last executing test programs: 5.177145561s ago: executing program 3 (id=1629): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a11800150006", 0x21}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a00000700", 0x15}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) r2 = openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffff7f4a, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8cee795c7e6292d4da9d0d", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa20006558"], 0xcfa4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x400, 0x0, r6, 0xfa6a, '\x00', 0x0, r6, 0x4, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r3) 5.116362839s ago: executing program 2 (id=1630): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b703000024000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095000000"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000dc0)={0x0, 0x80, 0x0, 0x5, 0x8, 0x6, 0x0, 0xd, 0x20002, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x4, @perf_config_ext={0x5, 0x8}, 0x2a0f, 0xc046, 0x3e, 0xa, 0x0, 0x7, 0x8, 0x0, 0x8, 0x0, 0x4}, r4, 0xc, r2, 0x0) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="1c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6", 0x15}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff07) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) recvmsg$unix(r3, &(0x7f00000005c0)={&(0x7f00000006c0), 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000f00)=""/121, 0x79}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/93, 0x5d}, {&(0x7f0000000cc0)=""/216, 0xd8}, {0x0}], 0x5, &(0x7f0000000f80)}, 0x3) r8 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="720ac4ffe3d5332d6910160f848e00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) ioctl$TUNGETFEATURES(r9, 0x800454cf, &(0x7f0000000500)) socket$kcm(0xa, 0x7, 0x88) close(0x3) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000180)="8621457b1771c16215fa9f61f75cf2b7f246ca4726d77339de5f19bddf0e5e56d67a9c943710e1856ef4ad79e01a9e315c18d7cfe9f2b7527bb11ccb33e891fa895730a87e5468f436edbb5d4eba1e745b31397bed3c53a4c68eaf5697a2c64ed886ef9b468a17df0d2b8c040881d9bedade4bdde343850d24292a7c60802c73cf50c1ae0025bd41c61d4c0b3102ef54a5f3794886c958e725ec90ce3eca7054853eec33b7402219c45ff36057cf8b61e733ff4aeeac7cd30de0c2ecc2acd297be4c9ef5be139211942840f35ce90696aee14a5897b38c31f11599d9130fda79a950312b9a3c827897be60496a100454", &(0x7f0000000280)=""/154, &(0x7f0000000040)="5c40ff6c90ecb6021e46e04c1f7aae2f2d8e506a417ab09fbb2b537853cfa3e9c5d04be090aed655ef6821faf3ca9dadea8cafd1a902", &(0x7f0000000340)="784be7fc6158bb0b3359fdfa2a5268088c9a001d031aeebbe7ea32e7d7471d6a12035e3e287920198e1e8b7f4b9ea835cd3507f75eeb3d14aaf87b67cd380c6aca71308453aa304c285216186aa407310c25a9cdc6f262efe072fe58b303a96c51616cffa3f1235c60d84dd19034455c78646b6318116eef81d035553dc7f149e23c84b72fc2cd5363fbe9411d5f4c8ac8a75c352e0e4a24a1c50f95d3d2e6eb9c4d4afff03860fe1455a9fc8b2ddcdc38cbee31137a544b36fa3690d6449ea78c1a3702c99a11ccbb998d210cb81c5c11", 0x8a8, 0xffffffffffffffff, 0x4}, 0x38) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800208b000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000228500000094", @ANYRES16, @ANYRESOCT, @ANYRESHEX=r6, @ANYRES8=r8], &(0x7f0000000740)='GPL\x00', 0x0, 0x26, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.910564126s ago: executing program 3 (id=1635): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf5d, 0x3}, 0x0, 0xca, 0xdc1, 0x8, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8=r1], 0x12) 3.746161893s ago: executing program 3 (id=1637): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300), 0xfffffffffffffffe, 0x40, r1}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000601fac8b00e2c30d000c00000005000000fdffffff0000000604000000839a6ab19c15f93747692e19f5f757860712df9ec5be3423764c2ccaf3e78fe8d2d2b6c64e34f78894fd7566d763eb89be4f198af192c873ba35d3f238b59aaafc2c445a7a19c9100af292fd50d3cf7257441a8a9dbd45626b09ea6e65aa79ea4e2c2ce2b4135679b6f0d87f7dc8e2eed54e615f7683ce7910862b8b5176357ae4906d2507c35f0bd811f865"], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x400008, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x21da, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x30, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)=r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x1, 0xc, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xa, 0x7000}, 0x5, 0x0, 0x0, 0x0, 0x4, 0x4, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x3, 0x0, 0x20000, 0x4000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x80000000, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="c7", 0x1}], 0x1}, 0x24048811) socket$kcm(0x11, 0x2, 0x0) r6 = socket$kcm(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x8907, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) 3.173487838s ago: executing program 0 (id=1638): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f00000002c0), 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/144, 0x90}, {&(0x7f0000000680)=""/103, 0x67}, {&(0x7f0000000700)=""/49, 0x31}, {&(0x7f0000000740)=""/137, 0x89}, {&(0x7f00000008c0)=""/29, 0x1d}, {&(0x7f00000009c0)=""/238, 0xee}, {&(0x7f0000000ac0)=""/67, 0x43}, {&(0x7f0000000b40)=""/179, 0xb3}], 0x8}, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 3.104357334s ago: executing program 0 (id=1639): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf5d, 0x3}, 0x0, 0xca, 0xdc1, 0x8, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x1, 0x2}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_clone(0x80090000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x9}, @loopback}}}], 0x20}, 0xe900) sendmsg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000740)="ecfd5dd05d6c0e6578521ac4e478af07c681a27448cc50044f340c5dc69cc58e120af98a620e851653d5faa8f685f8d3fc9db17b661ea653826bc6f0b912291acd05d2e8defb939fdb46ed4e5d3ee7e2fa62617977c3e3ec5370804dd0630720b5dc04a43c1fa19f4b14a46589d79849e4efb468e2149e7a256f0beeb2f36ff416e61e0ca1037f77375ee261912ef24892cbc7b198091681e0fca61ecc5326b11f0f0f93007e", 0xa6}, {&(0x7f0000000040)="68ca218686a9c9e719fa8197085e22ebd0f1", 0x12}, {&(0x7f0000002800)}], 0x3}, 0x40e4804) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000280)="968de08ef9d3776cc617cd50131d315ad5fb8b816015365fce076a90c9164cacc24765615a64feecb8df5da672b877c95c8981637d0764b7f33b467eb8192f1dd0868a4b73053f19e218214c2603cb"}, {&(0x7f0000000500)="d55a84cc297d5b10ebf3bf7bb37d376ddf53f33432e0dacb8ae8cafd58ac4c4f5b970642eb63743281eef343f5db74b5ed03d556e5f7c21ee21b07bdc6bc87ff3915e00f0751a646b29ff44061af47d1b52951578f61a4f565cd50ac0cd045a75bb16ad588a56792da0ba484192a5c1768c7dbdd2422443f01"}, {&(0x7f0000000800)="43e6327e85c38c061c1b2efc252a3318d8e2c4b1ad00486413acf13a403340db517d708fcb98415ea005ec188bcca319b4570b8f71b75b69ccf864e8955c2a09b3aed386d5ef66014085842aa5342fb26bf3387912aac1a4cc7ada442de04849f47248ee4474f351a66476774d5924fb530e128c1e3945cff314118c29cd5c13422fc791f698b51035879254e59f7534e254ec10d60aa72f898946c2128d7bcd4baba3e0152599576d6f0fc0c61edc42e9e34556a198fed68559071d2752122f14cfcdf05c0ad0a9a5d7267c33c14ab3"}, {&(0x7f0000000000)="aa5466ebccbcf65342116ea03d567a2731e1053c846839947abe0ea82ee0e025e84052d1257fbe8e931c6cbb85ab88cd620f5d2b"}, {&(0x7f0000001340)="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"}, {&(0x7f0000000900)="463e3e542bff3a0b5f46a2d467fb6bd14675209f754d90b296ab605a52dad7fa1567536b783959ddf0b18c290ac11a0d43f6cf736dc056fb724305d47c2305fc21145482119818ef940d99dc66d005f00be617ac827aea1f0417425112c7ef4399e8c5c02317c710d04d81a74e334280ea46b7aeaa7bc4ef20abf93dec358b165b42fb12db2b"}, {&(0x7f0000000140)="35098d57463a57b19eab7417"}, {&(0x7f00000009c0)="3965cd88f73b4fde31c9d9bdb61875cbdd667f1e34fcc8b2a6b9be95c6652e278f857907ba3dd15823a2b0e58e097ec22c9124c03f1e627dd415d365eb014c4e7f5ec42a85acf0adb9193b0612c1238b3c8a824164e5e69334"}], 0x3a}, 0x4000004) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r5, 0xb) socketpair$unix(0x1, 0x1, 0x0, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 2.331136159s ago: executing program 0 (id=1640): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000100)="e0b954", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8943, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, 0x0, 0x40000041) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000180), 0x43) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1}, 0x0) 2.153454263s ago: executing program 3 (id=1642): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300), 0xfffffffffffffffe, 0x40, r1}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000601fac8b00e2c30d000c00000005000000fdffffff0000000604000000839a6ab19c15f93747692e19f5f757860712df9ec5be3423764c2ccaf3e78fe8d2d2b6c64e34f78894fd7566d763eb89be4f198af192c873ba35d3f238b59aaafc2c445a7a19c9100af292fd50d3cf7257441a8a9dbd45626b09ea6e65aa79ea4e2c2ce2b4135679b6f0d87f7dc8e2eed54e615f7683ce7910862b8b5176357ae4906d2507c35f0bd811f865"], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x400008, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x21da, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x30, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)=r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x1, 0xc, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xa, 0x7000}, 0x5, 0x0, 0x0, 0x0, 0x4, 0x4, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x3, 0x0, 0x20000, 0x4000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x80000000, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="c7", 0x1}], 0x1}, 0x24048811) socket$kcm(0x11, 0x2, 0x0) r6 = socket$kcm(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x8907, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) 1.923336686s ago: executing program 2 (id=1643): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x26}], 0x1, 0x0, 0x0, 0xffffdd86}, 0x0) 1.833972299s ago: executing program 1 (id=1644): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/4085, 0xff5}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000004700)=""/4137, 0x1029}, {&(0x7f0000000780)=""/158, 0x9e}, {&(0x7f0000000140)=""/153, 0x99}], 0x5}, 0x20) 1.756352713s ago: executing program 2 (id=1645): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf5d, 0x3}, 0x0, 0xca, 0xdc1, 0x8, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8=r1], 0x12) 1.704884142s ago: executing program 1 (id=1646): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3ab, 0x5c, 0xfffffff9, 0x400, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x1100}, 0x48) 1.666465685s ago: executing program 2 (id=1647): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f00000002c0), 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/144, 0x90}, {&(0x7f0000000680)=""/103, 0x67}, {&(0x7f0000000700)=""/49, 0x31}, {&(0x7f0000000740)=""/137, 0x89}, {&(0x7f00000008c0)=""/29, 0x1d}, {&(0x7f00000009c0)=""/238, 0xee}, {&(0x7f0000000ac0)=""/67, 0x43}, {&(0x7f0000000b40)=""/179, 0xb3}], 0x8}, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.500267941s ago: executing program 2 (id=1648): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf5d, 0x3}, 0x0, 0xca, 0xdc1, 0x8, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x1, 0x2}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_clone(0x80090000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x9}, @loopback}}}], 0x20}, 0xe900) sendmsg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000740)="ecfd5dd05d6c0e6578521ac4e478af07c681a27448cc50044f340c5dc69cc58e120af98a620e851653d5faa8f685f8d3fc9db17b661ea653826bc6f0b912291acd05d2e8defb939fdb46ed4e5d3ee7e2fa62617977c3e3ec5370804dd0630720b5dc04a43c1fa19f4b14a46589d79849e4efb468e2149e7a256f0beeb2f36ff416e61e0ca1037f77375ee261912ef24892cbc7b198091681e0fca61ecc5326b11f0f0f93007e", 0xa6}, {&(0x7f0000000040)="68ca218686a9c9e719fa8197085e22ebd0f1", 0x12}, {&(0x7f0000002800)}], 0x3}, 0x40e4804) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000280)="968de08ef9d3776cc617cd50131d315ad5fb8b816015365fce076a90c9164cacc24765615a64feecb8df5da672b877c95c8981637d0764b7f33b467eb8192f1dd0868a4b73053f19e218214c2603cb"}, {&(0x7f0000000500)="d55a84cc297d5b10ebf3bf7bb37d376ddf53f33432e0dacb8ae8cafd58ac4c4f5b970642eb63743281eef343f5db74b5ed03d556e5f7c21ee21b07bdc6bc87ff3915e00f0751a646b29ff44061af47d1b52951578f61a4f565cd50ac0cd045a75bb16ad588a56792da0ba484192a5c1768c7dbdd2422443f01"}, {&(0x7f0000000800)="43e6327e85c38c061c1b2efc252a3318d8e2c4b1ad00486413acf13a403340db517d708fcb98415ea005ec188bcca319b4570b8f71b75b69ccf864e8955c2a09b3aed386d5ef66014085842aa5342fb26bf3387912aac1a4cc7ada442de04849f47248ee4474f351a66476774d5924fb530e128c1e3945cff314118c29cd5c13422fc791f698b51035879254e59f7534e254ec10d60aa72f898946c2128d7bcd4baba3e0152599576d6f0fc0c61edc42e9e34556a198fed68559071d2752122f14cfcdf05c0ad0a9a5d7267c33c14ab3"}, {&(0x7f0000000000)="aa5466ebccbcf65342116ea03d567a2731e1053c846839947abe0ea82ee0e025e84052d1257fbe8e931c6cbb85ab88cd620f5d2b"}, {&(0x7f0000001340)="af69bd1359a31025247a0918f3e1673190bbed46a5d3b57e26b2604a947b16a7221e279c90ec81758871bc8ea518b13993db7fc811b3f7745e335d1db27724f7693b812d0d7ceb377470756468bacc3b9b46462dc6bc8a079d7192c6584e26e79fd7e8c50fe9a7848e22dc0d30911cc2e43a867ab6a71bce7beb30f9fceae27e3cf37b0f92d763d8bda81fef6b2c7cfb9e60a4f9bda68fb84f7891371fde8f5891b152dba3c77a0df208416f8a9744264e6c6639d6530c456cc6ba1e9f628e78944d9ce06b424de556573bd00f0fc387ef47c85ac5163b241c0a05d932144918073e36d1e954ba8de80684d43a6e6542051e63890c00db2d3081804694bc88f3f10f8110b0b160203dba66e4b41141e03f9285c4d01f6097255e90ea27fb330d77425ae2860782fc4fdbdcb1a224ddba9c87eb77499cbdc71ce32326642ebd19cc6ee6244c2ade538bc6fa39fad69969376bbdfdfd50631eb5fa33016b84d6fb37c07179469e9f4eb84b72da2a6bfa1722df0b28a1616718145aba1e6cd09609db6f0729946afe275eeca28c62c8e24666d24fa5194585375e939785f1abb200264494d4ab299ac731622353dbec586a9cbf929b24983ac2fc367d35c131fcbb9e9bc68b352a621ed18a0000ee93769f05be1bf9f4ad7215774ceff1e0449655dcd5e73e8ea86a2735f314ac08bc9e90da19cbb19f34ff5e6efe2c1d2ba8de7403cc3d40ccf5e32084d1197e1d1a1590111861943fc5812e109ac4368e59e8675d7253cf78e3c2944179c57bb6e4f1875089b1fb1fdd82aa2e30e118360a5e71355b9693a62a7de2b05c35f54ce3ec4bade9dba2a9f7b2abb69b23258318f748d3f47e17a10e768899be1227e3d2b666b62507174cfc1cc6011896065641131d35497c9b1423d6ef89d0e860361e0a2ae45b3718dd8bdf5c5abc0a550387c04c82e8ff5d21047cf9a7d3f80040bde74d476c725b9135303839c4297ba201d4f8418585a184cc1cc8e5d944adc6def3e0f524167c3350f8dd090284fcead011b39380ceadd0588630bd963c5b1d5c4035b680cea5e41d61baa0c72a348a98142f412df46f791942f267af6db7b570ce2ce16a051394d83b50e73eefb9e0ab93aaddaef9cdd78dabd7854c6bd44551e1d7af26cd19e6b307df9e4652f88ffffdf9c5865b9a4fd96a6bb0b2041b879b4d639098e4a2948157ad6430a2cab2d5d7dd5b2ef98c540a17f0651c80d736c5f937da58b94f3602a59be629a93a2217e02ea911078d1ecff96ca2ddca382a33fbb0a421c0c538d1eaf3d2adf64c8ef337d698cb7f8342bbde6b2254f5042c9cf0f7b73fe5fdae852232f4dbd5638516b81e0eb9e6b8fa3084e983ab9e54e69c19f6d74dad2703ece430239ff7b17d5de8ce4ffd4daae6317757c9ac8fe6c5cc177885e326e7f2558fe4c3551c2d07cf5d66794a5579ce7fe4921cc31a0620e302b0eed3c81907b3dc3f29e4e52fe8b12b6cc8a7f53a3df6f70cdbe83edd4c574b9868f9a7ed7b49a22223753d4c18dca7bdac97645bc251db3cd2b3f35bb42d8fd8129138facf4f38d869ddd030c36510502fcdd9b09877a2db7e7eaec0e4c865e8f6bdc33951d538288a2a520e311f2d56aa2e283232f897e715aca45f1e149e30b85a0c266ba179279c83f5004288a5310b3bb566efb5b49a4f08a243307a3fe4bf746d287bf56794064679791d23e5c3ec3556870b240dbcf10602b8363b7d6f4415d032b517f7850219b1f595fab94f3f54e9c24adadb6e010b002ecf8787cc2986152b35c58ed113d401936e86199960854048eb6f4f36b8bb565ceaee1da5d3eba6e6affeb71e56463ebc08f4db443574754de6247cc1186d91ab0ddb912190df24298b36d3000f5fe529ae5e0ade1936a6774501795fb860d15aa959115d3e7b3c4979230b7c03fce77ef4c85dd1050700b11412419f88d69485a09292f1ba35e16d89d3c88a1a6e378f6c77724396f08a9ac6fcacbd74f6ff975f12f6dc7c77480ee63ad7362e68a4345f1c0d63b613f55c00d50c2adaa19f7d9c90ec35caf0de49e8476319cbf2d3551807589a13b800c23392e5cdb0871eb03e165bbf1ca6858d89b1c0f3e59a4024cf166a26814ba3ef01af839962cc52dc2891aa5e70001a219435cdad1cf8588e22075e2098a90a58e61430b12609d82e305f7dd0d94683eecd0ea243128e1edb73a30d2b5eb9a4a01733e83bc9f59a255921ebb392e39b7939ca549f61101e0f09f5aae11ede890a5a038d9dad9f46aaf6c5d790c2401d99cdd4e53db5d58dd82a06bf8ba893f40bc85eb6283f1e030761f6784ba5ce200865f0516a836d067d37cbff5b99b0701e6380e0a372594c84e6b710db3c3edd05e4681ed033b142187407cfa374e0d30a5fc177aae921c35862eef41ff5ef0dc4ac38ae7507abd163e3ace01c03a3a177c18a22e29779b2b71d7df04f58d7f251976bbb70f803954fcf6b6c05ee44d8b8862099d5a08af95f396e4622818e720e907bd7201c58cd9565cdc2b69a256709d749d01cb6bf3b890961ec1d9406d1854e4ea937f8a082f65215226a0630ce8f13daca934a14475417f01351412feb5ab70fb8ea547bea2f1f13702b077ba5e653143955ab613eee9790c2d4683409bfd0e9d4a071af32b4300f5f3715028809081c0b9ef80b3278c747ac93774e7aa30a807c0d6e7dda0bfc3d3baebf1b1c062ce2b26ad815191359c9ed8f3abdd9fb553681f0025782fae3f1962911e2b523065dc8d730040ceb7186640e1fb12a4c2d6b3d7ba6d0a0b820bfc0fa27f5a021d6edd8374b9c3072f5759e9b51e4102a4b89153d50ce091e2f8fc0873fe271b84e43292f66f79af561c648e97c3652bef25e57c73d44be587b46d1fd3576eb72e49ca5b2c1bcd5692552038ca6786e4f513a629c0f8914539162fc00d694c80518341b5abe1650c00cadd53e108cbd5740d3ceb02d8a39166b8117959de51eed093ba81bb7a75813c0ca72e12b219d3a1c20c2554d04f061f5f5b05a7d728cf0d4019bfaa94add6213aee0387e98f15618aa601e2c17e6a51cd5730a4c1bef92d7f2bb460208a3342de8f0cd925b9455d18182137bf725220903aa0b6ec3c834fee2d32e8f480278c0ba8158692f7b82f8ec9a7eadbddd36f231110ca213bcf3abe4937d9aaad801af990b66c847fe061228585ca45119683ef5d0384cc10374ab2b2c87969c53f0d6406bfcc51de855216d145ce0a90f0ffd316abdca4f41b2806a0840e9019c20476f66c6ec433b97ab9311ad5d921fb815056e072f48ef30da741df916c24131d181b154d7c8e65f70d3a4135d5466202c79b2c483e9444478d9a96e3a27ea7285b2a399230ff4ae68e05bc574843cbee182800c06922b7483ec3d7914898ef9c2e11345604ff7db3e7e39939a2c402f783619e7684c270530e23eaa32736cfe962f27b5393875a6a190dd10c2ed37c2479e13f8483741e86a0ad72e75b9e5bcb2cbd8123f7783991ed38344dec2fd33881ff2975bf239849f048b9389df35a57e9ec4885b1cb7c67327f102fb75b5d53fea48ca81e44e2ae8c4933071bd6573312b840af526bc58ab2c1c2fdf199736e16d6a7cdf7b40efb3e9454461ec958095613f896ef49c6f1dbee6af1089babde008698dbc8d65128483ca5d4a8e04152eb4a1bfeb40733ab9efb16dc81fe171c19108f137498135a39a020b0af84ac8e674622ffad5a837a2cfa1e7b3f87f65b956b0d90f0e82d94b0e921c8149ee6110e50e278575e27cafe6894c0229dc1f5bbfe1e9da2854100f59d9f8aaebec4cdd4d75297326a468d9ff926b356c8ad87faec4c59a58267fe24aab94b71a01f88cb97f3f19e5725d082d602433651adab263265585cc68589abace2d8fbb2411e26857702f4d48512fff22b7ab7085517bf2a911a44aaf8eb82e6ef40a9ea9e2bd2fb8da26163a20ac6bd80e2896df6f76db36f3cebe5bbb3b7e5bab78e29257f062c5d4ac5afe38dc4e68f2023f2388b2a66ee19d2ae74753b03b8059e98b6956eb6e32d5bb93773adde06eaf64f6430affeced80efb41e66e677470a1b0fb7b12c8ece0f209fa2a2b7f6e3b5190747f951312c7f3c8728a1aa108ae94f19c7d51f1d9c1d4aa52e6c5cbbf0afa00203677eec3e6f74a5bcf0cce09f0f445aada00d13b9b2c088c5e3b36c364c100b18c69012f813b76a1c42826ecd921fdf0f8a2347e8d58f068f5f3d0f1f19f3d8e37a0dc686d1455af64a45a675adc15fddbcc5a987a57da7a6d6d44d6859cfeb9d47fb50c0bc575279336da9552b186e1b81a2a7e34a1af1511e953f30e24261f080d028011267fea52a83994ec70d53923b4fee756b5257798ebec3396d75151a76e2f921c6e5df9d3d67e2f1d137e4a227762fc9fe54f15b6f44b336f50fbeca539fb6f01723e67c3ccd0d522c15d7276e8f0ae2133d475f4b83155661a152f0251ca96d49500f528ce7fb58d04a9a9ca939db9f211caba5e6885a2113a30cf9d03facda2a825d2ab136ba057eb4b631b8083dd87ee3af5faba23aa9bef0b51c3fa9fe4b0233f52b5fe5bf772f97d8f28d28c00ccebbee0cece36a21c5128598663afd56f65768519df25990690754e8c889344bfbb3c209dcd392a99e8ae0ba9c9daf83affa8db600afccf854451bc9ebbd25c3e661bf2b78c6d9dec1b6f0eeca4667413c7099d39bca2af64ae33aeeaa000f42e684c407d28ba7ccb4e2e805f661a57442d3aaf2335dec52f59287f783ce52296e0f370e9d5f1f8d6256895f94d088d314aee3aa8add38bdd59ff17bfa0c79dc07514392e715db35e80c844e03a482d9a06ff983dea62f8d38f3f84253ebf056c84888eba1f4dafd97f3d24c43171b78ca0964fe552209b30a9e0c63e43e728295bdfa980792a5696974f7c030a4f6bec73301164522e944c5cea86749ce780e6ba1d598e356c9749137dfd244bf55404956e390b7fd6e5370dfda5ab784d71aa19c85d4ae59e308316c0bbc67b4c7a4c0a170b2d6bd72a1edf93881c7b056614338bf716a6ce61908605ee159fdb6387b517e02ade6936cfea0c67a11112f3dd042fff910abea43e923c6b5fb7086e187417a0e4d7900558e13c0a4ca9fe84af1e97981c681c64522e12fcef3d38f0f81c0886b7b46b44aa5d0720b023bb4d2ed06000240c90d1a003690724b220d8b4306f66e158063a3433c9fbf9df11aed2bf8e88842a2e09c034e0d6f254c0cb63ca7e5c65283e5ab357b96f9c372e11accbc65d3420859ffc2c86860029b2f89a57c3a376514e4d27e409c654f3a860afb0e934c995a794be517becd83f33cc15e7bf4617fdfae99bf2bd4880b1f5e775cf4fbca19111e81f67dd9aa9a645e019cfec6370b685e61bce79dc3c5a48c468770001b5410663192a315772ac6fc599539631f572ae416b0e052ec0a1a0984f4695e6ae51707597e83392cb50e68259439949dec6a3b534a3e0b8e3e30bc8195494b57e2e0239fe06ecd5d427a2298457fa0793093791a8b3dab1a8c1897767140eb01315425760195be3c526a7df04287d99bcc6ac058fe3a253a725b64f310070dc9fabd4d18862b41952042665cc0d6ea1ce52ef5d62f8a46913e78767ac673b5822572104702bfdb2aca4c46f6c8b066efb07bc62e9eb443626c7c7737dae90e214c414acddf038e9f0ad2132679f59272f3c8e8b23ede5a12b87349050ae76696565adc468d917817a027972981c0f251ed22c5282003e1bee90ce6f4bf9796cdc9b1d2c8d6b4a7ce67bb6353"}, {&(0x7f0000000900)="463e3e542bff3a0b5f46a2d467fb6bd14675209f754d90b296ab605a52dad7fa1567536b783959ddf0b18c290ac11a0d43f6cf736dc056fb724305d47c2305fc21145482119818ef940d99dc66d005f00be617ac827aea1f0417425112c7ef4399e8c5c02317c710d04d81a74e334280ea46b7aeaa7bc4ef20abf93dec358b165b42fb12db2b"}, {&(0x7f0000000140)="35098d57463a57b19eab7417"}, {&(0x7f00000009c0)="3965cd88f73b4fde31c9d9bdb61875cbdd667f1e34fcc8b2a6b9be95c6652e278f857907ba3dd15823a2b0e58e097ec22c9124c03f1e627dd415d365eb014c4e7f5ec42a85acf0adb9193b0612c1238b3c8a824164e5e69334"}], 