last executing test programs: 3.563529044s ago: executing program 3 (id=5726): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069004200000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475ae", 0x17}], 0x1, 0x0, 0x6b}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000600)='memory.current\x00', 0xf0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xa, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f00}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef437000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x6, 0x80, &(0x7f00000002c0)=""/128}, 0x94) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}, {0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x38}, 0x41) 2.827892768s ago: executing program 0 (id=5732): socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, {0xa, 0x1000, 0x4, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}}}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x12, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.437730231s ago: executing program 3 (id=5736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1f, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002075682500000000002020207b1af8ff00000000bfa10000000000000701000009ffffffb702000000000000b7030000010400008500000004000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x7d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x3, 0x106) socketpair$tipc(0x1e, 0xb, 0x0, &(0x7f0000000340)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x12, 0xc6, 0x4, 0x2}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r4 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x37a05, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000140), 0x6}, 0x1075, 0x0, 0x0, 0x0, 0xffffffffffffbbfa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0xd, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700020000000000ef000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, &(0x7f0000000140), 0x0}, 0x20) 2.233280707s ago: executing program 2 (id=5738): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="62053c005902002f1eafbcf706e12b30087f5c112d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844d50c00", 0x45}], 0x1}, 0x4040) 2.15607316s ago: executing program 3 (id=5739): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x4c0102, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x408) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000, 0x5}, {0x10000002, 0x0, 0x0, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) close(r1) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10, 0x0, 0x59}, 0x10) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) (fail_nth: 7) 2.14126611s ago: executing program 1 (id=5740): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x2405, 0xfffffffffffffffb) 2.042617213s ago: executing program 2 (id=5741): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000e80)="3c3ec2e05be4275c3baa2224e8af67527235fe5d4a1c3a492eafccbeeac1953d2fdc1a42b8b5e0b61b5c93ced0221592f8d1d071bd3315014347af8d60ea5fcca67f76c974e766f6ab2d660df3ada839e46f3f12a4f3", 0x56}], 0x1, 0x0, 0x0, 0x803e}, 0x1001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="180b0000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000c2c30000000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x9f, &(0x7f00000001c0)=""/159, 0x0, 0x0, '\x00', r7}, 0x94) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b07, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.966448046s ago: executing program 1 (id=5742): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000e80)="3c3ec2e05be4275c3baa2224e8af67527235fe5d4a1c3a492eafccbeeac1953d2fdc1a42b8b5e0b61b5c93ced0221592f8d1d071bd3315014347af8d60ea5fcca67f76c974e766f6ab2d660df3ada839e46f3f12a4f3", 0x56}], 0x1, 0x0, 0x0, 0x803e}, 0x1001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="180b0000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000c2c30000000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x9f, &(0x7f00000001c0)=""/159, 0x0, 0x0, '\x00', r7}, 0x94) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b07, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.581301148s ago: executing program 0 (id=5743): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.565657809s ago: executing program 2 (id=5744): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069004200000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475ae", 0x17}], 0x1, 0x0, 0x6b}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000600)='memory.current\x00', 0xf0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xa, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f00}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef437000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x6, 0x80, &(0x7f00000002c0)=""/128}, 0x94) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}, {0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x38}, 0x41) 1.503574151s ago: executing program 1 (id=5745): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000e80)="3c3ec2e05be4275c3baa2224e8af67527235fe5d4a1c3a492eafccbeeac1953d2fdc1a42b8b5e0b61b5c93ced0221592f8d1d071bd3315014347af8d60ea5fcca67f76c974e766f6ab2d660df3ada839e46f3f12a4f3", 0x56}], 0x1, 0x0, 0x0, 0x803e}, 0x1001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 1.429783953s ago: executing program 0 (id=5746): socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2002) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$kcm(0x2, 0x3, 0x84) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xfffffffffffffe9f, 0x0, &(0x7f0000000400)="ffe71aec0ce5b7e53900"/29, 0x0, 0x500, 0x60000000, 0x0, 0x5a, 0x0, 0x0, 0x6}, 0x50) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000480)={0xfbc975fbc88a9872, 0x80, 0x3, 0x0, 0x3, 0x0, 0x0, 0x5d35, 0x22160, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88941fc5c575aa59, @perf_bp={0x0, 0x2}, 0x10664, 0xfffffff, 0x7ffffffd, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x8000000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x21, 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188041f56ecdb4cb9cca7480ef43a000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4fe8f09cdc2649f", 0x67}], 0x1}, 0x4804) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz0\x00', 0x1ff) 1.339782156s ago: executing program 1 (id=5747): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1f, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002075682500000000002020207b1af8ff00000000bfa10000000000000701000009ffffffb702000000000000b7030000010400008500000004000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x7d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x3, 0x106) socketpair$tipc(0x1e, 0xb, 0x0, &(0x7f0000000340)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x12, 0xc6, 0x4, 0x2}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r4 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x37a05, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000140), 0x6}, 0x1075, 0x0, 0x0, 0x0, 0xffffffffffffbbfa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0xd, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700020000000000ef000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, &(0x7f0000000140), 0x0}, 0x20) 1.166668452s ago: executing program 3 (id=5748): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000016608ffffff7f0000180000000000000000000000001002019500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xe9, &(0x7f0000000200)=""/233, 0x0, 0x1e}, 0x94) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5000000000000, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x21000, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x100000000003d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095001800000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d3500000000000065070000020000000707"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) perf_event_open(0x0, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 1.123310923s ago: executing program 0 (id=5749): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x10884, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x6, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0xfffffe5a}, 0xff0f000020000080) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r2, &(0x7f0000000000)={0x0, 0x46, &(0x7f0000000440)=[{&(0x7f0000000080)=""/45, 0x23}], 0x1, 0x0, 0xffffffffffffff28}, 0x40008140) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x1, 0x0, 0x0, 0x5, 0x641b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10737e, 0x4, @perf_config_ext={0x5, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x5, 0x0, 0xfffeffff, 0x0, 0x2009}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) socketpair(0x26, 0x5, 0x9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x0, 0xa9, 0x86, &(0x7f0000000c00)="81306a417b342cba7f0fbe077791c02f97da79d1673275b3d2f332a53b4979fb00000000000000000000000000f2d524d733958ea1ad711ff717b29429ea1759c1f650609cf6aa5ec72a943f14523464cd123dad721dfb1676259017b36139ba4033c793e53d6a3b6d89cc5d54ee61d583b4d0b78fb17f4486fe97d8f2c8f3472018debc2da0acd337b123b7ed9be64a34fa87820320b80a91c307f76cee0c06185803465427ba0d0e", &(0x7f0000000a00)=""/134, 0x9, 0x0, 0x21, 0xe8, &(0x7f00000007c0)="3c08981790c9484ec49065bcb56d8c4500b5a0bf764aad7d389a82ac1941f3c3e3", &(0x7f0000000800)="f8ee494925c69c3a7da709127ef239c8b3d495a9125958039b8f98cf8c8fdc2868a2b945b5533b780d465a893afce854f54301a5e307f312c0e99eb63476b894672322d02a97fbe2b9f8b0b21e4f09e09d4231c224ff77c61d1a22daffcb808e368ecbdfa4df41af9a70eeafdc1eefa7d1a90e7a084476d84007327e49d08d7bbaf498884083b38ee90eed11475fb750d15c96fb897d07e9ffae484d0ebca94134fb62efab3f03df3516e6c8a6794952403e05eff6d158e896ac92925dae80497646cd801db598891ff40602f972b5a45675bbe70044e88164049901808c377c047a6c69cc979b4f", 0x1, 0x0, 0x8}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001540)=""/4110, 0x100e}], 0x29}, 0x406) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000080000000000000000000000000000000000000120dce25161a5ca4c61383d1d09121b579c7ea6030338b62cf97713b390dabaa6bc73af1b11ff182e029671f22f74b90a8a486b396d4ce649b54fa24aafbfed50736fefcdca3e8d03761aa80fd797fcbc240f83b7ce86f046900d8c439821259e51d3779acd1f960da0ee3e0d22eb0d3d883b7789c5a499868a0abe89e983ffedd0158"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x85034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x5, 0x3, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xb4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) 853.060832ms ago: executing program 1 (id=5750): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x4c0102, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x408) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000, 0x5}, {0x10000002, 0x0, 0x0, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r1) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x10100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10, 0x0, 0x59}, 0x10) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000030000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000400)='cgroup.freeze\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x403, 0x6, 0x0, 0x34d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000031d8151ceae3b181fcf633000000000000000000000071f9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 834.690683ms ago: executing program 3 (id=5751): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x9, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x201, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x400c4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x10140) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0xfffffffffffffffb) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') 747.579725ms ago: executing program 0 (id=5752): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200001800000000000000000000008500000087000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f00000004c0), &(0x7f0000000500)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x590f}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f2f, 0x18, 0x1e8, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x1e8, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000000), 0x0, 0xe8030000}, 0x23) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r3) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES32=r10], 0x9a) write$cgroup_subtree(r11, &(0x7f00000000c0)={[{0x2d, 'cpu'}]}, 0x5) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc4fea534d284fe21, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r1) 519.152502ms ago: executing program 1 (id=5753): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000e80)="3c3ec2e05be4275c3baa2224e8af67527235fe5d4a1c3a492eafccbeeac1953d2fdc1a42b8b5e0b61b5c93ced0221592f8d1d071bd3315014347af8d60ea5fcca67f76c974e766f6ab2d660df3ada839e46f3f12a4f3", 0x56}], 0x1, 0x0, 0x0, 0x803e}, 0x1001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="180b0000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000c2c30000000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x9f, &(0x7f00000001c0)=""/159, 0x0, 0x0, '\x00', r7}, 0x94) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b07, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 475.201174ms ago: executing program 2 (id=5754): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 165.410944ms ago: executing program 2 (id=5755): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000013006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000702080002000b00e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) 48.844948ms ago: executing program 0 (id=5756): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000e80)="3c3ec2e05be4275c3baa2224e8af67527235fe5d4a1c3a492eafccbeeac1953d2fdc1a42b8b5e0b61b5c93ced0221592f8d1d071bd3315014347af8d60ea5fcca67f76c974e766f6ab2d660df3ada839e46f3f12a4f3", 0x56}], 0x1, 0x0, 0x0, 0x803e}, 0x1001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 48.441138ms ago: executing program 3 (id=5757): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2002) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$kcm(0x2, 0x3, 0x84) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xfffffffffffffe9f, 0x0, &(0x7f0000000400)="ffe71aec0ce5b7e53900"/29, 0x0, 0x500, 0x60000000, 0x0, 0x5a, 0x0, 0x0, 0x6}, 0x50) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000480)={0xfbc975fbc88a9872, 0x80, 0x3, 0x0, 0x3, 0x0, 0x0, 0x5d35, 0x22160, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88941fc5c575aa59, @perf_bp={0x0, 0x2}, 0x10664, 0xfffffff, 0x7ffffffd, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x8000000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x21, 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188041f56ecdb4cb9cca7480ef43a000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4fe8f09cdc2649f", 0x67}], 0x1}, 0x4804) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz0\x00', 0x1ff) 0s ago: executing program 2 (id=5758): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004"], 0x50) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)="d1", 0xfffd}], 0x1, 0x0, 0xf00}, 0xc54) kernel console output (not intermixed with test programs): 6][T20207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 855.463474][T20213] netlink: 'syz.1.5106': attribute type 10 has an invalid length. [ 855.472563][T20213] __nla_validate_parse: 9 callbacks suppressed [ 855.472614][T20213] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5106'. [ 855.733750][T20222] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5112'. [ 855.966429][T20232] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5114'. [ 856.038279][T20232] netlink: 'syz.0.5114': attribute type 29 has an invalid length. [ 856.085965][T20232] netlink: 'syz.0.5114': attribute type 29 has an invalid length. [ 856.095952][T20235] netlink: 'syz.0.5114': attribute type 29 has an invalid length. [ 856.113088][T20234] netlink: 'syz.1.5117': attribute type 10 has an invalid length. [ 856.456550][T20238] netlink: 'syz.3.5118': attribute type 10 has an invalid length. [ 856.474714][T20238] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5118'. [ 856.979759][T20252] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5122'. [ 857.037702][T20253] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5123'. [ 857.230969][T20253] netlink: 'syz.3.5123': attribute type 29 has an invalid length. [ 857.366912][T20252] netlink: 'syz.0.5122': attribute type 29 has an invalid length. [ 857.380319][T20253] netlink: 'syz.3.5123': attribute type 29 has an invalid length. [ 858.582730][T20276] FAULT_INJECTION: forcing a failure. [ 858.582730][T20276] name failslab, interval 1, probability 0, space 0, times 0 [ 858.611196][T20276] CPU: 0 PID: 20276 Comm: syz.1.5128 Not tainted syzkaller #0 [ 858.618764][T20276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 858.628896][T20276] Call Trace: [ 858.632267][T20276] [ 858.635266][T20276] dump_stack_lvl+0x18c/0x250 [ 858.640057][T20276] ? show_regs_print_info+0x20/0x20 [ 858.645334][T20276] ? load_image+0x420/0x420 [ 858.649944][T20276] ? __might_sleep+0xe0/0xe0 [ 858.654628][T20276] ? __lock_acquire+0x7d40/0x7d40 [ 858.659727][T20276] should_fail_ex+0x39d/0x4d0 [ 858.664498][T20276] should_failslab+0x9/0x20 [ 858.669067][T20276] slab_pre_alloc_hook+0x59/0x310 [ 858.674145][T20276] ? tomoyo_encode+0x28b/0x540 [ 858.678948][T20276] ? tomoyo_encode+0x28b/0x540 [ 