last executing test programs: 15.525836163s ago: executing program 2 (id=1836): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050a"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(r2, 0x29, 0x3b, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000180)=r1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) 15.505142855s ago: executing program 1 (id=1837): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r0}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd7a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x200000000000014b, &(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x4084) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200"], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x10, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x40) 14.438366481s ago: executing program 1 (id=1839): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/119, 0x77}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xe, 0x0, 0x0, 0x1a0f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3ea73aa96bd68254}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11.248920029s ago: executing program 3 (id=1841): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="d28a08d988a88d8bf2f08c8288a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)=ANY=[], 0x50) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003000000060000000000000700000000070000000000000e01000000010000f40b00000000000008030000000a00000001cc04"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = gettid() sendmsg$unix(r4, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01, 0xee01}}}], 0x40, 0x800}, 0x40800) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe900) sendmsg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000740)="ecfd5dd05d6c0e6578521ac4e478af07c681a27448cc50044f340c5dc69cc58e120af98a620e851653d5faa8f685f8d3fc9db17b661ea653826bc6f0b912291acd05d2e8defb939fdb46ed4e5d3ee7e2fa62617977c3e3ec5370804dd0630720b5dc04a43c1fa19f4b14a46589d79849e4efb468e2149e7a256f0beeb2f36ff416e61e0ca1037f77375ee261912ef24892cbc7b198091681e0fca61ecc5326b11f0f0f93007e", 0xa6}, {&(0x7f0000000040)="68ca218686a9c9e719fa8197085e22ebd0f1", 0x12}, {&(0x7f0000002800)="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", 0xff37}], 0x3}, 0x40e4804) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000180)="88e6", 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r8 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0xc) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x80) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 11.246116029s ago: executing program 0 (id=1849): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x6a0a1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x6d}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.244753509s ago: executing program 2 (id=1842): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2, 0x2, 0x2, 0x3, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0100"/12, @ANYRES32, @ANYBLOB="fc290ead7d2d1ebea50a46891a654786d05cdaed6672e920e876a8e6bf53f9fa9d6bed78c770cf65fc1d411f3b71cc19fa50a7f7ec0e18863eb975c54067e5a766aad0c78c9216b07226e507a818b858e28da41a5f", @ANYRES64=0x0], 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580)=0x2, 0x0}, 0x20) r1 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0xbb64eb08760823a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x40, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x2000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xffff, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 11.144781804s ago: executing program 1 (id=1843): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r2, 0x1, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x16, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xb}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x8, 0x66, &(0x7f00000007c0)=""/102, 0x81f00, 0x0, '\x00', 0x0, @fallback=0x21, r3, 0x8, &(0x7f0000000880)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xb63}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 11.007591801s ago: executing program 1 (id=1844): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, 0x0}, 0x20) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) (fail_nth: 7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 8.142142802s ago: executing program 2 (id=1845): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="660a000000000080611184000000000018f0c971080000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="3300000000000000000000000000620009901ffbf0e299ebb23afb0c38a872ec8bfdbaef4b5ad5319294f8522e6aa9d92e98f2d497d71275085e82a4a85b759f7d8052b7e96adffbc9c607e8b06274fdefad69910853fee2762116c87993dc461c3e98cd3b9b330ba4eb0af1e3e475b8bed4f6ac5dd95426eb1e11084a8ca09ca5b629253f0e52acac6e07"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000006, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480), 0x0, 0x37, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000a80), 0x8, 0x3d, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"], 0x48) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c0000"], 0xc0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4107b7e, 0x2, @perf_config_ext={0x81, 0x1}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x71d0, 0x0, 0x8, 0x0, 0x2009}, 0x0, 0xfffffffffffffffe, r0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000200000000000000000000000000000000001300007f0000fd0000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r5, 0x0, 0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0100000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00@\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0x7f, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1400"/12, @ANYRES32=r3, @ANYBLOB="e0000001ffffffff0000000038000000000000000000000007000000890b14ffffffffac1414bb940401004418f290000000000000b1920000000200000200fffffff90014000000000000000000000002", @ANYBLOB], 0xc0}, 0x20000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c0000001400", 0x6}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4e22, @empty}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) 8.083405205s ago: executing program 1 (id=1846): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20040000) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000400000008000000010000008000000032fa77503460f25f471d81948bb82b8b2a89286fee06c7e6f8a46464d0d4a0150306936a4d9fdf95efe5a4a19f1cf7b4f2e12e31430e7dbf1375e53c2ad3eb29c0ddca6e8b0272c52a0800d767c74bb2fbaec7ac5215d1012d6cd9bcab76d49e98c2e41be8b5ad2dbf9f2938e89f31128aeb98a6a6bd0ecdacd846cc2759e720b196c32f6917a503e93f3e35c252b716943840", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x10, 0x1ff, 0x8, 0x9, 0x40000, 0xffffffffffffffff, 0x487b, '\x00', 0x0, r4, 0x2, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x24048811) 8.081079135s ago: executing program 3 (id=1847): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/119, 0x77}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xe, 0x0, 0x0, 0x1a0f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3ea73aa96bd68254}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.004830999s ago: executing program 0 (id=1848): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01", 0x57}], 0x1, 0x0, 0x0, 0x7}, 0x20000040) socket$kcm(0xa, 0x922000000003, 0x11) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r2) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000080)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 7.60870001s ago: executing program 3 (id=1850): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffefff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xad8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x10, 0x3, 0x10) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x80}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 7.6073405s ago: executing program 0 (id=1858): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/119, 0x77}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xe, 0x0, 0x0, 0x1a0f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3ea73aa96bd68254}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.60679119s ago: executing program 2 (id=1851): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r0}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd7a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x200000000000014b, &(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x4084) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200"], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x10, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x40) 7.016921041s ago: executing program 0 (id=1852): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_clone(0x20400, &(0x7f0000000400)="0ed7e843481659c7a6af9fad035d38741dec31633867f84d73598624c1b8fa039defa915658c6e7bb3f51fa7a762edb7223378f4c0f3646a5284418435c5e6f1229e58ddb12d69042a6818955583d902cf74634ef5815cb63f2e9d40c6285211f1e56faf7e261ede46bf928aa6ee0dcba9d526967512c6a8a226449bfc", 0x7d, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000f40)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000f80), 0x8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x8, 0xd, 0x8, 0x1, 0x0, 0x7, 0x2305, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x1, 0x9}, 0x80, 0x1000, 0x0, 0x9, 0x1, 0x8000, 0x8000, 0x0, 0xfffff800, 0x0, 0xffffffffffffffff}, r1, 0x1, r2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x4, 0xffffffffffffffff, 0x7f, '\x00', r3, 0xffffffffffffffff, 0x2, 0x5, 0x5, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xb, &(0x7f0000000fc0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000400)='GPL\x00', 0xd6d, 0xdd, &(0x7f0000000440)=""/221, 0x41100, 0x0, '\x00', r3}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x30, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=r1, 0x12) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r7) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000638877fbacfe1416e000000189040203fe80000000000000845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffff1200000006000000000001750000003c000000"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x41000, 0x62}, 0x94) 6.864324619s ago: executing program 3 (id=1853): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r2, 0x1, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x16, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xb}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x8, 0x66, &(0x7f00000007c0)=""/102, 0x81f00, 0x0, '\x00', 0x0, @fallback=0x21, r3, 0x8, &(0x7f0000000880)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xb63}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.64766445s ago: executing program 2 (id=1854): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/119, 0x77}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xe, 0x0, 0x0, 0x1a0f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3ea73aa96bd68254}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.407131773s ago: executing program 3 (id=1855): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2, 0x2, 0x2, 0x3, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0100"/12, @ANYRES32, @ANYBLOB="fc290ead7d2d1ebea50a46891a654786d05cdaed6672e920e876a8e6bf53f9fa9d6bed78c770cf65fc1d411f3b71cc19fa50a7f7ec0e18863eb975c54067e5a766aad0c78c9216b07226e507a818b858e28da41a5f", @ANYRES64=0x0], 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580)=0x2, 0x0}, 0x20) r1 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0xbb64eb08760823a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r2, 0x0, 0x0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x2000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xffff, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3.869978786s ago: executing program 1 (id=1856): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x100800, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x37}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000f0ffffffffff030000000035"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x7ff) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) socket$kcm(0xa, 0x0, 0x3a) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0xfffffffffffffffd) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317"], 0xfdef) 3.826565639s ago: executing program 3 (id=1857): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x6a0a1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x6d}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.59696236s ago: executing program 0 (id=1859): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01", 0x57}], 0x1, 0x0, 0x0, 0x7}, 0x20000040) socket$kcm(0xa, 0x922000000003, 0x11) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r2) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000080)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 3.554894043s ago: executing program 2 (id=1860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103100, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000200)={'xfrm0\x00'}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22ffff) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000100)=[{0x25, 0x0, 0x3, 0xfffffffe}, {0x20}, {0x28, 0x0, 0x1, 0x1}, {0xb1, 0x0, 0x2, 0x8001}, {0x16, 0xfc, 0x5, 0xffffffff}, {0x1, 0xfd, 0x8, 0xf52}, {0x52, 0x72, 0x80, 0x615}]}) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x0) 0s ago: executing program 0 (id=1861): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/119, 0x77}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xe, 0x0, 0x0, 0x1a0f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3ea73aa96bd68254}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0 [ 286.365354][ T8023] ? packet_getsockopt+0xad0/0xad0 [ 286.370520][ T8023] ? aa_sock_msg_perm+0x94/0x150 [ 286.375585][ T8023] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 286.380906][ T8023] ? security_socket_sendmsg+0x80/0xa0 [ 286.386397][ T8023] ? packet_getsockopt+0xad0/0xad0 [ 286.391552][ T8023] ____sys_sendmsg+0x5ba/0x960 [ 286.396358][ T8023] ? __lock_acquire+0x7d40/0x7d40 [ 286.401510][ T8023] ? __asan_memset+0x22/0x40 [ 286.406154][ T8023] ? __sys_sendmsg_sock+0x30/0x30 [ 286.407482][ T8021] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.766'. [ 286.411278][ T8023] ? __import_iovec+0x5f2/0x850 [ 286.411315][ T8023] ? import_iovec+0x73/0xa0 [ 286.411338][ T8023] ___sys_sendmsg+0x2a6/0x360 [ 286.411366][ T8023] ? __sys_sendmsg+0x2a0/0x2a0 [ 286.411407][ T8023] ? trace_call_bpf+0xc3/0x6c0 [ 286.411464][ T8023] __se_sys_sendmsg+0x1c2/0x2b0 [ 286.411487][ T8023] ? __x64_sys_sendmsg+0x80/0x80 [ 286.411523][ T8023] ? lockdep_hardirqs_on+0x98/0x150 [ 286.411550][ T8023] do_syscall_64+0x55/0xa0 [ 286.411567][ T8023] ? clear_bhb_loop+0x40/0x90 [ 286.411589][ T8023] ? clear_bhb_loop+0x40/0x90 [ 286.411613][ T8023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.411636][ T8023] RIP: 0033:0x7f4effd9cdd9 [ 286.411655][ T8023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.411670][ T8023] RSP: 002b:00007f4efdff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.411692][ T8023] RAX: ffffffffffffffda RBX: 00007f4f00015fa0 RCX: 00007f4effd9cdd9 [ 286.411706][ T8023] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000004 [ 286.411720][ T8023] RBP: 00007f4efdff6090 R08: 0000000000000000 R09: 0000000000000000 [ 286.411731][ T8023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.411744][ T8023] R13: 00007f4f00016038 R14: 00007f4f00015fa0 R15: 00007ffd87cb4f68 [ 286.411774][ T8023] [ 288.676206][ T8027] netlink: 'syz.1.769': attribute type 1 has an invalid length. [ 288.699621][ T8027] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.769'. [ 288.811161][ T8037] FAULT_INJECTION: forcing a failure. [ 288.811161][ T8037] name failslab, interval 1, probability 0, space 0, times 0 [ 288.854826][ T8037] CPU: 0 PID: 8037 Comm: syz.2.774 Not tainted syzkaller #0 [ 288.862197][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 288.872302][ T8037] Call Trace: [ 288.875626][ T8037] [ 288.878600][ T8037] dump_stack_lvl+0x18c/0x250 [ 288.883345][ T8037] ? show_regs_print_info+0x20/0x20 [ 288.888598][ T8037] ? load_image+0x420/0x420 [ 288.893158][ T8037] ? __might_sleep+0xe0/0xe0 [ 288.897776][ T8037] ? __lock_acquire+0x7d40/0x7d40 [ 288.902830][ T8037] should_fail_ex+0x39d/0x4d0 [ 288.907536][ T8037] should_failslab+0x9/0x20 [ 288.912064][ T8037] slab_pre_alloc_hook+0x59/0x310 [ 288.917196][ T8037] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 288.922930][ T8037] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 288.928677][ T8037] __kmem_cache_alloc_node+0x53/0x250 [ 288.934084][ T8037] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 288.939830][ T8037] __kmalloc+0xa4/0x230 [ 288.944025][ T8037] tomoyo_realpath_from_path+0xe3/0x5d0 [ 288.949604][ T8037] tomoyo_path_number_perm+0x248/0x620 [ 288.955093][ T8037] ? tomoyo_path_number_perm+0x217/0x620 [ 288.960766][ T8037] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 288.966261][ T8037] ? ksys_write+0x1c4/0x260 [ 288.970818][ T8037] ? __fget_files+0x28/0x4b0 [ 288.975434][ T8037] ? __fget_files+0x28/0x4b0 [ 288.980062][ T8037] security_file_ioctl+0x70/0xa0 [ 288.985026][ T8037] __se_sys_ioctl+0x48/0x170 [ 288.989635][ T8037] do_syscall_64+0x55/0xa0 [ 288.994065][ T8037] ? clear_bhb_loop+0x40/0x90 [ 288.998757][ T8037] ? clear_bhb_loop+0x40/0x90 [ 289.003455][ T8037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.009363][ T8037] RIP: 0033:0x7f9eb179cdd9 [ 289.013792][ T8037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.033505][ T8037] RSP: 002b:00007f9eb25d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.041932][ T8037] RAX: ffffffffffffffda RBX: 00007f9eb1a15fa0 RCX: 00007f9eb179cdd9 [ 289.050021][ T8037] RDX: 0000200000000080 RSI: 0000000000008982 RDI: 0000000000000005 [ 289.058008][ T8037] RBP: 00007f9eb25d9090 R08: 0000000000000000 R09: 0000000000000000 [ 289.066080][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.074069][ T8037] R13: 00007f9eb1a16038 R14: 00007f9eb1a15fa0 R15: 00007ffe5073ce28 [ 289.082070][ T8037] [ 289.109556][ T8037] ERROR: Out of memory at tomoyo_realpath_from_path. [ 289.383591][ T8050] FAULT_INJECTION: forcing a failure. [ 289.383591][ T8050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.396138][ T8042] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.776'. [ 289.469630][ T8050] CPU: 0 PID: 8050 Comm: syz.3.779 Not tainted syzkaller #0 [ 289.476996][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.487094][ T8050] Call Trace: [ 289.490423][ T8050] [ 289.493400][ T8050] dump_stack_lvl+0x18c/0x250 [ 289.498139][ T8050] ? show_regs_print_info+0x20/0x20 [ 289.503383][ T8050] ? load_image+0x420/0x420 [ 289.507937][ T8050] ? __might_fault+0xaa/0x120 [ 289.512652][ T8050] ? __lock_acquire+0x7d40/0x7d40 [ 289.517807][ T8050] should_fail_ex+0x39d/0x4d0 [ 289.522535][ T8050] _copy_from_user+0x2f/0xe0 [ 289.527167][ T8050] bpf_prog_test_run_skb+0x266/0x12b0 [ 289.532572][ T8050] ? __fget_files+0x28/0x4b0 [ 289.537291][ T8050] ? __fget_files+0x28/0x4b0 [ 289.541925][ T8050] ? __fget_files+0x43d/0x4b0 [ 289.546659][ T8050] ? cpu_online+0x60/0x60 [ 289.551028][ T8050] bpf_prog_test_run+0x321/0x390 [ 289.556010][ T8050] __sys_bpf+0x49d/0x890 [ 289.560360][ T8050] ? bpf_link_show_fdinfo+0x390/0x390 [ 289.565763][ T8050] ? lock_chain_count+0x20/0x20 [ 289.570638][ T8050] __x64_sys_bpf+0x7c/0x90 [ 289.575067][ T8050] do_syscall_64+0x55/0xa0 [ 289.579509][ T8050] ? clear_bhb_loop+0x40/0x90 [ 289.584213][ T8050] ? clear_bhb_loop+0x40/0x90 [ 289.588908][ T8050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.594824][ T8050] RIP: 0033:0x7f4effd9cdd9 [ 289.599277][ T8050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.618923][ T8050] RSP: 002b:00007f4efdff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 289.627364][ T8050] RAX: ffffffffffffffda RBX: 00007f4f00015fa0 RCX: 00007f4effd9cdd9 [ 289.635373][ T8050] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 289.643358][ T8050] RBP: 00007f4efdff6090 R08: 0000000000000000 R09: 0000000000000000 [ 289.651343][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.659323][ T8050] R13: 00007f4f00016038 R14: 00007f4f00015fa0 R15: 00007ffd87cb4f68 [ 289.667318][ T8050] [ 290.179374][ T8057] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.782'. [ 291.219986][ T8068] netlink: 'syz.0.785': attribute type 27 has an invalid length. [ 291.236653][ T8068] netlink: 'syz.0.785': attribute type 4 has an invalid length. [ 291.244693][ T8068] netlink: 132 bytes leftover after parsing attributes in process `syz.0.785'. [ 291.273191][ T8070] netlink: 'syz.2.783': attribute type 25 has an invalid length. [ 291.528092][ T8077] netlink: 'syz.2.786': attribute type 33 has an invalid length. [ 291.548023][ T8077] netlink: 36 bytes leftover after parsing attributes in process `syz.2.786'. [ 292.252229][ T8092] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.793'. [ 298.321658][ T8106] FAULT_INJECTION: forcing a failure. [ 298.321658][ T8106] name failslab, interval 1, probability 0, space 0, times 0 [ 298.344721][ T8106] CPU: 1 PID: 8106 Comm: syz.0.798 Not tainted syzkaller #0 [ 298.352092][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 298.362284][ T8106] Call Trace: [ 298.365612][ T8106] [ 298.368593][ T8106] dump_stack_lvl+0x18c/0x250 [ 298.373333][ T8106] ? show_regs_print_info+0x20/0x20 [ 298.378593][ T8106] ? load_image+0x420/0x420 [ 298.383194][ T8106] ? __might_sleep+0xe0/0xe0 [ 298.387828][ T8106] ? __lock_acquire+0x7d40/0x7d40 [ 298.392904][ T8106] should_fail_ex+0x39d/0x4d0 [ 298.397636][ T8106] should_failslab+0x9/0x20 [ 298.402170][ T8106] slab_pre_alloc_hook+0x59/0x310 [ 298.407222][ T8106] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 298.412787][ T8106] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 298.418442][ T8106] __kmem_cache_alloc_node+0x53/0x250 [ 298.423846][ T8106] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 298.429604][ T8106] __kmalloc+0xa4/0x230 [ 298.433790][ T8106] bpf_prog_test_run_skb+0x238/0x12b0 [ 298.439213][ T8106] ? lockdep_hardirqs_on+0x98/0x150 [ 298.444428][ T8106] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.450610][ T8106] ? cpu_online+0x60/0x60 [ 298.454955][ T8106] bpf_prog_test_run+0x321/0x390 [ 298.459908][ T8106] __sys_bpf+0x49d/0x890 [ 298.464167][ T8106] ? bpf_link_show_fdinfo+0x390/0x390 [ 298.469566][ T8106] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.475833][ T8106] __x64_sys_bpf+0x7c/0x90 [ 298.480259][ T8106] do_syscall_64+0x55/0xa0 [ 298.484681][ T8106] ? clear_bhb_loop+0x40/0x90 [ 298.489469][ T8106] ? clear_bhb_loop+0x40/0x90 [ 298.494326][ T8106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.500263][ T8106] RIP: 0033:0x7f8bea79cdd9 [ 298.504707][ T8106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.524350][ T8106] RSP: 002b:00007f8beb6fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 298.532870][ T8106] RAX: ffffffffffffffda RBX: 00007f8beaa15fa0 RCX: 00007f8bea79cdd9 [ 298.540859][ T8106] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 298.548845][ T8106] RBP: 00007f8beb6fb090 R08: 0000000000000000 R09: 0000000000000000 [ 298.556831][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.564901][ T8106] R13: 00007f8beaa16038 R14: 00007f8beaa15fa0 R15: 00007ffec99a5638 [ 298.572897][ T8106] [ 298.624575][ T8111] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.799'. [ 298.634157][ T8111] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.799'. [ 298.645154][ T8111] tc_dump_action: action bad kind [ 303.868204][ T8154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.810'. [ 305.185529][ T8141] netlink: 40 bytes leftover after parsing attributes in process `syz.2.805'. [ 305.783314][ T8170] netlink: 'syz.1.815': attribute type 10 has an invalid length. [ 306.207117][ T8170] team0: Device vxcan1 is of different type [ 307.183998][ T8207] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.825'. [ 307.817648][ T8213] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.827'. [ 310.655007][ T8222] netlink: 40 bytes leftover after parsing attributes in process `syz.0.830'. [ 310.951887][ T8238] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.840'. [ 310.985005][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'. [ 311.097888][ T8244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.270349][ T8245] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.835'. [ 311.277983][ T8247] netlink: 'syz.1.836': attribute type 10 has an invalid length. [ 311.311084][ T8247] veth1_macvtap: left promiscuous mode [ 312.765686][ T8271] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.843'. [ 315.199858][ T8276] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.846'. [ 315.229670][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 315.302854][ T8285] netlink: 60 bytes leftover after parsing attributes in process `syz.2.850'. [ 315.359770][ T8285] netlink: 60 bytes leftover after parsing attributes in process `syz.2.850'. [ 315.373370][ T8285] netlink: 60 bytes leftover after parsing attributes in process `syz.2.850'. [ 317.237792][ T8309] __nla_validate_parse: 2 callbacks suppressed [ 317.237811][ T8309] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.858'. [ 317.415889][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.422520][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.643785][ T8316] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.860'. [ 320.653296][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 320.883895][ T8329] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.865'. [ 322.046893][ T8333] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.868'. [ 322.191967][ T8347] netlink: 60 bytes leftover after parsing attributes in process `syz.0.880'. [ 322.203280][ T8347] netlink: 60 bytes leftover after parsing attributes in process `syz.0.880'. [ 322.292919][ T8347] netlink: 60 bytes leftover after parsing attributes in process `syz.0.880'. [ 323.586549][ T8369] netlink: 'syz.3.877': attribute type 7 has an invalid length. [ 324.006596][ T8376] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.878'. [ 324.338219][ T8378] netlink: 144 bytes leftover after parsing attributes in process `syz.3.881'. [ 331.772857][ T8421] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.893'. [ 333.575084][ T8423] Dead loop on virtual device ip6_vti0, fix it urgently! [ 333.695387][ T8432] netlink: 'syz.0.897': attribute type 9 has an invalid length. [ 333.704220][ T8432] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.897'. [ 335.097181][ T8452] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.904'. [ 335.494716][ T8463] FAULT_INJECTION: forcing a failure. [ 335.494716][ T8463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.543086][ T8463] CPU: 0 PID: 8463 Comm: syz.3.907 Not tainted syzkaller #0 [ 335.550447][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 335.560540][ T8463] Call Trace: [ 335.563835][ T8463] [ 335.566781][ T8463] dump_stack_lvl+0x18c/0x250 [ 335.571508][ T8463] ? show_regs_print_info+0x20/0x20 [ 335.576747][ T8463] ? load_image+0x420/0x420 [ 335.581276][ T8463] ? kasan_check_range+0x6d/0x290 [ 335.586324][ T8463] should_fail_ex+0x39d/0x4d0 [ 335.591024][ T8463] _copy_from_user+0x2f/0xe0 [ 335.595633][ T8463] __sys_bpf+0x23e/0x890 [ 335.599898][ T8463] ? bpf_link_show_fdinfo+0x390/0x390 [ 335.605563][ T8463] ? __sys_bpf+0x11/0x890 [ 335.609914][ T8463] __x64_sys_bpf+0x7c/0x90 [ 335.614363][ T8463] do_syscall_64+0x55/0xa0 [ 335.618791][ T8463] ? clear_bhb_loop+0x40/0x90 [ 335.623489][ T8463] ? clear_bhb_loop+0x40/0x90 [ 335.628184][ T8463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.634262][ T8463] RIP: 0033:0x7f4effd9cdd9 [ 335.638693][ T8463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.658331][ T8463] RSP: 002b:00007f4efdff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 335.666848][ T8463] RAX: ffffffffffffffda RBX: 00007f4f00015fa0 RCX: 00007f4effd9cdd9 [ 335.674829][ T8463] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 335.682815][ T8463] RBP: 00007f4efdff6090 R08: 0000000000000000 R09: 0000000000000000 [ 335.690795][ T8463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.698782][ T8463] R13: 00007f4f00016038 R14: 00007f4f00015fa0 R15: 00007ffd87cb4f68 [ 335.706787][ T8463] [ 336.653708][ T8491] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.916'. [ 336.934181][ T8495] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.918'. [ 338.062041][ T8512] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.923'. [ 338.088801][ T8512] mac80211_hwsim hwsim7 ..ãc¤±: renamed from wlan1 [ 339.238286][ T8537] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.932'. [ 340.815720][ T8557] syzkaller0: refused to change device tx_queue_len [ 341.331162][ T8559] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.941'. [ 343.115999][ T8579] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.947'. [ 344.813284][ T8603] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.956'. [ 345.442987][ T8605] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.957'. [ 347.108032][ T8638] netlink: 'syz.0.971': attribute type 9 has an invalid length. [ 347.121924][ T8638] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.971'. [ 347.699145][ T8648] netlink: 'syz.2.974': attribute type 29 has an invalid length. [ 347.931810][ T8647] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.973'. [ 347.951934][ T8648] netlink: 'syz.2.974': attribute type 29 has an invalid length. [ 347.991395][ T8649] netlink: 'syz.2.974': attribute type 29 has an invalid length. [ 348.126479][ T8653] netlink: 'syz.2.974': attribute type 29 has an invalid length. [ 348.143941][ T8655] netlink: 'syz.2.974': attribute type 29 has an invalid length. [ 348.216862][ T8646] netlink: 'syz.2.974': attribute type 2 has an invalid length. [ 348.294642][ T8646] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.974'. [ 348.421533][ T8661] netlink: 'syz.0.978': attribute type 10 has an invalid length. [ 348.433435][ T8661] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.441097][ T8661] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.493700][ T8661] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.501072][ T8661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.501172][ T8668] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.977'. [ 348.509013][ T8661] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.525595][ T8661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.540751][ T8669] FAULT_INJECTION: forcing a failure. [ 348.540751][ T8669] name failslab, interval 1, probability 0, space 0, times 0 [ 348.556639][ T8669] CPU: 1 PID: 8669 Comm: syz.3.979 Not tainted syzkaller #0 [ 348.563998][ T8669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 348.574099][ T8669] Call Trace: [ 348.577432][ T8661] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 348.577493][ T8669] [ 348.577506][ T8669] dump_stack_lvl+0x18c/0x250 [ 348.593891][ T8669] ? show_regs_print_info+0x20/0x20 [ 348.599131][ T8669] ? load_image+0x420/0x420 [ 348.603705][ T8669] ? __might_sleep+0xe0/0xe0 [ 348.608360][ T8669] ? __lock_acquire+0x7d40/0x7d40 [ 348.613536][ T8669] should_fail_ex+0x39d/0x4d0 [ 348.618285][ T8669] should_failslab+0x9/0x20 [ 348.622847][ T8669] slab_pre_alloc_hook+0x59/0x310 [ 348.627927][ T8669] ? apparmor_sk_alloc_security+0x77/0x100 [ 348.633833][ T8669] __kmem_cache_alloc_node+0x53/0x250 [ 348.639279][ T8669] ? apparmor_sk_alloc_security+0x77/0x100 [ 348.645135][ T8669] kmalloc_trace+0x2a/0xe0 [ 348.649615][ T8669] apparmor_sk_alloc_security+0x77/0x100 [ 348.655318][ T8669] security_sk_alloc+0x6e/0xa0 [ 348.660319][ T8669] sk_prot_alloc+0x101/0x210 [ 348.664958][ T8669] ? sk_alloc+0x24/0x360 [ 348.669338][ T8669] sk_alloc+0x3a/0x360 [ 348.673458][ T8669] ? bpf_ctx_init+0x163/0x1a0 [ 348.678188][ T8669] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 348.683784][ T8669] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 348.689211][ T8669] ? __fget_files+0x28/0x4b0 [ 348.693845][ T8669] ? __fget_files+0x28/0x4b0 [ 348.698482][ T8669] ? __fget_files+0x43d/0x4b0 [ 348.703322][ T8669] ? cpu_online+0x60/0x60 [ 348.707710][ T8669] bpf_prog_test_run+0x321/0x390 [ 348.712711][ T8669] __sys_bpf+0x49d/0x890 [ 348.717000][ T8669] ? bpf_link_show_fdinfo+0x390/0x390 [ 348.722433][ T8669] ? lock_chain_count+0x20/0x20 [ 348.727339][ T8669] __x64_sys_bpf+0x7c/0x90 [ 348.731797][ T8669] do_syscall_64+0x55/0xa0 [ 348.736234][ T8669] ? clear_bhb_loop+0x40/0x90 [ 348.740942][ T8669] ? clear_bhb_loop+0x40/0x90 [ 348.745669][ T8669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.751605][ T8669] RIP: 0033:0x7f4effd9cdd9 [ 348.756146][ T8669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.775801][ T8669] RSP: 002b:00007f4efdfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 348.784250][ T8669] RAX: ffffffffffffffda RBX: 00007f4f00016090 RCX: 00007f4effd9cdd9 [ 348.792250][ T8669] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 348.800325][ T8669] RBP: 00007f4efdfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 348.808315][ T8669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.816302][ T8669] R13: 00007f4f00016128 R14: 00007f4f00016090 R15: 00007ffd87cb4f68 [ 348.824404][ T8669] [ 349.218459][ T8679] netlink: 'syz.1.984': attribute type 29 has an invalid length. [ 349.249906][ T8679] netlink: 'syz.1.984': attribute type 29 has an invalid length. [ 350.016849][ T8687] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.987'. [ 350.793055][ T8701] FAULT_INJECTION: forcing a failure. [ 350.793055][ T8701] name failslab, interval 1, probability 0, space 0, times 0 [ 350.853772][ T8701] CPU: 0 PID: 8701 Comm: syz.2.990 Not tainted syzkaller #0 [ 350.861138][ T8701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 350.871333][ T8701] Call Trace: [ 350.874656][ T8701] [ 350.877621][ T8701] dump_stack_lvl+0x18c/0x250 [ 350.882349][ T8701] ? show_regs_print_info+0x20/0x20 [ 350.887578][ T8701] ? load_image+0x420/0x420 [ 350.892105][ T8701] ? __might_sleep+0xe0/0xe0 [ 350.896807][ T8701] ? __lock_acquire+0x7d40/0x7d40 [ 350.901851][ T8701] should_fail_ex+0x39d/0x4d0 [ 350.906555][ T8701] should_failslab+0x9/0x20 [ 350.911079][ T8701] slab_pre_alloc_hook+0x59/0x310 [ 350.916121][ T8701] ? __lock_acquire+0x7d40/0x7d40 [ 350.921165][ T8701] kmem_cache_alloc_node+0x60/0x320 [ 350.926474][ T8701] ? __alloc_skb+0x103/0x2c0 [ 350.931083][ T8701] __alloc_skb+0x103/0x2c0 [ 350.935512][ T8701] netlink_sendmsg+0x66a/0xbf0 [ 350.940329][ T8701] ? netlink_getsockopt+0x590/0x590 [ 350.945556][ T8701] ? aa_sock_msg_perm+0x94/0x150 [ 350.950523][ T8701] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 350.955839][ T8701] ? security_socket_sendmsg+0x80/0xa0 [ 350.961315][ T8701] ? netlink_getsockopt+0x590/0x590 [ 350.966531][ T8701] ____sys_sendmsg+0x5ba/0x960 [ 350.971314][ T8701] ? __asan_memset+0x22/0x40 [ 350.975925][ T8701] ? __sys_sendmsg_sock+0x30/0x30 [ 350.980970][ T8701] ? __import_iovec+0x5f2/0x850 [ 350.985932][ T8701] ? import_iovec+0x73/0xa0 [ 350.990454][ T8701] ___sys_sendmsg+0x2a6/0x360 [ 350.995139][ T8701] ? get_pid_task+0x20/0x1e0 [ 350.999751][ T8701] ? __sys_sendmsg+0x2a0/0x2a0 [ 351.004639][ T8701] ? __lock_acquire+0x7d40/0x7d40 [ 351.009720][ T8701] __se_sys_sendmsg+0x1c2/0x2b0 [ 351.014591][ T8701] ? __x64_sys_sendmsg+0x80/0x80 [ 351.019557][ T8701] ? lockdep_hardirqs_on+0x98/0x150 [ 351.024886][ T8701] do_syscall_64+0x55/0xa0 [ 351.029311][ T8701] ? clear_bhb_loop+0x40/0x90 [ 351.034026][ T8701] ? clear_bhb_loop+0x40/0x90 [ 351.038721][ T8701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.044650][ T8701] RIP: 0033:0x7f9eb179cdd9 [ 351.049179][ T8701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.068815][ T8701] RSP: 002b:00007f9eb25d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.077250][ T8701] RAX: ffffffffffffffda RBX: 00007f9eb1a15fa0 RCX: 00007f9eb179cdd9 [ 351.085238][ T8701] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 351.093233][ T8701] RBP: 00007f9eb25d9090 R08: 0000000000000000 R09: 0000000000000000 [ 351.101552][ T8701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.109625][ T8701] R13: 00007f9eb1a16038 R14: 00007f9eb1a15fa0 R15: 00007ffe5073ce28 [ 351.117619][ T8701] [ 351.404305][ T8703] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.992'. [ 352.382804][ T8722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.390286][ T8722] IPv6: NLM_F_CREATE should be set when creating new route [ 352.397613][ T8722] IPv6: NLM_F_CREATE should be set when creating new route [ 352.404949][ T8722] IPv6: NLM_F_CREATE should be set when creating new route [ 352.572646][ T8724] FAULT_INJECTION: forcing a failure. [ 352.572646][ T8724] name failslab, interval 1, probability 0, space 0, times 0 [ 352.678914][ T8724] CPU: 0 PID: 8724 Comm: syz.3.1000 Not tainted syzkaller #0 [ 352.686376][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 352.696475][ T8724] Call Trace: [ 352.699874][ T8724] [ 352.702838][ T8724] dump_stack_lvl+0x18c/0x250 [ 352.707567][ T8724] ? show_regs_print_info+0x20/0x20 [ 352.712808][ T8724] ? load_image+0x420/0x420 [ 352.717353][ T8724] ? __might_sleep+0xe0/0xe0 [ 352.721980][ T8724] ? __lock_acquire+0x7d40/0x7d40 [ 352.727043][ T8724] should_fail_ex+0x39d/0x4d0 [ 352.731761][ T8724] should_failslab+0x9/0x20 [ 352.736398][ T8724] slab_pre_alloc_hook+0x59/0x310 [ 352.741459][ T8724] ? __lock_acquire+0x7d40/0x7d40 [ 352.746525][ T8724] kmem_cache_alloc_node+0x60/0x320 [ 352.751768][ T8724] ? __alloc_skb+0x103/0x2c0 [ 352.756393][ T8724] __alloc_skb+0x103/0x2c0 [ 352.760849][ T8724] netlink_sendmsg+0x66a/0xbf0 [ 352.765743][ T8724] ? lockdep_hardirqs_on+0x98/0x150 [ 352.770990][ T8724] ? netlink_getsockopt+0x590/0x590 [ 352.776233][ T8724] ? security_socket_sendmsg+0x45/0xa0 [ 352.781824][ T8724] ? security_socket_sendmsg+0x80/0xa0 [ 352.787332][ T8724] ? netlink_getsockopt+0x590/0x590 [ 352.792620][ T8724] ____sys_sendmsg+0x5ba/0x960 [ 352.797424][ T8724] ? __sys_sendmsg_sock+0x30/0x30 [ 352.802473][ T8724] ___sys_sendmsg+0x2a6/0x360 [ 352.807171][ T8724] ? __sys_sendmsg+0x2a0/0x2a0 [ 352.812006][ T8724] __se_sys_sendmsg+0x1c2/0x2b0 [ 352.816872][ T8724] ? __x64_sys_sendmsg+0x80/0x80 [ 352.821843][ T8724] ? lockdep_hardirqs_on+0x98/0x150 [ 352.827067][ T8724] do_syscall_64+0x55/0xa0 [ 352.831495][ T8724] ? clear_bhb_loop+0x40/0x90 [ 352.836189][ T8724] ? clear_bhb_loop+0x40/0x90 [ 352.840880][ T8724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.846791][ T8724] RIP: 0033:0x7f4effd9cdd9 [ 352.851218][ T8724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.870836][ T8724] RSP: 002b:00007f4efdff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.879266][ T8724] RAX: ffffffffffffffda RBX: 00007f4f00015fa0 RCX: 00007f4effd9cdd9 [ 352.887341][ T8724] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c [ 352.895324][ T8724] RBP: 00007f4efdff6090 R08: 0000000000000000 R09: 0000000000000000 [ 352.903390][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.911377][ T8724] R13: 00007f4f00016038 R14: 00007f4f00015fa0 R15: 00007ffd87cb4f68 [ 352.919383][ T8724] [ 353.239340][ T8731] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1002'. [ 354.707359][ T8751] netlink: 'syz.0.1008': attribute type 2 has an invalid length. [ 354.722863][ T8751] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1008'. [ 354.896106][ T8749] netlink: 'syz.0.1008': attribute type 29 has an invalid length. [ 354.925619][ T8749] netlink: 'syz.0.1008': attribute type 29 has an invalid length. [ 354.988223][ T8751] netlink: 'syz.0.1008': attribute type 29 has an invalid length. [ 354.992021][ T8746] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1007'. [ 355.004094][ T8753] netlink: 'syz.0.1008': attribute type 29 has an invalid length. [ 355.396843][ T8749] netlink: 'syz.0.1008': attribute type 29 has an invalid length. [ 355.819782][ T8771] netlink: 'syz.0.1015': attribute type 21 has an invalid length. [ 355.846637][ T8767] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1013'. [ 358.641407][ T8798] netlink: 'syz.2.1023': attribute type 9 has an invalid length. [ 358.672861][ T8798] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1023'. [ 359.798147][ T8806] netlink: 'syz.1.1024': attribute type 2 has an invalid length. [ 359.799777][ T8810] netlink: 'syz.1.1024': attribute type 29 has an invalid length. [ 359.849797][ T8806] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1024'. [ 359.870449][ T8810] netlink: 'syz.1.1024': attribute type 29 has an invalid length. [ 359.966473][ T8806] netlink: 'syz.1.1024': attribute type 29 has an invalid length. [ 360.048547][ T8810] netlink: 'syz.1.1024': attribute type 29 has an invalid length. [ 360.089440][ T8806] netlink: 'syz.1.1024': attribute type 29 has an invalid length. [ 361.683591][ T8817] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1030'. [ 361.839678][ T8826] ¿: renamed from vlan0 (while UP) [ 362.797358][ T8833] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1037'. [ 362.816832][ T8835] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1037'. [ 364.077694][ T8860] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1046'. [ 364.631182][ T8870] syz.1.1049[8870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.631490][ T8870] syz.1.1049[8870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.739641][ T8856] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1044'. [ 365.622590][ T8891] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1058'. [ 366.532971][ T8908] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1064'. [ 366.690504][ T8906] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1063'. [ 367.102075][ T8915] FAULT_INJECTION: forcing a failure. [ 367.102075][ T8915] name failslab, interval 1, probability 0, space 0, times 0 [ 367.175039][ T8915] CPU: 1 PID: 8915 Comm: syz.1.1066 Not tainted syzkaller #0 [ 367.182527][ T8915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 367.192752][ T8915] Call Trace: [ 367.196100][ T8915] [ 367.199102][ T8915] dump_stack_lvl+0x18c/0x250 [ 367.203882][ T8915] ? show_regs_print_info+0x20/0x20 [ 367.209165][ T8915] ? load_image+0x420/0x420 [ 367.213759][ T8915] ? __might_sleep+0xe0/0xe0 [ 367.218518][ T8915] ? __lock_acquire+0x7d40/0x7d40 [ 367.223639][ T8915] should_fail_ex+0x39d/0x4d0 [ 367.228442][ T8915] should_failslab+0x9/0x20 [ 367.233104][ T8915] slab_pre_alloc_hook+0x59/0x310 [ 367.238295][ T8915] ? __lock_acquire+0x7d40/0x7d40 [ 367.243417][ T8915] kmem_cache_alloc_node+0x60/0x320 [ 367.248699][ T8915] ? __alloc_skb+0x103/0x2c0 [ 367.253381][ T8915] __alloc_skb+0x103/0x2c0 [ 367.257883][ T8915] netlink_sendmsg+0x66a/0xbf0 [ 367.262756][ T8915] ? netlink_getsockopt+0x590/0x590 [ 367.268059][ T8915] ? aa_sock_msg_perm+0x94/0x150 [ 367.273170][ T8915] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 367.278521][ T8915] ? security_socket_sendmsg+0x80/0xa0 [ 367.284050][ T8915] ? netlink_getsockopt+0x590/0x590 [ 367.289503][ T8915] ____sys_sendmsg+0x5ba/0x960 [ 367.294387][ T8915] ? __asan_memset+0x22/0x40 [ 367.299158][ T8915] ? __sys_sendmsg_sock+0x30/0x30 [ 367.304259][ T8915] ? __import_iovec+0x5f2/0x850 [ 367.309227][ T8915] ? import_iovec+0x73/0xa0 [ 367.313839][ T8915] ___sys_sendmsg+0x2a6/0x360 [ 367.318596][ T8915] ? get_pid_task+0x20/0x1e0 [ 367.323280][ T8915] ? __sys_sendmsg+0x2a0/0x2a0 [ 367.328198][ T8915] ? __lock_acquire+0x7d40/0x7d40 [ 367.333395][ T8915] __se_sys_sendmsg+0x1c2/0x2b0 [ 367.338328][ T8915] ? __x64_sys_sendmsg+0x80/0x80 [ 367.343407][ T8915] ? lockdep_hardirqs_on+0x98/0x150 [ 367.348701][ T8915] do_syscall_64+0x55/0xa0 [ 367.353184][ T8915] ? clear_bhb_loop+0x40/0x90 [ 367.357946][ T8915] ? clear_bhb_loop+0x40/0x90 [ 367.362733][ T8915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.368706][ T8915] RIP: 0033:0x7f52cb59cdd9 [ 367.373203][ T8915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.392877][ T8915] RSP: 002b:00007f52cc379028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.401382][ T8915] RAX: ffffffffffffffda RBX: 00007f52cb816090 RCX: 00007f52cb59cdd9 [ 367.409515][ T8915] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 367.417578][ T8915] RBP: 00007f52cc379090 R08: 0000000000000000 R09: 0000000000000000 [ 367.425614][ T8915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.433656][ T8915] R13: 00007f52cb816128 R14: 00007f52cb816090 R15: 00007ffd6473f9a8 [ 367.441760][ T8915] [ 367.539296][ T8919] syzkaller0: entered promiscuous mode [ 367.569743][ T8919] syzkaller0: entered allmulticast mode [ 368.575108][ T8941] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1073'. [ 370.000898][ T8926] syzkaller0: entered promiscuous mode [ 370.006474][ T8926] syzkaller0: entered allmulticast mode [ 371.907869][ T8955] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1077'. [ 372.302594][ T8961] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1078'. [ 372.983789][ T8970] netlink: 'syz.3.1083': attribute type 4 has an invalid length. [ 373.574636][ T8983] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1087'. [ 374.201915][ T8991] macvlan1: entered promiscuous mode [ 374.225377][ T8991] macvlan1: entered allmulticast mode [ 374.237180][ T8991] veth1_vlan: entered allmulticast mode [ 374.975608][ T8998] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1091'. [ 378.168541][ T9011] netlink: 'syz.2.1096': attribute type 10 has an invalid length. [ 378.178034][ T9011] syz_tun: entered promiscuous mode [ 378.198037][ T9011] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 378.263310][ T9005] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1094'. [ 378.458014][ T9014] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1097'. [ 378.917435][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.924339][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.254566][ T9025] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1100'. [ 379.277010][ T9014] syz.1.1097 (9014) used greatest stack depth: 18952 bytes left [ 379.452278][ T9030] netlink: 'syz.1.1103': attribute type 4 has an invalid length. [ 379.470852][ T9026] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1101'. [ 383.485067][ T9049] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1111'. [ 384.081129][ T9061] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1115'. [ 384.157382][ T9054] netlink: 'syz.2.1113': attribute type 4 has an invalid length. [ 384.669337][ T2979] tipc: Subscription rejected, illegal request [ 384.988844][ T9073] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1118'. [ 387.790515][ T9083] netlink: 'syz.1.1123': attribute type 12 has an invalid length. [ 387.847312][ T9083] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1123'. [ 388.677718][ T9090] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1125'. [ 389.328379][ T9100] netlink: 'syz.3.1128': attribute type 10 has an invalid length. [ 393.997069][ T9130] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1139'. [ 398.432208][ T9167] netlink: 'syz.0.1151': attribute type 21 has an invalid length. [ 398.463475][ T9167] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1151'. [ 399.169283][ T9171] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1152'. [ 401.968018][ T9188] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1159'. [ 401.987465][ T9190] netlink: 'syz.1.1160': attribute type 29 has an invalid length. [ 402.027305][ T9190] netlink: 'syz.1.1160': attribute type 29 has an invalid length. [ 402.086773][ T9191] netlink: 'syz.1.1160': attribute type 29 has an invalid length. [ 402.114088][ T9190] netlink: 'syz.1.1160': attribute type 29 has an invalid length. [ 402.150028][ T9190] netlink: 'syz.1.1160': attribute type 29 has an invalid length. [ 402.189772][ T9190] netlink: 'syz.1.1160': attribute type 29 has an invalid length. [ 402.521578][ T9203] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 402.608327][ T9203] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 403.176008][ T9212] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1167'. [ 403.513705][ T9217] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1169'. [ 404.293294][ T9223] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1171'. [ 404.489845][ T9223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.512505][ T9223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.528532][ T9223] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 404.543834][ T9223] bond0 (unregistering): Released all slaves [ 404.569802][ T9227] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1173'. [ 405.771323][ T9246] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1180'. [ 406.697483][ T9257] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1183'. [ 407.045223][ T9268] netlink: 'syz.3.1185': attribute type 1 has an invalid length. [ 407.094677][ T9268] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.1185'. [ 408.097698][ T9265] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1185'. [ 408.565176][ T9264] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1187'. [ 409.501461][ T9282] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.1192'. [ 410.457421][ T9300] FAULT_INJECTION: forcing a failure. [ 410.457421][ T9300] name failslab, interval 1, probability 0, space 0, times 0 [ 410.472962][ T9300] CPU: 0 PID: 9300 Comm: syz.0.1199 Not tainted syzkaller #0 [ 410.480393][ T9300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 410.490569][ T9300] Call Trace: [ 410.493862][ T9300] [ 410.496803][ T9300] dump_stack_lvl+0x18c/0x250 [ 410.501513][ T9300] ? show_regs_print_info+0x20/0x20 [ 410.506735][ T9300] ? load_image+0x420/0x420 [ 410.511276][ T9300] ? lockdep_hardirqs_on+0x98/0x150 [ 410.516498][ T9300] ? __might_sleep+0xe0/0xe0 [ 410.521168][ T9300] should_fail_ex+0x39d/0x4d0 [ 410.525871][ T9300] should_failslab+0x9/0x20 [ 410.530406][ T9300] slab_pre_alloc_hook+0x59/0x310 [ 410.535466][ T9300] ? apparmor_sk_alloc_security+0x77/0x100 [ 410.541298][ T9300] __kmem_cache_alloc_node+0x53/0x250 [ 410.546697][ T9300] ? apparmor_sk_alloc_security+0x77/0x100 [ 410.552519][ T9300] kmalloc_trace+0x2a/0xe0 [ 410.556960][ T9300] apparmor_sk_alloc_security+0x77/0x100 [ 410.562611][ T9300] security_sk_alloc+0x6e/0xa0 [ 410.567490][ T9300] sk_prot_alloc+0x101/0x210 [ 410.572099][ T9300] ? sk_alloc+0x24/0x360 [ 410.576359][ T9300] sk_alloc+0x3a/0x360 [ 410.580444][ T9300] ? bpf_ctx_init+0x163/0x1a0 [ 410.585144][ T9300] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 410.590881][ T9300] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 410.596281][ T9300] ? lockdep_hardirqs_on+0x98/0x150 [ 410.601498][ T9300] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 410.607666][ T9300] ? cpu_online+0x60/0x60 [ 410.612013][ T9300] ? cpu_online+0x60/0x60 [ 410.616352][ T9300] bpf_prog_test_run+0x321/0x390 [ 410.621421][ T9300] __sys_bpf+0x49d/0x890 [ 410.625770][ T9300] ? bpf_link_show_fdinfo+0x390/0x390 [ 410.631165][ T9300] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 410.637343][ T9300] __x64_sys_bpf+0x7c/0x90 [ 410.641937][ T9300] do_syscall_64+0x55/0xa0 [ 410.646371][ T9300] ? clear_bhb_loop+0x40/0x90 [ 410.651060][ T9300] ? clear_bhb_loop+0x40/0x90 [ 410.655751][ T9300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.661658][ T9300] RIP: 0033:0x7f8bea79cdd9 [ 410.666091][ T9300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.685710][ T9300] RSP: 002b:00007f8beb6fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 410.694139][ T9300] RAX: ffffffffffffffda RBX: 00007f8beaa15fa0 RCX: 00007f8bea79cdd9 [ 410.702122][ T9300] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 410.710105][ T9300] RBP: 00007f8beb6fb090 R08: 0000000000000000 R09: 0000000000000000 [ 410.718184][ T9300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.726253][ T9300] R13: 00007f8beaa16038 R14: 00007f8beaa15fa0 R15: 00007ffec99a5638 [ 410.734251][ T9300] [ 410.924489][ T9298] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1198'. [ 411.198316][ T9310] netlink: 'syz.0.1202': attribute type 1 has an invalid length. [ 411.206622][ T9310] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.1202'. [ 411.613990][ T9308] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1202'. [ 411.725225][ T9309] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1201'. [ 412.231138][ T9320] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1203'. [ 412.408359][ T9321] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1211'. [ 413.711727][ T9341] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1212'. [ 413.882241][ T9341] netlink: 'syz.2.1212': attribute type 1 has an invalid length. [ 413.916175][ T9341] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.1212'. [ 414.245942][ T9342] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1213'. [ 415.702215][ T9352] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1217'. [ 415.803610][ T9352] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.875356][ T9352] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.928459][ T9352] .