f0000000440)=[{0x4, 0x4, 0xd}, {0x1, 0x2, 0x8, 0x3}, {0x2, 0x1, 0xf, 0xc}, {0x4, 0x5, 0x10, 0xc}, {0x0, 0x4, 0x1000006, 0x4}, {0x3, 0x4, 0x10, 0x2}, {0x5, 0x5, 0xb}, {0x1, 0x5, 0xd, 0x2}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000030000002200"/24], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB='/'], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r7, 0x2f, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c00000003000000000000000700000d000000000900000003000000b89eafbb6f4576240800000001000000050000000100000002000000050000000d"], 0x0, 0x77, 0x0, 0x1, 0xfff}, 0x28) setsockopt$sock_attach_bpf(r6, 0x84, 0xb, &(0x7f0000000000), 0xe) close(r6) r8 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r8, 0x0, 0x12, 0x0, 0x44) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c02", 0x17}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"}) 3.239436972s ago: executing program 0 (id=3429): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) 2.493217575s ago: executing program 3 (id=3431): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) 2.492722655s ago: executing program 2 (id=3432): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) socketpair(0x1, 0x805, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) socket$kcm(0x2, 0x3, 0x2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, r0, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x4, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2405, 0x3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0xa87d, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.948856037s ago: executing program 0 (id=3433): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xe, &(0x7f0000001200)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001240)="132bf3b5c8d177f1f3113638ad71bcfc41482ece2740d0dc0603d2", 0x1b}, {&(0x7f0000001280)="e87a8637c6b42285e82a8cc41ed1c16488c658d0a0fa6e8a74fe9266140e1976a4de29e4b071db048e8f33b3df0b012f088b0621d5da1edfcaaa0c84df2061f3c02846946f75399e2f1067f1c0c00c6d1bfc1e9095ad8be3b011dad0faf261fa", 0x60}, {&(0x7f0000001100)="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", 0xfd}], 0x4}, 0x40480c0) 1.838419163s ago: executing program 2 (id=3435): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) 1.708470971s ago: executing program 0 (id=3436): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x200000000000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000040800000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x21, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000780)=""/167, 0xa7}], 0x4}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r3 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000840)=""/236, 0xec}, {&(0x7f0000000940)=""/231, 0xe7}, {&(0x7f0000000bc0)=""/191, 0xbf}, {&(0x7f0000000a40)=""/110, 0x6e}, {&(0x7f0000000c80)=""/195, 0xc3}], 0x5, &(0x7f0000000e00)=""/71, 0x47}, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) close(0x3) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000006000000040000000000000e0000000000000000000000000200000deaff020000000000000000000007000000000e00000000000009feffffff000000006100"], 0x0, 0x62}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ff"], 0x0, 0x56, 0x0, 0x1}, 0x28) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x9, 0x11, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x2b, &(0x7f0000000300)=""/43, 0x41000, 0x29, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0x7, 0x0, 0x128373e0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7], 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0x8, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @exit]}, &(0x7f0000000ec0)='GPL\x00', 0x8, 0x42, &(0x7f0000000f00)=""/66, 0x41000, 0x51, '\x00', 0x0, @flow_dissector, r6, 0x8, &(0x7f0000000f80)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000fc0)={0x0, 0x3, 0x36cb, 0xf}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000001000)=[r2], &(0x7f0000001040)=[{0x2, 0x2, 0xf, 0x6}, {0x3, 0x1, 0x10, 0x2}, {0x2, 0x1, 0xe, 0x1}, {0x3, 0x5, 0x8}, {0x2, 0x5, 0xd, 0x1}, {0x1, 0x1, 0xd, 0x3}], 0x10, 0x7ff}, 0x94) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, 0x0) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r9, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="83", 0x1}], 0x1}, 0x4c0e0) 1.524837971s ago: executing program 1 (id=3438): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x5d31, 0x424, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000089000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000), 0xc}, 0xa01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x200000}, 0x1f02) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 1.301447144s ago: executing program 3 (id=3439): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000020000000000000000000000000850000008900000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x1f02) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x24000000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='?@-\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f00000001c0)={'pim6reg1\x00'}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 960.713934ms ago: executing program 2 (id=3440): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x5, 0xf1, &(0x7f0000000000)=""/241, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b3000000180100002020642500009b22ebacc8cd0236f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0xe, 0x17, &(0x7f00000001c0)=""/23, 0x40f00, 0x35, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0xc, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000400)=[r2], &(0x7f0000000440)=[{0x4, 0x4, 0xd}, {0x1, 0x2, 0x8, 0x3}, {0x2, 0x1, 0xf, 0xc}, {0x4, 0x5, 0x10, 0xc}, {0x0, 0x4, 0x1000006, 0x4}, {0x3, 0x4, 0x10, 0x2}, {0x5, 0x5, 0xb}, {0x1, 0x5, 0xd, 0x2}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000030000002200"/24], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB='/'], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r7, 0x2f, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c00000003000000000000000700000d000000000900000003000000b89eafbb6f4576240800000001000000050000000100000002000000050000000d"], 0x0, 0x77, 0x0, 0x1, 0xfff}, 0x28) setsockopt$sock_attach_bpf(r6, 0x84, 0xb, &(0x7f0000000000), 0xe) close(r6) r8 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r8, 0x0, 0x12, 0x0, 0x44) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c02", 0x17}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"}) 874.339919ms ago: executing program 3 (id=3441): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x5d31, 0x424, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000089000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000), 0xc}, 0xa01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x200000}, 0x1f02) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f0000000000)={0x4, 0xcd, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x9d35, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x2000007fff, 0x0, 0x6, 0x6, 0x6aee, 0x0, 0x0, 0x1000000, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 866.661299ms ago: executing program 0 (id=3442): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff79}, 0x60) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000089000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x200000}, 0x1f02) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f0000000000)={0x4, 0xcd, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x9d35, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x2000007fff, 0x0, 0x6, 0x6, 0x6aee, 0x0, 0x0, 0x1000000, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="8500000002"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) recvmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000300)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/247, 0xf7}], 0x1}, 0x2020) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x10, r3}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 808.559643ms ago: executing program 1 (id=3443): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0x4b, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f0000001280), &(0x7f00000012c0), 0x8, 0x21, 0x8, 0x8, &(0x7f0000001300)}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x1d, 0x0, 0x9, 0x8f2, 0x400, 0x1, 0x8000000}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001580)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r4, &(0x7f00000004c0)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x13, 0x1, 0x6, 0x1, 0x4, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001700)={{0x1, 0xffffffffffffffff}, &(0x7f0000001680), &(0x7f00000016c0)}, 0x20) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001740)={0x0, 0x1000, 0x8}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001840)={r9, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={r6, 0xe0, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f0000001a40)=[{}], 0x8, 0x10, &(0x7f0000001a80), &(0x7f0000001ac0), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000001b00)}}, 0x10) r12 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001b80)={0x0, r10}, 0x8) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001bc0)={&(0x7f0000001d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4f, 0x4f, 0xfffffffffffffdc7, [@type_tag={0x2, 0x0, 0x0, 0x12, 0x4}, @union={0x2, 0x0, 0x0, 0x5, 0x1, 0x1ff}, @var={0xf, 0x0, 0x0, 0xe, 0x3}, @datasec={0x9, 0x2, 0x0, 0xf, 0x3, [{0x4, 0x10000, 0x1}, {0x2, 0x7, 0x6}], "95aca6"}]}, {0x0, [0x4f, 0x61, 0x2e, 0x30]}}, &(0x7f0000001b40)=""/54, 0x6e, 0x36, 0x1, 0xfffffff8, 0x10000, @value=r12}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d80)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0x2, '\x00', r11, r13, 0x3}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000940)={&(0x7f0000000880)="dfc7dbb137", 0x0, 0x0, 0x0, 0x6, r14}, 0x38) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0xb, 0x7, 0x7, 0x0, 0xfffffffffffffff0}, @ldst={0x0, 0x3, 0x2, 0x6, 0x5, 0x8, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x1000, &(0x7f0000000280)=""/4096, 0x40f00, 0x2, '\x00', r0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000014c0)={0x0, 0xb, 0x4, 0x2}, 0x10, 0x29d55, 0xffffffffffffffff, 0x6, &(0x7f0000001780)=[r1, 0x1, r2, r4, 0x1, r5, r7, r8, r9, r14], &(0x7f00000017c0)=[{0x5, 0x8, 0x9, 0x4}, {0x5, 0x1, 0xf}, {0x5, 0x4, 0xc, 0x5}, {0x3, 0x4, 0xb, 0x7}, {0x5, 0x2, 0xb, 0xa}, {0x0, 0x1, 0x6, 0x4}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000711021000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) 614.332714ms ago: executing program 1 (id=3444): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x6400}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) r3 = socket$kcm(0xf, 0x3, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def03", 0x9b}], 0x1}, 0x0) 595.592335ms ago: executing program 0 (id=3445): socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe, 0xdc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f878601af1d55ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c750", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) 508.65347ms ago: executing program 1 (id=3446): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d800ef00150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884) 377.502308ms ago: executing program 2 (id=3447): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x400000, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) 302.260242ms ago: executing program 3 (id=3448): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) 230.320766ms ago: executing program 1 (id=3449): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000020000000000000000000000000850000008900000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x1f02) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x24000000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)='?@-\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f00000001c0)={'pim6reg1\x00'}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 185.398629ms ago: executing program 2 (id=3450): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) 78.438995ms ago: executing program 1 (id=3451): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x6, 0x0, &(0x7f0000000000)="259a53f271a7", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x1, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 0s ago: executing program 0 (id=3452): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x5d31, 0x424, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000089000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000), 0xc}, 0xa01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000000100000bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000007f44000000000000630a04fe0000000071330000000000009f030000000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f200000000000000007590ab8f29c7accd9d11786c4ca1271cd2293b572f14a3dfcaa3467f2783fc09e3eee3fa4b82b7b6ce904e05fa797a2f7ff63e4f874bd870821f6460904e05d7a3f8295a9a5fba1e3587b9d9e878c86ba9b66c4491fcff607d9cbf156f3fc0fb8c827d4e6cac493a3e2746bd5f0f8bc024352200a4250785cdca4fe3c546972d0a56e3905d1e72c33d64f6591fe25f312f47e7ec6b4640f1f6dc4efee4b8d3cfbfcbf77bfd52f0a99adc7d359233cfea0a11f5dcb87603885f08d633e842644988d2f45a1824361b5df707f726fad22d53727b4396b3d05df34933262fdb09f19837fdc2af1c721b17d54076e25ab625ae0a4c9cd900"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x200000}, 0x1f02) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0xcd, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x9d35, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x2000007fff, 0x0, 0x6, 0x6, 0x6aee, 0x0, 0x0, 0x1000000, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x6) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 0x14b/0x2f0 [ 609.362570][T14227] ? __local_bh_enable_ip+0x13a/0x1c0 [ 609.368079][T14227] ? _local_bh_enable+0xa0/0xa0 [ 609.373008][T14227] ? inet_sendmsg+0x14b/0x2f0 [ 609.377764][T14227] ? inet_sendmsg+0x14b/0x2f0 [ 609.382514][T14227] ? inet_send_prepare+0x260/0x260 [ 609.387701][T14227] ____sys_sendmsg+0x5ba/0x960 [ 609.392548][T14227] ? __lock_acquire+0x7d40/0x7d40 [ 609.397663][T14227] ? __sys_sendmsg_sock+0x30/0x30 [ 609.401636][T14222] Ÿë: port 1(gretap0) entered blocking state [ 609.402835][T14227] ? __import_iovec+0x5f2/0x850 [ 609.413891][T14227] ? import_iovec+0x73/0xa0 [ 609.418509][T14227] ___sys_sendmsg+0x2a6/0x360 [ 609.423271][T14227] ? __sys_sendmsg+0x2a0/0x2a0 [ 609.428137][T14227] ? __lock_acquire+0x7d40/0x7d40 [ 609.433292][T14227] __se_sys_sendmsg+0x1c2/0x2b0 [ 609.438224][T14227] ? __x64_sys_sendmsg+0x80/0x80 [ 609.443266][T14227] ? lockdep_hardirqs_on+0x98/0x150 [ 609.448544][T14227] do_syscall_64+0x55/0xa0 [ 609.453065][T14227] ? clear_bhb_loop+0x40/0x90 [ 609.457805][T14227] ? clear_bhb_loop+0x40/0x90 [ 609.462557][T14227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.468531][T14227] RIP: 0033:0x7f77efd9aeb9 [ 609.471760][T14222] Ÿë: port 1(gretap0) entered disabled state [ 609.473027][T14227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.473051][T14227] RSP: 002b:00007f77f0ce4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.473080][T14227] RAX: ffffffffffffffda RBX: 00007f77f0015fa0 RCX: 00007f77efd9aeb9 [ 609.513450][T14222] gretap0: entered allmulticast mode [ 609.515308][T14227] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 609.515331][T14227] RBP: 00007f77f0ce4090 R08: 0000000000000000 R09: 0000000000000000 [ 609.515348][T14227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 609.544756][T14227] R13: 00007f77f0016038 R14: 00007f77f0015fa0 R15: 00007ffe0f1d76c8 [ 609.545326][T14222] gretap0: entered promiscuous mode [ 609.552806][T14227] [ 609.701013][T14234] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2738'. [ 609.716779][T14234] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2738'. [ 609.750555][T14234] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2738'. [ 609.787446][T14234] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2738'. [ 611.753877][T14284] wg2: left promiscuous mode [ 611.803935][T14285] wg2: entered promiscuous mode [ 612.167408][T14304] FAULT_INJECTION: forcing a failure. [ 612.167408][T14304] name failslab, interval 1, probability 0, space 0, times 0 [ 612.195708][T14304] CPU: 1 PID: 14304 Comm: syz.2.2763 Not tainted syzkaller #0 [ 612.203263][T14304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.213459][T14304] Call Trace: [ 612.216797][T14304] [ 612.219774][T14304] dump_stack_lvl+0x18c/0x250 [ 612.224506][T14304] ? sctp_sendmsg+0x1575/0x28c0 [ 612.229401][T14304] ? ___sys_sendmsg+0x2a6/0x360 [ 612.234299][T14304] ? show_regs_print_info+0x20/0x20 [ 612.239696][T14304] ? load_image+0x400/0x400 [ 