858.683747][T20276] __kmem_cache_alloc_node+0x53/0x250 [ 858.689179][T20276] ? tomoyo_encode+0x28b/0x540 [ 858.693984][T20276] __kmalloc+0xa4/0x230 [ 858.698282][T20276] tomoyo_encode+0x28b/0x540 [ 858.702936][T20276] tomoyo_realpath_from_path+0x592/0x5d0 [ 858.708657][T20276] tomoyo_path_number_perm+0x248/0x620 [ 858.714168][T20276] ? tomoyo_path_number_perm+0x217/0x620 [ 858.719856][T20276] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 858.725378][T20276] ? ksys_write+0x1c4/0x260 [ 858.730003][T20276] ? __fget_files+0x28/0x4b0 [ 858.734654][T20276] ? __fget_files+0x28/0x4b0 [ 858.739332][T20276] security_file_ioctl+0x70/0xa0 [ 858.744341][T20276] __se_sys_ioctl+0x48/0x170 [ 858.748992][T20276] do_syscall_64+0x55/0xa0 [ 858.753444][T20276] ? clear_bhb_loop+0x40/0x90 [ 858.758160][T20276] ? clear_bhb_loop+0x40/0x90 [ 858.762889][T20276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.768854][T20276] RIP: 0033:0x7fa65619ce59 [ 858.773333][T20276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.792990][T20276] RSP: 002b:00007fa6543f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 858.801471][T20276] RAX: ffffffffffffffda RBX: 00007fa656416090 RCX: 00007fa65619ce59 [ 858.809483][T20276] RDX: 00002000000001c0 RSI: 00000000000089e1 RDI: 000000000000000a [ 858.817492][T20276] RBP: 00007fa6543f6090 R08: 0000000000000000 R09: 0000000000000000 [ 858.825512][T20276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.833531][T20276] R13: 00007fa656416128 R14: 00007fa656416090 R15: 00007ffe30af4bc8 [ 858.841602][T20276] [ 858.882910][T20276] ERROR: Out of memory at tomoyo_realpath_from_path. [ 859.010070][T20280] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5130'. [ 859.437778][T20295] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5135'. [ 859.843700][T20296] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5136'. [ 860.122140][T20306] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5137'. [ 860.434796][T20306] validate_nla: 9 callbacks suppressed [ 860.434841][T20306] netlink: 'syz.3.5137': attribute type 29 has an invalid length. [ 860.463136][T20307] netlink: 'syz.3.5137': attribute type 29 has an invalid length. [ 860.546505][T20312] netlink: 'syz.2.5147': attribute type 4 has an invalid length. [ 860.558890][T20313] netlink: 'syz.0.5139': attribute type 10 has an invalid length. [ 860.878097][T20318] netlink: 'syz.0.5141': attribute type 10 has an invalid length. [ 860.894747][T20318] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5141'. [ 861.231385][T20334] netlink: 'syz.3.5149': attribute type 10 has an invalid length. [ 861.498083][T20345] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5153'. [ 861.572667][T20345] netlink: 'syz.3.5153': attribute type 29 has an invalid length. [ 861.618380][T20345] netlink: 'syz.3.5153': attribute type 29 has an invalid length. [ 861.645431][T20348] netlink: 'syz.3.5153': attribute type 29 has an invalid length. [ 861.722219][T20350] netlink: 'syz.0.5155': attribute type 10 has an invalid length. [ 861.731858][T20350] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5155'. [ 862.499250][T20356] FAULT_INJECTION: forcing a failure. [ 862.499250][T20356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.544220][T20356] CPU: 1 PID: 20356 Comm: syz.1.5158 Not tainted syzkaller #0 [ 862.551772][T20356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 862.561895][T20356] Call Trace: [ 862.565225][T20356] [ 862.568204][T20356] dump_stack_lvl+0x18c/0x250 [ 862.572953][T20356] ? show_regs_print_info+0x20/0x20 [ 862.578228][T20356] ? load_image+0x420/0x420 [ 862.582802][T20356] ? __might_fault+0xaa/0x120 [ 862.587540][T20356] ? __lock_acquire+0x7d40/0x7d40 [ 862.592616][T20356] ? __sys_bpf+0x91/0x890 [ 862.596998][T20356] should_fail_ex+0x39d/0x4d0 [ 862.601745][T20356] _copy_from_user+0x2f/0xe0 [ 862.606398][T20356] __sys_bpf+0x23e/0x890 [ 862.610704][T20356] ? bpf_link_show_fdinfo+0x390/0x390 [ 862.616124][T20356] ? lock_chain_count+0x20/0x20 [ 862.621002][T20356] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 862.627015][T20356] __x64_sys_bpf+0x7c/0x90 [ 862.631465][T20356] do_syscall_64+0x55/0xa0 [ 862.635921][T20356] ? clear_bhb_loop+0x40/0x90 [ 862.640622][T20356] ? clear_bhb_loop+0x40/0x90 [ 862.645364][T20356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 862.651293][T20356] RIP: 0033:0x7fa65619ce59 [ 862.655735][T20356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.675393][T20356] RSP: 002b:00007fa656f81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 862.683836][T20356] RAX: ffffffffffffffda RBX: 00007fa656415fa0 RCX: 00007fa65619ce59 [ 862.691831][T20356] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 862.699841][T20356] RBP: 00007fa656f81090 R08: 0000000000000000 R09: 0000000000000000 [ 862.707833][T20356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.715829][T20356] R13: 00007fa656416038 R14: 00007fa656415fa0 R15: 00007ffe30af4bc8 [ 862.723837][T20356] [ 863.063739][T20371] team0: Device ipvlan1 failed to register rx_handler [ 863.157225][T20378] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5167'. [ 863.279999][T20382] FAULT_INJECTION: forcing a failure. [ 863.279999][T20382] name failslab, interval 1, probability 0, space 0, times 0 [ 863.312857][T20382] CPU: 1 PID: 20382 Comm: syz.3.5169 Not tainted syzkaller #0 [ 863.320427][T20382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 863.330539][T20382] Call Trace: [ 863.333865][T20382] [ 863.336844][T20382] dump_stack_lvl+0x18c/0x250 [ 863.341593][T20382] ? show_regs_print_info+0x20/0x20 [ 863.346858][T20382] ? load_image+0x420/0x420 [ 863.351433][T20382] ? __might_sleep+0xe0/0xe0 [ 863.356083][T20382] ? __lock_acquire+0x7d40/0x7d40 [ 863.361238][T20382] ? mark_lock+0x94/0x320 [ 863.365633][T20382] should_fail_ex+0x39d/0x4d0 [ 863.370361][T20382] should_failslab+0x9/0x20 [ 863.374905][T20382] slab_pre_alloc_hook+0x59/0x310 [ 863.379975][T20382] kmem_cache_alloc_node+0x60/0x320 [ 863.385224][T20382] ? __alloc_skb+0x103/0x2c0 [ 863.389852][T20382] __alloc_skb+0x103/0x2c0 [ 863.394328][T20382] rtmsg_fib+0xeb/0x4c0 [ 863.398519][T20382] ? fib_find_node+0x2ad/0x2f0 [ 863.403336][T20382] fib_table_delete+0xd04/0xff0 [ 863.408250][T20382] ? nexthop_get_nhc_lookup+0x400/0x400 [ 863.413858][T20382] ? l3mdev_fib_table+0x18/0x160 [ 863.418848][T20382] ? fib_new_table+0x10a/0x2d0 [ 863.423675][T20382] fib_magic+0x305/0x3c0 [ 863.427961][T20382] ? lockdep_hardirqs_on+0x98/0x150 [ 863.433212][T20382] ? fib_add_ifaddr+0x5e0/0x5e0 [ 863.438118][T20382] fib_del_ifaddr+0x28b/0x1480 [ 863.442925][T20382] ? inetaddr_event+0xf0/0x150 [ 863.447726][T20382] ? is_eth_active_slave_of_bonding_rcu+0x260/0x260 [ 863.454346][T20382] ? netlink_broadcast_filtered+0x10a4/0x1110 [ 863.460469][T20382] fib_inetaddr_event+0xbb/0x1d0 [ 863.465442][T20382] notifier_call_chain+0x197/0x380 [ 863.470578][T20382] blocking_notifier_call_chain+0x6a/0x90 [ 863.476349][T20382] __inet_del_ifa+0x879/0x1020 [ 863.481152][T20382] devinet_ioctl+0xb40/0x1c40 [ 863.485861][T20382] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 863.490995][T20382] ? _copy_from_user+0xa5/0xe0 [ 863.495785][T20382] ? get_user_ifreq+0x12b/0x180 [ 863.500677][T20382] inet_ioctl+0x42b/0x560 [ 863.505034][T20382] ? tomoyo_path_number_perm+0x217/0x620 [ 863.510708][T20382] ? inet_shutdown+0x370/0x370 [ 863.515498][T20382] ? slab_free_freelist_hook+0x130/0x1a0 [ 863.521153][T20382] ? tomoyo_path_number_perm+0x500/0x620 [ 863.526816][T20382] ? __kmem_cache_free+0xba/0x1e0 [ 863.531889][T20382] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 863.537381][T20382] sock_do_ioctl+0xfc/0x310 [ 863.541941][T20382] ? sock_show_fdinfo+0xb0/0xb0 [ 863.546827][T20382] sock_ioctl+0x5ba/0x7e0 [ 863.551199][T20382] ? sock_poll+0x3e0/0x3e0 [ 863.555648][T20382] ? bpf_lsm_file_ioctl+0x9/0x10 [ 863.560608][T20382] ? security_file_ioctl+0x80/0xa0 [ 863.565793][T20382] ? sock_poll+0x3e0/0x3e0 [ 863.570255][T20382] __se_sys_ioctl+0xfd/0x170 [ 863.574881][T20382] do_syscall_64+0x55/0xa0 [ 863.579326][T20382] ? clear_bhb_loop+0x40/0x90 [ 863.584028][T20382] ? clear_bhb_loop+0x40/0x90 [ 863.588740][T20382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 863.594657][T20382] RIP: 0033:0x7f846639ce59 [ 863.599093][T20382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.618720][T20382] RSP: 002b:00007f8467172028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 863.627197][T20382] RAX: ffffffffffffffda RBX: 00007f8466615fa0 RCX: 00007f846639ce59 [ 863.635196][T20382] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000003 [ 863.643216][T20382] RBP: 00007f8467172090 R08: 0000000000000000 R09: 0000000000000000 [ 863.651230][T20382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.659326][T20382] R13: 00007f8466616038 R14: 00007f8466615fa0 R15: 00007ffc374ae7a8 [ 863.667333][T20382] [ 863.926542][T20384] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5171'. [ 863.949868][T20384] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5171'. [ 864.259500][T20407] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5178'. [ 864.611369][T20414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 864.692756][T20425] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5183'. [ 865.019453][T20440] FAULT_INJECTION: forcing a failure. [ 865.019453][T20440] name failslab, interval 1, probability 0, space 0, times 0 [ 865.045300][T20440] CPU: 0 PID: 20440 Comm: syz.0.5190 Not tainted syzkaller #0 [ 865.052872][T20440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 865.062996][T20440] Call Trace: [ 865.066317][T20440] [ 865.069288][T20440] dump_stack_lvl+0x18c/0x250 [ 865.074038][T20440] ? show_regs_print_info+0x20/0x20 [ 865.079306][T20440] ? load_image+0x420/0x420 [ 865.083875][T20440] ? __might_sleep+0xe0/0xe0 [ 865.088529][T20440] ? __lock_acquire+0x7d40/0x7d40 [ 865.093602][T20440] should_fail_ex+0x39d/0x4d0 [ 865.098348][T20440] should_failslab+0x9/0x20 [ 865.102904][T20440] slab_pre_alloc_hook+0x59/0x310 [ 865.107988][T20440] ? __lock_acquire+0x7d40/0x7d40 [ 865.113076][T20440] kmem_cache_alloc_node+0x60/0x320 [ 865.118323][T20440] ? __alloc_skb+0x103/0x2c0 [ 865.122986][T20440] __alloc_skb+0x103/0x2c0 [ 865.127451][T20440] netlink_sendmsg+0x66a/0xbf0 [ 865.132307][T20440] ? netlink_getsockopt+0x590/0x590 [ 865.137559][T20440] ? aa_sock_msg_perm+0x94/0x150 [ 865.142541][T20440] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 865.147866][T20440] ? security_socket_sendmsg+0x80/0xa0 [ 865.153368][T20440] ? netlink_getsockopt+0x590/0x590 [ 865.158612][T20440] ____sys_sendmsg+0x5ba/0x960 [ 865.163436][T20440] ? __asan_memset+0x22/0x40 [ 865.168067][T20440] ? __sys_sendmsg_sock+0x30/0x30 [ 865.173125][T20440] ? __import_iovec+0x5f2/0x850 [ 865.178076][T20440] ? import_iovec+0x73/0xa0 [ 865.182630][T20440] ___sys_sendmsg+0x2a6/0x360 [ 865.187345][T20440] ? get_pid_task+0x20/0x1e0 [ 865.192001][T20440] ? __sys_sendmsg+0x2a0/0x2a0 [ 865.196879][T20440] ? __lock_acquire+0x7d40/0x7d40 [ 865.202065][T20440] __se_sys_sendmsg+0x1c2/0x2b0 [ 865.206971][T20440] ? __x64_sys_sendmsg+0x80/0x80 [ 865.211991][T20440] ? lockdep_hardirqs_on+0x98/0x150 [ 865.217251][T20440] do_syscall_64+0x55/0xa0 [ 865.221711][T20440] ? clear_bhb_loop+0x40/0x90 [ 865.226433][T20440] ? clear_bhb_loop+0x40/0x90 [ 865.231157][T20440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 865.237138][T20440] RIP: 0033:0x7f0263b9ce59 [ 865.241605][T20440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.261257][T20440] RSP: 002b:00007f0264a14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 865.269738][T20440] RAX: ffffffffffffffda RBX: 00007f0263e15fa0 RCX: 00007f0263b9ce59 [ 865.277756][T20440] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 865.285764][T20440] RBP: 00007f0264a14090 R08: 0000000000000000 R09: 0000000000000000 [ 865.293795][T20440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.301833][T20440] R13: 00007f0263e16038 R14: 00007f0263e15fa0 R15: 00007ffdc886b298 [ 865.309914][T20440] [ 865.415203][T20444] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5191'. [ 865.701595][T20461] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5195'. [ 865.763497][T20461] validate_nla: 6 callbacks suppressed [ 865.763533][T20461] netlink: 'syz.2.5195': attribute type 29 has an invalid length. [ 865.855006][T20461] netlink: 'syz.2.5195': attribute type 29 has an invalid length. [ 865.864282][T20463] netlink: 'syz.2.5195': attribute type 29 has an invalid length. [ 868.183166][T20477] netlink: 'syz.2.5205': attribute type 10 has an invalid length. [ 868.223829][T20477] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5205'. [ 868.433739][T20495] netlink: 'syz.1.5211': attribute type 10 has an invalid length. [ 868.483681][T20495] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5211'. [ 868.641365][T20501] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5213'. [ 868.713982][T20501] netlink: 'syz.3.5213': attribute type 29 has an invalid length. [ 868.766204][T20501] netlink: 'syz.3.5213': attribute type 29 has an invalid length. [ 868.791560][T20505] netlink: 'syz.3.5213': attribute type 29 has an invalid length. [ 868.972002][T20507] tap0: tun_chr_ioctl cmd 1074025677 [ 869.005716][T20507] tap0: linktype set to 778 [ 869.046331][T20506] tap0: tun_chr_ioctl cmd 2147767511 [ 870.425133][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.431626][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.641306][T20510] netlink: 'syz.1.5217': attribute type 10 has an invalid length. [ 871.649376][T20510] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5217'. [ 871.774265][T20517] netlink: 'syz.3.5218': attribute type 21 has an invalid length. [ 871.792405][T20514] netlink: 'syz.1.5219': attribute type 3 has an invalid length. [ 871.817605][T20517] FAULT_INJECTION: forcing a failure. [ 871.817605][T20517] name failslab, interval 1, probability 0, space 0, times 0 [ 871.831100][T20518] netlink: 'syz.0.5220': attribute type 21 has an invalid length. [ 871.852138][T20514] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5219'. [ 871.868931][T20517] CPU: 1 PID: 20517 Comm: syz.3.5218 Not tainted syzkaller #0 [ 871.876582][T20517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 871.886692][T20517] Call Trace: [ 871.890015][T20517] [ 871.892991][T20517] dump_stack_lvl+0x18c/0x250 [ 871.897738][T20517] ? show_regs_print_info+0x20/0x20 [ 871.903002][T20517] ? load_image+0x420/0x420 [ 871.907582][T20517] ? __might_sleep+0xe0/0xe0 [ 871.912244][T20517] ? __lock_acquire+0x7d40/0x7d40 [ 871.917335][T20517] should_fail_ex+0x39d/0x4d0 [ 871.922086][T20517] should_failslab+0x9/0x20 [ 871.926644][T20517] slab_pre_alloc_hook+0x59/0x310 [ 871.931759][T20517] kmem_cache_alloc_node+0x60/0x320 [ 871.937021][T20517] ? __alloc_skb+0x103/0x2c0 [ 871.941665][T20517] __alloc_skb+0x103/0x2c0 [ 871.946142][T20517] alloc_skb_with_frags+0xca/0x7b0 [ 871.951316][T20517] sock_alloc_send_pskb+0x883/0x9a0 [ 871.956601][T20517] ? sock_kzfree_s+0x50/0x50 [ 871.961275][T20517] tun_get_user+0x82c/0x3ca0 [ 871.965932][T20517] ? aa_file_perm+0x11b/0xee0 [ 871.970689][T20517] ? rcu_read_unlock+0xa0/0xa0 [ 871.975514][T20517] ? tun_get+0x1c/0x2e0 [ 871.979738][T20517] ? __lock_acquire+0x7d40/0x7d40 [ 871.984837][T20517] ? tun_get+0x1c/0x2e0 [ 871.989140][T20517] tun_chr_write_iter+0x119/0x200 [ 871.994220][T20517] vfs_write+0x46c/0x990 [ 871.998532][T20517] ? file_end_write+0x250/0x250 [ 872.003444][T20517] ? __fget_files+0x43d/0x4b0 [ 872.008183][T20517] ? __fdget_pos+0x1d8/0x330 [ 872.012827][T20517] ? ksys_write+0x75/0x260 [ 872.017310][T20517] ksys_write+0x150/0x260 [ 872.021702][T20517] ? __ia32_sys_read+0x90/0x90 [ 872.026533][T20517] ? syscall_enter_from_user_mode+0x2e/0x80 [ 872.032551][T20517] do_syscall_64+0x55/0xa0 [ 872.037032][T20517] ? clear_bhb_loop+0x40/0x90 [ 872.041775][T20517] ? clear_bhb_loop+0x40/0x90 [ 872.046529][T20517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 872.052543][T20517] RIP: 0033:0x7f846639ce59 [ 872.057018][T20517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.076871][T20517] RSP: 002b:00007f8467172028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 872.085345][T20517] RAX: ffffffffffffffda RBX: 00007f8466615fa0 RCX: 00007f846639ce59 [ 872.093359][T20517] RDX: 000000000000fdef RSI: 0000200000000200 RDI: 00000000000000c8 [ 872.101375][T20517] RBP: 00007f8467172090 R08: 0000000000000000 R09: 0000000000000000 [ 872.109400][T20517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.117430][T20517] R13: 00007f8466616038 R14: 00007f8466615fa0 R15: 00007ffc374ae7a8 [ 872.125502][T20517] [ 872.337537][T20529] netlink: 'syz.0.5224': attribute type 21 has an invalid length. [ 872.382468][T20527] netlink: 'syz.1.5222': attribute type 10 has an invalid length. [ 872.414401][T20527] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5222'. [ 872.446872][T20533] netlink: 'syz.2.5225': attribute type 10 has an invalid length. [ 872.486412][T20533] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5225'. [ 872.849816][T20543] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5227'. [ 872.904116][T20546] netlink: 'syz.1.5227': attribute type 29 has an invalid length. [ 873.689992][T20541] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5226'. [ 873.704587][T20544] netlink: 'syz.0.5228': attribute type 10 has an invalid length. [ 