` (unregistering): Released all slaves [ 416.302277][ T9354] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1218'. [ 416.386076][ T9361] FAULT_INJECTION: forcing a failure. [ 416.386076][ T9361] name failslab, interval 1, probability 0, space 0, times 0 [ 416.405559][ T9361] CPU: 0 PID: 9361 Comm: syz.0.1221 Not tainted syzkaller #0 [ 416.412992][ T9361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 416.423075][ T9361] Call Trace: [ 416.426459][ T9361] [ 416.429407][ T9361] dump_stack_lvl+0x18c/0x250 [ 416.434129][ T9361] ? show_regs_print_info+0x20/0x20 [ 416.439354][ T9361] ? load_image+0x420/0x420 [ 416.443890][ T9361] ? __might_sleep+0xe0/0xe0 [ 416.448497][ T9361] ? __lock_acquire+0x7d40/0x7d40 [ 416.453546][ T9361] should_fail_ex+0x39d/0x4d0 [ 416.458255][ T9361] should_failslab+0x9/0x20 [ 416.462792][ T9361] slab_pre_alloc_hook+0x59/0x310 [ 416.467836][ T9361] ? tomoyo_encode+0x28b/0x540 [ 416.472615][ T9361] ? tomoyo_encode+0x28b/0x540 [ 416.477395][ T9361] __kmem_cache_alloc_node+0x53/0x250 [ 416.482815][ T9361] ? tomoyo_encode+0x28b/0x540 [ 416.487685][ T9361] __kmalloc+0xa4/0x230 [ 416.491864][ T9361] tomoyo_encode+0x28b/0x540 [ 416.496478][ T9361] tomoyo_realpath_from_path+0x592/0x5d0 [ 416.502139][ T9361] tomoyo_path_number_perm+0x248/0x620 [ 416.507712][ T9361] ? tomoyo_path_number_perm+0x217/0x620 [ 416.513393][ T9361] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 416.519033][ T9361] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 416.526395][ T9361] ? __fget_files+0x28/0x4b0 [ 416.531014][ T9361] ? __fget_files+0x28/0x4b0 [ 416.535820][ T9361] security_file_ioctl+0x70/0xa0 [ 416.540870][ T9361] __se_sys_ioctl+0x48/0x170 [ 416.545486][ T9361] do_syscall_64+0x55/0xa0 [ 416.549924][ T9361] ? clear_bhb_loop+0x40/0x90 [ 416.554617][ T9361] ? clear_bhb_loop+0x40/0x90 [ 416.559316][ T9361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.565225][ T9361] RIP: 0033:0x7f8bea79cdd9 [ 416.569658][ T9361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.589471][ T9361] RSP: 002b:00007f8beb6fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.598227][ T9361] RAX: ffffffffffffffda RBX: 00007f8beaa15fa0 RCX: 00007f8bea79cdd9 [ 416.606213][ T9361] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000009 [ 416.614200][ T9361] RBP: 00007f8beb6fb090 R08: 0000000000000000 R09: 0000000000000000 [ 416.622275][ T9361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.630355][ T9361] R13: 00007f8beaa16038 R14: 00007f8beaa15fa0 R15: 00007ffec99a5638 [ 416.638360][ T9361] [ 416.667009][ T9361] ERROR: Out of memory at tomoyo_realpath_from_path. [ 416.691738][ T9361] ±ÿ: renamed from lo (while UP) [ 417.093162][ T9370] netlink: 'syz.3.1225': attribute type 3 has an invalid length. [ 417.101461][ T9370] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1225'. [ 418.311675][ T9382] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1229'. [ 418.550101][ T9386] netlink: 'syz.1.1228': attribute type 1 has an invalid length. [ 418.557908][ T9386] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.1228'. [ 418.589567][ T9383] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1228'. [ 418.838479][ T9385] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1231'. [ 420.156286][ T9385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.184226][ T9385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.220125][ T9385] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 420.248353][ T9385] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 420.271578][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.278923][ T9385] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.295226][ T9385] bond0 (unregistering): Released all slaves [ 421.089020][ T9396] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1235'. [ 421.575046][ T9411] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1238'. [ 421.688704][ T9411] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 422.808507][ T9439] delete_channel: no stack [ 422.828203][ T9439] delete_channel: no stack [ 422.861636][ T9439] delete_channel: no stack [ 422.896149][ T9439] delete_channel: no stack [ 422.976297][ T9439] delete_channel: no stack [ 422.990954][ T9439] delete_channel: no stack [ 423.030019][ T9439] delete_channel: no stack [ 423.057619][ T9439] delete_channel: no stack [ 423.089701][ T9439] delete_channel: no stack [ 423.110109][ T9439] delete_channel: no stack [ 423.124010][ T9439] delete_channel: no stack [ 423.140072][ T9439] delete_channel: no stack [ 423.334727][ T9439] delete_channel: no stack [ 423.349634][ T9439] delete_channel: no stack [ 423.356917][ T9439] delete_channel: no stack [ 423.376016][ T9439] delete_channel: no stack [ 423.391942][ T9439] delete_channel: no stack [ 423.407055][ T9439] delete_channel: no stack [ 423.419818][ T9439] delete_channel: no stack [ 423.433220][ T9439] delete_channel: no stack [ 423.448251][ T9439] delete_channel: no stack [ 423.476184][ T9439] delete_channel: no stack [ 423.499160][ T9439] delete_channel: no stack [ 423.523896][ T9439] delete_channel: no stack [ 423.544105][ T9439] delete_channel: no stack [ 423.561974][ T9439] delete_channel: no stack [ 423.589560][ T9439] delete_channel: no stack [ 423.615343][ T9439] delete_channel: no stack [ 423.645629][ T9439] delete_channel: no stack [ 423.671128][ T9439] delete_channel: no stack [ 423.675897][ T9439] delete_channel: no stack [ 423.690387][ T9439] delete_channel: no stack [ 423.702104][ T9439] delete_channel: no stack [ 423.718182][ T9439] delete_channel: no stack [ 423.729837][ T9439] delete_channel: no stack [ 423.734513][ T9439] delete_channel: no stack [ 423.739164][ T9439] delete_channel: no stack [ 423.769658][ T9439] delete_channel: no stack [ 423.774512][ T9439] delete_channel: no stack [ 423.779168][ T9439] delete_channel: no stack [ 423.789716][ T9439] delete_channel: no stack [ 423.795971][ T9439] delete_channel: no stack [ 423.805582][ T9439] delete_channel: no stack [ 423.815272][ T9439] delete_channel: no stack [ 423.825390][ T9439] delete_channel: no stack [ 423.835482][ T9439] delete_channel: no stack [ 423.846055][ T9439] delete_channel: no stack [ 423.856237][ T9439] delete_channel: no stack [ 423.867607][ T9439] delete_channel: no stack [ 423.872838][ T9439] delete_channel: no stack [ 423.877651][ T9439] delete_channel: no stack [ 423.887926][ T9439] delete_channel: no stack [ 423.894927][ T9439] delete_channel: no stack [ 423.899793][ T9439] delete_channel: no stack [ 423.904589][ T9439] delete_channel: no stack [ 423.909247][ T9439] delete_channel: no stack [ 423.921338][ T9439] delete_channel: no stack [ 423.926001][ T9439] delete_channel: no stack [ 423.936708][ T9439] delete_channel: no stack [ 423.941621][ T9439] delete_channel: no stack [ 423.947881][ T9439] delete_channel: no stack [ 423.956567][ T9439] delete_channel: no stack [ 423.962339][ T9439] delete_channel: no stack [ 423.967053][ T9439] delete_channel: no stack [ 423.977868][ T9439] delete_channel: no stack [ 424.280288][ T9455] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1250'. [ 424.306883][ T9451] netlink: 'syz.2.1252': attribute type 153 has an invalid length. [ 424.316992][ T9451] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1252'. [ 425.129899][ T9454] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1251'. [ 425.304608][ T9470] netlink: 'syz.0.1257': attribute type 10 has an invalid length. [ 425.359501][ T9470] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1257'. [ 425.482698][ T9475] netlink: 'syz.1.1259': attribute type 9 has an invalid length. [ 425.507322][ T9475] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1259'. [ 426.061310][ T9480] netlink: 'syz.1.1259': attribute type 9 has an invalid length. [ 426.107416][ T9480] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1259'. [ 426.821147][ T9497] FAULT_INJECTION: forcing a failure. [ 426.821147][ T9497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.865039][ T9497] CPU: 0 PID: 9497 Comm: syz.2.1266 Not tainted syzkaller #0 [ 426.872496][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 426.882583][ T9497] Call Trace: [ 426.885879][ T9497] [ 426.888830][ T9497] dump_stack_lvl+0x18c/0x250 [ 426.893543][ T9497] ? show_regs_print_info+0x20/0x20 [ 426.898763][ T9497] ? load_image+0x420/0x420 [ 426.903283][ T9497] ? __lock_acquire+0x7d40/0x7d40 [ 426.908494][ T9497] ? snprintf+0xe9/0x140 [ 426.912755][ T9497] should_fail_ex+0x39d/0x4d0 [ 426.917543][ T9497] _copy_to_user+0x2f/0xa0 [ 426.921978][ T9497] simple_read_from_buffer+0xe7/0x150 [ 426.927379][ T9497] proc_fail_nth_read+0x1e8/0x260 [ 426.932420][ T9497] ? proc_fault_inject_write+0x360/0x360 [ 426.938073][ T9497] ? fsnotify_perm+0x271/0x5e0 [ 426.942860][ T9497] ? proc_fault_inject_write+0x360/0x360 [ 426.948514][ T9497] vfs_read+0x28b/0x970 [ 426.952690][ T9497] ? kernel_read+0x1e0/0x1e0 [ 426.957297][ T9497] ? __fget_files+0x28/0x4b0 [ 426.961901][ T9497] ? __fget_files+0x28/0x4b0 [ 426.966509][ T9497] ? __fget_files+0x43d/0x4b0 [ 426.971211][ T9497] ? __fdget_pos+0x2a3/0x330 [ 426.975904][ T9497] ? ksys_read+0x75/0x260 [ 426.980275][ T9497] ksys_read+0x150/0x260 [ 426.984555][ T9497] ? vfs_write+0x990/0x990 [ 426.989012][ T9497] ? lockdep_hardirqs_on+0x98/0x150 [ 426.994246][ T9497] do_syscall_64+0x55/0xa0 [ 426.998691][ T9497] ? clear_bhb_loop+0x40/0x90 [ 427.003387][ T9497] ? clear_bhb_loop+0x40/0x90 [ 427.008100][ T9497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.014073][ T9497] RIP: 0033:0x7f9eb175d60e [ 427.018520][ T9497] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 427.038142][ T9497] RSP: 002b:00007f9eb25d8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 427.046579][ T9497] RAX: ffffffffffffffda RBX: 00007f9eb25d96c0 RCX: 00007f9eb175d60e [ 427.054564][ T9497] RDX: 000000000000000f RSI: 00007f9eb25d90a0 RDI: 0000000000000004 [ 427.062543][ T9497] RBP: 00007f9eb25d9090 R08: 0000000000000000 R09: 0000000000000000 [ 427.070714][ T9497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.078715][ T9497] R13: 00007f9eb1a16038 R14: 00007f9eb1a15fa0 R15: 00007ffe5073ce28 [ 427.086812][ T9497] [ 427.627858][ T9505] netlink: 'syz.0.1269': attribute type 10 has an invalid length. [ 427.642237][ T9505] team0: Device ipvlan1 failed to register rx_handler [ 428.571509][ T9525] FAULT_INJECTION: forcing a failure. [ 428.571509][ T9525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.620355][ T9525] CPU: 1 PID: 9525 Comm: syz.0.1277 Not tainted syzkaller #0 [ 428.627891][ T9525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 428.637992][ T9525] Call Trace: [ 428.641310][ T9525] [ 428.644276][ T9525] dump_stack_lvl+0x18c/0x250 [ 428.649021][ T9525] ? show_regs_print_info+0x20/0x20 [ 428.654278][ T9525] ? load_image+0x420/0x420 [ 428.658841][ T9525] ? __might_fault+0xaa/0x120 [ 428.663570][ T9525] ? __lock_acquire+0x7d40/0x7d40 [ 428.668651][ T9525] should_fail_ex+0x39d/0x4d0 [ 428.673394][ T9525] _copy_from_user+0x2f/0xe0 [ 428.678038][ T9525] ___sys_sendmsg+0x1c7/0x360 [ 428.682777][ T9525] ? __sys_sendmsg+0x2a0/0x2a0 [ 428.687611][ T9525] ? trace_call_bpf+0xc3/0x6c0 [ 428.692451][ T9525] __se_sys_sendmsg+0x1c2/0x2b0 [ 428.697350][ T9525] ? __x64_sys_sendmsg+0x80/0x80 [ 428.702349][ T9525] ? lockdep_hardirqs_on+0x98/0x150 [ 428.707589][ T9525] do_syscall_64+0x55/0xa0 [ 428.712041][ T9525] ? clear_bhb_loop+0x40/0x90 [ 428.716830][ T9525] ? clear_bhb_loop+0x40/0x90 [ 428.721551][ T9525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.727498][ T9525] RIP: 0033:0x7f8bea79cdd9 [ 428.731968][ T9525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.751638][ T9525] RSP: 002b:00007f8beb6fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.760214][ T9525] RAX: ffffffffffffffda RBX: 00007f8beaa15fa0 RCX: 00007f8bea79cdd9 [ 428.768342][ T9525] RDX: 0000000000004050 RSI: 0000200000000240 RDI: 0000000000000003 [ 428.776453][ T9525] RBP: 00007f8beb6fb090 R08: 0000000000000000 R09: 0000000000000000 [ 428.784470][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.792498][ T9525] R13: 00007f8beaa16038 R14: 00007f8beaa15fa0 R15: 00007ffec99a5638 [ 428.800546][ T9525] [ 429.150674][ T9532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1278'. [ 429.228873][ T9542] netlink: 'syz.0.1282': attribute type 3 has an invalid length. [ 429.247112][ T9542] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1282'. [ 429.582189][ T9546] netlink: 'syz.3.1283': attribute type 3 has an invalid length. [ 429.602433][ T9546] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1283'. [ 429.905335][ T9553] netlink: 'syz.2.1287': attribute type 3 has an invalid length. [ 429.939622][ T9553] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1287'. [ 432.204898][ T9588] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1299'. [ 435.546300][ T9601] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1301'. [ 436.040733][ T9623] netlink: 'syz.2.1307': attribute type 3 has an invalid length. [ 436.085987][ T9623] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1307'. [ 436.982047][ T9628] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1308'. [ 437.106398][ T9630] netlink: 'syz.2.1308': attribute type 3 has an invalid length. [ 437.119631][ T9630] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1308'. [ 437.150148][ T9629] netlink: 'syz.2.1308': attribute type 4 has an invalid length. [ 438.136412][ T9651] macvlan1: entered promiscuous mode [ 438.142112][ T9651] macvlan1: entered allmulticast mode [ 438.147540][ T9651] veth1_vlan: entered allmulticast mode [ 438.231531][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1316'. [ 438.744839][ T9660] netlink: 'syz.1.1317': attribute type 3 has an invalid length. [ 438.775829][ T9660] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1317'. [ 440.304160][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.310953][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.972142][ T9669] netlink: 'syz.2.1320': attribute type 3 has an invalid length. [ 440.980569][ T9669] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1320'. [ 441.101517][ T9675] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.1323'. [ 441.114604][ T9674] netlink: 154864 bytes leftover after parsing attributes in process `syz.3.1321'. [ 441.385102][ T9690] FAULT_INJECTION: forcing a failure. [ 441.385102][ T9690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.400902][ T9687] veth1_vlan: left allmulticast mode [ 441.428719][ T9690] CPU: 0 PID: 9690 Comm: syz.2.1326 Not tainted syzkaller #0 [ 441.436188][ T9690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 441.446308][ T9690] Call Trace: [ 441.449645][ T9690] [ 441.452640][ T9690] dump_stack_lvl+0x18c/0x250 [ 441.457415][ T9690] ? show_regs_print_info+0x20/0x20 [ 441.459569][ T9687] macvlan1: left allmulticast mode [ 441.462665][ T9690] ? load_image+0x420/0x420 [ 441.472430][ T9690] ? __lock_acquire+0x7d40/0x7d40 [ 441.477545][ T9690] ? snprintf+0xe9/0x140 [ 441.481897][ T9690] should_fail_ex+0x39d/0x4d0 [ 441.486676][ T9690] _copy_to_user+0x2f/0xa0 [ 441.491280][ T9690] simple_read_from_buffer+0xe7/0x150 [ 441.496767][ T9690] proc_fail_nth_read+0x1e8/0x260 [ 441.501883][ T9690] ? proc_fault_inject_write+0x360/0x360 [ 441.507613][ T9690] ? fsnotify_perm+0x271/0x5e0 [ 441.512468][ T9690] ? proc_fault_inject_write+0x360/0x360 [ 441.518364][ T9690] vfs_read+0x28b/0x970 [ 441.522616][ T9690] ? kernel_read+0x1e0/0x1e0 [ 441.527299][ T9690] ? __fget_files+0x28/0x4b0 [ 441.531966][ T9690] ? __fget_files+0x28/0x4b0 [ 441.536640][ T9690] ? __fget_files+0x43d/0x4b0 [ 441.541597][ T9690] ? __fdget_pos+0x2a3/0x330 [ 441.546248][ T9690] ? ksys_read+0x75/0x260 [ 441.550674][ T9690] ksys_read+0x150/0x260 [ 441.555004][ T9690] ? vfs_write+0x990/0x990 [ 441.559499][ T9690] ? lockdep_hardirqs_on+0x98/0x150 [ 441.564760][ T9690] do_syscall_64+0x55/0xa0 [ 441.569210][ T9690] ? clear_bhb_loop+0x40/0x90 [ 441.573928][ T9690] ? clear_bhb_loop+0x40/0x90 [ 441.578754][ T9690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.584696][ T9690] RIP: 0033:0x7f9eb175d60e [ 441.589162][ T9690] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 441.608896][ T9690] RSP: 002b:00007f9eb25d8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 441.617437][ T9690] RAX: ffffffffffffffda RBX: 00007f9eb25d96c0 RCX: 00007f9eb175d60e [ 441.625616][ T9690] RDX: 000000000000000f RSI: 00007f9eb25d90a0 RDI: 0000000000000006 [ 441.633622][ T9690] RBP: 00007f9eb25d9090 R08: 0000000000000000 R09: 0000000000000000 [ 441.641624][ T9690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 441.649630][ T9690] R13: 00007f9eb1a16038 R14: 00007f9eb1a15fa0 R15: 00007ffe5073ce28 [ 441.657681][ T9690] [ 442.608045][ T9707] FAULT_INJECTION: forcing a failure. [ 442.608045][ T9707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.621765][ T9707] CPU: 1 PID: 9707 Comm: syz.0.1331 Not tainted syzkaller #0 [ 442.629279][ T9707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 442.639383][ T9707] Call Trace: [ 442.642697][ T9707] [ 442.645646][ T9707] dump_stack_lvl+0x18c/0x250 [ 442.650353][ T9707] ? show_regs_print_info+0x20/0x20 [ 442.655573][ T9707] ? load_image+0x420/0x420 [ 442.660107][ T9707] ? __might_fault+0xaa/0x120 [ 442.664800][ T9707] ? __lock_acquire+0x7d40/0x7d40 [ 442.669937][ T9707] should_fail_ex+0x39d/0x4d0 [ 442.674642][ T9707] _copy_from_iter+0x1d9/0x12e0 [ 442.679517][ T9707] ? __virt_addr_valid+0x18c/0x540 [ 442.684649][ T9707] ? __lock_acquire+0x7d40/0x7d40 [ 442.689698][ T9707] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 442.695097][ T9707] ? copyout_mc+0x70/0x70 [ 442.699453][ T9707] ? __virt_addr_valid+0x18c/0x540 [ 442.704576][ T9707] ? __virt_addr_valid+0x18c/0x540 [ 442.709703][ T9707] ? __virt_addr_valid+0x469/0x540 [ 442.714827][ T9707] ? __check_object_size+0x506/0xa20 [ 442.720127][ T9707] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 442.725866][ T9707] ? skb_put+0x11b/0x210 [ 442.730132][ T9707] unix_stream_sendmsg+0x562/0xbf0 [ 442.735272][ T9707] ? unix_show_fdinfo+0x270/0x270 [ 442.740304][ T9707] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 442.746735][ T9707] ? aa_sock_msg_perm+0x94/0x150 [ 442.751689][ T9707] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 442.756986][ T9707] ? security_socket_sendmsg+0x80/0xa0 [ 442.762470][ T9707] ? unix_show_fdinfo+0x270/0x270 [ 442.767509][ T9707] ____sys_sendmsg+0x5ba/0x960 [ 442.772291][ T9707] ? __asan_memset+0x22/0x40 [ 442.776899][ T9707] ? __sys_sendmsg_sock+0x30/0x30 [ 442.781934][ T9707] ? __import_iovec+0x5f2/0x850 [ 442.786804][ T9707] ? import_iovec+0x73/0xa0 [ 442.791320][ T9707] ___sys_sendmsg+0x2a6/0x360 [ 442.796015][ T9707] ? get_pid_task+0x20/0x1e0 [ 442.800629][ T9707] ? __sys_sendmsg+0x2a0/0x2a0 [ 442.805423][ T9707] ? __lock_acquire+0x7d40/0x7d40 [ 442.810482][ T9707] __se_sys_sendmsg+0x1c2/0x2b0 [ 442.815439][ T9707] ? __x64_sys_sendmsg+0x80/0x80 [ 442.820497][ T9707] ? lockdep_hardirqs_on+0x98/0x150 [ 442.825721][ T9707] do_syscall_64+0x55/0xa0 [ 442.830150][ T9707] ? clear_bhb_loop+0x40/0x90 [ 442.834840][ T9707] ? clear_bhb_loop+0x40/0x90 [ 442.839532][ T9707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.845440][ T9707] RIP: 0033:0x7f8bea79cdd9 [ 442.849874][ T9707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.869599][ T9707] RSP: 002b:00007f8beb6fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.878055][ T9707] RAX: ffffffffffffffda RBX: 00007f8beaa15fa0 RCX: 00007f8bea79cdd9 [ 442.886217][ T9707] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 442.894219][ T9707] RBP: 00007f8beb6fb090 R08: 0000000000000000 R09: 0000000000000000 [ 442.902207][ T9707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.910190][ T9707] R13: 00007f8beaa16038 R14: 00007f8beaa15fa0 R15: 00007ffec99a5638 [ 442.918254][ T9707] [ 443.070558][ T9718] FAULT_INJECTION: forcing a failure. [ 443.070558][ T9718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.104458][ T9718] CPU: 0 PID: 9718 Comm: syz.0.1335 Not tainted syzkaller #0 [ 443.111916][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 443.122101][ T9718] Call Trace: [ 443.125421][ T9718] [ 443.128391][ T9718] dump_stack_lvl+0x18c/0x250 [ 443.133147][ T9718] ? show_regs_print_info+0x20/0x20 [ 443.138422][ T9718] ? load_image+0x420/0x420 [ 443.142994][ T9718] ? __might_fault+0xaa/0x120 [ 443.147725][ T9718] ? __lock_acquire+0x7d40/0x7d40 [ 443.152827][ T9718] should_fail_ex+0x39d/0x4d0 [ 443.157564][ T9718] _copy_from_user+0x2f/0xe0 [ 443.162210][ T9718] csum_and_copy_from_iter+0x1f3/0x14a0 [ 443.167902][ T9718] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 443.173578][ T9718] ? __kmem_cache_alloc_node+0x13a/0x250 [ 443.179352][ T9718] ? __alloc_skb+0x138/0x2c0 [ 443.183988][ T9718] ? rcu_is_watching+0x15/0xb0 [ 443.188789][ T9718] ip_generic_getfrag+0x163/0x2f0 [ 443.193848][ T9718] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 443.198777][ T9718] ? skb_put+0x11b/0x210 [ 443.203065][ T9718] __ip_append_data+0x2f11/0x3d40 [ 443.208169][ T9718] ? raw_send_hdrinc+0x1170/0x1170 [ 443.213319][ T9718] ? mark_lock+0x94/0x320 [ 443.217674][ T9718] ? ip_setup_cork+0x860/0x860 [ 443.222454][ T9718] ? ip_setup_cork+0x530/0x860 [ 443.227238][ T9718] ip_append_data+0x10d/0x180 [ 443.232040][ T9718] ? raw_send_hdrinc+0x1170/0x1170 [ 443.237225][ T9718] raw_sendmsg+0x15c1/0x1c00 [ 443.241857][ T9718] ? compat_raw_ioctl+0x70/0x70 [ 443.246752][ T9718] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 443.253185][ T9718] ? sock_rps_record_flow+0x19/0x3f0 [ 443.258498][ T9718] ? inet_sendmsg+0x7c/0x2f0 [ 443.263127][ T9718] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 443.268462][ T9718] ? security_socket_sendmsg+0x80/0xa0 [ 443.273954][ T9718] ? inet_send_prepare+0x260/0x260 [ 443.279106][ T9718] ____sys_sendmsg+0x5ba/0x960 [ 443.283928][ T9718] ? __lock_acquire+0x7d40/0x7d40 [ 443.288993][ T9718] ? __sys_sendmsg_sock+0x30/0x30 [ 443.294057][ T9718] ? __import_iovec+0x5f2/0x850 [ 443.298940][ T9718] ? import_iovec+0x73/0xa0 [ 443.303468][ T9718] ___sys_sendmsg+0x2a6/0x360 [ 443.308201][ T9718] ? get_pid_task+0x20/0x1e0 [ 443.312826][ T9718] ? __sys_sendmsg+0x2a0/0x2a0 [ 443.317625][ T9718] ? __lock_acquire+0x7d40/0x7d40 [ 443.322689][ T9718] __se_sys_sendmsg+0x1c2/0x2b0 [ 443.327558][ T9718] ? __x64_sys_sendmsg+0x80/0x80 [ 443.332614][ T9718] ? lockdep_hardirqs_on+0x98/0x150 [ 443.337837][ T9718] do_syscall_64+0x55/0xa0 [ 443.342266][ T9718] ? clear_bhb_loop+0x40/0x90 [ 443.347034][ T9718] ? clear_bhb_loop+0x40/0x90 [ 443.351729][ T9718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.357646][ T9718] RIP: 0033:0x7f8bea79cdd9 [ 443.362076][ T9718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.381699][ T9718] RSP: 002b:00007f8beb6fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.390141][ T9718] RAX: ffffffffffffffda RBX: 00007f8beaa15fa0 RCX: 00007f8bea79cdd9 [ 443.398137][ T9718] RDX: 0000000000000004 RSI: 0000200000001000 RDI: 0000000000000003 [ 443.406148][ T9718] RBP: 00007f8beb6fb090 R08: 0000000000000000 R09: 0000000000000000 [ 443.414151][ T9718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 443.422141][ T9718] R13: 00007f8beaa16038 R14: 00007f8beaa15fa0 R15: 00007ffec99a5638 [ 443.430237][ T9718] [ 446.005773][ T9731] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1338'. [ 447.450309][ T9761] FAULT_INJECTION: forcing a failure. [ 447.450309][ T9761] name failslab, interval 1, probability 0, space 0, times 0 [ 447.499688][ T9761] CPU: 0 PID: 9761 Comm: syz.2.1347 Not tainted syzkaller #0 [ 447.501039][ T9754] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1346'. [ 447.507123][ T9761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 447.507140][ T9761] Call Trace: [ 447.507149][ T9761] [ 447.507159][ T9761] dump_stack_lvl+0x18c/0x250 [ 447.507218][ T9761] ? show_regs_print_info+0x20/0x20 [ 447.507248][ T9761] ? load_image+0x420/0x420 [ 447.507278][ T9761] ? __might_sleep+0xe0/0xe0 [ 447.507303][ T9761] ? __lock_acquire+0x7d40/0x7d40 [ 447.507332][ T9761] should_fail_ex+0x39d/0x4d0 [ 447.507366][ T9761] should_failslab+0x9/0x20 [ 447.507392][ T9761] slab_pre_alloc_hook+0x59/0x310 [ 447.507424][ T9761] ? apparmor_sk_alloc_security+0x77/0x100 [ 447.507450][ T9761] __kmem_cache_alloc_node+0x53/0x250 [ 447.507481][ T9761] ? apparmor_sk_alloc_security+0x77/0x100 [ 447.507506][ T9761] kmalloc_trace+0x2a/0xe0 [ 447.507534][ T9761] apparmor_sk_alloc_security+0x77/0x100 [ 447.507560][ T9761] security_sk_alloc+0x6e/0xa0 [ 447.507587][ T9761] sk_prot_alloc+0x101/0x210 [ 447.507611][ T9761] ? sk_alloc+0x24/0x360 [ 447.507639][ T9761] sk_alloc+0x3a/0x360 [ 447.507662][ T9761] ? bpf_ctx_init+0x163/0x1a0 [ 447.507681][ T9761] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 447.507708][ T9761] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 447.507728][ T9761] ? __fget_files+0x28/0x4b0 [ 447.507750][ T9761] ? __fget_files+0x28/0x4b0 [ 447.507796][ T9761] ? __fget_files+0x43d/0x4b0 [ 447.507835][ T9761] ? cpu_online+0x60/0x60 [ 447.507857][ T9761] bpf_prog_test_run+0x321/0x390 [ 447.507884][ T9761] __sys_bpf+0x49d/0x890 [ 447.507909][ T9761] ? bpf_link_show_fdinfo+0x390/0x390 [ 447.507956][ T9761] ? lock_chain_count+0x20/0x20 [ 447.507989][ T9761] __x64_sys_bpf+0x7c/0x90 [ 447.508011][ T9761] do_syscall_64+0x55/0xa0 [ 447.508028][ T9761] ? clear_bhb_loop+0x40/0x90 [ 447.508051][ T9761] ? clear_bhb_loop+0x40/0x90 [ 447.508076][ T9761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.508099][ T9761] RIP: 0033:0x7f9eb179cdd9 [ 447.508119][ T9761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.508135][ T9761] RSP: 002b:00007f9eb25b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 447.508159][ T9761] RAX: ffffffffffffffda RBX: 00007f9eb1a16090 RCX: 00007f9eb179cdd9 [ 447.508174][ T9761] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 447.508186][ T9761] RBP: 00007f9eb25b8090 R08: 0000000000000000 R09: 0000000000000000 [ 447.508200][ T9761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.508212][ T9761] R13: 00007f9eb1a16128 R14: 00007f9eb1a16090 R15: 00007ffe5073ce28 [ 447.508246][ T9761] [ 447.659949][ T9756] netlink: 'syz.3.1346': attribute type 29 has an invalid length. [ 447.877475][ T9756] netlink: 'syz.3.1346': attribute type 29 has an invalid length. [ 447.904398][ T9754] netlink: 'syz.3.1346': attribute type 29 has an invalid length. [ 447.977965][ T9765] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.1349'. [ 448.053045][ T9756] netlink: 'syz.3.1346': attribute type 29 has an invalid length. [ 448.846382][ T9776] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1351'. [ 448.942313][ T9772] syzkaller0: entered promiscuous mode [ 448.947945][ T9772] syzkaller0: entered allmulticast mode [ 453.466314][ T9803] netlink: 'syz.0.1359': attribute type 10 has an invalid length. [ 453.562325][ T9803] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1359'. [ 454.314481][ T9814] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.1362'. [ 454.669036][ T9821] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1364'. [ 454.999964][ T9831] netlink: 'syz.2.1366': attribute type 10 has an invalid length. [ 455.039700][ T9831] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.1366'. [ 455.054138][ T9831] openvswitch: netlink: Flow key attr not present in new flow. [ 455.506427][ T9829] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1367'. [ 456.907098][ T5776] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 457.421172][ T9852] syzkaller0: entered promiscuous mode [ 457.442295][ T9852] syzkaller0: entered allmulticast mode [ 457.872873][ T9841] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1368'. [ 459.506856][ T9841] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 459.515857][ T9841] CPU: 1 PID: 9841 Comm: syz.3.1368 Not tainted syzkaller #0 [ 459.523280][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 459.533373][ T9841] Call Trace: [ 459.536671][ T9841] [ 459.539622][ T9841] dump_stack_lvl+0x18c/0x250 [ 459.544334][ T9841] ? show_regs_print_info+0x20/0x20 [ 459.549566][ T9841] ? load_image+0x420/0x420 [ 459.554109][ T9841] sysfs_warn_dup+0x8e/0xa0 [ 459.558625][ T9841] sysfs_do_create_link_sd+0xc0/0x110 [ 459.564015][ T9841] device_add_class_symlinks+0x1cf/0x240 [ 459.569671][ T9841] device_add+0x507/0xc20 [ 459.574022][ T9841] wiphy_register+0x1dad/0x2ae0 [ 459.578922][ T9841] ? cfg80211_event_work+0x40/0x40 [ 459.584050][ T9841] ? minstrel_ht_alloc+0x88a/0x990 [ 459.589199][ T9841] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 459.595311][ T9841] ieee80211_register_hw+0x3464/0x4250 [ 459.600812][ T9841] ? ieee80211_tasklet_handler+0x20/0x20 [ 459.606469][ T9841] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 459.612386][ T9841] ? __debug_object_init+0xec/0x450 [ 459.617610][ T9841] ? __asan_memset+0x22/0x40 [ 459.622216][ T9841] ? __hrtimer_init+0x186/0x270 [ 459.627094][ T9841] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 459.632914][ T9841] ? mac80211_hwsim_free+0x220/0x220 [ 459.638214][ T9841] ? rcu_is_watching+0x15/0xb0 [ 459.643005][ T9841] ? kstrndup+0xbd/0x140 [ 459.647280][ T9841] hwsim_new_radio_nl+0xdc9/0x1a90 [ 459.652518][ T9841] ? __nla_validate+0x50/0x50 [ 459.657219][ T9841] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 459.663228][ T9841] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 459.669656][ T9841] ? lockdep_hardirqs_on+0x98/0x150 [ 459.674873][ T9841] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 459.681058][ T9841] ? __nla_parse+0x40/0x50 [ 459.685502][ T9841] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 459.691903][ T9841] genl_family_rcv_msg_doit+0x211/0x310 [ 459.697559][ T9841] ? end_current_label_crit_section+0x170/0x170 [ 459.703825][ T9841] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 459.709745][ T9841] ? bpf_lsm_capable+0x9/0x10 [ 459.714532][ T9841] ? security_capable+0x89/0xb0 [ 459.719436][ T9841] genl_rcv_msg+0x619/0x7a0 [ 459.723966][ T9841] ? genl_bind+0x360/0x360 [ 459.728405][ T9841] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 459.734754][ T9841] ? perf_trace_lock+0xfc/0x3b0 [ 459.739633][ T9841] netlink_rcv_skb+0x241/0x4d0 [ 459.744457][ T9841] ? genl_bind+0x360/0x360 [ 459.748974][ T9841] ? netlink_ack+0x1180/0x1180 [ 459.753773][ T9841] ? __lock_acquire+0x7d40/0x7d40 [ 459.758825][ T9841] ? down_read+0x1ac/0x2e0 [ 459.763267][ T9841] genl_rcv+0x28/0x40 [ 459.767288][ T9841] netlink_unicast+0x751/0x8d0 [ 459.772167][ T9841] netlink_sendmsg+0x8d0/0xbf0 [ 459.776975][ T9841] ? lockdep_hardirqs_on+0x98/0x150 [ 459.782211][ T9841] ? netlink_getsockopt+0x590/0x590 [ 459.787452][ T9841] ? netlink_getsockopt+0x590/0x590 [ 459.792695][ T9841] ? netlink_getsockopt+0x590/0x590 [ 459.797932][ T9841] ____sys_sendmsg+0x5ba/0x960 [ 459.802752][ T9841] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 459.809404][ T9841] ? __asan_memset+0x22/0x40 [ 459.814053][ T9841] ? __sys_sendmsg_sock+0x30/0x30 [ 459.819102][ T9841] ? __import_iovec+0x5f2/0x850 [ 459.824000][ T9841] ? import_iovec+0x73/0xa0 [ 459.828541][ T9841] ___sys_sendmsg+0x2a6/0x360 [ 459.833254][ T9841] ? __fget_files+0x28/0x4b0 [ 459.837889][ T9841] ? __sys_sendmsg+0x2a0/0x2a0 [ 459.842682][ T9841] ? perf_trace_preemptirq_template+0xac/0x330 [ 459.848924][ T9841] __se_sys_sendmsg+0x1c2/0x2b0 [ 459.853818][ T9841] ? __x64_sys_sendmsg+0x80/0x80 [ 459.858806][ T9841] ? syscall_enter_from_user_mode+0x2e/0x80 [ 459.864736][ T9841] do_syscall_64+0x55/0xa0 [ 459.869179][ T9841] ? clear_bhb_loop+0x40/0x90 [ 459.873874][ T9841] ? clear_bhb_loop+0x40/0x90 [ 459.878577][ T9841] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.884493][ T9841] RIP: 0033:0x7f4effd9cdd9 [ 459.888927][ T9841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.908549][ T9841] RSP: 002b:00007f4efdfd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.916980][ T9841] RAX: ffffffffffffffda RBX: 00007f4f00016090 RCX: 00007f4effd9cdd9 [ 459.924969][ T9841] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 459.932970][ T9841] RBP: 00007f4effe32d69 R08: 0000000000000000 R09: 0000000000000000 [ 459.940954][ T9841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.948942][ T9841] R13: 00007f4f00016128 R14: 00007f4f00016090 R15: 00007ffd87cb4f68 [ 459.956949][ T9841] [ 460.378527][ T9871] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1378'. [ 460.678512][ T9883] netlink: 'syz.0.1381': attribute type 10 has an invalid length. [ 460.699554][ T9883] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.1381'. [ 460.731753][ T9883] openvswitch: netlink: Flow key attr not present in new flow. [ 460.746342][ T9885] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1383'. [ 461.224730][ T9885] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1383'. [ 