last executing test programs: 20.981998154s ago: executing program 3 (id=1383): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000240)) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1, 0x3fff8000}, 0x0, 0x32, 0x9, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfe33) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) socket$kcm(0xa, 0x2, 0x73) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) close(r4) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r2, &(0x7f0000000100)="7301fe0eb8be21464aebcccc1d55f0b861752923f3cc910aa6b563411a4faff68427a83cb869ef4c7c01024fb9796046fa7bf6d7d7f16c5ae1e9ff4edcd165f2ed5cac4e52847f78a173bdce34c81e46a563206c31fa88", &(0x7f00000001c0)=""/33}, 0x20) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x2, 0xa, 0x95, &(0x7f00000002c0)) 20.878261587s ago: executing program 1 (id=1385): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xda, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 14) 20.331708619s ago: executing program 1 (id=1387): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x20014000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000500000003000000010000fd020000000501040000000080050000004d3655070000000000000f01000000b500612e6100d2fd08c3499d6c4e74f01d4e21082b1abb5ea8a506d5d6531d9d5707184c896c7bf8fdbc45"], 0x0, 0x45, 0x0, 0x1, 0x5}, 0x28) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x11, 0x0, 0x40019) socket$kcm(0x1e, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000321053582c137153e37000c0980fc0b1007", 0x2c}], 0x1}, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000098"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91224fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x1b, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff81", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 20.316220888s ago: executing program 3 (id=1388): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7fffffff) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x9}], 0x1}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001040)="f2", 0x1}], 0x1}, 0x40084) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) 19.500838986s ago: executing program 0 (id=1393): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="9e", 0x1}], 0x1}, 0x8000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 19.419417978s ago: executing program 1 (id=1395): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffff}, 0x94) sendmsg(0xffffffffffffffff, 0x0, 0x100) socket$kcm(0x29, 0x2, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2062) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x9, 0x9, 0x1d0ceadd, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000001a40)={'c', ' *:* ', 'w\x00'}, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa1, 0xe, 0x0, 0x0, 0x0, 0x5, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xe, 0x10}, 0x4aa6, 0xb, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xa, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f2e"], 0x0, 0x5e, 0x0, 0x1}, 0x28) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) recvmsg$unix(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000180)=""/87, 0x57}, {&(0x7f0000000300)=""/170, 0xaa}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/162, 0xa2}, {&(0x7f0000001640)=""/144, 0x90}, {&(0x7f0000001700)=""/237, 0xed}, {&(0x7f0000001800)=""/167, 0xa7}, {&(0x7f00000018c0)=""/187, 0xbb}], 0x8}, 0x4000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c", 0x16}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0xfffffffe, 0x5}, {0x2000000, 0x5, 0xffffffff, 0x2}, {0x2000, 0x2, 0x1000a, 0x5}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 19.354831549s ago: executing program 3 (id=1396): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="47019500bca7559500e1"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) 19.253535141s ago: executing program 0 (id=1397): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x15, 0x5, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000005c0), 0x4) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f409000a3164ae439862807a158983661a6d", 0x16}, {&(0x7f0000000040)="df3b46a13300"/17, 0x11}, {&(0x7f0000001480)}], 0x5}, 0x40000) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRESHEX=r2], 0x20) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$unix(r1, &(0x7f00000009c0)={&(0x7f0000000600)=@file={0x40c5393c007486cd, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000680)="82526d18df33cf63addc6b1cb0379c0f8cfa7fa3678dd2", 0x17}, {&(0x7f00000006c0)="58f38407fe50ca5bacf89bf83a6729992415b4dd0a07ff1c0b85a3ac4157865decc4810cd46ff8f55c1a36c337674ba2f609e8c083c63e588059eedced286d2df18edd1cf266eb87f8d9f23114fb5b623d941fd56727b89a032bb541658ed89bbe486d3c9791fa99578d71fc8667824fe67fc51c37bf2d246fc9fc702e36c16804d268e65268f68a562b66b76818712c9605bc56c18e735b195bfd777e2de3822021b54070f2a70331a74aaaac61cc9efdcb4f0bb82c76aacd76eb605f7a46af3cc083c597d13b51ff", 0xc9}], 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="e6461cfc882089731f0d4517137447078300c94e943db697c9557375086f6643349c6391b1b1a69b704470cd7126bcc21cbe948acc48c92bff5fc6a4d7ee16102f595000ac1fefa773722fbc04d0353b765b83f3baa3161d8d10a8ae8281d2482579fb4adfbeb820efea7dff6b0d7253e1588a67bfc51e3f6470f921c21e3941ab3b75a5c4a08c12c9ff639a238ba4c42889606829a0c3b00680a31694e8fc49c382ff07642653053b813fa59fea60247a998cef9b98ca60807aa378f497fdf3d7", @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB='!\x00\x00\x00'], 0x70, 0x8000}, 0x0) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="0210000902000000", 0x8}], 0x1}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc) close(r8) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$kcm(0x22, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 19.227839392s ago: executing program 3 (id=1398): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7fffffff) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x9}, {&(0x7f0000000140)}], 0x2}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001040)="f2", 0x1}], 0x1}, 0x40084) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) 18.981422747s ago: executing program 0 (id=1399): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03076003008cb29e08f088a8", 0x0, 0x200009, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$kcm(0x18, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2008, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3fc2bda6, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000020000000000000001000000850000005300000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.558280406s ago: executing program 2 (id=1400): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000020000000000000001000000850000005300000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.410056229s ago: executing program 2 (id=1401): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x15, 0x5, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000005c0), 0x4) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb8", 0x48}, {&(0x7f0000000080)="088d85d1f409000a3164ae439862807a158983661a6d", 0x16}, {&(0x7f0000000040)="df3b46a13300"/17, 0x11}, {&(0x7f0000001480)}], 0x5}, 0x40000) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRESHEX=r2], 0x20) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$unix(r1, &(0x7f00000009c0)={&(0x7f0000000600)=@file={0x40c5393c007486cd, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000680)="82526d18df33cf63addc6b1cb0379c0f8cfa7fa3678dd2", 0x17}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="e6461cfc882089731f0d4517137447078300c94e943db697c9557375086f6643349c6391b1b1a69b704470cd7126bcc21cbe948acc48c92bff5fc6a4d7ee16102f595000ac1fefa773722fbc04d0353b765b83f3baa3161d8d10a8ae8281d2482579fb4adfbeb820efea7dff6b0d7253e1588a67bfc51e3f6470f921c21e3941ab3b75a5c4a08c12c9ff639a238ba4c42889606829a0c3b00680a31694e8fc49c382ff07642653053b813fa59fea60247a998cef9b98ca60807aa378f497fdf3d7", @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB='!\x00\x00\x00'], 0x70, 0x8000}, 0x0) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="0210000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc) close(r8) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$kcm(0x22, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 18.409527359s ago: executing program 1 (id=1402): r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x81, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091ef"], 0xfe33) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0x43, &(0x7f0000000100), 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r4) socket$kcm(0x15, 0x5, 0x0) write$cgroup_devices(r4, 0x0, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x80004141) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='+devices +hugetfree'], 0x25) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000), 0x0, 0x0, 0x1800}, 0x10) 18.294860942s ago: executing program 3 (id=1403): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x20014000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000500000003000000010000fd020000000501040000000080050000004d3655070000000000000f01000000b500612e6100d2fd08c3499d6c4e74f01d4e21082b1abb5ea8a506d5d6531d9d5707184c896c7bf8fdbc45"], 0x0, 0x45, 0x0, 0x1, 0x5}, 0x28) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x11, 0x0, 0x40019) socket$kcm(0x1e, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000321053582c137153e37000c0980fc0b1007", 0x2c}], 0x1}, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000098"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91224fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x1b, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff81", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.293608182s ago: executing program 1 (id=1404): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7fffffff) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x9}], 0x1}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001040)="f2", 0x1}], 0x1}, 0x40084) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) 18.220677673s ago: executing program 2 (id=1405): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="9e", 0x1}], 0x1}, 0x8000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 18.068892016s ago: executing program 2 (id=1406): sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000080}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xce81, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) socket$kcm(0x18, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)={'c', ' *:* ', 'wm\x00'}, 0x9) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@o_path={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x1e, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000a0000000000000007000000180000000100000000000000020000008500000051000000183a0000040000000000000000000000182a0000", @ANYRES32=r0, @ANYBLOB="0000000008000000387510000c000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffff", @ANYRES32, @ANYBLOB="9ffaf80000000000000000b70500000800000085000000a500000018000000040000000000000044feae449500000000668c29eb1a7d0be614aa8f7b35b0577b723865"], &(0x7f00000008c0)='GPL\x00', 0x3, 0x68, &(0x7f0000000900)=""/104, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xe6}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), 0xe) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 18.013241388s ago: executing program 0 (id=1407): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x15, 0x5, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000005c0), 0x4) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f409000a3164ae439862807a158983661a6d", 0x16}, {&(0x7f0000000040)="df3b46a13300"/17, 0x11}, {&(0x7f0000001480)}], 0x5}, 0x40000) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRESHEX=r2], 0x20) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$unix(r1, &(0x7f00000009c0)={&(0x7f0000000600)=@file={0x40c5393c007486cd, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000680)="82526d18df33cf63addc6b1cb0379c0f8cfa7fa3678dd2", 0x17}, {&(0x7f00000006c0)="58f38407fe50ca5bacf89bf83a6729992415b4dd0a07ff1c0b85a3ac4157865decc4810cd46ff8f55c1a36c337674ba2f609e8c083c63e588059eedced286d2df18edd1cf266eb87f8d9f23114fb5b623d941fd56727b89a032bb541658ed89bbe486d3c9791fa99578d71fc8667824fe67fc51c37bf2d246fc9fc702e36c16804d268e65268f68a562b66b76818712c9605bc56c18e735b195bfd777e2de3822021b54070f2a70331a74aaaac61cc9efdcb4f0bb82c76aacd76eb605f7a46af3cc083c597d13b51ff", 0xc9}], 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="e6461cfc882089731f0d4517137447078300c94e943db697c9557375086f6643349c6391b1b1a69b704470cd7126bcc21cbe948acc48c92bff5fc6a4d7ee16102f595000ac1fefa773722fbc04d0353b765b83f3baa3161d8d10a8ae8281d2482579fb4adfbeb820efea7dff6b0d7253e1588a67bfc51e3f6470f921c21e3941ab3b75a5c4a08c12c9ff639a238ba4c42889606829a0c3b00680a31694e8fc49c382ff07642653053b813fa59fea60247a998cef9b98ca60807aa378f497fdf3d7", @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB='!\x00\x00\x00'], 0x70, 0x8000}, 0x0) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="0210000902000000", 0x8}], 0x1}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc) close(r8) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$kcm(0x22, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 17.667871975s ago: executing program 0 (id=1408): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7fffffff) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x9}, {0x0}], 0x2}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001040)="f2", 0x1}], 0x1}, 0x40084) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) 17.627259586s ago: executing program 2 (id=1409): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000020000000000000001000000850000005300000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.552714408s ago: executing program 0 (id=1410): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2980, 0x2, 0x0, 0x0, 0x712c, 0xd}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0xce, 0x8}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@o_path={&(0x7f00000002c0)='./file0\x00', r4, 0x4000, r1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603", 0x21}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef02"], 0x33fe0) 16.764233044s ago: executing program 2 (id=1411): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7fffffff) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x9}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798", 0x2c}], 0x2}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001040)="f2", 0x1}], 0x1}, 0x40084) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) 716.451µs ago: executing program 3 (id=1412): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x80000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$kcm(0x11, 0xa, 0x300) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000000)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000bfffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000100000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0xe, &(0x7f0000000600), 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000280)={'veth1_to_bond\x00', @random="ab771f848b0a"}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xe) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r7, r7, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000002d000b63717a3c4a7ad8985b0808aa78", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xb, 0x6, 0x0, 0x0, 0x0, 0x40000000000, 0x24010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1a2d, 0x0, 0x800004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x2, 0x5, 0x84) close(r9) socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x6e, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x1, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=1413): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x15, 0x5, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000005c0), 0x4) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb8", 0x48}, {&(0x7f0000000080)="088d85d1f409000a3164ae439862807a158983661a6d", 0x16}, {&(0x7f0000000040)="df3b46a13300"/17, 0x11}, {&(0x7f0000001480)}], 0x5}, 0x40000) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRESHEX=r2], 0x20) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$unix(r1, &(0x7f00000009c0)={&(0x7f0000000600)=@file={0x40c5393c007486cd, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000680)="82526d18df33cf63addc6b1cb0379c0f8cfa7fa3678dd2", 0x17}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="e6461cfc882089731f0d4517137447078300c94e943db697c9557375086f6643349c6391b1b1a69b704470cd7126bcc21cbe948acc48c92bff5fc6a4d7ee16102f595000ac1fefa773722fbc04d0353b765b83f3baa3161d8d10a8ae8281d2482579fb4adfbeb820efea7dff6b0d7253e1588a67bfc51e3f6470f921c21e3941ab3b75a5c4a08c12c9ff639a238ba4c42889606829a0c3b00680a31694e8fc49c382ff07642653053b813fa59fea60247a998cef9b98ca60807aa378f497fdf3d7", @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB='!