873.722186][T20544] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5228'. [ 873.734231][T20546] netlink: 'syz.1.5227': attribute type 29 has an invalid length. [ 873.968696][T20563] FAULT_INJECTION: forcing a failure. [ 873.968696][T20563] name failslab, interval 1, probability 0, space 0, times 0 [ 873.982059][T20563] CPU: 1 PID: 20563 Comm: syz.2.5232 Not tainted syzkaller #0 [ 873.989572][T20563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 873.999686][T20563] Call Trace: [ 874.003004][T20563] [ 874.005971][T20563] dump_stack_lvl+0x18c/0x250 [ 874.010764][T20563] ? verify_lock_unused+0x140/0x140 [ 874.016015][T20563] ? show_regs_print_info+0x20/0x20 [ 874.021306][T20563] ? load_image+0x420/0x420 [ 874.025869][T20563] ? __lock_acquire+0x1273/0x7d40 [ 874.030960][T20563] should_fail_ex+0x39d/0x4d0 [ 874.035705][T20563] should_failslab+0x9/0x20 [ 874.040266][T20563] slab_pre_alloc_hook+0x59/0x310 [ 874.045370][T20563] kmem_cache_alloc_node+0x60/0x320 [ 874.050625][T20563] ? __alloc_skb+0x103/0x2c0 [ 874.055292][T20563] __alloc_skb+0x103/0x2c0 [ 874.059771][T20563] tipc_msg_create+0x4f/0x4d0 [ 874.064493][T20563] ? tipc_own_addr+0x45/0x2a0 [ 874.069217][T20563] tipc_group_create_event+0x1f4/0x660 [ 874.074737][T20563] ? tipc_group_proto_rcv+0x1cf0/0x1cf0 [ 874.080351][T20563] tipc_sk_proto_rcv+0x25c/0x1790 [ 874.085435][T20563] ? mark_lock+0x94/0x320 [ 874.089806][T20563] ? trace_tipc_sk_dump+0x200/0x200 [ 874.095027][T20563] ? __lock_acquire+0x1347/0x7d40 [ 874.100073][T20563] ? tipc_sk_filtering+0x13c/0x510 [ 874.105212][T20563] tipc_sk_filter_rcv+0x2f5a/0x3190 [ 874.110445][T20563] ? verify_lock_unused+0x140/0x140 [ 874.115681][T20563] ? mark_lock+0x94/0x320 [ 874.120035][T20563] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 874.126053][T20563] ? tipc_sk_publish+0x450/0x450 [ 874.131013][T20563] ? __local_bh_enable_ip+0x13a/0x1c0 [ 874.136436][T20563] tipc_sk_rcv+0x8c5/0x2af0 [ 874.141008][T20563] ? __skb_queue_purge+0x170/0x170 [ 874.146143][T20563] ? __asan_memset+0x22/0x40 [ 874.150767][T20563] ? lockdep_init_map_type+0x9c/0x8e0 [ 874.156178][T20563] ? net_generic+0x1e/0x240 [ 874.160742][T20563] ? __raw_spin_lock_init+0x45/0x100 [ 874.166069][T20563] tipc_node_xmit+0x223/0xfe0 [ 874.170778][T20563] ? kasan_set_track+0x4e/0x70 [ 874.175592][T20563] ? ____kasan_slab_free+0x126/0x1e0 [ 874.180914][T20563] ? slab_free_freelist_hook+0x130/0x1a0 [ 874.186569][T20563] ? __kmem_cache_free+0xba/0x1e0 [ 874.191622][T20563] ? tipc_group_delete+0x3c1/0x4c0 [ 874.196765][T20563] ? tipc_sk_leave+0x146/0x4e0 [ 874.201552][T20563] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 874.207115][T20563] ? do_syscall_64+0x55/0xa0 [ 874.211728][T20563] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 874.217839][T20563] ? mark_lock+0x94/0x320 [ 874.222198][T20563] tipc_node_distr_xmit+0x2d6/0x400 [ 874.227424][T20563] ? tipc_node_xmit_skb+0x190/0x190 [ 874.232649][T20563] ? tipc_group_delete+0x3c1/0x4c0 [ 874.237786][T20563] ? __kmem_cache_free+0xba/0x1e0 [ 874.242839][T20563] tipc_group_delete+0x3f9/0x4c0 [ 874.247812][T20563] ? tipc_group_update_member+0x3c0/0x3c0 [ 874.253571][T20563] ? tipc_group_self+0x26/0x1c0 [ 874.258514][T20563] tipc_sk_leave+0x146/0x4e0 [ 874.263151][T20563] ? __tipc_shutdown+0x1530/0x1530 [ 874.268291][T20563] ? _local_bh_enable+0xa0/0xa0 [ 874.273172][T20563] tipc_release+0x328/0x2160 [ 874.277793][T20563] ? ima_get_current_hash_algo+0x10/0x10 [ 874.283487][T20563] ? tipc_sock_destruct+0x180/0x180 [ 874.288712][T20563] ? down_write+0x16e/0x200 [ 874.293239][T20563] ? down_read_killable+0x340/0x340 [ 874.298470][T20563] sock_close+0xbd/0x230 [ 874.302746][T20563] ? sock_mmap+0xa0/0xa0 [ 874.307034][T20563] __fput+0x234/0x970 [ 874.311049][T20563] __se_sys_close+0x15f/0x220 [ 874.315767][T20563] do_syscall_64+0x55/0xa0 [ 874.320213][T20563] ? clear_bhb_loop+0x40/0x90 [ 874.324969][T20563] ? clear_bhb_loop+0x40/0x90 [ 874.329692][T20563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 874.335610][T20563] RIP: 0033:0x7fb35e79ce59 [ 874.340049][T20563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.359675][T20563] RSP: 002b:00007fb35f72a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 874.368126][T20563] RAX: ffffffffffffffda RBX: 00007fb35ea16090 RCX: 00007fb35e79ce59 [ 874.376205][T20563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 874.384198][T20563] RBP: 00007fb35f72a090 R08: 0000000000000000 R09: 0000000000000000 [ 874.392193][T20563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.400183][T20563] R13: 00007fb35ea16128 R14: 00007fb35ea16090 R15: 00007ffcc1bad898 [ 874.408278][T20563] [ 874.547640][T20567] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5235'. [ 874.621069][T20571] FAULT_INJECTION: forcing a failure. [ 874.621069][T20571] name failslab, interval 1, probability 0, space 0, times 0 [ 874.634294][T20571] CPU: 1 PID: 20571 Comm: syz.2.5236 Not tainted syzkaller #0 [ 874.641823][T20571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 874.651933][T20571] Call Trace: [ 874.655256][T20571] [ 874.658241][T20571] dump_stack_lvl+0x18c/0x250 [ 874.662984][T20571] ? show_regs_print_info+0x20/0x20 [ 874.668238][T20571] ? load_image+0x420/0x420 [ 874.672789][T20571] ? __lock_acquire+0x7d40/0x7d40 [ 874.677872][T20571] ? __lock_acquire+0x7d40/0x7d40 [ 874.682953][T20571] should_fail_ex+0x39d/0x4d0 [ 874.687692][T20571] should_failslab+0x9/0x20 [ 874.692244][T20571] slab_pre_alloc_hook+0x59/0x310 [ 874.697331][T20571] ? ip6_setup_cork+0x1d6/0xfe0 [ 874.702233][T20571] __kmem_cache_alloc_node+0x53/0x250 [ 874.707681][T20571] ? ip6_setup_cork+0x1d6/0xfe0 [ 874.712609][T20571] kmalloc_trace+0x2a/0xe0 [ 874.717088][T20571] ip6_setup_cork+0x1d6/0xfe0 [ 874.721826][T20571] ip6_append_data+0x220/0x350 [ 874.726641][T20571] ? rawv6_send_hdrinc+0x1640/0x1640 [ 874.731974][T20571] rawv6_sendmsg+0x1264/0x1770 [ 874.736815][T20571] ? compat_rawv6_ioctl+0x70/0x70 [ 874.741921][T20571] ? aa_sk_perm+0x83c/0x970 [ 874.746507][T20571] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 874.752991][T20571] ? inet_sendmsg+0x7c/0x2f0 [ 874.757630][T20571] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 874.762971][T20571] ? security_socket_sendmsg+0x80/0xa0 [ 874.768503][T20571] ? inet_send_prepare+0x260/0x260 [ 874.773673][T20571] ____sys_sendmsg+0x5ba/0x960 [ 874.778502][T20571] ? __sys_sendmsg_sock+0x30/0x30 [ 874.783570][T20571] ? __import_iovec+0x3fa/0x850 [ 874.788499][T20571] ? import_iovec+0x73/0xa0 [ 874.793054][T20571] ___sys_sendmsg+0x2a6/0x360 [ 874.797782][T20571] ? get_pid_task+0x20/0x1e0 [ 874.802443][T20571] ? __sys_sendmsg+0x2a0/0x2a0 [ 874.807275][T20571] ? __lock_acquire+0x7d40/0x7d40 [ 874.812369][T20571] __se_sys_sendmsg+0x1c2/0x2b0 [ 874.817262][T20571] ? __x64_sys_sendmsg+0x80/0x80 [ 874.822267][T20571] ? lockdep_hardirqs_on+0x98/0x150 [ 874.827520][T20571] do_syscall_64+0x55/0xa0 [ 874.831988][T20571] ? clear_bhb_loop+0x40/0x90 [ 874.836722][T20571] ? clear_bhb_loop+0x40/0x90 [ 874.841462][T20571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 874.847403][T20571] RIP: 0033:0x7fb35e79ce59 [ 874.851875][T20571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.871615][T20571] RSP: 002b:00007fb35f74b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 874.880112][T20571] RAX: ffffffffffffffda RBX: 00007fb35ea15fa0 RCX: 00007fb35e79ce59 [ 874.888143][T20571] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 874.896159][T20571] RBP: 00007fb35f74b090 R08: 0000000000000000 R09: 0000000000000000 [ 874.904175][T20571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.912205][T20571] R13: 00007fb35ea16038 R14: 00007fb35ea15fa0 R15: 00007ffcc1bad898 [ 874.920240][T20571] [ 874.921472][T20552] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5229'. [ 875.015179][T20573] FAULT_INJECTION: forcing a failure. [ 875.015179][T20573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.047766][T20573] CPU: 0 PID: 20573 Comm: syz.0.5237 Not tainted syzkaller #0 [ 875.055326][T20573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 875.065456][T20573] Call Trace: [ 875.068787][T20573] [ 875.071769][T20573] dump_stack_lvl+0x18c/0x250 [ 875.076523][T20573] ? show_regs_print_info+0x20/0x20 [ 875.081794][T20573] ? load_image+0x420/0x420 [ 875.086376][T20573] ? __might_fault+0xaa/0x120 [ 875.091115][T20573] should_fail_ex+0x39d/0x4d0 [ 875.095857][T20573] copyin+0x1a/0x90 [ 875.099729][T20573] _copy_from_iter+0x404/0x12e0 [ 875.104654][T20573] ? copyout_mc+0x70/0x70 [ 875.109046][T20573] ? verify_lock_unused+0x140/0x140 [ 875.114307][T20573] ? dev_get_by_index+0x22/0x2d0 [ 875.119300][T20573] ? dev_get_by_index+0x22/0x2d0 [ 875.124295][T20573] packet_sendmsg+0x2cd5/0x4c30 [ 875.129241][T20573] ? __might_sleep+0xe0/0xe0 [ 875.133895][T20573] ? verify_lock_unused+0x140/0x140 [ 875.139149][T20573] ? mark_lock+0x94/0x320 [ 875.143538][T20573] ? __lock_acquire+0x1273/0x7d40 [ 875.148649][T20573] ? verify_lock_unused+0x140/0x140 [ 875.153914][T20573] ? aa_sk_perm+0x83c/0x970 [ 875.158485][T20573] ? packet_getsockopt+0xad0/0xad0 [ 875.163669][T20573] ? tomoyo_gc_thread+0x680/0x1410 [ 875.168843][T20573] ? aa_sock_msg_perm+0x94/0x150 [ 875.173851][T20573] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 875.179201][T20573] ? security_socket_sendmsg+0x80/0xa0 [ 875.184717][T20573] ? packet_getsockopt+0xad0/0xad0 [ 875.189901][T20573] ____sys_sendmsg+0x5ba/0x960 [ 875.194721][T20573] ? __lock_acquire+0x7d40/0x7d40 [ 875.199810][T20573] ? __asan_memset+0x22/0x40 [ 875.204467][T20573] ? __sys_sendmsg_sock+0x30/0x30 [ 875.209543][T20573] ? __import_iovec+0x3fa/0x850 [ 875.214537][T20573] ? import_iovec+0x73/0xa0 [ 875.219089][T20573] ___sys_sendmsg+0x2a6/0x360 [ 875.223816][T20573] ? get_pid_task+0x20/0x1e0 [ 875.228469][T20573] ? __sys_sendmsg+0x2a0/0x2a0 [ 875.233310][T20573] ? __lock_acquire+0x7d40/0x7d40 [ 875.238421][T20573] __se_sys_sendmsg+0x1c2/0x2b0 [ 875.243346][T20573] ? __x64_sys_sendmsg+0x80/0x80 [ 875.248362][T20573] ? lockdep_hardirqs_on+0x98/0x150 [ 875.253621][T20573] do_syscall_64+0x55/0xa0 [ 875.258088][T20573] ? clear_bhb_loop+0x40/0x90 [ 875.262825][T20573] ? clear_bhb_loop+0x40/0x90 [ 875.267564][T20573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.273520][T20573] RIP: 0033:0x7f0263b9ce59 [ 875.277987][T20573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.297651][T20573] RSP: 002b:00007f0264a14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 875.306127][T20573] RAX: ffffffffffffffda RBX: 00007f0263e15fa0 RCX: 00007f0263b9ce59 [ 875.314159][T20573] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 875.322203][T20573] RBP: 00007f0264a14090 R08: 0000000000000000 R09: 0000000000000000 [ 875.330240][T20573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.338287][T20573] R13: 00007f0263e16038 R14: 00007f0263e15fa0 R15: 00007ffdc886b298 [ 875.346331][T20573] [ 875.351307][T20576] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5238'. [ 875.436124][T20580] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5239'. [ 875.755179][T20586] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5241'. [ 875.844480][T20588] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5240'. [ 876.134826][T20591] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5243'. [ 876.156549][T20591] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5243'. [ 876.191335][T20591] FAULT_INJECTION: forcing a failure. [ 876.191335][T20591] name failslab, interval 1, probability 0, space 0, times 0 [ 876.238967][T20591] CPU: 0 PID: 20591 Comm: syz.1.5243 Not tainted syzkaller #0 [ 876.246515][T20591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 876.256597][T20591] Call Trace: [ 876.259905][T20591] [ 876.262872][T20591] dump_stack_lvl+0x18c/0x250 [ 876.267603][T20591] ? show_regs_print_info+0x20/0x20 [ 876.272843][T20591] ? load_image+0x420/0x420 [ 876.277403][T20591] should_fail_ex+0x39d/0x4d0 [ 876.282137][T20591] should_failslab+0x9/0x20 [ 876.286679][T20591] slab_pre_alloc_hook+0x59/0x310 [ 876.291745][T20591] kmem_cache_alloc+0x5a/0x2d0 [ 876.296576][T20591] ? skb_clone+0x1eb/0x370 [ 876.301043][T20591] skb_clone+0x1eb/0x370 [ 876.305356][T20591] __netlink_deliver_tap+0x41c/0x830 [ 876.310756][T20591] ? netlink_deliver_tap+0x2e/0x1b0 [ 876.316094][T20591] netlink_deliver_tap+0x19c/0x1b0 [ 876.321252][T20591] netlink_dump+0x94b/0xe50 [ 876.325902][T20591] ? netlink_lookup+0x200/0x200 [ 876.330809][T20591] ? slab_free_freelist_hook+0x130/0x1a0 [ 876.336484][T20591] ? netlink_recvmsg+0x5e7/0xe60 [ 876.341471][T20591] ? kmem_cache_free+0xf8/0x270 [ 876.346374][T20591] netlink_recvmsg+0x693/0xe60 [ 876.351223][T20591] ? netlink_sendmsg+0xbf0/0xbf0 [ 876.356312][T20591] ? aa_af_perm+0x330/0x330 [ 876.361040][T20591] ? __lock_acquire+0x1273/0x7d40 [ 876.366139][T20591] ? verify_lock_unused+0x140/0x140 [ 876.371394][T20591] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 876.376727][T20591] ? security_socket_recvmsg+0x89/0xb0 [ 876.382221][T20591] ? netlink_sendmsg+0xbf0/0xbf0 [ 876.387220][T20591] ____sys_recvmsg+0x2ce/0x5e0 [ 876.392029][T20591] ? __sys_recvmsg_sock+0x50/0x50 [ 876.397114][T20591] ? import_iovec+0x73/0xa0 [ 876.401661][T20591] ___sys_recvmsg+0x216/0x590 [ 876.406596][T20591] ? __sys_recvmsg+0x2a0/0x2a0 [ 876.411404][T20591] ? ksys_write+0x1c4/0x260 [ 876.415964][T20591] ? __fget_files+0x43d/0x4b0 [ 876.420723][T20591] __x64_sys_recvmsg+0x20c/0x2e0 [ 876.425882][T20591] ? ___sys_recvmsg+0x590/0x590 [ 876.430799][T20591] ? lockdep_hardirqs_on+0x98/0x150 [ 876.436051][T20591] do_syscall_64+0x55/0xa0 [ 876.440505][T20591] ? clear_bhb_loop+0x40/0x90 [ 876.445231][T20591] ? clear_bhb_loop+0x40/0x90 [ 876.449950][T20591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 876.455894][T20591] RIP: 0033:0x7fa65619ce59 [ 876.460345][T20591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.479986][T20591] RSP: 002b:00007fa656f81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 876.488438][T20591] RAX: ffffffffffffffda RBX: 00007fa656415fa0 RCX: 00007fa65619ce59 [ 876.496443][T20591] RDX: 0000000000000080 RSI: 0000200000000900 RDI: 0000000000000003 [ 876.504467][T20591] RBP: 00007fa656f81090 R08: 0000000000000000 R09: 0000000000000000 [ 876.512486][T20591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.520493][T20591] R13: 00007fa656416038 R14: 00007fa656415fa0 R15: 00007ffe30af4bc8 [ 876.528517][T20591] [ 876.936141][T20600] validate_nla: 6 callbacks suppressed [ 876.936176][T20600] netlink: 'syz.0.5246': attribute type 10 has an invalid length. [ 877.123220][T20602] bond0: (slave bond_slave_0): Releasing backup interface [ 877.187100][T20602] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 877.390233][T20614] netlink: 'syz.1.5251': attribute type 10 has an invalid length. [ 877.711789][T20621] netlink: 'syz.2.5255': attribute type 10 has an invalid length. [ 878.026425][T20625] FAULT_INJECTION: forcing a failure. [ 878.026425][T20625] name failslab, interval 1, probability 0, space 0, times 0 [ 878.065371][T20625] CPU: 0 PID: 20625 Comm: syz.2.5257 Not tainted syzkaller #0 [ 878.073033][T20625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 878.083168][T20625] Call Trace: [ 878.086514][T20625] [ 878.089538][T20625] dump_stack_lvl+0x18c/0x250 [ 878.094312][T20625] ? show_regs_print_info+0x20/0x20 [ 878.099610][T20625] ? load_image+0x420/0x420 [ 878.104213][T20625] ? __might_sleep+0xe0/0xe0 [ 878.108918][T20625] ? __lock_acquire+0x7d40/0x7d40 [ 878.114027][T20625] should_fail_ex+0x39d/0x4d0 [ 878.118829][T20625] should_failslab+0x9/0x20 [ 878.123415][T20625] slab_pre_alloc_hook+0x59/0x310 [ 878.128533][T20625] ? ioctl_standard_iw_point+0x51a/0xcf0 [ 878.134270][T20625] ? ioctl_standard_iw_point+0x51a/0xcf0 [ 878.139992][T20625] __kmem_cache_alloc_node+0x53/0x250 [ 878.145462][T20625] ? ioctl_standard_iw_point+0x51a/0xcf0 [ 878.151177][T20625] __kmalloc+0xa4/0x230 [ 878.155439][T20625] ioctl_standard_iw_point+0x51a/0xcf0 [ 878.161050][T20625] ? cfg80211_wext_siwessid+0x120/0x120 [ 878.166673][T20625] ? iw_handler_get_iwstats+0x110/0x110 [ 878.172312][T20625] ? wext_ioctl_dispatch+0x115/0x600 [ 878.177687][T20625] ? dev_load+0x21/0x1f0 [ 878.182014][T20625] ? mutex_lock_nested+0x20/0x20 [ 878.187050][T20625] ? cfg80211_wext_siwessid+0x120/0x120 [ 878.192683][T20625] ioctl_standard_call+0xb7/0x2b0 [ 878.197795][T20625] ? cfg80211_wext_siwessid+0x120/0x120 [ 878.203443][T20625] wext_ioctl_dispatch+0x1cb/0x600 [ 878.208655][T20625] ? wext_ioctl_dispatch+0x600/0x600 [ 878.214020][T20625] ? iw_handler_get_private+0x1f0/0x1f0 [ 878.219633][T20625] ? wext_handle_ioctl+0x1d0/0x1d0 [ 878.224830][T20625] ? __might_fault+0xaa/0x120 [ 878.229571][T20625] ? __might_fault+0xc6/0x120 [ 878.234322][T20625] ? __might_fault+0xaa/0x120 [ 878.239103][T20625] wext_handle_ioctl+0x117/0x1d0 [ 878.244125][T20625] ? call_commit_handler+0xf0/0xf0 [ 878.249373][T20625] sock_ioctl+0x15d/0x7e0 [ 878.253879][T20625] ? sock_poll+0x3e0/0x3e0 [ 878.258410][T20625] ? bpf_lsm_file_ioctl+0x9/0x10 [ 878.263410][T20625] ? security_file_ioctl+0x80/0xa0 [ 878.268592][T20625] ? sock_poll+0x3e0/0x3e0 [ 878.273080][T20625] __se_sys_ioctl+0xfd/0x170 [ 878.277753][T20625] do_syscall_64+0x55/0xa0 [ 878.282264][T20625] ? clear_bhb_loop+0x40/0x90 [ 878.287227][T20625] ? clear_bhb_loop+0x40/0x90 [ 878.291984][T20625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 