0x3a}, 0x4000004) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r5, 0xb) socketpair$unix(0x1, 0x1, 0x0, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 1.499956092s ago: executing program 1 (id=1649): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300), 0xfffffffffffffffe, 0x40, r1}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000601fac8b00e2c30d000c00000005000000fdffffff0000000604000000839a6ab19c15f93747692e19f5f757860712df9ec5be3423764c2ccaf3e78fe8d2d2b6c64e34f78894fd7566d763eb89be4f198af192c873ba35d3f238b59aaafc2c445a7a19c9100af292fd50d3cf7257441a8a9dbd45626b09ea6e65aa79ea4e2c2ce2b4135679b6f0d87f7dc8e2eed54e615f7683ce7910862b8b5176357ae4906d2507c35f0bd811f865"], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x400008, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x21da, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x30, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)=r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x1, 0xc, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xa, 0x7000}, 0x5, 0x0, 0x0, 0x0, 0x4, 0x4, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x3, 0x0, 0x20000, 0x4000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x80000000, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="c7", 0x1}], 0x1}, 0x24048811) socket$kcm(0x11, 0x2, 0x0) r6 = socket$kcm(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x8907, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) 1.399870351s ago: executing program 0 (id=1650): r0 = socket$kcm(0x2, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f00000003c0)='syzkaller\x00'}, 0x94) r2 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x28, 0x6, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x84, &(0x7f0000000000), 0x90) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r8}, &(0x7f0000000ac0), &(0x7f0000000b00)}, 0x20) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f00000003c0)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000000000000000000000700000001830b"], 0x20}, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e08906200060000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r10 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r10, 0x6, 0x1e, 0x0, 0xb00) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 1.305875793s ago: executing program 3 (id=1651): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf5d, 0x3}, 0x0, 0xca, 0xdc1, 0x8, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x1, 0x2}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_clone(0x80090000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x9}, @loopback}}}], 0x20}, 0xe900) sendmsg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000740)="ecfd5dd05d6c0e6578521ac4e478af07c681a27448cc50044f340c5dc69cc58e120af98a620e851653d5faa8f685f8d3fc9db17b661ea653826bc6f0b912291acd05d2e8defb939fdb46ed4e5d3ee7e2fa62617977c3e3ec5370804dd0630720b5dc04a43c1fa19f4b14a46589d79849e4efb468e2149e7a256f0beeb2f36ff416e61e0ca1037f77375ee261912ef24892cbc7b198091681e0fca61ecc5326b11f0f0f93007e", 0xa6}, {&(0x7f0000000040)="68ca218686a9c9e719fa8197085e22ebd0f1", 0x12}, {&(0x7f0000002800)}], 0x3}, 0x40e4804) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000280)="968de08ef9d3776cc617cd50131d315ad5fb8b816015365fce076a90c9164cacc24765615a64feecb8df5da672b877c95c8981637d0764b7f33b467eb8192f1dd0868a4b73053f19e218214c2603cb"}, {&(0x7f0000000500)="d55a84cc297d5b10ebf3bf7bb37d376ddf53f33432e0dacb8ae8cafd58ac4c4f5b970642eb63743281eef343f5db74b5ed03d556e5f7c21ee21b07bdc6bc87ff3915e00f0751a646b29ff44061af47d1b52951578f61a4f565cd50ac0cd045a75bb16ad588a56792da0ba484192a5c1768c7dbdd2422443f01"}, {&(0x7f0000000800)="43e6327e85c38c061c1b2efc252a3318d8e2c4b1ad00486413acf13a403340db517d708fcb98415ea005ec188bcca319b4570b8f71b75b69ccf864e8955c2a09b3aed386d5ef66014085842aa5342fb26bf3387912aac1a4cc7ada442de04849f47248ee4474f351a66476774d5924fb530e128c1e3945cff314118c29cd5c13422fc791f698b51035879254e59f7534e254ec10d60aa72f898946c2128d7bcd4baba3e0152599576d6f0fc0c61edc42e9e34556a198fed68559071d2752122f14cfcdf05c0ad0a9a5d7267c33c14ab3"}, {&(0x7f0000000000)="aa5466ebccbcf65342116ea03d567a2731e1053c846839947abe0ea82ee0e025e84052d1257fbe8e931c6cbb85ab88cd620f5d2b"}, {&(0x7f0000001340)="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"}, {&(0x7f0000000900)="463e3e542bff3a0b5f46a2d467fb6bd14675209f754d90b296ab605a52dad7fa1567536b783959ddf0b18c290ac11a0d43f6cf736dc056fb724305d47c2305fc21145482119818ef940d99dc66d005f00be617ac827aea1f0417425112c7ef4399e8c5c02317c710d04d81a74e334280ea46b7aeaa7bc4ef20abf93dec358b165b42fb12db2b"}, {&(0x7f0000000140)="35098d57463a57b19eab7417"}, {&(0x7f00000009c0)="3965cd88f73b4fde31c9d9bdb61875cbdd667f1e34fcc8b2a6b9be95c6652e278f857907ba3dd15823a2b0e58e097ec22c9124c03f1e627dd415d365eb014c4e7f5ec42a85acf0adb9193b0612c1238b3c8a824164e5e69334"}], 0x3a}, 0x4000004) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r5, 0xb) socketpair$unix(0x1, 0x1, 0x0, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 338.404008ms ago: executing program 3 (id=1652): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b703000024000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095000000"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000dc0)={0x0, 0x80, 0x0, 0x5, 0x8, 0x6, 0x0, 0xd, 0x20002, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x4, @perf_config_ext={0x5, 0x8}, 0x2a0f, 0xc046, 0x3e, 0xa, 0x0, 0x7, 0x8, 0x0, 0x8, 0x0, 0x4}, r4, 0xc, r2, 0x0) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="1c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6", 0x15}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff07) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) recvmsg$unix(r3, &(0x7f00000005c0)={&(0x7f00000006c0), 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000f00)=""/121, 0x79}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/93, 0x5d}, {&(0x7f0000000cc0)=""/216, 0xd8}, {0x0}], 0x5, &(0x7f0000000f80)}, 0x3) r8 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="720ac4ffe3d5332d6910160f848e00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) ioctl$TUNGETFEATURES(r9, 0x800454cf, &(0x7f0000000500)) socket$kcm(0xa, 0x7, 0x88) close(0x3) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000180)="8621457b1771c16215fa9f61f75cf2b7f246ca4726d77339de5f19bddf0e5e56d67a9c943710e1856ef4ad79e01a9e315c18d7cfe9f2b7527bb11ccb33e891fa895730a87e5468f436edbb5d4eba1e745b31397bed3c53a4c68eaf5697a2c64ed886ef9b468a17df0d2b8c040881d9bedade4bdde343850d24292a7c60802c73cf50c1ae0025bd41c61d4c0b3102ef54a5f3794886c958e725ec90ce3eca7054853eec33b7402219c45ff36057cf8b61e733ff4aeeac7cd30de0c2ecc2acd297be4c9ef5be139211942840f35ce90696aee14a5897b38c31f11599d9130fda79a950312b9a3c827897be60496a100454", &(0x7f0000000280)=""/154, &(0x7f0000000040)="5c40ff6c90ecb6021e46e04c1f7aae2f2d8e506a417ab09fbb2b537853cfa3e9c5d04be090aed655ef6821faf3ca9dadea8cafd1a902", &(0x7f0000000340)="784be7fc6158bb0b3359fdfa2a5268088c9a001d031aeebbe7ea32e7d7471d6a12035e3e287920198e1e8b7f4b9ea835cd3507f75eeb3d14aaf87b67cd380c6aca71308453aa304c285216186aa407310c25a9cdc6f262efe072fe58b303a96c51616cffa3f1235c60d84dd19034455c78646b6318116eef81d035553dc7f149e23c84b72fc2cd5363fbe9411d5f4c8ac8a75c352e0e4a24a1c50f95d3d2e6eb9c4d4afff03860fe1455a9fc8b2ddcdc38cbee31137a544b36fa3690d6449ea78c1a3702c99a11ccbb998d210cb81c5c11", 0x8a8, 0xffffffffffffffff, 0x4}, 0x38) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800208b000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000228500000094", @ANYRES16, @ANYRESOCT, @ANYRESHEX=r6, @ANYRES8=r8], &(0x7f0000000740)='GPL\x00', 0x0, 0x26, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 336.931188ms ago: executing program 2 (id=1653): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a11800150006", 0x21}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a00000700", 0x15}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) r2 = openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffff7f4a, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8cee795c7e6292d4da9d0d", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff, 0xfa6a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r3) 252.06346ms ago: executing program 0 (id=1654): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/4085, 0xff5}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000004700)=""/4137, 0x1029}, {&(0x7f0000000780)=""/158, 0x9e}, {&(0x7f0000000140)=""/153, 0x99}, {0x0}], 0x6}, 0x20) 170.312084ms ago: executing program 1 (id=1655): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 64.290982ms ago: executing program 1 (id=1656): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f00000002c0), 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/144, 0x90}, {&(0x7f0000000680)=""/103, 0x67}, {&(0x7f0000000700)=""/49, 0x31}, {&(0x7f0000000740)=""/137, 0x89}, {&(0x7f00000008c0)=""/29, 0x1d}, {&(0x7f00000009c0)=""/238, 0xee}, {&(0x7f0000000ac0)=""/67, 0x43}, {&(0x7f0000000b40)=""/179, 0xb3}], 0x8}, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 62.352032ms ago: executing program 0 (id=1657): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0x24, 0x24, 0x0, [@ptr, @const, @restrict]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000040)=""/132, 0x3e, 0x84, 0x1}, 0x20) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6cab2ea5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b28bf781c274386d178550", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0xa6, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x3) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x4000051) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211057300fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1, &(0x7f0000000480)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7429}, 0x94) close(r0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r1}, 0x18) r7 = socket$kcm(0x10, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/108, 0x6c}], 0x1, &(0x7f0000000440)=""/117, 0x75}, 0x40002000) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x12c107, 0x4, 0x8e, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007001a00050004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 1 (id=1658): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300), 0xfffffffffffffffe, 0x40, r1}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000601fac8b00e2c30d000c00000005000000fdffffff0000000604000000839a6ab19c15f93747692e19f5f757860712df9ec5be3423764c2ccaf3e78fe8d2d2b6c64e34f78894fd7566d763eb89be4f198af192c873ba35d3f238b59aaafc2c445a7a19c9100af292fd50d3cf7257441a8a9dbd45626b09ea6e65aa79ea4e2c2ce2b4135679b6f0d87f7dc8e2eed54e615f7683ce7910862b8b5176357ae4906d2507c35f0bd811f865"], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x400008, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x21da, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x30, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x1, 0xc, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xa, 0x7000}, 0x5, 0x0, 0x0, 0x0, 0x4, 0x4, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x3, 0x0, 0x20000, 0x4000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x80000000, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="c7", 0x1}], 0x1}, 0x24048811) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12023) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) r5 = socket$kcm(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x8907, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): e [ 167.889305][ T7516] RDX: 000000000000000f RSI: 00007f4c797ad0a0 RDI: 0000000000000005 [ 167.897705][ T7516] RBP: 00007f4c797ad090 R08: 0000000000000000 R09: 0000000000000000 [ 167.905666][ T7516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.913628][ T7516] R13: 00007f4c78c16038 R14: 00007f4c78c15fa0 R15: 00007ffcec793268 [ 167.921613][ T7516] [ 170.967053][ T5775] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 171.172640][ T5775] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 172.051501][ T5775] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 172.159772][ T7549] netlink: 18187 bytes leftover after parsing attributes in process `syz.2.570'. [ 173.930624][ T7561] FAULT_INJECTION: forcing a failure. [ 173.930624][ T7561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.943979][ T7561] CPU: 1 PID: 7561 Comm: syz.3.575 Not tainted syzkaller #0 [ 173.951390][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.961478][ T7561] Call Trace: [ 173.964763][ T7561] [ 173.967780][ T7561] dump_stack_lvl+0x18c/0x250 [ 173.972470][ T7561] ? show_regs_print_info+0x20/0x20 [ 173.977666][ T7561] ? load_image+0x400/0x400 [ 173.982167][ T7561] ? __lock_acquire+0x7d40/0x7d40 [ 173.987187][ T7561] ? snprintf+0xe9/0x140 [ 173.991428][ T7561] should_fail_ex+0x39d/0x4d0 [ 173.996114][ T7561] _copy_to_user+0x2f/0xa0 [ 174.000622][ T7561] simple_read_from_buffer+0xe7/0x150 [ 174.006002][ T7561] proc_fail_nth_read+0x1e8/0x260 [ 174.011029][ T7561] ? proc_fault_inject_write+0x360/0x360 [ 174.016660][ T7561] ? fsnotify_perm+0x271/0x5e0 [ 174.021425][ T7561] ? proc_fault_inject_write+0x360/0x360 [ 174.027142][ T7561] vfs_read+0x28b/0x970 [ 174.031334][ T7561] ? kernel_read+0x1e0/0x1e0 [ 174.035921][ T7561] ? __fget_files+0x28/0x4b0 [ 174.040506][ T7561] ? __fget_files+0x28/0x4b0 [ 174.045105][ T7561] ? __fget_files+0x43d/0x4b0 [ 174.049974][ T7561] ? __fdget_pos+0x2a3/0x330 [ 174.055113][ T7561] ? ksys_read+0x75/0x260 [ 174.059464][ T7561] ksys_read+0x150/0x260 [ 174.063723][ T7561] ? vfs_write+0x990/0x990 [ 174.068148][ T7561] ? lockdep_hardirqs_on+0x98/0x150 [ 174.073442][ T7561] do_syscall_64+0x55/0xa0 [ 174.077862][ T7561] ? clear_bhb_loop+0x40/0x90 [ 174.082536][ T7561] ? clear_bhb_loop+0x40/0x90 [ 174.087208][ T7561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.093183][ T7561] RIP: 0033:0x7ffa9d55cfce [ 174.097597][ T7561] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 174.117209][ T7561] RSP: 002b:00007ffa9e496fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.125627][ T7561] RAX: ffffffffffffffda RBX: 00007ffa9e4976c0 RCX: 00007ffa9d55cfce [ 174.133609][ T7561] RDX: 000000000000000f RSI: 00007ffa9e4970a0 RDI: 0000000000000004 [ 174.141661][ T7561] RBP: 00007ffa9e497090 R08: 0000000000000000 R09: 0000000000000000 [ 174.149719][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.157802][ T7561] R13: 00007ffa9d816038 R14: 00007ffa9d815fa0 R15: 00007ffec1c9da98 [ 174.165781][ T7561] [ 174.474997][ T7564] netlink: 'syz.2.576': attribute type 1 has an invalid length. [ 174.519247][ T7564] netlink: 'syz.2.576': attribute type 4 has an invalid length. [ 174.536688][ T7564] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.576'. [ 174.583396][ T5775] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 175.921450][ T7589] FAULT_INJECTION: forcing a failure. [ 175.921450][ T7589] name failslab, interval 1, probability 0, space 0, times 0 [ 175.957327][ T7589] CPU: 0 PID: 7589 Comm: syz.3.585 Not tainted syzkaller #0 [ 175.964690][ T7589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.974803][ T7589] Call Trace: [ 175.978097][ T7589] [ 175.981026][ T7589] dump_stack_lvl+0x18c/0x250 [ 175.985800][ T7589] ? show_regs_print_info+0x20/0x20 [ 175.991093][ T7589] ? load_image+0x400/0x400 [ 175.995600][ T7589] ? __might_sleep+0xe0/0xe0 [ 176.000185][ T7589] ? __lock_acquire+0x7d40/0x7d40 [ 176.005304][ T7589] ? prepend_path+0x4b/0x960 [ 176.009979][ T7589] should_fail_ex+0x39d/0x4d0 [ 176.014662][ T7589] should_failslab+0x9/0x20 [ 176.019171][ T7589] slab_pre_alloc_hook+0x59/0x310 [ 176.024195][ T7589] ? __asan_memcpy+0x40/0x70 [ 176.028781][ T7589] ? tomoyo_encode+0x28b/0x540 [ 176.033537][ T7589] ? tomoyo_encode+0x28b/0x540 [ 176.038301][ T7589] __kmem_cache_alloc_node+0x53/0x250 [ 176.043668][ T7589] ? prepend_path+0x4b/0x960 [ 176.048343][ T7589] ? tomoyo_encode+0x28b/0x540 [ 176.053208][ T7589] __kmalloc+0xa4/0x230 [ 176.057381][ T7589] tomoyo_encode+0x28b/0x540 [ 176.062011][ T7589] tomoyo_realpath_from_path+0x592/0x5d0 [ 176.067640][ T7589] tomoyo_path_number_perm+0x248/0x620 [ 176.073099][ T7589] ? tomoyo_path_number_perm+0x217/0x620 [ 176.078723][ T7589] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 176.084235][ T7589] ? __fget_files+0x28/0x4b0 [ 176.088928][ T7589] ? __fget_files+0x28/0x4b0 [ 176.093626][ T7589] security_file_ioctl+0x70/0xa0 [ 176.098584][ T7589] __se_sys_ioctl+0x48/0x170 [ 176.103182][ T7589] do_syscall_64+0x55/0xa0 [ 176.107606][ T7589] ? clear_bhb_loop+0x40/0x90 [ 176.112275][ T7589] ? clear_bhb_loop+0x40/0x90 [ 176.116943][ T7589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.122839][ T7589] RIP: 0033:0x7ffa9d59c799 [ 176.127266][ T7589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.146875][ T7589] RSP: 002b:00007ffa9e497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.155371][ T7589] RAX: ffffffffffffffda RBX: 00007ffa9d815fa0 RCX: 00007ffa9d59c799 [ 176.163510][ T7589] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000008 [ 176.171475][ T7589] RBP: 00007ffa9e497090 R08: 0000000000000000 R09: 0000000000000000 [ 176.179439][ T7589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.187399][ T7589] R13: 00007ffa9d816038 R14: 00007ffa9d815fa0 R15: 00007ffec1c9da98 [ 176.195376][ T7589] [ 176.223713][ T7589] ERROR: Out of memory at tomoyo_realpath_from_path. [ 176.343520][ T7587] netlink: 18187 bytes leftover after parsing attributes in process `syz.2.584'. [ 176.626238][ T5775] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 176.890939][ T7611] FAULT_INJECTION: forcing a failure. [ 176.890939][ T7611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.961655][ T7611] CPU: 1 PID: 7611 Comm: syz.1.593 Not tainted syzkaller #0 [ 176.969020][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 176.979104][ T7611] Call Trace: [ 176.982399][ T7611] [ 176.985341][ T7611] dump_stack_lvl+0x18c/0x250 [ 176.990050][ T7611] ? show_regs_print_info+0x20/0x20 [ 176.995335][ T7611] ? load_image+0x400/0x400 [ 176.999829][ T7611] ? __might_fault+0xaa/0x120 [ 177.004491][ T7611] ? __lock_acquire+0x7d40/0x7d40 [ 177.009531][ T7611] should_fail_ex+0x39d/0x4d0 [ 177.014246][ T7611] _copy_from_user+0x2f/0xe0 [ 177.018867][ T7611] ___sys_sendmsg+0x1c7/0x360 [ 177.023665][ T7611] ? get_pid_task+0x20/0x1e0 [ 177.028291][ T7611] ? __sys_sendmsg+0x2a0/0x2a0 [ 177.033194][ T7611] ? __lock_acquire+0x7d40/0x7d40 [ 177.038356][ T7611] __se_sys_sendmsg+0x1c2/0x2b0 [ 177.043238][ T7611] ? __x64_sys_sendmsg+0x80/0x80 [ 177.048211][ T7611] ? lockdep_hardirqs_on+0x98/0x150 [ 177.053522][ T7611] do_syscall_64+0x55/0xa0 [ 177.057966][ T7611] ? clear_bhb_loop+0x40/0x90 [ 177.062685][ T7611] ? clear_bhb_loop+0x40/0x90 [ 177.067380][ T7611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.073295][ T7611] RIP: 0033:0x7f4c7899c799 [ 177.077733][ T7611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.097820][ T7611] RSP: 002b:00007f4c797ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.106266][ T7611] RAX: ffffffffffffffda RBX: 00007f4c78c15fa0 RCX: 00007f4c7899c799 [ 177.114265][ T7611] RDX: 0000000020000810 RSI: 0000200000000100 RDI: 0000000000000003 [ 177.122353][ T7611] RBP: 00007f4c797ad090 R08: 0000000000000000 R09: 0000000000000000 [ 177.130463][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.138543][ T7611] R13: 00007f4c78c16038 R14: 00007f4c78c15fa0 R15: 00007ffcec793268 [ 177.146667][ T7611] [ 178.281082][ T7626] netlink: 18187 bytes leftover after parsing attributes in process `syz.2.598'. [ 178.570837][ T7633] team0: Port device team_slave_0 removed [ 178.604260][ T7633] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 178.688270][ T7637] netlink: 'syz.3.602': attribute type 21 has an invalid length. [ 178.718581][ T7637] netlink: 132 bytes leftover after parsing attributes in process `syz.3.602'. [ 178.897537][ T7644] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.604'. [ 178.950652][ T7644] sock: sock_set_timeout: `syz.1.604' (pid 7644) tries to set negative timeout [ 182.838566][ T7677] netlink: 18187 bytes leftover after parsing attributes in process `syz.3.616'. [ 182.839729][ T7683] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.618'. [ 182.860454][ T7682] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 182.875464][ T7682] netlink: 'syz.0.617': attribute type 16 has an invalid length. [ 182.883947][ T7682] netlink: 156 bytes leftover after parsing attributes in process `syz.0.617'. [ 183.520391][ T7702] netlink: 'syz.0.627': attribute type 29 has an invalid length. [ 183.531449][ T7702] netlink: 'syz.0.627': attribute type 29 has an invalid length. [ 183.646138][ T7713] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.629'. [ 183.765054][ T7717] netlink: 'syz.0.630': attribute type 10 has an invalid length. [ 183.782820][ T7717] team0: Port device geneve1 added [ 184.321215][ T7738] FAULT_INJECTION: forcing a failure. [ 184.321215][ T7738] name failslab, interval 1, probability 0, space 0, times 0 [ 184.336740][ T7738] CPU: 1 PID: 7738 Comm: syz.0.638 Not tainted syzkaller #0 [ 184.344152][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.354221][ T7738] Call Trace: [ 184.357501][ T7738] [ 184.360426][ T7738] dump_stack_lvl+0x18c/0x250 [ 184.365108][ T7738] ? show_regs_print_info+0x20/0x20 [ 184.370307][ T7738] ? load_image+0x400/0x400 [ 184.374806][ T7738] ? __might_sleep+0xe0/0xe0 [ 184.379485][ T7738] ? __lock_acquire+0x7d40/0x7d40 [ 184.384511][ T7738] ? lock_chain_count+0x20/0x20 [ 184.389359][ T7738] should_fail_ex+0x39d/0x4d0 [ 184.394039][ T7738] should_failslab+0x9/0x20 [ 184.398540][ T7738] slab_pre_alloc_hook+0x59/0x310 [ 184.403562][ T7738] ? _raw_spin_unlock+0x40/0x40 [ 184.408437][ T7738] ? string+0x26d/0x2b0 [ 184.412589][ T7738] ? __request_module+0x2d1/0x600 [ 184.417608][ T7738] __kmem_cache_alloc_node+0x53/0x250 [ 184.422977][ T7738] ? __request_module+0x2d1/0x600 [ 184.428019][ T7738] kmalloc_trace+0x2a/0xe0 [ 184.432433][ T7738] __request_module+0x2d1/0x600 [ 184.437282][ T7738] ? module_enforce_rwx_sections+0x150/0x150 [ 184.443260][ T7738] ? tcp_ca_find_autoload+0x115/0x240 [ 184.448729][ T7738] ? bpf_lsm_capable+0x9/0x10 [ 184.453407][ T7738] ? tcp_ca_find_autoload+0x115/0x240 [ 184.458772][ T7738] tcp_ca_find_autoload+0x138/0x240 [ 184.464055][ T7738] ? tcp_set_congestion_control+0x73/0xad0 [ 184.469854][ T7738] tcp_set_congestion_control+0x120/0xad0 [ 184.475574][ T7738] ? tcp_set_congestion_control+0x73/0xad0 [ 184.481373][ T7738] mptcp_setsockopt+0x2643/0x3390 [ 184.486398][ T7738] ? __fget_files+0x28/0x4b0 [ 184.490987][ T7738] ? pm_nl_exit_net+0x230/0x230 [ 184.495838][ T7738] ? aa_af_perm+0x330/0x330 [ 184.500427][ T7738] ? __fget_files+0x28/0x4b0 [ 184.505077][ T7738] ? __fget_files+0x28/0x4b0 [ 184.509683][ T7738] ? aa_sock_opt_perm+0x74/0x100 [ 184.514620][ T7738] ? sock_common_setsockopt+0x36/0xc0 [ 184.519992][ T7738] ? sock_common_recvmsg+0x190/0x190 [ 184.525273][ T7738] do_sock_setsockopt+0x175/0x1a0 [ 184.530295][ T7738] ? __fdget+0x180/0x210 [ 184.534585][ T7738] __x64_sys_setsockopt+0x182/0x200 [ 184.539819][ T7738] do_syscall_64+0x55/0xa0 [ 184.544251][ T7738] ? clear_bhb_loop+0x40/0x90 [ 184.549018][ T7738] ? clear_bhb_loop+0x40/0x90 [ 184.553700][ T7738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.559592][ T7738] RIP: 0033:0x7efc7739c799 [ 184.564007][ T7738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.583610][ T7738] RSP: 002b:00007efc782c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 184.592025][ T7738] RAX: ffffffffffffffda RBX: 00007efc77615fa0 RCX: 00007efc7739c799 [ 184.599988][ T7738] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000003 [ 184.607948][ T7738] RBP: 00007efc782c7090 R08: 0000000000000004 R09: 0000000000000000 [ 184.615935][ T7738] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.623909][ T7738] R13: 00007efc77616038 R14: 00007efc77615fa0 R15: 00007ffe7f167678 [ 184.631889][ T7738] [ 185.195028][ T7755] netlink: 'syz.0.644': attribute type 10 has an invalid length. [ 185.468053][ T7762] netlink: 'syz.3.646': attribute type 21 has an invalid length. [ 185.476054][ T7762] netlink: 156 bytes leftover after parsing attributes in process `syz.3.646'. [ 185.489945][ T7762] netlink: 'syz.3.646': attribute type 10 has an invalid length. [ 185.515049][ T7762] team0: Device ipvlan1 failed to register rx_handler [ 185.562191][ T7764] netlink: 'syz.1.647': attribute type 1 has an invalid length. [ 185.572311][ T7764] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.647'. [ 185.998190][ T7783] FAULT_INJECTION: forcing a failure. [ 185.998190][ T7783] name failslab, interval 1, probability 0, space 0, times 0 [ 186.011900][ T7783] CPU: 0 PID: 7783 Comm: syz.0.655 Not tainted syzkaller #0 [ 186.019252][ T7783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.029348][ T7783] Call Trace: [ 186.032663][ T7783] [ 186.035695][ T7783] dump_stack_lvl+0x18c/0x250 [ 186.040414][ T7783] ? show_regs_print_info+0x20/0x20 [ 186.045640][ T7783] ? load_image+0x400/0x400 [ 186.050185][ T7783] ? __lock_acquire+0x7d40/0x7d40 [ 186.055261][ T7783] should_fail_ex+0x39d/0x4d0 [ 186.060121][ T7783] should_failslab+0x9/0x20 [ 186.064726][ T7783] slab_pre_alloc_hook+0x59/0x310 [ 186.069759][ T7783] kmem_cache_alloc+0x5a/0x2d0 [ 186.074522][ T7783] ? sk_prot_alloc+0x57/0x210 [ 186.079207][ T7783] sk_prot_alloc+0x57/0x210 [ 186.083717][ T7783] ? sk_alloc+0x24/0x360 [ 186.087951][ T7783] sk_alloc+0x3a/0x360 [ 186.092050][ T7783] inet_create+0x7a0/0xfe0 [ 186.096562][ T7783] ? inet_create+0x9c/0xfe0 [ 186.101075][ T7783] __sock_create+0x4a6/0x940 [ 186.105671][ T7783] udp_sock_create4+0xcb/0x480 [ 186.110445][ T7783] ? erspan_exit_batch_net+0x30/0x30 [ 186.115759][ T7783] rxrpc_lookup_local+0xd1f/0x1610 [ 186.120895][ T7783] ? rxrpc_local_dont_fragment+0x70/0x70 [ 186.126531][ T7783] ? lockdep_hardirqs_on+0x98/0x150 [ 186.131819][ T7783] ? _local_bh_enable+0xa0/0xa0 [ 186.136774][ T7783] rxrpc_sendmsg+0x30a/0x5b0 [ 186.141367][ T7783] ? rxrpc_getsockopt+0x150/0x150 [ 186.146400][ T7783] ____sys_sendmsg+0x5ba/0x960 [ 186.151241][ T7783] ? __lock_acquire+0x7d40/0x7d40 [ 186.156354][ T7783] ? __sys_sendmsg_sock+0x30/0x30 [ 186.161367][ T7783] ? __import_iovec+0x3fa/0x850 [ 186.166225][ T7783] ? import_iovec+0x73/0xa0 [ 186.170729][ T7783] ___sys_sendmsg+0x2a6/0x360 [ 186.175406][ T7783] ? get_pid_task+0x20/0x1e0 [ 186.179996][ T7783] ? __sys_sendmsg+0x2a0/0x2a0 [ 186.184765][ T7783] ? __lock_acquire+0x7d40/0x7d40 [ 186.189822][ T7783] __se_sys_sendmsg+0x1c2/0x2b0 [ 186.194666][ T7783] ? __x64_sys_sendmsg+0x80/0x80 [ 186.199611][ T7783] ? lockdep_hardirqs_on+0x98/0x150 [ 186.204805][ T7783] do_syscall_64+0x55/0xa0 [ 186.209220][ T7783] ? clear_bhb_loop+0x40/0x90 [ 186.213890][ T7783] ? clear_bhb_loop+0x40/0x90 [ 186.218560][ T7783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.224443][ T7783] RIP: 0033:0x7efc7739c799 [ 186.228856][ T7783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.248469][ T7783] RSP: 002b:00007efc782c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.256886][ T7783] RAX: ffffffffffffffda RBX: 00007efc77615fa0 RCX: 00007efc7739c799 [ 186.264851][ T7783] RDX: 000000000000ff00 RSI: 0000200000000000 RDI: 0000000000000003 [ 186.272815][ T7783] RBP: 00007efc782c7090 R08: 0000000000000000 R09: 0000000000000000 [ 186.280865][ T7783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.288933][ T7783] R13: 00007efc77616038 R14: 00007efc77615fa0 R15: 00007ffe7f167678 [ 186.296913][ T7783] [ 186.385983][ T7785] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.654'. [ 186.609141][ T7795] FAULT_INJECTION: forcing a failure. [ 186.609141][ T7795] name failslab, interval 1, probability 0, space 0, times 0 [ 186.626233][ T7795] CPU: 1 PID: 7795 Comm: syz.2.658 Not tainted syzkaller #0 [ 186.633595][ T7795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.643681][ T7795] Call Trace: [ 186.647001][ T7795] [ 186.649959][ T7795] dump_stack_lvl+0x18c/0x250 [ 186.654693][ T7795] ? show_regs_print_info+0x20/0x20 [ 186.659930][ T7795] ? load_image+0x400/0x400 [ 186.664515][ T7795] ? __might_sleep+0xe0/0xe0 [ 186.669156][ T7795] ? __lock_acquire+0x7d40/0x7d40 [ 186.674233][ T7795] should_fail_ex+0x39d/0x4d0 [ 186.678964][ T7795] should_failslab+0x9/0x20 [ 186.683540][ T7795] slab_pre_alloc_hook+0x59/0x310 [ 186.688622][ T7795] kmem_cache_alloc_node+0x60/0x320 [ 186.693865][ T7795] ? __alloc_skb+0x103/0x2c0 [ 186.698504][ T7795] __alloc_skb+0x103/0x2c0 [ 186.703057][ T7795] netlink_dump+0x1ec/0xe50 [ 186.707622][ T7795] ? ethnl_ops_complete+0xc0/0xc0 [ 186.712689][ T7795] ? netlink_lookup+0x200/0x200 [ 186.714081][ T7802] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 186.717590][ T7795] ? genl_start+0x574/0x6b0 [ 186.727994][ T7795] __netlink_dump_start+0x5f1/0x810 [ 186.733246][ T7795] genl_family_rcv_msg_dumpit+0x214/0x310 [ 186.739028][ T7795] ? genl_rcv_msg+0x7a0/0x7a0 [ 186.743763][ T7795] ? genl_get_cmd+0x692/0x920 [ 186.748499][ T7795] ? genl_family_rcv_msg_doit+0x310/0x310 [ 186.754258][ T7795] ? genl_start+0x6b0/0x6b0 [ 186.758798][ T7795] ? genl_dumpit+0x1a0/0x1a0 [ 186.763511][ T7795] ? bpf_lsm_capable+0x9/0x10 [ 186.768322][ T7795] ? security_capable+0x89/0xb0 [ 186.773336][ T7795] genl_rcv_msg+0x5e5/0x7a0 [ 186.777894][ T7795] ? genl_bind+0x360/0x360 [ 186.782351][ T7795] ? ethnl_default_doit+0xb80/0xb80 [ 186.787572][ T7795] ? ethnl_default_start+0x560/0x560 [ 186.792872][ T7795] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 186.798247][ T7795] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 186.804843][ T7795] ? ref_tracker_free+0x690/0x840 [ 186.809890][ T7795] netlink_rcv_skb+0x241/0x4d0 [ 186.814668][ T7795] ? genl_bind+0x360/0x360 [ 186.819134][ T7795] ? netlink_ack+0x1180/0x1180 [ 186.823919][ T7795] ? __lock_acquire+0x7d40/0x7d40 [ 186.828979][ T7795] ? down_read+0x1ac/0x2e0 [ 186.833434][ T7795] genl_rcv+0x28/0x40 [ 186.837461][ T7795] netlink_unicast+0x751/0x8d0 [ 186.842256][ T7795] netlink_sendmsg+0x8d0/0xbf0 [ 186.847122][ T7795] ? netlink_getsockopt+0x590/0x590 [ 186.852327][ T7795] ? aa_sock_msg_perm+0x94/0x150 [ 186.857265][ T7795] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 186.862548][ T7795] ? security_socket_sendmsg+0x80/0xa0 [ 186.868039][ T7795] ? netlink_getsockopt+0x590/0x590 [ 186.873250][ T7795] ____sys_sendmsg+0x5ba/0x960 [ 186.878045][ T7795] ? __asan_memset+0x22/0x40 [ 186.882669][ T7795] ? __sys_sendmsg_sock+0x30/0x30 [ 186.887714][ T7795] ? __import_iovec+0x5f2/0x850 [ 186.892610][ T7795] ? import_iovec+0x73/0xa0 [ 186.897125][ T7795] ___sys_sendmsg+0x2a6/0x360 [ 186.901800][ T7795] ? get_pid_task+0x20/0x1e0 [ 186.906405][ T7795] ? __sys_sendmsg+0x2a0/0x2a0 [ 186.911202][ T7795] ? __lock_acquire+0x7d40/0x7d40 [ 186.916247][ T7795] __se_sys_sendmsg+0x1c2/0x2b0 [ 186.921095][ T7795] ? __x64_sys_sendmsg+0x80/0x80 [ 186.926040][ T7795] ? lockdep_hardirqs_on+0x98/0x150 [ 186.931262][ T7795] do_syscall_64+0x55/0xa0 [ 186.935801][ T7795] ? clear_bhb_loop+0x40/0x90 [ 186.940504][ T7795] ? clear_bhb_loop+0x40/0x90 [ 186.945218][ T7795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.951116][ T7795] RIP: 0033:0x7fecb859c799 [ 186.955538][ T7795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.975241][ T7795] RSP: 002b:00007fecb9523028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.983847][ T7795] RAX: ffffffffffffffda RBX: 00007fecb8815fa0 RCX: 00007fecb859c799 [ 186.991839][ T7795] RDX: 0200000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 186.999818][ T7795] RBP: 00007fecb9523090 R08: 0000000000000000 R09: 0000000000000000 [ 187.008247][ T7795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.016226][ T7795] R13: 00007fecb8816038 R14: 00007fecb8815fa0 R15: 00007fff03dba0e8 [ 187.024221][ T7795] [ 187.046239][ T7798] FAULT_INJECTION: forcing a failure. [ 187.046239][ T7798] name failslab, interval 1, probability 0, space 0, times 0 [ 187.059220][ T7798] CPU: 1 PID: 7798 Comm: syz.1.660 Not tainted syzkaller #0 [ 187.066526][ T7798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.076576][ T7798] Call Trace: [ 187.079851][ T7798] [ 187.082768][ T7798] dump_stack_lvl+0x18c/0x250 [ 187.087543][ T7798] ? show_regs_print_info+0x20/0x20 [ 187.092739][ T7798] ? load_image+0x400/0x400 [ 187.097240][ T7798] ? __might_sleep+0xe0/0xe0 [ 187.101921][ T7798] ? __lock_acquire+0x7d40/0x7d40 [ 187.106946][ T7798] should_fail_ex+0x39d/0x4d0 [ 187.111636][ T7798] should_failslab+0x9/0x20 [ 187.116143][ T7798] slab_pre_alloc_hook+0x59/0x310 [ 187.121175][ T7798] ? __xdp_reg_mem_model+0x1e4/0x5c0 [ 187.126565][ T7798] __kmem_cache_alloc_node+0x53/0x250 [ 187.131946][ T7798] ? __asan_memset+0x22/0x40 [ 187.136541][ T7798] ? __xdp_reg_mem_model+0x1e4/0x5c0 [ 187.141931][ T7798] kmalloc_trace+0x2a/0xe0 [ 187.146360][ T7798] __xdp_reg_mem_model+0x1e4/0x5c0 [ 187.151474][ T7798] ? kvmalloc_node+0x70/0x180 [ 187.156160][ T7798] ? kvmalloc_node+0x70/0x180 [ 187.160839][ T7798] ? xdp_reg_mem_model+0x40/0x40 [ 187.165790][ T7798] xdp_reg_mem_model+0x22/0x40 [ 187.170649][ T7798] bpf_test_run_xdp_live+0x262/0x1b20 [ 187.176029][ T7798] ? 0xffffffffa00044c0 [ 187.180196][ T7798] ? 0xffffffffa00044c0 [ 187.184351][ T7798] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 187.190263][ T7798] ? 