last executing test programs: 5.47543277s ago: executing program 3 (id=4160): socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{0x6, 0x3, 0xa}, {0x5, 0x5, 0x7}, {0x5, 0x24, 0x6}, {0x7, 0x0, 0x2}, {0xa, 0x8000, 0x5}, {0xf, 0x5, 0xf}, {0xb, 0x1, 0x1}, {0x7, 0x3, 0xe}]}]}}, 0x0, 0x86, 0x0, 0x0, 0x1ff}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40086602, &(0x7f0000000780)='S\x931r\x858 ;s\xc2\xd8\xf5E$?kT\xfdH(\x81Y\xbe\xe4\xdc\xf4\x99^\x14\f|\xa7\x8c&\xc4MA\r\xf8\xfe\xd2\xeb\xde \xc0\x1e\x9eN\xb9`\xa3a\']\xf0\xb2\xc91\xea\x9d\xfd\x16B\xc3\xe2\x8e\xa4\x86!\xdb\x13\xdah\xcd\xdbg\x15N_\xe8\xc8\x11\x9c\xe3\xa2\xa4[\xe0\xb5x\xc6\x92\xde\x00^(\xecn\xe5:( \xc7UQT\xd1-\xcc\xb2_\xaa\xca\xba\xa2W\x15\xc5\x03\xe5|,\x8b\x14\x00\xcc6\x000\xa1\x03\x888V\xfem\xba\x1b\xc6\xd8\xf4\xc2##4\x99\xfa*Ep\x7f\xca\x8b\x89@\xb4\x85\x1e\xadW\xde\xba\xdf\xe6\x7f\x80k\xfeL^\xf9\xd7\xa5\xd3\xf1\xed)Wne\x04\xa4\xdbq\x1d\x86\'3\xf0\xe0\xdf\xea\xb3T\'\x02\x00E\xcdT[N\xcbLW\x00\x89\xee\xd2a\x89\x9ax0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 4.209552542s ago: executing program 2 (id=4165): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31116b876c1d0000007ea60864160af36514003dc00800020007000200050007c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.021925072s ago: executing program 3 (id=4166): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x200000000000003, 0x106) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) r8 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000540), 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140e90003600e41b0000900ac00060011000000a4000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000d", 0xbc}], 0x1}, 0x0) r10 = syz_clone(0x10002400, &(0x7f00000003c0), 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000740)="b9a66e6c0fcb9fa99bf7036a555262eece78a5de5b5335b2831cf71bb08418af346c6fe659ae0a3d2666e8d65e861b244e8a283cc430f1dda60b9651626ffa474b17f5c3f6871e07324948436818a63c93af7e40a4cd86d6d47fda08682a826f4b7c24b0aa0851c28a5627ffc26288b40f927c7f1c8a38") syz_open_procfs$namespace(r10, &(0x7f0000000480)='ns/pid\x00') sendmsg$unix(r3, &(0x7f00000006c0)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000001c0)="fea701d0ac31240598e32914c1a92e9e2376c7bc8a5c002e31e18981fadca638d0b40276e4bde4552abb78d04a2a891efa557c211bf68245e9b789749db385aadc95d48c5ad27c22b10ac5d42e89186fcdfee3c9a8d48485b3febebf9c9ec4ef4a588cc5c8073744e49b92e031cbd33b66d495b35bb2abd8b38c90a387198d80cf3a0160cf8fa839896c5971f994617f3b2b26c59803a20c2f77b319fe5069", 0x9f}, {&(0x7f0000000280)="a45d04fd741f280d7b2948209927daf433e1342824afae6e2974a72ec720eeb18508f4a2682ef7ca42a61edec6135d5d9ba8b44b6b9a0e", 0x37}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000400000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r8, @ANYRES32=r2, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x20000009}, 0x40000) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x3, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x6, 0x8, 0x7, 0x2, 0x0, 0x1, 0x8c90, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x800}, 0x200, 0xfffffffffffffff7, 0x6, 0x7, 0xbe, 0xfffffffe, 0x6, 0x0, 0x7, 0x0, 0x80000001}, r10, 0xe, 0xffffffffffffffff, 0x18) setsockopt$sock_attach_bpf(r1, 0x0, 0x19, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) 3.805361632s ago: executing program 2 (id=4167): socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000004000000000000000000000300000000030000000100000000000000000000000000000d00000000020000000100000f02000000020000000001003923000000000000000f02000000921c00006100"], &(0x7f00000006c0)=""/196, 0x68, 0xc4, 0x1}, 0x28) close(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r3 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000a40)={0x0, 0x4000, &(0x7f0000000100)=[{&(0x7f0000000c00)="5c0000001a006bab9a3fe3d8457f0bd2bf6e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00193107e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb45601d8ad2330e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) ioctl$SIOCSIFHWADDR(r7, 0x541b, &(0x7f0000000180)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000240)=""/80, 0x50}, {&(0x7f00000001c0)=""/27, 0x1b}], 0x3}, 0x40000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfe1b) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x11, 0x0, &(0x7f0000000000)="df", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x50) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b) 3.2361613s ago: executing program 3 (id=4171): r0 = socket$kcm(0xa, 0x922000000003, 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000600)={r1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, 0x0, &(0x7f0000000000)=""/6, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) 2.683566037s ago: executing program 3 (id=4174): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x1000003, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 2.658608598s ago: executing program 0 (id=4175): recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000100) r0 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)="16", 0x1}], 0x1}, 0x0) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1e, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}, 0x2204, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12986}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff12142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x2, &(0x7f0000000000), 0x4) 2.465373378s ago: executing program 2 (id=4176): socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb", 0xa2}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001500)="1400000010003507d25a806f8c6394f90324fc60bb85bd965a58c3dcaa8421ce02d868d47d8601a6081e793675e27f26a86727dcb6c74c1ed33ab8572645b81f02bdd4465ec9cadec6f040bbfeaa011b2fe3e3513489c93898be08ba9cbd53363af04cf3e6021aac15e63dca17d20dfca7bd9a9a8ff7d2a5dcad7521fb45271a595035b8f5a673c667bbf05812b6902bceacdafa9a0c189fe0beaec19127a64bc926e9dd89b34490779d475c375ac63819dfb50ba52b71d5610544b924b8ac4e07513701f5ab6737", 0xc8}], 0x1}, 0x40810) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2c, 0x0, 0xffffffffffffff61}, 0x40) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) close(r1) close(0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000080)="5c00000024006bab9e3fe3d86e17aa31076b876c1d0000007ea60864160af36504001a00380005008f0ca0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x81, '\x00', 0x0, r5, 0x3, 0x2, 0x1}, 0x50) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x30, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.464146698s ago: executing program 1 (id=4186): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af0b"], 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.436586199s ago: executing program 4 (id=4177): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000380)=@hci={0x1f, 0x5965, 0x31}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)="c2e512c476edbf", 0x7}], 0x1}, 0x20000000) 2.256806869s ago: executing program 0 (id=4178): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x6}, 0x100021, 0x7fff, 0x1, 0x6, 0x1, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) socket$kcm(0x29, 0xf, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000002}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f0300000000000003763022fafe4eba0d0000009ee5010000000100000052a705250e6182949a3651f60a84c9f5d1938037e786a6d4bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040044) close(r0) r3 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8a06, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x3, 0x7, 0xffffffff, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0xb, 0x0, &(0x7f0000000740)="00800000000000000045a9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf}, 0x50) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r7, r8, 0x0, r9}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0x1ff, 0x3}, 0x50) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31116b876c1d0000007ea60864160af36514003dc00800020007000200050007c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.204499481s ago: executing program 4 (id=4179): socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{0x6, 0x3, 0xa}, {0x5, 0x5, 0x7}, {0x5, 0x24, 0x6}, {0x7, 0x0, 0x2}, {0xa, 0x8000, 0x5}, {0xf, 0x5, 0xf}, {0xb, 0x1, 0x1}, {0x7, 0x3, 0xe}]}]}}, 0x0, 0x86, 0x0, 0x0, 0x1ff}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40086602, &(0x7f0000000780)='S\x931r\x858 ;s\xc2\xd8\xf5E$?kT\xfdH(\x81Y\xbe\xe4\xdc\xf4\x99^\x14\f|\xa7\x8c&\xc4MA\r\xf8\xfe\xd2\xeb\xde \xc0\x1e\x9eN\xb9`\xa3a\']\xf0\xb2\xc91\xea\x9d\xfd\x16B\xc3\xe2\x8e\xa4\x86!\xdb\x13\xdah\xcd\xdbg\x15N_\xe8\xc8\x11\x9c\xe3\xa2\xa4[\xe0\xb5x\xc6\x92\xde\x00^(\xecn\xe5:( \xc7UQT\xd1-\xcc\xb2_\xaa\xca\xba\xa2W\x15\xc5\x03\xe5|,\x8b\x14\x00\xcc6\x000\xa1\x03\x888V\xfem\xba\x1b\xc6\xd8\xf4\xc2##4\x99\xfa*Ep\x7f\xca\x8b\x89@\xb4\x85\x1e\xadW\xde\xba\xdf\xe6\x7f\x80k\xfeL^\xf9\xd7\xa5\xd3\xf1\xed)Wne\x04\xa4\xdbq\x1d\x86\'3\xf0\xe0\xdf\xea\xb3T\'\x02\x00E\xcdT[N\xcbLW\x00\x89\xee\xd2a\x89\x9ax0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x21, 0x2, 0x2) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbe1f630e90984d35c94b5350d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000) recvmsg$kcm(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2000) recvmsg$kcm(r8, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f00000008c0)=""/261, 0x105}, {&(0x7f0000003140)=""/4050, 0xfd2}, {&(0x7f00000014c0)=""/260, 0x104}, {&(0x7f0000000400)=""/183, 0xb7}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f0000000e80)=""/261, 0x105}, {&(0x7f0000000e40)=""/21, 0x15}, {&(0x7f0000000bc0)=""/76, 0x4c}, {&(0x7f00000006c0)=""/180, 0xb4}, {&(0x7f00000005c0)=""/158, 0x9e}, {&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000680)=""/59, 0x3b}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000b00)=""/170, 0xaa}, {&(0x7f0000000d00)=""/242, 0xf2}], 0x11}, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x24004000) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) ioctl$TUNSETFILTEREBPF(r0, 0xb702, 0x0) 1.553241374s ago: executing program 3 (id=4182): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x200000000000003, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000540), 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140e90003600e41b0000900ac00060011000000a4000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000d", 0xbc}], 0x1}, 0x0) r5 = syz_clone(0x10002400, &(0x7f00000003c0), 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000740)="b9a66e6c0fcb9fa99bf7036a555262eece78a5de5b5335b2831cf71bb08418af346c6fe659ae0a3d2666e8d65e861b244e8a283cc430f1dda60b9651626ffa474b17f5c3f6871e07324948436818a63c93af7e40a4cd86d6d47fda08682a826f4b7c24b0aa0851c28a5627ffc26288b40f927c7f1c8a38") syz_open_procfs$namespace(r5, &(0x7f0000000480)='ns/pid\x00') r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x3, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x6, 0x8, 0x7, 0x2, 0x0, 0x1, 0x8c90, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x800}, 0x200, 0xfffffffffffffff7, 0x6, 0x7, 0xbe, 0xfffffffe, 0x6, 0x0, 0x7, 0x0, 0x80000001}, r5, 0xe, 0xffffffffffffffff, 0x18) setsockopt$sock_attach_bpf(r1, 0x0, 0x19, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) 1.509713135s ago: executing program 0 (id=4183): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x1002, &(0x7f0000002500)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x44158da76e7279b0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) socket$kcm(0x29, 0x0, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r0], 0x9a) (async) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r0], 0x9a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r6, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0, 0x62, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex=r8, 0xb, 0x0, 0x7, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex=r8, 0xb, 0x0, 0x7, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0]}, 0x40) 1.40874638s ago: executing program 4 (id=4184): r0 = socket$kcm(0xa, 0x922000000003, 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000600)={r1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, 0x0, &(0x7f0000000000)=""/6, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) 987.342431ms ago: executing program 3 (id=4185): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af0b"], 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 986.373131ms ago: executing program 1 (id=4196): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 834.667699ms ago: executing program 4 (id=4187): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4c}, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="070000004b8208973129d602430400000000000000000100080028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x12, 0x0, 0x0) 833.564668ms ago: executing program 0 (id=4198): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00', 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f0000000700), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x2000000000000063, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff0000000000000000850000004100000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) close(r2) r3 = socket$kcm(0xa, 0x922000000003, 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1900000004000000040000000200"], 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000010000850000007d000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000600)={r5}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x8081, 0x0, 0x9, 0x0, 0x3, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x7400}, 0x4050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f9, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000041296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) 763.574972ms ago: executing program 2 (id=4188): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c012, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5ae) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000000}, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e0a7875f80e000000400002007a17d34460bc24eab556a705251e6182949a", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x2100, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) write$cgroup_int(r7, &(0x7f0000000040), 0x1) 693.238566ms ago: executing program 1 (id=4189): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000d000000cd", @ANYRES32, @ANYBLOB="00e28e0ab5aab8b8df66418a62afc4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce6207"], 0xfe1b) socket$kcm(0xf, 0x3, 0x2) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000100)=""/20, 0x14}], 0x2, &(0x7f0000000380)=""/193, 0xc1}, 0x40000064) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90d24fc", 0x13}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x28) socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x3d9}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 536.355583ms ago: executing program 4 (id=4190): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000380)=@hci={0x1f, 0x5965, 0x31}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)="c2e512c476edbf", 0x7}], 0x1}, 0x20000000) 192.58197ms ago: executing program 2 (id=4191): socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{0x6, 0x3, 0xa}, {0x5, 0x5, 0x7}, {0x5, 0x24, 0x6}, {0x7, 0x0, 0x2}, {0xa, 0x8000, 0x5}, {0xf, 0x5, 0xf}, {0xb, 0x1, 0x1}, {0x7, 0x3, 0xe}]}]}}, 0x0, 0x86, 0x0, 0x0, 0x1ff}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40086602, &(0x7f0000000780)='S\x931r\x858 ;s\xc2\xd8\xf5E$?kT\xfdH(\x81Y\xbe\xe4\xdc\xf4\x99^\x14\f|\xa7\x8c&\xc4MA\r\xf8\xfe\xd2\xeb\xde \xc0\x1e\x9eN\xb9`\xa3a\']\xf0\xb2\xc91\xea\x9d\xfd\x16B\xc3\xe2\x8e\xa4\x86!