878.297967][T20625] RIP: 0033:0x7fb35e79ce59 [ 878.302452][T20625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.322163][T20625] RSP: 002b:00007fb35f74b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 878.330690][T20625] RAX: ffffffffffffffda RBX: 00007fb35ea15fa0 RCX: 00007fb35e79ce59 [ 878.338749][T20625] RDX: 0000200000000000 RSI: 0000000000008b1b RDI: 0000000000000005 [ 878.346787][T20625] RBP: 00007fb35f74b090 R08: 0000000000000000 R09: 0000000000000000 [ 878.354826][T20625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.362857][T20625] R13: 00007fb35ea16038 R14: 00007fb35ea15fa0 R15: 00007ffcc1bad898 [ 878.370953][T20625] [ 878.557737][T20627] netlink: 'syz.0.5258': attribute type 10 has an invalid length. [ 878.782147][T20636] netlink: 'syz.1.5267': attribute type 10 has an invalid length. [ 878.813602][T20636] __nla_validate_parse: 12 callbacks suppressed [ 878.813623][T20636] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5267'. [ 878.875602][T20638] FAULT_INJECTION: forcing a failure. [ 878.875602][T20638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.930412][T20638] CPU: 1 PID: 20638 Comm: syz.0.5262 Not tainted syzkaller #0 [ 878.938067][T20638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 878.948175][T20638] Call Trace: [ 878.951495][T20638] [ 878.954461][T20638] dump_stack_lvl+0x18c/0x250 [ 878.959201][T20638] ? show_regs_print_info+0x20/0x20 [ 878.964462][T20638] ? load_image+0x420/0x420 [ 878.969021][T20638] ? __might_fault+0xaa/0x120 [ 878.973735][T20638] ? __lock_acquire+0x7d40/0x7d40 [ 878.978806][T20638] should_fail_ex+0x39d/0x4d0 [ 878.983541][T20638] _copy_from_user+0x2f/0xe0 [ 878.988173][T20638] ___sys_recvmsg+0x176/0x590 [ 878.992883][T20638] ? __sys_recvmsg+0x2a0/0x2a0 [ 878.997671][T20638] ? ksys_write+0x1c4/0x260 [ 879.002210][T20638] ? __fget_files+0x43d/0x4b0 [ 879.006932][T20638] __x64_sys_recvmsg+0x20c/0x2e0 [ 879.011906][T20638] ? ___sys_recvmsg+0x590/0x590 [ 879.016820][T20638] ? lockdep_hardirqs_on+0x98/0x150 [ 879.022045][T20638] do_syscall_64+0x55/0xa0 [ 879.026496][T20638] ? clear_bhb_loop+0x40/0x90 [ 879.031202][T20638] ? clear_bhb_loop+0x40/0x90 [ 879.035920][T20638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 879.041853][T20638] RIP: 0033:0x7f0263b9ce59 [ 879.046287][T20638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.065909][T20638] RSP: 002b:00007f0264a14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 879.074349][T20638] RAX: ffffffffffffffda RBX: 00007f0263e15fa0 RCX: 00007f0263b9ce59 [ 879.082336][T20638] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 879.090338][T20638] RBP: 00007f0264a14090 R08: 0000000000000000 R09: 0000000000000000 [ 879.098345][T20638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.106342][T20638] R13: 00007f0263e16038 R14: 00007f0263e15fa0 R15: 00007ffdc886b298 [ 879.114349][T20638] [ 879.377026][T20633] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5260'. [ 879.481773][T20648] netlink: 'syz.3.5265': attribute type 10 has an invalid length. [ 879.850095][T20657] netlink: 'syz.1.5270': attribute type 10 has an invalid length. [ 879.864746][T20657] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5270'. [ 879.996058][T20660] netlink: 'syz.0.5271': attribute type 10 has an invalid length. [ 880.025007][T20660] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5271'. [ 881.055995][T20662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5271'. [ 881.620633][T20680] netlink: 'syz.1.5278': attribute type 10 has an invalid length. [ 881.778633][T20683] netlink: 'syz.0.5279': attribute type 10 has an invalid length. [ 881.815786][T20683] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5279'. [ 881.975864][T20689] netlink: 'syz.2.5282': attribute type 25 has an invalid length. [ 882.280168][T20692] netlink: set zone limit has 8 unknown bytes [ 882.668473][T20697] netlink: 'syz.2.5285': attribute type 25 has an invalid length. [ 883.258262][T20705] netlink: 'syz.3.5288': attribute type 25 has an invalid length. [ 883.308562][T20707] netlink: 'syz.2.5289': attribute type 10 has an invalid length. [ 883.550155][T20717] netlink: 'syz.2.5299': attribute type 1 has an invalid length. [ 883.559010][T20717] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.5299'. [ 883.956261][T20713] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5292'. [ 884.299114][T20739] netlink: 'syz.3.5300': attribute type 10 has an invalid length. [ 884.318238][T20740] FAULT_INJECTION: forcing a failure. [ 884.318238][T20740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.376996][T20740] CPU: 0 PID: 20740 Comm: syz.1.5298 Not tainted syzkaller #0 [ 884.384541][T20740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 884.394750][T20740] Call Trace: [ 884.398076][T20740] [ 884.401055][T20740] dump_stack_lvl+0x18c/0x250 [ 884.405814][T20740] ? show_regs_print_info+0x20/0x20 [ 884.411081][T20740] ? load_image+0x420/0x420 [ 884.415647][T20740] ? __might_fault+0xaa/0x120 [ 884.420379][T20740] ? __lock_acquire+0x7d40/0x7d40 [ 884.425468][T20740] should_fail_ex+0x39d/0x4d0 [ 884.430221][T20740] _copy_from_user+0x2f/0xe0 [ 884.434927][T20740] generic_map_update_batch+0x59a/0x810 [ 884.440554][T20740] ? rcu_read_unlock+0xa0/0xa0 [ 884.445408][T20740] ? __fdget+0x180/0x210 [ 884.449711][T20740] ? rcu_read_unlock+0xa0/0xa0 [ 884.454518][T20740] bpf_map_do_batch+0x3d7/0x610 [ 884.459427][T20740] __sys_bpf+0x381/0x890 [ 884.463724][T20740] ? bpf_link_show_fdinfo+0x390/0x390 [ 884.469180][T20740] ? lock_chain_count+0x20/0x20 [ 884.474092][T20740] __x64_sys_bpf+0x7c/0x90 [ 884.478548][T20740] do_syscall_64+0x55/0xa0 [ 884.483003][T20740] ? clear_bhb_loop+0x40/0x90 [ 884.487726][T20740] ? clear_bhb_loop+0x40/0x90 [ 884.492449][T20740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 884.498389][T20740] RIP: 0033:0x7fa65619ce59 [ 884.502854][T20740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.522512][T20740] RSP: 002b:00007fa656f81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 884.530989][T20740] RAX: ffffffffffffffda RBX: 00007fa656415fa0 RCX: 00007fa65619ce59 [ 884.539014][T20740] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 884.547047][T20740] RBP: 00007fa656f81090 R08: 0000000000000000 R09: 0000000000000000 [ 884.555062][T20740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.563082][T20740] R13: 00007fa656416038 R14: 00007fa656415fa0 R15: 00007ffe30af4bc8 [ 884.571124][T20740] [ 884.616281][T20743] FAULT_INJECTION: forcing a failure. [ 884.616281][T20743] name failslab, interval 1, probability 0, space 0, times 0 [ 884.629220][T20743] CPU: 1 PID: 20743 Comm: syz.0.5301 Not tainted syzkaller #0 [ 884.636731][T20743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 884.646826][T20743] Call Trace: [ 884.650141][T20743] [ 884.653100][T20743] dump_stack_lvl+0x18c/0x250 [ 884.657833][T20743] ? show_regs_print_info+0x20/0x20 [ 884.663080][T20743] ? load_image+0x420/0x420 [ 884.667630][T20743] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 884.673652][T20743] should_fail_ex+0x39d/0x4d0 [ 884.678383][T20743] should_failslab+0x9/0x20 [ 884.682936][T20743] slab_pre_alloc_hook+0x59/0x310 [ 884.688016][T20743] ? lockdep_hardirqs_on+0x98/0x150 [ 884.693267][T20743] kmem_cache_alloc+0x5a/0x2d0 [ 884.698116][T20743] ? skb_clone+0x1eb/0x370 [ 884.702582][T20743] skb_clone+0x1eb/0x370 [ 884.706867][T20743] bpf_clone_redirect+0x167/0x4a0 [ 884.711960][T20743] bpf_prog_297510cab277b9a5+0x5e/0x63 [ 884.717475][T20743] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 884.723513][T20743] ? lock_chain_count+0x20/0x20 [ 884.728407][T20743] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 884.734678][T20743] ? lockdep_softirqs_on+0x580/0x580 [ 884.740004][T20743] ? ktime_get+0x7f/0x280 [ 884.744376][T20743] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 884.750662][T20743] ? ktime_get_real_ts64+0x440/0x440 [ 884.756046][T20743] ? __local_bh_disable_ip+0x108/0x1a0 [ 884.761563][T20743] ? __cant_sleep+0x220/0x220 [ 884.766296][T20743] ? read_tsc+0x9/0x20 [ 884.770415][T20743] ? ktime_get+0x24b/0x280 [ 884.774883][T20743] ? bpf_test_run+0x174/0x870 [ 884.779603][T20743] bpf_test_run+0x2df/0x870 [ 884.784169][T20743] ? bpf_test_run+0x174/0x870 [ 884.788900][T20743] ? convert___skb_to_skb+0x590/0x590 [ 884.794334][T20743] ? eth_get_headlen+0x210/0x210 [ 884.799348][T20743] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 884.804947][T20743] ? convert___skb_to_skb+0x3d/0x590 [ 884.810290][T20743] bpf_prog_test_run_skb+0xad2/0x12b0 [ 884.815779][T20743] ? cpu_online+0x60/0x60 [ 884.820173][T20743] bpf_prog_test_run+0x321/0x390 [ 884.825160][T20743] __sys_bpf+0x49d/0x890 [ 884.829456][T20743] ? bpf_link_show_fdinfo+0x390/0x390 [ 884.834906][T20743] ? lock_chain_count+0x20/0x20 [ 884.839804][T20743] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 884.845841][T20743] __x64_sys_bpf+0x7c/0x90 [ 884.850328][T20743] do_syscall_64+0x55/0xa0 [ 884.854786][T20743] ? clear_bhb_loop+0x40/0x90 [ 884.859501][T20743] ? clear_bhb_loop+0x40/0x90 [ 884.864225][T20743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 884.870168][T20743] RIP: 0033:0x7f0263b9ce59 [ 884.874625][T20743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.894300][T20743] RSP: 002b:00007f0264a14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 884.902777][T20743] RAX: ffffffffffffffda RBX: 00007f0263e15fa0 RCX: 00007f0263b9ce59 [ 884.910802][T20743] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 884.918820][T20743] RBP: 00007f0264a14090 R08: 0000000000000000 R09: 0000000000000000 [ 884.927021][T20743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.935036][T20743] R13: 00007f0263e16038 R14: 00007f0263e15fa0 R15: 00007ffdc886b298 [ 884.943250][T20743] [ 885.189036][T20746] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5302'. [ 886.195589][T20763] netlink: 'syz.3.5310': attribute type 10 has an invalid length. [ 886.248036][T20761] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5307'. [ 886.781570][T20782] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5313'. [ 886.885576][T20787] netlink: 'syz.2.5316': attribute type 10 has an invalid length. [ 886.940061][T20787] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5316'. [ 887.204243][T20793] netlink: 'syz.0.5320': attribute type 10 has an invalid length. [ 888.102576][T20809] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5326'. [ 888.447885][T20819] netlink: 'syz.1.5330': attribute type 10 has an invalid length. [ 889.630242][T20839] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5338'. [ 889.709681][T20847] netlink: 'syz.0.5342': attribute type 10 has an invalid length. [ 890.279841][T20869] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5348'. [ 890.310733][T20870] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5349'. [ 890.370105][T20869] netlink: 'syz.0.5348': attribute type 29 has an invalid length. [ 890.400090][T20870] netlink: 'syz.2.5349': attribute type 29 has an invalid length. [ 890.426096][T20869] netlink: 'syz.0.5348': attribute type 29 has an invalid length. [ 890.480960][T20870] netlink: 'syz.2.5349': attribute type 29 has an invalid length. [ 890.492324][T20874] netlink: 'syz.0.5348': attribute type 29 has an invalid length. [ 890.531966][T20873] netlink: 'syz.2.5349': attribute type 29 has an invalid length. [ 891.402702][T20878] netlink: 'syz.3.5352': attribute type 10 has an invalid length. [ 891.696060][T20882] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5354'. [ 892.072050][T20902] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5361'. [ 892.536369][T20905] validate_nla: 10 callbacks suppressed [ 892.536390][T20905] netlink: 'syz.0.5372': attribute type 10 has an invalid length. [ 892.916438][T12439] Bluetooth: hci0: command 0x0406 tx timeout [ 892.981120][T20916] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5368'. [ 893.235421][T20928] netlink: 'syz.1.5374': attribute type 10 has an invalid length. [ 893.389658][T20939] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.5378'. [ 893.476269][T20944] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5377'. [ 893.507526][T20944] netlink: 'syz.2.5377': attribute type 29 has an invalid length. [ 893.517761][T20944] netlink: 'syz.2.5377': attribute type 29 has an invalid length. [ 893.540046][T20944] netlink: 'syz.2.5377': attribute type 29 has an invalid length. [ 893.927922][T20956] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5383'. [ 894.134789][T20967] netlink: 'syz.1.5386': attribute type 10 has an invalid length. [ 894.469363][T20979] FAULT_INJECTION: forcing a failure. [ 894.469363][T20979] name failslab, interval 1, probability 0, space 0, times 0 [ 894.515572][T20979] CPU: 0 PID: 20979 Comm: syz.2.5392 Not tainted syzkaller #0 [ 894.523112][T20979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 894.533213][T20979] Call Trace: [ 894.536600][T20979] [ 894.539639][T20979] dump_stack_lvl+0x18c/0x250 [ 894.544481][T20979] ? show_regs_print_info+0x20/0x20 [ 894.549750][T20979] ? load_image+0x420/0x420 [ 894.554302][T20979] ? __might_sleep+0xe0/0xe0 [ 894.558960][T20979] ? __lock_acquire+0x7d40/0x7d40 [ 894.564037][T20979] should_fail_ex+0x39d/0x4d0 [ 894.568769][T20979] should_failslab+0x9/0x20 [ 894.573309][T20979] slab_pre_alloc_hook+0x59/0x310 [ 894.578371][T20979] kmem_cache_alloc_node+0x60/0x320 [ 894.583595][T20979] ? __alloc_skb+0x103/0x2c0 [ 894.588209][T20979] __alloc_skb+0x103/0x2c0 [ 894.592657][T20979] alloc_skb_with_frags+0xca/0x7b0 [ 894.597795][T20979] ? mark_lock+0x94/0x320 [ 894.602158][T20979] sock_alloc_send_pskb+0x883/0x9a0 [ 894.607394][T20979] ? sock_kzfree_s+0x50/0x50 [ 894.612025][T20979] tun_get_user+0x82c/0x3ca0 [ 894.616661][T20979] ? aa_file_perm+0x11b/0xee0 [ 894.621377][T20979] ? rcu_read_unlock+0xa0/0xa0 [ 894.626192][T20979] ? tun_get+0x1c/0x2e0 [ 894.630393][T20979] ? __lock_acquire+0x7d40/0x7d40 [ 894.635545][T20979] ? tun_get+0x1c/0x2e0 [ 894.639746][T20979] tun_chr_write_iter+0x119/0x200 [ 894.644830][T20979] vfs_write+0x46c/0x990 [ 894.649118][T20979] ? file_end_write+0x250/0x250 [ 894.654028][T20979] ? __fget_files+0x43d/0x4b0 [ 894.658742][T20979] ? __fdget_pos+0x1d8/0x330 [ 894.663368][T20979] ? ksys_write+0x75/0x260 [ 894.667823][T20979] ksys_write+0x150/0x260 [ 894.672175][T20979] ? __ia32_sys_read+0x90/0x90 [ 894.676985][T20979] ? lockdep_hardirqs_on+0x98/0x150 [ 894.682228][T20979] do_syscall_64+0x55/0xa0 [ 894.686671][T20979] ? clear_bhb_loop+0x40/0x90 [ 894.691374][T20979] ? clear_bhb_loop+0x40/0x90 [ 894.696093][T20979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 894.702010][T20979] RIP: 0033:0x7fb35e79ce59 [ 894.706450][T20979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.726081][T20979] RSP: 002b:00007fb35f74b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 894.734521][T20979] RAX: ffffffffffffffda RBX: 00007fb35ea15fa0 RCX: 00007fb35e79ce59 [ 894.742512][T20979] RDX: 000000000000fdef RSI: 0000200000000640 RDI: 00000000000000c8 [ 894.750513][T20979] RBP: 00007fb35f74b090 R08: 0000000000000000 R09: 0000000000000000 [ 894.758501][T20979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.766499][T20979] R13: 00007fb35ea16038 R14: 00007fb35ea15fa0 R15: 00007ffcc1bad898 [ 894.774534][T20979] [ 895.009092][T20983] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5394'. [ 895.107211][T20990] netlink: 'syz.2.5397': attribute type 10 has an invalid length. [ 895.231464][T20996] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5398'. [ 895.282095][T20996] netlink: 'syz.3.5398': attribute type 29 has an invalid length. [ 895.313391][T20996] netlink: 'syz.3.5398': attribute type 29 has an invalid length. [ 895.361999][T20998] netlink: 'syz.3.5398': attribute type 29 has an invalid length. [ 895.570501][T21005] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5402'. [ 895.896778][T21008] FAULT_INJECTION: forcing a failure. [ 895.896778][T21008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 895.978091][T21008] CPU: 0 PID: 21008 Comm: syz.2.5403 Not tainted syzkaller #0 [ 895.985672][T21008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 895.995779][T21008] Call Trace: [ 895.999114][T21008] [ 896.002079][T21008] dump_stack_lvl+0x18c/0x250 [ 896.006813][T21008] ? show_regs_print_info+0x20/0x20 [ 896.012079][T21008] ? load_image+0x420/0x420 [ 896.016637][T21008] ? __lock_acquire+0x7d40/0x7d40 [ 896.021723][T21008] should_fail_ex+0x39d/0x4d0 [ 896.026476][T21008] _copy_to_user+0x2f/0xa0 [ 896.030947][T21008] put_user_ifreq+0x78/0xb0 [ 896.035502][T21008] sock_do_ioctl+0x268/0x310 [ 896.040139][T21008] ? sock_show_fdinfo+0xb0/0xb0 [ 896.045050][T21008] sock_ioctl+0x5ba/0x7e0 [ 896.049433][T21008] ? sock_poll+0x3e0/0x3e0 [ 896.053905][T21008] ? bpf_lsm_file_ioctl+0x9/0x10 [ 896.058883][T21008] ? security_file_ioctl+0x80/0xa0 [ 896.064053][T21008] ? sock_poll+0x3e0/0x3e0 [ 896.068523][T21008] __se_sys_ioctl+0xfd/0x170 [ 896.073179][T21008] do_syscall_64+0x55/0xa0 [ 896.077640][T21008] ? clear_bhb_loop+0x40/0x90 [ 896.082370][T21008] ? clear_bhb_loop+0x40/0x90 [ 896.087099][T21008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 896.093046][T21008] RIP: 0033:0x7fb35e79ce59 [ 896.097511][T21008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.117335][T21008] RSP: 002b:00007fb35f74b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 896.125769][T21008] RAX: ffffffffffffffda RBX: 00007fb35ea15fa0 RCX: 00007fb35e79ce59 [ 896.133751][T21008] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000b [ 896.141756][T21008] RBP: 00007fb35f74b090 R08: 0000000000000000 R09: 0000000000000000 [ 896.149761][T21008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.157749][T21008] R13: 00007fb35ea16038 R14: 00007fb35ea15fa0 R15: 00007ffcc1bad898 [ 896.165761][T21008] [ 896.404072][T21015] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5407'. [ 897.593116][T21045] FAULT_INJECTION: forcing a failure. [ 897.593116][T21045] name failslab, interval 1, probability 0, space 0, times 0 [ 897.672280][T21046] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5415'. [ 897.717192][T21045] CPU: 0 PID: 21045 Comm: syz.0.5416 Not tainted syzkaller #0 [ 897.724767][T21045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 897.734891][T21045] Call Trace: [ 897.738228][T21045] [ 897.741217][T21045] dump_stack_lvl+0x18c/0x250 [ 897.746069][T21045] ? show_regs_print_info+0x20/0x20 [ 897.751324][T21045] ? load_image+0x420/0x420 [ 897.755894][T21045] ? __might_sleep+0xe0/0xe0 [ 897.760542][T21045] ? __lock_acquire+0x7d40/0x7d40 [ 897.765642][T21045] ? __lock_acquire+0x7d40/0x7d40 [ 897.770744][T21045] should_fail_ex+0x39d/0x4d0 [ 897.775499][T21045] should_failslab+0x9/0x20 [ 897.780056][T21045] slab_pre_alloc_hook+0x59/0x310 [ 897.785133][T21045] ? trace_call_bpf+0x5e9/0x6c0 [ 897.790025][T21045] ? __scm_send+0x64c/0x14a0 [ 897.794675][T21045] __kmem_cache_alloc_node+0x53/0x250 [ 897.800109][T21045] ? aa_label_sk_perm+0x463/0x5c0 [ 897.805194][T21045] ? __scm_send+0x64c/0x14a0 [ 897.809832][T21045] kmalloc_trace+0x2a/0xe0 [ 897.814337][T21045] __scm_send+0x64c/0x14a0 [ 897.818858][T21045] ? __scm_destroy+0x160/0x160 [ 897.823678][T21045] ? trace_event_raw_event_lock+0x250/0x250 [ 897.829751][T21045] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x10 [ 897.835886][T21045] ? security_socket_getpeersec_dgram+0x83/0xa0 [ 897.842174][T21045] unix_stream_sendmsg+0x152/0xbf0 [ 897.847335][T21045] ? aa_sk_perm+0x83c/0x970 [ 897.852001][T21045] ? unix_show_fdinfo+0x270/0x270 [ 897.857075][T21045] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 897.863539][T21045] ? __might_fault+0xaa/0x120 [ 897.868252][T21045] ? aa_sock_msg_perm+0x94/0x150 [ 897.873237][T21045] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 897.878562][T21045] ? security_socket_sendmsg+0x80/0xa0 [ 897.884063][T21045] ? unix_show_fdinfo+0x270/0x270 [ 897.889245][T21045] ____sys_sendmsg+0x5ba/0x960 [ 897.894074][T21045] ? __sys_sendmsg_sock+0x30/0x30 [ 897.899141][T21045] ? __import_iovec+0x5f2/0x850 [ 897.904064][T21045] ? import_iovec+0x73/0xa0 [ 897.908621][T21045] ___sys_sendmsg+0x2a6/0x360 [ 897.913359][T21045] ? __sys_sendmsg+0x2a0/0x2a0 [ 897.918219][T21045] ? __lock_acquire+0x7d40/0x7d40 [ 897.923360][T21045] __se_sys_sendmsg+0x1c2/0x2b0 [ 897.928259][T21045] ? __x64_sys_sendmsg+0x80/0x80 [ 897.933280][T21045] ? lockdep_hardirqs_on+0x98/0x150 [ 897.938540][T21045] do_syscall_64+0x55/0xa0 [ 897.942998][T21045] ? clear_bhb_loop+0x40/0x90 [ 897.947718][T21045] ? clear_bhb_loop+0x40/0x90 [ 897.952560][T21045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 897.958509][T21045] RIP: 0033:0x7f0263b9ce59 [ 897.962975][T21045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.982619][T21045] RSP: 002b:00007f0264a14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 897.991088][T21045] RAX: ffffffffffffffda RBX: 00007f0263e15fa0 RCX: 00007f0263b9ce59 [ 897.999100][T21045] RDX: 0000000004000011 RSI: 0000200000001200 RDI: 0000000000000005 [ 898.007111][T21045] RBP: 00007f0264a14090 R08: 0000000000000000 R09: 0000000000000000 [ 898.015176][T21045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.023198][T21045] R13: 00007f0263e16038 R14: 00007f0263e15fa0 R15: 00007ffdc886b298 [ 898.031266][T21045] [ 898.128160][T21038] validate_nla: 2 callbacks suppressed [ 898.128179][T21038] netlink: 'syz.3.5413': attribute type 33 has an invalid length. [ 898.170985][T21038] netlink: 160 bytes leftover after parsing attributes in process `syz.3.5413'. [ 898.205083][T21046] netlink: 'syz.2.5415': attribute type 29 has an invalid length. [ 898.231772][T21046] netlink: 'syz.2.5415': attribute type 29 has an invalid length. [ 898.278412][T21049] netlink: 'syz.2.5415': attribute type 29 has an invalid length. [ 899.259975][T21058] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5418'. [ 899.589818][T21068] netlink: 'syz.3.5424': attribute type 10 has an invalid length. [ 899.830644][T21076] netlink: 'syz.3.5425': attribute type 10 has an invalid length. [ 899.991121][T21076] team0: Port device geneve1 added [ 900.036902][T21081] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5426'. [ 900.124898][T21081] netlink: 'syz.1.5426': attribute type 29 has an invalid length. [ 900.134398][T21081] netlink: 'syz.1.5426': attribute type 29 has an invalid length. [ 900.134732][T21076] syz.3.5425 (21076) used greatest stack depth: 17896 bytes left [ 900.167204][T21082] netlink: 'syz.1.5426': attribute type 29 has an invalid length. [ 900.283774][T21084] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5429'. [ 900.474303][T21092] netlink: 'syz.3.5428': attribute type 5 has an invalid length. [ 900.979032][T21100] FAULT_INJECTION: forcing a failure. [ 900.979032][T21100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.992532][T21100] CPU: 0 PID: 21100 Comm: syz.2.5432 Not tainted syzkaller #0 [ 901.000042][T21100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 901.010141][T21100] Call Trace: [ 901.013453][T21100] [ 901.016411][T21100] dump_stack_lvl+0x18c/0x250 [ 901.021145][T21100] ? show_regs_print_info+0x20/0x20 [ 901.026396][T21100] ? load_image+0x420/0x420 [ 901.030944][T21100] ? __might_fault+0xaa/0x120 [ 901.035669][T21100] ? __lock_acquire+0x7d40/0x7d40 [ 901.040750][T21100] should_fail_ex+0x39d/0x4d0 [ 901.045483][T21100] _copy_from_iter+0x1d9/0x12e0 [ 901.050385][T21100] ? __virt_addr_valid+0x18c/0x540 [ 901.055563][T21100] ? __lock_acquire+0x7d40/0x7d40 [ 901.060651][T21100] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 901.066125][T21100] ? copyout_mc+0x70/0x70 [ 901.070530][T21100] ? __virt_addr_valid+0x18c/0x540 [ 901.075695][T21100] ? __virt_addr_valid+0x18c/0x540 [ 901.080867][T21100] ? __virt_addr_valid+0x469/0x540 [ 901.086052][T21100] ? __check_object_size+0x506/0xa20 [ 901.091476][T21100] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 901.097268][T21100] ? skb_put+0x11b/0x210 [ 901.101569][T21100] tun_get_user+0x15db/0x3ca0 [ 901.106307][T21100] ? aa_file_perm+0x11b/0xee0 [ 901.111047][T21100] ? rcu_read_unlock+0xa0/0xa0 [ 901.115881][T21100] ? tun_get+0x1c/0x2e0 [ 901.120090][T21100] ? __lock_acquire+0x7d40/0x7d40 [ 901.125183][T21100] ? tun_get+0x1c/0x2e0 [ 901.129404][T21100] tun_chr_write_iter+0x119/0x200 [ 901.134487][T21100] vfs_write+0x46c/0x990 [ 901.138793][T21100] ? file_end_write+0x250/0x250 [ 901.143701][T21100] ? __fget_files+0x43d/0x4b0 [ 901.148450][T21100] ? __fdget_pos+0x1d8/0x330 [ 901.153082][T21100] ? ksys_write+0x75/0x260 [ 901.157551][T21100] ksys_write+0x150/0x260 [ 901.161930][T21100] ? __ia32_sys_read+0x90/0x90 [ 901.166748][T21100] ? lockdep_hardirqs_on+0x98/0x150 [ 901.172007][T21100] do_syscall_64+0x55/0xa0 [ 901.176458][T21100] ? clear_bhb_loop+0x40/0x90 [ 901.181184][T21100] ? clear_bhb_loop+0x40/0x90 [ 901.185908][T21100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 901.191853][T21100] RIP: 0033:0x7fb35e79ce59 [ 901.196316][T21100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.215967][T21100] RSP: 002b:00007fb35f74b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 901.224419][T21100] RAX: ffffffffffffffda RBX: 00007fb35ea15fa0 RCX: 00007fb35e79ce59 [ 901.232443][T21100] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 901.240462][T21100] RBP: 00007fb35f74b090 R08: 0000000000000000 R09: 0000000000000000 [ 901.248481][T21100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.256497][T21100] R13: 00007fb35ea16038 R14: 00007fb35ea15fa0 R15: 00007ffcc1bad898 [ 901.264525][T21100] [ 901.549910][T21107] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5442'. [ 902.722006][T21129] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5438'. [ 902.773439][T21129] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5438'. [ 902.801720][T21125] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5438'. [ 902.874812][T21131] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5438'. [ 903.008406][T21135] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5439'. [ 903.056487][T21135] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5439'. [ 903.086120][T21134] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5439'. [ 903.678351][T21146] validate_nla: 6 callbacks suppressed [ 903.678371][T21146] netlink: 'syz.3.5445': attribute type 10 has an invalid length. [ 903.769791][T21144] netlink: 'syz.0.5444': attribute type 10 has an invalid length. [ 903.876935][T21151] netlink: 'syz.1.5456': attribute type 10 has an invalid length. [ 904.161165][T21161] netlink: 'syz.1.5450': attribute type 29 has an invalid length. [ 905.444616][T21161] netlink: 'syz.1.5450': attribute type 29 has an invalid length. [ 905.731148][T21179] __nla_validate_parse: 3 callbacks suppressed [ 905.731292][T21179] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5454'. [ 905.753255][T21182] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5455'. [ 905.848761][T21182] netlink: 'syz.1.5455': attribute type 29 has an invalid length. [ 905.885256][T21182] netlink: 'syz.1.5455': attribute type 29 has an invalid length. [ 905.912731][T21184] netlink: 'syz.1.5455': attribute type 29 has an invalid length. [ 906.176722][T21189] netlink: 'syz.2.5458': attribute type 10 has an invalid length. [ 906.345611][T21194] netlink: 'syz.2.5460': attribute type 10 has an invalid length. [ 906.642913][T21194] team0: Port device geneve1 added [ 906.771103][T21202] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5464'. [ 906.902849][T21204] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5465'. [ 907.781848][T21230] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5475'. [ 907.804149][T21233] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5473'. [ 908.209672][T21235] team0: Port device geneve1 added [ 908.638805][T21251] bridge_slave_1: left allmulticast mode [ 908.692166][T21251] bridge_slave_1: left promiscuous mode [ 908.726452][T21251] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.975075][T21251] bridge_slave_0: left allmulticast mode [ 908.977364][T21262] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5483'. [ 908.980994][T21251] bridge_slave_0: left promiscuous mode [ 909.028911][T21251] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.074356][T21262] validate_nla: 9 callbacks suppressed [ 909.074375][T21262] netlink: 'syz.0.5483': attribute type 29 has an invalid length. [ 909.363525][T21256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5482'. [ 909.385311][T21262] netlink: 'syz.0.5483': attribute type 29 has an invalid length. [ 909.412543][T21264] netlink: 'syz.0.5483': attribute type 29 has an invalid length. [ 909.616306][T21275] netlink: 'syz.1.5486': attribute type 10 has an invalid length. [ 909.916694][T21279] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5487'. [ 910.158752][T21284] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5489'. [ 910.572352][T21296] netlink: 'syz.2.5496': attribute type 10 has an invalid length. [ 910.690340][T21300] netlink: 'syz.0.5497': attribute type 29 has an invalid length. [ 910.724189][T21294] netlink: 'syz.1.5495': attribute type 10 has an invalid length. [ 910.745669][T21294] __nla_validate_parse: 1 callbacks suppressed [ 910.745755][T21294] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5495'. [ 910.775583][T21294] hsr0: entered promiscuous mode [ 910.799801][T21294] bridge0: port 3(hsr0) entered blocking state [ 910.851157][T21294] bridge0: port 3(hsr0) entered disabled state [ 910.872284][T21294] hsr0: entered allmulticast mode [ 910.892222][T21294] hsr_slave_0: entered allmulticast mode [ 910.944244][T21294] bridge0: port 3(hsr0) entered blocking state [ 910.952142][T21294] bridge0: port 3(hsr0) entered forwarding state [ 910.979609][T21300] netlink: 'syz.0.5497': attribute type 29 has an invalid length. [ 910.990710][T21310] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5499'. [ 911.017243][T21302] netlink: 'syz.0.5497': attribute type 29 has an invalid length. [ 911.238459][T21319] netlink: 'syz.1.5509': attribute type 10 has an invalid length. [ 911.266091][T21319] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5509'. [ 911.281723][T21313] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5501'. [ 911.429318][T21322] FAULT_INJECTION: forcing a failure. [ 911.429318][T21322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 911.448722][T21322] CPU: 0 PID: 21322 Comm: syz.2.5505 Not tainted syzkaller #0 [ 911.456274][T21322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 911.466517][T21322] Call Trace: [ 911.469849][T21322] [ 911.472824][T21322] dump_stack_lvl+0x18c/0x250 [ 911.477574][T21322] ? show_regs_print_info+0x20/0x20 [ 911.482832][T21322] ? load_image+0x420/0x420 [ 911.487431][T21322] ? __might_fault+0xaa/0x120 [ 911.492172][T21322] should_fail_ex+0x39d/0x4d0 [ 911.496904][T21322] copyin+0x1a/0x90 [ 911.500821][T21322] _copy_from_iter+0x54f/0x12e0 [ 911.505893][T21322] ? __virt_addr_valid+0x18c/0x540 [ 911.511078][T21322] ? copyout_mc+0x70/0x70 [ 911.515566][T21322] ? __virt_addr_valid+0x18c/0x540 [ 911.520749][T21322] ? __virt_addr_valid+0x18c/0x540 [ 911.525918][T21322] ? __virt_addr_valid+0x469/0x540 [ 911.531087][T21322] ? __check_object_size+0x506/0xa20 [ 911.536430][T21322] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 911.542211][T21322] ? dev_get_by_index+0x22/0x2d0 [ 911.547193][T21322] ? skb_put+0x11b/0x210 [ 911.551693][T21322] packet_sendmsg+0x33ff/0x4c30 [ 911.556633][T21322] ? __might_sleep+0xe0/0xe0 [ 911.561281][T21322] ? mark_lock+0x94/0x320 [ 911.565703][T21322] ? __lock_acquire+0x1273/0x7d40 [ 911.570793][T21322] ? verify_lock_unused+0x140/0x140 [ 911.576072][T21322] ? aa_sk_perm+0x83c/0x970 [ 911.580741][T21322] ? packet_getsockopt+0xad0/0xad0 [ 911.585923][T21322] ? tomoyo_gc_thread+0x680/0x1410 [ 911.591097][T21322] ? aa_sock_msg_perm+0x94/0x150 [ 911.596107][T21322] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 911.601452][T21322] ? security_socket_sendmsg+0x80/0xa0 [ 911.606975][T21322] ? packet_getsockopt+0xad0/0xad0 [ 911.612154][T21322] ____sys_sendmsg+0x5ba/0x960 [ 911.616972][T21322] ? __lock_acquire+0x7d40/0x7d40 [ 911.622153][T21322] ? __asan_memset+0x22/0x40 [ 911.626806][T21322] ? __sys_sendmsg_sock+0x30/0x30 [ 911.631882][T21322] ? __import_iovec+0x3fa/0x850 [ 911.636788][T21322] ? import_iovec+0x73/0xa0 [ 911.641345][T21322] ___sys_sendmsg+0x2a6/0x360 [ 911.646085][T21322] ? get_pid_task+0x20/0x1e0 [ 911.650771][T21322] ? __sys_sendmsg+0x2a0/0x2a0 [ 911.655608][T21322] ? __lock_acquire+0x7d40/0x7d40 [ 911.660733][T21322] __se_sys_sendmsg+0x1c2/0x2b0 [ 911.665648][T21322] ? __x64_sys_sendmsg+0x80/0x80 [ 911.670671][T21322] ? lockdep_hardirqs_on+0x98/0x150 [ 911.675931][T21322] do_syscall_64+0x55/0xa0 [ 911.680385][T21322] ? clear_bhb_loop+0x40/0x90 [ 911.685145][T21322] ? clear_bhb_loop+0x40/0x90 [ 911.689876][T21322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.695826][T21322] RIP: 0033:0x7fb35e79ce59 [ 911.700285][T21322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.720119][T21322] RSP: 002b:00007fb35f74b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 911.728595][T21322] RAX: ffffffffffffffda RBX: 00007fb35ea15fa0 RCX: 00007fb35e79ce59 [ 911.736621][T21322] RDX: 0000000000040080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 911.744648][T21322] RBP: 00007fb35f74b090 R08: 0000000000000000 R09: 0000000000000000 [ 911.752666][T21322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.760686][T21322] R13: 00007fb35ea16038 R14: 00007fb35ea15fa0 R15: 00007ffcc1bad898 [ 911.768738][T21322] [ 912.238167][T21333] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5510'. [ 915.059998][T21343] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 915.273201][T21348] validate_nla: 1 callbacks suppressed [ 915.273222][T21348] netlink: 'syz.1.5518': attribute type 10 has an invalid length. [ 915.476216][T21357] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5517'. [ 915.510259][T21358] netlink: 'syz.1.5520': attribute type 10 has an invalid length. [ 915.567177][T21358] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5520'. [ 915.628171][T21357] netlink: 'syz.3.5517': attribute type 29 has an invalid length. [ 915.661239][T21357] netlink: 'syz.3.5517': attribute type 29 has an invalid length. [ 915.740345][T21360] netlink: 'syz.3.5517': attribute type 29 has an invalid length. [ 916.381408][T21367] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5523'. [ 916.483854][T21369] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5524'. [ 916.521574][T21365] netlink: 'syz.2.5522': attribute type 10 has an invalid length. [ 916.543138][T21365] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5522'. [ 916.563569][T21365] hsr0: entered promiscuous mode [ 916.581448][T21365] bridge0: port 3(hsr0) entered blocking