last executing test programs: 2m46.72906244s ago: executing program 3 (id=1054): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x3, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x85, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x80044942, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90924fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f00000009c0)='%ps \x00'}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0), 0x8) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00), 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x14, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd3}, {}, {}, [@alu={0x4, 0x0, 0x4, 0xa, 0x6, 0x18}, @exit, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x6, 0x3, 0x0, 0xc, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x8, 0xee, &(0x7f00000005c0)=""/238, 0x41000, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0xb, 0x7fffffff, 0x100}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000b40)=[r4, r5, r6, r7, 0xffffffffffffffff, r8, 0x1, 0x1], &(0x7f0000000b80)=[{0x5, 0x5, 0x4, 0x4}, {0x4, 0x4, 0xa, 0x7}, {0x4, 0x5, 0x6, 0x7}, {0x3, 0x1, 0xa, 0xb}, {0x0, 0x2, 0xd, 0x7}, {0x5, 0x1, 0xa, 0x2}, {0x4, 0x3, 0x5, 0xc}, {0x1, 0x1, 0xe, 0x1}, {0x5, 0x2, 0xf, 0xc}], 0x10, 0x1}, 0x94) r9 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\tmw'], 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="d80000001d0081044e81f799db44b904031d080201000000040000a1bc0001000000000000002b1208000f0100810401a8001600200001400309000000600cfab94dcf5c0461c16fb4007108e8d8ef075c11503c6bbace801bcb090000001f392c653b5ee4001b146218a07445d6d930dfe1d9d322107c9fd68adb6cca0b3795af586b325782311c399d8186e68093c100000000000000", 0x97}, {&(0x7f0000000000)="000042d5b325d62bd44d", 0xa}, {&(0x7f0000000980)="027264c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e4000000000000000490d8e93db", 0x37}], 0x3, 0x0, 0x0, 0x7400}, 0x10) 2m45.763577461s ago: executing program 3 (id=1049): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000000)=r1, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @remote}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x44, 0xc, "09f00008ea6e19000000"}]}}}], 0x40}, 0x20002880) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) 2m45.478325468s ago: executing program 3 (id=1052): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a0000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000380)={'dvmrp0\x00', @multicast}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4177, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x100000000, 0x7e}, 0x105e39, 0xfffffffffffffff7, 0x10001, 0x1, 0x5, 0x2, 0x1, 0x0, 0x100, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x8000) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fc00000000000e1208000f0100810401a80016eaa40001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) r6 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040), 0x4) socketpair(0x9, 0x2, 0xf99, &(0x7f0000000000)) sendmsg$kcm(r6, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710063d2ac", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) 2m45.042647818s ago: executing program 3 (id=1060): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d8030000000000", 0x2c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xfe33) 2m44.901807171s ago: executing program 3 (id=1062): bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[], 0x5) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x110, 0x0, 0x0, 0x5, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100004, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r3, @ANYRES32=r0], 0x48) r5 = socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x828, 0x7fff, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20) close(r5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0xc, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600", 0x34}], 0x1}, 0x20000800) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x40, 0x1, 0x0, 0x7}, {0x6, 0x0, 0x0, 0x101}]}) ioctl$TUNGETVNETLE(r6, 0x40107446, &(0x7f0000000180)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 2m44.591217467s ago: executing program 3 (id=1064): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a042e2315bc28481860a8d8270d0644763c6a9c8b12820e8f03653b548f34798c3481f7b22c81616bb9e2065955c00fe2a763eb2135027502804cc2345a2956f28d751dc2bdeed8dce", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa2c36d74af9a070d50000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) r11 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) recvmsg$unix(r3, &(0x7f0000000b40)={&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/60, 0x3c}, {&(0x7f0000000800)=""/224, 0xe0}, {&(0x7f0000000900)=""/19, 0x13}, {&(0x7f0000000940)=""/135, 0x87}, {&(0x7f0000000a00)=""/93, 0x5d}], 0x6, &(0x7f0000000b00)=[@cred={{0x1c}}], 0x20}, 0x2001) 2m29.447098579s ago: executing program 32 (id=1064): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a042e2315bc28481860a8d8270d0644763c6a9c8b12820e8f03653b548f34798c3481f7b22c81616bb9e2065955c00fe2a763eb2135027502804cc2345a2956f28d751dc2bdeed8dce", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa2c36d74af9a070d50000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) r11 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) recvmsg$unix(r3, &(0x7f0000000b40)={&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/60, 0x3c}, {&(0x7f0000000800)=""/224, 0xe0}, {&(0x7f0000000900)=""/19, 0x13}, {&(0x7f0000000940)=""/135, 0x87}, {&(0x7f0000000a00)=""/93, 0x5d}], 0x6, &(0x7f0000000b00)=[@cred={{0x1c}}], 0x20}, 0x2001) 5.334211372s ago: executing program 4 (id=2065): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400000400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x44) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000645d551fc41af52954ebcf6bc169366958ec4f555349e7b88978b09adc4ceefe132a73c8253dc3ef0b7db0727fe68a29df610eef4c22b50e0436592dbf75d1b65afc79ffa269ec237c43cc6871", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000ec73507838c459d925419b30197de52a000000000000000000000000a693e0d3d08a28892ebd031ef096afb31874694893595d0be388a0cc78744f33debdb0b1da13e50f0147f765bc17bc7b23b45a24b20fef0a45ccfcbaa428346c9112846b7240e26bb09367cd2e99915e529354a216b03e347db67ab3afc09bc70a2fa2eb6295bc4c400dd9f6841c5c0b959ebfee1eaefd88280a07983d861946dc511b5bc9319ddbe155fa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000000)=r3, 0x11) setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000040)=r3, 0x4) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000003c0)=0x4000000000001000, 0x12) close(0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0x8}, 0x118320, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x2, 0x54197, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x4, 0x0, 0x0, 0x7, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 5.058382348s ago: executing program 2 (id=2067): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4}, 0x94) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f0000000480)="170f108acdf924801b0001000000", 0x0, 0x9fc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff21000b00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x2, r4}, 0x38) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r5, r3}, 0x10) 4.746411915s ago: executing program 4 (id=2068): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x5, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x110b0c, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100fe2010ff"}) (fail_nth: 3) 4.246143146s ago: executing program 1 (id=2070): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x6, 0x1, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 4.08262053s ago: executing program 2 (id=2072): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a0000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000380)={'dvmrp0\x00', @multicast}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4177, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x100000000, 0x7e}, 0x105e39, 0xfffffffffffffff7, 0x10001, 0x1, 0x5, 0x2, 0x1, 0x0, 0x100, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x8000) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) r6 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040), 0x4) socketpair(0x9, 0x2, 0xf99, &(0x7f0000000000)) sendmsg$kcm(r6, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710063d2ac", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) 3.990302392s ago: executing program 1 (id=2073): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6e8, 0xa}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80242, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000000000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000055d00cc038b8075c565661c88cda24dd374ca39df4c3d4f54b263187a6870311ba7837fd3c1b7598e5ceaec7cac0bb3dab053c8554e6dae3b7f8d536f966f7f222cad7b21c067cd189e9e083be17da90a4df27abd6ce4121b69d25097b7f5a08e02f2078f7109b3183f636e687d5e1db32d322100cc3"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000040000000f00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000001c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x5, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x110b0c, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100fe2010ff"}) 3.711522538s ago: executing program 0 (id=2074): socket$kcm(0x1e, 0x4, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x2108000, &(0x7f0000000040)="f03feae87e48a3fd281e295807d6533af67eb80fc4015e", 0x17, &(0x7f00000003c0), 0x0, &(0x7f0000000440)="b6b29bcd2465bf66a406445f18518287011c6005415e102e584d5492ca3924852d969ed500b997469bf26086eee09a1f73cc666b8b63cfbdd76f7b335b21308a0ef22c225739309671a757d159fcb2d7b46c0611224850fa629243baaa3db8474922a11be7b82969968e4dc6f0eb05d71d9b2c026806569588eba37eec455e91e4") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES8, @ANYBLOB="00000000fdffffff00000000040000010000000000acb7"], 0x50) 3.536148692s ago: executing program 0 (id=2075): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x3, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x85, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x80044942, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90924fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000009c0)='%ps \x00'}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0), 0x8) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00), 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x8, 0xee, &(0x7f00000005c0)=""/238, 0x41000, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0xb, 0x7fffffff, 0x100}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000b40)=[r4, r5, r6, r7, 0xffffffffffffffff, r8, 0x1, 0x1], &(0x7f0000000b80)=[{0x5, 0x5, 0x4, 0x4}, {0x4, 0x4, 0xa, 0x7}, {0x4, 0x5, 0x6, 0x7}, {0x3, 0x1, 0xa, 0xb}, {0x0, 0x2, 0xd, 0x7}, {0x5, 0x1, 0xa, 0x2}, {0x4, 0x3, 0x5, 0xc}, {0x1, 0x1, 0xe, 0x1}, {0x5, 0x2, 0xf, 0xc}], 0x10, 0x1}, 0x94) r9 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\tmw'], 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="d80000001d0081044e81f799db44b904031d080201000000040000a1bc0001000000000000002b1208000f0100810401a8001600200001400309000000600cfab94dcf5c0461c16fb4007108e8d8ef075c11503c6bbace801bcb090000001f392c653b5ee4001b146218a07445d6d930dfe1d9d322107c9fd68adb6cca0b3795af586b325782311c399d8186e68093c100000000000000", 0x97}, {&(0x7f0000000000)="000042d5b325d62bd44d", 0xa}, {&(0x7f0000000980)="027264c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e4000000000000000490d8e93db", 0x37}], 0x3, 0x0, 0x0, 0x7400}, 0x10) 3.439848884s ago: executing program 4 (id=2076): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400000400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x44) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000645d551fc41af52954ebcf6bc169366958ec4f555349e7b88978b09adc4ceefe132a73c8253dc3ef0b7db0727fe68a29df610eef4c22b50e0436592dbf75d1b65afc79ffa269ec237c43cc6871", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000ec73507838c459d925419b30197de52a000000000000000000000000a693e0d3d08a28892ebd031ef096afb31874694893595d0be388a0cc78744f33debdb0b1da13e50f0147f765bc17bc7b23b45a24b20fef0a45ccfcbaa428346c9112846b7240e26bb09367cd2e99915e529354a216b03e347db67ab3afc09bc70a2fa2eb6295bc4c400dd9f6841c5c0b959ebfee1eaefd88280a07983d861946dc511b5bc9319ddbe155fa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000000)=r3, 0x11) setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000040)=r3, 0x4) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000003c0)=0x4000000000001000, 0x12) close(0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0x8}, 0x118320, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x2, 0x54197, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x4, 0x0, 0x0, 0x7, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 3.368175656s ago: executing program 1 (id=2077): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8720b0000005e140602000000000e000a00100000001a80009a6694", 0x2e}], 0x1}, 0x4000080) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) sendmsg$kcm(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="a49fab5718433038f8a001a161673d0556755aea37bc4747706bffe600403fbb", 0x20}], 0x1, &(0x7f0000001800)=[{0x88, 0x10b, 0x3, "456e880a5694ae8af564580a6f6cd2c85601ca1db7efdd8aabbf1b2cde8a697b1509dbf91d41e8e60ed03dbafc81c4cad4022c1a5d4fc2083305ec794ba9605d3a4f8de2aad4e70039dcdd40d8fc4ca8e1b45774b3a2d0be23d60c1d9dcd507e9d9772769ac50c34eeadba06f4998bcdf7f8a31f"}, {0x68, 0x3a, 0x1, "2133fdf238900bf74564b8c3ffa804e232ee52398106c7e84c0dfbe9c690fc5dd26625400bdc52cc3b376f67bcb1975517937add81e782dddc728f19e7912830536b0106f6aac20589f1698341ba16e095f6118b"}, {0x1010, 0x102, 0x6, "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"}], 0x1100}, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) socket$kcm(0x29, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xb) ioctl$TUNSETLINK(r4, 0x400454cd, 0x10e) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000180), 0x0}, 0x20) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x1001, 0xffffffff80000001, 0x0, 0x9, 0x0, 0x20000, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000005000000000000000000060020000000000000008400000002"], 0x38}, 0x0) 3.308620177s ago: executing program 2 (id=2078): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffff15}, {}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @ldst={0x1, 0x3, 0x6, 0xa, 0x0, 0x80, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x152}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x4, 0x4a, &(0x7f0000000140)=""/74, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000001c0)=[{0x5, 0x4, 0xc, 0x6}, {0x4, 0x2, 0xd, 0x9}, {0x0, 0x3, 0x1, 0xa}, {0x1, 0x3, 0xd}, {0x4, 0x3, 0xe, 0x4}, {0x5, 0x3, 0xc, 0x3}, {0x0, 0x2, 0x5, 0xb}, {0x0, 0x4, 0x8, 0x2}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001480)={r0, 0x0, 0x23, 0x1000, &(0x7f0000000300)="e12399ed1403f2a672f06d188e6fd06801047fcc65c7f4440fc124abc8abe631d8e875", &(0x7f0000000340)=""/4096, 0x23b, 0x0, 0x0, 0xde, &(0x7f0000001340), &(0x7f0000001380)="1b99cc40f8d14e9012346f5fa7014fca93d46f5f5b06821268e74c74808a66fda6e5bd8a95b3f92d0d3fec9ed6a9bfe2061e3131708fa79719e587d3fef6dfa5f5c2eeb3f205fd0dab28952ddc7b6588ac22cc89376cc2ff23fb0f172cbbb30c9ead1d0a856ae49e4fa464bacddde0423ebb7a2fad9cf48edcf27a95565a2f4e6176b8a3dcc22849a994a965396f1d46d2a6ac0fbaebcc75d0e9f0791f52d599a7cade93e7f356ff990fba5c2214162a4c0f60153403f6b83b50e854a48992f0d1deabecf2464f8842692b961e6c41dd93625820a63359d28084b9960fc8", 0x1, 0x0, 0xc0c}, 0x50) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001500)={0xffffffffffffffff, 0x3, 0x8}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000015c0)={{r1, 0xffffffffffffffff}, &(0x7f0000001540), &(0x7f0000001580)='%pB \x00'}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001600)={0xffffffffffffffff}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000016c0)={r1, 0x58, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xa, [@fwd={0x2}, @ptr={0x7, 0x0, 0x0, 0x2, 0x5}, @restrict={0x4, 0x0, 0x0, 0xb, 0x5}, @volatile={0xb, 0x0, 0x0, 0x9, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x3}, {0x7, 0x3}]}, @enum={0x0, 0x4, 0x0, 0x6, 0x4, [{0x0, 0x1000}, {0x1, 0x6a1}, {0x8, 0x2}, {0xc, 0x39b0}]}]}, {0x0, [0x5f, 0x0, 0x61, 0x30, 0x30, 0x2e, 0x2e, 0x61]}}, &(0x7f00000017c0)=""/224, 0x9a, 0xe0, 0x0, 0x2, 0x10000}, 0x28) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001900)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x51f7c327, '\x00', r4, r5, 0x2, 0x1, 0x2}, 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001a80)={@ifindex=r4, 0x26, 0x1, 0x2c54cd1, &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000019c0)=[0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0, 0x0], 0x0}, 0x40) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001dc0)={r0, 0xe0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f0000001bc0)=[{}], 0x8, 0x10, &(0x7f0000001c00), &(0x7f0000001c40), 0x8, 0x37, 0x8, 0x8, &(0x7f0000001c80)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001ac0)={@cgroup=r0, r3, 0x8, 0x24, 0x0, @void, @void, @void, @value=r8, r7}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001e00)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001e40)={r10}, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001e80)={0xffffffffffffffff, r0, 0x0, r0}, 0x10) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002080)={0x6, 0x7, &(0x7f0000001ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x0, 0xf17a1cec2042fa66, 0x9, 0xffffffffffffffc0}]}, &(0x7f0000001f00)='GPL\x00', 0x3, 0x58, &(0x7f0000001f40)=""/88, 0x41100, 0x0, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000001fc0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002000)=[r2, r1, r10], &(0x7f0000002040)=[{0x0, 0x1, 0xa, 0x3}], 0x10, 0x764}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002180)=@o_path={&(0x7f0000002140)='./file0\x00', r10, 0x4000, r11}, 0x18) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0x11, 0x1c, &(0x7f00000021c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffcf8, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000022c0)='syzkaller\x00', 0x4, 0x72, &(0x7f0000002300)=""/114, 0x41100, 0x20, '\x00', r9, @fallback=0x11, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002380)={0x0, 0xb, 0x3, 0x9}, 0x10, 0x0, r0, 0x6, 0x0, &(0x7f00000023c0)=[{0x1, 0x4, 0x4, 0x6}, {0x0, 0x1, 0x10, 0x6}, {0x3, 0x1, 0xf, 0x2}, {0x5, 0x1, 0x0, 0xc}, {0x2, 0x5, 0xf, 0x6}, {0x5, 0x8, 0x6, 0x9}], 0x10, 0xd69}, 0x94) (async) r13 = perf_event_open$cgroup(&(0x7f0000002500)={0x3, 0x80, 0x3, 0x8, 0x1, 0x7f, 0x0, 0x8, 0x4018, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x6}, 0x200a, 0x3, 0x3, 0x2, 0x2, 0x0, 0xfd9, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, r11) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000025c0)=@generic={&(0x7f0000002580)='./file0\x00', r12}, 0x18) r14 = openat$cgroup_ro(r13, &(0x7f0000002600)='cgroup.kill\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r14, 0x8924, &(0x7f0000002640)={'sit0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}) (async) socket$kcm(0x29, 0x0, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000002c00)={&(0x7f0000002680)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002700)="84853934fc9b47ebf72aa63c96a51fe3f659bb349c3db649fc3c0cfb69cd513f4a81409f376353480649ca120a4e6e6ab3bb35c1656f7cc6cac06778fead4faa47efca6494f5ae2c7fc1876783ea18e98a41cda13b28a847f5575020cc6a0bfddbfc0064e82b3b41cd3c2b8a176ada6b19b78cb8f06b18bb634a23949ffcde96cfe38a19d139cd2b712ede111d8d08180a074d329ed6a88576fdd5529dd1228672e3295829d57fd6a4fedf8ec40f742ae6da3b46df8ef74fdf00fa69c69834fed742960cb54c92dd22835f7d434f4b037bf250966b313daefe59509999e1", 0xde}, {&(0x7f0000002800)="78a86bf70646429de36a1a537b57eaf9c22964910c134b01407e8527c529396948bce44e92a0f0ce0ba05f387b23c7b7bc9f2f8412ea6ce2853e07150b12488147d2d2a044d6bc673275553c1579a4a243a81b267841119d1eb9fcc7a3fa7bdac7c1bbd50b394f1bb5faf4f6cc9187338291442a1b6a4cb0f69ef8a8e1c4507ad03f0e1d6ad81853d9900f9a3a7a0a85627eb1988ecb93e19d26201f67ef8395f6af35e41d8267ff4a193a2e1f559244bf4beb17a0163cd3", 0xb8}, {&(0x7f00000028c0)="4dc20df6e6fc507692112f8a302ee2de0b1008ab7d796911c62ce85b204ad406d87256c40611b6cd48b1c7016d34a8d377acfa8b8770d1bd9e39555ff33bc5420c7086bf9ab0ff4759f983cd4a53cbc1428607f39e99379dd1", 0x59}, {&(0x7f0000002940)="7c6d47834fc61d06c877e486e8c4a8d176ac65b472f7a20c72dbb2868b313f96b377fe52bccee07339d1", 0x2a}, {&(0x7f0000002980)="e3873abbd5a260b768c022e0a8636e53b3b4f0417c33b8d25ba474aaf0982acec6a9f427f737a532bd2db8bd13c9f789111be33247a0a6bfaaab150c6db78de0720762775633359ec8c4bba93604db4bd4b3d4555fd5fadceb7ac48cc502b615ecd6d2dcabb0306e8ed2a33ecbb814a560e44c2867c217e87ec99c820f24e0e1c5cc95fe5a6b224365ab9837b49d8b9f3a5925e2804fae49160ee4a87e", 0x9d}, {&(0x7f0000002a40)="026eb5984bd4ec70b2de707c93caa639616c2b4c90c848cf5543ca6e1289a3f76c64c78dd24ce2d0148890c6e8e39e1e027ef9cb1fa66992650c79d6", 