612.244282][T14304] should_fail_ex+0x39d/0x4d0 [ 612.249028][T14304] should_failslab+0x9/0x20 [ 612.253593][T14304] slab_pre_alloc_hook+0x59/0x310 [ 612.258698][T14304] ? sctp_add_bind_addr+0x8c/0x360 [ 612.263886][T14304] __kmem_cache_alloc_node+0x53/0x250 [ 612.269325][T14304] ? sctp_add_bind_addr+0x8c/0x360 [ 612.274498][T14304] kmalloc_trace+0x2a/0xe0 [ 612.279146][T14304] sctp_add_bind_addr+0x8c/0x360 [ 612.284149][T14304] sctp_copy_local_addr_list+0x315/0x4f0 [ 612.289849][T14304] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 612.295636][T14304] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 612.301774][T14304] ? sctp_v4_is_any+0x35/0x60 [ 612.306501][T14304] ? sctp_copy_one_addr+0x8c/0x350 [ 612.311680][T14304] sctp_bind_addr_copy+0xb3/0x3c0 [ 612.316763][T14304] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 612.323131][T14304] sctp_connect_new_asoc+0x2f9/0x6a0 [ 612.328456][T14304] ? __sctp_connect+0xd80/0xd80 [ 612.333336][T14304] ? __local_bh_enable_ip+0x13a/0x1c0 [ 612.338746][T14304] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 612.344327][T14304] ? security_sctp_bind_connect+0x89/0xb0 [ 612.350087][T14304] sctp_sendmsg+0x1575/0x28c0 [ 612.354810][T14304] ? sctp_getsockopt+0xb60/0xb60 [ 612.359789][T14304] ? aa_sk_perm+0x83c/0x970 [ 612.364362][T14304] ? aa_af_perm+0x330/0x330 [ 612.368929][T14304] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 612.375391][T14304] ? sock_rps_record_flow+0x19/0x3f0 [ 612.380726][T14304] ? inet_sendmsg+0xe9/0x2f0 [ 612.385349][T14304] ? inet_send_prepare+0x260/0x260 [ 612.390500][T14304] ____sys_sendmsg+0x5ba/0x960 [ 612.395310][T14304] ? __lock_acquire+0x7d40/0x7d40 [ 612.400366][T14304] ? __asan_memset+0x22/0x40 [ 612.404992][T14304] ? __sys_sendmsg_sock+0x30/0x30 [ 612.410056][T14304] ? __import_iovec+0x5f2/0x850 [ 612.414957][T14304] ? import_iovec+0x73/0xa0 [ 612.419507][T14304] ___sys_sendmsg+0x2a6/0x360 [ 612.424256][T14304] ? get_pid_task+0x20/0x1e0 [ 612.428905][T14304] ? __sys_sendmsg+0x2a0/0x2a0 [ 612.433722][T14304] ? __lock_acquire+0x7d40/0x7d40 [ 612.438802][T14304] __se_sys_sendmsg+0x1c2/0x2b0 [ 612.443696][T14304] ? __x64_sys_sendmsg+0x80/0x80 [ 612.448678][T14304] ? lockdep_hardirqs_on+0x98/0x150 [ 612.453917][T14304] do_syscall_64+0x55/0xa0 [ 612.458395][T14304] ? clear_bhb_loop+0x40/0x90 [ 612.463112][T14304] ? clear_bhb_loop+0x40/0x90 [ 612.467829][T14304] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 612.473757][T14304] RIP: 0033:0x7f2d1379aeb9 [ 612.478252][T14304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.497906][T14304] RSP: 002b:00007f2d14727028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 612.506445][T14304] RAX: ffffffffffffffda RBX: 00007f2d13a15fa0 RCX: 00007f2d1379aeb9 [ 612.514449][T14304] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000005 [ 612.522452][T14304] RBP: 00007f2d14727090 R08: 0000000000000000 R09: 0000000000000000 [ 612.530455][T14304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 612.538462][T14304] R13: 00007f2d13a16038 R14: 00007f2d13a15fa0 R15: 00007ffe6f872e58 [ 612.546486][T14304] [ 613.124513][T14317] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2767'. [ 614.041953][T14328] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.2772'. [ 614.212244][T14336] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2774'. [ 615.915059][T14376] netlink: 'syz.0.2787': attribute type 5 has an invalid length. [ 615.941896][T14376] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2787'. [ 616.275488][T14389] FAULT_INJECTION: forcing a failure. [ 616.275488][T14389] name failslab, interval 1, probability 0, space 0, times 0 [ 616.308084][T14389] CPU: 1 PID: 14389 Comm: syz.3.2793 Not tainted syzkaller #0 [ 616.315629][T14389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 616.325747][T14389] Call Trace: [ 616.329071][T14389] [ 616.332041][T14389] dump_stack_lvl+0x18c/0x250 [ 616.336769][T14389] ? show_regs_print_info+0x20/0x20 [ 616.342009][T14389] ? load_image+0x400/0x400 [ 616.346549][T14389] ? unwind_get_return_address+0x91/0xc0 [ 616.352223][T14389] should_fail_ex+0x39d/0x4d0 [ 616.356945][T14389] should_failslab+0x9/0x20 [ 616.361540][T14389] slab_pre_alloc_hook+0x59/0x310 [ 616.366610][T14389] ? sctp_transport_new+0x7e/0x630 [ 616.371764][T14389] __kmem_cache_alloc_node+0x53/0x250 [ 616.377180][T14389] ? sctp_transport_new+0x7e/0x630 [ 616.382329][T14389] kmalloc_trace+0x2a/0xe0 [ 616.386787][T14389] sctp_transport_new+0x7e/0x630 [ 616.391759][T14389] sctp_assoc_add_peer+0x259/0x1390 [ 616.396997][T14389] sctp_process_init+0x14f/0x2bb0 [ 616.402059][T14389] ? lock_chain_count+0x20/0x20 [ 616.406950][T14389] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 616.413141][T14389] ? lockdep_hardirqs_on+0x98/0x150 [ 616.418466][T14389] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 616.424663][T14389] ? sctp_add_bind_addr+0xe0/0x360 [ 616.429905][T14389] ? sctp_process_inv_paramlength+0xd0/0xd0 [ 616.435837][T14389] ? sctp_add_bind_addr+0x203/0x360 [ 616.441124][T14389] ? sctp_bind_addr_copy+0x37b/0x3c0 [ 616.446477][T14389] sctp_sf_do_unexpected_init+0xae7/0x10f0 [ 616.452327][T14389] ? sctp_sf_do_5_2_1_siminit+0x40/0x40 [ 616.458651][T14389] ? sctp_sm_lookup_event+0x173/0x360 [ 616.464088][T14389] ? __sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 616.470297][T14389] sctp_do_sm+0x23a/0x5a60 [ 616.474757][T14389] ? rht_unlock+0x1d0/0x1d0 [ 616.479308][T14389] ? mark_lock+0x94/0x320 [ 616.483684][T14389] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 616.489655][T14389] ? read_tsc+0x9/0x20 [ 616.493765][T14389] sctp_assoc_bh_rcv+0x3f2/0x630 [ 616.498746][T14389] sctp_backlog_rcv+0x163/0x370 [ 616.503637][T14389] __release_sock+0x1e5/0x460 [ 616.508403][T14389] release_sock+0x5f/0x1c0 [ 616.512863][T14389] sctp_sendmsg+0x1bd7/0x28c0 [ 616.517600][T14389] ? sctp_getsockopt+0xb60/0xb60 [ 616.522575][T14389] ? lock_chain_count+0x20/0x20 [ 616.527476][T14389] ? inet_send_prepare+0x260/0x260 [ 616.532627][T14389] ? sock_rps_record_flow+0x19/0x3f0 [ 616.537961][T14389] ? inet_sendmsg+0x7c/0x2f0 [ 616.542685][T14389] ? inet_send_prepare+0x260/0x260 [ 616.547919][T14389] ____sys_sendmsg+0x5ba/0x960 [ 616.552723][T14389] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 616.558926][T14389] ? __asan_memset+0x22/0x40 [ 616.563594][T14389] ? __sys_sendmsg_sock+0x30/0x30 [ 616.568663][T14389] ? __import_iovec+0x5f2/0x850 [ 616.573568][T14389] ? import_iovec+0x73/0xa0 [ 616.578124][T14389] ___sys_sendmsg+0x2a6/0x360 [ 616.582840][T14389] ? __sys_sendmsg+0x2a0/0x2a0 [ 616.587698][T14389] __se_sys_sendmsg+0x1c2/0x2b0 [ 616.592586][T14389] ? __x64_sys_sendmsg+0x80/0x80 [ 616.597599][T14389] ? lockdep_hardirqs_on+0x98/0x150 [ 616.602849][T14389] do_syscall_64+0x55/0xa0 [ 616.607310][T14389] ? clear_bhb_loop+0x40/0x90 [ 616.612029][T14389] ? clear_bhb_loop+0x40/0x90 [ 616.616746][T14389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 616.622671][T14389] RIP: 0033:0x7f1ce219aeb9 [ 616.627113][T14389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.646778][T14389] RSP: 002b:00007f1ce3040028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 616.655230][T14389] RAX: ffffffffffffffda RBX: 00007f1ce2415fa0 RCX: 00007f1ce219aeb9 [ 616.663244][T14389] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 616.671348][T14389] RBP: 00007f1ce3040090 R08: 0000000000000000 R09: 0000000000000000 [ 616.679358][T14389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 616.687362][T14389] R13: 00007f1ce2416038 R14: 00007f1ce2415fa0 R15: 00007fff3a0b3c18 [ 616.695381][T14389] [ 616.937104][T14397] netlink: 'syz.0.2795': attribute type 10 has an invalid length. [ 616.982928][T14397] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.013987][T14397] bond0: (slave team0): Enslaving as an active interface with an up link [ 617.039627][T14399] netlink: 'syz.0.2795': attribute type 10 has an invalid length. [ 617.201140][T14403] netlink: 'syz.1.2798': attribute type 1 has an invalid length. [ 617.409685][T14407] delete_channel: no stack [ 617.782657][ T5784] Bluetooth: hci2: ISO packet for unknown connection handle 3081 [ 617.983000][T14430] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.2809'. [ 618.150783][T14436] cgroup: fork rejected by pids controller in /syz0 [ 619.100159][ T3499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.270819][ T3499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.383703][ T3499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.494895][ T3499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.583068][T14464] netlink: 'syz.2.2827': attribute type 2 has an invalid length. [ 619.598901][T14464] netlink: 'syz.2.2827': attribute type 1 has an invalid length. [ 619.607041][T14464] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2827'. [ 620.704793][T13057] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 620.718230][T13057] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 620.727237][T13057] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 620.736766][T13057] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 620.745253][T13057] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 620.752877][T13057] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 621.812549][T14522] FAULT_INJECTION: forcing a failure. [ 621.812549][T14522] name failslab, interval 1, probability 0, space 0, times 0 [ 621.876983][T14522] CPU: 1 PID: 14522 Comm: syz.3.2839 Not tainted syzkaller #0 [ 621.884563][T14522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 621.894686][T14522] Call Trace: [ 621.898023][T14522] [ 621.900998][T14522] dump_stack_lvl+0x18c/0x250 [ 621.905740][T14522] ? show_regs_print_info+0x20/0x20 [ 621.910996][T14522] ? load_image+0x400/0x400 [ 621.915554][T14522] ? __might_sleep+0xe0/0xe0 [ 621.920208][T14522] ? __lock_acquire+0x7d40/0x7d40 [ 621.925300][T14522] should_fail_ex+0x39d/0x4d0 [ 621.930089][T14522] should_failslab+0x9/0x20 [ 621.934676][T14522] slab_pre_alloc_hook+0x59/0x310 [ 621.939778][T14522] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 621.945676][T14522] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 621.951463][T14522] __kmem_cache_alloc_node+0x53/0x250 [ 621.956991][T14522] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 621.962753][T14522] __kmalloc+0xa4/0x230 [ 621.966973][T14522] tomoyo_realpath_from_path+0xe3/0x5d0 [ 621.972587][T14522] tomoyo_path_number_perm+0x248/0x620 [ 621.978544][T14522] ? tomoyo_path_number_perm+0x217/0x620 [ 621.984351][T14522] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 621.989917][T14522] ? trace_call_bpf+0xc3/0x6c0 [ 621.994744][T14522] ? trace_call_bpf+0xc3/0x6c0 [ 621.999570][T14522] ? trace_call_bpf+0x5e9/0x6c0 [ 622.004560][T14522] ? __fget_files+0x28/0x4b0 [ 622.009214][T14522] ? __fget_files+0x28/0x4b0 [ 622.013903][T14522] security_file_ioctl+0x70/0xa0 [ 622.018926][T14522] __se_sys_ioctl+0x48/0x170 [ 622.023586][T14522] do_syscall_64+0x55/0xa0 [ 622.028058][T14522] ? clear_bhb_loop+0x40/0x90 [ 622.032784][T14522] ? clear_bhb_loop+0x40/0x90 [ 622.037510][T14522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.043457][T14522] RIP: 0033:0x7f1ce219aeb9 [ 622.047914][T14522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.067628][T14522] RSP: 002b:00007f1ce3040028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 622.076124][T14522] RAX: ffffffffffffffda RBX: 00007f1ce2415fa0 RCX: 00007f1ce219aeb9 [ 622.084333][T14522] RDX: 0000200000000100 RSI: 00000000000089e1 RDI: 0000000000000006 [ 622.092452][T14522] RBP: 00007f1ce3040090 R08: 0000000000000000 R09: 0000000000000000 [ 622.100475][T14522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.108508][T14522] R13: 00007f1ce2416038 R14: 00007f1ce2415fa0 R15: 00007fff3a0b3c18 [ 622.116561][T14522] [ 622.125222][T14522] ERROR: Out of memory at tomoyo_realpath_from_path. [ 622.329055][T14496] chnl_net:caif_netlink_parms(): no params data found [ 622.672084][ T3499] hsr_slave_0: left promiscuous mode [ 622.707745][ T3499] hsr_slave_1: left promiscuous mode [ 622.731124][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.745549][ T3499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.759193][T14543] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2844'. [ 622.774046][T14543] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 622.783747][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.809459][ T3499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.834422][ T3499] bridge_slave_1: left allmulticast mode [ 622.840618][ T3499] bridge_slave_1: left promiscuous mode [ 622.852799][ T3499] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.860593][ T5784] Bluetooth: hci2: command tx timeout [ 622.898975][ T3499] bridge_slave_0: left allmulticast mode [ 622.945339][ T3499] bridge_slave_0: left promiscuous mode [ 622.951504][ T3499] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.019039][ T3499] veth1_macvtap: left promiscuous mode [ 623.032523][ T3499] veth0_macvtap: left promiscuous mode [ 623.045846][ T3499] veth1_vlan: left promiscuous mode [ 623.057251][ T3499] veth0_vlan: left promiscuous mode [ 623.691130][T14559] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2847'. [ 624.138324][ T3499] team0 (unregistering): Port device team_slave_1 removed [ 624.195101][ T3499] team0 (unregistering): Port device team_slave_0 removed [ 624.244938][ T3499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.300673][ T3499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.681714][ T3499] bond0 (unregistering): (slave team0): Releasing backup interface [ 624.724589][ T3499] bond0 (unregistering): Released all slaves [ 624.782320][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.788844][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.846009][T14534] netlink: 'syz.3.2841': attribute type 10 has an invalid length. [ 624.873776][T14547] netlink: 'syz.2.2845': attribute type 1 has an invalid length. [ 624.937947][ T5784] Bluetooth: hci2: command tx timeout [ 625.023574][T14559] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2847'. [ 625.107930][T14496] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.125467][T14496] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.138118][T14496] bridge_slave_0: entered allmulticast mode [ 625.153934][T14496] bridge_slave_0: entered promiscuous mode [ 625.201504][T14496] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.210830][T14496] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.228973][T14496] bridge_slave_1: entered allmulticast mode [ 625.236582][T14496] bridge_slave_1: entered promiscuous mode [ 625.400774][T14496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.446558][T14496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.595362][T14496] team0: Port device team_slave_0 added [ 625.651005][T14496] team0: Port device team_slave_1 added [ 625.830304][T14496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.837349][T14496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.911104][T14496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.942729][T14496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.959593][T14496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.028149][T14496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.231078][T14496] hsr_slave_0: entered promiscuous mode [ 626.248081][T14496] hsr_slave_1: entered promiscuous mode [ 626.276337][T14496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 626.292943][T14496] Cannot create hsr debugfs directory [ 626.306649][T14589] netlink: 'syz.1.2855': attribute type 10 has an invalid length. [ 626.380035][T14595] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2857'. [ 626.406268][T14591] netlink: 'syz.3.2856': attribute type 27 has an invalid length. [ 626.423357][T14591] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2856'. [ 626.514200][T14591] netlink: 'syz.3.2856': attribute type 4 has an invalid length. [ 626.527943][T14591] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2856'. [ 626.683083][T14602] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2859'. [ 626.709311][T14602] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 627.017790][ T5784] Bluetooth: hci2: command tx timeout [ 627.026185][T14613] wg2: left promiscuous mode [ 627.623173][T14622] netlink: 'syz.2.2864': attribute type 10 has an invalid length. [ 627.664776][T14622] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 627.859916][T14630] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.2865'. [ 627.902387][T14496] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 627.939025][T14496] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 