state [ 916.589916][T21365] bridge0: port 3(hsr0) entered disabled state [ 916.602021][T21365] hsr0: entered allmulticast mode [ 916.609288][T21365] hsr_slave_0: entered allmulticast mode [ 916.616471][T21365] hsr_slave_1: entered allmulticast mode [ 916.697973][T21365] bridge0: port 3(hsr0) entered blocking state [ 916.705345][T21365] bridge0: port 3(hsr0) entered forwarding state [ 916.766836][T21376] FAULT_INJECTION: forcing a failure. [ 916.766836][T21376] name failslab, interval 1, probability 0, space 0, times 0 [ 916.786158][T21376] CPU: 1 PID: 21376 Comm: syz.1.5526 Not tainted syzkaller #0 [ 916.794146][T21376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 916.804301][T21376] Call Trace: [ 916.807640][T21376] [ 916.810654][T21376] dump_stack_lvl+0x18c/0x250 [ 916.815425][T21376] ? show_regs_print_info+0x20/0x20 [ 916.820716][T21376] ? load_image+0x420/0x420 [ 916.825299][T21376] ? __might_fault+0xc6/0x120 [ 916.830078][T21376] should_fail_ex+0x39d/0x4d0 [ 916.834848][T21376] should_failslab+0x9/0x20 [ 916.839433][T21376] slab_pre_alloc_hook+0x59/0x310 [ 916.844540][T21376] kmem_cache_alloc+0x5a/0x2d0 [ 916.849372][T21376] ? build_skb+0x29/0x250 [ 916.853814][T21376] build_skb+0x29/0x250 [ 916.858093][T21376] __tun_build_skb+0x36/0x320 [ 916.862875][T21376] tun_get_user+0x1bf7/0x3ca0 [ 916.867628][T21376] ? tun_get_user+0x662/0x3ca0 [ 916.872500][T21376] ? rcu_read_unlock+0xa0/0xa0 [ 916.877346][T21376] ? tun_get+0x1c/0x2e0 [ 916.881651][T21376] ? __lock_acquire+0x7d40/0x7d40 [ 916.886763][T21376] ? tun_get+0x1c/0x2e0 [ 916.890997][T21376] tun_chr_write_iter+0x119/0x200 [ 916.896109][T21376] vfs_write+0x46c/0x990 [ 916.900431][T21376] ? file_end_write+0x250/0x250 [ 916.905373][T21376] ? __fget_files+0x43d/0x4b0 [ 916.910479][T21376] ? __fdget_pos+0x1d8/0x330 [ 916.915137][T21376] ? ksys_write+0x75/0x260 [ 916.919634][T21376] ksys_write+0x150/0x260 [ 916.924036][T21376] ? __ia32_sys_read+0x90/0x90 [ 916.928881][T21376] ? lockdep_hardirqs_on+0x98/0x150 [ 916.934156][T21376] do_syscall_64+0x55/0xa0 [ 916.938632][T21376] ? clear_bhb_loop+0x40/0x90 [ 916.943380][T21376] ? clear_bhb_loop+0x40/0x90 [ 916.948129][T21376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 916.954091][T21376] RIP: 0033:0x7fa65619ce59 [ 916.958570][T21376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.978250][T21376] RSP: 002b:00007fa656f81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 916.986755][T21376] RAX: ffffffffffffffda RBX: 00007fa656415fa0 RCX: 00007fa65619ce59 [ 916.994774][T21376] RDX: 0000000000000015 RSI: 0000200000000000 RDI: 00000000000000c8 [ 917.002831][T21376] RBP: 00007fa656f81090 R08: 0000000000000000 R09: 0000000000000000 [ 917.010881][T21376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.018933][T21376] R13: 00007fa656416038 R14: 00007fa656415fa0 R15: 00007ffe30af4bc8 [ 917.027005][T21376] [ 917.066314][T21378] netlink: 'syz.0.5528': attribute type 10 has an invalid length. [ 917.154825][T15861] wlan1: Trigger new scan to find an IBSS to join [ 917.230753][T21374] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5527'. [ 917.244097][T21374] bridge_slave_1: entered promiscuous mode [ 917.776190][T21389] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5532'. [ 918.233108][T21391] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5533'. [ 918.870816][T21395] netlink: 'syz.0.5534': attribute type 10 has an invalid length. [ 918.948986][T21395] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5534'. [ 919.571353][T21401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5537'. [ 920.272388][T21405] netlink: 'syz.3.5538': attribute type 10 has an invalid length. [ 920.342782][T21428] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5545'. [ 920.395005][T21405] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5538'. [ 920.412268][T21405] hsr0: entered promiscuous mode [ 920.509017][T21427] netlink: 'syz.2.5545': attribute type 29 has an invalid length. [ 920.517666][T21427] netlink: 'syz.2.5545': attribute type 29 has an invalid length. [ 920.528101][T21427] netlink: 'syz.2.5545': attribute type 29 has an invalid length. [ 921.068617][T21443] netlink: 'syz.0.5549': attribute type 10 has an invalid length. [ 921.075813][T15859] wlan1: Trigger new scan to find an IBSS to join [ 921.410763][T21447] FAULT_INJECTION: forcing a failure. [ 921.410763][T21447] name failslab, interval 1, probability 0, space 0, times 0 [ 921.428732][T21447] CPU: 1 PID: 21447 Comm: syz.2.5553 Not tainted syzkaller #0 [ 921.436409][T21447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 921.446517][T21447] Call Trace: [ 921.449839][T21447] [ 921.452807][T21447] dump_stack_lvl+0x18c/0x250 [ 921.457544][T21447] ? show_regs_print_info+0x20/0x20 [ 921.462796][T21447] ? load_image+0x420/0x420 [ 921.467362][T21447] ? __might_sleep+0xe0/0xe0 [ 921.472013][T21447] ? __lock_acquire+0x7d40/0x7d40 [ 921.477105][T21447] should_fail_ex+0x39d/0x4d0 [ 921.481862][T21447] should_failslab+0x9/0x20 [ 921.486430][T21447] slab_pre_alloc_hook+0x59/0x310 [ 921.491553][T21447] ? kvmalloc_node+0x70/0x180 [ 921.496288][T21447] ? kvmalloc_node+0x70/0x180 [ 921.501019][T21447] __kmem_cache_alloc_node+0x53/0x250 [ 921.506483][T21447] ? kvmalloc_node+0x70/0x180 [ 921.511236][T21447] __kmalloc_node+0xa4/0x230 [ 921.515886][T21447] kvmalloc_node+0x70/0x180 [ 921.520449][T21447] page_pool_create+0x1eb/0x5c0 [ 921.525369][T21447] bpf_test_run_xdp_live+0x203/0x1b20 [ 921.530812][T21447] ? bpf_dispatcher_xdp+0x800/0x1000 [ 921.536161][T21447] ? bpf_dispatcher_xdp+0x800/0x1000 [ 921.541504][T21447] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 921.547468][T21447] ? bpf_dispatcher_xdp+0x800/0x1000 [ 921.552827][T21447] ? xdp_convert_md_to_buff+0x330/0x330 [ 921.558442][T21447] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 921.564726][T21447] ? _copy_from_user+0xa5/0xe0 [ 921.569537][T21447] ? bpf_test_init+0x119/0x140 [ 921.574320][T21447] ? xdp_convert_md_to_buff+0x5b/0x330 [ 921.579848][T21447] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 921.585279][T21447] ? dev_put+0x80/0x80 [ 921.589409][T21447] ? dev_put+0x80/0x80 [ 921.593507][T21447] bpf_prog_test_run+0x321/0x390 [ 921.598497][T21447] __sys_bpf+0x49d/0x890 [ 921.602805][T21447] ? bpf_link_show_fdinfo+0x390/0x390 [ 921.608221][T21447] ? lock_chain_count+0x20/0x20 [ 921.613112][T21447] __x64_sys_bpf+0x7c/0x90 [ 921.617577][T21447] do_syscall_64+0x55/0xa0 [ 921.622018][T21447] ? clear_bhb_loop+0x40/0x90 [ 921.626730][T21447] ? clear_bhb_loop+0x40/0x90 [ 921.631451][T21447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 921.637380][T21447] RIP: 0033:0x7fb35e79ce59 [ 921.641936][T21447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.661571][T21447] RSP: 002b:00007fb35f72a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 921.670024][T21447] RAX: ffffffffffffffda RBX: 00007fb35ea16090 RCX: 00007fb35e79ce59 [ 921.678107][T21447] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 921.686106][T21447] RBP: 00007fb35f72a090 R08: 0000000000000000 R09: 0000000000000000 [ 921.694096][T21447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.702096][T21447] R13: 00007fb35ea16128 R14: 00007fb35ea16090 R15: 00007ffcc1bad898 [ 921.710106][T21447] [ 921.754495][T21447] page_pool_create() gave up with errno -12 [ 921.941141][T21450] __nla_validate_parse: 2 callbacks suppressed [ 921.941160][T21450] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5555'. [ 922.273856][T15859] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 922.325790][T21466] netlink: 'syz.2.5561': attribute type 10 has an invalid length. [ 922.333876][T21466] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5561'. [ 922.441811][T21458] netlink: 'syz.0.5557': attribute type 10 has an invalid length. [ 922.458601][T21458] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5557'. [ 922.470051][T21471] FAULT_INJECTION: forcing a failure. [ 922.470051][T21471] name failslab, interval 1, probability 0, space 0, times 0 [ 922.470232][T21458] hsr0: entered promiscuous mode [ 922.498417][T21458] bridge0: port 3(hsr0) entered blocking state [ 922.520651][T21458] bridge0: port 3(hsr0) entered disabled state [ 922.532799][T21458] hsr0: entered allmulticast mode [ 922.545844][T21471] CPU: 1 PID: 21471 Comm: syz.1.5564 Not tainted syzkaller #0 [ 922.553384][T21471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 922.556263][T21458] hsr_slave_0: entered allmulticast mode [ 922.563544][T21471] Call Trace: [ 922.563557][T21471] [ 922.563568][T21471] dump_stack_lvl+0x18c/0x250 [ 922.563608][T21471] ? show_regs_print_info+0x20/0x20 [ 922.563638][T21471] ? load_image+0x420/0x420 [ 922.563669][T21471] ? __might_sleep+0xe0/0xe0 [ 922.563695][T21471] ? __lock_acquire+0x7d40/0x7d40 [ 922.563724][T21471] should_fail_ex+0x39d/0x4d0 [ 922.563758][T21471] should_failslab+0x9/0x20 [ 922.563787][T21471] slab_pre_alloc_hook+0x59/0x310 [ 922.563820][T21471] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 922.563843][T21471] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 922.563865][T21471] __kmem_cache_alloc_node+0x53/0x250 [ 922.563899][T21471] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 922.563927][T21471] __kmalloc+0xa4/0x230 [ 922.563958][T21471] tomoyo_realpath_from_path+0xe3/0x5d0 [ 922.563995][T21471] tomoyo_path_number_perm+0x248/0x620 [ 922.564028][T21471] ? tomoyo_path_number_perm+0x217/0x620 [ 922.564059][T21471] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 922.564093][T21471] ? ksys_write+0x1c4/0x260 [ 922.564156][T21471] ? __fget_files+0x28/0x4b0 [ 922.564180][T21471] ? __fget_files+0x28/0x4b0 [ 922.564222][T21471] security_file_ioctl+0x70/0xa0 [ 922.564254][T21471] __se_sys_ioctl+0x48/0x170 [ 922.564285][T21471] do_syscall_64+0x55/0xa0 [ 922.564302][T21471] ? clear_bhb_loop+0x40/0x90 [ 922.564326][T21471] ? clear_bhb_loop+0x40/0x90 [ 922.564371][T21471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 922.564396][T21471] RIP: 0033:0x7fa65619ce59 [ 922.564417][T21471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.564436][T21471] RSP: 002b:00007fa656f81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 922.564459][T21471] RAX: ffffffffffffffda RBX: 00007fa656415fa0 RCX: 00007fa65619ce59 [ 922.564475][T21471] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000d [ 922.564490][T21471] RBP: 00007fa656f81090 R08: 0000000000000000 R09: 0000000000000000 [ 922.564505][T21471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.564517][T21471] R13: 00007fa656416038 R14: 00007fa656415fa0 R15: 00007ffe30af4bc8 [ 922.564552][T21471] [ 922.593979][T21471] ERROR: Out of memory at tomoyo_realpath_from_path. [ 922.808960][T21458] hsr_slave_1: entered allmulticast mode [ 922.864233][T21458] bridge0: port 3(hsr0) entered blocking state [ 922.872172][T21458] bridge0: port 3(hsr0) entered forwarding state [ 922.909448][T21478] netlink: 'syz.2.5565': attribute type 10 has an invalid length. [ 922.957260][T21478] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5565'. [ 923.205845][T21485] netlink: 'syz.1.5568': attribute type 29 has an invalid length. [ 923.241288][T21485] netlink: 'syz.1.5568': attribute type 29 has an invalid length. [ 923.266180][T21486] netlink: 'syz.1.5568': attribute type 29 has an invalid length. [ 923.281400][T21484] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5567'. [ 923.794699][T21448] Bluetooth: hci3: command 0x0406 tx timeout [ 923.807589][T21495] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5573'. [ 923.976555][T21503] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 924.106634][T21507] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5579'. [ 924.465030][T21520] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5583'. [ 924.579492][T21525] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5586'. [ 924.795119][T21530] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5589'. [ 925.851762][T21549] validate_nla: 5 callbacks suppressed [ 925.851782][T21549] netlink: 'syz.0.5596': attribute type 10 has an invalid length. [ 926.012447][T21552] netlink: 'syz.0.5598': attribute type 10 has an invalid length. [ 926.124842][T15860] wlan1: Trigger new scan to find an IBSS to join [ 926.248546][T21558] netlink: 'syz.1.5608': attribute type 29 has an invalid length. [ 926.274790][T21558] netlink: 'syz.1.5608': attribute type 29 has an invalid length. [ 926.286000][T21559] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 926.324097][T21558] netlink: 'syz.1.5608': attribute type 29 has an invalid length. [ 926.404011][T21564] netlink: 'syz.2.5602': attribute type 10 has an invalid length. [ 928.235864][T21576] netlink: 'syz.3.5606': attribute type 10 has an invalid length. [ 928.318310][T21578] netlink: 'syz.1.5609': attribute type 10 has an invalid length. [ 928.342170][T21578] __nla_validate_parse: 4 callbacks suppressed [ 928.342214][T21578] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5609'. [ 928.519489][T21582] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5610'. [ 928.541279][T21588] FAULT_INJECTION: forcing a failure. [ 928.541279][T21588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.564850][T21588] CPU: 0 PID: 21588 Comm: syz.3.5613 Not tainted syzkaller #0 [ 928.572401][T21588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 928.582509][T21588] Call Trace: [ 928.585860][T21588] [ 928.588835][T21588] dump_stack_lvl+0x18c/0x250 [ 928.593587][T21588] ? show_regs_print_info+0x20/0x20 [ 928.598870][T21588] ? load_image+0x420/0x420 [ 928.603439][T21588] ? __might_fault+0xaa/0x120 [ 928.608174][T21588] should_fail_ex+0x39d/0x4d0 [ 928.612902][T21588] copyin+0x1a/0x90 [ 928.616746][T21588] _copy_from_iter+0x54f/0x12e0 [ 928.621631][T21588] ? __virt_addr_valid+0x18c/0x540 [ 928.626776][T21588] ? copyout_mc+0x70/0x70 [ 928.631130][T21588] ? __virt_addr_valid+0x18c/0x540 [ 928.636266][T21588] ? __virt_addr_valid+0x18c/0x540 [ 928.641410][T21588] ? __virt_addr_valid+0x469/0x540 [ 928.646555][T21588] ? __check_object_size+0x506/0xa20 [ 928.651871][T21588] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 928.657628][T21588] ? dev_get_by_index+0x22/0x2d0 [ 928.662628][T21588] ? skb_put+0x11b/0x210 [ 928.666929][T21588] packet_sendmsg+0x33ff/0x4c30 [ 928.671847][T21588] ? __might_sleep+0xe0/0xe0 [ 928.676462][T21588] ? mark_lock+0x94/0x320 [ 928.680912][T21588] ? __lock_acquire+0x1273/0x7d40 [ 928.685969][T21588] ? aa_sk_perm+0x83c/0x970 [ 928.690508][T21588] ? packet_getsockopt+0xad0/0xad0 [ 928.695655][T21588] ? tomoyo_gc_thread+0x680/0x1410 [ 928.700798][T21588] ? aa_sock_msg_perm+0x94/0x150 [ 928.705847][T21588] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 928.711156][T21588] ? security_socket_sendmsg+0x80/0xa0 [ 928.716838][T21588] ? packet_getsockopt+0xad0/0xad0 [ 928.722029][T21588] ____sys_sendmsg+0x5ba/0x960 [ 928.726823][T21588] ? __lock_acquire+0x7d40/0x7d40 [ 928.731887][T21588] ? __asan_memset+0x22/0x40 [ 928.736509][T21588] ? __sys_sendmsg_sock+0x30/0x30 [ 928.741558][T21588] ? __import_iovec+0x3fa/0x850 [ 928.746445][T21588] ? import_iovec+0x73/0xa0 [ 928.750978][T21588] ___sys_sendmsg+0x2a6/0x360 [ 928.755682][T21588] ? __sys_sendmsg+0x2a0/0x2a0 [ 928.760487][T21588] ? __lock_acquire+0x7d40/0x7d40 [ 928.765562][T21588] __se_sys_sendmsg+0x1c2/0x2b0 [ 928.770440][T21588] ? __x64_sys_sendmsg+0x80/0x80 [ 928.775416][T21588] ? lockdep_hardirqs_on+0x98/0x150 [ 928.780702][T21588] do_syscall_64+0x55/0xa0 [ 928.785286][T21588] ? clear_bhb_loop+0x40/0x90 [ 928.790193][T21588] ? clear_bhb_loop+0x40/0x90 [ 928.794917][T21588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 928.800846][T21588] RIP: 0033:0x7f846639ce59 [ 928.805287][T21588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.824917][T21588] RSP: 002b:00007f8467172028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 928.833357][T21588] RAX: ffffffffffffffda RBX: 00007f8466615fa0 RCX: 00007f846639ce59 [ 928.841352][T21588] RDX: 0000000000040080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 928.849341][T21588] RBP: 00007f8467172090 R08: 0000000000000000 R09: 0000000000000000 [ 928.857333][T21588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.865335][T21588] R13: 00007f8466616038 R14: 00007f8466615fa0 R15: 00007ffc374ae7a8 [ 928.873344][T21588] [ 928.944981][T21593] netlink: 'syz.2.5614': attribute type 10 has an invalid length. [ 929.006698][T21593] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5614'. [ 929.082900][T15859] wlan1: Trigger new scan to find an IBSS to join [ 929.129609][T21598] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5617'. [ 929.211375][T21598] netlink: 'syz.3.5617': attribute type 29 has an invalid length. [ 930.115512][ T7358] wlan1: Trigger new scan to find an IBSS to join [ 930.483807][T21608] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5620'. [ 931.322266][T15860] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 931.660850][T21616] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5624'. [ 931.780985][T21626] FAULT_INJECTION: forcing a failure. [ 931.780985][T21626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.815135][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.821532][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.830938][T21626] CPU: 1 PID: 21626 Comm: syz.3.5627 Not tainted syzkaller #0 [ 931.838484][T21626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 