last executing test programs: 3.218148187s ago: executing program 1 (id=4229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r0, &(0x7f00000004c0)}, 0x20) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) 3.09856851s ago: executing program 0 (id=4230): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x20008080) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r4, 0x0, 0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x44000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r3, 0x0, 0x20008080) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2, 0x2, 0x73) (async) setsockopt$sock_attach_bpf(r4, 0x0, 0x17, 0x0, 0x0) (async) 3.001915593s ago: executing program 1 (id=4231): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004640)={r0, 0xe0, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000004380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000004400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f0000004440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000004480), &(0x7f00000044c0), 0x8, 0x69, 0x8, 0x8, &(0x7f0000004500)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x55) bpf$PROG_LOAD(0x5, &(0x7f0000004740)={0x12, 0xe, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4475}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1c}, @generic={0x81, 0x2, 0x6, 0xd, 0x3}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3731}, @generic={0x6, 0xe, 0x5, 0x9e80, 0x7}]}, &(0x7f0000000a80)='GPL\x00', 0xfffffffe, 0x1000, &(0x7f0000003380)=""/4096, 0x40f00, 0xc, '\x00', r4, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000004680)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000046c0)={0x2, 0x5, 0x56b, 0x7}, 0x10, 0x0, r0, 0x0, &(0x7f0000004700)=[0xffffffffffffffff, r1, 0xffffffffffffffff], 0x0, 0x10, 0x73}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r7, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_netprio_ifpriomap(r9, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='veth0_virt_wifi\t\v'], 0x12) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r11}, &(0x7f0000000c40), &(0x7f0000000c80)=r0}, 0x20) sendmsg(0xffffffffffffffff, &(0x7f0000003340)={&(0x7f0000000240)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0x80, &(0x7f00000032c0)=[{0x0}, {&(0x7f0000000680)="2037c13623421ee56b8a16f3b5be010045e6759e3be80430214b76ed9521819b15cf657934ac6a9385d53f0f31a9e9137a3c3fa8df42ffe9af67bbaf786c9acea51ac10b871c3ba5cc4fd90b78133ea7f878aaf1b5a2a8a0e046", 0x5a}, {&(0x7f0000000700)="aacd36dad5a83a1c25ba85f62696b8198ecf8c1e32f28af3cd151f827f11af1ec0b2ff6b70c2660b0772be3463b6d3b9a34c4bc22413b2836dcdee6c0b5cb0d78e2cf640d254e59fe7d0d524356d3dd19131b009c6ce44df3aa72ab34977cbcd30d27debd25093423383bbb17b571cd0aa803eadc90e84c0a132f59c09c37439ca6be84fb87468d28c93a8d260fe02488185c6922d65a964256ce7f7537555e4831c0a6072627ea6d56a3cc571f47747cf1e6d464285124e07ff3894f3476b82ede053123c4e5b39248a6449e1e7a3371fd6e1f57f16aacd9412fe9cc55a7dc252981132f1fef55552671929aada27", 0xef}, {&(0x7f0000000800)="a6ddff1d1a19c641c1edc33f460c4053eca79a2cb0f87b622b80db5f2a9e6147e8aac8180d53a6b230feddae44e8b32fab01228ecbe1166e8380790da75c8a3d09c50a0b5194fd6e443fcb37286c3ec73905178b88e2c4cc2640261e599ccc2f99772361df05ca16a83afbf870da0d01479c724a08cf3c5e026ab2ed36f342fb3396f5b40871900a58fb26fad469842195867d10db211420d2a566b9644d45c26f77daced6a6eaba632394de42cca7cdcf0c77ca26a17b7cf828573cddf55af8ff6454814ed2f2ae8af13f5ea1b27a2d0f", 0xd1}, {&(0x7f0000000900)="c99dbe40ef3b600fbb5d1bb1ef355ce00a6b11a88b973c78e4e4dbd735f428e060a4568541934ca3d82504586cdf673358e3bd71f41cdfcf37cbd0f3f2de9f35405c37acad4b03b7f4050d4198d21d396798fcac8376f7c8f54b1ffd5cb80f424cbabe3938063dece0eed1c7aae740cb6d0de1001eeb3b288613f659e3238716936ecfa23a9319d7b03baae5bfb2b009402b8b65ad6d4b090d04690209", 0x9d}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f00000021c0)="7b4553ba3cd2f2c8a784cb338ce7b2b84d9888bfabff939d81590674a9c53d8db5ed728df0cdd30e5b3df1ba3407ab84df85be02f5dd8989fbfa22fe41f9d1200e29c2ae0a04a52b3ebb39391d0459a0e8b74c2b43ac3c4007c306157f9cd72f8b051814bf8f34a5b53e8e8cca42f7db04e8a9166f95bbc9d4424f9496454e228b888747d9078abadcad6116b5b9620f4d6aaa7161fe35ad909d8d1f9de7bf02545eff267dbeb8571e1d62b71f133b4ec7addee6430d69b1a6636179393de718c8e84195a0", 0xc5}, {&(0x7f00000022c0)="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", 0x1000}], 0x8}, 0x14) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r11, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) 2.606452283s ago: executing program 0 (id=4232): r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000001000)='cpu&00\t&&') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x43e90bacaf4f4c62, @perf_bp={0x0}, 0x104260, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'pimreg0\x00', @random="000000008dff"}) 2.125393886s ago: executing program 0 (id=4235): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0xfe89) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETSNDBUF(r1, 0x800454d3, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) close(r3) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xcf) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRES8=r3], 0x9a) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r0) r8 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/252, 0xfc}, {&(0x7f0000001500)=""/156, 0x9c}, {0x0}, {&(0x7f0000000c80)=""/182, 0xb6}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000640)=""/268, 0x10c}], 0x6}, 0x20) write$cgroup_subtree(r9, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) recvmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r8, 0x12) 2.091480076s ago: executing program 2 (id=4237): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x4, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0, 0x30, 0x0, 0x61, 0x20]}}, 0x0, 0x2b, 0x0, 0x1, 0xdd}, 0x28) 1.93987698s ago: executing program 1 (id=4238): r0 = socket$kcm(0x2, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001040)={{r4}, &(0x7f0000000fc0), &(0x7f0000001000)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x80000017, [{0x3, 0x4, 0x200002}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x2e, 0x2e]}}, 0x0, 0x37, 0x0, 0x0, 0xfff}, 0x28) recvmsg$unix(r5, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x100) close(r6) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000340)="a0a741373a", 0x7fffff}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d81500010000e0000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x10, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="8510000001000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000128850000007600000095"], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r8, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x81, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@type_tag={0xf, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x30, 0x30, 0x2e, 0x30, 0x30]}}, &(0x7f0000000900)=""/194, 0x2b, 0xc2, 0x1, 0x9, 0x10000}, 0x28) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000004c0)={0xffffffffffffffff, r8, 0x4, r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="b9fff54860c8d0a99e5830a78d3a", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r8, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000b00)=[0x0, 0x0], &(0x7f0000000b40)=[0x0], 0x0, 0x5f, &(0x7f0000000b80)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000dc0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x17, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @exit, @exit]}, &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', r9, @fallback=0xf, r10, 0x8, &(0x7f0000000a40)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x5, 0xb, 0x5, 0x4}, 0x10, r12, 0xffffffffffffffff, 0x0, &(0x7f0000000e40)=[r13], 0x0, 0x10, 0x3}, 0x94) 1.651640297s ago: executing program 1 (id=4239): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xa, &(0x7f0000000580)=r0, 0x49) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0f000000000000000000000000000000000000001f4ab4e6e8071d4d837a30824860cb6dd4b31e06f02063352af48e47760ea29ce3627bf39d28a1326a093684caf969691ce3a4c31dbf9ce2a24fc13993fc1efd8fbbd46741ef3b67b3c5fa40904625c84518c8090500127f2116ed97846395e98188ee552ea0a3a320443e40ec563d410ad54ffe287ce9ec3a3a95da2a97c7b12632a1e529c99532d226", @ANYRES32=0x0, @ANYBLOB="020000000000000003000000000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002e80)={0x11, 0xc, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3c4803e2, 0x0, 0x0, 0x0, 0x57f}, [@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3ff}, @generic={0x45, 0x4, 0x4, 0xfff, 0x10}, @ldst={0x0, 0x0, 0x2, 0x7, 0x2, 0xffffffffffffffff, 0x8}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000cc0)='GPL\x00', 0x4, 0x1000, &(0x7f0000001dc0)=""/4096, 0x40f00, 0x28, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000002dc0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002e00)=[r1], &(0x7f0000002e40)=[{0x4, 0x1, 0x8, 0x4}, {0x3, 0x3, 0x0, 0x4}, {0x0, 0x3, 0x9}, {0x5, 0x1, 0xb, 0x9}], 0x10, 0x3}, 0x94) r4 = socket$kcm(0xa, 0x3, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x80108907, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001640)=@in6={0xa, 0x4e23, 0x97, @mcast2}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000740)='GPL\x00', 0xe1d, 0x51, &(0x7f0000001040)=""/81, 0x40f00, 0x50, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000880)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000b00)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3], &(0x7f0000000b40)=[{0x2, 0x3, 0x0, 0x8}], 0x10, 0x7fff}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x63, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0x8}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="0f000000000000000000000000000000183300000400000000000000000000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) recvmsg$kcm(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000240)=""/146, 0x92}, {&(0x7f0000000300)=""/203, 0xcb}, {&(0x7f0000001500)=""/158, 0x9e}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x5}, 0x2002) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000800) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.510008601s ago: executing program 2 (id=4240): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x3, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) recvmsg(r1, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES8, @ANYRES32=r3, @ANYBLOB], 0x48) close(r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x101, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0xef}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r6) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r8, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r9}, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000002940)=""/4082, 0xff2}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000000)=""/52, 0x34}, {&(0x7f0000000f40)=""/126, 0x7e}], 0x4}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x18, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 1.360893885s ago: executing program 1 (id=4242): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x6, 0x8e, &(0x7f00000002c0)=""/142}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000a300"/28], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000060002007a17d30460bc24eab556a705251e6182949a36c23d3b48dfd8cdbfb367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c00400b9239d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000f01000000648c2594f91a24fc60", 0x14}], 0x1, 0x0, 0x0, 0x1400}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000055a60701000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000300001f850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x24d}, {}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x2a}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="200000071ae6d130c2e8e34005000000000000000800000000000000b300"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x4ff5, r6}, 0x38) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x5, 0x5, 0x9, 0x2400c, r6, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x4}, 0x50) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r10) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000001419"], 0x48) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 1.240150578s ago: executing program 3 (id=4243): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60100c034002dd0100053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async, rerun: 32) r1 = socket$kcm(0x29, 0x5, 0x0) (rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0xffffffffffffffff) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x13, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @ringbuf_query], &(0x7f0000000100)='GPL\x00', 0x7ff, 0x8e, &(0x7f0000000140)=""/142, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x6, 0xf, 0x5}, 0x10, 0x24754, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000280)=[{0x3, 0x2, 0x8, 0xc}, {0x5, 0x4, 0x4, 0x2}, {0x4, 0x2, 0x10, 0xc}, {0x1, 0x3, 0x3, 0x8}], 0x10, 0x7}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000380)={r1, r3}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x94) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@o_path={&(0x7f0000000840)='./file0\x00', 0x0, 0x18, r2}, 0x18) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='cpuset.effective_mems\x00', 0x0, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)='%ps \x00'}, 0x20) (async, rerun: 64) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x3ff, 0x0, 0x2, 0x44009, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xc}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x20, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @exit, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @generic={0x6, 0x1, 0x3, 0x3, 0xfff}, @call={0x85, 0x0, 0x0, 0x46}]}, &(0x7f00000006c0)='syzkaller\x00', 0x8, 0x76, &(0x7f0000000700)=""/118, 0x41100, 0x8, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000ac0)=[r8, r9, r10, r11, r12], &(0x7f0000000b00)=[{0x3, 0x5, 0xe, 0x9}, {0x2, 0x4, 0x1, 0x7}]}, 0x94) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r13, 0x0, 0xfffe}, 0x38) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', r13}, 0x18) 1.122056741s ago: executing program 2 (id=4244): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a12900150006001426036018120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4eccb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9eedee5de6ccd40dd6e4ed12e749d21e100f323c4c716d15", 0xd8}], 0x1}, 0x0) (fail_nth: 5) 1.009922824s ago: executing program 3 (id=4245): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a12900150006001426036018120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4eccb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9eedee5de6ccd40dd6e4ed12e749d21e100f323c4c716d15", 0xd8}], 0x1}, 0x4010) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ff", 0x4c}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x10008014) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xcf}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='cgroup.subtree_control\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) 999.189255ms ago: executing program 1 (id=4246): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004640)={r0, 0xe0, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000004380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000004400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f0000004440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000004480), &(0x7f00000044c0), 0x8, 0x69, 0x8, 0x8, &(0x7f0000004500)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x55) bpf$PROG_LOAD(0x5, &(0x7f0000004740)={0x12, 0xe, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4475}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1c}, @generic={0x81, 0x2, 0x6, 0xd, 0x3}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3731}, @generic={0x6, 0xe, 0x5, 0x9e80, 0x7}]}, &(0x7f0000000a80)='GPL\x00', 0xfffffffe, 0x1000, &(0x7f0000003380)=""/4096, 0x40f00, 0xc, '\x00', r4, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000004680)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000046c0)={0x2, 0x5, 0x56b, 0x7}, 0x10, 0x0, r0, 0x0, &(0x7f0000004700)=[0xffffffffffffffff, r1, 0xffffffffffffffff], 0x0, 0x10, 0x73}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r7, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_netprio_ifpriomap(r9, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='veth0_virt_wifi\t\v'], 0x12) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r11}, &(0x7f0000000c40), &(0x7f0000000c80)=r0}, 0x20) sendmsg(0xffffffffffffffff, &(0x7f0000003340)={&(0x7f0000000240)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0x80, &(0x7f00000032c0)=[{0x0}, {&(0x7f0000000680)="2037c13623421ee56b8a16f3b5be010045e6759e3be80430214b76ed9521819b15cf657934ac6a9385d53f0f31a9e9137a3c3fa8df42ffe9af67bbaf786c9acea51ac10b871c3ba5cc4fd90b78133ea7f878aaf1b5a2a8a0e046", 0x5a}, {&(0x7f0000000700)="aacd36dad5a83a1c25ba85f62696b8198ecf8c1e32f28af3cd151f827f11af1ec0b2ff6b70c2660b0772be3463b6d3b9a34c4bc22413b2836dcdee6c0b5cb0d78e2cf640d254e59fe7d0d524356d3dd19131b009c6ce44df3aa72ab34977cbcd30d27debd25093423383bbb17b571cd0aa803eadc90e84c0a132f59c09c37439ca6be84fb87468d28c93a8d260fe02488185c6922d65a964256ce7f7537555e4831c0a6072627ea6d56a3cc571f47747cf1e6d464285124e07ff3894f3476b82ede053123c4e5b39248a6449e1e7a3371fd6e1f57f16aacd9412fe9cc55a7dc252981132f1fef55552671929aada27", 0xef}, {&(0x7f0000000800)="a6ddff1d1a19c641c1edc33f460c4053eca79a2cb0f87b622b80db5f2a9e6147e8aac8180d53a6b230feddae44e8b32fab01228ecbe1166e8380790da75c8a3d09c50a0b5194fd6e443fcb37286c3ec73905178b88e2c4cc2640261e599ccc2f99772361df05ca16a83afbf870da0d01479c724a08cf3c5e026ab2ed36f342fb3396f5b40871900a58fb26fad469842195867d10db211420d2a566b9644d45c26f77daced6a6eaba632394de42cca7cdcf0c77ca26a17b7cf828573cddf55af8ff6454814ed2f2ae8af13f5ea1b27a2d0f", 0xd1}, {&(0x7f0000000900)="c99dbe40ef3b600fbb5d1bb1ef355ce00a6b11a88b973c78e4e4dbd735f428e060a4568541934ca3d82504586cdf673358e3bd71f41cdfcf37cbd0f3f2de9f35405c37acad4b03b7f4050d4198d21d396798fcac8376f7c8f54b1ffd5cb80f424cbabe3938063dece0eed1c7aae740cb6d0de1001eeb3b288613f659e3238716936ecfa23a9319d7b03baae5bfb2b009402b8b65ad6d4b090d04690209", 0x9d}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f00000021c0)="7b4553ba3cd2f2c8a784cb338ce7b2b84d9888bfabff939d81590674a9c53d8db5ed728df0cdd30e5b3df1ba3407ab84df85be02f5dd8989fbfa22fe41f9d1200e29c2ae0a04a52b3ebb39391d0459a0e8b74c2b43ac3c4007c306157f9cd72f8b051814bf8f34a5b53e8e8cca42f7db04e8a9166f95bbc9d4424f9496454e228b888747d9078abadcad6116b5b9620f4d6aaa7161fe35ad909d8d1f9de7bf02545eff267dbeb8571e1d62b71f133b4ec7addee6430d69b1a6636179393de718c8e84195a0", 0xc5}, {&(0x7f00000022c0)="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", 0x1000}], 0x8}, 0x14) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r11, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) 451.135189ms ago: executing program 2 (id=4247): r0 = socket$kcm(0x2, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001040)={{r4}, &(0x7f0000000fc0), &(0x7f0000001000)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x80000017, [{0x3, 0x4, 