0x3c}], 0x6, &(0x7f0000002b00)=[{0xf8, 0x10f, 0xaca, "04bec315df1487d271162b4ca7f6794e08e868d21d0f611a12f441a107d15c668a68f441db9185930c6e3c420091789a88145a759af651d4ab9687332a459d36d3552a37e212aa35a67d5e6a5bf697017af817892902e9eed3a7d821e27163d1ac9c3ba0cbdeeae7b55d4841b11046027c09a51f22901b07cab4110f558f1d0835e1292e57fd74f196a877d46809ac6a00868e1fdeafff01225bb9e47905fd1e13544efb4c127d8c9c53140408b6266876c2bbf67853acff738fe9e9c3219347263077e008964f53be6bf354603573672bc9aec4bcc96c7666caf76724e8888aba"}], 0xf8}, 0x4000040) (async) recvmsg$unix(r14, &(0x7f0000005240)={&(0x7f0000002c40), 0x6e, &(0x7f0000005100)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/248, 0xf8}, {&(0x7f0000003dc0)=""/210, 0xd2}, {&(0x7f0000003ec0)}, {&(0x7f0000003f00)=""/188, 0xbc}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/50, 0x32}, {&(0x7f0000005000)=""/32, 0x20}, {&(0x7f0000005040)=""/161, 0xa1}], 0x9, &(0x7f00000051c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40002000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005540)={r14, 0xe0, &(0x7f0000005440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005280), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000052c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000005300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000005340)=[{}], 0x8, 0x10, &(0x7f0000005380), &(0x7f00000053c0), 0x8, 0x55, 0x8, 0x8, &(0x7f0000005400)}}, 0x10) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000067c0)={&(0x7f0000005580)="355abc3a1e27059abf8a1615b101d3f1ef66eb5d59d412d2973b82876cb3c9390ea15fb0efd84b256b283bdb350121c7c034f7109f3bc1e246a2c91a63908e126ad5a135c103ae89d4bfd2f1ddc9c4605c6c510e90a94da90bd46e6bd46387ad594add4563b7db72fa04efda812604743e1f406e0ea809f1d3397eb27531c16b97ae9ae06610a3a79136506fff507542232ba3ffb109736f2e785d47c88780b908d29216bbfb1145be1dea", &(0x7f0000005640)=""/4096, &(0x7f0000006640)="df3d0b68e1082e1284c315e41c11a19173c3bdf306ef0ad4eac225153ab88e54f104f0c46cbf75fb7fc86015d0c3caf80333983629ccedceba28c3a83f531112d4df701d046786fa6ec5a7974d86b6715b1cd3a1582adbc8552ec76b785fbd369e4ffe16b0ad99a62dc75815437a6e7903c060f74f26e77e2dc2b6b1b251000d63cb9792018380cbe987a6", &(0x7f0000006700)="2241b84b803aa225b0b5ed7aebfdd5f360be071041009fed963f320813a3ee0fc6dc6512703020c45474c0e67dc164808fe33b730c9c612bcc09a37cc3438bd36e74c5ad604cbea80b142ff2622c7a2edf7eecfd962c798d2f43e54a5478b676ddb8e6e7997704b573e3be61460ae91bc7df3849731e514a65042a113e34bcd1c22f548d01c7314e7f95dd7b2b3acda49c5b8f1407ca9c3d", 0x8001, r1, 0x4}, 0x38) (async) recvmsg$kcm(r3, &(0x7f0000006bc0)={&(0x7f0000006800)=@qipcrtr, 0x80, &(0x7f0000006a80)=[{&(0x7f0000006880)=""/201, 0xc9}, {&(0x7f0000006980)=""/214, 0xd6}], 0x2, &(0x7f0000006ac0)=""/252, 0xfc}, 0x140) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000006d00)={@cgroup, 0x2, 0x1, 0x9, &(0x7f0000006c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000006c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000006c80)=[0x0], &(0x7f0000006cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 3.011444793s ago: executing program 2 (id=2079): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r4, &(0x7f0000000700)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0) close(r4) r5 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$inet(r5, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x20000041) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() getpid() gettid() sendmsg$unix(r6, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=ANY=[], 0x88, 0x4040040}, 0x40c0) syz_clone(0x10021400, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x4}, 0x21, 0x0, 0x0, 0x4, 0x9, 0x7f7fffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x18, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)="d80000003200b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a000140f9bf7948f940ea0313070dcc5cdc1f19580077f49081eb06000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb5fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edd57cc3e8", 0xd8}], 0x1}, 0x0) 2.896666386s ago: executing program 0 (id=2080): socket$kcm(0xa, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x1800}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (fail_nth: 1) 2.895942476s ago: executing program 4 (id=2081): socket$kcm(0xa, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x1800}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 2.412056557s ago: executing program 1 (id=2082): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x2, 0x4, 0x0, 0xd1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040), 0x4) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x80}}, 0x10, 0x0, 0x0, &(0x7f0000000100)}, 0xe900) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000aa9e50dce649d8e20000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2f00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af80500000000000000000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000200850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x10, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYRESOCT, @ANYRES64=r4], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xffffff85, 0x0, 0x0, 0x0, 0x1, 0x0, 0x82, 0x0, &(0x7f0000001100)="abcebe9ebb517b2baf1a1497ee32ffd8d79a3baedc1cbe154676fa32f3aeaab29b2a3ab59c41334526eb83c2a1500bcf91b95b706689c94b6c924101a140ddeb86d5710ce82644d937ae473e7d001ee69a157643e1515a0afb5d8a9dae23b15dde01a81e07004c5a51b42f3443ceff455775d9158247600581468e441dbfb1588fc2432a80a12bf551010bb0768478f5b6968815a18c3aaaca4a895ee1a3b222a186f0edb25ade9096a2e0a63e3478e6a2b412391af24346c7de34b22081745ffee8d112be14adbc854c4d47270401e8c03fdf781d584b873e230386aa347ca063f3e6ae7d1b473a7df15ca4083d1a62af8e86f6a72d41d985278b4602c4", 0x0, 0x3, 0x0, 0x2}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000380)=@alg, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000580)=""/221, 0xdd}, {&(0x7f0000000680)=""/230, 0xe6}, {&(0x7f0000000840)=""/202, 0xca}, {&(0x7f00000009c0)=""/141, 0x8d}, {&(0x7f0000000a80)=""/77, 0x4d}, {&(0x7f0000000b00)=""/47, 0x2f}, {&(0x7f0000000b80)=""/128, 0x80}, {&(0x7f0000000c80)=""/242, 0xf2}, {&(0x7f0000000d80)=""/169, 0xa9}], 0x9, &(0x7f0000000f00)=""/210, 0xd2}, 0x40000100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(r7, 0x0, 0x4804) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x10, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x114905, 0x7, 0x400, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x80000, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x2e}, {&(0x7f0000000940)="51c57e3501b5ef7a1bfdea1dc1a86a7340a03336850d23cb4e11648f8c43188bd32a4582e09c552837c677762f1c6033337f2d1d8b23079a7f53d750a5898253f131", 0x42}], 0x2}, 0x4800) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x6) 2.326249158s ago: executing program 0 (id=2083): socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000), 0x8) sendmsg$inet(r0, &(0x7f0000000d80)={&(0x7f0000000b40)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000b80)="e0", 0x1}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xb}, 0xbafa, 0xff, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="02"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d001800000000000000280600002800000002"], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x1b, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0xf7, 0xef, &(0x7f00000002c0)=""/239, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x6, 0x7, 0xf}, 0x10, 0x18b3f, 0xffffffffffffffff, 0x4, &(0x7f0000000640)=[0x1, r3, r4], &(0x7f0000000680)=[{0x4, 0x4, 0xc, 0xb}, {0x0, 0x4, 0xd, 0x2}, {0x5, 0x1, 0x9, 0x6}, {0x5, 0x5, 0x4, 0x1}], 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r6 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x541b, &(0x7f0000000240)) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x1800}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 2.192752511s ago: executing program 4 (id=2084): socket$kcm(0x1e, 0x4, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x2108000, &(0x7f0000000040)="f03feae87e48a3fd281e295807d6533af67eb80fc4015e", 0x17, &(0x7f00000003c0), 0x0, &(0x7f0000000440)="b6b29bcd2465bf66a406445f18518287011c6005415e102e584d5492ca3924852d969ed500b997469bf26086eee09a1f73cc666b8b63cfbdd76f7b335b21308a0ef22c225739309671a757d159fcb2d7b46c0611224850fa629243baaa3db8474922a11be7b82969968e4dc6f0eb05d71d9b2c026806569588eba37eec455e91e4") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES8, @ANYBLOB="00000000fdffffff00000000040000010000000000acb7"], 0x50) 2.140122602s ago: executing program 1 (id=2085): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xc, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xf, 0x8000007}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f0000000400000006000000070000", @ANYRES32, @ANYBLOB="0000000000000000008000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0xfd0f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x3, '\x00', r4, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)=',\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x10, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf100, 0x0, 0x0, 0x0, 0x2000}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x44}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91724fc60100005", 0x17}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200"}) 2.117788573s ago: executing program 2 (id=2086): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a0000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000380)={'dvmrp0\x00', @multicast}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4177, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x100000000, 0x7e}, 0x105e39, 0xfffffffffffffff7, 0x10001, 0x1, 0x5, 0x2, 0x1, 0x0, 0x100, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x8000) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) r6 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040), 0x4) socketpair(0x9, 0x2, 0xf99, &(0x7f0000000000)) sendmsg$kcm(r6, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710063d2ac", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) 2.049349175s ago: executing program 1 (id=2087): socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x9, 0x60cb01f8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8d157164}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x1, 0xdb, &(0x7f0000000640)=""/219, 0x41100, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[r0], 0x0, 0x10, 0x101}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000180)=0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r2, r1, 0x4, 0x8}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305829, &(0x7f0000000040)=0x20003) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_clone(0x0, &(0x7f00000001c0)="0a407e63a58c0ce97cfde16b8803228c7ecfac9d5a368235050322", 0x1b, 0x0, &(0x7f0000000440), 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x88, 0x56, 0x1, 0x0, 0x0, 0x0, 0x3b70, 0x145a7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x5d1, 0x2}, 0x4507, 0x32, 0xfffffbfd, 0x2, 0x7, 0x3, 0xfffa, 0x0, 0xfffffffc, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x30, 0xff, 0x6, 0xfffff00c}, {0x6, 0xff, 0x9, 0x1}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=' ', 0x1}], 0x1}, 0x1) sendmsg$kcm(r8, &(0x7f0000000540)={0x0, 0xeffd, 0x0}, 0xc0004) sendmsg$kcm(r8, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003100000001010000000000000e000a000f000000028002002d1fb6", 0x2f}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d4"], 0x10b8}, 0x20000000) 1.701731692s ago: executing program 2 (id=2088): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x3, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x85, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x80044942, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90924fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000009c0)='%ps \x00'}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0), 0x8) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00), 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x8, 0xee, &(0x7f00000005c0)=""/238, 0x41000, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0xb, 0x7fffffff, 0x100}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000b40)=[r4, r5, r6, r7, 0xffffffffffffffff, r8, 0x1, 0x1], &(0x7f0000000b80)=[{0x5, 0x5, 0x4, 0x4}, {0x4, 0x4, 0xa, 0x7}, {0x4, 0x5, 0x6, 0x7}, {0x3, 0x1, 0xa, 0xb}, {0x0, 0x2, 0xd, 0x7}, {0x5, 0x1, 0xa, 0x2}, {0x4, 0x3, 0x5, 0xc}, {0x1, 0x1, 0xe, 0x1}, {0x5, 0x2, 0xf, 0xc}], 0x10, 0x1}, 0x94) r9 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\tmw'], 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="d80000001d0081044e81f799db44b904031d080201000000040000a1bc0001000000000000002b1208000f0100810401a8001600200001400309000000600cfab94dcf5c0461c16fb4007108e8d8ef075c11503c6bbace801bcb090000001f392c653b5ee4001b146218a07445d6d930dfe1d9d322107c9fd68adb6cca0b3795af586b325782311c399d8186e68093c100000000000000", 0x97}, {&(0x7f0000000000)="000042d5b325d62bd44d", 0xa}, {&(0x7f0000000980)="027264c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e4000000000000000490d8e93db", 0x37}], 0x3, 0x0, 0x0, 0x7400}, 0x10) 886.98579ms ago: executing program 0 (id=2089): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x10, 0x4, 0x0, 0x0, 0x0, 0xffdffffffffffffb, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x8ad8f72e752e9f4c, 0xc8, 0x2, 0x7, 0x0, 0xffff, 0xa}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910129875f37538e486dd6317ce8102032900fefd000e40000200875a65969ff57b00070000000000000000000000ac1414aa"], 0xfdef) 886.11724ms ago: executing program 4 (id=2090): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8720b0000005e140602000000000e000a00100000001a80009a6694", 0x2e}], 0x1}, 0x4000080) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) sendmsg$kcm(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="a49fab5718433038f8a001a161673d0556755aea37bc4747706bffe600403fbb", 0x20}], 0x1, &(0x7f0000001800)=[{0x68, 0x3a, 0x1, "2133fdf238900bf74564b8c3ffa804e232ee52398106c7e84c0dfbe9c690fc5dd26625400bdc52cc3b376f67bcb1975517937add81e782dddc728f19e7912830536b0106f6aac20589f1698341ba16e095f6118b62"}, {0x1010, 0x102, 0x6, "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"}], 0x1078}, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) socket$kcm(0x29, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xb) ioctl$TUNSETLINK(r4, 0x400454cd, 0x10e) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000180), 0x0}, 0x20) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x1001, 0xffffffff80000001, 0x0, 0x9, 0x0, 0x20000, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000005000000000000000000060020000000000000008400000002"], 0x38}, 0x0) 0s ago: executing program 0 (id=2091): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400000400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x44) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000645d551fc41af52954ebcf6bc169366958ec4f555349e7b88978b09adc4ceefe132a73c8253dc3ef0b7db0727fe68a29df610eef4c22b50e0436592dbf75d1b65afc79ffa269ec237c43cc6871", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000ec73507838c459d925419b30197de52a000000000000000000000000a693e0d3d08a28892ebd031ef096afb31874694893595d0be388a0cc78744f33debdb0b1da13e50f0147f765bc17bc7b23b45a24b20fef0a45ccfcbaa428346c9112846b7240e26bb09367cd2e99915e529354a216b03e347db67ab3afc09bc70a2fa2eb6295bc4c400dd9f6841c5c0b959ebfee1eaefd88280a07983d861946dc511b5bc9319ddbe155fa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000000)=r3, 0x11) setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000040)=r3, 0x4) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000003c0)=0x4000000000001000, 0x12) close(0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0x8}, 0x118320, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x2, 0x54197, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x4, 0x0, 0x0, 0x7, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ T8565] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.542258][ T8565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.549710][ T9386] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1203'. [ 273.359585][ T9301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.937695][ T9301] veth0_vlan: entered promiscuous mode [ 276.007385][ T9431] netlink: 'syz.0.1212': attribute type 3 has an invalid length. [ 276.012535][ T9301] veth1_vlan: entered promiscuous mode [ 276.099683][ T9430] delete_channel: no stack [ 276.177840][ T9301] veth0_macvtap: entered promiscuous mode [ 276.238248][ T9301] veth1_macvtap: entered promiscuous mode [ 276.261202][ T9433] tipc: Started in network mode [ 276.274863][ T9433] tipc: Node identity 1a, cluster identity 106 [ 276.294419][ T9433] tipc: Node number set to 26 [ 276.436632][ T9301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.465048][ T9301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.483379][ T9439] FAULT_INJECTION: forcing a failure. [ 276.483379][ T9439] name failslab, interval 1, probability 0, space 0, times 0 [ 276.494177][ T9301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.509529][ T9439] CPU: 0 PID: 9439 Comm: syz.0.1215 Not tainted syzkaller #0 [ 276.516984][ T9439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 276.524383][ T9301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.527055][ T9439] Call Trace: [ 276.540204][ T9439] [ 276.543176][ T9439] dump_stack_lvl+0x18c/0x250 [ 276.543624][ T9301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.547886][ T9439] ? show_regs_print_info+0x20/0x20 [ 276.547922][ T9439] ? load_image+0x420/0x420 [ 276.547963][ T9439] ? __lock_acquire+0x7d80/0x7d80 [ 276.573255][ T9439] ? trace_event_raw_event_lock+0x240/0x240 [ 276.579190][ T9439] should_fail_ex+0x394/0x4c0 [ 276.583895][ T9439] should_failslab+0x9/0x20 [ 276.588414][ T9439] slab_pre_alloc_hook+0x59/0x300 [ 276.593460][ T9439] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 276.599024][ T9439] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 276.604584][ T9439] __kmem_cache_alloc_node+0x53/0x250 [ 276.609995][ T9439] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 276.615641][ T9439] __kmalloc+0xa7/0x240 [ 276.619826][ T9439] bpf_prog_test_run_skb+0x242/0x18f0 [ 276.625220][ T9439] ? __fget_files+0x28/0x460 [ 276.629832][ T9439] ? __fget_files+0x3fc/0x460 [ 276.634551][ T9439] ? cpu_online+0x60/0x60 [ 276.638898][ T9439] bpf_prog_test_run+0x31f/0x390 [ 276.643858][ T9439] __sys_bpf+0x49d/0x890 [ 276.648121][ T9439] ? bpf_link_show_fdinfo+0x390/0x390 [ 276.653546][ T9439] ? lock_chain_count+0x20/0x20 [ 276.658439][ T9439] __x64_sys_bpf+0x7c/0x90 [ 276.662872][ T9439] do_syscall_64+0x55/0xb0 [ 276.667309][ T9439] ? clear_bhb_loop+0x40/0x90 [ 276.671995][ T9439] ? clear_bhb_loop+0x40/0x90 [ 276.676698][ T9439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.682605][ T9439] RIP: 0033:0x7f0f4d99de59 [ 276.687035][ T9439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.706657][ T9439] RSP: 002b:00007f0f4e8ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 276.715092][ T9439] RAX: ffffffffffffffda RBX: 00007f0f4dc25fa0 RCX: 00007f0f4d99de59 [ 276.723076][ T9439] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 276.731061][ T9439] RBP: 00007f0f4e8ce090 R08: 0000000000000000 R09: 0000000000000000 [ 276.739046][ T9439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.747029][ T9439] R13: 00007f0f4dc26038 R14: 00007f0f4dc25fa0 R15: 00007ffe8e55f5c8 [ 276.755054][ T9439] [ 276.767570][ T9301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.780743][ T9301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.792868][ T9301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.805689][ T9301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.858707][ T9301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.872046][ T9301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.891518][ T9301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.902322][ T9301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.912296][ T9301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.922995][ T9301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.932862][ T9301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.943348][ T9301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.954625][ T9301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.976759][ T9301] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.985931][ T9301] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.996938][ T9301] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.008188][ T9301] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.139409][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.154730][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.193564][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.222155][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.417047][ T9447] __nla_validate_parse: 13 callbacks suppressed [ 277.417082][ T9447] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1219'. [ 277.459464][ T9447] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1219'. [ 277.491052][ T9451] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1174'. [ 277.675298][ T9457] netlink: 'syz.1.1220': attribute type 10 has an invalid length. [ 277.683177][ T9457] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1220'. [ 277.754507][ T9457] hsr0: entered promiscuous mode [ 277.759887][ T9457] bridge0: port 5(hsr0) entered blocking state [ 277.800060][ T9457] bridge0: port 5(hsr0) entered disabled state [ 277.807017][ T9457] hsr0: entered allmulticast mode [ 277.812368][ T9457] hsr_slave_0: entered allmulticast mode [ 277.818532][ T9457] hsr_slave_1: entered allmulticast mode [ 277.829975][ T9457] bridge0: port 5(hsr0) entered blocking state [ 277.836387][ T9457] bridge0: port 5(hsr0) entered forwarding state [ 277.848083][ T9461] netlink: 'syz.0.1221': attribute type 21 has an invalid length. [ 277.874568][ T9461] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1221'. [ 278.120429][ T9466] netlink: 'syz.1.1223': attribute type 3 has an invalid length. [ 278.131430][ T9464] FAULT_INJECTION: forcing a failure. [ 278.131430][ T9464] name failslab, interval 1, probability 0, space 0, times 0 [ 278.131525][ T9464] CPU: 0 PID: 9464 Comm: syz.2.1224 Not tainted syzkaller #0 [ 278.131546][ T9464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 278.131559][ T9464] Call Trace: [ 278.131567][ T9464] [ 278.131574][ T9464] dump_stack_lvl+0x18c/0x250 [ 278.131608][ T9464] ? show_regs_print_info+0x20/0x20 [ 278.131634][ T9464] ? load_image+0x420/0x420 [ 278.131660][ T9464] ? __might_sleep+0xe0/0xe0 [ 278.131683][ T9464] ? __lock_acquire+0x7d80/0x7d80 [ 278.131709][ T9464] should_fail_ex+0x394/0x4c0 [ 278.131736][ T9464] should_failslab+0x9/0x20 [ 278.131759][ T9464] slab_pre_alloc_hook+0x59/0x300 [ 278.131786][ T9464] ? tomoyo_encode+0x2ad/0x570 [ 278.131809][ T9464] ? tomoyo_encode+0x2ad/0x570 [ 278.131831][ T9464] __kmem_cache_alloc_node+0x53/0x250 [ 278.131859][ T9464] ? tomoyo_encode+0x2ad/0x570 [ 278.131881][ T9464] __kmalloc+0xa7/0x240 [ 278.131907][ T9464] tomoyo_encode+0x2ad/0x570 [ 278.131934][ T9464] tomoyo_realpath_from_path+0x57c/0x5c0 [ 278.131960][ T9464] ? tomoyo_domain+0xd6/0x120 [ 278.131991][ T9464] tomoyo_path_number_perm+0x248/0x5e0 [ 278.132013][ T9464] ? tomoyo_path_number_perm+0x217/0x5e0 [ 278.132035][ T9464] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 278.132059][ T9464] ? ksys_write+0x1d2/0x260 [ 278.132115][ T9464] ? __fget_files+0x28/0x460 [ 278.132150][ T9464] security_file_ioctl+0x70/0xa0 [ 278.132176][ T9464] __se_sys_ioctl+0x48/0x170 [ 278.132207][ T9464] do_syscall_64+0x55/0xb0 [ 278.132230][ T9464] ? clear_bhb_loop+0x40/0x90 [ 278.144585][ T9466] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1223'. [ 278.144860][ T9464] ? clear_bhb_loop+0x40/0x90 [ 278.144890][ T9464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.144918][ T9464] RIP: 0033:0x7f0275d9de59 [ 278.190375][ T9465] delete_channel: no stack [ 278.192508][ T9464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.337523][ T9464] RSP: 002b:00007f0276d0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.345942][ T9464] RAX: ffffffffffffffda RBX: 00007f0276025fa0 RCX: 00007f0275d9de59 [ 278.353912][ T9464] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 000000000000000f [ 278.361879][ T9464] RBP: 00007f0276d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 278.369850][ T9464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.377821][ T9464] R13: 00007f0276026038 R14: 00007f0276025fa0 R15: 00007fff1b751e98 [ 278.385799][ T9464] [ 278.413212][ T9464] ERROR: Out of memory at tomoyo_realpath_from_path. [ 278.890368][ T9480] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1227'. [ 278.900158][ T9480] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1227'. [ 278.912262][ T9474] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1227'. [ 278.934136][ T9474] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1227'. [ 279.050000][ T9474] netlink: 'syz.1.1227': attribute type 10 has an invalid length. [ 279.539885][ T9505] netlink: 'syz.1.1236': attribute type 3 has an invalid length. [ 279.561222][ T9504] delete_channel: no stack [ 279.638771][ T9501] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 279.650086][ T9501] CPU: 0 PID: 9501 Comm: syz.2.1234 Not tainted syzkaller #0 [ 279.657517][ T9501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 279.667602][ T9501] Call Trace: [ 279.670899][ T9501] [ 279.673845][ T9501] dump_stack_lvl+0x18c/0x250 [ 279.678565][ T9501] ? show_regs_print_info+0x20/0x20 [ 279.683810][ T9501] ? load_image+0x420/0x420 [ 279.688364][ T9501] sysfs_warn_dup+0x8e/0xa0 [ 279.692897][ T9501] sysfs_do_create_link_sd+0xc0/0x110 [ 279.698300][ T9501] device_add_class_symlinks+0x1cf/0x240 [ 279.703972][ T9501] device_add+0x4f9/0xc40 [ 279.708334][ T9501] wiphy_register+0x1d99/0x2ac0 [ 279.713230][ T9501] ? cfg80211_event_work+0x40/0x40 [ 279.718349][ T9501] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 279.724524][ T9501] ieee80211_register_hw+0x2dd8/0x3b30 [ 279.729990][ T9501] ? ieee80211_register_hw+0xef1/0x3b30 [ 279.735537][ T9501] ? ieee80211_tasklet_handler+0x20/0x20 [ 279.741164][ T9501] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 279.747063][ T9501] ? __debug_object_init+0xec/0x450 [ 279.752265][ T9501] ? __asan_memset+0x22/0x40 [ 279.756858][ T9501] ? __hrtimer_init+0x189/0x270 [ 279.761713][ T9501] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 279.767456][ T9501] ? mac80211_hwsim_free+0x220/0x220 [ 279.772743][ T9501] ? rcu_is_watching+0x15/0xb0 [ 279.777508][ T9501] ? kstrndup+0xbd/0x140 [ 279.781756][ T9501] hwsim_new_radio_nl+0xdad/0x1a70 [ 279.786876][ T9501] ? __nla_validate+0x50/0x50 [ 279.791568][ T9501] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 279.797915][ T9501] ? __nla_parse+0x40/0x50 [ 279.802337][ T9501] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 279.808668][ T9501] genl_family_rcv_msg_doit+0x21a/0x310 [ 279.814232][ T9501] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 279.820136][ T9501] ? bpf_lsm_capable+0x9/0x10 [ 279.824817][ T9501] ? security_capable+0x89/0xb0 [ 279.829670][ T9501] genl_rcv_msg+0x611/0x7a0 [ 279.834189][ T9501] ? genl_bind+0x360/0x360 [ 279.838604][ T9501] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 279.844583][ T9501] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 279.850915][ T9501] ? ref_tracker_free+0x686/0x830 [ 279.855952][ T9501] netlink_rcv_skb+0x235/0x4c0 [ 279.860723][ T9501] ? genl_bind+0x360/0x360 [ 279.865147][ T9501] ? netlink_ack+0x1160/0x1160 [ 279.869953][ T9501] ? __lock_acquire+0x7d80/0x7d80 [ 279.874984][ T9501] ? down_read+0x1ac/0x2e0 [ 279.879404][ T9501] genl_rcv+0x28/0x40 [ 279.883394][ T9501] netlink_unicast+0x7b1/0x930 [ 279.888169][ T9501] netlink_sendmsg+0x8d0/0xbf0 [ 279.892948][ T9501] ? netlink_getsockopt+0x590/0x590 [ 279.898152][ T9501] ? apparmor_socket_sendmsg+0x8e/0x330 [ 279.903700][ T9501] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 279.908987][ T9501] ? security_socket_sendmsg+0x80/0xa0 [ 279.914450][ T9501] ? netlink_getsockopt+0x590/0x590 [ 279.919654][ T9501] ____sys_sendmsg+0x61b/0x980 [ 279.924462][ T9501] ? __asan_memset+0x22/0x40 [ 279.929054][ T9501] ? __sys_sendmsg_sock+0x30/0x30 [ 279.934079][ T9501] ? __import_iovec+0x5f2/0x850 [ 279.938938][ T9501] ? import_iovec+0x73/0xa0 [ 279.943441][ T9501] ___sys_sendmsg+0x2a6/0x360 [ 279.948125][ T9501] ? __sys_sendmsg+0x2b0/0x2b0 [ 279.952940][ T9501] __se_sys_sendmsg+0x1d0/0x2c0 [ 279.957798][ T9501] ? __x64_sys_sendmsg+0x80/0x80 [ 279.962823][ T9501] ? lockdep_hardirqs_on+0x98/0x150 [ 279.968042][ T9501] ? __x64_sys_sendmsg+0x48/0x80 [ 279.972987][ T9501] do_syscall_64+0x55/0xb0 [ 279.977407][ T9501] ? clear_bhb_loop+0x40/0x90 [ 279.982084][ T9501] ? clear_bhb_loop+0x40/0x90 [ 279.986757][ T9501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.992655][ T9501] RIP: 0033:0x7f0275d9de59 [ 279.997079][ T9501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.016694][ T9501] RSP: 002b:00007f0276d0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.025124][ T9501] RAX: ffffffffffffffda RBX: 00007f0276025fa0 RCX: 00007f0275d9de59 [ 280.033093][ T9501] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 280.041065][ T9501] RBP: 00007f0275e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 280.049034][ T9501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.057003][ T9501] R13: 00007f0276026038 R14: 00007f0276025fa0 R15: 00007fff1b751e98 [ 280.065078][ T9501] [ 280.742884][ T9522] : renamed from virt_wifi0 [ 280.968351][ T9527] netlink: 'syz.0.1247': attribute type 3 has an invalid length. [ 281.008295][ T9526] delete_channel: no stack [ 281.642873][ T9538] netlink: 'syz.0.1256': attribute type 3 has an invalid length. [ 281.691540][ T9535] delete_channel: no stack [ 282.229278][ T9554] syzkaller0: entered promiscuous mode [ 282.236221][ T9554] syzkaller0: entered allmulticast mode [ 282.823886][ T9571] __nla_validate_parse: 13 callbacks suppressed [ 282.823905][ T9571] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.1261'. [ 282.840245][ T9571] netlink: zone id is out of range [ 282.845785][ T9571] netlink: zone id is out of range [ 282.850976][ T9571] netlink: zone id is out of range [ 282.857382][ T9571] netlink: zone id is out of range [ 282.863352][ T9571] netlink: zone id is out of range [ 282.868621][ T9571] netlink: zone id is out of range [ 282.873931][ T9571] netlink: zone id is out of range [ 282.879452][ T9571] netlink: zone id is out of range [ 282.885010][ T9571] netlink: zone id is out of range [ 284.053456][ T9570] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode [ 284.064501][ T9570] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 284.231593][ T9574] netlink: 'syz.2.1263': attribute type 3 has an invalid length. [ 284.268742][ T9574] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1263'. [ 284.295901][ T9573] delete_channel: no stack [ 284.502726][ T9584] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1267'. [ 284.541510][ T9584] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1267'. [ 284.709071][ T9586] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1268'. [ 284.753299][ T9586] team_slave_0: left promiscuous mode [ 284.787051][ T9586] team_slave_0: left allmulticast mode [ 284.876600][ T9586] team0: Port device team_slave_0 removed [ 284.885960][ T9586] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 284.911005][ T9596] netlink: 'syz.0.1272': attribute type 10 has an invalid length. [ 284.946239][ T9593] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.1271'. [ 284.971440][ T9596] tap0: tun_chr_ioctl cmd 1074025677 [ 284.990671][ T9596] tap0: linktype set to 270 [ 285.330715][ T9615] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1276'. [ 285.368344][ T9615] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1276'. [ 285.387093][ T9615] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1276'. [ 285.402401][ T9615] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1276'. [ 285.605305][ T9624] netlink: 'syz.2.1280': attribute type 3 has an invalid length. [ 285.627090][ T9623] delete_channel: no stack [ 285.924828][ T9633] netlink: 'syz.2.1284': attribute type 10 has an invalid length. [ 285.987308][ T9633] tap0: tun_chr_ioctl cmd 1074025677 [ 285.992868][ T9633] tap0: linktype set to 270 [ 287.063581][ T9657] netlink: 'syz.1.1291': attribute type 3 has an invalid length. [ 287.101318][ T9655] delete_channel: no stack [ 287.300442][ T9667] netlink: 'syz.2.1297': attribute type 10 has an invalid length. [ 287.329650][ T9667] tap0: tun_chr_ioctl cmd 1074025677 [ 287.339845][ T9667] tap0: linktype set to 270 [ 287.702109][ T9677] netlink: 'syz.2.1302': attribute type 39 has an invalid length. [ 288.236720][ T9685] __nla_validate_parse: 16 callbacks suppressed [ 288.236758][ T9685] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1304'. [ 288.289571][ T9689] netlink: 'syz.1.1307': attribute type 3 has an invalid length. [ 288.304705][ T9685] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1304'. [ 288.339142][ T9689] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1307'. [ 288.354457][ T9691] netlink: 'syz.2.1308': attribute type 28 has an invalid length. [ 288.368479][ T9691] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1308'. [ 288.395707][ T9688] delete_channel: no stack [ 288.478128][ T9697] netlink: 'syz.2.1310': attribute type 10 has an invalid length. [ 288.534768][ T9697] tap0: tun_chr_ioctl cmd 1074025677 [ 288.554593][ T9697] tap0: linktype set to 270 [ 288.695735][ T9701] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1311'. [ 288.734607][ T9701] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1311'. [ 288.763874][ T9704] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1311'. [ 288.812219][ T9706] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1314'. [ 288.831808][ T9706] net_ratelimit: 4 callbacks suppressed [ 288.831824][ T9706] netlink: del zone limit has 8 unknown bytes [ 288.860442][ T9701] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1311'. [ 289.477725][ T9718] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1319'. [ 289.741385][ T9729] netlink: 'syz.0.1323': attribute type 10 has an invalid length. [ 289.811487][ T9729] tap0: tun_chr_ioctl cmd 1074025677 [ 289.835460][ T9727] netlink: 'syz.4.1322': attribute type 3 has an invalid length. [ 289.843774][ T9729] tap0: linktype set to 270 [ 290.105876][ T9725] delete_channel: no stack [ 290.930538][ T9751] FAULT_INJECTION: forcing a failure. [ 290.930538][ T9751] name failslab, interval 1, probability 0, space 0, times 0 [ 291.033677][ T9751] CPU: 1 PID: 9751 Comm: syz.4.1332 Not tainted syzkaller #0 [ 291.041135][ T9751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 291.051231][ T9751] Call Trace: [ 291.054797][ T9751] [ 291.057747][ T9751] dump_stack_lvl+0x18c/0x250 [ 291.062456][ T9751] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.068640][ T9751] ? show_regs_print_info+0x20/0x20 [ 291.073848][ T9751] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.080017][ T9751] should_fail_ex+0x394/0x4c0 [ 291.084703][ T9751] should_failslab+0x9/0x20 [ 291.089217][ T9751] slab_pre_alloc_hook+0x59/0x300 [ 291.094244][ T9751] ? tomoyo_encode+0x2ad/0x570 [ 291.099008][ T9751] ? tomoyo_encode+0x2ad/0x570 [ 291.103768][ T9751] __kmem_cache_alloc_node+0x53/0x250 [ 291.109146][ T9751] ? tomoyo_encode+0x2ad/0x570 [ 291.113906][ T9751] __kmalloc+0xa7/0x240 [ 291.118067][ T9751] tomoyo_encode+0x2ad/0x570 [ 291.122665][ T9751] tomoyo_realpath_from_path+0x57c/0x5c0 [ 291.128308][ T9751] ? tomoyo_domain+0xd6/0x120 [ 291.132999][ T9751] tomoyo_path_number_perm+0x248/0x5e0 [ 291.138466][ T9751] ? tomoyo_path_number_perm+0x217/0x5e0 [ 291.144100][ T9751] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 291.149557][ T9751] ? ksys_write+0x1d2/0x260 [ 291.154091][ T9751] ? __fget_files+0x28/0x460 [ 291.158780][ T9751] security_file_ioctl+0x70/0xa0 [ 291.163721][ T9751] __se_sys_ioctl+0x48/0x170 [ 291.168316][ T9751] do_syscall_64+0x55/0xb0 [ 291.172738][ T9751] ? clear_bhb_loop+0x40/0x90 [ 291.177410][ T9751] ? clear_bhb_loop+0x40/0x90 [ 291.182102][ T9751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.188016][ T9751] RIP: 0033:0x7f7e59f9de59 [ 291.192448][ T9751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.212057][ T9751] RSP: 002b:00007f7e5af13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.220471][ T9751] RAX: ffffffffffffffda RBX: 00007f7e5a225fa0 RCX: 00007f7e59f9de59 [ 291.228439][ T9751] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 000000000000000d [ 291.236407][ T9751] RBP: 00007f7e5af13090 R08: 0000000000000000 R09: 0000000000000000 [ 291.244379][ T9751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.252346][ T9751] R13: 00007f7e5a226038 R14: 00007f7e5a225fa0 R15: 00007ffe377cf848 [ 291.260328][ T9751] [ 291.355248][ T9751] ERROR: Out of memory at tomoyo_realpath_from_path. [ 291.385945][ T9758] netlink: 'syz.0.1335': attribute type 10 has an invalid length. [ 291.479168][ T9760] tap0: tun_chr_ioctl cmd 1074025677 [ 291.494743][ T9760] tap0: linktype set to 270 [ 291.777763][ T9762] netlink: 'syz.4.1336': attribute type 3 has an invalid length. [ 291.834902][ T9761] delete_channel: no stack [ 292.189316][ T9775] netlink: 'syz.0.1341': attribute type 15 has an invalid length. [ 292.937750][ T9791] netlink: 'syz.4.1349': attribute type 3 has an invalid length. [ 292.979572][ T9790] delete_channel: no stack [ 293.010977][ T9793] netlink: 'syz.1.1347': attribute type 10 has an invalid length. [ 293.149979][ T9793] tap0: tun_chr_ioctl cmd 1074025677 [ 293.196620][ T9793] tap0: linktype set to 270 [ 294.488737][ T9828] __nla_validate_parse: 20 callbacks suppressed [ 294.488755][ T9828] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1361'. [ 294.564493][ T9828] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1361'. [ 294.598862][ T9825] delete_channel: no stack [ 294.603743][ T9832] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1361'. [ 294.645826][ T9828] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1361'. [ 295.053887][ T9839] netlink: 'syz.4.1366': attribute type 10 has an invalid length. [ 295.257851][ T9839] team0: Port device syz_tun added [ 295.264075][ T9840] netlink: 'syz.1.1365': attribute type 21 has an invalid length. [ 295.301208][ T9840] netlink: 'syz.1.1365': attribute type 10 has an invalid length. [ 295.336428][ T9840] netlink: 'syz.1.1365': attribute type 12 has an invalid length. [ 295.376186][ T9840] netlink: 'syz.1.1365': attribute type 13 has an invalid length. [ 295.415742][ T9840] netlink: 'syz.1.1365': attribute type 14 has an invalid length. [ 295.465594][ T9840] netlink: 'syz.1.1365': attribute type 15 has an invalid length. [ 295.504975][ T9840] netlink: 'syz.1.1365': attribute type 16 has an invalid length. [ 295.541835][ T9840] netlink: 'syz.1.1365': attribute type 19 has an invalid length. [ 295.594410][ T9840] netlink: 'syz.1.1365': attribute type 21 has an invalid length. [ 295.634113][ T9840] netlink: 12226 bytes leftover after parsing attributes in process `syz.1.1365'. [ 295.704524][ T9844] tap0: tun_chr_ioctl cmd 1074025677 [ 295.714750][ T9844] tap0: linktype set to 270 [ 296.494198][ T9862] delete_channel: no stack [ 296.630105][ T9869] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1375'. [ 296.668340][ T9872] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1374'. [ 296.770084][ T9872] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1374'. [ 296.820664][ T9874] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1374'. [ 296.910022][ T9873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1374'. [ 297.759574][ T9886] tap0: tun_chr_ioctl cmd 1074025677 [ 297.779697][ T9886] tap0: linktype set to 270 [ 298.486556][ T9897] delete_channel: no stack [ 299.306612][ T9914] veth1_to_bond: entered allmulticast mode [ 300.054852][ T9928] tap0: tun_chr_ioctl cmd 1074025677 [ 300.060466][ T9928] tap0: linktype set to 270 [ 301.038498][ T9937] __nla_validate_parse: 8 callbacks suppressed [ 301.038518][ T9937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1398'. [ 301.045118][ T9934] FAULT_INJECTION: forcing a failure. [ 301.045118][ T9934] name failslab, interval 1, probability 0, space 0, times 0 [ 301.104654][ T9937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1398'. [ 301.117606][ T9934] CPU: 0 PID: 9934 Comm: syz.2.1397 Not tainted syzkaller #0 [ 301.125039][ T9934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.135131][ T9934] Call Trace: [ 301.138428][ T9934] [ 301.141374][ T9934] dump_stack_lvl+0x18c/0x250 [ 301.146086][ T9934] ? show_regs_print_info+0x20/0x20 [ 301.151314][ T9934] ? load_image+0x420/0x420 [ 301.155855][ T9934] should_fail_ex+0x394/0x4c0 [ 301.160566][ T9934] should_failslab+0x9/0x20 [ 301.165098][ T9934] slab_pre_alloc_hook+0x59/0x300 [ 301.170150][ T9934] kmem_cache_alloc+0x5a/0x2c0 [ 301.174938][ T9934] ? __nf_conntrack_alloc+0x93/0x370 [ 301.177971][ T9940] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1398'. [ 301.180231][ T9934] __nf_conntrack_alloc+0x93/0x370 [ 301.194299][ T9934] init_conntrack+0x166/0xf40 [ 301.199003][ T9934] ? early_drop+0x7f0/0x7f0 [ 301.203533][ T9934] ? nf_conntrack_find_get+0x670/0x670 [ 301.209024][ T9934] ? __siphash_unaligned+0x25c/0x3d0 [ 301.214336][ T9934] nf_conntrack_in+0xc29/0x1630 [ 301.219231][ T9934] ? nf_ct_pernet+0x270/0x270 [ 301.223950][ T9934] ? ipt_do_table+0x2c5/0x15c0 [ 301.228753][ T9934] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 301.234250][ T9934] ? ipv4_conntrack_local+0x123/0x200 [ 301.239649][ T9934] ? ipv4_conntrack_in+0x20/0x20 [ 301.244613][ T9934] nf_hook_slow+0xbd/0x200 [ 301.249060][ T9934] ? nf_hook+0x390/0x390 [ 301.253335][ T9934] nf_hook+0x228/0x390 [ 301.257446][ T9934] ? nf_hook+0xa2/0x390 [ 301.261626][ T9934] ? __ip_local_out+0x5f0/0x5f0 [ 301.266506][ T9934] ? nf_hook+0x390/0x390 [ 301.270776][ T9934] ? lockdep_hardirqs_on+0x98/0x150 [ 301.276001][ T9934] ? ip_fast_csum+0x1ee/0x2b0 [ 301.280703][ T9934] __ip_local_out+0x4db/0x5f0 [ 301.282818][ T9937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1398'. [ 301.285389][ T9934] ? nf_hook+0x390/0x390 [ 301.285421][ T9934] ip_send_skb+0x4c/0x1d0 [ 301.285441][ T9934] udp_send_skb+0xa7d/0x1440 [ 301.285478][ T9934] udp_sendmsg+0x1b23/0x23d0 [ 301.312138][ T9934] ? release_sock+0x2f/0x1c0 [ 301.316766][ T9934] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 301.321642][ T9934] ? udp_cmsg_send+0x350/0x350 [ 301.326433][ T9934] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 301.332451][ T9934] ? lock_chain_count+0x20/0x20 [ 301.337323][ T9934] ? inet_sendmsg+0x10d/0x2a0 [ 301.342032][ T9934] ? __local_bh_enable_ip+0x13a/0x1c0 [ 301.347427][ T9934] ? _local_bh_enable+0xa0/0xa0 [ 301.352296][ T9934] ? inet_sendmsg+0x10d/0x2a0 [ 301.356996][ T9934] ? inet_sendmsg+0x10d/0x2a0 [ 301.361699][ T9934] ? inet_send_prepare+0x250/0x250 [ 301.366845][ T9934] ____sys_sendmsg+0x61b/0x980 [ 301.371650][ T9934] ? __asan_memset+0x22/0x40 [ 301.376267][ T9934] ? __sys_sendmsg_sock+0x30/0x30 [ 301.381321][ T9934] ? __import_iovec+0x3fa/0x850 [ 301.386209][ T9934] ? import_iovec+0x73/0xa0 [ 301.390752][ T9934] ___sys_sendmsg+0x2a6/0x360 [ 301.395466][ T9934] ? __sys_sendmsg+0x2b0/0x2b0 [ 301.400280][ T9934] ? __lock_acquire+0x7d80/0x7d80 [ 301.405359][ T9934] __se_sys_sendmsg+0x1d0/0x2c0 [ 301.410250][ T9934] ? __x64_sys_sendmsg+0x80/0x80 [ 301.415238][ T9934] ? lockdep_hardirqs_on+0x98/0x150 [ 301.420460][ T9934] do_syscall_64+0x55/0xb0 [ 301.424902][ T9934] ? clear_bhb_loop+0x40/0x90 [ 301.429603][ T9934] ? clear_bhb_loop+0x40/0x90 [ 301.434305][ T9934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.440231][ T9934] RIP: 0033:0x7f0275d9de59 [ 301.444667][ T9934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.464301][ T9934] RSP: 002b:00007f0276d0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.472744][ T9934] RAX: ffffffffffffffda RBX: 00007f0276025fa0 RCX: 00007f0275d9de59 [ 301.480800][ T9934] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 000000000000000d [ 301.488820][ T9934] RBP: 00007f0276d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 301.496815][ T9934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.504812][ T9934] R13: 00007f0276026038 R14: 00007f0276025fa0 R15: 00007fff1b751e98 [ 301.512850][ T9934] [ 301.645981][ T9938] delete_channel: no stack [ 302.116717][ T9954] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1402'. [ 302.144869][ T9954] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1402'. [ 302.574639][ T9968] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1408'. [ 302.596412][ T9968] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1408'. [ 302.655710][ T9968] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1408'. [ 302.705001][ T9968] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1408'. [ 302.743591][ T9971] validate_nla: 5 callbacks suppressed [ 302.743606][ T9971] netlink: 'syz.1.1410': attribute type 10 has an invalid length. [ 302.807726][ T9971] tap0: tun_chr_ioctl cmd 1074025677 [ 302.813265][ T9971] tap0: linktype set to 270 [ 303.231863][ T9980] delete_channel: no stack [ 303.633554][ T9991] netlink: 'syz.4.1419': attribute type 33 has an invalid length. [ 304.649299][T10008] netlink: 'syz.1.1425': attribute type 10 has an invalid length. [ 304.790759][T10013] tap0: tun_chr_ioctl cmd 1074025677 [ 304.814992][T10013] tap0: linktype set to 270 [ 304.890267][T10011] delete_channel: no stack [ 305.640450][T10025] tap0: tun_chr_ioctl cmd 35111 [ 306.243299][T10047] netlink: 'syz.0.1438': attribute type 10 has an invalid length. [ 306.438691][T10047] tap0: tun_chr_ioctl cmd 1074025677 [ 306.444243][T10047] tap0: linktype set to 270 [ 306.674714][T10051] delete_channel: no stack [ 306.810358][T10054] __nla_validate_parse: 13 callbacks suppressed [ 306.810377][T10054] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1441'. [ 306.865041][T10054] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1441'. [ 307.086138][T10061] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1444'. [ 307.114561][T10061] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1444'. [ 307.150922][T10064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1444'. [ 307.196910][T10061] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1444'. [ 307.367473][T10059] FAULT_INJECTION: forcing a failure. [ 307.367473][T10059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.484216][T10059] CPU: 0 PID: 10059 Comm: syz.2.1443 Not tainted syzkaller #0 [ 307.491758][T10059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 307.501838][T10059] Call Trace: [ 307.505145][T10059] [ 307.508102][T10059] dump_stack_lvl+0x18c/0x250 [ 307.512814][T10059] ? show_regs_print_info+0x20/0x20 [ 307.518049][T10059] ? load_image+0x420/0x420 [ 307.522580][T10059] ? __might_fault+0xaa/0x120 [ 307.527284][T10059] ? __lock_acquire+0x7d80/0x7d80 [ 307.532342][T10059] should_fail_ex+0x394/0x4c0 [ 307.537050][T10059] _copy_to_user+0x2f/0xa0 [ 307.541487][T10059] bpf_test_finish+0x19f/0x650 [ 307.546278][T10059] ? bpf_test_run+0x174/0x870 [ 307.550977][T10059] ? convert_skb_to___skb+0x420/0x420 [ 307.556377][T10059] ? slab_build_skb+0x25a/0x3e0 [ 307.561256][T10059] bpf_prog_test_run_skb+0x1135/0x18f0 [ 307.566760][T10059] ? cpu_online+0x60/0x60 [ 307.571113][T10059] bpf_prog_test_run+0x31f/0x390 [ 307.576076][T10059] __sys_bpf+0x49d/0x890 [ 307.580337][T10059] ? bpf_link_show_fdinfo+0x390/0x390 [ 307.585742][T10059] ? lock_chain_count+0x20/0x20 [ 307.590625][T10059] __x64_sys_bpf+0x7c/0x90 [ 307.595065][T10059] do_syscall_64+0x55/0xb0 [ 307.599507][T10059] ? clear_bhb_loop+0x40/0x90 [ 307.604204][T10059] ? clear_bhb_loop+0x40/0x90 [ 307.608904][T10059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.614825][T10059] RIP: 0033:0x7f0275d9de59 [ 307.619271][T10059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.638907][T10059] RSP: 002b:00007f0276d0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 307.647363][T10059] RAX: ffffffffffffffda RBX: 00007f0276025fa0 RCX: 00007f0275d9de59 [ 307.655366][T10059] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 307.663363][T10059] RBP: 00007f0276d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 307.671365][T10059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.679364][T10059] R13: 00007f0276026038 R14: 00007f0276025fa0 R15: 00007fff1b751e98 [ 307.687379][T10059] [ 308.954089][T10077] delete_channel: no stack [ 310.333893][T10082] netlink: 'syz.1.1452': attribute type 10 has an invalid length. [ 310.485373][T10082] tap0: tun_chr_ioctl cmd 1074025677 [ 310.490920][T10082] tap0: linktype set to 270 [ 310.567531][T10086] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1454'. [ 310.618942][T10086] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1454'. [ 310.635131][T10089] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1455'. [ 310.764361][T10089] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1455'. [ 311.551345][T10109] delete_channel: no stack [ 311.992379][T10117] __nla_validate_parse: 2 callbacks suppressed [ 311.992397][T10117] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1467'. [ 312.017851][T10118] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1465'. [ 312.040726][T10118] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1465'. [ 312.053851][T10117] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1467'. [ 312.078327][T10117] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1467'. [ 312.109035][T10117] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1467'. [ 312.281730][T10122] FAULT_INJECTION: forcing a failure. [ 312.281730][T10122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.313681][T10122] CPU: 0 PID: 10122 Comm: syz.1.1468 Not tainted syzkaller #0 [ 312.321212][T10122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 312.331288][T10122] Call Trace: [ 312.334579][T10122] [ 312.337533][T10122] dump_stack_lvl+0x18c/0x250 [ 312.342341][T10122] ? show_regs_print_info+0x20/0x20 [ 312.344619][T10120] netlink: 'syz.4.1466': attribute type 10 has an invalid length. [ 312.347548][T10122] ? load_image+0x420/0x420 [ 312.359906][T10122] ? __lock_acquire+0x7d80/0x7d80 [ 312.364958][T10122] ? snprintf+0xe9/0x140 [ 312.369222][T10122] should_fail_ex+0x394/0x4c0 [ 312.373924][T10122] _copy_to_user+0x2f/0xa0 [ 312.378359][T10122] simple_read_from_buffer+0xe7/0x150 [ 312.383763][T10122] proc_fail_nth_read+0x1e8/0x260 [ 312.388814][T10122] ? proc_fault_inject_write+0x360/0x360 [ 312.394480][T10122] ? fsnotify_perm+0x271/0x5e0 [ 312.399274][T10122] ? proc_fault_inject_write+0x360/0x360 [ 312.404936][T10122] vfs_read+0x298/0x990 [ 312.409123][T10122] ? kernel_read+0x1e0/0x1e0 [ 312.413734][T10122] ? __fget_files+0x28/0x460 [ 312.418348][T10122] ? __fget_files+0x3fc/0x460 [ 312.423056][T10122] ? __fdget_pos+0x2a3/0x330 [ 312.427664][T10122] ? ksys_read+0x74/0x260 [ 312.432016][T10122] ksys_read+0x151/0x260 [ 312.436286][T10122] ? vfs_write+0x9a0/0x9a0 [ 312.440726][T10122] ? lockdep_hardirqs_on+0x98/0x150 [ 312.445945][T10122] do_syscall_64+0x55/0xb0 [ 312.450385][T10122] ? clear_bhb_loop+0x40/0x90 [ 312.455085][T10122] ? clear_bhb_loop+0x40/0x90 [ 312.459787][T10122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.465707][T10122] RIP: 0033:0x7ff63755e68e [ 312.470142][T10122] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 312.489773][T10122] RSP: 002b:00007ff6384bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.498224][T10122] RAX: ffffffffffffffda RBX: 00007ff6384bc6c0 RCX: 00007ff63755e68e [ 312.506227][T10122] RDX: 000000000000000f RSI: 00007ff6384bc0a0 RDI: 0000000000000005 [ 312.514215][T10122] RBP: 00007ff6384bc090 R08: 0000000000000000 R09: 0000000000000000 [ 312.522204][T10122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 312.530203][T10122] R13: 00007ff637826038 R14: 00007ff637825fa0 R15: 00007ffd61c55d98 [ 312.538223][T10122] [ 312.636628][T10120] tap0: tun_chr_ioctl cmd 1074025677 [ 312.642169][T10120] tap0: linktype set to 270 [ 314.675208][T10138] delete_channel: no stack [ 314.714965][T10141] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1476'. [ 314.733404][T10141] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1476'. [ 314.744771][T10141] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1476'. [ 314.759863][T10141] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1476'. [ 314.973512][T10153] netlink: 'syz.0.1481': attribute type 10 has an invalid length. [ 315.068710][T10153] tap0: tun_chr_ioctl cmd 1074025677 [ 315.086223][T10153] tap0: linktype set to 270 [ 315.877390][T10164] FAULT_INJECTION: forcing a failure. [ 315.877390][T10164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.897300][T10164] CPU: 1 PID: 10164 Comm: syz.0.1486 Not tainted syzkaller #0 [ 315.904830][T10164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 315.914913][T10164] Call Trace: [ 315.918213][T10164] [ 315.921163][T10164] dump_stack_lvl+0x18c/0x250 [ 315.926054][T10164] ? show_regs_print_info+0x20/0x20 [ 315.931284][T10164] ? load_image+0x420/0x420 [ 315.935824][T10164] ? __lock_acquire+0x7d80/0x7d80 [ 315.940879][T10164] ? snprintf+0xe9/0x140 [ 315.945157][T10164] should_fail_ex+0x394/0x4c0 [ 315.949875][T10164] _copy_to_user+0x2f/0xa0 [ 315.954322][T10164] simple_read_from_buffer+0xe7/0x150 [ 315.959735][T10164] proc_fail_nth_read+0x1e8/0x260 [ 315.964807][T10164] ? proc_fault_inject_write+0x360/0x360 [ 315.970481][T10164] ? fsnotify_perm+0x271/0x5e0 [ 315.975279][T10164] ? proc_fault_inject_write+0x360/0x360 [ 315.980948][T10164] vfs_read+0x298/0x990 [ 315.985146][T10164] ? kernel_read+0x1e0/0x1e0 [ 315.989770][T10164] ? __fget_files+0x28/0x460 [ 315.994389][T10164] ? __fget_files+0x3fc/0x460 [ 315.999105][T10164] ? __fdget_pos+0x2a3/0x330 [ 316.003734][T10164] ? ksys_read+0x74/0x260 [ 316.008204][T10164] ksys_read+0x151/0x260 [ 316.012578][T10164] ? vfs_write+0x9a0/0x9a0 [ 316.017039][T10164] ? lockdep_hardirqs_on+0x98/0x150 [ 316.022273][T10164] do_syscall_64+0x55/0xb0 [ 316.026731][T10164] ? clear_bhb_loop+0x40/0x90 [ 316.031441][T10164] ? clear_bhb_loop+0x40/0x90 [ 316.036157][T10164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.042087][T10164] RIP: 0033:0x7f0f4d95e68e [ 316.046539][T10164] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 316.066183][T10164] RSP: 002b:00007f0f4e8cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 316.074633][T10164] RAX: ffffffffffffffda RBX: 00007f0f4e8ce6c0 RCX: 00007f0f4d95e68e [ 316.082637][T10164] RDX: 000000000000000f RSI: 00007f0f4e8ce0a0 RDI: 0000000000000008 [ 316.090640][T10164] RBP: 00007f0f4e8ce090 R08: 0000000000000000 R09: 0000000000000000 [ 316.098641][T10164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 316.106645][T10164] R13: 00007f0f4dc26038 R14: 00007f0f4dc25fa0 R15: 00007ffe8e55f5c8 [ 316.114665][T10164] [ 316.125341][T10167] delete_channel: no stack [ 316.756737][T10186] netlink: 'syz.1.1494': attribute type 10 has an invalid length. [ 316.846562][T10186] tap0: tun_chr_ioctl cmd 1074025677 [ 316.852105][T10186] tap0: linktype set to 270 [ 317.027920][T10192] __nla_validate_parse: 8 callbacks suppressed [ 317.027943][T10192] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1497'. [ 317.028510][T10193] delete_channel: no stack [ 317.047785][T10196] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1499'. [ 317.101050][T10196] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1499'. [ 317.112172][T10196] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1499'. [ 317.140084][T10196] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1499'. [ 317.372183][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.379012][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.617124][T10212] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1504'. [ 317.638394][T10212] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1504'. [ 317.914932][T10217] delete_channel: no stack [ 318.062340][T10222] netlink: 'syz.0.1510': attribute type 10 has an invalid length. [ 318.122260][T10222] tap0: tun_chr_ioctl cmd 1074025677 [ 318.123369][T10224] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1509'. [ 318.142564][T10222] tap0: linktype set to 270 [ 318.240731][T10224] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1509'. [ 318.261051][T10226] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1511'. [ 318.284771][T10226] netlink: get zone limit has 4 unknown bytes [ 318.789815][T10244] delete_channel: no stack [ 319.087734][T10254] netlink: 'syz.2.1521': attribute type 10 has an invalid length. [ 319.164689][T10254] tap0: tun_chr_ioctl cmd 1074025677 [ 319.205490][T10254] tap0: linktype set to 270 [ 319.676482][T10267] delete_channel: no stack [ 320.576138][T10292] netlink: 'syz.4.1537': attribute type 10 has an invalid length. [ 320.731161][T10293] delete_channel: no stack [ 321.005007][T10292] tap0: tun_chr_ioctl cmd 1074025677 [ 321.024821][T10292] tap0: linktype set to 270 [ 322.554768][T10322] delete_channel: no stack [ 322.830898][T10334] __nla_validate_parse: 20 callbacks suppressed [ 322.830919][T10334] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1552'. [ 322.879731][T10334] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1552'. [ 322.897776][T10334] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1552'. [ 323.130189][T10339] netlink: 'syz.2.1553': attribute type 10 has an invalid length. [ 323.328262][T10339] tap0: tun_chr_ioctl cmd 1074025677 [ 323.333905][T10339] tap0: linktype set to 270 [ 324.436246][T10353] delete_channel: no stack [ 324.437493][T10351] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1559'. [ 324.505442][T10352] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1559'. [ 324.701913][T10357] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1558'. [ 324.783910][T10357] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1558'. [ 325.551146][T10372] netlink: 'syz.2.1567': attribute type 10 has an invalid length. [ 325.774676][T10372] tap0: tun_chr_ioctl cmd 1074025677 [ 325.780212][T10372] tap0: linktype set to 270 [ 325.849619][T10379] netlink: 'syz.0.1569': attribute type 10 has an invalid length. [ 326.016788][T10383] delete_channel: no stack [ 326.277319][T10379] team0: Port device geneve1 added [ 326.887470][T10389] netlink: 'syz.1.1572': attribute type 11 has an invalid length. [ 327.119690][T10396] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1574'. [ 327.155873][T10396] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1574'. [ 327.798110][T10410] delete_channel: no stack [ 327.936928][T10415] netlink: 'syz.2.1584': attribute type 10 has an invalid length. [ 328.114480][T10415] tap0: tun_chr_ioctl cmd 1074025677 [ 328.181885][T10415] tap0: linktype set to 270 [ 328.760289][T10431] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1587'. [ 328.795616][T10431] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1587'. [ 329.266464][T10433] netlink: 'syz.2.1588': attribute type 10 has an invalid length. [ 329.347769][T10445] delete_channel: no stack [ 329.596981][T10455] FAULT_INJECTION: forcing a failure. [ 329.596981][T10455] name failslab, interval 1, probability 0, space 0, times 0 [ 329.646396][T10455] CPU: 1 PID: 10455 Comm: syz.2.1595 Not tainted syzkaller #0 [ 329.653931][T10455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.664017][T10455] Call Trace: [ 329.667315][T10455] [ 329.670257][T10455] dump_stack_lvl+0x18c/0x250 [ 329.674965][T10455] ? show_regs_print_info+0x20/0x20 [ 329.680176][T10455] ? load_image+0x420/0x420 [ 329.684695][T10455] ? __might_sleep+0xe0/0xe0 [ 329.689289][T10455] ? __lock_acquire+0x7d80/0x7d80 [ 329.694318][T10455] should_fail_ex+0x394/0x4c0 [ 329.699010][T10455] should_failslab+0x9/0x20 [ 329.703513][T10455] slab_pre_alloc_hook+0x59/0x300 [ 329.708543][T10455] ? tomoyo_encode+0x2ad/0x570 [ 329.713307][T10455] ? tomoyo_encode+0x2ad/0x570 [ 329.718073][T10455] __kmem_cache_alloc_node+0x53/0x250 [ 329.723453][T10455] ? tomoyo_encode+0x2ad/0x570 [ 329.728241][T10455] __kmalloc+0xa7/0x240 [ 329.732421][T10455] tomoyo_encode+0x2ad/0x570 [ 329.737037][T10455] tomoyo_realpath_from_path+0x57c/0x5c0 [ 329.742729][T10455] ? tomoyo_domain+0xd6/0x120 [ 329.747417][T10455] tomoyo_path_number_perm+0x248/0x5e0 [ 329.752889][T10455] ? tomoyo_path_number_perm+0x217/0x5e0 [ 329.758524][T10455] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 329.763996][T10455] ? ksys_write+0x1d2/0x260 [ 329.768623][T10455] ? __fget_files+0x28/0x460 [ 329.773237][T10455] security_file_ioctl+0x70/0xa0 [ 329.778183][T10455] __se_sys_ioctl+0x48/0x170 [ 329.782782][T10455] do_syscall_64+0x55/0xb0 [ 329.787208][T10455] ? clear_bhb_loop+0x40/0x90 [ 329.791882][T10455] ? clear_bhb_loop+0x40/0x90 [ 329.796566][T10455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.802462][T10455] RIP: 0033:0x7f0275d9de59 [ 329.806878][T10455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.826659][T10455] RSP: 002b:00007f0276cee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.835075][T10455] RAX: ffffffffffffffda RBX: 00007f0276026090 RCX: 00007f0275d9de59 [ 329.843080][T10455] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000005 [ 329.851053][T10455] RBP: 00007f0276cee090 R08: 0000000000000000 R09: 0000000000000000 [ 329.859024][T10455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.866996][T10455] R13: 00007f0276026128 R14: 00007f0276026090 R15: 00007fff1b751e98 [ 329.874984][T10455] [ 329.914539][T10455] ERROR: Out of memory at tomoyo_realpath_from_path. [ 330.329252][T10454] netlink: 'syz.0.1596': attribute type 10 has an invalid length. [ 330.353970][T10462] tap0: tun_chr_ioctl cmd 1074025677 [ 330.363275][T10462] tap0: linktype set to 270 [ 330.524872][T10466] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1599'. [ 330.549916][T10466] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1599'. [ 331.231940][T10481] delete_channel: no stack [ 331.336652][T10486] netlink: 'syz.0.1606': attribute type 27 has an invalid length. [ 331.365073][T10486] netlink: 'syz.0.1606': attribute type 25 has an invalid length. [ 331.589142][T10492] netlink: 'syz.1.1609': attribute type 10 has an invalid length. [ 331.722448][T10492] tap0: tun_chr_ioctl cmd 1074025677 [ 331.750013][T10492] tap0: linktype set to 270 [ 332.046946][T10496] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1611'. [ 