931.848579][T21626] Call Trace: [ 931.851898][T21626] [ 931.854871][T21626] dump_stack_lvl+0x18c/0x250 [ 931.859610][T21626] ? show_regs_print_info+0x20/0x20 [ 931.864870][T21626] ? load_image+0x420/0x420 [ 931.869434][T21626] ? __might_fault+0xaa/0x120 [ 931.874167][T21626] ? __lock_acquire+0x7d40/0x7d40 [ 931.879252][T21626] should_fail_ex+0x39d/0x4d0 [ 931.884032][T21626] _copy_from_user+0x2f/0xe0 [ 931.888691][T21626] ___sys_recvmsg+0x176/0x590 [ 931.893582][T21626] ? __sys_recvmsg+0x2a0/0x2a0 [ 931.898423][T21626] ? ksys_write+0x1c4/0x260 [ 931.902964][T21626] ? __fget_files+0x43d/0x4b0 [ 931.907687][T21626] __x64_sys_recvmsg+0x20c/0x2e0 [ 931.912656][T21626] ? ___sys_recvmsg+0x590/0x590 [ 931.917540][T21626] ? lockdep_hardirqs_on+0x98/0x150 [ 931.922767][T21626] do_syscall_64+0x55/0xa0 [ 931.927219][T21626] ? clear_bhb_loop+0x40/0x90 [ 931.931944][T21626] ? clear_bhb_loop+0x40/0x90 [ 931.936664][T21626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 931.942581][T21626] RIP: 0033:0x7f846639ce59 [ 931.947010][T21626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.966636][T21626] RSP: 002b:00007f8467172028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 931.975101][T21626] RAX: ffffffffffffffda RBX: 00007f8466615fa0 RCX: 00007f846639ce59 [ 931.983092][T21626] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 931.991090][T21626] RBP: 00007f8467172090 R08: 0000000000000000 R09: 0000000000000000 [ 931.999080][T21626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.007066][T21626] R13: 00007f8466616038 R14: 00007f8466615fa0 R15: 00007ffc374ae7a8 [ 932.015116][T21626] [ 932.045134][T21625] validate_nla: 4 callbacks suppressed [ 932.045174][T21625] netlink: 'syz.2.5629': attribute type 10 has an invalid length. [ 932.077966][T21625] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5629'. [ 932.089453][T21630] netlink: 'syz.0.5630': attribute type 10 has an invalid length. [ 932.128374][T21628] netlink: 'syz.1.5628': attribute type 10 has an invalid length. [ 932.137481][T21628] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5628'. [ 932.329506][T21634] netlink: 'syz.3.5631': attribute type 29 has an invalid length. [ 932.351967][T21634] netlink: 'syz.3.5631': attribute type 29 has an invalid length. [ 932.377902][T21638] netlink: 'syz.2.5633': attribute type 29 has an invalid length. [ 932.423043][T21639] netlink: 'syz.3.5631': attribute type 29 has an invalid length. [ 932.486765][T21638] netlink: 'syz.2.5633': attribute type 29 has an invalid length. [ 932.538229][T21640] netlink: 'syz.2.5633': attribute type 29 has an invalid length. [ 932.572296][T21643] netlink: 'syz.2.5633': attribute type 29 has an invalid length. [ 932.599428][T21644] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5634'. [ 932.703205][T21640] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5633'. [ 933.392665][T21657] __nla_validate_parse: 1 callbacks suppressed [ 933.392739][T21657] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5640'. [ 933.404578][T21655] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5637'. [ 933.699210][T21670] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5643'. [ 934.042249][T21671] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5645'. [ 934.407893][T21684] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5649'. [ 934.516980][T21683] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5650'. [ 935.089635][ T7349] wlan1: Trigger new scan to find an IBSS to join [ 935.341137][T21698] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5656'. [ 935.512408][T21707] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5660'. [ 935.655743][T21713] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5661'. [ 935.721139][T21711] netlink: 668 bytes leftover after parsing attributes in process `syz.1.5662'. [ 935.750777][T21711] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 935.784562][T21711] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 936.030610][ T7349] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 937.139795][T21730] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 937.153162][T21731] validate_nla: 18 callbacks suppressed [ 937.153198][T21731] netlink: 'syz.1.5668': attribute type 29 has an invalid length. [ 937.169597][T21736] netlink: 'syz.1.5668': attribute type 29 has an invalid length. [ 937.599567][T21755] netlink: 'syz.0.5676': attribute type 10 has an invalid length. [ 937.773292][T21760] netlink: 'syz.3.5677': attribute type 10 has an invalid length. [ 937.787344][T21759] FAULT_INJECTION: forcing a failure. [ 937.787344][T21759] name failslab, interval 1, probability 0, space 0, times 0 [ 937.814709][T21759] CPU: 1 PID: 21759 Comm: syz.0.5678 Not tainted syzkaller #0 [ 937.822273][T21759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 937.832389][T21759] Call Trace: [ 937.835799][T21759] [ 937.838782][T21759] dump_stack_lvl+0x18c/0x250 [ 937.843547][T21759] ? show_regs_print_info+0x20/0x20 [ 937.848825][T21759] ? load_image+0x420/0x420 [ 937.853386][T21759] ? __might_sleep+0xe0/0xe0 [ 937.858031][T21759] ? __lock_acquire+0x7d40/0x7d40 [ 937.863116][T21759] should_fail_ex+0x39d/0x4d0 [ 937.867856][T21759] should_failslab+0x9/0x20 [ 937.872474][T21759] slab_pre_alloc_hook+0x59/0x310 [ 937.877639][T21759] ? sctp_transport_new+0x7e/0x630 [ 937.882810][T21759] __kmem_cache_alloc_node+0x53/0x250 [ 937.888251][T21759] ? sctp_transport_new+0x7e/0x630 [ 937.893430][T21759] kmalloc_trace+0x2a/0xe0 [ 937.897908][T21759] sctp_transport_new+0x7e/0x630 [ 937.902906][T21759] sctp_assoc_add_peer+0x259/0x1390 [ 937.908166][T21759] ? sctp_bind_addr_copy+0x37b/0x3c0 [ 937.913523][T21759] sctp_connect_new_asoc+0x323/0x6a0 [ 937.918872][T21759] ? __sctp_connect+0xd80/0xd80 [ 937.923774][T21759] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 937.929632][T21759] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 937.935506][T21759] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 937.941471][T21759] __sctp_connect+0x5b7/0xd80 [ 937.946224][T21759] ? sctp_send_asconf+0x170/0x170 [ 937.951312][T21759] ? __local_bh_enable_ip+0x13a/0x1c0 [ 937.956743][T21759] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 937.962355][T21759] ? security_sctp_bind_connect+0x89/0xb0 [ 937.968138][T21759] sctp_setsockopt_connectx+0x104/0x1a0 [ 937.973780][T21759] sctp_setsockopt+0x6d8/0x11e0 [ 937.978687][T21759] ? sock_common_recvmsg+0x190/0x190 [ 937.984028][T21759] do_sock_setsockopt+0x175/0x1a0 [ 937.989097][T21759] ? __fdget+0x180/0x210 [ 937.993393][T21759] __x64_sys_setsockopt+0x182/0x200 [ 937.998642][T21759] do_syscall_64+0x55/0xa0 [ 938.003110][T21759] ? clear_bhb_loop+0x40/0x90 [ 938.007832][T21759] ? clear_bhb_loop+0x40/0x90 [ 938.012568][T21759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 938.018519][T21759] RIP: 0033:0x7f0263b9ce59 [ 938.022977][T21759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.042648][T21759] RSP: 002b:00007f0264a14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 938.051136][T21759] RAX: ffffffffffffffda RBX: 00007f0263e15fa0 RCX: 00007f0263b9ce59 [ 938.059252][T21759] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000005 [ 938.067275][T21759] RBP: 00007f0264a14090 R08: 0000000000000010 R09: 0000000000000000 [ 938.075297][T21759] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.083307][T21759] R13: 00007f0263e16038 R14: 00007f0263e15fa0 R15: 00007ffdc886b298 [ 938.091349][T21759] [ 938.466211][T21768] __nla_validate_parse: 5 callbacks suppressed [ 938.466231][T21768] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.5681'. [ 938.740624][T21774] FAULT_INJECTION: forcing a failure. [ 938.740624][T21774] name failslab, interval 1, probability 0, space 0, times 0 [ 938.765648][T21774] CPU: 1 PID: 21774 Comm: syz.1.5684 Not tainted syzkaller #0 [ 938.773207][T21774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 938.783338][T21774] Call Trace: [ 938.786668][T21774] [ 938.789654][T21774] dump_stack_lvl+0x18c/0x250 [ 938.794401][T21774] ? show_regs_print_info+0x20/0x20 [ 938.799659][T21774] ? load_image+0x420/0x420 [ 938.804231][T21774] ? __might_sleep+0xe0/0xe0 [ 938.808851][T21774] ? __lock_acquire+0x7d40/0x7d40 [ 938.813907][T21774] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 938.819917][T21774] should_fail_ex+0x39d/0x4d0 [ 938.824637][T21774] should_failslab+0x9/0x20 [ 938.829182][T21774] slab_pre_alloc_hook+0x59/0x310 [ 938.834240][T21774] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 938.840160][T21774] __kmem_cache_alloc_node+0x53/0x250 [ 938.845567][T21774] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 938.851493][T21774] kmalloc_trace+0x2a/0xe0 [ 938.855964][T21774] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 938.861748][T21774] sctp_association_new+0x15d3/0x25c0 [ 938.867262][T21774] sctp_connect_new_asoc+0x2de/0x6a0 [ 938.872581][T21774] ? __sctp_connect+0xd80/0xd80 [ 938.877472][T21774] ? __local_bh_enable_ip+0x13a/0x1c0 [ 938.882871][T21774] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 938.888448][T21774] ? security_sctp_bind_connect+0x89/0xb0 [ 938.894201][T21774] sctp_sendmsg+0x1575/0x28c0 [ 938.898915][T21774] ? sctp_getsockopt+0xb60/0xb60 [ 938.903888][T21774] ? aa_sk_perm+0x83c/0x970 [ 938.908435][T21774] ? aa_af_perm+0x330/0x330 [ 938.912977][T21774] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 938.919462][T21774] ? sock_rps_record_flow+0x19/0x3f0 [ 938.924789][T21774] ? inet_sendmsg+0xe9/0x2f0 [ 938.929421][T21774] ? inet_send_prepare+0x260/0x260 [ 938.934575][T21774] ____sys_sendmsg+0x5ba/0x960 [ 938.939373][T21774] ? __lock_acquire+0x7d40/0x7d40 [ 938.944522][T21774] ? __asan_memset+0x22/0x40 [ 938.949147][T21774] ? __sys_sendmsg_sock+0x30/0x30 [ 938.954211][T21774] ? __import_iovec+0x5f2/0x850 [ 938.959092][T21774] ? import_iovec+0x73/0xa0 [ 938.963619][T21774] ___sys_sendmsg+0x2a6/0x360 [ 938.968319][T21774] ? get_pid_task+0x20/0x1e0 [ 938.972935][T21774] ? __sys_sendmsg+0x2a0/0x2a0 [ 938.977735][T21774] ? __lock_acquire+0x7d40/0x7d40 [ 938.982797][T21774] __se_sys_sendmsg+0x1c2/0x2b0 [ 938.987669][T21774] ? __x64_sys_sendmsg+0x80/0x80 [ 938.992641][T21774] ? lockdep_hardirqs_on+0x98/0x150 [ 938.997871][T21774] do_syscall_64+0x55/0xa0 [ 939.002308][T21774] ? clear_bhb_loop+0x40/0x90 [ 939.007024][T21774] ? clear_bhb_loop+0x40/0x90 [ 939.011737][T21774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.017696][T21774] RIP: 0033:0x7fa65619ce59 [ 939.022154][T21774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.041797][T21774] RSP: 002b:00007fa656f81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.050277][T21774] RAX: ffffffffffffffda RBX: 00007fa656415fa0 RCX: 00007fa65619ce59 [ 939.058272][T21774] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000038 [ 939.066266][T21774] RBP: 00007fa656f81090 R08: 0000000000000000 R09: 0000000000000000 [ 939.074259][T21774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.082291][T21774] R13: 00007fa656416038 R14: 00007fa656415fa0 R15: 00007ffe30af4bc8 [ 939.090304][T21774] [ 939.135646][T21448] Bluetooth: hci4: command 0x0406 tx timeout [ 939.174870][T15861] wlan1: Trigger new scan to find an IBSS to join [ 939.235348][T21775] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5685'. [ 939.418351][T21791] FAULT_INJECTION: forcing a failure. [ 939.418351][T21791] name failslab, interval 1, probability 0, space 0, times 0 [ 939.436196][T21791] CPU: 1 PID: 21791 Comm: syz.0.5692 Not tainted syzkaller #0 [ 939.443749][T21791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 939.453854][T21791] Call Trace: [ 939.457190][T21791] [ 939.460176][T21791] dump_stack_lvl+0x18c/0x250 [ 939.464907][T21791] ? show_regs_print_info+0x20/0x20 [ 939.470144][T21791] ? load_image+0x420/0x420 [ 939.474689][T21791] ? __might_sleep+0xe0/0xe0 [ 939.479320][T21791] ? __lock_acquire+0x7d40/0x7d40 [ 939.484371][T21791] should_fail_ex+0x39d/0x4d0 [ 939.489110][T21791] should_failslab+0x9/0x20 [ 939.493630][T21791] slab_pre_alloc_hook+0x59/0x310 [ 939.498695][T21791] ? sk_prot_alloc+0xe7/0x210 [ 939.503406][T21791] ? sk_prot_alloc+0xe7/0x210 [ 939.508106][T21791] __kmem_cache_alloc_node+0x53/0x250 [ 939.513752][T21791] ? sk_prot_alloc+0xe7/0x210 [ 939.518487][T21791] __kmalloc+0xa4/0x230 [ 939.522696][T21791] sk_prot_alloc+0xe7/0x210 [ 939.527220][T21791] ? sk_alloc+0x24/0x360 [ 939.531483][T21791] sk_alloc+0x3a/0x360 [ 939.535571][T21791] ? bpf_ctx_init+0x163/0x1a0 [ 939.540262][T21791] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 939.545829][T21791] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 939.551219][T21791] ? __fget_files+0x28/0x4b0 [ 939.555835][T21791] ? __fget_files+0x28/0x4b0 [ 939.560446][T21791] ? __fget_files+0x43d/0x4b0 [ 939.565172][T21791] ? cpu_online+0x60/0x60 [ 939.569514][T21791] bpf_prog_test_run+0x321/0x390 [ 939.574515][T21791] __sys_bpf+0x49d/0x890 [ 939.578788][T21791] ? bpf_link_show_fdinfo+0x390/0x390 [ 939.584184][T21791] ? lock_chain_count+0x20/0x20 [ 939.589056][T21791] __x64_sys_bpf+0x7c/0x90 [ 939.593503][T21791] do_syscall_64+0x55/0xa0 [ 939.597933][T21791] ? clear_bhb_loop+0x40/0x90 [ 939.602631][T21791] ? clear_bhb_loop+0x40/0x90 [ 939.607382][T21791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.613294][T21791] RIP: 0033:0x7f0263b9ce59 [ 939.617726][T21791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.637352][T21791] RSP: 002b:00007f0264a14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 939.645800][T21791] RAX: ffffffffffffffda RBX: 00007f0263e15fa0 RCX: 00007f0263b9ce59 [ 939.653856][T21791] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 939.661877][T21791] RBP: 00007f0264a14090 R08: 0000000000000000 R09: 0000000000000000 [ 939.669876][T21791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.677874][T21791] R13: 00007f0263e16038 R14: 00007f0263e15fa0 R15: 00007ffdc886b298 [ 939.685917][T21791] [ 939.919654][T21801] netlink: 'syz.0.5695': attribute type 10 has an invalid length. [ 939.948459][T21801] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5695'. [ 940.040936][T21803] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 940.509085][T21806] FAULT_INJECTION: forcing a failure. [ 940.509085][T21806] name failslab, interval 1, probability 0, space 0, times 0 [ 940.561649][T21806] CPU: 0 PID: 21806 Comm: syz.1.5698 Not tainted syzkaller #0 [ 940.569315][T21806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 940.579416][T21806] Call Trace: [ 940.582744][T21806] [ 940.585732][T21806] dump_stack_lvl+0x18c/0x250 [ 940.590477][T21806] ? show_regs_print_info+0x20/0x20 [ 940.595742][T21806] ? load_image+0x420/0x420 [ 940.600310][T21806] ? __might_sleep+0xe0/0xe0 [ 940.604961][T21806] ? __lock_acquire+0x7d40/0x7d40 [ 940.610043][T21806] should_fail_ex+0x39d/0x4d0 [ 940.614784][T21806] should_failslab+0x9/0x20 [ 940.619344][T21806] slab_pre_alloc_hook+0x59/0x310 [ 940.624430][T21806] ? sctp_transport_new+0x7e/0x630 [ 940.629598][T21806] __kmem_cache_alloc_node+0x53/0x250 [ 940.635036][T21806] ? sctp_transport_new+0x7e/0x630 [ 940.640204][T21806] kmalloc_trace+0x2a/0xe0 [ 940.644690][T21806] sctp_transport_new+0x7e/0x630 [ 940.649686][T21806] sctp_assoc_add_peer+0x259/0x1390 [ 940.654934][T21806] ? sctp_bind_addr_copy+0x37b/0x3c0 [ 940.660318][T21806] sctp_connect_new_asoc+0x323/0x6a0 [ 940.665663][T21806] ? __sctp_connect+0xd80/0xd80 [ 940.670567][T21806] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 940.676710][T21806] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 940.682571][T21806] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 940.688436][T21806] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 940.694394][T21806] __sctp_connect+0x5b7/0xd80 [ 940.699141][T21806] ? sctp_send_asconf+0x170/0x170 [ 940.704229][T21806] ? bpf_lsm_sctp_assoc_request+0x10/0x10 [ 940.710009][T21806] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 940.715609][T21806] ? security_sctp_bind_connect+0x89/0xb0 [ 940.721398][T21806] sctp_setsockopt_connectx+0x104/0x1a0 [ 940.727003][T21806] sctp_setsockopt+0x6d8/0x11e0 [ 940.731905][T21806] ? sock_common_recvmsg+0x190/0x190 [ 940.737271][T21806] do_sock_setsockopt+0x175/0x1a0 [ 940.742354][T21806] ? __fdget+0x180/0x210 [ 940.746649][T21806] __x64_sys_setsockopt+0x182/0x200 [ 940.751916][T21806] do_syscall_64+0x55/0xa0 [ 940.756402][T21806] ? clear_bhb_loop+0x40/0x90 [ 940.761140][T21806] ? clear_bhb_loop+0x40/0x90 [ 940.765961][T21806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 940.771930][T21806] RIP: 0033:0x7fa65619ce59 [ 940.776406][T21806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.796064][T21806] RSP: 002b:00007fa656f81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 940.804626][T21806] RAX: ffffffffffffffda RBX: 00007fa656415fa0 RCX: 00007fa65619ce59 [ 940.812671][T21806] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000004 [ 940.820714][T21806] RBP: 00007fa656f81090 R08: 0000000000000010 R09: 0000000000000000 [ 940.828738][T21806] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.836763][T21806] R13: 00007fa656416038 R14: 00007fa656415fa0 R15: 00007ffe30af4bc8 [ 940.844818][T21806] [ 941.008662][T21810] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5700'. [ 941.129269][T21815] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 941.320811][T21828] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5706'. [ 