627.988470][T14496] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 628.005620][T14496] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 628.239128][T14649] netlink: 'syz.2.2869': attribute type 27 has an invalid length. [ 628.251649][T14649] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2869'. [ 628.275911][T14649] netlink: 'syz.2.2869': attribute type 4 has an invalid length. [ 628.302362][T14649] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2869'. [ 628.409006][T14649] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 628.566876][T14496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.612074][T14496] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.639689][ T6324] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.646973][ T6324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.684654][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.691957][ T6324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.923081][T14662] C: renamed from team_slave_0 [ 628.958030][T14662] netlink: 'syz.1.2872': attribute type 1 has an invalid length. [ 628.979001][T14662] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2872'. [ 629.044578][T14665] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2872'. [ 629.097884][ T5784] Bluetooth: hci2: command tx timeout [ 629.130411][T14670] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 629.139685][T14670] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 629.148937][T14670] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 629.158197][T14670] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 629.167394][T14670] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 629.176756][T14670] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 629.186094][T14670] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 629.195337][T14670] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 629.204651][T14670] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 629.459764][T14676] netlink: 'syz.1.2875': attribute type 1 has an invalid length. [ 629.576978][T14496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.735217][T14496] veth0_vlan: entered promiscuous mode [ 629.770606][T14496] veth1_vlan: entered promiscuous mode [ 629.857504][T14496] veth0_macvtap: entered promiscuous mode [ 629.920327][T14496] veth1_macvtap: entered promiscuous mode [ 629.977292][T14496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.001519][T14496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.035053][T14496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.071409][T14496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.101806][T14496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.128949][T14496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.144613][T14496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.177453][T14496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.196659][T14496] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.206677][T14496] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.222688][T14496] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.236063][T14496] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.521456][ T6324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.562346][ T6324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.624023][ T6324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.641421][ T6324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.530671][T14715] wg2: entered allmulticast mode [ 632.242196][T13057] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 632.252183][T13057] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 632.262847][T13057] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 632.272002][T13057] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 632.280381][T13057] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 632.288290][T13057] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 632.406350][ T6331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.448112][T14734] validate_nla: 1 callbacks suppressed [ 632.448131][T14734] netlink: 'syz.0.2885': attribute type 22 has an invalid length. [ 632.556475][ T6331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.582174][T14742] netlink: 'syz.2.2887': attribute type 10 has an invalid length. [ 632.590892][T14742] __nla_validate_parse: 1 callbacks suppressed [ 632.590911][T14742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2887'. [ 632.614041][T14742] ipvlan1: entered allmulticast mode [ 632.631520][T14742] veth0_vlan: entered allmulticast mode [ 632.666203][T14742] bridge0: port 1(ipvlan1) entered blocking state [ 632.684050][T14742] bridge0: port 1(ipvlan1) entered disabled state [ 632.907845][ T6331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.047365][ T6331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.305180][T14748] netlink: 'syz.3.2888': attribute type 10 has an invalid length. [ 633.353966][T14748] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2888'. [ 633.483801][T14748] caif0: entered promiscuous mode [ 633.501767][T14748] caif0: entered allmulticast mode [ 633.538048][T14748] net_ratelimit: 3321 callbacks suppressed [ 633.538067][T14748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 634.205817][T14773] wg2: left promiscuous mode [ 634.378875][ T5784] Bluetooth: hci1: command tx timeout [ 634.403045][T14737] chnl_net:caif_netlink_parms(): no params data found [ 634.936280][T14737] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.957066][T14737] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.992839][T14737] bridge_slave_0: entered allmulticast mode [ 635.034564][T14737] bridge_slave_0: entered promiscuous mode [ 635.130337][T14737] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.177362][T14737] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.197953][T14737] bridge_slave_1: entered allmulticast mode [ 635.221159][T14737] bridge_slave_1: entered promiscuous mode [ 635.429915][T14797] netlink: 'syz.3.2897': attribute type 2 has an invalid length. [ 635.460509][T14797] netlink: 'syz.3.2897': attribute type 1 has an invalid length. [ 635.483271][T14797] netlink: 198800 bytes leftover after parsing attributes in process `syz.3.2897'. [ 635.510872][T14737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.543151][T14737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.774774][T14737] team0: Port device team_slave_0 added [ 635.812040][T14737] team0: Port device team_slave_1 added [ 635.974174][T14737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.988699][T14737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.053511][T14737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.181699][ T6331] gretap0 (unregistering): left allmulticast mode [ 636.298986][ T6331] gretap0 (unregistering): left promiscuous mode [ 636.305574][ T6331] Ÿë: port 1(gretap0) entered disabled state [ 636.363485][T14737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.380969][T14737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.447770][T14737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.458721][ T5784] Bluetooth: hci1: command tx timeout [ 637.112001][T14737] hsr_slave_0: entered promiscuous mode [ 637.154100][T14737] hsr_slave_1: entered promiscuous mode [ 637.180856][T14737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.197807][T14737] Cannot create hsr debugfs directory [ 637.491287][T14849] FAULT_INJECTION: forcing a failure. [ 637.491287][T14849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.529756][T14849] CPU: 0 PID: 14849 Comm: syz.2.2907 Not tainted syzkaller #0 [ 637.537311][T14849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 637.547431][T14849] Call Trace: [ 637.550759][T14849] [ 637.553732][T14849] dump_stack_lvl+0x18c/0x250 [ 637.558471][T14849] ? show_regs_print_info+0x20/0x20 [ 637.563770][T14849] ? load_image+0x400/0x400 [ 637.568332][T14849] ? __might_fault+0xaa/0x120 [ 637.573065][T14849] ? __lock_acquire+0x7d40/0x7d40 [ 637.578157][T14849] should_fail_ex+0x39d/0x4d0 [ 637.582912][T14849] _copy_from_iter+0x1d9/0x12e0 [ 637.587834][T14849] ? __virt_addr_valid+0x18c/0x540 [ 637.593007][T14849] ? __lock_acquire+0x7d40/0x7d40 [ 637.598090][T14849] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.604298][T14849] ? copyout_mc+0x70/0x70 [ 637.608673][T14849] ? __virt_addr_valid+0x18c/0x540 [ 637.613836][T14849] ? __virt_addr_valid+0x18c/0x540 [ 637.618983][T14849] ? __virt_addr_valid+0x469/0x540 [ 637.624132][T14849] ? __check_object_size+0x506/0xa20 [ 637.629471][T14849] kcm_sendmsg+0xd95/0x28b0 [ 637.634046][T14849] ? kcm_getsockopt+0x280/0x280 [ 637.638956][T14849] ? bpf_lsm_socket_accept+0x10/0x10 [ 637.644301][T14849] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 637.649633][T14849] ? security_socket_sendmsg+0x80/0xa0 [ 637.655142][T14849] ? kcm_getsockopt+0x280/0x280 [ 637.660047][T14849] ____sys_sendmsg+0x5ba/0x960 [ 637.664850][T14849] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.671050][T14849] ? __asan_memset+0x22/0x40 [ 637.675682][T14849] ? __sys_sendmsg_sock+0x30/0x30 [ 637.680750][T14849] ? __import_iovec+0x5f2/0x850 [ 637.685656][T14849] ? import_iovec+0x73/0xa0 [ 637.690207][T14849] ___sys_sendmsg+0x2a6/0x360 [ 637.694917][T14849] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.701114][T14849] ? __sys_sendmsg+0x2a0/0x2a0 [ 637.705929][T14849] ? __lock_acquire+0x7d40/0x7d40 [ 637.711011][T14849] __se_sys_sendmsg+0x1c2/0x2b0 [ 637.715902][T14849] ? __x64_sys_sendmsg+0x80/0x80 [ 637.720894][T14849] do_syscall_64+0x55/0xa0 [ 637.725350][T14849] ? clear_bhb_loop+0x40/0x90 [ 637.730061][T14849] ? clear_bhb_loop+0x40/0x90 [ 637.734780][T14849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 637.740712][T14849] RIP: 0033:0x7f2d1379aeb9 [ 637.745159][T14849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.764818][T14849] RSP: 002b:00007f2d14727028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.773263][T14849] RAX: ffffffffffffffda RBX: 00007f2d13a15fa0 RCX: 00007f2d1379aeb9 [ 637.781268][T14849] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 637.789286][T14849] RBP: 00007f2d14727090 R08: 0000000000000000 R09: 0000000000000000 [ 637.797291][T14849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 637.805301][T14849] R13: 00007f2d13a16038 R14: 00007f2d13a15fa0 R15: 00007ffe6f872e58 [ 637.813321][T14849] [ 638.282080][T14863] netlink: 'syz.2.2912': attribute type 10 has an invalid length. [ 638.350485][T14863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.373360][T14863] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 638.472074][ T6331] hsr_slave_0: left promiscuous mode [ 638.507929][ T6331] hsr_slave_1: left promiscuous mode [ 638.539297][ T5784] Bluetooth: hci1: command tx timeout [ 638.574930][ T6331] veth1_macvtap: left promiscuous mode [ 638.589877][ T6331] veth0_macvtap: left promiscuous mode [ 639.580848][ T6331] team_slave_1 (unregistering): left promiscuous mode [ 639.588080][ T6331] team_slave_1 (unregistering): left allmulticast mode [ 639.600667][ T6331] team0 (unregistering): Port device team_slave_1 removed [ 639.661025][ T6331] C (unregistering): left promiscuous mode [ 639.666938][ T6331] C (unregistering): left allmulticast mode [ 639.674951][ T6331] team0 (unregistering): Port device C removed [ 639.719759][ T6331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.779281][ T6331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.871366][T14888] delete_channel: no stack [ 640.071598][ T6331] bond0 (unregistering): Released all slaves [ 640.449921][T14909] netlink: 'syz.3.2922': attribute type 27 has an invalid length. [ 640.491668][T14909] netlink: 'syz.3.2922': attribute type 27 has an invalid length. [ 640.627905][T13057] Bluetooth: hci1: command tx timeout [ 641.213271][T14926] netlink: 'syz.3.2925': attribute type 10 has an invalid length. [ 641.273176][T14926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.305681][T14926] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 641.652746][T14737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 641.751323][T14737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 641.781829][T14737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 641.819024][T14737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 642.066155][T14737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.128830][T14737] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.166530][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.173916][ T6331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.221164][T13057] Bluetooth: hci0: command 0x0406 tx timeout [ 642.251496][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.258798][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.545939][T14954] delete_channel: no stack [ 643.076163][T14737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.209263][T14737] veth0_vlan: entered promiscuous mode [ 643.251898][T14737] veth1_vlan: entered promiscuous mode [ 643.311718][T14737] veth0_macvtap: entered promiscuous mode [ 643.344866][T14737] veth1_macvtap: entered promiscuous mode [ 643.409474][T14737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.438425][T14737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.467685][T14737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.517135][T14737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.552375][T14737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.638838][T14737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.698832][T14737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.747695][T14737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.791447][T14737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.843927][T14737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.877759][T14737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.910146][T14737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.065869][T14737] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.117681][T14737] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.147016][T14737] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.177737][T14737] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.520313][ T6331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.549439][ T6331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.665403][ T6349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.676524][ T6349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.906622][T15013] netlink: 'syz.1.2879': attribute type 27 has an invalid length. [ 644.919289][T15013] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2879'. [ 644.960082][T15013] netlink: 'syz.1.2879': attribute type 4 has an invalid length. [ 644.988222][T15013] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2879'. [ 645.112238][T15013] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 645.416901][T15024] FAULT_INJECTION: forcing a failure. [ 645.416901][T15024] name failslab, interval 1, probability 0, space 0, times 0 [ 645.458668][T15024] CPU: 1 PID: 15024 Comm: syz.0.2943 Not tainted syzkaller #0 [ 645.466229][T15024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 645.476387][T15024] Call Trace: [ 645.479718][T15024] [ 645.482702][T15024] dump_stack_lvl+0x18c/0x250 [ 645.487555][T15024] ? sctp_sendmsg+0x1575/0x28c0 [ 645.492472][T15024] ? ___sys_sendmsg+0x2a6/0x360 [ 645.497372][T15024] ? show_regs_print_info+0x20/0x20 [ 645.502616][T15024] ? load_image+0x400/0x400 [ 645.507194][T15024] should_fail_ex+0x39d/0x4d0 [ 645.511949][T15024] should_failslab+0x9/0x20 [ 645.516509][T15024] slab_pre_alloc_hook+0x59/0x310 [ 645.521603][T15024] ? sctp_add_bind_addr+0x8c/0x360 [ 645.526778][T15024] __kmem_cache_alloc_node+0x53/0x250 [ 645.532225][T15024] ? sctp_add_bind_addr+0x8c/0x360 [ 645.537417][T15024] kmalloc_trace+0x2a/0xe0 [ 645.541901][T15024] sctp_add_bind_addr+0x8c/0x360 [ 645.546915][T15024] sctp_copy_local_addr_list+0x315/0x4f0 [ 645.552632][T15024] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 645.558424][T15024] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 645.564563][T15024] ? sctp_v6_is_any+0x64/0x70 [ 645.569314][T15024] ? sctp_copy_one_addr+0x8c/0x350 [ 645.574514][T15024] sctp_bind_addr_copy+0xb3/0x3c0 [ 645.579593][T15024] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 645.585962][T15024] sctp_connect_new_asoc+0x2f9/0x6a0 [ 645.591281][T15024] ? __sctp_connect+0xd80/0xd80 [ 645.596167][T15024] ? __local_bh_enable_ip+0x13a/0x1c0 [ 645.601580][T15024] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 645.607164][T15024] ? security_sctp_bind_connect+0x89/0xb0 [ 645.612933][T15024] sctp_sendmsg+0x1575/0x28c0 [ 645.617662][T15024] ? sctp_getsockopt+0xb60/0xb60 [ 645.622646][T15024] ? aa_sk_perm+0x83c/0x970 [ 645.627200][T15024] ? aa_af_perm+0x330/0x330 [ 645.631737][T15024] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 645.638204][T15024] ? sock_rps_record_flow+0x19/0x3f0 [ 645.643540][T15024] ? inet_sendmsg+0xe9/0x2f0 [ 645.648178][T15024] ? inet_send_prepare+0x260/0x260 [ 645.653333][T15024] ____sys_sendmsg+0x5ba/0x960 [ 645.658142][T15024] ? __lock_acquire+0x7d40/0x7d40 [ 645.663202][T15024] ? __sys_sendmsg_sock+0x30/0x30 [ 645.668268][T15024] ? __import_iovec+0x5f2/0x850 [ 645.673176][T15024] ? import_iovec+0x73/0xa0 [ 645.677721][T15024] ___sys_sendmsg+0x2a6/0x360 [ 645.682435][T15024] ? get_pid_task+0x20/0x1e0 [ 645.687073][T15024] ? __sys_sendmsg+0x2a0/0x2a0 [ 645.691911][T15024] ? __lock_acquire+0x7d40/0x7d40 [ 645.697019][T15024] __se_sys_sendmsg+0x1c2/0x2b0 [ 645.701937][T15024] ? __x64_sys_sendmsg+0x80/0x80 [ 645.706923][T15024] ? lockdep_hardirqs_on+0x98/0x150 [ 645.712165][T15024] do_syscall_64+0x55/0xa0 [ 645.716634][T15024] ? clear_bhb_loop+0x40/0x90 [ 645.721353][T15024] ? clear_bhb_loop+0x40/0x90 [ 645.726065][T15024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.731991][T15024] RIP: 0033:0x7f72d7d9aeb9 [ 645.736445][T15024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.756091][T15024] RSP: 002b:00007f72d8c1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.764549][T15024] RAX: ffffffffffffffda RBX: 00007f72d8015fa0 RCX: 00007f72d7d9aeb9 [ 645.772564][T15024] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 645.780579][T15024] RBP: 00007f72d8c1d090 R08: 0000000000000000 R09: 0000000000000000 [ 645.788622][T15024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 645.796629][T15024] R13: 00007f72d8016038 R14: 00007f72d8015fa0 R15: 00007ffdcff73f88 [ 645.804647][T15024] [ 646.945265][T15048] FAULT_INJECTION: forcing a failure. [ 646.945265][T15048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.973846][T15048] CPU: 0 PID: 15048 Comm: syz.3.2953 Not tainted syzkaller #0 [ 646.981410][T15048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 646.991546][T15048] Call Trace: [ 646.994919][T15048] [ 646.997899][T15048] dump_stack_lvl+0x18c/0x250 [ 647.002630][T15048] ? show_regs_print_info+0x20/0x20 [ 647.007874][T15048] ? load_image+0x400/0x400 [ 647.012423][T15048] ? __might_fault+0xaa/0x120 [ 647.017167][T15048] ? __lock_acquire+0x7d40/0x7d40 [ 647.022299][T15048] should_fail_ex+0x39d/0x4d0 [ 647.027037][T15048] _copy_from_user+0x2f/0xe0 [ 647.031671][T15048] ___sys_sendmsg+0x1c7/0x360 [ 647.036399][T15048] ? get_pid_task+0x20/0x1e0 [ 647.041138][T15048] ? __sys_sendmsg+0x2a0/0x2a0 [ 647.045970][T15048] ? __lock_acquire+0x7d40/0x7d40 [ 647.051060][T15048] __se_sys_sendmsg+0x1c2/0x2b0 [ 647.055957][T15048] ? __x64_sys_sendmsg+0x80/0x80 [ 647.060945][T15048] ? lockdep_hardirqs_on+0x98/0x150 [ 647.066197][T15048] do_syscall_64+0x55/0xa0 [ 647.070663][T15048] ? clear_bhb_loop+0x40/0x90 [ 647.075394][T15048] ? clear_bhb_loop+0x40/0x90 [ 647.080122][T15048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.086071][T15048] RIP: 0033:0x7f1ce219aeb9 [ 647.090529][T15048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.110217][T15048] RSP: 002b:00007f1ce3040028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.118677][T15048] RAX: ffffffffffffffda RBX: 00007f1ce2415fa0 RCX: 00007f1ce219aeb9 [ 647.126689][T15048] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 647.134722][T15048] RBP: 00007f1ce3040090 R08: 0000000000000000 R09: 0000000000000000 [ 647.142746][T15048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.150763][T15048] R13: 00007f1ce2416038 R14: 00007f1ce2415fa0 R15: 00007fff3a0b3c18 [ 647.158798][T15048] [ 647.530990][T15055] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2956'. [ 647.558892][T15054] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.2955'. [ 648.146229][T15059] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2958'. [ 648.489211][T15059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 648.537532][T15067] netlink: 'syz.2.2961': attribute type 10 has an invalid length. [ 648.556205][T15067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2961'. [ 648.566061][T15067] bridge0: port 1(ipvlan1) entered blocking state [ 648.582256][T15067] bridge0: port 1(ipvlan1) entered disabled state [ 648.597045][T15067] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 648.813173][T15075] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2965'. [ 648.857097][T15075] bridge_slave_1: left allmulticast mode [ 648.879289][T15075] bridge_slave_1: left promiscuous mode [ 648.887042][T15075] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.039515][T15080] netlink: 18187 bytes leftover after parsing attributes in process `syz.0.2966'. [ 649.061159][T15082] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.081944][T15083] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.089502][T15083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.228190][T15088] netlink: 'syz.1.2975': attribute type 10 has an invalid length. [ 649.340427][T15092] FAULT_INJECTION: forcing a failure. [ 649.340427][T15092] name failslab, interval 1, probability 0, space 0, times 0 [ 649.358077][T15088] team0: Port device macvlan0 added [ 649.368269][T15092] CPU: 1 PID: 15092 Comm: syz.2.2968 Not tainted syzkaller #0 [ 649.375821][T15092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 649.385934][T15092] Call Trace: [ 649.389265][T15092] [ 649.392240][T15092] dump_stack_lvl+0x18c/0x250 [ 649.397002][T15092] ? show_regs_print_info+0x20/0x20 [ 649.402329][T15092] ? load_image+0x400/0x400 [ 649.406897][T15092] ? __might_sleep+0xe0/0xe0 [ 649.411539][T15092] ? __lock_acquire+0x7d40/0x7d40 [ 649.416616][T15092] ? mark_lock+0x94/0x320 [ 649.421021][T15092] should_fail_ex+0x39d/0x4d0 [ 649.425763][T15092] should_failslab+0x9/0x20 [ 649.430327][T15092] slab_pre_alloc_hook+0x59/0x310 [ 649.435413][T15092] ? __get_vm_area_node+0x125/0x370 [ 649.440692][T15092] __kmem_cache_alloc_node+0x53/0x250 [ 649.446127][T15092] ? __get_vm_area_node+0x125/0x370 [ 649.451568][T15092] kmalloc_node_trace+0x26/0xe0 [ 649.456491][T15092] __get_vm_area_node+0x125/0x370 [ 649.461592][T15092] __vmalloc_node_range+0x36e/0x1330 [ 649.466954][T15092] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 649.472573][T15092] ? perf_trace_preemptirq_template+0xac/0x330 [ 649.478818][T15092] ? lock_chain_count+0x20/0x20 [ 649.483742][T15092] ? free_vm_area+0x50/0x50 [ 649.488308][T15092] ? lockdep_hardirqs_on+0x98/0x150 [ 649.493567][T15092] ? end_current_label_crit_section+0x170/0x170 [ 649.499881][T15092] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 649.505492][T15092] __vmalloc+0x7a/0x90 [ 649.509626][T15092] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 649.515235][T15092] bpf_prog_alloc_no_stats+0x47/0x440 [ 649.520675][T15092] ? bpf_prog_alloc+0x2b/0x1a0 [ 649.525537][T15092] bpf_prog_alloc+0x3d/0x1a0 [ 649.530188][T15092] bpf_prog_load+0x6eb/0x1670 [ 649.534929][T15092] ? map_freeze+0x420/0x420 [ 649.539497][T15092] ? __might_fault+0xaa/0x120 [ 649.544230][T15092] ? __lock_acquire+0x7d40/0x7d40 [ 649.549327][T15092] ? file_end_write+0x159/0x250 [ 649.554274][T15092] ? __might_fault+0xaa/0x120 [ 649.559100][T15092] ? __might_fault+0xc6/0x120 [ 649.563867][T15092] ? __might_fault+0xaa/0x120 [ 649.568600][T15092] ? bpf_lsm_bpf+0x9/0x10 [ 649.572993][T15092] ? security_bpf+0x7e/0xa0 [ 649.577557][T15092] __sys_bpf+0x5ba/0x890 [ 649.581861][T15092] ? bpf_link_show_fdinfo+0x390/0x390 [ 649.587305][T15092] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 649.593535][T15092] __x64_sys_bpf+0x7c/0x90 [ 649.598194][T15092] do_syscall_64+0x55/0xa0 [ 649.602875][T15092] ? clear_bhb_loop+0x40/0x90 [ 649.607657][T15092] ? clear_bhb_loop+0x40/0x90 [ 649.612490][T15092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.618442][T15092] RIP: 0033:0x7f2d1379aeb9 [ 649.622929][T15092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.642630][T15092] RSP: 002b:00007f2d14727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 649.651143][T15092] RAX: ffffffffffffffda RBX: 00007f2d13a15fa0 RCX: 00007f2d1379aeb9 [ 649.659169][T15092] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 649.667195][T15092] RBP: 00007f2d14727090 R08: 0000000000000000 R09: 0000000000000000 [ 649.675219][T15092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.683504][T15092] R13: 00007f2d13a16038 R14: 00007f2d13a15fa0 R15: 00007ffe6f872e58 [ 649.691554][T15092] [ 649.718960][T15092] syz.2.2968: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 649.772315][T15092] CPU: 1 PID: 15092 Comm: syz.2.2968 Not tainted syzkaller #0 [ 649.779887][T15092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 649.790092][T15092] Call Trace: [ 649.793421][T15092] [ 649.796425][T15092] dump_stack_lvl+0x18c/0x250 [ 649.801177][T15092] ? show_regs_print_info+0x20/0x20 [ 649.806440][T15092] ? load_image+0x400/0x400 [ 649.811004][T15092] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 649.817487][T15092] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 649.824036][T15092] warn_alloc+0x246/0x340 [ 649.828405][T15092] ? __get_vm_area_node+0x125/0x370 [ 649.833641][T15092] ? zone_watermark_ok_safe+0x230/0x230 [ 649.839220][T15092] ? rcu_is_watching+0x15/0xb0 [ 649.844026][T15092] ? __get_vm_area_node+0x356/0x370 [ 649.849271][T15092] __vmalloc_node_range+0x393/0x1330 [ 649.854601][T15092] ? perf_trace_preemptirq_template+0xac/0x330 [ 649.860803][T15092] ? lock_chain_count+0x20/0x20 [ 649.865695][T15092] ? free_vm_area+0x50/0x50 [ 649.870243][T15092] ? lockdep_hardirqs_on+0x98/0x150 [ 649.875495][T15092] ? end_current_label_crit_section+0x170/0x170 [ 649.881798][T15092] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 649.887383][T15092] __vmalloc+0x7a/0x90 [ 649.891492][T15092] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 649.897072][T15092] bpf_prog_alloc_no_stats+0x47/0x440 [ 649.902495][T15092] ? bpf_prog_alloc+0x2b/0x1a0 [ 649.907290][T15092] bpf_prog_alloc+0x3d/0x1a0 [ 649.911917][T15092] bpf_prog_load+0x6eb/0x1670 [ 649.916640][T15092] ? map_freeze+0x420/0x420 [ 649.921184][T15092] ? __might_fault+0xaa/0x120 [ 649.925908][T15092] ? __lock_acquire+0x7d40/0x7d40 [ 649.930965][T15092] ? file_end_write+0x159/0x250 [ 649.935850][T15092] ? __might_fault+0xaa/0x120 [ 649.940559][T15092] ? __might_fault+0xc6/0x120 [ 649.945273][T15092] ? __might_fault+0xaa/0x120 [ 649.949999][T15092] ? bpf_lsm_bpf+0x9/0x10 [ 649.954453][T15092] ? security_bpf+0x7e/0xa0 [ 649.958996][T15092] __sys_bpf+0x5ba/0x890 [ 649.963294][T15092] ? bpf_link_show_fdinfo+0x390/0x390 [ 649.968724][T15092] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 649.974931][T15092] __x64_sys_bpf+0x7c/0x90 [ 649.979390][T15092] do_syscall_64+0x55/0xa0 [ 649.983849][T15092] ? clear_bhb_loop+0x40/0x90 [ 649.988559][T15092] ? clear_bhb_loop+0x40/0x90 [ 649.993276][T15092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.999199][T15092] RIP: 0033:0x7f2d1379aeb9 [ 650.003644][T15092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.023294][T15092] RSP: 002b:00007f2d14727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 650.031746][T15092] RAX: ffffffffffffffda RBX: 00007f2d13a15fa0 RCX: 00007f2d1379aeb9 [ 650.039767][T15092] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 650.047819][T15092] RBP: 00007f2d14727090 R08: 0000000000000000 R09: 0000000000000000 [ 650.055819][T15092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.063821][T15092] R13: 00007f2d13a16038 R14: 00007f2d13a15fa0 R15: 00007ffe6f872e58 [ 650.071840][T15092] [ 650.098433][T15092] Mem-Info: [ 650.101825][T15092] active_anon:5321 inactive_anon:0 isolated_anon:0 [ 650.101825][T15092] active_file:18528 inactive_file:40156 isolated_file:0 [ 650.101825][T15092] unevictable:768 dirty:186 writeback:0 [ 650.101825][T15092] slab_reclaimable:10739 slab_unreclaimable:92750 [ 650.101825][T15092] mapped:25914 shmem:1361 pagetables:600 [ 650.101825][T15092] sec_pagetables:0 bounce:0 [ 650.101825][T15092] kernel_misc_reclaimable:0 [ 650.101825][T15092] free:1347085 free_pcp:7980 free_cma:0 [ 650.150689][T15092] Node 0 active_anon:21284kB inactive_anon:0kB active_file:74112kB inactive_file:160420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103656kB dirty:740kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11832kB pagetables:2400kB sec_pagetables:0kB all_unreclaimable? no [ 650.186410][T15092] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 650.223337][T15092] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 650.252418][T15092] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 650.261745][T15092] Node 0 DMA32 free:1472208kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21244kB inactive_anon:0kB active_file:74112kB inactive_file:159596kB unevictable:1536kB writepending:740kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:20620kB local_pcp:7012kB free_cma:0kB [ 650.307713][T15092] lowmem_reserve[]: 0 0 0 0 0 [ 650.313221][T15092] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 650.379675][T15092] lowmem_reserve[]: 0 0 0 0 0 [ 650.385253][T15092] Node 1 Normal free:3900764kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:11552kB local_pcp:7136kB free_cma:0kB [ 650.452467][T15092] lowmem_reserve[]: 0 0 0 0 0 [ 650.463703][T15092] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 650.483152][T15092] Node 0 DMA32: 0*4kB 110*8kB (UM) 696*16kB (ME) 587*32kB (UME) 332*64kB (UME) 361*128kB (UME) 79*256kB (UME) 22*512kB (UME) 5*1024kB (UME) 3*2048kB (UME) 325*4096kB (UM) = 1472208kB [ 650.508569][T15092] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 650.525448][T15092] Node 1 Normal: 257*4kB (UME) 49*8kB (UME) 35*16kB (UME) 193*32kB (UME) 72*64kB (UE) 11*128kB (UME) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3900764kB [ 650.552196][T15092] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 650.566606][T15092] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 650.584057][T15092] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 650.601926][T15092] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 650.623378][T15092] 60045 total pagecache pages [ 650.631948][T15092] 0 pages in swap cache [ 650.636532][T15092] Free swap = 124996kB [ 650.642442][T15092] Total swap = 124996kB [ 650.646927][T15092] 2097051 pages RAM [ 650.654641][T15092] 0 pages HighMem/MovableOnly [ 650.676827][T15092] 416922 pages reserved [ 650.685398][T15092] 0 pages cma reserved [ 651.229477][T15115] netlink: 'syz.2.2976': attribute type 10 has an invalid length. [ 651.459520][T15123] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2977'. [ 651.780036][ T1107] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.905770][ T1107] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.993011][ T1107] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.083276][ T1107] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.506060][T15140] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2986'. [ 653.228805][T13057] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 653.243733][T13057] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 653.253022][T13057] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 653.262939][T13057] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 653.270994][T13057] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 653.278829][T13057] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 653.844382][T15179] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2995'. [ 655.040727][T15156] chnl_net:caif_netlink_parms(): no params data found [ 655.348784][ T5784] Bluetooth: hci2: command tx timeout [ 655.480398][ T1107] hsr_slave_0: left promiscuous mode [ 655.512806][ T1107] hsr_slave_1: left promiscuous mode [ 655.534690][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.577907][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.627380][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.650620][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.684019][ T1107] bridge_slave_1: left allmulticast mode [ 655.711271][ T1107] bridge_slave_1: left promiscuous mode [ 655.743017][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.799926][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.912694][ T1107] veth1_macvtap: left promiscuous mode [ 655.923050][ T1107] veth0_macvtap: left promiscuous mode [ 655.936006][ T1107] veth1_vlan: left promiscuous mode [ 655.945593][ T1107] veth0_vlan: left promiscuous mode [ 656.032760][T15244] FAULT_INJECTION: forcing a failure. [ 656.032760][T15244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 