332.085631][T10496] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1611'. [ 332.562279][T10511] netlink: 'syz.4.1617': attribute type 7 has an invalid length. [ 332.595601][T10507] delete_channel: no stack [ 333.225534][T10525] netlink: 'syz.1.1623': attribute type 10 has an invalid length. [ 333.302329][T10525] tap0: tun_chr_ioctl cmd 1074025677 [ 333.334720][T10525] tap0: linktype set to 270 [ 333.381404][T10528] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1624'. [ 333.415145][T10528] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1624'. [ 333.868359][T10536] delete_channel: no stack [ 334.458126][T10549] FAULT_INJECTION: forcing a failure. [ 334.458126][T10549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.484544][T10549] CPU: 1 PID: 10549 Comm: syz.1.1632 Not tainted syzkaller #0 [ 334.492075][T10549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 334.502155][T10549] Call Trace: [ 334.505454][T10549] [ 334.508392][T10549] dump_stack_lvl+0x18c/0x250 [ 334.513100][T10549] ? show_regs_print_info+0x20/0x20 [ 334.518320][T10549] ? load_image+0x420/0x420 [ 334.522852][T10549] ? __might_fault+0xaa/0x120 [ 334.527551][T10549] ? __lock_acquire+0x7d80/0x7d80 [ 334.532606][T10549] should_fail_ex+0x394/0x4c0 [ 334.537310][T10549] _copy_from_iter+0x1cd/0x1290 [ 334.542161][T10549] ? rep_movs_alternative+0x4a/0x90 [ 334.547365][T10549] ? copyout_mc+0x70/0x70 [ 334.551704][T10549] ? copyout_mc+0x70/0x70 [ 334.556031][T10549] ? __virt_addr_valid+0x10c/0x380 [ 334.561144][T10549] ? page_copy_sane+0x16a/0x270 [ 334.565995][T10549] copy_page_from_iter+0x7b/0x100 [ 334.571018][T10549] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 334.576840][T10549] tun_get_user+0xc84/0x3d70 [ 334.581437][T10549] ? aa_file_perm+0x3e3/0xee0 [ 334.586110][T10549] ? rcu_read_unlock+0xa0/0xa0 [ 334.590885][T10549] ? tun_get+0x1c/0x2e0 [ 334.595037][T10549] ? __lock_acquire+0x7d80/0x7d80 [ 334.600061][T10549] ? tun_get+0x1c/0x2e0 [ 334.604215][T10549] tun_chr_write_iter+0x119/0x200 [ 334.609238][T10549] vfs_write+0x474/0x9a0 [ 334.613484][T10549] ? file_end_write+0x250/0x250 [ 334.618334][T10549] ? __fget_files+0x3fc/0x460 [ 334.623013][T10549] ? __fdget_pos+0x1d8/0x330 [ 334.627597][T10549] ? ksys_write+0x74/0x260 [ 334.632013][T10549] ksys_write+0x151/0x260 [ 334.636344][T10549] ? __ia32_sys_read+0x90/0x90 [ 334.641195][T10549] ? lockdep_hardirqs_on+0x98/0x150 [ 334.646396][T10549] do_syscall_64+0x55/0xb0 [ 334.650823][T10549] ? clear_bhb_loop+0x40/0x90 [ 334.655497][T10549] ? clear_bhb_loop+0x40/0x90 [ 334.660171][T10549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.666066][T10549] RIP: 0033:0x7ff63759de59 [ 334.670479][T10549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.690087][T10549] RSP: 002b:00007ff6384bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 334.698500][T10549] RAX: ffffffffffffffda RBX: 00007ff637825fa0 RCX: 00007ff63759de59 [ 334.706469][T10549] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 334.714436][T10549] RBP: 00007ff6384bc090 R08: 0000000000000000 R09: 0000000000000000 [ 334.722402][T10549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.730366][T10549] R13: 00007ff637826038 R14: 00007ff637825fa0 R15: 00007ffd61c55d98 [ 334.738348][T10549] [ 335.212854][T10559] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1635'. [ 335.244425][T10559] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1635'. [ 335.430146][T10561] netlink: 'syz.4.1636': attribute type 27 has an invalid length. [ 335.506890][T10561] netlink: 'syz.4.1636': attribute type 25 has an invalid length. [ 335.614721][T10565] netlink: 'syz.1.1638': attribute type 10 has an invalid length. [ 335.712043][T10565] tap0: tun_chr_ioctl cmd 1074025677 [ 335.722204][T10565] tap0: linktype set to 270 [ 336.027646][T10570] delete_channel: no stack [ 336.977604][T10589] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1646'. [ 337.039766][T10589] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1646'. [ 337.541989][T10599] netlink: 'syz.0.1649': attribute type 10 has an invalid length. [ 337.614847][T10605] delete_channel: no stack [ 338.934583][T10624] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1658'. [ 338.960303][T10624] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1658'. [ 339.335580][T10630] delete_channel: no stack [ 340.017481][T10644] netlink: 'syz.2.1666': attribute type 10 has an invalid length. [ 340.103246][T10644] tap0: tun_chr_ioctl cmd 1074025677 [ 340.129250][T10644] tap0: linktype set to 270 [ 340.720201][T10657] delete_channel: no stack [ 340.845516][T10662] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1672'. [ 340.877719][T10662] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1672'. [ 341.522420][T10681] netlink: 'syz.0.1682': attribute type 10 has an invalid length. [ 341.582427][T10681] tap0: tun_chr_ioctl cmd 1074025677 [ 341.600820][T10681] tap0: linktype set to 270 [ 341.843145][T10685] netlink: 'syz.4.1685': attribute type 2 has an invalid length. [ 341.864942][T10685] netlink: 'syz.4.1685': attribute type 4 has an invalid length. [ 341.872732][T10685] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1685'. [ 341.937643][T10687] delete_channel: no stack [ 342.045948][T10693] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1687'. [ 342.064497][T10693] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1687'. [ 342.285880][T10696] FAULT_INJECTION: forcing a failure. [ 342.285880][T10696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.314497][T10696] CPU: 1 PID: 10696 Comm: syz.0.1688 Not tainted syzkaller #0 [ 342.322182][T10696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 342.332246][T10696] Call Trace: [ 342.335531][T10696] [ 342.338466][T10696] dump_stack_lvl+0x18c/0x250 [ 342.343163][T10696] ? show_regs_print_info+0x20/0x20 [ 342.348376][T10696] ? load_image+0x420/0x420 [ 342.352887][T10696] ? __lock_acquire+0x7d80/0x7d80 [ 342.357920][T10696] ? snprintf+0xe9/0x140 [ 342.362177][T10696] should_fail_ex+0x394/0x4c0 [ 342.366866][T10696] _copy_to_user+0x2f/0xa0 [ 342.371284][T10696] simple_read_from_buffer+0xe7/0x150 [ 342.376667][T10696] proc_fail_nth_read+0x1e8/0x260 [ 342.381699][T10696] ? proc_fault_inject_write+0x360/0x360 [ 342.387338][T10696] ? fsnotify_perm+0x271/0x5e0 [ 342.392196][T10696] ? proc_fault_inject_write+0x360/0x360 [ 342.397834][T10696] vfs_read+0x298/0x990 [ 342.402005][T10696] ? kernel_read+0x1e0/0x1e0 [ 342.406600][T10696] ? __fget_files+0x28/0x460 [ 342.411195][T10696] ? __fget_files+0x3fc/0x460 [ 342.416228][T10696] ? __fdget_pos+0x2a3/0x330 [ 342.420836][T10696] ? ksys_read+0x74/0x260 [ 342.425171][T10696] ksys_read+0x151/0x260 [ 342.429428][T10696] ? vfs_write+0x9a0/0x9a0 [ 342.433861][T10696] ? lockdep_hardirqs_on+0x98/0x150 [ 342.439062][T10696] do_syscall_64+0x55/0xb0 [ 342.443482][T10696] ? clear_bhb_loop+0x40/0x90 [ 342.448157][T10696] ? clear_bhb_loop+0x40/0x90 [ 342.452832][T10696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.458735][T10696] RIP: 0033:0x7f0f4d95e68e [ 342.463165][T10696] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 342.482782][T10696] RSP: 002b:00007f0f4e8cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 342.491203][T10696] RAX: ffffffffffffffda RBX: 00007f0f4e8ce6c0 RCX: 00007f0f4d95e68e [ 342.499178][T10696] RDX: 000000000000000f RSI: 00007f0f4e8ce0a0 RDI: 0000000000000006 [ 342.507246][T10696] RBP: 00007f0f4e8ce090 R08: 0000000000000000 R09: 0000000000000000 [ 342.515220][T10696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.523191][T10696] R13: 00007f0f4dc26038 R14: 00007f0f4dc25fa0 R15: 00007ffe8e55f5c8 [ 342.531176][T10696] [ 343.070199][T10711] netlink: 'syz.2.1696': attribute type 10 has an invalid length. [ 343.166163][T10711] tap0: tun_chr_ioctl cmd 1074025677 [ 343.171732][T10711] tap0: linktype set to 270 [ 343.406053][T10716] delete_channel: no stack [ 343.635368][T10721] netlink: 'syz.2.1699': attribute type 1 has an invalid length. [ 343.663661][T10721] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1699'. [ 343.675581][T10721] netlink: 'syz.2.1699': attribute type 1 has an invalid length. [ 344.114793][T10727] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1701'. [ 344.190354][T10727] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1701'. [ 344.768102][T10746] netlink: 'syz.1.1707': attribute type 10 has an invalid length. [ 344.895022][T10746] tap0: tun_chr_ioctl cmd 1074025677 [ 344.915589][T10746] tap0: linktype set to 270 [ 345.058356][T10749] netlink: 'syz.4.1709': attribute type 3 has an invalid length. [ 345.095419][T10749] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1709'. [ 345.134959][T10748] delete_channel: no stack [ 345.703241][T10762] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1715'. [ 346.342858][T10773] netlink: 'syz.2.1720': attribute type 3 has an invalid length. [ 346.368760][T10773] __nla_validate_parse: 1 callbacks suppressed [ 346.368796][T10773] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1720'. [ 346.414022][T10772] delete_channel: no stack [ 346.522325][T10780] netlink: 'syz.1.1721': attribute type 10 has an invalid length. [ 346.800643][T10788] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1724'. [ 346.824353][T10788] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1724'. [ 346.870467][T10780] tap0: tun_chr_ioctl cmd 1074025677 [ 346.914087][T10780] tap0: linktype set to 270 [ 347.381376][T10794] netlink: 'syz.0.1727': attribute type 9 has an invalid length. [ 347.421300][T10794] netlink: 150708 bytes leftover after parsing attributes in process `syz.0.1727'. [ 347.696842][T10804] netlink: 'syz.2.1731': attribute type 3 has an invalid length. [ 347.731066][T10804] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1731'. [ 348.161422][T10798] netlink: 'syz.4.1729': attribute type 25 has an invalid length. [ 348.204830][T10798] netlink: 'syz.4.1729': attribute type 6 has an invalid length. [ 348.410467][T10811] netlink: 'syz.0.1733': attribute type 3 has an invalid length. [ 348.443386][T10811] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1733'. [ 348.540252][T10810] delete_channel: no stack [ 348.654210][T10820] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1734'. [ 348.694998][T10820] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1734'. [ 349.203582][T10829] netlink: 'syz.1.1738': attribute type 10 has an invalid length. [ 349.470044][T10829] tap0: tun_chr_ioctl cmd 1074025677 [ 349.494647][T10829] tap0: linktype set to 270 [ 349.627044][T10840] delete_channel: no stack [ 349.699357][T10840] netlink: 'syz.0.1742': attribute type 10 has an invalid length. [ 349.722372][T10840] syz_tun: entered promiscuous mode [ 349.783723][T10840] team0: Port device syz_tun removed [ 349.840647][T10840] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 350.015831][T10848] netlink: 'syz.4.1745': attribute type 3 has an invalid length. [ 350.023986][T10848] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1745'. [ 350.187790][T10847] delete_channel: no stack [ 350.592606][T10854] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1746'. [ 351.122940][T10868] netlink: 'syz.4.1754': attribute type 3 has an invalid length. [ 351.169268][T10867] delete_channel: no stack [ 351.622956][T10883] netlink: 'syz.0.1757': attribute type 10 has an invalid length. [ 352.361388][T10883] syz_tun: left promiscuous mode [ 352.614942][T10883] bond0: (slave syz_tun): Releasing backup interface [ 352.713530][T10883] team0: Port device syz_tun added [ 352.767255][T10915] tap0: tun_chr_ioctl cmd 1074025677 [ 352.772801][T10915] tap0: linktype set to 270 [ 352.820035][T10933] __nla_validate_parse: 2 callbacks suppressed [ 352.820071][T10933] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1758'. [ 352.864597][T10933] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1758'. [ 353.687997][T10952] netlink: 'syz.0.1764': attribute type 3 has an invalid length. [ 353.756188][T10952] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1764'. [ 353.834905][T10947] delete_channel: no stack [ 353.984848][T10954] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1766'. [ 354.075710][T10954] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 354.431374][T10966] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1771'. [ 354.506642][T10966] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1771'. [ 354.586700][T10972] netlink: 'syz.4.1772': attribute type 10 has an invalid length. [ 354.696049][T10972] tap0: tun_chr_ioctl cmd 1074025677 [ 354.724726][T10972] tap0: linktype set to 270 [ 355.380712][T10990] netlink: 'syz.2.1779': attribute type 27 has an invalid length. [ 355.434050][T10990] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1779'. [ 355.704338][T10989] netlink: 'syz.0.1778': attribute type 3 has an invalid length. [ 355.789158][T10989] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1778'. [ 355.989057][T10986] delete_channel: no stack [ 356.603977][T11003] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1783'. [ 356.624680][T11003] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1783'. [ 356.664596][T11009] netlink: 'syz.4.1785': attribute type 10 has an invalid length. [ 356.787035][T11009] tap0: tun_chr_ioctl cmd 1074025677 [ 356.792578][T11009] tap0: linktype set to 270 [ 357.568120][T11028] netlink: 'syz.1.1792': attribute type 3 has an invalid length. [ 357.613521][T11027] delete_channel: no stack [ 357.950799][T11039] __nla_validate_parse: 2 callbacks suppressed [ 357.950820][T11039] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1796'. [ 358.084471][T11039] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1796'. [ 359.380973][T11055] netlink: 'syz.1.1802': attribute type 10 has an invalid length. [ 359.661552][T11055] tap0: tun_chr_ioctl cmd 1074025677 [ 359.676502][T11055] tap0: linktype set to 270 [ 360.499951][T11066] netlink: 'syz.4.1806': attribute type 3 has an invalid length. [ 360.574603][T11066] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1806'. [ 360.637212][T11065] delete_channel: no stack [ 360.967599][T11071] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1808'. [ 361.046690][T11071] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1808'. [ 361.776277][T11086] FAULT_INJECTION: forcing a failure. [ 361.776277][T11086] name failslab, interval 1, probability 0, space 0, times 0 [ 361.800862][T11086] CPU: 1 PID: 11086 Comm: syz.4.1813 Not tainted syzkaller #0 [ 361.808416][T11086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 361.818508][T11086] Call Trace: [ 361.821801][T11086] [ 361.824747][T11086] dump_stack_lvl+0x18c/0x250 [ 361.829448][T11086] ? show_regs_print_info+0x20/0x20 [ 361.834662][T11086] ? load_image+0x420/0x420 [ 361.839183][T11086] ? __might_sleep+0xe0/0xe0 [ 361.843783][T11086] ? __lock_acquire+0x7d80/0x7d80 [ 361.848861][T11086] should_fail_ex+0x394/0x4c0 [ 361.853559][T11086] should_failslab+0x9/0x20 [ 361.858085][T11086] slab_pre_alloc_hook+0x59/0x300 [ 361.863129][T11086] ? ioctl_standard_iw_point+0x52d/0xd50 [ 361.868775][T11086] ? ioctl_standard_iw_point+0x52d/0xd50 [ 361.874421][T11086] __kmem_cache_alloc_node+0x53/0x250 [ 361.879817][T11086] ? ioctl_standard_iw_point+0x52d/0xd50 [ 361.885464][T11086] __kmalloc+0xa7/0x240 [ 361.889641][T11086] ioctl_standard_iw_point+0x52d/0xd50 [ 361.895134][T11086] ? cfg80211_wext_giwap+0x120/0x120 [ 361.900430][T11086] ? iw_handler_get_iwstats+0x110/0x110 [ 361.905989][T11086] ? wext_ioctl_dispatch+0x106/0x650 [ 361.911296][T11086] ? mutex_lock_nested+0x20/0x20 [ 361.916250][T11086] ? apparmor_capable+0x137/0x1a0 [ 361.921300][T11086] ioctl_standard_call+0xae/0x250 [ 361.926336][T11086] ? cfg80211_wext_giwap+0x120/0x120 [ 361.931631][T11086] ? cfg80211_wext_giwap+0x120/0x120 [ 361.936934][T11086] wext_ioctl_dispatch+0x51a/0x650 [ 361.942069][T11086] ? __lock_acquire+0x7d80/0x7d80 [ 361.947108][T11086] ? wext_ioctl_dispatch+0x650/0x650 [ 361.952400][T11086] ? iw_handler_get_private+0x1f0/0x1f0 [ 361.957964][T11086] ? wext_handle_ioctl+0x1e0/0x1e0 [ 361.963091][T11086] ? __might_fault+0xaa/0x120 [ 361.967781][T11086] ? __might_fault+0xc6/0x120 [ 361.972464][T11086] ? __might_fault+0xaa/0x120 [ 361.977159][T11086] wext_handle_ioctl+0x118/0x1e0 [ 361.982117][T11086] ? call_commit_handler+0xf0/0xf0 [ 361.987273][T11086] sock_ioctl+0x15d/0x7e0 [ 361.991622][T11086] ? sock_poll+0x3e0/0x3e0 [ 361.996071][T11086] ? bpf_lsm_file_ioctl+0x9/0x10 [ 362.001015][T11086] ? security_file_ioctl+0x80/0xa0 [ 362.006146][T11086] ? sock_poll+0x3e0/0x3e0 [ 362.010571][T11086] __se_sys_ioctl+0xfd/0x170 [ 362.015188][T11086] do_syscall_64+0x55/0xb0 [ 362.019633][T11086] ? clear_bhb_loop+0x40/0x90 [ 362.024322][T11086] ? clear_bhb_loop+0x40/0x90 [ 362.029014][T11086] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.034927][T11086] RIP: 0033:0x7f7e59f9de59 [ 362.039351][T11086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.058979][T11086] RSP: 002b:00007f7e5af13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.067407][T11086] RAX: ffffffffffffffda RBX: 00007f7e5a225fa0 RCX: 00007f7e59f9de59 [ 362.075394][T11086] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000009 [ 362.083370][T11086] RBP: 00007f7e5af13090 R08: 0000000000000000 R09: 0000000000000000 [ 362.091367][T11086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.099365][T11086] R13: 00007f7e5a226038 R14: 00007f7e5a225fa0 R15: 00007ffe377cf848 [ 362.107384][T11086] [ 362.120912][T11091] netlink: 'syz.0.1814': attribute type 29 has an invalid length. [ 362.349660][T11093] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1814'. [ 362.405298][T11091] netlink: 'syz.0.1814': attribute type 29 has an invalid length. [ 362.498157][T11098] netlink: 'syz.2.1815': attribute type 10 has an invalid length. [ 362.734687][T11098] tap0: tun_chr_ioctl cmd 1074025677 [ 362.814726][T11098] tap0: linktype set to 270 [ 363.203613][T11111] netlink: 'syz.4.1819': attribute type 3 has an invalid length. [ 363.237534][T11111] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1819'. [ 363.286977][T11110] delete_channel: no stack [ 363.517816][T11116] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1822'. [ 363.547592][T11116] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1822'. [ 364.658342][T11152] netlink: 'syz.4.1832': attribute type 10 has an invalid length. [ 364.661453][T11149] netlink: 'syz.1.1831': attribute type 3 has an invalid length. [ 364.711151][T11152] tap0: tun_chr_ioctl cmd 1074025677 [ 364.720934][T11152] tap0: linktype set to 270 [ 364.775804][T11149] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1831'. [ 364.870035][T11148] delete_channel: no stack [ 364.947378][T11155] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1833'. [ 365.035799][T11155] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1833'. [ 365.498079][T11165] FAULT_INJECTION: forcing a failure. [ 365.498079][T11165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.528899][T11165] CPU: 1 PID: 11165 Comm: syz.2.1838 Not tainted syzkaller #0 [ 365.536427][T11165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 365.546504][T11165] Call Trace: [ 365.549796][T11165] [ 365.552734][T11165] dump_stack_lvl+0x18c/0x250 [ 365.557436][T11165] ? show_regs_print_info+0x20/0x20 [ 365.562649][T11165] ? load_image+0x420/0x420 [ 365.567174][T11165] ? __might_fault+0xaa/0x120 [ 365.571860][T11165] ? __lock_acquire+0x7d80/0x7d80 [ 365.576897][T11165] should_fail_ex+0x394/0x4c0 [ 365.581588][T11165] _copy_from_user+0x2f/0xe0 [ 365.586185][T11165] ___sys_recvmsg+0x174/0x590 [ 365.590873][T11165] ? __sys_recvmsg+0x2a0/0x2a0 [ 365.595643][T11165] ? trace_call_bpf+0xc3/0x6c0 [ 365.600421][T11165] ? trace_call_bpf+0x5e9/0x6c0 [ 365.605301][T11165] ? __fget_files+0x3fc/0x460 [ 365.610001][T11165] __x64_sys_recvmsg+0x21e/0x2f0 [ 365.614951][T11165] ? perf_trace_preemptirq_template+0x269/0x330 [ 365.621204][T11165] ? ___sys_recvmsg+0x590/0x590 [ 365.626077][T11165] ? lockdep_hardirqs_on+0x98/0x150 [ 365.631293][T11165] do_syscall_64+0x55/0xb0 [ 365.635721][T11165] ? clear_bhb_loop+0x40/0x90 [ 365.640404][T11165] ? clear_bhb_loop+0x40/0x90 [ 365.645084][T11165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.650987][T11165] RIP: 0033:0x7f0275d9de59 [ 365.655410][T11165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.675028][T11165] RSP: 002b:00007f0276d0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 365.683452][T11165] RAX: ffffffffffffffda RBX: 00007f0276025fa0 RCX: 00007f0275d9de59 [ 365.691429][T11165] RDX: 0000000000000102 RSI: 0000200000000440 RDI: 0000000000000008 [ 365.699405][T11165] RBP: 00007f0276d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 365.707387][T11165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.715366][T11165] R13: 00007f0276026038 R14: 00007f0276025fa0 R15: 00007fff1b751e98 [ 365.723362][T11165] [ 366.017928][T11175] netlink: 'syz.2.1841': attribute