\xdb\x13\xdah\xcd\xdbg\x15N_\xe8\xc8\x11\x9c\xe3\xa2\xa4[\xe0\xb5x\xc6\x92\xde\x00^(\xecn\xe5:( \xc7UQT\xd1-\xcc\xb2_\xaa\xca\xba\xa2W\x15\xc5\x03\xe5|,\x8b\x14\x00\xcc6\x000\xa1\x03\x888V\xfem\xba\x1b\xc6\xd8\xf4\xc2##4\x99\xfa*Ep\x7f\xca\x8b\x89@\xb4\x85\x1e\xadW\xde\xba\xdf\xe6\x7f\x80k\xfeL^\xf9\xd7\xa5\xd3\xf1\xed)Wne\x04\xa4\xdbq\x1d\x86\'3\xf0\xe0\xdf\xea\xb3T\'\x02\x00E\xcdT[N\xcbLW\x00\x89\xee\xd2a\x89\x9ax0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0xb, 0x0, &(0x7f0000000740)="00800000000000000045a9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf}, 0x50) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r7, r8, 0x0, r9}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31116b876c1d0000007ea60864160af36514003dc00800020007000200050007c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 169.367501ms ago: executing program 4 (id=4193): socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000003f9010001"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}, 0x2160) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x98240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x80000005, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000002c0)='{:#%*\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0xc00, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x9f, &(0x7f00000001c0)=""/159, 0x0, 0x0, '\x00', r6}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 0s ago: executing program 0 (id=4194): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) kernel console output (not intermixed with test programs): [ 783.070778][T15743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.091030][T15743] RSP: 002b:00007fa62a143028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.099488][T15743] RAX: ffffffffffffffda RBX: 00007fa629415fa0 RCX: 00007fa62919c799 [ 783.107514][T15743] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 783.115682][T15743] RBP: 00007fa62a143090 R08: 0000000000000000 R09: 0000000000000000 [ 783.123663][T15743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.131999][T15743] R13: 00007fa629416038 R14: 00007fa629415fa0 R15: 00007ffde1338938 [ 783.140257][T15743] [ 783.724383][T15767] FAULT_INJECTION: forcing a failure. [ 783.724383][T15767] name failslab, interval 1, probability 0, space 0, times 0 [ 783.814895][T15767] CPU: 0 PID: 15767 Comm: syz.0.3513 Not tainted syzkaller #0 [ 783.822514][T15767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 783.833140][T15767] Call Trace: [ 783.836450][T15767] [ 783.839513][T15767] dump_stack_lvl+0x188/0x24e [ 783.844252][T15767] ? show_regs_print_info+0x12/0x12 [ 783.849496][T15767] ? load_image+0x400/0x400 [ 783.854116][T15767] ? __might_sleep+0xd0/0xd0 [ 783.858838][T15767] ? __lock_acquire+0x7d10/0x7d10 [ 783.864100][T15767] should_fail_ex+0x399/0x4d0 [ 783.868908][T15767] should_failslab+0x5/0x20 [ 783.873684][T15767] slab_pre_alloc_hook+0x59/0x310 [ 783.878986][T15767] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 783.884838][T15767] __kmem_cache_alloc_node+0x4f/0x260 [ 783.890336][T15767] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 783.896280][T15767] __kmalloc+0xa0/0x240 [ 783.900475][T15767] tomoyo_realpath_from_path+0xdf/0x5d0 [ 783.906072][T15767] ? tomoyo_path_number_perm+0x205/0x650 [ 783.911935][T15767] tomoyo_path_number_perm+0x22f/0x650 [ 783.919020][T15767] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 783.926696][T15767] ? ksys_write+0x1c0/0x250 [ 783.931414][T15767] ? common_file_perm+0x171/0x1c0 [ 783.936522][T15767] ? __fget_files+0x28/0x4b0 [ 783.941140][T15767] ? __fget_files+0x28/0x4b0 [ 783.945765][T15767] security_file_ioctl+0x6c/0xa0 [ 783.950817][T15767] __se_sys_ioctl+0x48/0x170 [ 783.955533][T15767] do_syscall_64+0x4c/0xa0 [ 783.959984][T15767] ? clear_bhb_loop+0x60/0xb0 [ 783.964946][T15767] ? clear_bhb_loop+0x60/0xb0 [ 783.969751][T15767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 783.975681][T15767] RIP: 0033:0x7f258a19c799 [ 783.980272][T15767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.000608][T15767] RSP: 002b:00007f258af73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.009061][T15767] RAX: ffffffffffffffda RBX: 00007f258a416090 RCX: 00007f258a19c799 [ 784.017408][T15767] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000c [ 784.025410][T15767] RBP: 00007f258af73090 R08: 0000000000000000 R09: 0000000000000000 [ 784.033677][T15767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.042301][T15767] R13: 00007f258a416128 R14: 00007f258a416090 R15: 00007fff5666e108 [ 784.050509][T15767] [ 784.154778][T15767] ERROR: Out of memory at tomoyo_realpath_from_path. [ 784.266059][T15777] netlink: 'syz.4.3518': attribute type 10 has an invalid length. [ 784.285064][T15777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3518'. [ 784.328773][T15777] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 784.695487][T15785] FAULT_INJECTION: forcing a failure. [ 784.695487][T15785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.834725][T15785] CPU: 1 PID: 15785 Comm: syz.0.3521 Not tainted syzkaller #0 [ 784.842696][T15785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 784.853573][T15785] Call Trace: [ 784.857236][T15785] [ 784.860445][T15785] dump_stack_lvl+0x188/0x24e [ 784.865452][T15785] ? show_regs_print_info+0x12/0x12 [ 784.871335][T15785] ? load_image+0x400/0x400 [ 784.876063][T15785] ? __lock_acquire+0x7d10/0x7d10 [ 784.881414][T15785] should_fail_ex+0x399/0x4d0 [ 784.886632][T15785] _copy_from_user+0x2c/0x170 [ 784.891421][T15785] perf_copy_attr+0x174/0x850 [ 784.896271][T15785] __se_sys_perf_event_open+0xf5/0x1ec0 [ 784.902218][T15785] ? __fget_files+0x43d/0x4b0 [ 784.906933][T15785] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 784.912780][T15785] ? lockdep_hardirqs_on+0x94/0x140 [ 784.918163][T15785] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 784.924001][T15785] do_syscall_64+0x4c/0xa0 [ 784.928615][T15785] ? clear_bhb_loop+0x60/0xb0 [ 784.933609][T15785] ? clear_bhb_loop+0x60/0xb0 [ 784.938320][T15785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 784.944257][T15785] RIP: 0033:0x7f258a19c799 [ 784.948874][T15785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.969491][T15785] RSP: 002b:00007f258af94028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 784.978107][T15785] RAX: ffffffffffffffda RBX: 00007f258a415fa0 RCX: 00007f258a19c799 [ 784.986555][T15785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 784.994753][T15785] RBP: 00007f258af94090 R08: 0000000000000000 R09: 0000000000000000 [ 785.003194][T15785] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 785.011269][T15785] R13: 00007f258a416038 R14: 00007f258a415fa0 R15: 00007fff5666e108 [ 785.019457][T15785] [ 785.194168][T13518] Bluetooth: hci5: unexpected subevent 0x0a length: 150 > 30 [ 785.274108][T15791] netlink: 'syz.2.3524': attribute type 3 has an invalid length. [ 785.285384][T15791] netlink: 163968 bytes leftover after parsing attributes in process `syz.2.3524'. [ 785.323735][T15791] netlink: 'syz.2.3524': attribute type 10 has an invalid length. [ 785.578399][T15791] device wg1 entered promiscuous mode [ 785.595626][T15791] team0: Device wg1 is of different type [ 785.815127][T15803] FAULT_INJECTION: forcing a failure. [ 785.815127][T15803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.831653][T15803] CPU: 0 PID: 15803 Comm: syz.4.3527 Not tainted syzkaller #0 [ 785.839518][T15803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 785.849696][T15803] Call Trace: [ 785.853274][T15803] [ 785.856724][T15803] dump_stack_lvl+0x188/0x24e [ 785.861547][T15803] ? show_regs_print_info+0x12/0x12 [ 785.867215][T15803] ? load_image+0x400/0x400 [ 785.872019][T15803] ? __lock_acquire+0x7d10/0x7d10 [ 785.877451][T15803] should_fail_ex+0x399/0x4d0 [ 785.882162][T15803] _copy_from_user+0x2c/0x170 [ 785.886991][T15803] ___sys_sendmsg+0x1c3/0x360 [ 785.891712][T15803] ? __sys_sendmsg+0x290/0x290 [ 785.896623][T15803] __se_sys_sendmsg+0x1bb/0x2a0 [ 785.901662][T15803] ? __x64_sys_sendmsg+0x80/0x80 [ 785.907131][T15803] ? lockdep_hardirqs_on+0x94/0x140 [ 785.912444][T15803] do_syscall_64+0x4c/0xa0 [ 785.916948][T15803] ? clear_bhb_loop+0x60/0xb0 [ 785.921806][T15803] ? clear_bhb_loop+0x60/0xb0 [ 785.926494][T15803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.932568][T15803] RIP: 0033:0x7fa62919c799 [ 785.937171][T15803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.957936][T15803] RSP: 002b:00007fa62a122028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.966886][T15803] RAX: ffffffffffffffda RBX: 00007fa629416090 RCX: 00007fa62919c799 [ 785.975319][T15803] RDX: 0000000000040040 RSI: 00002000000003c0 RDI: 0000000000000007 [ 785.983697][T15803] RBP: 00007fa62a122090 R08: 0000000000000000 R09: 0000000000000000 [ 785.991771][T15803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.999769][T15803] R13: 00007fa629416128 R14: 00007fa629416090 R15: 00007ffde1338938 [ 786.007938][T15803] [ 786.448546][T15819] IPv6: Can't replace route, no match found [ 786.499869][T15819] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 786.605909][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3532'. [ 786.705095][T15825] netlink: 'syz.0.3534': attribute type 10 has an invalid length. [ 786.754756][T15825] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3534'. [ 786.896279][T15831] IPv6: Can't replace route, no match found [ 786.913384][T15831] FAULT_INJECTION: forcing a failure. [ 786.913384][T15831] name failslab, interval 1, probability 0, space 0, times 0 [ 786.965310][T15832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3536'. [ 786.976588][T15831] CPU: 1 PID: 15831 Comm: syz.4.3536 Not tainted syzkaller #0 [ 786.985149][T15831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 786.995518][T15831] Call Trace: [ 786.998816][T15831] [ 787.001785][T15831] dump_stack_lvl+0x188/0x24e [ 787.006867][T15831] ? show_regs_print_info+0x12/0x12 [ 787.012194][T15831] ? load_image+0x400/0x400 [ 787.016920][T15831] ? __might_sleep+0xd0/0xd0 [ 787.021763][T15831] ? __lock_acquire+0x7d10/0x7d10 [ 787.026956][T15831] should_fail_ex+0x399/0x4d0 [ 787.031859][T15831] should_failslab+0x5/0x20 [ 787.032701][T15835] IPv6: Can't replace route, no match found [ 787.036496][T15831] slab_pre_alloc_hook+0x59/0x310 [ 787.036539][T15831] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 787.036565][T15831] __kmem_cache_alloc_node+0x4f/0x260 [ 787.036587][T15831] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 787.036608][T15831] __kmalloc+0xa0/0x240 [ 787.036638][T15831] tomoyo_realpath_from_path+0xdf/0x5d0 [ 787.053063][T15835] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 787.053926][T15831] ? tomoyo_path_number_perm+0x205/0x650 [ 787.053960][T15831] tomoyo_path_number_perm+0x22f/0x650 [ 787.053984][T15831] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 787.054006][T15831] ? ksys_write+0x1c0/0x250 [ 787.054031][T15831] ? common_file_perm+0x171/0x1c0 [ 787.112685][T15831] ? __fget_files+0x28/0x4b0 [ 787.117467][T15831] ? __fget_files+0x28/0x4b0 [ 787.122070][T15831] security_file_ioctl+0x6c/0xa0 [ 787.127220][T15831] __se_sys_ioctl+0x48/0x170 [ 787.131906][T15831] do_syscall_64+0x4c/0xa0 [ 787.136354][T15831] ? clear_bhb_loop+0x60/0xb0 [ 787.141286][T15831] ? clear_bhb_loop+0x60/0xb0 [ 787.145981][T15831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 787.152051][T15831] RIP: 0033:0x7fa62919c799 [ 787.156733][T15831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.176891][T15831] RSP: 002b:00007fa62a143028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 787.185311][T15831] RAX: ffffffffffffffda RBX: 00007fa629415fa0 RCX: 00007fa62919c799 [ 787.193361][T15831] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000005 [ 787.201606][T15831] RBP: 00007fa62a143090 R08: 0000000000000000 R09: 0000000000000000 [ 787.210016][T15831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.217998][T15831] R13: 00007fa629416038 R14: 00007fa629415fa0 R15: 00007ffde1338938 [ 787.226155][T15831] [ 787.244031][ T4277] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 787.268525][T15835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3538'. [ 787.313473][T15831] ERROR: Out of memory at tomoyo_realpath_from_path. [ 787.833561][T15858] FAULT_INJECTION: forcing a failure. [ 787.833561][T15858] name failslab, interval 1, probability 0, space 0, times 0 [ 787.884757][T15858] CPU: 1 PID: 15858 Comm: syz.4.3543 Not tainted syzkaller #0 [ 787.893264][T15858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 787.903531][T15858] Call Trace: [ 787.906844][T15858] [ 787.909862][T15858] dump_stack_lvl+0x188/0x24e [ 787.914768][T15858] ? show_regs_print_info+0x12/0x12 [ 787.920366][T15858] ? load_image+0x400/0x400 [ 787.924909][T15858] ? __might_sleep+0xd0/0xd0 [ 787.929784][T15858] ? __lock_acquire+0x7d10/0x7d10 [ 787.934862][T15858] should_fail_ex+0x399/0x4d0 [ 787.939662][T15858] should_failslab+0x5/0x20 [ 787.944373][T15858] slab_pre_alloc_hook+0x59/0x310 [ 787.949431][T15858] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 787.955378][T15858] __kmem_cache_alloc_node+0x4f/0x260 [ 787.960795][T15858] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 787.966911][T15858] __kmalloc+0xa0/0x240 [ 787.971383][T15858] tomoyo_realpath_from_path+0xdf/0x5d0 [ 787.977256][T15858] ? tomoyo_path_number_perm+0x205/0x650 [ 787.983171][T15858] tomoyo_path_number_perm+0x22f/0x650 [ 787.988944][T15858] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 787.994503][T15858] ? ksys_write+0x1c0/0x250 [ 787.999013][T15858] ? common_file_perm+0x171/0x1c0 [ 788.004055][T15858] ? __fget_files+0x28/0x4b0 [ 788.008739][T15858] ? __fget_files+0x28/0x4b0 [ 788.013601][T15858] security_file_ioctl+0x6c/0xa0 [ 788.018720][T15858] __se_sys_ioctl+0x48/0x170 [ 788.023313][T15858] do_syscall_64+0x4c/0xa0 [ 788.028110][T15858] ? clear_bhb_loop+0x60/0xb0 [ 788.032798][T15858] ? clear_bhb_loop+0x60/0xb0 [ 788.037661][T15858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 788.043558][T15858] RIP: 0033:0x7fa62919c799 [ 788.048145][T15858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.067931][T15858] RSP: 002b:00007fa62a143028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 788.076735][T15858] RAX: ffffffffffffffda RBX: 00007fa629415fa0 RCX: 00007fa62919c799 [ 788.084900][T15858] RDX: 0000000000000000 RSI: 00000000401054d5 RDI: 0000000000000003 [ 788.093257][T15858] RBP: 00007fa62a143090 R08: 0000000000000000 R09: 0000000000000000 [ 788.101670][T15858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.109885][T15858] R13: 00007fa629416038 R14: 00007fa629415fa0 R15: 00007ffde1338938 [ 788.118238][T15858] [ 788.151275][T15858] ERROR: Out of memory at tomoyo_realpath_from_path. [ 788.428690][T15867] netlink: 'syz.4.3549': attribute type 10 has an invalid length. [ 788.442592][T15867] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3549'. [ 788.461362][ T4277] Bluetooth: hci3: ISO packet for unknown connection handle 3078 [ 788.467537][T15867] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 788.496728][T15868] IPv6: Can't replace route, no match found [ 788.503248][T15866] netlink: 'syz.3.3548': attribute type 22 has an invalid length. [ 788.512004][T15866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3548'. [ 788.604066][T15871] netlink: 15175 bytes leftover after parsing attributes in process `syz.2.3551'. [ 788.657496][ T4277] Bluetooth: hci5: Malformed LE Event: 0x0b [ 788.840585][T15883] FAULT_INJECTION: forcing a failure. [ 788.840585][T15883] name failslab, interval 1, probability 0, space 0, times 0 [ 788.883313][T15883] CPU: 0 PID: 15883 Comm: syz.2.3554 Not tainted syzkaller #0 [ 788.891185][T15883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 788.901622][T15883] Call Trace: [ 788.904907][T15883] [ 788.907841][T15883] dump_stack_lvl+0x188/0x24e [ 788.912701][T15883] ? show_regs_print_info+0x12/0x12 [ 788.917985][T15883] ? load_image+0x400/0x400 [ 788.922726][T15883] ? __might_sleep+0xd0/0xd0 [ 788.927346][T15883] ? __lock_acquire+0x7d10/0x7d10 [ 788.932491][T15883] should_fail_ex+0x399/0x4d0 [ 788.937350][T15883] should_failslab+0x5/0x20 [ 788.942051][T15883] slab_pre_alloc_hook+0x59/0x310 [ 788.947166][T15883] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 788.952904][T15883] __kmem_cache_alloc_node+0x4f/0x260 [ 788.958425][T15883] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 788.964693][T15883] __kmalloc+0xa0/0x240 [ 788.969113][T15883] tomoyo_realpath_from_path+0xdf/0x5d0 [ 788.975020][T15883] ? tomoyo_path_number_perm+0x205/0x650 [ 788.981087][T15883] tomoyo_path_number_perm+0x22f/0x650 [ 788.986561][T15883] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 788.992114][T15883] ? ktime_get+0x7b/0x270 [ 788.996444][T15883] ? ktime_get+0x7b/0x270 [ 789.000818][T15883] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 789.007078][T15883] ? __fget_files+0x28/0x4b0 [ 789.011934][T15883] ? __fget_files+0x28/0x4b0 [ 789.016718][T15883] security_file_ioctl+0x6c/0xa0 [ 789.021855][T15883] __se_sys_ioctl+0x48/0x170 [ 789.026532][T15883] do_syscall_64+0x4c/0xa0 [ 789.031068][T15883] ? clear_bhb_loop+0x60/0xb0 [ 789.035923][T15883] ? clear_bhb_loop+0x60/0xb0 [ 789.040689][T15883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 789.046590][T15883] RIP: 0033:0x7f552639c799 [ 789.051005][T15883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.071392][T15883] RSP: 002b:00007f552721e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 789.080027][T15883] RAX: ffffffffffffffda RBX: 00007f5526615fa0 RCX: 00007f552639c799 [ 789.088387][T15883] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002d [ 789.096702][T15883] RBP: 00007f552721e090 R08: 0000000000000000 R09: 0000000000000000 [ 789.104965][T15883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.113037][T15883] R13: 00007f5526616038 R14: 00007f5526615fa0 R15: 00007fff0ad55748 [ 789.121281][T15883] [ 789.135573][T15883] ERROR: Out of memory at tomoyo_realpath_from_path. [ 789.718822][T15901] FAULT_INJECTION: forcing a failure. [ 789.718822][T15901] name failslab, interval 1, probability 0, space 0, times 0 [ 789.753400][T15901] CPU: 0 PID: 15901 Comm: syz.3.3562 Not tainted syzkaller #0 [ 789.761566][T15901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 789.771816][T15901] Call Trace: [ 789.775099][T15901] [ 789.778028][T15901] dump_stack_lvl+0x188/0x24e [ 789.782797][T15901] ? show_regs_print_info+0x12/0x12 [ 789.788819][T15901] ? load_image+0x400/0x400 [ 789.793733][T15901] ? __might_sleep+0xd0/0xd0 [ 789.798784][T15901] ? __lock_acquire+0x7d10/0x7d10 [ 789.804123][T15901] should_fail_ex+0x399/0x4d0 [ 789.809340][T15901] should_failslab+0x5/0x20 [ 789.814212][T15901] slab_pre_alloc_hook+0x59/0x310 [ 789.819423][T15901] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 789.825510][T15901] __kmem_cache_alloc_node+0x4f/0x260 [ 789.830991][T15901] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 789.837154][T15901] __kmalloc+0xa0/0x240 [ 789.841409][T15901] tomoyo_realpath_from_path+0xdf/0x5d0 [ 789.847168][T15901] ? tomoyo_path_number_perm+0x205/0x650 [ 789.852920][T15901] tomoyo_path_number_perm+0x22f/0x650 [ 789.858684][T15901] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 789.864147][T15901] ? ksys_write+0x1c0/0x250 [ 789.869010][T15901] ? common_file_perm+0x171/0x1c0 [ 789.874480][T15901] ? __fget_files+0x28/0x4b0 [ 789.879420][T15901] ? __fget_files+0x28/0x4b0 [ 789.884140][T15901] security_file_ioctl+0x6c/0xa0 [ 789.889259][T15901] __se_sys_ioctl+0x48/0x170 [ 789.894035][T15901] do_syscall_64+0x4c/0xa0 [ 789.898711][T15901] ? clear_bhb_loop+0x60/0xb0 [ 789.903392][T15901] ? clear_bhb_loop+0x60/0xb0 [ 789.908341][T15901] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 789.914425][T15901] RIP: 0033:0x7f399459c799 [ 789.918970][T15901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.938845][T15901] RSP: 002b:00007f39953d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 789.947502][T15901] RAX: ffffffffffffffda RBX: 00007f3994815fa0 RCX: 00007f399459c799 [ 789.955644][T15901] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000029 [ 789.963958][T15901] RBP: 00007f39953d7090 R08: 0000000000000000 R09: 0000000000000000 [ 789.972270][T15901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.980443][T15901] R13: 00007f3994816038 R14: 00007f3994815fa0 R15: 00007ffc04efcbb8 [ 789.988519][T15901] [ 790.107067][T15904] netlink: 'syz.4.3563': attribute type 10 has an invalid length. [ 790.126388][T15904] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3563'. [ 790.203584][T15904] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 790.348888][T15901] ERROR: Out of memory at tomoyo_realpath_from_path. [ 790.666731][ T4277] Bluetooth: hci5: Malformed LE Event: 0x0b [ 790.737428][T15920] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3567'. [ 790.833172][T15920] device team_slave_0 left promiscuous mode [ 790.975856][T15926] FAULT_INJECTION: forcing a failure. [ 790.975856][T15926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.022900][T15920] team0: Port device team_slave_0 removed [ 791.043988][T15926] CPU: 0 PID: 15926 Comm: syz.2.3569 Not tainted syzkaller #0 [ 791.051772][T15926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 791.062194][T15926] Call Trace: [ 791.065637][T15926] [ 791.068753][T15926] dump_stack_lvl+0x188/0x24e [ 791.073722][T15926] ? show_regs_print_info+0x12/0x12 [ 791.079024][T15926] ? load_image+0x400/0x400 [ 791.083567][T15926] ? __lock_acquire+0x7d10/0x7d10 [ 791.088940][T15926] should_fail_ex+0x399/0x4d0 [ 791.093815][T15926] _copy_from_user+0x2c/0x170 [ 791.098604][T15926] ___sys_sendmsg+0x1c3/0x360 [ 791.103664][T15926] ? __sys_sendmsg+0x290/0x290 [ 791.108490][T15926] ? __lock_acquire+0x7d10/0x7d10 [ 791.113550][T15926] __se_sys_sendmsg+0x1bb/0x2a0 [ 791.118661][T15926] ? __x64_sys_sendmsg+0x80/0x80 [ 791.123800][T15926] ? lockdep_hardirqs_on+0x94/0x140 [ 791.129017][T15926] do_syscall_64+0x4c/0xa0 [ 791.133483][T15926] ? clear_bhb_loop+0x60/0xb0 [ 791.138440][T15926] ? clear_bhb_loop+0x60/0xb0 [ 791.143315][T15926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.149667][T15926] RIP: 0033:0x7f552639c799 [ 791.154216][T15926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.174217][T15926] RSP: 002b:00007f552721e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 791.182919][T15926] RAX: ffffffffffffffda RBX: 00007f5526615fa0 RCX: 00007f552639c799 [ 791.190998][T15926] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 791.199338][T15926] RBP: 00007f552721e090 R08: 0000000000000000 R09: 0000000000000000 [ 791.207612][T15926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.215774][T15926] R13: 00007f5526616038 R14: 00007f5526615fa0 R15: 00007fff0ad55748 [ 791.223773][T15926] [ 791.243086][T15920] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 791.791897][T15937] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3572'. [ 791.824815][T15937] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 792.015172][T15944] FAULT_INJECTION: forcing a failure. [ 792.015172][T15944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.061118][T15946] netlink: 'syz.1.3576': attribute type 10 has an invalid length. [ 792.071482][T15944] CPU: 1 PID: 15944 Comm: syz.3.3575 Not tainted syzkaller #0 [ 792.079227][T15944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 792.089297][T15944] Call Trace: [ 792.092666][T15944] [ 792.095680][T15944] dump_stack_lvl+0x188/0x24e [ 792.100395][T15944] ? show_regs_print_info+0x12/0x12 [ 792.105715][T15944] ? load_image+0x400/0x400 [ 792.110233][T15944] ? __lock_acquire+0x7d10/0x7d10 [ 792.115278][T15944] should_fail_ex+0x399/0x4d0 [ 792.119974][T15944] _copy_from_user+0x2c/0x170 [ 792.125007][T15944] __sys_bpf+0x2ea/0x780 [ 792.129629][T15944] ? bpf_link_show_fdinfo+0x380/0x380 [ 792.135170][T15944] ? lock_chain_count+0x20/0x20 [ 792.140034][T15944] __x64_sys_bpf+0x78/0x90 [ 792.144538][T15944] do_syscall_64+0x4c/0xa0 [ 792.149096][T15944] ? clear_bhb_loop+0x60/0xb0 [ 792.153865][T15944] ? clear_bhb_loop+0x60/0xb0 [ 792.158740][T15944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 792.164993][T15944] RIP: 0033:0x7f399459c799 [ 792.169436][T15944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.189318][T15944] RSP: 002b:00007f39953d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 792.197822][T15944] RAX: ffffffffffffffda RBX: 00007f3994815fa0 RCX: 00007f399459c799 [ 792.205876][T15944] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 000000000000000f [ 792.213925][T15944] RBP: 00007f39953d7090 R08: 0000000000000000 R09: 0000000000000000 [ 792.221920][T15944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.230260][T15944] R13: 00007f3994816038 R14: 00007f3994815fa0 R15: 00007ffc04efcbb8 [ 792.238507][T15944] [ 792.260884][T15946] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3576'. [ 792.555477][ T4277] Bluetooth: hci1: Malformed LE Event: 0x0b [ 792.660472][T15958] FAULT_INJECTION: forcing a failure. [ 792.660472][T15958] name failslab, interval 1, probability 0, space 0, times 0 [ 792.758030][T15958] CPU: 1 PID: 15958 Comm: syz.0.3582 Not tainted syzkaller #0 [ 792.766012][T15958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 792.776364][T15958] Call Trace: [ 792.779693][T15958] [ 792.782919][T15958] dump_stack_lvl+0x188/0x24e [ 792.787710][T15958] ? show_regs_print_info+0x12/0x12 [ 792.793268][T15958] ? load_image+0x400/0x400 [ 792.797904][T15958] ? __might_sleep+0xd0/0xd0 [ 792.802492][T15958] ? __lock_acquire+0x7d10/0x7d10 [ 792.807521][T15958] should_fail_ex+0x399/0x4d0 [ 792.812285][T15958] should_failslab+0x5/0x20 [ 792.816965][T15958] slab_pre_alloc_hook+0x59/0x310 [ 792.822361][T15958] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 792.828182][T15958] __kmem_cache_alloc_node+0x4f/0x260 [ 792.833589][T15958] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 792.839689][T15958] __kmalloc+0xa0/0x240 [ 792.843945][T15958] tomoyo_realpath_from_path+0xdf/0x5d0 [ 792.849648][T15958] ? tomoyo_path_number_perm+0x205/0x650 [ 792.855911][T15958] tomoyo_path_number_perm+0x22f/0x650 [ 792.861568][T15958] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 792.867285][T15958] ? ktime_get+0x7b/0x270 [ 792.871959][T15958] ? ktime_get+0x7b/0x270 [ 792.876459][T15958] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 792.882865][T15958] ? __fget_files+0x28/0x4b0 [ 792.887586][T15958] ? __fget_files+0x28/0x4b0 [ 792.892211][T15958] security_file_ioctl+0x6c/0xa0 [ 792.897173][T15958] __se_sys_ioctl+0x48/0x170 [ 792.902038][T15958] do_syscall_64+0x4c/0xa0 [ 792.906466][T15958] ? clear_bhb_loop+0x60/0xb0 [ 792.911248][T15958] ? clear_bhb_loop+0x60/0xb0 [ 792.916017][T15958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 792.922296][T15958] RIP: 0033:0x7f258a19c799 [ 792.926732][T15958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.946788][T15958] RSP: 002b:00007f258af94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 792.955720][T15958] RAX: ffffffffffffffda RBX: 00007f258a415fa0 RCX: 00007f258a19c799 [ 792.964044][T15958] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002d [ 792.972200][T15958] RBP: 00007f258af94090 R08: 0000000000000000 R09: 0000000000000000 [ 792.980315][T15958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.988473][T15958] R13: 00007f258a416038 R14: 00007f258a415fa0 R15: 00007fff5666e108 [ 792.996764][T15958] [ 793.284659][T15958] ERROR: Out of memory at tomoyo_realpath_from_path. [ 793.288932][T15973] netlink: 'syz.4.3589': attribute type 10 has an invalid length. [ 793.307144][T15973] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3589'. [ 793.341049][T15973] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 793.438936][T15983] FAULT_INJECTION: forcing a failure. [ 793.438936][T15983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.515881][T15983] CPU: 0 PID: 15983 Comm: syz.2.3591 Not tainted syzkaller #0 [ 793.523600][T15983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 793.534473][T15983] Call Trace: [ 793.537801][T15983] [ 793.540800][T15983] dump_stack_lvl+0x188/0x24e [ 793.545617][T15983] ? show_regs_print_info+0x12/0x12 [ 793.551042][T15983] ? load_image+0x400/0x400 [ 793.555598][T15983] ? __lock_acquire+0x7d10/0x7d10 [ 793.560855][T15983] ? trace_call_bpf+0x5d6/0x6b0 [ 793.565763][T15983] should_fail_ex+0x399/0x4d0 [ 793.570477][T15983] _copy_from_user+0x2c/0x170 [ 793.575370][T15983] __sys_bpf+0x2ea/0x780 [ 793.579771][T15983] ? bpf_link_show_fdinfo+0x380/0x380 [ 793.585289][T15983] ? lock_chain_count+0x20/0x20 [ 793.590306][T15983] __x64_sys_bpf+0x78/0x90 [ 793.594764][T15983] do_syscall_64+0x4c/0xa0 [ 793.599399][T15983] ? clear_bhb_loop+0x60/0xb0 [ 793.604115][T15983] ? clear_bhb_loop+0x60/0xb0 [ 793.609018][T15983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 793.615135][T15983] RIP: 0033:0x7f552639c799 [ 793.619850][T15983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.640310][T15983] RSP: 002b:00007f552721e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 793.649196][T15983] RAX: ffffffffffffffda RBX: 00007f5526615fa0 RCX: 00007f552639c799 [ 793.657801][T15983] RDX: 0000000000000028 RSI: 0000200000000240 RDI: 0000000000000012 [ 793.666100][T15983] RBP: 00007f552721e090 R08: 0000000000000000 R09: 0000000000000000 [ 793.674135][T15983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.682231][T15983] R13: 00007f5526616038 R14: 00007f5526615fa0 R15: 00007fff0ad55748 [ 793.690343][T15983] [ 794.199275][T13518] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 794.900360][T16007] FAULT_INJECTION: forcing a failure. [ 794.900360][T16007] name failslab, interval 1, probability 0, space 0, times 0 [ 794.974699][T16007] CPU: 0 PID: 16007 Comm: syz.2.3602 Not tainted syzkaller #0 [ 794.982495][T16007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 794.993005][T16007] Call Trace: [ 794.996299][T16007] [ 794.999311][T16007] dump_stack_lvl+0x188/0x24e [ 795.004006][T16007] ? show_regs_print_info+0x12/0x12 [ 795.009290][T16007] ? load_image+0x400/0x400 [ 795.013925][T16007] ? __might_sleep+0xd0/0xd0 [ 795.018693][T16007] ? __lock_acquire+0x7d10/0x7d10 [ 795.023897][T16007] should_fail_ex+0x399/0x4d0 [ 795.028582][T16007] should_failslab+0x5/0x20 [ 795.033173][T16007] slab_pre_alloc_hook+0x59/0x310 [ 795.038370][T16007] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 795.044182][T16007] __kmem_cache_alloc_node+0x4f/0x260 [ 795.049558][T16007] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 795.055668][T16007] __kmalloc+0xa0/0x240 [ 795.059951][T16007] tomoyo_realpath_from_path+0xdf/0x5d0 [ 795.065960][T16007] ? tomoyo_path_number_perm+0x205/0x650 [ 795.072324][T16007] tomoyo_path_number_perm+0x22f/0x650 [ 795.078319][T16007] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 795.084016][T16007] ? ksys_write+0x1c0/0x250 [ 795.088736][T16007] ? common_file_perm+0x171/0x1c0 [ 795.093890][T16007] ? __fget_files+0x28/0x4b0 [ 795.098501][T16007] ? __fget_files+0x28/0x4b0 [ 795.103368][T16007] security_file_ioctl+0x6c/0xa0 [ 795.108314][T16007] __se_sys_ioctl+0x48/0x170 [ 795.113078][T16007] do_syscall_64+0x4c/0xa0 [ 795.117491][T16007] ? clear_bhb_loop+0x60/0xb0 [ 795.122280][T16007] ? clear_bhb_loop+0x60/0xb0 [ 795.126957][T16007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 795.132966][T16007] RIP: 0033:0x7f552639c799 [ 795.137550][T16007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.157804][T16007] RSP: 002b:00007f552721e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 795.166322][T16007] RAX: ffffffffffffffda RBX: 00007f5526615fa0 RCX: 00007f552639c799 [ 795.174328][T16007] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000027 [ 795.182310][T16007] RBP: 00007f552721e090 R08: 0000000000000000 R09: 0000000000000000 [ 795.190367][T16007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.198422][T16007] R13: 00007f5526616038 R14: 00007f5526615fa0 R15: 00007fff0ad55748 [ 795.206600][T16007] [ 795.355410][T16009] netlink: 'syz.4.3603': attribute type 10 has an invalid length. [ 795.364891][T16007] ERROR: Out of memory at tomoyo_realpath_from_path. [ 795.405886][T16009] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3603'. [ 795.471933][T16009] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 795.543907][T16014] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3605'. [ 795.938981][T13518] Bluetooth: hci5: unexpected subevent 0x0c length: 150 > 5 [ 796.122834][T13518] Bluetooth: hci1: command 0x0406 tx timeout [ 796.880727][T16048] netlink: 'syz.1.3618': attribute type 10 has an invalid length. [ 796.912307][T16050] FAULT_INJECTION: forcing a failure. [ 796.912307][T16050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.927346][T16048] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3618'. [ 796.943218][T16050] CPU: 0 PID: 16050 Comm: syz.0.3619 Not tainted syzkaller #0 [ 796.950840][T16050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 796.960977][T16050] Call Trace: [ 796.964275][T16050] [ 796.967225][T16050] dump_stack_lvl+0x188/0x24e [ 796.972110][T16050] ? show_regs_print_info+0x12/0x12 [ 796.977356][T16050] ? load_image+0x400/0x400 [ 796.981974][T16050] ? __lock_acquire+0x7d10/0x7d10 [ 796.987088][T16050] should_fail_ex+0x399/0x4d0 [ 796.991785][T16050] strncpy_from_user+0x32/0x350 [ 796.996670][T16050] bpf_prog_load+0x1f3/0x1560 [ 797.001623][T16050] ? map_freeze+0x390/0x390 [ 797.006167][T16050] ? __might_fault+0xa6/0x120 [ 797.010944][T16050] ? __might_fault+0xa6/0x120 [ 797.015619][T16050] ? __might_fault+0xc2/0x120 [ 797.020287][T16050] ? __might_fault+0xa6/0x120 [ 797.025130][T16050] ? bpf_lsm_bpf+0x5/0x10 [ 797.029459][T16050] ? security_bpf+0x7a/0xa0 [ 797.033991][T16050] __sys_bpf+0x5b8/0x780 [ 797.038240][T16050] ? bpf_link_show_fdinfo+0x380/0x380 [ 797.043711][T16050] ? lock_chain_count+0x20/0x20 [ 797.048658][T16050] __x64_sys_bpf+0x78/0x90 [ 797.053160][T16050] do_syscall_64+0x4c/0xa0 [ 797.057662][T16050] ? clear_bhb_loop+0x60/0xb0 [ 797.063037][T16050] ? clear_bhb_loop+0x60/0xb0 [ 797.067811][T16050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.073708][T16050] RIP: 0033:0x7f258a19c799 [ 797.078119][T16050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.097895][T16050] RSP: 002b:00007f258af94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 797.106667][T16050] RAX: ffffffffffffffda RBX: 00007f258a415fa0 RCX: 00007f258a19c799 [ 797.114822][T16050] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 797.122982][T16050] RBP: 00007f258af94090 R08: 0000000000000000 R09: 0000000000000000 [ 797.131119][T16050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.139274][T16050] R13: 00007f258a416038 R14: 00007f258a415fa0 R15: 00007fff5666e108 [ 797.147266][T16050] [ 797.186330][T13518] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 797.627362][T16060] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3624'. [ 800.180655][T16081] FAULT_INJECTION: forcing a failure. [ 800.180655][T16081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.225840][T16081] CPU: 0 PID: 16081 Comm: syz.1.3629 Not tainted syzkaller #0 [ 800.233453][T16081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 800.243804][T16081] Call Trace: [ 800.247095][T16081] [ 800.250126][T16081] dump_stack_lvl+0x188/0x24e [ 800.254813][T16081] ? show_regs_print_info+0x12/0x12 [ 800.260312][T16081] ? load_image+0x400/0x400 [ 800.265178][T16081] ? __lock_acquire+0x7d10/0x7d10 [ 800.270380][T16081] ? snprintf+0xe5/0x140 [ 800.275011][T16081] should_fail_ex+0x399/0x4d0 [ 800.279797][T16081] _copy_to_user+0x2c/0x130 [ 800.284363][T16081] simple_read_from_buffer+0xe3/0x150 [ 800.289818][T16081] proc_fail_nth_read+0x1a6/0x220 [ 800.294873][T16081] ? proc_fault_inject_write+0x310/0x310 [ 800.300556][T16081] ? fsnotify_perm+0x248/0x550 [ 800.305370][T16081] ? proc_fault_inject_write+0x310/0x310 [ 800.311016][T16081] vfs_read+0x2de/0xa00 [ 800.315224][T16081] ? kernel_read+0x1e0/0x1e0 [ 800.319834][T16081] ? __fget_files+0x28/0x4b0 [ 800.324457][T16081] ? __fget_files+0x28/0x4b0 [ 800.329335][T16081] ? __fget_files+0x43d/0x4b0 [ 800.334188][T16081] ? __fdget_pos+0x2ae/0x360 [ 800.338865][T16081] ? ksys_read+0x71/0x250 [ 800.343477][T16081] ksys_read+0x14c/0x250 [ 800.347727][T16081] ? vfs_write+0xa30/0xa30 [ 800.352929][T16081] ? lockdep_hardirqs_on+0x94/0x140 [ 800.358300][T16081] do_syscall_64+0x4c/0xa0 [ 800.362814][T16081] ? clear_bhb_loop+0x60/0xb0 [ 800.367857][T16081] ? clear_bhb_loop+0x60/0xb0 [ 800.372925][T16081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 800.379265][T16081] RIP: 0033:0x7ff8a2f5cfce [ 800.384026][T16081] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 800.404022][T16081] RSP: 002b:00007ff8a3d8dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 800.412449][T16081] RAX: ffffffffffffffda RBX: 00007ff8a3d8e6c0 RCX: 00007ff8a2f5cfce [ 800.420637][T16081] RDX: 000000000000000f RSI: 00007ff8a3d8e0a0 RDI: 0000000000000004 [ 800.428793][T16081] RBP: 00007ff8a3d8e090 R08: 0000000000000000 R09: 0000000000000000 [ 