last executing test programs: 8.46568444s ago: executing program 3 (id=1247): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000040000000000000700000000000000"], 0x0, 0x2a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) 8.233987926s ago: executing program 3 (id=1250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4148, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r1, r2}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x81000600, 0xe80, 0x88a8, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0xffffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) 3.664232853s ago: executing program 3 (id=1253): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x82200, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffd, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r3) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.028974042s ago: executing program 2 (id=1258): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000040000000000000700000000000000"], 0x0, 0x2a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) 2.028575252s ago: executing program 3 (id=1259): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r0}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a80)={0x1, 0x58, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001ac0)='cgroup.events\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001b00)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x5, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000600000000000000070000001845000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600006f00001000000085100000faffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x101, 0x1000, &(0x7f0000000a00)=""/4096, 0x40f00, 0x1, '\x00', r1, @fallback=0x10, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x5, 0x0, &(0x7f0000001b40)=[{0x0, 0xfe01, 0x10, 0x6}, {0x2, 0x1, 0xb, 0xa}, {0x2, 0x5, 0xb, 0x1}, {0x2, 0x1, 0xe, 0x6}, {0x3, 0x3, 0x8, 0xa}], 0x10, 0x3ff}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x9, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r7 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1c42, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x4, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_clone(0x2300, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x19, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ff7f0000000000000900000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009fa9300000000000850000002400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000016205000900000010900c00fcffffff18220000", @ANYRES32=r0, @ANYBLOB="0000000002000000bf910000000000000000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x7, 0xcb, &(0x7f0000000740)=""/203, 0x40f00, 0x50, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000840)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000880)=[r2, r5, r0, r2, r6], &(0x7f00000008c0)=[{0x2, 0x1, 0x1, 0x7}, {0x4, 0x5, 0x6}], 0x10, 0xbb}, 0x94) 1.913605075s ago: executing program 2 (id=1261): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {0x6}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x60, 0x0, 0xfeb1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) 1.761048738s ago: executing program 3 (id=1263): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r2, 0xc) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x4, 0xc, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r3, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r4, r3, 0x2, 0x1, 0x5}, 0x50) ioctl$TUNSETLINK(r2, 0x400454cd, 0x5) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="9a036864e000"}) 1.425273366s ago: executing program 2 (id=1264): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x7, 0x0, 0x10, 0x153, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x13030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 1.107391374s ago: executing program 1 (id=1269): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000040000000000000700000000000000"], 0x0, 0x2a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) 1.020833746s ago: executing program 0 (id=1270): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x98, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000100)=r1, 0x120) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000)=r5, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x891e, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) getpid() sendmsg$unix(r5, 0x0, 0x8841) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="d28a08d988a88d8bf2f08c828807", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) r9 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) 840.48868ms ago: executing program 0 (id=1274): socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x10e, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x3}}, @enum64={0x1, 0x3, 0x0, 0x13, 0x1, 0x8, [{0xf, 0xca, 0xff}, {0x8, 0x4, 0x4}, {0x6, 0x9, 0x3}]}]}, {0x0, [0x5f, 0x61, 0x2e, 0x30]}}, &(0x7f00000008c0)=""/2, 0x66, 0x2, 0x1, 0x5}, 0x28) sendmsg$inet(0xffffffffffffffff, 0x0, 0x94c311c1811f26a4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000580)={'pim6reg\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x305) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext, 0x86bf2056334f2cce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 840.05621ms ago: executing program 1 (id=1275): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x29, &(0x7f0000000000), 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000002000000000000070000000000000000000000020100000000002e"], 0x0, 0x34}, 0x20) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0xec, 0x0, 0x3, 0x0, 0x0, 0x4b5, 0x37133, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x2013, 0x4, 0x0, 0x1, 0x0, 0x100000, 0x1, 0x0, 0x40000000, 0x0, 0x7fffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={r2, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRESDEC=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x6, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYRESOCT=r1], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r4, 0x0, 0x0, 0xff7b, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7ffffffb}, 0xffffffffffffff9f) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) socket$kcm(0x10, 0x4, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRESHEX], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) 626.298755ms ago: executing program 1 (id=1276): socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe80, 0x2f00, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x10e, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x94c311c1811f26a4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext, 0x86bf2056334f2cce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 495.819948ms ago: executing program 0 (id=1277): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xfc00, @multicast2}, 0x10, 0x0}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1b, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x3, 0x8, &(0x7f00000002c0)="b80000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETOFFLOAD(r2, 0x40047459, 0xf0ff1f00000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x66}, 0x94) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) close(r0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYBLOB="3e9b1d"], 0xf9) 404.84919ms ago: executing program 2 (id=1278): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000640)="375805f43976093b200000000200", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x1e, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=r2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000640)="375805f43976093b200000000200", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x1e, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=r2, 0x4) (async) 403.78128ms ago: executing program 1 (id=1279): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x9}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x590f}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xffbd, @rand_addr=0x64010101}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x80) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000, 0x10000}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000200)=@caif, 0x80, 0x0}, 0x88010) 342.394292ms ago: executing program 0 (id=1280): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x98, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000100)=r1, 0x120) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000)=r5, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x891e, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) 26.834549ms ago: executing program 1 (id=1282): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x9}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x590f}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xffbd, @rand_addr=0x64010101}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x80) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000, 0x10000}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000200)=@caif, 0x80, 0x0}, 0x88010) (fail_nth: 2) 24.771569ms ago: executing program 0 (id=1283): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000100) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4108, 0x100c}], 0x1}, 0x2002) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xca081, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x3a, 0x9, 0x3, 0x7, 0x0, 0xfffffffffffffff8, 0x2000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x3a52, 0x0, 0x3, 0x6, 0x5, 0x5, 0x2, 0x0, 0x3, 0x0, 0x2f0}, 0x0, 0xa, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair(0x8, 0x800, 0x81, &(0x7f0000000080)) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f0000000a740100053582c137153e370248018000f01700d1bd", 0x2e}], 0x1}, 0x40) 0s ago: executing program 2 (id=1284): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x29, &(0x7f0000000000), 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000002000000000000070000000000000000000000020100000000002e"], 0x0, 0x34}, 0x20) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0xec, 0x0, 0x3, 0x0, 0x0, 0x4b5, 0x37133, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x2013, 0x4, 0x0, 0x1, 0x0, 0x100000, 0x1, 0x0, 0x40000000, 0x0, 0x7fffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={r2, 0x20, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRESDEC=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x6, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYRESOCT=r1], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r5, 0x0, 0x0, 0xff7b, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7ffffffb}, 0xffffffffffffff9f) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) socket$kcm(0x10, 0x4, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRESHEX], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) kernel console output (not intermixed with test programs): date_nla: 4 callbacks suppressed [ 150.900569][ T7020] netlink: 'syz.2.405': attribute type 39 has an invalid length. [ 151.232011][ T7033] veth1_macvtap: left allmulticast mode [ 151.240012][ T7033] macsec0: left promiscuous mode [ 151.245180][ T7033] macsec0: left allmulticast mode [ 151.445632][ T7044] macsec0: entered promiscuous mode [ 151.451111][ T7044] macsec0: entered allmulticast mode [ 151.473325][ T7044] veth1_macvtap: entered allmulticast mode [ 151.528622][ T7048] FAULT_INJECTION: forcing a failure. [ 151.528622][ T7048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.545851][ T7048] CPU: 1 PID: 7048 Comm: syz.2.415 Not tainted syzkaller #0 [ 151.553223][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.563326][ T7048] Call Trace: [ 151.566628][ T7048] [ 151.569577][ T7048] dump_stack_lvl+0x18c/0x250 [ 151.574288][ T7048] ? show_regs_print_info+0x20/0x20 [ 151.579513][ T7048] ? load_image+0x420/0x420 [ 151.584037][ T7048] ? __lock_acquire+0x7d80/0x7d80 [ 151.589079][ T7048] ? snprintf+0xe9/0x140 [ 151.593347][ T7048] should_fail_ex+0x394/0x4c0 [ 151.598054][ T7048] _copy_to_user+0x2f/0xa0 [ 151.602493][ T7048] simple_read_from_buffer+0xe7/0x150 [ 151.607899][ T7048] proc_fail_nth_read+0x1e8/0x260 [ 151.612957][ T7048] ? proc_fault_inject_write+0x360/0x360 [ 151.618625][ T7048] ? fsnotify_perm+0x271/0x5e0 [ 151.623413][ T7048] ? proc_fault_inject_write+0x360/0x360 [ 151.629071][ T7048] vfs_read+0x298/0x990 [ 151.633261][ T7048] ? kernel_read+0x1e0/0x1e0 [ 151.637892][ T7048] ? __fget_files+0x28/0x460 [ 151.642519][ T7048] ? __fget_files+0x3fc/0x460 [ 151.647231][ T7048] ? __fdget_pos+0x2a3/0x330 [ 151.651937][ T7048] ? ksys_read+0x74/0x260 [ 151.656388][ T7048] ksys_read+0x151/0x260 [ 151.660668][ T7048] ? vfs_write+0x9a0/0x9a0 [ 151.665118][ T7048] ? lockdep_hardirqs_on+0x98/0x150 [ 151.670356][ T7048] do_syscall_64+0x55/0xb0 [ 151.674810][ T7048] ? clear_bhb_loop+0x40/0x90 [ 151.679512][ T7048] ? clear_bhb_loop+0x40/0x90 [ 151.684252][ T7048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.690171][ T7048] RIP: 0033:0x7fd29135e98e [ 151.694628][ T7048] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 151.714261][ T7048] RSP: 002b:00007fd292237fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.722703][ T7048] RAX: ffffffffffffffda RBX: 00007fd2922386c0 RCX: 00007fd29135e98e [ 151.730702][ T7048] RDX: 000000000000000f RSI: 00007fd2922380a0 RDI: 0000000000000004 [ 151.738695][ T7048] RBP: 00007fd292238090 R08: 0000000000000000 R09: 0000000000000000 [ 151.746690][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.754683][ T7048] R13: 00007fd291626038 R14: 00007fd291625fa0 R15: 00007ffe4108b0b8 [ 151.762722][ T7048] [ 151.831989][ T7052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.042118][ T7055] netlink: 'syz.0.416': attribute type 39 has an invalid length. [ 152.089871][ T7060] __nla_validate_parse: 1 callbacks suppressed [ 152.089890][ T7060] netlink: 164 bytes leftover after parsing attributes in process `syz.3.418'. [ 152.285866][ T7067] netlink: 'syz.0.420': attribute type 39 has an invalid length. [ 152.395082][ T7070] netlink: 132 bytes leftover after parsing attributes in process `syz.2.421'. [ 152.643293][ T7070] netlink: 'syz.2.421': attribute type 39 has an invalid length. [ 153.056559][ T7090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.203183][ T7097] netlink: 164 bytes leftover after parsing attributes in process `syz.0.432'. [ 153.266266][ T7096] netlink: 'syz.1.430': attribute type 10 has an invalid length. [ 153.336018][ T7100] netlink: 'syz.3.433': attribute type 21 has an invalid length. [ 153.358721][ T7100] netlink: 132 bytes leftover after parsing attributes in process `syz.3.433'. [ 153.393558][ T7099] netlink: 'syz.3.433': attribute type 21 has an invalid length. [ 153.401660][ T7099] netlink: 132 bytes leftover after parsing attributes in process `syz.3.433'. [ 153.594594][ T7105] netlink: 'syz.2.434': attribute type 10 has an invalid length. [ 153.622162][ T7105] netlink: 40 bytes leftover after parsing attributes in process `syz.2.434'. [ 153.637086][ T7111] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.436'. [ 153.647032][ T7105] veth0_vlan: entered allmulticast mode [ 153.667400][ T7105] bridge0: port 3(veth0_vlan) entered blocking state [ 153.681463][ T7105] bridge0: port 3(veth0_vlan) entered disabled state [ 153.721600][ T5780] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 153.743761][ T7105] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 154.021701][ T7122] netlink: 'syz.2.440': attribute type 10 has an invalid length. [ 154.067437][ T7122] team0: Port device netdevsim0 added [ 154.082097][ T7123] netlink: 'syz.2.440': attribute type 10 has an invalid length. [ 154.126131][ T7123] team0: Port device netdevsim0 removed [ 154.144706][ T7123] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 154.328481][ T7134] netlink: 164 bytes leftover after parsing attributes in process `syz.3.444'. [ 154.963312][ T7153] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.450'. [ 154.984586][ T7153] openvswitch: netlink: Duplicate key (type 0). [ 155.029986][ T7144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.128204][ T7150] team0: Device wg1 is of different type [ 155.486539][ T7161] FAULT_INJECTION: forcing a failure. [ 155.486539][ T7161] name failslab, interval 1, probability 0, space 0, times 0 [ 155.519703][ T7161] CPU: 0 PID: 7161 Comm: syz.1.454 Not tainted syzkaller #0 [ 155.527100][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.537197][ T7161] Call Trace: [ 155.540520][ T7161] [ 155.543484][ T7161] dump_stack_lvl+0x18c/0x250 [ 155.548217][ T7161] ? show_regs_print_info+0x20/0x20 [ 155.553463][ T7161] ? load_image+0x420/0x420 [ 155.558042][ T7161] ? __might_sleep+0xe0/0xe0 [ 155.562682][ T7161] ? __lock_acquire+0x7d80/0x7d80 [ 155.567767][ T7161] should_fail_ex+0x394/0x4c0 [ 155.572507][ T7161] should_failslab+0x9/0x20 [ 155.577076][ T7161] slab_pre_alloc_hook+0x59/0x300 [ 155.582164][ T7161] ? rtnl_newlink+0x10d/0x2170 [ 155.586972][ T7161] __kmem_cache_alloc_node+0x53/0x250 [ 155.592391][ T7161] ? rtnl_newlink+0x10d/0x2170 [ 155.597202][ T7161] kmalloc_trace+0x2a/0xe0 [ 155.601666][ T7161] rtnl_newlink+0x10d/0x2170 [ 155.606302][ T7161] ? arch_stack_walk+0x160/0x190 [ 155.611303][ T7161] ? verify_lock_unused+0x140/0x140 [ 155.616547][ T7161] ? __mutex_trylock_common+0x160/0x270 [ 155.622140][ T7161] ? rtnl_setlink+0x4e0/0x4e0 [ 155.626884][ T7161] ? trace_raw_output_contention_end+0xd0/0xd0 [ 155.633091][ T7161] ? rcu_is_watching+0x15/0xb0 [ 155.637902][ T7161] ? trace_contention_end+0x39/0xe0 [ 155.643139][ T7161] ? __mutex_lock+0x30d/0xc80 [ 155.647867][ T7161] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 155.653026][ T7161] ? mutex_lock_nested+0x20/0x20 [ 155.658024][ T7161] ? rtnl_setlink+0x4e0/0x4e0 [ 155.662767][ T7161] rtnetlink_rcv_msg+0x843/0xf90 [ 155.667753][ T7161] ? rtnetlink_rcv_msg+0x220/0xf90 [ 155.672918][ T7161] ? rtnetlink_bind+0x80/0x80 [ 155.677639][ T7161] ? perf_trace_preemptirq_template+0xac/0x330 [ 155.683847][ T7161] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 155.689877][ T7161] ? lock_chain_count+0x20/0x20 [ 155.694793][ T7161] ? __local_bh_enable_ip+0x13a/0x1c0 [ 155.700208][ T7161] ? lockdep_hardirqs_on+0x98/0x150 [ 155.705455][ T7161] ? __local_bh_enable_ip+0x13a/0x1c0 [ 155.710867][ T7161] ? _local_bh_enable+0xa0/0xa0 [ 155.715768][ T7161] ? __dev_queue_xmit+0x272/0x37e0 [ 155.720931][ T7161] ? __dev_queue_xmit+0x1329/0x37e0 [ 155.726184][ T7161] ? __dev_queue_xmit+0x272/0x37e0 [ 155.731362][ T7161] ? ref_tracker_free+0x686/0x830 [ 155.736430][ T7161] netlink_rcv_skb+0x235/0x4c0 [ 155.741239][ T7161] ? rtnetlink_bind+0x80/0x80 [ 155.745976][ T7161] ? netlink_ack+0x1160/0x1160 [ 155.750789][ T7161] ? __lock_acquire+0x7d80/0x7d80 [ 155.755878][ T7161] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.761122][ T7161] netlink_unicast+0x7b1/0x930 [ 155.765946][ T7161] netlink_sendmsg+0x8d0/0xbf0 [ 155.770761][ T7161] ? netlink_getsockopt+0x590/0x590 [ 155.776001][ T7161] ? apparmor_socket_sendmsg+0x8e/0x330 [ 155.781600][ T7161] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 155.786946][ T7161] ? security_socket_sendmsg+0x80/0xa0 [ 155.792442][ T7161] ? netlink_getsockopt+0x590/0x590 [ 155.797688][ T7161] ____sys_sendmsg+0x61b/0x980 [ 155.802504][ T7161] ? __asan_memset+0x22/0x40 [ 155.807141][ T7161] ? __sys_sendmsg_sock+0x30/0x30 [ 155.812206][ T7161] ? __import_iovec+0x5f2/0x850 [ 155.817121][ T7161] ? import_iovec+0x73/0xa0 [ 155.821674][ T7161] ___sys_sendmsg+0x2a6/0x360 [ 155.826400][ T7161] ? get_pid_task+0x20/0x1e0 [ 155.831129][ T7161] ? __sys_sendmsg+0x2b0/0x2b0 [ 155.835970][ T7161] ? __lock_acquire+0x7d80/0x7d80 [ 155.841070][ T7161] __se_sys_sendmsg+0x1d0/0x2c0 [ 155.845969][ T7161] ? __x64_sys_sendmsg+0x80/0x80 [ 155.850977][ T7161] ? lockdep_hardirqs_on+0x98/0x150 [ 155.856228][ T7161] do_syscall_64+0x55/0xb0 [ 155.860695][ T7161] ? clear_bhb_loop+0x40/0x90 [ 155.865415][ T7161] ? clear_bhb_loop+0x40/0x90 [ 155.870146][ T7161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.876088][ T7161] RIP: 0033:0x7f77f299e159 [ 155.880748][ T7161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.900393][ T7161] RSP: 002b:00007f77f38e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.908856][ T7161] RAX: ffffffffffffffda RBX: 00007f77f2c25fa0 RCX: 00007f77f299e159 [ 155.916874][ T7161] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000005 [ 155.924885][ T7161] RBP: 00007f77f38e0090 R08: 0000000000000000 R09: 0000000000000000 [ 155.932890][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.940894][ T7161] R13: 00007f77f2c26038 R14: 00007f77f2c25fa0 R15: 00007ffc2b517b88 [ 155.948917][ T7161] [ 156.407020][ T7169] netlink: 164 bytes leftover after parsing attributes in process `syz.0.457'. [ 156.675408][ T7176] validate_nla: 4 callbacks suppressed [ 156.675426][ T7176] netlink: 'syz.3.460': attribute type 1 has an invalid length. [ 156.765530][ T7181] netlink: 'syz.1.463': attribute type 12 has an invalid length. [ 156.797186][ T7185] netlink: 'syz.2.464': attribute type 2 has an invalid length. [ 156.815180][ T7185] netlink: 'syz.2.464': attribute type 2 has an invalid length. [ 156.840104][ T7185] netlink: 'syz.2.464': attribute type 2 has an invalid length. [ 156.992164][ T5780] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 157.419681][ T7203] netlink: 'syz.2.469': attribute type 10 has an invalid length. [ 157.734749][ T7209] __nla_validate_parse: 1 callbacks suppressed [ 157.734766][ T7209] netlink: 164 bytes leftover after parsing attributes in process `syz.1.471'. [ 158.034573][ T7222] netlink: 'syz.0.475': attribute type 29 has an invalid length. [ 158.054326][ T7223] FAULT_INJECTION: forcing a failure. [ 158.054326][ T7223] name failslab, interval 1, probability 0, space 0, times 0 [ 158.120821][ T7223] CPU: 1 PID: 7223 Comm: syz.1.477 Not tainted syzkaller #0 [ 158.128202][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.138308][ T7223] Call Trace: [ 158.141628][ T7223] [ 158.144598][ T7223] dump_stack_lvl+0x18c/0x250 [ 158.149336][ T7223] ? show_regs_print_info+0x20/0x20 [ 158.154584][ T7223] ? load_image+0x420/0x420 [ 158.159145][ T7223] ? __might_sleep+0xe0/0xe0 [ 158.163789][ T7223] ? __lock_acquire+0x7d80/0x7d80 [ 158.168882][ T7223] should_fail_ex+0x394/0x4c0 [ 158.173615][ T7223] should_failslab+0x9/0x20 [ 158.178165][ T7223] slab_pre_alloc_hook+0x59/0x300 [ 158.183242][ T7223] ? rtnl_newlink+0x10d/0x2170 [ 158.188055][ T7223] __kmem_cache_alloc_node+0x53/0x250 [ 158.193489][ T7223] ? rtnl_newlink+0x10d/0x2170 [ 158.198296][ T7223] kmalloc_trace+0x2a/0xe0 [ 158.202767][ T7223] rtnl_newlink+0x10d/0x2170 [ 158.207465][ T7223] ? verify_lock_unused+0x140/0x140 [ 158.212721][ T7223] ? __mutex_trylock_common+0x160/0x270 [ 158.218310][ T7223] ? rtnl_setlink+0x4e0/0x4e0 [ 158.223046][ T7223] ? trace_raw_output_contention_end+0xd0/0xd0 [ 158.229261][ T7223] ? rcu_is_watching+0x15/0xb0 [ 158.234054][ T7223] ? trace_contention_end+0x39/0xe0 [ 158.239280][ T7223] ? __mutex_lock+0x30d/0xc80 [ 158.243990][ T7223] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 158.249146][ T7223] ? mutex_lock_nested+0x20/0x20 [ 158.254145][ T7223] ? rtnl_setlink+0x4e0/0x4e0 [ 158.258851][ T7223] rtnetlink_rcv_msg+0x843/0xf90 [ 158.263817][ T7223] ? rtnetlink_rcv_msg+0x220/0xf90 [ 158.268987][ T7223] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 158.274832][ T7223] ? rtnetlink_bind+0x80/0x80 [ 158.279538][ T7223] ? perf_trace_preemptirq_template+0x269/0x330 [ 158.285807][ T7223] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 158.291827][ T7223] ? lock_chain_count+0x20/0x20 [ 158.296701][ T7223] ? __local_bh_enable_ip+0x13a/0x1c0 [ 158.302091][ T7223] ? lockdep_hardirqs_on+0x98/0x150 [ 158.307320][ T7223] ? __local_bh_enable_ip+0x13a/0x1c0 [ 158.312722][ T7223] ? _local_bh_enable+0xa0/0xa0 [ 158.317601][ T7223] ? __dev_queue_xmit+0x272/0x37e0 [ 158.322741][ T7223] ? __dev_queue_xmit+0x1329/0x37e0 [ 158.327969][ T7223] ? __dev_queue_xmit+0x272/0x37e0 [ 158.333135][ T7223] ? ref_tracker_free+0x686/0x830 [ 158.338212][ T7223] netlink_rcv_skb+0x235/0x4c0 [ 158.343000][ T7223] ? rtnetlink_bind+0x80/0x80 [ 158.347696][ T7223] ? netlink_ack+0x1160/0x1160 [ 158.352485][ T7223] ? __lock_acquire+0x7d80/0x7d80 [ 158.357536][ T7223] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.362758][ T7223] netlink_unicast+0x7b1/0x930 [ 158.367564][ T7223] netlink_sendmsg+0x8d0/0xbf0 [ 158.372365][ T7223] ? netlink_getsockopt+0x590/0x590 [ 158.377584][ T7223] ? apparmor_socket_sendmsg+0x8e/0x330 [ 158.383162][ T7223] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 158.388472][ T7223] ? security_socket_sendmsg+0x80/0xa0 [ 158.393963][ T7223] ? netlink_getsockopt+0x590/0x590 [ 158.399229][ T7223] ____sys_sendmsg+0x61b/0x980 [ 158.404039][ T7223] ? __asan_memset+0x22/0x40 [ 158.408658][ T7223] ? __sys_sendmsg_sock+0x30/0x30 [ 158.413703][ T7223] ? __import_iovec+0x5f2/0x850 [ 158.418592][ T7223] ? import_iovec+0x73/0xa0 [ 158.423128][ T7223] ___sys_sendmsg+0x2a6/0x360 [ 158.427832][ T7223] ? __sys_sendmsg+0x2b0/0x2b0 [ 158.432645][ T7223] ? trace_call_bpf+0xc3/0x6c0 [ 158.437451][ T7223] __se_sys_sendmsg+0x1d0/0x2c0 [ 158.442331][ T7223] ? perf_trace_preemptirq_template+0x269/0x330 [ 158.448608][ T7223] ? __x64_sys_sendmsg+0x80/0x80 [ 158.453585][ T7223] ? lockdep_hardirqs_on+0x98/0x150 [ 158.458821][ T7223] do_syscall_64+0x55/0xb0 [ 158.463261][ T7223] ? clear_bhb_loop+0x40/0x90 [ 158.467961][ T7223] ? clear_bhb_loop+0x40/0x90 [ 158.472661][ T7223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.478596][ T7223] RIP: 0033:0x7f77f299e159 [ 158.483027][ T7223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.502648][ T7223] RSP: 002b:00007f77f38e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.511075][ T7223] RAX: ffffffffffffffda RBX: 00007f77f2c25fa0 RCX: 00007f77f299e159 [ 158.519064][ T7223] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 158.527054][ T7223] RBP: 00007f77f38e0090 R08: 0000000000000000 R09: 0000000000000000 [ 158.535077][ T7223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.543077][ T7223] R13: 00007f77f2c26038 R14: 00007f77f2c25fa0 R15: 00007ffc2b517b88 [ 158.551079][ T7223] [ 158.603787][ T7222] netlink: 'syz.0.475': attribute type 29 has an invalid length. [ 158.638469][ T7225] netlink: 'syz.0.475': attribute type 29 has an invalid length. [ 158.906624][ T7233] netlink: 'syz.1.480': attribute type 2 has an invalid length. [ 158.915000][ T7233] netlink: 198036 bytes leftover after parsing attributes in process `syz.1.480'. [ 159.008550][ T7235] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 159.018089][ T7235] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.026974][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.084901][ T7235] bridge0: entered allmulticast mode [ 159.124684][ T7241] bridge_slave_1: left allmulticast mode [ 159.154260][ T7241] bridge_slave_1: left promiscuous mode [ 159.161683][ T7241] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.204589][ T7241] bridge_slave_0: left allmulticast mode [ 159.210314][ T7241] bridge_slave_0: left promiscuous mode [ 159.235714][ T7241] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.365164][ T7243] netlink: 164 bytes leftover after parsing attributes in process `syz.1.485'. [ 159.738443][ T7252] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.488'. [ 160.457598][ T7264] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.492'. [ 160.479055][ T7264] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 160.763372][ T7279] netlink: 164 bytes leftover after parsing attributes in process `syz.3.498'. [ 161.306535][ T7281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.529421][ T7288] team0: Device wg1 is of different type [ 162.166475][ T7312] netlink: 164 bytes leftover after parsing attributes in process `syz.3.511'. [ 162.475579][ T7323] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.515'. [ 162.531026][ T7324] raw_sendmsg: syz.3.515 forgot to set AF_INET. Fix it! [ 162.736571][ T7329] validate_nla: 4 callbacks suppressed [ 162.736614][ T7329] netlink: 'syz.0.517': attribute type 12 has an invalid length. [ 162.750867][ T7329] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.517'. [ 163.091235][ T7325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.268757][ T7338] FAULT_INJECTION: forcing a failure. [ 163.268757][ T7338] name failslab, interval 1, probability 0, space 0, times 0 [ 163.281516][ T7338] CPU: 0 PID: 7338 Comm: syz.2.521 Not tainted syzkaller #0 [ 163.288846][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.298941][ T7338] Call Trace: [ 163.302273][ T7338] [ 163.305254][ T7338] dump_stack_lvl+0x18c/0x250 [ 163.309998][ T7338] ? show_regs_print_info+0x20/0x20 [ 163.315248][ T7338] ? load_image+0x420/0x420 [ 163.319811][ T7338] should_fail_ex+0x394/0x4c0 [ 163.324545][ T7338] should_failslab+0x9/0x20 [ 163.329104][ T7338] slab_pre_alloc_hook+0x59/0x300 [ 163.334197][ T7338] kmem_cache_alloc+0x5a/0x2c0 [ 163.339027][ T7338] ? skb_clone+0x1eb/0x370 [ 163.343529][ T7338] skb_clone+0x1eb/0x370 [ 163.347825][ T7338] bpf_clone_redirect+0x16d/0x4a0 [ 163.352910][ T7338] ? bpf_test_run+0x174/0x870 [ 163.357641][ T7338] bpf_prog_c6f54bbad6dab1ee+0x5e/0x63 [ 163.363155][ T7338] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 163.369186][ T7338] ? __lock_acquire+0x7d80/0x7d80 [ 163.374265][ T7338] ? lock_chain_count+0x20/0x20 [ 163.379165][ T7338] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 163.385458][ T7338] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 163.390793][ T7338] ? ktime_get+0x7f/0x280 [ 163.395165][ T7338] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 163.401459][ T7338] ? ktime_get_real_ts64+0x440/0x440 [ 163.406792][ T7338] ? __x64_sys_bpf+0x7c/0x90 [ 163.411436][ T7338] ? __local_bh_disable_ip+0x108/0x1a0 [ 163.416944][ T7338] ? __cant_sleep+0x220/0x220 [ 163.421690][ T7338] ? read_tsc+0x9/0x20 [ 163.425842][ T7338] ? ktime_get+0x24b/0x280 [ 163.430314][ T7338] ? bpf_test_run+0x174/0x870 [ 163.435040][ T7338] ? kvm_sched_clock_read+0x11/0x20 [ 163.440296][ T7338] bpf_test_run+0x4fa/0x870 [ 163.444870][ T7338] ? bpf_test_run+0x174/0x870 [ 163.449602][ T7338] ? dst_hold+0x70/0x70 [ 163.453846][ T7338] ? eth_get_headlen+0x210/0x210 [ 163.458842][ T7338] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 163.464292][ T7338] ? cpu_online+0x60/0x60 [ 163.468669][ T7338] bpf_prog_test_run+0x31f/0x390 [ 163.473663][ T7338] __sys_bpf+0x49d/0x890 [ 163.477956][ T7338] ? bpf_link_show_fdinfo+0x390/0x390 [ 163.483393][ T7338] ? lock_chain_count+0x20/0x20 [ 163.488315][ T7338] __x64_sys_bpf+0x7c/0x90 [ 163.492782][ T7338] do_syscall_64+0x55/0xb0 [ 163.497254][ T7338] ? clear_bhb_loop+0x40/0x90 [ 163.501992][ T7338] ? clear_bhb_loop+0x40/0x90 [ 163.506727][ T7338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.512666][ T7338] RIP: 0033:0x7fd29139e159 [ 163.517106][ T7338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.536738][ T7338] RSP: 002b:00007fd292238028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.545182][ T7338] RAX: ffffffffffffffda RBX: 00007fd291625fa0 RCX: 00007fd29139e159 [ 163.553183][ T7338] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 163.561214][ T7338] RBP: 00007fd292238090 R08: 0000000000000000 R09: 0000000000000000 [ 163.569225][ T7338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.577215][ T7338] R13: 00007fd291626038 R14: 00007fd291625fa0 R15: 00007ffe4108b0b8 [ 163.585254][ T7338] [ 163.943307][ T7337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.107826][ T7345] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.524'. [ 164.126219][ T7343] netlink: 164 bytes leftover after parsing attributes in process `syz.0.523'. [ 164.144372][ T7345] netlink: 'syz.3.524': attribute type 10 has an invalid length. [ 164.156186][ T7345] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.524'. [ 164.239750][ T7351] netlink: 'syz.3.524': attribute type 1 has an invalid length. [ 164.253780][ T7351] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.524'. [ 164.478980][ T7356] netlink: 'syz.2.528': attribute type 1 has an invalid length. [ 164.487499][ T7356] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.528'. [ 164.497639][ T7356] netlink: 'syz.2.528': attribute type 1 has an invalid length. [ 164.799858][ T7353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.971342][ T7364] netlink: 'syz.0.532': attribute type 10 has an invalid length. [ 165.226155][ T7364] hsr0: entered promiscuous mode [ 165.285209][ T7364] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 165.341284][ T7364] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 165.357221][ T7364] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 165.393421][ T7364] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 165.969745][ T7377] netlink: 40 bytes leftover after parsing attributes in process `syz.1.537'. [ 166.046791][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.152106][ T7377] bridge_slave_0 (unregistering): left allmulticast mode [ 166.160387][ T7377] bridge_slave_0 (unregistering): left promiscuous mode [ 166.171835][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.357409][ T7386] IPv6: Can't replace route, no match found [ 166.617661][ T7392] netlink: 40 bytes leftover after parsing attributes in process `syz.2.543'. [ 166.645524][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.771906][ T7392] bridge_slave_0 (unregistering): left allmulticast mode [ 166.780237][ T7392] bridge_slave_0 (unregistering): left promiscuous mode [ 166.789159][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.497122][ T7416] netlink: 'syz.2.553': attribute type 46 has an invalid length. [ 168.081022][ T7428] netlink: 'syz.2.558': attribute type 10 has an invalid length. [ 168.090344][ T7428] netlink: 2 bytes leftover after parsing attributes in