type 10 has an invalid length. [ 366.055504][T11175] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1841'. [ 366.119100][T11175] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.131150][T11178] netlink: 'syz.4.1842': attribute type 10 has an invalid length. [ 366.183187][T11178] tap0: tun_chr_ioctl cmd 1074025677 [ 366.189641][T11178] tap0: linktype set to 270 [ 366.414650][T11184] netlink: 'syz.2.1844': attribute type 3 has an invalid length. [ 366.420725][T11182] netlink: 'syz.0.1843': attribute type 8 has an invalid length. [ 366.470289][T11184] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1844'. [ 366.494566][T11182] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1843'. [ 366.512683][T11183] delete_channel: no stack [ 366.552267][T11187] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1845'. [ 366.999930][T11198] FAULT_INJECTION: forcing a failure. [ 366.999930][T11198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.043698][T11198] CPU: 1 PID: 11198 Comm: syz.2.1849 Not tainted syzkaller #0 [ 367.051229][T11198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 367.061313][T11198] Call Trace: [ 367.064614][T11198] [ 367.067546][T11198] dump_stack_lvl+0x18c/0x250 [ 367.072230][T11198] ? show_regs_print_info+0x20/0x20 [ 367.077432][T11198] ? load_image+0x420/0x420 [ 367.081933][T11198] ? __might_fault+0xaa/0x120 [ 367.086608][T11198] ? __lock_acquire+0x7d80/0x7d80 [ 367.091632][T11198] should_fail_ex+0x394/0x4c0 [ 367.096313][T11198] _copy_from_user+0x2f/0xe0 [ 367.100900][T11198] ___sys_sendmsg+0x1c7/0x360 [ 367.105583][T11198] ? get_pid_task+0x20/0x1e0 [ 367.110182][T11198] ? __sys_sendmsg+0x2b0/0x2b0 [ 367.114964][T11198] ? __lock_acquire+0x7d80/0x7d80 [ 367.120003][T11198] __se_sys_sendmsg+0x1d0/0x2c0 [ 367.124863][T11198] ? __x64_sys_sendmsg+0x80/0x80 [ 367.129813][T11198] ? lockdep_hardirqs_on+0x98/0x150 [ 367.135018][T11198] do_syscall_64+0x55/0xb0 [ 367.139436][T11198] ? clear_bhb_loop+0x40/0x90 [ 367.144107][T11198] ? clear_bhb_loop+0x40/0x90 [ 367.148788][T11198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.154686][T11198] RIP: 0033:0x7f0275d9de59 [ 367.159098][T11198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.178704][T11198] RSP: 002b:00007f0276d0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.187117][T11198] RAX: ffffffffffffffda RBX: 00007f0276025fa0 RCX: 00007f0275d9de59 [ 367.195087][T11198] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000003 [ 367.203051][T11198] RBP: 00007f0276d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 367.211019][T11198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.219023][T11198] R13: 00007f0276026038 R14: 00007f0276025fa0 R15: 00007fff1b751e98 [ 367.227003][T11198] [ 367.575453][T11206] netlink: 'syz.2.1852': attribute type 46 has an invalid length. [ 367.683821][T11209] netlink: 'syz.0.1853': attribute type 10 has an invalid length. [ 367.795375][T11202] netlink: 'syz.1.1850': attribute type 10 has an invalid length. [ 367.811643][T11210] FAULT_INJECTION: forcing a failure. [ 367.811643][T11210] name failslab, interval 1, probability 0, space 0, times 0 [ 367.856029][T11210] CPU: 0 PID: 11210 Comm: syz.4.1854 Not tainted syzkaller #0 [ 367.863559][T11210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 367.873636][T11210] Call Trace: [ 367.876927][T11210] [ 367.879870][T11210] dump_stack_lvl+0x18c/0x250 [ 367.884573][T11210] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 367.890762][T11210] ? show_regs_print_info+0x20/0x20 [ 367.895983][T11210] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 367.902167][T11210] ? dump_stack+0x9/0x20 [ 367.906439][T11210] should_fail_ex+0x394/0x4c0 [ 367.911141][T11210] should_failslab+0x9/0x20 [ 367.915665][T11210] slab_pre_alloc_hook+0x59/0x300 [ 367.920712][T11210] ? rebuild_sched_domains_locked+0x5d2/0x2160 [ 367.926896][T11210] ? rebuild_sched_domains_locked+0x5d2/0x2160 [ 367.933066][T11210] __kmem_cache_alloc_node+0x53/0x250 [ 367.938469][T11210] ? rebuild_sched_domains_locked+0x5d2/0x2160 [ 367.944639][T11210] __kmalloc+0xa7/0x240 [ 367.948820][T11210] rebuild_sched_domains_locked+0x5d2/0x2160 [ 367.954827][T11210] ? update_cpumasks_hier+0x2b/0x14b0 [ 367.960231][T11210] ? __lock_acquire+0x7d80/0x7d80 [ 367.965291][T11210] ? rebuild_sched_domains+0x40/0x40 [ 367.970613][T11210] ? update_cpumasks_hier+0x12e1/0x14b0 [ 367.976186][T11210] ? update_cpumasks_hier+0x12e1/0x14b0 [ 367.981745][T11210] ? update_cpumasks_hier+0x147c/0x14b0 [ 367.987312][T11210] ? update_cpumasks_hier+0x12e1/0x14b0 [ 367.992892][T11210] cpuset_write_resmask+0x1c3f/0x1fb0 [ 367.998308][T11210] ? cpuset_common_seq_show+0x250/0x250 [ 368.003874][T11210] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 368.009883][T11210] ? cpuset_common_seq_show+0x250/0x250 [ 368.015452][T11210] cgroup_file_write+0x2cd/0x6a0 [ 368.020423][T11210] ? cgroup_seqfile_stop+0xd0/0xd0 [ 368.025554][T11210] ? kernfs_get_active+0x14/0x170 [ 368.030623][T11210] ? cgroup_seqfile_stop+0xd0/0xd0 [ 368.035925][T11210] kernfs_fop_write_iter+0x3a4/0x520 [ 368.041243][T11210] vfs_write+0x474/0x9a0 [ 368.045514][T11210] ? file_end_write+0x250/0x250 [ 368.050390][T11210] ? __fget_files+0x3fc/0x460 [ 368.055110][T11210] ? __fdget_pos+0x2a3/0x330 [ 368.059729][T11210] ? ksys_write+0x74/0x260 [ 368.064174][T11210] ksys_write+0x151/0x260 [ 368.068528][T11210] ? __ia32_sys_read+0x90/0x90 [ 368.073314][T11210] ? syscall_enter_from_user_mode+0x2e/0x80 [ 368.079233][T11210] do_syscall_64+0x55/0xb0 [ 368.083671][T11210] ? clear_bhb_loop+0x40/0x90 [ 368.088360][T11210] ? clear_bhb_loop+0x40/0x90 [ 368.093061][T11210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.098974][T11210] RIP: 0033:0x7f7e59f9de59 [ 368.103425][T11210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.123048][T11210] RSP: 002b:00007f7e5af13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 368.131482][T11210] RAX: ffffffffffffffda RBX: 00007f7e5a225fa0 RCX: 00007f7e59f9de59 [ 368.139467][T11210] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000c [ 368.147451][T11210] RBP: 00007f7e5af13090 R08: 0000000000000000 R09: 0000000000000000 [ 368.155436][T11210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.163421][T11210] R13: 00007f7e5a226038 R14: 00007f7e5a225fa0 R15: 00007ffe377cf848 [ 368.171432][T11210] [ 368.487421][T11214] tap0: tun_chr_ioctl cmd 1074025677 [ 368.492961][T11214] tap0: linktype set to 270 [ 368.541559][T11220] netlink: 'syz.2.1855': attribute type 3 has an invalid length. [ 368.557951][T11220] __nla_validate_parse: 4 callbacks suppressed [ 368.558000][T11220] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1855'. [ 368.631444][T11219] delete_channel: no stack [ 368.672327][T11222] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1856'. [ 368.689723][T11222] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1856'. [ 369.094373][T11230] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1860'. [ 369.212254][T11236] FAULT_INJECTION: forcing a failure. [ 369.212254][T11236] name failslab, interval 1, probability 0, space 0, times 0 [ 369.225542][T11236] CPU: 0 PID: 11236 Comm: syz.0.1861 Not tainted syzkaller #0 [ 369.233047][T11236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 369.243124][T11236] Call Trace: [ 369.246406][T11236] [ 369.249351][T11236] dump_stack_lvl+0x18c/0x250 [ 369.254042][T11236] ? show_regs_print_info+0x20/0x20 [ 369.259242][T11236] ? load_image+0x420/0x420 [ 369.263753][T11236] ? skb_network_protocol+0x533/0x790 [ 369.269128][T11236] ? __lock_acquire+0x1262/0x7d80 [ 369.274152][T11236] ? skb_crc32c_csum_help+0x510/0x510 [ 369.279527][T11236] should_fail_ex+0x394/0x4c0 [ 369.284208][T11236] should_failslab+0x9/0x20 [ 369.288750][T11236] slab_pre_alloc_hook+0x59/0x300 [ 369.293786][T11236] kmem_cache_alloc+0x5a/0x2c0 [ 369.298562][T11236] ? skb_clone+0x1eb/0x370 [ 369.302984][T11236] skb_clone+0x1eb/0x370 [ 369.307219][T11236] ? dev_queue_xmit_nit+0x227/0xba0 [ 369.312417][T11236] dev_queue_xmit_nit+0x23f/0xba0 [ 369.317437][T11236] ? dev_queue_xmit_nit+0x2d/0xba0 [ 369.322551][T11236] dev_hard_start_xmit+0x150/0x790 [ 369.327675][T11236] sch_direct_xmit+0x251/0x4a0 [ 369.332436][T11236] ? do_raw_spin_lock+0x2b0/0x2b0 [ 369.337462][T11236] ? mrp_pdu_parse_vecattr_event+0x230/0x230 [ 369.343447][T11236] __dev_queue_xmit+0x162a/0x3630 [ 369.348474][T11236] ? __dev_queue_xmit+0x275/0x3630 [ 369.353595][T11236] ? lockdep_hardirqs_on+0x98/0x150 [ 369.358794][T11236] ? read_seqbegin+0x1b6/0x250 [ 369.363561][T11236] ? netdev_core_pick_tx+0x370/0x370 [ 369.368853][T11236] ? __asan_memcpy+0x40/0x70 [ 369.373444][T11236] ? eth_header+0x11b/0x200 [ 369.377950][T11236] ? llc_sysctl_exit+0x70/0x70 [ 369.382714][T11236] ? neigh_resolve_output+0x5f5/0x710 [ 369.388113][T11236] ip6_finish_output2+0xe2e/0x1620 [ 369.393231][T11236] ? ip6_finish_output2+0x642/0x1620 [ 369.398518][T11236] ? nf_hook+0x390/0x390 [ 369.402756][T11236] ? ip6_mtu+0x321/0x3f0 [ 369.406998][T11236] ? ip6_finish_output+0x567/0x7f0 [ 369.412110][T11236] rawv6_send_hdrinc+0xdba/0x1660 [ 369.417145][T11236] ? txopt_get+0x3f0/0x3f0 [ 369.421555][T11236] ? txopt_get+0x344/0x3f0 [ 369.425974][T11236] ? rawv6_push_pending_frames+0x930/0x930 [ 369.431778][T11236] ? fl6_sock_lookup+0xc0/0xc0 [ 369.436551][T11236] rawv6_sendmsg+0x128f/0x1740 [ 369.441336][T11236] ? compat_rawv6_ioctl+0x70/0x70 [ 369.446375][T11236] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 369.452820][T11236] ? aa_sock_msg_perm+0x94/0x150 [ 369.457758][T11236] ? inet_sendmsg+0x7e/0x2a0 [ 369.462350][T11236] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 369.467633][T11236] ? inet_send_prepare+0x250/0x250 [ 369.472744][T11236] ____sys_sendmsg+0x61b/0x980 [ 369.477518][T11236] ? __asan_memset+0x22/0x40 [ 369.482110][T11236] ? __sys_sendmsg_sock+0x30/0x30 [ 369.487132][T11236] ? __import_iovec+0x5f2/0x850 [ 369.491988][T11236] ? import_iovec+0x73/0xa0 [ 369.496495][T11236] ___sys_sendmsg+0x2a6/0x360 [ 369.501178][T11236] ? __sys_sendmsg+0x2b0/0x2b0 [ 369.505984][T11236] __se_sys_sendmsg+0x1d0/0x2c0 [ 369.510834][T11236] ? perf_trace_preemptirq_template+0x269/0x330 [ 369.517077][T11236] ? __x64_sys_sendmsg+0x80/0x80 [ 369.522029][T11236] ? lockdep_hardirqs_on+0x98/0x150 [ 369.527226][T11236] do_syscall_64+0x55/0xb0 [ 369.531642][T11236] ? clear_bhb_loop+0x40/0x90 [ 369.536311][T11236] ? clear_bhb_loop+0x40/0x90 [ 369.540986][T11236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.546882][T11236] RIP: 0033:0x7f0f4d99de59 [ 369.551291][T11236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.570897][T11236] RSP: 002b:00007f0f4e8ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.579308][T11236] RAX: ffffffffffffffda RBX: 00007f0f4dc25fa0 RCX: 00007f0f4d99de59 [ 369.587277][T11236] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 369.595246][T11236] RBP: 00007f0f4e8ce090 R08: 0000000000000000 R09: 0000000000000000 [ 369.603215][T11236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 369.611199][T11236] R13: 00007f0f4dc26038 R14: 00007f0f4dc25fa0 R15: 00007ffe8e55f5c8 [ 369.619182][T11236] [ 369.885525][T11245] validate_nla: 1 callbacks suppressed [ 369.885561][T11245] netlink: 'syz.1.1866': attribute type 3 has an invalid length. [ 369.942999][T11245] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1866'. [ 369.991982][T11244] delete_channel: no stack [ 370.048163][T11250] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1868'. [ 370.094658][T11250] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1868'. [ 370.184890][T11256] netlink: 'syz.1.1870': attribute type 10 has an invalid length. [ 370.255581][T11256] tap0: tun_chr_ioctl cmd 1074025677 [ 370.261650][T11256] tap0: linktype set to 270 [ 370.640213][T11265] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1875'. [ 370.666518][T11270] FAULT_INJECTION: forcing a failure. [ 370.666518][T11270] name failslab, interval 1, probability 0, space 0, times 0 [ 370.694649][T11270] CPU: 1 PID: 11270 Comm: syz.4.1876 Not tainted syzkaller #0 [ 370.702181][T11270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 370.712260][T11270] Call Trace: [ 370.715559][T11270] [ 370.718519][T11270] dump_stack_lvl+0x18c/0x250 [ 370.723236][T11270] ? show_regs_print_info+0x20/0x20 [ 370.728467][T11270] ? load_image+0x420/0x420 [ 370.732993][T11270] ? __might_sleep+0xe0/0xe0 [ 370.737605][T11270] ? __lock_acquire+0x7d80/0x7d80 [ 370.742656][T11270] should_fail_ex+0x394/0x4c0 [ 370.747365][T11270] should_failslab+0x9/0x20 [ 370.751894][T11270] slab_pre_alloc_hook+0x59/0x300 [ 370.756944][T11270] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 370.762695][T11270] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 370.768441][T11270] __kmem_cache_alloc_node+0x53/0x250 [ 370.773845][T11270] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 370.779591][T11270] __kmalloc+0xa7/0x240 [ 370.783779][T11270] tomoyo_realpath_from_path+0xe6/0x5c0 [ 370.789348][T11270] ? tomoyo_domain+0xd6/0x120 [ 370.794042][T11270] tomoyo_path_number_perm+0x248/0x5e0 [ 370.799500][T11270] ? tomoyo_path_number_perm+0x217/0x5e0 [ 370.805134][T11270] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 370.810593][T11270] ? ksys_write+0x1d2/0x260 [ 370.815121][T11270] ? __fget_files+0x28/0x460 [ 370.819716][T11270] security_file_ioctl+0x70/0xa0 [ 370.824656][T11270] __se_sys_ioctl+0x48/0x170 [ 370.829247][T11270] do_syscall_64+0x55/0xb0 [ 370.833664][T11270] ? clear_bhb_loop+0x40/0x90 [ 370.838336][T11270] ? clear_bhb_loop+0x40/0x90 [ 370.843008][T11270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.848908][T11270] RIP: 0033:0x7f7e59f9de59 [ 370.853322][T11270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.872928][T11270] RSP: 002b:00007f7e5af13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.881342][T11270] RAX: ffffffffffffffda RBX: 00007f7e5a225fa0 RCX: 00007f7e59f9de59 [ 370.889316][T11270] RDX: 0000200000000000 RSI: 0000000000008b05 RDI: 0000000000000003 [ 370.897284][T11270] RBP: 00007f7e5af13090 R08: 0000000000000000 R09: 0000000000000000 [ 370.905250][T11270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.913213][T11270] R13: 00007f7e5a226038 R14: 00007f7e5a225fa0 R15: 00007ffe377cf848 [ 370.921194][T11270] [ 370.958576][T11270] ERROR: Out of memory at tomoyo_realpath_from_path. [ 371.219843][T11277] netlink: 'syz.1.1879': attribute type 3 has an invalid length. [ 371.245346][T11279] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1880'. [ 371.247265][T11277] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1879'. [ 371.322440][T11276] delete_channel: no stack [ 371.567942][T11291] netlink: 'syz.1.1885': attribute type 10 has an invalid length. [ 371.644888][T11291] tap0: tun_chr_ioctl cmd 1074025677 [ 371.660713][T11291] tap0: linktype set to 270 [ 374.451657][T11301] netlink: 'syz.4.1888': attribute type 10 has an invalid length. [ 374.460596][T11301] __nla_validate_parse: 1 callbacks suppressed [ 374.460618][T11301] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1888'. [ 374.525360][T11301] batman_adv: batadv0: Adding interface: veth0_vlan [ 374.540367][T11301] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.575557][T11301] batman_adv: batadv0: Interface activated: veth0_vlan [ 374.811502][T11312] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1892'. [ 374.920973][T11317] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1893'. [ 374.963613][T11317] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1893'. [ 375.102097][T11325] netlink: 'syz.0.1895': attribute type 3 has an invalid length. [ 375.113392][T11325] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1895'. [ 375.141261][T11324] delete_channel: no stack [ 375.263915][T11329] netlink: 'syz.0.1898': attribute type 10 has an invalid length. [ 375.308238][T11329] tap0: tun_chr_ioctl cmd 1074025677 [ 375.313791][T11329] tap0: linktype set to 270 [ 375.547356][T11334] syzkaller0: entered promiscuous mode [ 375.561904][T11337] delete_channel: no stack [ 375.567111][T11334] syzkaller0: entered allmulticast mode [ 375.573435][T11337] delete_channel: no stack [ 375.585810][T11337] netlink: 'syz.2.1900': attribute type 17 has an invalid length. [ 375.593983][T11337] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1900'. [ 375.605269][T11337] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 378.820375][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.827687][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.524481][T11351] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1904'. [ 380.533619][T11351] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1904'. [ 380.702835][T11365] netlink: 'syz.4.1909': attribute type 10 has an invalid length. [ 380.715337][T11360] netlink: 'syz.2.1906': attribute type 3 has an invalid length. [ 380.733538][T11360] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1906'. [ 380.761414][T11365] tap0: tun_chr_ioctl cmd 1074025677 [ 380.773021][T11365] tap0: linktype set to 270 [ 380.782928][T11359] delete_channel: no stack [ 381.148175][T11379] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1915'. [ 381.172128][T11379] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1915'. [ 381.762939][T11394] netlink: 'syz.1.1920': attribute type 3 has an invalid length. [ 381.773514][T11394] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1920'. [ 381.824061][T11391] delete_channel: no stack [ 382.153077][T11405] netlink: 'syz.4.1923': attribute type 10 has an invalid length. [ 382.217182][T11407] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1926'. [ 382.262787][T11407] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1926'. [ 382.327343][T11405] tap0: tun_chr_ioctl cmd 1074025677 [ 382.346567][T11405] tap0: linktype set to 270 [ 382.353239][T11404] FAULT_INJECTION: forcing a failure. [ 382.353239][T11404] name failslab, interval 1, probability 0, space 0, times 0 [ 382.401430][T11404] CPU: 1 PID: 11404 Comm: syz.1.1924 Not tainted syzkaller #0 [ 382.408973][T11404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 382.419054][T11404] Call Trace: [ 382.422334][T11404] [ 382.425262][T11404] dump_stack_lvl+0x18c/0x250 [ 382.429952][T11404] ? show_regs_print_info+0x20/0x20 [ 382.435159][T11404] ? load_image+0x420/0x420 [ 382.439664][T11404] ? __might_sleep+0xe0/0xe0 [ 382.444257][T11404] ? __lock_acquire+0x7d80/0x7d80 [ 382.449287][T11404] should_fail_ex+0x394/0x4c0 [ 382.453969][T11404] should_failslab+0x9/0x20 [ 382.458470][T11404] slab_pre_alloc_hook+0x59/0x300 [ 382.463505][T11404] ? page_pool_create+0x71/0x5c0 [ 382.468443][T11404] __kmem_cache_alloc_node+0x53/0x250 [ 382.473819][T11404] ? page_pool_create+0x71/0x5c0 [ 382.478754][T11404] kmalloc_node_trace+0x26/0xe0 [ 382.483610][T11404] page_pool_create+0x71/0x5c0 [ 382.488376][T11404] bpf_test_run_xdp_live+0x203/0x1b30 [ 382.493750][T11404] ? verify_lock_unused+0x140/0x140 [ 382.498953][T11404] ? perf_trace_lock+0xfc/0x3b0 [ 382.503804][T11404] ? __kmalloc+0xb7/0x240 [ 382.508142][T11404] ? bpf_test_init+0x9f/0x140 [ 382.512826][T11404] ? perf_trace_lock+0xfc/0x3b0 [ 382.517697][T11404] ? xdp_convert_md_to_buff+0x330/0x330 [ 382.523261][T11404] ? __lock_acquire+0x7d80/0x7d80 [ 382.528462][T11404] ? __virt_addr_valid+0x10c/0x380 [ 382.533581][T11404] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 382.539827][T11404] ? _copy_from_user+0xa5/0xe0 [ 382.544593][T11404] ? bpf_test_init+0x119/0x140 [ 382.549355][T11404] ? xdp_convert_md_to_buff+0x5b/0x330 [ 382.554815][T11404] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 382.560188][T11404] ? __lock_acquire+0x7d80/0x7d80 [ 382.565225][T11404] ? dev_put+0x80/0x80 [ 382.569328][T11404] ? dev_put+0x80/0x80 [ 382.573396][T11404] bpf_prog_test_run+0x31f/0x390 [ 382.578338][T11404] __sys_bpf+0x49d/0x890 [ 382.582580][T11404] ? bpf_link_show_fdinfo+0x390/0x390 [ 382.587963][T11404] ? lock_chain_count+0x20/0x20 [ 382.592825][T11404] __x64_sys_bpf+0x7c/0x90 [ 382.597242][T11404] do_syscall_64+0x55/0xb0 [ 382.601661][T11404] ? clear_bhb_loop+0x40/0x90 [ 382.606370][T11404] ? clear_bhb_loop+0x40/0x90 [ 382.611048][T11404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.616946][T11404] RIP: 0033:0x7ff63759de59 [ 382.621362][T11404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.640969][T11404] RSP: 002b:00007ff63849b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 382.649383][T11404] RAX: ffffffffffffffda RBX: 00007ff637826090 RCX: 00007ff63759de59 [ 382.657350][T11404] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 382.665321][T11404] RBP: 00007ff63849b090 R08: 0000000000000000 R09: 0000000000000000 [ 382.673287][T11404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.681264][T11404] R13: 00007ff637826128 R14: 00007ff637826090 R15: 00007ffd61c55d98 [ 382.689248][T11404] [ 383.542371][T11426] netlink: 'syz.1.1933': attribute type 3 has an invalid length. [ 