last executing test programs: 29.945197532s ago: executing program 1 (id=1201): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 5) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 28.818127332s ago: executing program 1 (id=1207): socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x25, 0x0, 0x2, 0x80000009}, {0x1}, {0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x720}]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB='-cpu'], 0x5) r5 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x9) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 28.705798111s ago: executing program 3 (id=1208): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7fffffff, 0x20000}, 0x4001, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8) 28.691965513s ago: executing program 2 (id=1209): socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x25, 0x0, 0x2, 0x80000009}, {0x1}, {0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x720}]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB='-cpu'], 0x5) r6 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000080), 0x9) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 25.372993746s ago: executing program 1 (id=1210): socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x25, 0x0, 0x2, 0x80000009}, {0x1}, {0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x720}]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB='-cpu'], 0x5) r6 = openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000080), 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 25.345941979s ago: executing program 3 (id=1219): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7fffffff, 0x20000}, 0x4001, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8) 25.345183719s ago: executing program 2 (id=1211): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xe0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 24.939911745s ago: executing program 0 (id=1212): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x5, 0x582, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001680)={@ifindex, 0x26, 0x1, 0x10000, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000015c0)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000080003002e000a000d002e009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001700), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="2e0000efab650019000000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB, @ANYRES64=r1], 0x20) socket$kcm(0x28, 0x5, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x86, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000000000000100000002f80000a17f6c35a16fb23dacfdc8c5205618cc01d1604d4ae0754c8733611db9c619ea1b81d560729d3ff737bacf48add42fc1efa84dc11db12bb5477dcbe1261e1b2e74bc10c067471a6ded57e0ff8f274a4f4d20996e74c5cebb8aa77589abc77c759ef4dd90ef7fa18e980a00f26858f222715d1fbd0df11cfb0c15ba27d9947a910e9552ee0db14e61c687f63f4d633e02b8c51144b1a613306aa4cae7d827c2090051ecf8bc7e5a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000014000000000000000100000001000000"], 0x38}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/pid\x00') r6 = openat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x13, &(0x7f0000000980)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRES32=r6, @ANYBLOB="514667f2f27458fd804708008eae35092136", @ANYRES32, @ANYRES64=r4, @ANYRESDEC, @ANYRESOCT=r7], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) socket$kcm(0xa, 0x3, 0x73) socket$kcm(0xa, 0x6, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1CC\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq\x00\x00\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000003280)=ANY=[], 0x38}, 0x41) 22.072215438s ago: executing program 1 (id=1213): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000000)) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1ac08790fcb87507}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f8, &(0x7f0000000080)) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee903"], 0x9a) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r7, 0x18000000000002a0, 0x2b, 0x0, &(0x7f00000007c0)="b9ff03316844268cb89e14f0080047e0ffff02124000632f0100000000000000030a07080403fe8000003d", 0x0, 0x28, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = socket$kcm(0xa, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20) setsockopt$sock_attach_bpf(r10, 0x29, 0x4, 0x0, 0xf000000) 22.065759559s ago: executing program 0 (id=1223): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x5, 0x582, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001680)={@ifindex, 0x26, 0x1, 0x10000, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000015c0)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000080003002e000a000d002e009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001700), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="2e0000efab650019000000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB, @ANYRES64=r1], 0x20) socket$kcm(0x28, 0x5, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x86, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000000000000100000002f80000a17f6c35a16fb23dacfdc8c5205618cc01d1604d4ae0754c8733611db9c619ea1b81d560729d3ff737bacf48add42fc1efa84dc11db12bb5477dcbe1261e1b2e74bc10c067471a6ded57e0ff8f274a4f4d20996e74c5cebb8aa77589abc77c759ef4dd90ef7fa18e980a00f26858f222715d1fbd0df11cfb0c15ba27d9947a910e9552ee0db14e61c687f63f4d633e02b8c51144b1a613306aa4cae7d827c2090051ecf8bc7e5a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000014000000000000000100000001000000"], 0x38}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/pid\x00') r6 = openat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x13, &(0x7f0000000980)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRES32=r6, @ANYBLOB="514667f2f27458fd804708008eae35092136", @ANYRES32, @ANYRES64=r4, @ANYRESDEC, @ANYRESOCT=r7], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) socket$kcm(0xa, 0x3, 0x73) socket$kcm(0xa, 0x6, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1CC\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq\x00\x00\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000003280)=ANY=[], 0x38}, 0x41) 22.021969032s ago: executing program 3 (id=1214): socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x25, 0x0, 0x2, 0x80000009}, {0x1}, {0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x720}]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB='-cpu'], 0x5) openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 21.93202873s ago: executing program 2 (id=1215): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d004892e822a6abc02ad2602a5ad6f7007ea60864160af365935cfaea3f49d8df1931a0e64ffc4c78029ee517d34460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000900)=""/139, 0x8b}, {&(0x7f0000004100)=""/4125, 0x101d}, {&(0x7f00000030c0)=""/4089, 0xff9}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/253, 0xfd}], 0x6}, 0x40010022) recvmsg$kcm(r0, 0x0, 0x10182) 21.744947527s ago: executing program 0 (id=1216): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x803fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}]}}, 0x0, 0x26}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000024008106", 0x8}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a"], 0xfe33) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1ffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) 21.529860136s ago: executing program 2 (id=1217): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10}, 0x0) setsockopt$sock_attach_bpf(r1, 0x110, 0x3, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x106) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x40086602, 0x1000000000000000) 18.831355185s ago: executing program 2 (id=1220): socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x25, 0x0, 0x2, 0x80000009}, {0x1}, {0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x720}]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB='-cpu'], 0x5) r5 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x9) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 18.765695011s ago: executing program 0 (id=1221): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) write$cgroup_subtree(r1, 0x0, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="9feb0100180000000000000078000000780000000a000000080000000000000700000000040000000000000c0300000005000000000000080400000004000000030000930100000000000001050000000a0000000a0000054a054afd49b305239f3d53b2930005000000000000000d00000008000000008000000700000000000010040000000c0000000000000700"/153], 0x0, 0x9a, 0x0, 0x4, 0x10001}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_vlan\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'veth1_vlan\x00', 0x600}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000002c0)={r3}) 18.693787557s ago: executing program 3 (id=1222): socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x25, 0x0, 0x2, 0x80000009}, {0x1}, {0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x720}]}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB='-cpu'], 0x5) r7 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000080), 0x9) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 18.588087836s ago: executing program 1 (id=1224): r0 = perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) 18.329887039s ago: executing program 0 (id=1225): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7fffffff, 0x20000}, 0x4001, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8) 15.410438477s ago: executing program 1 (id=1226): socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x25, 0x0, 0x2, 0x80000009}, {0x1}, {0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x720}]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB='-cpu'], 0x5) openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15.359182242s ago: executing program 2 (id=1227): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x5, 0x582, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001680)={@ifindex, 0x26, 0x1, 0x10000, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000015c0)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000080003002e000a000d002e009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001700), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="2e0000efab650019000000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB, @ANYRES64=r1], 0x20) socket$kcm(0x28, 0x5, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x86, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000000000000100000002f80000a17f6c35a16fb23dacfdc8c5205618cc01d1604d4ae0754c8733611db9c619ea1b81d560729d3ff737bacf48add42fc1efa84dc11db12bb5477dcbe1261e1b2e74bc10c067471a6ded57e0ff8f274a4f4d20996e74c5cebb8aa77589abc77c759ef4dd90ef7fa18e980a00f26858f222715d1fbd0df11cfb0c15ba27d9947a910e9552ee0db14e61c687f63f4d633e02b8c51144b1a613306aa4cae7d827c2090051ecf8bc7e5a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000014000000000000000100000001000000"], 0x38}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/pid\x00') r6 = openat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x13, &(0x7f0000000980)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRES32=r6, @ANYBLOB="514667f2f27458fd804708008eae35092136", @ANYRES32, @ANYRES64=r4, @ANYRESDEC, @ANYRESOCT=r7], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) socket$kcm(0xa, 0x3, 0x73) socket$kcm(0xa, 0x6, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1CC\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq\x00\x00\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000003280)=ANY=[], 0x38}, 0x41) 15.26985383s ago: executing program 3 (id=1228): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d004892e822a6abc02ad2602a5ad6f7007ea60864160af365935cfaea3f49d8df1931a0e64ffc4c78029ee517d34460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000900)=""/139, 0x8b}, {&(0x7f0000004100)=""/4125, 0x101d}, {&(0x7f00000030c0)=""/4089, 0xff9}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/253, 0xfd}], 0x6}, 0x40010022) recvmsg$kcm(r0, 0x0, 0x10182) 15.240220382s ago: executing program 0 (id=1229): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa125, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x7, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f00000004c0)="f6f4e9a10000002a8bc686ddb7dbfc007024f808", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x2e, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000001000000000000000feffff1811", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0xff0f000020000080) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x2, 0xfffffffffffff7fd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8", 0x26}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b39e5d175223317057", 0x24}, {&(0x7f0000000340)="551d389992c228e384254107", 0xc}], 0x3}, 0x24000008) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) close(r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) 355.78µs ago: executing program 3 (id=1230): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640), 0x4) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8000000000000000}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x9, 0x3, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x1ff, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 32 (id=1229): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa125, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x7, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f00000004c0)="f6f4e9a10000002a8bc686ddb7dbfc007024f808", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x2e, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000001000000000000000feffff1811", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0xff0f000020000080) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x2, 0xfffffffffffff7fd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8", 0x26}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b39e5d175223317057", 0x24}, {&(0x7f0000000340)="551d389992c228e384254107", 0xc}], 0x3}, 0x24000008) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) close(r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) kernel console output (not intermixed with test programs): h. [ 242.430046][ T7201] netlink: 40 bytes leftover after parsing attributes in process `syz.0.472'. [ 242.722190][ T7223] FAULT_INJECTION: forcing a failure. [ 242.722190][ T7223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.747683][ T7223] CPU: 1 PID: 7223 Comm: syz.0.481 Not tainted syzkaller #0 [ 242.755055][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 242.765185][ T7223] Call Trace: [ 242.768517][ T7223] [ 242.771496][ T7223] dump_stack_lvl+0x18c/0x250 [ 242.776240][ T7223] ? show_regs_print_info+0x20/0x20 [ 242.781500][ T7223] ? load_image+0x400/0x400 [ 242.786096][ T7223] ? __might_fault+0xaa/0x120 [ 242.790824][ T7223] ? __lock_acquire+0x7d40/0x7d40 [ 242.796017][ T7223] should_fail_ex+0x39d/0x4d0 [ 242.800770][ T7223] _copy_from_user+0x2f/0xe0 [ 242.805419][ T7223] __sys_bpf+0x23e/0x890 [ 242.809725][ T7223] ? bpf_link_show_fdinfo+0x390/0x390 [ 242.815166][ T7223] ? lock_chain_count+0x20/0x20 [ 242.820078][ T7223] __x64_sys_bpf+0x7c/0x90 [ 242.824551][ T7223] do_syscall_64+0x55/0xa0 [ 242.829044][ T7223] ? clear_bhb_loop+0x40/0x90 [ 242.833783][ T7223] ? clear_bhb_loop+0x40/0x90 [ 242.838554][ T7223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.844498][ T7223] RIP: 0033:0x7f18cd99bf79 [ 242.849003][ T7223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.868702][ T7223] RSP: 002b:00007f18ce7ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.877169][ T7223] RAX: ffffffffffffffda RBX: 00007f18cdc15fa0 RCX: 00007f18cd99bf79 [ 242.885187][ T7223] RDX: 0000000000000023 RSI: 00002000002a0fb8 RDI: 0000000000000005 [ 242.893206][ T7223] RBP: 00007f18ce7ab090 R08: 0000000000000000 R09: 0000000000000000 [ 242.901228][ T7223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.909379][ T7223] R13: 00007f18cdc16038 R14: 00007f18cdc15fa0 R15: 00007ffd1385ec18 [ 242.917513][ T7223] [ 243.284420][ T7241] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.484'. [ 243.579802][ T7246] netlink: 'syz.3.489': attribute type 10 has an invalid length. [ 243.587801][ T7246] netlink: 40 bytes leftover after parsing attributes in process `syz.3.489'. [ 244.200598][ T7250] netlink: 'syz.0.491': attribute type 10 has an invalid length. [ 244.341353][ T7244] delete_channel: no stack [ 244.506240][ T7257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.494'. [ 245.831161][ T7290] netlink: 'syz.3.503': attribute type 10 has an invalid length. [ 245.885249][ T7291] netlink: 'syz.1.504': attribute type 10 has an invalid length. [ 245.908650][ T7291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.504'. [ 246.107765][ T7295] IPv6: Can't replace route, no match found [ 246.207247][ T7297] netlink: 164 bytes leftover after parsing attributes in process `syz.0.506'. [ 246.619403][ T7286] delete_channel: no stack [ 248.087528][ T7337] netlink: 60 bytes leftover after parsing attributes in process `syz.0.520'. [ 248.109004][ T7337] netlink: 60 bytes leftover after parsing attributes in process `syz.0.520'. [ 248.119842][ T7337] netlink: 60 bytes leftover after parsing attributes in process `syz.0.520'. [ 248.161534][ T7338] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.521'. [ 248.187765][ T7338] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.521'. [ 248.213572][ T7338] netlink: 2 bytes leftover after parsing attributes in process `syz.2.521'. [ 248.307033][ T7341] netlink: 'syz.1.522': attribute type 10 has an invalid length. [ 248.325653][ T7341] netlink: 40 bytes leftover after parsing attributes in process `syz.1.522'. [ 248.926013][ T7355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.933605][ T7355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.942953][ T7355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.950604][ T7355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.963834][ T7355] bridge0: port 3(batadv0) entered disabled state [ 249.017920][ T7355] bridge0: port 3(batadv0) entered disabled state [ 249.040912][ T7339] delete_channel: no stack [ 249.223587][ T7363] FAULT_INJECTION: forcing a failure. [ 249.223587][ T7363] name failslab, interval 1, probability 0, space 0, times 0 [ 249.262859][ T7363] CPU: 1 PID: 7363 Comm: syz.1.530 Not tainted syzkaller #0 [ 249.270204][ T7363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.280308][ T7363] Call Trace: [ 249.283621][ T7363] [ 249.286578][ T7363] dump_stack_lvl+0x18c/0x250 [ 249.291324][ T7363] ? show_regs_print_info+0x20/0x20 [ 249.296564][ T7363] ? load_image+0x400/0x400 [ 249.301138][ T7363] ? __might_sleep+0xe0/0xe0 [ 249.305758][ T7363] ? __lock_acquire+0x7d40/0x7d40 [ 249.310810][ T7363] should_fail_ex+0x39d/0x4d0 [ 249.315529][ T7363] should_failslab+0x9/0x20 [ 249.320058][ T7363] slab_pre_alloc_hook+0x59/0x310 [ 249.325119][ T7363] ? br_vlan_add+0x550/0x950 [ 249.329738][ T7363] kmem_cache_alloc_node+0x60/0x320 [ 249.334968][ T7363] ? __alloc_skb+0x103/0x2c0 [ 249.339598][ T7363] __alloc_skb+0x103/0x2c0 [ 249.344047][ T7363] br_vlan_notify+0x281/0x740 [ 249.348764][ T7363] br_process_vlan_info+0x370/0x8a0 [ 249.354009][ T7363] ? br_getlink+0x180/0x180 [ 249.358555][ T7363] ? __lock_acquire+0x1347/0x7d40 [ 249.363616][ T7363] br_afspec+0x399/0x5f0 [ 249.367929][ T7363] ? br_setport+0x1680/0x1680 [ 249.372640][ T7363] ? mark_lock+0x94/0x320 [ 249.377005][ T7363] ? verify_lock_unused+0x140/0x140 [ 249.382256][ T7363] br_setlink+0x2dc/0x8b0 [ 249.386629][ T7363] ? br_vlan_info+0x460/0x460 [ 249.391457][ T7363] ? trace_contention_end+0x39/0xe0 [ 249.396688][ T7363] ? __mutex_lock+0x315/0xcc0 [ 249.401408][ T7363] ? nla_find+0x131/0x150 [ 249.405801][ T7363] rtnl_bridge_setlink+0x63c/0x7d0 [ 249.410948][ T7363] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 249.416267][ T7363] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 249.421413][ T7363] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 249.426549][ T7363] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 249.431859][ T7363] rtnetlink_rcv_msg+0x869/0xfa0 [ 249.436834][ T7363] ? rtnetlink_bind+0x80/0x80 [ 249.441660][ T7363] ? perf_trace_preemptirq_template+0xac/0x330 [ 249.447939][ T7363] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 249.453953][ T7363] ? lock_chain_count+0x20/0x20 [ 249.458842][ T7363] ? __local_bh_enable_ip+0x13a/0x1c0 [ 249.464243][ T7363] ? lockdep_hardirqs_on+0x98/0x150 [ 249.469478][ T7363] ? __local_bh_enable_ip+0x13a/0x1c0 [ 249.474879][ T7363] ? _local_bh_enable+0xa0/0xa0 [ 249.479769][ T7363] ? __dev_queue_xmit+0x26b/0x36b0 [ 249.484927][ T7363] ? __dev_queue_xmit+0x26b/0x36b0 [ 249.490077][ T7363] ? __dev_queue_xmit+0x124f/0x36b0 [ 249.495309][ T7363] ? __dev_queue_xmit+0x26b/0x36b0 [ 249.500473][ T7363] ? ref_tracker_free+0x690/0x840 [ 249.505536][ T7363] netlink_rcv_skb+0x241/0x4d0 [ 249.510339][ T7363] ? rtnetlink_bind+0x80/0x80 [ 249.515060][ T7363] ? netlink_ack+0x1180/0x1180 [ 249.519869][ T7363] ? __lock_acquire+0x7d40/0x7d40 [ 249.524931][ T7363] ? netlink_deliver_tap+0x2e/0x1b0 [ 249.530177][ T7363] netlink_unicast+0x751/0x8d0 [ 249.534990][ T7363] netlink_sendmsg+0x8d0/0xbf0 [ 249.539798][ T7363] ? netlink_getsockopt+0x590/0x590 [ 249.545036][ T7363] ? aa_sock_msg_perm+0x94/0x150 [ 249.550009][ T7363] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 249.555331][ T7363] ? security_socket_sendmsg+0x80/0xa0 [ 249.560926][ T7363] ? netlink_getsockopt+0x590/0x590 [ 249.566157][ T7363] ____sys_sendmsg+0x5ba/0x960 [ 249.570957][ T7363] ? __asan_memset+0x22/0x40 [ 249.575585][ T7363] ? __sys_sendmsg_sock+0x30/0x30 [ 249.580632][ T7363] ? __import_iovec+0x5f2/0x850 [ 249.585522][ T7363] ? import_iovec+0x73/0xa0 [ 249.590073][ T7363] ___sys_sendmsg+0x2a6/0x360 [ 249.594801][ T7363] ? get_pid_task+0x20/0x1e0 [ 249.599423][ T7363] ? __sys_sendmsg+0x2a0/0x2a0 [ 249.604224][ T7363] ? __lock_acquire+0x7d40/0x7d40 [ 249.609297][ T7363] __se_sys_sendmsg+0x1c2/0x2b0 [ 249.614193][ T7363] ? __x64_sys_sendmsg+0x80/0x80 [ 249.619226][ T7363] ? lockdep_hardirqs_on+0x98/0x150 [ 249.624468][ T7363] do_syscall_64+0x55/0xa0 [ 249.628923][ T7363] ? clear_bhb_loop+0x40/0x90 [ 249.633635][ T7363] ? clear_bhb_loop+0x40/0x90 [ 249.638344][ T7363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.644272][ T7363] RIP: 0033:0x7fae33d9bf79 [ 249.648721][ T7363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.668362][ T7363] RSP: 002b:00007fae34c5d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.676813][ T7363] RAX: ffffffffffffffda RBX: 00007fae34015fa0 RCX: 00007fae33d9bf79 [ 249.684810][ T7363] RDX: 000000002000c090 RSI: 0000200000000040 RDI: 0000000000000004 [ 249.692815][ T7363] RBP: 00007fae34c5d090 R08: 0000000000000000 R09: 0000000000000000 [ 249.700811][ T7363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.708806][ T7363] R13: 00007fae34016038 R14: 00007fae34015fa0 R15: 00007ffd15a8a2a8 [ 249.716815][ T7363] [ 249.961280][ T7362] netlink: 'syz.3.529': attribute type 10 has an invalid length. [ 250.101807][ T7362] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 250.140026][ T7373] netlink: 2 bytes leftover after parsing attributes in process `syz.2.533'. [ 250.162476][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.174302][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.185733][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.214077][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.269534][ T7373] batadv_slave_1: entered promiscuous mode [ 250.276776][ T7378] netlink: 'syz.1.535': attribute type 4 has an invalid length. [ 250.814300][ T7388] netlink: 'syz.2.539': attribute type 10 has an invalid length. [ 253.591537][ T7396] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.618011][ T7396] netlink: 1 bytes leftover after parsing attributes in process `syz.0.542'. [ 255.894655][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.906499][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.249946][ T7408] netlink: 'syz.3.546': attribute type 4 has an invalid length. [ 256.267825][ T7408] FAULT_INJECTION: forcing a failure. [ 256.267825][ T7408] name failslab, interval 1, probability 0, space 0, times 0 [ 256.292352][ T7408] CPU: 1 PID: 7408 Comm: syz.3.546 Not tainted syzkaller #0 [ 256.299808][ T7408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.309920][ T7408] Call Trace: [ 256.313240][ T7408] [ 256.316206][ T7408] dump_stack_lvl+0x18c/0x250 [ 256.320940][ T7408] ? show_regs_print_info+0x20/0x20 [ 256.326192][ T7408] ? load_image+0x400/0x400 [ 256.330772][ T7408] ? __lock_acquire+0x7d40/0x7d40 [ 256.335860][ T7408] should_fail_ex+0x39d/0x4d0 [ 256.340601][ T7408] should_failslab+0x9/0x20 [ 256.345183][ T7408] slab_pre_alloc_hook+0x59/0x310 [ 256.350267][ T7408] kmem_cache_alloc+0x5a/0x2d0 [ 256.355086][ T7408] ? fib_table_insert+0x4b8/0x1b20 [ 256.360256][ T7408] fib_table_insert+0x4b8/0x1b20 [ 256.365278][ T7408] ? fib_trie_table+0x138/0x1c0 [ 256.370174][ T7408] ? fib_new_table+0x27f/0x2d0 [ 256.375003][ T7408] inet_rtm_newroute+0x14b/0x240 [ 256.380008][ T7408] ? rcu_read_unlock+0xa0/0xa0 [ 256.384842][ T7408] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 256.390006][ T7408] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 256.395167][ T7408] ? rcu_read_unlock+0xa0/0xa0 [ 256.400002][ T7408] rtnetlink_rcv_msg+0x869/0xfa0 [ 256.404996][ T7408] ? lockdep_hardirqs_on+0x98/0x150 [ 256.410243][ T7408] ? rtnetlink_bind+0x80/0x80 [ 256.414974][ T7408] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 256.421021][ T7408] ? __dev_queue_xmit+0x26b/0x36b0 [ 256.426178][ T7408] ? lock_chain_count+0x20/0x20 [ 256.431074][ T7408] ? __local_bh_enable_ip+0x13a/0x1c0 [ 256.436494][ T7408] ? lockdep_hardirqs_on+0x98/0x150 [ 256.441763][ T7408] ? __local_bh_enable_ip+0x13a/0x1c0 [ 256.447181][ T7408] ? _local_bh_enable+0xa0/0xa0 [ 256.452081][ T7408] ? __dev_queue_xmit+0x26b/0x36b0 [ 256.457242][ T7408] ? __dev_queue_xmit+0x26b/0x36b0 [ 256.462401][ T7408] ? __dev_queue_xmit+0x124f/0x36b0 [ 256.467761][ T7408] ? __dev_queue_xmit+0x26b/0x36b0 [ 256.472945][ T7408] ? ref_tracker_free+0x690/0x840 [ 256.478038][ T7408] netlink_rcv_skb+0x241/0x4d0 [ 256.482983][ T7408] ? rtnetlink_bind+0x80/0x80 [ 256.487723][ T7408] ? netlink_ack+0x1180/0x1180 [ 256.492558][ T7408] ? __lock_acquire+0x7d40/0x7d40 [ 256.497638][ T7408] ? netlink_deliver_tap+0x2e/0x1b0 [ 256.502896][ T7408] netlink_unicast+0x751/0x8d0 [ 256.507739][ T7408] netlink_sendmsg+0x8d0/0xbf0 [ 256.512565][ T7408] ? netlink_getsockopt+0x590/0x590 [ 256.517815][ T7408] ? aa_sock_msg_perm+0x94/0x150 [ 256.522805][ T7408] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 256.528138][ T7408] ? security_socket_sendmsg+0x80/0xa0 [ 256.533649][ T7408] ? netlink_getsockopt+0x590/0x590 [ 256.538902][ T7408] ____sys_sendmsg+0x5ba/0x960 [ 256.543722][ T7408] ? __asan_memset+0x22/0x40 [ 256.548374][ T7408] ? __sys_sendmsg_sock+0x30/0x30 [ 256.553442][ T7408] ? __import_iovec+0x5f2/0x850 [ 256.558362][ T7408] ? import_iovec+0x73/0xa0 [ 256.562934][ T7408] ___sys_sendmsg+0x2a6/0x360 [ 256.567677][ T7408] ? get_pid_task+0x20/0x1e0 [ 256.572304][ T7408] ? __sys_sendmsg+0x2a0/0x2a0 [ 256.577109][ T7408] ? __lock_acquire+0x7d40/0x7d40 [ 256.582184][ T7408] __se_sys_sendmsg+0x1c2/0x2b0 [ 256.587063][ T7408] ? __x64_sys_sendmsg+0x80/0x80 [ 256.592040][ T7408] ? lockdep_hardirqs_on+0x98/0x150 [ 256.597267][ T7408] do_syscall_64+0x55/0xa0 [ 256.601732][ T7408] ? clear_bhb_loop+0x40/0x90 [ 256.606448][ T7408] ? clear_bhb_loop+0x40/0x90 [ 256.611153][ T7408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.617075][ T7408] RIP: 0033:0x7fc9e2d9bf79 [ 256.621517][ T7408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.641153][ T7408] RSP: 002b:00007fc9e3c0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.649694][ T7408] RAX: ffffffffffffffda RBX: 00007fc9e3015fa0 RCX: 00007fc9e2d9bf79 [ 256.657697][ T7408] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 256.665699][ T7408] RBP: 00007fc9e3c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 256.673692][ T7408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.681683][ T7408] R13: 00007fc9e3016038 R14: 00007fc9e3015fa0 R15: 00007ffc0dff7f78 [ 256.689702][ T7408] [ 256.773248][ T7415] netlink: 'syz.1.548': attribute type 10 has an invalid length. [ 256.817004][ T7410] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.545'. [ 257.070402][ T7425] netlink: 'syz.1.561': attribute type 10 has an invalid length. [ 257.333317][ T7434] FAULT_INJECTION: forcing a failure. [ 257.333317][ T7434] name failslab, interval 1, probability 0, space 0, times 0 [ 257.366071][ T7434] CPU: 1 PID: 7434 Comm: syz.0.555 Not tainted syzkaller #0 [ 257.373445][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 257.383537][ T7434] Call Trace: [ 257.386855][ T7434] [ 257.389822][ T7434] dump_stack_lvl+0x18c/0x250 [ 257.394556][ T7434] ? show_regs_print_info+0x20/0x20 [ 257.399798][ T7434] ? load_image+0x400/0x400 [ 257.404346][ T7434] ? __might_sleep+0xe0/0xe0 [ 257.408997][ T7434] ? __lock_acquire+0x7d40/0x7d40 [ 257.414069][ T7434] should_fail_ex+0x39d/0x4d0 [ 257.418797][ T7434] should_failslab+0x9/0x20 [ 257.423345][ T7434] slab_pre_alloc_hook+0x59/0x310 [ 257.428429][ T7434] ? tomoyo_encode+0x28b/0x540 [ 257.433232][ T7434] ? tomoyo_encode+0x28b/0x540 [ 257.438039][ T7434] __kmem_cache_alloc_node+0x53/0x250 [ 257.443462][ T7434] ? tomoyo_encode+0x28b/0x540 [ 257.448274][ T7434] __kmalloc+0xa4/0x230 [ 257.452582][ T7434] tomoyo_encode+0x28b/0x540 [ 257.457218][ T7434] tomoyo_realpath_from_path+0x592/0x5d0 [ 257.462911][ T7434] tomoyo_path_number_perm+0x248/0x620 [ 257.468429][ T7434] ? tomoyo_path_number_perm+0x217/0x620 [ 257.474136][ T7434] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 257.479638][ T7434] ? trace_call_bpf+0xc3/0x6c0 [ 257.484456][ T7434] ? trace_call_bpf+0xc3/0x6c0 [ 257.489349][ T7434] ? trace_call_bpf+0x5e9/0x6c0 [ 257.494297][ T7434] ? __fget_files+0x28/0x4b0 [ 257.498926][ T7434] ? __fget_files+0x28/0x4b0 [ 257.503583][ T7434] security_file_ioctl+0x70/0xa0 [ 257.508582][ T7434] __se_sys_ioctl+0x48/0x170 [ 257.513219][ T7434] do_syscall_64+0x55/0xa0 [ 257.517681][ T7434] ? clear_bhb_loop+0x40/0x90 [ 257.522406][ T7434] ? clear_bhb_loop+0x40/0x90 [ 257.527133][ T7434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.533080][ T7434] RIP: 0033:0x7f18cd99bf79 [ 257.537528][ T7434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.557171][ T7434] RSP: 002b:00007f18ce7ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.565622][ T7434] RAX: ffffffffffffffda RBX: 00007f18cdc15fa0 RCX: 00007f18cd99bf79 [ 257.573632][ T7434] RDX: 0000200000000900 RSI: 0000000000008942 RDI: 0000000000000005 [ 257.581811][ T7434] RBP: 00007f18ce7ab090 R08: 0000000000000000 R09: 0000000000000000 [ 257.589817][ T7434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.597828][ T7434] R13: 00007f18cdc16038 R14: 00007f18cdc15fa0 R15: 00007ffd1385ec18 [ 257.605864][ T7434] [ 257.628963][ T7434] ERROR: Out of memory at tomoyo_realpath_from_path. [ 257.691521][ T7433] netlink: 'syz.1.554': attribute type 3 has an invalid length. [ 257.726225][ T7433] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.554'. [ 258.792984][ T7445] syzkaller0: entered promiscuous mode [ 258.806901][ T7445] syzkaller0: entered allmulticast mode [ 258.930187][ T7457] netlink: 'syz.0.563': attribute type 10 has an invalid length. [ 259.427233][ T7471] FAULT_INJECTION: forcing a failure. [ 259.427233][ T7471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.461109][ T7471] CPU: 0 PID: 7471 Comm: syz.1.567 Not tainted syzkaller #0 [ 259.468566][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 259.479200][ T7471] Call Trace: [ 259.482533][ T7471] [ 259.485512][ T7471] dump_stack_lvl+0x18c/0x250 [ 259.490285][ T7471] ? show_regs_print_info+0x20/0x20 [ 259.495550][ T7471] ? load_image+0x400/0x400 [ 259.500108][ T7471] ? __lock_acquire+0x7d40/0x7d40 [ 259.505254][ T7471] should_fail_ex+0x39d/0x4d0 [ 259.509979][ T7471] _copy_from_user+0x2f/0xe0 [ 259.514627][ T7471] __copy_msghdr+0x3bb/0x580 [ 259.519271][ T7471] ___sys_sendmsg+0x214/0x360 [ 259.523981][ T7471] ? __sys_sendmsg+0x2a0/0x2a0 [ 259.528792][ T7471] ? trace_call_bpf+0xc3/0x6c0 [ 259.533610][ T7471] __se_sys_sendmsg+0x1c2/0x2b0 [ 259.538621][ T7471] ? __x64_sys_sendmsg+0x80/0x80 [ 259.543632][ T7471] ? lockdep_hardirqs_on+0x98/0x150 [ 259.548863][ T7471] do_syscall_64+0x55/0xa0 [ 259.553315][ T7471] ? clear_bhb_loop+0x40/0x90 [ 259.558020][ T7471] ? clear_bhb_loop+0x40/0x90 [ 259.562724][ T7471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.568654][ T7471] RIP: 0033:0x7fae33d9bf79 [ 259.573109][ T7471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.592825][ T7471] RSP: 002b:00007fae34c3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.601290][ T7471] RAX: ffffffffffffffda RBX: 00007fae34016090 RCX: 00007fae33d9bf79 [ 259.609284][ T7471] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 259.617284][ T7471] RBP: 00007fae34c3c090 R08: 0000000000000000 R09: 0000000000000000 [ 259.625284][ T7471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.633282][ T7471] R13: 00007fae34016128 R14: 00007fae34016090 R15: 00007ffd15a8a2a8 [ 259.641313][ T7471] [ 261.573654][ T7474] wg2: entered promiscuous mode [ 261.589432][ T7474] wg2: entered allmulticast mode [ 261.952044][ T7487] IPv6: Can't replace route, no match found [ 262.326238][ T7495] netlink: 'syz.0.575': attribute type 10 has an invalid length. [ 262.544058][ T7501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.555320][ T7501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.573824][ T7501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.598501][ T7501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.624590][ T7501] bridge0: port 3(batadv0) entered disabled state [ 262.703736][ T7501] bridge0: port 3(batadv0) entered disabled state [ 263.073675][ T7515] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.584'. [ 263.538574][ T7523] FAULT_INJECTION: forcing a failure. [ 263.538574][ T7523] name failslab, interval 1, probability 0, space 0, times 0 [ 263.552099][ T7523] CPU: 1 PID: 7523 Comm: syz.0.586 Not tainted syzkaller #0 [ 263.559447][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.569549][ T7523] Call Trace: [ 263.572874][ T7523] [ 263.575840][ T7523] dump_stack_lvl+0x18c/0x250 [ 263.580587][ T7523] ? show_regs_print_info+0x20/0x20 [ 263.585834][ T7523] ? load_image+0x400/0x400 [ 263.590395][ T7523] ? __might_sleep+0xe0/0xe0 [ 263.595030][ T7523] ? __lock_acquire+0x7d40/0x7d40 [ 263.600103][ T7523] should_fail_ex+0x39d/0x4d0 [ 263.604840][ T7523] should_failslab+0x9/0x20 [ 263.609484][ T7523] slab_pre_alloc_hook+0x59/0x310 [ 263.614563][ T7523] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 263.620202][ T7523] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 263.625794][ T7523] __kmem_cache_alloc_node+0x53/0x250 [ 263.631231][ T7523] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 263.636848][ T7523] __kmalloc+0xa4/0x230 [ 263.641060][ T7523] ? lockdep_hardirqs_on+0x98/0x150 [ 263.646303][ T7523] bpf_prog_test_run_skb+0x238/0x12b0 [ 263.651719][ T7523] ? __fget_files+0x28/0x4b0 [ 263.656357][ T7523] ? __fget_files+0x28/0x4b0 [ 263.660995][ T7523] ? __fget_files+0x43d/0x4b0 [ 263.665733][ T7523] ? cpu_online+0x60/0x60 [ 