0x200002}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x2e, 0x2e]}}, 0x0, 0x37, 0x0, 0x0, 0xfff}, 0x28) recvmsg$unix(r5, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x100) close(r6) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000340)="a0a741373a", 0x7fffff}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d81500010000e0000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x10, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="8510000001000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000128850000007600000095"], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r8, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x81, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@type_tag={0xf, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x30, 0x30, 0x2e, 0x30, 0x30]}}, &(0x7f0000000900)=""/194, 0x2b, 0xc2, 0x1, 0x9, 0x10000}, 0x28) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000004c0)={0xffffffffffffffff, r8, 0x4, r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="b9fff54860c8d0a99e5830a78d3a", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r8, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000b00)=[0x0, 0x0], &(0x7f0000000b40)=[0x0], 0x0, 0x5f, &(0x7f0000000b80)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000dc0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x17, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @exit, @exit]}, &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', r9, @fallback=0xf, r10, 0x8, &(0x7f0000000a40)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x5, 0xb, 0x5, 0x4}, 0x10, r12, 0xffffffffffffffff, 0x0, &(0x7f0000000e40)=[r13], 0x0, 0x10, 0x3}, 0x94) 391.02907ms ago: executing program 3 (id=4248): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000f0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003", 0x39}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe551a250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x4180) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r0, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x9, 0x0}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r6 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x11b, 0x2, &(0x7f0000000900)=r5, 0x4a00) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x7, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x7, 0x3, 0x1, 0x20, 0x1, 0x5, '\x00', r2, r0, 0x1, 0x2, 0x5, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x15, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x401}, @ldst={0x3, 0x1, 0x0, 0x9, 0xa, 0x8, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0xc4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @xdp, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0x0, 0xb, 0x6}, 0x10, r3, r0, 0x1, &(0x7f0000000640)=[r0, r0, r7, r0, r7, r0, r0], &(0x7f0000000680)=[{0x3, 0x2, 0x6, 0x6}], 0x10, 0x1}, 0x94) r9 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x400, @mcast1, 0x6, 0xfffffffd}, 0x80, 0x0}, 0x24004040) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r10, &(0x7f0000000000), 0x2a979d) write$cgroup_devices(r10, &(0x7f0000000000)={'a', ' *:* ', 'rw\x00'}, 0x9) sendmsg$kcm(r9, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x0, 0xfffffffd}, 0x80, 0x0}, 0x20040010) 305.658262ms ago: executing program 0 (id=4249): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x9006, 0xa, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200fc"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 282.487833ms ago: executing program 2 (id=4250): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xa, &(0x7f0000000580)=r0, 0x49) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0f000000000000000000000000000000000000001f4ab4e6e8071d4d837a30824860cb6dd4b31e06f02063352af48e47760ea29ce3627bf39d28a1326a093684caf969691ce3a4c31dbf9ce2a24fc13993fc1efd8fbbd46741ef3b67b3c5fa40904625c84518c8090500127f2116ed97846395e98188ee552ea0a3a320443e40ec563d410ad54ffe287ce9ec3a3a95da2a97c7b12632a1e529c99532d226d4b7f1", @ANYRES32=0x0, @ANYBLOB="020000000000000003000000000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002e80)={0x11, 0xc, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3c4803e2, 0x0, 0x0, 0x0, 0x57f}, [@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3ff}, @generic={0x45, 0x4, 0x4, 0xfff, 0x10}, @ldst={0x0, 0x0, 0x2, 0x7, 0x2, 0xffffffffffffffff, 0x8}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000cc0)='GPL\x00', 0x4, 0x1000, &(0x7f0000001dc0)=""/4096, 0x40f00, 0x28, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000002dc0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002e00)=[r1], &(0x7f0000002e40)=[{0x4, 0x1, 0x8, 0x4}, {0x3, 0x3, 0x0, 0x4}, {0x0, 0x3, 0x9}, {0x5, 0x1, 0xb, 0x9}], 0x10, 0x3}, 0x94) r4 = socket$kcm(0xa, 0x3, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x80108907, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001640)=@in6={0xa, 0x4e23, 0x97, @mcast2}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000740)='GPL\x00', 0xe1d, 0x51, &(0x7f0000001040)=""/81, 0x40f00, 0x50, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000880)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000b00)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3], &(0x7f0000000b40)=[{0x2, 0x3, 0x0, 0x8}], 0x10, 0x7fff}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x63, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0x8}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="0f000000000000000000000000000000183300000400000000000000000000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) recvmsg$kcm(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000240)=""/146, 0x92}, {&(0x7f0000000300)=""/203, 0xcb}, {&(0x7f0000001500)=""/158, 0x9e}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x5}, 0x2002) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000800) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 190.306455ms ago: executing program 3 (id=4251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8948, &(0x7f0000000080)) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002540), 0x0, 0x6, r0}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000006000000030000000000000e0100000000000000205f305f3e00"], 0x0, 0x2e, 0x0, 0x1, 0x5}, 0x28) 163.752906ms ago: executing program 0 (id=4252): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x3, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) recvmsg(r1, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES8, @ANYRES32=r3, @ANYBLOB="fe8e1df2eb793fe627"], 0x48) close(r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x101, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0xef}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r6) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r8, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r9}, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000002940)=""/4082, 0xff2}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000000)=""/52, 0x34}, {&(0x7f0000000f40)=""/126, 0x7e}], 0x4}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x18, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 156.908586ms ago: executing program 3 (id=4253): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'bond_slave_1\x00', @broadcast}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) r3 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r3, @ANYRESHEX], 0x20) 58.772259ms ago: executing program 2 (id=4254): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0xa, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90424fc60100005000b000900053582c137153e37000c0280fc0b1000f80b", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) unlink(&(0x7f0000000100)='./file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x4a}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0479e865c63100000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302c00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef000100ffffff"], 0x280) 6.01578ms ago: executing program 3 (id=4255): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b0000002f4900000500000041000000", @ANYRES32=0x1, @ANYBLOB="fcffffff000000000000000000f5000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r0}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) (async) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000ff"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x12506, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x80c4, 0x0, 0x0, 0x4, 0x9, 0xfffffffb, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x2000000000000216, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa1000000000000070008000000b703000000000000850000000600000095e791f5b658e387b4785f63df404632ba9810244b56cee3c12a26d55988984cfc6f453ed071c723e4716ee6d81b76cb751d6b3800"/140], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x2, 0x2, 0x73) (async) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0xc0218, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003, 0x0, @perf_bp={&(0x7f00000001c0), 0xf}, 0xf20c, 0x200, 0x0, 0x5, 0x2, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)) 0s ago: executing program 0 (id=4256): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000", 0x3}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x807) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x44010) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x838, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f0000000200)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffed4, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000180)=r2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503"], 0x30}, 0x40880) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb014018000000000000000c000000a424a1610c"], 0x0, 0x26}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000024008106", 0x8}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): 47][T16027] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3256'. [ 675.688834][T16030] tap0: tun_chr_ioctl cmd 2147767507 [ 675.746490][T16030] validate_nla: 11 callbacks suppressed [ 675.746509][T16030] netlink: 'syz.2.3255': attribute type 39 has an invalid length. [ 676.760244][T16044] netlink: 'syz.1.3259': attribute type 1 has an invalid length. [ 676.809994][T16044] netlink: 'syz.1.3259': attribute type 3 has an invalid length. [ 677.277181][T16053] netlink: 'syz.0.3261': attribute type 21 has an invalid length. [ 677.336258][T16053] netlink: 'syz.0.3261': attribute type 10 has an invalid length. [ 677.764244][T16067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 677.802786][T16071] tap0: tun_chr_ioctl cmd 2147767507 [ 677.815029][T16071] tap0: tun_chr_ioctl cmd 2147767507 [ 677.878246][T16071] netlink: 'syz.0.3268': attribute type 39 has an invalid length. [ 678.638702][T16088] netlink: 'syz.2.3272': attribute type 29 has an invalid length. [ 678.653571][T16082] netlink: 'syz.3.3270': attribute type 1 has an invalid length. [ 678.663882][T16088] netlink: 'syz.2.3272': attribute type 29 has an invalid length. [ 678.673417][T16082] netlink: 'syz.3.3270': attribute type 3 has an invalid length. [ 678.996877][T16103] tap0: tun_chr_ioctl cmd 2147767507 [ 679.006899][T16103] tap0: tun_chr_ioctl cmd 2147767507 [ 680.075354][T16113] __nla_validate_parse: 20 callbacks suppressed [ 680.075377][T16113] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.3281'. [ 680.438887][T16114] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3281'. [ 681.709050][T16125] validate_nla: 5 callbacks suppressed [ 681.709073][T16125] netlink: 'syz.3.3284': attribute type 1 has an invalid length. [ 681.729169][T16125] netlink: 'syz.3.3284': attribute type 3 has an invalid length. [ 681.746224][T16125] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3284'. [ 682.038857][T16136] netlink: 61963 bytes leftover after parsing attributes in process `syz.2.3287'. [ 682.134829][T16140] tap0: tun_chr_ioctl cmd 2147767507 [ 682.143564][T16140] tap0: tun_chr_ioctl cmd 2147767507 [ 682.151794][T16140] netlink: 'syz.1.3290': attribute type 39 has an invalid length. [ 682.242076][T16142] FAULT_INJECTION: forcing a failure. [ 682.242076][T16142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.256228][T16142] CPU: 0 PID: 16142 Comm: syz.3.3292 Not tainted syzkaller #0 [ 682.266422][T16142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 682.278433][T16142] Call Trace: [ 682.281730][T16142] [ 682.284739][T16142] dump_stack_lvl+0x18c/0x250 [ 682.289475][T16142] ? show_regs_print_info+0x20/0x20 [ 682.295100][T16142] ? load_image+0x420/0x420 [ 682.300183][T16142] ? __might_fault+0xaa/0x120 [ 682.305312][T16142] ? __lock_acquire+0x7d80/0x7d80 [ 682.310783][T16142] should_fail_ex+0x394/0x4c0 [ 682.315707][T16142] _copy_from_user+0x2f/0xe0 [ 682.320696][T16142] ____sys_sendmsg+0x329/0x980 [ 682.327553][T16142] ? __sys_sendmsg_sock+0x30/0x30 [ 682.333523][T16142] ? __import_iovec+0x3fa/0x850 [ 682.339006][T16142] ? import_iovec+0x73/0xa0 [ 682.344310][T16142] ___sys_sendmsg+0x2a6/0x360 [ 682.350030][T16142] ? get_pid_task+0x20/0x1e0 [ 682.355118][T16142] ? __sys_sendmsg+0x2b0/0x2b0 [ 682.360141][T16142] ? __lock_acquire+0x7d80/0x7d80 [ 682.366275][T16142] __se_sys_sendmsg+0x1d0/0x2c0 [ 682.371794][T16142] ? __x64_sys_sendmsg+0x80/0x80 [ 682.377142][T16142] ? lockdep_hardirqs_on+0x98/0x150 [ 682.383200][T16142] do_syscall_64+0x55/0xb0 [ 682.389076][T16142] ? clear_bhb_loop+0x40/0x90 [ 682.394212][T16142] ? clear_bhb_loop+0x40/0x90 [ 682.399682][T16142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 682.406722][T16142] RIP: 0033:0x7f391279e019 [ 682.411198][T16142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.433643][T16142] RSP: 002b:00007f39135ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.444630][T16142] RAX: ffffffffffffffda RBX: 00007f3912a25fa0 RCX: 00007f391279e019 [ 682.455684][T16142] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 682.465232][T16142] RBP: 00007f39135ee090 R08: 0000000000000000 R09: 0000000000000000 [ 682.475685][T16142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.485288][T16142] R13: 00007f3912a26038 R14: 00007f3912a25fa0 R15: 00007ffe153e3ee8 [ 682.495242][T16142] [ 683.213712][T16140] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3290'. [ 683.347573][T16140] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3290'. [ 683.410522][T16155] FAULT_INJECTION: forcing a failure. [ 683.410522][T16155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.427630][T16155] CPU: 0 PID: 16155 Comm: syz.3.3295 Not tainted syzkaller #0 [ 683.435396][T16155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 683.445635][T16155] Call Trace: [ 683.449010][T16155] [ 683.451967][T16155] dump_stack_lvl+0x18c/0x250 [ 683.457037][T16155] ? show_regs_print_info+0x20/0x20 [ 683.462644][T16155] ? load_image+0x420/0x420 [ 683.467191][T16155] ? __lock_acquire+0x7d80/0x7d80 [ 683.472402][T16155] ? snprintf+0xe9/0x140 [ 683.476708][T16155] should_fail_ex+0x394/0x4c0 [ 683.481605][T16155] _copy_to_user+0x2f/0xa0 [ 683.486156][T16155] simple_read_from_buffer+0xe7/0x150 [ 683.491892][T16155] proc_fail_nth_read+0x1e8/0x260 [ 683.498099][T16155] ? proc_fault_inject_write+0x360/0x360 [ 683.504932][T16155] ? fsnotify_perm+0x271/0x5e0 [ 683.510537][T16155] ? proc_fault_inject_write+0x360/0x360 [ 683.516735][T16155] vfs_read+0x298/0x990 [ 683.520935][T16155] ? kernel_read+0x1e0/0x1e0 [ 683.526182][T16155] ? __fget_files+0x28/0x460 [ 683.531024][T16155] ? __fget_files+0x3fc/0x460 [ 683.535760][T16155] ? __fdget_pos+0x2a3/0x330 [ 683.540481][T16155] ? ksys_read+0x74/0x260 [ 683.545180][T16155] ksys_read+0x151/0x260 [ 683.549535][T16155] ? vfs_write+0x9a0/0x9a0 [ 683.553971][T16155] ? lockdep_hardirqs_on+0x98/0x150 [ 683.560001][T16155] do_syscall_64+0x55/0xb0 [ 683.564435][T16155] ? clear_bhb_loop+0x40/0x90 [ 683.569409][T16155] ? clear_bhb_loop+0x40/0x90 [ 683.574429][T16155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 683.580555][T16155] RIP: 0033:0x7f391275e84e [ 683.585271][T16155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 683.605069][T16155] RSP: 002b:00007f39135edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 683.613488][T16155] RAX: ffffffffffffffda RBX: 00007f39135ee6c0 RCX: 00007f391275e84e [ 683.621582][T16155] RDX: 000000000000000f RSI: 00007f39135ee0a0 RDI: 0000000000000004 [ 683.630036][T16155] RBP: 00007f39135ee090 R08: 0000000000000000 R09: 0000000000000000 [ 683.639400][T16155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 683.647638][T16155] R13: 00007f3912a26038 R14: 00007f3912a25fa0 R15: 00007ffe153e3ee8 [ 683.656077][T16155] [ 683.684500][T16150] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3290'. [ 683.695392][T16152] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3290'. [ 683.784775][T16158] netlink: 'syz.2.3296': attribute type 10 has an invalid length. [ 683.931659][T16162] netlink: 'syz.1.3297': attribute type 1 has an invalid length. [ 683.976063][T16162] netlink: 'syz.1.3297': attribute type 3 has an invalid length. [ 683.995310][T16169] netlink: 'syz.0.3300': attribute type 21 has an invalid length. [ 684.004117][T16162] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3297'. [ 684.061387][T16172] netlink: 'syz.3.3302': attribute type 21 has an invalid length. [ 684.196165][T16179] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.3304'. [ 684.517694][T16187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 685.617104][T16205] netlink: 'syz.3.3314': attribute type 21 has an invalid length. [ 685.658492][T16206] netlink: 'syz.1.3313': attribute type 1 has an invalid length. [ 685.666974][T16205] __nla_validate_parse: 1 callbacks suppressed [ 685.667011][T16205] netlink: 14350 bytes leftover after parsing attributes in process `syz.3.3314'. [ 685.694362][T16206] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3313'. [ 686.011570][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.018775][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.053522][T16217] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.3319'. [ 686.117310][T16217] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3319'. [ 686.165373][T16220] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.3320'. [ 686.206504][T16220] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3320'. [ 686.526686][T16226] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3322'. [ 686.561430][T16228] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.3323'. [ 686.639289][T16228] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3323'. [ 686.693682][T16235] netlink: 14350 bytes leftover after parsing attributes in process `syz.2.3326'. [ 686.738555][T16235] validate_nla: 3 callbacks suppressed [ 686.738606][T16235] netlink: 'syz.2.3326': attribute type 10 has an invalid length. [ 686.848710][T16238] tap0: tun_chr_ioctl cmd 2147767507 [ 686.878486][T16238] tap0: tun_chr_ioctl cmd 2147767507 [ 686.908515][T16238] netlink: 'syz.1.3327': attribute type 39 has an invalid length. [ 687.274621][T16247] tap0: tun_chr_ioctl cmd 2147767507 [ 687.283805][T16247] tap0: tun_chr_ioctl cmd 2147767507 [ 687.310328][T16247] netlink: 'syz.2.3330': attribute type 39 has an invalid length. [ 688.133995][T16265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 