\x00\x00\x00'], 0x70, 0x8000}, 0x0) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="0210000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc) close(r8) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$kcm(0x22, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) kernel console output (not intermixed with test programs): IPv6: NLM_F_CREATE should be set when creating new route [ 121.231883][ T6245] IPv6: NLM_F_CREATE should be set when creating new route [ 121.252195][ T6243] netlink: 'syz.1.143': attribute type 3 has an invalid length. [ 121.353194][ T6243] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.143'. [ 121.411964][ T6252] netlink: 'syz.3.146': attribute type 11 has an invalid length. [ 121.428896][ T6252] netlink: 140 bytes leftover after parsing attributes in process `syz.3.146'. [ 121.787411][ T6264] netlink: 'syz.2.150': attribute type 3 has an invalid length. [ 121.811293][ T6264] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.150'. [ 122.503612][ T6279] netlink: 'syz.3.155': attribute type 11 has an invalid length. [ 122.524760][ T6279] netlink: 140 bytes leftover after parsing attributes in process `syz.3.155'. [ 122.837891][ T6290] FAULT_INJECTION: forcing a failure. [ 122.837891][ T6290] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 122.851841][ T6290] CPU: 0 PID: 6290 Comm: syz.0.157 Not tainted syzkaller #0 [ 122.859192][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 122.869292][ T6290] Call Trace: [ 122.872614][ T6290] [ 122.875581][ T6290] dump_stack_lvl+0x18c/0x250 [ 122.880313][ T6290] ? show_regs_print_info+0x20/0x20 [ 122.885566][ T6290] ? load_image+0x420/0x420 [ 122.890119][ T6290] ? __might_fault+0xaa/0x120 [ 122.894866][ T6290] ? __lock_acquire+0x7d80/0x7d80 [ 122.899944][ T6290] should_fail_ex+0x394/0x4c0 [ 122.904679][ T6290] _copy_to_user+0x2f/0xa0 [ 122.909184][ T6290] generic_map_delete_batch+0x5b7/0x6d0 [ 122.914792][ T6290] ? bpf_map_inc_not_zero+0x110/0x110 [ 122.920222][ T6290] ? __fdget+0x180/0x210 [ 122.924515][ T6290] ? bpf_map_inc_not_zero+0x110/0x110 [ 122.929942][ T6290] bpf_map_do_batch+0x48c/0x600 [ 122.934849][ T6290] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 122.940369][ T6290] __sys_bpf+0x69e/0x890 [ 122.944751][ T6290] ? bpf_link_show_fdinfo+0x390/0x390 [ 122.950191][ T6290] ? lock_chain_count+0x20/0x20 [ 122.955105][ T6290] __x64_sys_bpf+0x7c/0x90 [ 122.959579][ T6290] do_syscall_64+0x55/0xb0 [ 122.964047][ T6290] ? clear_bhb_loop+0x40/0x90 [ 122.968765][ T6290] ? clear_bhb_loop+0x40/0x90 [ 122.973487][ T6290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.979439][ T6290] RIP: 0033:0x7f671439ce59 [ 122.983908][ T6290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.003563][ T6290] RSP: 002b:00007f67151f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.012046][ T6290] RAX: ffffffffffffffda RBX: 00007f6714616090 RCX: 00007f671439ce59 [ 123.020043][ T6290] RDX: 0000000000000038 RSI: 0000200000000080 RDI: 000000000000001b [ 123.028064][ T6290] RBP: 00007f67151f9090 R08: 0000000000000000 R09: 0000000000000000 [ 123.036060][ T6290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.044052][ T6290] R13: 00007f6714616128 R14: 00007f6714616090 R15: 00007ffc1ac758c8 [ 123.052063][ T6290] [ 123.216906][ T6295] netlink: 'syz.2.159': attribute type 2 has an invalid length. [ 123.250859][ T6295] netlink: 132 bytes leftover after parsing attributes in process `syz.2.159'. [ 123.407651][ T6301] netlink: 'syz.1.160': attribute type 3 has an invalid length. [ 123.432786][ T6301] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.160'. [ 124.267616][ T6319] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.167'. [ 124.338818][ T6319] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.167'. [ 124.394294][ T6322] netlink: 'syz.3.166': attribute type 11 has an invalid length. [ 124.680308][ T6331] netlink: 'syz.1.170': attribute type 10 has an invalid length. [ 124.793675][ T6334] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.246449][ T6331] syz_tun: entered promiscuous mode [ 127.326648][ T6331] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 128.675778][ T6359] validate_nla: 1 callbacks suppressed [ 128.675791][ T6359] netlink: 'syz.3.179': attribute type 11 has an invalid length. [ 128.693971][ T6359] __nla_validate_parse: 2 callbacks suppressed [ 128.693987][ T6359] netlink: 140 bytes leftover after parsing attributes in process `syz.3.179'. [ 129.044384][ T6364] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.181'. [ 129.075312][ T6364] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.181'. [ 129.241571][ T6371] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.184'. [ 129.254421][ T6369] netlink: 'syz.0.183': attribute type 3 has an invalid length. [ 129.262127][ T6369] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.183'. [ 132.807508][ T6385] netlink: 'syz.1.189': attribute type 11 has an invalid length. [ 132.874303][ T6385] netlink: 140 bytes leftover after parsing attributes in process `syz.1.189'. [ 133.041929][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.049083][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.625070][ T6397] netlink: 'syz.1.190': attribute type 2 has an invalid length. [ 133.663169][ T6397] netlink: 132 bytes leftover after parsing attributes in process `syz.1.190'. [ 134.578200][ T6408] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.194'. [ 134.808153][ T6408] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.194'. [ 135.353632][ T6420] FAULT_INJECTION: forcing a failure. [ 135.353632][ T6420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.397646][ T6420] CPU: 0 PID: 6420 Comm: syz.3.195 Not tainted syzkaller #0 [ 135.405027][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 135.415132][ T6420] Call Trace: [ 135.418451][ T6420] [ 135.421420][ T6420] dump_stack_lvl+0x18c/0x250 [ 135.426155][ T6420] ? show_regs_print_info+0x20/0x20 [ 135.431410][ T6420] ? load_image+0x420/0x420 [ 135.435999][ T6420] ? __might_fault+0xaa/0x120 [ 135.440732][ T6420] should_fail_ex+0x394/0x4c0 [ 135.445469][ T6420] copyin+0x1a/0x90 [ 135.449331][ T6420] _copy_from_iter+0x532/0x1290 [ 135.454250][ T6420] ? copyout_mc+0x70/0x70 [ 135.458635][ T6420] ? __virt_addr_valid+0x10c/0x380 [ 135.463794][ T6420] ? __virt_addr_valid+0x10c/0x380 [ 135.468954][ T6420] ? __virt_addr_valid+0x10c/0x380 [ 135.474125][ T6420] ? __check_object_size+0x4fc/0xa40 [ 135.479462][ T6420] netlink_sendmsg+0x76b/0xbf0 [ 135.484285][ T6420] ? netlink_getsockopt+0x590/0x590 [ 135.489532][ T6420] ? aa_sock_msg_perm+0x94/0x150 [ 135.494525][ T6420] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 135.499865][ T6420] ? security_socket_sendmsg+0x80/0xa0 [ 135.505382][ T6420] ? netlink_getsockopt+0x590/0x590 [ 135.510626][ T6420] ____sys_sendmsg+0x61b/0x980 [ 135.515450][ T6420] ? __asan_memset+0x22/0x40 [ 135.520092][ T6420] ? __sys_sendmsg_sock+0x30/0x30 [ 135.525166][ T6420] ? __import_iovec+0x3fa/0x850 [ 135.530071][ T6420] ? import_iovec+0x73/0xa0 [ 135.534624][ T6420] ___sys_sendmsg+0x2a6/0x360 [ 135.539356][ T6420] ? __sys_sendmsg+0x2b0/0x2b0 [ 135.544184][ T6420] ? trace_call_bpf+0xc3/0x6c0 [ 135.549034][ T6420] __se_sys_sendmsg+0x1d0/0x2c0 [ 135.553939][ T6420] ? perf_trace_preemptirq_template+0x269/0x330 [ 135.560236][ T6420] ? __x64_sys_sendmsg+0x80/0x80 [ 135.565285][ T6420] ? lockdep_hardirqs_on+0x98/0x150 [ 135.570547][ T6420] do_syscall_64+0x55/0xb0 [ 135.575046][ T6420] ? clear_bhb_loop+0x40/0x90 [ 135.579772][ T6420] ? clear_bhb_loop+0x40/0x90 [ 135.584497][ T6420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.590450][ T6420] RIP: 0033:0x7fd9a1d9ce59 [ 135.594914][ T6420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.614569][ T6420] RSP: 002b:00007fd9a2d15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.623047][ T6420] RAX: ffffffffffffffda RBX: 00007fd9a2016090 RCX: 00007fd9a1d9ce59 [ 135.631073][ T6420] RDX: 0000000000000090 RSI: 0000200000000080 RDI: 0000000000000004 [ 135.639190][ T6420] RBP: 00007fd9a2d15090 R08: 0000000000000000 R09: 0000000000000000 [ 135.647236][ T6420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.655278][ T6420] R13: 00007fd9a2016128 R14: 00007fd9a2016090 R15: 00007ffc5aaff7d8 [ 135.663436][ T6420] [ 137.456693][ T6422] netlink: 'syz.0.196': attribute type 3 has an invalid length. [ 137.470259][ T6422] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.196'. [ 137.566220][ T6426] netlink: 'syz.3.198': attribute type 11 has an invalid length. [ 137.578647][ T6426] netlink: 140 bytes leftover after parsing attributes in process `syz.3.198'. [ 137.629854][ T6424] bridge0: port 3(team0) entered blocking state [ 137.643382][ T6424] bridge0: port 3(team0) entered disabled state [ 137.660214][ T6424] team0: entered allmulticast mode [ 137.670134][ T6424] team_slave_0: entered allmulticast mode [ 137.693013][ T6424] team_slave_1: entered allmulticast mode [ 137.701121][ T6424] team0: entered promiscuous mode [ 137.723609][ T6424] team_slave_0: entered promiscuous mode [ 137.743563][ T6424] team_slave_1: entered promiscuous mode [ 137.768689][ T6424] bridge0: port 3(team0) entered blocking state [ 137.775458][ T6424] bridge0: port 3(team0) entered forwarding state [ 138.452885][ T6441] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.203'. [ 138.891104][ T6444] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.204'. [ 138.903040][ T6444] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.204'. [ 139.115577][ T6449] netlink: 'syz.1.207': attribute type 3 has an invalid length. [ 139.140454][ T6449] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.207'. [ 140.655236][ T6452] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.205'. [ 140.887461][ T6461] netlink: 'syz.1.209': attribute type 16 has an invalid length. [ 141.052608][ T6461] netlink: 2 bytes leftover after parsing attributes in process `syz.1.209'. [ 141.473113][ T6466] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 141.523476][ T6466] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 142.305308][ T6486] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.216'. [ 142.579510][ T6495] netlink: 'syz.1.217': attribute type 3 has an invalid length. [ 142.591766][ T6495] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.217'. [ 144.978901][ T6488] wlan1: mtu greater than device maximum [ 144.998126][ T6486] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.216'. [ 146.423442][ T6532] netlink: 'syz.2.230': attribute type 11 has an invalid length. [ 146.431265][ T6532] netlink: 140 bytes leftover after parsing attributes in process `syz.2.230'. [ 146.843221][ T6538] netlink: 'syz.1.232': attribute type 3 has an invalid length. [ 146.861208][ T6538] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.232'. [ 147.041412][ T6544] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.233'. [ 147.147174][ T6544] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.233'. [ 148.322457][ T6581] netlink: 'syz.1.241': attribute type 11 has an invalid length. [ 148.330505][ T6581] netlink: 140 bytes leftover after parsing attributes in process `syz.1.241'. [ 148.558835][ T6577] wlan1: mtu greater than device maximum [ 148.687763][ T6588] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.245'. [ 148.805850][ T6586] netlink: 'syz.3.244': attribute type 3 has an invalid length. [ 148.842942][ T6586] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.244'. [ 149.227028][ T6593] netlink: 'syz.1.247': attribute type 11 has an invalid length. [ 149.247895][ T6593] netlink: 140 bytes leftover after parsing attributes in process `syz.1.247'. [ 149.443725][ T6597] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.249'. [ 149.471083][ T6597] netlink: 'syz.3.249': attribute type 2 has an invalid length. [ 149.604452][ T6601] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.248'. [ 150.177557][ T6611] netlink: 'syz.3.253': attribute type 11 has an invalid length. [ 151.010543][ T6621] netlink: 'syz.0.257': attribute type 3 has an invalid length. [ 151.089046][ T6625] netlink: 'syz.1.258': attribute type 11 has an invalid length. [ 151.383003][ T6637] netlink: 'syz.0.263': attribute type 29 has an invalid length. [ 151.620418][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 151.674963][ T6645] __nla_validate_parse: 4 callbacks suppressed [ 151.674989][ T6645] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.266'. [ 151.755870][ T6645] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.266'. [ 151.933396][ T6654] netlink: 'syz.1.269': attribute type 11 has an invalid length. [ 151.941398][ T6654] netlink: 140 bytes leftover after parsing attributes in process `syz.1.269'. [ 152.065027][ T6656] netlink: 'syz.1.270': attribute type 3 has an invalid length. [ 152.073020][ T6656] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.270'. [ 154.234668][ T6666] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.272'. [ 154.660805][ T6674] netlink: 'syz.2.275': attribute type 29 has an invalid length. [ 155.174340][ T6676] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.276'. [ 155.333597][ T6683] netlink: 'syz.1.278': attribute type 11 has an invalid length. [ 155.359868][ T6683] netlink: 140 bytes leftover after parsing attributes in process `syz.1.278'. [ 155.864888][ T6695] netlink: 'syz.1.282': attribute type 3 has an invalid length. [ 155.886864][ T6695] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.282'. [ 156.227210][ T6699] netlink: 'syz.2.284': attribute type 10 has an invalid length. [ 156.880859][ T6703] netlink: 17263 bytes leftover after parsing attributes in process `syz.1.285'. [ 156.896434][ T6711] netlink: 'syz.3.287': attribute type 21 has an invalid length. [ 156.908244][ T6711] netlink: 'syz.3.287': attribute type 19 has an invalid length. [ 156.916474][ T6711] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.287'. [ 156.994467][ T6699] syz.2.284 (6699) used greatest stack depth: 18856 bytes left [ 157.129904][ T6716] netlink: 'syz.2.289': attribute type 11 has an invalid length. [ 157.148092][ T6716] netlink: 140 bytes leftover after parsing attributes in process `syz.2.289'. [ 157.487215][ T6726] netlink: 'syz.2.293': attribute type 3 has an invalid length. [ 157.517714][ T6726] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.293'. [ 158.196664][ T6744] netlink: 'syz.1.299': attribute type 21 has an invalid length. [ 158.219938][ T6744] netlink: 'syz.1.299': attribute type 3 has an invalid length. [ 158.230265][ T6744] netlink: 144 bytes leftover after parsing attributes in process `syz.1.299'. [ 158.283847][ T6742] netlink: 'syz.3.298': attribute type 11 has an invalid length. [ 158.295142][ T6742] netlink: 'syz.3.298': attribute type 11 has an invalid length. [ 158.304380][ T6742] netlink: 'syz.3.298': attribute type 11 has an invalid length. [ 158.316525][ T6742] netlink: 'syz.3.298': attribute type 11 has an invalid length. [ 158.325783][ T6742] netlink: 'syz.3.298': attribute type 11 has an invalid length. [ 158.335115][ T6742] netlink: 'syz.3.298': attribute type 11 has an invalid length. [ 158.343723][ T6742] netlink: 'syz.3.298': attribute type 11 has an invalid length. [ 158.352034][ T6742] netlink: 'syz.3.298': attribute type 11 has an invalid length. [ 158.372765][ T6742] netlink: 'syz.3.298': attribute type 11 has an invalid length. [ 158.381052][ T6742] netlink: 'syz.3.298': attribute type 11 has an invalid length. [ 158.411872][ T6742] netlink: 208556 bytes leftover after parsing attributes in process `syz.3.298'. [ 158.692077][ T6750] netlink: 140 bytes leftover after parsing attributes in process `syz.0.301'. [ 159.015011][ T6755] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.304'. [ 159.493787][ T6768] FAULT_INJECTION: forcing a failure. [ 159.493787][ T6768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.593528][ T6768] CPU: 0 PID: 6768 Comm: syz.2.308 Not tainted syzkaller #0 [ 159.600928][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 159.611054][ T6768] Call Trace: [ 159.614416][ T6768] [ 159.617418][ T6768] dump_stack_lvl+0x18c/0x250 [ 159.622189][ T6768] ? show_regs_print_info+0x20/0x20 [ 159.627559][ T6768] ? load_image+0x420/0x420 [ 159.632157][ T6768] ? __lock_acquire+0x7d80/0x7d80 [ 159.637370][ T6768] should_fail_ex+0x394/0x4c0 [ 159.642150][ T6768] _copy_from_user+0x2f/0xe0 [ 159.646828][ T6768] __copy_msghdr+0x388/0x560 [ 159.651532][ T6768] ___sys_sendmsg+0x214/0x360 [ 159.656296][ T6768] ? get_pid_task+0x20/0x1e0 [ 159.660953][ T6768] ? __sys_sendmsg+0x2b0/0x2b0 [ 159.665824][ T6768] ? __lock_acquire+0x7d80/0x7d80 [ 159.670985][ T6768] __se_sys_sendmsg+0x1d0/0x2c0 [ 159.675913][ T6768] ? __x64_sys_sendmsg+0x80/0x80 [ 159.680979][ T6768] ? lockdep_hardirqs_on+0x98/0x150 [ 159.686241][ T6768] do_syscall_64+0x55/0xb0 [ 159.690701][ T6768] ? clear_bhb_loop+0x40/0x90 [ 159.695419][ T6768] ? clear_bhb_loop+0x40/0x90 [ 159.700145][ T6768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.706180][ T6768] RIP: 0033:0x7fb1b0f9ce59 [ 159.710638][ T6768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.730294][ T6768] RSP: 002b:00007fb1b1f26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.738760][ T6768] RAX: ffffffffffffffda RBX: 00007fb1b1215fa0 RCX: 00007fb1b0f9ce59 [ 159.746771][ T6768] RDX: 0000000024000080 RSI: 0000200000000080 RDI: 0000000000000005 [ 159.754782][ T6768] RBP: 00007fb1b1f26090 R08: 0000000000000000 R09: 0000000000000000 [ 159.762791][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.770911][ T6768] R13: 00007fb1b1216038 R14: 00007fb1b1215fa0 R15: 00007ffed4db5558 [ 159.778976][ T6768] [ 159.977125][ T6773] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.309'. [ 159.986687][ T6773] validate_nla: 5 callbacks suppressed [ 159.986701][ T6773] netlink: 'syz.2.309': attribute type 2 has an invalid length. [ 160.989032][ T6780] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.319'. [ 161.026413][ T6780] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 161.259082][ T6788] netlink: 'syz.2.313': attribute type 11 has an invalid length. [ 162.011606][ T6795] netlink: 'syz.3.316': attribute type 3 has an invalid length. [ 162.021757][ T6795] __nla_validate_parse: 1 callbacks