0xffffffffa00044c0 [ 187.194510][ T7798] ? xdp_convert_md_to_buff+0x330/0x330 [ 187.200086][ T7798] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 187.206333][ T7798] ? _copy_from_user+0xa5/0xe0 [ 187.211094][ T7798] ? bpf_test_init+0x119/0x140 [ 187.215847][ T7798] ? xdp_convert_md_to_buff+0x5b/0x330 [ 187.221304][ T7798] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 187.226681][ T7798] ? dev_put+0x80/0x80 [ 187.230769][ T7798] ? dev_put+0x80/0x80 [ 187.234825][ T7798] bpf_prog_test_run+0x321/0x390 [ 187.239764][ T7798] __sys_bpf+0x49d/0x890 [ 187.244000][ T7798] ? bpf_link_show_fdinfo+0x390/0x390 [ 187.249373][ T7798] ? lock_chain_count+0x20/0x20 [ 187.254228][ T7798] __x64_sys_bpf+0x7c/0x90 [ 187.258663][ T7798] do_syscall_64+0x55/0xa0 [ 187.263171][ T7798] ? clear_bhb_loop+0x40/0x90 [ 187.267849][ T7798] ? clear_bhb_loop+0x40/0x90 [ 187.272521][ T7798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.278410][ T7798] RIP: 0033:0x7f4c7899c799 [ 187.282815][ T7798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.302415][ T7798] RSP: 002b:00007f4c797ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 187.310820][ T7798] RAX: ffffffffffffffda RBX: 00007f4c78c15fa0 RCX: 00007f4c7899c799 [ 187.318872][ T7798] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 187.327022][ T7798] RBP: 00007f4c797ad090 R08: 0000000000000000 R09: 0000000000000000 [ 187.334983][ T7798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.342952][ T7798] R13: 00007f4c78c16038 R14: 00007f4c78c15fa0 R15: 00007ffcec793268 [ 187.350924][ T7798] [ 187.615204][ T7813] FAULT_INJECTION: forcing a failure. [ 187.615204][ T7813] name failslab, interval 1, probability 0, space 0, times 0 [ 187.672321][ T7813] CPU: 0 PID: 7813 Comm: syz.3.665 Not tainted syzkaller #0 [ 187.679679][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.689759][ T7813] Call Trace: [ 187.693054][ T7813] [ 187.695996][ T7813] dump_stack_lvl+0x18c/0x250 [ 187.700707][ T7813] ? sctp_sendmsg+0x1575/0x28c0 [ 187.705586][ T7813] ? ___sys_sendmsg+0x2a6/0x360 [ 187.710459][ T7813] ? show_regs_print_info+0x20/0x20 [ 187.715680][ T7813] ? load_image+0x400/0x400 [ 187.720222][ T7813] should_fail_ex+0x39d/0x4d0 [ 187.724934][ T7813] should_failslab+0x9/0x20 [ 187.729480][ T7813] slab_pre_alloc_hook+0x59/0x310 [ 187.734532][ T7813] ? sctp_add_bind_addr+0x8c/0x360 [ 187.739667][ T7813] __kmem_cache_alloc_node+0x53/0x250 [ 187.745066][ T7813] ? sctp_add_bind_addr+0x8c/0x360 [ 187.750199][ T7813] kmalloc_trace+0x2a/0xe0 [ 187.754642][ T7813] sctp_add_bind_addr+0x8c/0x360 [ 187.759689][ T7813] sctp_copy_local_addr_list+0x315/0x4f0 [ 187.765526][ T7813] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 187.771268][ T7813] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 187.777365][ T7813] ? sctp_v4_is_any+0x35/0x60 [ 187.782047][ T7813] ? sctp_copy_one_addr+0x8c/0x350 [ 187.787180][ T7813] sctp_bind_addr_copy+0x189/0x3c0 [ 187.792320][ T7813] sctp_connect_new_asoc+0x2f9/0x6a0 [ 187.797628][ T7813] ? __sctp_connect+0xd80/0xd80 [ 187.802594][ T7813] ? __local_bh_enable_ip+0x13a/0x1c0 [ 187.807992][ T7813] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 187.813551][ T7813] ? security_sctp_bind_connect+0x89/0xb0 [ 187.819294][ T7813] sctp_sendmsg+0x1575/0x28c0 [ 187.823997][ T7813] ? sctp_getsockopt+0xb60/0xb60 [ 187.828959][ T7813] ? lock_chain_count+0x20/0x20 [ 187.833845][ T7813] ? inet_send_prepare+0x260/0x260 [ 187.838967][ T7813] ? sock_rps_record_flow+0x19/0x3f0 [ 187.844350][ T7813] ? inet_sendmsg+0xe9/0x2f0 [ 187.848953][ T7813] ? inet_send_prepare+0x260/0x260 [ 187.854077][ T7813] ____sys_sendmsg+0x5ba/0x960 [ 187.858850][ T7813] ? __lock_acquire+0x7d40/0x7d40 [ 187.863896][ T7813] ? __asan_memset+0x22/0x40 [ 187.868508][ T7813] ? __sys_sendmsg_sock+0x30/0x30 [ 187.873536][ T7813] ? __import_iovec+0x5f2/0x850 [ 187.878410][ T7813] ? import_iovec+0x73/0xa0 [ 187.882934][ T7813] ___sys_sendmsg+0x2a6/0x360 [ 187.887617][ T7813] ? get_pid_task+0x20/0x1e0 [ 187.892263][ T7813] ? __sys_sendmsg+0x2a0/0x2a0 [ 187.897058][ T7813] ? __lock_acquire+0x7d40/0x7d40 [ 187.902124][ T7813] __se_sys_sendmsg+0x1c2/0x2b0 [ 187.907076][ T7813] ? __x64_sys_sendmsg+0x80/0x80 [ 187.912058][ T7813] ? lockdep_hardirqs_on+0x98/0x150 [ 187.917272][ T7813] do_syscall_64+0x55/0xa0 [ 187.921709][ T7813] ? clear_bhb_loop+0x40/0x90 [ 187.926396][ T7813] ? clear_bhb_loop+0x40/0x90 [ 187.931082][ T7813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.936981][ T7813] RIP: 0033:0x7ffa9d59c799 [ 187.941508][ T7813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.961306][ T7813] RSP: 002b:00007ffa9e497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.969738][ T7813] RAX: ffffffffffffffda RBX: 00007ffa9d815fa0 RCX: 00007ffa9d59c799 [ 187.977770][ T7813] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000010 [ 187.985750][ T7813] RBP: 00007ffa9e497090 R08: 0000000000000000 R09: 0000000000000000 [ 187.993829][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.001837][ T7813] R13: 00007ffa9d816038 R14: 00007ffa9d815fa0 R15: 00007ffec1c9da98 [ 188.009854][ T7813] [ 189.392328][ T7834] netlink: 'syz.0.671': attribute type 1 has an invalid length. [ 189.437405][ T7834] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.671'. [ 189.947950][ T5775] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 190.010649][ T7848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.046464][ T7847] netlink: 'syz.2.677': attribute type 1 has an invalid length. [ 190.083181][ T7847] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.677'. [ 191.103404][ T7858] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 191.304842][ T7856] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.679'. [ 191.389745][ T5775] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 192.068531][ T7878] netlink: 'syz.0.686': attribute type 2 has an invalid length. [ 192.101180][ T7878] netlink: 'syz.0.686': attribute type 8 has an invalid length. [ 192.110093][ T7878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.686'. [ 192.438696][ T5775] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 192.722606][ T7889] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.692'. [ 193.167543][ T6617] wlan1: Trigger new scan to find an IBSS to join [ 193.207383][ T7903] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 193.582175][ T7916] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.699'. [ 193.612685][ T7916] bridge_slave_1: default FDB implementation only supports local addresses [ 193.952657][ T7933] FAULT_INJECTION: forcing a failure. [ 193.952657][ T7933] name failslab, interval 1, probability 0, space 0, times 0 [ 193.966102][ T7933] CPU: 0 PID: 7933 Comm: syz.1.704 Not tainted syzkaller #0 [ 193.973430][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.983511][ T7933] Call Trace: [ 193.986793][ T7933] [ 193.989720][ T7933] dump_stack_lvl+0x18c/0x250 [ 193.994412][ T7933] ? show_regs_print_info+0x20/0x20 [ 193.999622][ T7933] ? load_image+0x400/0x400 [ 194.004204][ T7933] ? __lock_acquire+0x1273/0x7d40 [ 194.009232][ T7933] should_fail_ex+0x39d/0x4d0 [ 194.013913][ T7933] should_failslab+0x9/0x20 [ 194.018413][ T7933] slab_pre_alloc_hook+0x59/0x310 [ 194.023435][ T7933] kmem_cache_alloc_node+0x60/0x320 [ 194.028648][ T7933] ? register_lock_class+0xc4/0x8a0 [ 194.033839][ T7933] ? __alloc_skb+0x103/0x2c0 [ 194.038430][ T7933] __alloc_skb+0x103/0x2c0 [ 194.042849][ T7933] tipc_msg_create+0x4f/0x4d0 [ 194.047523][ T7933] ? tipc_own_addr+0x45/0x2a0 [ 194.052200][ T7933] tipc_group_proto_xmit+0xce/0x790 [ 194.057484][ T7933] tipc_group_cong+0x4d9/0x5e0 [ 194.062252][ T7933] ? tipc_group_update_bc_members+0x500/0x500 [ 194.068323][ T7933] ? net_generic+0x1e/0x240 [ 194.072822][ T7933] ? net_generic+0x1e/0x240 [ 194.077321][ T7933] tipc_group_bc_cong+0x152/0x210 [ 194.082347][ T7933] tipc_send_group_bcast+0x36f/0xad0 [ 194.087635][ T7933] ? tipc_wait_for_connect+0x650/0x650 [ 194.093087][ T7933] ? mark_lock+0x94/0x320 [ 194.097502][ T7933] ? mark_lock+0x94/0x320 [ 194.101820][ T7933] ? wait_woken+0x180/0x180 [ 194.106316][ T7933] ? __lock_acquire+0x1273/0x7d40 [ 194.111340][ T7933] __tipc_sendmsg+0x33c/0x2bb0 [ 194.116112][ T7933] ? rht_unlock+0x1d0/0x1d0 [ 194.120624][ T7933] ? mark_lock+0x94/0x320 [ 194.124944][ T7933] ? verify_lock_unused+0x140/0x140 [ 194.130135][ T7933] ? verify_lock_unused+0x140/0x140 [ 194.135334][ T7933] ? __might_sleep+0xe0/0xe0 [ 194.139918][ T7933] ? mark_lock+0x94/0x320 [ 194.144242][ T7933] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 194.150418][ T7933] ? __local_bh_enable_ip+0x13a/0x1c0 [ 194.155831][ T7933] ? lockdep_hardirqs_on+0x98/0x150 [ 194.161045][ T7933] ? __local_bh_enable_ip+0x13a/0x1c0 [ 194.166419][ T7933] ? _local_bh_enable+0xa0/0xa0 [ 194.171290][ T7933] tipc_sendmsg+0x55/0x70 [ 194.175617][ T7933] ? tipc_recvmsg+0x1400/0x1400 [ 194.180464][ T7933] ____sys_sendmsg+0x5ba/0x960 [ 194.185401][ T7933] ? __asan_memset+0x22/0x40 [ 194.190893][ T7933] ? __sys_sendmsg_sock+0x30/0x30 [ 194.196043][ T7933] ? __import_iovec+0x3fa/0x850 [ 194.201042][ T7933] ? import_iovec+0x73/0xa0 [ 194.205764][ T7933] ___sys_sendmsg+0x2a6/0x360 [ 194.210486][ T7933] ? get_pid_task+0x20/0x1e0 [ 194.215079][ T7933] ? __sys_sendmsg+0x2a0/0x2a0 [ 194.219884][ T7933] ? __lock_acquire+0x7d40/0x7d40 [ 194.224955][ T7933] __se_sys_sendmsg+0x1c2/0x2b0 [ 194.229827][ T7933] ? __x64_sys_sendmsg+0x80/0x80 [ 194.234800][ T7933] ? lockdep_hardirqs_on+0x98/0x150 [ 194.240042][ T7933] do_syscall_64+0x55/0xa0 [ 194.244480][ T7933] ? clear_bhb_loop+0x40/0x90 [ 194.249182][ T7933] ? clear_bhb_loop+0x40/0x90 [ 194.253885][ T7933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.259901][ T7933] RIP: 0033:0x7f4c7899c799 [ 194.264325][ T7933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.283931][ T7933] RSP: 002b:00007f4c797ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.292344][ T7933] RAX: ffffffffffffffda RBX: 00007f4c78c15fa0 RCX: 00007f4c7899c799 [ 194.300349][ T7933] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 194.308314][ T7933] RBP: 00007f4c797ad090 R08: 0000000000000000 R09: 0000000000000000 [ 194.316276][ T7933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.324258][ T7933] R13: 00007f4c78c16038 R14: 00007f4c78c15fa0 R15: 00007ffcec793268 [ 194.332407][ T7933] [ 194.618445][ T5775] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 195.122122][ T7937] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.705'. [ 196.062231][ T7955] netlink: 'syz.2.711': attribute type 10 has an invalid length. [ 196.073017][ T7955] veth0_vlan: left promiscuous mode [ 196.082527][ T7955] veth0_vlan: entered promiscuous mode [ 196.093712][ T7955] team0: Device veth0_vlan failed to register rx_handler [ 196.170781][ T7958] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.712'. [ 196.190134][ T7958] bridge_slave_1: default FDB implementation only supports local addresses [ 196.249639][ T7963] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.714'. [ 196.514862][ T7977] netlink: 'syz.3.719': attribute type 12 has an invalid length. [ 196.523161][ T7977] netlink: 132 bytes leftover after parsing attributes in process `syz.3.719'. [ 196.623852][ T5775] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 197.087670][ T6608] wlan1: Trigger new scan to find an IBSS to join [ 197.088573][ T6617] wlan1: Trigger new scan to find an IBSS to join [ 198.540333][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.556080][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.807769][ T6595] wlan1: Creating new IBSS network, BSSID 92:5f:ed:c7:1a:f1 [ 200.392205][ T8007] C: renamed from team_slave_0 (while UP) [ 200.421988][ T8007] netlink: 'syz.1.729': attribute type 4 has an invalid length. [ 200.434252][ T8007] netlink: 116 bytes leftover after parsing attributes in process `syz.1.729'. [ 200.454122][ T8007] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 200.586321][ T8013] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.731'. [ 201.506582][ T8019] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.733'. [ 202.139405][ T6608] wlan1: Trigger new scan to find an IBSS to join [ 203.074895][ T6608] wlan1: Creating new IBSS network, BSSID 52:95:8b:89:56:78 [ 203.575056][ T8054] FAULT_INJECTION: forcing a failure. [ 203.575056][ T8054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.636925][ T8054] CPU: 0 PID: 8054 Comm: syz.2.744 Not tainted syzkaller #0 [ 203.644284][ T8054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 203.654365][ T8054] Call Trace: [ 203.657659][ T8054] [ 203.660687][ T8054] dump_stack_lvl+0x18c/0x250 [ 203.665393][ T8054] ? show_regs_print_info+0x20/0x20 [ 203.670623][ T8054] ? load_image+0x400/0x400 [ 203.675165][ T8054] ? __lock_acquire+0x7d40/0x7d40 [ 203.680215][ T8054] ? snprintf+0xe9/0x140 [ 203.684492][ T8054] should_fail_ex+0x39d/0x4d0 [ 203.689210][ T8054] _copy_to_user+0x2f/0xa0 [ 203.693666][ T8054] simple_read_from_buffer+0xe7/0x150 [ 203.699174][ T8054] proc_fail_nth_read+0x1e8/0x260 [ 203.704318][ T8054] ? proc_fault_inject_write+0x360/0x360 [ 203.709988][ T8054] ? fsnotify_perm+0x271/0x5e0 [ 203.714782][ T8054] ? proc_fault_inject_write+0x360/0x360 [ 203.720450][ T8054] vfs_read+0x28b/0x970 [ 203.724640][ T8054] ? kernel_read+0x1e0/0x1e0 [ 203.729261][ T8054] ? __fget_files+0x28/0x4b0 [ 203.733879][ T8054] ? __fget_files+0x28/0x4b0 [ 203.738482][ T8054] ? __fget_files+0x43d/0x4b0 [ 203.743161][ T8054] ? __fdget_pos+0x2a3/0x330 [ 203.747751][ T8054] ? ksys_read+0x75/0x260 [ 203.752080][ T8054] ksys_read+0x150/0x260 [ 203.756321][ T8054] ? vfs_write+0x990/0x990 [ 203.760739][ T8054] ? lockdep_hardirqs_on+0x98/0x150 [ 203.766024][ T8054] do_syscall_64+0x55/0xa0 [ 203.770435][ T8054] ? clear_bhb_loop+0x40/0x90 [ 203.775103][ T8054] ? clear_bhb_loop+0x40/0x90 [ 203.779775][ T8054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.785660][ T8054] RIP: 0033:0x7fecb855cfce [ 203.790082][ T8054] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.809693][ T8054] RSP: 002b:00007fecb9522fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.818101][ T8054] RAX: ffffffffffffffda RBX: 00007fecb95236c0 RCX: 00007fecb855cfce [ 203.826065][ T8054] RDX: 000000000000000f RSI: 00007fecb95230a0 RDI: 0000000000000004 [ 203.834027][ T8054] RBP: 00007fecb9523090 R08: 0000000000000000 R09: 0000000000000000 [ 203.842085][ T8054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.850135][ T8054] R13: 00007fecb8816038 R14: 00007fecb8815fa0 R15: 00007fff03dba0e8 [ 203.858118][ T8054] [ 203.954940][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'. [ 204.443187][ T8067] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.746'. [ 204.656049][ T8078] netlink: 152 bytes leftover after parsing attributes in process `syz.1.752'. [ 204.668272][ T8078] netlink: 6 bytes leftover after parsing attributes in process `syz.1.752'. [ 205.977618][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 205.977643][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 205.983756][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 205.989768][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 206.149164][ T8098] FAULT_INJECTION: forcing a failure. [ 206.149164][ T8098] name failslab, interval 1, probability 0, space 0, times 0 [ 206.177671][ T8098] CPU: 0 PID: 8098 Comm: syz.1.761 Not tainted syzkaller #0 [ 206.185052][ T8098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 206.195157][ T8098] Call Trace: [ 206.198478][ T8098] [ 206.201440][ T8098] dump_stack_lvl+0x18c/0x250 [ 206.206342][ T8098] ? show_regs_print_info+0x20/0x20 [ 206.209492][ T8101] netlink: 'syz.2.762': attribute type 29 has an invalid length. [ 206.211561][ T8098] ? load_image+0x400/0x400 [ 206.223909][ T8098] ? __might_sleep+0xe0/0xe0 [ 206.228634][ T8098] ? __lock_acquire+0x7d40/0x7d40 [ 206.233706][ T8098] should_fail_ex+0x39d/0x4d0 [ 206.238419][ T8098] should_failslab+0x9/0x20 [ 206.242933][ T8098] slab_pre_alloc_hook+0x59/0x310 [ 206.247969][ T8098] ? ioctl_standard_iw_point+0x51a/0xcf0 [ 206.253632][ T8098] ? ioctl_standard_iw_point+0x51a/0xcf0 [ 206.259352][ T8098] __kmem_cache_alloc_node+0x53/0x250 [ 206.264753][ T8098] ? ioctl_standard_iw_point+0x51a/0xcf0 [ 206.270392][ T8098] __kmalloc+0xa4/0x230 [ 206.274562][ T8098] ioctl_standard_iw_point+0x51a/0xcf0 [ 206.280046][ T8098] ? dev_hold+0xa0/0xa0 [ 206.284210][ T8098] ? iw_handler_get_iwstats+0x110/0x110 [ 206.289772][ T8098] ? wext_ioctl_dispatch+0x115/0x600 [ 206.295069][ T8098] ? dev_load+0x21/0x1f0 [ 206.299417][ T8098] ? mutex_lock_nested+0x20/0x20 [ 206.304457][ T8098] ? dev_hold+0xa0/0xa0 [ 206.308637][ T8098] ioctl_standard_call+0xb7/0x2b0 [ 206.313667][ T8098] ? dev_hold+0xa0/0xa0 [ 206.317833][ T8098] wext_ioctl_dispatch+0x1cb/0x600 [ 206.322964][ T8098] ? wext_ioctl_dispatch+0x600/0x600 [ 206.328343][ T8098] ? iw_handler_get_private+0x1f0/0x1f0 [ 206.333892][ T8098] ? wext_handle_ioctl+0x1d0/0x1d0 [ 206.339003][ T8098] ? __might_fault+0xaa/0x120 [ 206.343684][ T8098] ? __might_fault+0xc6/0x120 [ 206.348357][ T8098] ? __might_fault+0xaa/0x120 [ 206.353040][ T8098] wext_handle_ioctl+0x117/0x1d0 [ 206.357986][ T8098] ? call_commit_handler+0xf0/0xf0 [ 206.363123][ T8098] sock_ioctl+0x15d/0x7e0 [ 206.367459][ T8098] ? sock_poll+0x3e0/0x3e0 [ 206.371895][ T8098] ? bpf_lsm_file_ioctl+0x9/0x10 [ 206.376838][ T8098] ? security_file_ioctl+0x80/0xa0 [ 206.382041][ T8098] ? sock_poll+0x3e0/0x3e0 [ 206.386544][ T8098] __se_sys_ioctl+0xfd/0x170 [ 206.391143][ T8098] do_syscall_64+0x55/0xa0 [ 206.395589][ T8098] ? clear_bhb_loop+0x40/0x90 [ 206.400265][ T8098] ? clear_bhb_loop+0x40/0x90 [ 206.404961][ T8098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.410855][ T8098] RIP: 0033:0x7f4c7899c799 [ 206.415273][ T8098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.434888][ T8098] RSP: 002b:00007f4c797ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.443308][ T8098] RAX: ffffffffffffffda RBX: 00007f4c78c15fa0 RCX: 00007f4c7899c799 [ 206.451629][ T8098] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000007 [ 206.459614][ T8098] RBP: 00007f4c797ad090 R08: 0000000000000000 R09: 0000000000000000 [ 206.467608][ T8098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.475662][ T8098] R13: 00007f4c78c16038 R14: 00007f4c78c15fa0 R15: 00007ffcec793268 [ 206.483654][ T8098] [ 206.520839][ T8101] netlink: 'syz.2.762': attribute type 29 has an invalid length. [ 206.533840][ T8103] netlink: 'syz.2.762': attribute type 29 has an invalid length. [ 206.549432][ T8101] netlink: 'syz.2.762': attribute type 29 has an invalid length. [ 206.878420][ T8110] netlink: 52 bytes leftover after parsing attributes in process `syz.1.766'. [ 207.452519][ T8116] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.767'. [ 207.486575][ T8120] netlink: 'syz.3.768': attribute type 10 has an invalid length. [ 207.528684][ T8120] netlink: 55 bytes leftover after parsing attributes in process `syz.3.768'. [ 207.669762][ T8128] netlink: 'syz.2.770': attribute type 10 has an invalid length. [ 207.951660][ T8139] netlink: 'syz.3.774': attribute type 29 has an invalid length. [ 208.129514][ T8139] netlink: 'syz.3.774': attribute type 29 has an invalid length. [ 208.150328][ T8140] netlink: 'syz.3.774': attribute type 29 has an invalid length. [ 208.163931][ T8147] netlink: 'syz.0.776': attribute type 10 has an invalid length. [ 208.171913][ T8147] netlink: 55 bytes leftover after parsing attributes in process `syz.0.776'. [ 208.764468][ T8164] FAULT_INJECTION: forcing a failure. [ 208.764468][ T8164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.850361][ T8164] CPU: 0 PID: 8164 Comm: syz.0.781 Not tainted syzkaller #0 [ 208.857710][ T8164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 208.867796][ T8164] Call Trace: [ 208.871085][ T8164] [ 208.874027][ T8164] dump_stack_lvl+0x18c/0x250 [ 208.878736][ T8164] ? show_regs_print_info+0x20/0x20 [ 208.883955][ T8164] ? load_image+0x400/0x400 [ 208.888490][ T8164] ? __might_fault+0xaa/0x120 [ 208.893194][ T8164] ? __lock_acquire+0x7d40/0x7d40 [ 208.898938][ T8164] should_fail_ex+0x39d/0x4d0 [ 208.903646][ T8164] _copy_from_user+0x2f/0xe0 [ 208.908269][ T8164] ___sys_sendmsg+0x1c7/0x360 [ 208.913033][ T8164] ? __sys_sendmsg+0x2a0/0x2a0 [ 208.917834][ T8164] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 208.924129][ T8164] __se_sys_sendmsg+0x1c2/0x2b0 [ 208.929010][ T8164] ? __x64_sys_sendmsg+0x80/0x80 [ 208.933976][ T8164] ? lockdep_hardirqs_on+0x98/0x150 [ 208.939190][ T8164] do_syscall_64+0x55/0xa0 [ 208.943654][ T8164] ? clear_bhb_loop+0x40/0x90 [ 208.948353][ T8164] ? clear_bhb_loop+0x40/0x90 [ 208.953403][ T8164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.959311][ T8164] RIP: 0033:0x7efc7739c799 [ 208.963742][ T8164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.983375][ T8164] RSP: 002b:00007efc782a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.991908][ T8164] RAX: ffffffffffffffda RBX: 00007efc77616090 RCX: 00007efc7739c799 [ 208.999899][ T8164] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000005 [ 209.007886][ T8164] RBP: 00007efc782a6090 R08: 0000000000000000 R09: 0000000000000000 [ 209.015876][ T8164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.023857][ T8164] R13: 00007efc77616128 R14: 00007efc77616090 R15: 00007ffe7f167678 [ 209.031940][ T8164] [ 211.435501][ T8227] syz.2.804[8227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.435853][ T8227] syz.2.804[8227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.804325][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 212.286631][ T8242] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.810'. [ 212.320829][ T8244] validate_nla: 6 callbacks suppressed [ 212.320863][ T8244] netlink: 'syz.3.812': attribute type 27 has an invalid length. [ 212.597201][ T8249] netlink: 'syz.3.814': attribute type 10 has an invalid length. [ 212.620668][ T8249] team0: Device ipvlan1 failed to register rx_handler [ 213.322764][ T8259] netlink: 132 bytes leftover after parsing attributes in process `syz.3.816'. [ 213.630378][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 214.452551][ T8276] FAULT_INJECTION: forcing a failure. [ 214.452551][ T8276] name failslab, interval 1, probability 0, space 0, times 0 [ 214.537194][ T8276] CPU: 1 PID: 8276 Comm: syz.3.823 Not tainted syzkaller #0 [ 214.544555][ T8276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.554816][ T8276] Call Trace: [ 214.558128][ T8276] [ 214.561072][ T8276] dump_stack_lvl+0x18c/0x250 [ 214.565787][ T8276] ? show_regs_print_info+0x20/0x20 [ 214.571029][ T8276] ? load_image+0x400/0x400 [ 214.575579][ T8276] ? __might_sleep+0xe0/0xe0 [ 214.580206][ T8276] ? __lock_acquire+0x7d40/0x7d40 [ 214.585282][ T8276] should_fail_ex+0x39d/0x4d0 [ 214.590266][ T8276] should_failslab+0x9/0x20 [ 214.594795][ T8276] slab_pre_alloc_hook+0x59/0x310 [ 214.599845][ T8276] ? sk_prot_alloc+0xe7/0x210 [ 214.604555][ T8276] ? sk_prot_alloc+0xe7/0x210 [ 214.609251][ T8276] __kmem_cache_alloc_node+0x53/0x250 [ 214.614646][ T8276] ? sk_prot_alloc+0xe7/0x210 [ 214.619336][ T8276] __kmalloc+0xa4/0x230 [ 214.623519][ T8276] sk_prot_alloc+0xe7/0x210 [ 214.628035][ T8276] ? sk_alloc+0x24/0x360 [ 214.632293][ T8276] sk_alloc+0x3a/0x360 [ 214.636374][ T8276] ? bpf_ctx_init+0x163/0x1a0 [ 214.641067][ T8276] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 214.646627][ T8276] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 214.652040][ T8276] ? lockdep_hardirqs_on+0x98/0x150 [ 214.657249][ T8276] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 214.663432][ T8276] ? cpu_online+0x60/0x60 [ 214.667766][ T8276] bpf_prog_test_run+0x321/0x390 [ 214.672721][ T8276] __sys_bpf+0x49d/0x890 [ 214.676974][ T8276] ? bpf_link_show_fdinfo+0x390/0x390 [ 214.682365][ T8276] ? lock_chain_count+0x20/0x20 [ 214.687235][ T8276] __x64_sys_bpf+0x7c/0x90 [ 214.691657][ T8276] do_syscall_64+0x55/0xa0 [ 214.696081][ T8276] ? clear_bhb_loop+0x40/0x90 [ 214.700850][ T8276] ? clear_bhb_loop+0x40/0x90 [ 214.705539][ T8276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.711438][ T8276] RIP: 0033:0x7ffa9d59c799 [ 214.715861][ T8276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.735489][ T8276] RSP: 002b:00007ffa9e497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.743913][ T8276] RAX: ffffffffffffffda RBX: 00007ffa9d815fa0 RCX: 00007ffa9d59c799 [ 214.751900][ T8276] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 214.759875][ T8276] RBP: 00007ffa9e497090 R08: 0000000000000000 R09: 0000000000000000 [ 214.767935][ T8276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.775924][ T8276] R13: 00007ffa9d816038 R14: 00007ffa9d815fa0 R15: 00007ffec1c9da98 [ 214.784024][ T8276] [ 214.941854][ T8280] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.824'. [ 215.172454][ T6595] wlan1: Trigger new scan to find an IBSS to join [ 216.015366][ T8291] netlink: 'syz.3.828': attribute type 39 has an invalid length. [ 216.134042][ T8291] hsr_slave_1 (unregistering): left promiscuous mode [ 216.311987][ T8293] syzkaller0: entered promiscuous mode [ 216.330872][ T8293] syzkaller0: entered allmulticast mode [ 216.390243][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 216.854941][ T8304] FAULT_INJECTION: forcing a failure. [ 216.854941][ T8304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.881251][ T8304] CPU: 0 PID: 8304 Comm: syz.1.834 Not tainted syzkaller #0 [ 216.888616][ T8304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.898715][ T8304] Call Trace: [ 216.902018][ T8304] [ 216.904979][ T8304] dump_stack_lvl+0x18c/0x250 [ 216.909794][ T8304] ? show_regs_print_info+0x20/0x20 [ 216.915023][ T8304] ? load_image+0x400/0x400 [ 216.919636][ T8304] ? __lock_acquire+0x7d40/0x7d40 [ 216.924680][ T8304] ? snprintf+0xe9/0x140 [ 216.929040][ T8304] should_fail_ex+0x39d/0x4d0 [ 216.933733][ T8304] _copy_to_user+0x2f/0xa0 [ 216.938182][ T8304] simple_read_from_buffer+0xe7/0x150 [ 216.943671][ T8304] proc_fail_nth_read+0x1e8/0x260 [ 216.948836][ T8304] ? proc_fault_inject_write+0x360/0x360 [ 216.954500][ T8304] ? fsnotify_perm+0x271/0x5e0 [ 216.959267][ T8304] ? proc_fault_inject_write+0x360/0x360 [ 216.964903][ T8304] vfs_read+0x28b/0x970 [ 216.969081][ T8304] ? kernel_read+0x1e0/0x1e0 [ 216.973668][ T8304] ? __fget_files+0x28/0x4b0 [ 216.978254][ T8304] ? __fget_files+0x28/0x4b0 [ 216.982842][ T8304] ? __fget_files+0x43d/0x4b0 [ 216.987531][ T8304] ? __fdget_pos+0x2a3/0x330 [ 216.992121][ T8304] ? ksys_read+0x75/0x260 [ 216.996450][ T8304] ksys_read+0x150/0x260 [ 217.000696][ T8304] ? vfs_write+0x990/0x990 [ 217.005291][ T8304] ? lockdep_hardirqs_on+0x98/0x150 [ 217.010492][ T8304] do_syscall_64+0x55/0xa0 [ 217.014912][ T8304] ? clear_bhb_loop+0x40/0x90 [ 217.019671][ T8304] ? clear_bhb_loop+0x40/0x90 [ 217.024344][ T8304] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.030233][ T8304] RIP: 0033:0x7f4c7895cfce [ 217.034654][ T8304] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 217.054285][ T8304] RSP: 002b:00007f4c797acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.062742][ T8304] RAX: ffffffffffffffda RBX: 00007f4c797ad6c0 RCX: 00007f4c7895cfce [ 217.070772][ T8304] RDX: 000000000000000f RSI: 00007f4c797ad0a0 RDI: 0000000000000004 [ 217.078848][ T8304] RBP: 00007f4c797ad090 R08: 0000000000000000 R09: 0000000000000000 [ 217.086906][ T8304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.094892][ T8304] R13: 00007f4c78c16038 R14: 00007f4c78c15fa0 R15: 00007ffcec793268 [ 217.102881][ T8304] [ 218.127322][ T42] wlan1: Trigger new scan to find an IBSS to join [ 218.196368][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 218.686807][ T8329] netlink: 'syz.0.842': attribute type 10 has an invalid length. [ 218.743227][ T8329] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 218.824563][ T8329] batman_adv: batadv0: Removing interface: veth0_vlan [ 218.868859][ T8329] veth0_vlan: left promiscuous mode [ 218.906153][ T8329] veth0_vlan: entered promiscuous mode [ 218.936489][ T8329] team0: Device veth0_vlan failed to register rx_handler [ 218.940427][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 219.315040][ T8344] netlink: 40 bytes leftover after parsing attributes in process `syz.3.843'. [ 219.361273][ T8344] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.458184][ T8344] bridge_slave_0 (unregistering): left allmulticast mode [ 219.465951][ T8344] bridge_slave_0 (unregistering): left promiscuous mode [ 219.474891][ T8344] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.538186][ T8345] netlink: 132 bytes leftover after parsing attributes in process `syz.0.847'. [ 219.560466][ T8350] netlink: 132 bytes leftover after parsing attributes in process `syz.1.848'. [ 219.736000][ T8351] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.849'. [ 219.751605][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 221.020752][ T5769] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 221.183404][ T6617] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 221.320908][ T8378] FAULT_INJECTION: forcing a failure. [ 221.320908][ T8378] name failslab, interval 1, probability 0, space 0, times 0 [ 221.379984][ T8378] CPU: 0 PID: 8378 Comm: syz.2.859 Not tainted syzkaller #0 [ 221.387356][ T8378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.397444][ T8378] Call Trace: [ 221.400745][ T8378] [ 221.403697][ T8378] dump_stack_lvl+0x18c/0x250 [ 221.408415][ T8378] ? show_regs_print_info+0x20/0x20 [ 221.413733][ T8378] ? load_image+0x400/0x400 [ 221.418261][ T8378] ? verify_lock_unused+0x140/0x140 [ 221.423488][ T8378] should_fail_ex+0x39d/0x4d0 [ 221.428206][ T8378] should_failslab+0x9/0x20 [ 221.432742][ T8378] slab_pre_alloc_hook+0x59/0x310 [ 221.437808][ T8378] kmem_cache_alloc+0x5a/0x2d0 [ 221.442608][ T8378] ? skb_clone+0x1eb/0x370 [ 221.447055][ T8378] skb_clone+0x1eb/0x370 [ 221.451327][ T8378] __netlink_deliver_tap+0x41c/0x830 [ 221.456651][ T8378] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.461968][ T8378] netlink_deliver_tap+0x19c/0x1b0 [ 221.467117][ T8378] netlink_unicast+0x72c/0x8d0 [ 221.471929][ T8378] netlink_sendmsg+0x8d0/0xbf0 [ 221.476811][ T8378] ? netlink_getsockopt+0x590/0x590 [ 221.482178][ T8378] ? aa_sock_msg_perm+0x94/0x150 [ 221.487250][ T8378] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 221.492578][ T8378] ? security_socket_sendmsg+0x80/0xa0 [ 221.498070][ T8378] ? netlink_getsockopt+0x590/0x590 [ 221.503311][ T8378] ____sys_sendmsg+0x5ba/0x960 [ 221.508110][ T8378] ? __asan_memset+0x22/0x40 [ 221.512782][ T8378] ? __sys_sendmsg_sock+0x30/0x30 [ 221.517843][ T8378] ? __import_iovec+0x5f2/0x850 [ 221.522734][ T8378] ? import_iovec+0x73/0xa0 [ 221.527274][ T8378] ___sys_sendmsg+0x2a6/0x360 [ 221.531975][ T8378] ? get_pid_task+0x20/0x1e0 [ 221.536598][ T8378] ? __sys_sendmsg+0x2a0/0x2a0 [ 221.541409][ T8378] ? __lock_acquire+0x7d40/0x7d40 [ 221.546488][ T8378] __se_sys_sendmsg+0x1c2/0x2b0 [ 221.551375][ T8378] ? __x64_sys_sendmsg+0x80/0x80 [ 221.556436][ T8378] ? lockdep_hardirqs_on+0x98/0x150 [ 221.561664][ T8378] do_syscall_64+0x55/0xa0 [ 221.566107][ T8378] ? clear_bhb_loop+0x40/0x90 [ 221.570816][ T8378] ? clear_bhb_loop+0x40/0x90 [ 221.575519][ T8378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.581431][ T8378] RIP: 0033:0x7fecb859c799 [ 221.585856][ T8378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.605581][ T8378] RSP: 002b:00007fecb9523028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.614130][ T8378] RAX: ffffffffffffffda RBX: 00007fecb8815fa0 RCX: 00007fecb859c799 [ 221.622140][ T8378] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 221.630150][ T8378] RBP: 00007fecb9523090 R08: 0000000000000000 R09: 0000000000000000 [ 221.638154][ T8378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.646329][ T8378] R13: 00007fecb8816038 R14: 00007fecb8815fa0 R15: 00007fff03dba0e8 [ 221.654350][ T8378] [ 221.719488][ T8378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.859'. [ 221.819119][ T8384] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.862'. [ 221.964956][ T5769] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 222.454279][ T8400] netlink: 60 bytes leftover after parsing attributes in process `syz.2.867'. [ 222.479063][ T8400] netlink: 60 bytes leftover after parsing attributes in process `syz.2.867'. [ 222.654415][ T8404] netlink: 60 bytes leftover after parsing attributes in process `syz.2.867'. [ 223.754661][ T5769] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 223.801823][ T8416] FAULT_INJECTION: forcing a failure. [ 223.801823][ T8416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.850857][ T8416] CPU: 1 PID: 8416 Comm: syz.0.873 Not tainted syzkaller #0 [ 223.858227][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 223.868323][ T8416] Call Trace: [ 223.871622][ T8416] [ 223.874567][ T8416] dump_stack_lvl+0x18c/0x250 [ 223.879299][ T8416] ? show_regs_print_info+0x20/0x20 [ 223.884593][ T8416] ? load_image+0x400/0x400 [ 223.889140][ T8416] ? __lock_acquire+0x7d40/0x7d40 [ 223.894202][ T8416] ? __virt_addr_valid+0x18c/0x540 [ 223.899350][ T8416] should_fail_ex+0x39d/0x4d0 [ 223.904149][ T8416] _copy_from_user+0x2f/0xe0 [ 223.908763][ T8416] bpf_test_init+0xde/0x140 [ 223.913291][ T8416] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 223.918692][ T8416] ? dev_put+0x80/0x80 [ 223.922804][ T8416] ? dev_put+0x80/0x80 [ 223.926938][ T8416] bpf_prog_test_run+0x321/0x390 [ 223.931925][ T8416] __sys_bpf+0x49d/0x890 [ 223.936188][ T8416] ? bpf_link_show_fdinfo+0x390/0x390 [ 223.941588][ T8416] ? lock_chain_count+0x20/0x20 [ 223.946453][ T8416] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 223.952460][ T8416] __x64_sys_bpf+0x7c/0x90 [ 223.956931][ T8416] do_syscall_64+0x55/0xa0 [ 223.961371][ T8416] ? clear_bhb_loop+0x40/0x90 [ 223.966065][ T8416] ? clear_bhb_loop+0x40/0x90 [ 223.970760][ T8416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.976754][ T8416] RIP: 0033:0x7efc7739c799 [ 223.981187][ T8416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.000822][ T8416] RSP: 002b:00007efc782c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.009278][ T8416] RAX: ffffffffffffffda RBX: 00007efc77615fa0 RCX: 00007efc7739c799 [ 224.017372][ T8416] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 224.025374][ T8416] RBP: 00007efc782c7090 R08: 0000000000000000 R09: 0000000000000000 [ 224.033375][ T8416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.041370][ T8416] R13: 00007efc77616038 R14: 00007efc77615fa0 R15: 00007ffe7f167678 [ 224.049483][ T8416] [ 224.394125][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 224.750586][ T8433] syzkaller0: mtu less than device minimum [ 224.786667][ T8435] FAULT_INJECTION: forcing a failure. [ 224.786667][ T8435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.820167][ T8436] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.876'. [ 224.845669][ T8435] CPU: 0 PID: 8435 Comm: syz.2.879 Not tainted syzkaller #0 [ 224.853011][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.863246][ T8435] Call Trace: [ 224.866520][ T8435] [ 224.869445][ T8435] dump_stack_lvl+0x18c/0x250 [ 224.874130][ T8435] ? show_regs_print_info+0x20/0x20 [ 224.879330][ T8435] ? load_image+0x400/0x400 [ 224.883832][ T8435] ? __lock_acquire+0x7d40/0x7d40 [ 224.888948][ T8435] ? snprintf+0xe9/0x140 [ 224.893186][ T8435] should_fail_ex+0x39d/0x4d0 [ 224.897865][ T8435] _copy_to_user+0x2f/0xa0 [ 224.902283][ T8435] simple_read_from_buffer+0xe7/0x150 [ 224.907667][ T8435] proc_fail_nth_read+0x1e8/0x260 [ 224.912687][ T8435] ? proc_fault_inject_write+0x360/0x360 [ 224.918317][ T8435] ? fsnotify_perm+0x271/0x5e0 [ 224.923074][ T8435] ? proc_fault_inject_write+0x360/0x360 [ 224.928876][ T8435] vfs_read+0x28b/0x970 [ 224.933134][ T8435] ? kernel_read+0x1e0/0x1e0 [ 224.937719][ T8435] ? __fget_files+0x28/0x4b0 [ 224.942300][ T8435] ? __fget_files+0x28/0x4b0 [ 224.946885][ T8435] ? __fget_files+0x43d/0x4b0 [ 224.951594][ T8435] ? __fdget_pos+0x2a3/0x330 [ 224.956195][ T8435] ? ksys_read+0x75/0x260 [ 224.960539][ T8435] ksys_read+0x150/0x260 [ 224.964801][ T8435] ? vfs_write+0x990/0x990 [ 224.969238][ T8435] ? lockdep_hardirqs_on+0x98/0x150 [ 224.974432][ T8435] do_syscall_64+0x55/0xa0 [ 224.978887][ T8435] ? clear_bhb_loop+0x40/0x90 [ 224.983572][ T8435] ? clear_bhb_loop+0x40/0x90 [ 224.988251][ T8435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.994134][ T8435] RIP: 0033:0x7fecb855cfce [ 224.998543][ T8435] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 225.018404][ T8435] RSP: 002b:00007fecb9522fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 225.026812][ T8435] RAX: ffffffffffffffda RBX: 00007fecb95236c0 RCX: 00007fecb855cfce [ 225.034779][ T8435] RDX: 000000000000000f RSI: 00007fecb95230a0 RDI: 0000000000000004 [ 225.042743][ T8435] RBP: 00007fecb9523090 R08: 0000000000000000 R09: 0000000000000000 [ 225.050706][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.058669][ T8435] R13: 00007fecb8816038 R14: 00007fecb8815fa0 R15: 00007fff03dba0e8 [ 225.066735][ T8435] [ 226.216228][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 226.701151][ T8471] netlink: 'syz.3.894': attribute type 10 has an invalid length. [ 226.843006][ T8471] veth0_vlan: left promiscuous mode [ 226.875781][ T8471] veth0_vlan: entered promiscuous mode [ 226.897827][ T8471] team0: Device veth0_vlan failed to register rx_handler [ 230.364480][ T5769] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 230.420259][ T8499] FAULT_INJECTION: forcing a failure. [ 230.420259][ T8499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.441989][ T8499] CPU: 1 PID: 8499 Comm: syz.1.903 Not tainted syzkaller #0 [ 230.449325][ T8499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 230.459492][ T8499] Call Trace: [ 230.462792][ T8499] [ 230.465733][ T8499] dump_stack_lvl+0x18c/0x250 [ 230.470537][ T8499] ? show_regs_print_info+0x20/0x20 [ 230.475846][ T8499] ? load_image+0x400/0x400 [ 230.480394][ T8499] ? __might_fault+0xaa/0x120 [ 230.485094][ T8499] ? __lock_acquire+0x7d40/0x7d40 [ 230.490154][ T8499] should_fail_ex+0x39d/0x4d0 [ 230.494859][ T8499] _copy_from_user+0x2f/0xe0 [ 230.499464][ T8499] ___sys_sendmsg+0x1c7/0x360 [ 230.504249][ T8499] ? get_pid_task+0x20/0x1e0 [ 230.508858][ T8499] ? __sys_sendmsg+0x2a0/0x2a0 [ 230.513665][ T8499] ? __lock_acquire+0x7d40/0x7d40 [ 230.518730][ T8499] __se_sys_sendmsg+0x1c2/0x2b0 [ 230.523589][ T8499] ? __x64_sys_sendmsg+0x80/0x80 [ 230.528545][ T8499] ? lockdep_hardirqs_on+0x98/0x150 [ 230.533760][ T8499] do_syscall_64+0x55/0xa0 [ 230.538209][ T8499] ? clear_bhb_loop+0x40/0x90 [ 230.542906][ T8499] ? clear_bhb_loop+0x40/0x90 [ 230.547587][ T8499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.553496][ T8499] RIP: 0033:0x7f4c7899c799 [ 230.557912][ T8499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.577615][ T8499] RSP: 002b:00007f4c797ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.586042][ T8499] RAX: ffffffffffffffda RBX: 00007f4c78c15fa0 RCX: 00007f4c7899c799 [ 230.594019][ T8499] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 230.601988][ T8499] RBP: 00007f4c797ad090 R08: 0000000000000000 R09: 0000000000000000 [ 230.609951][ T8499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.617912][ T8499] R13: 00007f4c78c16038 R14: 00007f4c78c15fa0 R15: 00007ffcec793268 [ 230.625978][ T8499] [ 231.482690][ T8512] netlink: 1 bytes leftover after parsing attributes in process `syz.0.910'. [ 231.911380][ T8524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.496073][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 233.569601][ T8534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.664484][ T8539] FAULT_INJECTION: forcing a failure. [ 233.664484][ T8539] name failslab, interval 1, probability 0, space 0, times 0 [ 233.678021][ T8539] CPU: 1 PID: 8539 Comm: syz.0.919 Not tainted syzkaller #0 [ 233.685693][ T8539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.695775][ T8539] Call Trace: [ 233.699070][ T8539] [ 233.702023][ T8539] dump_stack_lvl+0x18c/0x250 [ 233.706732][ T8539] ? sctp_sendmsg+0x1575/0x28c0 [ 233.711777][ T8539] ? ___sys_sendmsg+0x2a6/0x360 [ 233.716648][ T8539] ? show_regs_print_info+0x20/0x20 [ 233.721869][ T8539] ? load_image+0x400/0x400 [ 233.726411][ T8539] should_fail_ex+0x39d/0x4d0 [ 233.731126][ T8539] should_failslab+0x9/0x20 [ 233.735658][ T8539] slab_pre_alloc_hook+0x59/0x310 [ 233.740719][ T8539] ? sctp_add_bind_addr+0x8c/0x360 [ 233.745868][ T8539] __kmem_cache_alloc_node+0x53/0x250 [ 233.751280][ T8539] ? sctp_add_bind_addr+0x8c/0x360 [ 233.756444][ T8539] kmalloc_trace+0x2a/0xe0 [ 233.760909][ T8539] sctp_add_bind_addr+0x8c/0x360 [ 233.765886][ T8539] sctp_copy_local_addr_list+0x315/0x4f0 [ 233.771735][ T8539] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 233.777505][ T8539] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 233.783720][ T8539] ? sctp_v4_is_any+0x35/0x60 [ 233.788516][ T8539] ? sctp_copy_one_addr+0x8c/0x350 [ 233.793851][ T8539] sctp_bind_addr_copy+0xb3/0x3c0 [ 233.798912][ T8539] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 233.805265][ T8539] sctp_connect_new_asoc+0x2f9/0x6a0 [ 233.810571][ T8539] ? __sctp_connect+0xd80/0xd80 [ 233.815766][ T8539] ? __local_bh_enable_ip+0x13a/0x1c0 [ 233.821158][ T8539] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 233.826708][ T8539] ? security_sctp_bind_connect+0x89/0xb0 [ 233.832432][ T8539] sctp_sendmsg+0x1575/0x28c0 [ 233.837201][ T8539] ? sctp_getsockopt+0xb60/0xb60 [ 233.842144][ T8539] ? aa_sk_perm+0x83c/0x970 [ 233.846646][ T8539] ? aa_af_perm+0x330/0x330 [ 233.851149][ T8539] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 233.857559][ T8539] ? sock_rps_record_flow+0x19/0x3f0 [ 233.862869][ T8539] ? inet_sendmsg+0xe9/0x2f0 [ 233.867472][ T8539] ? inet_send_prepare+0x260/0x260 [ 233.872580][ T8539] ____sys_sendmsg+0x5ba/0x960 [ 233.877335][ T8539] ? __lock_acquire+0x7d40/0x7d40 [ 233.882358][ T8539] ? __asan_memset+0x22/0x40 [ 233.886947][ T8539] ? __sys_sendmsg_sock+0x30/0x30 [ 233.891964][ T8539] ? __import_iovec+0x5f2/0x850 [ 233.896860][ T8539] ? import_iovec+0x73/0xa0 [ 233.901394][ T8539] ___sys_sendmsg+0x2a6/0x360 [ 233.906093][ T8539] ? get_pid_task+0x20/0x1e0 [ 233.910721][ T8539] ? __sys_sendmsg+0x2a0/0x2a0 [ 233.915510][ T8539] ? __lock_acquire+0x7d40/0x7d40 [ 233.920573][ T8539] __se_sys_sendmsg+0x1c2/0x2b0 [ 233.925436][ T8539] ? __x64_sys_sendmsg+0x80/0x80 [ 233.930381][ T8539] ? lockdep_hardirqs_on+0x98/0x150 [ 233.935593][ T8539] do_syscall_64+0x55/0xa0 [ 233.940009][ T8539] ? clear_bhb_loop+0x40/0x90 [ 233.944685][ T8539] ? clear_bhb_loop+0x40/0x90 [ 233.949357][ T8539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.955243][ T8539] RIP: 0033:0x7efc7739c799 [ 233.959656][ T8539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.979374][ T8539] RSP: 002b:00007efc782c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.987787][ T8539] RAX: ffffffffffffffda RBX: 00007efc77615fa0 RCX: 00007efc7739c799 [ 233.995780][ T8539] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000006 [ 234.003759][ T8539] RBP: 00007efc782c7090 R08: 0000000000000000 R09: 0000000000000000 [ 234.011725][ T8539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.019785][ T8539] R13: 00007efc77616038 R14: 00007efc77615fa0 R15: 00007ffe7f167678 [ 234.027770][ T8539] [ 234.531741][ T8553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.655029][ T8543] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.921'. [ 235.648700][ T6608] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 237.942050][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 238.250990][ T8575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.930705][ T8595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.000303][ T8612] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.944'. [ 242.037730][ T5769] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 242.039205][ T8612] netlink: 60 bytes leftover after parsing attributes in process `syz.1.944'. [ 242.093010][ T8615] netlink: 'syz.3.941': attribute type 29 has an invalid length. [ 242.101983][ T8612] netlink: 60 bytes leftover after parsing attributes in process `syz.1.944'. [ 242.127712][ T8617] netlink: 60 bytes leftover after parsing attributes in process `syz.1.944'. [ 242.155931][ T8619] netlink: 60 bytes leftover after parsing attributes in process `syz.1.944'. [ 242.188924][ T8615] netlink: 'syz.3.941': attribute type 29 has an invalid length. [ 242.290146][ T8620] netlink: 'syz.3.941': attribute type 29 has an invalid length. [ 242.376581][ T8615] netlink: 'syz.3.941': attribute type 29 has an invalid length. [ 242.464128][ T8622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.501278][ T8625] netlink: 'syz.3.941': attribute type 29 has an invalid length. [ 245.609820][ T8633] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.949'. [ 245.763645][ T8645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.790125][ T8660] FAULT_INJECTION: forcing a failure. [ 248.790125][ T8660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.834413][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 248.837194][ T8660] CPU: 1 PID: 8660 Comm: syz.0.954 Not tainted syzkaller #0 [ 248.851884][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.861961][ T8660] Call Trace: [ 248.865241][ T8660] [ 248.868180][ T8660] dump_stack_lvl+0x18c/0x250 [ 248.872863][ T8660] ? show_regs_print_info+0x20/0x20 [ 248.878144][ T8660] ? load_image+0x400/0x400 [ 248.882678][ T8660] ? __might_fault+0xaa/0x120 [ 248.887469][ T8660] ? __lock_acquire+0x7d40/0x7d40 [ 248.892509][ T8660] should_fail_ex+0x39d/0x4d0 [ 248.897213][ T8660] _copy_from_user+0x2f/0xe0 [ 248.901830][ T8660] ___sys_sendmsg+0x1c7/0x360 [ 248.906523][ T8660] ? get_pid_task+0x20/0x1e0 [ 248.911130][ T8660] ? __sys_sendmsg+0x2a0/0x2a0 [ 248.915917][ T8660] ? __lock_acquire+0x7d40/0x7d40 [ 248.920960][ T8660] __se_sys_sendmsg+0x1c2/0x2b0 [ 248.925806][ T8660] ? __x64_sys_sendmsg+0x80/0x80 [ 248.930746][ T8660] ? lockdep_hardirqs_on+0x98/0x150 [ 248.935938][ T8660] do_syscall_64+0x55/0xa0 [ 248.940348][ T8660] ? clear_bhb_loop+0x40/0x90 [ 248.945136][ T8660] ? clear_bhb_loop+0x40/0x90 [ 248.949929][ T8660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.955844][ T8660] RIP: 0033:0x7efc7739c799 [ 248.960262][ T8660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.979875][ T8660] RSP: 002b:00007efc782c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.988283][ T8660] RAX: ffffffffffffffda RBX: 00007efc77615fa0 RCX: 00007efc7739c799 [ 248.996247][ T8660] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 249.004227][ T8660] RBP: 00007efc782c7090 R08: 0000000000000000 R09: 0000000000000000 [ 249.012193][ T8660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.020193][ T8660] R13: 00007efc77616038 R14: 00007efc77615fa0 R15: 00007ffe7f167678 [ 249.028259][ T8660] [ 249.165935][ T8666] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 249.779732][ T8676] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.959'. [ 249.832615][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'. [ 250.216593][ T8684] netlink: 152 bytes leftover after parsing attributes in process `syz.3.962'. [ 250.233164][ T8684] netlink: 6 bytes leftover after parsing attributes in process `syz.3.962'. [ 251.235202][ T8693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.571689][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 254.391100][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 254.725287][ T8716] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.972'. [ 254.749435][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'. [ 255.069349][ T8726] netlink: 152 bytes leftover after parsing attributes in process `syz.3.975'. [ 255.101183][ T8726] netlink: 6 bytes leftover after parsing attributes in process `syz.3.975'. [ 255.137303][ T8720] netlink: 152 bytes leftover after parsing attributes in process `syz.2.974'. [ 255.146579][ T8720] netlink: 6 bytes leftover after parsing attributes in process `syz.2.974'. [ 255.409605][ T8730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.446446][ T8737] C: renamed from team_slave_0 (while UP) [ 256.540338][ T8742] FAULT_INJECTION: forcing a failure. [ 256.540338][ T8742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.556056][ T8742] CPU: 0 PID: 8742 Comm: syz.1.981 Not tainted syzkaller #0 [ 256.563410][ T8742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.573503][ T8742] Call Trace: [ 256.576801][ T8742] [ 256.579760][ T8742] dump_stack_lvl+0x18c/0x250 [ 256.584483][ T8742] ? show_regs_print_info+0x20/0x20 [ 256.589725][ T8742] ? load_image+0x400/0x400 [ 256.594255][ T8742] ? __might_fault+0xaa/0x120 [ 256.598961][ T8742] ? __lock_acquire+0x7d40/0x7d40 [ 256.604018][ T8742] ? perf_trace_preemptirq_template+0xac/0x330 [ 256.610211][ T8742] should_fail_ex+0x39d/0x4d0 [ 256.614935][ T8742] _copy_to_user+0x2f/0xa0 [ 256.619387][ T8742] bpf_test_finish+0x4e7/0x650 [ 256.624180][ T8742] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 256.630388][ T8742] ? convert_skb_to___skb+0x420/0x420 [ 256.635841][ T8742] bpf_prog_test_run_nf+0x6bf/0x9c0 [ 256.641093][ T8742] ? rcu_read_unlock_trace+0x180/0x180 [ 256.646589][ T8742] ? rcu_read_unlock_trace+0x180/0x180 [ 256.652079][ T8742] bpf_prog_test_run+0x321/0x390 [ 256.657046][ T8742] __sys_bpf+0x49d/0x890 [ 256.661314][ T8742] ? bpf_link_show_fdinfo+0x390/0x390 [ 256.666722][ T8742] ? lock_chain_count+0x20/0x20 [ 256.671607][ T8742] __x64_sys_bpf+0x7c/0x90 [ 256.676055][ T8742] do_syscall_64+0x55/0xa0 [ 256.680497][ T8742] ? clear_bhb_loop+0x40/0x90 [ 256.685209][ T8742] ? clear_bhb_loop+0x40/0x90 [ 256.689941][ T8742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.695872][ T8742] RIP: 0033:0x7f4c7899c799 [ 256.700334][ T8742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.720076][ T8742] RSP: 002b:00007f4c797ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 256.728530][ T8742] RAX: ffffffffffffffda RBX: 00007f4c78c15fa0 RCX: 00007f4c7899c799 [ 256.736534][ T8742] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 256.744536][ T8742] RBP: 00007f4c797ad090 R08: 0000000000000000 R09: 0000000000000000 [ 256.752538][ T8742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.760530][ T8742] R13: 00007f4c78c16038 R14: 00007f4c78c15fa0 R15: 00007ffcec793268 [ 256.768540][ T8742] [ 257.780521][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 258.023329][ T8737] netlink: 'syz.3.979': attribute type 3 has an invalid length. [ 258.044550][ T8737] netlink: 152 bytes leftover after parsing attributes in process `syz.3.979'. [ 258.065821][ T8737] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 258.087342][ T8746] netlink: 'syz.3.979': attribute type 17 has an invalid length. [ 258.095816][ T8746] netlink: 'syz.3.979': attribute type 16 has an invalid length. [ 258.109678][ T8746] netlink: 152 bytes leftover after parsing attributes in process `syz.3.979'. [ 259.298256][ T8755] netlink: 'syz.1.984': attribute type 15 has an invalid length. [ 259.306208][ T8755] netlink: 'syz.1.984': attribute type 7 has an invalid length. [ 259.318987][ T8758] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.985'. [ 259.673518][ T8769] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 259.726664][ T8770] netlink: 152 bytes leftover after parsing attributes in process `syz.1.987'. [ 259.771837][ T8770] netlink: 6 bytes leftover after parsing attributes in process `syz.1.987'. [ 259.972494][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.979425][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.816854][ T8779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.825210][ T8779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.834264][ T8779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.842179][ T8779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.955708][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 261.236077][ T8785] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.995'. [ 261.268699][ T8788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.995'. [ 261.741467][ T8792] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.996'. [ 261.962603][ T8802] netlink: 'syz.2.1000': attribute type 2 has an invalid length. [ 261.973978][ T8802] netlink: 'syz.2.1000': attribute type 1 has an invalid length. [ 261.982770][ T8802] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1000'. [ 262.366402][ T8810] FAULT_INJECTION: forcing a failure. [ 262.366402][ T8810] name failslab, interval 1, probability 0, space 0, times 0 [ 262.380877][ T8810] CPU: 1 PID: 8810 Comm: syz.1.1002 Not tainted syzkaller #0 [ 262.388298][ T8810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.398384][ T8810] Call Trace: [ 262.401770][ T8810] [ 262.404711][ T8810] dump_stack_lvl+0x18c/0x250 [ 262.409419][ T8810] ? show_regs_print_info+0x20/0x20 [ 262.414653][ T8810] ? load_image+0x400/0x400 [ 262.419191][ T8810] ? __might_sleep+0xe0/0xe0 [ 262.423809][ T8810] ? __lock_acquire+0x7d40/0x7d40 [ 262.428872][ T8810] should_fail_ex+0x39d/0x4d0 [ 262.433593][ T8810] should_failslab+0x9/0x20 [ 262.438131][ T8810] slab_pre_alloc_hook+0x59/0x310 [ 262.443194][ T8810] ? ethnl_default_start+0x166/0x560 [ 262.448504][ T8810] ? ethnl_default_start+0x166/0x560 [ 262.453791][ T8810] __kmem_cache_alloc_node+0x53/0x250 [ 262.459273][ T8810] ? ethnl_default_start+0x166/0x560 [ 262.464588][ T8810] __kmalloc+0xa4/0x230 [ 262.468766][ T8810] ethnl_default_start+0x166/0x560 [ 262.473983][ T8810] genl_start+0x4b6/0x6b0 [ 262.478317][ T8810] __netlink_dump_start+0x4a9/0x810 [ 262.483607][ T8810] genl_family_rcv_msg_dumpit+0x214/0x310 [ 262.489453][ T8810] ? genl_rcv_msg+0x7a0/0x7a0 [ 262.494139][ T8810] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 262.500293][ T8810] ? lockdep_hardirqs_on+0x98/0x150 [ 262.505489][ T8810] ? genl_family_rcv_msg_doit+0x310/0x310 [ 262.511204][ T8810] ? genl_start+0x6b0/0x6b0 [ 262.515706][ T8810] ? genl_dumpit+0x1a0/0x1a0 [ 262.520292][ T8810] ? genl_rcv_msg+0x44a/0x7a0 [ 262.525052][ T8810] genl_rcv_msg+0x5e5/0x7a0 [ 262.529562][ T8810] ? genl_bind+0x360/0x360 [ 262.534017][ T8810] ? ethnl_default_doit+0xb80/0xb80 [ 262.539215][ T8810] ? ethnl_default_start+0x560/0x560 [ 262.544495][ T8810] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 262.549879][ T8810] ? ref_tracker_free+0x690/0x840 [ 262.554915][ T8810] netlink_rcv_skb+0x241/0x4d0 [ 262.559687][ T8810] ? genl_bind+0x360/0x360 [ 262.564105][ T8810] ? netlink_ack+0x1180/0x1180 [ 262.568872][ T8810] ? __lock_acquire+0x7d40/0x7d40 [ 262.573897][ T8810] ? down_read+0x1ac/0x2e0 [ 262.578400][ T8810] genl_rcv+0x28/0x40 [ 262.582381][ T8810] netlink_unicast+0x751/0x8d0 [ 262.587159][ T8810] netlink_sendmsg+0x8d0/0xbf0 [ 262.591941][ T8810] ? netlink_getsockopt+0x590/0x590 [ 262.597137][ T8810] ? aa_sock_msg_perm+0x94/0x150 [ 262.602160][ T8810] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 262.607531][ T8810] ? security_socket_sendmsg+0x80/0xa0 [ 262.612985][ T8810] ? netlink_getsockopt+0x590/0x590 [ 262.618269][ T8810] ____sys_sendmsg+0x5ba/0x960 [ 262.623041][ T8810] ? __asan_memset+0x22/0x40 [ 262.627630][ T8810] ? __sys_sendmsg_sock+0x30/0x30 [ 262.632653][ T8810] ? __import_iovec+0x5f2/0x850 [ 262.637513][ T8810] ? import_iovec+0x73/0xa0 [ 262.642046][ T8810] ___sys_sendmsg+0x2a6/0x360 [ 262.646757][ T8810] ? __sys_sendmsg+0x2a0/0x2a0 [ 262.651640][ T8810] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 262.657908][ T8810] __se_sys_sendmsg+0x1c2/0x2b0 [ 262.662756][ T8810] ? __x64_sys_sendmsg+0x80/0x80 [ 262.667697][ T8810] ? lockdep_hardirqs_on+0x98/0x150 [ 262.672895][ T8810] do_syscall_64+0x55/0xa0 [ 262.677483][ T8810] ? clear_bhb_loop+0x40/0x90 [ 262.682150][ T8810] ? clear_bhb_loop+0x40/0x90 [ 262.686843][ T8810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.692738][ T8810] RIP: 0033:0x7f4c7899c799 [ 262.697159][ T8810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.716979][ T8810] RSP: 002b:00007f4c797ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.725517][ T8810] RAX: ffffffffffffffda RBX: 00007f4c78c15fa0 RCX: 00007f4c7899c799 [ 262.733500][ T8810] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 262.741473][ T8810] RBP: 00007f4c797ad090 R08: 0000000000000000 R09: 0000000000000000 [ 262.749465][ T8810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.757437][ T8810] R13: 00007f4c78c16038 R14: 00007f4c78c15fa0 R15: 00007ffcec793268 [ 262.765503][ T8810] [ 262.812666][ T8813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.861132][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 266.546366][ T8841] FAULT_INJECTION: forcing a failure. [ 266.546366][ T8841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.572175][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 266.572331][ T8841] CPU: 0 PID: 8841 Comm: syz.1.1013 Not tainted syzkaller #0 [ 266.586687][ T8841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 266.596848][ T8841] Call Trace: [ 266.600139][ T8841] [ 266.603089][ T8841] dump_stack_lvl+0x18c/0x250 [ 266.607799][ T8841] ? show_regs_print_info+0x20/0x20 [ 266.613017][ T8841] ? load_image+0x400/0x400 [ 266.617550][ T8841] ? __might_fault+0xaa/0x120 [ 266.622248][ T8841] ? __lock_acquire+0x7d40/0x7d40 [ 266.627296][ T8841] should_fail_ex+0x39d/0x4d0 [ 266.632003][ T8841] _copy_from_user+0x2f/0xe0 [ 266.636612][ T8841] do_ipv6_setsockopt+0x3a2/0x3e20 [ 266.641780][ T8841] ? sk_dst_reset+0xa0/0xa0 [ 266.646317][ T8841] ? verify_lock_unused+0x140/0x140 [ 266.651548][ T8841] ? mark_lock+0x94/0x320 [ 266.655905][ T8841] ? __lock_acquire+0x1273/0x7d40 [ 266.660969][ T8841] ? aa_label_sk_perm+0x463/0x5c0 [ 266.666028][ T8841] ? aa_sk_perm+0x970/0x970 [ 266.670574][ T8841] ? __might_sleep+0xe0/0xe0 [ 266.675187][ T8841] ? ksys_write+0x1c4/0x260 [ 266.679731][ T8841] ? aa_sk_perm+0x83c/0x970 [ 266.684262][ T8841] ? __fget_files+0x28/0x4b0 [ 266.688912][ T8841] ? aa_af_perm+0x330/0x330 [ 266.693440][ T8841] ? __fget_files+0x28/0x4b0 [ 266.698048][ T8841] ? __fget_files+0x28/0x4b0 [ 266.702745][ T8841] ? aa_sock_opt_perm+0x74/0x100 [ 266.707708][ T8841] ipv6_setsockopt+0x59/0x190 [ 266.712402][ T8841] ? sock_common_recvmsg+0x190/0x190 [ 266.717709][ T8841] do_sock_setsockopt+0x175/0x1a0 [ 266.722752][ T8841] ? __fdget+0x180/0x210 [ 266.727017][ T8841] __x64_sys_setsockopt+0x182/0x200 [ 266.732238][ T8841] do_syscall_64+0x55/0xa0 [ 266.736692][ T8841] ? clear_bhb_loop+0x40/0x90 [ 266.741386][ T8841] ? clear_bhb_loop+0x40/0x90 [ 266.746084][ T8841] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.751995][ T8841] RIP: 0033:0x7f4c7899c799 [ 266.756520][ T8841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.776158][ T8841] RSP: 002b:00007f4c797ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 266.784625][ T8841] RAX: ffffffffffffffda RBX: 00007f4c78c15fa0 RCX: 00007f4c7899c799 [ 266.792713][ T8841] RDX: 0000000000000014 RSI: 0000000000000029 RDI: 0000000000000003 [ 266.800770][ T8841] RBP: 00007f4c797ad090 R08: 000000000000003d R09: 0000000000000000 [ 266.808792][ T8841] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 266.816781][ T8841] R13: 00007f4c78c16038 R14: 00007f4c78c15fa0 R15: 00007ffcec793268 [ 266.824878][ T8841] [ 267.043962][ T8840] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1012'. [ 267.419366][ T8858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.738285][ T8863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.745951][ T8863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.754903][ T8863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.763353][ T8863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.196358][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 268.299747][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 269.083674][ T8879] netlink: 'syz.3.1026': attribute type 3 has an invalid length. [ 269.093806][ T8879] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 269.103339][ T8879] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1026'. [ 271.981579][ T8897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.997208][ T8897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.022531][ T8897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.038791][ T8897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.687023][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 273.344631][ T8915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.812980][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 276.959871][ T8945] netlink: 'syz.0.1048': attribute type 4 has an invalid length. [ 277.057383][ T8945] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1048'. [ 277.680192][ T8960] netlink: 'syz.0.1053': attribute type 10 has an invalid length. [ 277.953950][ T8969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.891542][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 281.993445][ T5769] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 282.163674][ T9008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.888172][ T5769] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 284.371837][ T9034] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 286.389519][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 289.384821][ T5769] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 289.603474][ T9076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.122001][ T9098] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1092'. [ 296.793233][ T9121] netlink: 'syz.2.1097': attribute type 15 has an invalid length. [ 296.803773][ T9121] netlink: 'syz.2.1097': attribute type 7 has an invalid length. [ 297.121721][ T9131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.122256][ T5769] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 301.291005][ T5769] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 301.570463][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 302.234111][ T9179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.333255][ T5769] Bluetooth: hci1: command 0x0406 tx timeout [ 303.577803][ T9197] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1120'. [ 304.576528][ T9208] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1123'. [ 304.923103][ T9224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.229240][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 306.292234][ T9243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.176272][ T9250] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1133'. [ 307.186404][ T9250] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.1133'. [ 307.201663][ T9250] tipc: Started in network mode [ 307.206822][ T9250] tipc: Node identity d, cluster identity 56 [ 307.214920][ T9250] tipc: Node number set to 13 [ 307.625286][ T9254] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1135'. [ 307.800296][ T9261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.662080][ T9299] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1150'. [ 310.928477][ T9309] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 311.289461][ T9314] netlink: 703 bytes leftover after parsing attributes in process `syz.0.1154'. [ 312.911575][ T9328] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1160'. [ 313.882715][ T9364] FAULT_INJECTION: forcing a failure. [ 313.882715][ T9364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.896315][ T9364] CPU: 0 PID: 9364 Comm: syz.3.1169 Not tainted syzkaller #0 [ 313.903703][ T9364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 313.913774][ T9364] Call Trace: [ 313.917142][ T9364] [ 313.920165][ T9364] dump_stack_lvl+0x18c/0x250 [ 313.924855][ T9364] ? show_regs_print_info+0x20/0x20 [ 313.930063][ T9364] ? load_image+0x400/0x400 [ 313.934587][ T9364] ? __might_fault+0xaa/0x120 [ 313.939271][ T9364] ? __lock_acquire+0x7d40/0x7d40 [ 313.944306][ T9364] should_fail_ex+0x39d/0x4d0 [ 313.948998][ T9364] _copy_from_user+0x2f/0xe0 [ 313.953928][ T9364] bpf_prog_test_run_skb+0x266/0x12b0 [ 313.959294][ T9364] ? __fget_files+0x28/0x4b0 [ 313.963875][ T9364] ? __fget_files+0x28/0x4b0 [ 313.968480][ T9364] ? __fget_files+0x43d/0x4b0 [ 313.973179][ T9364] ? cpu_online+0x60/0x60 [ 313.977511][ T9364] bpf_prog_test_run+0x321/0x390 [ 313.982459][ T9364] __sys_bpf+0x49d/0x890 [ 313.986699][ T9364] ? bpf_link_show_fdinfo+0x390/0x390 [ 313.992080][ T9364] ? lock_chain_count+0x20/0x20 [ 313.996935][ T9364] __x64_sys_bpf+0x7c/0x90 [ 314.001440][ T9364] do_syscall_64+0x55/0xa0 [ 314.005857][ T9364] ? clear_bhb_loop+0x40/0x90 [ 314.010529][ T9364] ? clear_bhb_loop+0x40/0x90 [ 314.015240][ T9364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.021153][ T9364] RIP: 0033:0x7ffa9d59c799 [ 314.025657][ T9364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.045345][ T9364] RSP: 002b:00007ffa9e476028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 314.053760][ T9364] RAX: ffffffffffffffda RBX: 00007ffa9d816090 RCX: 00007ffa9d59c799 [ 314.061899][ T9364] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 314.069868][ T9364] RBP: 00007ffa9e476090 R08: 0000000000000000 R09: 0000000000000000 [ 314.078087][ T9364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.086045][ T9364] R13: 00007ffa9d816128 R14: 00007ffa9d816090 R15: 00007ffec1c9da98 [ 314.094017][ T9364] [ 314.165707][ T9365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.706839][ T5769] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 317.422682][ T9378] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1174'. [ 317.594452][ T9411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.601807][ T9414] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1184'. [ 317.914720][ T9421] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1187'. [ 317.947286][ T9421] netlink: 'syz.2.1187': attribute type 2 has an invalid length. [ 318.824908][ T9427] netlink: 'syz.0.1189': attribute type 5 has an invalid length. [ 318.833373][ T9427] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1189'. [ 318.914245][ T9426] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1188'. [ 318.925292][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 319.329367][ T9434] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1194'. [ 321.100254][ T9431] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1191'. [ 321.117170][ T9434] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1194'. [ 321.419309][ T9457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.425105][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.445870][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.737231][ T9459] delete_channel: no stack [ 321.863957][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 322.169879][ T5769] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 322.394049][ T9472] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1204'. [ 322.652121][ T9479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.312045][ T9497] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1208'. [ 324.217059][ T5769] Bluetooth: hci1: command 0x0406 tx timeout [ 326.681499][ T5769] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 327.595638][ T9519] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1216'. [ 327.621734][ T5769] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 328.616545][ T9538] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 328.687179][ T5769] Bluetooth: hci3: command 0x0406 tx timeout [ 329.451955][ T5769] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 329.777969][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 329.896066][ T9556] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1230'. [ 330.222716][ T9567] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1234'. [ 330.237254][ T9567] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1234'. [ 330.535285][ T9580] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1234'. [ 330.668795][ T9581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.211069][ T5769] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 331.233099][ T9586] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1237'. [ 331.262585][ T9588] netlink: 'syz.1.1239': attribute type 21 has an invalid length. [ 331.272560][ T9588] netlink: 'syz.1.1239': attribute type 1 has an invalid length. [ 331.487495][ T5769] Bluetooth: hci1: command 0x0406 tx timeout [ 331.629779][ T5769] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 331.778227][ T9599] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1241'. [ 331.831064][ T9599] netlink: 'syz.0.1241': attribute type 2 has an invalid length. [ 333.208309][ T9618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.569296][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 333.690786][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 334.066609][ T9623] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1252'. [ 334.125861][ T5769] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 335.485240][ T9649] netlink: 'syz.1.1262': attribute type 21 has an invalid length. [ 335.521311][ T9649] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1262'. [ 335.562947][ T5769] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 335.683065][ T9653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.127281][ T5769] Bluetooth: hci0: command 0x0406 tx timeout [ 336.359474][ T9662] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1266'. [ 336.403543][ T5769] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 336.431722][ T9666] netlink: 'syz.1.1268': attribute type 1 has an invalid length. [ 336.457156][ T9666] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1268'. [ 337.806609][ T9679] syz.1.1273[9679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.806888][ T9679] syz.1.1273[9679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.457183][ T5769] Bluetooth: hci3: command 0x0406 tx timeout [ 338.498409][ T9692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.616133][ T9694] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1279'. [ 340.350251][ T9727] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1291'. [ 340.472163][ T9737] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 340.994165][ T5769] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 341.865977][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 342.214597][ T9765] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1304'. [ 342.467180][ T9773] netlink: 'syz.3.1306': attribute type 4 has an invalid length. [ 342.496126][ T9773] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1306'. [ 342.521830][ T9773] .`: renamed from bond0 (while UP) [ 342.772385][ T9780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.032225][ T5769] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 343.958464][ T5769] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 343.979369][ T9800] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1317'. [ 344.350231][ T9811] netlink: 'syz.0.1321': attribute type 21 has an invalid length. [ 344.367188][ T9811] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1321'. [ 345.079397][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 345.420640][ T9830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.609266][ T9831] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1328'. [ 347.272245][ T9862] netlink: 'syz.2.1338': attribute type 21 has an invalid length. [ 347.281829][ T9862] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1338'. [ 347.993587][ T9865] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1339'. [ 348.710653][ T9881] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1344'. [ 351.749828][ T9905] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1351'. [ 352.468893][ T5769] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 354.537161][ T5769] Bluetooth: hci0: command 0x0406 tx timeout [ 356.179331][ T9932] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1359'. [ 356.326056][ T9937] netlink: 'syz.3.1362': attribute type 21 has an invalid length. [ 356.348300][ T9937] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1362'. [ 356.518577][ T9944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.563794][ T9940] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1363'. [ 357.910740][ T9973] netlink: 'syz.1.1374': attribute type 21 has an invalid length. [ 357.927728][ T9973] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1374'. [ 358.115714][ T9974] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1375'. [ 360.888753][ T9991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.318949][T10024] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1398'. [ 362.524062][T10036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.101230][ T5769] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 365.168204][ T5769] Bluetooth: hci2: command 0x0406 tx timeout [ 365.187059][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 365.569722][ T6595] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 366.913331][ T5769] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 369.308964][T10093] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1413'. [ 369.464531][ T5769] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 369.741543][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 369.845790][T10117] netlink: 'syz.0.1422': attribute type 10 has an invalid length. [ 369.862759][T10117] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1422'. [ 369.874121][T10117] veth0_vlan: left promiscuous mode [ 369.944671][T10117] veth0_vlan: entered promiscuous mode [ 370.001178][T10117] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 370.713973][T10127] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1425'. [ 371.202876][T10137] netlink: 'syz.0.1428': attribute type 21 has an invalid length. [ 371.215950][T10137] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1428'. [ 371.491913][ T5769] Bluetooth: hci3: command 0x0406 tx timeout [ 373.806254][T10142] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1429'. [ 373.848805][ T5769] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 374.299291][T10162] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1435'. [ 374.965113][T10178] netlink: 'syz.2.1440': attribute type 21 has an invalid length. [ 374.974628][T10178] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1440'. [ 377.905508][ T5769] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 378.025719][T10189] netlink: 'syz.2.1443': attribute type 17 has an invalid length. [ 378.044732][T10189] netlink: 'syz.2.1443': attribute type 16 has an invalid length. [ 378.065737][T10189] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1443'. [ 378.255600][T10197] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.1444'. [ 378.544277][T10213] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1448'. [ 379.231509][T10221] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1451'. [ 379.296733][T10232] netlink: 'syz.2.1453': attribute type 21 has an invalid length. [ 379.305479][T10232] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1453'. [ 380.045871][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 381.995283][T10247] netlink: 'syz.3.1458': attribute type 17 has an invalid length. [ 382.015973][T10247] netlink: 'syz.3.1458': attribute type 16 has an invalid length. [ 382.030927][T10247] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1458'. [ 382.053682][T10255] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.1459'. [ 382.676828][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 382.852642][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.868834][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.266880][T10306] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.1474'. [ 387.052630][ T5769] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 387.366725][T10332] netlink: 'syz.3.1479': attribute type 21 has an invalid length. [ 387.387179][T10332] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1479'. [ 390.629044][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 391.590094][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 392.639437][T10368] netlink: 'syz.0.1494': attribute type 4 has an invalid length. [ 392.651584][T10367] netlink: 'syz.0.1494': attribute type 4 has an invalid length. [ 392.654778][T10368] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1494'. [ 392.664941][T10367] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1494'. [ 392.994735][T10376] netlink: 'syz.0.1495': attribute type 21 has an invalid length. [ 393.003435][T10376] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1495'. [ 393.190570][T10383] FAULT_INJECTION: forcing a failure. [ 393.190570][T10383] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 393.204347][T10383] CPU: 0 PID: 10383 Comm: syz.3.1498 Not tainted syzkaller #0 [ 393.211847][T10383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 393.221919][T10383] Call Trace: [ 393.225204][T10383] [ 393.228134][T10383] dump_stack_lvl+0x18c/0x250 [ 393.232825][T10383] ? show_regs_print_info+0x20/0x20 [ 393.238064][T10383] ? load_image+0x400/0x400 [ 393.242592][T10383] ? __lock_acquire+0x7d40/0x7d40 [ 393.247645][T10383] should_fail_ex+0x39d/0x4d0 [ 393.252360][T10383] prepare_alloc_pages+0x1e2/0x5f0 [ 393.257520][T10383] __alloc_pages+0x134/0x460 [ 393.262127][T10383] ? zone_statistics+0x170/0x170 [ 393.267070][T10383] ? alloc_pages+0x4dc/0x740 [ 393.271661][T10383] ? do_raw_spin_unlock+0x121/0x230 [ 393.276870][T10383] __get_free_pages+0xc/0x30 [ 393.281459][T10383] kasan_populate_vmalloc_pte+0x35/0x100 [ 393.287355][T10383] __apply_to_page_range+0x860/0xdd0 [ 393.292660][T10383] ? kasan_populate_vmalloc+0x70/0x70 [ 393.298032][T10383] ? apply_to_page_range+0x50/0x50 [ 393.303146][T10383] ? do_raw_spin_unlock+0x121/0x230 [ 393.308345][T10383] alloc_vmap_area+0x1d0c/0x1e30 [ 393.313340][T10383] ? vm_map_ram+0xcb0/0xcb0 [ 393.318023][T10383] ? rcu_is_watching+0x15/0xb0 [ 393.322791][T10383] __get_vm_area_node+0x162/0x370 [ 393.327817][T10383] __vmalloc_node_range+0x36e/0x1330 [ 393.333100][T10383] ? dev_map_alloc+0x1f6/0x4c0 [ 393.337883][T10383] ? free_vm_area+0x50/0x50 [ 393.342392][T10383] ? rcu_is_watching+0x15/0xb0 [ 393.347151][T10383] ? bpf_map_area_alloc+0x5e/0x110 [ 393.352358][T10383] bpf_map_area_alloc+0xf1/0x110 [ 393.357379][T10383] ? dev_map_alloc+0x1f6/0x4c0 [ 393.362322][T10383] dev_map_alloc+0x1f6/0x4c0 [ 393.366934][T10383] map_create+0x877/0x12f0 [ 393.371353][T10383] ? bpf_lsm_bpf+0x9/0x10 [ 393.375684][T10383] __sys_bpf+0x651/0x890 [ 393.380014][T10383] ? bpf_link_show_fdinfo+0x390/0x390 [ 393.385391][T10383] ? lock_chain_count+0x20/0x20 [ 393.390262][T10383] __x64_sys_bpf+0x7c/0x90 [ 393.394676][T10383] do_syscall_64+0x55/0xa0 [ 393.399096][T10383] ? clear_bhb_loop+0x40/0x90 [ 393.403769][T10383] ? clear_bhb_loop+0x40/0x90 [ 393.408440][T10383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.414329][T10383] RIP: 0033:0x7ffa9d59c799 [ 393.418828][T10383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.438526][T10383] RSP: 002b:00007ffa9e497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 393.446956][T10383] RAX: ffffffffffffffda RBX: 00007ffa9d815fa0 RCX: 00007ffa9d59c799 [ 393.454931][T10383] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0000000000000000 [ 393.462904][T10383] RBP: 00007ffa9e497090 R08: 0000000000000000 R09: 0000000000000000 [ 393.470873][T10383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 393.478922][T10383] R13: 00007ffa9d816038 R14: 00007ffa9d815fa0 R15: 00007ffec1c9da98 [ 393.486901][T10383] [ 393.572942][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 393.733563][ T5769] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 394.440797][T10403] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1505'. [ 395.018475][T10416] FAULT_INJECTION: forcing a failure. [ 395.018475][T10416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.032188][T10416] CPU: 0 PID: 10416 Comm: syz.1.1511 Not tainted syzkaller #0 [ 395.039681][T10416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 395.049755][T10416] Call Trace: [ 395.053034][T10416] [ 395.055960][T10416] dump_stack_lvl+0x18c/0x250 [ 395.060648][T10416] ? show_regs_print_info+0x20/0x20 [ 395.066196][T10416] ? load_image+0x400/0x400 [ 395.070702][T10416] ? __might_fault+0xaa/0x120 [ 395.075374][T10416] ? __lock_acquire+0x7d40/0x7d40 [ 395.080400][T10416] should_fail_ex+0x39d/0x4d0 [ 395.085167][T10416] _copy_to_user+0x2f/0xa0 [ 395.089587][T10416] bpf_test_finish+0x4e7/0x650 [ 395.094352][T10416] ? convert_skb_to___skb+0x420/0x420 [ 395.099717][T10416] ? read_tsc+0x9/0x20 [ 395.103786][T10416] ? __rcu_read_unlock+0x7c/0xd0 [ 395.108725][T10416] bpf_prog_test_run_flow_dissector+0x4c9/0x640 [ 395.114963][T10416] ? xdp_convert_buff_to_md+0x200/0x200 [ 395.120500][T10416] ? __fget_files+0x28/0x4b0 [ 395.125083][T10416] ? __fget_files+0x28/0x4b0 [ 395.129675][T10416] ? xdp_convert_buff_to_md+0x200/0x200 [ 395.135216][T10416] bpf_prog_test_run+0x321/0x390 [ 395.140149][T10416] __sys_bpf+0x49d/0x890 [ 395.144386][T10416] ? bpf_link_show_fdinfo+0x390/0x390 [ 395.149827][T10416] ? lock_chain_count+0x20/0x20 [ 395.154765][T10416] __x64_sys_bpf+0x7c/0x90 [ 395.159187][T10416] do_syscall_64+0x55/0xa0 [ 395.163685][T10416] ? clear_bhb_loop+0x40/0x90 [ 395.168376][T10416] ? clear_bhb_loop+0x40/0x90 [ 395.173060][T10416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.178948][T10416] RIP: 0033:0x7f4c7899c799 [ 395.183356][T10416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.202955][T10416] RSP: 002b:00007f4c797ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 395.211359][T10416] RAX: ffffffffffffffda RBX: 00007f4c78c15fa0 RCX: 00007f4c7899c799 [ 395.219321][T10416] RDX: 000000000000003a RSI: 0000200000000280 RDI: 000000000000000a [ 395.227370][T10416] RBP: 00007f4c797ad090 R08: 0000000000000000 R09: 0000000000000000 [ 395.235337][T10416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.243303][T10416] R13: 00007f4c78c16038 R14: 00007f4c78c15fa0 R15: 00007ffcec793268 [ 395.251282][T10416] [ 395.283921][T10417] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1510'. [ 395.349884][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 395.546308][T10422] netlink: 'syz.2.1513': attribute type 21 has an invalid length. [ 395.575016][T10422] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1513'. [ 398.859730][T10449] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1522'. [ 398.999232][ T5769] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 399.490783][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 400.692965][T10480] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1531'. [ 400.718470][T10487] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1533'. [ 400.981240][T10490] IPv6: pim6reg1: Disabled Multicast RS [ 401.028245][T10495] FAULT_INJECTION: forcing a failure. [ 401.028245][T10495] name failslab, interval 1, probability 0, space 0, times 0 [ 401.087211][T10495] CPU: 1 PID: 10495 Comm: syz.3.1536 Not tainted syzkaller #0 [ 401.094750][T10495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.104842][T10495] Call Trace: [ 401.108149][T10495] [ 401.111107][T10495] dump_stack_lvl+0x18c/0x250 [ 401.115833][T10495] ? show_regs_print_info+0x20/0x20 [ 401.121080][T10495] ? load_image+0x400/0x400 [ 401.125640][T10495] ? __might_sleep+0xe0/0xe0 [ 401.130277][T10495] ? __lock_acquire+0x7d40/0x7d40 [ 401.135427][T10495] ? perf_trace_preemptirq_template+0xac/0x330 [ 401.141626][T10495] should_fail_ex+0x39d/0x4d0 [ 401.146347][T10495] should_failslab+0x9/0x20 [ 401.150961][T10495] slab_pre_alloc_hook+0x59/0x310 [ 401.156104][T10495] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 401.161764][T10495] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 401.167330][T10495] __kmem_cache_alloc_node+0x53/0x250 [ 401.172743][T10495] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 401.178313][T10495] __kmalloc+0xa4/0x230 [ 401.182488][T10495] bpf_prog_test_run_skb+0x238/0x12b0 [ 401.187855][T10495] ? lockdep_hardirqs_on+0x98/0x150 [ 401.193053][T10495] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 401.199214][T10495] ? cpu_online+0x60/0x60 [ 401.203535][T10495] bpf_prog_test_run+0x321/0x390 [ 401.208468][T10495] __sys_bpf+0x49d/0x890 [ 401.212704][T10495] ? bpf_link_show_fdinfo+0x390/0x390 [ 401.218073][T10495] ? lock_chain_count+0x20/0x20 [ 401.222930][T10495] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 401.228910][T10495] __x64_sys_bpf+0x7c/0x90 [ 401.233349][T10495] do_syscall_64+0x55/0xa0 [ 401.237769][T10495] ? clear_bhb_loop+0x40/0x90 [ 401.242436][T10495] ? clear_bhb_loop+0x40/0x90 [ 401.247108][T10495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.253009][T10495] RIP: 0033:0x7ffa9d59c799 [ 401.257424][T10495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.277024][T10495] RSP: 002b:00007ffa9e497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.285451][T10495] RAX: ffffffffffffffda RBX: 00007ffa9d815fa0 RCX: 00007ffa9d59c799 [ 401.293414][T10495] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 401.301374][T10495] RBP: 00007ffa9e497090 R08: 0000000000000000 R09: 0000000000000000 [ 401.309336][T10495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.317297][T10495] R13: 00007ffa9d816038 R14: 00007ffa9d815fa0 R15: 00007ffec1c9da98 [ 401.325270][T10495] [ 401.400769][ T5769] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 401.641682][T10502] ip6tnl0: entered promiscuous mode [ 404.130288][T10527] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1545'. [ 404.199501][T10521] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1543'. [ 404.325983][ T5769] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 404.472293][T10542] netlink: 'syz.3.1550': attribute type 21 has an invalid length. [ 404.512877][T10542] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1550'. [ 404.778236][T10545] netlink: 'syz.1.1552': attribute type 10 has an invalid length. [ 404.795916][T10545] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1552'. [ 406.294678][T10559] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1558'. [ 406.845927][ T5769] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 407.475556][T10583] netlink: 'syz.2.1565': attribute type 21 has an invalid length. [ 407.513768][T10583] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1565'. [ 407.668986][T10564] netlink: 'syz.0.1556': attribute type 4 has an invalid length. [ 407.687463][T10564] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1556'. [ 407.938162][T10564] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 408.633104][T10597] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1568'. [ 408.924591][ T5769] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 408.975057][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 413.114000][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 413.382100][T10636] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1581'. [ 413.593807][T10653] netlink: 'syz.2.1588': attribute type 21 has an invalid length. [ 413.602442][T10653] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1588'. [ 414.533189][T10665] FAULT_INJECTION: forcing a failure. [ 414.533189][T10665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.548170][T10665] CPU: 0 PID: 10665 Comm: syz.0.1591 Not tainted syzkaller #0 [ 414.555682][T10665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 414.565774][T10665] Call Trace: [ 414.569079][T10665] [ 414.572037][T10665] dump_stack_lvl+0x18c/0x250 [ 414.576750][T10665] ? show_regs_print_info+0x20/0x20 [ 414.581976][T10665] ? load_image+0x400/0x400 [ 414.586527][T10665] ? __lock_acquire+0x7d40/0x7d40 [ 414.591643][T10665] should_fail_ex+0x39d/0x4d0 [ 414.596366][T10665] _copy_from_user+0x2f/0xe0 [ 414.600990][T10665] __copy_msghdr+0x3bb/0x580 [ 414.605714][T10665] ___sys_sendmsg+0x214/0x360 [ 414.610430][T10665] ? get_pid_task+0x20/0x1e0 [ 414.615054][T10665] ? __sys_sendmsg+0x2a0/0x2a0 [ 414.619869][T10665] ? __lock_acquire+0x7d40/0x7d40 [ 414.624956][T10665] __se_sys_sendmsg+0x1c2/0x2b0 [ 414.629842][T10665] ? __x64_sys_sendmsg+0x80/0x80 [ 414.634825][T10665] ? lockdep_hardirqs_on+0x98/0x150 [ 414.640046][T10665] do_syscall_64+0x55/0xa0 [ 414.644499][T10665] ? clear_bhb_loop+0x40/0x90 [ 414.649327][T10665] ? clear_bhb_loop+0x40/0x90 [ 414.654041][T10665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.659959][T10665] RIP: 0033:0x7efc7739c799 [ 414.664418][T10665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.684183][T10665] RSP: 002b:00007efc782a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.692641][T10665] RAX: ffffffffffffffda RBX: 00007efc77616090 RCX: 00007efc7739c799 [ 414.700637][T10665] RDX: 00000000200048cc RSI: 0000200000000240 RDI: 0000000000000004 [ 414.708626][T10665] RBP: 00007efc782a6090 R08: 0000000000000000 R09: 0000000000000000 [ 414.716638][T10665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.724648][T10665] R13: 00007efc77616128 R14: 00007efc77616090 R15: 00007ffe7f167678 [ 414.732668][T10665] [ 417.439031][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 417.816351][T10678] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1597'. [ 418.711794][T10696] netlink: 'syz.1.1602': attribute type 21 has an invalid length. [ 418.724524][T10696] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1602'. [ 419.197731][T10708] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1615'. [ 419.217166][T10708] openvswitch: netlink: Key type 4112 is out of range max 32 [ 419.407994][ T5769] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 421.299574][T10716] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1609'. [ 421.334363][T10712] netlink: 'syz.3.1607': attribute type 4 has an invalid length. [ 421.378711][T10712] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1607'. [ 422.089814][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 426.104735][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 426.149912][T10762] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1621'. [ 426.461118][ T5769] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 426.565115][T10775] netlink: 'syz.3.1629': attribute type 21 has an invalid length. [ 426.627238][T10775] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1629'. [ 426.653327][T10779] netlink: 'syz.2.1630': attribute type 28 has an invalid length. [ 426.687028][T10779] netlink: 'syz.2.1630': attribute type 29 has an invalid length. [ 426.705314][T10779] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1630'. [ 427.231810][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1632'. [ 427.810775][ T5769] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 428.552927][ T5769] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 429.504561][ T5769] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 430.149067][ T5769] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 430.443364][ T5769] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 431.439020][T10838] netlink: 'syz.2.1653': attribute type 21 has an invalid length. [ 431.464472][T10839] netlink: 'syz.3.1652': attribute type 28 has an invalid length. [ 431.479705][T10838] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1653'. [ 431.489873][ T6595] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 431.501054][T10839] netlink: 'syz.3.1652': attribute type 29 has an invalid length. [ 431.512345][T10839] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1652'. [ 434.484513][T10846] ------------[ cut here ]------------ [ 434.490150][T10846] WARNING: CPU: 0 PID: 10846 at kernel/events/core.c:6806 perf_pending_task+0x35c/0x470 [ 434.500061][T10846] Modules linked in: [ 434.504027][T10846] CPU: 0 PID: 10846 Comm: syz.3.1652 Not tainted syzkaller #0 [ 434.511807][T10846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 434.521996][T10846] RIP: 0010:perf_pending_task+0x35c/0x470 [ 434.528519][T10846] Code: ff 84 db 75 14 e8 d4 df d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 df d5 ff e8 2b 68 4f ff eb e5 e8 b4 df d5 ff <0f> 0b e9 f3 fe ff ff e8 a8 df d5 ff 48 c7 c7 b0 f2 1c 8d 4c 89 f6 [ 434.548385][T10846] RSP: 0018:ffffc900043c79c0 EFLAGS: 00010293 [ 434.554490][T10846] RAX: ffffffff81b1355c RBX: ffff88802805a2e0 RCX: ffff88807a013c00 [ 434.562685][T10846] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 434.571030][T10846] RBP: 0000000000000001 R08: ffffffff8e8adeaf R09: 1ffffffff1d15bd5 [ 434.579205][T10846] R10: dffffc0000000000 R11: fffffbfff1d15bd6 R12: ffff88807a013c00 [ 434.587395][T10846] R13: ffff88802506b530 R14: ffff88802805a0a0 R15: 1ffff1100500b414 [ 434.595489][T10846] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 434.604602][T10846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.611387][T10846] CR2: 00007f2185638f7d CR3: 00000000385f3000 CR4: 00000000003506f0 [ 434.619493][T10846] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 434.627788][T10846] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 434.635812][T10846] Call Trace: [ 434.639731][T10846] [ 434.642713][T10846] task_work_run+0x1d4/0x260 [ 434.647999][T10846] ? task_work_cancel+0x220/0x220 [ 434.653089][T10846] do_exit+0x95a/0x2460 [ 434.657410][T10846] ? get_signal+0x1068/0x13f0 [ 434.662122][T10846] ? put_task_struct+0xc0/0xc0 [ 434.667025][T10846] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 434.673380][T10846] ? lock_chain_count+0x20/0x20 [ 434.678429][T10846] ? _raw_spin_lock_irq+0xbb/0xf0 [ 434.683518][T10846] do_group_exit+0x21b/0x2d0 [ 434.688301][T10846] ? lockdep_hardirqs_on+0x98/0x150 [ 434.693550][T10846] get_signal+0x12fc/0x13f0 [ 434.698505][T10846] arch_do_signal_or_restart+0xc2/0x800 [ 434.704107][T10846] ? lock_chain_count+0x20/0x20 [ 434.709188][T10846] ? get_sigframe_size+0x20/0x20 [ 434.714199][T10846] exit_to_user_mode_loop+0x70/0x110 [ 434.719651][T10846] exit_to_user_mode_prepare+0xee/0x180 [ 434.725252][T10846] syscall_exit_to_user_mode+0x1a/0x50 [ 434.730961][T10846] do_syscall_64+0x61/0xa0 [ 434.735451][T10846] ? clear_bhb_loop+0x40/0x90 [ 434.740291][T10846] ? clear_bhb_loop+0x40/0x90 [ 434.745105][T10846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.751158][T10846] RIP: 0033:0x7ffa9d59c799 [ 434.755609][T10846] Code: Unable to access opcode bytes at 0x7ffa9d59c76f. [ 434.762804][T10846] RSP: 002b:00007ffa9e4760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 434.771602][T10846] RAX: fffffffffffffe00 RBX: 00007ffa9d816098 RCX: 00007ffa9d59c799 [ 434.780020][T10846] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffa9d816098 [ 434.788157][T10846] RBP: 00007ffa9d816090 R08: 0000000000000000 R09: 0000000000000000 [ 434.796166][T10846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.804321][T10846] R13: 00007ffa9d816128 R14: 00007ffec1c9d9b0 R15: 00007ffec1c9da98 [ 434.812443][T10846] [ 434.815485][T10846] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 434.822797][T10846] CPU: 0 PID: 10846 Comm: syz.3.1652 Not tainted syzkaller #0 [ 434.830277][T10846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 434.840721][T10846] Call Trace: [ 434.844014][T10846] [ 434.846961][T10846] dump_stack_lvl+0x18c/0x250 [ 434.851691][T10846] ? show_regs_print_info+0x20/0x20 [ 434.856940][T10846] ? load_image+0x400/0x400 [ 434.861505][T10846] panic+0x2dc/0x730 [ 434.865426][T10846] ? bpf_jit_dump+0xd0/0xd0 [ 434.869956][T10846] __warn+0x2e0/0x470 [ 434.873944][T10846] ? perf_pending_task+0x35c/0x470 [ 434.879065][T10846] ? perf_pending_task+0x35c/0x470 [ 434.884174][T10846] report_bug+0x2be/0x4f0 [ 434.888508][T10846] ? perf_pending_task+0x35c/0x470 [ 434.893628][T10846] ? perf_pending_task+0x35c/0x470 [ 434.898736][T10846] ? perf_pending_task+0x35e/0x470 [ 434.903841][T10846] handle_bug+0xcf/0x120 [ 434.908081][T10846] exc_invalid_op+0x1a/0x50 [ 434.912580][T10846] asm_exc_invalid_op+0x1a/0x20 [ 434.917420][T10846] RIP: 0010:perf_pending_task+0x35c/0x470 [ 434.923486][T10846] Code: ff 84 db 75 14 e8 d4 df d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 df d5 ff e8 2b 68 4f ff eb e5 e8 b4 df d5 ff <0f> 0b e9 f3 fe ff ff e8 a8 df d5 ff 48 c7 c7 b0 f2 1c 8d 4c 89 f6 [ 434.943083][T10846] RSP: 0018:ffffc900043c79c0 EFLAGS: 00010293 [ 434.949176][T10846] RAX: ffffffff81b1355c RBX: ffff88802805a2e0 RCX: ffff88807a013c00 [ 434.957140][T10846] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 434.965101][T10846] RBP: 0000000000000001 R08: ffffffff8e8adeaf R09: 1ffffffff1d15bd5 [ 434.973065][T10846] R10: dffffc0000000000 R11: fffffbfff1d15bd6 R12: ffff88807a013c00 [ 434.981114][T10846] R13: ffff88802506b530 R14: ffff88802805a0a0 R15: 1ffff1100500b414 [ 434.989085][T10846] ? perf_pending_task+0x35c/0x470 [ 434.994211][T10846] task_work_run+0x1d4/0x260 [ 434.998801][T10846] ? task_work_cancel+0x220/0x220 [ 435.003825][T10846] do_exit+0x95a/0x2460 [ 435.007982][T10846] ? get_signal+0x1068/0x13f0 [ 435.012677][T10846] ? put_task_struct+0xc0/0xc0 [ 435.017439][T10846] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 435.023460][T10846] ? lock_chain_count+0x20/0x20 [ 435.028311][T10846] ? _raw_spin_lock_irq+0xbb/0xf0 [ 435.033333][T10846] do_group_exit+0x21b/0x2d0 [ 435.038026][T10846] ? lockdep_hardirqs_on+0x98/0x150 [ 435.043217][T10846] get_signal+0x12fc/0x13f0 [ 435.047753][T10846] arch_do_signal_or_restart+0xc2/0x800 [ 435.053295][T10846] ? lock_chain_count+0x20/0x20 [ 435.058230][T10846] ? get_sigframe_size+0x20/0x20 [ 435.063177][T10846] exit_to_user_mode_loop+0x70/0x110 [ 435.068496][T10846] exit_to_user_mode_prepare+0xee/0x180 [ 435.074070][T10846] syscall_exit_to_user_mode+0x1a/0x50 [ 435.079821][T10846] do_syscall_64+0x61/0xa0 [ 435.084247][T10846] ? clear_bhb_loop+0x40/0x90 [ 435.088921][T10846] ? clear_bhb_loop+0x40/0x90 [ 435.093588][T10846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.099473][T10846] RIP: 0033:0x7ffa9d59c799 [ 435.103879][T10846] Code: Unable to access opcode bytes at 0x7ffa9d59c76f. [ 435.110911][T10846] RSP: 002b:00007ffa9e4760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 435.119354][T10846] RAX: fffffffffffffe00 RBX: 00007ffa9d816098 RCX: 00007ffa9d59c799 [ 435.127767][T10846] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffa9d816098 [ 435.135924][T10846] RBP: 00007ffa9d816090 R08: 0000000000000000 R09: 0000000000000000 [ 435.143979][T10846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.152001][T10846] R13: 00007ffa9d816128 R14: 00007ffec1c9d9b0 R15: 00007ffec1c9da98 [ 435.159996][T10846] [ 435.163360][T10846] Kernel Offset: disabled [ 435.167797][T10846] Rebooting in 86400 seconds..