263.670109][ T7523] bpf_prog_test_run+0x321/0x390 [ 263.675124][ T7523] __sys_bpf+0x49d/0x890 [ 263.679410][ T7523] ? bpf_link_show_fdinfo+0x390/0x390 [ 263.684847][ T7523] ? lock_chain_count+0x20/0x20 [ 263.689741][ T7523] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 263.695778][ T7523] __x64_sys_bpf+0x7c/0x90 [ 263.700240][ T7523] do_syscall_64+0x55/0xa0 [ 263.704701][ T7523] ? clear_bhb_loop+0x40/0x90 [ 263.709420][ T7523] ? clear_bhb_loop+0x40/0x90 [ 263.714144][ T7523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.720097][ T7523] RIP: 0033:0x7f18cd99bf79 [ 263.724565][ T7523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.744214][ T7523] RSP: 002b:00007f18ce7ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 263.752689][ T7523] RAX: ffffffffffffffda RBX: 00007f18cdc15fa0 RCX: 00007f18cd99bf79 [ 263.760706][ T7523] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 263.768714][ T7523] RBP: 00007f18ce7ab090 R08: 0000000000000000 R09: 0000000000000000 [ 263.776928][ T7523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.784936][ T7523] R13: 00007f18cdc16038 R14: 00007f18cdc15fa0 R15: 00007ffd1385ec18 [ 263.793057][ T7523] [ 264.338360][ T7525] netlink: 'syz.0.587': attribute type 10 has an invalid length. [ 264.747941][ T7538] FAULT_INJECTION: forcing a failure. [ 264.747941][ T7538] name failslab, interval 1, probability 0, space 0, times 0 [ 264.771378][ T7538] CPU: 1 PID: 7538 Comm: syz.0.592 Not tainted syzkaller #0 [ 264.778738][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.788837][ T7538] Call Trace: [ 264.792154][ T7538] [ 264.795123][ T7538] dump_stack_lvl+0x18c/0x250 [ 264.799869][ T7538] ? show_regs_print_info+0x20/0x20 [ 264.805129][ T7538] ? load_image+0x400/0x400 [ 264.809701][ T7538] ? __might_sleep+0xe0/0xe0 [ 264.814348][ T7538] ? __lock_acquire+0x7d40/0x7d40 [ 264.819428][ T7538] should_fail_ex+0x39d/0x4d0 [ 264.824166][ T7538] should_failslab+0x9/0x20 [ 264.828720][ T7538] slab_pre_alloc_hook+0x59/0x310 [ 264.833889][ T7538] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 264.839473][ T7538] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 264.845061][ T7538] __kmem_cache_alloc_node+0x53/0x250 [ 264.850474][ T7538] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 264.856049][ T7538] __kmalloc+0xa4/0x230 [ 264.860242][ T7538] bpf_prog_test_run_skb+0x238/0x12b0 [ 264.865636][ T7538] ? __fget_files+0x28/0x4b0 [ 264.870251][ T7538] ? __fget_files+0x28/0x4b0 [ 264.874874][ T7538] ? __fget_files+0x43d/0x4b0 [ 264.879600][ T7538] ? cpu_online+0x60/0x60 [ 264.883965][ T7538] bpf_prog_test_run+0x321/0x390 [ 264.889022][ T7538] __sys_bpf+0x49d/0x890 [ 264.893302][ T7538] ? bpf_link_show_fdinfo+0x390/0x390 [ 264.898714][ T7538] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 264.904911][ T7538] __x64_sys_bpf+0x7c/0x90 [ 264.909384][ T7538] do_syscall_64+0x55/0xa0 [ 264.913829][ T7538] ? clear_bhb_loop+0x40/0x90 [ 264.918538][ T7538] ? clear_bhb_loop+0x40/0x90 [ 264.923249][ T7538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.929172][ T7538] RIP: 0033:0x7f18cd99bf79 [ 264.933620][ T7538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.953337][ T7538] RSP: 002b:00007f18ce7ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 264.961794][ T7538] RAX: ffffffffffffffda RBX: 00007f18cdc15fa0 RCX: 00007f18cd99bf79 [ 264.969796][ T7538] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 264.977791][ T7538] RBP: 00007f18ce7ab090 R08: 0000000000000000 R09: 0000000000000000 [ 264.985796][ T7538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.993793][ T7538] R13: 00007f18cdc16038 R14: 00007f18cdc15fa0 R15: 00007ffd1385ec18 [ 265.001802][ T7538] [ 265.584454][ T7550] netlink: 'syz.2.596': attribute type 46 has an invalid length. [ 265.618591][ T7550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.596'. [ 265.961831][ T7556] veth0_vlan: entered allmulticast mode [ 266.251609][ T7559] veth0_vlan: left promiscuous mode [ 266.277954][ T7559] veth0_vlan: entered promiscuous mode [ 269.312339][ T49] tipc: Subscription rejected, illegal request [ 269.463265][ T7578] netlink: 'syz.0.603': attribute type 21 has an invalid length. [ 269.484757][ T7578] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.603'. [ 269.732169][ T7583] FAULT_INJECTION: forcing a failure. [ 269.732169][ T7583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.808996][ T7576] netlink: 'syz.1.604': attribute type 29 has an invalid length. [ 269.822434][ T7576] netlink: 'syz.1.604': attribute type 29 has an invalid length. [ 269.832048][ T7583] CPU: 1 PID: 7583 Comm: syz.2.605 Not tainted syzkaller #0 [ 269.839402][ T7583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.849497][ T7583] Call Trace: [ 269.852805][ T7583] [ 269.855765][ T7583] dump_stack_lvl+0x18c/0x250 [ 269.860537][ T7583] ? show_regs_print_info+0x20/0x20 [ 269.865816][ T7583] ? load_image+0x400/0x400 [ 269.870399][ T7583] ? __lock_acquire+0x7d40/0x7d40 [ 269.875484][ T7583] should_fail_ex+0x39d/0x4d0 [ 269.880219][ T7583] _copy_from_user+0x2f/0xe0 [ 269.884856][ T7583] __copy_msghdr+0x3bb/0x580 [ 269.889519][ T7583] ___sys_sendmsg+0x214/0x360 [ 269.894243][ T7583] ? get_pid_task+0x20/0x1e0 [ 269.898878][ T7583] ? __sys_sendmsg+0x2a0/0x2a0 [ 269.903694][ T7583] ? __lock_acquire+0x7d40/0x7d40 [ 269.908778][ T7583] __se_sys_sendmsg+0x1c2/0x2b0 [ 269.913659][ T7583] ? __x64_sys_sendmsg+0x80/0x80 [ 269.918645][ T7583] ? lockdep_hardirqs_on+0x98/0x150 [ 269.923882][ T7583] do_syscall_64+0x55/0xa0 [ 269.928345][ T7583] ? clear_bhb_loop+0x40/0x90 [ 269.933066][ T7583] ? clear_bhb_loop+0x40/0x90 [ 269.937799][ T7583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.943735][ T7583] RIP: 0033:0x7fe1adf9bf79 [ 269.948214][ T7583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.967871][ T7583] RSP: 002b:00007fe1aeea6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.976326][ T7583] RAX: ffffffffffffffda RBX: 00007fe1ae215fa0 RCX: 00007fe1adf9bf79 [ 269.984335][ T7583] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 269.992352][ T7583] RBP: 00007fe1aeea6090 R08: 0000000000000000 R09: 0000000000000000 [ 270.000357][ T7583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.008363][ T7583] R13: 00007fe1ae216038 R14: 00007fe1ae215fa0 R15: 00007ffe2c4cf4f8 [ 270.016395][ T7583] [ 270.038933][ T7589] netlink: 'syz.1.604': attribute type 29 has an invalid length. [ 270.376101][ T7592] netlink: 'syz.2.609': attribute type 46 has an invalid length. [ 270.405605][ T7592] netlink: 36 bytes leftover after parsing attributes in process `syz.2.609'. [ 270.499760][ T7590] netlink: 'syz.0.608': attribute type 29 has an invalid length. [ 270.512117][ T7590] netlink: 'syz.0.608': attribute type 29 has an invalid length. [ 270.523915][ T7590] netlink: 'syz.0.608': attribute type 29 has an invalid length. [ 270.679628][ T7600] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.619'. [ 270.695140][ T7600] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.619'. [ 270.719693][ T7600] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.619'. [ 270.782106][ T7601] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.611'. [ 270.991260][ T7603] veth0_vlan: entered allmulticast mode [ 273.986662][ T7611] veth0_vlan: left promiscuous mode [ 273.992959][ T7611] veth0_vlan: entered promiscuous mode [ 274.333372][ T7617] netlink: 'syz.0.616': attribute type 3 has an invalid length. [ 274.379189][ T7617] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.616'. [ 274.449858][ T7630] netlink: 14 bytes leftover after parsing attributes in process `syz.2.621'. [ 274.568710][ T7633] netlink: 'syz.1.622': attribute type 46 has an invalid length. [ 274.598592][ T7633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.622'. [ 275.076418][ T7644] veth0_vlan: entered allmulticast mode [ 275.216591][ T7639] netlink: 'syz.2.624': attribute type 29 has an invalid length. [ 275.317157][ T7642] veth0_vlan: left promiscuous mode [ 275.399092][ T7642] veth0_vlan: entered promiscuous mode [ 275.473366][ T7639] netlink: 'syz.2.624': attribute type 29 has an invalid length. [ 275.506273][ T7637] netlink: 'syz.2.624': attribute type 29 has an invalid length. [ 275.808055][ T7647] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.627'. [ 278.917164][ T12] tipc: Subscription rejected, illegal request [ 278.953872][ T7672] netlink: 'syz.0.635': attribute type 46 has an invalid length. [ 278.977942][ T7672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.635'. [ 279.074138][ T7683] netlink: 'syz.2.636': attribute type 21 has an invalid length. [ 279.148489][ T7683] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.636'. [ 285.956039][ T7716] netlink: 'syz.0.647': attribute type 46 has an invalid length. [ 285.988294][ T7716] netlink: 36 bytes leftover after parsing attributes in process `syz.0.647'. [ 286.602092][ T7728] netlink: 'syz.0.652': attribute type 10 has an invalid length. [ 289.732554][ T7751] netlink: 'syz.0.660': attribute type 46 has an invalid length. [ 289.757845][ T7751] netlink: 36 bytes leftover after parsing attributes in process `syz.0.660'. [ 289.910660][ T7756] netlink: 'syz.2.661': attribute type 10 has an invalid length. [ 293.133475][ T7774] netlink: 'syz.1.674': attribute type 39 has an invalid length. [ 294.457649][ T7793] FAULT_INJECTION: forcing a failure. [ 294.457649][ T7793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.478117][ T7793] CPU: 1 PID: 7793 Comm: syz.0.671 Not tainted syzkaller #0 [ 294.485482][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 294.495592][ T7793] Call Trace: [ 294.498929][ T7793] [ 294.501920][ T7793] dump_stack_lvl+0x18c/0x250 [ 294.506676][ T7793] ? show_regs_print_info+0x20/0x20 [ 294.511957][ T7793] ? load_image+0x400/0x400 [ 294.516523][ T7793] ? __might_fault+0xaa/0x120 [ 294.521257][ T7793] ? __lock_acquire+0x7d40/0x7d40 [ 294.526345][ T7793] should_fail_ex+0x39d/0x4d0 [ 294.531087][ T7793] _copy_from_user+0x2f/0xe0 [ 294.535727][ T7793] __sys_bpf+0x23e/0x890 [ 294.540012][ T7793] ? bpf_link_show_fdinfo+0x390/0x390 [ 294.545433][ T7793] ? lock_chain_count+0x20/0x20 [ 294.550323][ T7793] __x64_sys_bpf+0x7c/0x90 [ 294.554782][ T7793] do_syscall_64+0x55/0xa0 [ 294.559232][ T7793] ? clear_bhb_loop+0x40/0x90 [ 294.563937][ T7793] ? clear_bhb_loop+0x40/0x90 [ 294.568654][ T7793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.574579][ T7793] RIP: 0033:0x7f18cd99bf79 [ 294.579020][ T7793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.598657][ T7793] RSP: 002b:00007f18ce7ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.607198][ T7793] RAX: ffffffffffffffda RBX: 00007f18cdc15fa0 RCX: 00007f18cd99bf79 [ 294.615194][ T7793] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 294.623190][ T7793] RBP: 00007f18ce7ab090 R08: 0000000000000000 R09: 0000000000000000 [ 294.631203][ T7793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.639205][ T7793] R13: 00007f18cdc16038 R14: 00007f18cdc15fa0 R15: 00007ffd1385ec18 [ 294.647245][ T7793] [ 294.729518][ T7799] netlink: 'syz.3.673': attribute type 10 has an invalid length. [ 298.684894][ T7828] netlink: 'syz.2.685': attribute type 10 has an invalid length. [ 302.285527][ T7863] netlink: 'syz.0.695': attribute type 39 has an invalid length. [ 302.303943][ T7864] FAULT_INJECTION: forcing a failure. [ 302.303943][ T7864] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 302.358985][ T7864] CPU: 0 PID: 7864 Comm: syz.3.694 Not tainted syzkaller #0 [ 302.366372][ T7864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 302.376490][ T7864] Call Trace: [ 302.379798][ T7864] [ 302.382761][ T7864] dump_stack_lvl+0x18c/0x250 [ 302.387481][ T7864] ? show_regs_print_info+0x20/0x20 [ 302.392716][ T7864] ? load_image+0x400/0x400 [ 302.397252][ T7864] ? __lock_acquire+0x7d40/0x7d40 [ 302.402312][ T7864] ? mark_lock+0x94/0x320 [ 302.406687][ T7864] should_fail_ex+0x39d/0x4d0 [ 302.411447][ T7864] prepare_alloc_pages+0x1e2/0x5f0 [ 302.416635][ T7864] __alloc_pages+0x134/0x460 [ 302.421253][ T7864] ? zone_statistics+0x170/0x170 [ 302.426235][ T7864] ? do_wp_page+0x7ca/0x35f0 [ 302.430855][ T7864] ? do_wp_page+0xfc5/0x35f0 [ 302.435473][ T7864] __folio_alloc+0x10/0x20 [ 302.439917][ T7864] vma_alloc_folio+0x47a/0x8f0 [ 302.444715][ T7864] do_wp_page+0x1243/0x35f0 [ 302.449258][ T7864] ? folio_put+0xd0/0xd0 [ 302.453521][ T7864] ? do_raw_spin_lock+0x11f/0x2c0 [ 302.458676][ T7864] ? __rwlock_init+0x150/0x150 [ 302.463501][ T7864] handle_mm_fault+0x135d/0x4c00 [ 302.468482][ T7864] ? handle_mm_fault+0xe7/0x4c00 [ 302.473464][ T7864] ? numa_migrate_prep+0x350/0x350 [ 302.478624][ T7864] ? lock_chain_count+0x20/0x20 [ 302.483503][ T7864] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 302.488986][ T7864] do_user_addr_fault+0x730/0x12c0 [ 302.494142][ T7864] exc_page_fault+0x64/0x100 [ 302.498761][ T7864] asm_exc_page_fault+0x26/0x30 [ 302.503635][ T7864] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 302.509484][ T7864] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 302.529131][ T7864] RSP: 0018:ffffc90005807ce0 EFLAGS: 00050202 [ 302.535223][ T7864] RAX: ffffffff84296101 RBX: 000000000014000e RCX: 000000000013f10e [ 302.543219][ T7864] RDX: 0000000000000000 RSI: ffff888050e00f00 RDI: 0000200000001000 [ 302.551221][ T7864] RBP: ffff888050c00000 R08: 0000000000000005 R09: 0000000000000006 [ 302.559222][ T7864] R10: dffffc0000000000 R11: ffffed100a1e8001 R12: 000020000014010e [ 302.567219][ T7864] R13: ffff888050e00000 R14: 0000200000000100 R15: ffff888050e00000 [ 302.575244][ T7864] ? _copy_from_user+0xa1/0xe0 [ 302.580045][ T7864] _copy_to_user+0x85/0xa0 [ 302.584523][ T7864] map_get_next_key+0x4fd/0x620 [ 302.589403][ T7864] ? map_get_next_key+0x2d7/0x620 [ 302.594457][ T7864] __sys_bpf+0x715/0x890 [ 302.598729][ T7864] ? bpf_link_show_fdinfo+0x390/0x390 [ 302.604142][ T7864] ? lock_chain_count+0x20/0x20 [ 302.609031][ T7864] __x64_sys_bpf+0x7c/0x90 [ 302.613495][ T7864] do_syscall_64+0x55/0xa0 [ 302.617948][ T7864] ? clear_bhb_loop+0x40/0x90 [ 302.622651][ T7864] ? clear_bhb_loop+0x40/0x90 [ 302.627361][ T7864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.633289][ T7864] RIP: 0033:0x7fc9e2d9bf79 [ 302.637736][ T7864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.657376][ T7864] RSP: 002b:00007fc9e3bed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 302.665820][ T7864] RAX: ffffffffffffffda RBX: 00007fc9e3016090 RCX: 00007fc9e2d9bf79 [ 302.673816][ T7864] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 302.681809][ T7864] RBP: 00007fc9e3bed090 R08: 0000000000000000 R09: 0000000000000000 [ 302.689808][ T7864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.697796][ T7864] R13: 00007fc9e3016128 R14: 00007fc9e3016090 R15: 00007ffc0dff7f78 [ 302.705811][ T7864] [ 302.946681][ T7873] netlink: 'syz.1.698': attribute type 10 has an invalid length. [ 306.509667][ T7904] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.705'. [ 306.666457][ T7904] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.705'. [ 306.848060][ T7911] netlink: 'syz.0.709': attribute type 10 has an invalid length. [ 307.039941][ T7917] netlink: 60 bytes leftover after parsing attributes in process `syz.2.713'. [ 307.184270][ T7917] netlink: 60 bytes leftover after parsing attributes in process `syz.2.713'. [ 307.198544][ T7921] netlink: 60 bytes leftover after parsing attributes in process `syz.2.713'. [ 310.668984][ T7938] FAULT_INJECTION: forcing a failure. [ 310.668984][ T7938] name failslab, interval 1, probability 0, space 0, times 0 [ 310.700019][ T7938] CPU: 0 PID: 7938 Comm: syz.3.718 Not tainted syzkaller #0 [ 310.707399][ T7938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 310.717509][ T7938] Call Trace: [ 310.720844][ T7938] [ 310.723903][ T7938] dump_stack_lvl+0x18c/0x250 [ 310.728651][ T7938] ? sctp_sendmsg+0x1575/0x28c0 [ 310.733560][ T7938] ? ___sys_sendmsg+0x2a6/0x360 [ 310.738497][ T7938] ? show_regs_print_info+0x20/0x20 [ 310.743776][ T7938] ? load_image+0x400/0x400 [ 310.748384][ T7938] should_fail_ex+0x39d/0x4d0 [ 310.753231][ T7938] should_failslab+0x9/0x20 [ 310.757808][ T7938] slab_pre_alloc_hook+0x59/0x310 [ 310.762898][ T7938] ? sctp_add_bind_addr+0x8c/0x360 [ 310.768079][ T7938] __kmem_cache_alloc_node+0x53/0x250 [ 310.773527][ T7938] ? sctp_add_bind_addr+0x8c/0x360 [ 310.778714][ T7938] kmalloc_trace+0x2a/0xe0 [ 310.783219][ T7938] sctp_add_bind_addr+0x8c/0x360 [ 310.788327][ T7938] sctp_copy_local_addr_list+0x315/0x4f0 [ 310.794073][ T7938] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 310.799867][ T7938] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 310.806096][ T7938] ? sctp_v4_is_any+0x35/0x60 [ 310.810836][ T7938] ? sctp_copy_one_addr+0x8c/0x350 [ 310.816027][ T7938] sctp_bind_addr_copy+0xb3/0x3c0 [ 310.821216][ T7938] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 310.827623][ T7938] sctp_connect_new_asoc+0x2f9/0x6a0 [ 310.832981][ T7938] ? __sctp_connect+0xd80/0xd80 [ 310.837944][ T7938] ? __local_bh_enable_ip+0x13a/0x1c0 [ 310.843383][ T7938] ? _local_bh_enable+0xa0/0xa0 [ 310.848298][ T7938] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 310.854185][ T7938] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 310.860053][ T7938] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 310.865660][ T7938] ? security_sctp_bind_connect+0x89/0xb0 [ 310.871449][ T7938] sctp_sendmsg+0x1575/0x28c0 [ 310.876203][ T7938] ? sctp_getsockopt+0xb60/0xb60 [ 310.881204][ T7938] ? aa_sk_perm+0x83c/0x970 [ 310.885783][ T7938] ? aa_af_perm+0x330/0x330 [ 310.890349][ T7938] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 310.896834][ T7938] ? sock_rps_record_flow+0x19/0x3f0 [ 310.902185][ T7938] ? inet_sendmsg+0x7c/0x2f0 [ 310.906849][ T7938] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 310.912200][ T7938] ? security_socket_sendmsg+0x80/0xa0 [ 310.917712][ T7938] ? inet_send_prepare+0x260/0x260 [ 310.922932][ T7938] ____sys_sendmsg+0x5ba/0x960 [ 310.927746][ T7938] ? __lock_acquire+0x7d40/0x7d40 [ 310.932832][ T7938] ? __asan_memset+0x22/0x40 [ 310.937489][ T7938] ? __sys_sendmsg_sock+0x30/0x30 [ 310.942573][ T7938] ? __import_iovec+0x5f2/0x850 [ 310.947496][ T7938] ? import_iovec+0x73/0xa0 [ 310.952066][ T7938] ___sys_sendmsg+0x2a6/0x360 [ 310.956814][ T7938] ? get_pid_task+0x20/0x1e0 [ 310.961477][ T7938] ? __sys_sendmsg+0x2a0/0x2a0 [ 310.966318][ T7938] ? __lock_acquire+0x7d40/0x7d40 [ 310.971446][ T7938] __se_sys_sendmsg+0x1c2/0x2b0 [ 310.976363][ T7938] ? __x64_sys_sendmsg+0x80/0x80 [ 310.981375][ T7938] ? lockdep_hardirqs_on+0x98/0x150 [ 310.986640][ T7938] do_syscall_64+0x55/0xa0 [ 310.991123][ T7938] ? clear_bhb_loop+0x40/0x90 [ 310.995857][ T7938] ? clear_bhb_loop+0x40/0x90 [ 311.000605][ T7938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.006560][ T7938] RIP: 0033:0x7fc9e2d9bf79 [ 311.011029][ T7938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.030687][ T7938] RSP: 002b:00007fc9e3c0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.039166][ T7938] RAX: ffffffffffffffda RBX: 00007fc9e3015fa0 RCX: 00007fc9e2d9bf79 [ 311.047198][ T7938] RDX: 0000000000004000 RSI: 0000200000000e40 RDI: 0000000000000003 [ 311.055230][ T7938] RBP: 00007fc9e3c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 311.063253][ T7938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 311.071276][ T7938] R13: 00007fc9e3016038 R14: 00007fc9e3015fa0 R15: 00007ffc0dff7f78 [ 311.079325][ T7938] [ 311.401424][ T7957] FAULT_INJECTION: forcing a failure. [ 311.401424][ T7957] name failslab, interval 1, probability 0, space 0, times 0 [ 311.431924][ T7957] CPU: 1 PID: 7957 Comm: syz.2.721 Not tainted syzkaller #0 [ 311.439293][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 311.449404][ T7957] Call Trace: [ 311.452733][ T7957] [ 311.455712][ T7957] dump_stack_lvl+0x18c/0x250 [ 311.460472][ T7957] ? show_regs_print_info+0x20/0x20 [ 311.465735][ T7957] ? load_image+0x400/0x400 [ 311.470301][ T7957] ? __might_sleep+0xe0/0xe0 [ 311.474966][ T7957] ? __lock_acquire+0x7d40/0x7d40 [ 311.480070][ T7957] should_fail_ex+0x39d/0x4d0 [ 311.484873][ T7957] should_failslab+0x9/0x20 [ 311.489446][ T7957] slab_pre_alloc_hook+0x59/0x310 [ 311.494635][ T7957] ? tomoyo_encode+0x28b/0x540 [ 311.499456][ T7957] ? tomoyo_encode+0x28b/0x540 [ 311.504271][ T7957] __kmem_cache_alloc_node+0x53/0x250 [ 311.509710][ T7957] ? tomoyo_encode+0x28b/0x540 [ 311.514534][ T7957] __kmalloc+0xa4/0x230 [ 311.518756][ T7957] tomoyo_encode+0x28b/0x540 [ 311.523415][ T7957] tomoyo_realpath_from_path+0x592/0x5d0 [ 311.529128][ T7957] tomoyo_path_number_perm+0x248/0x620 [ 311.532842][ T7955] netlink: 'syz.3.722': attribute type 10 has an invalid length. [ 311.534633][ T7957] ? tomoyo_path_number_perm+0x217/0x620 [ 311.534695][ T7957] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 311.534730][ T7957] ? ksys_write+0x1c4/0x260 [ 311.534794][ T7957] ? __fget_files+0x28/0x4b0 [ 311.534821][ T7957] ? __fget_files+0x28/0x4b0 [ 311.534862][ T7957] security_file_ioctl+0x70/0xa0 [ 311.534899][ T7957] __se_sys_ioctl+0x48/0x170 [ 311.577078][ T7957] do_syscall_64+0x55/0xa0 [ 311.581544][ T7957] ? clear_bhb_loop+0x40/0x90 [ 311.586267][ T7957] ? clear_bhb_loop+0x40/0x90 [ 311.591024][ T7957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.596970][ T7957] RIP: 0033:0x7fe1adf9bf79 [ 311.601417][ T7957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.621051][ T7957] RSP: 002b:00007fe1aee85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.629497][ T7957] RAX: ffffffffffffffda RBX: 00007fe1ae216090 RCX: 00007fe1adf9bf79 [ 311.637539][ T7957] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000006 [ 311.645556][ T7957] RBP: 00007fe1aee85090 R08: 0000000000000000 R09: 0000000000000000 [ 311.653906][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.661914][ T7957] R13: 00007fe1ae216128 R14: 00007fe1ae216090 R15: 00007ffe2c4cf4f8 [ 311.669950][ T7957] [ 311.720982][ T7957] ERROR: Out of memory at tomoyo_realpath_from_path. [ 311.896846][ T7964] netlink: 60 bytes leftover after parsing attributes in process `syz.1.723'. [ 311.952443][ T7964] netlink: 60 bytes leftover after parsing attributes in process `syz.1.723'. [ 311.965236][ T7964] netlink: 60 bytes leftover after parsing attributes in process `syz.1.723'. [ 312.601918][ T7979] FAULT_INJECTION: forcing a failure. [ 312.601918][ T7979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.620216][ T7979] CPU: 0 PID: 7979 Comm: syz.1.728 Not tainted syzkaller #0 [ 312.627595][ T7979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 312.637707][ T7979] Call Trace: [ 312.641029][ T7979] [ 312.643999][ T7979] dump_stack_lvl+0x18c/0x250 [ 312.648742][ T7979] ? show_regs_print_info+0x20/0x20 [ 312.653999][ T7979] ? load_image+0x400/0x400 [ 312.658561][ T7979] ? __lock_acquire+0x7d40/0x7d40 [ 312.663898][ T7979] ? snprintf+0xe9/0x140 [ 312.668222][ T7979] should_fail_ex+0x39d/0x4d0 [ 312.672962][ T7979] _copy_to_user+0x2f/0xa0 [ 312.677430][ T7979] simple_read_from_buffer+0xe7/0x150 [ 312.682891][ T7979] proc_fail_nth_read+0x1e8/0x260 [ 312.687978][ T7979] ? proc_fault_inject_write+0x360/0x360 [ 312.693671][ T7979] ? fsnotify_perm+0x271/0x5e0 [ 312.698667][ T7979] ? proc_fault_inject_write+0x360/0x360 [ 312.704361][ T7979] vfs_read+0x28b/0x970 [ 312.708580][ T7979] ? kernel_read+0x1e0/0x1e0 [ 312.713223][ T7979] ? __fget_files+0x28/0x4b0 [ 312.717872][ T7979] ? __fget_files+0x28/0x4b0 [ 312.722520][ T7979] ? __fget_files+0x43d/0x4b0 [ 312.727256][ T7979] ? __fdget_pos+0x2a3/0x330 [ 312.731902][ T7979] ? ksys_read+0x75/0x260 [ 312.736307][ T7979] ksys_read+0x150/0x260 [ 312.740688][ T7979] ? vfs_write+0x990/0x990 [ 312.745166][ T7979] ? lockdep_hardirqs_on+0x98/0x150 [ 312.750416][ T7979] do_syscall_64+0x55/0xa0 [ 312.754892][ T7979] ? clear_bhb_loop+0x40/0x90 [ 312.759628][ T7979] ? clear_bhb_loop+0x40/0x90 [ 312.764371][ T7979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.770402][ T7979] RIP: 0033:0x7fae33d5c84e [ 312.774875][ T7979] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 312.794528][ T7979] RSP: 002b:00007fae34c3bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.802991][ T7979] RAX: ffffffffffffffda RBX: 00007fae34c3c6c0 RCX: 00007fae33d5c84e [ 312.811013][ T7979] RDX: 000000000000000f RSI: 00007fae34c3c0a0 RDI: 0000000000000008 [ 312.819126][ T7979] RBP: 00007fae34c3c090 R08: 0000000000000000 R09: 0000000000000000 [ 312.827138][ T7979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.835157][ T7979] R13: 00007fae34016128 R14: 00007fae34016090 R15: 00007ffd15a8a2a8 [ 312.843216][ T7979] [ 316.206309][ T7989] netlink: 'syz.0.732': attribute type 10 has an invalid length. [ 316.337385][ T7996] netlink: 60 bytes leftover after parsing attributes in process `syz.3.733'. [ 316.360082][ T7996] netlink: 60 bytes leftover after parsing attributes in process `syz.3.733'. [ 316.386593][ T7996] netlink: 60 bytes leftover after parsing attributes in process `syz.3.733'. [ 316.485999][ T8002] netlink: 'syz.0.735': attribute type 10 has an invalid length. [ 316.807996][ T1077] tipc: Subscription rejected, illegal request [ 317.334430][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.341841][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.524685][ T8025] netlink: 'syz.3.744': attribute type 10 has an invalid length. [ 317.672839][ T8028] FAULT_INJECTION: forcing a failure. [ 317.672839][ T8028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.703929][ T8028] CPU: 1 PID: 8028 Comm: syz.3.746 Not tainted syzkaller #0 [ 317.711309][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 317.721418][ T8028] Call Trace: [ 317.724784][ T8028] [ 317.727768][ T8028] dump_stack_lvl+0x18c/0x250 [ 317.732489][ T8028] ? show_regs_print_info+0x20/0x20 [ 317.737746][ T8028] ? load_image+0x400/0x400 [ 317.742306][ T8028] ? __might_fault+0xaa/0x120 [ 317.747026][ T8028] ? __lock_acquire+0x7d40/0x7d40 [ 317.752111][ T8028] should_fail_ex+0x39d/0x4d0 [ 317.756854][ T8028] _copy_from_user+0x2f/0xe0 [ 317.761501][ T8028] csum_and_copy_from_iter+0x662/0x14a0 [ 317.767129][ T8028] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 317.772840][ T8028] ? __kasan_slab_alloc+0x6c/0x80 [ 317.777917][ T8028] ? slab_post_alloc_hook+0x8a/0x4b0 [ 317.783285][ T8028] ? rcu_is_watching+0x15/0xb0 [ 317.788121][ T8028] ip_generic_getfrag+0x163/0x2f0 [ 317.793217][ T8028] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 317.798145][ T8028] ? skb_put+0x11b/0x210 [ 317.802402][ T8030] netlink: 60 bytes leftover after parsing attributes in process `syz.1.747'. [ 317.811365][ T8028] __ip_append_data+0x2f11/0x3d40 [ 317.816993][ T8028] ? raw_send_hdrinc+0x1170/0x1170 [ 317.822144][ T8028] ? mark_lock+0x94/0x320 [ 317.826515][ T8028] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 317.832531][ T8028] ? ip_setup_cork+0x860/0x860 [ 317.837364][ T8028] ? ip_setup_cork+0x530/0x860 [ 317.842173][ T8028] ip_append_data+0x10d/0x180 [ 317.846906][ T8028] ? raw_send_hdrinc+0x1170/0x1170 [ 317.852055][ T8028] raw_sendmsg+0x15c1/0x1c00 [ 317.856702][ T8028] ? compat_raw_ioctl+0x70/0x70 [ 317.861589][ T8028] ? __lock_acquire+0x1273/0x7d40 [ 317.866658][ T8028] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 317.873104][ T8028] ? sock_rps_record_flow+0x19/0x3f0 [ 317.878428][ T8028] ? inet_sendmsg+0x7c/0x2f0 [ 317.883053][ T8028] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 317.888377][ T8028] ? security_socket_sendmsg+0x80/0xa0 [ 317.893868][ T8028] ? inet_send_prepare+0x260/0x260 [ 317.899015][ T8028] ____sys_sendmsg+0x5ba/0x960 [ 317.903805][ T8028] ? __lock_acquire+0x7d40/0x7d40 [ 317.908858][ T8028] ? __asan_memset+0x22/0x40 [ 317.913499][ T8028] ? __sys_sendmsg_sock+0x30/0x30 [ 317.918567][ T8028] ? __import_iovec+0x3fa/0x850 [ 317.923735][ T8028] ? import_iovec+0x73/0xa0 [ 317.928285][ T8028] ___sys_sendmsg+0x2a6/0x360 [ 317.932998][ T8028] ? get_pid_task+0x20/0x1e0 [ 317.937644][ T8028] ? __sys_sendmsg+0x2a0/0x2a0 [ 317.942448][ T8028] ? __lock_acquire+0x7d40/0x7d40 [ 317.947544][ T8028] __se_sys_sendmsg+0x1c2/0x2b0 [ 317.952439][ T8028] ? __x64_sys_sendmsg+0x80/0x80 [ 317.957416][ T8028] ? lockdep_hardirqs_on+0x98/0x150 [ 317.962667][ T8028] do_syscall_64+0x55/0xa0 [ 317.967141][ T8028] ? clear_bhb_loop+0x40/0x90 [ 317.971858][ T8028] ? clear_bhb_loop+0x40/0x90 [ 317.976568][ T8028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.982486][ T8028] RIP: 0033:0x7fc9e2d9bf79 [ 317.986933][ T8028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.006565][ T8028] RSP: 002b:00007fc9e3c0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.015032][ T8028] RAX: ffffffffffffffda RBX: 00007fc9e3015fa0 RCX: 00007fc9e2d9bf79 [ 318.023038][ T8028] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 318.031043][ T8028] RBP: 00007fc9e3c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 318.039045][ T8028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.047042][ T8028] R13: 00007fc9e3016038 R14: 00007fc9e3015fa0 R15: 00007ffc0dff7f78 [ 318.055056][ T8028] [ 318.071793][ T8030] netlink: 60 bytes leftover after parsing attributes in process `syz.1.747'. [ 318.083537][ T8031] netlink: 60 bytes leftover after parsing attributes in process `syz.1.747'. [ 318.094087][ T8031] netlink: 60 bytes leftover after parsing attributes in process `syz.1.747'. [ 318.268744][ T1077] tipc: Subscription rejected, illegal request [ 318.317264][ T8039] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.750'. [ 318.569597][ T8043] netlink: 'syz.3.752': attribute type 29 has an invalid length. [ 322.903448][ T8033] netlink: 188 bytes leftover after parsing attributes in process `syz.1.748'. [ 322.912967][ T8043] netlink: 'syz.3.752': attribute type 29 has an invalid length. [ 323.061858][ T8052] netlink: 'syz.3.754': attribute type 10 has an invalid length. [ 323.181032][ T8059] netlink: 60 bytes leftover after parsing attributes in process `syz.0.757'. [ 323.208619][ T8059] netlink: 60 bytes leftover after parsing attributes in process `syz.0.757'. [ 323.240640][ T8059] netlink: 60 bytes leftover after parsing attributes in process `syz.0.757'. [ 323.283800][ T8059] netlink: 60 bytes leftover after parsing attributes in process `syz.0.757'. [ 323.516904][ T8067] netlink: 'syz.0.760': attribute type 10 has an invalid length. [ 323.676396][ T8070] netlink: 16767 bytes leftover after parsing attributes in process `syz.0.760'. [ 326.154201][ T8093] netlink: 'syz.2.767': attribute type 10 has an invalid length. [ 326.279563][ T8098] netlink: 60 bytes leftover after parsing attributes in process `syz.0.768'. [ 326.301906][ T8098] netlink: 60 bytes leftover after parsing attributes in process `syz.0.768'. [ 326.327784][ T8098] netlink: 60 bytes leftover after parsing attributes in process `syz.0.768'. [ 326.369184][ T8098] netlink: 60 bytes leftover after parsing attributes in process `syz.0.768'. [ 326.775679][ T8119] netlink: 'syz.1.773': attribute type 10 has an invalid length. [ 326.799707][ T8119] veth1_macvtap: left promiscuous mode [ 327.001059][ T8125] netlink: 'syz.0.777': attribute type 10 has an invalid length. [ 329.279447][ T8134] __nla_validate_parse: 1 callbacks suppressed [ 329.279465][ T8134] netlink: 60 bytes leftover after parsing attributes in process `syz.3.781'. [ 329.313729][ T8141] netlink: 'syz.1.783': attribute type 10 has an invalid length. [ 329.362858][ T8141] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 329.574362][ T8154] netlink: 208092 bytes leftover after parsing attributes in process `syz.1.786'. [ 329.704915][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 329.729106][ T8161] netlink: 'syz.2.789': attribute type 10 has an invalid length. [ 329.947281][ T8171] netlink: 60 bytes leftover after parsing attributes in process `syz.0.792'. [ 329.960818][ T8171] netlink: 60 bytes leftover after parsing attributes in process `syz.0.792'. [ 330.006127][ T8172] netlink: 'syz.2.790': attribute type 10 has an invalid length. [ 330.049494][ T8172] veth1_macvtap: left promiscuous mode [ 330.175583][ T8173] netlink: 60 bytes leftover after parsing attributes in process `syz.0.792'. [ 330.185580][ T8171] netlink: 60 bytes leftover after parsing attributes in process `syz.0.792'. [ 331.403748][ T8183] netlink: 176 bytes leftover after parsing attributes in process `syz.0.795'. [ 331.715957][ T8200] netlink: 'syz.2.799': attribute type 10 has an invalid length. [ 331.900452][ T8206] netlink: 60 bytes leftover after parsing attributes in process `syz.1.803'. [ 332.132848][ T8214] FAULT_INJECTION: forcing a failure. [ 332.132848][ T8214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.150146][ T8214] CPU: 0 PID: 8214 Comm: syz.2.805 Not tainted syzkaller #0 [ 332.157548][ T8214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.167662][ T8214] Call Trace: [ 332.170985][ T8214] [ 332.173959][ T8214] dump_stack_lvl+0x18c/0x250 [ 332.178701][ T8214] ? show_regs_print_info+0x20/0x20 [ 332.183970][ T8214] ? load_image+0x400/0x400 [ 332.188526][ T8214] ? __lock_acquire+0x7d40/0x7d40 [ 332.193617][ T8214] ? snprintf+0xe9/0x140 [ 332.197920][ T8214] should_fail_ex+0x39d/0x4d0 [ 332.202669][ T8214] _copy_to_user+0x2f/0xa0 [ 332.207143][ T8214] simple_read_from_buffer+0xe7/0x150 [ 332.212586][ T8214] proc_fail_nth_read+0x1e8/0x260 [ 332.217678][ T8214] ? proc_fault_inject_write+0x360/0x360 [ 332.223387][ T8214] ? fsnotify_perm+0x271/0x5e0 [ 332.228216][ T8214] ? proc_fault_inject_write+0x360/0x360 [ 332.233914][ T8214] vfs_read+0x28b/0x970 [ 332.238133][ T8214] ? kernel_read+0x1e0/0x1e0 [ 332.242791][ T8214] ? __fget_files+0x28/0x4b0 [ 332.247440][ T8214] ? __fget_files+0x28/0x4b0 [ 332.252085][ T8214] ? __fget_files+0x43d/0x4b0 [ 332.256944][ T8214] ? __fdget_pos+0x2a3/0x330 [ 332.261624][ T8214] ? ksys_read+0x75/0x260 [ 332.266014][ T8214] ksys_read+0x150/0x260 [ 332.270322][ T8214] ? vfs_write+0x990/0x990 [ 332.274813][ T8214] ? lockdep_hardirqs_on+0x98/0x150 [ 332.280065][ T8214] do_syscall_64+0x55/0xa0 [ 332.284538][ T8214] ? clear_bhb_loop+0x40/0x90 [ 332.289356][ T8214] ? clear_bhb_loop+0x40/0x90 [ 332.294125][ T8214] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.300074][ T8214] RIP: 0033:0x7fe1adf5c84e [ 332.304537][ T8214] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 332.324195][ T8214] RSP: 002b:00007fe1aeea5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 332.332683][ T8214] RAX: ffffffffffffffda RBX: 00007fe1aeea66c0 RCX: 00007fe1adf5c84e [ 332.340722][ T8214] RDX: 000000000000000f RSI: 00007fe1aeea60a0 RDI: 0000000000000004 [ 332.348753][ T8214] RBP: 00007fe1aeea6090 R08: 0000000000000000 R09: 0000000000000000 [ 332.356772][ T8214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.364802][ T8214] R13: 00007fe1ae216038 R14: 00007fe1ae215fa0 R15: 00007ffe2c4cf4f8 [ 332.373364][ T8214] [ 334.682947][ T8206] netlink: 60 bytes leftover after parsing attributes in process `syz.1.803'. [ 335.223150][ T8236] netlink: 'syz.3.813': attribute type 10 has an invalid length. [ 335.657482][ T49] tipc: Subscription rejected, illegal request [ 335.827551][ T8251] netlink: 60 bytes leftover after parsing attributes in process `syz.1.818'. [ 335.840863][ T8251] netlink: 60 bytes leftover after parsing attributes in process `syz.1.818'. [ 335.853928][ T8251] netlink: 60 bytes leftover after parsing attributes in process `syz.1.818'. [ 335.865714][ T8251] netlink: 60 bytes leftover after parsing attributes in process `syz.1.818'. [ 339.003280][ T8265] FAULT_INJECTION: forcing a failure. [ 339.003280][ T8265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.022017][ T8265] CPU: 1 PID: 8265 Comm: syz.0.823 Not tainted syzkaller #0 [ 339.029420][ T8265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.039966][ T8265] Call Trace: [ 339.043302][ T8265] [ 339.046313][ T8265] dump_stack_lvl+0x18c/0x250 [ 339.051065][ T8265] ? show_regs_print_info+0x20/0x20 [ 339.056489][ T8265] ? load_image+0x400/0x400 [ 339.061020][ T8265] ? __might_fault+0xaa/0x120 [ 339.065720][ T8265] ? __lock_acquire+0x7d40/0x7d40 [ 339.070776][ T8265] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 339.077079][ T8265] should_fail_ex+0x39d/0x4d0 [ 339.081785][ T8265] _copy_from_user+0x2f/0xe0 [ 339.086395][ T8265] __sys_bpf+0x23e/0x890 [ 339.090688][ T8265] ? bpf_link_show_fdinfo+0x390/0x390 [ 339.096130][ T8265] ? lock_chain_count+0x20/0x20 [ 339.101045][ T8265] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 339.107100][ T8265] __x64_sys_bpf+0x7c/0x90 [ 339.111576][ T8265] do_syscall_64+0x55/0xa0 [ 339.116070][ T8265] ? clear_bhb_loop+0x40/0x90 [ 339.120803][ T8265] ? clear_bhb_loop+0x40/0x90 [ 339.125535][ T8265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.131483][ T8265] RIP: 0033:0x7f18cd99bf79 [ 339.135935][ T8265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.155564][ T8265] RSP: 002b:00007f18ce7ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 339.163996][ T8265] RAX: ffffffffffffffda RBX: 00007f18cdc15fa0 RCX: 00007f18cd99bf79 [ 339.171997][ T8265] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 339.180028][ T8265] RBP: 00007f18ce7ab090 R08: 0000000000000000 R09: 0000000000000000 [ 339.188034][ T8265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.196034][ T8265] R13: 00007f18cdc16038 R14: 00007f18cdc15fa0 R15: 00007ffd1385ec18 [ 339.204040][ T8265] [ 339.291586][ T8268] netlink: 'syz.0.824': attribute type 6 has an invalid length. [ 339.300559][ T8268] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.824'. [ 340.661988][ T8263] netlink: 'syz.1.822': attribute type 10 has an invalid length. [ 340.844396][ T1077] tipc: Subscription rejected, illegal request [ 340.960049][ T8280] netlink: 60 bytes leftover after parsing attributes in process `syz.1.829'. [ 340.978644][ T8280] netlink: 60 bytes leftover after parsing attributes in process `syz.1.829'. [ 341.000163][ T8280] netlink: 60 bytes leftover after parsing attributes in process `syz.1.829'. [ 341.021601][ T8280] netlink: 60 bytes leftover after parsing attributes in process `syz.1.829'. [ 341.194532][ T8284] netlink: 'syz.3.831': attribute type 29 has an invalid length. [ 341.214171][ T8284] netlink: 'syz.3.831': attribute type 29 has an invalid length. [ 341.279659][ T8284] netlink: 'syz.3.831': attribute type 29 has an invalid length. [ 341.320748][ T8284] netlink: 'syz.3.831': attribute type 29 has an invalid length. [ 341.347407][ T8284] netlink: 'syz.3.831': attribute type 29 has an invalid length. [ 341.364580][ T8284] netlink: 'syz.3.831': attribute type 29 has an invalid length. [ 341.431858][ T8293] netlink: 'syz.1.834': attribute type 10 has an invalid length. [ 341.670863][ T1077] tipc: Subscription rejected, illegal request [ 341.783973][ T8305] FAULT_INJECTION: forcing a failure. [ 341.783973][ T8305] name failslab, interval 1, probability 0, space 0, times 0 [ 341.798161][ T8305] CPU: 0 PID: 8305 Comm: syz.3.839 Not tainted syzkaller #0 [ 341.805518][ T8305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.815656][ T8305] Call Trace: [ 341.818988][ T8305] [ 341.821948][ T8305] dump_stack_lvl+0x18c/0x250 [ 341.826693][ T8305] ? sctp_sendmsg+0x1575/0x28c0 [ 341.831563][ T8305] ? ___sys_sendmsg+0x2a6/0x360 [ 341.836436][ T8305] ? show_regs_print_info+0x20/0x20 [ 341.841668][ T8305] ? load_image+0x400/0x400 [ 341.846220][ T8305] should_fail_ex+0x39d/0x4d0 [ 341.850964][ T8305] should_failslab+0x9/0x20 [ 341.855600][ T8305] slab_pre_alloc_hook+0x59/0x310 [ 341.860680][ T8305] ? sctp_add_bind_addr+0x8c/0x360 [ 341.865874][ T8305] __kmem_cache_alloc_node+0x53/0x250 [ 341.871290][ T8305] ? sctp_add_bind_addr+0x8c/0x360 [ 341.876446][ T8305] kmalloc_trace+0x2a/0xe0 [ 341.880903][ T8305] sctp_add_bind_addr+0x8c/0x360 [ 341.885878][ T8305] sctp_copy_local_addr_list+0x315/0x4f0 [ 341.891551][ T8305] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 341.897310][ T8305] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 341.903452][ T8305] ? sctp_v6_is_any+0x64/0x70 [ 341.908191][ T8305] ? sctp_copy_one_addr+0x8c/0x350 [ 341.913340][ T8305] sctp_bind_addr_copy+0xb3/0x3c0 [ 341.918415][ T8305] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 341.924860][ T8305] sctp_connect_new_asoc+0x2f9/0x6a0 [ 341.930176][ T8305] ? __sctp_connect+0xd80/0xd80 [ 341.935056][ T8305] ? __local_bh_enable_ip+0x13a/0x1c0 [ 341.940478][ T8305] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 341.946081][ T8305] ? security_sctp_bind_connect+0x89/0xb0 [ 341.951855][ T8305] sctp_sendmsg+0x1575/0x28c0 [ 341.956590][ T8305] ? sctp_getsockopt+0xb60/0xb60 [ 341.961563][ T8305] ? aa_sk_perm+0x83c/0x970 [ 341.966200][ T8305] ? aa_af_perm+0x330/0x330 [ 341.970739][ T8305] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 341.977216][ T8305] ? sock_rps_record_flow+0x19/0x3f0 [ 341.982583][ T8305] ? inet_sendmsg+0xe9/0x2f0 [ 341.987235][ T8305] ? inet_send_prepare+0x260/0x260 [ 341.992392][ T8305] ____sys_sendmsg+0x5ba/0x960 [ 341.997214][ T8305] ? __lock_acquire+0x7d40/0x7d40 [ 342.002283][ T8305] ? __asan_memset+0x22/0x40 [ 342.006908][ T8305] ? __sys_sendmsg_sock+0x30/0x30 [ 342.011962][ T8305] ? __import_iovec+0x5f2/0x850 [ 342.016863][ T8305] ? import_iovec+0x73/0xa0 [ 342.021413][ T8305] ___sys_sendmsg+0x2a6/0x360 [ 342.026123][ T8305] ? __sys_sendmsg+0x2a0/0x2a0 [ 342.030932][ T8305] ? trace_call_bpf+0xc3/0x6c0 [ 342.035752][ T8305] __se_sys_sendmsg+0x1c2/0x2b0 [ 342.040633][ T8305] ? __x64_sys_sendmsg+0x80/0x80 [ 342.045628][ T8305] ? lockdep_hardirqs_on+0x98/0x150 [ 342.050862][ T8305] do_syscall_64+0x55/0xa0 [ 342.055318][ T8305] ? clear_bhb_loop+0x40/0x90 [ 342.060022][ T8305] ? clear_bhb_loop+0x40/0x90 [ 342.064729][ T8305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.070648][ T8305] RIP: 0033:0x7fc9e2d9bf79 [ 342.075094][ T8305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.094732][ T8305] RSP: 002b:00007fc9e3c0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.103175][ T8305] RAX: ffffffffffffffda RBX: 00007fc9e3015fa0 RCX: 00007fc9e2d9bf79 [ 342.111178][ T8305] RDX: 00000000000000c9 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 342.119172][ T8305] RBP: 00007fc9e3c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 342.127178][ T8305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.135194][ T8305] R13: 00007fc9e3016038 R14: 00007fc9e3015fa0 R15: 00007ffc0dff7f78 [ 342.143221][ T8305] [ 342.489203][ T8311] netlink: 60 bytes leftover after parsing attributes in process `syz.3.841'. [ 342.498225][ T8311] netlink: 60 bytes leftover after parsing attributes in process `syz.3.841'. [ 342.524499][ T8311] netlink: 60 bytes leftover after parsing attributes in process `syz.3.841'. [ 342.571911][ T8311] netlink: 60 bytes leftover after parsing attributes in process `syz.3.841'. [ 342.640798][ T8314] netlink: 'syz.2.843': attribute type 5 has an invalid length. [ 342.662350][ T8314] netlink: 'syz.2.843': attribute type 1 has an invalid length. [ 342.715012][ T8314] netlink: 195604 bytes leftover after parsing attributes in process `syz.2.843'. [ 342.813252][ T8314] tap0: tun_chr_ioctl cmd 2147767507 [ 345.822094][ T8328] tap0: tun_chr_ioctl cmd 1074025675 [ 345.827754][ T8328] tap0: persist disabled [ 346.002084][ T3456] tipc: Subscription rejected, illegal request [ 346.163708][ T8343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.852'. [ 346.175204][ T8343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.852'. [ 346.187554][ T8343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.852'. [ 346.204134][ T8343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.852'. [ 346.395082][ T8349] validate_nla: 1 callbacks suppressed [ 346.395104][ T8349] netlink: 'syz.1.854': attribute type 10 has an invalid length. [ 347.076096][ T8367] netlink: 60 bytes leftover after parsing attributes in process `syz.2.862'. [ 347.092077][ T8367] netlink: 60 bytes leftover after parsing attributes in process `syz.2.862'. [ 347.103017][ T8367] netlink: 60 bytes leftover after parsing attributes in process `syz.2.862'. [ 347.115453][ T8367] netlink: 60 bytes leftover after parsing attributes in process `syz.2.862'. [ 347.259029][ T8373] FAULT_INJECTION: forcing a failure. [ 347.259029][ T8373] name failslab, interval 1, probability 0, space 0, times 0 [ 347.272268][ T8373] CPU: 1 PID: 8373 Comm: syz.0.864 Not tainted syzkaller #0 [ 347.279609][ T8373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 347.289704][ T8373] Call Trace: [ 347.293011][ T8373] [ 347.296005][ T8373] dump_stack_lvl+0x18c/0x250 [ 347.300727][ T8373] ? show_regs_print_info+0x20/0x20 [ 347.305960][ T8373] ? load_image+0x400/0x400 [ 347.310502][ T8373] should_fail_ex+0x39d/0x4d0 [ 347.315215][ T8373] should_failslab+0x9/0x20 [ 347.319749][ T8373] slab_pre_alloc_hook+0x59/0x310 [ 347.324836][ T8373] kmem_cache_alloc+0x5a/0x2d0 [ 347.329672][ T8373] ? radix_tree_node_alloc+0x7e/0x3a0 [ 347.335105][ T8373] radix_tree_node_alloc+0x7e/0x3a0 [ 347.340348][ T8373] idr_get_free+0x2b3/0xa60 [ 347.344903][ T8373] idr_alloc_cyclic+0x27b/0x5d0 [ 347.349793][ T8373] ? idr_alloc+0x2f0/0x2f0 [ 347.354240][ T8373] ? do_raw_spin_lock+0x11f/0x2c0 [ 347.359305][ T8373] ? bpf_map_alloc_id+0x21/0xd0 [ 347.364191][ T8373] bpf_map_alloc_id+0x40/0xd0 [ 347.368899][ T8373] map_create+0xe25/0x12f0 [ 347.373361][ T8373] __sys_bpf+0x651/0x890 [ 347.377637][ T8373] ? bpf_link_show_fdinfo+0x390/0x390 [ 347.383058][ T8373] ? lock_chain_count+0x20/0x20 [ 347.387952][ T8373] __x64_sys_bpf+0x7c/0x90 [ 347.392395][ T8373] do_syscall_64+0x55/0xa0 [ 347.396854][ T8373] ? clear_bhb_loop+0x40/0x90 [ 347.401563][ T8373] ? clear_bhb_loop+0x40/0x90 [ 347.406274][ T8373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.412196][ T8373] RIP: 0033:0x7f18cd99bf79 [ 347.416639][ T8373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.436275][ T8373] RSP: 002b:00007f18ce7ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.444725][ T8373] RAX: ffffffffffffffda RBX: 00007f18cdc15fa0 RCX: 00007f18cd99bf79 [ 347.452723][ T8373] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000000 [ 347.460723][ T8373] RBP: 00007f18ce7ab090 R08: 0000000000000000 R09: 0000000000000000 [ 347.468715][ T8373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.476716][ T8373] R13: 00007f18cdc16038 R14: 00007f18cdc15fa0 R15: 00007ffd1385ec18 [ 347.484758][ T8373] [ 347.650859][ T8377] netlink: 'syz.3.865': attribute type 10 has an invalid length. [ 347.696092][ T8375] netlink: 'syz.2.866': attribute type 29 has an invalid length. [ 347.736208][ T8375] netlink: 'syz.2.866': attribute type 29 has an invalid length. [ 347.799279][ T8382] netlink: 'syz.2.866': attribute type 29 has an invalid length. [ 347.835015][ T8375] netlink: 'syz.2.866': attribute type 29 has an invalid length. [ 347.866045][ T8375] netlink: 'syz.2.866': attribute type 29 has an invalid length. [ 347.894042][ T8375] netlink: 'syz.2.866': attribute type 29 has an invalid length. [ 348.057873][ T8391] netlink: 60 bytes leftover after parsing attributes in process `syz.0.871'. [ 348.116710][ T8391] netlink: 60 bytes leftover after parsing attributes in process `syz.0.871'. [ 348.222352][ T8397] FAULT_INJECTION: forcing a failure. [ 348.222352][ T8397] name failslab, interval 1, probability 0, space 0, times 0 [ 348.235714][ T8397] CPU: 1 PID: 8397 Comm: syz.1.873 Not tainted syzkaller #0 [ 348.243114][ T8397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 348.253316][ T8397] Call Trace: [ 348.256648][ T8397] [ 348.259615][ T8397] dump_stack_lvl+0x18c/0x250 [ 348.264350][ T8397] ? show_regs_print_info+0x20/0x20 [ 348.269607][ T8397] ? load_image+0x400/0x400 [ 348.274163][ T8397] ? __might_sleep+0xe0/0xe0 [ 348.278816][ T8397] ? __lock_acquire+0x7d40/0x7d40 [ 348.283887][ T8397] ? __lock_acquire+0x1273/0x7d40 [ 348.288969][ T8397] should_fail_ex+0x39d/0x4d0 [ 348.293710][ T8397] should_failslab+0x9/0x20 [ 348.298272][ T8397] slab_pre_alloc_hook+0x59/0x310 [ 348.303358][ T8397] kmem_cache_alloc_node+0x60/0x320 [ 348.308691][ T8397] ? __alloc_skb+0x103/0x2c0 [ 348.313417][ T8397] __alloc_skb+0x103/0x2c0 [ 348.318017][ T8397] alloc_skb_with_frags+0xca/0x7b0 [ 348.323255][ T8397] ? mark_lock+0x94/0x320 [ 348.327627][ T8397] ? __lock_acquire+0x1273/0x7d40 [ 348.332684][ T8397] sock_alloc_send_pskb+0x883/0x9a0 [ 348.337934][ T8397] ? sock_kzfree_s+0x50/0x50 [ 348.342560][ T8397] ? verify_lock_unused+0x140/0x140 [ 348.347798][ T8397] ? dev_get_by_index+0x22/0x2d0 [ 348.352773][ T8397] ? dev_get_by_index+0x22/0x2d0 [ 348.357744][ T8397] packet_sendmsg+0x316e/0x4d70 [ 348.362664][ T8397] ? __might_sleep+0xe0/0xe0 [ 348.367299][ T8397] ? verify_lock_unused+0x140/0x140 [ 348.372620][ T8397] ? mark_lock+0x94/0x320 [ 348.376993][ T8397] ? __lock_acquire+0x1273/0x7d40 [ 348.382138][ T8397] ? verify_lock_unused+0x140/0x140 [ 348.387368][ T8397] ? aa_sk_perm+0x83c/0x970 [ 348.392012][ T8397] ? packet_getsockopt+0xad0/0xad0 [ 348.397182][ T8397] ? aa_sock_msg_perm+0x94/0x150 [ 348.402162][ T8397] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 348.407490][ T8397] ? security_socket_sendmsg+0x80/0xa0 [ 348.412988][ T8397] ? packet_getsockopt+0xad0/0xad0 [ 348.418133][ T8397] ____sys_sendmsg+0x5ba/0x960 [ 348.422925][ T8397] ? __lock_acquire+0x7d40/0x7d40 [ 348.427986][ T8397] ? __asan_memset+0x22/0x40 [ 348.432612][ T8397] ? __sys_sendmsg_sock+0x30/0x30 [ 348.437668][ T8397] ? __import_iovec+0x5f2/0x850 [ 348.442568][ T8397] ? import_iovec+0x73/0xa0 [ 348.447205][ T8397] ___sys_sendmsg+0x2a6/0x360 [ 348.451913][ T8397] ? __sys_sendmsg+0x2a0/0x2a0 [ 348.456722][ T8397] ? trace_call_bpf+0xc3/0x6c0 [ 348.461571][ T8397] __se_sys_sendmsg+0x1c2/0x2b0 [ 348.466470][ T8397] ? __x64_sys_sendmsg+0x80/0x80 [ 348.471457][ T8397] ? lockdep_hardirqs_on+0x98/0x150 [ 348.476718][ T8397] do_syscall_64+0x55/0xa0 [ 348.481177][ T8397] ? clear_bhb_loop+0x40/0x90 [ 348.485887][ T8397] ? clear_bhb_loop+0x40/0x90 [ 348.490603][ T8397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.496524][ T8397] RIP: 0033:0x7fae33d9bf79 [ 348.500984][ T8397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.520628][ T8397] RSP: 002b:00007fae34c5d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.529073][ T8397] RAX: ffffffffffffffda RBX: 00007fae34015fa0 RCX: 00007fae33d9bf79 [ 348.537073][ T8397] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000004 [ 348.545078][ T8397] RBP: 00007fae34c5d090 R08: 0000000000000000 R09: 0000000000000000 [ 348.553081][ T8397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.561082][ T8397] R13: 00007fae34016038 R14: 00007fae34015fa0 R15: 00007ffd15a8a2a8 [ 348.569620][ T8397] [ 348.913203][ T8405] netlink: 'syz.1.876': attribute type 1 has an invalid length. [ 349.166849][ T8410] netlink: 'syz.3.877': attribute type 10 has an invalid length. [ 351.488666][ T8424] __nla_validate_parse: 5 callbacks suppressed [ 351.488687][ T8424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.882'. [ 351.509992][ T8424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.882'. [ 351.521169][ T8424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.882'. [ 351.532609][ T8424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.882'. [ 351.728597][ T8429] netlink: 'syz.2.884': attribute type 46 has an invalid length. [ 351.750082][ T8427] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.883'. [ 351.772126][ T8429] netlink: 145208 bytes leftover after parsing attributes in process `syz.2.884'. [ 351.803672][ T8429] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 351.910301][ T8434] netlink: 'syz.3.886': attribute type 10 has an invalid length. [ 352.109500][ T8440] netlink: 'syz.2.887': attribute type 10 has an invalid length. [ 352.117471][ T8440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.887'. [ 352.350430][ T8446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.891'. [ 352.361788][ T8446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.891'. [ 352.372693][ T8446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.891'. [ 352.873509][ T8436] delete_channel: no stack [ 355.638714][ T8460] netlink: 'syz.1.896': attribute type 10 has an invalid length. [ 355.927514][ T8472] raw_sendmsg: syz.3.898 forgot to set AF_INET. Fix it! [ 356.701472][ T8486] FAULT_INJECTION: forcing a failure. [ 356.701472][ T8486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.721852][ T8486] CPU: 1 PID: 8486 Comm: syz.0.905 Not tainted syzkaller #0 [ 356.729224][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 356.739337][ T8486] Call Trace: [ 356.742662][ T8486] [ 356.745633][ T8486] dump_stack_lvl+0x18c/0x250 [ 356.750377][ T8486] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 356.756596][ T8486] ? show_regs_print_info+0x20/0x20 [ 356.761862][ T8486] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 356.768176][ T8486] should_fail_ex+0x39d/0x4d0 [ 356.772934][ T8486] _copy_from_iter+0x1d9/0x12e0 [ 356.777849][ T8486] ? __might_fault+0xaa/0x120 [ 356.782589][ T8486] ? _copy_from_iter+0x24e/0x12e0 [ 356.787763][ T8486] ? __virt_addr_valid+0x18c/0x540 [ 356.792918][ T8486] ? __lock_acquire+0x7d40/0x7d40 [ 356.797977][ T8486] ? copyout_mc+0x70/0x70 [ 356.802347][ T8486] ? copyout_mc+0x70/0x70 [ 356.806708][ T8486] ? __virt_addr_valid+0x18c/0x540 [ 356.811856][ T8486] ? page_copy_sane+0x16a/0x270 [ 356.816743][ T8486] copy_page_from_iter+0x7b/0x100 [ 356.821816][ T8486] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 356.827665][ T8486] tun_get_user+0x15db/0x3ca0 [ 356.832387][ T8486] ? aa_file_perm+0x11b/0xee0 [ 356.837108][ T8486] ? rcu_read_unlock+0xa0/0xa0 [ 356.841911][ T8486] ? tun_get+0x1c/0x2e0 [ 356.846097][ T8486] ? __lock_acquire+0x7d40/0x7d40 [ 356.851163][ T8486] ? tun_get+0x1c/0x2e0 [ 356.855358][ T8486] tun_chr_write_iter+0x119/0x200 [ 356.860416][ T8486] vfs_write+0x46c/0x990 [ 356.864703][ T8486] ? file_end_write+0x250/0x250 [ 356.869592][ T8486] ? __fget_files+0x43d/0x4b0 [ 356.874313][ T8486] ? __fdget_pos+0x1d8/0x330 [ 356.878942][ T8486] ? ksys_write+0x75/0x260 [ 356.883393][ T8486] ksys_write+0x150/0x260 [ 356.887773][ T8486] ? __ia32_sys_read+0x90/0x90 [ 356.892573][ T8486] ? lockdep_hardirqs_on+0x98/0x150 [ 356.897816][ T8486] do_syscall_64+0x55/0xa0 [ 356.902272][ T8486] ? clear_bhb_loop+0x40/0x90 [ 356.906985][ T8486] ? clear_bhb_loop+0x40/0x90 [ 356.911696][ T8486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.917634][ T8486] RIP: 0033:0x7f18cd99bf79 [ 356.922103][ T8486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.941748][ T8486] RSP: 002b:00007f18ce7ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.950197][ T8486] RAX: ffffffffffffffda RBX: 00007f18cdc15fa0 RCX: 00007f18cd99bf79 [ 356.958195][ T8486] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8 [ 356.966283][ T8486] RBP: 00007f18ce7ab090 R08: 0000000000000000 R09: 0000000000000000 [ 356.974280][ T8486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 356.982285][ T8486] R13: 00007f18cdc16038 R14: 00007f18cdc15fa0 R15: 00007ffd1385ec18 [ 356.990306][ T8486] [ 359.186718][ T8488] netlink: 'syz.3.906': attribute type 10 has an invalid length. [ 359.208119][ T8488] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 359.259369][ T8497] netlink: 'syz.2.908': attribute type 10 has an invalid length. [ 359.366543][ T8502] __nla_validate_parse: 5 callbacks suppressed [ 359.366562][ T8502] netlink: 60 bytes leftover after parsing attributes in process `syz.2.911'. [ 359.385096][ T8502] netlink: 60 bytes leftover after parsing attributes in process `syz.2.911'. [ 359.396410][ T8502] netlink: 60 bytes leftover after parsing attributes in process `syz.2.911'. [ 359.434986][ T8502] netlink: 60 bytes leftover after parsing attributes in process `syz.2.911'. [ 359.481798][ T8506] netlink: 'syz.3.909': attribute type 10 has an invalid length. [ 359.513172][ T8506] netlink: 40 bytes leftover after parsing attributes in process `syz.3.909'. [ 360.196662][ T8500] delete_channel: no stack [ 362.845365][ T8521] netlink: 60 bytes leftover after parsing attributes in process `syz.3.917'. [ 362.858055][ T8521] netlink: 60 bytes leftover after parsing attributes in process `syz.3.917'. [ 362.878157][ T8521] netlink: 60 bytes leftover after parsing attributes in process `syz.3.917'. [ 362.901549][ T8521] netlink: 60 bytes leftover after parsing attributes in process `syz.3.917'. [ 363.094244][ T8529] netlink: 'syz.3.920': attribute type 10 has an invalid length. [ 363.235126][ T8532] netlink: 60 bytes leftover after parsing attributes in process `syz.3.921'. [ 363.706690][ T8519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.978270][ T8532] netlink: 60 bytes leftover after parsing attributes in process `syz.3.921'. [ 364.987857][ T8540] netlink: 'syz.1.924': attribute type 10 has an invalid length. [ 365.008151][ T8540] veth1_macvtap: entered promiscuous mode [ 365.058706][ T8540] veth1_macvtap: entered allmulticast mode [ 365.070398][ T8540] team0: Port device veth1_macvtap added [ 365.247998][ T8548] netlink: 'syz.2.926': attribute type 10 has an invalid length. [ 365.264049][ T8548] netlink: 40 bytes leftover after parsing attributes in process `syz.2.926'. [ 365.446857][ T8556] netlink: 'syz.1.929': attribute type 10 has an invalid length. [ 366.004537][ T8544] delete_channel: no stack [ 368.634534][ T8566] netlink: 60 bytes leftover after parsing attributes in process `syz.3.933'. [ 368.663761][ T8566] netlink: 60 bytes leftover after parsing attributes in process `syz.3.933'. [ 368.674441][ T8566] netlink: 60 bytes leftover after parsing attributes in process `syz.3.933'. [ 368.684781][ T8566] netlink: 60 bytes leftover after parsing attributes in process `syz.3.933'. [ 369.432570][ T8575] netlink: 'syz.3.937': attribute type 29 has an invalid length. [ 369.815896][ T8584] netlink: 'syz.2.938': attribute type 2 has an invalid length. [ 369.835894][ T8584] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.938'. [ 370.900134][ T8588] delete_channel: no stack [ 371.361995][ T8575] netlink: 'syz.3.937': attribute type 29 has an invalid length. [ 371.371493][ T8590] netlink: 'syz.2.939': attribute type 10 has an invalid length. [ 371.388458][ T8590] netlink: 40 bytes leftover after parsing attributes in process `syz.2.939'. [ 371.537997][ T8592] netlink: 'syz.2.940': attribute type 10 has an invalid length. [ 371.702159][ T8599] netlink: 60 bytes leftover after parsing attributes in process `syz.1.943'. [ 371.711489][ T8599] netlink: 60 bytes leftover after parsing attributes in process `syz.1.943'. [ 371.729194][ T8599] netlink: 60 bytes leftover after parsing attributes in process `syz.1.943'. [ 371.765804][ T8599] netlink: 60 bytes leftover after parsing attributes in process `syz.1.943'. [ 371.921568][ T8605] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 374.918252][ T8631] netlink: 'syz.0.948': attribute type 10 has an invalid length. [ 374.972297][ T8631] netlink: 40 bytes leftover after parsing attributes in process `syz.0.948'. [ 375.342694][ T8625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.460632][ T8644] netlink: 60 bytes leftover after parsing attributes in process `syz.3.954'. [ 375.641576][ T8623] delete_channel: no stack [ 377.337789][ T8640] netlink: 'syz.1.953': attribute type 10 has an invalid length. [ 377.347145][ T8644] netlink: 60 bytes leftover after parsing attributes in process `syz.3.954'. [ 377.484167][ T8652] FAULT_INJECTION: forcing a failure. [ 377.484167][ T8652] name failslab, interval 1, probability 0, space 0, times 0 [ 377.515285][ T8652] CPU: 1 PID: 8652 Comm: syz.1.957 Not tainted syzkaller #0 [ 377.522664][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 377.532951][ T8652] Call Trace: [ 377.536281][ T8652] [ 377.539354][ T8652] dump_stack_lvl+0x18c/0x250 [ 377.544108][ T8652] ? show_regs_print_info+0x20/0x20 [ 377.549367][ T8652] ? load_image+0x400/0x400 [ 377.553934][ T8652] ? __might_sleep+0xe0/0xe0 [ 377.558589][ T8652] ? __lock_acquire+0x7d40/0x7d40 [ 377.563708][ T8652] should_fail_ex+0x39d/0x4d0 [ 377.568469][ T8652] should_failslab+0x9/0x20 [ 377.573049][ T8652] slab_pre_alloc_hook+0x59/0x310 [ 377.578176][ T8652] ? lock_chain_count+0x20/0x20 [ 377.583081][ T8652] ? sk_prot_alloc+0xe7/0x210 [ 377.587825][ T8652] ? sk_prot_alloc+0xe7/0x210 [ 377.592562][ T8652] __kmem_cache_alloc_node+0x53/0x250 [ 377.598009][ T8652] ? sk_prot_alloc+0xe7/0x210 [ 377.602751][ T8652] __kmalloc+0xa4/0x230 [ 377.607014][ T8652] sk_prot_alloc+0xe7/0x210 [ 377.611583][ T8652] ? sk_alloc+0x24/0x360 [ 377.615898][ T8652] sk_alloc+0x3a/0x360 [ 377.620035][ T8652] ? __sanitizer_cov_trace_switch+0x101/0x120 [ 377.626166][ T8652] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 377.631595][ T8652] ? __fget_files+0x28/0x4b0 [ 377.636414][ T8652] ? __fget_files+0x28/0x4b0 [ 377.641069][ T8652] ? __fget_files+0x43d/0x4b0 [ 377.645826][ T8652] ? cpu_online+0x60/0x60 [ 377.650217][ T8652] bpf_prog_test_run+0x321/0x390 [ 377.655238][ T8652] __sys_bpf+0x49d/0x890 [ 377.659541][ T8652] ? bpf_link_show_fdinfo+0x390/0x390 [ 377.664995][ T8652] ? lock_chain_count+0x20/0x20 [ 377.669914][ T8652] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 377.675974][ T8652] __x64_sys_bpf+0x7c/0x90 [ 377.680458][ T8652] do_syscall_64+0x55/0xa0 [ 377.684946][ T8652] ? clear_bhb_loop+0x40/0x90 [ 377.690145][ T8652] ? clear_bhb_loop+0x40/0x90 [ 377.694888][ T8652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.700853][ T8652] RIP: 0033:0x7fae33d9bf79 [ 377.705353][ T8652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.725022][ T8652] RSP: 002b:00007fae34c5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.733493][ T8652] RAX: ffffffffffffffda RBX: 00007fae34015fa0 RCX: 00007fae33d9bf79 [ 377.741513][ T8652] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 377.749535][ T8652] RBP: 00007fae34c5d090 R08: 0000000000000000 R09: 0000000000000000 [ 377.758419][ T8652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.766436][ T8652] R13: 00007fae34016038 R14: 00007fae34015fa0 R15: 00007ffd15a8a2a8 [ 377.774486][ T8652] [ 378.774657][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.781158][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.985509][ T8677] netlink: 60 bytes leftover after parsing attributes in process `syz.0.964'. [ 383.789102][ T8677] netlink: 60 bytes leftover after parsing attributes in process `syz.0.964'. [ 383.913354][ T8685] netlink: 'syz.2.965': attribute type 10 has an invalid length. [ 384.497214][ T8704] netlink: 'syz.1.973': attribute type 10 has an invalid length. [ 386.859396][ T8712] netlink: 60 bytes leftover after parsing attributes in process `syz.2.977'. [ 386.899133][ T8712] netlink: 60 bytes leftover after parsing attributes in process `syz.2.977'. [ 386.933189][ T8713] netlink: 'syz.1.976': attribute type 21 has an invalid length. [ 386.982953][ T8713] netlink: 128 bytes leftover after parsing attributes in process `syz.1.976'. [ 387.001031][ T8713] netlink: 'syz.1.976': attribute type 4 has an invalid length. [ 387.010340][ T8712] netlink: 60 bytes leftover after parsing attributes in process `syz.2.977'. [ 387.026485][ T8716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.977'. [ 387.078826][ T8719] netlink: 'syz.0.979': attribute type 10 has an invalid length. [ 387.287145][ T8713] netlink: 'syz.1.976': attribute type 1 has an invalid length. [ 387.302655][ T8713] netlink: 'syz.1.976': attribute type 3 has an invalid length. [ 387.323044][ T8713] netlink: 132 bytes leftover after parsing attributes in process `syz.1.976'. [ 387.720583][ T8733] FAULT_INJECTION: forcing a failure. [ 387.720583][ T8733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.754225][ T8733] CPU: 1 PID: 8733 Comm: syz.0.985 Not tainted syzkaller #0 [ 387.761617][ T8733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.771764][ T8733] Call Trace: [ 387.775145][ T8733] [ 387.778116][ T8733] dump_stack_lvl+0x18c/0x250 [ 387.782859][ T8733] ? show_regs_print_info+0x20/0x20 [ 387.788118][ T8733] ? load_image+0x400/0x400 [ 387.792690][ T8733] ? __might_fault+0xaa/0x120 [ 387.797431][ T8733] ? __lock_acquire+0x7d40/0x7d40 [ 387.802552][ T8733] should_fail_ex+0x39d/0x4d0 [ 387.807304][ T8733] _copy_from_user+0x2f/0xe0 [ 387.811971][ T8733] ___sys_sendmsg+0x1c7/0x360 [ 387.816787][ T8733] ? get_pid_task+0x20/0x1e0 [ 387.821460][ T8733] ? __sys_sendmsg+0x2a0/0x2a0 [ 387.826306][ T8733] ? __lock_acquire+0x7d40/0x7d40 [ 387.831397][ T8733] __se_sys_sendmsg+0x1c2/0x2b0 [ 387.836378][ T8733] ? __x64_sys_sendmsg+0x80/0x80 [ 387.841359][ T8733] ? lockdep_hardirqs_on+0x98/0x150 [ 387.846602][ T8733] do_syscall_64+0x55/0xa0 [ 387.851058][ T8733] ? clear_bhb_loop+0x40/0x90 [ 387.855762][ T8733] ? clear_bhb_loop+0x40/0x90 [ 387.860478][ T8733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.866406][ T8733] RIP: 0033:0x7f18cd99bf79 [ 387.870851][ T8733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.890491][ T8733] RSP: 002b:00007f18ce7ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.898938][ T8733] RAX: ffffffffffffffda RBX: 00007f18cdc15fa0 RCX: 00007f18cd99bf79 [ 387.906944][ T8733] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 387.914951][ T8733] RBP: 00007f18ce7ab090 R08: 0000000000000000 R09: 0000000000000000 [ 387.922957][ T8733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.930960][ T8733] R13: 00007f18cdc16038 R14: 00007f18cdc15fa0 R15: 00007ffd1385ec18 [ 387.938973][ T8733] [ 388.150084][ T8744] netlink: 60 bytes leftover after parsing attributes in process `syz.0.988'. [ 388.178728][ T8744] netlink: 60 bytes leftover after parsing attributes in process `syz.0.988'. [ 388.212852][ T8744] netlink: 60 bytes leftover after parsing attributes in process `syz.0.988'. [ 388.268830][ T8747] netlink: 'syz.2.989': attribute type 10 has an invalid length. [ 388.578981][ T8752] netlink: 'syz.0.990': attribute type 10 has an invalid length. [ 389.292706][ T8748] delete_channel: no stack [ 391.864765][ T8762] FAULT_INJECTION: forcing a failure. [ 391.864765][ T8762] name failslab, interval 1, probability 0, space 0, times 0 [ 391.900282][ T8762] CPU: 0 PID: 8762 Comm: syz.0.1002 Not tainted syzkaller #0 [ 391.907755][ T8762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 391.917866][ T8762] Call Trace: [ 391.921207][ T8762] [ 391.924179][ T8762] dump_stack_lvl+0x18c/0x250 [ 391.928919][ T8762] ? show_regs_print_info+0x20/0x20 [ 391.934175][ T8762] ? load_image+0x400/0x400 [ 391.938728][ T8762] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 391.944775][ T8762] ? __asan_memset+0x22/0x40 [ 391.949445][ T8762] should_fail_ex+0x39d/0x4d0 [ 391.954197][ T8762] should_failslab+0x9/0x20 [ 391.958762][ T8762] slab_pre_alloc_hook+0x59/0x310 [ 391.963850][ T8762] ? __debug_object_init+0xec/0x450 [ 391.969112][ T8762] kmem_cache_alloc+0x5a/0x2d0 [ 391.973941][ T8762] ? slab_build_skb+0x2b/0x3f0 [ 391.978774][ T8762] slab_build_skb+0x2b/0x3f0 [ 391.983439][ T8762] bpf_prog_test_run_skb+0x3c8/0x12b0 [ 391.988864][ T8762] ? __fget_files+0x28/0x4b0 [ 391.993512][ T8762] ? __fget_files+0x28/0x4b0 [ 391.998148][ T8762] ? __fget_files+0x43d/0x4b0 [ 392.002889][ T8762] ? cpu_online+0x60/0x60 [ 392.007277][ T8762] bpf_prog_test_run+0x321/0x390 [ 392.012269][ T8762] __sys_bpf+0x49d/0x890 [ 392.016563][ T8762] ? bpf_link_show_fdinfo+0x390/0x390 [ 392.021996][ T8762] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 392.028203][ T8762] __x64_sys_bpf+0x7c/0x90 [ 392.032685][ T8762] do_syscall_64+0x55/0xa0 [ 392.037136][ T8762] ? clear_bhb_loop+0x40/0x90 [ 392.041845][ T8762] ? clear_bhb_loop+0x40/0x90 [ 392.046558][ T8762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.052476][ T8762] RIP: 0033:0x7f18cd99bf79 [ 392.056918][ T8762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.076563][ T8762] RSP: 002b:00007f18ce7ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 392.085102][ T8762] RAX: ffffffffffffffda RBX: 00007f18cdc15fa0 RCX: 00007f18cd99bf79 [ 392.093101][ T8762] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 392.101099][ T8762] RBP: 00007f18ce7ab090 R08: 0000000000000000 R09: 0000000000000000 [ 392.109109][ T8762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.117126][ T8762] R13: 00007f18cdc16038 R14: 00007f18cdc15fa0 R15: 00007ffd1385ec18 [ 392.125251][ T8762] [ 392.352652][ T8772] __nla_validate_parse: 2 callbacks suppressed [ 392.352671][ T8772] netlink: 60 bytes leftover after parsing attributes in process `syz.2.998'. [ 392.375019][ T8772] netlink: 60 bytes leftover after parsing attributes in process `syz.2.998'. [ 392.386089][ T8772] netlink: 60 bytes leftover after parsing attributes in process `syz.2.998'. [ 392.443043][ T8772] netlink: 60 bytes leftover after parsing attributes in process `syz.2.998'. [ 392.458966][ T8773] netlink: 'syz.0.997': attribute type 10 has an invalid length. [ 392.481375][ T8773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.997'. [ 392.492706][ T8775] FAULT_INJECTION: forcing a failure. [ 392.492706][ T8775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.544403][ T8775] CPU: 0 PID: 8775 Comm: syz.3.999 Not tainted syzkaller #0 [ 392.551779][ T8775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 392.561889][ T8775] Call Trace: [ 392.565210][ T8775] [ 392.568193][ T8775] dump_stack_lvl+0x18c/0x250 [ 392.572945][ T8775] ? show_regs_print_info+0x20/0x20 [ 392.578217][ T8775] ? load_image+0x400/0x400 [ 392.582787][ T8775] ? __might_fault+0xaa/0x120 [ 392.587519][ T8775] ? __lock_acquire+0x7d40/0x7d40 [ 392.592609][ T8775] should_fail_ex+0x39d/0x4d0 [ 392.597545][ T8775] _copy_from_user+0x2f/0xe0 [ 392.602200][ T8775] csum_and_copy_from_iter+0x662/0x14a0 [ 392.607830][ T8775] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 392.613539][ T8775] ? __kasan_slab_alloc+0x6c/0x80 [ 392.618631][ T8775] ? slab_post_alloc_hook+0x8a/0x4b0 [ 392.623989][ T8775] ? rcu_is_watching+0x15/0xb0 [ 392.628820][ T8775] ip_generic_getfrag+0x163/0x2f0 [ 392.633926][ T8775] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 392.638847][ T8775] ? skb_put+0x11b/0x210 [ 392.643188][ T8775] __ip_append_data+0x2f11/0x3d40 [ 392.648312][ T8775] ? raw_send_hdrinc+0x1170/0x1170 [ 392.653496][ T8775] ? mark_lock+0x94/0x320 [ 392.657895][ T8775] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 392.663938][ T8775] ? ip_setup_cork+0x860/0x860 [ 392.668780][ T8775] ? ip_setup_cork+0x530/0x860 [ 392.673645][ T8775] ip_append_data+0x10d/0x180 [ 392.678479][ T8775] ? raw_send_hdrinc+0x1170/0x1170 [ 392.683661][ T8775] raw_sendmsg+0x15c1/0x1c00 [ 392.688337][ T8775] ? compat_raw_ioctl+0x70/0x70 [ 392.693298][ T8775] ? __lock_acquire+0x1273/0x7d40 [ 392.698492][ T8775] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 392.704972][ T8775] ? sock_rps_record_flow+0x19/0x3f0 [ 392.710341][ T8775] ? inet_sendmsg+0x7c/0x2f0 [ 392.715014][ T8775] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 392.720357][ T8775] ? security_socket_sendmsg+0x80/0xa0 [ 