suppressed [ 162.021772][ T6795] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.316'. [ 162.447292][ T6804] netlink: 'syz.2.318': attribute type 153 has an invalid length. [ 162.457518][ T6804] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.318'. [ 162.734028][ T6812] netlink: 128 bytes leftover after parsing attributes in process `syz.0.331'. [ 162.755175][ T6812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.731279][ T6827] netlink: 'syz.3.328': attribute type 3 has an invalid length. [ 163.763004][ T6827] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.328'. [ 164.056282][ T6831] netlink: 'syz.0.330': attribute type 10 has an invalid length. [ 164.119521][ T6831] nla_validate_range_unsigned: 25 callbacks suppressed [ 164.119540][ T6831] netlink: 'syz.0.330': attribute type 11 has an invalid length. [ 164.221107][ T6831] netlink: 'syz.0.330': attribute type 11 has an invalid length. [ 164.412933][ T6831] netlink: 'syz.0.330': attribute type 11 has an invalid length. [ 164.497574][ T6831] netlink: 'syz.0.330': attribute type 11 has an invalid length. [ 164.606786][ T6831] netlink: 'syz.0.330': attribute type 11 has an invalid length. [ 164.730002][ T6831] netlink: 'syz.0.330': attribute type 11 has an invalid length. [ 164.785587][ T6831] netlink: 'syz.0.330': attribute type 11 has an invalid length. [ 164.813040][ T6831] netlink: 'syz.0.330': attribute type 11 has an invalid length. [ 164.872143][ T6831] netlink: 'syz.0.330': attribute type 11 has an invalid length. [ 164.920939][ T6831] netlink: 'syz.0.330': attribute type 11 has an invalid length. [ 164.952199][ T6831] netlink: 'syz.0.330': attribute type 4 has an invalid length. [ 164.982802][ T6831] netlink: 'syz.0.330': attribute type 5 has an invalid length. [ 164.990531][ T6831] netlink: 208556 bytes leftover after parsing attributes in process `syz.0.330'. [ 165.086228][ T6846] FAULT_INJECTION: forcing a failure. [ 165.086228][ T6846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.112613][ T6846] CPU: 1 PID: 6846 Comm: syz.1.335 Not tainted syzkaller #0 [ 165.119977][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 165.130088][ T6846] Call Trace: [ 165.133412][ T6846] [ 165.136382][ T6846] dump_stack_lvl+0x18c/0x250 [ 165.141109][ T6846] ? show_regs_print_info+0x20/0x20 [ 165.146347][ T6846] ? load_image+0x420/0x420 [ 165.150895][ T6846] ? __might_fault+0xaa/0x120 [ 165.155621][ T6846] ? __lock_acquire+0x7d80/0x7d80 [ 165.160702][ T6846] should_fail_ex+0x394/0x4c0 [ 165.165439][ T6846] _copy_from_iter+0x1cd/0x1290 [ 165.170342][ T6846] ? rep_movs_alternative+0x4a/0x90 [ 165.175633][ T6846] ? copyout_mc+0x70/0x70 [ 165.180019][ T6846] ? copyout_mc+0x70/0x70 [ 165.184398][ T6846] ? __virt_addr_valid+0x10c/0x380 [ 165.189554][ T6846] ? page_copy_sane+0x16a/0x270 [ 165.194452][ T6846] copy_page_from_iter+0x7b/0x100 [ 165.199530][ T6846] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 165.205381][ T6846] tun_get_user+0xbc2/0x3d40 [ 165.210010][ T6846] ? aa_file_perm+0x11b/0xee0 [ 165.214743][ T6846] ? aa_file_perm+0x3e3/0xee0 [ 165.219481][ T6846] ? rcu_read_unlock+0xa0/0xa0 [ 165.224285][ T6846] ? tun_get+0x1c/0x2e0 [ 165.228468][ T6846] ? __lock_acquire+0x7d80/0x7d80 [ 165.233536][ T6846] ? tun_get+0x1c/0x2e0 [ 165.237729][ T6846] tun_chr_write_iter+0x119/0x200 [ 165.242787][ T6846] vfs_write+0x474/0x9a0 [ 165.247074][ T6846] ? file_end_write+0x250/0x250 [ 165.251959][ T6846] ? __fget_files+0x3fc/0x460 [ 165.256677][ T6846] ? __fdget_pos+0x1d8/0x330 [ 165.261295][ T6846] ? ksys_write+0x74/0x260 [ 165.265751][ T6846] ksys_write+0x151/0x260 [ 165.270109][ T6846] ? __ia32_sys_read+0x90/0x90 [ 165.274910][ T6846] ? lockdep_hardirqs_on+0x98/0x150 [ 165.280149][ T6846] do_syscall_64+0x55/0xb0 [ 165.284627][ T6846] ? clear_bhb_loop+0x40/0x90 [ 165.289325][ T6846] ? clear_bhb_loop+0x40/0x90 [ 165.294031][ T6846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.299955][ T6846] RIP: 0033:0x7f98abf9ce59 [ 165.304395][ T6846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.324022][ T6846] RSP: 002b:00007f98acec5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.332466][ T6846] RAX: ffffffffffffffda RBX: 00007f98ac215fa0 RCX: 00007f98abf9ce59 [ 165.340462][ T6846] RDX: 000000000000fdef RSI: 0000200000000980 RDI: 00000000000000c8 [ 165.348484][ T6846] RBP: 00007f98acec5090 R08: 0000000000000000 R09: 0000000000000000 [ 165.356472][ T6846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.364477][ T6846] R13: 00007f98ac216038 R14: 00007f98ac215fa0 R15: 00007ffef4d36cb8 [ 165.372487][ T6846] [ 165.415765][ T6844] veth1_macvtap: entered allmulticast mode [ 165.438404][ T6844] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.336'. [ 165.604753][ T6852] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.339'. [ 165.633926][ T6852] netlink: zone id is out of range [ 165.689463][ T6859] netlink: 'syz.0.338': attribute type 39 has an invalid length. [ 165.817511][ T6866] netlink: 'syz.2.341': attribute type 3 has an invalid length. [ 165.832653][ T6866] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.341'. [ 166.161539][ T6859] hsr_slave_1 (unregistering): left promiscuous mode [ 167.762323][ T6890] syzkaller0: entered promiscuous mode [ 167.887344][ T6890] syzkaller0: entered allmulticast mode [ 168.688320][ T6911] netlink: 'syz.0.353': attribute type 3 has an invalid length. [ 168.745886][ T6911] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.353'. [ 170.288145][ T6915] netlink: 60 bytes leftover after parsing attributes in process `syz.2.355'. [ 171.407485][ T6946] netlink: 'syz.1.364': attribute type 3 has an invalid length. [ 171.422739][ T6946] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.364'. [ 171.965205][ T6956] Driver unsupported XDP return value 0 on prog (id 311) dev N/A, expect packet loss! [ 174.314929][ T6985] netlink: 'syz.2.377': attribute type 3 has an invalid length. [ 174.330182][ T6985] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.377'. [ 175.154350][ T6996] netlink: 'syz.0.381': attribute type 33 has an invalid length. [ 175.173915][ T6996] netlink: 152 bytes leftover after parsing attributes in process `syz.0.381'. [ 175.184028][ T6996] `: renamed from syz_tun (while UP) [ 175.310422][ T6995] delete_channel: no stack [ 175.665211][ T7005] FAULT_INJECTION: forcing a failure. [ 175.665211][ T7005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.719596][ T7005] CPU: 1 PID: 7005 Comm: syz.0.383 Not tainted syzkaller #0 [ 175.726966][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 175.737070][ T7005] Call Trace: [ 175.740386][ T7005] [ 175.743364][ T7005] dump_stack_lvl+0x18c/0x250 [ 175.748103][ T7005] ? show_regs_print_info+0x20/0x20 [ 175.753432][ T7005] ? load_image+0x420/0x420 [ 175.757971][ T7005] ? __lock_acquire+0x7d80/0x7d80 [ 175.763035][ T7005] should_fail_ex+0x394/0x4c0 [ 175.767745][ T7005] _copy_from_user+0x2f/0xe0 [ 175.772362][ T7005] __copy_msghdr+0x388/0x560 [ 175.776982][ T7005] ___sys_sendmsg+0x214/0x360 [ 175.781690][ T7005] ? get_pid_task+0x20/0x1e0 [ 175.786310][ T7005] ? __sys_sendmsg+0x2b0/0x2b0 [ 175.791117][ T7005] ? __lock_acquire+0x7d80/0x7d80 [ 175.796187][ T7005] __se_sys_sendmsg+0x1d0/0x2c0 [ 175.801088][ T7005] ? __x64_sys_sendmsg+0x80/0x80 [ 175.806069][ T7005] ? lockdep_hardirqs_on+0x98/0x150 [ 175.811298][ T7005] do_syscall_64+0x55/0xb0 [ 175.815737][ T7005] ? clear_bhb_loop+0x40/0x90 [ 175.820435][ T7005] ? clear_bhb_loop+0x40/0x90 [ 175.825132][ T7005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.831053][ T7005] RIP: 0033:0x7f671439ce59 [ 175.835492][ T7005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.855127][ T7005] RSP: 002b:00007f671521a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.863566][ T7005] RAX: ffffffffffffffda RBX: 00007f6714615fa0 RCX: 00007f671439ce59 [ 175.871564][ T7005] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000004 [ 175.879552][ T7005] RBP: 00007f671521a090 R08: 0000000000000000 R09: 0000000000000000 [ 175.887545][ T7005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.895539][ T7005] R13: 00007f6714616038 R14: 00007f6714615fa0 R15: 00007ffc1ac758c8 [ 175.903549][ T7005] [ 176.672806][ T7009] netlink: 'syz.0.385': attribute type 33 has an invalid length. [ 176.695003][ T7009] netlink: 152 bytes leftover after parsing attributes in process `syz.0.385'. [ 176.845291][ T7021] netlink: 'syz.2.387': attribute type 3 has an invalid length. [ 176.856653][ T7021] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.387'. [ 177.614633][ T7049] netlink: 44 bytes leftover after parsing attributes in process `syz.1.396'. [ 177.644891][ T7052] FAULT_INJECTION: forcing a failure. [ 177.644891][ T7052] name failslab, interval 1, probability 0, space 0, times 0 [ 177.676074][ T7052] CPU: 0 PID: 7052 Comm: syz.0.398 Not tainted syzkaller #0 [ 177.683443][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.693544][ T7052] Call Trace: [ 177.696879][ T7052] [ 177.699881][ T7052] dump_stack_lvl+0x18c/0x250 [ 177.704708][ T7052] ? show_regs_print_info+0x20/0x20 [ 177.709963][ T7052] ? load_image+0x420/0x420 [ 177.714537][ T7052] should_fail_ex+0x394/0x4c0 [ 177.719288][ T7052] should_failslab+0x9/0x20 [ 177.723849][ T7052] slab_pre_alloc_hook+0x59/0x300 [ 177.728945][ T7052] kmem_cache_alloc+0x5a/0x2c0 [ 177.733761][ T7052] ? dst_alloc+0x105/0x170 [ 177.738245][ T7052] dst_alloc+0x105/0x170 [ 177.742550][ T7052] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 177.748670][ T7052] ? ip_route_output_key_hash_rcu+0x1241/0x2350 [ 177.754966][ T7052] ? ip_route_output_key_hash+0x13d/0x330 [ 177.760734][ T7052] ip_route_output_key_hash+0x1f3/0x330 [ 177.766344][ T7052] ? ip_route_input_rcu+0x3120/0x3120 [ 177.771868][ T7052] ? __lock_acquire+0x7d80/0x7d80 [ 177.776951][ T7052] ip_route_output_flow+0x2a/0x150 [ 177.782119][ T7052] ? security_sk_classify_flow+0x7b/0x90 [ 177.787850][ T7052] udp_sendmsg+0x160e/0x23d0 [ 177.792514][ T7052] ? udp_sendmsg+0x23d0/0x23d0 [ 177.797330][ T7052] ? udp_cmsg_send+0x350/0x350 [ 177.802160][ T7052] ? __lock_acquire+0x1336/0x7d80 [ 177.807269][ T7052] udpv6_sendmsg+0x7a1/0x2350 [ 177.812036][ T7052] ? release_sock+0x2f/0x1c0 [ 177.816701][ T7052] ? print_unlock_imbalance_bug+0x160/0x160 [ 177.822649][ T7052] ? udp_v6_early_demux+0xf90/0xf90 [ 177.827918][ T7052] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 177.833964][ T7052] ? __local_bh_enable_ip+0x13a/0x1c0 [ 177.839388][ T7052] ? _local_bh_enable+0xa0/0xa0 [ 177.844290][ T7052] ? inet_send_prepare+0x1ae/0x250 [ 177.849461][ T7052] ? inet_send_prepare+0x1ae/0x250 [ 177.854627][ T7052] ? inet6_sendmsg+0x5f/0xd0 [ 177.859263][ T7052] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 177.864519][ T7052] ____sys_sendmsg+0x61b/0x980 [ 177.869360][ T7052] ? __asan_memset+0x22/0x40 [ 177.874009][ T7052] ? __sys_sendmsg_sock+0x30/0x30 [ 177.879079][ T7052] ? __import_iovec+0x3fa/0x850 [ 177.884027][ T7052] ? import_iovec+0x73/0xa0 [ 177.888593][ T7052] ___sys_sendmsg+0x2a6/0x360 [ 177.893328][ T7052] ? get_pid_task+0x20/0x1e0 [ 177.897979][ T7052] ? __sys_sendmsg+0x2b0/0x2b0 [ 177.902839][ T7052] ? __lock_acquire+0x7d80/0x7d80 [ 177.907946][ T7052] __se_sys_sendmsg+0x1d0/0x2c0 [ 177.912872][ T7052] ? __x64_sys_sendmsg+0x80/0x80 [ 177.917889][ T7052] ? lockdep_hardirqs_on+0x98/0x150 [ 177.923236][ T7052] do_syscall_64+0x55/0xb0 [ 177.927708][ T7052] ? clear_bhb_loop+0x40/0x90 [ 177.932437][ T7052] ? clear_bhb_loop+0x40/0x90 [ 177.937163][ T7052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.943113][ T7052] RIP: 0033:0x7f671439ce59 [ 177.947569][ T7052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.967217][ T7052] RSP: 002b:00007f671521a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.975664][ T7052] RAX: ffffffffffffffda RBX: 00007f6714615fa0 RCX: 00007f671439ce59 [ 177.983679][ T7052] RDX: 0000000005000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 177.991682][ T7052] RBP: 00007f671521a090 R08: 0000000000000000 R09: 0000000000000000 [ 177.999679][ T7052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.007767][ T7052] R13: 00007f6714616038 R14: 00007f6714615fa0 R15: 00007ffc1ac758c8 [ 178.015781][ T7052] [ 178.263067][ T7060] netlink: 'syz.1.400': attribute type 3 has an invalid length. [ 178.270958][ T7060] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.400'. [ 178.383895][ T7062] tun0: tun_chr_ioctl cmd 1074025678 [ 178.389293][ T7062] tun0: group set to 0 [ 179.146556][ T7089] netlink: 'syz.1.410': attribute type 11 has an invalid length. [ 179.155115][ T7089] netlink: 140 bytes leftover after parsing attributes in process `syz.1.410'. [ 179.299978][ T7091] netlink: 'syz.3.411': attribute type 3 has an invalid length. [ 179.317176][ T7091] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.411'. [ 179.984468][ T7113] netlink: 'syz.1.420': attribute type 11 has an invalid length. [ 179.992304][ T7113] netlink: 140 bytes leftover after parsing attributes in process `syz.1.420'. [ 180.646642][ T7126] netlink: 'syz.1.425': attribute type 3 has an invalid length. [ 180.662679][ T7126] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.425'. [ 181.145930][ T7140] netlink: 'syz.0.431': attribute type 11 has an invalid length. [ 181.162709][ T7140] netlink: 140 bytes leftover after parsing attributes in process `syz.0.431'. [ 181.422278][ T7148] netlink: 'syz.3.435': attribute type 3 has an invalid length. [ 181.431544][ T7148] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.435'. [ 181.766010][ T7158] netlink: 'syz.3.438': attribute type 2 has an invalid length. [ 181.907112][ T7159] netlink: set zone limit has 8 unknown bytes [ 183.144319][ T7176] netlink: 'syz.1.444': attribute type 11 has an invalid length. [ 183.157128][ T7176] netlink: 140 bytes leftover after parsing attributes in process `syz.1.444'. [ 184.254351][ T7182] netlink: 'syz.3.446': attribute type 3 has an invalid length. [ 184.262136][ T7182] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.446'. [ 184.863570][ T7196] ¨à'©ÿˆ: renamed from hsr0 (while UP) [ 184.920233][ T7202] netlink: 'syz.3.453': attribute type 11 has an invalid length. [ 184.938764][ T7202] netlink: 140 bytes leftover after parsing attributes in process `syz.3.453'. [ 186.028636][ T7224] netlink: 'syz.0.459': attribute type 3 has an invalid length. [ 186.056165][ T7224] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.459'. [ 186.430474][ T7236] netlink: 'syz.0.465': attribute type 11 has an invalid length. [ 186.474576][ T7236] netlink: 140 bytes leftover after parsing attributes in process `syz.0.465'. [ 186.749736][ T7242] netlink: 'syz.0.475': attribute type 11 has an invalid length. [ 186.769517][ T7242] netlink: 140 bytes leftover after parsing attributes in process `syz.0.475'. [ 187.667227][ T7255] FAULT_INJECTION: forcing a failure. [ 187.667227][ T7255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.718430][ T7255] CPU: 1 PID: 7255 Comm: syz.0.471 Not tainted syzkaller #0 [ 187.725801][ T7255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 187.736025][ T7255] Call Trace: [ 187.739359][ T7255] [ 187.742328][ T7255] dump_stack_lvl+0x18c/0x250 [ 187.747074][ T7255] ? show_regs_print_info+0x20/0x20 [ 187.752336][ T7255] ? load_image+0x420/0x420 [ 187.756895][ T7255] ? __might_fault+0xaa/0x120 [ 187.761627][ T7255] should_fail_ex+0x394/0x4c0 [ 187.766457][ T7255] copyin+0x1a/0x90 [ 187.770327][ T7255] _copy_from_iter+0x3ec/0x1290 [ 187.775249][ T7255] ? copyout_mc+0x70/0x70 [ 187.779638][ T7255] ? __virt_addr_valid+0x10c/0x380 [ 187.784815][ T7255] ? __virt_addr_valid+0x10c/0x380 [ 187.789985][ T7255] ? __virt_addr_valid+0x10c/0x380 [ 187.795158][ T7255] ? __check_object_size+0x4fc/0xa40 [ 187.800587][ T7255] netlink_sendmsg+0x76b/0xbf0 [ 187.805405][ T7255] ? netlink_getsockopt+0x590/0x590 [ 187.810656][ T7255] ? aa_sock_msg_perm+0x94/0x150 [ 187.815649][ T7255] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 187.820993][ T7255] ? security_socket_sendmsg+0x80/0xa0 [ 187.826507][ T7255] ? netlink_getsockopt+0x590/0x590 [ 187.831754][ T7255] ____sys_sendmsg+0x61b/0x980 [ 187.836585][ T7255] ? __asan_memset+0x22/0x40 [ 187.841235][ T7255] ? __sys_sendmsg_sock+0x30/0x30 [ 187.846318][ T7255] ? __import_iovec+0x3fa/0x850 [ 187.851228][ T7255] ? import_iovec+0x73/0xa0 [ 187.855871][ T7255] ___sys_sendmsg+0x2a6/0x360 [ 187.860716][ T7255] ? __sys_sendmsg+0x2b0/0x2b0 [ 187.865588][ T7255] ? trace_call_bpf+0xc3/0x6c0 [ 187.870447][ T7255] __se_sys_sendmsg+0x1d0/0x2c0 [ 187.875356][ T7255] ? __x64_sys_sendmsg+0x80/0x80 [ 187.880363][ T7255] ? lockdep_hardirqs_on+0x98/0x150 [ 187.885625][ T7255] do_syscall_64+0x55/0xb0 [ 187.890098][ T7255] ? clear_bhb_loop+0x40/0x90 [ 187.894820][ T7255] ? clear_bhb_loop+0x40/0x90 [ 187.899549][ T7255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.905499][ T7255] RIP: 0033:0x7f671439ce59 [ 187.909960][ T7255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.929631][ T7255] RSP: 002b:00007f671521a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.938104][ T7255] RAX: ffffffffffffffda RBX: 00007f6714615fa0 RCX: 00007f671439ce59 [ 187.946216][ T7255] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 187.954270][ T7255] RBP: 00007f671521a090 R08: 0000000000000000 R09: 0000000000000000 [ 187.962284][ T7255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.970295][ T7255] R13: 00007f6714616038 R14: 00007f6714615fa0 R15: 00007ffc1ac758c8 [ 187.978336][ T7255] [ 188.249986][ T7265] FAULT_INJECTION: forcing a failure. [ 188.249986][ T7265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.313947][ T7265] CPU: 0 PID: 7265 Comm: syz.1.476 Not tainted syzkaller #0 [ 188.321349][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 188.331462][ T7265] Call Trace: [ 188.334785][ T7265] [ 188.337756][ T7265] dump_stack_lvl+0x18c/0x250 [ 188.342492][ T7265] ? show_regs_print_info+0x20/0x20 [ 188.347750][ T7265] ? load_image+0x420/0x420 [ 188.352314][ T7265] ? __might_fault+0xaa/0x120 [ 188.357023][ T7265] ? __lock_acquire+0x7d80/0x7d80 [ 188.362084][ T7265] should_fail_ex+0x394/0x4c0 [ 188.366799][ T7265] _copy_from_iter+0x1cd/0x1290 [ 188.371749][ T7265] ? __might_fault+0xaa/0x120 [ 188.376485][ T7265] ? copyout_mc+0x70/0x70 [ 188.380851][ T7265] ? copyout_mc+0x70/0x70 [ 188.385233][ T7265] ? __virt_addr_valid+0x10c/0x380 [ 188.390432][ T7265] ? page_copy_sane+0x16a/0x270 [ 188.395337][ T7265] copy_page_from_iter+0x7b/0x100 [ 188.400400][ T7265] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 188.406270][ T7265] tun_get_user+0xbc2/0x3d40 [ 188.410937][ T7265] ? aa_file_perm+0x11b/0xee0 [ 188.415648][ T7265] ? aa_file_perm+0x3e3/0xee0 [ 188.420375][ T7265] ? rcu_read_unlock+0xa0/0xa0 [ 188.425205][ T7265] ? tun_get+0x1c/0x2e0 [ 188.429396][ T7265] ? __lock_acquire+0x7d80/0x7d80 [ 188.434459][ T7265] ? tun_get+0x1c/0x2e0 [ 188.438654][ T7265] tun_chr_write_iter+0x119/0x200 [ 188.443714][ T7265] vfs_write+0x474/0x9a0 [ 188.447990][ T7265] ? file_end_write+0x250/0x250 [ 188.452873][ T7265] ? __fget_files+0x3fc/0x460 [ 188.457585][ T7265] ? __fdget_pos+0x1d8/0x330 [ 188.462202][ T7265] ? ksys_write+0x74/0x260 [ 188.466648][ T7265] ksys_write+0x151/0x260 [ 188.471009][ T7265] ? __ia32_sys_read+0x90/0x90 [ 188.475807][ T7265] ? lockdep_hardirqs_on+0x98/0x150 [ 188.481047][ T7265] do_syscall_64+0x55/0xb0 [ 188.485501][ T7265] ? clear_bhb_loop+0x40/0x90 [ 188.490202][ T7265] ? clear_bhb_loop+0x40/0x90 [ 188.494910][ T7265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.500845][ T7265] RIP: 0033:0x7f98abf9ce59 [ 188.505285][ T7265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.524922][ T7265] RSP: 002b:00007f98acec5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 188.533361][ T7265] RAX: ffffffffffffffda RBX: 00007f98ac215fa0 RCX: 00007f98abf9ce59 [ 188.541367][ T7265] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 188.549365][ T7265] RBP: 00007f98acec5090 R08: 0000000000000000 R09: 0000000000000000 [ 188.557445][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.565530][ T7265] R13: 00007f98ac216038 R14: 00007f98ac215fa0 R15: 00007ffef4d36cb8 [ 188.573543][ T7265] [ 188.747826][ T7264] netlink: 'syz.2.473': attribute type 10 has an invalid length. [ 188.958681][ T7264] team0: Device hsr_slave_0 failed to register rx_handler [ 189.144138][ T7271] FAULT_INJECTION: forcing a failure. [ 189.144138][ T7271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.161772][ T7268] netlink: 'syz.0.478': attribute type 11 has an invalid length. [ 189.182623][ T7268] netlink: 140 bytes leftover after parsing attributes in process `syz.0.478'. [ 189.202630][ T7271] CPU: 0 PID: 7271 Comm: syz.1.479 Not tainted syzkaller #0 [ 189.209983][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 189.220059][ T7271] Call Trace: [ 189.223362][ T7271] [ 189.226313][ T7271] dump_stack_lvl+0x18c/0x250 [ 189.231028][ T7271] ? show_regs_print_info+0x20/0x20 [ 189.236260][ T7271] ? load_image+0x420/0x420 [ 189.240795][ T7271] ? __might_fault+0xaa/0x120 [ 189.245505][ T7271] ? __lock_acquire+0x7d80/0x7d80 [ 189.250555][ T7271] should_fail_ex+0x394/0x4c0 [ 189.255268][ T7271] _copy_from_iter+0x1cd/0x1290 [ 189.260171][ T7271] ? rep_movs_alternative+0x4a/0x90 [ 189.265404][ T7271] ? copyout_mc+0x70/0x70 [ 189.269775][ T7271] ? copyout_mc+0x70/0x70 [ 189.274141][ T7271] ? __virt_addr_valid+0x10c/0x380 [ 189.279280][ T7271] ? page_copy_sane+0x16a/0x270 [ 189.284162][ T7271] copy_page_from_iter+0x7b/0x100 [ 189.289218][ T7271] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 189.295058][ T7271] tun_get_user+0xbc2/0x3d40 [ 189.299717][ T7271] ? aa_file_perm+0x11b/0xee0 [ 189.304418][ T7271] ? aa_file_perm+0x3e3/0xee0 [ 189.309123][ T7271] ? rcu_read_unlock+0xa0/0xa0 [ 189.313923][ T7271] ? tun_get+0x1c/0x2e0 [ 189.318106][ T7271] ? __lock_acquire+0x7d80/0x7d80 [ 189.323160][ T7271] ? tun_get+0x1c/0x2e0 [ 189.327348][ T7271] tun_chr_write_iter+0x119/0x200 [ 189.332433][ T7271] vfs_write+0x474/0x9a0 [ 189.336712][ T7271] ? file_end_write+0x250/0x250 [ 189.341592][ T7271] ? __fget_files+0x3fc/0x460 [ 189.346305][ T7271] ? __fdget_pos+0x1d8/0x330 [ 189.350925][ T7271] ? ksys_write+0x74/0x260 [ 189.355373][ T7271] ksys_write+0x151/0x260 [ 189.359736][ T7271] ? __ia32_sys_read+0x90/0x90 [ 189.364546][ T7271] ? lockdep_hardirqs_on+0x98/0x150 [ 189.369788][ T7271] do_syscall_64+0x55/0xb0 [ 189.374236][ T7271] ? clear_bhb_loop+0x40/0x90 [ 189.378938][ T7271] ? clear_bhb_loop+0x40/0x90 [ 189.383648][ T7271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.389580][ T7271] RIP: 0033:0x7f98abf9ce59 [ 189.394040][ T7271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.413761][ T7271] RSP: 002b:00007f98acec5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 189.422331][ T7271] RAX: ffffffffffffffda RBX: 00007f98ac215fa0 RCX: 00007f98abf9ce59 [ 189.430347][ T7271] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 189.438350][ T7271] RBP: 00007f98acec5090 R08: 0000000000000000 R09: 0000000000000000 [ 189.446360][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.454443][ T7271] R13: 00007f98ac216038 R14: 00007f98ac215fa0 R15: 00007ffef4d36cb8 [ 189.462451][ T7271] [ 190.873768][ T7303] netlink: 'syz.1.490': attribute type 11 has an invalid length. [ 190.881724][ T7303] netlink: 140 bytes leftover after parsing attributes in process `syz.1.490'. [ 191.047271][ T7306] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 191.056080][ T7306] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.491'. [ 191.068089][ T7306] netlink: 1 bytes leftover after parsing attributes in process `syz.1.491'. [ 192.155154][ T7323] netlink: 'syz.3.499': attribute type 11 has an invalid length. [ 192.175144][ T7323] netlink: 140 bytes leftover after parsing attributes in process `syz.3.499'. [ 192.633373][ T7333] netlink: 'syz.0.501': attribute type 10 has an invalid length. [ 192.719241][ T7333] team0: Device hsr_slave_0 failed to register rx_handler [ 194.082904][ T7353] netlink: 'syz.3.510': attribute type 11 has an invalid length. [ 194.105094][ T7353] netlink: 140 bytes leftover after parsing attributes in process `syz.3.510'. [ 194.349726][ T7358] FAULT_INJECTION: forcing a failure. [ 194.349726][ T7358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.434999][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.441529][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.469668][ T7358] CPU: 1 PID: 7358 Comm: syz.3.513 Not tainted syzkaller #0 [ 194.477055][ T7358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 194.487158][ T7358] Call Trace: [ 194.490561][ T7358] [ 194.493539][ T7358] dump_stack_lvl+0x18c/0x250 [ 194.498274][ T7358] ? show_regs_print_info+0x20/0x20 [ 194.503523][ T7358] ? load_image+0x420/0x420 [ 194.508129][ T7358] ? __might_fault+0xaa/0x120 [ 194.512953][ T7358] ? __lock_acquire+0x7d80/0x7d80 [ 194.518078][ T7358] should_fail_ex+0x394/0x4c0 [ 194.522848][ T7358] _copy_from_iter+0x1cd/0x1290 [ 194.527859][ T7358] ? __virt_addr_valid+0x10c/0x380 [ 194.533045][ T7358] ? __lock_acquire+0x7d80/0x7d80 [ 194.538120][ T7358] ? copyout_mc+0x70/0x70 [ 194.542601][ T7358] ? __virt_addr_valid+0x10c/0x380 [ 194.547776][ T7358] ? __virt_addr_valid+0x10c/0x380 [ 194.552975][ T7358] ? __virt_addr_valid+0x10c/0x380 [ 194.558196][ T7358] ? __check_object_size+0x4fc/0xa40 [ 194.563536][ T7358] kernfs_fop_write_iter+0x19e/0x520 [ 194.568893][ T7358] vfs_write+0x474/0x9a0 [ 194.573204][ T7358] ? file_end_write+0x250/0x250 [ 194.578110][ T7358] ? __fget_files+0x3fc/0x460 [ 194.582835][ T7358] ? __fdget_pos+0x2a3/0x330 [ 194.587471][ T7358] ? ksys_write+0x74/0x260 [ 194.591937][ T7358] ksys_write+0x151/0x260 [ 194.596321][ T7358] ? __ia32_sys_read+0x90/0x90 [ 194.601144][ T7358] ? syscall_enter_from_user_mode+0x2e/0x80 [ 194.607097][ T7358] do_syscall_64+0x55/0xb0 [ 194.611563][ T7358] ? clear_bhb_loop+0x40/0x90 [ 194.616286][ T7358] ? clear_bhb_loop+0x40/0x90 [ 194.621131][ T7358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.627081][ T7358] RIP: 0033:0x7fd9a1d9ce59 [ 194.631539][ T7358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.651193][ T7358] RSP: 002b:00007fd9a2d36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.659656][ T7358] RAX: ffffffffffffffda RBX: 00007fd9a2015fa0 RCX: 00007fd9a1d9ce59 [ 194.667673][ T7358] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000009 [ 194.675693][ T7358] RBP: 00007fd9a2d36090 R08: 0000000000000000 R09: 0000000000000000 [ 194.683708][ T7358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.691724][ T7358] R13: 00007fd9a2016038 R14: 00007fd9a2015fa0 R15: 00007ffc5aaff7d8 [ 194.699756][ T7358] [ 196.005266][ T7381] netlink: 'syz.0.521': attribute type 11 has an invalid length. [ 196.051018][ T7381] netlink: 140 bytes leftover after parsing attributes in process `syz.0.521'. [ 196.828711][ T7385] FAULT_INJECTION: forcing a failure. [ 196.828711][ T7385] name failslab, interval 1, probability 0, space 0, times 0 [ 196.844788][ T7385] CPU: 1 PID: 7385 Comm: syz.1.523 Not tainted syzkaller #0 [ 196.852182][ T7385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 196.862343][ T7385] Call Trace: [ 196.865700][ T7385] [ 196.868699][ T7385] dump_stack_lvl+0x18c/0x250 [ 196.873475][ T7385] ? show_regs_print_info+0x20/0x20 [ 196.878757][ T7385] ? load_image+0x420/0x420 [ 196.883355][ T7385] ? __might_sleep+0xe0/0xe0 [ 196.888046][ T7385] ? __lock_acquire+0x7d80/0x7d80 [ 196.893214][ T7385] should_fail_ex+0x394/0x4c0 [ 196.898008][ T7385] should_failslab+0x9/0x20 [ 196.902593][ T7385] slab_pre_alloc_hook+0x59/0x300 [ 196.907711][ T7385] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 196.913531][ T7385] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 196.919311][ T7385] __kmem_cache_alloc_node+0x53/0x250 [ 196.924766][ T7385] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 196.930543][ T7385] __kmalloc+0xa7/0x240 [ 196.934777][ T7385] tomoyo_realpath_from_path+0xe6/0x5c0 [ 196.940387][ T7385] ? tomoyo_domain+0xd6/0x120 [ 196.945171][ T7385] tomoyo_path_number_perm+0x248/0x5e0 [ 196.950678][ T7385] ? tomoyo_path_number_perm+0x217/0x5e0 [ 196.956383][ T7385] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 196.961904][ T7385] ? trace_call_bpf+0xc3/0x6c0 [ 196.966728][ T7385] ? trace_call_bpf+0xc3/0x6c0 [ 196.971557][ T7385] ? trace_call_bpf+0x5e9/0x6c0 [ 196.976560][ T7385] ? __fget_files+0x28/0x460 [ 196.981276][ T7385] security_file_ioctl+0x70/0xa0 [ 196.986276][ T7385] __se_sys_ioctl+0x48/0x170 [ 196.990932][ T7385] do_syscall_64+0x55/0xb0 [ 196.995402][ T7385] ? clear_bhb_loop+0x40/0x90 [ 197.000127][ T7385] ? clear_bhb_loop+0x40/0x90 [ 197.004873][ T7385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.010832][ T7385] RIP: 0033:0x7f98abf9ce59 [ 197.015306][ T7385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.034958][ T7385] RSP: 002b:00007f98acec5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.043441][ T7385] RAX: ffffffffffffffda RBX: 00007f98ac215fa0 RCX: 00007f98abf9ce59 [ 197.051464][ T7385] RDX: 0000000000000000 RSI: 0000000000008941 RDI: 0000000000000006 [ 197.059494][ T7385] RBP: 00007f98acec5090 R08: 0000000000000000 R09: 0000000000000000 [ 197.067520][ T7385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.075544][ T7385] R13: 00007f98ac216038 R14: 00007f98ac215fa0 R15: 00007ffef4d36cb8 [ 197.083612][ T7385] [ 197.141713][ T7387] netlink: 'syz.0.531': attribute type 11 has an invalid length. [ 197.150028][ T7387] netlink: 140 bytes leftover after parsing attributes in process `syz.0.531'. [ 197.187072][ T7385] ERROR: Out of memory at tomoyo_realpath_from_path. [ 197.921947][ T7402] netlink: 'syz.0.529': attribute type 11 has an invalid length. [ 197.935349][ T7402] netlink: 140 bytes leftover after parsing attributes in process `syz.0.529'. [ 198.833423][ T7413] netlink: 'syz.2.535': attribute type 11 has an invalid length. [ 198.841770][ T7413] netlink: 140 bytes leftover after parsing attributes in process `syz.2.535'. [ 199.750796][ T7425] netlink: 'syz.2.539': attribute type 11 has an invalid length. [ 199.759255][ T7425] netlink: 140 bytes leftover after parsing attributes in process `syz.2.539'. [ 201.403556][ T7443] netlink: 'syz.0.545': attribute type 11 has an invalid length. [ 201.427183][ T7443] netlink: 140 bytes leftover after parsing attributes in process `syz.0.545'. [ 202.476054][ T7456] netlink: 'syz.2.552': attribute type 2 has an invalid length. [ 202.487951][ T7456] netlink: 'syz.2.552': attribute type 8 has an invalid length. [ 202.497099][ T7456] netlink: 132 bytes leftover after parsing attributes in process `syz.2.552'. [ 202.520395][ T7456] netlink: 'syz.2.552': attribute type 11 has an invalid length. [ 202.575572][ T7469] netlink: 'syz.1.556': attribute type 11 has an invalid length. [ 202.583747][ T7469] netlink: 140 bytes leftover after parsing attributes in process `syz.1.556'. [ 202.615304][ T7468] netlink: 'syz.3.555': attribute type 29 has an invalid length. [ 202.632919][ T7468] netlink: 'syz.3.555': attribute type 29 has an invalid length. [ 202.654278][ T7468] netlink: 'syz.3.555': attribute type 29 has an invalid length. [ 203.103176][ T7473] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.558'. [ 203.124017][ T7473] netlink: 21056 bytes leftover after parsing attributes in process `syz.1.558'. [ 203.390147][ T7485] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.562'. [ 203.421616][ T7485] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.562'. [ 203.518908][ T7487] netlink: 60 bytes leftover after parsing attributes in process `syz.1.564'. [ 203.529652][ T7487] netlink: 60 bytes leftover after parsing attributes in process `syz.1.564'. [ 203.542437][ T7487] netlink: 60 bytes leftover after parsing attributes in process `syz.1.564'. [ 203.621424][ T7493] netlink: 'syz.0.566': attribute type 11 has an invalid length. [ 203.637360][ T7493] netlink: 140 bytes leftover after parsing attributes in process `syz.0.566'. [ 205.743658][ T7526] netlink: 'syz.0.576': attribute type 11 has an invalid length. [ 205.761173][ T7524] netlink: 'syz.1.575': attribute type 10 has an invalid length. [ 205.803368][ T7524] veth0_macvtap: left promiscuous mode [ 206.097846][ T7533] netlink: 'syz.3.580': attribute type 29 has an invalid length. [ 206.110493][ T7533] netlink: 'syz.3.580': attribute type 29 has an invalid length. [ 206.148401][ T7533] netlink: 'syz.3.580': attribute type 29 has an invalid length. [ 206.722530][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 206.730014][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 206.736281][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 206.742435][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 209.319750][ T7558] netlink: 'syz.1.589': attribute type 21 has an invalid length. [ 209.342627][ T7558] __nla_validate_parse: 6 callbacks suppressed [ 209.342646][ T7558] netlink: 156 bytes leftover after parsing attributes in process `syz.1.589'. [ 210.375645][ T7578] netlink: 128 bytes leftover after parsing attributes in process `syz.1.596'. [ 210.435955][ T7578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.501052][ T7581] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.597'. [ 210.541226][ T7581] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.597'. [ 211.374113][ T5794] Bluetooth: hci0: ISO packet for unknown connection handle 35 [ 213.307924][ T7592] FAULT_INJECTION: forcing a failure. [ 213.307924][ T7592] name failslab, interval 1, probability 0, space 0, times 0 [ 213.337713][ T7592] CPU: 0 PID: 7592 Comm: syz.1.601 Not tainted syzkaller #0 [ 213.345086][ T7592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.355196][ T7592] Call Trace: [ 213.358522][ T7592] [ 213.361496][ T7592] dump_stack_lvl+0x18c/0x250 [ 213.366245][ T7592] ? show_regs_print_info+0x20/0x20 [ 213.371596][ T7592] ? load_image+0x420/0x420 [ 213.376161][ T7592] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 213.382193][ T7592] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 213.389456][ T7592] should_fail_ex+0x394/0x4c0 [ 213.394201][ T7592] should_failslab+0x9/0x20 [ 213.398772][ T7592] slab_pre_alloc_hook+0x59/0x300 [ 213.403852][ T7592] ? lockdep_hardirqs_on+0x98/0x150 [ 213.409120][ T7592] kmem_cache_alloc+0x5a/0x2c0 [ 213.413942][ T7592] ? skb_clone+0x1eb/0x370 [ 213.418420][ T7592] skb_clone+0x1eb/0x370 [ 213.422807][ T7592] __netlink_deliver_tap+0x411/0x7f0 [ 213.428158][ T7592] ? netlink_deliver_tap+0x2e/0x1b0 [ 213.433412][ T7592] netlink_deliver_tap+0x19c/0x1b0 [ 213.438572][ T7592] netlink_unicast+0x77b/0x930 [ 213.443397][ T7592] netlink_sendmsg+0x8d0/0xbf0 [ 213.448204][ T7592] ? netlink_getsockopt+0x590/0x590 [ 213.453432][ T7592] ? aa_sock_msg_perm+0x94/0x150 [ 213.458407][ T7592] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 213.463724][ T7592] ? security_socket_sendmsg+0x80/0xa0 [ 213.469211][ T7592] ? netlink_getsockopt+0x590/0x590 [ 213.474438][ T7592] ____sys_sendmsg+0x61b/0x980 [ 213.479239][ T7592] ? __asan_memset+0x22/0x40 [ 213.483861][ T7592] ? __sys_sendmsg_sock+0x30/0x30 [ 213.488925][ T7592] ? __import_iovec+0x5f2/0x850 [ 213.493813][ T7592] ? import_iovec+0x73/0xa0 [ 213.498344][ T7592] ___sys_sendmsg+0x2a6/0x360 [ 213.503059][ T7592] ? __sys_sendmsg+0x2b0/0x2b0 [ 213.507893][ T7592] __se_sys_sendmsg+0x1d0/0x2c0 [ 213.512782][ T7592] ? __x64_sys_sendmsg+0x80/0x80 [ 213.517767][ T7592] ? syscall_enter_from_user_mode+0x2e/0x80 [ 213.523697][ T7592] do_syscall_64+0x55/0xb0 [ 213.528244][ T7592] ? clear_bhb_loop+0x40/0x90 [ 213.532945][ T7592] ? clear_bhb_loop+0x40/0x90 [ 213.537651][ T7592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.543578][ T7592] RIP: 0033:0x7f98abf9ce59 [ 213.548021][ T7592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.567648][ T7592] RSP: 002b:00007f98acec5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.576092][ T7592] RAX: ffffffffffffffda RBX: 00007f98ac215fa0 RCX: 00007f98abf9ce59 [ 213.584093][ T7592] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 213.592084][ T7592] RBP: 00007f98acec5090 R08: 0000000000000000 R09: 0000000000000000 [ 213.600077][ T7592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.608075][ T7592] R13: 00007f98ac216038 R14: 00007f98ac215fa0 R15: 00007ffef4d36cb8 [ 213.616087][ T7592] [ 213.977727][ T7600] netlink: 14 bytes leftover after parsing attributes in process `syz.2.603'. [ 214.317232][ T7600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.357876][ T7600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.411679][ T7600] bond0 (unregistering): Released all slaves [ 215.281810][ T7620] netlink: 64 bytes leftover after parsing attributes in process `syz.1.608'. [ 215.448627][ T7626] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.611'. [ 215.473627][ T7626] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.611'. [ 217.750250][ T7642] netlink: 'syz.2.615': attribute type 8 has an invalid length. [ 218.309239][ T7656] netlink: 128 bytes leftover after parsing attributes in process `syz.0.621'. [ 218.399882][ T7656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.559963][ T7657] À: port 1(vlan0) entered blocking state [ 218.567420][ T7657] À: port 1(vlan0) entered forwarding state [ 218.860968][ T7666] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.624'. [ 218.872701][ T7666] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.624'. [ 219.225611][ T7675] netlink: 64 bytes leftover after parsing attributes in process `syz.0.626'. [ 219.927096][ T7682] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.635'. [ 222.027555][ T7682] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.635'. [ 222.358666][ T7693] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.629'. [ 222.388850][ T7693] netlink: 21056 bytes leftover after parsing attributes in process `syz.3.629'. [ 222.442912][ T7699] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.632'. [ 222.500466][ T7702] netlink: 'syz.1.633': attribute type 21 has an invalid length. [ 222.831565][ T7710] netlink: 'syz.2.638': attribute type 3 has an invalid length. [ 222.839646][ T7710] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.638'. [ 223.200245][ T7720] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.640'. [ 223.217775][ T7720] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.640'. [ 225.695877][ T7729] netlink: 164 bytes leftover after parsing attributes in process `syz.0.643'. [ 226.105446][ T7741] netlink: 'syz.2.647': attribute type 3 has an invalid length. [ 226.145057][ T7741] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.647'. [ 226.160940][ T7746] netlink: 'syz.3.650': attribute type 10 has an invalid length. [ 226.170788][ T7746] netlink: 40 bytes leftover after parsing attributes in process `syz.3.650'. [ 226.187522][ T7746] batman_adv: batadv0: Adding interface: vlan1 [ 226.202825][ T7746] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.269354][ T7746] batman_adv: batadv0: Interface activated: vlan1 [ 229.327940][ T7773] netlink: 'syz.1.661': attribute type 3 has an invalid length. [ 229.337149][ T7773] __nla_validate_parse: 2 callbacks suppressed [ 229.337164][ T7773] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.661'. [ 229.936496][ T7792] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.667'. [ 229.958589][ T7792] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.667'. [ 230.843385][ T7806] netlink: 'syz.0.673': attribute type 3 has an invalid length. [ 230.868535][ T7806] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.673'. [ 232.236725][ T7830] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.683'. [ 232.263803][ T7830] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.683'. [ 233.101013][ T7838] netlink: 'syz.0.685': attribute type 3 has an invalid length. [ 233.141338][ T7838] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.685'. [ 235.416956][ T7860] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.696'. [ 235.448245][ T7860] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.696'. [ 235.585863][ T7867] netlink: 'syz.3.699': attribute type 3 has an invalid length. [ 235.612826][ T7867] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.699'. [ 238.979571][ T7885] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 240.003700][ T7897] netlink: 'syz.1.711': attribute type 3 has an invalid length. [ 240.026393][ T7897] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.711'. [ 240.194994][ T7901] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.713'. [ 240.211986][ T7901] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.713'. [ 241.787591][ T7935] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.725'. [ 241.805033][ T7935] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.725'. [ 244.984834][ T7954] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 245.005653][ T7954] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 245.447674][ T7966] netlink: 'syz.2.735': attribute type 29 has an invalid length. [ 245.483808][ T7966] netlink: 'syz.2.735': attribute type 29 has an invalid length. [ 245.781997][ T7976] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.738'. [ 245.792298][ T7976] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.738'. [ 246.103918][ T7979] netlink: 'syz.3.739': attribute type 4 has an invalid length. [ 246.111686][ T7979] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.739'. [ 250.706271][ T8056] FAULT_INJECTION: forcing a failure. [ 250.706271][ T8056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.780866][ T8056] CPU: 0 PID: 8056 Comm: syz.3.767 Not tainted syzkaller #0 [ 250.788277][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 250.798378][ T8056] Call Trace: [ 250.801700][ T8056] [ 250.804672][ T8056] dump_stack_lvl+0x18c/0x250 [ 250.809425][ T8056] ? show_regs_print_info+0x20/0x20 [ 250.814679][ T8056] ? load_image+0x420/0x420 [ 250.819228][ T8056] ? __lock_acquire+0x7d80/0x7d80 [ 250.824312][ T8056] should_fail_ex+0x394/0x4c0 [ 250.829053][ T8056] _copy_from_user+0x2f/0xe0 [ 250.833782][ T8056] __copy_msghdr+0x388/0x560 [ 250.838444][ T8056] ___sys_sendmsg+0x214/0x360 [ 250.843178][ T8056] ? get_pid_task+0x20/0x1e0 [ 250.847920][ T8056] ? __sys_sendmsg+0x2b0/0x2b0 [ 250.852754][ T8056] ? __lock_acquire+0x7d80/0x7d80 [ 250.857858][ T8056] __se_sys_sendmsg+0x1d0/0x2c0 [ 250.862764][ T8056] ? __x64_sys_sendmsg+0x80/0x80 [ 250.867776][ T8056] ? lockdep_hardirqs_on+0x98/0x150 [ 250.873033][ T8056] do_syscall_64+0x55/0xb0 [ 250.877516][ T8056] ? clear_bhb_loop+0x40/0x90 [ 250.882240][ T8056] ? clear_bhb_loop+0x40/0x90 [ 250.886986][ T8056] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.892932][ T8056] RIP: 0033:0x7fd9a1d9ce59 [ 250.897573][ T8056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.917320][ T8056] RSP: 002b:00007fd9a2d36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.925817][ T8056] RAX: ffffffffffffffda RBX: 00007fd9a2015fa0 RCX: 00007fd9a1d9ce59 [ 250.933836][ T8056] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 250.941851][ T8056] RBP: 00007fd9a2d36090 R08: 0000000000000000 R09: 0000000000000000 [ 250.950041][ T8056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.958066][ T8056] R13: 00007fd9a2016038 R14: 00007fd9a2015fa0 R15: 00007ffc5aaff7d8 [ 250.966110][ T8056] [ 251.001569][ T8063] tap0: tun_chr_ioctl cmd 1074025694 [ 251.910003][ T8096] Q±6ã`Ò˜: renamed from lo (while UP) [ 252.107814][ T8096] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 252.700385][ T8110] netlink: 'syz.0.787': attribute type 10 has an invalid length. [ 254.132922][ T8156] netlink: 60 bytes leftover after parsing attributes in process `syz.3.802'. [ 254.141981][ T8156] netlink: 60 bytes leftover after parsing attributes in process `syz.3.802'. [ 254.229070][ T8156] netlink: 60 bytes leftover after parsing attributes in process `syz.3.802'. [ 254.969349][ T8170] netlink: 14 bytes leftover after parsing attributes in process `syz.2.813'. [ 255.798625][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.805144][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.295917][ T8206] netlink: 'syz.0.822': attribute type 12 has an invalid length. [ 256.323330][ T8206] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.822'. [ 256.343236][ T8204] netlink: 'syz.0.822': attribute type 12 has an invalid length. [ 256.372128][ T8204] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.822'. [ 257.763524][ T8234] netlink: 'syz.1.833': attribute type 29 has an invalid length. [ 257.839887][ T8234] netlink: 'syz.1.833': attribute type 29 has an invalid length. [ 257.908321][ T8237] netlink: 'syz.1.833': attribute type 29 has an invalid length. [ 260.614536][ T8247] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.838'. [ 263.086672][ T8276] ƒ: renamed from tunl0 (while UP) [ 263.185901][ T8277] netlink: 'syz.2.848': attribute type 10 has an invalid length. [ 263.503719][ T8285] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.852'. [ 263.542614][ T8285] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 264.698969][ T8308] netlink: 'syz.3.861': attribute type 10 has an invalid length. [ 264.740444][ T8310] €Â0: renamed from batadv_slave_1 (while UP) [ 264.820459][ T8310] netlink: 144 bytes leftover after parsing attributes in process `syz.2.862'. [ 265.244756][ T8323] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.868'. [ 265.264591][ T8323] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.868'. [ 265.679273][ T8333] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.870'. [ 267.433316][ T8342] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.874'. [ 267.461978][ T8342] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 267.915214][ T8360] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.882'. [ 267.936938][ T8360] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.882'. [ 268.678757][ T8370] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.885'. [ 268.884634][ T8372] FAULT_INJECTION: forcing a failure. [ 268.884634][ T8372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.908053][ T8372] CPU: 1 PID: 8372 Comm: syz.3.887 Not tainted syzkaller #0 [ 268.915405][ T8372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 268.925587][ T8372] Call Trace: [ 268.928891][ T8372] [ 268.931858][ T8372] dump_stack_lvl+0x18c/0x250 [ 268.936593][ T8372] ? show_regs_print_info+0x20/0x20 [ 268.941837][ T8372] ? load_image+0x420/0x420 [ 268.946416][ T8372] ? __might_fault+0xaa/0x120 [ 268.951157][ T8372] ? __lock_acquire+0x7d80/0x7d80 [ 268.956231][ T8372] should_fail_ex+0x394/0x4c0 [ 268.960948][ T8372] _copy_from_iter+0x1cd/0x1290 [ 268.965831][ T8372] ? rep_movs_alternative+0x4a/0x90 [ 268.971072][ T8372] ? copyout_mc+0x70/0x70 [ 268.975447][ T8372] ? copyout_mc+0x70/0x70 [ 268.979828][ T8372] ? __virt_addr_valid+0x10c/0x380 [ 268.984974][ T8372] ? page_copy_sane+0x16a/0x270 [ 268.989858][ T8372] copy_page_from_iter+0x7b/0x100 [ 268.994919][ T8372] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 269.000760][ T8372] tun_get_user+0xbc2/0x3d40 [ 269.005389][ T8372] ? aa_file_perm+0x11b/0xee0 [ 269.010096][ T8372] ? aa_file_perm+0x3e3/0xee0 [ 269.014806][ T8372] ? rcu_read_unlock+0xa0/0xa0 [ 269.019626][ T8372] ? tun_get+0x1c/0x2e0 [ 269.023804][ T8372] ? __lock_acquire+0x7d80/0x7d80 [ 269.028860][ T8372] ? tun_get+0x1c/0x2e0 [ 269.033059][ T8372] tun_chr_write_iter+0x119/0x200 [ 269.038111][ T8372] vfs_write+0x474/0x9a0 [ 269.042384][ T8372] ? file_end_write+0x250/0x250 [ 269.047266][ T8372] ? __fget_files+0x3fc/0x460 [ 269.051975][ T8372] ? __fdget_pos+0x1d8/0x330 [ 269.056593][ T8372] ? ksys_write+0x74/0x260 [ 269.061046][ T8372] ksys_write+0x151/0x260 [ 269.065423][ T8372] ? __ia32_sys_read+0x90/0x90 [ 269.070228][ T8372] ? lockdep_hardirqs_on+0x98/0x150 [ 269.075460][ T8372] do_syscall_64+0x55/0xb0 [ 269.079901][ T8372] ? clear_bhb_loop+0x40/0x90 [ 269.084604][ T8372] ? clear_bhb_loop+0x40/0x90 [ 269.089303][ T8372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.095223][ T8372] RIP: 0033:0x7fd9a1d9ce59 [ 269.099657][ T8372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.119283][ T8372] RSP: 002b:00007fd9a2d36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 269.127729][ T8372] RAX: ffffffffffffffda RBX: 00007fd9a2015fa0 RCX: 00007fd9a1d9ce59 [ 269.135736][ T8372] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 269.143726][ T8372] RBP: 00007fd9a2d36090 R08: 0000000000000000 R09: 0000000000000000 [ 269.151720][ T8372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.159709][ T8372] R13: 00007fd9a2016038 R14: 00007fd9a2015fa0 R15: 00007ffc5aaff7d8 [ 269.167719][ T8372] [ 269.294653][ T8374] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.888'. [ 269.309851][ T8374] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 269.730671][ T8387] netlink: 'syz.3.894': attribute type 9 has an invalid length. [ 269.815282][ T8390] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.895'. [ 269.843924][ T8390] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.895'. [ 269.887903][ T8397] FAULT_INJECTION: forcing a failure. [ 269.887903][ T8397] name failslab, interval 1, probability 0, space 0, times 0 [ 269.922647][ T8397] CPU: 0 PID: 8397 Comm: syz.3.898 Not tainted syzkaller #0 [ 269.930012][ T8397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 269.940121][ T8397] Call Trace: [ 269.943445][ T8397] [ 269.946409][ T8397] dump_stack_lvl+0x18c/0x250 [ 269.951155][ T8397] ? show_regs_print_info+0x20/0x20 [ 269.956411][ T8397] ? load_image+0x420/0x420 [ 269.960966][ T8397] ? __might_sleep+0xe0/0xe0 [ 269.965692][ T8397] ? __lock_acquire+0x7d80/0x7d80 [ 269.970770][ T8397] should_fail_ex+0x394/0x4c0 [ 269.975511][ T8397] should_failslab+0x9/0x20 [ 269.980072][ T8397] slab_pre_alloc_hook+0x59/0x300 [ 269.985160][ T8397] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 269.990929][ T8397] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 269.996696][ T8397] __kmem_cache_alloc_node+0x53/0x250 [ 270.002133][ T8397] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 270.007988][ T8397] __kmalloc+0xa7/0x240 [ 270.012202][ T8397] tomoyo_realpath_from_path+0xe6/0x5c0 [ 270.017796][ T8397] ? tomoyo_domain+0xd6/0x120 [ 270.022551][ T8397] tomoyo_path_number_perm+0x248/0x5e0 [ 270.028078][ T8397] ? tomoyo_path_number_perm+0x217/0x5e0 [ 270.033757][ T8397] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 270.039265][ T8397] ? ksys_write+0x1d2/0x260 [ 270.043864][ T8397] ? __fget_files+0x28/0x460 [ 270.048536][ T8397] security_file_ioctl+0x70/0xa0 [ 270.053520][ T8397] __se_sys_ioctl+0x48/0x170 [ 270.058174][ T8397] do_syscall_64+0x55/0xb0 [ 270.062662][ T8397] ? clear_bhb_loop+0x40/0x90 [ 270.067390][ T8397] ? clear_bhb_loop+0x40/0x90 [ 270.072143][ T8397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.078109][ T8397] RIP: 0033:0x7fd9a1d9ce59 [ 270.082577][ T8397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.102247][ T8397] RSP: 002b:00007fd9a2d36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.110710][ T8397] RAX: ffffffffffffffda RBX: 00007fd9a2015fa0 RCX: 00007fd9a1d9ce59 [ 270.118723][ T8397] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000004 [ 270.126737][ T8397] RBP: 00007fd9a2d36090 R08: 0000000000000000 R09: 0000000000000000 [ 270.134755][ T8397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.142773][ T8397] R13: 00007fd9a2016038 R14: 00007fd9a2015fa0 R15: 00007ffc5aaff7d8 [ 270.150808][ T8397] [ 270.161581][ T8397] ERROR: Out of memory at tomoyo_realpath_from_path. [ 270.906023][ T8409] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.901'. [ 271.197758][ T8415] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.906'. [ 271.232892][ T8415] netlink: 21056 bytes leftover after parsing attributes in process `syz.1.906'. [ 271.322409][ T8421] bridge_slave_1: left allmulticast mode [ 271.328484][ T8421] bridge_slave_1: left promiscuous mode [ 271.342022][ T8421] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.380440][ T8421] bridge_slave_0: left allmulticast mode [ 271.399607][ T8421] bridge_slave_0: left promiscuous mode [ 271.408095][ T8421] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.180941][ T8432] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.911'. [ 272.211494][ T8432] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.911'. [ 272.539757][ T8441] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.914'. [ 275.444727][ T8451] FAULT_INJECTION: forcing a failure. [ 275.444727][ T8451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.472763][ T8451] CPU: 1 PID: 8451 Comm: syz.2.919 Not tainted syzkaller #0 [ 275.480222][ T8451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 275.490339][ T8451] Call Trace: [ 275.493668][ T8451] [ 275.496650][ T8451] dump_stack_lvl+0x18c/0x250 [ 275.501403][ T8451] ? show_regs_print_info+0x20/0x20 [ 275.506672][ T8451] ? load_image+0x420/0x420 [ 275.511256][ T8451] ? __might_fault+0xaa/0x120 [ 275.516017][ T8451] ? __lock_acquire+0x7d80/0x7d80 [ 275.521130][ T8451] should_fail_ex+0x394/0x4c0 [ 275.525897][ T8451] _copy_from_iter+0x1cd/0x1290 [ 275.530838][ T8451] ? rcu_is_watching+0x15/0xb0 [ 275.535688][ T8451] ? copyout_mc+0x70/0x70 [ 275.540092][ T8451] ? __virt_addr_valid+0x10c/0x380 [ 275.545276][ T8451] ? __virt_addr_valid+0x10c/0x380 [ 275.550462][ T8451] ? __virt_addr_valid+0x10c/0x380 [ 275.555657][ T8451] ? __check_object_size+0x4fc/0xa40 [ 275.561029][ T8451] netlink_sendmsg+0x76b/0xbf0 [ 275.565856][ T8451] ? perf_trace_lock+0x303/0x3b0 [ 275.570881][ T8451] ? netlink_getsockopt+0x590/0x590 [ 275.576148][ T8451] ? aa_sock_msg_perm+0x94/0x150 [ 275.581158][ T8451] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 275.586486][ T8451] ? security_socket_sendmsg+0x80/0xa0 [ 275.591985][ T8451] ? netlink_getsockopt+0x590/0x590 [ 275.597226][ T8451] ____sys_sendmsg+0x61b/0x980 [ 275.602042][ T8451] ? __asan_memset+0x22/0x40 [ 275.606671][ T8451] ? __sys_sendmsg_sock+0x30/0x30 [ 275.611737][ T8451] ? __import_iovec+0x5f2/0x850 [ 275.616651][ T8451] ? import_iovec+0x73/0xa0 [ 275.621204][ T8451] ___sys_sendmsg+0x2a6/0x360 [ 275.625929][ T8451] ? __sys_sendmsg+0x2b0/0x2b0 [ 275.630774][ T8451] ? trace_call_bpf+0xc3/0x6c0 [ 275.635627][ T8451] __se_sys_sendmsg+0x1d0/0x2c0 [ 275.640521][ T8451] ? perf_trace_preemptirq_template+0x269/0x330 [ 275.646804][ T8451] ? __x64_sys_sendmsg+0x80/0x80 [ 275.651808][ T8451] ? lockdep_hardirqs_on+0x98/0x150 [ 275.657053][ T8451] do_syscall_64+0x55/0xb0 [ 275.661504][ T8451] ? clear_bhb_loop+0x40/0x90 [ 275.666209][ T8451] ? clear_bhb_loop+0x40/0x90 [ 275.670931][ T8451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.676883][ T8451] RIP: 0033:0x7fb1b0f9ce59 [ 275.681339][ T8451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.701000][ T8451] RSP: 002b:00007fb1b1f26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.709451][ T8451] RAX: ffffffffffffffda RBX: 00007fb1b1215fa0 RCX: 00007fb1b0f9ce59 [ 275.717457][ T8451] RDX: 0000000000040000 RSI: 0000200000000600 RDI: 000000000000000c [ 275.725458][ T8451] RBP: 00007fb1b1f26090 R08: 0000000000000000 R09: 0000000000000000 [ 275.733462][ T8451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.741470][ T8451] R13: 00007fb1b1216038 R14: 00007fb1b1215fa0 R15: 00007ffed4db5558 [ 275.749505][ T8451] [ 276.517563][ T8469] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.925'. [ 276.656086][ T8469] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.925'. [ 277.740881][ T8478] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.928'. [ 278.893479][ T8498] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.935'. [ 278.903394][ T8498] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.935'. [ 281.639007][ T8530] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.948'. [ 281.673102][ T8530] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.948'. [ 284.660727][ T8554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.956'. [ 285.651642][ T8573] FAULT_INJECTION: forcing a failure. [ 285.651642][ T8573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.670174][ T8573] CPU: 1 PID: 8573 Comm: syz.3.964 Not tainted syzkaller #0 [ 285.677613][ T8573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 285.687706][ T8573] Call Trace: [ 285.691017][ T8573] [ 285.693992][ T8573] dump_stack_lvl+0x18c/0x250 [ 285.698736][ T8573] ? show_regs_print_info+0x20/0x20 [ 285.703990][ T8573] ? load_image+0x420/0x420 [ 285.708540][ T8573] ? __lock_acquire+0x7d80/0x7d80 [ 285.713616][ T8573] ? snprintf+0xe9/0x140 [ 285.717908][ T8573] should_fail_ex+0x394/0x4c0 [ 285.722659][ T8573] _copy_to_user+0x2f/0xa0 [ 285.727128][ T8573] simple_read_from_buffer+0xe7/0x150 [ 285.732556][ T8573] proc_fail_nth_read+0x1e8/0x260 [ 285.737656][ T8573] ? proc_fault_inject_write+0x360/0x360 [ 285.743349][ T8573] ? fsnotify_perm+0x271/0x5e0 [ 285.748154][ T8573] ? proc_fault_inject_write+0x360/0x360 [ 285.753839][ T8573] vfs_read+0x298/0x990 [ 285.758054][ T8573] ? kernel_read+0x1e0/0x1e0 [ 285.762691][ T8573] ? __fget_files+0x28/0x460 [ 285.767331][ T8573] ? __fget_files+0x3fc/0x460 [ 285.772063][ T8573] ? __fdget_pos+0x2a3/0x330 [ 285.776705][ T8573] ? ksys_read+0x74/0x260 [ 285.781086][ T8573] ksys_read+0x151/0x260 [ 285.785389][ T8573] ? vfs_write+0x9a0/0x9a0 [ 285.789856][ T8573] ? lockdep_hardirqs_on+0x98/0x150 [ 285.795108][ T8573] do_syscall_64+0x55/0xb0 [ 285.799575][ T8573] ? clear_bhb_loop+0x40/0x90 [ 285.804289][ T8573] ? clear_bhb_loop+0x40/0x90 [ 285.809004][ T8573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.814952][ T8573] RIP: 0033:0x7fd9a1d5d68e [ 285.819413][ T8573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 285.839062][ T8573] RSP: 002b:00007fd9a2d35fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 285.847525][ T8573] RAX: ffffffffffffffda RBX: 00007fd9a2d366c0 RCX: 00007fd9a1d5d68e [ 285.855545][ T8573] RDX: 000000000000000f RSI: 00007fd9a2d360a0 RDI: 0000000000000004 [ 285.863572][ T8573] RBP: 00007fd9a2d36090 R08: 0000000000000000 R09: 0000000000000000 [ 285.871586][ T8573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.879614][ T8573] R13: 00007fd9a2016038 R14: 00007fd9a2015fa0 R15: 00007ffc5aaff7d8 [ 285.887647][ T8573] [ 286.151768][ T8577] FAULT_INJECTION: forcing a failure. [ 286.151768][ T8577] name failslab, interval 1, probability 0, space 0, times 0 [ 286.194453][ T8577] CPU: 1 PID: 8577 Comm: syz.0.966 Not tainted syzkaller #0 [ 286.201840][ T8577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 286.212025][ T8577] Call Trace: [ 286.215369][ T8577] [ 286.218366][ T8577] dump_stack_lvl+0x18c/0x250 [ 286.223129][ T8577] ? show_regs_print_info+0x20/0x20 [ 286.228410][ T8577] ? load_image+0x420/0x420 [ 286.233016][ T8577] ? __kasan_slab_alloc+0x6c/0x80 [ 286.238161][ T8577] should_fail_ex+0x394/0x4c0 [ 286.242940][ T8577] should_failslab+0x9/0x20 [ 286.247514][ T8577] slab_pre_alloc_hook+0x59/0x300 [ 286.252635][ T8577] kmem_cache_alloc+0x5a/0x2c0 [ 286.257470][ T8577] ? _sctp_make_chunk+0x14b/0x430 [ 286.262578][ T8577] _sctp_make_chunk+0x14b/0x430 [ 286.267602][ T8577] sctp_make_init+0x5e7/0xf80 [ 286.272363][ T8577] ? sctp_addto_chunk+0x220/0x220 [ 286.277459][ T8577] ? kernel_text_address+0xa0/0xd0 [ 286.282650][ T8577] ? __kernel_text_address+0xd/0x30 [ 286.287925][ T8577] ? stack_trace_save+0x100/0x100 [ 286.293014][ T8577] ? arch_stack_walk+0x160/0x190 [ 286.298049][ T8577] sctp_sf_do_prm_asoc+0xcf/0x3e0 [ 286.303176][ T8577] sctp_do_sm+0x23b/0x5af0 [ 286.307667][ T8577] ? sctp_cname+0x110/0x110 [ 286.312271][ T8577] ? kasan_set_track+0x4e/0x70 [ 286.317117][ T8577] ? __kasan_kmalloc+0x8f/0xa0 [ 286.321955][ T8577] ? sctp_stream_init_ext+0x57/0x170 [ 286.327308][ T8577] ? sctp_sendmsg_to_asoc+0x12cc/0x17f0 [ 286.332925][ T8577] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 286.338885][ T8577] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 286.343979][ T8577] ? do_syscall_64+0x55/0xb0 [ 286.348630][ T8577] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.354882][ T8577] ? __sk_mem_raise_allocated+0x97b/0x11e0 [ 286.360792][ T8577] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 286.366253][ T8577] sctp_sendmsg_to_asoc+0x1009/0x17f0 [ 286.371715][ T8577] ? sctp_assoc_add_peer+0xcc4/0x1350 [ 286.377202][ T8577] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 286.383078][ T8577] ? __sctp_connect+0xd80/0xd80 [ 286.388003][ T8577] ? __local_bh_enable_ip+0x13a/0x1c0 [ 286.393449][ T8577] ? _local_bh_enable+0xa0/0xa0 [ 286.398366][ T8577] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 286.404230][ T8577] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 286.410086][ T8577] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 286.415685][ T8577] ? security_sctp_bind_connect+0x89/0xb0 [ 286.421457][ T8577] sctp_sendmsg+0x1afa/0x27b0 [ 286.426212][ T8577] ? sctp_getsockopt+0xb60/0xb60 [ 286.431199][ T8577] ? aa_sk_perm+0x83c/0x970 [ 286.435763][ T8577] ? aa_af_perm+0x330/0x330 [ 286.440303][ T8577] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 286.446772][ T8577] ? sock_rps_record_flow+0x19/0x3f0 [ 286.452122][ T8577] ? inet_sendmsg+0x7e/0x2a0 [ 286.456763][ T8577] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 286.462090][ T8577] ? inet_send_prepare+0x250/0x250 [ 286.467261][ T8577] ____sys_sendmsg+0x61b/0x980 [ 286.472092][ T8577] ? __asan_memset+0x22/0x40 [ 286.476731][ T8577] ? __sys_sendmsg_sock+0x30/0x30 [ 286.481794][ T8577] ? __import_iovec+0x5f2/0x850 [ 286.486709][ T8577] ? import_iovec+0x73/0xa0 [ 286.491254][ T8577] ___sys_sendmsg+0x2a6/0x360 [ 286.496003][ T8577] ? __sys_sendmsg+0x2b0/0x2b0 [ 286.500859][ T8577] ? __lock_acquire+0x7d80/0x7d80 [ 286.505983][ T8577] __se_sys_sendmsg+0x1d0/0x2c0 [ 286.510902][ T8577] ? __x64_sys_sendmsg+0x80/0x80 [ 286.515919][ T8577] ? lockdep_hardirqs_on+0x98/0x150 [ 286.521177][ T8577] do_syscall_64+0x55/0xb0 [ 286.525634][ T8577] ? clear_bhb_loop+0x40/0x90 [ 286.530350][ T8577] ? clear_bhb_loop+0x40/0x90 [ 286.535101][ T8577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.541040][ T8577] RIP: 0033:0x7f671439ce59 [ 286.545505][ T8577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.565156][ T8577] RSP: 002b:00007f671521a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.573619][ T8577] RAX: ffffffffffffffda RBX: 00007f6714615fa0 RCX: 00007f671439ce59 [ 286.581642][ T8577] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 286.589653][ T8577] RBP: 00007f671521a090 R08: 0000000000000000 R09: 0000000000000000 [ 286.597669][ T8577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 286.605676][ T8577] R13: 00007f6714616038 R14: 00007f6714615fa0 R15: 00007ffc1ac758c8 [ 286.613720][ T8577] [ 286.677252][ T8584] netlink: 164 bytes leftover after parsing attributes in process `syz.3.965'. [ 287.138497][ T8595] netlink: 'syz.1.971': attribute type 4 has an invalid length. [ 287.158090][ T8595] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.971'. [ 287.755291][ T8617] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.980'. [ 291.839910][ T8665] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.998'. [ 295.976234][ T8704] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1015'. [ 299.434223][ T8743] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1030'. [ 301.716266][ T8776] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1042'. [ 302.968275][ T8792] netlink: 'syz.0.1047': attribute type 27 has an invalid length. [ 303.003206][ T8792] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.1047'. [ 303.637500][ T8804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.646209][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.661689][ T8804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.673032][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.690056][ T8804] batman_adv: batadv0: Interface deactivated: vlan1 [ 303.700378][ T8804] batman_adv: batadv0: Removing interface: vlan1 [ 306.696448][ T8817] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1054'. [ 307.899888][ T8829] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1059'. [ 308.204569][ T8833] netlink: 'syz.2.1062': attribute type 4 has an invalid length. [ 308.248118][ T8833] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1062'. [ 308.384049][ T8840] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1063'. [ 309.096766][ T8847] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1066'. [ 309.525712][ T8865] netlink: 'syz.3.1071': attribute type 21 has an invalid length. [ 309.542659][ T8865] netlink: 'syz.3.1071': attribute type 15 has an invalid length. [ 309.565404][ T8865] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1071'. [ 309.791463][ T8875] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1074'. [ 311.112347][ T8902] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1086'. [ 312.265501][ T8909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.313238][ T8909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.354418][ T8909] batman_adv: batadv0: Interface deactivated: €Â0 [ 312.386863][ T8909] batman_adv: batadv0: Removing interface: €Â0 [ 312.540830][ T8920] FAULT_INJECTION: forcing a failure. [ 312.540830][ T8920] name failslab, interval 1, probability 0, space 0, times 0 [ 312.582799][ T8920] CPU: 0 PID: 8920 Comm: syz.1.1090 Not tainted syzkaller #0 [ 312.590312][ T8920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 312.600466][ T8920] Call Trace: [ 312.603817][ T8920] [ 312.606817][ T8920] dump_stack_lvl+0x18c/0x250 [ 312.611582][ T8920] ? show_regs_print_info+0x20/0x20 [ 312.616867][ T8920] ? load_image+0x420/0x420 [ 312.621475][ T8920] ? __might_sleep+0xe0/0xe0 [ 312.626161][ T8920] ? __lock_acquire+0x7d80/0x7d80 [ 312.631284][ T8920] should_fail_ex+0x394/0x4c0 [ 312.636080][ T8920] should_failslab+0x9/0x20 [ 312.640663][ T8920] slab_pre_alloc_hook+0x59/0x300 [ 312.645783][ T8920] ? tomoyo_encode+0x2ad/0x570 [ 312.650630][ T8920] ? tomoyo_encode+0x2ad/0x570 [ 312.655483][ T8920] __kmem_cache_alloc_node+0x53/0x250 [ 312.660963][ T8920] ? tomoyo_encode+0x2ad/0x570 [ 312.665817][ T8920] __kmalloc+0xa7/0x240 [ 312.670068][ T8920] tomoyo_encode+0x2ad/0x570 [ 312.674755][ T8920] tomoyo_realpath_from_path+0x57c/0x5c0 [ 312.680508][ T8920] ? tomoyo_domain+0xd6/0x120 [ 312.685298][ T8920] tomoyo_path_number_perm+0x248/0x5e0 [ 312.690844][ T8920] ? tomoyo_path_number_perm+0x217/0x5e0 [ 312.696562][ T8920] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 312.702096][ T8920] ? ksys_write+0x1d2/0x260 [ 312.706849][ T8920] ? __fget_files+0x28/0x460 [ 312.711573][ T8920] security_file_ioctl+0x70/0xa0 [ 312.716597][ T8920] __se_sys_ioctl+0x48/0x170 [ 312.721281][ T8920] do_syscall_64+0x55/0xb0 [ 312.725776][ T8920] ? clear_bhb_loop+0x40/0x90 [ 312.730529][ T8920] ? clear_bhb_loop+0x40/0x90 [ 312.735292][ T8920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.741273][ T8920] RIP: 0033:0x7f98abf9ce59 [ 312.745765][ T8920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.765461][ T8920] RSP: 002b:00007f98acec5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.773987][ T8920] RAX: ffffffffffffffda RBX: 00007f98ac215fa0 RCX: 00007f98abf9ce59 [ 312.782038][ T8920] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 312.790066][ T8920] RBP: 00007f98acec5090 R08: 0000000000000000 R09: 0000000000000000 [ 312.798115][ T8920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.806155][ T8920] R13: 00007f98ac216038 R14: 00007f98ac215fa0 R15: 00007ffef4d36cb8 [ 312.814258][ T8920] [ 312.819252][ T8912] netlink: 'syz.3.1089': attribute type 21 has an invalid length. [ 312.833132][ T8912] netlink: 'syz.3.1089': attribute type 6 has an invalid length. [ 312.853402][ T8920] ERROR: Out of memory at tomoyo_realpath_from_path. [ 312.892566][ T8912] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1089'. [ 313.335165][ T8934] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1096'. [ 313.385520][ T8938] netlink: 'syz.3.1098': attribute type 27 has an invalid length. [ 313.394456][ T8938] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1098'. [ 313.503542][ T8942] netlink: 'syz.0.1095': attribute type 4 has an invalid length. [ 313.530510][ T8942] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1095'. [ 315.065721][ T8960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.094968][ T8960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.449715][ T8960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.484522][ T8960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.116988][ T8971] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1107'. [ 316.616778][ T8982] netlink: 'syz.1.1109': attribute type 4 has an invalid length. [ 316.684736][ T8982] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1109'. [ 317.241278][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.247870][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.441264][ T8993] syz.2.1113 uses obsolete (PF_INET,SOCK_PACKET) [ 317.792365][ T9005] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1117'. [ 317.890737][ T9009] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1119'. [ 318.091360][ T9012] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1120'. [ 319.133185][ T9030] netlink: 'syz.0.1126': attribute type 21 has an invalid length. [ 319.152904][ T9030] netlink: 'syz.0.1126': attribute type 6 has an invalid length. [ 319.171827][ T9030] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1126'. [ 320.011856][ T9041] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1131'. [ 320.513963][ T9053] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1135'. [ 320.523420][ T9053] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1135'. [ 320.536522][ T9053] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1135'. [ 320.673677][ T9057] netlink: 'syz.1.1136': attribute type 21 has an invalid length. [ 320.681759][ T9057] netlink: 'syz.1.1136': attribute type 6 has an invalid length. [ 320.697680][ T9057] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1136'. [ 323.316336][ T9109] netlink: 'syz.2.1157': attribute type 21 has an invalid length. [ 323.326859][ T9109] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1157'. [ 323.400842][ T9109] netlink: 'syz.2.1157': attribute type 17 has an invalid length. [ 323.426104][ T9109] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 325.678178][ T9145] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.1171'. [ 326.239795][ T9161] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1176'. [ 326.265818][ T9161] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 326.283398][ T9165] netlink: 'syz.0.1176': attribute type 4 has an invalid length. [ 326.291197][ T9165] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1176'. [ 326.305089][ T9165] .