656.046500][T15244] CPU: 1 PID: 15244 Comm: syz.3.3012 Not tainted syzkaller #0 [ 656.054043][T15244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 656.064164][T15244] Call Trace: [ 656.067492][T15244] [ 656.070488][T15244] dump_stack_lvl+0x18c/0x250 [ 656.075246][T15244] ? show_regs_print_info+0x20/0x20 [ 656.080516][T15244] ? load_image+0x400/0x400 [ 656.085091][T15244] ? __might_fault+0xaa/0x120 [ 656.089823][T15244] ? __lock_acquire+0x7d40/0x7d40 [ 656.094920][T15244] should_fail_ex+0x39d/0x4d0 [ 656.099685][T15244] _copy_from_user+0x2f/0xe0 [ 656.104334][T15244] __sys_bpf+0x23e/0x890 [ 656.108653][T15244] ? bpf_link_show_fdinfo+0x390/0x390 [ 656.114113][T15244] ? lock_chain_count+0x20/0x20 [ 656.119030][T15244] __x64_sys_bpf+0x7c/0x90 [ 656.123510][T15244] do_syscall_64+0x55/0xa0 [ 656.127990][T15244] ? clear_bhb_loop+0x40/0x90 [ 656.132755][T15244] ? clear_bhb_loop+0x40/0x90 [ 656.137494][T15244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 656.143440][T15244] RIP: 0033:0x7f1ce219aeb9 [ 656.147966][T15244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.167631][T15244] RSP: 002b:00007f1ce3040028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 656.176082][T15244] RAX: ffffffffffffffda RBX: 00007f1ce2415fa0 RCX: 00007f1ce219aeb9 [ 656.184175][T15244] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 656.192180][T15244] RBP: 00007f1ce3040090 R08: 0000000000000000 R09: 0000000000000000 [ 656.200189][T15244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.208195][T15244] R13: 00007f1ce2416038 R14: 00007f1ce2415fa0 R15: 00007fff3a0b3c18 [ 656.216225][T15244] [ 656.927196][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 656.979686][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 657.032617][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.084856][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.420022][ T5784] Bluetooth: hci2: command tx timeout [ 657.493649][ T1107] bond0 (unregistering): Released all slaves [ 657.652654][T15156] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.666878][T15156] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.674280][T15156] bridge_slave_0: entered allmulticast mode [ 657.682218][T15156] bridge_slave_0: entered promiscuous mode [ 657.725251][T15156] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.737768][T15156] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.745113][T15156] bridge_slave_1: entered allmulticast mode [ 657.753327][T15156] bridge_slave_1: entered promiscuous mode [ 657.806772][T15156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.820099][T15156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.862509][T15156] team0: Port device team_slave_0 added [ 657.873746][T15156] team0: Port device team_slave_1 added [ 657.960831][T15156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.981672][T15156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.046426][T15156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.070670][T15156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.095106][T15156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.217738][T15156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.651511][T15156] hsr_slave_0: entered promiscuous mode [ 658.709194][T15156] hsr_slave_1: entered promiscuous mode [ 658.738903][T15156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 658.767872][T15156] Cannot create hsr debugfs directory [ 659.498647][ T5784] Bluetooth: hci2: command tx timeout [ 659.676355][T15268] lo: entered allmulticast mode [ 659.722915][T15276] netlink: 'syz.3.3017': attribute type 9 has an invalid length. [ 659.807964][T15276] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3017'. [ 659.841706][T15272] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3017'. [ 659.895498][T15272] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 660.806341][T15156] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 660.851710][T15294] netlink: 'syz.3.3023': attribute type 41 has an invalid length. [ 660.923392][T15156] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 660.946571][T15156] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 660.999070][T15156] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 661.315975][T15307] netlink: 'syz.3.3024': attribute type 1 has an invalid length. [ 661.354519][T15307] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.3024'. [ 661.395076][T15156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.480234][T15156] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.532887][ T6352] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.540142][ T6352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.572874][ T6352] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.580159][ T6352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.593605][ T5784] Bluetooth: hci2: command tx timeout [ 662.402423][T15156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.652433][T15156] veth0_vlan: entered promiscuous mode [ 662.708172][T15156] veth1_vlan: entered promiscuous mode [ 662.849862][T15156] veth0_macvtap: entered promiscuous mode [ 662.888926][T15156] veth1_macvtap: entered promiscuous mode [ 662.984515][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.013272][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.047681][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.067611][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.093609][T15156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.121050][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.157187][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.189363][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.215902][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.254247][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.284527][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.320825][T15156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.393251][T15156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.414880][T15156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.425218][T15156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.434399][T15156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.762726][ T6329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.795859][ T6329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.984436][ T6324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.010225][ T6324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.540601][T15386] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.3041'. [ 665.657495][T15405] lo: entered allmulticast mode [ 666.648548][T15425] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3053'. [ 668.244180][T15459] FAULT_INJECTION: forcing a failure. [ 668.244180][T15459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.277924][T15459] CPU: 0 PID: 15459 Comm: syz.2.3062 Not tainted syzkaller #0 [ 668.285490][T15459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 668.295604][T15459] Call Trace: [ 668.298932][T15459] [ 668.301904][T15459] dump_stack_lvl+0x18c/0x250 [ 668.306640][T15459] ? show_regs_print_info+0x20/0x20 [ 668.311899][T15459] ? load_image+0x400/0x400 [ 668.316463][T15459] ? __might_fault+0xaa/0x120 [ 668.321190][T15459] ? __lock_acquire+0x7d40/0x7d40 [ 668.326279][T15459] should_fail_ex+0x39d/0x4d0 [ 668.331028][T15459] _copy_to_iter+0x1ce/0x1120 [ 668.335768][T15459] ? __might_fault+0xc6/0x120 [ 668.340517][T15459] ? __virt_addr_valid+0x18c/0x540 [ 668.345685][T15459] ? iov_iter_init+0x1e0/0x1e0 [ 668.350500][T15459] ? __virt_addr_valid+0x18c/0x540 [ 668.355675][T15459] ? __virt_addr_valid+0x469/0x540 [ 668.360824][T15459] ? __phys_addr_symbol+0x2f/0x70 [ 668.365888][T15459] ? __check_object_size+0x506/0xa20 [ 668.371220][T15459] __skb_datagram_iter+0xdb/0x780 [ 668.376318][T15459] ? skb_copy_datagram_iter+0x200/0x200 [ 668.381996][T15459] __skb_datagram_iter+0x561/0x780 [ 668.387149][T15459] ? skb_copy_datagram_iter+0x200/0x200 [ 668.392738][T15459] skb_copy_datagram_iter+0xb1/0x200 [ 668.398171][T15459] tipc_recvmsg+0x7cc/0x1400 [ 668.402813][T15459] ? tipc_send_packet+0x90/0x90 [ 668.407697][T15459] ? aa_sock_msg_perm+0x94/0x150 [ 668.412665][T15459] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 668.418067][T15459] ? security_socket_recvmsg+0x89/0xb0 [ 668.423556][T15459] ? tipc_send_packet+0x90/0x90 [ 668.428432][T15459] ____sys_recvmsg+0x2ce/0x5e0 [ 668.433263][T15459] ? __sys_recvmsg_sock+0x50/0x50 [ 668.438516][T15459] ? import_iovec+0x73/0xa0 [ 668.443083][T15459] ___sys_recvmsg+0x216/0x590 [ 668.447891][T15459] ? __sys_recvmsg+0x2a0/0x2a0 [ 668.452702][T15459] ? ksys_write+0x1c4/0x260 [ 668.457255][T15459] ? __fget_files+0x43d/0x4b0 [ 668.461991][T15459] __x64_sys_recvmsg+0x20c/0x2e0 [ 668.466961][T15459] ? ___sys_recvmsg+0x590/0x590 [ 668.471884][T15459] ? lockdep_hardirqs_on+0x98/0x150 [ 668.477115][T15459] do_syscall_64+0x55/0xa0 [ 668.481570][T15459] ? clear_bhb_loop+0x40/0x90 [ 668.486310][T15459] ? clear_bhb_loop+0x40/0x90 [ 668.491040][T15459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.497001][T15459] RIP: 0033:0x7f2d1379aeb9 [ 668.501453][T15459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.521184][T15459] RSP: 002b:00007f2d14727028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 668.529625][T15459] RAX: ffffffffffffffda RBX: 00007f2d13a15fa0 RCX: 00007f2d1379aeb9 [ 668.537631][T15459] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000005 [ 668.545637][T15459] RBP: 00007f2d14727090 R08: 0000000000000000 R09: 0000000000000000 [ 668.553731][T15459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 668.561737][T15459] R13: 00007f2d13a16038 R14: 00007f2d13a15fa0 R15: 00007ffe6f872e58 [ 668.569757][T15459] [ 669.285155][T15480] netlink: 'syz.0.3070': attribute type 22 has an invalid length. [ 669.293435][T15480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3070'. [ 671.090468][T15513] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3080'. [ 671.323254][T15525] FAULT_INJECTION: forcing a failure. [ 671.323254][T15525] name failslab, interval 1, probability 0, space 0, times 0 [ 671.340807][T15525] CPU: 1 PID: 15525 Comm: syz.3.3084 Not tainted syzkaller #0 [ 671.348375][T15525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 671.358480][T15525] Call Trace: [ 671.361793][T15525] [ 671.364762][T15525] dump_stack_lvl+0x18c/0x250 [ 671.369494][T15525] ? show_regs_print_info+0x20/0x20 [ 671.374742][T15525] ? load_image+0x400/0x400 [ 671.379293][T15525] ? __lock_acquire+0x7d40/0x7d40 [ 671.384356][T15525] ? mark_lock+0x94/0x320 [ 671.388720][T15525] should_fail_ex+0x39d/0x4d0 [ 671.393442][T15525] should_failslab+0x9/0x20 [ 671.398000][T15525] slab_pre_alloc_hook+0x59/0x310 [ 671.403099][T15525] kmem_cache_alloc_node+0x60/0x320 [ 671.408441][T15525] ? __alloc_skb+0x103/0x2c0 [ 671.413089][T15525] __alloc_skb+0x103/0x2c0 [ 671.417559][T15525] rtmsg_ifa+0xf9/0x1f0 [ 671.421767][T15525] __inet_insert_ifa+0x9a8/0xbd0 [ 671.426752][T15525] ? inet_rcu_free_ifa+0xc0/0xc0 [ 671.431738][T15525] devinet_ioctl+0x13d1/0x1c40 [ 671.436548][T15525] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 671.441722][T15525] ? _copy_from_user+0xa5/0xe0 [ 671.446590][T15525] ? get_user_ifreq+0x12b/0x180 [ 671.451620][T15525] inet_ioctl+0x42b/0x560 [ 671.455988][T15525] ? tomoyo_path_number_perm+0x217/0x620 [ 671.461668][T15525] ? inet_shutdown+0x370/0x370 [ 671.466465][T15525] ? slab_free_freelist_hook+0x130/0x1a0 [ 671.472148][T15525] ? tomoyo_path_number_perm+0x500/0x620 [ 671.477921][T15525] ? __kmem_cache_free+0xba/0x1e0 [ 671.482996][T15525] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 671.488596][T15525] ? packet_ioctl+0x270/0x340 [ 671.493323][T15525] sock_do_ioctl+0xfc/0x310 [ 671.497876][T15525] ? sock_show_fdinfo+0xb0/0xb0 [ 671.502793][T15525] sock_ioctl+0x5ba/0x7e0 [ 671.507159][T15525] ? sock_poll+0x3e0/0x3e0 [ 671.511629][T15525] ? bpf_lsm_file_ioctl+0x9/0x10 [ 671.516607][T15525] ? security_file_ioctl+0x80/0xa0 [ 671.521762][T15525] ? sock_poll+0x3e0/0x3e0 [ 671.526234][T15525] __se_sys_ioctl+0xfd/0x170 [ 671.530957][T15525] do_syscall_64+0x55/0xa0 [ 671.535410][T15525] ? clear_bhb_loop+0x40/0x90 [ 671.540180][T15525] ? clear_bhb_loop+0x40/0x90 [ 671.544897][T15525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 671.550827][T15525] RIP: 0033:0x7f1ce219aeb9 [ 671.555281][T15525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.574927][T15525] RSP: 002b:00007f1ce3040028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 671.583375][T15525] RAX: ffffffffffffffda RBX: 00007f1ce2415fa0 RCX: 00007f1ce219aeb9 [ 671.591379][T15525] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000007 [ 671.599469][T15525] RBP: 00007f1ce3040090 R08: 0000000000000000 R09: 0000000000000000 [ 671.607557][T15525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.615568][T15525] R13: 00007f1ce2416038 R14: 00007f1ce2415fa0 R15: 00007fff3a0b3c18 [ 671.623616][T15525] [ 673.760501][T15531] netlink: 'syz.1.3088': attribute type 3 has an invalid length. [ 673.997912][T15531] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3088'. [ 674.365934][T15547] IPv6: NLM_F_CREATE should be specified when creating new route [ 674.834227][T15561] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3099'. [ 675.608411][T15576] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3104'. [ 675.666607][T15576] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3104'. [ 675.836703][T15588] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3109'. [ 677.125707][T15614] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3117'. [ 677.556420][T15623] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3121'. [ 677.580756][T15623] netlink: 'syz.2.3121': attribute type 39 has an invalid length. [ 677.765880][T15630] netlink: 'syz.1.3123': attribute type 10 has an invalid length. [ 677.876102][T15630] veth0_vlan: left promiscuous mode [ 677.916423][T15630] veth0_vlan: entered promiscuous mode [ 677.940947][T15630] team0: Device veth0_vlan failed to register rx_handler [ 678.076326][T15636] netlink: 'syz.1.3123': attribute type 12 has an invalid length. [ 678.118091][T15636] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3123'. [ 679.470228][T15681] FAULT_INJECTION: forcing a failure. [ 679.470228][T15681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.511933][T15681] CPU: 0 PID: 15681 Comm: syz.0.3141 Not tainted syzkaller #0 [ 679.519507][T15681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 679.529627][T15681] Call Trace: [ 679.532955][T15681] [ 679.536016][T15681] dump_stack_lvl+0x18c/0x250 [ 679.540761][T15681] ? show_regs_print_info+0x20/0x20 [ 679.546026][T15681] ? load_image+0x400/0x400 [ 679.550592][T15681] ? __might_fault+0xaa/0x120 [ 679.555320][T15681] ? __lock_acquire+0x7d40/0x7d40 [ 679.560437][T15681] should_fail_ex+0x39d/0x4d0 [ 679.565204][T15681] _copy_from_user+0x2f/0xe0 [ 679.569854][T15681] __sys_bpf+0x23e/0x890 [ 679.574147][T15681] ? trace_irq_disable+0x37/0xe0 [ 679.579140][T15681] ? bpf_link_show_fdinfo+0x390/0x390 [ 679.584585][T15681] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 679.591152][T15681] __x64_sys_bpf+0x7c/0x90 [ 679.595640][T15681] do_syscall_64+0x55/0xa0 [ 679.600143][T15681] ? clear_bhb_loop+0x40/0x90 [ 679.604888][T15681] ? clear_bhb_loop+0x40/0x90 [ 679.609632][T15681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.615576][T15681] RIP: 0033:0x7fab4619aeb9 [ 679.620053][T15681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.639866][T15681] RSP: 002b:00007fab47092028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 679.648433][T15681] RAX: ffffffffffffffda RBX: 00007fab46415fa0 RCX: 00007fab4619aeb9 [ 679.656466][T15681] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 679.664578][T15681] RBP: 00007fab47092090 R08: 0000000000000000 R09: 0000000000000000 [ 679.673119][T15681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.681146][T15681] R13: 00007fab46416038 R14: 00007fab46415fa0 R15: 00007ffd5cc342f8 [ 679.689180][T15681] [ 680.139213][T15692] netlink: 'syz.2.3144': attribute type 19 has an invalid length. [ 680.151499][T15692] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.3144'. [ 681.124482][T15703] FAULT_INJECTION: forcing a failure. [ 681.124482][T15703] name failslab, interval 1, probability 0, space 0, times 0 [ 681.147840][T15703] CPU: 1 PID: 15703 Comm: syz.2.3148 Not tainted syzkaller #0 [ 681.155413][T15703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 681.165626][T15703] Call Trace: [ 681.168965][T15703] [ 681.171954][T15703] dump_stack_lvl+0x18c/0x250 [ 681.176887][T15703] ? show_regs_print_info+0x20/0x20 [ 681.182186][T15703] ? load_image+0x400/0x400 [ 681.186786][T15703] ? perf_trace_lock+0x304/0x3b0 [ 681.191836][T15703] should_fail_ex+0x39d/0x4d0 [ 681.196603][T15703] should_failslab+0x9/0x20 [ 681.201171][T15703] slab_pre_alloc_hook+0x59/0x310 [ 681.206273][T15703] kmem_cache_alloc+0x5a/0x2d0 [ 681.211120][T15703] ? skb_clone+0x1eb/0x370 [ 681.215590][T15703] skb_clone+0x1eb/0x370 [ 681.219894][T15703] __netlink_deliver_tap+0x41c/0x830 [ 681.225248][T15703] ? netlink_deliver_tap+0x2e/0x1b0 [ 681.230594][T15703] netlink_deliver_tap+0x19c/0x1b0 [ 681.235850][T15703] netlink_dump+0x94b/0xe50 [ 681.240432][T15703] ? netlink_lookup+0x200/0x200 [ 681.245363][T15703] ? netlink_autobind+0x300/0x300 [ 681.250560][T15703] ? trace_event_raw_event_lock+0x250/0x250 [ 681.256517][T15703] ? netlink_lookup+0x30/0x200 [ 681.261333][T15703] ? netlink_lookup+0x30/0x200 [ 681.266162][T15703] __netlink_dump_start+0x5f1/0x810 [ 681.271431][T15703] packet_diag_handler_dump+0x1da/0x2a0 [ 681.277031][T15703] ? __lock_acquire+0x7d40/0x7d40 [ 681.282455][T15703] ? packet_sendmsg_spkt+0x1130/0x1130 [ 681.287981][T15703] ? packet_diag_handler_dump+0x2a0/0x2a0 [ 681.293765][T15703] ? sock_diag_lock_handler+0x19/0x280 [ 681.299304][T15703] ? sock_diag_lock_handler+0x19/0x280 [ 681.304903][T15703] ? packet_sendmsg_spkt+0x1130/0x1130 [ 681.310423][T15703] sock_diag_rcv_msg+0x3d8/0x600 [ 681.315534][T15703] netlink_rcv_skb+0x241/0x4d0 [ 681.320367][T15703] ? sock_diag_bind+0xb0/0xb0 [ 681.325095][T15703] ? netlink_ack+0x1180/0x1180 [ 681.329935][T15703] ? __lock_acquire+0x7d40/0x7d40 [ 681.335022][T15703] ? netlink_deliver_tap+0x2e/0x1b0 [ 681.340288][T15703] sock_diag_rcv+0x2a/0x40 [ 681.344775][T15703] netlink_unicast+0x751/0x8d0 [ 681.349632][T15703] netlink_sendmsg+0x8d0/0xbf0 [ 681.354450][T15703] ? perf_trace_lock+0x304/0x3b0 [ 681.359454][T15703] ? netlink_getsockopt+0x590/0x590 [ 681.364764][T15703] ? aa_sock_msg_perm+0x94/0x150 [ 681.369756][T15703] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 681.375087][T15703] ? security_socket_sendmsg+0x80/0xa0 [ 681.380605][T15703] ? netlink_getsockopt+0x590/0x590 [ 681.385857][T15703] ____sys_sendmsg+0x5ba/0x960 [ 681.390688][T15703] ? __asan_memset+0x22/0x40 [ 681.395418][T15703] ? __sys_sendmsg_sock+0x30/0x30 [ 681.400578][T15703] ? __import_iovec+0x5f2/0x850 [ 681.405505][T15703] ? import_iovec+0x73/0xa0 [ 681.410067][T15703] ___sys_sendmsg+0x2a6/0x360 [ 681.414803][T15703] ? __sys_sendmsg+0x2a0/0x2a0 [ 681.419646][T15703] ? __lock_acquire+0x7d40/0x7d40 [ 681.424761][T15703] __se_sys_sendmsg+0x1c2/0x2b0 [ 681.429659][T15703] ? __x64_sys_sendmsg+0x80/0x80 [ 681.434669][T15703] ? lockdep_hardirqs_on+0x98/0x150 [ 681.439920][T15703] do_syscall_64+0x55/0xa0 [ 681.444406][T15703] ? clear_bhb_loop+0x40/0x90 [ 681.449126][T15703] ? clear_bhb_loop+0x40/0x90 [ 681.453856][T15703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.459795][T15703] RIP: 0033:0x7f2d1379aeb9 [ 681.464258][T15703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.483928][T15703] RSP: 002b:00007f2d14727028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.492402][T15703] RAX: ffffffffffffffda RBX: 00007f2d13a15fa0 RCX: 00007f2d1379aeb9 [ 681.500421][T15703] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a [ 681.508443][T15703] RBP: 00007f2d14727090 R08: 0000000000000000 R09: 0000000000000000 [ 681.516591][T15703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.524716][T15703] R13: 00007f2d13a16038 R14: 00007f2d13a15fa0 R15: 00007ffe6f872e58 [ 681.532769][T15703] [ 681.810695][T15709] netlink: 'syz.0.3149': attribute type 16 has an invalid length. [ 681.844255][T15709] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3149'. [ 682.386267][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3157'. [ 682.746574][T15734] netlink: 'syz.1.3157': attribute type 10 has an invalid length. [ 682.761559][T15734] macvlan0: entered promiscuous mode [ 682.792350][T15734] macvlan0: entered allmulticast mode [ 686.223525][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.230221][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.652563][T15773] lo: entered promiscuous mode [ 686.693471][T15773] lo: left allmulticast mode [ 688.759595][T15816] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3185'. [ 688.964992][T15816] ±ÿ: renamed from team_slave_1 (while UP) [ 690.154563][T15833] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3192'. [ 690.195296][T15833] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3192'. [ 692.691424][T15870] netlink: 'syz.1.3203': attribute type 21 has an invalid length. [ 692.705836][T15871] FAULT_INJECTION: forcing a failure. [ 692.705836][T15871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.726935][T15870] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3203'. [ 692.742468][T15871] CPU: 0 PID: 15871 Comm: syz.3.3204 Not tainted syzkaller #0 [ 692.750031][T15871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 692.760143][T15871] Call Trace: [ 692.763465][T15871] [ 692.766512][T15871] dump_stack_lvl+0x18c/0x250 [ 692.771303][T15871] ? show_regs_print_info+0x20/0x20 [ 692.776575][T15871] ? load_image+0x400/0x400 [ 692.781155][T15871] ? __lock_acquire+0x7d40/0x7d40 [ 692.786241][T15871] ? snprintf+0xe9/0x140 [ 692.790542][T15871] should_fail_ex+0x39d/0x4d0 [ 692.795290][T15871] _copy_to_user+0x2f/0xa0 [ 692.799821][T15871] simple_read_from_buffer+0xe7/0x150 [ 692.805262][T15871] proc_fail_nth_read+0x1e8/0x260 [ 692.810372][T15871] ? proc_fault_inject_write+0x360/0x360 [ 692.816063][T15871] ? fsnotify_perm+0x271/0x5e0 [ 692.820979][T15871] ? proc_fault_inject_write+0x360/0x360 [ 692.826684][T15871] vfs_read+0x28b/0x970 [ 692.830916][T15871] ? kernel_read+0x1e0/0x1e0 [ 692.835567][T15871] ? __fget_files+0x28/0x4b0 [ 692.840234][T15871] ? __fget_files+0x28/0x4b0 [ 692.845053][T15871] ? __fget_files+0x43d/0x4b0 [ 692.849801][T15871] ? __fdget_pos+0x2a3/0x330 [ 692.854451][T15871] ? ksys_read+0x75/0x260 [ 692.858840][T15871] ksys_read+0x150/0x260 [ 692.863155][T15871] ? vfs_write+0x990/0x990 [ 692.867624][T15871] ? lockdep_hardirqs_on+0x98/0x150 [ 692.872878][T15871] do_syscall_64+0x55/0xa0 [ 692.877366][T15871] ? clear_bhb_loop+0x40/0x90 [ 692.882096][T15871] ? clear_bhb_loop+0x40/0x90 [ 692.886822][T15871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.892771][T15871] RIP: 0033:0x7f1ce215b78e [ 692.897229][T15871] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 692.916931][T15871] RSP: 002b:00007f1ce303ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 692.925407][T15871] RAX: ffffffffffffffda RBX: 00007f1ce30406c0 RCX: 00007f1ce215b78e [ 692.933441][T15871] RDX: 000000000000000f RSI: 00007f1ce30400a0 RDI: 0000000000000004 [ 692.941473][T15871] RBP: 00007f1ce3040090 R08: 0000000000000000 R09: 0000000000000000 [ 692.949507][T15871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 692.957533][T15871] R13: 00007f1ce2416038 R14: 00007f1ce2415fa0 R15: 00007fff3a0b3c18 [ 692.965781][T15871] [ 693.112035][T15874] FAULT_INJECTION: forcing a failure. [ 693.112035][T15874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.157914][T15874] CPU: 1 PID: 15874 Comm: syz.2.3205 Not tainted syzkaller #0 [ 693.165515][T15874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 693.175655][T15874] Call Trace: [ 693.179012][T15874] [ 693.182026][T15874] dump_stack_lvl+0x18c/0x250 [ 693.186838][T15874] ? show_regs_print_info+0x20/0x20 [ 693.192140][T15874] ? load_image+0x400/0x400 [ 693.196915][T15874] ? __might_fault+0xaa/0x120 [ 693.201691][T15874] ? __lock_acquire+0x7d40/0x7d40 [ 693.206827][T15874] should_fail_ex+0x39d/0x4d0 [ 693.211619][T15874] _copy_to_user+0x2f/0xa0 [ 693.216148][T15874] copy_siginfo_to_user+0x24/0xa0 [ 693.221267][T15874] x64_setup_rt_frame+0x746/0xc40 [ 693.226462][T15874] ? sigaltstack_size_valid+0x1e0/0x1e0 [ 693.232125][T15874] ? arch_do_signal_or_restart+0x3b1/0x800 [ 693.238038][T15874] arch_do_signal_or_restart+0x42c/0x800 [ 693.243793][T15874] ? get_sigframe_size+0x20/0x20 [ 693.248894][T15874] ? exit_to_user_mode_loop+0x3b/0x110 [ 693.254465][T15874] exit_to_user_mode_loop+0x70/0x110 [ 693.259867][T15874] exit_to_user_mode_prepare+0xee/0x180 [ 693.265515][T15874] syscall_exit_to_user_mode+0x1a/0x50 [ 693.271069][T15874] do_syscall_64+0x61/0xa0 [ 693.275578][T15874] ? clear_bhb_loop+0x40/0x90 [ 693.280394][T15874] ? clear_bhb_loop+0x40/0x90 [ 693.285177][T15874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 693.291157][T15874] RIP: 0033:0x7f2d1379aeb9 [ 693.295676][T15874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.315373][T15874] RSP: 002b:00007f2d14727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 693.323904][T15874] RAX: 0000000000000000 RBX: 00007f2d13a15fa0 RCX: 00007f2d1379aeb9 [ 693.331967][T15874] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 693.340026][T15874] RBP: 00007f2d14727090 R08: 0000000000000000 R09: 0000000000000000 [ 693.348094][T15874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.349008][T15877] lo: entered promiscuous mode [ 693.356158][T15874] R13: 00007f2d13a16038 R14: 00007f2d13a15fa0 R15: 00007ffe6f872e58 [ 693.369096][T15874] [ 693.384115][T15877] lo: left allmulticast mode [ 693.711018][T15890] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3211'. [ 694.178617][T15896] netlink: 'syz.3.3212': attribute type 21 has an invalid length. [ 694.257769][T15896] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3212'. [ 694.738108][T15903] netlink: 'syz.1.3216': attribute type 10 has an invalid length. [ 694.860931][T15903] team0: Port device dummy0 added [ 694.915945][T15905] netlink: 'syz.1.3216': attribute type 10 has an invalid length. [ 694.958289][T15905] FAULT_INJECTION: forcing a failure. [ 694.958289][T15905] name failslab, interval 1, probability 0, space 0, times 0 [ 695.013012][T15905] CPU: 1 PID: 15905 Comm: syz.1.3216 Not tainted syzkaller #0 [ 695.020578][T15905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 695.030692][T15905] Call Trace: [ 695.034020][T15905] [ 695.037001][T15905] dump_stack_lvl+0x18c/0x250 [ 695.041753][T15905] ? show_regs_print_info+0x20/0x20 [ 695.047103][T15905] ? load_image+0x400/0x400 [ 695.051669][T15905] ? __might_sleep+0xe0/0xe0 [ 695.056337][T15905] ? __lock_acquire+0x7d40/0x7d40 [ 695.061435][T15905] should_fail_ex+0x39d/0x4d0 [ 695.066189][T15905] should_failslab+0x9/0x20 [ 695.070754][T15905] slab_pre_alloc_hook+0x59/0x310 [ 695.075839][T15905] ? br_netlink_fini+0x30/0x30 [ 695.080725][T15905] kmem_cache_alloc_node+0x60/0x320 [ 695.085992][T15905] ? __alloc_skb+0x103/0x2c0 [ 695.090662][T15905] __alloc_skb+0x103/0x2c0 [ 695.095154][T15905] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 695.100515][T15905] rtnetlink_event+0x1b7/0x260 [ 695.105347][T15905] notifier_call_chain+0x197/0x380 [ 695.110531][T15905] netdev_lower_state_changed+0xd5/0x150 [ 695.116230][T15905] ? netdev_lower_dev_get_private+0xc0/0xc0 [ 695.122208][T15905] team_port_disable+0x950/0xb40 [ 695.127190][T15905] ? __mutex_trylock_common+0x159/0x260 [ 695.132819][T15905] ? team_port_enable+0xce0/0xce0 [ 695.137902][T15905] team_port_del+0x1f8/0xc80 [ 695.142535][T15905] ? team_port_disable+0xb40/0xb40 [ 695.147679][T15905] ? __dev_change_flags+0x4d4/0x6a0 [ 695.152916][T15905] ? team_del_slave+0x32/0x1c0 [ 695.157750][T15905] ? mutex_lock_nested+0x20/0x20 [ 695.162733][T15905] ? vprintk_emit+0x53d/0x610 [ 695.167445][T15905] ? printk_sprint+0x460/0x460 [ 695.172252][T15905] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 695.178202][T15905] ? _raw_spin_unlock+0x40/0x40 [ 695.183095][T15905] team_del_slave+0x3d/0x1c0 [ 695.187747][T15905] ? team_add_slave+0x26d0/0x26d0 [ 695.192829][T15905] do_setlink+0xe7f/0x4130 [ 695.197279][T15905] ? arch_stack_walk+0x160/0x190 [ 695.202265][T15905] ? load_image+0x400/0x400 [ 695.206815][T15905] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 695.212999][T15905] ? stack_trace_save+0xaa/0x100 [ 695.218024][T15905] ? __nla_validate_parse+0x2522/0x2ea0 [ 695.223648][T15905] ? __nla_validate+0x50/0x50 [ 695.228421][T15905] ? validate_linkmsg+0x719/0x910 [ 695.233551][T15905] rtnl_newlink+0x17da/0x20a0 [ 695.238304][T15905] ? rtnl_setlink+0x4e0/0x4e0 [ 695.243026][T15905] ? __rwlock_init+0x150/0x150 [ 695.247836][T15905] ? do_raw_spin_unlock+0x121/0x230 [ 695.253077][T15905] ? __mutex_lock+0x956/0xcc0 [ 695.257793][T15905] ? __mutex_lock+0x4f9/0xcc0 [ 695.262530][T15905] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 695.267678][T15905] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 695.272826][T15905] ? rtnl_setlink+0x4e0/0x4e0 [ 695.277717][T15905] rtnetlink_rcv_msg+0x869/0xfa0 [ 695.282702][T15905] ? lockdep_hardirqs_on+0x98/0x150 [ 695.287939][T15905] ? rtnetlink_bind+0x80/0x80 [ 695.292657][T15905] ? perf_trace_preemptirq_template+0xac/0x330 [ 695.298856][T15905] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 695.304881][T15905] ? lock_chain_count+0x20/0x20 [ 695.309774][T15905] ? __local_bh_enable_ip+0x13a/0x1c0 [ 695.315365][T15905] ? lockdep_hardirqs_on+0x98/0x150 [ 695.320601][T15905] ? __local_bh_enable_ip+0x13a/0x1c0 [ 695.326008][T15905] ? _local_bh_enable+0xa0/0xa0 [ 695.330904][T15905] ? __dev_queue_xmit+0x26b/0x36b0 [ 695.336052][T15905] ? __dev_queue_xmit+0x26b/0x36b0 [ 695.341219][T15905] ? __dev_queue_xmit+0x124f/0x36b0 [ 695.346463][T15905] ? __dev_queue_xmit+0x26b/0x36b0 [ 695.351628][T15905] ? ref_tracker_free+0x690/0x840 [ 695.356697][T15905] netlink_rcv_skb+0x241/0x4d0 [ 695.361503][T15905] ? rtnetlink_bind+0x80/0x80 [ 695.366211][T15905] ? netlink_ack+0x1180/0x1180 [ 695.371022][T15905] ? __lock_acquire+0x7d40/0x7d40 [ 695.376104][T15905] ? netlink_deliver_tap+0x2e/0x1b0 [ 695.381354][T15905] netlink_unicast+0x751/0x8d0 [ 695.386171][T15905] netlink_sendmsg+0x8d0/0xbf0 [ 695.390989][T15905] ? netlink_getsockopt+0x590/0x590 [ 695.396230][T15905] ? aa_sock_msg_perm+0x94/0x150 [ 695.401213][T15905] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 695.406535][T15905] ? security_socket_sendmsg+0x80/0xa0 [ 695.412027][T15905] ? netlink_getsockopt+0x590/0x590 [ 695.417268][T15905] ____sys_sendmsg+0x5ba/0x960 [ 695.422090][T15905] ? __asan_memset+0x22/0x40 [ 695.426737][T15905] ? __sys_sendmsg_sock+0x30/0x30 [ 695.431823][T15905] ? __import_iovec+0x5f2/0x850 [ 695.436737][T15905] ? import_iovec+0x73/0xa0 [ 695.441290][T15905] ___sys_sendmsg+0x2a6/0x360 [ 695.446010][T15905] ? get_pid_task+0x20/0x1e0 [ 695.450647][T15905] ? __sys_sendmsg+0x2a0/0x2a0 [ 695.455460][T15905] ? __lock_acquire+0x7d40/0x7d40 [ 695.460548][T15905] __se_sys_sendmsg+0x1c2/0x2b0 [ 695.465437][T15905] ? __x64_sys_sendmsg+0x80/0x80 [ 695.470434][T15905] ? lockdep_hardirqs_on+0x98/0x150 [ 695.475676][T15905] do_syscall_64+0x55/0xa0 [ 695.480194][T15905] ? clear_bhb_loop+0x40/0x90 [ 695.484910][T15905] ? clear_bhb_loop+0x40/0x90 [ 695.489630][T15905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.495566][T15905] RIP: 0033:0x7fcf6339aeb9 [ 695.500036][T15905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.519694][T15905] RSP: 002b:00007fcf642cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.528158][T15905] RAX: ffffffffffffffda RBX: 00007fcf63616090 RCX: 00007fcf6339aeb9 [ 695.536169][T15905] RDX: 0000000000008084 RSI: 0000200000000600 RDI: 0000000000000003 [ 695.544182][T15905] RBP: 00007fcf642cd090 R08: 0000000000000000 R09: 0000000000000000 [ 695.552188][T15905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 695.560205][T15905] R13: 00007fcf63616128 R14: 00007fcf63616090 R15: 00007ffee00ee6f8 [ 695.568225][T15905] [ 695.682620][T15905] team0: Port device dummy0 removed [ 695.970172][T15913] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3218'. [ 696.016832][T15913] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3218'. [ 698.821688][T15944] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3231'. [ 698.860243][T15944] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3231'. [ 699.455064][T15955] netlink: 'syz.3.3235': attribute type 1 has an invalid length. [ 699.520328][T15955] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3235'. [ 700.799542][T15967] netlink: 'syz.3.3239': attribute type 29 has an invalid length. [ 700.828017][T15967] netlink: 'syz.3.3239': attribute type 29 has an invalid length. [ 700.952481][T15967] veth1_macvtap: left promiscuous mode [ 700.977909][T15967] macsec0: entered allmulticast mode [ 701.037949][T15971] veth1_macvtap: entered promiscuous mode [ 701.043776][T15971] veth1_macvtap: entered allmulticast mode [ 701.076310][T15971] macsec0: entered promiscuous mode [ 701.088332][T15967] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3239'. [ 701.106378][T15973] FAULT_INJECTION: forcing a failure. [ 701.106378][T15973] name failslab, interval 1, probability 0, space 0, times 0 [ 701.187964][T15973] CPU: 1 PID: 15973 Comm: syz.2.3240 Not tainted syzkaller #0 [ 701.195531][T15973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 701.205648][T15973] Call Trace: [ 701.208976][T15973] [ 701.211957][T15973] dump_stack_lvl+0x18c/0x250 [ 701.216707][T15973] ? show_regs_print_info+0x20/0x20 [ 701.221973][T15973] ? load_image+0x400/0x400 [ 701.226542][T15973] ? __might_sleep+0xe0/0xe0 [ 701.231202][T15973] ? __lock_acquire+0x7d40/0x7d40 [ 701.236288][T15973] should_fail_ex+0x39d/0x4d0 [ 701.241044][T15973] should_failslab+0x9/0x20 [ 701.245618][T15973] slab_pre_alloc_hook+0x59/0x310 [ 701.250743][T15973] ? apparmor_sk_alloc_security+0x77/0x100 [ 701.256620][T15973] __kmem_cache_alloc_node+0x53/0x250 [ 701.262069][T15973] ? apparmor_sk_alloc_security+0x77/0x100 [ 701.267952][T15973] kmalloc_trace+0x2a/0xe0 [ 701.272437][T15973] apparmor_sk_alloc_security+0x77/0x100 [ 701.278156][T15973] security_sk_alloc+0x6e/0xa0 [ 701.282992][T15973] sk_prot_alloc+0x101/0x210 [ 701.287657][T15973] ? sk_alloc+0x24/0x360 [ 701.291969][T15973] sk_alloc+0x3a/0x360 [ 701.296093][T15973] ? bpf_ctx_init+0x163/0x1a0 [ 701.300832][T15973] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 701.306436][T15973] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 701.311941][T15973] ? lockdep_hardirqs_on+0x98/0x150 [ 701.317217][T15973] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 701.323461][T15973] ? cpu_online+0x60/0x60 [ 701.327860][T15973] bpf_prog_test_run+0x321/0x390 [ 701.332870][T15973] __sys_bpf+0x49d/0x890 [ 701.337359][T15973] ? bpf_link_show_fdinfo+0x390/0x390 [ 701.342803][T15973] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 701.349030][T15973] __x64_sys_bpf+0x7c/0x90 [ 701.353511][T15973] do_syscall_64+0x55/0xa0 [ 701.357993][T15973] ? clear_bhb_loop+0x40/0x90 [ 701.362729][T15973] ? clear_bhb_loop+0x40/0x90 [ 701.367473][T15973] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 701.373437][T15973] RIP: 0033:0x7f2d1379aeb9 [ 701.378004][T15973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.397673][T15973] RSP: 002b:00007f2d14727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 701.406280][T15973] RAX: ffffffffffffffda RBX: 00007f2d13a15fa0 RCX: 00007f2d1379aeb9 [ 701.414314][T15973] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 701.422355][T15973] RBP: 00007f2d14727090 R08: 0000000000000000 R09: 0000000000000000 [ 701.430396][T15973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.438430][T15973] R13: 00007f2d13a16038 R14: 00007f2d13a15fa0 R15: 00007ffe6f872e58 [ 701.446485][T15973] [ 701.535582][T15977] FAULT_INJECTION: forcing a failure. [ 701.535582][T15977] name failslab, interval 1, probability 0, space 0, times 0 [ 701.548766][T15977] CPU: 1 PID: 15977 Comm: syz.1.3241 Not tainted syzkaller #0 [ 701.556290][T15977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 701.566406][T15977] Call Trace: [ 701.569740][T15977] [ 701.572722][T15977] dump_stack_lvl+0x18c/0x250 [ 701.577467][T15977] ? show_regs_print_info+0x20/0x20 [ 701.582755][T15977] ? load_image+0x400/0x400 [ 701.587327][T15977] should_fail_ex+0x39d/0x4d0 [ 701.592081][T15977] should_failslab+0x9/0x20 [ 701.596651][T15977] slab_pre_alloc_hook+0x59/0x310 [ 701.601837][T15977] kmem_cache_alloc+0x5a/0x2d0 [ 701.606688][T15977] ? radix_tree_node_alloc+0x7e/0x3a0 [ 701.612131][T15977] radix_tree_node_alloc+0x7e/0x3a0 [ 701.617409][T15977] idr_get_free+0x2b3/0xa60 [ 701.621993][T15977] idr_alloc_cyclic+0x27b/0x5d0 [ 701.626927][T15977] ? idr_alloc+0x2f0/0x2f0 [ 701.631407][T15977] ? do_raw_spin_lock+0x11f/0x2c0 [ 701.636506][T15977] ? __radix_tree_preload+0x82/0x880 [ 701.641946][T15977] ? btf_alloc_id+0x30/0x2d0 [ 701.646595][T15977] btf_alloc_id+0x4f/0x2d0 [ 701.651073][T15977] btf_new_fd+0x81b/0x9f0 [ 701.655473][T15977] ? bpf_btf_show_fdinfo+0x80/0x80 [ 701.660650][T15977] ? capable+0x88/0xe0 [ 701.664959][T15977] __sys_bpf+0x670/0x890 [ 701.669254][T15977] ? bpf_link_show_fdinfo+0x390/0x390 [ 701.674700][T15977] ? lock_chain_count+0x20/0x20 [ 701.679623][T15977] __x64_sys_bpf+0x7c/0x90 [ 701.684097][T15977] do_syscall_64+0x55/0xa0 [ 701.688571][T15977] ? clear_bhb_loop+0x40/0x90 [ 701.693299][T15977] ? clear_bhb_loop+0x40/0x90 [ 701.698030][T15977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 701.703995][T15977] RIP: 0033:0x7fcf6339aeb9 [ 701.708474][T15977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.728146][T15977] RSP: 002b:00007fcf642ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 701.736629][T15977] RAX: ffffffffffffffda RBX: 00007fcf63615fa0 RCX: 00007fcf6339aeb9 [ 701.744662][T15977] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 701.752693][T15977] RBP: 00007fcf642ee090 R08: 0000000000000000 R09: 0000000000000000 [ 701.760725][T15977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 701.768752][T15977] R13: 00007fcf63616038 R14: 00007fcf63615fa0 R15: 00007ffee00ee6f8 [ 701.776822][T15977] [ 702.117967][T15980] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3243'. [ 702.656366][T15990] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3248'. [ 702.912908][T15994] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3257'. [ 705.120170][T16028] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3260'. [ 707.255714][T16058] netlink: 'syz.1.3271': attribute type 29 has an invalid length. [ 707.281031][T16058] netlink: 'syz.1.3271': attribute type 29 has an invalid length. [ 707.329873][T16062] netlink: 'syz.1.3271': attribute type 29 has an invalid length. [ 708.672012][T16088] netlink: 'syz.3.3286': attribute type 10 has an invalid length. [ 708.703465][T16088] hsr0: left promiscuous mode [ 708.709555][T16088] hsr0: left allmulticast mode [ 708.714696][T16088] hsr_slave_0: left allmulticast mode [ 708.739221][T16088] hsr_slave_1: left allmulticast mode [ 709.949312][T16117] FAULT_INJECTION: forcing a failure. [ 709.949312][T16117] name failslab, interval 1, probability 0, space 0, times 0 [ 709.977737][T16117] CPU: 1 PID: 16117 Comm: syz.0.3298 Not tainted syzkaller #0 [ 709.985386][T16117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 709.995502][T16117] Call Trace: [ 709.998830][T16117] [ 710.001808][T16117] dump_stack_lvl+0x18c/0x250 [ 710.006552][T16117] ? sctp_sendmsg+0x1575/0x28c0 [ 710.011459][T16117] ? ___sys_sendmsg+0x2a6/0x360 [ 710.016367][T16117] ? show_regs_print_info+0x20/0x20 [ 710.021637][T16117] ? load_image+0x400/0x400 [ 710.026230][T16117] should_fail_ex+0x39d/0x4d0 [ 710.031003][T16117] should_failslab+0x9/0x20 [ 710.035561][T16117] slab_pre_alloc_hook+0x59/0x310 [ 710.040665][T16117] ? sctp_add_bind_addr+0x8c/0x360 [ 710.045847][T16117] __kmem_cache_alloc_node+0x53/0x250 [ 710.051368][T16117] ? sctp_add_bind_addr+0x8c/0x360 [ 710.056534][T16117] kmalloc_trace+0x2a/0xe0 [ 710.060995][T16117] sctp_add_bind_addr+0x8c/0x360 [ 710.065977][T16117] sctp_copy_local_addr_list+0x315/0x4f0 [ 710.071677][T16117] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 710.077450][T16117] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 710.083573][T16117] ? sctp_v6_is_any+0x64/0x70 [ 710.088291][T16117] ? sctp_copy_one_addr+0x8c/0x350 [ 710.093445][T16117] sctp_bind_addr_copy+0xb3/0x3c0 [ 710.098512][T16117] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 710.104882][T16117] sctp_connect_new_asoc+0x2f9/0x6a0 [ 710.110214][T16117] ? __sctp_connect+0xd80/0xd80 [ 710.115103][T16117] ? __local_bh_enable_ip+0x13a/0x1c0 [ 710.120529][T16117] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 710.126112][T16117] ? security_sctp_bind_connect+0x89/0xb0 [ 710.131876][T16117] sctp_sendmsg+0x1575/0x28c0 [ 710.136599][T16117] ? sctp_getsockopt+0xb60/0xb60 [ 710.141580][T16117] ? aa_sk_perm+0x83c/0x970 [ 710.146138][T16117] ? aa_af_perm+0x330/0x330 [ 710.150692][T16117] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 710.157153][T16117] ? sock_rps_record_flow+0x19/0x3f0 [ 710.162479][T16117] ? inet_sendmsg+0xe9/0x2f0 [ 710.167104][T16117] ? inet_send_prepare+0x260/0x260 [ 710.172268][T16117] ____sys_sendmsg+0x5ba/0x960 [ 710.177189][T16117] ? __lock_acquire+0x7d40/0x7d40 [ 710.182269][T16117] ? __sys_sendmsg_sock+0x30/0x30 [ 710.187347][T16117] ? __import_iovec+0x5f2/0x850 [ 710.192252][T16117] ? import_iovec+0x73/0xa0 [ 710.196809][T16117] ___sys_sendmsg+0x2a6/0x360 [ 710.201530][T16117] ? get_pid_task+0x20/0x1e0 [ 710.206166][T16117] ? __sys_sendmsg+0x2a0/0x2a0 [ 710.210985][T16117] ? __lock_acquire+0x7d40/0x7d40 [ 710.216085][T16117] __se_sys_sendmsg+0x1c2/0x2b0 [ 710.220992][T16117] ? __x64_sys_sendmsg+0x80/0x80 [ 710.225980][T16117] ? lockdep_hardirqs_on+0x98/0x150 [ 710.231308][T16117] do_syscall_64+0x55/0xa0 [ 710.235770][T16117] ? clear_bhb_loop+0x40/0x90 [ 710.240489][T16117] ? clear_bhb_loop+0x40/0x90 [ 710.245217][T16117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 710.251187][T16117] RIP: 0033:0x7fab4619aeb9 [ 710.255667][T16117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.275407][T16117] RSP: 002b:00007fab47092028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.283871][T16117] RAX: ffffffffffffffda RBX: 00007fab46415fa0 RCX: 00007fab4619aeb9 [ 710.291988][T16117] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 710.299999][T16117] RBP: 00007fab47092090 R08: 0000000000000000 R09: 0000000000000000 [ 710.308005][T16117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 710.316011][T16117] R13: 00007fab46416038 R14: 00007fab46415fa0 R15: 00007ffd5cc342f8 [ 710.324030][T16117] [ 710.525735][T16125] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3303'. [ 710.545640][T16125] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3303'. [ 711.082787][T16140] FAULT_INJECTION: forcing a failure. [ 711.082787][T16140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.135048][T16140] CPU: 1 PID: 16140 Comm: syz.1.3308 Not tainted syzkaller #0 [ 711.142615][T16140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 711.152820][T16140] Call Trace: [ 711.156143][T16140] [ 711.159131][T16140] dump_stack_lvl+0x18c/0x250 [ 711.163886][T16140] ? show_regs_print_info+0x20/0x20 [ 711.169156][T16140] ? load_image+0x400/0x400 [ 711.173722][T16140] ? __might_fault+0xaa/0x120 [ 711.178448][T16140] ? __lock_acquire+0x7d40/0x7d40 [ 711.183520][T16140] should_fail_ex+0x39d/0x4d0 [ 711.188245][T16140] _copy_from_user+0x2f/0xe0 [ 711.192869][T16140] ___sys_sendmsg+0x1c7/0x360 [ 711.197580][T16140] ? get_pid_task+0x20/0x1e0 [ 711.202215][T16140] ? __sys_sendmsg+0x2a0/0x2a0 [ 711.207024][T16140] ? __lock_acquire+0x7d40/0x7d40 [ 711.212105][T16140] __se_sys_sendmsg+0x1c2/0x2b0 [ 711.217087][T16140] ? __x64_sys_sendmsg+0x80/0x80 [ 711.222073][T16140] ? lockdep_hardirqs_on+0x98/0x150 [ 711.227306][T16140] do_syscall_64+0x55/0xa0 [ 711.231766][T16140] ? clear_bhb_loop+0x40/0x90 [ 711.236486][T16140] ? clear_bhb_loop+0x40/0x90 [ 711.241197][T16140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 711.247125][T16140] RIP: 0033:0x7fcf6339aeb9 [ 711.251580][T16140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.271223][T16140] RSP: 002b:00007fcf642ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 711.279760][T16140] RAX: ffffffffffffffda RBX: 00007fcf63615fa0 RCX: 00007fcf6339aeb9 [ 711.287760][T16140] RDX: 000000002000c090 RSI: 0000200000000040 RDI: 0000000000000003 [ 711.295758][T16140] RBP: 00007fcf642ee090 R08: 0000000000000000 R09: 0000000000000000 [ 711.303754][T16140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.311758][T16140] R13: 00007fcf63616038 R14: 00007fcf63615fa0 R15: 00007ffee00ee6f8 [ 711.319777][T16140] [ 711.410140][T16144] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3309'. [ 711.470531][T16143] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3309'. [ 711.480479][T16144] netlink: 'syz.3.3309': attribute type 29 has an invalid length. [ 711.923407][T16143] team0: Port device bond0 removed [ 712.040410][T16143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.223717][T16143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.327092][T16143] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 712.359501][T16143] bond0 (unregistering): Released all slaves [ 712.389395][T16144] netlink: 'syz.3.3309': attribute type 29 has an invalid length. [ 712.509656][T16157] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3313'. [ 712.544058][T16158] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3313'. [ 715.258685][T16220] FAULT_INJECTION: forcing a failure. [ 715.258685][T16220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.291381][T16220] CPU: 0 PID: 16220 Comm: syz.0.3338 Not tainted syzkaller #0 [ 715.298950][T16220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 715.309063][T16220] Call Trace: [ 715.312390][T16220] [ 715.315370][T16220] dump_stack_lvl+0x18c/0x250 [ 715.320126][T16220] ? show_regs_print_info+0x20/0x20 [ 715.325393][T16220] ? load_image+0x400/0x400 [ 715.329962][T16220] ? __lock_acquire+0x7d40/0x7d40 [ 715.335052][T16220] should_fail_ex+0x39d/0x4d0 [ 715.339815][T16220] _copy_from_user+0x2f/0xe0 [ 715.344487][T16220] __copy_msghdr+0x3bb/0x580 [ 715.349152][T16220] ___sys_sendmsg+0x214/0x360 [ 715.353886][T16220] ? __fget_files+0x28/0x4b0 [ 715.358551][T16220] ? __sys_sendmsg+0x2a0/0x2a0 [ 715.363388][T16220] ? __lock_acquire+0x7d40/0x7d40 [ 715.368492][T16220] __se_sys_sendmsg+0x1c2/0x2b0 [ 715.373397][T16220] ? __x64_sys_sendmsg+0x80/0x80 [ 715.378414][T16220] ? lockdep_hardirqs_on+0x98/0x150 [ 715.383677][T16220] do_syscall_64+0x55/0xa0 [ 715.388151][T16220] ? clear_bhb_loop+0x40/0x90 [ 715.393060][T16220] ? clear_bhb_loop+0x40/0x90 [ 715.397796][T16220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 715.403741][T16220] RIP: 0033:0x7fab4619aeb9 [ 715.408211][T16220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.427875][T16220] RSP: 002b:00007fab47092028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.436370][T16220] RAX: ffffffffffffffda RBX: 00007fab46415fa0 RCX: 00007fab4619aeb9 [ 715.444400][T16220] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 715.452437][T16220] RBP: 00007fab47092090 R08: 0000000000000000 R09: 0000000000000000 [ 715.460557][T16220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.468593][T16220] R13: 00007fab46416038 R14: 00007fab46415fa0 R15: 00007ffd5cc342f8 [ 715.476647][T16220] [ 715.528531][T16224] netlink: 'syz.3.3340': attribute type 1 has an invalid length. [ 715.536401][T16224] netlink: 'syz.3.3340': attribute type 3 has an invalid length. [ 715.544504][T16224] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3340'. [ 715.563765][T16224] netlink: 'syz.3.3340': attribute type 10 has an invalid length. [ 715.577979][T16224] ipvlan1: entered promiscuous mode [ 715.586035][T16224] team0: Device ipvlan1 failed to register rx_handler [ 715.973650][T16236] pim6reg1: entered promiscuous mode [ 715.983670][T16236] pim6reg1: entered allmulticast mode [ 716.301566][T16246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3349'. [ 716.431772][T16251] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3350'. [ 716.455371][T16248] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3350'. [ 716.488068][T16251] netlink: 'syz.0.3350': attribute type 29 has an invalid length. [ 716.728761][T16248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.776032][T16248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.812857][T16248] bond0 (unregistering): Released all slaves [ 716.844246][T16251] netlink: 'syz.0.3350': attribute type 29 has an invalid length. [ 716.930062][T16254] netlink: 'syz.0.3350': attribute type 29 has an invalid length. [ 716.950541][T16256] netlink: 'syz.0.3350': attribute type 29 has an invalid length. [ 717.050194][T16270] netlink: 'syz.1.3355': attribute type 10 has an invalid length. [ 717.198227][T16277] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3357'. [ 719.119755][T16277] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3357'. [ 719.285323][T16291] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3362'. [ 719.850733][T16305] FAULT_INJECTION: forcing a failure. [ 719.850733][T16305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.877045][T16306] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3366'. [ 719.887851][T16305] CPU: 1 PID: 16305 Comm: syz.0.3374 Not tainted syzkaller #0 [ 719.887929][T16305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 719.887944][T16305] Call Trace: [ 719.887956][T16305] [ 719.887966][T16305] dump_stack_lvl+0x18c/0x250 [ 719.888008][T16305] ? show_regs_print_info+0x20/0x20 [ 719.888041][T16305] ? load_image+0x400/0x400 [ 719.888073][T16305] ? __lock_acquire+0x7d40/0x7d40 [ 719.888102][T16305] ? snprintf+0xe9/0x140 [ 719.888132][T16305] should_fail_ex+0x39d/0x4d0 [ 719.888171][T16305] _copy_to_user+0x2f/0xa0 [ 719.888200][T16305] simple_read_from_buffer+0xe7/0x150 [ 719.888240][T16305] proc_fail_nth_read+0x1e8/0x260 [ 719.888275][T16305] ? proc_fault_inject_write+0x360/0x360 [ 719.888311][T16305] ? fsnotify_perm+0x271/0x5e0 [ 719.888344][T16305] ? proc_fault_inject_write+0x360/0x360 [ 719.888376][T16305] vfs_read+0x28b/0x970 [ 719.888412][T16305] ? kernel_read+0x1e0/0x1e0 [ 719.888442][T16305] ? __fget_files+0x28/0x4b0 [ 719.888469][T16305] ? __fget_files+0x28/0x4b0 [ 719.888499][T16305] ? __fget_files+0x43d/0x4b0 [ 719.888538][T16305] ? __fdget_pos+0x2a3/0x330 [ 719.888567][T16305] ? ksys_read+0x75/0x260 [ 719.888599][T16305] ksys_read+0x150/0x260 [ 719.888640][T16305] ? vfs_write+0x990/0x990 [ 720.012136][T16305] ? lockdep_hardirqs_on+0x98/0x150 [ 720.017463][T16305] do_syscall_64+0x55/0xa0 [ 720.021917][T16305] ? clear_bhb_loop+0x40/0x90 [ 720.026623][T16305] ? clear_bhb_loop+0x40/0x90 [ 720.031347][T16305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 720.037270][T16305] RIP: 0033:0x7fab4615b78e [ 720.041712][T16305] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 720.061345][T16305] RSP: 002b:00007fab47091fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 720.069792][T16305] RAX: ffffffffffffffda RBX: 00007fab470926c0 RCX: 00007fab4615b78e [ 720.077894][T16305] RDX: 000000000000000f RSI: 00007fab470920a0 RDI: 0000000000000005 [ 720.085893][T16305] RBP: 00007fab47092090 R08: 0000000000000000 R09: 0000000000000000 [ 720.093989][T16305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.101993][T16305] R13: 00007fab46416038 R14: 00007fab46415fa0 R15: 00007ffd5cc342f8 [ 720.110009][T16305] [ 720.147257][T16309] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3366'. [ 720.220656][T16309] netlink: 'syz.1.3366': attribute type 29 has an invalid length. [ 720.299022][T16306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.325317][T16306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.380387][T16306] bond0 (unregistering): Released all slaves [ 720.441018][T16309] netlink: 'syz.1.3366': attribute type 29 has an invalid length. [ 720.451486][T16314] netlink: 'syz.1.3366': attribute type 29 has an invalid length. [ 720.462209][T16313] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3369'. [ 720.507730][T16321] netlink: 'syz.1.3366': attribute type 29 has an invalid length. [ 721.013832][T16336] __nla_validate_parse: 1 callbacks suppressed [ 721.013855][T16336] netlink: 192444 bytes leftover after parsing attributes in process `syz.0.3375'. [ 721.052849][T16336] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 721.160040][T16340] netlink: 'syz.2.3376': attribute type 10 has an invalid length. [ 721.178956][T16340] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3376'. [ 722.362036][T16340] team0: Port device macvlan0 removed [ 722.546220][T16358] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3383'. [ 722.565784][T16358] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3383'. [ 722.788739][T16367] FAULT_INJECTION: forcing a failure. [ 722.788739][T16367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.814703][T16367] CPU: 0 PID: 16367 Comm: syz.3.3390 Not tainted syzkaller #0 [ 722.822364][T16367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 722.832457][T16367] Call Trace: [ 722.835768][T16367] [ 722.838729][T16367] dump_stack_lvl+0x18c/0x250 [ 722.843453][T16367] ? show_regs_print_info+0x20/0x20 [ 722.848706][T16367] ? load_image+0x400/0x400 [ 722.853252][T16367] ? __might_fault+0xaa/0x120 [ 722.857974][T16367] ? __lock_acquire+0x7d40/0x7d40 [ 722.863048][T16367] should_fail_ex+0x39d/0x4d0 [ 722.867774][T16367] _copy_from_iter+0x1d9/0x12e0 [ 722.872664][T16367] ? __might_fault+0xaa/0x120 [ 722.877382][T16367] ? _copy_from_iter+0x24e/0x12e0 [ 722.882448][T16367] ? __virt_addr_valid+0x18c/0x540 [ 722.887610][T16367] ? __lock_acquire+0x7d40/0x7d40 [ 722.892680][T16367] ? copyout_mc+0x70/0x70 [ 722.897058][T16367] ? copyout_mc+0x70/0x70 [ 722.901448][T16367] ? __virt_addr_valid+0x18c/0x540 [ 722.906607][T16367] ? page_copy_sane+0x16a/0x270 [ 722.911503][T16367] copy_page_from_iter+0x7b/0x100 [ 722.916569][T16367] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 722.922438][T16367] packet_sendmsg+0x3566/0x4d70 [ 722.927366][T16367] ? verify_lock_unused+0x140/0x140 [ 722.932606][T16367] ? mark_lock+0x94/0x320 [ 722.936969][T16367] ? __lock_acquire+0x1273/0x7d40 [ 722.942028][T16367] ? verify_lock_unused+0x140/0x140 [ 722.947261][T16367] ? aa_sk_perm+0x83c/0x970 [ 722.951834][T16367] ? packet_getsockopt+0xad0/0xad0 [ 722.956991][T16367] ? aa_sock_msg_perm+0x94/0x150 [ 722.961975][T16367] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 722.967310][T16367] ? security_socket_sendmsg+0x80/0xa0 [ 722.972807][T16367] ? packet_getsockopt+0xad0/0xad0 [ 722.977967][T16367] ____sys_sendmsg+0x5ba/0x960 [ 722.982773][T16367] ? __lock_acquire+0x7d40/0x7d40 [ 722.987837][T16367] ? __asan_memset+0x22/0x40 [ 722.992469][T16367] ? __sys_sendmsg_sock+0x30/0x30 [ 722.997535][T16367] ? __import_iovec+0x5f2/0x850 [ 723.002458][T16367] ? import_iovec+0x73/0xa0 [ 723.007004][T16367] ___sys_sendmsg+0x2a6/0x360 [ 723.011719][T16367] ? get_pid_task+0x20/0x1e0 [ 723.016393][T16367] ? __sys_sendmsg+0x2a0/0x2a0 [ 723.021231][T16367] ? __lock_acquire+0x7d40/0x7d40 [ 723.026319][T16367] __se_sys_sendmsg+0x1c2/0x2b0 [ 723.031204][T16367] ? __x64_sys_sendmsg+0x80/0x80 [ 723.036189][T16367] ? lockdep_hardirqs_on+0x98/0x150 [ 723.041506][T16367] do_syscall_64+0x55/0xa0 [ 723.045961][T16367] ? clear_bhb_loop+0x40/0x90 [ 723.050678][T16367] ? clear_bhb_loop+0x40/0x90 [ 723.055385][T16367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 723.061317][T16367] RIP: 0033:0x7f1ce219aeb9 [ 723.065768][T16367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.085413][T16367] RSP: 002b:00007f1ce3040028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.093867][T16367] RAX: ffffffffffffffda RBX: 00007f1ce2415fa0 RCX: 00007f1ce219aeb9 [ 723.101864][T16367] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 723.110300][T16367] RBP: 00007f1ce3040090 R08: 0000000000000000 R09: 0000000000000000 [ 723.118332][T16367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 723.126345][T16367] R13: 00007f1ce2416038 R14: 00007f1ce2415fa0 R15: 00007fff3a0b3c18 [ 723.134360][T16367] [ 724.953736][T16408] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3402'. [ 724.989755][T16408] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3402'. [ 726.113294][T16436] netlink: 'syz.1.3412': attribute type 29 has an invalid length. [ 726.125780][T16436] netlink: 'syz.1.3412': attribute type 29 has an invalid length. [ 727.077143][T16459] wg2: entered allmulticast mode [ 727.160066][T16459] wg2: entered promiscuous mode [ 727.715407][T16477] FAULT_INJECTION: forcing a failure. [ 727.715407][T16477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.736548][T16477] CPU: 1 PID: 16477 Comm: syz.2.3425 Not tainted syzkaller #0 [ 727.744114][T16477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 727.754211][T16477] Call Trace: [ 727.757524][T16477] [ 727.760483][T16477] dump_stack_lvl+0x18c/0x250 [ 727.765206][T16477] ? show_regs_print_info+0x20/0x20 [ 727.770441][T16477] ? load_image+0x400/0x400 [ 727.774987][T16477] ? __might_fault+0xaa/0x120 [ 727.779702][T16477] should_fail_ex+0x39d/0x4d0 [ 727.784427][T16477] copyin+0x1a/0x90 [ 727.788282][T16477] _copy_from_iter+0x404/0x12e0 [ 727.793201][T16477] ? copyout_mc+0x70/0x70 [ 727.797656][T16477] ? verify_lock_unused+0x140/0x140 [ 727.802895][T16477] ? dev_get_by_index+0x22/0x2d0 [ 727.807872][T16477] ? dev_get_by_index+0x22/0x2d0 [ 727.812856][T16477] packet_sendmsg+0x2e23/0x4d70 [ 727.817750][T16477] ? aa_sk_perm+0x970/0x970 [ 727.822316][T16477] ? __might_sleep+0xe0/0xe0 [ 727.826975][T16477] ? verify_lock_unused+0x140/0x140 [ 727.832208][T16477] ? mark_lock+0x94/0x320 [ 727.836575][T16477] ? __lock_acquire+0x1273/0x7d40 [ 727.841638][T16477] ? verify_lock_unused+0x140/0x140 [ 727.846876][T16477] ? aa_sk_perm+0x83c/0x970 [ 727.851434][T16477] ? packet_getsockopt+0xad0/0xad0 [ 727.856600][T16477] ? aa_sock_msg_perm+0x94/0x150 [ 727.861580][T16477] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 727.866905][T16477] ? security_socket_sendmsg+0x80/0xa0 [ 727.872428][T16477] ? packet_getsockopt+0xad0/0xad0 [ 727.877590][T16477] ____sys_sendmsg+0x5ba/0x960 [ 727.882418][T16477] ? __lock_acquire+0x7d40/0x7d40 [ 727.887485][T16477] ? __asan_memset+0x22/0x40 [ 727.892121][T16477] ? __sys_sendmsg_sock+0x30/0x30 [ 727.897206][T16477] ? __import_iovec+0x3fa/0x850 [ 727.902110][T16477] ? import_iovec+0x73/0xa0 [ 727.906659][T16477] ___sys_sendmsg+0x2a6/0x360 [ 727.911368][T16477] ? get_pid_task+0x20/0x1e0 [ 727.916004][T16477] ? __sys_sendmsg+0x2a0/0x2a0 [ 727.920824][T16477] ? __lock_acquire+0x7d40/0x7d40 [ 727.925906][T16477] __se_sys_sendmsg+0x1c2/0x2b0 [ 727.930800][T16477] ? __x64_sys_sendmsg+0x80/0x80 [ 727.935790][T16477] ? lockdep_hardirqs_on+0x98/0x150 [ 727.941024][T16477] do_syscall_64+0x55/0xa0 [ 727.945492][T16477] ? clear_bhb_loop+0x40/0x90 [ 727.950226][T16477] ? clear_bhb_loop+0x40/0x90 [ 727.954947][T16477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 727.960872][T16477] RIP: 0033:0x7f2d1379aeb9 [ 727.965331][T16477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.984977][T16477] RSP: 002b:00007f2d14727028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.993431][T16477] RAX: ffffffffffffffda RBX: 00007f2d13a15fa0 RCX: 00007f2d1379aeb9 [ 728.001475][T16477] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003 [ 728.009480][T16477] RBP: 00007f2d14727090 R08: 0000000000000000 R09: 0000000000000000 [ 728.017485][T16477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.025493][T16477] R13: 00007f2d13a16038 R14: 00007f2d13a15fa0 R15: 00007ffe6f872e58 [ 728.033514][T16477] [ 728.265824][T16479] bridge_slave_1: left allmulticast mode [ 728.292194][T16479] bridge_slave_1: left promiscuous mode [ 728.342154][T16479] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.595119][T16479] bridge_slave_0: left allmulticast mode [ 728.608514][T16479] bridge_slave_0: left promiscuous mode [ 728.623002][T16479] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.489809][T16499] Ÿë: port 1(gretap0) entered blocking state [ 729.532098][T16499] Ÿë: port 1(gretap0) entered disabled state [ 729.562652][T16499] gretap0: entered allmulticast mode [ 729.578328][T16499] gretap0: entered promiscuous mode [ 730.322868][T16514] netlink: 'syz.0.3436': attribute type 10 has an invalid length. [ 731.789460][ C0] [ 731.789471][ C0] ================================ [ 731.789478][ C0] WARNING: inconsistent lock state [ 731.789502][ C0] syzkaller #0 Not tainted [ 731.789513][ C0] -------------------------------- [ 731.789518][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 731.789528][ C0] syz.1.3451/16550 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 731.789550][ C0] ffff88805f44c218 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 731.789607][ C0] {INITIAL USE} state was registered at: [ 731.789615][ C0] lock_acquire+0x19e/0x420 [ 731.789637][ C0] _raw_spin_lock+0x2e/0x40 [ 731.789655][ C0] htab_lock_bucket+0x17d/0x300 [ 731.789675][ C0] htab_map_update_elem+0x229/0x1040 [ 731.789693][ C0] bpf_map_update_value+0x660/0x720 [ 731.789710][ C0] map_update_elem+0x57b/0x700 [ 731.789729][ C0] __sys_bpf+0x6b5/0x890 [ 731.789746][ C0] __x64_sys_bpf+0x7c/0x90 [ 731.789763][ C0] do_syscall_64+0x55/0xa0 [ 731.789788][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 731.789808][ C0] irq event stamp: 7470 [ 731.789815][ C0] hardirqs last enabled at (7469): [] exc_debug+0xf5/0x140 [ 731.789850][ C0] hardirqs last disabled at (7470): [] exc_debug+0x73/0x140 [ 731.789882][ C0] softirqs last enabled at (7342): [] __irq_exit_rcu+0xd3/0x190 [ 731.789907][ C0] softirqs last disabled at (7333): [] __irq_exit_rcu+0xd3/0x190 [ 731.789931][ C0] [ 731.789931][ C0] other info that might help us debug this: [ 731.789937][ C0] Possible unsafe locking scenario: [ 731.789937][ C0] [ 731.789942][ C0] CPU0 [ 731.789947][ C0] ---- [ 731.789950][ C0] lock(&htab->lockdep_key); [ 731.789963][ C0] [ 731.789967][ C0] lock(&htab->lockdep_key); [ 731.789979][ C0] [ 731.789979][ C0] *** DEADLOCK *** [ 731.789979][ C0] [ 731.789990][ C0] no locks held by syz.1.3451/16550. [ 731.789999][ C0] [ 731.789999][ C0] stack backtrace: [ 731.790006][ C0] CPU: 0 PID: 16550 Comm: syz.1.3451 Not tainted syzkaller #0 [ 731.790024][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 731.790037][ C0] Call Trace: [ 731.790045][ C0] <#DB> [ 731.790052][ C0] dump_stack_lvl+0x18c/0x250 [ 731.790083][ C0] ? show_regs_print_info+0x20/0x20 [ 731.790115][ C0] ? print_usage_bug+0x475/0x690 [ 731.790139][ C0] ? verify_lock_unused+0x18/0x140 [ 731.790163][ C0] lock_acquire+0x2c2/0x420 [ 731.790188][ C0] ? htab_lock_bucket+0x17d/0x300 [ 731.790211][ C0] ? read_lock_is_recursive+0x20/0x20 [ 731.790235][ C0] ? perf_event_output_forward+0xb9/0x3e0 [ 731.790256][ C0] ? rcu_is_watching+0x15/0xb0 [ 731.790282][ C0] ? perf_event_output_forward+0xb9/0x3e0 [ 731.790303][ C0] ? lock_release+0xb5/0x8c0 [ 731.790327][ C0] _raw_spin_lock+0x2e/0x40 [ 731.790346][ C0] ? htab_lock_bucket+0x17d/0x300 [ 731.790367][ C0] htab_lock_bucket+0x17d/0x300 [ 731.790390][ C0] ? htab_lru_map_delete_node+0x760/0x760 [ 731.790412][ C0] ? look_up_lock_class+0x75/0x140 [ 731.790440][ C0] ? verify_lock_unused+0x18/0x140 [ 731.790463][ C0] ? jhash+0x3c3/0x740 [ 731.790484][ C0] htab_map_delete_elem+0x1a4/0x650 [ 731.790508][ C0] ? htab_map_update_elem+0x1040/0x1040 [ 731.790529][ C0] ? perf_callchain+0x1f0/0x1f0 [ 731.790553][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 731.790575][ C0] bpf_overflow_handler+0x1fc/0x510 [ 731.790606][ C0] ? bpf_overflow_handler+0xde/0x510 [ 731.790634][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 731.790665][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 731.790690][ C0] __perf_event_overflow+0x447/0x630 [ 731.790717][ C0] perf_swevent_event+0x542/0x630 [ 731.790743][ C0] ? perf_tp_event+0x1450/0x1450 [ 731.790771][ C0] perf_bp_event+0x2a7/0x380 [ 731.790796][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 731.790835][ C0] ? lock_acquire+0x2c2/0x420 [ 731.790862][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 731.790890][ C0] notifier_call_chain+0x197/0x380 [ 731.790918][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 731.790944][ C0] atomic_notifier_call_chain+0xda/0x180 [ 731.790971][ C0] notify_die+0x145/0x1a0 [ 731.791004][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 731.791034][ C0] ? rcu_is_watching+0x15/0xb0 [ 731.791062][ C0] notify_debug+0x2e/0x50 [ 731.791080][ C0] exc_debug+0xde/0x140 [ 731.791110][ C0] asm_exc_debug+0x1e/0x40 [ 731.791130][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 731.791163][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 731.791181][ C0] RSP: 0018:ffffc900034a7d50 EFLAGS: 00050202 [ 731.791199][ C0] RAX: ffffffff84295701 RBX: 0000000000000080 RCX: 000000000000007c [ 731.791213][ C0] RDX: 0000000000000001 RSI: 0000200000000304 RDI: ffffc900034a7dc4 [ 731.791227][ C0] RBP: ffffc900034a7ee8 R08: ffffc900034a7e3f R09: 1ffff92000694fc7 [ 731.791243][ C0] R10: dffffc0000000000 R11: fffff52000694fc8 R12: 0000200000000380 [ 731.791257][ C0] R13: 0000000000000080 R14: ffffc900034a7dc0 R15: 0000200000000300 [ 731.791276][ C0] ? _copy_from_user+0x1/0xe0 [ 731.791306][ C0] [ 731.791312][ C0] [ 731.791318][ C0] _copy_from_user+0x8b/0xe0 [ 731.791343][ C0] __sys_bpf+0x23e/0x890 [ 731.791366][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 731.791396][ C0] ? lock_chain_count+0x20/0x20 [ 731.791422][ C0] __x64_sys_bpf+0x7c/0x90 [ 731.791443][ C0] do_syscall_64+0x55/0xa0 [ 731.791470][ C0] ? clear_bhb_loop+0x40/0x90 [ 731.791491][ C0] ? clear_bhb_loop+0x40/0x90 [ 731.791513][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 731.791534][ C0] RIP: 0033:0x7fcf6339aeb9 [ 731.791549][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.791567][ C0] RSP: 002b:00007fcf642ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 731.791587][ C0] RAX: ffffffffffffffda RBX: 00007fcf63615fa0 RCX: 00007fcf6339aeb9 [ 731.791602][ C0] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 731.791615][ C0] RBP: 00007fcf63408c1f R08: 0000000000000000 R09: 0000000000000000 [ 731.791627][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.791639][ C0] R13: 00007fcf63616038 R14: 00007fcf63615fa0 R15: 00007ffee00ee6f8 [ 731.791662][ C0]