392.725888][ T8775] ? inet_send_prepare+0x260/0x260 [ 392.731066][ T8775] ____sys_sendmsg+0x5ba/0x960 [ 392.735896][ T8775] ? __lock_acquire+0x7d40/0x7d40 [ 392.741032][ T8775] ? __asan_memset+0x22/0x40 [ 392.745697][ T8775] ? __sys_sendmsg_sock+0x30/0x30 [ 392.750781][ T8775] ? __import_iovec+0x3fa/0x850 [ 392.755701][ T8775] ? import_iovec+0x73/0xa0 [ 392.760270][ T8775] ___sys_sendmsg+0x2a6/0x360 [ 392.765007][ T8775] ? __sys_sendmsg+0x2a0/0x2a0 [ 392.769850][ T8775] ? __lock_acquire+0x7d40/0x7d40 [ 392.774958][ T8775] __se_sys_sendmsg+0x1c2/0x2b0 [ 392.779869][ T8775] ? __x64_sys_sendmsg+0x80/0x80 [ 392.784878][ T8775] ? lockdep_hardirqs_on+0x98/0x150 [ 392.790124][ T8775] do_syscall_64+0x55/0xa0 [ 392.794647][ T8775] ? clear_bhb_loop+0x40/0x90 [ 392.799353][ T8775] ? clear_bhb_loop+0x40/0x90 [ 392.804069][ T8775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.809995][ T8775] RIP: 0033:0x7fc9e2d9bf79 [ 392.814446][ T8775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.834171][ T8775] RSP: 002b:00007fc9e3c0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.842623][ T8775] RAX: ffffffffffffffda RBX: 00007fc9e3015fa0 RCX: 00007fc9e2d9bf79 [ 392.850629][ T8775] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 392.858635][ T8775] RBP: 00007fc9e3c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 392.866637][ T8775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.874638][ T8775] R13: 00007fc9e3016038 R14: 00007fc9e3015fa0 R15: 00007ffc0dff7f78 [ 392.882658][ T8775] [ 393.047077][ T8777] netlink: 'syz.2.1000': attribute type 10 has an invalid length. [ 393.157656][ T8769] delete_channel: no stack [ 394.268613][ T8794] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1009'. [ 394.277989][ T8794] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1009'. [ 394.332113][ T8794] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1009'. [ 394.351384][ T8794] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1009'. [ 394.705221][ T8804] netlink: 'syz.1.1012': attribute type 10 has an invalid length. [ 394.914851][ T8808] netlink: 'syz.2.1013': attribute type 10 has an invalid length. [ 394.948618][ T8808] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1013'. [ 395.668646][ T8806] delete_channel: no stack [ 397.377326][ T8819] netlink: 'syz.0.1018': attribute type 1 has an invalid length. [ 397.387122][ T8819] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1018'. [ 398.220145][ T8826] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1020'. [ 398.241354][ T8826] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1020'. [ 398.273759][ T8826] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1020'. [ 398.297495][ T8826] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1020'. [ 398.455737][ T8834] netlink: 'syz.1.1024': attribute type 10 has an invalid length. [ 398.836152][ T8845] netlink: 'syz.1.1028': attribute type 10 has an invalid length. [ 398.848642][ T8845] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1028'. [ 399.532260][ T8839] delete_channel: no stack [ 399.744075][ T8854] netlink: set zone limit has 8 unknown bytes [ 400.345664][ T8862] netlink: 'syz.2.1033': attribute type 39 has an invalid length. [ 403.132562][ T8870] netlink: 'syz.3.1037': attribute type 10 has an invalid length. [ 403.505665][ T8875] netlink: 'syz.2.1039': attribute type 10 has an invalid length. [ 403.614940][ T8883] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1041'. [ 403.718085][ T8875] team0: Port device veth1_macvtap added [ 403.729724][ T8881] netlink: 'syz.3.1040': attribute type 10 has an invalid length. [ 403.737694][ T8881] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1040'. [ 403.752448][ T8883] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1041'. [ 403.762627][ T8884] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1041'. [ 403.772363][ T8885] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1041'. [ 404.323796][ T8879] delete_channel: no stack [ 404.524543][ T8904] netlink: 'syz.3.1048': attribute type 10 has an invalid length. [ 407.614600][ T8913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1050'. [ 407.627914][ T8913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1050'. [ 407.662095][ T8913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1050'. [ 407.682276][ T8913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1050'. [ 407.838588][ T8917] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1052'. [ 408.085691][ T8932] netlink: 'syz.1.1057': attribute type 10 has an invalid length. [ 408.154806][ T8933] netlink: 'syz.0.1056': attribute type 10 has an invalid length. [ 408.500535][ T8938] netlink: 'syz.1.1058': attribute type 21 has an invalid length. [ 408.555886][ T8938] IPv6: NLM_F_CREATE should be specified when creating new route [ 408.881271][ T8928] delete_channel: no stack [ 409.248859][ T8950] __nla_validate_parse: 5 callbacks suppressed [ 409.248880][ T8950] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1062'. [ 409.397083][ T8950] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1062'. [ 409.408443][ T8953] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1062'. [ 409.447241][ T8950] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1062'. [ 410.255800][ T8964] FAULT_INJECTION: forcing a failure. [ 410.255800][ T8964] name failslab, interval 1, probability 0, space 0, times 0 [ 410.268248][ T8966] netlink: 'syz.0.1068': attribute type 10 has an invalid length. [ 410.287468][ T8964] CPU: 1 PID: 8964 Comm: syz.2.1067 Not tainted syzkaller #0 [ 410.294937][ T8964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 410.305053][ T8964] Call Trace: [ 410.308389][ T8964] [ 410.311363][ T8964] dump_stack_lvl+0x18c/0x250 [ 410.316109][ T8964] ? show_regs_print_info+0x20/0x20 [ 410.321373][ T8964] ? load_image+0x400/0x400 [ 410.325937][ T8964] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 410.332155][ T8964] should_fail_ex+0x39d/0x4d0 [ 410.336905][ T8964] should_failslab+0x9/0x20 [ 410.341485][ T8964] slab_pre_alloc_hook+0x59/0x310 [ 410.346581][ T8964] ? sctp_add_bind_addr+0x8c/0x360 [ 410.351852][ T8964] __kmem_cache_alloc_node+0x53/0x250 [ 410.357385][ T8964] ? sctp_add_bind_addr+0x8c/0x360 [ 410.362568][ T8964] kmalloc_trace+0x2a/0xe0 [ 410.367062][ T8964] sctp_add_bind_addr+0x8c/0x360 [ 410.372068][ T8964] sctp_copy_local_addr_list+0x315/0x4f0 [ 410.377777][ T8964] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 410.383568][ T8964] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 410.389708][ T8964] ? sctp_copy_local_addr_list+0x11/0x4f0 [ 410.395500][ T8964] sctp_bind_addr_copy+0xb3/0x3c0 [ 410.400605][ T8964] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 410.406998][ T8964] sctp_connect_new_asoc+0x2f9/0x6a0 [ 410.412345][ T8964] ? __sctp_connect+0xd80/0xd80 [ 410.417249][ T8964] ? __local_bh_enable_ip+0x13a/0x1c0 [ 410.422684][ T8964] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 410.428283][ T8964] ? security_sctp_bind_connect+0x89/0xb0 [ 410.434062][ T8964] sctp_sendmsg+0x1575/0x28c0 [ 410.438801][ T8964] ? sctp_getsockopt+0xb60/0xb60 [ 410.443796][ T8964] ? aa_sk_perm+0x83c/0x970 [ 410.448381][ T8964] ? aa_af_perm+0x330/0x330 [ 410.452953][ T8964] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 410.459428][ T8964] ? sock_rps_record_flow+0x19/0x3f0 [ 410.464772][ T8964] ? inet_sendmsg+0xe9/0x2f0 [ 410.469429][ T8964] ? inet_send_prepare+0x260/0x260 [ 410.474605][ T8964] ____sys_sendmsg+0x5ba/0x960 [ 410.479421][ T8964] ? __lock_acquire+0x7d40/0x7d40 [ 410.484515][ T8964] ? __asan_memset+0x22/0x40 [ 410.489167][ T8964] ? __sys_sendmsg_sock+0x30/0x30 [ 410.494419][ T8964] ? __import_iovec+0x5f2/0x850 [ 410.499344][ T8964] ? import_iovec+0x73/0xa0 [ 410.503914][ T8964] ___sys_sendmsg+0x2a6/0x360 [ 410.508648][ T8964] ? __sys_sendmsg+0x2a0/0x2a0 [ 410.513472][ T8964] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 410.519546][ T8964] ? lockdep_hardirqs_on+0x98/0x150 [ 410.524832][ T8964] ? kasan_check_range+0x85/0x290 [ 410.529922][ T8964] __se_sys_sendmsg+0x1c2/0x2b0 [ 410.534925][ T8964] ? __x64_sys_sendmsg+0x80/0x80 [ 410.539939][ T8964] ? lockdep_hardirqs_on+0x98/0x150 [ 410.545283][ T8964] do_syscall_64+0x55/0xa0 [ 410.549849][ T8964] ? clear_bhb_loop+0x40/0x90 [ 410.554578][ T8964] ? clear_bhb_loop+0x40/0x90 [ 410.559314][ T8964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.565247][ T8964] RIP: 0033:0x7fe1adf9bf79 [ 410.569705][ T8964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.589367][ T8964] RSP: 002b:00007fe1aeea6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.597840][ T8964] RAX: ffffffffffffffda RBX: 00007fe1ae215fa0 RCX: 00007fe1adf9bf79 [ 410.605871][ T8964] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000008 [ 410.613893][ T8964] RBP: 00007fe1aeea6090 R08: 0000000000000000 R09: 0000000000000000 [ 410.621900][ T8964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 410.629902][ T8964] R13: 00007fe1ae216038 R14: 00007fe1ae215fa0 R15: 00007ffe2c4cf4f8 [ 410.637927][ T8964] [ 410.663911][ T8968] netlink: 'syz.3.1070': attribute type 10 has an invalid length. [ 410.683981][ T8968] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1070'. [ 410.772710][ T8975] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1072'. [ 410.798363][ T8975] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1072'. [ 410.829969][ T8975] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1072'. [ 410.849740][ T8975] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1072'. [ 411.219046][ T8986] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1076'. [ 411.243423][ T8986] bond_slave_0: entered promiscuous mode [ 411.249631][ T8986] bond_slave_1: entered promiscuous mode [ 411.255251][ T8967] delete_channel: no stack [ 411.260043][ T8986] bridge0: entered promiscuous mode [ 414.595360][ T8993] netlink: 'syz.3.1077': attribute type 10 has an invalid length. [ 414.741356][ T8993] team0: Port device wlan1 added [ 414.747045][ T8995] netlink: 'syz.2.1079': attribute type 10 has an invalid length. [ 414.933566][ T9006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1083'. [ 414.945863][ T9006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1083'. [ 414.956305][ T9006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1083'. [ 414.969977][ T9006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1083'. [ 415.315601][ T9014] netlink: 'syz.2.1085': attribute type 10 has an invalid length. [ 415.366689][ T9014] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1085'. [ 415.980755][ T9010] delete_channel: no stack [ 416.721595][ T9030] netlink: 'syz.3.1091': attribute type 10 has an invalid length. [ 416.903725][ T9036] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1093'. [ 416.916716][ T9036] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1093'. [ 416.932295][ T9036] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1093'. [ 416.958885][ T9036] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1093'. [ 417.208989][ T9045] netlink: 'syz.2.1097': attribute type 10 has an invalid length. [ 417.217593][ T9045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1097'. [ 417.938620][ T9039] delete_channel: no stack [ 420.328727][ T9055] netlink: 'syz.0.1100': attribute type 10 has an invalid length. [ 420.364860][ T9056] netlink: 'syz.2.1099': attribute type 46 has an invalid length. [ 420.384386][ T9056] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1099'. [ 420.706872][ T9069] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1105'. [ 420.759449][ T9069] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1105'. [ 420.780566][ T9069] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1105'. [ 420.822547][ T9069] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1105'. [ 420.991277][ T9077] netlink: 'syz.0.1107': attribute type 10 has an invalid length. [ 421.012790][ T9077] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1107'. [ 421.348982][ T9086] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1109'. [ 421.709339][ T9073] delete_channel: no stack [ 428.071953][ T9108] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1116'. [ 428.160505][ T9108] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1116'. [ 428.179235][ T9111] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1116'. [ 428.204257][ T9108] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1116'. [ 428.295865][ T9119] netlink: 'syz.1.1119': attribute type 10 has an invalid length. [ 428.348447][ T9119] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1119'. [ 429.033122][ T9113] delete_channel: no stack [ 432.129687][ T9142] netlink: 'syz.3.1128': attribute type 10 has an invalid length. [ 432.614689][ T9148] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1129'. [ 432.728507][ T9148] netlink: 6116 bytes leftover after parsing attributes in process `syz.3.1129'. [ 432.770214][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1129'. [ 432.945451][ T9160] netlink: 'syz.0.1131': attribute type 10 has an invalid length. [ 432.968549][ T9160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1131'. [ 433.660383][ T9156] delete_channel: no stack [ 436.450998][ T9173] netlink: 'syz.1.1137': attribute type 10 has an invalid length. [ 436.506903][ T9178] netlink: 'syz.2.1138': attribute type 46 has an invalid length. [ 436.534099][ T9178] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1138'. [ 439.896171][ T8998] tipc: Subscription rejected, illegal request [ 440.039438][ T9207] netlink: 'syz.3.1145': attribute type 10 has an invalid length. [ 440.048060][ T9207] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1145'. [ 440.229301][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.235874][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.747907][ T9203] delete_channel: no stack [ 443.289363][ T9215] netlink: 'syz.3.1148': attribute type 10 has an invalid length. [ 443.366390][ T9217] netlink: 'syz.1.1149': attribute type 46 has an invalid length. [ 443.408648][ T9217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1149'. [ 446.571825][ T9233] netlink: 'syz.3.1161': attribute type 46 has an invalid length. [ 446.591783][ T9233] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1161'. [ 446.786194][ T3456] tipc: Subscription rejected, illegal request [ 447.145815][ T9234] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1153'. [ 447.199582][ T9234] netlink: 6116 bytes leftover after parsing attributes in process `syz.1.1153'. [ 447.216300][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 447.496794][ T9247] netlink: 'syz.3.1157': attribute type 10 has an invalid length. [ 447.529794][ T9247] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1157'. [ 448.092256][ T9242] delete_channel: no stack [ 450.654240][ T9256] netlink: 'syz.3.1160': attribute type 10 has an invalid length. [ 450.765899][ T9258] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1162'. [ 450.783187][ T9258] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1162'. [ 450.802258][ T9258] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1162'. [ 450.830065][ T9260] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1163'. [ 450.844203][ T9258] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1162'. [ 450.921777][ T8998] tipc: Subscription rejected, illegal request [ 451.120194][ T9270] netlink: 'syz.2.1166': attribute type 46 has an invalid length. [ 451.151041][ T9270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1166'. [ 451.452611][ T9281] netlink: 'syz.2.1169': attribute type 10 has an invalid length. [ 451.503682][ T9281] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1169'. [ 452.201074][ T9275] delete_channel: no stack [ 454.793162][ T9293] netlink: 'syz.3.1173': attribute type 10 has an invalid length. [ 454.813038][ T9291] netlink: 'syz.0.1172': attribute type 9 has an invalid length. [ 454.821255][ T9291] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1172'. [ 454.945571][ T9299] netlink: 'syz.1.1183': attribute type 10 has an invalid length. [ 454.998059][ T9291] delete_channel: no stack [ 455.101543][ T9304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1175'. [ 455.128129][ T1088] tipc: Subscription rejected, illegal request [ 455.191250][ T9304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1175'. [ 455.360709][ T9309] netlink: 'syz.0.1177': attribute type 46 has an invalid length. [ 455.943645][ T9316] netlink: 'syz.1.1180': attribute type 9 has an invalid length. [ 455.961996][ T9316] __nla_validate_parse: 3 callbacks suppressed [ 455.962014][ T9316] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1180'. [ 456.122720][ T9318] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1180'. [ 456.166460][ T9318] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 456.517843][ T9312] delete_channel: no stack [ 457.966412][ T9314] netlink: 'syz.1.1180': attribute type 13 has an invalid length. [ 457.976484][ T9314] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.1180'. [ 458.176196][ T9321] syzkaller0: tun_chr_ioctl cmd 1074025698 [ 458.200423][ T5775] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 458.361002][ T9327] netlink: 'syz.2.1182': attribute type 10 has an invalid length. [ 458.380227][ T9327] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1182'. [ 458.412451][ T9329] netlink: 'syz.1.1185': attribute type 10 has an invalid length. [ 458.668029][ T3456] tipc: Subscription rejected, illegal request [ 459.041786][ T9322] delete_channel: no stack [ 462.035818][ T9344] netlink: 'syz.0.1190': attribute type 46 has an invalid length. [ 462.044346][ T9344] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1190'. [ 