461.235904][ T9887] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1383'. [ 461.309657][ T9873] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1379'. [ 465.005226][ T9921] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1394'. [ 465.040401][ T9921] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1394'. [ 465.204661][ T9917] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1395'. [ 465.366186][ T9926] netlink: 'syz.1.1396': attribute type 10 has an invalid length. [ 465.376646][ T9926] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.1396'. [ 465.413555][ T9926] openvswitch: netlink: Flow key attr not present in new flow. [ 465.724384][ T9921] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1394'. [ 465.845209][ T9920] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1393'. [ 469.517479][ T9949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1405'. [ 469.527506][ T9949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1405'. [ 469.733376][ T9954] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1405'. [ 469.826465][ T9953] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1406'. [ 472.377265][ T9956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.532287][ T9966] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1407'. [ 473.176303][ T9970] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1413'. [ 473.620997][ T9979] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1416'. [ 474.189586][ T9989] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1417'. [ 474.219941][ T9989] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1417'. [ 474.442748][ T9985] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1418'. [ 474.492620][ T9989] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1417'. [ 474.588324][ T9993] IPv6: NLM_F_CREATE should be specified when creating new route [ 474.679732][ T9993] FAULT_INJECTION: forcing a failure. [ 474.679732][ T9993] name failslab, interval 1, probability 0, space 0, times 0 [ 474.737892][ T9993] CPU: 1 PID: 9993 Comm: syz.3.1420 Not tainted syzkaller #0 [ 474.745441][ T9993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 474.755552][ T9993] Call Trace: [ 474.758873][ T9993] [ 474.761853][ T9993] dump_stack_lvl+0x18c/0x250 [ 474.766595][ T9993] ? show_regs_print_info+0x20/0x20 [ 474.771853][ T9993] ? load_image+0x420/0x420 [ 474.776421][ T9993] ? __might_sleep+0xe0/0xe0 [ 474.781065][ T9993] ? __lock_acquire+0x7d40/0x7d40 [ 474.786136][ T9993] ? __asan_memset+0x22/0x40 [ 474.790792][ T9993] should_fail_ex+0x39d/0x4d0 [ 474.795621][ T9993] should_failslab+0x9/0x20 [ 474.800173][ T9993] slab_pre_alloc_hook+0x59/0x310 [ 474.805258][ T9993] ? fib6_info_alloc+0x30/0xf0 [ 474.810086][ T9993] ? fib6_info_alloc+0x30/0xf0 [ 474.814906][ T9993] __kmem_cache_alloc_node+0x53/0x250 [ 474.820435][ T9993] ? fib6_info_alloc+0x30/0xf0 [ 474.825253][ T9993] __kmalloc+0xa4/0x230 [ 474.829475][ T9993] fib6_info_alloc+0x30/0xf0 [ 474.834143][ T9993] ip6_route_info_create+0x44f/0x1240 [ 474.839574][ T9993] ? nla_memcpy+0x59/0xb0 [ 474.843967][ T9993] ? nla_find+0x12a/0x150 [ 474.848611][ T9993] inet6_rtm_newroute+0x5ae/0x1c90 [ 474.853812][ T9993] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 474.859817][ T9993] ? rcu_is_watching+0x15/0xb0 [ 474.864632][ T9993] ? trace_contention_end+0x39/0xe0 [ 474.870030][ T9993] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 474.875192][ T9993] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 474.880352][ T9993] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 474.886299][ T9993] rtnetlink_rcv_msg+0x869/0xfa0 [ 474.891307][ T9993] ? rtnetlink_bind+0x80/0x80 [ 474.896035][ T9993] ? preempt_schedule_common+0x82/0xc0 [ 474.901551][ T9993] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 474.907411][ T9993] ? preempt_schedule+0xc0/0xd0 [ 474.912321][ T9993] ? schedule_preempt_disabled+0x20/0x20 [ 474.918092][ T9993] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 474.924203][ T9993] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 474.930164][ T9993] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 474.936197][ T9993] ? _raw_spin_unlock+0x40/0x40 [ 474.941125][ T9993] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 474.946999][ T9993] ? perf_trace_lock+0x304/0x3b0 [ 474.952185][ T9993] netlink_rcv_skb+0x241/0x4d0 [ 474.957159][ T9993] ? rtnetlink_bind+0x80/0x80 [ 474.961909][ T9993] ? netlink_ack+0x1180/0x1180 [ 474.966776][ T9993] ? __lock_acquire+0x7d40/0x7d40 [ 474.971982][ T9993] ? __rcu_read_unlock+0x7c/0xd0 [ 474.977159][ T9993] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.982516][ T9993] netlink_unicast+0x751/0x8d0 [ 474.987365][ T9993] netlink_sendmsg+0x8d0/0xbf0 [ 474.992181][ T9993] ? perf_trace_lock+0x304/0x3b0 [ 474.997187][ T9993] ? netlink_getsockopt+0x590/0x590 [ 475.002452][ T9993] ? aa_sock_msg_perm+0x94/0x150 [ 475.007495][ T9993] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 475.012840][ T9993] ? security_socket_sendmsg+0x80/0xa0 [ 475.018347][ T9993] ? netlink_getsockopt+0x590/0x590 [ 475.023613][ T9993] ____sys_sendmsg+0x5ba/0x960 [ 475.028439][ T9993] ? __asan_memset+0x22/0x40 [ 475.033083][ T9993] ? __sys_sendmsg_sock+0x30/0x30 [ 475.038148][ T9993] ? __import_iovec+0x3fa/0x850 [ 475.043173][ T9993] ? import_iovec+0x73/0xa0 [ 475.047733][ T9993] ___sys_sendmsg+0x2a6/0x360 [ 475.052474][ T9993] ? __sys_sendmsg+0x2a0/0x2a0 [ 475.057336][ T9993] ? __lock_acquire+0x7d40/0x7d40 [ 475.062492][ T9993] __se_sys_sendmsg+0x1c2/0x2b0 [ 475.067422][ T9993] ? __x64_sys_sendmsg+0x80/0x80 [ 475.072460][ T9993] ? lockdep_hardirqs_on+0x98/0x150 [ 475.077731][ T9993] do_syscall_64+0x55/0xa0 [ 475.082194][ T9993] ? clear_bhb_loop+0x40/0x90 [ 475.086949][ T9993] ? clear_bhb_loop+0x40/0x90 [ 475.091687][ T9993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.097639][ T9993] RIP: 0033:0x7f4effd9cdd9 [ 475.102108][ T9993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.121832][ T9993] RSP: 002b:00007f4efdff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.130302][ T9993] RAX: ffffffffffffffda RBX: 00007f4f00015fa0 RCX: 00007f4effd9cdd9 [ 475.138325][ T9993] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 475.146434][ T9993] RBP: 00007f4efdff6090 R08: 0000000000000000 R09: 0000000000000000 [ 475.154461][ T9993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.162495][ T9993] R13: 00007f4f00016038 R14: 00007f4f00015fa0 R15: 00007ffd87cb4f68 [ 475.170648][ T9993] [ 477.037320][T10000] netlink: 196796 bytes leftover after parsing attributes in process `syz.1.1422'. [ 477.828781][T10008] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1427'. [ 478.277559][T10020] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1428'. [ 478.656863][T10022] netlink: 'syz.2.1430': attribute type 4 has an invalid length. [ 478.675398][T10022] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1430'. [ 479.648808][T10045] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1435'. [ 480.603092][T10059] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1442'. [ 480.989006][T10057] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1441'. [ 481.793138][T10079] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1448'. [ 482.133082][T10081] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1449'. [ 483.228926][T10100] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1454'. [ 483.510029][T10108] netlink: 'syz.1.1457': attribute type 25 has an invalid length. [ 484.721619][T10122] syzkaller0: entered promiscuous mode [ 484.728666][T10122] syzkaller0: entered allmulticast mode [ 489.271892][T10146] : renamed from veth0_to_bond (while UP) [ 489.284616][T10147] netlink: 'syz.1.1469': attribute type 21 has an invalid length. [ 489.294308][T10147] IPv6: NLM_F_CREATE should be specified when creating new route [ 489.950487][T10182] netlink: 'syz.2.1483': attribute type 10 has an invalid length. [ 489.988948][T10182] team0: Device hsr_slave_0 failed to register rx_handler [ 490.219578][T10184] netlink: 'syz.1.1484': attribute type 29 has an invalid length. [ 490.272548][T10184] netlink: 'syz.1.1484': attribute type 29 has an invalid length. [ 490.965339][T10199] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1488'. [ 491.696712][T10206] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1489'. [ 492.044524][T10223] netlink: 'syz.1.1497': attribute type 29 has an invalid length. [ 492.061802][T10223] netlink: 'syz.1.1497': attribute type 29 has an invalid length. [ 492.070418][T10223] netlink: 'syz.1.1497': attribute type 29 has an invalid length. [ 492.079536][T10223] netlink: 'syz.1.1497': attribute type 29 has an invalid length. [ 492.088618][T10223] FAULT_INJECTION: forcing a failure. [ 492.088618][T10223] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 492.103080][T10223] CPU: 0 PID: 10223 Comm: syz.1.1497 Not tainted syzkaller #0 [ 492.110689][T10223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 492.120890][T10223] Call Trace: [ 492.124293][T10223] [ 492.127345][T10223] dump_stack_lvl+0x18c/0x250 [ 492.132103][T10223] ? show_regs_print_info+0x20/0x20 [ 492.137357][T10223] ? load_image+0x420/0x420 [ 492.141918][T10223] ? __lock_acquire+0x7d40/0x7d40 [ 492.146997][T10223] ? mark_lock+0x94/0x320 [ 492.151387][T10223] should_fail_ex+0x39d/0x4d0 [ 492.156092][T10223] prepare_alloc_pages+0x1e2/0x5f0 [ 492.161234][T10223] __alloc_pages+0x134/0x460 [ 492.165858][T10223] ? zone_statistics+0x170/0x170 [ 492.170848][T10223] ? do_wp_page+0x7ca/0x35f0 [ 492.175461][T10223] ? do_wp_page+0xfc5/0x35f0 [ 492.180078][T10223] __folio_alloc+0x10/0x20 [ 492.184509][T10223] vma_alloc_folio+0x47a/0x8f0 [ 492.189300][T10223] do_wp_page+0x1243/0x35f0 [ 492.193858][T10223] ? folio_put+0xd0/0xd0 [ 492.198115][T10223] ? do_raw_spin_lock+0x11f/0x2c0 [ 492.203247][T10223] ? __rwlock_init+0x150/0x150 [ 492.208037][T10223] handle_mm_fault+0x135d/0x4c00 [ 492.212995][T10223] ? handle_mm_fault+0xe7/0x4c00 [ 492.217963][T10223] ? numa_migrate_prep+0x350/0x350 [ 492.223118][T10223] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 492.228414][T10223] do_user_addr_fault+0x730/0x12c0 [ 492.233581][T10223] exc_page_fault+0x64/0x100 [ 492.238274][T10223] asm_exc_page_fault+0x26/0x30 [ 492.243163][T10223] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 492.248989][T10223] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 492.268610][T10223] RSP: 0018:ffffc90005237630 EFLAGS: 00050206 [ 492.274695][T10223] RAX: ffffffff8427ca01 RBX: 0000000000000d88 RCX: 00000000000006c8 [ 492.282680][T10223] RDX: 0000000000000000 RSI: ffff88807ac7c7a0 RDI: 0000200000004000 [ 492.290666][T10223] RBP: ffffc900052377c0 R08: ffff88807ac7ce67 R09: 1ffff1100f58f9cc [ 492.298647][T10223] R10: dffffc0000000000 R11: ffffed100f58f9cd R12: 00002000000046c8 [ 492.306626][T10223] R13: ffffc90005237e40 R14: 0000200000003940 R15: ffff88807ac7c0e0 [ 492.314615][T10223] ? copyout+0x1/0x90 [ 492.318672][T10223] copyout+0x70/0x90 [ 492.322591][T10223] _copy_to_iter+0x432/0x1120 [ 492.327295][T10223] ? iov_iter_init+0x1e0/0x1e0 [ 492.332075][T10223] ? __virt_addr_valid+0x18c/0x540 [ 492.337198][T10223] ? __virt_addr_valid+0x469/0x540 [ 492.342328][T10223] ? __phys_addr_symbol+0x2f/0x70 [ 492.347378][T10223] __skb_datagram_iter+0xdb/0x780 [ 492.352535][T10223] ? skb_copy_datagram_iter+0x200/0x200 [ 492.358314][T10223] skb_copy_datagram_iter+0xb1/0x200 [ 492.363633][T10223] netlink_recvmsg+0x2d4/0xe60 [ 492.368448][T10223] ? netlink_sendmsg+0xbf0/0xbf0 [ 492.373428][T10223] ? aa_af_perm+0x330/0x330 [ 492.378132][T10223] ? __lock_acquire+0x1273/0x7d40 [ 492.383180][T10223] ? verify_lock_unused+0x140/0x140 [ 492.388405][T10223] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 492.393715][T10223] ? security_socket_recvmsg+0x89/0xb0 [ 492.399201][T10223] ? netlink_sendmsg+0xbf0/0xbf0 [ 492.404167][T10223] ____sys_recvmsg+0x2ce/0x5e0 [ 492.409048][T10223] ? __sys_recvmsg_sock+0x50/0x50 [ 492.414112][T10223] ? import_iovec+0x73/0xa0 [ 492.418640][T10223] ___sys_recvmsg+0x216/0x590 [ 492.423364][T10223] ? __sys_recvmsg+0x2a0/0x2a0 [ 492.428151][T10223] ? ksys_write+0x1c4/0x260 [ 492.432829][T10223] ? __fget_files+0x43d/0x4b0 [ 492.437573][T10223] __x64_sys_recvmsg+0x20c/0x2e0 [ 492.442580][T10223] ? ___sys_recvmsg+0x590/0x590 [ 492.447557][T10223] ? lockdep_hardirqs_on+0x98/0x150 [ 492.452783][T10223] do_syscall_64+0x55/0xa0 [ 492.457232][T10223] ? clear_bhb_loop+0x40/0x90 [ 492.462010][T10223] ? clear_bhb_loop+0x40/0x90 [ 492.466700][T10223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.472611][T10223] RIP: 0033:0x7f52cb59cdd9 [ 492.477072][T10223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.496716][T10223] RSP: 002b:00007f52cc39a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 492.505335][T10223] RAX: ffffffffffffffda RBX: 00007f52cb815fa0 RCX: 00007f52cb59cdd9 [ 492.513606][T10223] RDX: 0000000000000002 RSI: 0000200000001c80 RDI: 0000000000000003 [ 492.521599][T10223] RBP: 00007f52cc39a090 R08: 0000000000000000 R09: 0000000000000000 [ 492.529595][T10223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.537636][T10223] R13: 00007f52cb816038 R14: 00007f52cb815fa0 R15: 00007ffd6473f9a8 [ 492.545642][T10223] [ 492.560014][T10223] netlink: 'syz.1.1497': attribute type 29 has an invalid length. [ 492.796093][T10234] netlink: 'syz.0.1501': attribute type 29 has an invalid length. [ 492.858078][T10231] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1500'. [ 494.190560][T10247] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1504'. [ 494.517385][T10254] FAULT_INJECTION: forcing a failure. [ 494.517385][T10254] name failslab, interval 1, probability 0, space 0, times 0 [ 494.669264][T10254] CPU: 1 PID: 10254 Comm: syz.2.1507 Not tainted syzkaller #0 [ 494.676802][T10254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 494.676820][T10254] Call Trace: [ 494.676831][T10254] [ 494.676841][T10254] dump_stack_lvl+0x18c/0x250 [ 494.676875][T10254] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 494.676903][T10254] ? show_regs_print_info+0x20/0x20 [ 494.676931][T10254] ? load_image+0x420/0x420 [ 494.676970][T10254] should_fail_ex+0x39d/0x4d0 [ 494.677003][T10254] should_failslab+0x9/0x20 [ 494.677030][T10254] slab_pre_alloc_hook+0x59/0x310 [ 494.677059][T10254] ? apparmor_sk_alloc_security+0x77/0x100 [ 494.677086][T10254] __kmem_cache_alloc_node+0x53/0x250 [ 494.677116][T10254] ? apparmor_sk_alloc_security+0x77/0x100 [ 494.677139][T10254] kmalloc_trace+0x2a/0xe0 [ 494.677168][T10254] apparmor_sk_alloc_security+0x77/0x100 [ 494.677194][T10254] security_sk_alloc+0x6e/0xa0 [ 494.677220][T10254] sk_prot_alloc+0x101/0x210 [ 494.677243][T10254] ? sk_alloc+0x24/0x360 [ 494.677268][T10254] sk_alloc+0x3a/0x360 [ 494.677297][T10254] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 494.677319][T10254] ? __fget_files+0x28/0x4b0 [ 494.677341][T10254] ? __fget_files+0x28/0x4b0 [ 494.677366][T10254] ? __fget_files+0x43d/0x4b0 [ 494.677400][T10254] ? cpu_online+0x60/0x60 [ 494.677422][T10254] bpf_prog_test_run+0x321/0x390 [ 494.677447][T10254] __sys_bpf+0x49d/0x890 [ 494.677471][T10254] ? bpf_link_show_fdinfo+0x390/0x390 [ 494.677506][T10254] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 494.677544][T10254] __x64_sys_bpf+0x7c/0x90 [ 494.822717][T10254] do_syscall_64+0x55/0xa0 [ 494.827191][T10254] ? clear_bhb_loop+0x40/0x90 [ 494.831923][T10254] ? clear_bhb_loop+0x40/0x90 [ 494.836658][T10254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.842684][T10254] RIP: 0033:0x7f9eb179cdd9 [ 494.847131][T10254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.866797][T10254] RSP: 002b:00007f9eb25d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 494.875257][T10254] RAX: ffffffffffffffda RBX: 00007f9eb1a15fa0 RCX: 00007f9eb179cdd9 [ 494.883265][T10254] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 494.891276][T10254] RBP: 00007f9eb25d9090 R08: 0000000000000000 R09: 0000000000000000 [ 494.899321][T10254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.907353][T10254] R13: 00007f9eb1a16038 R14: 00007f9eb1a15fa0 R15: 00007ffe5073ce28 [ 494.915603][T10254] [ 495.254489][T10264] FAULT_INJECTION: forcing a failure. [ 495.254489][T10264] name failslab, interval 1, probability 0, space 0, times 0 [ 495.296301][T10264] CPU: 0 PID: 10264 Comm: syz.0.1510 Not tainted syzkaller #0 [ 495.303857][T10264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 495.313955][T10264] Call Trace: [ 495.317275][T10264] [ 495.320232][T10264] dump_stack_lvl+0x18c/0x250 [ 495.324936][T10264] ? show_regs_print_info+0x20/0x20 [ 495.330263][T10264] ? load_image+0x420/0x420 [ 495.334844][T10264] ? __might_sleep+0xe0/0xe0 [ 495.339494][T10264] ? __lock_acquire+0x7d40/0x7d40 [ 495.344577][T10264] should_fail_ex+0x39d/0x4d0 [ 495.349318][T10264] should_failslab+0x9/0x20 [ 495.353868][T10264] slab_pre_alloc_hook+0x59/0x310 [ 495.358952][T10264] ? apparmor_sk_alloc_security+0x77/0x100 [ 495.364821][T10264] __kmem_cache_alloc_node+0x53/0x250 [ 495.370252][T10264] ? apparmor_sk_alloc_security+0x77/0x100 [ 495.376118][T10264] kmalloc_trace+0x2a/0xe0 [ 495.380603][T10264] apparmor_sk_alloc_security+0x77/0x100 [ 