`: renamed from bond0 (while UP) [ 327.460363][ T9181] netlink: 'syz.2.1182': attribute type 3 has an invalid length. [ 327.478932][ T9181] netlink: 'syz.2.1182': attribute type 16 has an invalid length. [ 327.488667][ T9181] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1182'. [ 330.757758][ T9242] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1200'. [ 331.067731][ T9242] netlink: 'syz.3.1200': attribute type 46 has an invalid length. [ 332.178230][ T9264] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1208'. [ 332.664770][ T9273] FAULT_INJECTION: forcing a failure. [ 332.664770][ T9273] name failslab, interval 1, probability 0, space 0, times 0 [ 332.702457][ T9273] CPU: 1 PID: 9273 Comm: syz.3.1212 Not tainted syzkaller #0 [ 332.709909][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 332.720014][ T9273] Call Trace: [ 332.723347][ T9273] [ 332.726332][ T9273] dump_stack_lvl+0x18c/0x250 [ 332.731072][ T9273] ? __sctp_connect+0x5b7/0xd80 [ 332.735989][ T9273] ? sctp_setsockopt+0x6d8/0x11e0 [ 332.741105][ T9273] ? show_regs_print_info+0x20/0x20 [ 332.746360][ T9273] ? load_image+0x420/0x420 [ 332.750918][ T9273] should_fail_ex+0x394/0x4c0 [ 332.755640][ T9273] should_failslab+0x9/0x20 [ 332.760181][ T9273] slab_pre_alloc_hook+0x59/0x300 [ 332.765248][ T9273] ? sctp_add_bind_addr+0x8c/0x360 [ 332.770394][ T9273] __kmem_cache_alloc_node+0x53/0x250 [ 332.775807][ T9273] ? sctp_add_bind_addr+0x8c/0x360 [ 332.780957][ T9273] kmalloc_trace+0x2a/0xe0 [ 332.785412][ T9273] sctp_add_bind_addr+0x8c/0x360 [ 332.790389][ T9273] sctp_copy_local_addr_list+0x31b/0x4e0 [ 332.796066][ T9273] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 332.801818][ T9273] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 332.807920][ T9273] ? sctp_v4_is_any+0x35/0x60 [ 332.812635][ T9273] ? sctp_copy_one_addr+0x8c/0x350 [ 332.817780][ T9273] sctp_bind_addr_copy+0xb3/0x3c0 [ 332.822856][ T9273] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 332.829311][ T9273] sctp_connect_new_asoc+0x2f9/0x6a0 [ 332.834637][ T9273] ? __sctp_connect+0xd80/0xd80 [ 332.839530][ T9273] ? mark_lock+0x94/0x320 [ 332.843890][ T9273] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 332.849733][ T9273] __sctp_connect+0x5b7/0xd80 [ 332.854450][ T9273] ? sctp_send_asconf+0x170/0x170 [ 332.859534][ T9273] ? __local_bh_enable_ip+0x13a/0x1c0 [ 332.864943][ T9273] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 332.870517][ T9273] ? security_sctp_bind_connect+0x89/0xb0 [ 332.876290][ T9273] sctp_setsockopt_connectx+0x104/0x1a0 [ 332.881891][ T9273] sctp_setsockopt+0x6d8/0x11e0 [ 332.886782][ T9273] ? sock_common_recvmsg+0x190/0x190 [ 332.892108][ T9273] do_sock_setsockopt+0x175/0x1a0 [ 332.897186][ T9273] ? __fdget+0x180/0x210 [ 332.901462][ T9273] __x64_sys_setsockopt+0x182/0x200 [ 332.906710][ T9273] do_syscall_64+0x55/0xb0 [ 332.911160][ T9273] ? clear_bhb_loop+0x40/0x90 [ 332.915867][ T9273] ? clear_bhb_loop+0x40/0x90 [ 332.920617][ T9273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.926572][ T9273] RIP: 0033:0x7fd9a1d9ce59 [ 332.931024][ T9273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.950673][ T9273] RSP: 002b:00007fd9a2d36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 332.959118][ T9273] RAX: ffffffffffffffda RBX: 00007fd9a2015fa0 RCX: 00007fd9a1d9ce59 [ 332.967123][ T9273] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000005 [ 332.975133][ T9273] RBP: 00007fd9a2d36090 R08: 0000000000000010 R09: 0000000000000000 [ 332.983133][ T9273] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 332.991137][ T9273] R13: 00007fd9a2016038 R14: 00007fd9a2015fa0 R15: 00007ffc5aaff7d8 [ 332.999162][ T9273] [ 333.207692][ T9276] netlink: 'syz.0.1209': attribute type 9 has an invalid length. [ 333.268682][ T9276] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1209'. [ 333.413365][ T9268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.672332][ T9277] netlink: 'syz.0.1209': attribute type 9 has an invalid length. [ 333.744124][ T9277] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1209'. [ 333.920911][ T9289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.044388][ T9286] netlink: 'syz.2.1214': attribute type 9 has an invalid length. [ 334.052313][ T9286] netlink: 148156 bytes leftover after parsing attributes in process `syz.2.1214'. [ 334.195813][ T9293] netlink: 'syz.2.1214': attribute type 9 has an invalid length. [ 334.232608][ T9293] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1214'. [ 334.449417][ T9300] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1219'. [ 335.275286][ T9317] netlink: 'syz.3.1225': attribute type 10 has an invalid length. [ 335.357782][ T9319] FAULT_INJECTION: forcing a failure. [ 335.357782][ T9319] name failslab, interval 1, probability 0, space 0, times 0 [ 335.382839][ T9319] CPU: 1 PID: 9319 Comm: syz.2.1226 Not tainted syzkaller #0 [ 335.390285][ T9319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 335.400381][ T9319] Call Trace: [ 335.403702][ T9319] [ 335.406696][ T9319] dump_stack_lvl+0x18c/0x250 [ 335.411442][ T9319] ? show_regs_print_info+0x20/0x20 [ 335.416683][ T9319] ? load_image+0x420/0x420 [ 335.421216][ T9319] ? verify_lock_unused+0x140/0x140 [ 335.426449][ T9319] should_fail_ex+0x394/0x4c0 [ 335.431167][ T9319] should_failslab+0x9/0x20 [ 335.435703][ T9319] slab_pre_alloc_hook+0x59/0x300 [ 335.440775][ T9319] kmem_cache_alloc+0x5a/0x2c0 [ 335.445601][ T9319] ? skb_clone+0x1eb/0x370 [ 335.450135][ T9319] skb_clone+0x1eb/0x370 [ 335.454413][ T9319] __netlink_deliver_tap+0x411/0x7f0 [ 335.459738][ T9319] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.464970][ T9319] netlink_deliver_tap+0x19c/0x1b0 [ 335.470109][ T9319] netlink_unicast+0x77b/0x930 [ 335.474906][ T9319] netlink_sendmsg+0x8d0/0xbf0 [ 335.479713][ T9319] ? netlink_getsockopt+0x590/0x590 [ 335.484974][ T9319] ? aa_sock_msg_perm+0x94/0x150 [ 335.489946][ T9319] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 335.495256][ T9319] ? security_socket_sendmsg+0x80/0xa0 [ 335.500746][ T9319] ? netlink_getsockopt+0x590/0x590 [ 335.505981][ T9319] ____sys_sendmsg+0x61b/0x980 [ 335.510783][ T9319] ? __asan_memset+0x22/0x40 [ 335.515409][ T9319] ? __sys_sendmsg_sock+0x30/0x30 [ 335.520457][ T9319] ? __import_iovec+0x5f2/0x850 [ 335.525340][ T9319] ? import_iovec+0x73/0xa0 [ 335.529870][ T9319] ___sys_sendmsg+0x2a6/0x360 [ 335.534588][ T9319] ? get_pid_task+0x20/0x1e0 [ 335.539207][ T9319] ? __sys_sendmsg+0x2b0/0x2b0 [ 335.544019][ T9319] ? __lock_acquire+0x7d80/0x7d80 [ 335.549092][ T9319] __se_sys_sendmsg+0x1d0/0x2c0 [ 335.553984][ T9319] ? __x64_sys_sendmsg+0x80/0x80 [ 335.558957][ T9319] ? lockdep_hardirqs_on+0x98/0x150 [ 335.564190][ T9319] do_syscall_64+0x55/0xb0 [ 335.568625][ T9319] ? clear_bhb_loop+0x40/0x90 [ 335.573327][ T9319] ? clear_bhb_loop+0x40/0x90 [ 335.578027][ T9319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.583955][ T9319] RIP: 0033:0x7fb1b0f9ce59 [ 335.588396][ T9319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.608043][ T9319] RSP: 002b:00007fb1b1f26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.616481][ T9319] RAX: ffffffffffffffda RBX: 00007fb1b1215fa0 RCX: 00007fb1b0f9ce59 [ 335.624501][ T9319] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000d [ 335.632501][ T9319] RBP: 00007fb1b1f26090 R08: 0000000000000000 R09: 0000000000000000 [ 335.640501][ T9319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.648492][ T9319] R13: 00007fb1b1216038 R14: 00007fb1b1215fa0 R15: 00007ffed4db5558 [ 335.656501][ T9319] [ 335.688792][ T9317] team0: Device nlmon0 is of different type [ 335.780123][ T9319] netlink: 'syz.2.1226': attribute type 10 has an invalid length. [ 335.795521][ T9319] team0: Device hsr_slave_0 failed to register rx_handler [ 335.871118][ T9323] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1228'. [ 336.070748][ T9327] netlink: 'syz.2.1229': attribute type 10 has an invalid length. [ 336.196754][ T9327] veth0_to_hsr: entered promiscuous mode [ 336.225528][ T9327] veth0_to_hsr: entered allmulticast mode [ 336.242680][ T9327] team0: Port device veth0_to_hsr added [ 336.586145][ T9341] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1233'. [ 336.792867][ T9345] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1234'. [ 337.103638][ T9354] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1238'. [ 338.048569][ T9373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1245'. [ 339.333903][ T9390] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1253'. [ 339.884819][ T9398] can: request_module (can-proto-0) failed. [ 341.379385][ T9424] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1267'. [ 341.414902][ T9427] FAULT_INJECTION: forcing a failure. [ 341.414902][ T9427] name failslab, interval 1, probability 0, space 0, times 0 [ 341.429254][ T9427] CPU: 0 PID: 9427 Comm: syz.3.1268 Not tainted syzkaller #0 [ 341.436721][ T9427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 341.446834][ T9427] Call Trace: [ 341.450170][ T9427] [ 341.453154][ T9427] dump_stack_lvl+0x18c/0x250 [ 341.457919][ T9427] ? show_regs_print_info+0x20/0x20 [ 341.463198][ T9427] ? load_image+0x420/0x420 [ 341.467790][ T9427] ? __might_sleep+0xe0/0xe0 [ 341.472456][ T9427] ? __lock_acquire+0x7d80/0x7d80 [ 341.477564][ T9427] should_fail_ex+0x394/0x4c0 [ 341.482347][ T9427] should_failslab+0x9/0x20 [ 341.486943][ T9427] slab_pre_alloc_hook+0x59/0x300 [ 341.492029][ T9427] ? tomoyo_encode+0x2ad/0x570 [ 341.496835][ T9427] ? tomoyo_encode+0x2ad/0x570 [ 341.501653][ T9427] __kmem_cache_alloc_node+0x53/0x250 [ 341.507093][ T9427] ? tomoyo_encode+0x2ad/0x570 [ 341.511901][ T9427] __kmalloc+0xa7/0x240 [ 341.516124][ T9427] tomoyo_encode+0x2ad/0x570 [ 341.520770][ T9427] tomoyo_realpath_from_path+0x57c/0x5c0 [ 341.526454][ T9427] ? tomoyo_domain+0xd6/0x120 [ 341.531184][ T9427] tomoyo_path_number_perm+0x248/0x5e0 [ 341.536682][ T9427] ? tomoyo_path_number_perm+0x217/0x5e0 [ 341.542356][ T9427] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 341.547864][ T9427] ? ksys_write+0x1d2/0x260 [ 341.552485][ T9427] ? __fget_files+0x28/0x460 [ 341.557144][ T9427] security_file_ioctl+0x70/0xa0 [ 341.562139][ T9427] __se_sys_ioctl+0x48/0x170 [ 341.566777][ T9427] do_syscall_64+0x55/0xb0 [ 341.571225][ T9427] ? clear_bhb_loop+0x40/0x90 [ 341.575941][ T9427] ? clear_bhb_loop+0x40/0x90 [ 341.580674][ T9427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.586629][ T9427] RIP: 0033:0x7fd9a1d9ce59 [ 341.591134][ T9427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.610796][ T9427] RSP: 002b:00007fd9a2d36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.619265][ T9427] RAX: ffffffffffffffda RBX: 00007fd9a2015fa0 RCX: 00007fd9a1d9ce59 [ 341.627279][ T9427] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 000000000000000d [ 341.635297][ T9427] RBP: 00007fd9a2d36090 R08: 0000000000000000 R09: 0000000000000000 [ 341.643310][ T9427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.651323][ T9427] R13: 00007fd9a2016038 R14: 00007fd9a2015fa0 R15: 00007ffc5aaff7d8 [ 341.659374][ T9427] [ 341.670020][ T9427] ERROR: Out of memory at tomoyo_realpath_from_path. [ 343.068674][ T9456] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1278'. [ 343.670922][ T9466] netlink: 'syz.0.1282': attribute type 19 has an invalid length. [ 343.696458][ T9466] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1282'. [ 345.257578][ T9475] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1287'. [ 346.547783][ T9503] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1296'. [ 348.312165][ T9530] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1305'. [ 349.480484][ T9548] netlink: 'syz.3.1313': attribute type 17 has an invalid length. [ 349.489004][ T9548] netlink: 'syz.3.1313': attribute type 16 has an invalid length. [ 349.497711][ T9548] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1313'. [ 349.571965][ T9548] tun0: tun_chr_ioctl cmd 1074025673 [ 349.928158][ T9555] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1315'. [ 353.965231][ T9581] netlink: 'syz.0.1326': attribute type 19 has an invalid length. [ 353.976252][ T9581] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1326'. [ 353.985985][ T9581] FAULT_INJECTION: forcing a failure. [ 353.985985][ T9581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.003879][ T9581] CPU: 1 PID: 9581 Comm: syz.0.1326 Not tainted syzkaller #0 [ 354.011327][ T9581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 354.021428][ T9581] Call Trace: [ 354.024747][ T9581] [ 354.027732][ T9581] dump_stack_lvl+0x18c/0x250 [ 354.032467][ T9581] ? show_regs_print_info+0x20/0x20 [ 354.037710][ T9581] ? load_image+0x420/0x420 [ 354.042247][ T9581] ? __might_fault+0xaa/0x120 [ 354.046950][ T9581] ? __lock_acquire+0x7d80/0x7d80 [ 354.052010][ T9581] should_fail_ex+0x394/0x4c0 [ 354.056744][ T9581] _copy_from_user+0x2f/0xe0 [ 354.061394][ T9581] kstrtouint_from_user+0xde/0x170 [ 354.066556][ T9581] ? kstrtol_from_user+0x190/0x190 [ 354.071755][ T9581] proc_fail_nth_write+0x8f/0x250 [ 354.076827][ T9581] ? proc_fail_nth_read+0x260/0x260 [ 354.082083][ T9581] ? proc_fail_nth_read+0x260/0x260 [ 354.087320][ T9581] vfs_write+0x299/0x9a0 [ 354.091608][ T9581] ? file_end_write+0x250/0x250 [ 354.096504][ T9581] ? __fget_files+0x28/0x460 [ 354.101138][ T9581] ? __fget_files+0x3fc/0x460 [ 354.105871][ T9581] ? __fdget_pos+0x2a3/0x330 [ 354.110515][ T9581] ? ksys_write+0x74/0x260 [ 354.114994][ T9581] ksys_write+0x151/0x260 [ 354.119368][ T9581] ? __ia32_sys_read+0x90/0x90 [ 354.124180][ T9581] ? lockdep_hardirqs_on+0x98/0x150 [ 354.129431][ T9581] do_syscall_64+0x55/0xb0 [ 354.133875][ T9581] ? clear_bhb_loop+0x40/0x90 [ 354.138577][ T9581] ? clear_bhb_loop+0x40/0x90 [ 354.143288][ T9581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.149225][ T9581] RIP: 0033:0x7f671435d68e [ 354.153673][ T9581] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 354.173326][ T9581] RSP: 002b:00007f6715219fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 354.181773][ T9581] RAX: ffffffffffffffda RBX: 00007f671521a6c0 RCX: 00007f671435d68e [ 354.189779][ T9581] RDX: 0000000000000001 RSI: 00007f671521a0a0 RDI: 0000000000000005 [ 354.197777][ T9581] RBP: 00007f671521a090 R08: 0000000000000000 R09: 0000000000000000 [ 354.205804][ T9581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 354.213805][ T9581] R13: 00007f6714616038 R14: 00007f6714615fa0 R15: 00007ffc1ac758c8 [ 354.221833][ T9581] [ 354.574746][ T9596] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1331'. [ 358.160845][ T9617] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1341'. [ 361.473264][ T9647] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1353'. [ 361.688554][ T9651] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1357'. [ 361.819149][ T9657] FAULT_INJECTION: forcing a failure. [ 361.819149][ T9657] name failslab, interval 1, probability 0, space 0, times 0 [ 361.838707][ T9657] CPU: 1 PID: 9657 Comm: syz.0.1358 Not tainted syzkaller #0 [ 361.846155][ T9657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 361.856254][ T9657] Call Trace: [ 361.859587][ T9657] [ 361.862564][ T9657] dump_stack_lvl+0x18c/0x250 [ 361.867305][ T9657] ? show_regs_print_info+0x20/0x20 [ 361.872561][ T9657] ? load_image+0x420/0x420 [ 361.877138][ T9657] ? __might_sleep+0xe0/0xe0 [ 361.881783][ T9657] ? __lock_acquire+0x7d80/0x7d80 [ 361.886876][ T9657] should_fail_ex+0x394/0x4c0 [ 361.891622][ T9657] should_failslab+0x9/0x20 [ 361.896280][ T9657] slab_pre_alloc_hook+0x59/0x300 [ 361.901373][ T9657] ? __get_vm_area_node+0x125/0x370 [ 361.906639][ T9657] __kmem_cache_alloc_node+0x53/0x250 [ 361.912078][ T9657] ? __get_vm_area_node+0x125/0x370 [ 361.917339][ T9657] kmalloc_node_trace+0x26/0xe0 [ 361.922251][ T9657] __get_vm_area_node+0x125/0x370 [ 361.927365][ T9657] __vmalloc_node_range+0x36f/0x1320 [ 361.932718][ T9657] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 361.938341][ T9657] ? irqentry_enter+0x37/0x50 [ 361.943088][ T9657] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 361.949119][ T9657] ? free_vm_area+0x50/0x50 [ 361.953676][ T9657] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 361.960159][ T9657] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 361.965737][ T9657] __vmalloc+0x7a/0x90 [ 361.969860][ T9657] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 361.975436][ T9657] bpf_prog_alloc_no_stats+0x46/0x430 [ 361.980848][ T9657] bpf_prog_alloc+0x3d/0x1a0 [ 361.985488][ T9657] bpf_prog_load+0x6b2/0x1610 [ 361.990223][ T9657] ? map_freeze+0x420/0x420 [ 361.994780][ T9657] ? __might_fault+0xaa/0x120 [ 361.999510][ T9657] ? __lock_acquire+0x7d80/0x7d80 [ 362.004583][ T9657] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 362.010343][ T9657] ? __might_fault+0xaa/0x120 [ 362.015058][ T9657] ? __might_fault+0xc6/0x120 [ 362.019776][ T9657] ? __might_fault+0xaa/0x120 [ 362.024493][ T9657] ? bpf_lsm_bpf+0x9/0x10 [ 362.028908][ T9657] ? security_bpf+0x7e/0xa0 [ 362.033454][ T9657] __sys_bpf+0x5ba/0x890 [ 362.037756][ T9657] ? bpf_link_show_fdinfo+0x390/0x390 [ 362.043173][ T9657] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 362.049379][ T9657] __x64_sys_bpf+0x7c/0x90 [ 362.053832][ T9657] do_syscall_64+0x55/0xb0 [ 362.058283][ T9657] ? clear_bhb_loop+0x40/0x90 [ 362.062986][ T9657] ? clear_bhb_loop+0x40/0x90 [ 362.067698][ T9657] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.073631][ T9657] RIP: 0033:0x7f671439ce59 [ 362.078082][ T9657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.097722][ T9657] RSP: 002b:00007f671521a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 362.106173][ T9657] RAX: ffffffffffffffda RBX: 00007f6714615fa0 RCX: 00007f671439ce59 [ 362.114216][ T9657] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000005 [ 362.122223][ T9657] RBP: 00007f671521a090 R08: 0000000000000000 R09: 0000000000000000 [ 362.130220][ T9657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.138222][ T9657] R13: 00007f6714616038 R14: 00007f6714615fa0 R15: 00007ffc1ac758c8 [ 362.146270][ T9657] [ 362.178486][ T9657] syz.0.1358: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 362.197382][ T9657] CPU: 1 PID: 9657 Comm: syz.0.1358 Not tainted syzkaller #0 [ 362.204824][ T9657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 362.214937][ T9657] Call Trace: [ 362.218262][ T9657] [ 362.221238][ T9657] dump_stack_lvl+0x18c/0x250 [ 362.225972][ T9657] ? show_regs_print_info+0x20/0x20 [ 362.231239][ T9657] ? load_image+0x420/0x420 [ 362.235805][ T9657] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 362.242278][ T9657] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 362.248842][ T9657] warn_alloc+0x246/0x340 [ 362.253236][ T9657] ? __get_vm_area_node+0x125/0x370 [ 362.258499][ T9657] ? zone_watermark_ok_safe+0x230/0x230 [ 362.264123][ T9657] ? rcu_is_watching+0x15/0xb0 [ 362.268950][ T9657] ? __get_vm_area_node+0x356/0x370 [ 362.274213][ T9657] __vmalloc_node_range+0x394/0x1320 [ 362.279573][ T9657] ? irqentry_enter+0x37/0x50 [ 362.284309][ T9657] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 362.290346][ T9657] ? free_vm_area+0x50/0x50 [ 362.294900][ T9657] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 362.301102][ T9657] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 362.306684][ T9657] __vmalloc+0x7a/0x90 [ 362.310789][ T9657] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 362.316370][ T9657] bpf_prog_alloc_no_stats+0x46/0x430 [ 362.321795][ T9657] bpf_prog_alloc+0x3d/0x1a0 [ 362.326425][ T9657] bpf_prog_load+0x6b2/0x1610 [ 362.331147][ T9657] ? map_freeze+0x420/0x420 [ 362.335689][ T9657] ? __might_fault+0xaa/0x120 [ 362.340404][ T9657] ? __lock_acquire+0x7d80/0x7d80 [ 362.345473][ T9657] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 362.351229][ T9657] ? __might_fault+0xaa/0x120 [ 362.355937][ T9657] ? __might_fault+0xc6/0x120 [ 362.360646][ T9657] ? __might_fault+0xaa/0x120 [ 362.365352][ T9657] ? bpf_lsm_bpf+0x9/0x10 [ 362.369714][ T9657] ? security_bpf+0x7e/0xa0 [ 362.374258][ T9657] __sys_bpf+0x5ba/0x890 [ 362.378549][ T9657] ? bpf_link_show_fdinfo+0x390/0x390 [ 362.383974][ T9657] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 362.390171][ T9657] __x64_sys_bpf+0x7c/0x90 [ 362.394623][ T9657] do_syscall_64+0x55/0xb0 [ 362.399081][ T9657] ? clear_bhb_loop+0x40/0x90 [ 362.403784][ T9657] ? clear_bhb_loop+0x40/0x90 [ 362.408489][ T9657] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.414426][ T9657] RIP: 0033:0x7f671439ce59 [ 362.418867][ T9657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.438513][ T9657] RSP: 002b:00007f671521a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 362.446968][ T9657] RAX: ffffffffffffffda RBX: 00007f6714615fa0 RCX: 00007f671439ce59 [ 362.454973][ T9657] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000005 [ 362.462989][ T9657] RBP: 00007f671521a090 R08: 0000000000000000 R09: 0000000000000000 [ 362.471015][ T9657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.479012][ T9657] R13: 00007f6714616038 R14: 00007f6714615fa0 R15: 00007ffc1ac758c8 [ 362.487033][ T9657] [ 362.503131][ T9657] Mem-Info: [ 362.506802][ T9657] active_anon:6292 inactive_anon:0 isolated_anon:0 [ 362.506802][ T9657] active_file:17789 inactive_file:40055 isolated_file:0 [ 362.506802][ T9657] unevictable:768 dirty:133 writeback:0 [ 362.506802][ T9657] slab_reclaimable:10086 slab_unreclaimable:94980 [ 362.506802][ T9657] mapped:24670 shmem:1361 pagetables:562 [ 362.506802][ T9657] sec_pagetables:0 bounce:0 [ 362.506802][ T9657] kernel_misc_reclaimable:0 [ 362.506802][ T9657] free:1339022 free_pcp:5862 free_cma:0 [ 362.558110][ T9657] Node 0 active_anon:25268kB inactive_anon:0kB active_file:71156kB inactive_file:160016kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98680kB dirty:528kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10800kB pagetables:2248kB sec_pagetables:0kB all_unreclaimable? no [ 362.594840][ T9657] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 362.645726][ T9657] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.674606][ T9657] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 362.680480][ T9657] Node 0 DMA32 free:1441092kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:25228kB inactive_anon:0kB active_file:71156kB inactive_file:159196kB unevictable:1536kB writepending:528kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:7312kB local_pcp:5816kB free_cma:0kB [ 362.713686][ T9657] lowmem_reserve[]: 0 0 0 0 0 [ 362.718500][ T9657] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 362.749922][ T9657] lowmem_reserve[]: 0 0 0 0 0 [ 362.767796][ T9657] Node 1 Normal free:3899128kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16512kB local_pcp:8256kB free_cma:0kB [ 362.802765][ T9657] lowmem_reserve[]: 0 0 0 0 0 [ 362.807577][ T9657] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 362.823975][ T9657] Node 0 DMA32: 503*4kB (UME) 659*8kB (UME) 913*16kB (UME) 1808*32kB (UME) 497*64kB (UME) 179*128kB (UME) 75*256kB (UME) 19*512kB (UM) 12*1024kB (UM) 8*2048kB (UME) 305*4096kB (M) = 1441348kB [ 362.843681][ T9657] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 362.858170][ T9657] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 31*16kB (UME) 134*32kB (UME) 34*64kB (UME) 9*128kB (UME) 2*256kB (ME) 0*512kB 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3899128kB [ 362.877257][ T9657] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.887392][ T9657] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.902120][ T9657] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.912069][ T9657] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.934167][ T9657] 59205 total pagecache pages [ 362.938922][ T9657] 0 pages in swap cache [ 362.943606][ T9657] Free swap = 124996kB [ 362.947808][ T9657] Total swap = 124996kB [ 362.955324][ T9657] 2097051 pages RAM [ 362.959363][ T9657] 0 pages HighMem/MovableOnly [ 362.966338][ T9657] 416931 pages reserved [ 362.970556][ T9657] 0 pages cma reserved [ 363.251803][ T9680] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1366'. [ 363.399623][ T9684] nla_validate_range_unsigned: 25 callbacks suppressed [ 363.399642][ T9684] netlink: 'syz.0.1368': attribute type 11 has an invalid length. [ 363.418840][ T9684] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.1368'. [ 365.771998][ T9705] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1376'. [ 366.386665][ T9727] FAULT_INJECTION: forcing a failure. [ 366.386665][ T9727] name failslab, interval 1, probability 0, space 0, times 0 [ 366.413596][ T9727] CPU: 1 PID: 9727 Comm: syz.1.1385 Not tainted syzkaller #0 [ 366.421059][ T9727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 366.431187][ T9727] Call Trace: [ 366.434515][ T9727] [ 366.437497][ T9727] dump_stack_lvl+0x18c/0x250 [ 366.442242][ T9727] ? show_regs_print_info+0x20/0x20 [ 366.447496][ T9727] ? load_image+0x420/0x420 [ 366.452081][ T9727] ? __might_sleep+0xe0/0xe0 [ 366.456742][ T9727] ? __lock_acquire+0x7d80/0x7d80 [ 366.461841][ T9727] should_fail_ex+0x394/0x4c0 [ 366.466584][ T9727] should_failslab+0x9/0x20 [ 366.471136][ T9727] slab_pre_alloc_hook+0x59/0x300 [ 366.476213][ T9727] ? __asan_memset+0x22/0x40 [ 366.480873][ T9727] ? __uprobe_register+0x19e/0x760 [ 366.486061][ T9727] __kmem_cache_alloc_node+0x53/0x250 [ 366.491484][ T9727] ? __uprobe_register+0x19e/0x760 [ 366.496626][ T9727] kmalloc_trace+0x2a/0xe0 [ 366.501079][ T9727] __uprobe_register+0x19e/0x760 [ 366.506058][ T9727] probe_event_enable+0x3e3/0xb20 [ 366.511114][ T9727] ? fetch_store_string+0x280/0x280 [ 366.516375][ T9727] perf_trace_event_init+0x4d4/0x9b0 [ 366.521706][ T9727] perf_uprobe_init+0x12e/0x190 [ 366.526589][ T9727] perf_uprobe_event_init+0xe6/0x180 [ 366.531924][ T9727] perf_try_init_event+0x12b/0x3c0 [ 366.537069][ T9727] ? perf_event_alloc+0xb23/0x2150 [ 366.542207][ T9727] perf_event_alloc+0xed4/0x2150 [ 366.547266][ T9727] ? find_lively_task_by_vpid+0x19/0x290 [ 366.552941][ T9727] ? find_lively_task_by_vpid+0x19/0x290 [ 366.558617][ T9727] __se_sys_perf_event_open+0x740/0x1c60 [ 366.564292][ T9727] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 366.569966][ T9727] ? lock_chain_count+0x20/0x20 [ 366.574875][ T9727] ? lockdep_hardirqs_on+0x98/0x150 [ 366.580111][ T9727] ? __x64_sys_perf_event_open+0x20/0xc0 [ 366.585780][ T9727] do_syscall_64+0x55/0xb0 [ 366.590224][ T9727] ? clear_bhb_loop+0x40/0x90 [ 366.594922][ T9727] ? clear_bhb_loop+0x40/0x90 [ 366.599625][ T9727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.605552][ T9727] RIP: 0033:0x7f98abf9ce59 [ 366.609994][ T9727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.629625][ T9727] RSP: 002b:00007f98acec5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 366.638063][ T9727] RAX: ffffffffffffffda RBX: 00007f98ac215fa0 RCX: 00007f98abf9ce59 [ 366.646093][ T9727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 366.654085][ T9727] RBP: 00007f98acec5090 R08: 0000000000000000 R09: 0000000000000000 [ 366.662253][ T9727] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 366.670342][ T9727] R13: 00007f98ac216038 R14: 00007f98ac215fa0 R15: 00007ffef4d36cb8 [ 366.678361][ T9727] [ 366.927712][ T9737] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1389'. [ 367.808563][ T9754] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1395'. [ 367.822613][ T9754] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.1395'. [ 368.274334][ T9762] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1399'. [ 369.655924][ T9790] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.1410'. [ 378.697901][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.712516][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.118151][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.126830][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 474.582403][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 474.589265][ C1] rcu: 1-....: (10500 ticks this GP) idle=026c/1/0x4000000000000000 softirq=30253/30253 fqs=5193 [ 474.600857][ C1] rcu: hardirqs softirqs csw/system [ 474.607287][ C1] rcu: number: 1557086 0 0 [ 474.613715][ C1] rcu: cputime: 20128 32351 59 ==> 52510(ms) [ 474.621565][ C1] rcu: (t=10503 jiffies g=36193 q=2335 ncpus=2) [ 474.627920][ C1] CPU: 1 PID: 9787 Comm: syz.0.1410 Not tainted syzkaller #0 [ 474.635313][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 474.645392][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 474.651495][ C1] Code: 00 0f 0b 0f 1f 80 00 00 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d cc 02 04 0d 48 89 de 5b e9 b3 a3 57 00 cc cc cc 0f 1e fa 48 8b 04 24 65 48 8b 0d e0 d2 7c 7e 65 8b 15 e1 d2 7c [ 474.671120][ C1] RSP: 0018:ffffc900001f0550 EFLAGS: 00000292 [ 474.677232][ C1] RAX: 0000000000000001 RBX: ffffc900001f06e0 RCX: ffff88802d3f8000 [ 474.685232][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8390a5 RDI: ffffc900001f0628 [ 474.693229][ C1] RBP: ffffc900001f06b0 R08: ffffc900001f06f0 R09: 0000000000000014 [ 474.701214][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffffff8a8390a5 [ 474.709202][ C1] R13: ffffc900001f0628 R14: ffffffff81758be0 R15: dffffc0000000000 [ 474.717194][ C1] FS: 00007f671521a6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 474.726140][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.732745][ C1] CR2: 0000000100000000 CR3: 000000002bdf9000 CR4: 00000000003506e0 [ 474.740741][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 474.748730][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 474.756752][ C1] Call Trace: [ 474.760053][ C1] [ 474.762937][ C1] unwind_next_frame+0x27/0x2990 [ 474.767905][ C1] ? do_syscall_64+0x55/0xb0 [ 474.772536][ C1] ? __kernel_text_address+0xd/0x30 [ 474.777769][ C1] ? do_syscall_64+0x55/0xb0 [ 474.782385][ C1] ? stack_trace_save+0x100/0x100 [ 474.787435][ C1] arch_stack_walk+0x144/0x190 [ 474.792227][ C1] ? do_syscall_64+0x55/0xb0 [ 474.796848][ C1] stack_trace_save+0xaa/0x100 [ 474.801626][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 474.806766][ C1] ? mark_lock+0x94/0x320 [ 474.811129][ C1] kasan_set_track+0x4e/0x70 [ 474.815739][ C1] ? kasan_set_track+0x4e/0x70 [ 474.820521][ C1] ? kasan_save_free_info+0x28/0x40 [ 474.825741][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 474.831052][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 474.836716][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 474.841761][ C1] ? skb_release_data+0x609/0x7f0 [ 474.846807][ C1] ? kfree_skb_reason+0x10e/0x170 [ 474.851869][ C1] ? inet_frag_destroy+0x179/0x290 [ 474.857010][ C1] ? call_timer_fn+0x189/0x540 [ 474.861792][ C1] ? __run_timers+0x570/0x810 [ 474.866503][ C1] ? run_timer_softirq+0x67/0xf0 [ 474.871480][ C1] ? handle_softirqs+0x27d/0x820 [ 474.876436][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 474.881325][ C1] ? irq_exit_rcu+0x9/0x20 [ 474.885778][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 474.891616][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 474.897796][ C1] ? _raw_spin_unlock_irq+0x29/0x50 [ 474.903025][ C1] ? _perf_event_enable+0x11f/0x1a0 [ 474.908349][ C1] ? perf_ioctl+0x8ff/0x24b0 [ 474.912966][ C1] ? __se_sys_ioctl+0xfd/0x170 [ 474.917772][ C1] ? do_syscall_64+0x55/0xb0 [ 474.922431][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 474.927487][ C1] kasan_save_free_info+0x28/0x40 [ 474.932545][ C1] ____kasan_slab_free+0x126/0x1f0 [ 474.937694][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 474.943172][ C1] ? skb_release_data+0x609/0x7f0 [ 474.948214][ C1] __kmem_cache_free+0xba/0x1f0 [ 474.953109][ C1] skb_release_data+0x609/0x7f0 [ 474.958003][ C1] kfree_skb_reason+0x10e/0x170 [ 474.962883][ C1] inet_frag_destroy+0x179/0x290 [ 474.967855][ C1] call_timer_fn+0x189/0x540 [ 474.972468][ C1] ? ip4_frag_free+0x50/0x50 [ 474.977087][ C1] ? call_timer_fn+0xd2/0x540 [ 474.981785][ C1] ? __run_timers+0x810/0x810 [ 474.986487][ C1] ? ip4_frag_free+0x50/0x50 [ 474.991107][ C1] __run_timers+0x570/0x810 [ 474.995640][ C1] ? detach_timer+0x2b0/0x2b0 [ 475.000347][ C1] run_timer_softirq+0x67/0xf0 [ 475.005134][ C1] handle_softirqs+0x27d/0x820 [ 475.009922][ C1] ? read_tsc+0x9/0x20 [ 475.014019][ C1] ? ktime_get+0x24b/0x280 [ 475.018469][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 475.023270][ C1] ? do_softirq+0x1a0/0x1a0 [ 475.027810][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 475.033041][ C1] __irq_exit_rcu+0xd3/0x190 [ 475.037663][ C1] ? irq_exit_rcu+0x20/0x20 [ 475.042192][ C1] irq_exit_rcu+0x9/0x20 [ 475.046466][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 475.052135][ C1] [ 475.055087][ C1] [ 475.058036][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 475.064045][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 475.069886][ C1] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 fa ff da f6 48 89 df e8 a2 d3 db f6 e8 6d ce ff f6 fb bf 01 00 00 00 c2 e3 ce f6 65 8b 05 93 32 76 75 85 c0 74 02 5b c3 e8 60 17 73 [ 475.089533][ C1] RSP: 0018:ffffc900032e7bd8 EFLAGS: 00000286 [ 475.095625][ C1] RAX: 91e08eab9ae8cd00 RBX: ffff88805d642c00 RCX: 91e08eab9ae8cd00 [ 475.103618][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: 0000000000000001 [ 475.111617][ C1] RBP: 00000000ffffffff R08: ffffffff911bc607 R09: 1ffffffff22378c0 [ 475.119606][ C1] R10: dffffc0000000000 R11: fffffbfff22378c1 R12: ffff88802820c3b0 [ 475.127633][ C1] R13: dffffc0000000000 R14: ffff88805d642c00 R15: 1ffff11005041876 [ 475.135664][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.140905][ C1] _perf_event_enable+0x11f/0x1a0 [ 475.146112][ C1] ? perf_event_enable+0x1e0/0x1e0 [ 475.151243][ C1] perf_ioctl+0x8ff/0x24b0 [ 475.155693][ C1] ? perf_poll+0x1b0/0x1b0 [ 475.160154][ C1] ? __fget_files+0x28/0x460 [ 475.164780][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 475.169741][ C1] ? security_file_ioctl+0x80/0xa0 [ 475.174878][ C1] ? perf_poll+0x1b0/0x1b0 [ 475.179341][ C1] __se_sys_ioctl+0xfd/0x170 [ 475.183967][ C1] do_syscall_64+0x55/0xb0 [ 475.188408][ C1] ? clear_bhb_loop+0x40/0x90 [ 475.193101][ C1] ? clear_bhb_loop+0x40/0x90 [ 475.197800][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.203734][ C1] RIP: 0033:0x7f671439ce59 [ 475.208195][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.227824][ C1] RSP: 002b:00007f671521a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.236265][ C1] RAX: ffffffffffffffda RBX: 00007f6714615fa0 RCX: 00007f671439ce59 [ 475.244271][ C1] RDX: 0000000000000009 RSI: 0000000000002400 RDI: 0000000000000003 [ 475.252272][ C1] RBP: 00007f6714432e6f R08: 0000000000000000 R09: 0000000000000000 [ 475.260269][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.268279][ C1] R13: 00007f6714616038 R14: 00007f6714615fa0 R15: 00007ffc1ac758c8 [ 475.276289][ C1]