800.437213][T16081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.445453][T16081] R13: 00007ff8a3216038 R14: 00007ff8a3215fa0 R15: 00007fffdeed69e8 [ 800.453631][T16081] [ 800.657864][T16086] netlink: 'syz.0.3632': attribute type 10 has an invalid length. [ 800.704813][T16086] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3632'. [ 801.051306][T13518] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 801.175798][T16105] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.113906][T16123] FAULT_INJECTION: forcing a failure. [ 802.113906][T16123] name failslab, interval 1, probability 0, space 0, times 0 [ 802.192363][T16123] CPU: 0 PID: 16123 Comm: syz.4.3644 Not tainted syzkaller #0 [ 802.199994][T16123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 802.210467][T16123] Call Trace: [ 802.213768][T16123] [ 802.216812][T16123] dump_stack_lvl+0x188/0x24e [ 802.221790][T16123] ? show_regs_print_info+0x12/0x12 [ 802.227326][T16123] ? load_image+0x400/0x400 [ 802.231870][T16123] ? __lock_acquire+0x7d10/0x7d10 [ 802.237031][T16123] should_fail_ex+0x399/0x4d0 [ 802.241826][T16123] should_failslab+0x5/0x20 [ 802.246548][T16123] slab_pre_alloc_hook+0x59/0x310 [ 802.251698][T16123] ? verify_lock_unused+0x140/0x140 [ 802.257041][T16123] ? bpf_test_init+0x9f/0x140 [ 802.261770][T16123] __kmem_cache_alloc_node+0x4f/0x260 [ 802.267191][T16123] ? bpf_test_init+0x9f/0x140 [ 802.271910][T16123] __kmalloc+0xa0/0x240 [ 802.276105][T16123] bpf_test_init+0x9f/0x140 [ 802.280737][T16123] bpf_prog_test_run_xdp+0x484/0xf10 [ 802.286079][T16123] ? dev_put+0x80/0x80 [ 802.290284][T16123] ? dev_put+0x80/0x80 [ 802.294549][T16123] bpf_prog_test_run+0x31e/0x390 [ 802.299537][T16123] __sys_bpf+0x62b/0x780 [ 802.304056][T16123] ? bpf_link_show_fdinfo+0x380/0x380 [ 802.309584][T16123] ? lock_chain_count+0x20/0x20 [ 802.314589][T16123] __x64_sys_bpf+0x78/0x90 [ 802.319151][T16123] do_syscall_64+0x4c/0xa0 [ 802.323698][T16123] ? clear_bhb_loop+0x60/0xb0 [ 802.328855][T16123] ? clear_bhb_loop+0x60/0xb0 [ 802.333708][T16123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 802.339749][T16123] RIP: 0033:0x7fa62919c799 [ 802.344206][T16123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.363861][T16123] RSP: 002b:00007fa62a143028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 802.372568][T16123] RAX: ffffffffffffffda RBX: 00007fa629415fa0 RCX: 00007fa62919c799 [ 802.380673][T16123] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 802.389554][T16123] RBP: 00007fa62a143090 R08: 0000000000000000 R09: 0000000000000000 [ 802.398271][T16123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.406479][T16123] R13: 00007fa629416038 R14: 00007fa629415fa0 R15: 00007ffde1338938 [ 802.414942][T16123] [ 802.485235][T16105] device bridge_slave_0 left promiscuous mode [ 802.491637][T16105] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.817823][T16133] netlink: 'syz.2.3647': attribute type 39 has an invalid length. [ 803.124382][T16135] netlink: 'syz.3.3648': attribute type 10 has an invalid length. [ 803.145329][T16135] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3648'. [ 803.249807][T16141] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3649'. [ 803.462106][T16148] FAULT_INJECTION: forcing a failure. [ 803.462106][T16148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.477371][T16148] CPU: 0 PID: 16148 Comm: syz.3.3652 Not tainted syzkaller #0 [ 803.480827][T13518] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 803.485133][T16148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 803.485153][T16148] Call Trace: [ 803.485162][T16148] [ 803.485170][T16148] dump_stack_lvl+0x188/0x24e [ 803.485204][T16148] ? show_regs_print_info+0x12/0x12 [ 803.485225][T16148] ? load_image+0x400/0x400 [ 803.485246][T16148] ? __lock_acquire+0x7d10/0x7d10 [ 803.485268][T16148] ? __rwlock_init+0x140/0x140 [ 803.485287][T16148] should_fail_ex+0x399/0x4d0 [ 803.485310][T16148] strncpy_from_user+0x32/0x350 [ 803.485336][T16148] bpf_prog_load+0x1f3/0x1560 [ 803.485360][T16148] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 803.485384][T16148] ? lock_chain_count+0x20/0x20 [ 803.485407][T16148] ? map_freeze+0x390/0x390 [ 803.485435][T16148] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 803.485457][T16148] ? lockdep_hardirqs_on+0x94/0x140 [ 803.485484][T16148] ? __sanitizer_cov_trace_cmp4+0x80/0x80 [ 803.485505][T16148] ? bpf_lsm_bpf+0x5/0x10 [ 803.586642][T16148] ? security_bpf+0x7a/0xa0 [ 803.591180][T16148] __sys_bpf+0x5b8/0x780 [ 803.595726][T16148] ? bpf_link_show_fdinfo+0x380/0x380 [ 803.601143][T16148] ? lock_chain_count+0x20/0x20 [ 803.606025][T16148] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 803.612191][T16148] __x64_sys_bpf+0x78/0x90 [ 803.616733][T16148] do_syscall_64+0x4c/0xa0 [ 803.621183][T16148] ? clear_bhb_loop+0x60/0xb0 [ 803.626130][T16148] ? clear_bhb_loop+0x60/0xb0 [ 803.630937][T16148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 803.636942][T16148] RIP: 0033:0x7f399459c799 [ 803.641396][T16148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.661889][T16148] RSP: 002b:00007f39953d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 803.671197][T16148] RAX: ffffffffffffffda RBX: 00007f3994815fa0 RCX: 00007f399459c799 [ 803.679437][T16148] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 803.687510][T16148] RBP: 00007f39953d7090 R08: 0000000000000000 R09: 0000000000000000 [ 803.695934][T16148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.704341][T16148] R13: 00007f3994816038 R14: 00007f3994815fa0 R15: 00007ffc04efcbb8 [ 803.712494][T16148] [ 803.779070][T16152] netlink: 'syz.1.3654': attribute type 1 has an invalid length. [ 803.901827][T16157] FAULT_INJECTION: forcing a failure. [ 803.901827][T16157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.940804][T16157] CPU: 1 PID: 16157 Comm: syz.4.3656 Not tainted syzkaller #0 [ 803.948592][T16157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 803.959203][T16157] Call Trace: [ 803.962520][T16157] [ 803.965651][T16157] dump_stack_lvl+0x188/0x24e [ 803.970393][T16157] ? show_regs_print_info+0x12/0x12 [ 803.975807][T16157] ? load_image+0x400/0x400 [ 803.980381][T16157] ? __lock_acquire+0x7d10/0x7d10 [ 803.985655][T16157] should_fail_ex+0x399/0x4d0 [ 803.990452][T16157] strncpy_from_user+0x32/0x350 [ 803.995358][T16157] bpf_prog_load+0x1f3/0x1560 [ 804.000078][T16157] ? map_freeze+0x390/0x390 [ 804.004931][T16157] ? __might_fault+0xa6/0x120 [ 804.009639][T16157] ? __might_fault+0xa6/0x120 [ 804.014354][T16157] ? __might_fault+0xc2/0x120 [ 804.019053][T16157] ? __might_fault+0xa6/0x120 [ 804.023859][T16157] ? bpf_lsm_bpf+0x5/0x10 [ 804.028215][T16157] ? security_bpf+0x7a/0xa0 [ 804.032753][T16157] __sys_bpf+0x5b8/0x780 [ 804.037040][T16157] ? bpf_link_show_fdinfo+0x380/0x380 [ 804.042549][T16157] ? lock_chain_count+0x20/0x20 [ 804.047616][T16157] __x64_sys_bpf+0x78/0x90 [ 804.052083][T16157] do_syscall_64+0x4c/0xa0 [ 804.056527][T16157] ? clear_bhb_loop+0x60/0xb0 [ 804.061413][T16157] ? clear_bhb_loop+0x60/0xb0 [ 804.066119][T16157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 804.072055][T16157] RIP: 0033:0x7fa62919c799 [ 804.076608][T16157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.096514][T16157] RSP: 002b:00007fa62a143028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 804.104942][T16157] RAX: ffffffffffffffda RBX: 00007fa629415fa0 RCX: 00007fa62919c799 [ 804.113189][T16157] RDX: 0000000000000070 RSI: 000020000000d000 RDI: 0000000000000005 [ 804.121374][T16157] RBP: 00007fa62a143090 R08: 0000000000000000 R09: 0000000000000000 [ 804.129607][T16157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.137850][T16157] R13: 00007fa629416038 R14: 00007fa629415fa0 R15: 00007ffde1338938 [ 804.146161][T16157] [ 804.483231][T16175] netlink: 'syz.2.3663': attribute type 10 has an invalid length. [ 804.516487][T16175] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3663'. [ 804.631613][T16180] FAULT_INJECTION: forcing a failure. [ 804.631613][T16180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.664573][T16180] CPU: 0 PID: 16180 Comm: syz.3.3665 Not tainted syzkaller #0 [ 804.672283][T16180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 804.682895][T16180] Call Trace: [ 804.686462][T16180] [ 804.689501][T16180] dump_stack_lvl+0x188/0x24e [ 804.694411][T16180] ? show_regs_print_info+0x12/0x12 [ 804.699822][T16180] ? load_image+0x400/0x400 [ 804.704630][T16180] ? __lock_acquire+0x7d10/0x7d10 [ 804.709793][T16180] ? snprintf+0xe5/0x140 [ 804.714304][T16180] should_fail_ex+0x399/0x4d0 [ 804.719207][T16180] _copy_to_user+0x2c/0x130 [ 804.723846][T16180] simple_read_from_buffer+0xe3/0x150 [ 804.729526][T16180] proc_fail_nth_read+0x1a6/0x220 [ 804.734859][T16180] ? proc_fault_inject_write+0x310/0x310 [ 804.740882][T16180] ? fsnotify_perm+0x248/0x550 [ 804.745855][T16180] ? proc_fault_inject_write+0x310/0x310 [ 804.751832][T16180] vfs_read+0x2de/0xa00 [ 804.756019][T16180] ? kernel_read+0x1e0/0x1e0 [ 804.760643][T16180] ? __fget_files+0x28/0x4b0 [ 804.765568][T16180] ? __fget_files+0x28/0x4b0 [ 804.770166][T16180] ? __fget_files+0x43d/0x4b0 [ 804.775127][T16180] ? __fdget_pos+0x2ae/0x360 [ 804.780343][T16180] ? ksys_read+0x71/0x250 [ 804.785348][T16180] ksys_read+0x14c/0x250 [ 804.790201][T16180] ? vfs_write+0xa30/0xa30 [ 804.795021][T16180] ? lockdep_hardirqs_on+0x94/0x140 [ 804.800683][T16180] do_syscall_64+0x4c/0xa0 [ 804.805468][T16180] ? clear_bhb_loop+0x60/0xb0 [ 804.811151][T16180] ? clear_bhb_loop+0x60/0xb0 [ 804.816016][T16180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 804.822302][T16180] RIP: 0033:0x7f399455cfce [ 804.827156][T16180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 804.847826][T16180] RSP: 002b:00007f39953d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 804.856885][T16180] RAX: ffffffffffffffda RBX: 00007f39953d76c0 RCX: 00007f399455cfce [ 804.865316][T16180] RDX: 000000000000000f RSI: 00007f39953d70a0 RDI: 0000000000000005 [ 804.873563][T16180] RBP: 00007f39953d7090 R08: 0000000000000000 R09: 0000000000000000 [ 804.881887][T16180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.890479][T16180] R13: 00007f3994816038 R14: 00007f3994815fa0 R15: 00007ffc04efcbb8 [ 804.898726][T16180] [ 804.969279][T13518] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 805.372342][T16191] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3669'. [ 805.428293][T16199] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3669'. [ 805.641798][T16210] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3675'. [ 805.880333][T16216] netlink: 'syz.2.3678': attribute type 10 has an invalid length. [ 805.911396][T16216] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3678'. [ 806.079531][T13518] Bluetooth: hci3: Malformed LE Event: 0x0b [ 806.752270][T16240] netlink: 'syz.2.3686': attribute type 21 has an invalid length. [ 807.019480][T16247] FAULT_INJECTION: forcing a failure. [ 807.019480][T16247] name failslab, interval 1, probability 0, space 0, times 0 [ 807.055553][T16247] CPU: 0 PID: 16247 Comm: syz.3.3690 Not tainted syzkaller #0 [ 807.063251][T16247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 807.073679][T16247] Call Trace: [ 807.077208][T16247] [ 807.080430][T16247] dump_stack_lvl+0x188/0x24e [ 807.085403][T16247] ? show_regs_print_info+0x12/0x12 [ 807.090659][T16247] ? load_image+0x400/0x400 [ 807.095289][T16247] ? __might_sleep+0xd0/0xd0 [ 807.099911][T16247] ? __lock_acquire+0x7d10/0x7d10 [ 807.104993][T16247] should_fail_ex+0x399/0x4d0 [ 807.109800][T16247] should_failslab+0x5/0x20 [ 807.114428][T16247] slab_pre_alloc_hook+0x59/0x310 [ 807.119506][T16247] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 807.125278][T16247] __kmem_cache_alloc_node+0x4f/0x260 [ 807.130977][T16247] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 807.136554][T16247] __kmalloc+0xa0/0x240 [ 807.140835][T16247] bpf_prog_test_run_skb+0x234/0x12a0 [ 807.146454][T16247] ? __fget_files+0x28/0x4b0 [ 807.151164][T16247] ? __fget_files+0x28/0x4b0 [ 807.155886][T16247] ? __fget_files+0x43d/0x4b0 [ 807.160696][T16247] ? cpu_online+0xa0/0xa0 [ 807.165142][T16247] bpf_prog_test_run+0x31e/0x390 [ 807.170310][T16247] __sys_bpf+0x62b/0x780 [ 807.174599][T16247] ? bpf_link_show_fdinfo+0x380/0x380 [ 807.180098][T16247] ? lock_chain_count+0x20/0x20 [ 807.185260][T16247] __x64_sys_bpf+0x78/0x90 [ 807.190038][T16247] do_syscall_64+0x4c/0xa0 [ 807.194677][T16247] ? clear_bhb_loop+0x60/0xb0 [ 807.199650][T16247] ? clear_bhb_loop+0x60/0xb0 [ 807.204712][T16247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 807.210729][T16247] RIP: 0033:0x7f399459c799 [ 807.215433][T16247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.235636][T16247] RSP: 002b:00007f39953d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 807.244277][T16247] RAX: ffffffffffffffda RBX: 00007f3994815fa0 RCX: 00007f399459c799 [ 807.252443][T16247] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a [ 807.261165][T16247] RBP: 00007f39953d7090 R08: 0000000000000000 R09: 0000000000000000 [ 807.269302][T16247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.277488][T16247] R13: 00007f3994816038 R14: 00007f3994815fa0 R15: 00007ffc04efcbb8 [ 807.285800][T16247] [ 807.309786][T16252] FAULT_INJECTION: forcing a failure. [ 807.309786][T16252] name failslab, interval 1, probability 0, space 0, times 0 [ 807.356142][T16256] FAULT_INJECTION: forcing a failure. [ 807.356142][T16256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.380059][T16252] CPU: 0 PID: 16252 Comm: syz.0.3693 Not tainted syzkaller #0 [ 807.387814][T16252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 807.398233][T16252] Call Trace: [ 807.401534][T16252] [ 807.404557][T16252] dump_stack_lvl+0x188/0x24e [ 807.409435][T16252] ? show_regs_print_info+0x12/0x12 [ 807.414654][T16252] ? load_image+0x400/0x400 [ 807.419453][T16252] ? __lock_acquire+0x7d10/0x7d10 [ 807.424681][T16252] should_fail_ex+0x399/0x4d0 [ 807.429554][T16252] should_failslab+0x5/0x20 [ 807.434249][T16252] slab_pre_alloc_hook+0x59/0x310 [ 807.439560][T16252] kmem_cache_alloc_lru+0x49/0x2e0 [ 807.444701][T16252] ? __d_alloc+0x31/0x700 [ 807.449331][T16252] __d_alloc+0x31/0x700 [ 807.453619][T16252] d_alloc_pseudo+0x19/0x70 [ 807.458594][T16252] alloc_file_pseudo+0xe0/0x200 [ 807.463569][T16252] ? alloc_empty_file_noaccount+0x80/0x80 [ 807.469318][T16252] ? _raw_spin_unlock+0x24/0x40 [ 807.474455][T16252] ? alloc_fd+0x58f/0x630 [ 807.479165][T16252] anon_inode_getfd+0xc6/0x1c0 [ 807.484148][T16252] bpf_enable_stats+0xdc/0x140 [ 807.489047][T16252] __sys_bpf+0x667/0x780 [ 807.493337][T16252] ? bpf_link_show_fdinfo+0x380/0x380 [ 807.494478][T16254] netlink: 'syz.2.3694': attribute type 10 has an invalid length. [ 807.499007][T16252] ? lock_chain_count+0x20/0x20 [ 807.499083][T16252] __x64_sys_bpf+0x78/0x90 [ 807.516610][T16252] do_syscall_64+0x4c/0xa0 [ 807.521311][T16252] ? clear_bhb_loop+0x60/0xb0 [ 807.521855][T16254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3694'. [ 807.526164][T16252] ? clear_bhb_loop+0x60/0xb0 [ 807.526198][T16252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 807.526217][T16252] RIP: 0033:0x7f258a19c799 [ 807.526235][T16252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.526250][T16252] RSP: 002b:00007f258af94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 807.526271][T16252] RAX: ffffffffffffffda RBX: 00007f258a415fa0 RCX: 00007f258a19c799 [ 807.526286][T16252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000020 [ 807.526298][T16252] RBP: 00007f258af94090 R08: 0000000000000000 R09: 0000000000000000 [ 807.526311][T16252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.526323][T16252] R13: 00007f258a416038 R14: 00007f258a415fa0 R15: 00007fff5666e108 [ 807.526351][T16252] [ 807.600860][T16256] CPU: 0 PID: 16256 Comm: syz.1.3692 Not tainted syzkaller #0 [ 807.600888][T16256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 807.600899][T16256] Call Trace: [ 807.600907][T16256] [ 807.600915][T16256] dump_stack_lvl+0x188/0x24e [ 807.600945][T16256] ? show_regs_print_info+0x12/0x12 [ 807.600969][T16256] ? load_image+0x400/0x400 [ 807.600990][T16256] ? __lock_acquire+0x7d10/0x7d10 [ 807.601018][T16256] should_fail_ex+0x399/0x4d0 [ 807.601041][T16256] _copy_from_user+0x2c/0x170 [ 807.601065][T16256] __copy_msghdr+0x3b7/0x580 [ 807.601093][T16256] ___sys_sendmsg+0x210/0x360 [ 807.601121][T16256] ? __sys_sendmsg+0x290/0x290 [ 807.601161][T16256] ? __lock_acquire+0x7d10/0x7d10 [ 807.601203][T16256] __se_sys_sendmsg+0x1bb/0x2a0 [ 807.601229][T16256] ? __x64_sys_sendmsg+0x80/0x80 [ 807.601265][T16256] ? lockdep_hardirqs_on+0x94/0x140 [ 807.601286][T16256] do_syscall_64+0x4c/0xa0 [ 807.601307][T16256] ? clear_bhb_loop+0x60/0xb0 [ 807.601327][T16256] ? clear_bhb_loop+0x60/0xb0 [ 807.601349][T16256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 807.601369][T16256] RIP: 0033:0x7ff8a2f9c799 [ 807.601387][T16256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.601402][T16256] RSP: 002b:00007ff8a3d8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.601424][T16256] RAX: ffffffffffffffda RBX: 00007ff8a3215fa0 RCX: 00007ff8a2f9c799 [ 807.601438][T16256] RDX: 0000000000008840 RSI: 0000200000000840 RDI: 0000000000000003 [ 807.601451][T16256] RBP: 00007ff8a3d8e090 R08: 0000000000000000 R09: 0000000000000000 [ 807.601464][T16256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.601476][T16256] R13: 00007ff8a3216038 R14: 00007ff8a3215fa0 R15: 00007fffdeed69e8 [ 807.601502][T16256] [ 807.833817][T16267] FAULT_INJECTION: forcing a failure. [ 807.833817][T16267] name