495.386296][T10264] security_sk_alloc+0x6e/0xa0 [ 495.391129][T10264] sk_prot_alloc+0x101/0x210 [ 495.395889][T10264] ? sk_alloc+0x24/0x360 [ 495.400197][T10264] sk_alloc+0x3a/0x360 [ 495.404309][T10264] ? bpf_ctx_init+0x163/0x1a0 [ 495.409048][T10264] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 495.414726][T10264] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 495.420236][T10264] ? __fget_files+0x28/0x4b0 [ 495.424959][T10264] ? __fget_files+0x28/0x4b0 [ 495.429595][T10264] ? __fget_files+0x43d/0x4b0 [ 495.434336][T10264] ? cpu_online+0x60/0x60 [ 495.438712][T10264] bpf_prog_test_run+0x321/0x390 [ 495.443693][T10264] __sys_bpf+0x49d/0x890 [ 495.447979][T10264] ? bpf_link_show_fdinfo+0x390/0x390 [ 495.453411][T10264] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 495.459621][T10264] __x64_sys_bpf+0x7c/0x90 [ 495.464163][T10264] do_syscall_64+0x55/0xa0 [ 495.468618][T10264] ? clear_bhb_loop+0x40/0x90 [ 495.473429][T10264] ? clear_bhb_loop+0x40/0x90 [ 495.478158][T10264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.484099][T10264] RIP: 0033:0x7f8bea79cdd9 [ 495.488551][T10264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.508385][T10264] RSP: 002b:00007f8beb6fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 495.516858][T10264] RAX: ffffffffffffffda RBX: 00007f8beaa15fa0 RCX: 00007f8bea79cdd9 [ 495.524885][T10264] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 495.532985][T10264] RBP: 00007f8beb6fb090 R08: 0000000000000000 R09: 0000000000000000 [ 495.540999][T10264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.549009][T10264] R13: 00007f8beaa16038 R14: 00007f8beaa15fa0 R15: 00007ffec99a5638 [ 495.557039][T10264] [ 495.597497][T10272] sctp: [Deprecated]: syz.2.1511 (pid 10272) Use of int in maxseg socket option. [ 495.597497][T10272] Use struct sctp_assoc_value instead [ 496.185925][T10284] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1518'. [ 496.930630][T10289] veth1_macvtap: entered promiscuous mode [ 496.945885][T10290] veth1_macvtap: left promiscuous mode [ 496.966432][T10297] validate_nla: 5 callbacks suppressed [ 496.966452][T10297] netlink: 'syz.3.1522': attribute type 21 has an invalid length. [ 497.023746][T10297] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1522'. [ 497.043872][T10297] netlink: 'syz.3.1522': attribute type 5 has an invalid length. [ 497.057855][T10297] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1522'. [ 497.914522][T10323] netlink: 'syz.2.1533': attribute type 9 has an invalid length. [ 497.931910][T10323] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1533'. [ 498.214102][T10331] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1532'. [ 498.310329][T10331] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1532'. [ 498.348092][T10326] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1534'. [ 500.153811][T10321] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1532'. [ 500.259929][T10335] C: renamed from team_slave_0 (while UP) [ 502.318025][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.324612][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.348900][T10335] netlink: 'syz.1.1536': attribute type 3 has an invalid length. [ 502.377652][T10335] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1536'. [ 502.398142][T10335] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 504.433073][T10381] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1548'. [ 504.670210][T10383] netlink: 'syz.0.1549': attribute type 19 has an invalid length. [ 504.789154][T10384] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1547'. [ 504.799608][T10383] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.1549'. [ 505.045111][T10388] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1550'. [ 506.458397][T10407] sctp: [Deprecated]: syz.3.1556 (pid 10407) Use of int in maxseg socket option. [ 506.458397][T10407] Use struct sctp_assoc_value instead [ 507.182331][T10416] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.1559'. [ 507.455279][T10416] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1559'. [ 507.479479][T10416] tc_dump_action: action bad kind [ 508.307380][T10422] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1561'. [ 509.302121][T10436] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1565'. [ 510.300871][T10447] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1569'. [ 513.507836][T10462] netlink: 'syz.3.1573': attribute type 10 has an invalid length. [ 513.553938][T10462] netlink: 'syz.3.1573': attribute type 11 has an invalid length. [ 513.603636][T10462] netlink: 'syz.3.1573': attribute type 11 has an invalid length. [ 513.652047][T10462] netlink: 'syz.3.1573': attribute type 11 has an invalid length. [ 513.729913][T10462] netlink: 'syz.3.1573': attribute type 11 has an invalid length. [ 513.737809][T10462] netlink: 'syz.3.1573': attribute type 11 has an invalid length. [ 513.789476][T10462] netlink: 'syz.3.1573': attribute type 11 has an invalid length. [ 513.797371][T10462] netlink: 'syz.3.1573': attribute type 11 has an invalid length. [ 513.843909][T10462] netlink: 'syz.3.1573': attribute type 11 has an invalid length. [ 513.860012][T10462] netlink: 'syz.3.1573': attribute type 11 has an invalid length. [ 513.979555][T10462] netlink: 'syz.3.1573': attribute type 11 has an invalid length. [ 513.987833][T10462] netlink: 'syz.3.1573': attribute type 4 has an invalid length. [ 514.069581][T10462] netlink: 'syz.3.1573': attribute type 5 has an invalid length. [ 514.099653][T10462] netlink: 208556 bytes leftover after parsing attributes in process `syz.3.1573'. [ 517.037431][T10493] FAULT_INJECTION: forcing a failure. [ 517.037431][T10493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.078665][T10493] CPU: 1 PID: 10493 Comm: syz.3.1582 Not tainted syzkaller #0 [ 517.086206][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 517.096311][T10493] Call Trace: [ 517.099642][T10493] [ 517.102619][T10493] dump_stack_lvl+0x18c/0x250 [ 517.107379][T10493] ? show_regs_print_info+0x20/0x20 [ 517.112644][T10493] ? load_image+0x420/0x420 [ 517.117204][T10493] ? __might_fault+0xaa/0x120 [ 517.121925][T10493] ? __lock_acquire+0x7d40/0x7d40 [ 517.127004][T10493] ? __might_fault+0xaa/0x120 [ 517.131746][T10493] should_fail_ex+0x39d/0x4d0 [ 517.136500][T10493] _copy_from_iter+0x1d9/0x12e0 [ 517.141418][T10493] ? __might_fault+0xaa/0x120 [ 517.146210][T10493] ? _copy_from_iter+0x24e/0x12e0 [ 517.151291][T10493] ? __virt_addr_valid+0x18c/0x540 [ 517.156470][T10493] ? __lock_acquire+0x7d40/0x7d40 [ 517.161547][T10493] ? copyout_mc+0x70/0x70 [ 517.165956][T10493] ? copyout_mc+0x70/0x70 [ 517.170350][T10493] ? __virt_addr_valid+0x18c/0x540 [ 517.175530][T10493] ? page_copy_sane+0x16a/0x270 [ 517.180448][T10493] copy_page_from_iter+0x7b/0x100 [ 517.185711][T10493] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 517.191569][T10493] tun_get_user+0x15db/0x3ca0 [ 517.196293][T10493] ? aa_file_perm+0x11b/0xee0 [ 517.201015][T10493] ? rcu_read_unlock+0xa0/0xa0 [ 517.205827][T10493] ? tun_get+0x1c/0x2e0 [ 517.210007][T10493] ? __lock_acquire+0x7d40/0x7d40 [ 517.215066][T10493] ? tun_get+0x1c/0x2e0 [ 517.219262][T10493] tun_chr_write_iter+0x119/0x200 [ 517.224320][T10493] vfs_write+0x46c/0x990 [ 517.228634][T10493] ? file_end_write+0x250/0x250 [ 517.233523][T10493] ? __fget_files+0x43d/0x4b0 [ 517.238247][T10493] ? __fdget_pos+0x1d8/0x330 [ 517.242858][T10493] ? ksys_write+0x75/0x260 [ 517.247306][T10493] ksys_write+0x150/0x260 [ 517.251671][T10493] ? __ia32_sys_read+0x90/0x90 [ 517.256467][T10493] ? lockdep_hardirqs_on+0x98/0x150 [ 517.261696][T10493] do_syscall_64+0x55/0xa0 [ 517.266133][T10493] ? clear_bhb_loop+0x40/0x90 [ 517.270840][T10493] ? clear_bhb_loop+0x40/0x90 [ 517.275550][T10493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 517.281469][T10493] RIP: 0033:0x7f4effd9cdd9 [ 517.285909][T10493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.305556][T10493] RSP: 002b:00007f4efdff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 517.314000][T10493] RAX: ffffffffffffffda RBX: 00007f4f00015fa0 RCX: 00007f4effd9cdd9 [ 517.322014][T10493] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 517.330015][T10493] RBP: 00007f4efdff6090 R08: 0000000000000000 R09: 0000000000000000 [ 517.338010][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.346021][T10493] R13: 00007f4f00016038 R14: 00007f4f00015fa0 R15: 00007ffd87cb4f68 [ 517.354043][T10493] [ 517.483741][T10495] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1581'. [ 517.929632][T10495] team0: Port device C removed [ 517.998717][T10495] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 518.162062][T10505] tap0: tun_chr_ioctl cmd 1074025677 [ 518.167620][T10505] tap0: linktype set to 780 [ 518.636272][T10515] FAULT_INJECTION: forcing a failure. [ 518.636272][T10515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.689754][T10515] CPU: 0 PID: 10515 Comm: syz.0.1589 Not tainted syzkaller #0 [ 518.697299][T10515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 518.707390][T10515] Call Trace: [ 518.710715][T10515] [ 518.713699][T10515] dump_stack_lvl+0x18c/0x250 [ 518.718426][T10515] ? show_regs_print_info+0x20/0x20 [ 518.723672][T10515] ? load_image+0x420/0x420 [ 518.728217][T10515] ? __lock_acquire+0x7d40/0x7d40 [ 518.733280][T10515] ? snprintf+0xe9/0x140 [ 518.737571][T10515] should_fail_ex+0x39d/0x4d0 [ 518.742306][T10515] _copy_to_user+0x2f/0xa0 [ 518.746768][T10515] simple_read_from_buffer+0xe7/0x150 [ 518.752198][T10515] proc_fail_nth_read+0x1e8/0x260 [ 518.757269][T10515] ? proc_fault_inject_write+0x360/0x360 [ 518.762962][T10515] ? fsnotify_perm+0x271/0x5e0 [ 518.767771][T10515] ? proc_fault_inject_write+0x360/0x360 [ 518.773452][T10515] vfs_read+0x28b/0x970 [ 518.777667][T10515] ? kernel_read+0x1e0/0x1e0 [ 518.782292][T10515] ? __fget_files+0x28/0x4b0 [ 518.786987][T10515] ? __fget_files+0x28/0x4b0 [ 518.791594][T10515] ? __fget_files+0x43d/0x4b0 [ 518.796300][T10515] ? __fdget_pos+0x2a3/0x330 [ 518.801036][T10515] ? ksys_read+0x75/0x260 [ 518.805393][T10515] ksys_read+0x150/0x260 [ 518.809662][T10515] ? vfs_write+0x990/0x990 [ 518.814103][T10515] ? lockdep_hardirqs_on+0x98/0x150 [ 518.819319][T10515] do_syscall_64+0x55/0xa0 [ 518.823757][T10515] ? clear_bhb_loop+0x40/0x90 [ 518.828446][T10515] ? clear_bhb_loop+0x40/0x90 [ 518.833143][T10515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.839134][T10515] RIP: 0033:0x7f8bea75d60e [ 518.843564][T10515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 518.863303][T10515] RSP: 002b:00007f8beb6b8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 518.871752][T10515] RAX: ffffffffffffffda RBX: 00007f8beb6b96c0 RCX: 00007f8bea75d60e [ 518.879736][T10515] RDX: 000000000000000f RSI: 00007f8beb6b90a0 RDI: 0000000000000015 [ 518.887720][T10515] RBP: 00007f8beb6b9090 R08: 0000000000000000 R09: 0000000000000000 [ 518.895709][T10515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.903712][T10515] R13: 00007f8beaa16218 R14: 00007f8beaa16180 R15: 00007ffec99a5638 [ 518.911924][T10515] [ 519.918224][T10533] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1594'. [ 520.718279][T10542] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1597'. [ 521.240864][T10542] team0: Port device team_slave_0 removed [ 521.287664][T10542] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 522.066161][T10560] netlink: 'syz.1.1606': attribute type 10 has an invalid length. [ 522.159724][T10560] team0: Device hsr_slave_0 failed to register rx_handler [ 522.482510][T10563] netlink: 'syz.3.1607': attribute type 10 has an invalid length. [ 523.031025][T10563] team0: Port device wlan1 added [ 523.534003][T10571] netlink: 'syz.3.1609': attribute type 10 has an invalid length. [ 523.542431][T10575] netlink: 151448 bytes leftover after parsing attributes in process `syz.0.1610'. [ 523.565293][T10575] openvswitch: netlink: Flow key attribute not present in set flow. [ 523.594202][T10571] team0: Device hsr_slave_0 failed to register rx_handler [ 524.271700][T10584] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1613'. [ 524.850197][T10592] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1616'. [ 525.630743][T10592] team0: Port device C removed [ 525.636820][T10592] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 526.540910][T10618] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1624'. [ 527.882338][T10645] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1633'. [ 527.906542][T10645] openvswitch: netlink: Key type 29 is not supported [ 527.936066][T10645] netlink: 'syz.0.1633': attribute type 25 has an invalid length. [ 527.961631][T10645] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.1633'. [ 528.014883][T10645] netlink: 'syz.0.1633': attribute type 10 has an invalid length. [ 528.217257][T10645] bridge_slave_1: left allmulticast mode [ 528.255083][T10645] bridge_slave_1: left promiscuous mode [ 528.265292][T10645] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.393645][T10646] netlink: 'syz.0.1633': attribute type 21 has an invalid length. [ 528.408900][T10644] netlink: 'syz.1.1632': attribute type 10 has an invalid length. [ 528.449998][T10644] hsr_slave_0: left promiscuous mode [ 528.507242][T10644] hsr_slave_1: left promiscuous mode [ 529.220990][T10666] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1638'. [ 529.891439][T10674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1640'. [ 530.437838][T10688] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.1645'. [ 530.672458][T10696] FAULT_INJECTION: forcing a failure. [ 530.672458][T10696] name failslab, interval 1, probability 0, space 0, times 0 [ 530.726046][T10696] CPU: 0 PID: 10696 Comm: syz.1.1647 Not tainted syzkaller #0 [ 530.733606][T10696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 530.743716][T10696] Call Trace: [ 530.747015][T10696] [ 530.749950][T10696] dump_stack_lvl+0x18c/0x250 [ 530.755263][T10696] ? show_regs_print_info+0x20/0x20 [ 530.760473][T10696] ? load_image+0x420/0x420 [ 530.764985][T10696] ? __might_sleep+0xe0/0xe0 [ 530.769586][T10696] ? __lock_acquire+0x7d40/0x7d40 [ 530.774610][T10696] should_fail_ex+0x39d/0x4d0 [ 530.779307][T10696] should_failslab+0x9/0x20 [ 530.783857][T10696] slab_pre_alloc_hook+0x59/0x310 [ 530.788900][T10696] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 530.794454][T10696] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 530.800031][T10696] __kmem_cache_alloc_node+0x53/0x250 [ 530.805419][T10696] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 530.810979][T10696] __kmalloc+0xa4/0x230 [ 530.815141][T10696] bpf_prog_test_run_skb+0x238/0x12b0 [ 530.820515][T10696] ? __fget_files+0x28/0x4b0 [ 530.825123][T10696] ? __fget_files+0x28/0x4b0 [ 530.829807][T10696] ? __fget_files+0x43d/0x4b0 [ 530.834516][T10696] ? cpu_online+0x60/0x60 [ 530.838876][T10696] bpf_prog_test_run+0x321/0x390 [ 530.843924][T10696] __sys_bpf+0x49d/0x890 [ 530.848197][T10696] ? bpf_link_show_fdinfo+0x390/0x390 [ 530.853602][T10696] ? lock_chain_count+0x20/0x20 [ 530.858459][T10696] __x64_sys_bpf+0x7c/0x90 [ 530.862961][T10696] do_syscall_64+0x55/0xa0 [ 530.867379][T10696] ? clear_bhb_loop+0x40/0x90 [ 530.872066][T10696] ? clear_bhb_loop+0x40/0x90 [ 530.876749][T10696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.882744][T10696] RIP: 0033:0x7f52cb59cdd9 [ 530.887161][T10696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.906870][T10696] RSP: 002b:00007f52cc379028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 530.915413][T10696] RAX: ffffffffffffffda RBX: 00007f52cb816090 RCX: 00007f52cb59cdd9 [ 530.923484][T10696] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 530.931467][T10696] RBP: 00007f52cc379090 R08: 0000000000000000 R09: 0000000000000000 [ 530.939469][T10696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.947493][T10696] R13: 00007f52cb816128 R14: 00007f52cb816090 R15: 00007ffd6473f9a8 [ 530.955499][T10696] [ 535.284799][T10746] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1665'. [ 535.745528][T10753] FAULT_INJECTION: forcing a failure. [ 535.745528][T10753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.774059][T10753] CPU: 0 PID: 10753 Comm: syz.3.1667 Not tainted syzkaller #0 [ 535.781600][T10753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 535.791694][T10753] Call Trace: [ 535.795006][T10753] [ 535.797973][T10753] dump_stack_lvl+0x18c/0x250 [ 535.802706][T10753] ? show_regs_print_info+0x20/0x20 [ 535.807957][T10753] ? load_image+0x420/0x420 [ 535.812503][T10753] ? __might_fault+0xaa/0x120 [ 535.817216][T10753] ? __lock_acquire+0x7d40/0x7d40 [ 535.822406][T10753] should_fail_ex+0x39d/0x4d0 [ 535.827137][T10753] _copy_to_user+0x2f/0xa0 [ 535.831596][T10753] bpf_test_finish+0x25a/0x650 [ 535.836404][T10753] ? convert___skb_to_skb+0x590/0x590 [ 535.841885][T10753] ? convert_skb_to___skb+0x420/0x420 [ 535.847314][T10753] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 535.852718][T10753] ? cpu_online+0x60/0x60 [ 535.857066][T10753] bpf_prog_test_run+0x321/0x390 [ 535.862031][T10753] __sys_bpf+0x49d/0x890 [ 535.866466][T10753] ? bpf_link_show_fdinfo+0x390/0x390 [ 