process `syz.2.558'. [ 168.488470][ T7440] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.564'. [ 169.660409][ T7454] FAULT_INJECTION: forcing a failure. [ 169.660409][ T7454] name failslab, interval 1, probability 0, space 0, times 0 [ 169.673727][ T7454] CPU: 1 PID: 7454 Comm: syz.1.570 Not tainted syzkaller #0 [ 169.681093][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.691192][ T7454] Call Trace: [ 169.694501][ T7454] [ 169.697448][ T7454] dump_stack_lvl+0x18c/0x250 [ 169.702153][ T7454] ? show_regs_print_info+0x20/0x20 [ 169.707418][ T7454] ? load_image+0x420/0x420 [ 169.711947][ T7454] ? __might_sleep+0xe0/0xe0 [ 169.716564][ T7454] ? __lock_acquire+0x7d80/0x7d80 [ 169.721615][ T7454] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 169.727614][ T7454] should_fail_ex+0x394/0x4c0 [ 169.732313][ T7454] should_failslab+0x9/0x20 [ 169.736841][ T7454] slab_pre_alloc_hook+0x59/0x300 [ 169.741895][ T7454] ? lockdep_hardirqs_on+0x98/0x150 [ 169.747115][ T7454] kmem_cache_alloc+0x5a/0x2c0 [ 169.751911][ T7454] ? taskstats_exit+0x14d/0xce0 [ 169.756784][ T7454] taskstats_exit+0x14d/0xce0 [ 169.761487][ T7454] ? sysctl_delayacct+0x220/0x220 [ 169.766543][ T7454] ? tty_audit_exit+0x14d/0x1f0 [ 169.771425][ T7454] do_exit+0x8fc/0x2530 [ 169.775626][ T7454] ? put_task_struct+0xc0/0xc0 [ 169.780422][ T7454] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 169.786417][ T7454] ? get_signal+0x100e/0x1390 [ 169.791115][ T7454] ? lock_chain_count+0x20/0x20 [ 169.796013][ T7454] ? _raw_spin_lock_irq+0xbb/0xf0 [ 169.801055][ T7454] do_group_exit+0x22d/0x2f0 [ 169.805666][ T7454] ? lockdep_hardirqs_on+0x98/0x150 [ 169.810907][ T7454] get_signal+0x12a6/0x1390 [ 169.815449][ T7454] arch_do_signal_or_restart+0xc2/0x7b0 [ 169.821030][ T7454] ? get_sigframe_size+0x20/0x20 [ 169.826012][ T7454] ? exit_to_user_mode_loop+0x3b/0x110 [ 169.831504][ T7454] exit_to_user_mode_loop+0x70/0x110 [ 169.836816][ T7454] exit_to_user_mode_prepare+0xee/0x180 [ 169.842400][ T7454] syscall_exit_to_user_mode+0x1a/0x50 [ 169.847908][ T7454] do_syscall_64+0x61/0xb0 [ 169.852368][ T7454] ? clear_bhb_loop+0x40/0x90 [ 169.857071][ T7454] ? clear_bhb_loop+0x40/0x90 [ 169.861770][ T7454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.867697][ T7454] RIP: 0033:0x7f77f299e159 [ 169.872133][ T7454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.891765][ T7454] RSP: 002b:00007f77f38e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.900211][ T7454] RAX: fffffffffffffffc RBX: 00007f77f2c25fa0 RCX: 00007f77f299e159 [ 169.908209][ T7454] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 169.916207][ T7454] RBP: 00007f77f38e0090 R08: 0000000000000000 R09: 0000000000000000 [ 169.924198][ T7454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.932190][ T7454] R13: 00007f77f2c26038 R14: 00007f77f2c25fa0 R15: 00007ffc2b517b88 [ 169.940216][ T7454] [ 170.076615][ T7465] FAULT_INJECTION: forcing a failure. [ 170.076615][ T7465] name failslab, interval 1, probability 0, space 0, times 0 [ 170.089620][ T7465] CPU: 1 PID: 7465 Comm: syz.1.574 Not tainted syzkaller #0 [ 170.097005][ T7465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.107163][ T7465] Call Trace: [ 170.110515][ T7465] [ 170.113531][ T7465] dump_stack_lvl+0x18c/0x250 [ 170.118330][ T7465] ? show_regs_print_info+0x20/0x20 [ 170.123616][ T7465] ? load_image+0x420/0x420 [ 170.128291][ T7465] should_fail_ex+0x394/0x4c0 [ 170.133097][ T7465] should_failslab+0x9/0x20 [ 170.137677][ T7465] slab_pre_alloc_hook+0x59/0x300 [ 170.142850][ T7465] kmem_cache_alloc+0x5a/0x2c0 [ 170.147723][ T7465] ? skb_clone+0x1eb/0x370 [ 170.152268][ T7465] skb_clone+0x1eb/0x370 [ 170.156629][ T7465] bpf_clone_redirect+0x16d/0x4a0 [ 170.161824][ T7465] bpf_prog_c6f54bbad6dab1ee+0x5e/0x63 [ 170.167417][ T7465] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 170.173503][ T7465] ? __lock_acquire+0x7d80/0x7d80 [ 170.178618][ T7465] ? lock_chain_count+0x20/0x20 [ 170.183580][ T7465] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 170.189895][ T7465] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 170.195294][ T7465] ? ktime_get+0x7f/0x280 [ 170.199726][ T7465] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 170.206118][ T7465] ? ktime_get_real_ts64+0x440/0x440 [ 170.211475][ T7465] ? __x64_sys_bpf+0x7c/0x90 [ 170.216200][ T7465] ? __local_bh_disable_ip+0x108/0x1a0 [ 170.221757][ T7465] ? __cant_sleep+0x220/0x220 [ 170.226556][ T7465] ? read_tsc+0x9/0x20 [ 170.230724][ T7465] ? ktime_get+0x24b/0x280 [ 170.235272][ T7465] ? bpf_test_run+0x174/0x870 [ 170.240068][ T7465] bpf_test_run+0x2df/0x870 [ 170.244777][ T7465] ? bpf_test_run+0x174/0x870 [ 170.249587][ T7465] ? dst_hold+0x70/0x70 [ 170.253858][ T7465] ? eth_get_headlen+0x210/0x210 [ 170.258968][ T7465] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 170.264585][ T7465] ? cpu_online+0x60/0x60 [ 170.269021][ T7465] bpf_prog_test_run+0x31f/0x390 [ 170.274080][ T7465] __sys_bpf+0x49d/0x890 [ 170.278433][ T7465] ? bpf_link_show_fdinfo+0x390/0x390 [ 170.284003][ T7465] ? lock_chain_count+0x20/0x20 [ 170.289015][ T7465] __x64_sys_bpf+0x7c/0x90 [ 170.293539][ T7465] do_syscall_64+0x55/0xb0 [ 170.298036][ T7465] ? clear_bhb_loop+0x40/0x90 [ 170.302817][ T7465] ? clear_bhb_loop+0x40/0x90 [ 170.307635][ T7465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.313622][ T7465] RIP: 0033:0x7f77f299e159 [ 170.318116][ T7465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.337805][ T7465] RSP: 002b:00007f77f38e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.346334][ T7465] RAX: ffffffffffffffda RBX: 00007f77f2c25fa0 RCX: 00007f77f299e159 [ 170.354422][ T7465] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 170.362479][ T7465] RBP: 00007f77f38e0090 R08: 0000000000000000 R09: 0000000000000000 [ 170.370543][ T7465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.378599][ T7465] R13: 00007f77f2c26038 R14: 00007f77f2c25fa0 R15: 00007ffc2b517b88 [ 170.386764][ T7465] [ 170.450076][ T7468] netlink: 'syz.3.575': attribute type 10 has an invalid length. [ 170.458187][ T7468] netlink: 40 bytes leftover after parsing attributes in process `syz.3.575'. [ 170.476992][ T7468] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 170.899629][ T7463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.776002][ T7492] netlink: 'syz.2.585': attribute type 39 has an invalid length. [ 171.883394][ T7495] netlink: 'syz.0.587': attribute type 10 has an invalid length. [ 171.909009][ T7497] FAULT_INJECTION: forcing a failure. [ 171.909009][ T7497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.933858][ T7495] geneve0: entered promiscuous mode [ 171.962737][ T7497] CPU: 0 PID: 7497 Comm: syz.3.586 Not tainted syzkaller #0 [ 171.970113][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.980231][ T7497] Call Trace: [ 171.983554][ T7497] [ 171.986550][ T7497] dump_stack_lvl+0x18c/0x250 [ 171.991292][ T7497] ? show_regs_print_info+0x20/0x20 [ 171.996542][ T7497] ? load_image+0x420/0x420 [ 172.001086][ T7497] ? __might_fault+0xaa/0x120 [ 172.005827][ T7497] ? __lock_acquire+0x7d80/0x7d80 [ 172.010929][ T7497] should_fail_ex+0x394/0x4c0 [ 172.015678][ T7497] _copy_to_user+0x2f/0xa0 [ 172.020154][ T7497] bpf_test_finish+0x25a/0x650 [ 172.024999][ T7497] ? dst_hold+0x70/0x70 [ 172.029219][ T7497] ? convert_skb_to___skb+0x420/0x420 [ 172.034656][ T7497] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 172.040106][ T7497] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 172.047359][ T7497] ? dev_put+0x80/0x80 [ 172.051485][ T7497] ? dev_put+0x80/0x80 [ 172.055640][ T7497] bpf_prog_test_run+0x31f/0x390 [ 172.060617][ T7497] __sys_bpf+0x49d/0x890 [ 172.064901][ T7497] ? bpf_link_show_fdinfo+0x390/0x390 [ 172.070325][ T7497] ? lock_chain_count+0x20/0x20 [ 172.075218][ T7497] __x64_sys_bpf+0x7c/0x90 [ 172.079663][ T7497] do_syscall_64+0x55/0xb0 [ 172.084125][ T7497] ? clear_bhb_loop+0x40/0x90 [ 172.088828][ T7497] ? clear_bhb_loop+0x40/0x90 [ 172.093550][ T7497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.099474][ T7497] RIP: 0033:0x7f2dcb79e159 [ 172.103929][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.123576][ T7497] RSP: 002b:00007f2dc99f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.132062][ T7497] RAX: ffffffffffffffda RBX: 00007f2dcba25fa0 RCX: 00007f2dcb79e159 [ 172.140061][ T7497] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 172.148055][ T7497] RBP: 00007f2dc99f6090 R08: 0000000000000000 R09: 0000000000000000 [ 172.156045][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.164032][ T7497] R13: 00007f2dcba26038 R14: 00007f2dcba25fa0 R15: 00007ffc7da5dda8 [ 172.172077][ T7497] [ 172.201731][ T7499] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.588'. [ 172.223749][ T7474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.245163][ T5780] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 172.874625][ T7515] netlink: 'syz.2.596': attribute type 39 has an invalid length. [ 173.006369][ T7521] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.598'. [ 173.050668][ T5780] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 173.672714][ T7517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.008385][ T7536] FAULT_INJECTION: forcing a failure. [ 174.008385][ T7536] name failslab, interval 1, probability 0, space 0, times 0 [ 174.021149][ T7536] CPU: 0 PID: 7536 Comm: syz.2.604 Not tainted syzkaller #0 [ 174.028499][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.038614][ T7536] Call Trace: [ 174.041924][ T7536] [ 174.044896][ T7536] dump_stack_lvl+0x18c/0x250 [ 174.049626][ T7536] ? show_regs_print_info+0x20/0x20 [ 174.054876][ T7536] ? load_image+0x420/0x420 [ 174.059444][ T7536] should_fail_ex+0x394/0x4c0 [ 174.064190][ T7536] should_failslab+0x9/0x20 [ 174.068751][ T7536] slab_pre_alloc_hook+0x59/0x300 [ 174.073840][ T7536] kmem_cache_alloc+0x5a/0x2c0 [ 174.078652][ T7536] ? skb_clone+0x1eb/0x370 [ 174.083119][ T7536] skb_clone+0x1eb/0x370 [ 174.087402][ T7536] bpf_clone_redirect+0x16d/0x4a0 [ 174.092472][ T7536] bpf_prog_c6f54bbad6dab1ee+0x5e/0x63 [ 174.097976][ T7536] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 174.104020][ T7536] ? __lock_acquire+0x7d80/0x7d80 [ 174.109084][ T7536] ? lock_chain_count+0x20/0x20 [ 174.113970][ T7536] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 174.120243][ T7536] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 174.125573][ T7536] ? ktime_get+0x7f/0x280 [ 174.129951][ T7536] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 174.136223][ T7536] ? ktime_get_real_ts64+0x440/0x440 [ 174.141548][ T7536] ? __x64_sys_bpf+0x7c/0x90 [ 174.146173][ T7536] ? __local_bh_disable_ip+0x108/0x1a0 [ 174.151686][ T7536] ? __cant_sleep+0x220/0x220 [ 174.156410][ T7536] ? read_tsc+0x9/0x20 [ 174.160544][ T7536] ? ktime_get+0x24b/0x280 [ 174.165012][ T7536] ? bpf_test_run+0x174/0x870 [ 174.169742][ T7536] bpf_test_run+0x2df/0x870 [ 174.174308][ T7536] ? bpf_test_run+0x174/0x870 [ 174.179031][ T7536] ? dst_hold+0x70/0x70 [ 174.183244][ T7536] ? eth_get_headlen+0x210/0x210 [ 174.188246][ T7536] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 174.193689][ T7536] ? cpu_online+0x60/0x60 [ 174.198057][ T7536] bpf_prog_test_run+0x31f/0x390 [ 174.203038][ T7536] __sys_bpf+0x49d/0x890 [ 174.207327][ T7536] ? bpf_link_show_fdinfo+0x390/0x390 [ 174.212757][ T7536] ? lock_chain_count+0x20/0x20 [ 174.217661][ T7536] __x64_sys_bpf+0x7c/0x90 [ 174.222132][ T7536] do_syscall_64+0x55/0xb0 [ 174.226594][ T7536] ? clear_bhb_loop+0x40/0x90 [ 174.231321][ T7536] ? clear_bhb_loop+0x40/0x90 [ 174.236042][ T7536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.241977][ T7536] RIP: 0033:0x7fd29139e159 [ 174.246431][ T7536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.266102][ T7536] RSP: 002b:00007fd292238028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.274568][ T7536] RAX: ffffffffffffffda RBX: 00007fd291625fa0 RCX: 00007fd29139e159 [ 174.282572][ T7536] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 174.290577][ T7536] RBP: 00007fd292238090 R08: 0000000000000000 R09: 0000000000000000 [ 174.298580][ T7536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.306587][ T7536] R13: 00007fd291626038 R14: 00007fd291625fa0 R15: 00007ffe4108b0b8 [ 174.314621][ T7536] [ 174.470031][ T7544] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.607'. [ 174.544191][ T5780] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 174.833179][ T7532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.066015][ T7556] netlink: 'syz.0.610': attribute type 39 has an invalid length. [ 175.608177][ T7551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.733988][ T7569] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.618'. [ 176.378982][ T7599] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.631'. [ 176.604048][ T7608] netlink: 'syz.0.632': attribute type 39 has an invalid length. [ 179.842402][ T7624] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.642'. [ 179.871434][ T7625] žÿ: renamed from team_slave_1 (while UP) [ 180.075350][ T7627] netlink: 36 bytes leftover after parsing attributes in process `syz.2.643'. [ 180.165844][ T7633] FAULT_INJECTION: forcing a failure. [ 180.165844][ T7633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.179224][ T7633] CPU: 1 PID: 7633 Comm: syz.0.646 Not tainted syzkaller #0 [ 180.186573][ T7633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.196645][ T7633] Call Trace: [ 180.199944][ T7633] [ 180.202893][ T7633] dump_stack_lvl+0x18c/0x250 [ 180.207621][ T7633] ? show_regs_print_info+0x20/0x20 [ 180.212842][ T7633] ? load_image+0x420/0x420 [ 180.217363][ T7633] ? __might_fault+0xaa/0x120 [ 180.222063][ T7633] ? __lock_acquire+0x7d80/0x7d80 [ 180.227112][ T7633] should_fail_ex+0x394/0x4c0 [ 180.231806][ T7633] _copy_from_user+0x2f/0xe0 [ 180.236413][ T7633] __sys_bpf+0x23e/0x890 [ 180.240686][ T7633] ? bpf_link_show_fdinfo+0x390/0x390 [ 180.246093][ T7633] ? lock_chain_count+0x20/0x20 [ 180.250974][ T7633] __x64_sys_bpf+0x7c/0x90 [ 180.255409][ T7633] do_syscall_64+0x55/0xb0 [ 180.259849][ T7633] ? clear_bhb_loop+0x40/0x90 [ 180.264552][ T7633] ? clear_bhb_loop+0x40/0x90 [ 180.269249][ T7633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.275167][ T7633] RIP: 0033:0x7fc66259e159 [ 180.279620][ T7633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.299249][ T7633] RSP: 002b:00007fc6633a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.307688][ T7633] RAX: ffffffffffffffda RBX: 00007fc662825fa0 RCX: 00007fc66259e159 [ 180.315693][ T7633] RDX: 0000000000000094 RSI: 0000200000000bc0 RDI: 0000000000000005 [ 180.323692][ T7633] RBP: 00007fc6633a3090 R08: 0000000000000000 R09: 0000000000000000 [ 180.331677][ T7633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.339655][ T7633] R13: 00007fc662826038 R14: 00007fc662825fa0 R15: 00007ffc5c6c04e8 [ 180.347669][ T7633] [ 180.592198][ T7645] netlink: 'syz.3.648': attribute type 39 has an invalid length. [ 180.695759][ T7651] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.653'. [ 180.823339][ T7655] netlink: 'syz.2.655': attribute type 4 has an invalid length. [ 180.836240][ T7655] netlink: 'syz.2.655': attribute type 16 has an invalid length. [ 180.845791][ T7655] netlink: 132 bytes leftover after parsing attributes in process `syz.2.655'. [ 181.005780][ T7661] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.658'. [ 181.287053][ T7673] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.664'. [ 181.621786][ T7685] netlink: 'syz.0.670': attribute type 10 has an invalid length. [ 181.630213][ T7685] netlink: 40 bytes leftover after parsing attributes in process `syz.0.670'. [ 181.641770][ T7685] FAULT_INJECTION: forcing a failure. [ 181.641770][ T7685] name failslab, interval 1, probability 0, space 0, times 0 [ 181.654917][ T7685] CPU: 1 PID: 7685 Comm: syz.0.670 Not tainted syzkaller #0 [ 181.662278][ T7685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.672371][ T7685] Call Trace: [ 181.675691][ T7685] [ 181.678659][ T7685] dump_stack_lvl+0x18c/0x250 [ 181.683393][ T7685] ? show_regs_print_info+0x20/0x20 [ 181.688635][ T7685] ? load_image+0x420/0x420 [ 181.693190][ T7685] ? __might_sleep+0xe0/0xe0 [ 181.697847][ T7685] ? __lock_acquire+0x7d80/0x7d80 [ 181.702917][ T7685] should_fail_ex+0x394/0x4c0 [ 181.707650][ T7685] should_failslab+0x9/0x20 [ 181.712208][ T7685] slab_pre_alloc_hook+0x59/0x300 [ 181.717291][ T7685] kmem_cache_alloc_node+0x5e/0x310 [ 181.722542][ T7685] ? __alloc_skb+0x103/0x2c0 [ 181.727196][ T7685] __alloc_skb+0x103/0x2c0 [ 181.731663][ T7685] rtmsg_ifinfo_build_skb+0x83/0x260 [ 181.737012][ T7685] ? ip6_route_dev_notify+0x9a/0x5b0 [ 181.742347][ T7685] rtmsg_ifinfo+0x8c/0x1a0 [ 181.746812][ T7685] netdev_state_change+0xfe/0x170 [ 181.751880][ T7685] ? netdev_features_change+0xd0/0xd0 [ 181.757307][ T7685] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 181.763249][ T7685] ? mutex_is_locked+0x12/0x40 [ 181.768072][ T7685] ? __dev_get_by_index+0xe7/0x110 [ 181.773238][ T7685] do_setlink+0x1010/0x3f40 [ 181.777811][ T7685] ? load_image+0x420/0x420 [ 181.782359][ T7685] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 181.788610][ T7685] ? rcu_is_watching+0x15/0xb0 [ 181.793430][ T7685] ? do_trace_netlink_extack+0x7e/0x1a0 [ 181.799062][ T7685] ? __nla_validate+0x50/0x50 [ 181.803798][ T7685] ? mark_lock+0x94/0x320 [ 181.808183][ T7685] ? __lock_acquire+0x1336/0x7d80 [ 181.813282][ T7685] ? validate_linkmsg+0x719/0x910 [ 181.818353][ T7685] rtnl_setlink+0x34c/0x4e0 [ 181.822914][ T7685] ? rtnl_dump_ifinfo+0x13c0/0x13c0 [ 181.828145][ T7685] ? __lock_acquire+0x1262/0x7d80 [ 181.833211][ T7685] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.839341][ T7685] ? arch_stack_walk+0x160/0x190 [ 181.844389][ T7685] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 181.849553][ T7685] ? mutex_lock_nested+0x20/0x20 [ 181.854579][ T7685] ? rtnl_dump_ifinfo+0x13c0/0x13c0 [ 181.859823][ T7685] rtnetlink_rcv_msg+0x843/0xf90 [ 181.864826][ T7685] ? rtnetlink_rcv_msg+0x220/0xf90 [ 181.869998][ T7685] ? rtnetlink_bind+0x80/0x80 [ 181.874743][ T7685] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 181.880778][ T7685] ? lock_chain_count+0x20/0x20 [ 181.885683][ T7685] ? __local_bh_enable_ip+0x13a/0x1c0 [ 181.891109][ T7685] ? lockdep_hardirqs_on+0x98/0x150 [ 181.896366][ T7685] ? __local_bh_enable_ip+0x13a/0x1c0 [ 181.901778][ T7685] ? _local_bh_enable+0xa0/0xa0 [ 181.906681][ T7685] ? __dev_queue_xmit+0x272/0x37e0 [ 181.911844][ T7685] ? __dev_queue_xmit+0x1329/0x37e0 [ 181.917093][ T7685] ? __dev_queue_xmit+0x272/0x37e0 [ 181.922284][ T7685] ? ref_tracker_free+0x686/0x830 [ 181.927371][ T7685] netlink_rcv_skb+0x235/0x4c0 [ 181.932183][ T7685] ? rtnetlink_bind+0x80/0x80 [ 181.936910][ T7685] ? netlink_ack+0x1160/0x1160 [ 181.941726][ T7685] ? __lock_acquire+0x7d80/0x7d80 [ 181.946802][ T7685] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.952048][ T7685] netlink_unicast+0x7b1/0x930 [ 181.956862][ T7685] netlink_sendmsg+0x8d0/0xbf0 [ 181.961681][ T7685] ? netlink_getsockopt+0x590/0x590 [ 181.966919][ T7685] ? apparmor_socket_sendmsg+0x8e/0x330 [ 181.972495][ T7685] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 181.977830][ T7685] ? security_socket_sendmsg+0x80/0xa0 [ 181.983313][ T7685] ? netlink_getsockopt+0x590/0x590 [ 181.988542][ T7685] ____sys_sendmsg+0x61b/0x980 [ 181.993346][ T7685] ? __asan_memset+0x22/0x40 [ 181.997985][ T7685] ? __sys_sendmsg_sock+0x30/0x30 [ 182.003039][ T7685] ? __import_iovec+0x5f2/0x850 [ 182.007933][ T7685] ? import_iovec+0x73/0xa0 [ 182.012470][ T7685] ___sys_sendmsg+0x2a6/0x360 [ 182.017187][ T7685] ? get_pid_task+0x20/0x1e0 [ 182.021816][ T7685] ? __sys_sendmsg+0x2b0/0x2b0 [ 182.026623][ T7685] ? __lock_acquire+0x7d80/0x7d80 [ 182.031699][ T7685] __se_sys_sendmsg+0x1d0/0x2c0 [ 182.036579][ T7685] ? __x64_sys_sendmsg+0x80/0x80 [ 182.041551][ T7685] ? lockdep_hardirqs_on+0x98/0x150 [ 182.046778][ T7685] do_syscall_64+0x55/0xb0 [ 182.051207][ T7685] ? clear_bhb_loop+0x40/0x90 [ 182.055911][ T7685] ? clear_bhb_loop+0x40/0x90 [ 182.060627][ T7685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.066568][ T7685] RIP: 0033:0x7fc66259e159 [ 182.071002][ T7685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.090630][ T7685] RSP: 002b:00007fc6633a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.099071][ T7685] RAX: ffffffffffffffda RBX: 00007fc662825fa0 RCX: 00007fc66259e159 [ 182.107066][ T7685] RDX: 0200000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 182.115062][ T7685] RBP: 00007fc6633a3090 R08: 0000000000000000 R09: 0000000000000000 [ 182.123051][ T7685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.131040][ T7685] R13: 00007fc662826038 R14: 00007fc662825fa0 R15: 00007ffc5c6c04e8 [ 182.139043][ T7685] [ 182.165042][ T7685] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 182.213363][ T7687] netlink: 'syz.2.671': attribute type 10 has an invalid length. [ 182.225711][ T7687] netlink: 40 bytes leftover after parsing attributes in process `syz.2.671'. [ 182.526950][ T7702] netlink: 'syz.1.676': attribute type 39 has an invalid length. [ 182.658177][ T7707] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.678'. [ 183.390442][ T7728] syzkaller0: entered promiscuous mode [ 183.400766][ T7728] syzkaller0: entered allmulticast mode [ 183.597141][ T7738] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.690'. [ 184.877754][ T7734] netlink: 'syz.1.689': attribute type 39 has an invalid length. [ 184.895793][ T7742] netlink: 'syz.2.692': attribute type 39 has an invalid length. [ 185.139256][ T7755] FAULT_INJECTION: forcing a failure. [ 185.139256][ T7755] name failslab, interval 1, probability 0, space 0, times 0 [ 185.163107][ T7755] CPU: 1 PID: 7755 Comm: syz.2.696 Not tainted syzkaller #0 [ 185.170475][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.180573][ T7755] Call Trace: [ 185.183900][ T7755] [ 185.186885][ T7755] dump_stack_lvl+0x18c/0x250 [ 185.191647][ T7755] ? show_regs_print_info+0x20/0x20 [ 185.196900][ T7755] ? load_image+0x420/0x420 [ 185.201696][ T7755] ? __might_sleep+0xe0/0xe0 [ 185.206349][ T7755] ? __lock_acquire+0x7d80/0x7d80 [ 185.211436][ T7755] ? stack_trace_save+0xaa/0x100 [ 185.216427][ T7755] ? stack_trace_snprint+0xf0/0xf0 [ 185.221592][ T7755] should_fail_ex+0x394/0x4c0 [ 185.226322][ T7755] should_failslab+0x9/0x20 [ 185.230877][ T7755] slab_pre_alloc_hook+0x59/0x300 [ 185.235984][ T7755] ? __kasan_kmalloc+0x8f/0xa0 [ 185.240787][ T7755] ? __inet_diag_dump_start+0x8b/0x9f0 [ 185.246299][ T7755] ? __netlink_dump_start+0x43c/0x7a0 [ 185.251710][ T7755] kmem_cache_alloc_node+0x5e/0x310 [ 185.256970][ T7755] ? ___sys_sendmsg+0x2a6/0x360 [ 185.261869][ T7755] ? __alloc_skb+0x103/0x2c0 [ 185.266504][ T7755] __alloc_skb+0x103/0x2c0 [ 185.270971][ T7755] netlink_dump+0x1ee/0xec0 [ 185.275539][ T7755] ? netlink_lookup+0x200/0x200 [ 185.280460][ T7755] ? __kasan_kmalloc+0x8f/0xa0 [ 185.285267][ T7755] ? __inet_diag_dump_start+0x886/0x9f0 [ 185.290859][ T7755] ? netlink_lookup+0x30/0x200 [ 185.295671][ T7755] __netlink_dump_start+0x57c/0x7a0 [ 185.300938][ T7755] inet_diag_handler_cmd+0x1e0/0x2c0 [ 185.306318][ T7755] ? sock_diag_lock_handler+0x19/0x280 [ 185.311835][ T7755] ? inet_diag_unregister+0xb0/0xb0 [ 185.317088][ T7755] ? inet_diag_handler_get_info+0x790/0x790 [ 185.323034][ T7755] ? inet_diag_dump_start+0x20/0x20 [ 185.328273][ T7755] ? inet_diag_dump+0x50/0x50 [ 185.332991][ T7755] ? sock_diag_lock_handler+0x19/0x280 [ 185.338494][ T7755] ? inet_diag_unregister+0xb0/0xb0 [ 185.343737][ T7755] sock_diag_rcv_msg+0x3d3/0x5f0 [ 185.348741][ T7755] netlink_rcv_skb+0x235/0x4c0 [ 185.353559][ T7755] ? sock_diag_bind+0xb0/0xb0 [ 185.358274][ T7755] ? netlink_ack+0x1160/0x1160 [ 185.363089][ T7755] ? __lock_acquire+0x7d80/0x7d80 [ 185.368157][ T7755] ? net_generic+0x1e/0x240 [ 185.372729][ T7755] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.377982][ T7755] sock_diag_rcv+0x2a/0x40 [ 185.382446][ T7755] netlink_unicast+0x7b1/0x930 [ 185.387264][ T7755] netlink_sendmsg+0x8d0/0xbf0 [ 185.392085][ T7755] ? netlink_getsockopt+0x590/0x590 [ 185.397323][ T7755] ? apparmor_socket_sendmsg+0x8e/0x330 [ 185.402956][ T7755] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 185.408301][ T7755] ? security_socket_sendmsg+0x80/0xa0 [ 185.413800][ T7755] ? netlink_getsockopt+0x590/0x590 [ 185.419044][ T7755] ____sys_sendmsg+0x61b/0x980 [ 185.423852][ T7755] ? __asan_memset+0x22/0x40 [ 185.428486][ T7755] ? __sys_sendmsg_sock+0x30/0x30 [ 185.433619][ T7755] ? __import_iovec+0x5f2/0x850 [ 185.438526][ T7755] ? import_iovec+0x73/0xa0 [ 185.443076][ T7755] ___sys_sendmsg+0x2a6/0x360 [ 185.447809][ T7755] ? __sys_sendmsg+0x2b0/0x2b0 [ 185.452645][ T7755] __se_sys_sendmsg+0x1d0/0x2c0 [ 185.457535][ T7755] ? __x64_sys_sendmsg+0x80/0x80 [ 185.462536][ T7755] ? syscall_enter_from_user_mode+0x2e/0x80 [ 185.468469][ T7755] do_syscall_64+0x55/0xb0 [ 185.472920][ T7755] ? clear_bhb_loop+0x40/0x90 [ 185.477681][ T7755] ? clear_bhb_loop+0x40/0x90 [ 185.482403][ T7755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.488344][ T7755] RIP: 0033:0x7fd29139e159 [ 185.492801][ T7755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.512454][ T7755] RSP: 002b:00007fd292238028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.520919][ T7755] RAX: ffffffffffffffda RBX: 00007fd291625fa0 RCX: 00007fd29139e159 [ 185.528928][ T7755] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000008 [ 185.536944][ T7755] RBP: 00007fd292238090 R08: 0000000000000000 R09: 0000000000000000 [ 185.544957][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.552978][ T7755] R13: 00007fd291626038 R14: 00007fd291625fa0 R15: 00007ffe4108b0b8 [ 185.561009][ T7755] [ 185.735190][ T7768] FAULT_INJECTION: forcing a failure. [ 185.735190][ T7768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.759813][ T7768] CPU: 0 PID: 7768 Comm: syz.1.700 Not tainted syzkaller #0 [ 185.767169][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.777261][ T7768] Call Trace: [ 185.780565][ T7768] [ 185.783517][ T7768] dump_stack_lvl+0x18c/0x250 [ 185.788252][ T7768] ? show_regs_print_info+0x20/0x20 [ 185.793506][ T7768] ? load_image+0x420/0x420 [ 185.798052][ T7768] ? __might_fault+0xaa/0x120 [ 185.802765][ T7768] ? __lock_acquire+0x7d80/0x7d80 [ 185.807847][ T7768] should_fail_ex+0x394/0x4c0 [ 185.812575][ T7768] _copy_from_user+0x2f/0xe0 [ 185.817280][ T7768] kstrtouint_from_user+0xde/0x170 [ 185.822423][ T7768] ? kstrtol_from_user+0x190/0x190 [ 185.827577][ T7768] proc_fail_nth_write+0x8f/0x250 [ 185.832630][ T7768] ? proc_fail_nth_read+0x260/0x260 [ 185.837851][ T7768] ? proc_fail_nth_read+0x260/0x260 [ 185.843077][ T7768] vfs_write+0x299/0x9a0 [ 185.847354][ T7768] ? file_end_write+0x250/0x250 [ 185.852238][ T7768] ? __fget_files+0x28/0x460 [ 185.856859][ T7768] ? __fget_files+0x3fc/0x460 [ 185.861598][ T7768] ? __fdget_pos+0x2a3/0x330 [ 185.866245][ T7768] ? ksys_write+0x74/0x260 [ 185.870687][ T7768] ksys_write+0x151/0x260 [ 185.875049][ T7768] ? __ia32_sys_read+0x90/0x90 [ 185.879843][ T7768] ? lockdep_hardirqs_on+0x98/0x150 [ 185.885071][ T7768] do_syscall_64+0x55/0xb0 [ 185.889513][ T7768] ? clear_bhb_loop+0x40/0x90 [ 185.894210][ T7768] ? clear_bhb_loop+0x40/0x90 [ 185.898912][ T7768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.904840][ T7768] RIP: 0033:0x7f77f295e98e [ 185.909277][ T7768] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.928905][ T7768] RSP: 002b:00007f77f38dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.937337][ T7768] RAX: ffffffffffffffda RBX: 00007f77f38e06c0 RCX: 00007f77f295e98e [ 185.945333][ T7768] RDX: 0000000000000001 RSI: 00007f77f38e00a0 RDI: 0000000000000005 [ 185.953323][ T7768] RBP: 00007f77f38e0090 R08: 0000000000000000 R09: 0000000000000000 [ 185.961393][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.969383][ T7768] R13: 00007f77f2c26038 R14: 00007f77f2c25fa0 R15: 00007ffc2b517b88 [ 185.977412][ T7768] [ 186.010231][ T7773] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.703'. [ 186.054313][ T7771] netlink: 'syz.2.702': attribute type 39 has an invalid length. [ 186.389202][ T7783] FAULT_INJECTION: forcing a failure. [ 186.389202][ T7783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.402671][ T7783] CPU: 0 PID: 7783 Comm: syz.1.707 Not tainted syzkaller #0 [ 186.410010][ T7783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.420105][ T7783] Call Trace: [ 186.423416][ T7783] [ 186.426381][ T7783] dump_stack_lvl+0x18c/0x250 [ 186.431113][ T7783] ? show_regs_print_info+0x20/0x20 [ 186.436349][ T7783] ? load_image+0x420/0x420 [ 186.440885][ T7783] ? __might_fault+0xaa/0x120 [ 186.445589][ T7783] ? __lock_acquire+0x7d80/0x7d80 [ 186.450643][ T7783] should_fail_ex+0x394/0x4c0 [ 186.455357][ T7783] _copy_from_user+0x2f/0xe0 [ 186.459979][ T7783] __sys_bpf+0x23e/0x890 [ 186.464250][ T7783] ? bpf_link_show_fdinfo+0x390/0x390 [ 186.469663][ T7783] ? lock_chain_count+0x20/0x20 [ 186.474566][ T7783] __x64_sys_bpf+0x7c/0x90 [ 186.479005][ T7783] do_syscall_64+0x55/0xb0 [ 186.483454][ T7783] ? clear_bhb_loop+0x40/0x90 [ 186.488162][ T7783] ? clear_bhb_loop+0x40/0x90 [ 186.492861][ T7783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.498778][ T7783] RIP: 0033:0x7f77f299e159 [ 186.503221][ T7783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.522868][ T7783] RSP: 002b:00007f77f38e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 186.531334][ T7783] RAX: ffffffffffffffda RBX: 00007f77f2c25fa0 RCX: 00007f77f299e159 [ 186.539333][ T7783] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 186.547325][ T7783] RBP: 00007f77f38e0090 R08: 0000000000000000 R09: 0000000000000000 [ 186.555321][ T7783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.563310][ T7783] R13: 00007f77f2c26038 R14: 00007f77f2c25fa0 R15: 00007ffc2b517b88 [ 186.571311][ T7783] [ 186.868289][ T7796] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.713'. [ 187.064064][ T7800] netlink: 'syz.1.714': attribute type 39 has an invalid length. [ 187.250110][ T7814] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.716'. [ 187.260958][ T7814] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.716'. [ 187.505640][ T7827] netlink: 'syz.2.723': attribute type 10 has an invalid length. [ 187.523428][ T7827] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.723'. [ 187.632643][ T7831] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.726'. [ 187.661939][ T7833] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.727'. [ 187.684682][ T5780] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 187.964681][ T7842] netlink: 'syz.0.729': attribute type 39 has an invalid length. [ 188.273287][ T7855] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.737'. [ 189.020372][ T7871] netlink: 'syz.3.743': attribute type 39 has an invalid length. [ 189.195617][ T7878] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.747'. [ 194.067275][ T7904] netlink: 'syz.2.757': attribute type 39 has an invalid length. [ 194.215391][ T7907] FAULT_INJECTION: forcing a failure. [ 194.215391][ T7907] name failslab, interval 1, probability 0, space 0, times 0 [ 194.232731][ T7907] CPU: 1 PID: 7907 Comm: syz.3.758 Not tainted syzkaller #0 [ 194.240075][ T7907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.250163][ T7907] Call Trace: [ 194.253493][ T7907] [ 194.256475][ T7907] dump_stack_lvl+0x18c/0x250 [ 194.261233][ T7907] ? sctp_sendmsg+0x1519/0x27b0 [ 194.266133][ T7907] ? ___sys_sendmsg+0x2a6/0x360 [ 194.271039][ T7907] ? show_regs_print_info+0x20/0x20 [ 194.276310][ T7907] ? load_image+0x420/0x420 [ 194.280891][ T7907] should_fail_ex+0x394/0x4c0 [ 194.285631][ T7907] should_failslab+0x9/0x20 [ 194.290199][ T7907] slab_pre_alloc_hook+0x59/0x300 [ 194.291961][ T7913] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.761'. [ 194.295288][ T7907] ? sctp_add_bind_addr+0x8c/0x360 [ 194.295351][ T7907] __kmem_cache_alloc_node+0x53/0x250 [ 194.295390][ T7907] ? sctp_add_bind_addr+0x8c/0x360 [ 194.320252][ T7907] kmalloc_trace+0x2a/0xe0 [ 194.324705][ T7907] sctp_add_bind_addr+0x8c/0x360 [ 194.329736][ T7907] sctp_copy_local_addr_list+0x31b/0x4e0 [ 194.335408][ T7907] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 194.341163][ T7907] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 194.347264][ T7907] ? sctp_v4_is_any+0x35/0x60 [ 194.351973][ T7907] ? sctp_copy_one_addr+0x8c/0x350 [ 194.357109][ T7907] sctp_bind_addr_copy+0xb3/0x3c0 [ 194.362156][ T7907] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 194.368520][ T7907] sctp_connect_new_asoc+0x2f9/0x6a0 [ 194.373844][ T7907] ? __sctp_connect+0xd80/0xd80 [ 194.378717][ T7907] ? __local_bh_enable_ip+0x13a/0x1c0 [ 194.384107][ T7907] ? _local_bh_enable+0xa0/0xa0 [ 194.388975][ T7907] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 194.394811][ T7907] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 194.400650][ T7907] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 194.406229][ T7907] ? security_sctp_bind_connect+0x89/0xb0 [ 194.411993][ T7907] sctp_sendmsg+0x1519/0x27b0 [ 194.416728][ T7907] ? sctp_getsockopt+0xb60/0xb60 [ 194.421742][ T7907] ? aa_af_perm+0x330/0x330 [ 194.426301][ T7907] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 194.432774][ T7907] ? sock_rps_record_flow+0x19/0x3f0 [ 194.438083][ T7907] ? inet_sendmsg+0x7e/0x2a0 [ 194.442694][ T7907] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 194.448009][ T7907] ? inet_send_prepare+0x250/0x250 [ 194.453144][ T7907] ____sys_sendmsg+0x61b/0x980 [ 194.457935][ T7907] ? __asan_memset+0x22/0x40 [ 194.462562][ T7907] ? __sys_sendmsg_sock+0x30/0x30 [ 194.467609][ T7907] ? __import_iovec+0x5f2/0x850 [ 194.472495][ T7907] ? import_iovec+0x73/0xa0 [ 194.477044][ T7907] ___sys_sendmsg+0x2a6/0x360 [ 194.481744][ T7907] ? get_pid_task+0x20/0x1e0 [ 194.486386][ T7907] ? __sys_sendmsg+0x2b0/0x2b0 [ 194.491194][ T7907] ? __lock_acquire+0x7d80/0x7d80 [ 194.496266][ T7907] __se_sys_sendmsg+0x1d0/0x2c0 [ 194.501146][ T7907] ? __x64_sys_sendmsg+0x80/0x80 [ 194.506125][ T7907] ? lockdep_hardirqs_on+0x98/0x150 [ 194.511356][ T7907] do_syscall_64+0x55/0xb0 [ 194.515796][ T7907] ? clear_bhb_loop+0x40/0x90 [ 194.520496][ T7907] ? clear_bhb_loop+0x40/0x90 [ 194.525208][ T7907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.531124][ T7907] RIP: 0033:0x7f2dcb79e159 [ 194.535560][ T7907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.555193][ T7907] RSP: 002b:00007f2dc99f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.563627][ T7907] RAX: ffffffffffffffda RBX: 00007f2dcba25fa0 RCX: 00007f2dcb79e159 [ 194.571620][ T7907] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000003 [ 194.579619][ T7907] RBP: 00007f2dc99f6090 R08: 0000000000000000 R09: 0000000000000000 [ 194.587600][ T7907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.595590][ T7907] R13: 00007f2dcba26038 R14: 00007f2dcba25fa0 R15: 00007ffc7da5dda8 [ 194.603615][ T7907] [ 194.623365][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.629829][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.096101][ T7928] FAULT_INJECTION: forcing a failure. [ 195.096101][ T7928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.124034][ T7928] CPU: 0 PID: 7928 Comm: syz.2.767 Not tainted syzkaller #0 [ 195.131424][ T7928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.141510][ T7928] Call Trace: [ 195.144828][ T7928] [ 195.147796][ T7928] dump_stack_lvl+0x18c/0x250 [ 195.152521][ T7928] ? show_regs_print_info+0x20/0x20 [ 195.157756][ T7928] ? load_image+0x420/0x420 [ 195.162301][ T7928] ? __lock_acquire+0x7d80/0x7d80 [ 195.167380][ T7928] should_fail_ex+0x394/0x4c0 [ 195.172210][ T7928] _copy_from_user+0x2f/0xe0 [ 195.176841][ T7928] __copy_msghdr+0x388/0x560 [ 195.181474][ T7928] ___sys_sendmsg+0x214/0x360 [ 195.186196][ T7928] ? get_pid_task+0x20/0x1e0 [ 195.190862][ T7928] ? __sys_sendmsg+0x2b0/0x2b0 [ 195.195690][ T7928] ? __lock_acquire+0x7d80/0x7d80 [ 195.200785][ T7928] __se_sys_sendmsg+0x1d0/0x2c0 [ 195.205697][ T7928] ? perf_trace_preemptirq_template+0x269/0x330 [ 195.211994][ T7928] ? __x64_sys_sendmsg+0x80/0x80 [ 195.216992][ T7928] ? lockdep_hardirqs_on+0x98/0x150 [ 195.222238][ T7928] do_syscall_64+0x55/0xb0 [ 195.226696][ T7928] ? clear_bhb_loop+0x40/0x90 [ 195.231424][ T7928] ? clear_bhb_loop+0x40/0x90 [ 195.236186][ T7928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.242125][ T7928] RIP: 0033:0x7fd29139e159 [ 195.246572][ T7928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.266213][ T7928] RSP: 002b:00007fd292238028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.274673][ T7928] RAX: ffffffffffffffda RBX: 00007fd291625fa0 RCX: 00007fd29139e159 [ 195.282696][ T7928] RDX: 0000000000088010 RSI: 0000200000000340 RDI: 0000000000000012 [ 195.290686][ T7928] RBP: 00007fd292238090 R08: 0000000000000000 R09: 0000000000000000 [ 195.298684][ T7928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.306680][ T7928] R13: 00007fd291626038 R14: 00007fd291625fa0 R15: 00007ffe4108b0b8 [ 195.314695][ T7928] [ 195.444630][ T7932] netlink: 'syz.3.769': attribute type 39 has an invalid length. [ 195.545373][ T7939] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.772'. [ 195.576850][ T5780] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 196.198345][ T7966] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.783'. [ 196.241689][ T5780] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 196.245828][ T7962] netlink: 'syz.2.781': attribute type 39 has an invalid length. [ 196.437396][ T7970] netlink: 'syz.3.784': attribute type 1 has an invalid length. [ 196.452220][ T7975] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.785'. [ 196.463432][ T7970] netlink: 'syz.3.784': attribute type 3 has an invalid length. [ 196.489524][ T7970] netlink: 132 bytes leftover after parsing attributes in process `syz.3.784'. [ 196.715752][ T7984] netlink: 'syz.3.788': attribute type 10 has an invalid length. [ 197.044893][ T8005] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.795'. [ 197.071314][ T8006] netlink: 'syz.2.796': attribute type 39 has an invalid length. [ 197.092075][ T5780] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 198.004783][ T8031] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.805'. [ 198.072652][ T5780] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 198.149174][ T8033] sit0: entered allmulticast mode [ 198.262256][ T8037] netlink: 14 bytes leftover after parsing attributes in process `syz.1.807'. [ 198.311884][ T8038] netlink: 'syz.3.808': attribute type 39 has an invalid length. [ 198.416010][ T8043] tap0: tun_chr_ioctl cmd 2147767511 [ 201.810693][ T8063] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.818'. [ 201.841590][ T5780] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 201.979257][ T8067] netlink: 'syz.0.820': attribute type 39 has an invalid length. [ 202.386923][ T8087] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.829'. [ 202.428845][ T5780] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 202.565090][ T8094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.677602][ T8097] netlink: 'syz.3.833': attribute type 39 has an invalid length. [ 206.624307][ T8122] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.842'. [ 206.703110][ T51] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 206.736572][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 206.736611][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 206.743889][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 206.750425][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 206.845995][ T8123] netlink: 'syz.3.843': attribute type 39 has an invalid length. [ 207.444863][ T8148] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.852'. [ 207.519381][ T5780] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 207.526880][ T8150] netlink: 'syz.0.853': attribute type 10 has an invalid length. [ 207.549226][ T8150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.853'. [ 207.559763][ T8150] veth0_vlan: entered allmulticast mode [ 207.567507][ T8150] bridge0: port 3(veth0_vlan) entered blocking state [ 207.579988][ T8150] bridge0: port 3(veth0_vlan) entered disabled state [ 207.597359][ T8150] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 207.623670][ T8152] netlink: 'syz.3.854': attribute type 15 has an invalid length. [ 207.651994][ T8152] netlink: 'syz.3.854': attribute type 7 has an invalid length. [ 207.683361][ T8152] netlink: 52 bytes leftover after parsing attributes in process `syz.3.854'. [ 207.710727][ T8155] FAULT_INJECTION: forcing a failure. [ 207.710727][ T8155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.727003][ T8155] CPU: 0 PID: 8155 Comm: syz.1.855 Not tainted syzkaller #0 [ 207.734376][ T8155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.744472][ T8155] Call Trace: [ 207.747791][ T8155] [ 207.750766][ T8155] dump_stack_lvl+0x18c/0x250 [ 207.755499][ T8155] ? show_regs_print_info+0x20/0x20 [ 207.760745][ T8155] ? load_image+0x420/0x420 [ 207.765305][ T8155] ? __might_fault+0xaa/0x120 [ 207.770049][ T8155] ? __lock_acquire+0x7d80/0x7d80 [ 207.775131][ T8155] should_fail_ex+0x394/0x4c0 [ 207.779866][ T8155] _copy_from_iter+0x1cd/0x1290 [ 207.784847][ T8155] ? rcu_is_watching+0x15/0xb0 [ 207.789668][ T8155] ? copyout_mc+0x70/0x70 [ 207.794053][ T8155] ? __virt_addr_valid+0x10c/0x380 [ 207.799224][ T8155] ? __virt_addr_valid+0x10c/0x380 [ 207.804388][ T8155] ? __virt_addr_valid+0x10c/0x380 [ 207.809536][ T8155] ? __check_object_size+0x4fc/0xa40 [ 207.814855][ T8155] netlink_sendmsg+0x76b/0xbf0 [ 207.819655][ T8155] ? netlink_getsockopt+0x590/0x590 [ 207.824876][ T8155] ? apparmor_socket_sendmsg+0x8e/0x330 [ 207.830454][ T8155] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 207.835780][ T8155] ? security_socket_sendmsg+0x80/0xa0 [ 207.841269][ T8155] ? netlink_getsockopt+0x590/0x590 [ 207.846510][ T8155] ____sys_sendmsg+0x61b/0x980 [ 207.851307][ T8155] ? __asan_memset+0x22/0x40 [ 207.855928][ T8155] ? __sys_sendmsg_sock+0x30/0x30 [ 207.860985][ T8155] ? __import_iovec+0x5f2/0x850 [ 207.865878][ T8155] ? import_iovec+0x73/0xa0 [ 207.870425][ T8155] ___sys_sendmsg+0x2a6/0x360 [ 207.875127][ T8155] ? get_pid_task+0x20/0x1e0 [ 207.879769][ T8155] ? __sys_sendmsg+0x2b0/0x2b0 [ 207.884566][ T8155] ? __lock_acquire+0x7d80/0x7d80 [ 207.889628][ T8155] __se_sys_sendmsg+0x1d0/0x2c0 [ 207.894507][ T8155] ? __x64_sys_sendmsg+0x80/0x80 [ 207.899478][ T8155] ? lockdep_hardirqs_on+0x98/0x150 [ 207.904711][ T8155] do_syscall_64+0x55/0xb0 [ 207.909246][ T8155] ? clear_bhb_loop+0x40/0x90 [ 207.913950][ T8155] ? clear_bhb_loop+0x40/0x90 [ 207.918654][ T8155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.924573][ T8155] RIP: 0033:0x7f77f299e159 [ 207.929029][ T8155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.948655][ T8155] RSP: 002b:00007f77f38e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.957099][ T8155] RAX: ffffffffffffffda RBX: 00007f77f2c25fa0 RCX: 00007f77f299e159 [ 207.965091][ T8155] RDX: 0000000014040090 RSI: 0000200000000080 RDI: 0000000000000003 [ 207.973081][ T8155] RBP: 00007f77f38e0090 R08: 0000000000000000 R09: 0000000000000000 [ 207.981074][ T8155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.989063][ T8155] R13: 00007f77f2c26038 R14: 00007f77f2c25fa0 R15: 00007ffc2b517b88 [ 207.997066][ T8155] [ 208.110209][ T8157] netlink: 'syz.2.856': attribute type 39 has an invalid length. [ 208.124205][ T8159] netlink: 'syz.3.857': attribute type 21 has an invalid length. [ 208.742639][ T8177] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.864'. [ 208.779807][ T5780] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 209.455689][ T8195] netlink: 'syz.3.871': attribute type 39 has an invalid length. [ 209.767257][ T8202] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.874'. [ 209.821790][ T8206] netlink: 'syz.3.876': attribute type 22 has an invalid length. [ 209.842767][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.876'. [ 209.858248][ T5780] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 210.065457][ T8210] netlink: 'syz.1.878': attribute type 21 has an invalid length. [ 210.425726][ T8218] netlink: 'syz.3.881': attribute type 39 has an invalid length. [ 210.960306][ T8230] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.886'. [ 210.999377][ T5780] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 211.650491][ T8242] netlink: 'syz.1.891': attribute type 39 has an invalid length. [ 211.734972][ T8244] netlink: 156 bytes leftover after parsing attributes in process `syz.2.892'. [ 211.800855][ T8248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.031070][ T8255] FAULT_INJECTION: forcing a failure. [ 212.031070][ T8255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.067175][ T8255] CPU: 1 PID: 8255 Comm: syz.0.896 Not tainted syzkaller #0 [ 212.074663][ T8255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.084820][ T8255] Call Trace: [ 212.088146][ T8255] [ 212.091112][ T8255] dump_stack_lvl+0x18c/0x250 [ 212.095859][ T8255] ? show_regs_print_info+0x20/0x20 [ 212.101115][ T8255] ? load_image+0x420/0x420 [ 212.105677][ T8255] ? __lock_acquire+0x7d80/0x7d80 [ 212.110757][ T8255] ? snprintf+0xe9/0x140 [ 212.115062][ T8255] should_fail_ex+0x394/0x4c0 [ 212.119813][ T8255] _copy_to_user+0x2f/0xa0 [ 212.124287][ T8255] simple_read_from_buffer+0xe7/0x150 [ 212.129717][ T8255] proc_fail_nth_read+0x1e8/0x260 [ 212.134830][ T8255] ? proc_fault_inject_write+0x360/0x360 [ 212.140536][ T8255] ? fsnotify_perm+0x271/0x5e0 [ 212.145364][ T8255] ? proc_fault_inject_write+0x360/0x360 [ 212.151062][ T8255] vfs_read+0x298/0x990 [ 212.155287][ T8255] ? kernel_read+0x1e0/0x1e0 [ 212.159938][ T8255] ? __fget_files+0x28/0x460 [ 212.164587][ T8255] ? __fget_files+0x3fc/0x460 [ 212.169365][ T8255] ? __fdget_pos+0x2a3/0x330 [ 212.174015][ T8255] ? ksys_read+0x74/0x260 [ 212.178415][ T8255] ksys_read+0x151/0x260 [ 212.182727][ T8255] ? vfs_write+0x9a0/0x9a0 [ 212.187206][ T8255] ? lockdep_hardirqs_on+0x98/0x150 [ 212.192456][ T8255] do_syscall_64+0x55/0xb0 [ 212.196915][ T8255] ? clear_bhb_loop+0x40/0x90 [ 212.201640][ T8255] ? clear_bhb_loop+0x40/0x90 [ 212.206373][ T8255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.212321][ T8255] RIP: 0033:0x7fc66255e98e [ 212.216809][ T8255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 212.236526][ T8255] RSP: 002b:00007fc6633a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 212.245087][ T8255] RAX: ffffffffffffffda RBX: 00007fc6633a36c0 RCX: 00007fc66255e98e [ 212.253112][ T8255] RDX: 000000000000000f RSI: 00007fc6633a30a0 RDI: 0000000000000004 [ 212.261151][ T8255] RBP: 00007fc6633a3090 R08: 0000000000000000 R09: 0000000000000000 [ 212.269191][ T8255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.277218][ T8255] R13: 00007fc662826038 R14: 00007fc662825fa0 R15: 00007ffc5c6c04e8 [ 212.285265][ T8255] [ 212.360345][ T8259] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.898'. [ 212.704046][ T8268] validate_nla: 1 callbacks suppressed [ 212.704083][ T8268] netlink: 'syz.3.902': attribute type 39 has an invalid length. [ 212.984236][ T8282] netlink: 'syz.3.906': attribute type 21 has an invalid length. [ 213.023873][ T8282] netlink: 156 bytes leftover after parsing attributes in process `syz.3.906'. [ 213.833224][ T8299] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.913'. [ 213.986233][ T8301] netlink: 'syz.3.914': attribute type 39 has an invalid length. [ 214.383814][ T8310] netlink: 'syz.1.916': attribute type 39 has an invalid length. [ 214.843126][ T8330] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.926'. [ 215.122753][ T8339] netlink: 'syz.0.929': attribute type 39 has an invalid length. [ 215.271553][ T8348] netlink: 'syz.1.931': attribute type 2 has an invalid length. [ 215.300410][ T8348] netlink: 'syz.1.931': attribute type 8 has an invalid length. [ 215.320985][ T8344] netlink: 'syz.3.932': attribute type 9 has an invalid length. [ 215.330317][ T8348] netlink: 132 bytes leftover after parsing attributes in process `syz.1.931'. [ 215.332354][ T8344] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.932'. [ 215.400595][ T8346] FAULT_INJECTION: forcing a failure. [ 215.400595][ T8346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.436036][ T8346] CPU: 1 PID: 8346 Comm: syz.2.930 Not tainted syzkaller #0 [ 215.443404][ T8346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.443449][ T8346] Call Trace: [ 215.443460][ T8346] [ 215.443473][ T8346] dump_stack_lvl+0x18c/0x250 [ 215.443519][ T8346] ? show_regs_print_info+0x20/0x20 [ 215.443552][ T8346] ? load_image+0x420/0x420 [ 215.443588][ T8346] ? __lock_acquire+0x7d80/0x7d80 [ 215.443624][ T8346] ? snprintf+0xe9/0x140 [ 215.443658][ T8346] should_fail_ex+0x394/0x4c0 [ 215.443707][ T8346] _copy_to_user+0x2f/0xa0 [ 215.443740][ T8346] simple_read_from_buffer+0xe7/0x150 [ 215.443783][ T8346] proc_fail_nth_read+0x1e8/0x260 [ 215.443831][ T8346] ? proc_fault_inject_write+0x360/0x360 [ 215.443881][ T8346] ? fsnotify_perm+0x271/0x5e0 [ 215.443919][ T8346] ? proc_fault_inject_write+0x360/0x360 [ 215.519843][ T8346] vfs_read+0x298/0x990 [ 215.524089][ T8346] ? kernel_read+0x1e0/0x1e0 [ 215.528760][ T8346] ? __fget_files+0x28/0x460 [ 215.533434][ T8346] ? __fget_files+0x3fc/0x460 [ 215.538217][ T8346] ? __fdget_pos+0x2a3/0x330 [ 215.542883][ T8346] ? ksys_read+0x74/0x260 [ 215.547287][ T8346] ksys_read+0x151/0x260 [ 215.551612][ T8346] ? vfs_write+0x9a0/0x9a0 [ 215.556109][ T8346] ? lockdep_hardirqs_on+0x98/0x150 [ 215.561405][ T8346] do_syscall_64+0x55/0xb0 [ 215.565888][ T8346] ? clear_bhb_loop+0x40/0x90 [ 215.570633][ T8346] ? clear_bhb_loop+0x40/0x90 [ 215.575391][ T8346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.581357][ T8346] RIP: 0033:0x7fd29135e98e [ 215.585840][ T8346] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 215.605524][ T8346] RSP: 002b:00007fd292237fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.614056][ T8346] RAX: ffffffffffffffda RBX: 00007fd2922386c0 RCX: 00007fd29135e98e [ 215.622086][ T8346] RDX: 000000000000000f RSI: 00007fd2922380a0 RDI: 0000000000000004 [ 215.630126][ T8346] RBP: 00007fd292238090 R08: 0000000000000000 R09: 0000000000000000 [ 215.638185][ T8346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.646218][ T8346] R13: 00007fd291626038 R14: 00007fd291625fa0 R15: 00007ffe4108b0b8 [ 215.654288][ T8346] [ 216.230248][ T8361] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.938'. [ 216.475715][ T8369] netlink: 'syz.1.942': attribute type 39 has an invalid length. [ 216.800779][ T8381] FAULT_INJECTION: forcing a failure. [ 216.800779][ T8381] name failslab, interval 1, probability 0, space 0, times 0 [ 216.814719][ T8381] CPU: 0 