688.200183][T16267] netlink: 'syz.1.3336': attribute type 21 has an invalid length. [ 688.236829][T16267] netlink: 'syz.1.3336': attribute type 10 has an invalid length. [ 688.444497][T16276] tap0: tun_chr_ioctl cmd 2147767507 [ 688.456550][T16276] tap0: tun_chr_ioctl cmd 2147767507 [ 688.478973][T16276] netlink: 'syz.0.3340': attribute type 39 has an invalid length. [ 689.595245][T16291] tap0: tun_chr_ioctl cmd 2147767507 [ 689.603527][T16291] tap0: tun_chr_ioctl cmd 2147767507 [ 689.619405][T16291] netlink: 'syz.3.3344': attribute type 39 has an invalid length. [ 689.687840][T16298] FAULT_INJECTION: forcing a failure. [ 689.687840][T16298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.711133][T16298] CPU: 0 PID: 16298 Comm: syz.1.3347 Not tainted syzkaller #0 [ 689.720991][T16298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 689.732987][T16298] Call Trace: [ 689.736681][T16298] [ 689.739742][T16298] dump_stack_lvl+0x18c/0x250 [ 689.745783][T16298] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 689.753323][T16298] ? show_regs_print_info+0x20/0x20 [ 689.759264][T16298] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 689.765676][T16298] ? dump_stack+0x9/0x20 [ 689.770164][T16298] should_fail_ex+0x394/0x4c0 [ 689.775429][T16298] _copy_from_user+0x2f/0xe0 [ 689.780668][T16298] ___sys_recvmsg+0x174/0x590 [ 689.785729][T16298] ? __sys_recvmsg+0x2a0/0x2a0 [ 689.791435][T16298] ? __fget_files+0x28/0x460 [ 689.796171][T16298] ? __fget_files+0x3fc/0x460 [ 689.802369][T16298] __x64_sys_recvmsg+0x21e/0x2f0 [ 689.808579][T16298] ? perf_trace_preemptirq_template+0x269/0x330 [ 689.815229][T16298] ? ___sys_recvmsg+0x590/0x590 [ 689.820142][T16298] ? lockdep_hardirqs_on+0x98/0x150 [ 689.825477][T16298] do_syscall_64+0x55/0xb0 [ 689.831031][T16298] ? clear_bhb_loop+0x40/0x90 [ 689.837890][T16298] ? clear_bhb_loop+0x40/0x90 [ 689.842606][T16298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.848948][T16298] RIP: 0033:0x7fc2e6b9e019 [ 689.853546][T16298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.875590][T16298] RSP: 002b:00007fc2e7a69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 689.885353][T16298] RAX: ffffffffffffffda RBX: 00007fc2e6e25fa0 RCX: 00007fc2e6b9e019 [ 689.894776][T16298] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 689.905686][T16298] RBP: 00007fc2e7a69090 R08: 0000000000000000 R09: 0000000000000000 [ 689.916646][T16298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.926196][T16298] R13: 00007fc2e6e26038 R14: 00007fc2e6e25fa0 R15: 00007ffc6f8f83a8 [ 689.937467][T16298] [ 690.243075][T16303] netlink: 'syz.1.3349': attribute type 21 has an invalid length. [ 690.328629][T16303] netlink: 'syz.1.3349': attribute type 10 has an invalid length. [ 690.611442][T16314] tap0: tun_chr_ioctl cmd 2147767507 [ 690.617882][T16314] tap0: tun_chr_ioctl cmd 2147767507 [ 690.631476][T16314] netlink: 'syz.2.3353': attribute type 39 has an invalid length. [ 691.139124][T12126] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 691.182885][T16321] __nla_validate_parse: 22 callbacks suppressed [ 691.182906][T16321] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3353'. [ 691.261331][T16321] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3353'. [ 691.375342][T16314] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3353'. [ 691.505023][T16325] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.3355'. [ 691.520440][T16323] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3353'. [ 691.650063][T16325] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3355'. [ 691.836124][T16331] FAULT_INJECTION: forcing a failure. [ 691.836124][T16331] name failslab, interval 1, probability 0, space 0, times 0 [ 691.884113][T16331] CPU: 0 PID: 16331 Comm: syz.0.3356 Not tainted syzkaller #0 [ 691.892091][T16331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 691.902735][T16331] Call Trace: [ 691.906081][T16331] [ 691.909019][T16331] dump_stack_lvl+0x18c/0x250 [ 691.913897][T16331] ? show_regs_print_info+0x20/0x20 [ 691.920071][T16331] ? load_image+0x420/0x420 [ 691.925492][T16331] ? __lock_acquire+0x7d80/0x7d80 [ 691.930660][T16331] ? perf_tp_event+0x1550/0x1550 [ 691.935850][T16331] ? mark_lock+0x94/0x320 [ 691.940419][T16331] should_fail_ex+0x394/0x4c0 [ 691.945169][T16331] should_failslab+0x9/0x20 [ 691.950347][T16331] slab_pre_alloc_hook+0x59/0x300 [ 691.956302][T16331] ? perf_tp_event+0x13f5/0x1550 [ 691.961810][T16331] ? ip_options_get+0x50/0x560 [ 691.966907][T16331] ? ip_options_get+0x50/0x560 [ 691.972349][T16331] __kmem_cache_alloc_node+0x53/0x250 [ 691.978698][T16331] ? ip_options_get+0x50/0x560 [ 691.983573][T16331] __kmalloc+0xa7/0x240 [ 691.988098][T16331] ip_options_get+0x50/0x560 [ 691.992946][T16331] ip_cmsg_send+0x591/0xa70 [ 691.997576][T16331] udp_sendmsg+0xc6f/0x23d0 [ 692.002643][T16331] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 692.008101][T16331] ? udp_cmsg_send+0x350/0x350 [ 692.013545][T16331] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 692.020098][T16331] ? lock_chain_count+0x20/0x20 [ 692.025403][T16331] ? inet_sendmsg+0x10d/0x2a0 [ 692.031962][T16331] ? __local_bh_enable_ip+0x13a/0x1c0 [ 692.038244][T16331] ? _local_bh_enable+0xa0/0xa0 [ 692.044273][T16331] ? do_raw_spin_unlock+0x121/0x230 [ 692.049843][T16331] ? inet_sendmsg+0x10d/0x2a0 [ 692.055067][T16331] ? inet_sendmsg+0x10d/0x2a0 [ 692.061000][T16331] ? inet_send_prepare+0x250/0x250 [ 692.067446][T16331] ____sys_sendmsg+0x61b/0x980 [ 692.072693][T16331] ? __sys_sendmsg_sock+0x30/0x30 [ 692.077779][T16331] ? __import_iovec+0x3fa/0x850 [ 692.082761][T16331] ? import_iovec+0x73/0xa0 [ 692.087881][T16331] ___sys_sendmsg+0x2a6/0x360 [ 692.093428][T16331] ? get_pid_task+0x20/0x1e0 [ 692.098693][T16331] ? __sys_sendmsg+0x2b0/0x2b0 [ 692.104214][T16331] ? __lock_acquire+0x7d80/0x7d80 [ 692.109297][T16331] __se_sys_sendmsg+0x1d0/0x2c0 [ 692.115173][T16331] ? __x64_sys_sendmsg+0x80/0x80 [ 692.121043][T16331] ? lockdep_hardirqs_on+0x98/0x150 [ 692.127692][T16331] do_syscall_64+0x55/0xb0 [ 692.132525][T16331] ? clear_bhb_loop+0x40/0x90 [ 692.137423][T16331] ? clear_bhb_loop+0x40/0x90 [ 692.143009][T16331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.149007][T16331] RIP: 0033:0x7f198679e019 [ 692.153774][T16331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.174870][T16331] RSP: 002b:00007f198758b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 692.184231][T16331] RAX: ffffffffffffffda RBX: 00007f1986a25fa0 RCX: 00007f198679e019 [ 692.193044][T16331] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000012 [ 692.201105][T16331] RBP: 00007f198758b090 R08: 0000000000000000 R09: 0000000000000000 [ 692.209205][T16331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.217439][T16331] R13: 00007f1986a26038 R14: 00007f1986a25fa0 R15: 00007fffb1346608 [ 692.225620][T16331] [ 692.471427][T16342] netlink: 'syz.0.3360': attribute type 21 has an invalid length. [ 692.481102][T16342] netlink: 14350 bytes leftover after parsing attributes in process `syz.0.3360'. [ 692.523969][T16342] netlink: 'syz.0.3360': attribute type 10 has an invalid length. [ 692.571840][T16346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 692.692627][T16344] netlink: 'syz.1.3362': attribute type 1 has an invalid length. [ 692.697923][T16350] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.3364'. [ 692.704547][T16344] netlink: 'syz.1.3362': attribute type 3 has an invalid length. [ 692.722949][T16344] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3362'. [ 692.754048][T16350] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3364'. [ 692.923697][T16354] tap0: tun_chr_ioctl cmd 2147767507 [ 692.931667][T16354] tap0: tun_chr_ioctl cmd 2147767507 [ 692.940262][T16354] netlink: 'syz.1.3366': attribute type 39 has an invalid length. [ 694.230690][T16362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 694.422398][T16374] netlink: 'syz.1.3373': attribute type 21 has an invalid length. [ 694.451643][T16374] netlink: 'syz.1.3373': attribute type 10 has an invalid length. [ 694.752320][T16384] netlink: 'syz.0.3385': attribute type 21 has an invalid length. [ 694.783232][T16384] netlink: 'syz.0.3385': attribute type 10 has an invalid length. [ 695.018661][T16393] tap0: tun_chr_ioctl cmd 2147767507 [ 695.038111][T16393] tap0: tun_chr_ioctl cmd 2147767507 [ 695.058899][T16393] netlink: 'syz.0.3379': attribute type 39 has an invalid length. [ 696.133134][T16406] FAULT_INJECTION: forcing a failure. [ 696.133134][T16406] name failslab, interval 1, probability 0, space 0, times 0 [ 696.213330][T16406] CPU: 0 PID: 16406 Comm: syz.0.3384 Not tainted syzkaller #0 [ 696.221150][T16406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 696.232670][T16406] Call Trace: [ 696.236191][T16406] [ 696.239707][T16406] dump_stack_lvl+0x18c/0x250 [ 696.244754][T16406] ? show_regs_print_info+0x20/0x20 [ 696.250655][T16406] ? load_image+0x420/0x420 [ 696.256118][T16406] ? verify_lock_unused+0x140/0x140 [ 696.262320][T16406] ? perf_trace_lock_acquire+0x342/0x400 [ 696.268970][T16406] should_fail_ex+0x394/0x4c0 [ 696.274106][T16406] should_failslab+0x9/0x20 [ 696.279166][T16406] slab_pre_alloc_hook+0x59/0x300 [ 696.284743][T16406] kmem_cache_alloc+0x5a/0x2c0 [ 696.290946][T16406] ? skb_clone+0x1eb/0x370 [ 696.295918][T16406] skb_clone+0x1eb/0x370 [ 696.301661][T16406] __netlink_deliver_tap+0x411/0x7f0 [ 696.308911][T16406] ? netlink_deliver_tap+0x2e/0x1b0 [ 696.316340][T16406] netlink_deliver_tap+0x19c/0x1b0 [ 696.323011][T16406] netlink_unicast+0x77b/0x930 [ 696.328772][T16406] netlink_sendmsg+0x8d0/0xbf0 [ 696.333992][T16406] ? netlink_getsockopt+0x590/0x590 [ 696.339830][T16406] ? apparmor_socket_sendmsg+0x8e/0x330 [ 696.346705][T16406] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 696.352609][T16406] ? security_socket_sendmsg+0x80/0xa0 [ 696.358138][T16406] ? netlink_getsockopt+0x590/0x590 [ 696.363991][T16406] ____sys_sendmsg+0x61b/0x980 [ 696.368882][T16406] ? __asan_memset+0x22/0x40 [ 696.373814][T16406] ? __sys_sendmsg_sock+0x30/0x30 [ 696.379186][T16406] ? __import_iovec+0x5f2/0x850 [ 696.385113][T16406] ? import_iovec+0x73/0xa0 [ 696.389886][T16406] ___sys_sendmsg+0x2a6/0x360 [ 696.394864][T16406] ? get_pid_task+0x20/0x1e0 [ 696.399554][T16406] ? __sys_sendmsg+0x2b0/0x2b0 [ 696.404571][T16406] ? __lock_acquire+0x7d80/0x7d80 [ 696.409861][T16406] __se_sys_sendmsg+0x1d0/0x2c0 [ 696.414994][T16406] ? __x64_sys_sendmsg+0x80/0x80 [ 696.420391][T16406] ? lockdep_hardirqs_on+0x98/0x150 [ 696.425773][T16406] do_syscall_64+0x55/0xb0 [ 696.430250][T16406] ? clear_bhb_loop+0x40/0x90 [ 696.435074][T16406] ? clear_bhb_loop+0x40/0x90 [ 696.439821][T16406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 696.445875][T16406] RIP: 0033:0x7f198679e019 [ 696.450415][T16406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.473715][T16406] RSP: 002b:00007f198758b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.482569][T16406] RAX: ffffffffffffffda RBX: 00007f1986a25fa0 RCX: 00007f198679e019 [ 696.490754][T16406] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 696.500940][T16406] RBP: 00007f198758b090 R08: 0000000000000000 R09: 0000000000000000 [ 696.509758][T16406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.518146][T16406] R13: 00007f1986a26038 R14: 00007f1986a25fa0 R15: 00007fffb1346608 [ 696.526682][T16406] [ 697.161244][T16419] __nla_validate_parse: 14 callbacks suppressed [ 697.161264][T16419] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.3389'. [ 697.252790][T16419] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3389'. [ 697.275809][T16417] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3388'. [ 697.286595][T16422] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3390'. [ 697.306241][T16417] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3388'. [ 697.543550][T16428] netlink: 'syz.2.3391': attribute type 2 has an invalid length. [ 697.578340][T16428] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.3391'. [ 697.785611][T16431] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.3392'. [ 697.872487][T16431] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3392'. [ 698.674713][T16449] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3394'. [ 700.845553][T16438] tap0: tun_chr_ioctl cmd 2147767507 [ 700.851362][T16439] tap0: tun_chr_ioctl cmd 2147767507 [ 700.857394][T16440] netlink: 'syz.2.3394': attribute type 39 has an invalid length. [ 700.874296][T16445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 700.891603][T16449] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3394'. [ 701.258728][T16462] netlink: 'syz.2.3400': attribute type 10 has an invalid length. [ 701.321571][T16462] veth0_macvtap: left promiscuous mode [ 703.117370][T16487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 703.245909][T16490] tap0: tun_chr_ioctl cmd 2147767507 [ 703.262177][T16490] tap0: tun_chr_ioctl cmd 2147767507 [ 703.286914][T16490] netlink: 'syz.3.3408': attribute type 39 has an invalid length. [ 704.561622][T16498] __nla_validate_parse: 2 callbacks suppressed [ 704.561639][T16498] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3408'. [ 704.640237][T16498] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3408'. [ 704.682508][T16491] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3408'. [ 704.704997][T16490] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3408'. [ 709.043349][T16546] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.3423'. [ 709.122085][T16546] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3423'. [ 709.658904][T16551] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3422'. [ 709.671632][T16535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 709.704546][T16542] tap0: tun_chr_ioctl cmd 2147767507 [ 709.710329][T16543] tap0: tun_chr_ioctl cmd 2147767507 [ 709.727586][T16544] netlink: 'syz.2.3422': attribute type 39 has an invalid length. [ 709.766544][T16551] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3422'. [ 709.822471][T16555] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3425'. [ 709.845137][T16547] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3422'. [ 709.890293][T16555] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3425'. [ 709.903128][T16539] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3422'. [ 710.022396][T16557] netlink: 'syz.3.3426': attribute type 2 has an invalid length. [ 711.032058][T16575] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.3431'. [ 711.117885][T16577] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.3432'. [ 712.420858][T16587] netlink: 'syz.2.3434': attribute type 1 has an invalid length. [ 712.429042][T16587] netlink: 'syz.2.3434': attribute type 3 has an invalid length. [ 712.436896][T16587] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3434'. [ 712.535549][T16594] tap0: tun_chr_ioctl cmd 2147767507 [ 712.541798][T16595] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.3435'. [ 712.557177][T16594] tap0: tun_chr_ioctl cmd 2147767507 [ 712.571459][T16594] netlink: 'syz.3.3436': attribute type 39 has an invalid length. [ 712.628875][T16591] netlink: 'syz.0.3443': attribute type 1 has an invalid length. [ 712.636705][T16591] netlink: 'syz.0.3443': attribute type 3 has an invalid length. [ 713.149663][T16602] netlink: 'syz.2.3438': attribute type 21 has an invalid length. [ 713.214162][T16602] netlink: 'syz.2.3438': attribute type 10 has an invalid length. [ 713.272966][T16604] netlink: 'syz.0.3439': attribute type 20 has an invalid length. [ 714.302024][T16626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 714.574463][T16640] syzkaller0: entered promiscuous mode [ 714.581561][T16640] syzkaller0: entered allmulticast mode [ 714.595253][T16645] tap0: tun_chr_ioctl cmd 2147767507 [ 714.603401][T16645] tap0: tun_chr_ioctl cmd 2147767507 [ 714.863613][T16648] __nla_validate_parse: 13 callbacks suppressed [ 714.863634][T16648] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.3455'. [ 714.941048][T16648] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3455'. [ 715.355525][T16651] validate_nla: 6 callbacks suppressed [ 715.355543][T16651] netlink: 'syz.3.3456': attribute type 1 has an invalid length. [ 715.385992][T16651] netlink: 'syz.3.3456': attribute type 3 has an invalid length. [ 715.416374][T16651] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3456'. [ 715.736582][T16658] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3453'. [ 717.448139][T16658] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3453'. [ 717.482511][T16645] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3453'. [ 717.524366][T16660] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3453'. [ 717.573236][T16667] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.3459'. [ 717.964098][T16669] FAULT_INJECTION: forcing a failure. [ 717.964098][T16669] name failslab, interval 1, probability 0, space 0, times 0 [ 717.998212][T16669] CPU: 0 PID: 16669 Comm: syz.2.3461 Not tainted syzkaller #0 [ 718.005750][T16669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 718.016202][T16669] Call Trace: [ 718.019773][T16669] [ 718.022708][T16669] dump_stack_lvl+0x18c/0x250 [ 718.027718][T16669] ? show_regs_print_info+0x20/0x20 [ 718.033034][T16669] ? load_image+0x420/0x420 [ 718.037554][T16669] ? __might_sleep+0xe0/0xe0 [ 718.042332][T16669] ? __lock_acquire+0x7d80/0x7d80 [ 718.047368][T16669] should_fail_ex+0x394/0x4c0 [ 718.052064][T16669] should_failslab+0x9/0x20 [ 718.056583][T16669] slab_pre_alloc_hook+0x59/0x300 [ 718.061620][T16669] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 718.067478][T16669] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 718.073365][T16669] __kmem_cache_alloc_node+0x53/0x250 [ 718.078828][T16669] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 718.084562][T16669] __kmalloc+0xa7/0x240 [ 718.088738][T16669] tomoyo_realpath_from_path+0xe6/0x5c0 [ 718.094474][T16669] ? tomoyo_domain+0xd6/0x120 [ 718.099166][T16669] tomoyo_path_number_perm+0x248/0x5e0 [ 718.104640][T16669] ? tomoyo_path_number_perm+0x217/0x5e0 [ 718.110303][T16669] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 718.116116][T16669] ? ksys_write+0x1d2/0x260 [ 718.121402][T16669] ? __fget_files+0x28/0x460 [ 718.126087][T16669] security_file_ioctl+0x70/0xa0 [ 718.131127][T16669] __se_sys_ioctl+0x48/0x170 [ 718.136183][T16669] do_syscall_64+0x55/0xb0 [ 718.140637][T16669] ? clear_bhb_loop+0x40/0x90 [ 718.145686][T16669] ? clear_bhb_loop+0x40/0x90 [ 718.150472][T16669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 718.156480][T16669] RIP: 0033:0x7f2e6899e019 [ 718.160902][T16669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.180552][T16669] RSP: 002b:00007f2e69863028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 718.189062][T16669] RAX: ffffffffffffffda RBX: 00007f2e68c25fa0 RCX: 00007f2e6899e019 [ 718.197074][T16669] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000009 [ 718.205082][T16669] RBP: 00007f2e69863090 R08: 0000000000000000 R09: 0000000000000000 [ 718.213251][T16669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.221323][T16669] R13: 00007f2e68c26038 R14: 