535.871865][T10753] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.878046][T10753] __x64_sys_bpf+0x7c/0x90 [ 535.882499][T10753] do_syscall_64+0x55/0xa0 [ 535.886961][T10753] ? clear_bhb_loop+0x40/0x90 [ 535.891675][T10753] ? clear_bhb_loop+0x40/0x90 [ 535.896380][T10753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.902295][T10753] RIP: 0033:0x7f4effd9cdd9 [ 535.906810][T10753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.926540][T10753] RSP: 002b:00007f4efdff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 535.934977][T10753] RAX: ffffffffffffffda RBX: 00007f4f00015fa0 RCX: 00007f4effd9cdd9 [ 535.942965][T10753] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 535.950959][T10753] RBP: 00007f4efdff6090 R08: 0000000000000000 R09: 0000000000000000 [ 535.958947][T10753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.967020][T10753] R13: 00007f4f00016038 R14: 00007f4f00015fa0 R15: 00007ffd87cb4f68 [ 535.975047][T10753] [ 539.877228][T10795] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1679'. [ 540.120374][T10792] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1678'. [ 543.035489][T10806] FAULT_INJECTION: forcing a failure. [ 543.035489][T10806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.079491][T10806] CPU: 0 PID: 10806 Comm: syz.1.1683 Not tainted syzkaller #0 [ 543.087051][T10806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.097330][T10806] Call Trace: [ 543.100802][T10806] [ 543.103775][T10806] dump_stack_lvl+0x18c/0x250 [ 543.108511][T10806] ? show_regs_print_info+0x20/0x20 [ 543.113765][T10806] ? load_image+0x420/0x420 [ 543.118316][T10806] ? __might_fault+0xaa/0x120 [ 543.123042][T10806] ? __lock_acquire+0x7d40/0x7d40 [ 543.128158][T10806] should_fail_ex+0x39d/0x4d0 [ 543.132952][T10806] _copy_to_user+0x2f/0xa0 [ 543.137417][T10806] wext_handle_ioctl+0x14d/0x1d0 [ 543.142411][T10806] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 543.148614][T10806] ? call_commit_handler+0xf0/0xf0 [ 543.153799][T10806] sock_ioctl+0x15d/0x7e0 [ 543.158181][T10806] ? sock_poll+0x3e0/0x3e0 [ 543.162652][T10806] ? security_file_ioctl+0x42/0xa0 [ 543.167894][T10806] ? bpf_lsm_file_ioctl+0x9/0x10 [ 543.172877][T10806] ? security_file_ioctl+0x80/0xa0 [ 543.178035][T10806] ? sock_poll+0x3e0/0x3e0 [ 543.182494][T10806] __se_sys_ioctl+0xfd/0x170 [ 543.187132][T10806] do_syscall_64+0x55/0xa0 [ 543.191592][T10806] ? clear_bhb_loop+0x40/0x90 [ 543.196293][T10806] ? clear_bhb_loop+0x40/0x90 [ 543.201006][T10806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.206938][T10806] RIP: 0033:0x7f52cb59cdd9 [ 543.211492][T10806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.231155][T10806] RSP: 002b:00007f52cc39a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.239606][T10806] RAX: ffffffffffffffda RBX: 00007f52cb815fa0 RCX: 00007f52cb59cdd9 [ 543.247769][T10806] RDX: 0000200000000040 RSI: 0000000000008b07 RDI: 0000000000000008 [ 543.255758][T10806] RBP: 00007f52cc39a090 R08: 0000000000000000 R09: 0000000000000000 [ 543.264088][T10806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.272070][T10806] R13: 00007f52cb816038 R14: 00007f52cb815fa0 R15: 00007ffd6473f9a8 [ 543.280175][T10806] [ 543.287692][T10812] syzkaller0: entered promiscuous mode [ 543.293289][T10812] syzkaller0: entered allmulticast mode [ 543.378811][T10812] netlink: 'syz.0.1684': attribute type 7 has an invalid length. [ 544.068284][T10830] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1690'. [ 546.261798][T10844] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1695'. [ 546.805743][T10854] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1700'. [ 547.414320][T10862] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1702'. [ 548.527195][T10884] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1709'. [ 549.521145][T10913] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1718'. [ 550.537792][T10916] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1719'. [ 551.586353][T10945] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1728'. [ 551.929661][ T5776] Bluetooth: hci3: ISO packet for unknown connection handle 2574 [ 552.649593][T10958] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1731'. [ 557.678790][T10988] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1743'. [ 558.442147][T10997] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1746'. [ 562.243883][T11027] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1757'. [ 562.881644][T11034] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1759'. [ 563.226870][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.233548][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.736237][T11051] netlink: 'syz.1.1762': attribute type 10 has an invalid length. [ 566.219404][T11051] .`: (slave dummy0): Enslaving as an active interface with an up link [ 566.288222][T11040] netlink: 'syz.1.1762': attribute type 9 has an invalid length. [ 566.296708][T11040] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1762'. [ 567.912952][T11075] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1771'. [ 568.588145][T11089] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1776'. [ 571.502676][T11104] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 572.862506][T11115] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1785'. [ 574.821959][T11124] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1787'. [ 576.226300][T11133] syzkaller0: entered promiscuous mode [ 576.237876][T11133] syzkaller0: entered allmulticast mode [ 576.573837][T11140] À: port 1(75¿) entered blocking state [ 576.637999][T11140] À: port 1(75¿) entered disabled state [ 576.662280][T11140] ¿: entered allmulticast mode [ 576.667258][T11140] veth0_vlan: entered allmulticast mode [ 576.681930][T11140] ¿: entered promiscuous mode [ 577.000541][T11150] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1796'. [ 579.361129][T11174] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1800'. [ 579.439989][T11171] netlink: 'syz.0.1798': attribute type 21 has an invalid length. [ 579.479561][T11171] netlink: 14530 bytes leftover after parsing attributes in process `syz.0.1798'. [ 582.942534][T11199] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1810'. [ 583.353081][T11207] netlink: 'syz.1.1813': attribute type 21 has an invalid length. [ 583.371245][T11207] netlink: 'syz.1.1813': attribute type 4 has an invalid length. [ 583.392799][T11207] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1813'. [ 583.636109][T11204] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1812'. [ 588.093138][T11256] FAULT_INJECTION: forcing a failure. [ 588.093138][T11256] name failslab, interval 1, probability 0, space 0, times 0 [ 588.106391][T11256] CPU: 0 PID: 11256 Comm: syz.3.1826 Not tainted syzkaller #0 [ 588.113876][T11256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 588.123954][T11256] Call Trace: [ 588.127272][T11256] [ 588.130244][T11256] dump_stack_lvl+0x18c/0x250 [ 588.134985][T11256] ? show_regs_print_info+0x20/0x20 [ 588.140236][T11256] ? load_image+0x420/0x420 [ 588.144803][T11256] ? mark_lock+0x94/0x320 [ 588.149181][T11256] ? __lock_acquire+0x1347/0x7d40 [ 588.154263][T11256] should_fail_ex+0x39d/0x4d0 [ 588.159087][T11256] should_failslab+0x9/0x20 [ 588.163637][T11256] slab_pre_alloc_hook+0x59/0x310 [ 588.165073][T11254] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1823'. [ 588.169054][T11256] kmem_cache_alloc+0x5a/0x2d0 [ 588.183446][T11256] ? radix_tree_node_alloc+0x7e/0x3a0 [ 588.188888][T11256] radix_tree_node_alloc+0x7e/0x3a0 [ 588.194135][T11256] idr_get_free+0x2b3/0xa60 [ 588.198695][T11256] idr_alloc_cyclic+0x27b/0x5d0 [ 588.203599][T11256] ? idr_alloc+0x2f0/0x2f0 [ 588.208062][T11256] ? do_raw_spin_lock+0x11f/0x2c0 [ 588.213224][T11256] ? __radix_tree_preload+0x82/0x880 [ 588.218557][T11256] ? bpf_link_prime+0x4c/0x1d0 [ 588.223539][T11256] bpf_link_prime+0x6b/0x1d0 [ 588.228178][T11256] bpf_xdp_link_attach+0x260/0x730 [ 588.233341][T11256] ? dev_xdp_prog+0x100/0x100 [ 588.238067][T11256] ? __lock_acquire+0x7d40/0x7d40 [ 588.243165][T11256] ? __fget_files+0x43d/0x4b0 [ 588.248302][T11256] ? attach_type_to_prog_type+0x330/0x3a0 [ 588.254073][T11256] ? bpf_prog_attach_check_attach_type+0x2d8/0x440 [ 588.260628][T11256] link_create+0x3ff/0x720 [ 588.265138][T11256] __sys_bpf+0x4d7/0x890 [ 588.269420][T11256] ? bpf_link_show_fdinfo+0x390/0x390 [ 588.274851][T11256] ? lock_chain_count+0x20/0x20 [ 588.279757][T11256] __x64_sys_bpf+0x7c/0x90 [ 588.284227][T11256] do_syscall_64+0x55/0xa0 [ 588.288941][T11256] ? clear_bhb_loop+0x40/0x90 [ 588.293907][T11256] ? clear_bhb_loop+0x40/0x90 [ 588.298715][T11256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 588.304648][T11256] RIP: 0033:0x7f4effd9cdd9 [ 588.309189][T11256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.328954][T11256] RSP: 002b:00007f4efdff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 588.337415][T11256] RAX: ffffffffffffffda RBX: 00007f4f00015fa0 RCX: 00007f4effd9cdd9 [ 588.345511][T11256] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 588.353532][T11256] RBP: 00007f4efdff6090 R08: 0000000000000000 R09: 0000000000000000 [ 588.361549][T11256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.369645][T11256] R13: 00007f4f00016038 R14: 00007f4f00015fa0 R15: 00007ffd87cb4f68 [ 588.377677][T11256] [ 589.034375][T11259] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1827'. [ 591.249360][T11269] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1832'. [ 594.354472][T11290] netlink: 'syz.2.1836': attribute type 21 has an invalid length. [ 594.371254][T11290] netlink: 14530 bytes leftover after parsing attributes in process `syz.2.1836'. [ 597.905232][T11303] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1841'. [ 608.691765][T11346] ------------[ cut here ]------------ [ 608.697309][T11346] WARNING: CPU: 0 PID: 11346 at kernel/events/core.c:6808 perf_pending_task+0x35c/0x470 [ 608.707556][T11346] Modules linked in: [ 608.712002][T11346] CPU: 0 PID: 11346 Comm: syz.1.1856 Not tainted syzkaller #0 [ 608.719959][T11346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 608.730210][T11346] RIP: 0010:perf_pending_task+0x35c/0x470 [ 608.735995][T11346] Code: ff 84 db 75 14 e8 64 d8 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 50 d8 d5 ff e8 cb 53 4f ff eb e5 e8 44 d8 d5 ff <0f> 0b e9 f3 fe ff ff e8 38 d8 d5 ff 48 c7 c7 70 f4 1c 8d 4c 89 f6 [ 608.755932][T11346] RSP: 0018:ffffc9000cfc79c0 EFLAGS: 00010293 [ 608.762306][T11346] RAX: ffffffff81b149bc RBX: ffff88807a924770 RCX: ffff88802c341e00 [ 608.770558][T11346] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 608.778570][T11346] RBP: 0000000000000001 R08: ffffffff8e8b15ef R09: 1ffffffff1d162bd [ 608.786643][T11346] R10: dffffc0000000000 R11: fffffbfff1d162be R12: ffff88802c341e00 [ 608.794854][T11346] R13: ffff8880257de530 R14: ffff88807a924530 R15: 1ffff1100f5248a6 [ 608.803095][T11346] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 608.812444][T11346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 608.819045][T11346] CR2: 00007f4efdfd59a0 CR3: 000000002153a000 CR4: 00000000003506f0 [ 608.827216][T11346] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 608.835266][T11346] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 608.843337][T11346] Call Trace: [ 608.846639][T11346] [ 608.849767][T11346] task_work_run+0x1d4/0x260 [ 608.854421][T11346] ? task_work_cancel+0x220/0x220 [ 608.859622][T11346] do_exit+0x95a/0x2460 [ 608.863835][T11346] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 608.869757][T11346] ? put_task_struct+0xc0/0xc0 [ 608.874569][T11346] ? perf_trace_preemptirq_template+0x269/0x330 [ 608.881032][T11346] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 608.887064][T11346] ? lock_chain_count+0x20/0x20 [ 608.892015][T11346] ? _raw_spin_lock_irq+0xbb/0xf0 [ 608.897087][T11346] do_group_exit+0x21b/0x2d0 [ 608.901773][T11346] ? lockdep_hardirqs_on+0x98/0x150 [ 608.907306][T11346] get_signal+0x12fc/0x13f0 [ 608.912168][T11346] arch_do_signal_or_restart+0xc2/0x800 [ 608.917800][T11346] ? get_sigframe_size+0x20/0x20 [ 608.923051][T11346] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 608.929404][T11346] ? exit_to_user_mode_loop+0x3b/0x110 [ 608.935000][T11346] exit_to_user_mode_loop+0x70/0x110 [ 608.940375][T11346] exit_to_user_mode_prepare+0xee/0x180 [ 608.945958][T11346] syscall_exit_to_user_mode+0x1a/0x50 [ 608.951540][T11346] do_syscall_64+0x61/0xa0 [ 608.955999][T11346] ? clear_bhb_loop+0x40/0x90 [ 608.960820][T11346] ? clear_bhb_loop+0x40/0x90 [ 608.965552][T11346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 608.971565][T11346] RIP: 0033:0x7f52cb59cdd9 [ 608.976191][T11346] Code: Unable to access opcode bytes at 0x7f52cb59cdaf. [ 608.983342][T11346] RSP: 002b:00007f52cc39a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 608.991966][T11346] RAX: fffffffffffffe00 RBX: 00007f52cb815fa8 RCX: 00007f52cb59cdd9 [ 609.000026][T11346] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f52cb815fa8 [ 609.008053][T11346] RBP: 00007f52cb815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 609.016449][T11346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.024628][T11346] R13: 00007f52cb816038 R14: 00007ffd6473f8c0 R15: 00007ffd6473f9a8 [ 609.032753][T11346] [ 609.035807][T11346] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 609.043114][T11346] CPU: 0 PID: 11346 Comm: syz.1.1856 Not tainted syzkaller #0 [ 609.050703][T11346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 609.060801][T11346] Call Trace: [ 609.064139][T11346] [ 609.067426][T11346] dump_stack_lvl+0x18c/0x250 [ 609.072132][T11346] ? show_regs_print_info+0x20/0x20 [ 609.077364][T11346] ? load_image+0x420/0x420 [ 609.081900][T11346] panic+0x2dc/0x730 [ 609.085835][T11346] ? bpf_jit_dump+0xd0/0xd0 [ 609.090561][T11346] __warn+0x2e0/0x470 [ 609.094588][T11346] ? perf_pending_task+0x35c/0x470 [ 609.099750][T11346] ? perf_pending_task+0x35c/0x470 [ 609.104917][T11346] report_bug+0x2be/0x4f0 [ 609.109274][T11346] ? perf_pending_task+0x35c/0x470 [ 609.114416][T11346] ? perf_pending_task+0x35c/0x470 [ 609.119550][T11346] ? perf_pending_task+0x35e/0x470 [ 609.124787][T11346] handle_bug+0xcf/0x120 [ 609.129039][T11346] exc_invalid_op+0x1a/0x50 [ 609.133635][T11346] asm_exc_invalid_op+0x1a/0x20 [ 609.138518][T11346] RIP: 0010:perf_pending_task+0x35c/0x470 [ 609.144255][T11346] Code: ff 84 db 75 14 e8 64 d8 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 50 d8 d5 ff e8 cb 53 4f ff eb e5 e8 44 d8 d5 ff <0f> 0b e9 f3 fe ff ff e8 38 d8 d5 ff 48 c7 c7 70 f4 1c 8d 4c 89 f6 [ 609.163879][T11346] RSP: 0018:ffffc9000cfc79c0 EFLAGS: 00010293 [ 609.170011][T11346] RAX: ffffffff81b149bc RBX: ffff88807a924770 RCX: ffff88802c341e00 [ 609.177996][T11346] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 609.185975][T11346] RBP: 0000000000000001 R08: ffffffff8e8b15ef R09: 1ffffffff1d162bd [ 609.193964][T11346] R10: dffffc0000000000 R11: fffffbfff1d162be R12: ffff88802c341e00 [ 609.201948][T11346] R13: ffff8880257de530 R14: ffff88807a924530 R15: 1ffff1100f5248a6 [ 609.209941][T11346] ? perf_pending_task+0x35c/0x470 [ 609.215260][T11346] task_work_run+0x1d4/0x260 [ 609.219868][T11346] ? task_work_cancel+0x220/0x220 [ 609.224912][T11346] do_exit+0x95a/0x2460 [ 609.229091][T11346] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 609.235004][T11346] ? put_task_struct+0xc0/0xc0 [ 609.239782][T11346] ? perf_trace_preemptirq_template+0x269/0x330 [ 609.246061][T11346] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 609.252063][T11346] ? lock_chain_count+0x20/0x20 [ 609.257014][T11346] ? _raw_spin_lock_irq+0xbb/0xf0 [ 609.262232][T11346] do_group_exit+0x21b/0x2d0 [ 609.267285][T11346] ? lockdep_hardirqs_on+0x98/0x150 [ 609.272497][T11346] get_signal+0x12fc/0x13f0 [ 609.277081][T11346] arch_do_signal_or_restart+0xc2/0x800 [ 609.282661][T11346] ? get_sigframe_size+0x20/0x20 [ 609.287663][T11346] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 609.293860][T11346] ? exit_to_user_mode_loop+0x3b/0x110 [ 609.299360][T11346] exit_to_user_mode_loop+0x70/0x110 [ 609.304674][T11346] exit_to_user_mode_prepare+0xee/0x180 [ 609.310247][T11346] syscall_exit_to_user_mode+0x1a/0x50 [ 609.315981][T11346] do_syscall_64+0x61/0xa0 [ 609.320406][T11346] ? clear_bhb_loop+0x40/0x90 [ 609.325124][T11346] ? clear_bhb_loop+0x40/0x90 [ 609.329822][T11346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.335731][T11346] RIP: 0033:0x7f52cb59cdd9 [ 609.340205][T11346] Code: Unable to access opcode bytes at 0x7f52cb59cdaf. [ 609.347262][T11346] RSP: 002b:00007f52cc39a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 609.356050][T11346] RAX: fffffffffffffe00 RBX: 00007f52cb815fa8 RCX: 00007f52cb59cdd9 [ 609.364037][T11346] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f52cb815fa8 [ 609.372111][T11346] RBP: 00007f52cb815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 609.380093][T11346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.388070][T11346] R13: 00007f52cb816038 R14: 00007ffd6473f8c0 R15: 00007ffd6473f9a8 [ 609.396060][T11346] [ 609.399222][T11346] Kernel Offset: disabled [ 609.403578][T11346] Rebooting in 86400 seconds..