383.574545][T11426] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1933'. [ 383.625137][T11425] delete_channel: no stack [ 383.823883][T11433] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1935'. [ 383.966784][T11438] netlink: 'syz.0.1937': attribute type 10 has an invalid length. [ 384.080107][T11438] tap0: tun_chr_ioctl cmd 1074025677 [ 384.113622][T11438] tap0: linktype set to 270 [ 384.147175][T11437] netlink: 'syz.2.1936': attribute type 27 has an invalid length. [ 384.204558][T11437] netlink: 'syz.2.1936': attribute type 25 has an invalid length. [ 384.748912][T11447] bridge0: port 3(team0) entered blocking state [ 384.755503][T11447] bridge0: port 3(team0) entered forwarding state [ 384.762185][T11447] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.769398][T11447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.776923][T11447] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.784107][T11447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.914943][T11447] bridge0: entered promiscuous mode [ 384.920211][T11447] bridge0: entered allmulticast mode [ 385.287831][T11462] netlink: 'syz.0.1946': attribute type 3 has an invalid length. [ 385.319781][T11461] delete_channel: no stack [ 385.588374][T11468] __nla_validate_parse: 2 callbacks suppressed [ 385.588411][T11468] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1947'. [ 385.633582][T11468] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1947'. [ 385.730649][T11471] netlink: 'syz.2.1948': attribute type 21 has an invalid length. [ 385.740670][T11471] netlink: 'syz.2.1948': attribute type 6 has an invalid length. [ 385.923280][T11476] netlink: 'syz.1.1950': attribute type 10 has an invalid length. [ 385.945349][T11472] netlink: 'syz.2.1948': attribute type 3 has an invalid length. [ 385.953231][T11472] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1948'. [ 385.955930][T11478] netlink: 'syz.0.1951': attribute type 27 has an invalid length. [ 385.988110][T11478] netlink: 'syz.0.1951': attribute type 25 has an invalid length. [ 386.006768][ T5783] Bluetooth: hci4: command 0x0406 tx timeout [ 386.120069][T11481] tap0: tun_chr_ioctl cmd 1074025677 [ 386.167204][T11481] tap0: linktype set to 270 [ 387.017910][T11494] netlink: 'syz.2.1955': attribute type 3 has an invalid length. [ 387.044078][T11494] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1955'. [ 387.086463][T11493] delete_channel: no stack [ 387.634408][T11511] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1960'. [ 387.643704][T11511] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1960'. [ 387.774472][T11514] netlink: 'syz.2.1962': attribute type 10 has an invalid length. [ 387.820452][T11514] tap0: tun_chr_ioctl cmd 1074025677 [ 387.839827][T11514] tap0: linktype set to 270 [ 388.181822][T11522] FAULT_INJECTION: forcing a failure. [ 388.181822][T11522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.214672][T11522] CPU: 0 PID: 11522 Comm: syz.1.1964 Not tainted syzkaller #0 [ 388.222213][T11522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 388.232296][T11522] Call Trace: [ 388.235608][T11522] [ 388.238563][T11522] dump_stack_lvl+0x18c/0x250 [ 388.243275][T11522] ? show_regs_print_info+0x20/0x20 [ 388.248496][T11522] ? load_image+0x420/0x420 [ 388.253022][T11522] ? __lock_acquire+0x7d80/0x7d80 [ 388.258074][T11522] should_fail_ex+0x394/0x4c0 [ 388.262788][T11522] _copy_from_user+0x2f/0xe0 [ 388.267412][T11522] bpf_prog_test_run_skb+0x267/0x18f0 [ 388.272822][T11522] ? __fget_files+0x28/0x460 [ 388.277446][T11522] ? __fget_files+0x3fc/0x460 [ 388.282162][T11522] ? cpu_online+0x60/0x60 [ 388.286594][T11522] bpf_prog_test_run+0x31f/0x390 [ 388.291551][T11522] __sys_bpf+0x49d/0x890 [ 388.295802][T11522] ? bpf_link_show_fdinfo+0x390/0x390 [ 388.301196][T11522] ? lock_chain_count+0x20/0x20 [ 388.306052][T11522] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 388.312032][T11522] __x64_sys_bpf+0x7c/0x90 [ 388.316444][T11522] do_syscall_64+0x55/0xb0 [ 388.320860][T11522] ? clear_bhb_loop+0x40/0x90 [ 388.325531][T11522] ? clear_bhb_loop+0x40/0x90 [ 388.330203][T11522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.336116][T11522] RIP: 0033:0x7ff63759de59 [ 388.340542][T11522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.360154][T11522] RSP: 002b:00007ff6384bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 388.368567][T11522] RAX: ffffffffffffffda RBX: 00007ff637825fa0 RCX: 00007ff63759de59 [ 388.376533][T11522] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 388.384519][T11522] RBP: 00007ff6384bc090 R08: 0000000000000000 R09: 0000000000000000 [ 388.392491][T11522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.400457][T11522] R13: 00007ff637826038 R14: 00007ff637825fa0 R15: 00007ffd61c55d98 [ 388.408435][T11522] [ 388.526715][T11526] netlink: 'syz.0.1967': attribute type 3 has an invalid length. [ 388.545184][T11526] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1967'. [ 388.572863][T11525] delete_channel: no stack [ 388.807033][T11533] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1970'. [ 389.379681][T11543] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1973'. [ 389.456513][T11543] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1973'. [ 389.728510][T11549] netlink: 'syz.0.1976': attribute type 10 has an invalid length. [ 389.866252][T11550] tap0: tun_chr_ioctl cmd 1074025677 [ 389.872102][T11550] tap0: linktype set to 270 [ 392.139782][T11555] netlink: 'syz.1.1978': attribute type 3 has an invalid length. [ 392.182670][T11555] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1978'. [ 392.210688][T11554] delete_channel: no stack [ 392.508170][T11568] FAULT_INJECTION: forcing a failure. [ 392.508170][T11568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.577041][T11568] CPU: 0 PID: 11568 Comm: syz.4.1982 Not tainted syzkaller #0 [ 392.584579][T11568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 392.594652][T11568] Call Trace: [ 392.597955][T11568] [ 392.600903][T11568] dump_stack_lvl+0x18c/0x250 [ 392.605613][T11568] ? show_regs_print_info+0x20/0x20 [ 392.610843][T11568] ? load_image+0x420/0x420 [ 392.615375][T11568] ? __might_fault+0xaa/0x120 [ 392.620079][T11568] ? __lock_acquire+0x7d80/0x7d80 [ 392.625132][T11568] should_fail_ex+0x394/0x4c0 [ 392.629841][T11568] _copy_from_user+0x2f/0xe0 [ 392.634453][T11568] ___sys_sendmsg+0x1c7/0x360 [ 392.639162][T11568] ? __sys_sendmsg+0x2b0/0x2b0 [ 392.643995][T11568] __se_sys_sendmsg+0x1d0/0x2c0 [ 392.648887][T11568] ? __x64_sys_sendmsg+0x80/0x80 [ 392.653869][T11568] ? syscall_enter_from_user_mode+0x2e/0x80 [ 392.659798][T11568] do_syscall_64+0x55/0xb0 [ 392.664241][T11568] ? clear_bhb_loop+0x40/0x90 [ 392.668936][T11568] ? clear_bhb_loop+0x40/0x90 [ 392.673641][T11568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.679574][T11568] RIP: 0033:0x7f7e59f9de59 [ 392.684011][T11568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.703649][T11568] RSP: 002b:00007f7e5af13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.712095][T11568] RAX: ffffffffffffffda RBX: 00007f7e5a225fa0 RCX: 00007f7e59f9de59 [ 392.720097][T11568] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 000000000000000b [ 392.728094][T11568] RBP: 00007f7e5af13090 R08: 0000000000000000 R09: 0000000000000000 [ 392.736093][T11568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.744094][T11568] R13: 00007f7e5a226038 R14: 00007f7e5a225fa0 R15: 00007ffe377cf848 [ 392.752111][T11568] [ 393.215048][T11580] netlink: 'syz.0.1988': attribute type 10 has an invalid length. [ 393.232277][T11574] netlink: 'syz.1.1985': attribute type 10 has an invalid length. [ 393.274634][T11580] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1988'. [ 393.284673][T11574] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1985'. [ 393.341534][T11579] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1986'. [ 393.381565][T11579] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1986'. [ 393.558214][T11584] netlink: 'syz.4.1989': attribute type 10 has an invalid length. [ 393.683394][T11584] tap0: tun_chr_ioctl cmd 1074025677 [ 393.703963][T11584] tap0: linktype set to 270 [ 393.770825][T11591] netlink: 'syz.2.1992': attribute type 3 has an invalid length. [ 393.794733][T11591] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1992'. [ 393.830789][T11590] delete_channel: no stack [ 393.951301][T11597] FAULT_INJECTION: forcing a failure. [ 393.951301][T11597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.998801][T11601] netlink: 'syz.1.1995': attribute type 10 has an invalid length. [ 394.024097][T11601] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1995'. [ 394.043092][T11597] CPU: 0 PID: 11597 Comm: syz.0.1994 Not tainted syzkaller #0 [ 394.050625][T11597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 394.060714][T11597] Call Trace: [ 394.064014][T11597] [ 394.066971][T11597] dump_stack_lvl+0x18c/0x250 [ 394.071690][T11597] ? show_regs_print_info+0x20/0x20 [ 394.076933][T11597] ? load_image+0x420/0x420 [ 394.081475][T11597] ? __might_fault+0xaa/0x120 [ 394.086183][T11597] ? __lock_acquire+0x7d80/0x7d80 [ 394.091247][T11597] should_fail_ex+0x394/0x4c0 [ 394.095960][T11597] _copy_from_user+0x2f/0xe0 [ 394.100579][T11597] ___sys_recvmsg+0x174/0x590 [ 394.105280][T11597] ? __sys_recvmsg+0x2a0/0x2a0 [ 394.110075][T11597] ? ksys_write+0x1d2/0x260 [ 394.114630][T11597] ? __fget_files+0x3fc/0x460 [ 394.119351][T11597] __x64_sys_recvmsg+0x21e/0x2f0 [ 394.124316][T11597] ? ___sys_recvmsg+0x590/0x590 [ 394.129213][T11597] ? lockdep_hardirqs_on+0x98/0x150 [ 394.134447][T11597] do_syscall_64+0x55/0xb0 [ 394.138892][T11597] ? clear_bhb_loop+0x40/0x90 [ 394.143596][T11597] ? clear_bhb_loop+0x40/0x90 [ 394.148306][T11597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.154240][T11597] RIP: 0033:0x7f0f4d99de59 [ 394.158678][T11597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.178317][T11597] RSP: 002b:00007f0f4e8ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 394.186770][T11597] RAX: ffffffffffffffda RBX: 00007f0f4dc25fa0 RCX: 00007f0f4d99de59 [ 394.194772][T11597] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 394.202771][T11597] RBP: 00007f0f4e8ce090 R08: 0000000000000000 R09: 0000000000000000 [ 394.210768][T11597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.218768][T11597] R13: 00007f0f4dc26038 R14: 00007f0f4dc25fa0 R15: 00007ffe8e55f5c8 [ 394.226779][T11597] [ 395.161003][T11632] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2000'. [ 395.244566][T11632] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2000'. [ 395.330564][T11649] netlink: 'syz.1.2004': attribute type 3 has an invalid length. [ 395.349231][T11649] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2004'. [ 395.399454][T11648] delete_channel: no stack [ 395.520275][T11653] netlink: 'syz.4.2006': attribute type 10 has an invalid length. [ 395.543177][T11653] tap0: tun_chr_ioctl cmd 1074025677 [ 395.549932][T11653] tap0: linktype set to 270 [ 395.664608][T11657] netlink: 'syz.2.2005': attribute type 10 has an invalid length. [ 395.777398][T11657] team0: Device bond0 is already an upper device of the team interface [ 395.893599][T11663] tap0: tun_chr_ioctl cmd 1074025677 [ 395.951368][T11663] tap0: linktype set to 778 [ 396.081633][T11667] FAULT_INJECTION: forcing a failure. [ 396.081633][T11667] name failslab, interval 1, probability 0, space 0, times 0 [ 396.094684][T11667] CPU: 1 PID: 11667 Comm: syz.4.2010 Not tainted syzkaller #0 [ 396.102167][T11667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 396.112249][T11667] Call Trace: [ 396.115557][T11667] [ 396.118513][T11667] dump_stack_lvl+0x18c/0x250 [ 396.123220][T11667] ? show_regs_print_info+0x20/0x20 [ 396.128446][T11667] ? load_image+0x420/0x420 [ 396.132984][T11667] ? skb_network_protocol+0x533/0x790 [ 396.138393][T11667] should_fail_ex+0x394/0x4c0 [ 396.143108][T11667] should_failslab+0x9/0x20 [ 396.147638][T11667] slab_pre_alloc_hook+0x59/0x300 [ 396.152691][T11667] kmem_cache_alloc+0x5a/0x2c0 [ 396.157480][T11667] ? skb_clone+0x1eb/0x370 [ 396.161922][T11667] skb_clone+0x1eb/0x370 [ 396.166186][T11667] ? dev_queue_xmit_nit+0x43e/0xba0 [ 396.171409][T11667] dev_queue_xmit_nit+0x23f/0xba0 [ 396.176467][T11667] ? dev_queue_xmit_nit+0x2d/0xba0 [ 396.181610][T11667] dev_hard_start_xmit+0x150/0x790 [ 396.186761][T11667] ? __dev_queue_xmit+0x275/0x3630 [ 396.191902][T11667] __dev_queue_xmit+0x198c/0x3630 [ 396.196957][T11667] ? __dev_queue_xmit+0x275/0x3630 [ 396.202126][T11667] ? netdev_core_pick_tx+0x370/0x370 [ 396.207446][T11667] ? packet_parse_headers+0x7dd/0xae0 [ 396.212850][T11667] ? packet_parse_headers+0x870/0xae0 [ 396.218252][T11667] ? __virt_addr_valid+0x10c/0x380 [ 396.223398][T11667] ? __check_object_size+0x4fc/0xa40 [ 396.228705][T11667] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 396.234316][T11667] ? skb_copy_datagram_from_iter+0x602/0x6f0 [ 396.240323][T11667] ? packet_xmit+0x66/0x340 [ 396.244851][T11667] ? packet_sendmsg+0x3945/0x4c70 [ 396.249903][T11667] packet_sendmsg+0x3a7b/0x4c70 [ 396.254883][T11667] ? balance_push_set+0x140/0x370 [ 396.259943][T11667] ? aa_sk_perm+0x83c/0x970 [ 396.264492][T11667] ? packet_getsockopt+0xad0/0xad0 [ 396.269633][T11667] ? tomoyo_write_file+0xf0/0xc50 [ 396.274676][T11667] ? aa_sock_msg_perm+0x94/0x150 [ 396.279640][T11667] ? apparmor_socket_sendmsg+0x8e/0x330 [ 396.285212][T11667] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 396.290519][T11667] ? security_socket_sendmsg+0x80/0xa0 [ 396.295998][T11667] ? packet_getsockopt+0xad0/0xad0 [ 396.301135][T11667] ____sys_sendmsg+0x61b/0x980 [ 396.305933][T11667] ? __asan_memset+0x22/0x40 [ 396.310543][T11667] ? __sys_sendmsg_sock+0x30/0x30 [ 396.315594][T11667] ? __import_iovec+0x5f2/0x850 [ 396.320484][T11667] ? import_iovec+0x73/0xa0 [ 396.325013][T11667] ___sys_sendmsg+0x2a6/0x360 [ 396.329717][T11667] ? get_pid_task+0x20/0x1e0 [ 396.334334][T11667] ? __sys_sendmsg+0x2b0/0x2b0 [ 396.339146][T11667] ? __lock_acquire+0x7d80/0x7d80 [ 396.344216][T11667] __se_sys_sendmsg+0x1d0/0x2c0 [ 396.349106][T11667] ? __x64_sys_sendmsg+0x80/0x80 [ 396.354088][T11667] ? lockdep_hardirqs_on+0x98/0x150 [ 396.359317][T11667] do_syscall_64+0x55/0xb0 [ 396.363776][T11667] ? clear_bhb_loop+0x40/0x90 [ 396.368491][T11667] ? clear_bhb_loop+0x40/0x90 [ 396.373194][T11667] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.379124][T11667] RIP: 0033:0x7f7e59f9de59 [ 396.383563][T11667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.403545][T11667] RSP: 002b:00007f7e5aef2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.412026][T11667] RAX: ffffffffffffffda RBX: 00007f7e5a226090 RCX: 00007f7e59f9de59 [ 396.420027][T11667] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 396.428009][T11667] RBP: 00007f7e5aef2090 R08: 0000000000000000 R09: 0000000000000000 [ 396.435980][T11667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.443951][T11667] R13: 00007f7e5a226128 R14: 00007f7e5a226090 R15: 00007ffe377cf848 [ 396.451939][T11667] [ 397.242675][T11681] netlink: 'syz.0.2015': attribute type 3 has an invalid length. [ 397.285112][T11681] __nla_validate_parse: 1 callbacks suppressed [ 397.285147][T11681] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2015'. [ 397.336993][T11686] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2016'. [ 397.374569][T11686] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2016'. [ 397.425144][T11680] delete_channel: no stack [ 397.870396][T11694] netlink: 'syz.2.2018': attribute type 10 has an invalid length. [ 398.056160][T11694] tap0: tun_chr_ioctl cmd 1074025677 [ 398.126947][T11694] tap0: linktype set to 270 [ 398.746407][T11712] netlink: 'syz.1.2024': attribute type 5 has an invalid length. [ 399.060694][T11722] netlink: 'syz.1.2027': attribute type 3 has an invalid length. [ 399.099594][T11722] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2027'. [ 399.149133][T11718] delete_channel: no stack [ 399.541513][T11729] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2029'. [ 399.578920][T11729] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2029'. [ 400.186004][T11743] FAULT_INJECTION: forcing a failure. [ 400.186004][T11743] name failslab, interval 1, probability 0, space 0, times 0 [ 400.242710][T11743] CPU: 1 PID: 11743 Comm: syz.0.2034 Not tainted syzkaller #0 [ 400.250245][T11743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 400.260386][T11743] Call Trace: [ 400.263680][T11743] [ 400.266626][T11743] dump_stack_lvl+0x18c/0x250 [ 400.271343][T11743] ? show_regs_print_info+0x20/0x20 [ 400.276577][T11743] ? load_image+0x420/0x420 [ 400.281111][T11743] ? __might_sleep+0xe0/0xe0 [ 400.285733][T11743] ? __lock_acquire+0x7d80/0x7d80 [ 400.290788][T11743] should_fail_ex+0x394/0x4c0 [ 400.295497][T11743] should_failslab+0x9/0x20 [ 400.300027][T11743] slab_pre_alloc_hook+0x59/0x300 [ 400.305078][T11743] ? tomoyo_encode+0x2ad/0x570 [ 400.309846][T11743] ? tomoyo_encode+0x2ad/0x570 [ 400.314613][T11743] __kmem_cache_alloc_node+0x53/0x250 [ 400.319994][T11743] ? tomoyo_encode+0x2ad/0x570 [ 400.324759][T11743] __kmalloc+0xa7/0x240 [ 400.328921][T11743] tomoyo_encode+0x2ad/0x570 [ 400.333524][T11743] tomoyo_realpath_from_path+0x57c/0x5c0 [ 400.339159][T11743] ? tomoyo_domain+0xd6/0x120 [ 400.343842][T11743] tomoyo_path_number_perm+0x248/0x5e0 [ 400.349299][T11743] ? tomoyo_path_number_perm+0x217/0x5e0 [ 400.354929][T11743] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 400.360413][T11743] ? __fget_files+0x28/0x460 [ 400.365013][T11743] security_file_ioctl+0x70/0xa0 [ 400.369957][T11743] __se_sys_ioctl+0x48/0x170 [ 400.374548][T11743] do_syscall_64+0x55/0xb0 [ 400.378967][T11743] ? clear_bhb_loop+0x40/0x90 [ 400.383637][T11743] ? clear_bhb_loop+0x40/0x90 [ 400.388310][T11743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.394208][T11743] RIP: 0033:0x7f0f4d99de59 [ 400.398621][T11743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.418227][T11743] RSP: 002b:00007f0f4e8ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.426640][T11743] RAX: ffffffffffffffda RBX: 00007f0f4dc25fa0 RCX: 00007f0f4d99de59 [ 400.434606][T11743] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 000000000000000c [ 400.442571][T11743] RBP: 00007f0f4e8ce090 R08: 0000000000000000 R09: 0000000000000000 [ 400.450535][T11743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.458501][T11743] R13: 00007f0f4dc26038 R14: 00007f0f4dc25fa0 R15: 00007ffe8e55f5c8 [ 400.466479][T11743] [ 400.503956][T11743] ERROR: Out of memory at tomoyo_realpath_from_path. [ 400.667738][T11749] netlink: 'syz.2.2036': attribute type 10 has an invalid length. [ 400.812270][T11755] netlink: 'syz.4.2038': attribute type 3 has an invalid length. [ 400.834721][T11755] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2038'. [ 400.884696][T11749] tap0: tun_chr_ioctl cmd 1074025677 [ 400.889595][T11754] delete_channel: no stack [ 400.890193][T11749] tap0: linktype set to 270 [ 401.601552][T11768] FAULT_INJECTION: forcing a failure. [ 401.601552][T11768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.684547][T11768] CPU: 0 PID: 11768 Comm: syz.1.2042 Not tainted syzkaller #0 [ 401.692107][T11768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.702215][T11768] Call Trace: [ 401.705533][T11768] [ 401.708506][T11768] dump_stack_lvl+0x18c/0x250 [ 401.713259][T11768] ? show_regs_print_info+0x20/0x20 [ 401.718526][T11768] ? load_image+0x420/0x420 [ 401.723089][T11768] ? __might_fault+0xaa/0x120 [ 401.727822][T11768] ? __lock_acquire+0x7d80/0x7d80 [ 401.732901][T11768] ? filp_close+0x10f/0x150 [ 401.737472][T11768] should_fail_ex+0x394/0x4c0 [ 401.742220][T11768] _copy_to_user+0x2f/0xa0 [ 401.746690][T11768] bpf_prog_test_run_syscall+0x33f/0x4b0 [ 401.752390][T11768] ? sock_gen_cookie+0x60/0x60 [ 401.757228][T11768] ? sock_gen_cookie+0x60/0x60 [ 401.762047][T11768] bpf_prog_test_run+0x31f/0x390 [ 401.767050][T11768] __sys_bpf+0x49d/0x890 [ 401.771349][T11768] ? bpf_link_show_fdinfo+0x390/0x390 [ 401.776829][T11768] ? lock_chain_count+0x20/0x20 [ 401.781762][T11768] __x64_sys_bpf+0x7c/0x90 [ 401.786238][T11768] do_syscall_64+0x55/0xb0 [ 401.790701][T11768] ? clear_bhb_loop+0x40/0x90 [ 401.795428][T11768] ? clear_bhb_loop+0x40/0x90 [ 401.800152][T11768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.806079][T11768] RIP: 0033:0x7ff63759de59 [ 401.810510][T11768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.830134][T11768] RSP: 002b:00007ff6384bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.838569][T11768] RAX: ffffffffffffffda RBX: 00007ff637825fa0 RCX: 00007ff63759de59 [ 401.846598][T11768] RDX: 000000000000000c RSI: 0000200000000500 RDI: 000000000000000a [ 401.854589][T11768] RBP: 00007ff6384bc090 R08: 0000000000000000 R09: 0000000000000000 [ 401.862574][T11768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.870557][T11768] R13: 