00007f2e68c25fa0 R15: 00007ffd4ce6d518 [ 718.229315][T16669] [ 718.234770][T16675] netlink: 'syz.0.3462': attribute type 10 has an invalid length. [ 718.282844][T16669] ERROR: Out of memory at tomoyo_realpath_from_path. [ 718.592268][T16682] netlink: 'syz.0.3473': attribute type 10 has an invalid length. [ 718.840636][T16689] netlink: 'syz.2.3468': attribute type 1 has an invalid length. [ 718.850082][T16689] netlink: 'syz.2.3468': attribute type 3 has an invalid length. [ 718.859092][T16689] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3468'. [ 718.884464][T16695] tap0: tun_chr_ioctl cmd 2147767507 [ 718.892721][T16695] tap0: tun_chr_ioctl cmd 2147767507 [ 718.902031][T16695] netlink: 'syz.3.3470': attribute type 39 has an invalid length. [ 719.418932][T16695] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3470'. [ 719.781608][T16702] syz.2.3474 (16702) used greatest stack depth: 18792 bytes left [ 719.884861][T16712] veth1_vlan: entered allmulticast mode [ 720.270578][T16722] netlink: 'syz.0.3481': attribute type 1 has an invalid length. [ 720.289908][T16722] netlink: 'syz.0.3481': attribute type 3 has an invalid length. [ 720.297890][T16722] __nla_validate_parse: 4 callbacks suppressed [ 720.297904][T16722] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3481'. [ 720.514181][T16733] tap0: tun_chr_ioctl cmd 2147767507 [ 720.525063][T16733] tap0: tun_chr_ioctl cmd 2147767507 [ 720.531841][T16733] netlink: 'syz.0.3485': attribute type 39 has an invalid length. [ 721.152854][T16747] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3485'. [ 721.163169][T16747] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3485'. [ 721.178973][T16733] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3485'. [ 721.210906][T16747] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3485'. [ 721.467967][T16753] netlink: 'syz.2.3493': attribute type 1 has an invalid length. [ 721.478679][T16753] netlink: 'syz.2.3493': attribute type 3 has an invalid length. [ 721.491976][T16753] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3493'. [ 721.573790][T16766] IPv6: NLM_F_CREATE should be specified when creating new route [ 721.586783][T16766] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3498'. [ 723.161013][T16793] netlink: 'syz.1.3508': attribute type 1 has an invalid length. [ 723.181041][T16793] netlink: 'syz.1.3508': attribute type 3 has an invalid length. [ 723.199468][T16793] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3508'. [ 724.197617][T16820] netlink: 'syz.1.3515': attribute type 10 has an invalid length. [ 724.313874][T16826] FAULT_INJECTION: forcing a failure. [ 724.313874][T16826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.328244][T16826] CPU: 0 PID: 16826 Comm: syz.3.3517 Not tainted syzkaller #0 [ 724.335753][T16826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 724.345832][T16826] Call Trace: [ 724.349119][T16826] [ 724.352164][T16826] dump_stack_lvl+0x18c/0x250 [ 724.356858][T16826] ? show_regs_print_info+0x20/0x20 [ 724.362063][T16826] ? load_image+0x420/0x420 [ 724.366577][T16826] ? __might_fault+0xaa/0x120 [ 724.371267][T16826] ? __lock_acquire+0x7d80/0x7d80 [ 724.376299][T16826] should_fail_ex+0x394/0x4c0 [ 724.380990][T16826] _copy_from_user+0x2f/0xe0 [ 724.385602][T16826] ____sys_sendmsg+0x329/0x980 [ 724.390549][T16826] ? __sys_sendmsg_sock+0x30/0x30 [ 724.395771][T16826] ? __import_iovec+0x3fa/0x850 [ 724.400666][T16826] ? import_iovec+0x73/0xa0 [ 724.405298][T16826] ___sys_sendmsg+0x2a6/0x360 [ 724.410417][T16826] ? get_pid_task+0x20/0x1e0 [ 724.415225][T16826] ? __sys_sendmsg+0x2b0/0x2b0 [ 724.420401][T16826] ? __lock_acquire+0x7d80/0x7d80 [ 724.425468][T16826] __se_sys_sendmsg+0x1d0/0x2c0 [ 724.430358][T16826] ? __x64_sys_sendmsg+0x80/0x80 [ 724.435398][T16826] ? lockdep_hardirqs_on+0x98/0x150 [ 724.440721][T16826] do_syscall_64+0x55/0xb0 [ 724.445267][T16826] ? clear_bhb_loop+0x40/0x90 [ 724.450047][T16826] ? clear_bhb_loop+0x40/0x90 [ 724.454728][T16826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 724.460658][T16826] RIP: 0033:0x7f391279e019 [ 724.465212][T16826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.485537][T16826] RSP: 002b:00007f39135ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 724.494564][T16826] RAX: ffffffffffffffda RBX: 00007f3912a25fa0 RCX: 00007f391279e019 [ 724.502802][T16826] RDX: 0000000000000001 RSI: 0000200000000b00 RDI: 0000000000000005 [ 724.510826][T16826] RBP: 00007f39135ee090 R08: 0000000000000000 R09: 0000000000000000 [ 724.519290][T16826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.527264][T16826] R13: 00007f3912a26038 R14: 00007f3912a25fa0 R15: 00007ffe153e3ee8 [ 724.535249][T16826] [ 724.603859][T16828] netlink: 'syz.0.3519': attribute type 1 has an invalid length. [ 724.627462][T16828] netlink: 'syz.0.3519': attribute type 3 has an invalid length. [ 724.651778][T16828] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3519'. [ 724.888211][T16841] FAULT_INJECTION: forcing a failure. [ 724.888211][T16841] name failslab, interval 1, probability 0, space 0, times 0 [ 724.922604][T16841] CPU: 1 PID: 16841 Comm: syz.0.3523 Not tainted syzkaller #0 [ 724.930244][T16841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 724.940970][T16841] Call Trace: [ 724.944759][T16841] [ 724.947830][T16841] dump_stack_lvl+0x18c/0x250 [ 724.952781][T16841] ? show_regs_print_info+0x20/0x20 [ 724.958467][T16841] ? load_image+0x420/0x420 [ 724.963260][T16841] ? __might_sleep+0xe0/0xe0 [ 724.967901][T16841] ? __lock_acquire+0x7d80/0x7d80 [ 724.973197][T16841] should_fail_ex+0x394/0x4c0 [ 724.978042][T16841] should_failslab+0x9/0x20 [ 724.982613][T16841] slab_pre_alloc_hook+0x59/0x300 [ 724.988409][T16841] ? rtnl_newlink+0x10d/0x2170 [ 724.993314][T16841] __kmem_cache_alloc_node+0x53/0x250 [ 724.999316][T16841] ? rtnl_newlink+0x10d/0x2170 [ 725.004144][T16841] kmalloc_trace+0x2a/0xe0 [ 725.008631][T16841] rtnl_newlink+0x10d/0x2170 [ 725.013365][T16841] ? verify_lock_unused+0x140/0x140 [ 725.018640][T16841] ? __mutex_trylock_common+0x160/0x270 [ 725.024247][T16841] ? rtnl_setlink+0x4e0/0x4e0 [ 725.029155][T16841] ? trace_raw_output_contention_end+0xd0/0xd0 [ 725.035388][T16841] ? rcu_is_watching+0x15/0xb0 [ 725.040250][T16841] ? trace_contention_end+0x39/0xe0 [ 725.045506][T16841] ? __mutex_lock+0x30d/0xc80 [ 725.050272][T16841] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 725.055460][T16841] ? mutex_lock_nested+0x20/0x20 [ 725.060531][T16841] ? rtnl_setlink+0x4e0/0x4e0 [ 725.065272][T16841] rtnetlink_rcv_msg+0x843/0xf90 [ 725.070637][T16841] ? rtnetlink_rcv_msg+0x220/0xf90 [ 725.075834][T16841] ? rtnetlink_bind+0x80/0x80 [ 725.080745][T16841] ? perf_trace_preemptirq_template+0xac/0x330 [ 725.087407][T16841] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 725.093465][T16841] ? lock_chain_count+0x20/0x20 [ 725.098646][T16841] ? __local_bh_enable_ip+0x13a/0x1c0 [ 725.104091][T16841] ? lockdep_hardirqs_on+0x98/0x150 [ 725.109359][T16841] ? __local_bh_enable_ip+0x13a/0x1c0 [ 725.114816][T16841] ? _local_bh_enable+0xa0/0xa0 [ 725.119839][T16841] ? __dev_queue_xmit+0x275/0x3630 [ 725.125123][T16841] ? __dev_queue_xmit+0x1bc2/0x3630 [ 725.130505][T16841] ? __dev_queue_xmit+0x275/0x3630 [ 725.135742][T16841] ? ref_tracker_free+0x686/0x830 [ 725.140860][T16841] netlink_rcv_skb+0x235/0x4c0 [ 725.145687][T16841] ? rtnetlink_bind+0x80/0x80 [ 725.150691][T16841] ? netlink_ack+0x1160/0x1160 [ 725.156075][T16841] ? __lock_acquire+0x7d80/0x7d80 [ 725.161266][T16841] ? netlink_deliver_tap+0x2e/0x1b0 [ 725.166652][T16841] netlink_unicast+0x7b1/0x930 [ 725.171582][T16841] netlink_sendmsg+0x8d0/0xbf0 [ 725.176475][T16841] ? netlink_getsockopt+0x590/0x590 [ 725.182359][T16841] ? apparmor_socket_sendmsg+0x8e/0x330 [ 725.187971][T16841] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 725.193306][T16841] ? security_socket_sendmsg+0x80/0xa0 [ 725.198814][T16841] ? netlink_getsockopt+0x590/0x590 [ 725.204081][T16841] ____sys_sendmsg+0x61b/0x980 [ 725.208921][T16841] ? __asan_memset+0x22/0x40 [ 725.213652][T16841] ? __sys_sendmsg_sock+0x30/0x30 [ 725.218888][T16841] ? __import_iovec+0x5f2/0x850 [ 725.223864][T16841] ? import_iovec+0x73/0xa0 [ 725.228568][T16841] ___sys_sendmsg+0x2a6/0x360 [ 725.233501][T16841] ? get_pid_task+0x20/0x1e0 [ 725.238436][T16841] ? __sys_sendmsg+0x2b0/0x2b0 [ 725.243331][T16841] ? __lock_acquire+0x7d80/0x7d80 [ 725.248495][T16841] __se_sys_sendmsg+0x1d0/0x2c0 [ 725.253509][T16841] ? __x64_sys_sendmsg+0x80/0x80 [ 725.259444][T16841] ? lockdep_hardirqs_on+0x98/0x150 [ 725.264715][T16841] do_syscall_64+0x55/0xb0 [ 725.269273][T16841] ? clear_bhb_loop+0x40/0x90 [ 725.274083][T16841] ? clear_bhb_loop+0x40/0x90 [ 725.279001][T16841] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 725.284949][T16841] RIP: 0033:0x7f198679e019 [ 725.289511][T16841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.309346][T16841] RSP: 002b:00007f198758b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.317868][T16841] RAX: ffffffffffffffda RBX: 00007f1986a25fa0 RCX: 00007f198679e019 [ 725.325982][T16841] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 725.334187][T16841] RBP: 00007f198758b090 R08: 0000000000000000 R09: 0000000000000000 [ 725.342312][T16841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.350615][T16841] R13: 00007f1986a26038 R14: 00007f1986a25fa0 R15: 00007fffb1346608 [ 725.358693][T16841] [ 726.401340][T16853] netlink: 'syz.2.3528': attribute type 10 has an invalid length. [ 726.727030][T16864] netlink: 'syz.2.3531': attribute type 1 has an invalid length. [ 726.752615][T16864] netlink: 'syz.2.3531': attribute type 3 has an invalid length. [ 726.785391][T16864] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3531'. [ 727.273485][T16874] netlink: 'syz.2.3534': attribute type 10 has an invalid length. [ 727.298137][T16879] netlink: 'syz.3.3535': attribute type 27 has an invalid length. [ 727.306049][T16879] netlink: 'syz.3.3535': attribute type 28 has an invalid length. [ 727.318484][T16879] netlink: 'syz.3.3535': attribute type 29 has an invalid length. [ 727.326405][T16879] netlink: 'syz.3.3535': attribute type 30 has an invalid length. [ 727.335474][T16879] netlink: 'syz.3.3535': attribute type 31 has an invalid length. [ 727.344033][T16879] netlink: 'syz.3.3535': attribute type 32 has an invalid length. [ 728.950498][T16900] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3542'. [ 729.174530][T16910] tap0: tun_chr_ioctl cmd 2147767507 [ 729.318538][T16908] tap0: tun_chr_ioctl cmd 2147767507 [ 729.659114][T16912] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3554'. [ 729.863667][T16909] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3544'. [ 729.906404][T16909] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3544'. [ 730.025873][T16908] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3544'. [ 730.102976][T16910] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3544'. [ 730.708831][T16945] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3557'. [ 730.928634][T16957] tap0: tun_chr_ioctl cmd 2147767507 [ 730.937189][T16957] tap0: tun_chr_ioctl cmd 2147767507 [ 731.668438][T16975] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3561'. [ 731.677937][T16975] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3561'. [ 731.703938][T16977] validate_nla: 62 callbacks suppressed [ 731.703956][T16977] netlink: 'syz.3.3569': attribute type 1 has an invalid length. [ 731.718527][T16977] netlink: 'syz.3.3569': attribute type 3 has an invalid length. [ 731.842536][T16984] netlink: 'syz.2.3572': attribute type 33 has an invalid length. [ 731.858136][T16984] __nla_validate_parse: 3 callbacks suppressed [ 731.858154][T16984] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3572'. [ 732.030123][T16994] netlink: 'syz.0.3581': attribute type 1 has an invalid length. [ 732.059808][T16994] netlink: 'syz.0.3581': attribute type 3 has an invalid length. [ 732.108261][T16994] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3581'. [ 732.343350][T17003] netlink: 'syz.3.3577': attribute type 10 has an invalid length. [ 733.935511][T17023] tap0: tun_chr_ioctl cmd 2147767507 [ 733.995047][T17024] tap0: tun_chr_ioctl cmd 2147767507 [ 735.225512][T17019] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3583'. [ 735.262621][T17019] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3583'. [ 735.316879][T17021] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3583'. [ 735.338342][T17023] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3583'. [ 735.525800][T17047] netlink: 'syz.0.3590': attribute type 10 has an invalid length. [ 735.549729][T17044] netlink: 'syz.1.3588': attribute type 1 has an invalid length. [ 735.565335][T17044] netlink: 'syz.1.3588': attribute type 3 has an invalid length. [ 735.574346][T17044] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3588'. [ 735.679183][T17052] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3593'. [ 735.741112][T17058] netlink: 'syz.0.3594': attribute type 10 has an invalid length. [ 737.044347][T17082] netlink: 'syz.2.3603': attribute type 10 has an invalid length. [ 737.151014][T17083] netlink: 'syz.0.3604': attribute type 1 has an invalid length. [ 737.191924][T17083] netlink: 'syz.0.3604': attribute type 3 has an invalid length. [ 737.239886][T17083] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3604'. [ 738.836803][T17113] netlink: 'syz.1.3614': attribute type 10 has an invalid length. [ 738.964496][T17118] netlink: 'syz.2.3616': attribute type 10 has an invalid length. [ 739.149400][T17120] netlink: 'syz.2.3617': attribute type 1 has an invalid length. [ 739.157416][T17120] netlink: 'syz.2.3617': attribute type 3 has an invalid length. [ 739.165983][T17120] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3617'. [ 739.742077][T17141] netlink: 'syz.2.3626': attribute type 1 has an invalid length. [ 739.778197][T17141] netlink: 'syz.2.3626': attribute type 3 has an invalid length. [ 739.801352][T17141] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3626'. [ 739.937486][T17148] netlink: 'syz.1.3627': attribute type 10 has an invalid length. [ 740.430591][T17152] FAULT_INJECTION: forcing a failure. [ 740.430591][T17152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.510734][T17152] CPU: 0 PID: 17152 Comm: syz.1.3630 Not tainted syzkaller #0 [ 740.518506][T17152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 740.528616][T17152] Call Trace: [ 740.531945][T17152] [ 740.534925][T17152] dump_stack_lvl+0x18c/0x250 [ 740.539675][T17152] ? show_regs_print_info+0x20/0x20 [ 740.544931][T17152] ? load_image+0x420/0x420 [ 740.549511][T17152] ? __lock_acquire+0x7d80/0x7d80 [ 740.554598][T17152] ? snprintf+0xe9/0x140 [ 740.558912][T17152] should_fail_ex+0x394/0x4c0 [ 740.563756][T17152] _copy_to_user+0x2f/0xa0 [ 740.568412][T17152] simple_read_from_buffer+0xe7/0x150 [ 740.573950][T17152] proc_fail_nth_read+0x1e8/0x260 [ 740.579080][T17152] ? proc_fault_inject_write+0x360/0x360 [ 740.584822][T17152] ? fsnotify_perm+0x271/0x5e0 [ 740.589645][T17152] ? proc_fault_inject_write+0x360/0x360 [ 740.595342][T17152] vfs_read+0x298/0x990 [ 740.599858][T17152] ? kernel_read+0x1e0/0x1e0 [ 740.604541][T17152] ? __fget_files+0x28/0x460 [ 740.609195][T17152] ? __fget_files+0x3fc/0x460 [ 740.614060][T17152] ? __fdget_pos+0x2a3/0x330 [ 740.618834][T17152] ? ksys_read+0x74/0x260 [ 740.623364][T17152] ksys_read+0x151/0x260 [ 740.627715][T17152] ? vfs_write+0x9a0/0x9a0 [ 740.632319][T17152] ? lockdep_hardirqs_on+0x98/0x150 [ 740.637869][T17152] do_syscall_64+0x55/0xb0 [ 740.642392][T17152] ? clear_bhb_loop+0x40/0x90 [ 740.647136][T17152] ? clear_bhb_loop+0x40/0x90 [ 740.652238][T17152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 740.658410][T17152] RIP: 0033:0x7fc2e6b5e84e [ 740.663084][T17152] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 740.682750][T17152] RSP: 002b:00007fc2e7a68fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 740.691234][T17152] RAX: ffffffffffffffda RBX: 00007fc2e7a696c0 RCX: 00007fc2e6b5e84e [ 740.699833][T17152] RDX: 000000000000000f RSI: 00007fc2e7a690a0 RDI: 0000000000000003 [ 740.707868][T17152] RBP: 00007fc2e7a69090 R08: 0000000000000000 R09: 0000000000000000 [ 740.715905][T17152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.724106][T17152] R13: 00007fc2e6e26038 R14: 00007fc2e6e25fa0 R15: 00007ffc6f8f83a8 [ 740.732183][T17152] [ 741.154361][T17159] FAULT_INJECTION: forcing a failure. [ 741.154361][T17159] name failslab, interval 1, probability 0, space 0, times 0 [ 741.212720][T17156] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3631'. [ 741.238358][T17159] CPU: 1 PID: 17159 Comm: syz.3.3632 Not tainted syzkaller #0 [ 741.246072][T17159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 741.256230][T17159] Call Trace: [ 741.259585][T17159] [ 741.262593][T17159] dump_stack_lvl+0x18c/0x250 [ 741.267382][T17159] ? show_regs_print_info+0x20/0x20 [ 741.274174][T17159] ? load_image+0x420/0x420 [ 741.278975][T17159] ? __might_sleep+0xe0/0xe0 [ 741.283774][T17159] ? __lock_acquire+0x7d80/0x7d80 [ 741.289109][T17159] should_fail_ex+0x394/0x4c0 [ 741.294027][T17159] should_failslab+0x9/0x20 [ 741.299007][T17159] slab_pre_alloc_hook+0x59/0x300 [ 741.304135][T17159] ? trace_call_bpf+0x5e9/0x6c0 [ 741.309088][T17159] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 741.314915][T17159] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 741.320831][T17159] __kmem_cache_alloc_node+0x53/0x250 [ 741.326533][T17159] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 741.332402][T17159] __kmalloc+0xa7/0x240 [ 741.336702][T17159] tomoyo_realpath_from_path+0xe6/0x5c0 [ 741.342830][T17159] ? tomoyo_domain+0xd6/0x120 [ 741.348210][T17159] tomoyo_path_number_perm+0x248/0x5e0 [ 741.353842][T17159] ? tomoyo_path_number_perm+0x217/0x5e0 [ 741.360031][T17159] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 741.365964][T17159] ? trace_call_bpf+0xc3/0x6c0 [ 741.370910][T17159] ? trace_call_bpf+0xc3/0x6c0 [ 741.375809][T17159] ? trace_call_bpf+0x5e9/0x6c0 [ 741.381439][T17159] ? __fget_files+0x28/0x460 [ 741.386381][T17159] security_file_ioctl+0x70/0xa0 [ 741.391517][T17159] __se_sys_ioctl+0x48/0x170 [ 741.396263][T17159] do_syscall_64+0x55/0xb0 [ 741.400770][T17159] ? clear_bhb_loop+0x40/0x90 [ 741.405531][T17159] ? clear_bhb_loop+0x40/0x90 [ 741.410406][T17159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 741.416475][T17159] RIP: 0033:0x7f391279e019 [ 741.420972][T17159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.441110][T17159] RSP: 002b:00007f39135ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 741.449875][T17159] RAX: ffffffffffffffda RBX: 00007f3912a25fa0 RCX: 00007f391279e019 [ 741.458021][T17159] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000005 [ 741.466273][T17159] RBP: 00007f39135ee090 R08: 0000000000000000 R09: 0000000000000000 [ 741.474502][T17159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.482702][T17159] R13: 00007f3912a26038 R14: 00007f3912a25fa0 R15: 00007ffe153e3ee8 [ 741.490947][T17159] [ 741.562836][T17159] ERROR: Out of memory at tomoyo_realpath_from_path. [ 742.044865][T17175] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3637'. [ 