failslab, interval 1, probability 0, space 0, times 0 [ 807.904570][T16267] CPU: 1 PID: 16267 Comm: syz.1.3697 Not tainted syzkaller #0 [ 807.912730][T16267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 807.923431][T16267] Call Trace: [ 807.926810][T16267] [ 807.929761][T16267] dump_stack_lvl+0x188/0x24e [ 807.934574][T16267] ? show_regs_print_info+0x12/0x12 [ 807.939882][T16267] ? load_image+0x400/0x400 [ 807.944488][T16267] ? __lock_acquire+0x7d10/0x7d10 [ 807.949563][T16267] should_fail_ex+0x399/0x4d0 [ 807.954335][T16267] should_failslab+0x5/0x20 [ 807.958886][T16267] slab_pre_alloc_hook+0x59/0x310 [ 807.964264][T16267] kmem_cache_alloc_lru+0x49/0x2e0 [ 807.969372][T16267] ? __d_alloc+0x31/0x700 [ 807.973699][T16267] __d_alloc+0x31/0x700 [ 807.977859][T16267] d_alloc_pseudo+0x19/0x70 [ 807.982369][T16267] alloc_file_pseudo+0xe0/0x200 [ 807.987393][T16267] ? alloc_empty_file_noaccount+0x80/0x80 [ 807.993192][T16267] ? _raw_spin_unlock+0x24/0x40 [ 807.998148][T16267] ? alloc_fd+0x58f/0x630 [ 808.002586][T16267] anon_inode_getfd+0xc6/0x1c0 [ 808.007617][T16267] bpf_enable_stats+0xdc/0x140 [ 808.012391][T16267] __sys_bpf+0x667/0x780 [ 808.016656][T16267] ? bpf_link_show_fdinfo+0x380/0x380 [ 808.022460][T16267] ? lock_chain_count+0x20/0x20 [ 808.027589][T16267] __x64_sys_bpf+0x78/0x90 [ 808.032190][T16267] do_syscall_64+0x4c/0xa0 [ 808.036742][T16267] ? clear_bhb_loop+0x60/0xb0 [ 808.041922][T16267] ? clear_bhb_loop+0x60/0xb0 [ 808.046782][T16267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 808.053196][T16267] RIP: 0033:0x7ff8a2f9c799 [ 808.057971][T16267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.078129][T16267] RSP: 002b:00007ff8a3d8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 808.087155][T16267] RAX: ffffffffffffffda RBX: 00007ff8a3215fa0 RCX: 00007ff8a2f9c799 [ 808.095222][T16267] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000020 [ 808.103370][T16267] RBP: 00007ff8a3d8e090 R08: 0000000000000000 R09: 0000000000000000 [ 808.111775][T16267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.119837][T16267] R13: 00007ff8a3216038 R14: 00007ff8a3215fa0 R15: 00007fffdeed69e8 [ 808.128162][T16267] [ 808.707633][T16286] netlink: 'syz.4.3704': attribute type 1 has an invalid length. [ 808.739636][T16286] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.3704'. [ 809.060498][T16295] netlink: 105084 bytes leftover after parsing attributes in process `syz.4.3706'. [ 809.109307][T16295] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3706'. [ 809.184136][T16297] device sit0 entered promiscuous mode [ 809.317086][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.323485][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.859431][T16303] netlink: 'syz.2.3709': attribute type 10 has an invalid length. [ 809.955960][T16303] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3709'. [ 810.193598][T13518] Bluetooth: hci0: Malformed LE Event: 0x0b [ 810.442024][T16318] FAULT_INJECTION: forcing a failure. [ 810.442024][T16318] name failslab, interval 1, probability 0, space 0, times 0 [ 810.503904][T16318] CPU: 1 PID: 16318 Comm: syz.3.3714 Not tainted syzkaller #0 [ 810.511945][T16318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 810.522964][T16318] Call Trace: [ 810.527237][T16318] [ 810.530755][T16318] dump_stack_lvl+0x188/0x24e [ 810.536438][T16318] ? show_regs_print_info+0x12/0x12 [ 810.541940][T16318] ? load_image+0x400/0x400 [ 810.546865][T16318] ? __might_sleep+0xd0/0xd0 [ 810.551862][T16318] ? __lock_acquire+0x7d10/0x7d10 [ 810.557238][T16318] should_fail_ex+0x399/0x4d0 [ 810.562498][T16318] should_failslab+0x5/0x20 [ 810.567492][T16318] slab_pre_alloc_hook+0x59/0x310 [ 810.572887][T16318] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 810.579846][T16318] __kmem_cache_alloc_node+0x4f/0x260 [ 810.586076][T16318] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 810.593380][T16318] __kmalloc+0xa0/0x240 [ 810.598226][T16318] bpf_prog_test_run_flow_dissector+0x255/0x640 [ 810.604908][T16318] ? xdp_convert_buff_to_md+0x200/0x200 [ 810.610727][T16318] ? __fget_files+0x28/0x4b0 [ 810.615974][T16318] ? __fget_files+0x28/0x4b0 [ 810.621080][T16318] ? __fget_files+0x43d/0x4b0 [ 810.626454][T16318] ? xdp_convert_buff_to_md+0x200/0x200 [ 810.632231][T16318] bpf_prog_test_run+0x31e/0x390 [ 810.637507][T16318] __sys_bpf+0x62b/0x780 [ 810.642011][T16318] ? bpf_link_show_fdinfo+0x380/0x380 [ 810.647430][T16318] ? lock_chain_count+0x20/0x20 [ 810.652593][T16318] __x64_sys_bpf+0x78/0x90 [ 810.657148][T16318] do_syscall_64+0x4c/0xa0 [ 810.661988][T16318] ? clear_bhb_loop+0x60/0xb0 [ 810.666836][T16318] ? clear_bhb_loop+0x60/0xb0 [ 810.671560][T16318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 810.677913][T16318] RIP: 0033:0x7f399459c799 [ 810.683422][T16318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.704036][T16318] RSP: 002b:00007f39953d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 810.712839][T16318] RAX: ffffffffffffffda RBX: 00007f3994815fa0 RCX: 00007f399459c799 [ 810.720907][T16318] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 810.729151][T16318] RBP: 00007f39953d7090 R08: 0000000000000000 R09: 0000000000000000 [ 810.737308][T16318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.745589][T16318] R13: 00007f3994816038 R14: 00007f3994815fa0 R15: 00007ffc04efcbb8 [ 810.754397][T16318] [ 810.760021][T16322] FAULT_INJECTION: forcing a failure. [ 810.760021][T16322] name failslab, interval 1, probability 0, space 0, times 0 [ 810.784824][T16322] CPU: 1 PID: 16322 Comm: syz.1.3715 Not tainted syzkaller #0 [ 810.793301][T16322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 810.804449][T16322] Call Trace: [ 810.808126][T16322] [ 810.811176][T16322] dump_stack_lvl+0x188/0x24e [ 810.816247][T16322] ? show_regs_print_info+0x12/0x12 [ 810.822014][T16322] ? load_image+0x400/0x400 [ 810.826749][T16322] ? __might_sleep+0xd0/0xd0 [ 810.831606][T16322] ? __lock_acquire+0x7d10/0x7d10 [ 810.836957][T16322] should_fail_ex+0x399/0x4d0 [ 810.841680][T16322] should_failslab+0x5/0x20 [ 810.846937][T16322] slab_pre_alloc_hook+0x59/0x310 [ 810.852113][T16322] ? prepend_path+0xa68/0xc20 [ 810.857180][T16322] ? tomoyo_encode+0x27e/0x540 [ 810.862174][T16322] __kmem_cache_alloc_node+0x4f/0x260 [ 810.862418][T16328] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3717'. [ 810.868065][T16322] ? tomoyo_encode+0x27e/0x540 [ 810.868109][T16322] __kmalloc+0xa0/0x240 [ 810.868135][T16322] tomoyo_encode+0x27e/0x540 [ 810.868159][T16322] tomoyo_realpath_from_path+0x58e/0x5d0 [ 810.868189][T16322] ? tomoyo_path_number_perm+0x205/0x650 [ 810.868208][T16322] tomoyo_path_number_perm+0x22f/0x650 [ 810.868231][T16322] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 810.868253][T16322] ? ksys_write+0x1c0/0x250 [ 810.868277][T16322] ? common_file_perm+0x171/0x1c0 [ 810.868323][T16322] ? __fget_files+0x28/0x4b0 [ 810.868345][T16322] ? __fget_files+0x28/0x4b0 [ 810.884125][T16328] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3717'. [ 810.888082][T16322] security_file_ioctl+0x6c/0xa0 [ 810.888114][T16322] __se_sys_ioctl+0x48/0x170 [ 810.888139][T16322] do_syscall_64+0x4c/0xa0 [ 810.888160][T16322] ? clear_bhb_loop+0x60/0xb0 [ 810.888180][T16322] ? clear_bhb_loop+0x60/0xb0 [ 810.888201][T16322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 810.902716][T16328] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3717'. [ 810.905107][T16322] RIP: 0033:0x7ff8a2f9c799 [ 810.905135][T16322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.905150][T16322] RSP: 002b:00007ff8a3d8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 810.905171][T16322] RAX: ffffffffffffffda RBX: 00007ff8a3215fa0 RCX: 00007ff8a2f9c799 [ 810.905184][T16322] RDX: 0000000000000001 RSI: 00000000400454cd RDI: 0000000000000003 [ 810.905195][T16322] RBP: 00007ff8a3d8e090 R08: 0000000000000000 R09: 0000000000000000 [ 810.905206][T16322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.905216][T16322] R13: 00007ff8a3216038 R14: 00007ff8a3215fa0 R15: 00007fffdeed69e8 [ 810.905242][T16322] [ 810.932697][T16326] netlink: 'syz.4.3716': attribute type 29 has an invalid length. [ 810.987518][T16322] ERROR: Out of memory at tomoyo_realpath_from_path. [ 811.063191][T16326] netlink: 'syz.4.3716': attribute type 29 has an invalid length. [ 811.108838][T16330] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3718'. [ 811.159387][T16331] FAULT_INJECTION: forcing a failure. [ 811.159387][T16331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.170262][T16330] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3718'. [ 811.173699][T16331] CPU: 1 PID: 16331 Comm: syz.2.3718 Not tainted syzkaller #0 [ 811.190373][T16331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 811.200544][T16331] Call Trace: [ 811.203913][T16331] [ 811.206895][T16331] dump_stack_lvl+0x188/0x24e [ 811.211700][T16331] ? show_regs_print_info+0x12/0x12 [ 811.216940][T16331] ? load_image+0x400/0x400 [ 811.221815][T16331] ? __lock_acquire+0x7d10/0x7d10 [ 811.226959][T16331] should_fail_ex+0x399/0x4d0 [ 811.231659][T16331] _copy_from_user+0x2c/0x170 [ 811.236487][T16331] iovec_from_user+0x143/0x360 [ 811.241369][T16331] __import_iovec+0x6d/0x500 [ 811.245990][T16331] ? __might_fault+0xa6/0x120 [ 811.250863][T16331] import_iovec+0x6f/0xa0 [ 811.255421][T16331] ___sys_recvmsg+0x4b6/0x590 [ 811.260398][T16331] ? __sys_recvmsg+0x290/0x290 [ 811.265366][T16331] ? common_file_perm+0x171/0x1c0 [ 811.270891][T16331] ? __fget_files+0x43d/0x4b0 [ 811.275712][T16331] __x64_sys_recvmsg+0x205/0x2e0 [ 811.280660][T16331] ? ___sys_recvmsg+0x590/0x590 [ 811.285606][T16331] ? lockdep_hardirqs_on+0x94/0x140 [ 811.290899][T16331] do_syscall_64+0x4c/0xa0 [ 811.295508][T16331] ? clear_bhb_loop+0x60/0xb0 [ 811.300282][T16331] ? clear_bhb_loop+0x60/0xb0 [ 811.305167][T16331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.311319][T16331] RIP: 0033:0x7f552639c799 [ 811.315790][T16331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.335850][T16331] RSP: 002b:00007f55271fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 811.344458][T16331] RAX: ffffffffffffffda RBX: 00007f5526616090 RCX: 00007f552639c799 [ 811.352816][T16331] RDX: 0000000000000100 RSI: 0000200000000040 RDI: 0000000000000003 [ 811.360875][T16331] RBP: 00007f55271fd090 R08: 0000000000000000 R09: 0000000000000000 [ 811.369364][T16331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.377950][T16331] R13: 00007f5526616128 R14: 00007f5526616090 R15: 00007fff0ad55748 [ 811.386215][T16331] [ 811.473258][T16334] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3720'. [ 811.889183][T16347] netlink: 'syz.0.3723': attribute type 10 has an invalid length. [ 812.256896][T13518] Bluetooth: hci2: Malformed LE Event: 0x0b [ 812.743384][T16381] netlink: 'syz.1.3736': attribute type 10 has an invalid length. [ 813.712381][T13518] Bluetooth: hci5: Malformed LE Event: 0x0b [ 813.955200][T16416] FAULT_INJECTION: forcing a failure. [ 813.955200][T16416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.994143][T16416] CPU: 1 PID: 16416 Comm: syz.4.3746 Not tainted syzkaller #0 [ 814.001751][T16416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 814.011907][T16416] Call Trace: [ 814.015278][T16416] [ 814.018234][T16416] dump_stack_lvl+0x188/0x24e [ 814.022921][T16416] ? show_regs_print_info+0x12/0x12 [ 814.028237][T16416] ? load_image+0x400/0x400 [ 814.032842][T16416] ? __lock_acquire+0x7d10/0x7d10 [ 814.037895][T16416] should_fail_ex+0x399/0x4d0 [ 814.042577][T16416] strncpy_from_user+0x32/0x350 [ 814.047528][T16416] bpf_prog_load+0x1f3/0x1560 [ 814.052510][T16416] ? map_freeze+0x390/0x390 [ 814.057013][T16416] ? __might_fault+0xa6/0x120 [ 814.061877][T16416] ? __might_fault+0xa6/0x120 [ 814.066553][T16416] ? __might_fault+0xc2/0x120 [ 814.071404][T16416] ? __might_fault+0xa6/0x120 [ 814.076353][T16416] ? bpf_lsm_bpf+0x5/0x10 [ 814.080685][T16416] ? security_bpf+0x7a/0xa0 [ 814.085358][T16416] __sys_bpf+0x5b8/0x780 [ 814.089749][T16416] ? bpf_link_show_fdinfo+0x380/0x380 [ 814.095519][T16416] ? lock_chain_count+0x20/0x20 [ 814.100464][T16416] __x64_sys_bpf+0x78/0x90 [ 814.104885][T16416] do_syscall_64+0x4c/0xa0 [ 814.109304][T16416] ? clear_bhb_loop+0x60/0xb0 [ 814.114011][T16416] ? clear_bhb_loop+0x60/0xb0 [ 814.118717][T16416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 814.124702][T16416] RIP: 0033:0x7fa62919c799 [ 814.129125][T16416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.149883][T16416] RSP: 002b:00007fa62a143028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 814.158752][T16416] RAX: ffffffffffffffda RBX: 00007fa629415fa0 RCX: 00007fa62919c799 [ 814.167136][T16416] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 814.175326][T16416] RBP: 00007fa62a143090 R08: 0000000000000000 R09: 0000000000000000 [ 814.183388][T16416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.191466][T16416] R13: 00007fa629416038 R14: 00007fa629415fa0 R15: 00007ffde1338938 [ 814.199460][T16416] [ 814.221444][T16420] FAULT_INJECTION: forcing a failure. [ 814.221444][T16420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.257974][T16420] CPU: 1 PID: 16420 Comm: syz.3.3747 Not tainted syzkaller #0 [ 814.265648][T16420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 814.276109][T16420] Call Trace: [ 814.279511][T16420] [ 814.282464][T16420] dump_stack_lvl+0x188/0x24e [ 814.287179][T16420] ? show_regs_print_info+0x12/0x12 [ 814.292416][T16420] ? load_image+0x400/0x400 [ 814.297205][T16420] ? __lock_acquire+0x7d10/0x7d10 [ 814.302396][T16420] ? mark_lock+0x94/0x320 [ 814.307091][T16420] should_fail_ex+0x399/0x4d0 [ 814.311856][T16420] _copy_from_user+0x2c/0x170 [ 814.316545][T16420] ____sys_sendmsg+0x30a/0x970 [ 814.321416][T16420] ? __sys_sendmsg_sock+0x30/0x30 [ 814.326707][T16420] ? __import_iovec+0x315/0x500 [ 814.331782][T16420] ? import_iovec+0x6f/0xa0 [ 814.336661][T16420] ___sys_sendmsg+0x2a2/0x360 [ 814.341883][T16420] ? __sys_sendmsg+0x290/0x290 [ 814.346679][T16420] ? __lock_acquire+0x7d10/0x7d10 [ 814.351986][T16420] __se_sys_sendmsg+0x1bb/0x2a0 [ 814.357037][T16420] ? __x64_sys_sendmsg+0x80/0x80 [ 814.362224][T16420] ? lockdep_hardirqs_on+0x94/0x140 [ 814.367608][T16420] do_syscall_64+0x4c/0xa0 [ 814.372120][T16420] ? clear_bhb_loop+0x60/0xb0 [ 814.376909][T16420] ? clear_bhb_loop+0x60/0xb0 [ 814.381757][T16420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 814.387828][T16420] RIP: 0033:0x7f399459c799 [ 814.392254][T16420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.412948][T16420] RSP: 002b:00007f39953d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 814.421601][T16420] RAX: ffffffffffffffda RBX: 00007f3994815fa0 RCX: 00007f399459c799 [ 814.429752][T16420] RDX: 0000000000040808 RSI: 00002000000009c0 RDI: 0000000000000004 [ 814.437821][T16420] RBP: 00007f39953d7090 R08: 0000000000000000 R09: 0000000000000000 [ 814.445800][T16420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.454041][T16420] R13: 00007f3994816038 R14: 00007f3994815fa0 R15: 00007ffc04efcbb8 [ 814.462347][T16420] [ 814.660946][T16424] netlink: 'syz.3.3749': attribute type 10 has an invalid length. [ 814.703489][T16424] __nla_validate_parse: 8 callbacks suppressed [ 814.703542][T16424] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3749'. [ 816.517683][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 816.615046][T16464] FAULT_INJECTION: forcing a failure. [ 816.615046][T16464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.715016][T16464] CPU: 1 PID: 16464 Comm: syz.2.3761 Not tainted syzkaller #0 [ 816.722713][T16464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 816.732878][T16464] Call Trace: [ 816.736556][T16464] [ 816.739505][T16464] dump_stack_lvl+0x188/0x24e [ 816.744303][T16464] ? show_regs_print_info+0x12/0x12 [ 816.749618][T16464] ? load_image+0x400/0x400 [ 816.754621][T16464] ? __lock_acquire+0x7d10/0x7d10 [ 816.759697][T16464] should_fail_ex+0x399/0x4d0 [ 816.764585][T16464] _copy_from_user+0x2c/0x170 [ 816.769472][T16464] iovec_from_user+0x143/0x360 [ 816.774349][T16464] __import_iovec+0x6d/0x500 [ 816.779144][T16464] import_iovec+0x6f/0xa0 [ 816.783596][T16464] ___sys_sendmsg+0x252/0x360 [ 816.788527][T16464] ? __sys_sendmsg+0x290/0x290 [ 816.793424][T16464] ? __lock_acquire+0x7d10/0x7d10 [ 816.798598][T16464] __se_sys_sendmsg+0x1bb/0x2a0 [ 816.803487][T16464] ? __x64_sys_sendmsg+0x80/0x80 [ 816.808820][T16464] ? lockdep_hardirqs_on+0x94/0x140 [ 816.814510][T16464] do_syscall_64+0x4c/0xa0 [ 816.819044][T16464] ? clear_bhb_loop+0x60/0xb0 [ 816.823928][T16464] ? clear_bhb_loop+0x60/0xb0 [ 816.828728][T16464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 816.834833][T16464] RIP: 0033:0x7f552639c799 [ 816.839377][T16464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.859281][T16464] RSP: 002b:00007f55271fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 816.867920][T16464] RAX: ffffffffffffffda RBX: 00007f5526616090 RCX: 00007f552639c799 [ 816.875928][T16464] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000005 [ 816.884088][T16464] RBP: 00007f55271fd090 R08: 0000000000000000 R09: 0000000000000000 [ 816.892422][T16464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.900506][T16464] R13: 00007f5526616128 R14: 00007f5526616090 R15: 00007fff0ad55748 [ 816.908692][T16464] [ 817.735953][T16479] netlink: 'syz.3.3766': attribute type 10 has an invalid length. [ 817.744371][T16479] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3766'. [ 819.872117][T16503] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3775'. [ 