PID: 8381 Comm: syz.0.947 Not tainted syzkaller #0 [ 216.822089][ T8381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.832181][ T8381] Call Trace: [ 216.835499][ T8381] [ 216.838450][ T8381] dump_stack_lvl+0x18c/0x250 [ 216.843171][ T8381] ? show_regs_print_info+0x20/0x20 [ 216.848401][ T8381] ? load_image+0x420/0x420 [ 216.852937][ T8381] ? __might_sleep+0xe0/0xe0 [ 216.857565][ T8381] ? __lock_acquire+0x7d80/0x7d80 [ 216.862622][ T8381] should_fail_ex+0x394/0x4c0 [ 216.867337][ T8381] should_failslab+0x9/0x20 [ 216.871874][ T8381] slab_pre_alloc_hook+0x59/0x300 [ 216.876937][ T8381] ? sock_kmalloc+0x96/0xf0 [ 216.881507][ T8381] ? sock_kmalloc+0x96/0xf0 [ 216.886043][ T8381] __kmem_cache_alloc_node+0x53/0x250 [ 216.891453][ T8381] ? sock_kmalloc+0x96/0xf0 [ 216.896003][ T8381] __kmalloc+0xa7/0x240 [ 216.900190][ T8381] sock_kmalloc+0x96/0xf0 [ 216.904550][ T8381] ____sys_sendmsg+0x1d4/0x980 [ 216.909367][ T8381] ? __asan_memset+0x22/0x40 [ 216.913993][ T8381] ? __sys_sendmsg_sock+0x30/0x30 [ 216.919043][ T8381] ? __import_iovec+0x3fa/0x850 [ 216.923933][ T8381] ? import_iovec+0x73/0xa0 [ 216.928476][ T8381] ___sys_sendmsg+0x2a6/0x360 [ 216.933176][ T8381] ? get_pid_task+0x20/0x1e0 [ 216.937798][ T8381] ? __sys_sendmsg+0x2b0/0x2b0 [ 216.942648][ T8381] __se_sys_sendmsg+0x1d0/0x2c0 [ 216.947527][ T8381] ? __x64_sys_sendmsg+0x80/0x80 [ 216.952496][ T8381] ? lockdep_hardirqs_on+0x98/0x150 [ 216.957729][ T8381] do_syscall_64+0x55/0xb0 [ 216.962257][ T8381] ? clear_bhb_loop+0x40/0x90 [ 216.966986][ T8381] ? clear_bhb_loop+0x40/0x90 [ 216.971779][ T8381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.977706][ T8381] RIP: 0033:0x7fc66259e159 [ 216.982145][ T8381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.001783][ T8381] RSP: 002b:00007fc6633a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.010227][ T8381] RAX: ffffffffffffffda RBX: 00007fc662825fa0 RCX: 00007fc66259e159 [ 217.018223][ T8381] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000005 [ 217.026215][ T8381] RBP: 00007fc6633a3090 R08: 0000000000000000 R09: 0000000000000000 [ 217.034203][ T8381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.042196][ T8381] R13: 00007fc662826038 R14: 00007fc662825fa0 R15: 00007ffc5c6c04e8 [ 217.050201][ T8381] [ 217.230982][ T8391] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.950'. [ 217.559902][ T8400] netlink: 'syz.1.954': attribute type 39 has an invalid length. [ 217.570661][ T8398] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.952'. [ 217.729319][ T8407] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.957'. [ 217.781947][ T8407] validate_nla: 1 callbacks suppressed [ 217.781965][ T8407] netlink: 'syz.1.957': attribute type 29 has an invalid length. [ 217.819419][ T8407] netlink: 'syz.1.957': attribute type 29 has an invalid length. [ 217.950465][ T8414] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.959'. [ 218.198809][ T8420] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.962'. [ 218.715611][ T8433] netlink: 'syz.1.967': attribute type 39 has an invalid length. [ 218.770667][ T8438] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.969'. [ 218.983217][ T8445] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.972'. [ 219.504688][ T8466] netlink: 'syz.1.980': attribute type 39 has an invalid length. [ 219.835553][ T8476] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.984'. [ 220.254955][ T8492] netlink: 'syz.0.992': attribute type 39 has an invalid length. [ 220.616508][ T8507] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.997'. [ 221.615383][ T8530] netlink: 'syz.0.1004': attribute type 39 has an invalid length. [ 221.801465][ T8537] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1007'. [ 222.466849][ T8551] netlink: 'syz.3.1012': attribute type 9 has an invalid length. [ 222.524221][ T8551] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1012'. [ 222.584002][ T8553] FAULT_INJECTION: forcing a failure. [ 222.584002][ T8553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.610221][ T8553] CPU: 0 PID: 8553 Comm: syz.0.1014 Not tainted syzkaller #0 [ 222.617690][ T8553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.627792][ T8553] Call Trace: [ 222.631099][ T8553] [ 222.634058][ T8553] dump_stack_lvl+0x18c/0x250 [ 222.638770][ T8553] ? show_regs_print_info+0x20/0x20 [ 222.643991][ T8553] ? load_image+0x420/0x420 [ 222.648521][ T8553] ? __might_fault+0xaa/0x120 [ 222.653229][ T8553] ? __lock_acquire+0x7d80/0x7d80 [ 222.658303][ T8553] should_fail_ex+0x394/0x4c0 [ 222.663022][ T8553] _copy_to_user+0x2f/0xa0 [ 222.667483][ T8553] bpf_test_finish+0x4e7/0x650 [ 222.672322][ T8553] ? bpf_test_run+0x174/0x870 [ 222.677038][ T8553] ? convert_skb_to___skb+0x420/0x420 [ 222.682455][ T8553] bpf_prog_test_run_skb+0x1135/0x18f0 [ 222.687962][ T8553] ? cpu_online+0x60/0x60 [ 222.692322][ T8553] bpf_prog_test_run+0x31f/0x390 [ 222.697289][ T8553] __sys_bpf+0x49d/0x890 [ 222.701558][ T8553] ? bpf_link_show_fdinfo+0x390/0x390 [ 222.706973][ T8553] ? lock_chain_count+0x20/0x20 [ 222.711861][ T8553] __x64_sys_bpf+0x7c/0x90 [ 222.716309][ T8553] do_syscall_64+0x55/0xb0 [ 222.720771][ T8553] ? clear_bhb_loop+0x40/0x90 [ 222.725473][ T8553] ? clear_bhb_loop+0x40/0x90 [ 222.730183][ T8553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.736103][ T8553] RIP: 0033:0x7fc66259e159 [ 222.740544][ T8553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.760190][ T8553] RSP: 002b:00007fc6633a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.768642][ T8553] RAX: ffffffffffffffda RBX: 00007fc662825fa0 RCX: 00007fc66259e159 [ 222.776652][ T8553] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 222.784653][ T8553] RBP: 00007fc6633a3090 R08: 0000000000000000 R09: 0000000000000000 [ 222.792655][ T8553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.800647][ T8553] R13: 00007fc662826038 R14: 00007fc662825fa0 R15: 00007ffc5c6c04e8 [ 222.808654][ T8553] [ 223.138152][ T8567] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1020'. [ 223.393095][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1024'. [ 223.666735][ T8581] IPv6: NLM_F_CREATE should be specified when creating new route [ 223.675875][ T8581] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1026'. [ 224.179704][ T8592] netlink: 'syz.2.1032': attribute type 3 has an invalid length. [ 224.198571][ T8592] netlink: 'syz.2.1032': attribute type 1 has an invalid length. [ 224.223173][ T8592] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1032'. [ 224.404223][ T8600] FAULT_INJECTION: forcing a failure. [ 224.404223][ T8600] name failslab, interval 1, probability 0, space 0, times 0 [ 224.421261][ T8600] CPU: 0 PID: 8600 Comm: syz.0.1035 Not tainted syzkaller #0 [ 224.428716][ T8600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.438840][ T8600] Call Trace: [ 224.442176][ T8600] [ 224.445151][ T8600] dump_stack_lvl+0x18c/0x250 [ 224.449890][ T8600] ? show_regs_print_info+0x20/0x20 [ 224.455154][ T8600] ? load_image+0x420/0x420 [ 224.459710][ T8600] ? verify_lock_unused+0x140/0x140 [ 224.464975][ T8600] should_fail_ex+0x394/0x4c0 [ 224.469728][ T8600] should_failslab+0x9/0x20 [ 224.474290][ T8600] slab_pre_alloc_hook+0x59/0x300 [ 224.479379][ T8600] kmem_cache_alloc+0x5a/0x2c0 [ 224.484219][ T8600] ? skb_clone+0x1eb/0x370 [ 224.488694][ T8600] skb_clone+0x1eb/0x370 [ 224.492998][ T8600] __netlink_deliver_tap+0x411/0x7f0 [ 224.498353][ T8600] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.503653][ T8600] netlink_deliver_tap+0x19c/0x1b0 [ 224.508824][ T8600] netlink_unicast+0x77b/0x930 [ 224.513646][ T8600] netlink_sendmsg+0x8d0/0xbf0 [ 224.518467][ T8600] ? netlink_getsockopt+0x590/0x590 [ 224.523713][ T8600] ? apparmor_socket_sendmsg+0x8e/0x330 [ 224.529317][ T8600] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 224.534664][ T8600] ? security_socket_sendmsg+0x80/0xa0 [ 224.540171][ T8600] ? netlink_getsockopt+0x590/0x590 [ 224.545430][ T8600] ____sys_sendmsg+0x61b/0x980 [ 224.549885][ T8603] netlink: 'syz.2.1036': attribute type 21 has an invalid length. [ 224.550235][ T8600] ? __asan_memset+0x22/0x40 [ 224.562688][ T8600] ? __sys_sendmsg_sock+0x30/0x30 [ 224.567760][ T8600] ? __import_iovec+0x5f2/0x850 [ 224.571127][ T8602] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1034'. [ 224.572658][ T8600] ? import_iovec+0x73/0xa0 [ 224.583178][ T8603] IPv6: NLM_F_CREATE should be specified when creating new route [ 224.586461][ T8600] ___sys_sendmsg+0x2a6/0x360 [ 224.598924][ T8600] ? get_pid_task+0x20/0x1e0 [ 224.603565][ T8600] ? __sys_sendmsg+0x2b0/0x2b0 [ 224.608407][ T8600] ? __lock_acquire+0x7d80/0x7d80 [ 224.613589][ T8600] __se_sys_sendmsg+0x1d0/0x2c0 [ 224.618056][ T8603] IPv6: Can't replace route, no match found [ 224.618473][ T8600] ? __x64_sys_sendmsg+0x80/0x80 [ 224.629392][ T8600] ? lockdep_hardirqs_on+0x98/0x150 [ 224.634645][ T8600] do_syscall_64+0x55/0xb0 [ 224.639097][ T8600] ? clear_bhb_loop+0x40/0x90 [ 224.643843][ T8600] ? clear_bhb_loop+0x40/0x90 [ 224.648566][ T8600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.654501][ T8600] RIP: 0033:0x7fc66259e159 [ 224.658959][ T8600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.660734][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1036'. [ 224.678590][ T8600] RSP: 002b:00007fc6633a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.678616][ T8600] RAX: ffffffffffffffda RBX: 00007fc662825fa0 RCX: 00007fc66259e159 [ 224.678630][ T8600] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 224.678655][ T8600] RBP: 00007fc6633a3090 R08: 0000000000000000 R09: 0000000000000000 [ 224.678666][ T8600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.678677][ T8600] R13: 00007fc662826038 R14: 00007fc662825fa0 R15: 00007ffc5c6c04e8 [ 224.678704][ T8600] [ 224.742121][ T8600] IPv6: NLM_F_CREATE should be specified when creating new route [ 224.750215][ T8600] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1035'. [ 225.128169][ T8616] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1038'. [ 226.025620][ T8644] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1047'. [ 226.472351][ T8650] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1048'. [ 226.601051][ T8654] netlink: 'syz.0.1051': attribute type 4 has an invalid length. [ 226.633299][ T8654] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1051'. [ 226.688368][ T8654] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 226.864275][ T8661] netlink: 'syz.2.1053': attribute type 39 has an invalid length. [ 227.064330][ T8667] FAULT_INJECTION: forcing a failure. [ 227.064330][ T8667] name failslab, interval 1, probability 0, space 0, times 0 [ 227.083045][ T8667] CPU: 0 PID: 8667 Comm: syz.0.1055 Not tainted syzkaller #0 [ 227.090508][ T8667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.100607][ T8667] Call Trace: [ 227.103923][ T8667] [ 227.106903][ T8667] dump_stack_lvl+0x18c/0x250 [ 227.111663][ T8667] ? show_regs_print_info+0x20/0x20 [ 227.116915][ T8667] ? load_image+0x420/0x420 [ 227.121466][ T8667] ? __might_sleep+0xe0/0xe0 [ 227.126110][ T8667] ? __lock_acquire+0x7d80/0x7d80 [ 227.131193][ T8667] should_fail_ex+0x394/0x4c0 [ 227.135930][ T8667] should_failslab+0x9/0x20 [ 227.140498][ T8667] slab_pre_alloc_hook+0x59/0x300 [ 227.145588][ T8667] ? sk_prot_alloc+0xe7/0x210 [ 227.150319][ T8667] ? sk_prot_alloc+0xe7/0x210 [ 227.155079][ T8667] __kmem_cache_alloc_node+0x53/0x250 [ 227.160512][ T8667] ? sk_prot_alloc+0xe7/0x210 [ 227.165239][ T8667] __kmalloc+0xa7/0x240 [ 227.169472][ T8667] sk_prot_alloc+0xe7/0x210 [ 227.174023][ T8667] ? sk_alloc+0x24/0x350 [ 227.178317][ T8667] sk_alloc+0x3a/0x350 [ 227.182428][ T8667] ? bpf_ctx_init+0x154/0x190 [ 227.187175][ T8667] bpf_prog_test_run_skb+0x371/0x18f0 [ 227.192605][ T8667] ? __fget_files+0x28/0x460 [ 227.197264][ T8667] ? __fget_files+0x3fc/0x460 [ 227.202007][ T8667] ? cpu_online+0x60/0x60 [ 227.206386][ T8667] bpf_prog_test_run+0x31f/0x390 [ 227.211365][ T8667] __sys_bpf+0x49d/0x890 [ 227.215659][ T8667] ? bpf_link_show_fdinfo+0x390/0x390 [ 227.221112][ T8667] ? lock_chain_count+0x20/0x20 [ 227.226023][ T8667] __x64_sys_bpf+0x7c/0x90 [ 227.230476][ T8667] do_syscall_64+0x55/0xb0 [ 227.234962][ T8667] ? clear_bhb_loop+0x40/0x90 [ 227.239692][ T8667] ? clear_bhb_loop+0x40/0x90 [ 227.244426][ T8667] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.250369][ T8667] RIP: 0033:0x7fc66259e159 [ 227.254846][ T8667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.274501][ T8667] RSP: 002b:00007fc6633a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.283051][ T8667] RAX: ffffffffffffffda RBX: 00007fc662825fa0 RCX: 00007fc66259e159 [ 227.291063][ T8667] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 227.299085][ T8667] RBP: 00007fc6633a3090 R08: 0000000000000000 R09: 0000000000000000 [ 227.307100][ T8667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.315122][ T8667] R13: 00007fc662826038 R14: 00007fc662825fa0 R15: 00007ffc5c6c04e8 [ 227.323146][ T8667] [ 228.598984][ T8688] netlink: 'syz.2.1062': attribute type 39 has an invalid length. [ 228.812484][ T8687] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 228.833144][ T8687] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 228.868205][ T8696] netlink: 'syz.2.1067': attribute type 10 has an invalid length. [ 229.056833][ T8698] netlink: 'syz.2.1067': attribute type 4 has an invalid length. [ 229.395865][ T8710] __nla_validate_parse: 1 callbacks suppressed [ 229.395884][ T8710] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1071'. [ 229.610181][ T8715] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1074'. [ 229.965736][ T8719] netlink: 'syz.3.1076': attribute type 39 has an invalid length. [ 230.435473][ T8736] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1083'. [ 231.114311][ T8742] netlink: 'syz.0.1084': attribute type 21 has an invalid length. [ 231.141156][ T8745] netlink: 'syz.1.1086': attribute type 39 has an invalid length. [ 231.168724][ T5780] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 231.280221][ T8750] FAULT_INJECTION: forcing a failure. [ 231.280221][ T8750] name failslab, interval 1, probability 0, space 0, times 0 [ 231.333233][ T8750] CPU: 0 PID: 8750 Comm: syz.0.1088 Not tainted syzkaller #0 [ 231.340697][ T8750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.350784][ T8750] Call Trace: [ 231.354090][ T8750] [ 231.357048][ T8750] dump_stack_lvl+0x18c/0x250 [ 231.361766][ T8750] ? show_regs_print_info+0x20/0x20 [ 231.367000][ T8750] ? load_image+0x420/0x420 [ 231.371540][ T8750] ? __might_sleep+0xe0/0xe0 [ 231.376166][ T8750] ? __lock_acquire+0x7d80/0x7d80 [ 231.381225][ T8750] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 231.386897][ T8750] should_fail_ex+0x394/0x4c0 [ 231.391620][ T8750] should_failslab+0x9/0x20 [ 231.396170][ T8750] slab_pre_alloc_hook+0x59/0x300 [ 231.401246][ T8750] kmem_cache_alloc_node+0x5e/0x310 [ 231.406596][ T8750] ? __alloc_skb+0x103/0x2c0 [ 231.411235][ T8750] __alloc_skb+0x103/0x2c0 [ 231.415689][ T8750] __ip6_append_data+0x2be0/0x3d40 [ 231.420871][ T8750] ? rawv6_send_hdrinc+0x1660/0x1660 [ 231.426211][ T8750] ? ip6_setup_cork+0xff0/0xff0 [ 231.431114][ T8750] ip6_append_data+0x1b0/0x350 [ 231.435930][ T8750] ? rawv6_send_hdrinc+0x1660/0x1660 [ 231.441267][ T8750] rawv6_sendmsg+0x1229/0x1740 [ 231.446084][ T8750] ? compat_rawv6_ioctl+0x70/0x70 [ 231.451187][ T8750] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 231.457638][ T8750] ? aa_sock_msg_perm+0x94/0x150 [ 231.462611][ T8750] ? inet_sendmsg+0x7e/0x2a0 [ 231.467235][ T8750] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 231.472563][ T8750] ? inet_send_prepare+0x250/0x250 [ 231.477711][ T8750] ____sys_sendmsg+0x61b/0x980 [ 231.482513][ T8750] ? __asan_memset+0x22/0x40 [ 231.487140][ T8750] ? __sys_sendmsg_sock+0x30/0x30 [ 231.492187][ T8750] ? __import_iovec+0x5f2/0x850 [ 231.497081][ T8750] ? import_iovec+0x73/0xa0 [ 231.501642][ T8750] ___sys_sendmsg+0x2a6/0x360 [ 231.506368][ T8750] ? get_pid_task+0x20/0x1e0 [ 231.510998][ T8750] ? __sys_sendmsg+0x2b0/0x2b0 [ 231.515813][ T8750] ? __lock_acquire+0x7d80/0x7d80 [ 231.520886][ T8750] __se_sys_sendmsg+0x1d0/0x2c0 [ 231.525779][ T8750] ? __x64_sys_sendmsg+0x80/0x80 [ 231.530761][ T8750] ? lockdep_hardirqs_on+0x98/0x150 [ 231.536004][ T8750] do_syscall_64+0x55/0xb0 [ 231.540450][ T8750] ? clear_bhb_loop+0x40/0x90 [ 231.545160][ T8750] ? clear_bhb_loop+0x40/0x90 [ 231.549870][ T8750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.555795][ T8750] RIP: 0033:0x7fc66259e159 [ 231.560239][ T8750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.579870][ T8750] RSP: 002b:00007fc6633a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.588316][ T8750] RAX: ffffffffffffffda RBX: 00007fc662825fa0 RCX: 00007fc66259e159 [ 231.596320][ T8750] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 231.604325][ T8750] RBP: 00007fc6633a3090 R08: 0000000000000000 R09: 