742.082610][T17181] validate_nla: 4 callbacks suppressed [ 742.082804][T17181] netlink: 'syz.0.3638': attribute type 10 has an invalid length. [ 743.157197][T17197] netlink: 'syz.2.3645': attribute type 7 has an invalid length. [ 743.171531][T17197] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3645'. [ 743.352646][T17205] netlink: 14566 bytes leftover after parsing attributes in process `syz.0.3649'. [ 743.380683][T17205] netlink: 'syz.0.3649': attribute type 10 has an invalid length. [ 743.423928][T17203] netlink: 'syz.3.3648': attribute type 1 has an invalid length. [ 743.439525][T17203] netlink: 'syz.3.3648': attribute type 3 has an invalid length. [ 743.447413][T17203] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3648'. [ 743.586905][T17216] netlink: 'syz.3.3653': attribute type 10 has an invalid length. [ 743.866535][T12124] tipc: Subscription rejected, illegal request [ 743.924180][T17233] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3656'. [ 743.938487][T17233] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 744.970302][T17240] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.3659'. [ 745.185699][T17245] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.3660'. [ 745.372876][T17247] netlink: 'syz.2.3661': attribute type 1 has an invalid length. [ 745.402169][T17247] netlink: 'syz.2.3661': attribute type 3 has an invalid length. [ 745.438339][T17247] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3661'. [ 745.555810][T17252] netlink: 14566 bytes leftover after parsing attributes in process `syz.3.3662'. [ 745.586721][T17252] netlink: 'syz.3.3662': attribute type 10 has an invalid length. [ 745.690699][T17257] netlink: 'syz.0.3664': attribute type 10 has an invalid length. [ 745.780750][T12964] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 745.986675][T17269] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3669'. [ 746.502884][T17275] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3671'. [ 746.966194][T17287] FAULT_INJECTION: forcing a failure. [ 746.966194][T17287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.994296][T17287] CPU: 0 PID: 17287 Comm: syz.1.3674 Not tainted syzkaller #0 [ 747.001828][T17287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 747.011996][T17287] Call Trace: [ 747.015319][T17287] [ 747.018550][T17287] dump_stack_lvl+0x18c/0x250 [ 747.023364][T17287] ? show_regs_print_info+0x20/0x20 [ 747.028570][T17287] ? load_image+0x420/0x420 [ 747.033258][T17287] ? __might_fault+0xaa/0x120 [ 747.037955][T17287] ? __lock_acquire+0x7d80/0x7d80 [ 747.043104][T17287] should_fail_ex+0x394/0x4c0 [ 747.047862][T17287] _copy_from_iter+0x1cd/0x1290 [ 747.053184][T17287] ? rcu_is_watching+0x15/0xb0 [ 747.058135][T17287] ? copyout_mc+0x70/0x70 [ 747.062645][T17287] ? __virt_addr_valid+0x10c/0x380 [ 747.067853][T17287] ? __virt_addr_valid+0x10c/0x380 [ 747.073114][T17287] ? __virt_addr_valid+0x10c/0x380 [ 747.078696][T17287] ? __check_object_size+0x4fc/0xa40 [ 747.084026][T17287] kcm_sendmsg+0xddc/0x27b0 [ 747.089207][T17287] ? kcm_getsockopt+0x280/0x280 [ 747.094181][T17287] ? apparmor_socket_sendmsg+0x8e/0x330 [ 747.099825][T17287] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 747.105157][T17287] ? security_socket_sendmsg+0x80/0xa0 [ 747.110620][T17287] ? kcm_getsockopt+0x280/0x280 [ 747.115601][T17287] ____sys_sendmsg+0x61b/0x980 [ 747.121112][T17287] ? __asan_memset+0x22/0x40 [ 747.125827][T17287] ? __sys_sendmsg_sock+0x30/0x30 [ 747.130896][T17287] ? __import_iovec+0x5f2/0x850 [ 747.136102][T17287] ? import_iovec+0x73/0xa0 [ 747.140640][T17287] ___sys_sendmsg+0x2a6/0x360 [ 747.145447][T17287] ? get_pid_task+0x20/0x1e0 [ 747.150069][T17287] ? __sys_sendmsg+0x2b0/0x2b0 [ 747.155021][T17287] ? __lock_acquire+0x7d80/0x7d80 [ 747.160293][T17287] __se_sys_sendmsg+0x1d0/0x2c0 [ 747.165362][T17287] ? __x64_sys_sendmsg+0x80/0x80 [ 747.170419][T17287] ? lockdep_hardirqs_on+0x98/0x150 [ 747.175747][T17287] do_syscall_64+0x55/0xb0 [ 747.180225][T17287] ? clear_bhb_loop+0x40/0x90 [ 747.185413][T17287] ? clear_bhb_loop+0x40/0x90 [ 747.190200][T17287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 747.196632][T17287] RIP: 0033:0x7fc2e6b9e019 [ 747.201054][T17287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.221064][T17287] RSP: 002b:00007fc2e7a48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 747.229574][T17287] RAX: ffffffffffffffda RBX: 00007fc2e6e26090 RCX: 00007fc2e6b9e019 [ 747.237919][T17287] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 747.246099][T17287] RBP: 00007fc2e7a48090 R08: 0000000000000000 R09: 0000000000000000 [ 747.254171][T17287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 747.262267][T17287] R13: 00007fc2e6e26128 R14: 00007fc2e6e26090 R15: 00007ffc6f8f83a8 [ 747.270358][T17287] [ 747.423464][T17289] bond0: (slave bond_slave_0): Releasing backup interface [ 747.549146][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.555548][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.565873][T17288] sctp: [Deprecated]: syz.3.3675 (pid 17288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 747.565873][T17288] Use struct sctp_sack_info instead [ 747.607174][T17289] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 748.182662][T17300] validate_nla: 6 callbacks suppressed [ 748.182754][T17300] netlink: 'syz.1.3677': attribute type 10 has an invalid length. [ 748.667622][T17304] netlink: 'syz.1.3681': attribute type 10 has an invalid length. [ 749.591613][T17315] netlink: 'syz.2.3682': attribute type 1 has an invalid length. [ 749.608107][T17315] netlink: 'syz.2.3682': attribute type 3 has an invalid length. [ 749.641718][T17315] __nla_validate_parse: 5 callbacks suppressed [ 749.641735][T17315] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3682'. [ 749.741999][T17320] netlink: 'syz.1.3684': attribute type 21 has an invalid length. [ 749.757274][T17320] netlink: 14542 bytes leftover after parsing attributes in process `syz.1.3684'. [ 749.786035][T17320] netlink: 'syz.1.3684': attribute type 10 has an invalid length. [ 749.855726][T17324] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.3685'. [ 749.933127][T17324] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3685'. [ 750.285557][T17331] syzkaller0: entered promiscuous mode [ 750.302126][T17331] syzkaller0: entered allmulticast mode [ 751.040344][T17348] netlink: 'syz.1.3693': attribute type 1 has an invalid length. [ 751.075697][T17348] netlink: 'syz.1.3693': attribute type 3 has an invalid length. [ 751.094165][T17348] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3693'. [ 751.185349][T17354] netlink: 'syz.0.3694': attribute type 10 has an invalid length. [ 751.305258][T17358] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.3696'. [ 751.351298][T17358] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3696'. [ 751.923531][T17379] netlink: 'syz.2.3703': attribute type 1 has an invalid length. [ 751.954032][T17379] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3703'. [ 753.338520][T17399] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.3710'. [ 753.445247][T17399] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3710'. [ 753.598155][T17402] tap0: tun_chr_ioctl cmd 2147767507 [ 753.613898][T17403] validate_nla: 1 callbacks suppressed [ 753.613915][T17403] netlink: 'syz.2.3709': attribute type 39 has an invalid length. [ 753.762544][T17406] bond0: (slave bond_slave_0): Releasing backup interface [ 753.820222][T17408] sctp: [Deprecated]: syz.0.3711 (pid 17408) Use of struct sctp_assoc_value in delayed_ack socket option. [ 753.820222][T17408] Use struct sctp_sack_info instead [ 753.923245][T17406] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 754.197932][T17414] netlink: 'syz.3.3713': attribute type 10 has an invalid length. [ 754.310592][T17418] netlink: 'syz.0.3714': attribute type 1 has an invalid length. [ 754.324642][T17418] netlink: 'syz.0.3714': attribute type 3 has an invalid length. [ 754.947155][T17434] __nla_validate_parse: 7 callbacks suppressed [ 754.947174][T17434] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3719'. [ 755.310073][T17442] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3723'. [ 755.709965][T17448] netlink: 'syz.1.3725': attribute type 1 has an invalid length. [ 755.760289][T17448] netlink: 'syz.1.3725': attribute type 3 has an invalid length. [ 755.854999][T17448] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3725'. [ 756.936688][T17468] netlink: 'syz.3.3731': attribute type 10 has an invalid length. [ 757.492562][T17479] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.3735'. [ 757.525986][T17479] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3735'. [ 757.682469][T17484] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.3737'. [ 757.746741][T17484] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3737'. [ 757.810058][T17486] tap0: tun_chr_ioctl cmd 2147767507 [ 757.833048][T17486] netlink: 'syz.2.3738': attribute type 39 has an invalid length. [ 757.985604][T17491] tap0: tun_chr_ioctl cmd 2147767507 [ 758.006651][T17488] netlink: 'syz.3.3739': attribute type 39 has an invalid length. [ 759.134820][T17494] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3738'. [ 759.158144][T17494] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3738'. [ 759.193338][T17498] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.3741'. [ 760.063376][T17525] tap0: tun_chr_ioctl cmd 2147767507 [ 760.072082][T17525] netlink: 'syz.3.3751': attribute type 39 has an invalid length. [ 760.467830][T17530] netlink: 'syz.0.3753': attribute type 10 has an invalid length. [ 761.373151][T17532] __nla_validate_parse: 9 callbacks suppressed [ 761.373169][T17532] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3751'. [ 761.393638][T17532] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3751'. [ 761.404950][T17525] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3751'. [ 761.423682][T17532] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3751'. [ 761.572974][T17539] netlink: 'syz.2.3755': attribute type 10 has an invalid length. [ 761.876645][T17551] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.3760'. [ 761.921942][T17551] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3760'. [ 762.007320][T17555] netlink: 'syz.1.3762': attribute type 21 has an invalid length. [ 762.015627][T17555] netlink: 14542 bytes leftover after parsing attributes in process `syz.1.3762'. [ 762.043594][T17555] netlink: 'syz.1.3762': attribute type 10 has an invalid length. [ 762.171865][T17563] netlink: 'syz.3.3765': attribute type 39 has an invalid length. [ 762.521455][T17568] netlink: 'syz.2.3767': attribute type 10 has an invalid length. [ 762.771742][T17563] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3765'. [ 762.815190][T17563] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3765'. [ 762.839437][T17572] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3765'. [ 764.125374][T17595] netlink: 'syz.2.3773': attribute type 21 has an invalid length. [ 764.222659][T17595] netlink: 'syz.2.3773': attribute type 10 has an invalid length. [ 765.438881][T17611] netlink: 'syz.2.3779': attribute type 39 has an invalid length. [ 765.652568][T17615] netlink: 'syz.3.3782': attribute type 10 has an invalid length. [ 766.052786][T17624] netlink: 'syz.3.3785': attribute type 21 has an invalid length. [ 766.107512][T17624] netlink: 'syz.3.3785': attribute type 10 has an invalid length. [ 766.426315][T17627] __nla_validate_parse: 7 callbacks suppressed [ 766.426334][T17627] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3779'. [ 766.488527][T17627] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3779'. [ 766.514661][T17611] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3779'. [ 766.542104][T17635] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3779'. [ 766.707337][T17639] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.3797'. [ 766.727342][T17643] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.3790'. [ 766.767484][T17639] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3797'. [ 766.800859][T17643] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3790'. [ 767.461766][T17654] netlink: 'syz.1.3793': attribute type 10 has an invalid length. [ 767.777059][T17661] netlink: 'syz.2.3794': attribute type 21 has an invalid length. [ 767.785533][T17661] netlink: 14542 bytes leftover after parsing attributes in process `syz.2.3794'. [ 767.902708][T17661] netlink: 'syz.2.3794': attribute type 10 has an invalid length. [ 768.219132][T17671] netlink: 'syz.2.3798': attribute type 39 has an invalid length. [ 768.606055][T17677] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3798'. [ 768.712332][T17676] tap0: tun_chr_ioctl cmd 2147767507 [ 769.935342][T17679] netlink: 'syz.0.3799': attribute type 39 has an invalid length. [ 771.553821][T17703] netlink: 'syz.0.3805': attribute type 10 has an invalid length. [ 772.805269][T17710] netlink: 'syz.2.3806': attribute type 21 has an invalid length. [ 772.814554][T17710] __nla_validate_parse: 9 callbacks suppressed [ 772.814564][T17710] netlink: 14542 bytes leftover after parsing attributes in process `syz.2.3806'. [ 772.835110][T17714] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3807'. [ 772.853569][T17710] netlink: 'syz.2.3806': attribute type 10 has an invalid length. [ 772.966074][T17720] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.3810'. [ 772.988820][T17720] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3810'. [ 773.139562][T17723] netlink: 'syz.1.3811': attribute type 39 has an invalid length. [ 773.165290][T17725] netlink: 'syz.2.3812': attribute type 39 has an invalid length. [ 774.461413][T17728] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.3813'. [ 774.854033][T17728] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3813'. [ 774.939011][T17730] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3811'. [ 774.977125][T17730] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3811'. [ 775.079650][T17723] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3811'. [ 775.169654][T17735] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3811'. [ 775.758782][T17741] netlink: 'syz.2.3815': attribute type 10 has an invalid length. [ 775.829430][T17743] netlink: 'syz.1.3817': attribute type 10 has an invalid length. [ 776.220770][T17745] netlink: 'syz.3.3818': attribute type 10 has an invalid length. [ 778.048605][T17762] netlink: 'syz.1.3823': attribute type 39 has an invalid length. [ 778.484384][T17773] __nla_validate_parse: 6 callbacks suppressed [ 778.484404][T17773] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3823'. [ 778.523259][T17773] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3823'. [ 778.560861][T17762] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3823'. [ 778.646894][T17774] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3823'. [ 779.222513][T17779] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.3825'. [ 779.271182][T17777] netlink: 'syz.0.3834': attribute type 39 has an invalid length. [ 779.530120][T17779] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3825'. [ 779.756046][T17780] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3834'. [ 779.925006][T17780] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3834'. [ 779.968923][T17777] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3834'. [ 780.009154][T17786] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3834'. [ 780.086709][T17789] netlink: 'syz.3.3827': attribute type 10 has an invalid length. [ 780.185863][T17794] netlink: 'syz.0.3829': attribute type 10 has an invalid length. [ 780.235187][T17795] netlink: 'syz.1.3828': attribute type 10 has an invalid length. [ 780.321943][T17799] netlink: 'syz.3.3831': attribute type 10 has an invalid length. [ 781.085961][T17816] netlink: 'syz.0.3839': attribute type 39 has an invalid length. [ 781.496664][T17820] netlink: 'syz.3.3841': attribute type 10 has an invalid length. [ 781.976856][T17824] netlink: 'syz.3.3842': attribute type 10 has an invalid length. [ 782.182380][T17831] netlink: 'syz.3.3845': attribute type 10 has an invalid length. [ 783.396924][T17855] validate_nla: 3 callbacks suppressed [ 783.396945][T17855] netlink: 'syz.3.3853': attribute type 10 has an invalid length. [ 783.423796][T17855] netlink: 'syz.3.3853': attribute type 10 has an invalid length. [ 783.481723][T17862] netlink: 'syz.3.3855': attribute type 39 has an invalid length. [ 783.614304][T17864] __nla_validate_parse: 12 callbacks suppressed [ 783.614375][T17864] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.3856'. [ 783.687532][T17864] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3856'. [ 784.250272][T17874] FAULT_INJECTION: forcing a failure. [ 784.250272][T17874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.288150][T17874] CPU: 1 PID: 17874 Comm: syz.1.3859 Not tainted syzkaller #0 [ 784.295695][T17874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 784.305870][T17874] Call Trace: [ 784.309227][T17874] [ 784.312287][T17874] dump_stack_lvl+0x18c/0x250 [ 784.317213][T17874] ? show_regs_print_info+0x20/0x20 [ 784.322459][T17874] ? load_image+0x420/0x420 [ 784.327010][T17874] ? __might_fault+0xaa/0x120 [ 784.331757][T17874] ? __lock_acquire+0x7d80/0x7d80 [ 784.336827][T17874] should_fail_ex+0x394/0x4c0 [ 784.341560][T17874] _copy_from_user+0x2f/0xe0 [ 784.346209][T17874] __sys_bpf+0x23e/0x890 [ 784.350489][T17874] ? bpf_link_show_fdinfo+0x390/0x390 [ 784.355830][T17876] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3855'. [ 784.355882][T17874] ? lock_chain_count+0x20/0x20 [ 784.365492][T17876] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3855'. [ 784.370030][T17874] __x64_sys_bpf+0x7c/0x90 [ 784.370069][T17874] do_syscall_64+0x55/0xb0 [ 784.370089][T17874] ? clear_bhb_loop+0x40/0x90 [ 784.370109][T17874] ? clear_bhb_loop+0x40/0x90 [ 784.370127][T17874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 784.403651][T17874] RIP: 0033:0x7fc2e6b9e019 [ 784.406018][T17876] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3855'. [ 784.408076][T17874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.408095][T17874] RSP: 002b:00007fc2e7a69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 784.408114][T17874] RAX: ffffffffffffffda RBX: 00007fc2e6e25fa0 RCX: 00007fc2e6b9e019 [ 784.408126][T17874] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 784.408137][T17874] RBP: 00007fc2e7a69090 R08: 0000000000000000 R09: 0000000000000000 [ 784.408147][T17874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.408157][T17874] R13: 00007fc2e6e26038 R14: 00007fc2e6e25fa0 R15: 00007ffc6f8f83a8 [ 784.466934][T17862] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3855'. [ 784.469906][T17874] [ 784.768380][T17885] netlink: 'syz.1.3862': attribute type 10 has an invalid length. [ 785.071301][T17890] netlink: 'syz.3.3863': attribute type 10 has an invalid length. [ 785.084356][T17890] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3863'. [ 785.115569][T17890] netlink: 'syz.3.3863': attribute type 10 has an invalid length. [ 