820.584060][T16513] FAULT_INJECTION: forcing a failure. [ 820.584060][T16513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 820.637791][T16513] CPU: 0 PID: 16513 Comm: syz.2.3778 Not tainted syzkaller #0 [ 820.645492][T16513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 820.655843][T16513] Call Trace: [ 820.659216][T16513] [ 820.662586][T16513] dump_stack_lvl+0x188/0x24e [ 820.667294][T16513] ? show_regs_print_info+0x12/0x12 [ 820.672516][T16513] ? load_image+0x400/0x400 [ 820.677033][T16513] ? __lock_acquire+0x7d10/0x7d10 [ 820.682246][T16513] ? __kasan_slab_alloc+0x6b/0x80 [ 820.687466][T16513] should_fail_ex+0x399/0x4d0 [ 820.692167][T16513] strncpy_from_user+0x32/0x350 [ 820.697221][T16513] getname_flags+0xf2/0x500 [ 820.701750][T16513] do_sys_openat2+0xdd/0x4b0 [ 820.706454][T16513] ? do_sys_open+0xe0/0xe0 [ 820.711056][T16513] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 820.717146][T16513] ? lock_chain_count+0x20/0x20 [ 820.722100][T16513] __x64_sys_openat+0x135/0x160 [ 820.726973][T16513] do_syscall_64+0x4c/0xa0 [ 820.731716][T16513] ? clear_bhb_loop+0x60/0xb0 [ 820.736581][T16513] ? clear_bhb_loop+0x60/0xb0 [ 820.741272][T16513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 820.747269][T16513] RIP: 0033:0x7f552639c799 [ 820.751964][T16513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.772377][T16513] RSP: 002b:00007f552721e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 820.780995][T16513] RAX: ffffffffffffffda RBX: 00007f5526615fa0 RCX: 00007f552639c799 [ 820.789261][T16513] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 820.797509][T16513] RBP: 00007f552721e090 R08: 0000000000000000 R09: 0000000000000000 [ 820.805787][T16513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.814297][T16513] R13: 00007f5526616038 R14: 00007f5526615fa0 R15: 00007fff0ad55748 [ 820.822480][T16513] [ 821.706584][T16524] netlink: 'syz.2.3780': attribute type 10 has an invalid length. [ 821.724780][T16524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3780'. [ 822.329281][T16530] netlink: 'syz.4.3782': attribute type 10 has an invalid length. [ 822.354994][T16530] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3782'. [ 822.398995][T16530] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 822.645411][T16533] netlink: 'syz.2.3783': attribute type 10 has an invalid length. [ 822.674761][T16533] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3783'. [ 823.148943][T16549] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3789'. [ 823.544720][T16556] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3791'. [ 823.603461][T16556] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 823.998922][T16563] netlink: 'syz.0.3794': attribute type 10 has an invalid length. [ 824.045809][T16563] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3794'. [ 825.258641][ T4277] Bluetooth: hci2: Malformed LE Event: 0x0b [ 825.260397][T16585] netlink: 'syz.2.3798': attribute type 10 has an invalid length. [ 825.273598][T16585] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3798'. [ 825.706075][T16590] IPv6: Can't replace route, no match found [ 825.952450][T16603] netlink: 'syz.1.3805': attribute type 10 has an invalid length. [ 825.984027][T16603] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3805'. [ 826.027304][T16597] netlink: 15175 bytes leftover after parsing attributes in process `syz.3.3803'. [ 826.242694][T16614] netlink: 'syz.4.3810': attribute type 10 has an invalid length. [ 826.318568][T16615] netlink: 'syz.1.3809': attribute type 10 has an invalid length. [ 826.372068][T16615] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3809'. [ 828.214539][T16652] netlink: 'syz.2.3819': attribute type 10 has an invalid length. [ 828.330702][T16652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3819'. [ 828.535564][T16652] bridge0: port 4(veth0_vlan) entered blocking state [ 828.684892][T16652] bridge0: port 4(veth0_vlan) entered disabled state [ 828.771937][T16652] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 828.820916][T16654] netlink: 'syz.4.3820': attribute type 10 has an invalid length. [ 828.858791][T16654] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3820'. [ 828.974158][T16654] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 829.277714][T16659] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3821'. [ 829.781861][T16667] netlink: 'syz.2.3824': attribute type 10 has an invalid length. [ 829.814328][T16667] bridge0: port 3(team0) entered disabled state [ 829.821144][T16667] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.828647][T16667] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.840815][T16667] bridge0: port 3(team0) entered blocking state [ 829.847455][T16667] bridge0: port 3(team0) entered forwarding state [ 829.854466][T16667] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.861988][T16667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.869660][T16667] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.877266][T16667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.919278][T16667] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 830.225589][T16679] netlink: 'syz.0.3828': attribute type 10 has an invalid length. [ 830.233907][T16679] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3828'. [ 830.292256][T16681] netlink: 'syz.2.3826': attribute type 10 has an invalid length. [ 830.324713][T16681] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3826'. [ 830.924554][T16699] netlink: 'syz.3.3833': attribute type 8 has an invalid length. [ 830.970001][T16699] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3833'. [ 831.286195][T16707] netlink: 'syz.1.3834': attribute type 10 has an invalid length. [ 831.306794][T16707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3834'. [ 831.348902][T16710] netlink: 'syz.0.3835': attribute type 10 has an invalid length. [ 831.357358][T16710] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3835'. [ 833.417148][T16736] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3842'. [ 834.130404][T16747] netlink: 'syz.1.3843': attribute type 10 has an invalid length. [ 834.144349][T16747] bridge0: port 3(team0) entered disabled state [ 834.151374][T16747] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.158917][T16747] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.296501][T16747] bridge0: port 3(team0) entered blocking state [ 834.303059][T16747] bridge0: port 3(team0) entered forwarding state [ 834.310182][T16747] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.317362][T16747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.324880][T16747] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.332125][T16747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.349972][T16747] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 835.651431][T16767] netlink: 'syz.2.3849': attribute type 10 has an invalid length. [ 835.716454][T16767] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3849'. [ 836.303910][T16769] netlink: 'syz.2.3851': attribute type 10 has an invalid length. [ 836.324798][T16769] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3851'. [ 836.351927][T16775] netlink: 'syz.1.3852': attribute type 8 has an invalid length. [ 836.437292][T16775] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3852'. [ 836.995402][T13518] Bluetooth: hci2: command 0x0406 tx timeout [ 837.287782][T16792] netlink: 'syz.2.3858': attribute type 10 has an invalid length. [ 837.336747][T16792] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3858'. [ 837.700943][T16808] netlink: 'syz.0.3865': attribute type 10 has an invalid length. [ 837.784452][T16808] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.806044][T16808] device bridge_slave_1 left promiscuous mode [ 837.842205][T16808] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.936198][T16808] device bridge_slave_1 entered promiscuous mode [ 837.970832][T16808] team0: Port device bridge_slave_1 added [ 837.996051][T16814] netlink: 'syz.1.3869': attribute type 10 has an invalid length. [ 838.046803][T16814] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.076597][T16814] device bridge_slave_1 left promiscuous mode [ 838.090242][T16814] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.147644][T16814] device bridge_slave_1 entered promiscuous mode [ 838.170877][T16814] team0: Port device bridge_slave_1 added [ 838.239118][T16829] netlink: 'syz.0.3876': attribute type 10 has an invalid length. [ 838.256925][T16829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3876'. [ 839.057448][T16851] netlink: 'syz.1.3882': attribute type 2 has an invalid length. [ 839.268086][T16851] device 0 entered promiscuous mode [ 839.469526][T16858] netlink: 'syz.2.3883': attribute type 10 has an invalid length. [ 839.510514][T16858] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3883'. [ 839.920439][T16864] netlink: 'syz.1.3886': attribute type 29 has an invalid length. [ 840.103804][T16862] device syzkaller0 entered promiscuous mode [ 843.187143][T16870] validate_nla: 2 callbacks suppressed [ 843.187159][T16870] netlink: 'syz.0.3897': attribute type 10 has an invalid length. [ 843.203767][T16870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3897'. [ 843.220810][T16875] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3898'. [ 843.447163][T16888] netlink: 'syz.0.3890': attribute type 10 has an invalid length. [ 843.490740][T16888] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3890'. [ 843.529048][T16889] netlink: 'syz.1.3891': attribute type 10 has an invalid length. [ 843.551391][T16889] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3891'. [ 843.613954][T16892] netlink: 'syz.2.3893': attribute type 10 has an invalid length. [ 843.625337][T16892] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3893'. [ 845.368047][T16915] netlink: 'syz.4.3901': attribute type 10 has an invalid length. [ 845.446153][T16915] device bridge_slave_1 entered promiscuous mode [ 845.468595][T16915] team0: Port device bridge_slave_1 added [ 845.486445][T16912] netlink: 'syz.1.3911': attribute type 10 has an invalid length. [ 845.542880][T16912] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3911'. [ 845.874335][T16924] netlink: 'syz.3.3903': attribute type 10 has an invalid length. [ 845.903181][T16924] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3903'. [ 846.117156][T16929] netlink: 'syz.4.3905': attribute type 29 has an invalid length. [ 846.332052][T16926] device syzkaller0 entered promiscuous mode [ 846.488039][T16929] netlink: 'syz.4.3905': attribute type 29 has an invalid length. [ 846.531008][T16937] netlink: 'syz.3.3907': attribute type 10 has an invalid length. [ 846.554950][T16937] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3907'. [ 846.870088][T16943] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3909'. [ 849.160408][T16950] validate_nla: 2 callbacks suppressed [ 849.160431][T16950] netlink: 'syz.1.3913': attribute type 10 has an invalid length. [ 849.174336][T16950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3913'. [ 849.252832][T16953] netlink: 'syz.2.3915': attribute type 10 has an invalid length. [ 849.311638][T16953] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.384111][T16953] device bridge_slave_1 left promiscuous mode [ 849.397302][T16953] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.458766][T16953] device bridge_slave_1 entered promiscuous mode [ 849.472663][T16953] team0: Port device bridge_slave_1 added [ 850.266615][T16962] netlink: 'syz.1.3926': attribute type 10 has an invalid length. [ 850.286207][T16962] bridge0: port 3(team0) entered disabled state [ 850.294539][T16962] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.311519][T16955] : port 1(gretap0) entered blocking state [ 850.324971][T16955] : port 1(gretap0) entered disabled state [ 850.332180][T16955] device gretap0 entered promiscuous mode [ 850.712116][T16977] netlink: 'syz.2.3922': attribute type 10 has an invalid length. [ 850.762637][T16977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3922'. [ 850.946875][T16980] netlink: 'syz.0.3920': attribute type 2 has an invalid length. [ 850.974647][T16980] netlink: 'syz.0.3920': attribute type 8 has an invalid length. [ 851.034623][T16980] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3920'. [ 851.153489][T16990] netlink: 'syz.2.3925': attribute type 10 has an invalid length. [ 851.175626][T16990] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3925'. [ 851.413790][T16995] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3923'. [ 851.642174][T16999] device syzkaller0 entered promiscuous mode [ 851.657123][T17001] netlink: 'syz.2.3927': attribute type 29 has an invalid length. [ 851.681132][T17001] netlink: 'syz.2.3927': attribute type 29 has an invalid length. [ 851.749276][T16999] netlink: 'syz.2.3927': attribute type 29 has an invalid length. [ 856.637066][T17019] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3943'. [ 856.748950][T17019] device team_slave_0 left promiscuous mode [ 856.868525][T17019] team0: Port device team_slave_0 removed [ 856.887989][T17019] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 857.022487][T17031] IPv6: Can't replace route, no match found [ 857.331277][T17037] validate_nla: 1 callbacks suppressed [ 857.331312][T17037] netlink: 'syz.3.3936': attribute type 10 has an invalid length. [ 857.367961][T17037] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3936'. [ 857.413444][T17028] netlink: 15175 bytes leftover after parsing attributes in process `syz.4.3935'. [ 857.475015][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 857.518304][T17039] syz.1.3937[17039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 857.518688][T17039] syz.1.3937[17039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 857.852261][T17043] netlink: 'syz.0.3950': attribute type 10 has an invalid length. [ 858.028520][T17043] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3950'. [ 858.900355][T17060] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3942'. [ 861.208085][T17065] netlink: 'syz.4.3945': attribute type 10 has an invalid length. [ 861.216191][T17065] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3945'. [ 861.249459][T17065] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 861.614290][T17076] netlink: 'syz.1.3947': attribute type 10 has an invalid length. [ 861.922598][T17081] IPv6: Can't replace route, no match found [ 862.403891][T17090] netlink: 'syz.2.3955': attribute type 10 has an invalid length. [ 862.442220][T17090] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3955'. [ 862.962914][T17102] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3959'. [ 863.193758][T17102] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 864.147519][T17116] netlink: 'syz.1.3962': attribute type 10 has an invalid length. [ 864.578747][T17128] FAULT_INJECTION: forcing a failure. [ 864.578747][T17128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.612735][T17133] netlink: 'syz.4.3969': attribute type 10 has an invalid length. [ 864.684948][T17133] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3969'. [ 864.694353][T17128] CPU: 0 PID: 17128 Comm: syz.3.3968 Not tainted syzkaller #0 [ 864.702401][T17128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 864.712809][T17128] Call Trace: [ 864.716180][T17128] [ 864.719120][T17128] dump_stack_lvl+0x188/0x24e [ 864.724207][T17128] ? show_regs_print_info+0x12/0x12 [ 864.729716][T17128] ? load_image+0x400/0x400 [ 864.734318][T17128] ? __lock_acquire+0x7d10/0x7d10 [ 864.739531][T17128] should_fail_ex+0x399/0x4d0 [ 864.744390][T17128] _copy_from_user+0x2c/0x170 [ 864.749518][T17128] __copy_msghdr+0x3b7/0x580 [ 864.754294][T17128] ___sys_sendmsg+0x210/0x360 [ 864.759293][T17128] ? __sys_sendmsg+0x290/0x290 [ 864.764076][T17128] ? __lock_acquire+0x7d10/0x7d10 [ 864.769317][T17128] __se_sys_sendmsg+0x1bb/0x2a0 [ 864.774340][T17128] ? __x64_sys_sendmsg+0x80/0x80 [ 864.779548][T17128] ? lockdep_hardirqs_on+0x94/0x140 [ 864.785642][T17128] do_syscall_64+0x4c/0xa0 [ 864.790087][T17128] ? clear_bhb_loop+0x60/0xb0 [ 864.795114][T17128] ? clear_bhb_loop+0x60/0xb0 [ 864.799984][T17128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 864.806396][T17128] RIP: 0033:0x7f399459c799 [ 864.811339][T17128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.832257][T17128] RSP: 002b:00007f39953d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.841461][T17128] RAX: ffffffffffffffda RBX: 00007f3994815fa0 RCX: 00007f399459c799 [ 864.850573][T17128] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000004 [ 864.859629][T17128] RBP: 00007f39953d7090 R08: 0000000000000000 R09: 0000000000000000 [ 864.868423][T17128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.876661][T17128] R13: 00007f3994816038 R14: 00007f3994815fa0 R15: 00007ffc04efcbb8 [ 864.885890][T17128] [ 864.910061][T17133] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 865.999984][T17147] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3973'. [ 867.028183][T17160] netlink: 'syz.2.3977': attribute type 10 has an invalid length. [ 867.084101][T17160] bridge0: port 3(team0) entered disabled state [ 867.091032][T17160] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.723803][T17197] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3987'. [ 868.966256][T17197] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 869.744556][T17212] netlink: 'syz.0.3992': attribute type 10 has an invalid length. [ 869.778083][T17212] bridge0: port 3(team0) entered