941.415162][T21831] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 941.427752][T21832] FAULT_INJECTION: forcing a failure. [ 941.427752][T21832] name failslab, interval 1, probability 0, space 0, times 0 [ 941.445635][T21832] CPU: 1 PID: 21832 Comm: syz.3.5707 Not tainted syzkaller #0 [ 941.453196][T21832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 941.463398][T21832] Call Trace: [ 941.466733][T21832] [ 941.469730][T21832] dump_stack_lvl+0x18c/0x250 [ 941.474556][T21832] ? show_regs_print_info+0x20/0x20 [ 941.479792][T21832] ? load_image+0x420/0x420 [ 941.484385][T21832] ? __might_sleep+0xe0/0xe0 [ 941.489054][T21832] ? __lock_acquire+0x7d40/0x7d40 [ 941.494117][T21832] should_fail_ex+0x39d/0x4d0 [ 941.498825][T21832] should_failslab+0x9/0x20 [ 941.503351][T21832] slab_pre_alloc_hook+0x59/0x310 [ 941.508416][T21832] ? sctp_transport_new+0x7e/0x630 [ 941.513577][T21832] __kmem_cache_alloc_node+0x53/0x250 [ 941.519004][T21832] ? sctp_transport_new+0x7e/0x630 [ 941.524143][T21832] kmalloc_trace+0x2a/0xe0 [ 941.528666][T21832] sctp_transport_new+0x7e/0x630 [ 941.533631][T21832] sctp_assoc_add_peer+0x259/0x1390 [ 941.538868][T21832] ? sctp_bind_addr_copy+0x37b/0x3c0 [ 941.544234][T21832] sctp_connect_new_asoc+0x323/0x6a0 [ 941.549557][T21832] ? __sctp_connect+0xd80/0xd80 [ 941.554446][T21832] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 941.560346][T21832] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 941.566202][T21832] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 941.572139][T21832] __sctp_connect+0x5b7/0xd80 [ 941.576859][T21832] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 941.583041][T21832] ? sctp_send_asconf+0x170/0x170 [ 941.588084][T21832] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 941.594270][T21832] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 941.599843][T21832] ? security_sctp_bind_connect+0x89/0xb0 [ 941.605605][T21832] sctp_setsockopt_connectx+0x104/0x1a0 [ 941.611204][T21832] sctp_setsockopt+0x6d8/0x11e0 [ 941.616098][T21832] ? sock_common_recvmsg+0x190/0x190 [ 941.621415][T21832] do_sock_setsockopt+0x175/0x1a0 [ 941.626461][T21832] ? __fdget+0x180/0x210 [ 941.630750][T21832] __x64_sys_setsockopt+0x182/0x200 [ 941.635982][T21832] do_syscall_64+0x55/0xa0 [ 941.640414][T21832] ? clear_bhb_loop+0x40/0x90 [ 941.645116][T21832] ? clear_bhb_loop+0x40/0x90 [ 941.649840][T21832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.655758][T21832] RIP: 0033:0x7f846639ce59 [ 941.660218][T21832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.679882][T21832] RSP: 002b:00007f8467172028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 941.688324][T21832] RAX: ffffffffffffffda RBX: 00007f8466615fa0 RCX: 00007f846639ce59 [ 941.696362][T21832] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000005 [ 941.704361][T21832] RBP: 00007f8467172090 R08: 0000000000000010 R09: 0000000000000000 [ 941.712466][T21832] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.720467][T21832] R13: 00007f8466616038 R14: 00007f8466615fa0 R15: 00007ffc374ae7a8 [ 941.728478][T21832] [ 942.081696][T21843] netlink: 'syz.2.5710': attribute type 10 has an invalid length. [ 942.104548][T21843] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5710'. [ 942.209533][T21846] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 942.231836][T21842] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5712'. [ 942.402609][T21848] FAULT_INJECTION: forcing a failure. [ 942.402609][T21848] name failslab, interval 1, probability 0, space 0, times 0 [ 942.448159][T21848] CPU: 0 PID: 21848 Comm: syz.3.5714 Not tainted syzkaller #0 [ 942.455707][T21848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 942.465800][T21848] Call Trace: [ 942.469101][T21848] [ 942.472046][T21848] dump_stack_lvl+0x18c/0x250 [ 942.476766][T21848] ? show_regs_print_info+0x20/0x20 [ 942.481999][T21848] ? load_image+0x420/0x420 [ 942.486526][T21848] ? __might_sleep+0xe0/0xe0 [ 942.491146][T21848] ? __lock_acquire+0x7d40/0x7d40 [ 942.496212][T21848] should_fail_ex+0x39d/0x4d0 [ 942.501040][T21848] should_failslab+0x9/0x20 [ 942.505584][T21848] slab_pre_alloc_hook+0x59/0x310 [ 942.510636][T21848] ? lock_chain_count+0x20/0x20 [ 942.515530][T21848] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 942.521455][T21848] __kmem_cache_alloc_node+0x53/0x250 [ 942.526865][T21848] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 942.532776][T21848] kmalloc_trace+0x2a/0xe0 [ 942.537220][T21848] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 942.542993][T21848] sctp_association_new+0x15d3/0x25c0 [ 942.548411][T21848] sctp_connect_new_asoc+0x2de/0x6a0 [ 942.553734][T21848] ? __sctp_connect+0xd80/0xd80 [ 942.558618][T21848] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 942.564193][T21848] ? security_sctp_bind_connect+0x89/0xb0 [ 942.569943][T21848] sctp_sendmsg+0x1575/0x28c0 [ 942.574662][T21848] ? sctp_getsockopt+0xb60/0xb60 [ 942.579623][T21848] ? aa_sk_perm+0x83c/0x970 [ 942.584155][T21848] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 942.590353][T21848] ? lockdep_hardirqs_on+0x98/0x150 [ 942.595584][T21848] ? aa_af_perm+0x330/0x330 [ 942.600127][T21848] ? sock_rps_record_flow+0x19/0x3f0 [ 942.605475][T21848] ? inet_sendmsg+0xe9/0x2f0 [ 942.610093][T21848] ? inet_send_prepare+0x260/0x260 [ 942.615232][T21848] ____sys_sendmsg+0x5ba/0x960 [ 942.620022][T21848] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 942.626221][T21848] ? __asan_memset+0x22/0x40 [ 942.630844][T21848] ? __sys_sendmsg_sock+0x30/0x30 [ 942.635890][T21848] ? __import_iovec+0x5f2/0x850 [ 942.640783][T21848] ? import_iovec+0x73/0xa0 [ 942.645312][T21848] ___sys_sendmsg+0x2a6/0x360 [ 942.650019][T21848] ? __sys_sendmsg+0x2a0/0x2a0 [ 942.654840][T21848] __se_sys_sendmsg+0x1c2/0x2b0 [ 942.659709][T21848] ? __x64_sys_sendmsg+0x80/0x80 [ 942.664678][T21848] ? syscall_enter_from_user_mode+0x2e/0x80 [ 942.670604][T21848] do_syscall_64+0x55/0xa0 [ 942.675043][T21848] ? clear_bhb_loop+0x40/0x90 [ 942.679743][T21848] ? clear_bhb_loop+0x40/0x90 [ 942.684474][T21848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 942.690448][T21848] RIP: 0033:0x7f846639ce59 [ 942.694898][T21848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.714547][T21848] RSP: 002b:00007f8467172028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 942.723005][T21848] RAX: ffffffffffffffda RBX: 00007f8466615fa0 RCX: 00007f846639ce59 [ 942.731000][T21848] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000032 [ 942.739114][T21848] RBP: 00007f8467172090 R08: 0000000000000000 R09: 0000000000000000 [ 942.747125][T21848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.755127][T21848] R13: 00007f8466616038 R14: 00007f8466615fa0 R15: 00007ffc374ae7a8 [ 942.763150][T21848] [ 943.165714][ T7358] wlan1: Trigger new scan to find an IBSS to join [ 943.184707][T21861] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 943.488950][T21871] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 943.657193][T21874] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5724'. [ 943.692424][T21878] netlink: 'syz.3.5726': attribute type 10 has an invalid length. [ 943.705614][T21878] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5726'. [ 943.776380][T21875] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5725'. [ 944.067013][T21885] netlink: 'syz.0.5729': attribute type 6 has an invalid length. [ 944.087932][T21885] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5729'. [ 944.265257][T21891] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 944.606642][T21898] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 944.726774][T21900] netlink: 'syz.2.5735': attribute type 10 has an invalid length. [ 944.747932][T21900] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5735'. [ 944.888319][T21904] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5736'. [ 945.083441][T21915] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 945.105316][T21916] FAULT_INJECTION: forcing a failure. [ 945.105316][T21916] name failslab, interval 1, probability 0, space 0, times 0 [ 945.126040][T21916] CPU: 1 PID: 21916 Comm: syz.3.5739 Not tainted syzkaller #0 [ 945.133594][T21916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 945.143798][T21916] Call Trace: [ 945.147123][T21916] [ 945.150106][T21916] dump_stack_lvl+0x18c/0x250 [ 945.154856][T21916] ? show_regs_print_info+0x20/0x20 [ 945.160146][T21916] ? load_image+0x420/0x420 [ 945.164724][T21916] ? __might_sleep+0xe0/0xe0 [ 945.169377][T21916] ? __lock_acquire+0x7d40/0x7d40 [ 945.174456][T21916] ? rcu_is_watching+0x15/0xb0 [ 945.179290][T21916] should_fail_ex+0x39d/0x4d0 [ 945.184051][T21916] should_failslab+0x9/0x20 [ 945.188616][T21916] slab_pre_alloc_hook+0x59/0x310 [ 945.193717][T21916] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 945.199667][T21916] __kmem_cache_alloc_node+0x53/0x250 [ 945.205137][T21916] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 945.211083][T21916] kmalloc_trace+0x2a/0xe0 [ 945.215568][T21916] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 945.221335][T21916] sctp_association_new+0x15d3/0x25c0 [ 945.226843][T21916] sctp_connect_new_asoc+0x2de/0x6a0 [ 945.232162][T21916] ? __sctp_connect+0xd80/0xd80 [ 945.237054][T21916] ? mark_lock+0x94/0x320 [ 945.241416][T21916] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 945.247255][T21916] __sctp_connect+0x5b7/0xd80 [ 945.251981][T21916] ? sctp_send_asconf+0x170/0x170 [ 945.257054][T21916] ? __local_bh_enable_ip+0x13a/0x1c0 [ 945.262458][T21916] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 945.268034][T21916] ? security_sctp_bind_connect+0x89/0xb0 [ 945.273783][T21916] sctp_setsockopt_connectx+0x104/0x1a0 [ 945.279364][T21916] sctp_setsockopt+0x6d8/0x11e0 [ 945.284418][T21916] ? sock_common_recvmsg+0x190/0x190 [ 945.289739][T21916] do_sock_setsockopt+0x175/0x1a0 [ 945.294789][T21916] ? __fdget+0x180/0x210 [ 945.299066][T21916] __x64_sys_setsockopt+0x182/0x200 [ 945.304298][T21916] do_syscall_64+0x55/0xa0 [ 945.308741][T21916] ? clear_bhb_loop+0x40/0x90 [ 945.313468][T21916] ? clear_bhb_loop+0x40/0x90 [ 945.318175][T21916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 945.324096][T21916] RIP: 0033:0x7f846639ce59 [ 945.328537][T21916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.348175][T21916] RSP: 002b:00007f84645f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 945.356620][T21916] RAX: ffffffffffffffda RBX: 00007f8466616090 RCX: 00007f846639ce59 [ 945.364620][T21916] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000005 [ 945.372631][T21916] RBP: 00007f84645f6090 R08: 0000000000000010 R09: 0000000000000000 [ 945.380645][T21916] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.388672][T21916] R13: 00007f8466616128 R14: 00007f8466616090 R15: 00007ffc374ae7a8 [ 945.396687][T21916] [ 945.413016][T21918] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 945.634162][T21925] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 945.670751][T21926] netlink: 'syz.2.5744': attribute type 10 has an invalid length. [ 945.696104][T21926] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5744'. [ 945.828736][T21929] netlink: 'syz.0.5746': attribute type 10 has an invalid length. [ 945.844020][T21929] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5746'. [ 946.117907][T15859] wlan1: Trigger new scan to find an IBSS to join [ 946.121661][T21931] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5747'. [ 946.166508][T21935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5749'. [ 946.866495][T21947] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 947.137613][ T7358] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 947.158582][ T7349] wlan1: Trigger new scan to find an IBSS to join [ 947.198863][T21955] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 947.209762][ T7358] ------------[ cut here ]------------ [ 947.215869][ T7358] WARNING: CPU: 0 PID: 7358 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440 [ 947.225894][ T7358] Modules linked in: [ 947.229873][ T7358] CPU: 0 PID: 7358 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 947.237901][ T7358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 947.248179][ T7358] Workqueue: cfg80211 cfg80211_event_work [ 947.253974][ T7358] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 947.260805][ T7358] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f7 98 a0 f7 0f 0b eb bb e8 ee 98 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 e0 98 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 947.280976][ T7358] RSP: 0018:ffffc9000be17a20 EFLAGS: 00010293 [ 947.287317][ T7358] RAX: ffffffff89e68a62 RBX: dffffc0000000000 RCX: ffff88801b685a00 [ 947.295868][ T7358] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0 [ 947.303924][ T7358] RBP: ffffc9000be17af8 R08: ffffffff911c656f R09: 1ffffffff2238cad [ 947.312258][ T7358] R10: dffffc0000000000 R11: fffffbfff2238cae R12: ffff888021378c90 [ 947.320368][ T7358] R13: 1ffff920017c2f4c R14: ffff88805c48b5b8 R15: 000000000000001f [ 947.328459][ T7358] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 947.337598][ T7358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 947.344254][ T7358] CR2: 000000110c2a2e7e CR3: 000000000cf32000 CR4: 00000000003506f0 [ 947.352503][ T7358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 947.360721][ T7358] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 947.368914][ T7358] Call Trace: [ 947.372265][ T7358] [ 947.375296][ T7358] ? mutex_lock_nested+0x20/0x20 [ 947.380308][ T7358] ? trace_rdev_return_void+0x1c0/0x1c0 [ 947.386024][ T7358] cfg80211_process_wdev_events+0x3bc/0x550 [ 947.392337][ T7358] cfg80211_process_rdev_events+0xa1/0x110 [ 947.398347][ T7358] cfg80211_event_work+0x2f/0x40 [ 947.403354][ T7358] ? process_scheduled_works+0x96f/0x15d0 [ 947.409189][ T7358] process_scheduled_works+0xa5d/0x15d0 [ 947.414899][ T7358] ? worker_attach_to_pool+0x380/0x380 [ 947.420427][ T7358] ? assign_work+0x3d2/0x5d0 [ 947.425120][ T7358] worker_thread+0xa55/0xfc0 [ 947.429817][ T7358] kthread+0x2fa/0x390 [ 947.433950][ T7358] ? pr_cont_work+0x560/0x560 [ 947.438765][ T7358] ? kthread_blkcg+0xd0/0xd0 [ 947.443429][ T7358] ret_from_fork+0x48/0x80 [ 947.447964][ T7358] ? kthread_blkcg+0xd0/0xd0 [ 947.452621][ T7358] ret_from_fork_asm+0x11/0x20 [ 947.457587][ T7358] [ 947.460695][ T7358] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 947.468011][ T7358] CPU: 0 PID: 7358 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 947.475694][ T7358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 947.485805][ T7358] Workqueue: cfg80211 cfg80211_event_work [ 947.491585][ T7358] Call Trace: [ 947.494900][ T7358] [ 947.497871][ T7358] dump_stack_lvl+0x18c/0x250 [ 947.502586][ T7358] ? show_regs_print_info+0x20/0x20 [ 947.507815][ T7358] ? load_image+0x420/0x420 [ 947.512358][ T7358] panic+0x2dc/0x730 [ 947.516289][ T7358] ? bpf_jit_dump+0xd0/0xd0 [ 947.520835][ T7358] ? ret_from_fork_asm+0x11/0x20 [ 947.525803][ T7358] __warn+0x2e0/0x470 [ 947.529897][ T7358] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 947.535488][ T7358] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 947.541091][ T7358] report_bug+0x2be/0x4f0 [ 947.545441][ T7358] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 947.551015][ T7358] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 947.556586][ T7358] ? __cfg80211_ibss_joined+0x3d4/0x440 [ 947.562156][ T7358] handle_bug+0xcf/0x120 [ 947.566415][ T7358] exc_invalid_op+0x1a/0x50 [ 947.570936][ T7358] asm_exc_invalid_op+0x1a/0x20 [ 947.575818][ T7358] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 947.582116][ T7358] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f7 98 a0 f7 0f 0b eb bb e8 ee 98 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 e0 98 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 947.601761][ T7358] RSP: 0018:ffffc9000be17a20 EFLAGS: 00010293 [ 947.607891][ T7358] RAX: ffffffff89e68a62 RBX: dffffc0000000000 RCX: ffff88801b685a00 [ 947.615884][ T7358] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0 [ 947.623872][ T7358] RBP: ffffc9000be17af8 R08: ffffffff911c656f R09: 1ffffffff2238cad [ 947.631874][ T7358] R10: dffffc0000000000 R11: fffffbfff2238cae R12: ffff888021378c90 [ 947.639877][ T7358] R13: 1ffff920017c2f4c R14: ffff88805c48b5b8 R15: 000000000000001f [ 947.647878][ T7358] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 947.653458][ T7358] ? mutex_lock_nested+0x20/0x20 [ 947.658424][ T7358] ? trace_rdev_return_void+0x1c0/0x1c0 [ 947.663999][ T7358] cfg80211_process_wdev_events+0x3bc/0x550 [ 947.669921][ T7358] cfg80211_process_rdev_events+0xa1/0x110 [ 947.675859][ T7358] cfg80211_event_work+0x2f/0x40 [ 947.680847][ T7358] ? process_scheduled_works+0x96f/0x15d0 [ 947.686597][ T7358] process_scheduled_works+0xa5d/0x15d0 [ 947.692198][ T7358] ? worker_attach_to_pool+0x380/0x380 [ 947.697685][ T7358] ? assign_work+0x3d2/0x5d0 [ 947.702303][ T7358] worker_thread+0xa55/0xfc0 [ 947.706936][ T7358] kthread+0x2fa/0x390 [ 947.711020][ T7358] ? pr_cont_work+0x560/0x560 [ 947.715721][ T7358] ? kthread_blkcg+0xd0/0xd0 [ 947.720348][ T7358] ret_from_fork+0x48/0x80 [ 947.724787][ T7358] ? kthread_blkcg+0xd0/0xd0 [ 947.729417][ T7358] ret_from_fork_asm+0x11/0x20 [ 947.734239][ T7358] [ 947.737871][ T7358] Kernel Offset: disabled [ 947.742285][ T7358] Rebooting in 86400 seconds..