785.323994][T17899] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.3867'. [ 785.350605][T17899] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3867'. [ 785.715262][T17897] syzkaller0: entered promiscuous mode [ 785.721377][T17897] syzkaller0: entered allmulticast mode [ 786.227020][T17916] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3871'. [ 788.775784][T17905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 788.798184][T17911] netlink: 'syz.1.3871': attribute type 39 has an invalid length. [ 788.806990][T17916] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3871'. [ 788.818613][T17920] netlink: 'syz.3.3873': attribute type 10 has an invalid length. [ 788.831653][T17920] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3873'. [ 788.858611][T17921] netlink: 'syz.3.3873': attribute type 10 has an invalid length. [ 788.967466][T17929] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.3877'. [ 788.985382][T17929] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3877'. [ 789.003209][T17927] FAULT_INJECTION: forcing a failure. [ 789.003209][T17927] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 789.025665][T17927] CPU: 1 PID: 17927 Comm: syz.1.3875 Not tainted syzkaller #0 [ 789.033322][T17927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 789.043592][T17927] Call Trace: [ 789.047022][T17927] [ 789.049986][T17927] dump_stack_lvl+0x18c/0x250 [ 789.054717][T17927] ? show_regs_print_info+0x20/0x20 [ 789.060306][T17927] ? load_image+0x420/0x420 [ 789.064949][T17927] ? __lock_acquire+0x7d80/0x7d80 [ 789.070118][T17927] ? mark_lock+0x94/0x320 [ 789.074827][T17927] should_fail_ex+0x394/0x4c0 [ 789.079556][T17927] prepare_alloc_pages+0x1e1/0x5b0 [ 789.084724][T17927] __alloc_pages+0x134/0x460 [ 789.089364][T17927] ? zone_statistics+0x170/0x170 [ 789.094345][T17927] ? do_wp_page+0x733/0x34d0 [ 789.098949][T17927] ? do_wp_page+0xf17/0x34d0 [ 789.103559][T17927] ? __lock_acquire+0x7d80/0x7d80 [ 789.108604][T17927] __folio_alloc+0x10/0x20 [ 789.113166][T17927] vma_alloc_folio+0x474/0x8f0 [ 789.117986][T17927] do_wp_page+0x118d/0x34d0 [ 789.122514][T17927] ? folio_put+0xd0/0xd0 [ 789.126869][T17927] ? do_raw_spin_lock+0x11f/0x2b0 [ 789.131948][T17927] ? __rwlock_init+0x150/0x150 [ 789.136746][T17927] handle_mm_fault+0x1306/0x4a50 [ 789.141692][T17927] ? handle_mm_fault+0xe6/0x4a50 [ 789.146649][T17927] ? numa_migrate_prep+0x350/0x350 [ 789.151887][T17927] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 789.157262][T17927] do_user_addr_fault+0x736/0x12d0 [ 789.162521][T17927] exc_page_fault+0x64/0x100 [ 789.168105][T17927] asm_exc_page_fault+0x26/0x30 [ 789.173060][T17927] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 789.178881][T17927] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 789.199802][T17927] RSP: 0018:ffffc90002ef76f0 EFLAGS: 00050206 [ 789.205880][T17927] RAX: ffffffff842fb501 RBX: 00000000000101d0 RCX: 000000000000c5d0 [ 789.213941][T17927] RDX: 0000000000000000 RSI: ffff888077743ce8 RDI: 0000200000004000 [ 789.221933][T17927] RBP: ffffc90002ef7870 R08: ffff8880777502b7 R09: 1ffff1100eeea056 [ 789.229919][T17927] R10: dffffc0000000000 R11: ffffed100eeea057 R12: 00002000000105d0 [ 789.238077][T17927] R13: ffffc90002ef7e40 R14: 0000200000000400 R15: ffff8880777400e8 [ 789.246176][T17927] ? copyout+0x1/0x90 [ 789.250548][T17927] copyout+0x70/0x90 [ 789.254510][T17927] _copy_to_iter+0x42b/0x1110 [ 789.259219][T17927] ? iov_iter_init+0x1e0/0x1e0 [ 789.263986][T17927] ? __virt_addr_valid+0x10c/0x380 [ 789.269106][T17927] ? __virt_addr_valid+0x10c/0x380 [ 789.274269][T17927] ? __check_object_size+0x4fc/0xa40 [ 789.279773][T17927] __skb_datagram_iter+0xdb/0x780 [ 789.284908][T17927] ? skb_copy_datagram_iter+0x200/0x200 [ 789.290487][T17927] skb_copy_datagram_iter+0xb1/0x200 [ 789.295782][T17927] tipc_recvstream+0x6f6/0xe70 [ 789.300853][T17927] ? tipc_sendstream+0x70/0x70 [ 789.305645][T17927] ____sys_recvmsg+0x2bd/0x5d0 [ 789.310956][T17927] ? __sys_recvmsg_sock+0x50/0x50 [ 789.316086][T17927] ? import_iovec+0x73/0xa0 [ 789.320690][T17927] ___sys_recvmsg+0x214/0x590 [ 789.325645][T17927] ? __sys_recvmsg+0x2a0/0x2a0 [ 789.330422][T17927] ? ksys_write+0x1d2/0x260 [ 789.334974][T17927] ? __fget_files+0x3fc/0x460 [ 789.339695][T17927] __x64_sys_recvmsg+0x21e/0x2f0 [ 789.345204][T17927] ? ___sys_recvmsg+0x590/0x590 [ 789.350722][T17927] ? lockdep_hardirqs_on+0x98/0x150 [ 789.355954][T17927] do_syscall_64+0x55/0xb0 [ 789.360658][T17927] ? clear_bhb_loop+0x40/0x90 [ 789.365621][T17927] ? clear_bhb_loop+0x40/0x90 [ 789.370319][T17927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 789.376221][T17927] RIP: 0033:0x7fc2e6b9e019 [ 789.381192][T17927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.400809][T17927] RSP: 002b:00007fc2e7a69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 789.409583][T17927] RAX: ffffffffffffffda RBX: 00007fc2e6e25fa0 RCX: 00007fc2e6b9e019 [ 789.417570][T17927] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000003 [ 789.425557][T17927] RBP: 00007fc2e7a69090 R08: 0000000000000000 R09: 0000000000000000 [ 789.433553][T17927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.441623][T17927] R13: 00007fc2e6e26038 R14: 00007fc2e6e25fa0 R15: 00007ffc6f8f83a8 [ 789.449818][T17927] [ 789.681334][T17936] netlink: 'syz.2.3878': attribute type 10 has an invalid length. [ 789.753054][T17938] netlink: 'syz.0.3879': attribute type 10 has an invalid length. [ 789.998611][T17946] tap0: tun_chr_ioctl cmd 2147767507 [ 790.004926][T17946] tap0: tun_chr_ioctl cmd 2147767507 [ 790.015612][T17946] netlink: 'syz.2.3883': attribute type 39 has an invalid length. [ 790.071477][T17949] netlink: 'syz.1.3882': attribute type 10 has an invalid length. [ 791.272642][T17953] netlink: 'syz.0.3884': attribute type 10 has an invalid length. [ 791.310345][T17953] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3884'. [ 791.351186][T17953] netlink: 'syz.0.3884': attribute type 10 has an invalid length. [ 791.447039][T17964] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.3887'. [ 791.489667][T17946] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3883'. [ 791.490582][T17964] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3887'. [ 791.508075][T17946] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3883'. [ 791.527453][T17946] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3883'. [ 791.583027][T17968] netlink: 'syz.1.3889': attribute type 39 has an invalid length. [ 791.856062][T17974] FAULT_INJECTION: forcing a failure. [ 791.856062][T17974] name failslab, interval 1, probability 0, space 0, times 0 [ 791.890156][T17974] CPU: 1 PID: 17974 Comm: syz.3.3891 Not tainted syzkaller #0 [ 791.897774][T17974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 791.908135][T17974] Call Trace: [ 791.911539][T17974] [ 791.914708][T17974] dump_stack_lvl+0x18c/0x250 [ 791.919415][T17974] ? show_regs_print_info+0x20/0x20 [ 791.924634][T17974] ? load_image+0x420/0x420 [ 791.929205][T17974] ? __might_sleep+0xe0/0xe0 [ 791.933822][T17974] ? __lock_acquire+0x7d80/0x7d80 [ 791.938879][T17974] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 791.944887][T17974] should_fail_ex+0x394/0x4c0 [ 791.950035][T17974] should_failslab+0x9/0x20 [ 791.954588][T17974] slab_pre_alloc_hook+0x59/0x300 [ 791.959676][T17974] ? lockdep_hardirqs_on+0x98/0x150 [ 791.964900][T17974] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 791.970658][T17974] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 791.976588][T17974] __kmem_cache_alloc_node+0x53/0x250 [ 791.982002][T17974] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 791.987749][T17974] __kmalloc+0xa7/0x240 [ 791.991951][T17974] tomoyo_realpath_from_path+0xe6/0x5c0 [ 791.997715][T17974] ? tomoyo_domain+0xd6/0x120 [ 792.002468][T17974] tomoyo_path_number_perm+0x248/0x5e0 [ 792.008065][T17974] ? tomoyo_path_number_perm+0x217/0x5e0 [ 792.013724][T17974] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 792.019259][T17974] ? __fget_files+0x28/0x460 [ 792.023899][T17974] security_file_ioctl+0x70/0xa0 [ 792.028875][T17974] __se_sys_ioctl+0x48/0x170 [ 792.033495][T17974] do_syscall_64+0x55/0xb0 [ 792.038030][T17974] ? clear_bhb_loop+0x40/0x90 [ 792.042899][T17974] ? clear_bhb_loop+0x40/0x90 [ 792.047604][T17974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 792.053524][T17974] RIP: 0033:0x7f391279e019 [ 792.057959][T17974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.077764][T17974] RSP: 002b:00007f39135ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 792.086215][T17974] RAX: ffffffffffffffda RBX: 00007f3912a25fa0 RCX: 00007f391279e019 [ 792.094210][T17974] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000009 [ 792.103078][T17974] RBP: 00007f39135ee090 R08: 0000000000000000 R09: 0000000000000000 [ 792.111301][T17974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.119303][T17974] R13: 00007f3912a26038 R14: 00007f3912a25fa0 R15: 00007ffe153e3ee8 [ 792.127498][T17974] [ 792.153227][T17974] ERROR: Out of memory at tomoyo_realpath_from_path. [ 792.614183][T17982] sctp: [Deprecated]: syz.0.3894 (pid 17982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 792.614183][T17982] Use struct sctp_sack_info instead [ 793.226246][T17995] tap0: tun_chr_ioctl cmd 2147767507 [ 793.232959][T17995] tap0: tun_chr_ioctl cmd 2147767507 [ 793.820700][T17995] __nla_validate_parse: 10 callbacks suppressed [ 793.820720][T17995] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3898'. [ 793.838749][T17995] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3898'. [ 793.852646][T18009] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3898'. [ 793.874614][T17995] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3898'. [ 794.823711][T18022] sctp: [Deprecated]: syz.1.3905 (pid 18022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 794.823711][T18022] Use struct sctp_sack_info instead [ 794.887638][T18019] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3905'. [ 795.109716][T18025] validate_nla: 4 callbacks suppressed [ 795.109734][T18025] netlink: 'syz.0.3906': attribute type 1 has an invalid length. [ 795.224402][T18025] netlink: 'syz.0.3906': attribute type 3 has an invalid length. [ 795.258379][T18025] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3906'. [ 795.422228][T18030] netlink: 'syz.3.3907': attribute type 10 has an invalid length. [ 795.441331][T18030] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3907'. [ 795.474474][T18033] netlink: 'syz.1.3908': attribute type 10 has an invalid length. [ 795.482917][T18030] netlink: 'syz.3.3907': attribute type 10 has an invalid length. [ 795.645728][T18042] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.3911'. [ 795.667741][T18042] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3911'. [ 795.824745][T18045] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.3912'. [ 796.052351][T18051] tap0: tun_chr_ioctl cmd 2147767507 [ 796.070871][T18051] tap0: tun_chr_ioctl cmd 2147767507 [ 796.077586][T18051] netlink: 'syz.3.3913': attribute type 39 has an invalid length. [ 796.632159][T18059] bond0: (slave bond_slave_0): Releasing backup interface [ 796.658539][T18059] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 796.683156][T18059] sctp: [Deprecated]: syz.2.3916 (pid 18059) Use of struct sctp_assoc_value in delayed_ack socket option. [ 796.683156][T18059] Use struct sctp_sack_info instead [ 796.740240][T18065] netlink: 'syz.3.3917': attribute type 1 has an invalid length. [ 796.749290][T18065] netlink: 'syz.3.3917': attribute type 3 has an invalid length. [ 797.000062][T18070] netlink: 'syz.3.3918': attribute type 10 has an invalid length. [ 797.015310][T18070] netlink: 'syz.3.3918': attribute type 25 has an invalid length. [ 797.610974][T18089] tap0: tun_chr_ioctl cmd 2147767507 [ 797.617108][T18089] tap0: tun_chr_ioctl cmd 2147767507 [ 798.461745][T18096] sctp: [Deprecated]: syz.0.3929 (pid 18096) Use of struct sctp_assoc_value in delayed_ack socket option. [ 798.461745][T18096] Use struct sctp_sack_info instead [ 798.840943][T18109] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.848635][T18109] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.858429][T18109] bridge0: entered allmulticast mode [ 799.000206][T18113] __nla_validate_parse: 15 callbacks suppressed [ 799.000226][T18113] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.3935'. [ 799.069144][T18113] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3935'. [ 799.146856][T18115] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3936'. [ 799.991835][T18135] tap0: tun_chr_ioctl cmd 2147767507 [ 800.007306][T18135] tap0: tun_chr_ioctl cmd 2147767507 [ 800.122360][T18137] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3944'. [ 800.140000][T18137] sctp: [Deprecated]: syz.3.3944 (pid 18137) Use of struct sctp_assoc_value in delayed_ack socket option. [ 800.140000][T18137] Use struct sctp_sack_info instead [ 800.547244][T18143] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3943'. [ 800.588204][T18143] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3943'. [ 800.617098][T18135] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3943'. [ 800.668429][T18145] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3943'. [ 800.965397][T18148] validate_nla: 8 callbacks suppressed [ 800.965425][T18148] netlink: 'syz.0.3946': attribute type 1 has an invalid length. [ 800.983748][T18148] netlink: 'syz.0.3946': attribute type 3 has an invalid length. [ 800.992817][T18148] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3946'. [ 801.030496][T18152] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.3947'. [ 801.601377][T18167] netlink: 'syz.2.3952': attribute type 10 has an invalid length. [ 802.102710][T18176] tap0: tun_chr_ioctl cmd 2147767507 [ 802.109714][T18176] tap0: tun_chr_ioctl cmd 2147767507 [ 802.116409][T18176] netlink: 'syz.0.3955': attribute type 39 has an invalid length. [ 802.248976][T18178] netlink: 'syz.1.3956': attribute type 1 has an invalid length. [ 802.256852][T18178] netlink: 'syz.1.3956': attribute type 3 has an invalid length. [ 802.584176][T18186] netlink: 'syz.1.3965': attribute type 1 has an invalid length. [ 802.592250][T18186] netlink: 'syz.1.3965': attribute type 3 has an invalid length. [ 802.779394][T18193] sctp: [Deprecated]: syz.0.3959 (pid 18193) Use of struct sctp_assoc_value in delayed_ack socket option. [ 802.779394][T18193] Use struct sctp_sack_info instead [ 804.289491][T18200] __nla_validate_parse: 10 callbacks suppressed [ 804.289527][T18200] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3962'. [ 804.332561][T18200] bridge_slave_1: default FDB implementation only supports local addresses [ 804.374406][T18209] netlink: 'syz.3.3966': attribute type 10 has an invalid length. [ 804.476463][T18213] netlink: 'syz.2.3968': attribute type 39 has an invalid length. [ 805.397027][T18221] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3969'. [ 805.841504][T18237] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.3974'. [ 805.865511][T18238] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3968'. [ 805.876065][T18237] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3974'. [ 805.898256][T18238] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3968'. [ 805.943665][T18213] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3968'. [ 805.987162][T18238] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3968'. [ 806.342089][T18253] validate_nla: 2 callbacks suppressed [ 806.342107][T18253] netlink: 'syz.2.3979': attribute type 10 has an invalid length. [ 807.082026][T18266] netlink: 'syz.3.3984': attribute type 39 has an invalid length. [ 807.174789][T18262] netlink: 'syz.1.3981': attribute type 1 has an invalid length. [ 807.209260][T18262] netlink: 'syz.1.3981': attribute type 3 has an invalid length. [ 807.269003][T18272] netlink: 'syz.2.3985': attribute type 7 has an invalid length. [ 807.285000][T18262] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3981'. [ 807.668795][T18275] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3986'. [ 807.684334][T18275] sctp: [Deprecated]: syz.1.3986 (pid 18275) Use of struct sctp_assoc_value in delayed_ack socket option. [ 807.684334][T18275] Use struct sctp_sack_info instead [ 807.969927][T18282] tap0: tun_chr_ioctl cmd 2147767507 [ 807.976801][T18282] tap0: tun_chr_ioctl cmd 2147767507 [ 807.985372][T18282] netlink: 'syz.3.3987': attribute type 39 has an invalid length. [ 808.486383][T18291] netlink: 'syz.0.3991': attribute type 29 has an invalid length. [ 808.540340][T18291] netlink: 'syz.0.3991': attribute type 29 has an invalid length. [ 808.606229][T18292] netlink: 'syz.0.3991': attribute type 29 has an invalid length. [ 808.664786][T18291] netlink: 'syz.0.3991': attribute type 21 has an invalid length. [ 808.929648][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.936227][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.299282][T18306] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 809.568856][T18312] __nla_validate_parse: 10 callbacks suppressed [ 809.568870][T18312] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3997'. [ 809.587869][T18312] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3997'. [ 809.602823][T18311] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3997'. [ 809.613562][T18312] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3997'. [ 810.103802][T18334] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4004'. [ 811.385885][T18340] validate_nla: 7 callbacks suppressed [ 811.385902][T18340] netlink: 'syz.2.4007': attribute type 39 has an invalid length. [ 811.428943][T18342] tap0: tun_chr_ioctl cmd 2147767507 [ 811.439143][T18342] tap0: tun_chr_ioctl cmd 2147767507 [ 811.463258][T18342] netlink: 'syz.0.4006': attribute type 39 has an invalid length. [ 812.092027][T12124] wlan1: Trigger new scan to find an IBSS to join [ 812.862799][T18350] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4007'. [ 812.896078][T18350] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4007'. [ 812.966103][T18340] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4007'. [ 813.017549][T18362] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4006'. [ 813.035604][T18358] netlink: 'syz.1.4012': attribute type 10 has an invalid length. [ 813.049490][T18362] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4006'. [ 813.240534][T18369] tap0: tun_chr_ioctl cmd 2147767507 [ 813.253162][T18369] tap0: tun_chr_ioctl cmd 2147767507 [ 813.259915][T18365] netlink: 'syz.2.4014': attribute type 1 has an invalid length. [ 813.268188][T18365] netlink: 'syz.2.4014': attribute type 3 has an invalid length. [ 813.284387][T18369] netlink: 'syz.0.4015': attribute type 39 has an invalid length. [ 814.059271][T18379] netlink: 'syz.1.4019': attribute type 8 has an invalid length. [ 814.287428][T18382] netlink: 'syz.3.4020': attribute type 10 has an invalid length. [ 814.318144][T18384] netlink: 'syz.1.4021': attribute type 10 has an invalid length. [ 814.350320][T18382] netlink: 'syz.3.4020': attribute type 10 has an invalid length. [ 814.928895][T18390] __nla_validate_parse: 7 callbacks suppressed [ 814.928916][T18390] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4015'. [ 