disabled state [ 869.787036][T17212] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.771885][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.778605][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.882234][T17248] netlink: 'syz.1.4004': attribute type 10 has an invalid length. [ 871.908836][T17248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4004'. [ 872.016952][T17252] netlink: 'syz.2.4006': attribute type 10 has an invalid length. [ 872.714679][T17266] netlink: 'syz.0.4009': attribute type 10 has an invalid length. [ 872.747355][T17266] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4009'. [ 876.122928][T17305] netlink: 'syz.3.4018': attribute type 10 has an invalid length. [ 876.162370][T17305] bridge0: port 3(team0) entered disabled state [ 876.169529][T17305] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.378315][T17305] bridge0: port 3(team0) entered blocking state [ 876.384810][T17305] bridge0: port 3(team0) entered forwarding state [ 876.391821][T17305] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.399451][T17305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.472310][T17305] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 879.582094][T17373] netlink: 'syz.4.4037': attribute type 10 has an invalid length. [ 879.724257][T17373] device veth1_macvtap left promiscuous mode [ 880.659966][T17405] netlink: 'syz.1.4045': attribute type 10 has an invalid length. [ 880.945308][T17414] FAULT_INJECTION: forcing a failure. [ 880.945308][T17414] name failslab, interval 1, probability 0, space 0, times 0 [ 880.967001][T17412] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4048'. [ 881.056568][T17412] device caif0 entered promiscuous mode [ 881.091095][T17414] CPU: 0 PID: 17414 Comm: syz.0.4049 Not tainted syzkaller #0 [ 881.098709][T17414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 881.109054][T17414] Call Trace: [ 881.112439][T17414] [ 881.115393][T17414] dump_stack_lvl+0x188/0x24e [ 881.120113][T17414] ? show_regs_print_info+0x12/0x12 [ 881.125372][T17414] ? load_image+0x400/0x400 [ 881.130082][T17414] ? __might_sleep+0xd0/0xd0 [ 881.134869][T17414] ? __lock_acquire+0x7d10/0x7d10 [ 881.140019][T17414] ? memset+0x1e/0x40 [ 881.144224][T17414] should_fail_ex+0x399/0x4d0 [ 881.149115][T17414] should_failslab+0x5/0x20 [ 881.153916][T17414] slab_pre_alloc_hook+0x59/0x310 [ 881.159067][T17414] kmem_cache_alloc+0x56/0x2f0 [ 881.164199][T17414] ? security_inode_alloc+0x30/0x110 [ 881.169902][T17414] security_inode_alloc+0x30/0x110 [ 881.175203][T17414] inode_init_always+0x8f8/0xc90 [ 881.180324][T17414] new_inode_pseudo+0x91/0x1c0 [ 881.185267][T17414] __sock_create+0x129/0x940 [ 881.189958][T17414] __sys_socket+0xc4/0x190 [ 881.194541][T17414] __x64_sys_socket+0x76/0x80 [ 881.199216][T17414] do_syscall_64+0x4c/0xa0 [ 881.203645][T17414] ? clear_bhb_loop+0x60/0xb0 [ 881.208412][T17414] ? clear_bhb_loop+0x60/0xb0 [ 881.213083][T17414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 881.219151][T17414] RIP: 0033:0x7f258a19c799 [ 881.223745][T17414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.243624][T17414] RSP: 002b:00007f258af94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 881.252144][T17414] RAX: ffffffffffffffda RBX: 00007f258a415fa0 RCX: 00007f258a19c799 [ 881.260375][T17414] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 881.268706][T17414] RBP: 00007f258af94090 R08: 0000000000000000 R09: 0000000000000000 [ 881.276945][T17414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.285196][T17414] R13: 00007f258a416038 R14: 00007f258a415fa0 R15: 00007fff5666e108 [ 881.293459][T17414] [ 881.322567][T17414] socket: no more sockets [ 881.971728][T17437] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4055'. [ 882.020768][T17434] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4054'. [ 882.167800][T17434] device caif0 entered promiscuous mode [ 882.233550][T17434] FAULT_INJECTION: forcing a failure. [ 882.233550][T17434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 882.345628][T17434] CPU: 0 PID: 17434 Comm: syz.0.4054 Not tainted syzkaller #0 [ 882.353347][T17434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 882.363713][T17434] Call Trace: [ 882.367198][T17434] [ 882.370171][T17434] dump_stack_lvl+0x188/0x24e [ 882.375058][T17434] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 882.381696][T17434] ? show_regs_print_info+0x12/0x12 [ 882.387099][T17434] ? load_image+0x400/0x400 [ 882.391764][T17434] ? ___ratelimit+0x4f0/0x5f0 [ 882.396531][T17434] should_fail_ex+0x399/0x4d0 [ 882.401411][T17434] _copy_from_user+0x2c/0x170 [ 882.406181][T17434] iovec_from_user+0x143/0x360 [ 882.411124][T17434] __import_iovec+0x6d/0x500 [ 882.415813][T17434] import_iovec+0x6f/0xa0 [ 882.420147][T17434] ___sys_sendmsg+0x252/0x360 [ 882.425045][T17434] ? __sys_sendmsg+0x290/0x290 [ 882.429975][T17434] __se_sys_sendmsg+0x1bb/0x2a0 [ 882.434846][T17434] ? ct_nmi_exit+0x145/0x1c0 [ 882.439803][T17434] ? __x64_sys_sendmsg+0x80/0x80 [ 882.444852][T17434] ? lockdep_hardirqs_on+0x94/0x140 [ 882.450317][T17434] do_syscall_64+0x4c/0xa0 [ 882.454965][T17434] ? clear_bhb_loop+0x60/0xb0 [ 882.460105][T17434] ? clear_bhb_loop+0x60/0xb0 [ 882.464888][T17434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 882.470792][T17434] RIP: 0033:0x7f258a19c799 [ 882.475295][T17434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.495442][T17434] RSP: 002b:00007f258af94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 882.504311][T17434] RAX: ffffffffffffffda RBX: 00007f258a415fa0 RCX: 00007f258a19c799 [ 882.512564][T17434] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 882.520798][T17434] RBP: 00007f258af94090 R08: 0000000000000000 R09: 0000000000000000 [ 882.529035][T17434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 882.537524][T17434] R13: 00007f258a416038 R14: 00007f258a415fa0 R15: 00007fff5666e108 [ 882.545868][T17434] [ 882.813482][T17454] netlink: 'syz.2.4060': attribute type 10 has an invalid length. [ 882.887211][T17454] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4060'. [ 882.954347][T17458] netlink: 'syz.0.4061': attribute type 10 has an invalid length. [ 883.323254][T17463] netlink: 'syz.2.4062': attribute type 10 has an invalid length. [ 883.332761][T17463] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4062'. [ 883.558916][T17468] FAULT_INJECTION: forcing a failure. [ 883.558916][T17468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 883.663128][T17468] CPU: 1 PID: 17468 Comm: syz.3.4064 Not tainted syzkaller #0 [ 883.671004][T17468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 883.681692][T17468] Call Trace: [ 883.685164][T17468] [ 883.688279][T17468] dump_stack_lvl+0x188/0x24e [ 883.693003][T17468] ? show_regs_print_info+0x12/0x12 [ 883.698304][T17468] ? load_image+0x400/0x400 [ 883.703070][T17468] ? __lock_acquire+0x7d10/0x7d10 [ 883.708270][T17468] should_fail_ex+0x399/0x4d0 [ 883.713127][T17468] _copy_from_user+0x2c/0x170 [ 883.718187][T17468] iovec_from_user+0x143/0x360 [ 883.723060][T17468] __import_iovec+0x6d/0x500 [ 883.727687][T17468] import_iovec+0x6f/0xa0 [ 883.732031][T17468] ___sys_sendmsg+0x252/0x360 [ 883.736823][T17468] ? __sys_sendmsg+0x290/0x290 [ 883.741910][T17468] __se_sys_sendmsg+0x1bb/0x2a0 [ 883.746962][T17468] ? __x64_sys_sendmsg+0x80/0x80 [ 883.752196][T17468] ? syscall_enter_from_user_mode+0x2a/0x80 [ 883.758203][T17468] do_syscall_64+0x4c/0xa0 [ 883.762709][T17468] ? clear_bhb_loop+0x60/0xb0 [ 883.767631][T17468] ? clear_bhb_loop+0x60/0xb0 [ 883.772307][T17468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 883.778584][T17468] RIP: 0033:0x7f399459c799 [ 883.783437][T17468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.804978][T17468] RSP: 002b:00007f39953d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 883.814094][T17468] RAX: ffffffffffffffda RBX: 00007f3994815fa0 RCX: 00007f399459c799 [ 883.822413][T17468] RDX: 0000000004040044 RSI: 0000200000000000 RDI: 0000000000000009 [ 883.830657][T17468] RBP: 00007f39953d7090 R08: 0000000000000000 R09: 0000000000000000 [ 883.838800][T17468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.847392][T17468] R13: 00007f3994816038 R14: 00007f3994815fa0 R15: 00007ffc04efcbb8 [ 883.855908][T17468] [ 883.993513][T17470] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4065'. [ 884.081479][T17470] device caif0 entered promiscuous mode [ 884.155697][T17474] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4068'. [ 884.335297][T17477] netlink: 'syz.0.4068': attribute type 17 has an invalid length. [ 885.039734][T17490] netlink: 'syz.1.4074': attribute type 10 has an invalid length. [ 885.078871][T17490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4074'. [ 885.467220][T17497] bridge0: port 3(team0) entered disabled state [ 885.632269][T17497] device bridge_slave_0 left promiscuous mode [ 885.660033][T17497] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.046736][T17497] bond0: (slave bridge0): Releasing backup interface [ 887.300450][T17522] FAULT_INJECTION: forcing a failure. [ 887.300450][T17522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 887.344205][T17522] CPU: 1 PID: 17522 Comm: syz.1.4085 Not tainted syzkaller #0 [ 887.352083][T17522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 887.362264][T17522] Call Trace: [ 887.365949][T17522] [ 887.369020][T17522] dump_stack_lvl+0x188/0x24e [ 887.373821][T17522] ? show_regs_print_info+0x12/0x12 [ 887.379422][T17522] ? load_image+0x400/0x400 [ 887.384043][T17522] ? __lock_acquire+0x7d10/0x7d10 [ 887.389187][T17522] should_fail_ex+0x399/0x4d0 [ 887.393990][T17522] _copy_from_user+0x2c/0x170 [ 887.398705][T17522] __sys_bpf+0x2ea/0x780 [ 887.403176][T17522] ? bpf_link_show_fdinfo+0x380/0x380 [ 887.408792][T17522] ? lock_chain_count+0x20/0x20 [ 887.414011][T17522] __x64_sys_bpf+0x78/0x90 [ 887.418708][T17522] do_syscall_64+0x4c/0xa0 [ 887.423176][T17522] ? clear_bhb_loop+0x60/0xb0 [ 887.428345][T17522] ? clear_bhb_loop+0x60/0xb0 [ 887.433288][T17522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.439436][T17522] RIP: 0033:0x7ff8a2f9c799 [ 887.443956][T17522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.463919][T17522] RSP: 002b:00007ff8a3d8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 887.472520][T17522] RAX: ffffffffffffffda RBX: 00007ff8a3215fa0 RCX: 00007ff8a2f9c799 [ 887.481131][T17522] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 000000000000000f [ 887.489383][T17522] RBP: 00007ff8a3d8e090 R08: 0000000000000000 R09: 0000000000000000 [ 887.497696][T17522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.505995][T17522] R13: 00007ff8a3216038 R14: 00007ff8a3215fa0 R15: 00007fffdeed69e8 [ 887.514323][T17522] [ 887.573334][T17527] netlink: 'syz.4.4087': attribute type 10 has an invalid length. [ 887.600153][T17527] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4087'. [ 887.618072][T17527] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 887.854921][T17536] netlink: 'syz.1.4090': attribute type 10 has an invalid length. [ 887.874393][T17536] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4090'. [ 887.954102][T17538] bridge0: port 3(team0) entered disabled state [ 887.961620][T17538] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.128682][T17538] bridge0: port 3(team0) entered disabled state [ 888.182171][T17538] device bridge_slave_1 left promiscuous mode [ 888.206454][T17538] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.398529][T17538] bond0: (slave bridge0): Releasing backup interface [ 888.452586][T17548] FAULT_INJECTION: forcing a failure. [ 888.452586][T17548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.524345][T17548] CPU: 0 PID: 17548 Comm: syz.4.4096 Not tainted syzkaller #0 [ 888.532019][T17548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 888.542477][T17548] Call Trace: [ 888.545803][T17548] [ 888.549052][T17548] dump_stack_lvl+0x188/0x24e [ 888.553983][T17548] ? show_regs_print_info+0x12/0x12 [ 888.559365][T17548] ? load_image+0x400/0x400 [ 888.563948][T17548] ? __lock_acquire+0x7d10/0x7d10 [ 888.569142][T17548] ? snprintf+0xe5/0x140 [ 888.573461][T17548] should_fail_ex+0x399/0x4d0 [ 888.578237][T17548] _copy_to_user+0x2c/0x130 [ 888.583002][T17548] simple_read_from_buffer+0xe3/0x150 [ 888.588664][T17548] proc_fail_nth_read+0x1a6/0x220 [ 888.593801][T17548] ? proc_fault_inject_write+0x310/0x310 [ 888.599783][T17548] ? fsnotify_perm+0x248/0x550 [ 888.604725][T17548] ? proc_fault_inject_write+0x310/0x310 [ 888.610867][T17548] vfs_read+0x2de/0xa00 [ 888.615209][T17548] ? kernel_read+0x1e0/0x1e0 [ 888.620067][T17548] ? __fget_files+0x28/0x4b0 [ 888.624861][T17548] ? __fget_files+0x28/0x4b0 [ 888.629787][T17548] ? __fget_files+0x43d/0x4b0 [ 888.634572][T17548] ? __fdget_pos+0x2ae/0x360 [ 888.639233][T17548] ? ksys_read+0x71/0x250 [ 888.643613][T17548] ksys_read+0x14c/0x250 [ 888.648174][T17548] ? vfs_write+0xa30/0xa30 [ 888.652623][T17548] ? lockdep_hardirqs_on+0x94/0x140 [ 888.658117][T17548] do_syscall_64+0x4c/0xa0 [ 888.662735][T17548] ? clear_bhb_loop+0x60/0xb0 [ 888.667505][T17548] ? clear_bhb_loop+0x60/0xb0 [ 888.672209][T17548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 888.678300][T17548] RIP: 0033:0x7fa62915cfce [ 888.682824][T17548] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 888.702448][T17548] RSP: 002b:00007fa62a142fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 888.711232][T17548] RAX: ffffffffffffffda RBX: 00007fa62a1436c0 RCX: 00007fa62915cfce [ 888.719768][T17548] RDX: 000000000000000f RSI: 00007fa62a1430a0 RDI: 0000000000000007 [ 888.727956][T17548] RBP: 00007fa62a143090 R08: 0000000000000000 R09: 0000000000000000 [ 888.736126][T17548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.744368][T17548] R13: 00007fa629416038 R14: 00007fa629415fa0 R15: 00007ffde1338938 [ 888.752516][T17548] [ 889.045342][T17556] netlink: 'syz.3.4101': attribute type 10 has an invalid length. [ 889.072928][T17556] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4101'. [ 889.104010][T17556] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 889.552062][T17566] netlink: 'syz.4.4105': attribute type 10 has an invalid length. [ 889.598978][T17566] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4105'. [ 889.667896][T17566] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 889.691939][T17570] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4106'. [ 890.056993][T17587] FAULT_INJECTION: forcing a failure. [ 890.056993][T17587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.071391][T17587] CPU: 1 PID: 17587 Comm: syz.3.4111 Not tainted syzkaller #0 [ 890.079067][T17587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 890.089416][T17587] Call Trace: [ 890.093034][T17587] [ 890.096074][T17587] dump_stack_lvl+0x188/0x24e [ 890.100963][T17587] ? show_regs_print_info+0x12/0x12 [ 890.106364][T17587] ? load_image+0x400/0x400 [ 890.110972][T17587] should_fail_ex+0x399/0x4d0 [ 890.115833][T17587] copy_page_from_iter_atomic+0x21e/0x1280 [ 890.121661][T17587] ? pipe_zero+0x140/0x140 [ 890.126338][T17587] ? PageHeadHuge+0x8f/0x1c0 [ 890.131010][T17587] ? shmem_write_begin+0x1b4/0x3f0 [ 890.136209][T17587] generic_perform_write+0x34f/0x5c0 [ 890.141855][T17587] ? generic_file_direct_write+0x330/0x330 [ 890.147946][T17587] ? __file_remove_privs+0x5f0/0x5f0 [ 890.153425][T17587] ? rwsem_write_trylock+0x135/0x1c0 [ 890.158892][T17587] ? clear_nonspinnable+0x60/0x60 [ 890.164195][T17587] ? generic_write_checks_count+0x3d9/0x4c0 [ 890.170086][T17587] __generic_file_write_iter+0x148/0x2a0 [ 890.175915][T17587] generic_file_write_iter+0xab/0x2e0 [ 890.181393][T17587] vfs_write+0x4b1/0xa30 [ 890.185648][T17587] ? file_end_write+0x250/0x250 [ 890.190498][T17587] ? __fget_files+0x43d/0x4b0 [ 890.195336][T17587] ? __fdget_pos+0x2ae/0x360 [ 890.199925][T17587] ? ksys_write+0x71/0x250 [ 890.204529][T17587] ksys_write+0x14c/0x250 [ 890.209082][T17587] ? __ia32_sys_read+0x80/0x80 [ 890.214021][T17587] ? lockdep_hardirqs_on+0x94/0x140 [ 890.219498][T17587] do_syscall_64+0x4c/0xa0 [ 890.224659][T17587] ? clear_bhb_loop+0x60/0xb0 [ 890.229348][T17587] ? clear_bhb_loop+0x60/0xb0 [ 890.234139][T17587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 890.240423][T17587] RIP: 0033:0x7f399459c799 [ 890.244937][T17587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.265264][T17587] RSP: 002b:00007f39953d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 890.273885][T17587] RAX: ffffffffffffffda RBX: 00007f3994815fa0 RCX: 00007f399459c799 [ 890.282078][T17587] RDX: 00000000fffffd26 RSI: 0000200000000000 RDI: 0000000000000008 [ 890.290910][T17587] RBP: 00007f39953d7090 R08: 0000000000000000 R09: 0000000000000000 [ 890.300934][T17587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.309319][T17587] R13: 00007f3994816038 R14: 00007f3994815fa0 R15: 00007ffc04efcbb8 [ 890.317570][T17587] [ 890.714145][T17595] bridge0: port 3(team0) entered disabled state [ 890.746105][T17595] device bridge_slave_0 left promiscuous mode [ 890.753186][T17595] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.891765][T17595] bond0: (slave bridge0): Releasing backup interface [ 891.259618][T17606] FAULT_INJECTION: forcing a failure. [ 891.259618][T17606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.274945][T17605] netlink: 'syz.3.4117': attribute type 10 has an invalid length. [ 891.311916][T17609] FAULT_INJECTION: forcing a failure. [ 891.311916][T17609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.367660][T17609] CPU: 1 PID: 17609 Comm: syz.0.4120 Not tainted syzkaller #0 [ 