00007ff637826038 R14: 00007ff637825fa0 R15: 00007ffd61c55d98 [ 401.878579][T11768] [ 402.521084][T11770] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2043'. [ 402.584705][T11770] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2043'. [ 402.978033][T11778] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2046'. [ 403.868466][T11785] netlink: 'syz.4.2049': attribute type 3 has an invalid length. [ 403.894652][T11785] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2049'. [ 403.932665][T11784] delete_channel: no stack [ 404.227559][T11797] netlink: 'syz.4.2053': attribute type 10 has an invalid length. [ 404.325801][T11797] tap0: tun_chr_ioctl cmd 1074025677 [ 404.354528][T11797] tap0: linktype set to 270 [ 404.634785][T11801] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2054'. [ 404.666952][T11801] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2054'. [ 404.763888][T11796] netlink: 'syz.2.2052': attribute type 10 has an invalid length. [ 404.820987][T11796] mac80211_hwsim hwsim8 ..c: left allmulticast mode [ 404.946982][T11796] mac80211_hwsim hwsim8 ..c: entered promiscuous mode [ 405.017149][T11796] mac80211_hwsim hwsim8 ..c: entered allmulticast mode [ 405.062459][T11796] team0: Port device ..c added [ 405.126725][T11811] netlink: 'syz.1.2057': attribute type 15 has an invalid length. [ 405.164453][T11811] netlink: 'syz.1.2057': attribute type 7 has an invalid length. [ 405.172255][T11811] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2057'. [ 405.338444][T11815] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.2059'. [ 405.962418][T11820] netlink: 'syz.2.2061': attribute type 3 has an invalid length. [ 406.009912][T11820] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2061'. [ 406.095294][T11819] delete_channel: no stack [ 406.162393][T11829] netlink: 'syz.0.2064': attribute type 10 has an invalid length. [ 406.236711][T11829] tap0: tun_chr_ioctl cmd 1074025677 [ 406.242254][T11829] tap0: linktype set to 270 [ 406.605205][T11833] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2066'. [ 407.125699][T10924] ..c: Trigger new scan to find an IBSS to join [ 407.316984][T11839] FAULT_INJECTION: forcing a failure. [ 407.316984][T11839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.386783][T11846] netlink: 'syz.0.2071': attribute type 10 has an invalid length. [ 407.403877][T11846] dummy0: entered promiscuous mode [ 407.409392][T11846] dummy0: entered allmulticast mode [ 407.423500][T11846] bridge0: port 3(dummy0) entered blocking state [ 407.454540][T11846] bridge0: port 3(dummy0) entered disabled state [ 407.470872][T11846] bridge0: port 3(dummy0) entered blocking state [ 407.477460][T11846] bridge0: port 3(dummy0) entered forwarding state [ 407.504598][T11839] CPU: 1 PID: 11839 Comm: syz.4.2068 Not tainted syzkaller #0 [ 407.512126][T11839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 407.522210][T11839] Call Trace: [ 407.525506][T11839] [ 407.528446][T11839] dump_stack_lvl+0x18c/0x250 [ 407.533152][T11839] ? show_regs_print_info+0x20/0x20 [ 407.538372][T11839] ? load_image+0x420/0x420 [ 407.542899][T11839] ? __might_fault+0xaa/0x120 [ 407.547598][T11839] ? __lock_acquire+0x7d80/0x7d80 [ 407.552646][T11839] ? unix_ioctl+0x259/0x6b0 [ 407.557190][T11839] should_fail_ex+0x394/0x4c0 [ 407.561902][T11839] _copy_from_user+0x2f/0xe0 [ 407.566519][T11839] sock_do_ioctl+0x190/0x310 [ 407.571218][T11839] ? sock_show_fdinfo+0xb0/0xb0 [ 407.576104][T11839] sock_ioctl+0x5be/0x7e0 [ 407.580460][T11839] ? sock_poll+0x3e0/0x3e0 [ 407.584904][T11839] ? bpf_lsm_file_ioctl+0x9/0x10 [ 407.589855][T11839] ? security_file_ioctl+0x80/0xa0 [ 407.594989][T11839] ? sock_poll+0x3e0/0x3e0 [ 407.599428][T11839] __se_sys_ioctl+0xfd/0x170 [ 407.604044][T11839] do_syscall_64+0x55/0xb0 [ 407.608478][T11839] ? clear_bhb_loop+0x40/0x90 [ 407.613152][T11839] ? clear_bhb_loop+0x40/0x90 [ 407.617915][T11839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.623830][T11839] RIP: 0033:0x7f7e59f9de59 [ 407.628265][T11839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.647877][T11839] RSP: 002b:00007f7e5af13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.656294][T11839] RAX: ffffffffffffffda RBX: 00007f7e5a225fa0 RCX: 00007f7e59f9de59 [ 407.664264][T11839] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000005 [ 407.672238][T11839] RBP: 00007f7e5af13090 R08: 0000000000000000 R09: 0000000000000000 [ 407.680203][T11839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.688172][T11839] R13: 00007f7e5a226038 R14: 00007f7e5a225fa0 R15: 00007ffe377cf848 [ 407.696158][T11839] [ 408.178930][T11856] netlink: 'syz.0.2075': attribute type 3 has an invalid length. [ 408.190813][T11858] netlink: 'syz.1.2077': attribute type 10 has an invalid length. [ 408.234498][T11856] __nla_validate_parse: 3 callbacks suppressed [ 408.234533][T11856] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2075'. [ 408.302239][T11858] tap0: tun_chr_ioctl cmd 1074025677 [ 408.318405][T11858] tap0: linktype set to 270 [ 408.359853][T11855] delete_channel: no stack [ 408.678435][T11870] FAULT_INJECTION: forcing a failure. [ 408.678435][T11870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.704092][T11868] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2079'. [ 408.753848][T11868] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2079'. [ 408.768330][T11870] CPU: 1 PID: 11870 Comm: syz.0.2080 Not tainted syzkaller #0 [ 408.775856][T11870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 408.785942][T11870] Call Trace: [ 408.789247][T11870] [ 408.792229][T11870] dump_stack_lvl+0x18c/0x250 [ 408.796954][T11870] ? show_regs_print_info+0x20/0x20 [ 408.802187][T11870] ? load_image+0x420/0x420 [ 408.806723][T11870] ? __might_fault+0xaa/0x120 [ 408.811422][T11870] ? __lock_acquire+0x7d80/0x7d80 [ 408.816474][T11870] should_fail_ex+0x394/0x4c0 [ 408.821178][T11870] _copy_from_user+0x2f/0xe0 [ 408.825784][T11870] __sys_bpf+0x23e/0x890 [ 408.830030][T11870] ? bpf_link_show_fdinfo+0x390/0x390 [ 408.835409][T11870] ? lock_chain_count+0x20/0x20 [ 408.840262][T11870] __x64_sys_bpf+0x7c/0x90 [ 408.844675][T11870] do_syscall_64+0x55/0xb0 [ 408.849091][T11870] ? clear_bhb_loop+0x40/0x90 [ 408.853760][T11870] ? clear_bhb_loop+0x40/0x90 [ 408.858436][T11870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.864331][T11870] RIP: 0033:0x7f0f4d99de59 [ 408.868743][T11870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.888345][T11870] RSP: 002b:00007f0f4e8ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.896754][T11870] RAX: ffffffffffffffda RBX: 00007f0f4dc25fa0 RCX: 00007f0f4d99de59 [ 408.904720][T11870] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 408.912687][T11870] RBP: 00007f0f4e8ce090 R08: 0000000000000000 R09: 0000000000000000 [ 408.920660][T11870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.928630][T11870] R13: 00007f0f4dc26038 R14: 00007f0f4dc25fa0 R15: 00007ffe8e55f5c8 [ 408.936612][T11870] [ 409.869459][T11884] netlink: 'syz.1.2087': attribute type 10 has an invalid length. [ 410.096494][T11884] hsr_slave_0: left promiscuous mode [ 410.193501][T11892] netlink: 'syz.2.2088': attribute type 3 has an invalid length. [ 410.294783][T11892] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2088'. [ 410.434949][T11884] hsr_slave_1: left promiscuous mode [ 410.756434][T11890] delete_channel: no stack [ 410.849685][T11884] bridge0: port 5(hsr0) entered disabled state [ 411.055018][T10913] ..c: Trigger new scan to find an IBSS to join [ 411.342689][T11884] hsr0 (unregistering): left allmulticast mode [ 411.379526][T11884] bridge0: port 5(hsr0) entered disabled state [ 412.091798][ T41] ..c: Creating new IBSS network, BSSID ee:0c:94:f3:16:d2 [ 412.095786][ T28] INFO: task syz.3.1064:9018 blocked for more than 143 seconds. [ 412.118929][ T28] Not tainted syzkaller #0 [ 412.137954][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.167775][ T28] task:syz.3.1064 state:D stack:24552 pid:9018 ppid:5774 flags:0x00004006 [ 412.198131][ T28] Call Trace: [ 412.201510][ T28] [ 412.218566][ T28] __schedule+0x15ae/0x4660 [ 412.223260][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 412.254336][ T28] ? asan.module_dtor+0x20/0x20 [ 412.274311][ T28] ? trace_contention_end+0x39/0xe0 [ 412.279645][ T28] ? task_work_cancel+0xa5/0x220 [ 412.314831][ T28] ? task_work_cancel_func+0x210/0x210 [ 412.320435][ T28] schedule+0xbd/0x170 [ 412.354316][ T28] ? _free_event+0x10d/0xfb0 [ 412.364498][ T28] _free_event+0x176/0xfb0 [ 412.369048][ T28] perf_event_release_kernel+0x7c8/0x850 [ 412.394463][ T28] ? __might_sleep+0xe0/0xe0 [ 412.399531][ T28] ? calc_timer_values+0x400/0x400 [ 412.429952][ T28] ? perf_mmap+0x15e0/0x15e0 [ 412.444453][ T28] perf_release+0x3b/0x40 [ 412.454357][ T28] __fput+0x221/0x940 [ 412.458474][ T28] task_work_run+0x1d4/0x260 [ 412.473481][ T28] ? task_work_cancel+0x220/0x220 [ 412.483685][ T28] do_exit+0x986/0x2530 [ 412.493824][ T28] ? put_task_struct+0xc0/0xc0 [ 412.510953][ T28] ? preempt_schedule_common+0x82/0xc0 [ 412.534866][ T28] ? preempt_schedule+0xc0/0xd0 [ 412.552735][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 412.575212][ T28] do_group_exit+0x22d/0x2f0 [ 412.585156][ T28] get_signal+0x12a6/0x1390 [ 412.598151][ T28] arch_do_signal_or_restart+0xc2/0x7b0 [ 412.618172][ T28] ? lock_chain_count+0x20/0x20 [ 412.631581][ T28] ? get_sigframe_size+0x20/0x20 [ 412.654489][ T28] exit_to_user_mode_loop+0x70/0x110 [ 412.660158][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 412.677235][ T28] syscall_exit_to_user_mode+0x1a/0x50 [ 412.703813][ T28] do_syscall_64+0x61/0xb0 [ 412.713715][ T28] ? clear_bhb_loop+0x40/0x90 [ 412.723882][ T28] ? clear_bhb_loop+0x40/0x90 [ 412.754566][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.760582][ T28] RIP: 0033:0x7f000279de59 [ 412.786410][ T28] RSP: 002b:00007f00035e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 412.824824][ T28] RAX: 0000000000000012 RBX: 00007f0002a25fa0 RCX: 00007f000279de59 [ 412.832904][ T28] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000d [ 412.883501][ T28] RBP: 00007f0002833e6f R08: 0000000000000000 R09: 0000000000000000 [ 412.923982][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.964474][ T28] R13: 00007f0002a26038 R14: 00007f0002a25fa0 R15: 00007ffc1a6ebeb8 [ 412.993106][ T28] [ 413.003326][ T28] [ 413.003326][ T28] Showing all locks held in the system: [ 413.024723][ T28] 2 locks held by kworker/0:0/8: [ 413.029748][ T28] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 413.084562][ T28] #1: ffffc900000d7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 413.117690][ T28] 1 lock held by khungtaskd/28: [ 413.122643][ T28] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 413.174346][ T28] 2 locks held by getty/5531: [ 413.179129][ T28] #0: ffff88814c9fa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 413.214470][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 413.244339][ T28] 3 locks held by kworker/1:4/5878: [ 413.249630][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 413.294310][ T28] #1: ffffc900049bfd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 413.324382][ T28] #2: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 413.344556][ T28] 3 locks held by kworker/u4:54/10922: [ 413.350105][ T28] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 413.381128][ T28] #1: ffffc9000bad7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 413.404433][ T28] #2: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 413.413565][ T28] 3 locks held by kworker/u4:57/10925: [ 413.443407][ T28] #0: ffff8880b8f3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 413.464521][ T28] #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: ___perf_sw_event+0x19e/0x730 [ 413.484386][ T28] #2: ffff8880b8f295d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6cf/0xd60 [ 413.493520][ T28] 2 locks held by syz.4.2056/11807: [ 413.514395][ T28] 5 locks held by syz.4.2062/11823: [ 413.519687][ T28] 2 locks held by syz.0.2074/11854: [ 413.534321][ T28] 2 locks held by syz.1.2087/11883: [ 413.539613][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 413.564305][ T28] #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 413.594496][ T28] 2 locks held by syz.1.2087/11888: [ 413.599786][ T28] #0: ffffffff8d187ee8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 413.624398][ T28] #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 413.644399][ T28] 3 locks held by syz.4.2084/11889: [ 413.649693][ T28] 2 locks held by syz.2.2088/11892: [ 413.674501][ T28] #0: ffffffff8e43a8d0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 413.682856][ T28] #1: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5e/0x890 [ 413.704306][ T28] 1 lock held by syz.4.2090/11898: [ 413.709511][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 413.744310][ T28] 1 lock held by syz.4.2090/11899: [ 413.754790][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f7/0x2070 [ 413.784512][ T28] 1 lock held by syz.4.2090/11900: [ 413.789710][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f7/0x2070 [ 413.823649][ T28] 1 lock held by syz.4.2090/11903: [ 413.838808][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f7/0x2070 [ 413.873273][ T28] [ 413.890225][ T28] ============================================= [ 413.890225][ T28] [ 413.900325][T11898] netlink: 'syz.4.2090': attribute type 10 has an invalid length. [ 413.914327][ T28] NMI backtrace for cpu 1 [ 413.918729][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 413.925971][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 413.936081][ T28] Call Trace: [ 413.939399][ T28] [ 413.942372][ T28] dump_stack_lvl+0x18c/0x250 [ 413.947101][ T28] ? __wake_up_klogd+0xd9/0x100 [ 413.952008][ T28] ? show_regs_print_info+0x20/0x20 [ 413.957269][ T28] ? load_image+0x420/0x420 [ 413.961864][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 413.966866][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 413.973088][ T28] ? load_image+0x420/0x420 [ 413.977640][ T28] ? wq_watchdog_touch+0xef/0x170 [ 413.982728][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 413.988857][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 413.994899][ T28] watchdog+0xf59/0xfa0 [ 413.999120][ T28] ? watchdog+0x1e1/0xfa0 [ 414.003530][ T28] kthread+0x2fa/0x390 [ 414.007646][ T28] ? hungtask_pm_notify+0x50/0x50 [ 414.012727][ T28] ? kthread_blkcg+0xd0/0xd0 [ 414.017372][ T28] ret_from_fork+0x48/0x80 [ 414.021838][ T28] ? kthread_blkcg+0xd0/0xd0 [ 414.026485][ T28] ret_from_fork_asm+0x11/0x20 [ 414.031342][ T28] [ 414.035531][ T28] Sending NMI from CPU 1 to CPUs 0: [ 414.040804][ C0] NMI backtrace for cpu 0 [ 414.040815][ C0] CPU: 0 PID: 11889 Comm: syz.4.2084 Not tainted syzkaller #0 [ 414.040831][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 414.040840][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 414.040863][ C0] Code: 00 0f 0b 0f 1f 80 00 00 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d ec 87 05 0d 48 89 de 5b e9 23 a7 57 00 cc cc cc 0f 1e fa 48 8b 04 24 65 48 8b 0d c0 d2 7c 7e 65 8b 15 c1 d2 7c [ 414.040876][ C0] RSP: 0018:ffffc90004efe8c8 EFLAGS: 00000246 [ 414.040889][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888027bfbc00 [ 414.040900][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 414.040909][ C0] RBP: dffffc0000000000 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 414.040920][ C0] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: 00fff00000000000 [ 414.040931][ C0] R13: dffffc0000000000 R14: ffffea00014dcd80 R15: dead000000000100 [ 414.040943][ C0] FS: 00007f7e5af136c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 414.040956][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 414.040966][ C0] CR2: 000055611e3f7088 CR3: 000000006763f000 CR4: 00000000003506f0 [ 414.040980][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 414.040990][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 414.040999][ C0] Call Trace: [ 414.041004][ C0] [ 414.041009][ C0] __page_table_check_zero+0xea/0x4b0 [ 414.041039][ C0] get_page_from_freelist+0x2181/0x22a0 [ 414.041086][ C0] ? verify_lock_unused+0x140/0x140 [ 414.041111][ C0] ? __next_zones_zonelist+0x9d/0x130 [ 414.041157][ C0] __alloc_pages+0x1f0/0x460 [ 414.041177][ C0] ? zone_statistics+0x170/0x170 [ 414.041225][ C0] __folio_alloc+0x10/0x20 [ 414.041239][ C0] vma_alloc_folio+0x474/0x8f0 [ 414.041258][ C0] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 414.041281][ C0] shmem_alloc_folio+0x1a9/0x2a0 [ 414.041304][ C0] ? folio_put+0xd0/0xd0 [ 414.041357][ C0] ? __vm_enough_memory+0x11a/0x370 [ 414.041383][ C0] ? shmem_inode_acct_block+0x35e/0x460 [ 414.041407][ C0] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 414.041431][ C0] ? put_swap_device+0x230/0x230 [ 414.041457][ C0] ? xas_load+0x12b/0x140 [ 414.041475][ C0] ? filemap_get_entry+0xce/0x3f0 [ 414.041490][ C0] ? filemap_get_entry+0xce/0x3f0 [ 414.041510][ C0] ? filemap_get_entry+0x375/0x3f0 [ 414.041532][ C0] ? page_cache_prev_miss+0x390/0x390 [ 414.041588][ C0] shmem_get_folio_gfp+0xe1d/0x2b40 [ 414.041653][ C0] shmem_write_begin+0xf2/0x430 [ 414.041682][ C0] generic_perform_write+0x2fe/0x5c0 [ 414.041727][ C0] ? generic_file_direct_write+0x3e0/0x3e0 [ 414.041742][ C0] ? down_write+0x16e/0x200 [ 414.041775][ C0] ? file_update_time+0x98/0x1a0 [ 414.041798][ C0] shmem_file_write_iter+0xfb/0x120 [ 414.041822][ C0] __kernel_write_iter+0x29f/0x6d0 [ 414.041853][ C0] ? vfs_read+0x990/0x990 [ 414.041869][ C0] ? get_dump_page+0x156/0x200 [ 414.041901][ C0] ? __asan_memset+0x22/0x40 [ 414.041921][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 414.041947][ C0] dump_user_range+0x418/0x840 [ 414.041987][ C0] ? dump_skip+0x40/0x40 [ 414.042000][ C0] ? dump_emit+0x78/0xe0 [ 414.042043][ C0] ? dump_emit+0xa6/0xe0 [ 414.042056][ C0] ? elf_core_dump+0x2dbb/0x37c0 [ 414.042081][ C0] elf_core_dump+0x320e/0x37c0 [ 414.042134][ C0] ? load_elf_binary+0x2850/0x2850 [ 414.042166][ C0] ? verify_lock_unused+0x140/0x140 [ 414.042186][ C0] ? perf_trace_lock_acquire+0x105/0x400 [ 414.042279][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 414.042297][ C0] ? 0xffffffffff600000 [ 414.042337][ C0] do_coredump+0x1791/0x24a0 [ 414.042391][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 414.042447][ C0] ? lock_chain_count+0x20/0x20 [ 414.042476][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.042496][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 414.042520][ C0] get_signal+0x10da/0x1390 [ 414.042580][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 414.042609][ C0] ? get_sigframe_size+0x20/0x20 [ 414.042633][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 414.042673][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 414.042701][ C0] exit_to_user_mode_loop+0x70/0x110 [ 414.042723][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 414.042745][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 414.042762][ C0] exc_general_protection+0x168/0x1f0 [ 414.042797][ C0] ? exc_page_fault+0x8c/0x100 [ 414.042820][ C0] asm_exc_general_protection+0x26/0x30 [ 414.042841][ C0] RIP: 0033:0x7f7e59f9de61 [ 414.042855][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 414.042867][ C0] RSP: 002b:0000200000000050 EFLAGS: 00010217 [ 414.042879][ C0] RAX: 0000000000000000 RBX: 00007f7e5a225fa0 RCX: 00007f7e59f9de59 [ 414.042889][ C0] RDX: 00002000000003c0 RSI: 0000200000000050 RDI: 0000000002108000 [ 414.042899][ C0] RBP: 00007f7e5a033e6f R08: 0000200000000440 R09: 0000200000000440 [ 414.042909][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 414.042918][ C0] R13: 00007f7e5a226038 R14: 00007f7e5a225fa0 R15: 00007ffe377cf848 [ 414.042956][ C0] [ 414.555642][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 414.562543][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 414.569780][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 414.579877][ T28] Call Trace: [ 414.583181][ T28] [ 414.586142][ T28] dump_stack_lvl+0x18c/0x250 [ 414.590872][ T28] ? show_regs_print_info+0x20/0x20 [ 414.596112][ T28] ? load_image+0x420/0x420 [ 414.600692][ T28] panic+0x2ca/0x720 [ 414.604638][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 414.609175][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 414.614760][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 414.620171][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 414.626378][ T28] watchdog+0xf98/0xfa0 [ 414.630578][ T28] ? watchdog+0x1e1/0xfa0 [ 414.634959][ T28] kthread+0x2fa/0x390 [ 414.639048][ T28] ? hungtask_pm_notify+0x50/0x50 [ 414.644107][ T28] ? kthread_blkcg+0xd0/0xd0 [ 414.648720][ T28] ret_from_fork+0x48/0x80 [ 414.653162][ T28] ? kthread_blkcg+0xd0/0xd0 [ 414.657789][ T28] ret_from_fork_asm+0x11/0x20 [ 414.662631][ T28] [ 414.665939][ T28] Kernel Offset: disabled [ 414.670265][ T28] Rebooting in 86400 seconds..