815.099565][T18390] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4015'. [ 815.257219][T18369] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4015'. [ 815.300847][T18396] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4025'. [ 815.375726][T18397] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4015'. [ 815.870024][T18386] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4022'. [ 815.889826][T18386] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4022'. [ 815.908435][T18407] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4022'. [ 815.955599][T18415] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4022'. [ 816.030602][T18422] netlink: 14350 bytes leftover after parsing attributes in process `syz.0.4031'. [ 816.090382][T12093] wlan1: Trigger new scan to find an IBSS to join [ 816.430000][T18433] validate_nla: 11 callbacks suppressed [ 816.430014][T18433] netlink: 'syz.1.4036': attribute type 1 has an invalid length. [ 816.448288][T18433] netlink: 'syz.1.4036': attribute type 3 has an invalid length. [ 816.623317][T18452] netlink: 'syz.1.4041': attribute type 21 has an invalid length. [ 816.715296][T18449] netlink: 'syz.1.4041': attribute type 10 has an invalid length. [ 817.048776][T12093] wlan1: Creating new IBSS network, BSSID b2:69:00:07:e5:86 [ 817.209344][T18457] netlink: 'syz.2.4043': attribute type 10 has an invalid length. [ 817.373541][T18457] netlink: 'syz.2.4043': attribute type 10 has an invalid length. [ 820.304315][T18484] netlink: 'syz.3.4049': attribute type 1 has an invalid length. [ 820.318238][T18484] netlink: 'syz.3.4049': attribute type 3 has an invalid length. [ 820.346920][T18484] __nla_validate_parse: 6 callbacks suppressed [ 820.346939][T18484] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4049'. [ 820.511154][T18490] netlink: 'syz.1.4050': attribute type 10 has an invalid length. [ 820.639476][T18493] netlink: 'syz.0.4053': attribute type 21 has an invalid length. [ 820.658111][T18493] netlink: 14350 bytes leftover after parsing attributes in process `syz.0.4053'. [ 822.018371][T18512] sctp: [Deprecated]: syz.2.4059 (pid 18512) Use of struct sctp_assoc_value in delayed_ack socket option. [ 822.018371][T18512] Use struct sctp_sack_info instead [ 822.071248][T18511] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4059'. [ 822.470594][T18522] validate_nla: 1 callbacks suppressed [ 822.470614][T18522] netlink: 'syz.1.4062': attribute type 1 has an invalid length. [ 822.574460][T18522] netlink: 'syz.1.4062': attribute type 3 has an invalid length. [ 822.618790][T18522] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4062'. [ 823.043561][T18528] netlink: 'syz.2.4063': attribute type 21 has an invalid length. [ 823.068216][T18528] netlink: 14350 bytes leftover after parsing attributes in process `syz.2.4063'. [ 823.270491][T18528] netlink: 'syz.2.4063': attribute type 10 has an invalid length. [ 823.617414][T18539] FAULT_INJECTION: forcing a failure. [ 823.617414][T18539] name failslab, interval 1, probability 0, space 0, times 0 [ 823.641118][T18539] CPU: 0 PID: 18539 Comm: syz.2.4067 Not tainted syzkaller #0 [ 823.648767][T18539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 823.658963][T18539] Call Trace: [ 823.662295][T18539] [ 823.665252][T18539] dump_stack_lvl+0x18c/0x250 [ 823.670138][T18539] ? show_regs_print_info+0x20/0x20 [ 823.675569][T18539] ? load_image+0x420/0x420 [ 823.680564][T18539] ? verify_lock_unused+0x140/0x140 [ 823.685906][T18539] should_fail_ex+0x394/0x4c0 [ 823.690644][T18539] should_failslab+0x9/0x20 [ 823.695194][T18539] slab_pre_alloc_hook+0x59/0x300 [ 823.700272][T18539] kmem_cache_alloc+0x5a/0x2c0 [ 823.705065][T18539] ? skb_clone+0x1eb/0x370 [ 823.709550][T18539] skb_clone+0x1eb/0x370 [ 823.713858][T18539] __netlink_deliver_tap+0x411/0x7f0 [ 823.719276][T18539] ? netlink_deliver_tap+0x2e/0x1b0 [ 823.724543][T18539] netlink_deliver_tap+0x19c/0x1b0 [ 823.729714][T18539] netlink_unicast+0x77b/0x930 [ 823.734533][T18539] netlink_sendmsg+0x8d0/0xbf0 [ 823.739429][T18539] ? netlink_getsockopt+0x590/0x590 [ 823.744843][T18539] ? apparmor_socket_sendmsg+0x8e/0x330 [ 823.750436][T18539] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 823.755769][T18539] ? security_socket_sendmsg+0x80/0xa0 [ 823.761358][T18539] ? netlink_getsockopt+0x590/0x590 [ 823.766599][T18539] ____sys_sendmsg+0x61b/0x980 [ 823.771754][T18539] ? __asan_memset+0x22/0x40 [ 823.776387][T18539] ? __sys_sendmsg_sock+0x30/0x30 [ 823.781446][T18539] ? __import_iovec+0x5f2/0x850 [ 823.786350][T18539] ? import_iovec+0x73/0xa0 [ 823.790941][T18539] ___sys_sendmsg+0x2a6/0x360 [ 823.795747][T18539] ? get_pid_task+0x20/0x1e0 [ 823.800432][T18539] ? __sys_sendmsg+0x2b0/0x2b0 [ 823.805258][T18539] ? __lock_acquire+0x7d80/0x7d80 [ 823.810530][T18539] __se_sys_sendmsg+0x1d0/0x2c0 [ 823.815511][T18539] ? __x64_sys_sendmsg+0x80/0x80 [ 823.820506][T18539] ? lockdep_hardirqs_on+0x98/0x150 [ 823.826633][T18539] do_syscall_64+0x55/0xb0 [ 823.831082][T18539] ? clear_bhb_loop+0x40/0x90 [ 823.835797][T18539] ? clear_bhb_loop+0x40/0x90 [ 823.840772][T18539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 823.846871][T18539] RIP: 0033:0x7f2e6899e019 [ 823.851414][T18539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.871578][T18539] RSP: 002b:00007f2e69863028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.880033][T18539] RAX: ffffffffffffffda RBX: 00007f2e68c25fa0 RCX: 00007f2e6899e019 [ 823.888057][T18539] RDX: 0000000000040044 RSI: 0000200000000600 RDI: 0000000000000003 [ 823.896122][T18539] RBP: 00007f2e69863090 R08: 0000000000000000 R09: 0000000000000000 [ 823.904233][T18539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.912786][T18539] R13: 00007f2e68c26038 R14: 00007f2e68c25fa0 R15: 00007ffd4ce6d518 [ 823.921343][T18539] [ 823.940092][T18539] netlink: 'syz.2.4067': attribute type 10 has an invalid length. [ 823.998257][T18545] netlink: 'syz.1.4068': attribute type 10 has an invalid length. [ 824.154429][T18551] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4071'. [ 824.195139][T18554] sctp: [Deprecated]: syz.2.4071 (pid 18554) Use of struct sctp_assoc_value in delayed_ack socket option. [ 824.195139][T18554] Use struct sctp_sack_info instead [ 824.196475][T18549] netlink: 'syz.3.4072': attribute type 1 has an invalid length. [ 824.249020][T18549] netlink: 'syz.3.4072': attribute type 3 has an invalid length. [ 824.257200][T18549] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4072'. [ 824.495448][T18561] netlink: 'syz.2.4075': attribute type 21 has an invalid length. [ 824.505758][T18561] netlink: 14350 bytes leftover after parsing attributes in process `syz.2.4075'. [ 824.532619][T18561] netlink: 'syz.2.4075': attribute type 10 has an invalid length. [ 825.348512][T18575] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4081'. [ 825.502848][T18584] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4083'. [ 825.531904][T18583] sctp: [Deprecated]: syz.0.4083 (pid 18583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 825.531904][T18583] Use struct sctp_sack_info instead [ 825.860584][T18590] netlink: 14350 bytes leftover after parsing attributes in process `syz.3.4085'. [ 827.533129][T18616] validate_nla: 5 callbacks suppressed [ 827.533148][T18616] netlink: 'syz.3.4093': attribute type 1 has an invalid length. [ 827.562409][T18616] netlink: 'syz.3.4093': attribute type 3 has an invalid length. [ 827.608234][T18616] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4093'. [ 827.748279][T18622] netlink: 'syz.1.4094': attribute type 39 has an invalid length. [ 828.199150][T18624] netlink: 'syz.0.4095': attribute type 21 has an invalid length. [ 828.208274][T18624] netlink: 14350 bytes leftover after parsing attributes in process `syz.0.4095'. [ 828.222168][T18625] netlink: 'syz.0.4095': attribute type 10 has an invalid length. [ 828.390086][T18626] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4094'. [ 828.498065][T18626] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4094'. [ 828.570454][T18622] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4094'. [ 828.648194][T18630] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4094'. [ 829.000914][T18642] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.4100'. [ 829.320007][T18648] netlink: 'syz.2.4102': attribute type 10 has an invalid length. [ 829.804504][T18658] netlink: 'syz.3.4105': attribute type 1 has an invalid length. [ 829.822937][T18658] netlink: 'syz.3.4105': attribute type 3 has an invalid length. [ 830.281941][T18670] delete_channel: no stack [ 830.286802][T18670] delete_channel: no stack [ 830.536239][T18662] netlink: 'syz.1.4107': attribute type 21 has an invalid length. [ 830.549615][T18662] __nla_validate_parse: 1 callbacks suppressed [ 830.549635][T18662] netlink: 14350 bytes leftover after parsing attributes in process `syz.1.4107'. [ 830.577896][T18666] netlink: 'syz.1.4107': attribute type 10 has an invalid length. [ 832.092463][T18698] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4119'. [ 832.457297][T18706] netlink: 14350 bytes leftover after parsing attributes in process `syz.0.4120'. [ 833.134118][T18729] validate_nla: 5 callbacks suppressed [ 833.134135][T18729] netlink: 'syz.0.4128': attribute type 1 has an invalid length. [ 833.160375][T18729] netlink: 'syz.0.4128': attribute type 3 has an invalid length. [ 833.186554][T18729] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4128'. [ 833.205367][T18733] tap0: tun_chr_ioctl cmd 2147767507 [ 833.213794][T18733] tap0: tun_chr_ioctl cmd 2147767507 [ 833.232523][T18733] netlink: 'syz.1.4129': attribute type 39 has an invalid length. [ 833.279227][T18735] netlink: 207684 bytes leftover after parsing attributes in process `syz.2.4130'. [ 833.308096][T18735] netlink: 'syz.2.4130': attribute type 1 has an invalid length. [ 833.316034][T18735] netlink: 'syz.2.4130': attribute type 2 has an invalid length. [ 834.006275][T18742] netlink: 'syz.3.4133': attribute type 21 has an invalid length. [ 834.043223][T18742] netlink: 14350 bytes leftover after parsing attributes in process `syz.3.4133'. [ 834.078575][T18747] netlink: 'syz.3.4133': attribute type 10 has an invalid length. [ 834.119085][T18746] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4129'. [ 834.158287][T18746] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4129'. [ 834.220365][T18733] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4129'. [ 834.249358][T18746] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4129'. [ 835.263721][T18766] netlink: 'syz.3.4140': attribute type 1 has an invalid length. [ 835.305491][T18766] netlink: 'syz.3.4140': attribute type 3 has an invalid length. [ 835.906241][T18782] netlink: 'syz.1.4146': attribute type 10 has an invalid length. [ 835.967288][T18784] __nla_validate_parse: 1 callbacks suppressed [ 835.967308][T18784] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.4147'. [ 835.984081][T18786] tap0: tun_chr_ioctl cmd 2147767507 [ 836.019621][T18786] tap0: tun_chr_ioctl cmd 2147767507 [ 836.799327][T18799] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4152'. [ 837.449412][T18810] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4148'. [ 837.478296][T18810] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4148'. [ 837.516610][T18792] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4148'. [ 837.552604][T18786] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4148'. [ 838.060603][T18821] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4159'. [ 838.092513][T18821] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4159'. [ 838.175912][T18828] validate_nla: 5 callbacks suppressed [ 838.175931][T18828] netlink: 'syz.3.4161': attribute type 10 has an invalid length. [ 838.222791][T18829] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.4160'. [ 838.491604][T18834] tap0: tun_chr_ioctl cmd 2147767507 [ 838.497617][T18834] tap0: tun_chr_ioctl cmd 2147767507 [ 838.508798][T18834] netlink: 'syz.1.4164': attribute type 39 has an invalid length. [ 838.757602][T18836] netlink: 'syz.0.4163': attribute type 1 has an invalid length. [ 838.822513][T18836] netlink: 'syz.0.4163': attribute type 3 has an invalid length. [ 838.847523][T18836] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4163'. [ 839.890246][T18861] syzkaller0: entered promiscuous mode [ 840.273747][T18871] netlink: 'syz.0.4175': attribute type 1 has an invalid length. [ 840.301256][T18871] netlink: 'syz.0.4175': attribute type 3 has an invalid length. [ 842.132867][T18866] netlink: 'syz.2.4173': attribute type 21 has an invalid length. [ 842.142478][T18866] __nla_validate_parse: 1 callbacks suppressed [ 842.142489][T18866] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4173'. [ 842.158314][T18866] netlink: 'syz.2.4173': attribute type 4 has an invalid length. [ 842.166429][T18866] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4173'. [ 842.309398][T18882] netlink: 'syz.1.4177': attribute type 10 has an invalid length. [ 842.328097][T18884] netlink: 'syz.0.4176': attribute type 10 has an invalid length. [ 842.359296][T18883] tap0: tun_chr_ioctl cmd 2147767507 [ 842.365123][T18883] tap0: tun_chr_ioctl cmd 2147767507 [ 842.790282][T18892] FAULT_INJECTION: forcing a failure. [ 842.790282][T18892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.804347][T18892] CPU: 0 PID: 18892 Comm: syz.1.4182 Not tainted syzkaller #0 [ 842.811854][T18892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 842.822057][T18892] Call Trace: [ 842.825373][T18892] [ 842.828341][T18892] dump_stack_lvl+0x18c/0x250 [ 842.833057][T18892] ? show_regs_print_info+0x20/0x20 [ 842.838380][T18892] ? load_image+0x420/0x420 [ 842.842927][T18892] ? __might_fault+0xaa/0x120 [ 842.847723][T18892] ? __lock_acquire+0x7d80/0x7d80 [ 842.852787][T18892] should_fail_ex+0x394/0x4c0 [ 842.857591][T18892] _copy_from_user+0x2f/0xe0 [ 842.862210][T18892] ___sys_sendmsg+0x1c7/0x360 [ 842.866917][T18892] ? get_pid_task+0x20/0x1e0 [ 842.871624][T18892] ? __sys_sendmsg+0x2b0/0x2b0 [ 842.876434][T18892] ? __lock_acquire+0x7d80/0x7d80 [ 842.881508][T18892] __se_sys_sendmsg+0x1d0/0x2c0 [ 842.886396][T18892] ? __x64_sys_sendmsg+0x80/0x80 [ 842.891385][T18892] ? lockdep_hardirqs_on+0x98/0x150 [ 842.896611][T18892] do_syscall_64+0x55/0xb0 [ 842.901047][T18892] ? clear_bhb_loop+0x40/0x90 [ 842.905758][T18892] ? clear_bhb_loop+0x40/0x90 [ 842.910503][T18892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 842.916445][T18892] RIP: 0033:0x7fc2e6b9e019 [ 842.920895][T18892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.940974][T18892] RSP: 002b:00007fc2e7a69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.949509][T18892] RAX: ffffffffffffffda RBX: 00007fc2e6e25fa0 RCX: 00007fc2e6b9e019 [ 842.957504][T18892] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 842.965503][T18892] RBP: 00007fc2e7a69090 R08: 0000000000000000 R09: 0000000000000000 [ 842.973500][T18892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.981501][T18892] R13: 00007fc2e6e26038 R14: 00007fc2e6e25fa0 R15: 00007ffc6f8f83a8 [ 842.989510][T18892] [ 843.303807][T18898] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4179'. [ 843.313148][T18898] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4179'. [ 843.329886][T18883] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4179'. [ 843.355424][T18902] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4185'. [ 843.366869][T18897] netlink: 'syz.0.4184': attribute type 1 has an invalid length. [ 843.379273][T18902] netlink: 'syz.1.4185': attribute type 10 has an invalid length. [ 843.387273][T18898] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4179'. [ 843.407990][T18897] netlink: 'syz.0.4184': attribute type 3 has an invalid length. [ 843.416066][T18897] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4184'. [ 843.523071][T18907] tap0: tun_chr_ioctl cmd 2147767507 [ 843.528914][T18907] tap0: tun_chr_ioctl cmd 2147767507 [ 843.632247][T18911] netlink: 'syz.0.4187': attribute type 21 has an invalid length. [ 843.671079][T18911] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4187'. [ 843.703696][T18911] netlink: 'syz.0.4187': attribute type 4 has an invalid length. [ 843.743898][T18911] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4187'. [ 844.492562][T18930] netlink: 'syz.1.4192': attribute type 10 has an invalid length. [ 844.965291][T18942] netlink: 'syz.2.4197': attribute type 1 has an invalid length. [ 844.991054][T18942] netlink: 'syz.2.4197': attribute type 3 has an invalid length. [ 845.245375][T18944] syzkaller0: entered promiscuous mode [ 846.245886][T18948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 847.441814][T18949] netlink: 'syz.2.4199': attribute type 10 has an invalid length. [ 847.452335][T18949] FAULT_INJECTION: forcing a failure. [ 847.452335][T18949] name failslab, interval 1, probability 0, space 0, times 0 [ 847.465145][T18949] CPU: 0 PID: 18949 Comm: syz.2.4199 Not tainted syzkaller #0 [ 847.472628][T18949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 847.482777][T18949] Call Trace: [ 847.486058][T18949] [ 847.488992][T18949] dump_stack_lvl+0x18c/0x250 [ 847.493965][T18949] ? show_regs_print_info+0x20/0x20 [ 847.499254][T18949] ? load_image+0x420/0x420 [ 847.503776][T18949] should_fail_ex+0x394/0x4c0 [ 847.510285][T18949] should_failslab+0x9/0x20 [ 847.514803][T18949] slab_pre_alloc_hook+0x59/0x300 [ 847.520042][T18949] kmem_cache_alloc_node+0x5e/0x310 [ 847.525296][T18949] ? __alloc_skb+0x103/0x2c0 [ 847.530101][T18949] __alloc_skb+0x103/0x2c0 [ 847.534722][T18949] rtmsg_ifinfo_build_skb+0x83/0x260 [ 847.540036][T18949] ? lockdep_rtnl_is_held+0x26/0x30 [ 847.545385][T18949] rtmsg_ifinfo+0x8c/0x1a0 [ 847.550079][T18949] __dev_notify_flags+0xf3/0x310 [ 847.555302][T18949] ? __dev_change_flags+0x6a0/0x6a0 [ 847.560535][T18949] ? __dev_change_flags+0x4d2/0x6a0 [ 847.565834][T18949] ? dev_get_flags+0x1c0/0x1c0 [ 847.570603][T18949] ? printk_sprint+0x460/0x460 [ 847.575516][T18949] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 847.581422][T18949] dev_change_flags+0xde/0x1a0 [ 847.586192][T18949] do_setlink+0xb69/0x3f40 [ 847.590879][T18949] ? load_image+0x420/0x420 [ 847.595417][T18949] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 847.601577][T18949] ? stack_trace_save+0xaa/0x100 [ 847.606541][T18949] ? stack_trace_snprint+0xf0/0xf0 [ 847.611672][T18949] ? __nla_validate+0x50/0x50 [ 847.616375][T18949] ? validate_linkmsg+0x719/0x910 [ 847.621420][T18949] rtnl_newlink+0x1848/0x2170 [ 847.626122][T18949] ? rtnl_newlink+0x4c1/0x2170 [ 847.630924][T18949] ? rtnl_setlink+0x4e0/0x4e0 [ 847.635676][T18949] ? __rwlock_init+0x150/0x150 [ 847.640469][T18949] ? do_raw_spin_unlock+0x121/0x230 [ 847.645711][T18949] ? __mutex_lock+0x923/0xc80 [ 847.650508][T18949] ? __mutex_lock+0x4d2/0xc80 [ 847.655202][T18949] ? rtnl_setlink+0x4e0/0x4e0 [ 847.659965][T18949] rtnetlink_rcv_msg+0x843/0xf90 [ 847.664911][T18949] ? rtnetlink_rcv_msg+0x220/0xf90 [ 847.670029][T18949] ? rtnetlink_bind+0x80/0x80 [ 847.674712][T18949] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 847.680695][T18949] ? lock_chain_count+0x20/0x20 [ 847.685548][T18949] ? __local_bh_enable_ip+0x13a/0x1c0 [ 847.690930][T18949] ? lockdep_hardirqs_on+0x98/0x150 [ 847.696401][T18949] ? __local_bh_enable_ip+0x13a/0x1c0 [ 847.702009][T18949] ? _local_bh_enable+0xa0/0xa0 [ 847.707038][T18949] ? __dev_queue_xmit+0x275/0x3630 [ 847.712179][T18949] ? __dev_queue_xmit+0x1bc2/0x3630 [ 847.717471][T18949] ? __dev_queue_xmit+0x275/0x3630 [ 847.722599][T18949] ? ref_tracker_free+0x686/0x830 [ 847.727645][T18949] netlink_rcv_skb+0x235/0x4c0 [ 847.732522][T18949] ? rtnetlink_bind+0x80/0x80 [ 847.737211][T18949] ? netlink_ack+0x1160/0x1160 [ 847.741985][T18949] ? __lock_acquire+0x7d80/0x7d80 [ 847.747033][T18949] ? netlink_deliver_tap+0x2e/0x1b0 [ 847.752261][T18949] netlink_unicast+0x7b1/0x930 [ 847.757042][T18949] netlink_sendmsg+0x8d0/0xbf0 [ 847.761929][T18949] ? netlink_getsockopt+0x590/0x590 [ 847.767220][T18949] ? apparmor_socket_sendmsg+0x8e/0x330 [ 847.772881][T18949] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 847.778258][T18949] ? security_socket_sendmsg+0x80/0xa0 [ 847.783751][T18949] ? netlink_getsockopt+0x590/0x590 [ 847.788981][T18949] ____sys_sendmsg+0x61b/0x980 [ 847.793784][T18949] ? __asan_memset+0x22/0x40 [ 847.798377][T18949] ? __sys_sendmsg_sock+0x30/0x30 [ 847.803424][T18949] ? __import_iovec+0x5f2/0x850 [ 847.808392][T18949] ? import_iovec+0x73/0xa0 [ 847.812931][T18949] ___sys_sendmsg+0x2a6/0x360 [ 847.817608][T18949] ? get_pid_task+0x20/0x1e0 [ 847.822225][T18949] ? __sys_sendmsg+0x2b0/0x2b0 [ 847.827009][T18949] ? __lock_acquire+0x7d80/0x7d80 [ 847.832051][T18949] __se_sys_sendmsg+0x1d0/0x2c0 [ 847.836903][T18949] ? __x64_sys_sendmsg+0x80/0x80 [ 847.841868][T18949] ? lockdep_hardirqs_on+0x98/0x150 [ 847.847068][T18949] do_syscall_64+0x55/0xb0 [ 847.851684][T18949] ? clear_bhb_loop+0x40/0x90 [ 847.856363][T18949] ? clear_bhb_loop+0x40/0x90 [ 847.861056][T18949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 847.866953][T18949] RIP: 0033:0x7f2e6899e019 [ 847.871370][T18949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.891160][T18949] RSP: 002b:00007f2e69863028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.899577][T18949] RAX: ffffffffffffffda RBX: 00007f2e68c25fa0 RCX: 00007f2e6899e019 [ 847.907578][T18949] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000008 [ 847.915561][T18949] RBP: 00007f2e69863090 R08: 0000000000000000 R09: 0000000000000000 [ 847.923534][T18949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.931506][T18949] R13: 00007f2e68c26038 R14: 00007f2e68c25fa0 R15: 00007ffd4ce6d518 [ 847.939584][T18949] [ 848.094379][T18956] syz.1.4201[18956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 848.094608][T18956] syz.1.4201[18956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 848.484504][T18963] tap0: tun_chr_ioctl cmd 2147767507 [ 848.873620][T18971] __nla_validate_parse: 5 callbacks suppressed [ 848.873649][T18971] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4204'. [ 849.220521][T12128] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 849.511756][T18978] netlink: 'syz.2.4207': attribute type 1 has an invalid length. [ 849.523973][T18978] netlink: 'syz.2.4207': attribute type 3 has an invalid length. [ 849.534230][T18978] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4207'. [ 850.922332][T18963] tap0: tun_chr_ioctl cmd 2147767507 [ 850.933277][T18965] netlink: 'syz.0.4205': attribute type 10 has an invalid length. [ 850.957161][T18971] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4204'. [ 851.185259][T18985] netlink: 'syz.0.4210': attribute type 10 has an invalid length. [ 851.403056][T18983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.107562][T19007] netlink: 'syz.0.4216': attribute type 1 has an invalid length. [ 852.143833][T19009] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.4217'. [ 852.148285][T19007] netlink: 'syz.0.4216': attribute type 3 has an invalid length. [ 852.201632][T19007] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4216'. [ 852.306948][T19013] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4218'. [ 852.335435][T19013] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4218'. [ 852.350644][T19013] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4218'. [ 852.350824][T19017] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4220'. [ 852.362339][T19013] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4218'. [ 852.393279][T19017] FAULT_INJECTION: forcing a failure. [ 852.393279][T19017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.439018][T19017] CPU: 1 PID: 19017 Comm: syz.2.4220 Not tainted syzkaller #0 [ 852.446560][T19017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 852.456775][T19017] Call Trace: [ 852.460129][T19017] [ 852.463117][T19017] dump_stack_lvl+0x18c/0x250 [ 852.467841][T19017] ? show_regs_print_info+0x20/0x20 [ 852.473085][T19017] ? load_image+0x420/0x420 [ 852.477635][T19017] ? __might_fault+0xaa/0x120 [ 852.482362][T19017] ? __lock_acquire+0x7d80/0x7d80 [ 852.487412][T19017] should_fail_ex+0x394/0x4c0 [ 852.492122][T19017] _copy_from_user+0x2f/0xe0 [ 852.496748][T19017] ___sys_recvmsg+0x174/0x590 [ 852.501469][T19017] ? __sys_recvmsg+0x2a0/0x2a0 [ 852.506303][T19017] ? ksys_write+0x1d2/0x260 [ 852.510838][T19017] ? __fget_files+0x3fc/0x460 [ 852.515530][T19017] __x64_sys_recvmsg+0x21e/0x2f0 [ 852.520567][T19017] ? ___sys_recvmsg+0x590/0x590 [ 852.525448][T19017] ? lockdep_hardirqs_on+0x98/0x150 [ 852.530678][T19017] do_syscall_64+0x55/0xb0 [ 852.535121][T19017] ? clear_bhb_loop+0x40/0x90 [ 852.539815][T19017] ? clear_bhb_loop+0x40/0x90 [ 852.544503][T19017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 852.550420][T19017] RIP: 0033:0x7f2e6899e019 [ 852.554849][T19017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.574472][T19017] RSP: 002b:00007f2e69863028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 852.582895][T19017] RAX: ffffffffffffffda RBX: 00007f2e68c25fa0 RCX: 00007f2e6899e019 [ 852.590894][T19017] RDX: 0000000000002000 RSI: 0000200000000200 RDI: 0000000000000003 [ 852.598970][T19017] RBP: 00007f2e69863090 R08: 0000000000000000 R09: 0000000000000000 [ 852.607235][T19017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.615221][T19017] R13: 00007f2e68c26038 R14: 00007f2e68c25fa0 R15: 00007ffd4ce6d518 [ 852.623217][T19017] [ 852.635280][T19021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 852.984750][T19041] netlink: 'syz.0.4226': attribute type 1 has an invalid length. [ 853.001798][T19041] netlink: 'syz.0.4226': attribute type 3 has an invalid length. [ 853.182308][T19046] syzkaller0: entered promiscuous mode [ 853.197483][T19046] syzkaller0: entered allmulticast mode [ 853.258416][T19046] netlink: 'syz.3.4228': attribute type 2 has an invalid length. [ 853.288447][T19046] netlink: 'syz.3.4228': attribute type 8 has an invalid length. [ 854.119061][T19067] tap0: tun_chr_ioctl cmd 2147767507 [ 854.125743][T19067] tap0: tun_chr_ioctl cmd 2147767507 [ 854.416475][T19073] __nla_validate_parse: 11 callbacks suppressed [ 854.416493][T19073] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4238'. [ 854.704982][T19079] validate_nla: 4 callbacks suppressed [ 854.705003][T19079] netlink: 'syz.2.4240': attribute type 21 has an invalid length. [ 854.749696][T19079] netlink: 14350 bytes leftover after parsing attributes in process `syz.2.4240'. [ 854.850959][T19079] netlink: 'syz.2.4240': attribute type 10 has an invalid length. [ 854.955764][T19085] netlink: 'syz.1.4242': attribute type 2 has an invalid length. [ 854.966278][T19087] netlink: 'syz.3.4243': attribute type 1 has an invalid length. [ 854.988594][T19085] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4242'. [ 855.016952][T19087] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.4243'. [ 855.194251][T19093] FAULT_INJECTION: forcing a failure. [ 855.194251][T19093] name failslab, interval 1, probability 0, space 0, times 0 [ 855.243239][T19093] CPU: 0 PID: 19093 Comm: syz.2.4244 Not tainted syzkaller #0 [ 855.250767][T19093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 855.260842][T19093] Call Trace: [ 855.264152][T19093] [ 855.267114][T19093] dump_stack_lvl+0x18c/0x250 [ 855.271824][T19093] ? show_regs_print_info+0x20/0x20 [ 855.277141][T19093] ? load_image+0x420/0x420 [ 855.281709][T19093] ? verify_lock_unused+0x140/0x140 [ 855.286938][T19093] should_fail_ex+0x394/0x4c0 [ 855.291647][T19093] should_failslab+0x9/0x20 [ 855.296179][T19093] slab_pre_alloc_hook+0x59/0x300 [ 855.301239][T19093] kmem_cache_alloc+0x5a/0x2c0 [ 855.306039][T19093] ? skb_clone+0x1eb/0x370 [ 855.310485][T19093] skb_clone+0x1eb/0x370 [ 855.314753][T19093] __netlink_deliver_tap+0x411/0x7f0 [ 855.320157][T19093] ? netlink_deliver_tap+0x2e/0x1b0 [ 855.325391][T19093] netlink_deliver_tap+0x19c/0x1b0 [ 855.330527][T19093] netlink_unicast+0x77b/0x930 [ 855.335342][T19093] netlink_sendmsg+0x8d0/0xbf0 [ 855.340189][T19093] ? netlink_getsockopt+0x590/0x590 [ 855.345427][T19093] ? apparmor_socket_sendmsg+0x8e/0x330 [ 855.351009][T19093] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 855.356322][T19093] ? security_socket_sendmsg+0x80/0xa0 [ 855.361886][T19093] ? netlink_getsockopt+0x590/0x590 [ 855.367109][T19093] ____sys_sendmsg+0x61b/0x980 [ 855.371916][T19093] ? __asan_memset+0x22/0x40 [ 855.376532][T19093] ? __sys_sendmsg_sock+0x30/0x30 [ 855.381624][T19093] ? __import_iovec+0x5f2/0x850 [ 855.386526][T19093] ? import_iovec+0x73/0xa0 [ 855.391083][T19093] ___sys_sendmsg+0x2a6/0x360 [ 855.395785][T19093] ? get_pid_task+0x20/0x1e0 [ 855.400406][T19093] ? __sys_sendmsg+0x2b0/0x2b0 [ 855.405213][T19093] ? __lock_acquire+0x7d80/0x7d80 [ 855.410284][T19093] __se_sys_sendmsg+0x1d0/0x2c0 [ 855.415173][T19093] ? __x64_sys_sendmsg+0x80/0x80 [ 855.420153][T19093] ? lockdep_hardirqs_on+0x98/0x150 [ 855.425388][T19093] do_syscall_64+0x55/0xb0 [ 855.429825][T19093] ? clear_bhb_loop+0x40/0x90 [ 855.434530][T19093] ? clear_bhb_loop+0x40/0x90 [ 855.439243][T19093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 855.445164][T19093] RIP: 0033:0x7f2e6899e019 [ 855.449622][T19093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.469342][T19093] RSP: 002b:00007f2e69863028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 855.477788][T19093] RAX: ffffffffffffffda RBX: 00007f2e68c25fa0 RCX: 00007f2e6899e019 [ 855.485781][T19093] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 855.493781][T19093] RBP: 00007f2e69863090 R08: 0000000000000000 R09: 0000000000000000 [ 855.501865][T19093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.509865][T19093] R13: 00007f2e68c26038 R14: 00007f2e68c25fa0 R15: 00007ffd4ce6d518 [ 855.517885][T19093] [ 855.558706][T19093] netlink: 'syz.2.4244': attribute type 4 has an invalid length. [ 855.566583][T19093] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4244'. [ 855.583422][T19097] netlink: 'syz.3.4245': attribute type 4 has an invalid length. [ 855.591861][T19097] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4245'. [ 855.693724][ T12] tipc: Subscription rejected, illegal request [ 855.716674][T19103] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4235'. [ 855.726750][T19103] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4235'. [ 855.742093][T19067] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4235'. [ 855.759696][T19103] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4235'. [ 855.806536][T19106] netlink: 'syz.3.4248': attribute type 1 has an invalid length. [ 855.809792][T19102] netlink: 'syz.2.4247': attribute type 1 has an invalid length. [ 855.838082][T19102] netlink: 'syz.2.4247': attribute type 3 has an invalid length. [ 856.054203][T19118] ÿÿÿÿÿÿ: renamed from bond_slave_1 (while UP) [ 856.062252][T19117] netlink: 'syz.0.4252': attribute type 21 has an invalid length. [ 856.171144][T19123] ------------[ cut here ]------------ [ 856.176832][T19123] WARNING: CPU: 0 PID: 19123 at kernel/events/core.c:6800 perf_pending_task+0x357/0x480 [ 856.186898][T19123] Modules linked in: [ 856.190978][T19123] CPU: 0 PID: 19123 Comm: syz.3.4255 Not tainted syzkaller #0 [ 856.198548][T19123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 856.208682][T19123] RIP: 0010:perf_pending_task+0x357/0x480 [ 856.214464][T19123] Code: e8 1e c9 d5 ff 84 db 75 10 e8 85 c6 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 75 c6 d5 ff e8 20 f2 4e ff eb e9 e8 69 c6 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 856.234183][T19123] RSP: 0018:ffffc900051379c8 EFLAGS: 00010293 [ 856.240322][T19123] RAX: ffffffff81b1ab17 RBX: ffff88806ade65e8 RCX: ffff88807d2e8000 [ 856.248572][T19123] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 856.256583][T19123] RBP: ffff88806ade63a8 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 856.264810][T19123] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffff88807d2e8000 [ 856.272870][T19123] R13: ffff888026caf930 R14: 0000000000000000 R15: 1ffff1100d5bcc75 [ 856.280934][T19123] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 856.289916][T19123] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 856.296532][T19123] CR2: 0000000100000002 CR3: 000000001db8d000 CR4: 00000000003506f0 [ 856.304884][T19123] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 856.312931][T19123] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 856.321086][T19123] Call Trace: [ 856.324396][T19123] [ 856.327332][T19123] task_work_run+0x1d4/0x260 [ 856.331989][T19123] ? task_work_cancel+0x220/0x220 [ 856.337083][T19123] do_exit+0x986/0x2530 [ 856.341335][T19123] ? put_task_struct+0xc0/0xc0 [ 856.346151][T19123] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 856.352226][T19123] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 856.359790][T19123] ? lock_chain_count+0x20/0x20 [ 856.360509][T19127] openvswitch: netlink: Flow key attribute not present in set flow. [ 856.364707][T19123] ? _raw_spin_lock_irq+0xbb/0xf0 [ 856.364744][T19123] do_group_exit+0x22d/0x2f0 [ 856.364771][T19123] ? lockdep_hardirqs_on+0x98/0x150 [ 856.364797][T19123] get_signal+0x12a6/0x1390 [ 856.364832][T19123] arch_do_signal_or_restart+0xc2/0x7b0 [ 856.398187][T19123] ? get_sigframe_size+0x20/0x20 [ 856.403192][T19123] ? perf_trace_preemptirq_template+0xac/0x330 [ 856.409461][T19123] ? exit_to_user_mode_loop+0x3b/0x110 [ 856.414980][T19123] exit_to_user_mode_loop+0x70/0x110 [ 856.420390][T19123] exit_to_user_mode_prepare+0xee/0x180 [ 856.426080][T19123] syscall_exit_to_user_mode+0x1a/0x50 [ 856.431647][T19123] do_syscall_64+0x61/0xb0 [ 856.436119][T19123] ? clear_bhb_loop+0x40/0x90 [ 856.440874][T19123] ? clear_bhb_loop+0x40/0x90 [ 856.445848][T19123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 856.446352][T19127] hsr0: entered promiscuous mode [ 856.451825][T19123] RIP: 0033:0x7f391279e019 [ 856.451853][T19123] Code: Unable to access opcode bytes at 0x7f391279dfef. [ 856.451863][T19123] RSP: 002b:00007f39135ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 856.451885][T19123] RAX: fffffffffffffe00 RBX: 00007f3912a26188 RCX: 00007f391279e019 [ 856.451898][T19123] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3912a26188 [ 856.451911][T19123] RBP: 00007f3912a26180 R08: 0000000000000000 R09: 0000000000000000 [ 856.451923][T19123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.451934][T19123] R13: 00007f3912a26218 R14: 00007ffe153e3e00 R15: 00007ffe153e3ee8 [ 856.451959][T19123] [ 856.451969][T19123] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 856.451979][T19123] CPU: 0 PID: 19123 Comm: syz.3.4255 Not tainted syzkaller #0 [ 856.451996][T19123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 856.452006][T19123] Call Trace: [ 856.452013][T19123] [ 856.452020][T19123] dump_stack_lvl+0x18c/0x250 [ 856.452044][T19123] ? show_regs_print_info+0x20/0x20 [ 856.452062][T19123] ? load_image+0x420/0x420 [ 856.452091][T19123] panic+0x2ca/0x720 [ 856.452115][T19123] ? bpf_jit_dump+0xd0/0xd0 [ 856.452148][T19123] __warn+0x2e0/0x470 [ 856.452167][T19123] ? perf_pending_task+0x357/0x480 [ 856.452193][T19123] ? perf_pending_task+0x357/0x480 [ 856.452213][T19123] report_bug+0x2be/0x4f0 [ 856.452324][T19123] ? perf_pending_task+0x357/0x480 [ 856.452355][T19123] ? perf_pending_task+0x357/0x480 [ 856.452377][T19123] ? perf_pending_task+0x359/0x480 [ 856.452399][T19123] handle_bug+0xcf/0x120 [ 856.452417][T19123] exc_invalid_op+0x1a/0x50 [ 856.452435][T19123] asm_exc_invalid_op+0x1a/0x20 [ 856.452453][T19123] RIP: 0010:perf_pending_task+0x357/0x480 [ 856.452476][T19123] Code: e8 1e c9 d5 ff 84 db 75 10 e8 85 c6 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 75 c6 d5 ff e8 20 f2 4e ff eb e9 e8 69 c6 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 856.452490][T19123] RSP: 0018:ffffc900051379c8 EFLAGS: 00010293 [ 856.452504][T19123] RAX: ffffffff81b1ab17 RBX: ffff88806ade65e8 RCX: ffff88807d2e8000 [ 856.452516][T19123] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 856.452526][T19123] RBP: ffff88806ade63a8 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 856.452538][T19123] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffff88807d2e8000 [ 856.452551][T19123] R13: ffff888026caf930 R14: 0000000000000000 R15: 1ffff1100d5bcc75 [ 856.452567][T19123] ? perf_pending_task+0x357/0x480 [ 856.452594][T19123] ? perf_pending_task+0x357/0x480 [ 856.452618][T19123] task_work_run+0x1d4/0x260 [ 856.452643][T19123] ? task_work_cancel+0x220/0x220 [ 856.452671][T19123] do_exit+0x986/0x2530 [ 856.452704][T19123] ? put_task_struct+0xc0/0xc0 [ 856.452729][T19123] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 856.452749][T19123] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 856.452772][T19123] ? lock_chain_count+0x20/0x20 [ 856.452791][T19123] ? _raw_spin_lock_irq+0xbb/0xf0 [ 856.452816][T19123] do_group_exit+0x22d/0x2f0 [ 856.452838][T19123] ? lockdep_hardirqs_on+0x98/0x150 [ 856.452860][T19123] get_signal+0x12a6/0x1390 [ 856.452892][T19123] arch_do_signal_or_restart+0xc2/0x7b0 [ 856.452919][T19123] ? get_sigframe_size+0x20/0x20 [ 856.452940][T19123] ? perf_trace_preemptirq_template+0xac/0x330 [ 856.452975][T19123] ? exit_to_user_mode_loop+0x3b/0x110 [ 856.453000][T19123] exit_to_user_mode_loop+0x70/0x110 [ 856.453022][T19123] exit_to_user_mode_prepare+0xee/0x180 [ 856.453045][T19123] syscall_exit_to_user_mode+0x1a/0x50 [ 856.453066][T19123] do_syscall_64+0x61/0xb0 [ 856.453082][T19123] ? clear_bhb_loop+0x40/0x90 [ 856.453098][T19123] ? clear_bhb_loop+0x40/0x90 [ 856.453117][T19123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 856.453134][T19123] RIP: 0033:0x7f391279e019 [ 856.453147][T19123] Code: Unable to access opcode bytes at 0x7f391279dfef. [ 856.453155][T19123] RSP: 002b:00007f39135ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 856.453171][T19123] RAX: fffffffffffffe00 RBX: 00007f3912a26188 RCX: 00007f391279e019 [ 856.453182][T19123] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3912a26188 [ 856.453193][T19123] RBP: 00007f3912a26180 R08: 0000000000000000 R09: 0000000000000000 [ 856.453203][T19123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.453213][T19123] R13: 00007f3912a26218 R14: 00007ffe153e3e00 R15: 00007ffe153e3ee8 [ 856.453237][T19123] [ 856.458003][T19123] Kernel Offset: disabled