0000000000000000 [ 231.612317][ T8750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 231.620306][ T8750] R13: 00007fc662826038 R14: 00007fc662825fa0 R15: 00007ffc5c6c04e8 [ 231.628320][ T8750] [ 231.998980][ T8767] netlink: 'syz.3.1094': attribute type 29 has an invalid length. [ 232.027862][ T8767] netlink: 'syz.3.1094': attribute type 29 has an invalid length. [ 232.066932][ T8768] netlink: 'syz.3.1094': attribute type 29 has an invalid length. [ 232.144211][ T8774] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1094'. [ 232.184989][ T8767] netlink: 'syz.3.1094': attribute type 29 has an invalid length. [ 232.274262][ T8774] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1094'. [ 232.293200][ T8765] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1094'. [ 232.343398][ T8766] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1094'. [ 232.385212][ T8772] netlink: 12927 bytes leftover after parsing attributes in process `syz.0.1095'. [ 232.846653][ T8779] netlink: 'syz.3.1097': attribute type 39 has an invalid length. [ 233.074195][ T8785] netlink: 'syz.2.1099': attribute type 21 has an invalid length. [ 233.118414][ T8785] netlink: 'syz.2.1099': attribute type 19 has an invalid length. [ 233.131619][ T8785] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1099'. [ 235.029914][ T8838] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.1121'. [ 235.059264][ T8837] validate_nla: 2 callbacks suppressed [ 235.059303][ T8837] netlink: 'syz.2.1122': attribute type 39 has an invalid length. [ 235.141379][ T8839] veth1: entered allmulticast mode [ 235.329083][ T8846] netlink: 'syz.2.1124': attribute type 10 has an invalid length. [ 235.404921][ T8845] netlink: 'syz.0.1125': attribute type 39 has an invalid length. [ 235.795352][ T5780] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 236.626393][ T8888] netlink: 'syz.3.1139': attribute type 39 has an invalid length. [ 237.241447][ T8910] tun0: tun_chr_ioctl cmd 1074025678 [ 237.249757][ T8910] tun0: group set to 0 [ 237.322506][ T8918] netlink: 'syz.2.1148': attribute type 10 has an invalid length. [ 237.334619][ T8918] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1148'. [ 237.638577][ T8923] netlink: 'syz.3.1149': attribute type 3 has an invalid length. [ 237.655382][ T8923] netlink: 'syz.3.1149': attribute type 16 has an invalid length. [ 237.673035][ T8923] netlink: 'syz.3.1149': attribute type 18 has an invalid length. [ 237.691291][ T8923] netlink: 'syz.3.1149': attribute type 20 has an invalid length. [ 237.721380][ T8923] netlink: 'syz.3.1149': attribute type 25 has an invalid length. [ 238.673991][ T8945] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1154'. [ 238.801657][ T8952] FAULT_INJECTION: forcing a failure. [ 238.801657][ T8952] name failslab, interval 1, probability 0, space 0, times 0 [ 238.826432][ T8952] CPU: 0 PID: 8952 Comm: syz.2.1159 Not tainted syzkaller #0 [ 238.833902][ T8952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.844003][ T8952] Call Trace: [ 238.847328][ T8952] [ 238.850296][ T8952] dump_stack_lvl+0x18c/0x250 [ 238.855032][ T8952] ? show_regs_print_info+0x20/0x20 [ 238.860281][ T8952] ? load_image+0x420/0x420 [ 238.864838][ T8952] ? __lock_acquire+0x7d80/0x7d80 [ 238.869913][ T8952] should_fail_ex+0x394/0x4c0 [ 238.874648][ T8952] should_failslab+0x9/0x20 [ 238.879209][ T8952] slab_pre_alloc_hook+0x59/0x300 [ 238.884289][ T8952] ? security_sk_alloc+0x4b/0x130 [ 238.889366][ T8952] ? security_sk_alloc+0x4b/0x130 [ 238.894457][ T8952] __kmem_cache_alloc_node+0x53/0x250 [ 238.899934][ T8952] ? security_sk_alloc+0x4b/0x130 [ 238.905008][ T8952] __kmalloc+0xa7/0x240 [ 238.909216][ T8952] ? sk_prot_alloc+0xe7/0x210 [ 238.913946][ T8952] security_sk_alloc+0x4b/0x130 [ 238.918847][ T8952] sk_prot_alloc+0x101/0x210 [ 238.923513][ T8952] ? sk_alloc+0x24/0x350 [ 238.927823][ T8952] sk_alloc+0x3a/0x350 [ 238.931950][ T8952] ? bpf_ctx_init+0x154/0x190 [ 238.936678][ T8952] bpf_prog_test_run_skb+0x371/0x18f0 [ 238.942104][ T8952] ? __fget_files+0x28/0x460 [ 238.946746][ T8952] ? __fget_files+0x3fc/0x460 [ 238.951523][ T8952] ? cpu_online+0x60/0x60 [ 238.955955][ T8952] bpf_prog_test_run+0x31f/0x390 [ 238.960949][ T8952] __sys_bpf+0x49d/0x890 [ 238.965244][ T8952] ? bpf_link_show_fdinfo+0x390/0x390 [ 238.970705][ T8952] ? lock_chain_count+0x20/0x20 [ 238.975614][ T8952] __x64_sys_bpf+0x7c/0x90 [ 238.980083][ T8952] do_syscall_64+0x55/0xb0 [ 238.984551][ T8952] ? clear_bhb_loop+0x40/0x90 [ 238.989276][ T8952] ? clear_bhb_loop+0x40/0x90 [ 238.994017][ T8952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.999967][ T8952] RIP: 0033:0x7fd29139e159 [ 239.004435][ T8952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.024089][ T8952] RSP: 002b:00007fd292238028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 239.032555][ T8952] RAX: ffffffffffffffda RBX: 00007fd291625fa0 RCX: 00007fd29139e159 [ 239.040572][ T8952] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 239.048582][ T8952] RBP: 00007fd292238090 R08: 0000000000000000 R09: 0000000000000000 [ 239.056609][ T8952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.064623][ T8952] R13: 00007fd291626038 R14: 00007fd291625fa0 R15: 00007ffe4108b0b8 [ 239.072650][ T8952] [ 239.707412][ T8956] syzkaller0: entered promiscuous mode [ 239.723687][ T8956] syzkaller0: entered allmulticast mode [ 240.854771][ T8998] validate_nla: 2 callbacks suppressed [ 240.854809][ T8998] netlink: 'syz.1.1176': attribute type 29 has an invalid length. [ 240.864102][ T8994] netlink: 'syz.2.1175': attribute type 39 has an invalid length. [ 240.894496][ T8998] netlink: 'syz.1.1176': attribute type 29 has an invalid length. [ 240.905376][ T8999] netlink: 'syz.1.1176': attribute type 29 has an invalid length. [ 240.914597][ T8998] netlink: 'syz.1.1176': attribute type 29 has an invalid length. [ 240.923744][ T8998] netlink: 'syz.1.1176': attribute type 29 has an invalid length. [ 240.939872][ T8998] netlink: 'syz.1.1176': attribute type 29 has an invalid length. [ 240.950014][ T8998] FAULT_INJECTION: forcing a failure. [ 240.950014][ T8998] name failslab, interval 1, probability 0, space 0, times 0 [ 240.963260][ T8998] CPU: 1 PID: 8998 Comm: syz.1.1176 Not tainted syzkaller #0 [ 240.970682][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.980818][ T8998] Call Trace: [ 240.984153][ T8998] [ 240.987118][ T8998] dump_stack_lvl+0x18c/0x250 [ 240.991853][ T8998] ? show_regs_print_info+0x20/0x20 [ 240.997108][ T8998] ? load_image+0x420/0x420 [ 241.001662][ T8998] ? skb_network_protocol+0x529/0x790 [ 241.007087][ T8998] ? perf_trace_lock+0xfc/0x3b0 [ 241.011986][ T8998] should_fail_ex+0x394/0x4c0 [ 241.016723][ T8998] should_failslab+0x9/0x20 [ 241.021282][ T8998] slab_pre_alloc_hook+0x59/0x300 [ 241.026373][ T8998] kmem_cache_alloc+0x5a/0x2c0 [ 241.031185][ T8998] ? skb_clone+0x1eb/0x370 [ 241.035661][ T8998] skb_clone+0x1eb/0x370 [ 241.039958][ T8998] ? dev_queue_xmit_nit+0x204/0xba0 [ 241.045253][ T8998] dev_queue_xmit_nit+0x23f/0xba0 [ 241.050332][ T8998] ? dev_queue_xmit_nit+0x2d/0xba0 [ 241.055512][ T8998] dev_hard_start_xmit+0x150/0x790 [ 241.060704][ T8998] __dev_queue_xmit+0x1be8/0x37e0 [ 241.065798][ T8998] ? __dev_queue_xmit+0x272/0x37e0 [ 241.071010][ T8998] ? netdev_core_pick_tx+0x370/0x370 [ 241.076350][ T8998] ? __copy_skb_header+0xa3/0x4a0 [ 241.081448][ T8998] ? __asan_memcpy+0x40/0x70 [ 241.086099][ T8998] ? __skb_clone+0x5c/0x6c0 [ 241.090654][ T8998] ? __skb_clone+0x446/0x6c0 [ 241.095297][ T8998] ? skb_clone+0x21f/0x370 [ 241.099776][ T8998] __netlink_deliver_tap+0x579/0x7f0 [ 241.105146][ T8998] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.110400][ T8998] netlink_deliver_tap+0x19c/0x1b0 [ 241.115567][ T8998] __netlink_sendskb+0x4b/0x90 [ 241.120378][ T8998] netlink_dump+0xab3/0xec0 [ 241.124956][ T8998] ? netlink_lookup+0x200/0x200 [ 241.129876][ T8998] ? slab_free_freelist_hook+0x130/0x1a0 [ 241.135565][ T8998] ? netlink_recvmsg+0x5e7/0xe60 [ 241.140546][ T8998] ? kmem_cache_free+0xf8/0x290 [ 241.145456][ T8998] netlink_recvmsg+0x693/0xe60 [ 241.150283][ T8998] ? netlink_sendmsg+0xbf0/0xbf0 [ 241.155273][ T8998] ? aa_af_perm+0x330/0x330 [ 241.159835][ T8998] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 241.165160][ T8998] ? security_socket_recvmsg+0x89/0xb0 [ 241.170662][ T8998] ? netlink_sendmsg+0xbf0/0xbf0 [ 241.175657][ T8998] ____sys_recvmsg+0x2bd/0x5d0 [ 241.180498][ T8998] ? __sys_recvmsg_sock+0x50/0x50 [ 241.185588][ T8998] ? import_iovec+0x73/0xa0 [ 241.190148][ T8998] ___sys_recvmsg+0x214/0x590 [ 241.194883][ T8998] ? __sys_recvmsg+0x2a0/0x2a0 [ 241.199707][ T8998] ? ksys_write+0x1d2/0x260 [ 241.204287][ T8998] ? __fget_files+0x3fc/0x460 [ 241.209038][ T8998] __x64_sys_recvmsg+0x21e/0x2f0 [ 241.214019][ T8998] ? ___sys_recvmsg+0x590/0x590 [ 241.218926][ T8998] ? lockdep_hardirqs_on+0x98/0x150 [ 241.224179][ T8998] do_syscall_64+0x55/0xb0 [ 241.228645][ T8998] ? clear_bhb_loop+0x40/0x90 [ 241.233360][ T8998] ? clear_bhb_loop+0x40/0x90 [ 241.238082][ T8998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.244017][ T8998] RIP: 0033:0x7f77f299e159 [ 241.248506][ T8998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.268166][ T8998] RSP: 002b:00007f77f38e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 241.276629][ T8998] RAX: ffffffffffffffda RBX: 00007f77f2c25fa0 RCX: 00007f77f299e159 [ 241.284640][ T8998] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 241.292648][ T8998] RBP: 00007f77f38e0090 R08: 0000000000000000 R09: 0000000000000000 [ 241.300661][ T8998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.308672][ T8998] R13: 00007f77f2c26038 R14: 00007f77f2c25fa0 R15: 00007ffc2b517b88 [ 241.316707][ T8998] [ 241.649573][ T9008] netlink: 'syz.2.1180': attribute type 29 has an invalid length. [ 241.679472][ T9008] netlink: 'syz.2.1180': attribute type 29 has an invalid length. [ 241.703628][ T9008] netlink: 'syz.2.1180': attribute type 29 has an invalid length. [ 241.745915][ T9008] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1180'. [ 241.768787][ T9008] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 242.373663][ T9030] FAULT_INJECTION: forcing a failure. [ 242.373663][ T9030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.455394][ T9030] CPU: 1 PID: 9030 Comm: syz.0.1189 Not tainted syzkaller #0 [ 242.462876][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.472976][ T9030] Call Trace: [ 242.476287][ T9030] [ 242.479252][ T9030] dump_stack_lvl+0x18c/0x250 [ 242.484011][ T9030] ? show_regs_print_info+0x20/0x20 [ 242.489278][ T9030] ? load_image+0x420/0x420 [ 242.493855][ T9030] ? __might_fault+0xaa/0x120 [ 242.498572][ T9030] ? __lock_acquire+0x7d80/0x7d80 [ 242.503653][ T9030] should_fail_ex+0x394/0x4c0 [ 242.508398][ T9030] _copy_from_user+0x2f/0xe0 [ 242.513033][ T9030] __sys_bpf+0x23e/0x890 [ 242.517325][ T9030] ? bpf_link_show_fdinfo+0x390/0x390 [ 242.522759][ T9030] ? lock_chain_count+0x20/0x20 [ 242.527701][ T9030] __x64_sys_bpf+0x7c/0x90 [ 242.532158][ T9030] do_syscall_64+0x55/0xb0 [ 242.536620][ T9030] ? clear_bhb_loop+0x40/0x90 [ 242.541347][ T9030] ? clear_bhb_loop+0x40/0x90 [ 242.546076][ T9030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.552013][ T9030] RIP: 0033:0x7fc66259e159 [ 242.556467][ T9030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.576108][ T9030] RSP: 002b:00007fc6633a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.584567][ T9030] RAX: ffffffffffffffda RBX: 00007fc662825fa0 RCX: 00007fc66259e159 [ 242.592600][ T9030] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 242.600639][ T9030] RBP: 00007fc6633a3090 R08: 0000000000000000 R09: 0000000000000000 [ 242.608660][ T9030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.616674][ T9030] R13: 00007fc662826038 R14: 00007fc662825fa0 R15: 00007ffc5c6c04e8 [ 242.624710][ T9030] [ 243.020663][ T9039] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1193'. [ 243.323101][ T5780] Bluetooth: hci3: ISO packet for unknown connection handle 19 [ 243.369968][ T9049] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1197'. [ 243.914735][ T9066] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1204'. [ 244.304812][ T9081] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1210'. [ 244.354018][ T9081] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1210'. [ 244.685554][ T9090] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1215'. [ 244.904569][ T9093] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1215'. [ 244.951262][ T9097] macvlan0: entered promiscuous mode [ 244.996379][ T9097] macvlan0: entered allmulticast mode [ 245.001840][ T9097] veth1_vlan: entered allmulticast mode [ 245.096029][ T9097] FAULT_INJECTION: forcing a failure. [ 245.096029][ T9097] name failslab, interval 1, probability 0, space 0, times 0 [ 245.119310][ T9097] CPU: 1 PID: 9097 Comm: syz.0.1217 Not tainted syzkaller #0 [ 245.126756][ T9097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.136865][ T9097] Call Trace: [ 245.140178][ T9097] [ 245.143144][ T9097] dump_stack_lvl+0x18c/0x250 [ 245.147862][ T9097] ? show_regs_print_info+0x20/0x20 [ 245.153085][ T9097] ? load_image+0x420/0x420 [ 245.157617][ T9097] should_fail_ex+0x394/0x4c0 [ 245.162331][ T9097] should_failslab+0x9/0x20 [ 245.166862][ T9097] slab_pre_alloc_hook+0x59/0x300 [ 245.171920][ T9097] kmem_cache_alloc_node+0x5e/0x310 [ 245.177155][ T9097] ? __alloc_skb+0x103/0x2c0 [ 245.181766][ T9097] __alloc_skb+0x103/0x2c0 [ 245.186203][ T9097] rtmsg_ifinfo_build_skb+0x83/0x260 [ 245.191508][ T9097] rtmsg_ifinfo+0x8c/0x1a0 [ 245.195948][ T9097] __dev_notify_flags+0xf3/0x310 [ 245.200926][ T9097] ? __dev_change_flags+0x6a0/0x6a0 [ 245.206162][ T9097] ? __dev_change_flags+0x51c/0x6a0 [ 245.211386][ T9097] ? dev_get_flags+0x1c0/0x1c0 [ 245.216162][ T9097] ? apparmor_capable+0x137/0x1a0 [ 245.221220][ T9097] dev_change_flags+0xde/0x1a0 [ 245.226047][ T9097] devinet_ioctl+0x949/0x1d70 [ 245.230774][ T9097] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 245.235968][ T9097] ? _copy_from_user+0xa5/0xe0 [ 245.240757][ T9097] ? get_user_ifreq+0x12b/0x180 [ 245.245640][ T9097] inet_ioctl+0x42b/0x560 [ 245.250003][ T9097] ? tomoyo_path_number_perm+0x217/0x5e0 [ 245.255671][ T9097] ? inet_shutdown+0x370/0x370 [ 245.260470][ T9097] ? slab_free_freelist_hook+0x130/0x1a0 [ 245.266166][ T9097] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 245.271830][ T9097] ? __kmem_cache_free+0xba/0x1f0 [ 245.276906][ T9097] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 245.282399][ T9097] ? packet_ioctl+0x26b/0x350 [ 245.287100][ T9097] sock_do_ioctl+0xfc/0x310 [ 245.291628][ T9097] ? sock_show_fdinfo+0xb0/0xb0 [ 245.296504][ T9097] sock_ioctl+0x5be/0x7e0 [ 245.300846][ T9097] ? sock_poll+0x3e0/0x3e0 [ 245.305293][ T9097] ? bpf_lsm_file_ioctl+0x9/0x10 [ 245.310269][ T9097] ? security_file_ioctl+0x80/0xa0 [ 245.315412][ T9097] ? sock_poll+0x3e0/0x3e0 [ 245.319861][ T9097] __se_sys_ioctl+0xfd/0x170 [ 245.324470][ T9097] do_syscall_64+0x55/0xb0 [ 245.328903][ T9097] ? clear_bhb_loop+0x40/0x90 [ 245.333621][ T9097] ? clear_bhb_loop+0x40/0x90 [ 245.338354][ T9097] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.344269][ T9097] RIP: 0033:0x7fc66259e159 [ 245.348715][ T9097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.368356][ T9097] RSP: 002b:00007fc6633a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.376804][ T9097] RAX: ffffffffffffffda RBX: 00007fc662825fa0 RCX: 00007fc66259e159 [ 245.384828][ T9097] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000003 [ 245.392824][ T9097] RBP: 00007fc6633a3090 R08: 0000000000000000 R09: 0000000000000000 [ 245.400815][ T9097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.408809][ T9097] R13: 00007fc662826038 R14: 00007fc662825fa0 R15: 00007ffc5c6c04e8 [ 245.416821][ T9097] [ 245.663815][ T9102] veth0_vlan: entered allmulticast mode [ 245.710866][ T9102] veth0_vlan: left promiscuous mode [ 245.738312][ T9102] veth0_vlan: entered promiscuous mode [ 245.786304][ T9102] team0: Device veth0_vlan failed to register rx_handler [ 245.886478][ T9105] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1219'. [ 245.903127][ T9101] validate_nla: 11 callbacks suppressed [ 245.903142][ T9101] netlink: 'syz.1.1219': attribute type 29 has an invalid length. [ 245.945576][ T9109] netlink: 'syz.3.1220': attribute type 39 has an invalid length. [ 246.948249][ T9138] netlink: 'syz.3.1229': attribute type 1 has an invalid length. [ 247.273013][ T9145] FAULT_INJECTION: forcing a failure. [ 247.273013][ T9145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.307463][ T9145] CPU: 1 PID: 9145 Comm: syz.3.1231 Not tainted syzkaller #0 [ 247.314935][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.325043][ T9145] Call Trace: [ 247.328363][ T9145] [ 247.331342][ T9145] dump_stack_lvl+0x18c/0x250 [ 247.336078][ T9145] ? show_regs_print_info+0x20/0x20 [ 247.341325][ T9145] ? load_image+0x420/0x420 [ 247.345885][ T9145] ? __might_fault+0xaa/0x120 [ 247.350640][ T9145] ? __lock_acquire+0x7d80/0x7d80 [ 247.355719][ T9145] should_fail_ex+0x394/0x4c0 [ 247.360454][ T9145] _copy_to_user+0x2f/0xa0 [ 247.364934][ T9145] bpf_test_finish+0x19f/0x650 [ 247.369752][ T9145] ? bpf_test_run+0x174/0x870 [ 247.374483][ T9145] ? convert_skb_to___skb+0x420/0x420 [ 247.379915][ T9145] bpf_prog_test_run_skb+0x1135/0x18f0 [ 247.385442][ T9145] ? cpu_online+0x60/0x60 [ 247.389833][ T9145] bpf_prog_test_run+0x31f/0x390 [ 247.394829][ T9145] __sys_bpf+0x49d/0x890 [ 247.399128][ T9145] ? bpf_link_show_fdinfo+0x390/0x390 [ 247.404570][ T9145] ? lock_chain_count+0x20/0x20 [ 247.409477][ T9145] __x64_sys_bpf+0x7c/0x90 [ 247.413955][ T9145] do_syscall_64+0x55/0xb0 [ 247.418426][ T9145] ? clear_bhb_loop+0x40/0x90 [ 247.423159][ T9145] ? clear_bhb_loop+0x40/0x90 [ 247.427887][ T9145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.433831][ T9145] RIP: 0033:0x7f2dcb79e159 [ 247.438297][ T9145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.457954][ T9145] RSP: 002b:00007f2dc99f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.466426][ T9145] RAX: ffffffffffffffda RBX: 00007f2dcba25fa0 RCX: 00007f2dcb79e159 [ 247.474441][ T9145] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 247.482456][ T9145] RBP: 00007f2dc99f6090 R08: 0000000000000000 R09: 0000000000000000 [ 247.490485][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.498497][ T9145] R13: 00007f2dcba26038 R14: 00007f2dcba25fa0 R15: 00007ffc7da5dda8 [ 247.506530][ T9145] [ 248.177175][ T9154] netlink: 'syz.2.1234': attribute type 39 has an invalid length. [ 248.851807][ T9169] FAULT_INJECTION: forcing a failure. [ 248.851807][ T9169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.904485][ T9169] CPU: 0 PID: 9169 Comm: syz.0.1240 Not tainted syzkaller #0 [ 248.911952][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.922047][ T9169] Call Trace: [ 248.925412][ T9169] [ 248.928398][ T9169] dump_stack_lvl+0x18c/0x250 [ 248.933123][ T9169] ? show_regs_print_info+0x20/0x20 [ 248.938377][ T9169] ? load_image+0x420/0x420 [ 248.942933][ T9169] ? __might_fault+0xaa/0x120 [ 248.947659][ T9169] ? __lock_acquire+0x7d80/0x7d80 [ 248.952742][ T9169] should_fail_ex+0x394/0x4c0 [ 248.957465][ T9169] _copy_from_user+0x2f/0xe0 [ 248.962096][ T9169] kstrtouint_from_user+0xde/0x170 [ 248.967267][ T9169] ? kstrtol_from_user+0x190/0x190 [ 248.972443][ T9169] proc_fail_nth_write+0x8f/0x250 [ 248.977516][ T9169] ? proc_fail_nth_read+0x260/0x260 [ 248.982757][ T9169] ? security_file_permission+0x72/0xa0 [ 248.988367][ T9169] ? proc_fail_nth_read+0x260/0x260 [ 248.993625][ T9169] vfs_write+0x299/0x9a0 [ 248.997930][ T9169] ? file_end_write+0x250/0x250 [ 249.002835][ T9169] ? __fget_files+0x28/0x460 [ 249.007476][ T9169] ? __fget_files+0x3fc/0x460 [ 249.012212][ T9169] ? __fdget_pos+0x2a3/0x330 [ 249.016855][ T9169] ? ksys_write+0x74/0x260 [ 249.021319][ T9169] ksys_write+0x151/0x260 [ 249.025712][ T9169] ? __ia32_sys_read+0x90/0x90 [ 249.030534][ T9169] ? lockdep_hardirqs_on+0x98/0x150 [ 249.035788][ T9169] do_syscall_64+0x55/0xb0 [ 249.040253][ T9169] ? clear_bhb_loop+0x40/0x90 [ 249.044975][ T9169] ? clear_bhb_loop+0x40/0x90 [ 249.049715][ T9169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.055660][ T9169] RIP: 0033:0x7fc66255e98e [ 249.060135][ T9169] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 249.079791][ T9169] RSP: 002b:00007fc6633a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 249.088235][ T9169] RAX: ffffffffffffffda RBX: 00007fc6633a36c0 RCX: 00007fc66255e98e [ 249.096237][ T9169] RDX: 0000000000000001 RSI: 00007fc6633a30a0 RDI: 0000000000000008 [ 249.104228][ T9169] RBP: 00007fc6633a3090 R08: 0000000000000000 R09: 0000000000000000 [ 249.112250][ T9169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.120246][ T9169] R13: 00007fc662826038 R14: 00007fc662825fa0 R15: 00007ffc5c6c04e8 [ 249.128256][ T9169] [ 249.159383][ T9173] FAULT_INJECTION: forcing a failure. [ 249.159383][ T9173] name failslab, interval 1, probability 0, space 0, times 0 [ 249.172349][ T9173] CPU: 1 PID: 9173 Comm: syz.2.1242 Not tainted syzkaller #0 [ 249.179786][ T9173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.189890][ T9173] Call Trace: [ 249.193208][ T9173] [ 249.196188][ T9173] dump_stack_lvl+0x18c/0x250 [ 249.200946][ T9173] ? show_regs_print_info+0x20/0x20 [ 249.206206][ T9173] ? load_image+0x420/0x420 [ 249.210765][ T9173] ? __might_sleep+0xe0/0xe0 [ 249.215414][ T9173] ? __lock_acquire+0x7d80/0x7d80 [ 249.220522][ T9173] should_fail_ex+0x394/0x4c0 [ 249.225262][ T9173] should_failslab+0x9/0x20 [ 249.229823][ T9173] slab_pre_alloc_hook+0x59/0x300 [ 249.234897][ T9173] ? register_netdevice+0x56e/0x1ba0 [ 249.240223][ T9173] __kmem_cache_alloc_node+0x53/0x250 [ 249.245650][ T9173] ? register_netdevice+0x56e/0x1ba0 [ 249.250982][ T9173] kmalloc_trace+0x2a/0xe0 [ 249.255459][ T9173] register_netdevice+0x56e/0x1ba0 [ 249.260624][ T9173] ? dev_addr_check+0x20/0x240 [ 249.265451][ T9173] ? netif_stacked_transfer_operstate+0x210/0x210 [ 249.271915][ T9173] ? dev_addr_mod+0x2c8/0x3c0 [ 249.276649][ T9173] ? tun_net_initialize+0x158/0x480 [ 249.281925][ T9173] ? tun_not_capable+0x1f0/0x1f0 [ 249.286919][ T9173] ? alloc_netdev_mqs+0xc23/0x1040 [ 249.292096][ T9173] tun_set_iff+0x82b/0xea0 [ 249.296575][ T9173] __tun_chr_ioctl+0x7e0/0x2070 [ 249.301530][ T9173] ? tun_flow_create+0x310/0x310 [ 249.306558][ T9173] ? bpf_lsm_file_ioctl+0x9/0x10 [ 249.311570][ T9173] ? security_file_ioctl+0x80/0xa0 [ 249.316737][ T9173] ? tun_chr_poll+0x630/0x630 [ 249.321469][ T9173] __se_sys_ioctl+0xfd/0x170 [ 249.326117][ T9173] do_syscall_64+0x55/0xb0 [ 249.330586][ T9173] ? clear_bhb_loop+0x40/0x90 [ 249.335305][ T9173] ? clear_bhb_loop+0x40/0x90 [ 249.340042][ T9173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.346000][ T9173] RIP: 0033:0x7fd29139e159 [ 249.350464][ T9173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.370116][ T9173] RSP: 002b:00007fd292238028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.378602][ T9173] RAX: ffffffffffffffda RBX: 00007fd291625fa0 RCX: 00007fd29139e159 [ 249.386633][ T9173] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000003 [ 249.394648][ T9173] RBP: 00007fd292238090 R08: 0000000000000000 R09: 0000000000000000 [ 249.402655][ T9173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.410660][ T9173] R13: 00007fd291626038 R14: 00007fd291625fa0 R15: 00007ffe4108b0b8 [ 249.418681][ T9173] [ 249.694848][ T9179] netlink: 'syz.2.1245': attribute type 39 has an invalid length. [ 249.932258][ T9187] syzkaller0: entered promiscuous mode [ 249.944488][ T9187] syzkaller0: entered allmulticast mode [ 250.110742][ T9185] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 254.492060][ T9201] syzkaller0: entered promiscuous mode [ 254.497786][ T9201] syzkaller0: entered allmulticast mode [ 254.797044][ T9210] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1253'. [ 254.808623][ T9210] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 255.860376][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.872923][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.212756][ T9219] netlink: 'syz.1.1257': attribute type 39 has an invalid length. [ 256.531606][ T9227] FAULT_INJECTION: forcing a failure. [ 256.531606][ T9227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.551937][ T9227] CPU: 0 PID: 9227 Comm: syz.0.1260 Not tainted syzkaller #0 [ 256.559390][ T9227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.569463][ T9227] Call Trace: [ 256.572752][ T9227] [ 256.575698][ T9227] dump_stack_lvl+0x18c/0x250 [ 256.580408][ T9227] ? show_regs_print_info+0x20/0x20 [ 256.585631][ T9227] ? load_image+0x420/0x420 [ 256.590176][ T9227] ? __might_fault+0xaa/0x120 [ 256.594877][ T9227] ? __lock_acquire+0x7d80/0x7d80 [ 256.599926][ T9227] should_fail_ex+0x394/0x4c0 [ 256.604645][ T9227] _copy_to_user+0x2f/0xa0 [ 256.609086][ T9227] bpf_test_finish+0x25a/0x650 [ 256.613989][ T9227] ? bpf_test_run+0x174/0x870 [ 256.618712][ T9227] ? convert_skb_to___skb+0x420/0x420 [ 256.624128][ T9227] ? slab_build_skb+0x25a/0x3e0 [ 256.629016][ T9227] bpf_prog_test_run_skb+0x1135/0x18f0 [ 256.634529][ T9227] ? cpu_online+0x60/0x60 [ 256.638888][ T9227] bpf_prog_test_run+0x31f/0x390 [ 256.643857][ T9227] __sys_bpf+0x49d/0x890 [ 256.648135][ T9227] ? bpf_link_show_fdinfo+0x390/0x390 [ 256.653548][ T9227] ? lock_chain_count+0x20/0x20 [ 256.658427][ T9227] __x64_sys_bpf+0x7c/0x90 [ 256.662873][ T9227] do_syscall_64+0x55/0xb0 [ 256.667320][ T9227] ? clear_bhb_loop+0x40/0x90 [ 256.672037][ T9227] ? clear_bhb_loop+0x40/0x90 [ 256.676748][ T9227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.682679][ T9227] RIP: 0033:0x7fc66259e159 [ 256.687130][ T9227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.706774][ T9227] RSP: 002b:00007fc6633a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 256.715231][ T9227] RAX: ffffffffffffffda RBX: 00007fc662825fa0 RCX: 00007fc66259e159 [ 256.723224][ T9227] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 256.731214][ T9227] RBP: 00007fc6633a3090 R08: 0000000000000000 R09: 0000000000000000 [ 256.739199][ T9227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.747184][ T9227] R13: 00007fc662826038 R14: 00007fc662825fa0 R15: 00007ffc5c6c04e8 [ 256.755185][ T9227] [ 256.759606][ T9236] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1262'. [ 257.208781][ T9257] netlink: 'syz.0.1270': attribute type 39 has an invalid length. [ 257.973795][ T9287] netlink: 'syz.0.1280': attribute type 39 has an invalid length. [ 258.222591][ T9266] ------------[ cut here ]------------ [ 258.228544][ T9266] WARNING: CPU: 1 PID: 9266 at kernel/events/core.c:6808 perf_pending_task+0x357/0x480 [ 258.238727][ T9266] Modules linked in: [ 258.242684][ T9266] CPU: 1 PID: 9266 Comm: syz.3.1273 Not tainted syzkaller #0 [ 258.250135][ T9266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.260531][ T9266] RIP: 0010:perf_pending_task+0x357/0x480 [ 258.266570][ T9266] Code: e8 9e cf d5 ff 84 db 75 10 e8 05 cd d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f5 cc d5 ff e8 b0 e7 4e ff eb e9 e8 e9 cc d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 258.286295][ T9266] RSP: 0018:ffffc900055679c8 EFLAGS: 00010293 [ 258.292413][ T9266] RAX: ffffffff81b1b587 RBX: ffff8880782dc770 RCX: ffff888030605a00 [ 258.300613][ T9266] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 258.308697][ T9266] RBP: ffff8880782dc530 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5 [ 258.316751][ T9266] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: ffff888030605a00 [ 258.324947][ T9266] R13: ffff8880240fc130 R14: 0000000000000000 R15: 1ffff1100f05b8a6 [ 258.332991][ T9266] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 258.341996][ T9266] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.348936][ T9266] CR2: 00007fd2915ed158 CR3: 0000000076082000 CR4: 00000000003506e0 [ 258.357003][ T9266] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 258.365086][ T9266] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 258.373387][ T9266] Call Trace: [ 258.376708][ T9266] [ 258.379682][ T9266] task_work_run+0x1d4/0x260 [ 258.384395][ T9266] ? task_work_cancel+0x220/0x220 [ 258.389494][ T9266] do_exit+0x986/0x2530 [ 258.393752][ T9266] ? put_task_struct+0xc0/0xc0 [ 258.398574][ T9266] ? preempt_schedule_common+0x82/0xc0 [ 258.404195][ T9266] ? preempt_schedule+0xc0/0xd0 [ 258.409106][ T9266] ? schedule_preempt_disabled+0x20/0x20 [ 258.414880][ T9266] ? lock_chain_count+0x20/0x20 [ 258.419795][ T9266] do_group_exit+0x22d/0x2f0 [ 258.424535][ T9266] get_signal+0x12a6/0x1390 [ 258.429109][ T9266] arch_do_signal_or_restart+0xc2/0x7b0 [ 258.434764][ T9266] ? __ia32_sys_get_robust_list+0x110/0x110 [ 258.440719][ T9266] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 258.446920][ T9266] ? get_sigframe_size+0x20/0x20 [ 258.451944][ T9266] ? exit_to_user_mode_loop+0x3b/0x110 [ 258.457526][ T9266] exit_to_user_mode_loop+0x70/0x110 [ 258.462935][ T9266] exit_to_user_mode_prepare+0xee/0x180 [ 258.468549][ T9266] syscall_exit_to_user_mode+0x1a/0x50 [ 258.474282][ T9266] do_syscall_64+0x61/0xb0 [ 258.478801][ T9266] ? clear_bhb_loop+0x40/0x90 [ 258.483632][ T9266] ? clear_bhb_loop+0x40/0x90 [ 258.488366][ T9266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.494438][ T9266] RIP: 0033:0x7f2dcb79e159 [ 258.498908][ T9266] Code: Unable to access opcode bytes at 0x7f2dcb79e12f. [ 258.506149][ T9266] RSP: 002b:00007f2dc99f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 258.514764][ T9266] RAX: fffffffffffffe00 RBX: 00007f2dcba25fa8 RCX: 00007f2dcb79e159 [ 258.522794][ T9266] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2dcba25fa8 [ 258.530907][ T9266] RBP: 00007f2dcba25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 258.538956][ T9266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.547814][ T9266] R13: 00007f2dcba26038 R14: 00007ffc7da5dcc0 R15: 00007ffc7da5dda8 [ 258.555922][ T9266] [ 258.559000][ T9266] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 258.566319][ T9266] CPU: 1 PID: 9266 Comm: syz.3.1273 Not tainted syzkaller #0 [ 258.573714][ T9266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.583801][ T9266] Call Trace: [ 258.587121][ T9266] [ 258.590076][ T9266] dump_stack_lvl+0x18c/0x250 [ 258.594808][ T9266] ? show_regs_print_info+0x20/0x20 [ 258.600050][ T9266] ? load_image+0x420/0x420 [ 258.604588][ T9266] panic+0x2ca/0x720 [ 258.608518][ T9266] ? bpf_jit_dump+0xd0/0xd0 [ 258.613078][ T9266] __warn+0x2e0/0x470 [ 258.617082][ T9266] ? perf_pending_task+0x357/0x480 [ 258.622220][ T9266] ? perf_pending_task+0x357/0x480 [ 258.627359][ T9266] report_bug+0x2be/0x4f0 [ 258.631713][ T9266] ? perf_pending_task+0x357/0x480 [ 258.636851][ T9266] ? perf_pending_task+0x357/0x480 [ 258.641995][ T9266] ? perf_pending_task+0x359/0x480 [ 258.647137][ T9266] handle_bug+0xcf/0x120 [ 258.651397][ T9266] exc_invalid_op+0x1a/0x50 [ 258.655932][ T9266] asm_exc_invalid_op+0x1a/0x20 [ 258.660820][ T9266] RIP: 0010:perf_pending_task+0x357/0x480 [ 258.666565][ T9266] Code: e8 9e cf d5 ff 84 db 75 10 e8 05 cd d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f5 cc d5 ff e8 b0 e7 4e ff eb e9 e8 e9 cc d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 258.686199][ T9266] RSP: 0018:ffffc900055679c8 EFLAGS: 00010293 [ 258.692286][ T9266] RAX: ffffffff81b1b587 RBX: ffff8880782dc770 RCX: ffff888030605a00 [ 258.700282][ T9266] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 258.708268][ T9266] RBP: ffff8880782dc530 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5 [ 258.716258][ T9266] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: ffff888030605a00 [ 258.724260][ T9266] R13: ffff8880240fc130 R14: 0000000000000000 R15: 1ffff1100f05b8a6 [ 258.732260][ T9266] ? perf_pending_task+0x357/0x480 [ 258.737413][ T9266] ? perf_pending_task+0x357/0x480 [ 258.742556][ T9266] task_work_run+0x1d4/0x260 [ 258.747177][ T9266] ? task_work_cancel+0x220/0x220 [ 258.752248][ T9266] do_exit+0x986/0x2530 [ 258.756439][ T9266] ? put_task_struct+0xc0/0xc0 [ 258.761232][ T9266] ? preempt_schedule_common+0x82/0xc0 [ 258.766715][ T9266] ? preempt_schedule+0xc0/0xd0 [ 258.771622][ T9266] ? schedule_preempt_disabled+0x20/0x20 [ 258.777284][ T9266] ? lock_chain_count+0x20/0x20 [ 258.782166][ T9266] do_group_exit+0x22d/0x2f0 [ 258.786793][ T9266] get_signal+0x12a6/0x1390 [ 258.791329][ T9266] arch_do_signal_or_restart+0xc2/0x7b0 [ 258.796909][ T9266] ? __ia32_sys_get_robust_list+0x110/0x110 [ 258.802822][ T9266] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 258.809349][ T9266] ? get_sigframe_size+0x20/0x20 [ 258.814322][ T9266] ? exit_to_user_mode_loop+0x3b/0x110 [ 258.819807][ T9266] exit_to_user_mode_loop+0x70/0x110 [ 258.825124][ T9266] exit_to_user_mode_prepare+0xee/0x180 [ 258.830703][ T9266] syscall_exit_to_user_mode+0x1a/0x50 [ 258.836193][ T9266] do_syscall_64+0x61/0xb0 [ 258.840629][ T9266] ? clear_bhb_loop+0x40/0x90 [ 258.845347][ T9266] ? clear_bhb_loop+0x40/0x90 [ 258.850053][ T9266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.855977][ T9266] RIP: 0033:0x7f2dcb79e159 [ 258.860430][ T9266] Code: Unable to access opcode bytes at 0x7f2dcb79e12f. [ 258.867501][ T9266] RSP: 002b:00007f2dc99f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 258.875936][ T9266] RAX: fffffffffffffe00 RBX: 00007f2dcba25fa8 RCX: 00007f2dcb79e159 [ 258.883971][ T9266] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2dcba25fa8 [ 258.891963][ T9266] RBP: 00007f2dcba25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 258.899959][ T9266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.907949][ T9266] R13: 00007f2dcba26038 R14: 00007ffc7da5dcc0 R15: 00007ffc7da5dda8 [ 258.915970][ T9266] [ 258.919584][ T9266] Kernel Offset: disabled [ 258.923918][ T9266] Rebooting in 86400 seconds..