462.061669][ T9343] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1188'. [ 462.072226][ T9343] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1188'. [ 462.086391][ T9343] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1188'. [ 462.097348][ T9343] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1188'. [ 462.118800][ T9345] netlink: 'syz.1.1196': attribute type 10 has an invalid length. [ 462.130451][ T9345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1196'. [ 462.836536][ T9337] delete_channel: no stack [ 467.111832][ T9359] netlink: 'syz.1.1195': attribute type 10 has an invalid length. [ 467.353758][ T9365] syzkaller0: tun_chr_ioctl cmd 1074025698 [ 467.371697][ T5775] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 468.339604][ T9374] netlink: 'syz.2.1203': attribute type 46 has an invalid length. [ 468.347623][ T9374] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1203'. [ 468.406349][ T9379] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1200'. [ 468.416195][ T9379] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1200'. [ 468.448711][ T9379] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1200'. [ 468.468052][ T9379] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1200'. [ 468.503131][ T9380] FAULT_INJECTION: forcing a failure. [ 468.503131][ T9380] name failslab, interval 1, probability 0, space 0, times 0 [ 468.542346][ T9380] CPU: 1 PID: 9380 Comm: syz.1.1201 Not tainted syzkaller #0 [ 468.549812][ T9380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.559932][ T9380] Call Trace: [ 468.563266][ T9380] [ 468.566236][ T9380] dump_stack_lvl+0x18c/0x250 [ 468.570975][ T9380] ? show_regs_print_info+0x20/0x20 [ 468.576220][ T9380] ? load_image+0x400/0x400 [ 468.580773][ T9380] ? __might_sleep+0xe0/0xe0 [ 468.585411][ T9380] ? __lock_acquire+0x7d40/0x7d40 [ 468.590488][ T9380] should_fail_ex+0x39d/0x4d0 [ 468.595227][ T9380] should_failslab+0x9/0x20 [ 468.599786][ T9380] slab_pre_alloc_hook+0x59/0x310 [ 468.604873][ T9380] ? apparmor_sk_alloc_security+0x77/0x100 [ 468.611175][ T9380] __kmem_cache_alloc_node+0x53/0x250 [ 468.616614][ T9380] ? apparmor_sk_alloc_security+0x77/0x100 [ 468.622476][ T9380] kmalloc_trace+0x2a/0xe0 [ 468.626958][ T9380] apparmor_sk_alloc_security+0x77/0x100 [ 468.632646][ T9380] security_sk_alloc+0x6e/0xa0 [ 468.637470][ T9380] sk_prot_alloc+0x101/0x210 [ 468.642201][ T9380] ? sk_alloc+0x24/0x360 [ 468.646493][ T9380] sk_alloc+0x3a/0x360 [ 468.650618][ T9380] ? bpf_ctx_init+0x163/0x1a0 [ 468.655338][ T9380] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 468.660978][ T9380] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 468.666408][ T9380] ? __fget_files+0x28/0x4b0 [ 468.671055][ T9380] ? __fget_files+0x28/0x4b0 [ 468.675703][ T9380] ? __fget_files+0x43d/0x4b0 [ 468.680446][ T9380] ? cpu_online+0x60/0x60 [ 468.684822][ T9380] bpf_prog_test_run+0x321/0x390 [ 468.689872][ T9380] __sys_bpf+0x49d/0x890 [ 468.694172][ T9380] ? bpf_link_show_fdinfo+0x390/0x390 [ 468.699630][ T9380] ? lock_chain_count+0x20/0x20 [ 468.704538][ T9380] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 468.710588][ T9380] __x64_sys_bpf+0x7c/0x90 [ 468.715057][ T9380] do_syscall_64+0x55/0xa0 [ 468.719534][ T9380] ? clear_bhb_loop+0x40/0x90 [ 468.724275][ T9380] ? clear_bhb_loop+0x40/0x90 [ 468.729007][ T9380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.734993][ T9380] RIP: 0033:0x7fae33d9bf79 [ 468.739459][ T9380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.759156][ T9380] RSP: 002b:00007fae34c5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 468.767633][ T9380] RAX: ffffffffffffffda RBX: 00007fae34015fa0 RCX: 00007fae33d9bf79 [ 468.775761][ T9380] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a [ 468.783794][ T9380] RBP: 00007fae34c5d090 R08: 0000000000000000 R09: 0000000000000000 [ 468.791820][ T9380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.799941][ T9380] R13: 00007fae34016038 R14: 00007fae34015fa0 R15: 00007ffd15a8a2a8 [ 468.808101][ T9380] [ 468.861045][ T9375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.918037][ T9385] FAULT_INJECTION: forcing a failure. [ 468.918037][ T9385] name failslab, interval 1, probability 0, space 0, times 0 [ 468.948779][ T9387] netlink: 'syz.0.1205': attribute type 10 has an invalid length. [ 468.965322][ T9385] CPU: 1 PID: 9385 Comm: syz.2.1204 Not tainted syzkaller #0 [ 468.972795][ T9385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.982906][ T9385] Call Trace: [ 468.986223][ T9385] [ 468.989191][ T9385] dump_stack_lvl+0x18c/0x250 [ 468.993938][ T9385] ? show_regs_print_info+0x20/0x20 [ 468.999204][ T9385] ? load_image+0x400/0x400 [ 469.003771][ T9385] ? __might_sleep+0xe0/0xe0 [ 469.008419][ T9385] ? __lock_acquire+0x7d40/0x7d40 [ 469.013499][ T9385] should_fail_ex+0x39d/0x4d0 [ 469.018336][ T9385] should_failslab+0x9/0x20 [ 469.022903][ T9385] slab_pre_alloc_hook+0x59/0x310 [ 469.027993][ T9385] ? ovs_ct_limit_cmd_set+0x2ef/0xaf0 [ 469.033456][ T9385] __kmem_cache_alloc_node+0x53/0x250 [ 469.038903][ T9385] ? ovs_ct_limit_cmd_set+0x2ef/0xaf0 [ 469.044347][ T9385] kmalloc_trace+0x2a/0xe0 [ 469.048829][ T9385] ovs_ct_limit_cmd_set+0x2ef/0xaf0 [ 469.054085][ T9385] ? __nla_parse+0x40/0x50 [ 469.058566][ T9385] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 469.064968][ T9385] ? genl_family_rcv_msg_attrs_parse+0x20a/0x290 [ 469.071363][ T9385] genl_family_rcv_msg_doit+0x211/0x310 [ 469.076970][ T9385] ? end_current_label_crit_section+0x170/0x170 [ 469.083288][ T9385] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 469.089338][ T9385] ? bpf_lsm_capable+0x9/0x10 [ 469.094074][ T9385] ? security_capable+0x89/0xb0 [ 469.098991][ T9385] genl_rcv_msg+0x619/0x7a0 [ 469.103562][ T9385] ? genl_bind+0x360/0x360 [ 469.108033][ T9385] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 469.114151][ T9385] ? ovs_nat_update_key+0x920/0x920 [ 469.119408][ T9385] ? lock_chain_count+0x20/0x20 [ 469.124302][ T9385] ? ref_tracker_free+0x690/0x840 [ 469.129399][ T9385] netlink_rcv_skb+0x241/0x4d0 [ 469.134225][ T9385] ? genl_bind+0x360/0x360 [ 469.138699][ T9385] ? netlink_ack+0x1180/0x1180 [ 469.143528][ T9385] ? __lock_acquire+0x7d40/0x7d40 [ 469.148611][ T9385] ? down_read+0x1ac/0x2e0 [ 469.153091][ T9385] genl_rcv+0x28/0x40 [ 469.157122][ T9385] netlink_unicast+0x751/0x8d0 [ 469.161947][ T9385] netlink_sendmsg+0x8d0/0xbf0 [ 469.166775][ T9385] ? netlink_getsockopt+0x590/0x590 [ 469.172114][ T9385] ? aa_sock_msg_perm+0x94/0x150 [ 469.177106][ T9385] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 469.182483][ T9385] ? security_socket_sendmsg+0x80/0xa0 [ 469.187988][ T9385] ? netlink_getsockopt+0x590/0x590 [ 469.193249][ T9385] ____sys_sendmsg+0x5ba/0x960 [ 469.198064][ T9385] ? __asan_memset+0x22/0x40 [ 469.202705][ T9385] ? __sys_sendmsg_sock+0x30/0x30 [ 469.207777][ T9385] ? __import_iovec+0x5f2/0x850 [ 469.212697][ T9385] ? import_iovec+0x73/0xa0 [ 469.217265][ T9385] ___sys_sendmsg+0x2a6/0x360 [ 469.222005][ T9385] ? __sys_sendmsg+0x2a0/0x2a0 [ 469.226839][ T9385] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 469.233174][ T9385] __se_sys_sendmsg+0x1c2/0x2b0 [ 469.238078][ T9385] ? __x64_sys_sendmsg+0x80/0x80 [ 469.243162][ T9385] ? lockdep_hardirqs_on+0x98/0x150 [ 469.248413][ T9385] do_syscall_64+0x55/0xa0 [ 469.252890][ T9385] ? clear_bhb_loop+0x40/0x90 [ 469.257614][ T9385] ? clear_bhb_loop+0x40/0x90 [ 469.262351][ T9385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.268303][ T9385] RIP: 0033:0x7fe1adf9bf79 [ 469.272777][ T9385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.292441][ T9385] RSP: 002b:00007fe1aeea6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.300909][ T9385] RAX: ffffffffffffffda RBX: 00007fe1ae215fa0 RCX: 00007fe1adf9bf79 [ 469.309017][ T9385] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 469.317041][ T9385] RBP: 00007fe1aeea6090 R08: 0000000000000000 R09: 0000000000000000 [ 469.325065][ T9385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.333084][ T9385] R13: 00007fe1ae216038 R14: 00007fe1ae215fa0 R15: 00007ffe2c4cf4f8 [ 469.341124][ T9385] [ 473.394830][ T9418] netlink: 'syz.0.1212': attribute type 46 has an invalid length. [ 473.408636][ T9418] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1212'. [ 476.223408][ T9421] syzkaller0: tun_chr_ioctl cmd 1074025698 [ 476.258567][ T9423] netlink: 'syz.0.1223': attribute type 46 has an invalid length. [ 476.267046][ T9423] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1223'. [ 476.301394][ T5775] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9 [ 476.456136][ T9427] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1215'. [ 476.496833][ T9427] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1215'. [ 476.542310][ T9430] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1215'. [ 483.134706][ T9465] netlink: 'syz.2.1227': attribute type 46 has an invalid length. [ 483.238612][ T9465] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1227'. [ 501.654377][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.665190][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 546.288540][ T9481] page_pool_release_retry() stalled pool shutdown 51 inflight 60 sec [ 563.095590][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.102159][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.748262][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 589.755068][ C1] rcu: 1-....: (1 GPs behind) idle=3904/1/0x4000000000000000 softirq=30220/30221 fqs=5192 [ 589.766283][ C1] rcu: hardirqs softirqs csw/system [ 589.772733][ C1] rcu: number: 1347912 0 0 [ 589.779172][ C1] rcu: cputime: 18288 34191 71 ==> 52510(ms) [ 589.787003][ C1] rcu: (t=10503 jiffies g=37065 q=584 ncpus=2) [ 589.793276][ C1] CPU: 1 PID: 9461 Comm: syz.0.1229 Not tainted syzkaller #0 [ 589.800698][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 589.810792][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x1f/0x60 [ 589.816990][ C1] Code: 89 de 5b e9 53 59 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 10 a2 7c 7e 65 8b 15 11 a2 7c 7e 81 e2 00 01 ff 00 74 11 <81> fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 [ 589.836634][ C1] RSP: 0018:ffffc900001f04d0 EFLAGS: 00000206 [ 589.842775][ C1] RAX: ffffffff813b3647 RBX: ffffc900001f0660 RCX: ffff888023d98000 [ 589.850777][ C1] RDX: 0000000000000100 RSI: ffffffff893b8a75 RDI: ffffc900001f05a8 [ 589.858780][ C1] RBP: ffffc900001f0630 R08: ffffc900001f0670 R09: 0000000000000004 [ 589.866791][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc900001f05a8 [ 589.874798][ C1] R13: dffffc0000000000 R14: ffffffff8175b740 R15: ffffc900001f05a8 [ 589.882818][ C1] FS: 00007f18ce7ab6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 589.891789][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 589.898501][ C1] CR2: 00007fc9e3c0dff8 CR3: 0000000030262000 CR4: 00000000003506e0 [ 589.906499][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 589.914508][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 589.922510][ C1] Call Trace: [ 589.925821][ C1] [ 589.928780][ C1] unwind_next_frame+0x27/0x2970 [ 589.933850][ C1] ? addrconf_rs_timer+0x2d5/0x630 [ 589.939012][ C1] ? __kernel_text_address+0xd/0x30 [ 589.944241][ C1] ? addrconf_rs_timer+0x2d5/0x630 [ 589.949387][ C1] ? stack_trace_save+0x100/0x100 [ 589.954444][ C1] arch_stack_walk+0x144/0x190 [ 589.959247][ C1] ? addrconf_rs_timer+0x2d5/0x630 [ 589.964505][ C1] stack_trace_save+0xaa/0x100 [ 589.969308][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 589.974465][ C1] ref_tracker_alloc+0x1b7/0x4c0 [ 589.979440][ C1] ? ref_tracker_dir_exit+0x500/0x500 [ 589.984846][ C1] ? dst_init+0xd9/0x460 [ 589.989124][ C1] ? dst_alloc+0x12e/0x170 [ 589.993565][ C1] ? icmp6_dst_alloc+0x7b/0x400 [ 589.998444][ C1] ? ndisc_send_skb+0x44e/0x14f0 [ 590.003475][ C1] ? addrconf_rs_timer+0x2d5/0x630 [ 590.008650][ C1] ? slab_post_alloc_hook+0x8a/0x4b0 [ 590.013980][ C1] dst_init+0xd9/0x460 [ 590.018105][ C1] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 590.023773][ C1] dst_alloc+0x12e/0x170 [ 590.028070][ C1] icmp6_dst_alloc+0x7b/0x400 [ 590.032776][ C1] ? icmpv6_flow_init+0x62/0x120 [ 590.037750][ C1] ndisc_send_skb+0x44e/0x14f0 [ 590.042544][ C1] ? ndisc_send_skb+0x1f5/0x14f0 [ 590.047518][ C1] ? ndisc_alloc_skb+0x18c/0x450 [ 590.052570][ C1] ? ndisc_mc_map+0x680/0x680 [ 590.057363][ C1] ? __build_skb_around+0x255/0x3d0 [ 590.062626][ C1] addrconf_rs_timer+0x2d5/0x630 [ 590.067608][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 590.073773][ C1] ? call_timer_fn+0x171/0x540 [ 590.078582][ C1] call_timer_fn+0x189/0x540 [ 590.083209][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 590.089362][ C1] ? call_timer_fn+0xd2/0x540 [ 590.094155][ C1] ? __run_timers+0x800/0x800 [ 590.098873][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 590.104986][ C1] __run_timers+0x542/0x800 [ 590.109529][ C1] ? detach_timer+0x2b0/0x2b0 [ 590.114272][ C1] run_timer_softirq+0x67/0xf0 [ 590.119124][ C1] handle_softirqs+0x280/0x820 [ 590.123939][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 590.128748][ C1] ? do_softirq+0x1a0/0x1a0 [ 590.133290][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 590.138533][ C1] __irq_exit_rcu+0xd3/0x190 [ 590.143168][ C1] ? irq_exit_rcu+0x20/0x20 [ 590.147714][ C1] irq_exit_rcu+0x9/0x20 [ 590.151986][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 590.157662][ C1] [ 590.160627][ C1] [ 590.163766][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 590.169787][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 590.175636][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 f0 a3 30 09 e8 8b 22 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 590.195279][ C1] RSP: 0018:ffffc900043d7618 EFLAGS: 00000286 [ 590.201395][ C1] RAX: a954803336128900 RBX: 0000000000000000 RCX: a954803336128900 [ 590.209406][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 590.217410][ C1] RBP: ffffc900043d7670 R08: ffffffff911bf5ff R09: 1ffffffff2237ebf [ 590.225413][ C1] R10: dffffc0000000000 R11: fffffbfff2237ec0 R12: ffff888023d98000 [ 590.233512][ C1] R13: dffffc0000000000 R14: ffff88802dd03c00 R15: ffff8880b8f3cac8 [ 590.241535][ C1] ? finish_task_switch+0x265/0x8f0 [ 590.246776][ C1] __schedule+0x155b/0x45a0 [ 590.251327][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 590.257092][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 590.263375][ C1] ? asan.module_dtor+0x20/0x20 [ 590.268268][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 590.273519][ C1] preempt_schedule_irq+0xbf/0x150 [ 590.278669][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 590.284435][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 590.290278][ C1] irqentry_exit+0x67/0x70 [ 590.294726][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 590.300738][ C1] RIP: 0010:preempt_schedule+0xbb/0xd0 [ 590.306235][ C1] Code: 29 48 c7 04 24 0e 36 e0 45 4a c7 04 33 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 58 75 10 48 8d 65 f0 5b 41 5e 5d c3 10 00 00 00 eb d0 e8 19 bc f7 ff 66 0f 1f 84 00 00 00 00 00 41 [ 590.325878][ C1] RSP: 0018:ffffc900043d7a00 EFLAGS: 00000206 [ 590.331986][ C1] RAX: dffffc0000000004 RBX: 1ffff9200087af40 RCX: 0000000000080000 [ 590.339986][ C1] RDX: ffffc9000d529000 RSI: 000000000000385b RDI: 000000000000385c [ 590.347988][ C1] RBP: ffffc900043d7a78 R08: ffffffff911bf5ff R09: 1ffffffff2237ebf [ 590.355993][ C1] R10: dffffc0000000000 R11: fffffbfff2237ec0 R12: 0000000000000000 [ 590.364000][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff9200087af60 [ 590.372028][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 590.377699][ C1] ? event_function+0x300/0x300 [ 590.382587][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 590.388354][ C1] preempt_schedule_thunk+0x1a/0x30 [ 590.393594][ C1] ? smp_call_function_single+0x488/0x5a0 [ 590.399358][ C1] smp_call_function_single+0x48d/0x5a0 [ 590.404937][ C1] ? event_function+0x300/0x300 [ 590.409825][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 590.416016][ C1] ? event_function+0x300/0x300 [ 590.421089][ C1] ? event_function+0x300/0x300 [ 590.425980][ C1] perf_install_in_context+0x5be/0x920 [ 590.431657][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 590.437758][ C1] ? add_event_to_ctx+0x1180/0x1180 [ 590.442994][ C1] ? ihold+0x44/0x50 [ 590.446937][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 590.452180][ C1] ? perf_event__header_size+0x165/0x220 [ 590.457859][ C1] __se_sys_perf_event_open+0x1836/0x1c50 [ 590.463628][ C1] ? clockevents_program_event+0x230/0x310 [ 590.469477][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 590.475156][ C1] ? lock_chain_count+0x20/0x20 [ 590.480041][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 590.486060][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 590.491294][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 590.496965][ C1] do_syscall_64+0x55/0xa0 [ 590.501420][ C1] ? clear_bhb_loop+0x40/0x90 [ 590.506129][ C1] ? clear_bhb_loop+0x40/0x90 [ 590.510844][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 590.516770][ C1] RIP: 0033:0x7f18cd99bf79 [ 590.521222][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.540862][ C1] RSP: 002b:00007f18ce7ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 590.549312][ C1] RAX: ffffffffffffffda RBX: 00007f18cdc15fa0 RCX: 00007f18cd99bf79 [ 590.557314][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 590.565321][ C1] RBP: 00007f18cda327e0 R08: 0000000000000002 R09: 0000000000000000 [ 590.573325][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 590.581338][ C1] R13: 00007f18cdc16038 R14: 00007f18cdc15fa0 R15: 00007ffd1385ec18 [ 590.589366][ C1]