891.375380][T17609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 891.385492][T17609] Call Trace: [ 891.388807][T17609] [ 891.391763][T17609] dump_stack_lvl+0x188/0x24e [ 891.396491][T17609] ? show_regs_print_info+0x12/0x12 [ 891.402256][T17609] ? load_image+0x400/0x400 [ 891.406811][T17609] ? __lock_acquire+0x7d10/0x7d10 [ 891.412144][T17609] should_fail_ex+0x399/0x4d0 [ 891.416867][T17609] _copy_from_user+0x2c/0x170 [ 891.421593][T17609] __copy_msghdr+0x3b7/0x580 [ 891.426282][T17609] ___sys_sendmsg+0x210/0x360 [ 891.431515][T17609] ? __sys_sendmsg+0x290/0x290 [ 891.436492][T17609] ? __lock_acquire+0x7d10/0x7d10 [ 891.441737][T17609] __se_sys_sendmsg+0x1bb/0x2a0 [ 891.446986][T17609] ? __x64_sys_sendmsg+0x80/0x80 [ 891.451933][T17609] ? lockdep_hardirqs_on+0x94/0x140 [ 891.457142][T17609] do_syscall_64+0x4c/0xa0 [ 891.461848][T17609] ? clear_bhb_loop+0x60/0xb0 [ 891.466520][T17609] ? clear_bhb_loop+0x60/0xb0 [ 891.471377][T17609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.477439][T17609] RIP: 0033:0x7f258a19c799 [ 891.481854][T17609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.502435][T17609] RSP: 002b:00007f258af94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 891.511070][T17609] RAX: ffffffffffffffda RBX: 00007f258a415fa0 RCX: 00007f258a19c799 [ 891.519138][T17609] RDX: 000000000000e900 RSI: 0000200000000b40 RDI: 0000000000000003 [ 891.527470][T17609] RBP: 00007f258af94090 R08: 0000000000000000 R09: 0000000000000000 [ 891.535696][T17609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.543855][T17609] R13: 00007f258a416038 R14: 00007f258a415fa0 R15: 00007fff5666e108 [ 891.552028][T17609] [ 891.561600][T17606] CPU: 0 PID: 17606 Comm: syz.2.4118 Not tainted syzkaller #0 [ 891.569643][T17606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 891.580358][T17606] Call Trace: [ 891.583833][T17606] [ 891.586874][T17606] dump_stack_lvl+0x188/0x24e [ 891.591859][T17606] ? show_regs_print_info+0x12/0x12 [ 891.597381][T17606] ? load_image+0x400/0x400 [ 891.602199][T17606] ? __lock_acquire+0x7d10/0x7d10 [ 891.607530][T17606] should_fail_ex+0x399/0x4d0 [ 891.612262][T17606] _copy_from_user+0x2c/0x170 [ 891.617424][T17606] __copy_msghdr+0x3b7/0x580 [ 891.622160][T17606] ___sys_sendmsg+0x210/0x360 [ 891.622863][T17605] device geneve1 entered promiscuous mode [ 891.626870][T17606] ? __sys_sendmsg+0x290/0x290 [ 891.626925][T17606] ? __lock_acquire+0x7d10/0x7d10 [ 891.626964][T17606] __se_sys_sendmsg+0x1bb/0x2a0 [ 891.626989][T17606] ? __x64_sys_sendmsg+0x80/0x80 [ 891.627024][T17606] ? lockdep_hardirqs_on+0x94/0x140 [ 891.627048][T17606] do_syscall_64+0x4c/0xa0 [ 891.627072][T17606] ? clear_bhb_loop+0x60/0xb0 [ 891.662771][T17605] team0: Port device geneve1 added [ 891.667795][T17606] ? clear_bhb_loop+0x60/0xb0 [ 891.667837][T17606] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.667857][T17606] RIP: 0033:0x7f552639c799 [ 891.667877][T17606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.667891][T17606] RSP: 002b:00007f55271fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 891.667912][T17606] RAX: ffffffffffffffda RBX: 00007f5526616090 RCX: 00007f552639c799 [ 891.667923][T17606] RDX: 0000000004008848 RSI: 0000200000000340 RDI: 0000000000000003 [ 891.667936][T17606] RBP: 00007f55271fd090 R08: 0000000000000000 R09: 0000000000000000 [ 891.667948][T17606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.667959][T17606] R13: 00007f5526616128 R14: 00007f5526616090 R15: 00007fff0ad55748 [ 891.667985][T17606] [ 891.791232][T17613] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4121'. [ 891.862712][T17613] device caif0 entered promiscuous mode [ 892.195671][T17627] netlink: 'syz.1.4123': attribute type 10 has an invalid length. [ 892.204045][T17627] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4123'. [ 892.235557][T17627] bridge0: port 2(ipvlan1) entered blocking state [ 892.265606][T17627] bridge0: port 2(ipvlan1) entered disabled state [ 892.379482][T17627] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 892.885195][T17645] FAULT_INJECTION: forcing a failure. [ 892.885195][T17645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 892.933895][T17645] CPU: 0 PID: 17645 Comm: syz.3.4130 Not tainted syzkaller #0 [ 892.941426][T17645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 892.952055][T17645] Call Trace: [ 892.955370][T17645] [ 892.958409][T17645] dump_stack_lvl+0x188/0x24e [ 892.963312][T17645] ? show_regs_print_info+0x12/0x12 [ 892.968629][T17645] ? load_image+0x400/0x400 [ 892.973274][T17645] ? __lock_acquire+0x7d10/0x7d10 [ 892.978442][T17645] should_fail_ex+0x399/0x4d0 [ 892.983167][T17645] _copy_from_user+0x2c/0x170 [ 892.988144][T17645] iovec_from_user+0x143/0x360 [ 892.992936][T17645] __import_iovec+0x6d/0x500 [ 892.997573][T17645] import_iovec+0x6f/0xa0 [ 893.001986][T17645] ___sys_sendmsg+0x252/0x360 [ 893.006970][T17645] ? __sys_sendmsg+0x290/0x290 [ 893.011793][T17645] ? ktime_get_real_ts64+0x440/0x440 [ 893.017507][T17645] __se_sys_sendmsg+0x1bb/0x2a0 [ 893.022662][T17645] ? __x64_sys_sendmsg+0x80/0x80 [ 893.027754][T17645] ? lockdep_hardirqs_on+0x94/0x140 [ 893.032980][T17645] do_syscall_64+0x4c/0xa0 [ 893.037518][T17645] ? clear_bhb_loop+0x60/0xb0 [ 893.042483][T17645] ? clear_bhb_loop+0x60/0xb0 [ 893.047342][T17645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 893.053525][T17645] RIP: 0033:0x7f399459c799 [ 893.057963][T17645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.078494][T17645] RSP: 002b:00007f39953d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 893.087199][T17645] RAX: ffffffffffffffda RBX: 00007f3994815fa0 RCX: 00007f399459c799 [ 893.095376][T17645] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 893.103377][T17645] RBP: 00007f39953d7090 R08: 0000000000000000 R09: 0000000000000000 [ 893.111927][T17645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.120016][T17645] R13: 00007f3994816038 R14: 00007f3994815fa0 R15: 00007ffc04efcbb8 [ 893.128129][T17645] [ 894.120386][T17656] netlink: 'syz.2.4133': attribute type 10 has an invalid length. [ 894.239295][T17657] bridge0: port 3(team0) entered disabled state [ 894.292246][T17657] device bridge_slave_0 left promiscuous mode [ 894.327523][T17657] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.572318][T17657] bond0: (slave bridge0): Releasing backup interface [ 895.904823][T17687] netlink: 'syz.0.4145': attribute type 10 has an invalid length. [ 895.972228][T17687] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4145'. [ 896.085878][T17687] device ipvlan1 entered promiscuous mode [ 896.500937][T17687] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 897.368564][T17709] netlink: 'syz.3.4152': attribute type 10 has an invalid length. [ 898.006631][T17725] netlink: 'syz.1.4159': attribute type 10 has an invalid length. [ 898.021636][T17725] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4159'. [ 898.037730][T17725] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 898.688819][T17739] netlink: 'syz.1.4162': attribute type 2 has an invalid length. [ 898.871919][T17739] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4162'. [ 899.342731][T17742] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4163'. [ 899.794768][T17750] netlink: 'syz.3.4166': attribute type 10 has an invalid length. [ 900.084054][T17757] netlink: 'syz.2.4167': attribute type 10 has an invalid length. [ 900.093001][T17757] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4167'. [ 900.129858][T17757] device ipvlan1 entered promiscuous mode [ 900.236145][T17757] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 901.005484][T17778] netlink: 'syz.4.4173': attribute type 2 has an invalid length. [ 901.029240][T17778] device 0 entered promiscuous mode [ 901.095705][T17780] netlink: 'syz.0.4175': attribute type 3 has an invalid length. [ 901.104083][T17780] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4175'. [ 901.513639][T17789] netlink: 'syz.2.4176': attribute type 2 has an invalid length. [ 901.566393][T17789] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4176'. [ 901.616282][T17791] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4178'. [ 902.086325][T17804] netlink: 'syz.2.4181': attribute type 29 has an invalid length. [ 902.153698][T17804] netlink: 'syz.2.4181': attribute type 29 has an invalid length. [ 902.184906][T17807] netlink: 'syz.3.4182': attribute type 10 has an invalid length. [ 902.229303][T17806] netlink: 'syz.2.4181': attribute type 29 has an invalid length. [ 902.310208][T17804] netlink: 'syz.2.4181': attribute type 29 has an invalid length. [ 903.015497][T17829] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4189'. [ 903.126576][T17829] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 930.274941][T11268] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2670 jiffies s: 117229 root: 0x2/. [ 930.300160][T11268] rcu: blocking rcu_node structures (internal RCU debug): [ 930.320735][T11268] Sending NMI from CPU 0 to CPUs 1: [ 930.326680][ C1] NMI backtrace for cpu 1 [ 930.326695][ C1] CPU: 1 PID: 17841 Comm: syz.1.4192 Not tainted syzkaller #0 [ 930.326711][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 930.326720][ C1] RIP: 0010:__virt_addr_valid+0x234/0x540 [ 930.326751][ C1] Code: 01 48 c7 c7 20 b4 89 8a be 75 03 00 00 48 c7 c2 60 b4 89 8a e8 cd de 2a 00 4d 85 ff 74 37 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 <74> 08 4c 89 ff e8 42 4e 99 00 4d 8b 2f 4c 89 ee 48 83 e6 02 31 ff [ 930.326765][ C1] RSP: 0018:ffffc900001dff20 EFLAGS: 00000046 [ 930.326780][ C1] RAX: 1ffff11027fff25c RBX: 00000000b8f3b9f0 RCX: ffff8880556d3b80 [ 930.326792][ C1] RDX: 0000000000000100 RSI: ffffffff8adf0f40 RDI: ffffffff8adf0f00 [ 930.326803][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff215ec48 [ 930.326814][ C1] R10: dffffc0000000000 R11: fffffbfff215ec49 R12: dffffc0000000000 [ 930.326827][ C1] R13: dffffc0000000001 R14: ffffffff813a0eb8 R15: ffff88813fff92e0 [ 930.326838][ C1] FS: 00007ff8a3d8e6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 930.326852][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 930.326862][ C1] CR2: 000000110c30b53b CR3: 00000000246cb000 CR4: 00000000003506e0 [ 930.326875][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 930.326884][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 930.326893][ C1] Call Trace: [ 930.326900][ C1] [ 930.326909][ C1] kasan_addr_to_slab+0x9/0xc0 [ 930.326929][ C1] __kasan_record_aux_stack+0xf/0xc0 [ 930.326944][ C1] irq_work_queue_on+0x10f/0x260 [ 930.326967][ C1] rcu_read_unlock_special+0x3c9/0x510 [ 930.326987][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 930.327002][ C1] ? __perf_cgroup_move+0x150/0x150 [ 930.327024][ C1] __rcu_read_unlock+0x78/0xd0 [ 930.327038][ C1] perf_event_output_forward+0x271/0x2f0 [ 930.327058][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 930.327076][ C1] ? perf_get_page_size+0x430/0x430 [ 930.327095][ C1] ? tracing_gen_ctx_irq_test+0xc9/0x150 [ 930.327117][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 930.327136][ C1] __perf_event_overflow+0x448/0x610 [ 930.327158][ C1] perf_tp_event+0x38c/0xc00 [ 930.327178][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 930.327216][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 930.327230][ C1] ? sched_clock_cpu+0x6e/0x260 [ 930.327258][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 930.327279][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 930.327299][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 930.327318][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 930.327335][ C1] ? __irq_exit_rcu+0x147/0x230 [ 930.327348][ C1] ? irq_exit_rcu+0x20/0x20 [ 930.327363][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 930.327378][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 930.327397][ C1] trace_hardirqs_on+0x24/0x40 [ 930.327413][ C1] asm_sysvec_irq_work+0x16/0x20 [ 930.327428][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 930.327444][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 e2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 930.327455][ C1] RSP: 0018:ffffc900001e0740 EFLAGS: 00000206 [ 930.327467][ C1] RAX: f402a84e2d61b800 RBX: 1ffff9200003c0f0 RCX: f402a84e2d61b800 [ 930.327478][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0f60 [ 930.327489][ C1] RBP: ffffc900001e0840 R08: ffffffff90af627f R09: 1ffffffff215ec4f [ 930.327500][ C1] R10: dffffc0000000000 R11: fffffbfff215ec50 R12: 0000000000000246 [ 930.327510][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 [ 930.327532][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 930.327548][ C1] ? set_rps_cpu+0x670/0x670 [ 930.327576][ C1] __rcu_read_unlock+0x78/0xd0 [ 930.327590][ C1] netif_receive_skb_list_internal+0xa11/0xca0 [ 930.327620][ C1] ? netif_receive_skb_list_internal+0x4ad/0xca0 [ 930.327637][ C1] ? netif_receive_skb_core+0x230/0x230 [ 930.327656][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 930.327678][ C1] ? lock_chain_count+0x20/0x20 [ 930.327696][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 930.327714][ C1] napi_complete_done+0x378/0x850 [ 930.327733][ C1] ? __napi_schedule_irqoff+0x80/0x80 [ 930.327748][ C1] ? virtqueue_get_buf_ctx+0x456/0xd10 [ 930.327770][ C1] ? virtqueue_enable_cb_prepare+0x215/0x500 [ 930.327788][ C1] virtnet_poll+0x9b7/0x1180 [ 930.327817][ C1] ? refill_work+0x220/0x220 [ 930.327838][ C1] __napi_poll+0xc0/0x460 [ 930.327858][ C1] net_rx_action+0x5dd/0xb20 [ 930.327882][ C1] ? net_tx_action+0x930/0x930 [ 930.327900][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 930.327916][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 930.327939][ C1] handle_softirqs+0x2a1/0x930 [ 930.327957][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 930.327973][ C1] ? do_softirq+0x210/0x210 [ 930.327988][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 930.328004][ C1] __irq_exit_rcu+0x13b/0x230 [ 930.328018][ C1] ? irq_exit_rcu+0x20/0x20 [ 930.328031][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 930.328050][ C1] irq_exit_rcu+0x5/0x20 [ 930.328062][ C1] common_interrupt+0xb5/0xd0 [ 930.328082][ C1] [ 930.328086][ C1] [ 930.328092][ C1] asm_common_interrupt+0x22/0x40 [ 930.328108][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 930.328128][ C1] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 d0 6d dd 08 e8 0b 2c 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 930.328139][ C1] RSP: 0018:ffffc900054f78b8 EFLAGS: 00000286 [ 930.328152][ C1] RAX: f402a84e2d61b800 RBX: 0000000000000000 RCX: f402a84e2d61b800 [ 930.328162][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0f60 [ 930.328173][ C1] RBP: ffffc900054f7910 R08: ffffffff90af627f R09: 1ffffffff215ec4f [ 930.328184][ C1] R10: dffffc0000000000 R11: fffffbfff215ec50 R12: ffff8880556d3b80 [ 930.328195][ C1] R13: dffffc0000000000 R14: ffff888018a8d940 R15: ffff8880b8f3b5d0 [ 930.328213][ C1] ? finish_task_switch+0x265/0x8f0 [ 930.328233][ C1] __schedule+0x11d9/0x40e0 [ 930.328262][ C1] ? __sched_text_start+0x8/0x8 [ 930.328284][ C1] preempt_schedule_irq+0xbb/0x160 [ 930.328301][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 930.328319][ C1] ? rcu_is_watching+0x11/0xa0 [ 930.328348][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 930.328366][ C1] irqentry_exit+0x63/0x70 [ 930.328380][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 930.328396][ C1] RIP: 0010:perf_trace_init+0x9e/0x2d0 [ 930.328413][ C1] Code: 00 27 b8 8c 0f 84 75 01 00 00 4c 89 24 24 4c 8d 63 40 4c 89 e0 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 17 01 00 00 4d 63 24 24 <4c> 89 ff 4c 89 e6 e8 77 00 f8 ff 4d 39 e7 0f 85 a9 00 00 00 4c 8d [ 930.328425][ C1] RSP: 0018:ffffc900054f7c20 EFLAGS: 00000246 [ 930.328436][ C1] RAX: 0000000000000000 RBX: ffffffff8dee47e0 RCX: 0000000000080000 [ 930.328446][ C1] RDX: ffffc90019790000 RSI: 0000000000000c3b RDI: 0000000000000c3c [ 930.328456][ C1] RBP: 0000000000000002 R08: ffffffff8cb8264b R09: 1ffffffff19704c9 [ 930.328466][ C1] R10: dffffc0000000000 R11: fffffbfff19704ca R12: 0000000000000c3e [ 930.328477][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 000000000000011c [ 930.328497][ C1] perf_tp_event_init+0x89/0x110 [ 930.328513][ C1] perf_try_init_event+0x12b/0x3d0 [ 930.328531][ C1] perf_event_alloc+0xf5c/0x21b0 [ 930.328549][ C1] ? perf_event_alloc+0xbe2/0x21b0 [ 930.328571][ C1] ? find_lively_task_by_vpid+0x19/0x290 [ 930.328589][ C1] __se_sys_perf_event_open+0x6fd/0x1ec0 [ 930.328615][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 930.328641][ C1] ? syscall_enter_from_user_mode+0x2a/0x80 [ 930.328660][ C1] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 930.328680][ C1] do_syscall_64+0x4c/0xa0 [ 930.328696][ C1] ? clear_bhb_loop+0x60/0xb0 [ 930.328712][ C1] ? clear_bhb_loop+0x60/0xb0 [ 930.328729][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 930.328745][ C1] RIP: 0033:0x7ff8a2f9c799 [ 930.328759][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.328772][ C1] RSP: 002b:00007ff8a3d8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 930.328786][ C1] RAX: ffffffffffffffda RBX: 00007ff8a3215fa0 RCX: 00007ff8a2f9c799 [ 930.328798][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 930.328808][ C1] RBP: 00007ff8a3032c99 R08: 0000000000000000 R09: 0000000000000000 [ 930.328817][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 930.328827][ C1] R13: 00007ff8a3216038 R14: 00007ff8a3215fa0 R15: 00007fffdeed69e8 [ 930.328845][ C1] [ 932.198065][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.204751][ T1274] ieee802154 phy1 wpan1: encryption failed: -22