last executing test programs: 13.327888956s ago: executing program 0 (id=2298): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x22}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0xd, 0x30, &(0x7f0000000240)=""/48, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xd, 0xc, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x42c, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0x4, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000a00000007f0ffffff0000840900000000002e5f2e002e5f2e00"], 0x0, 0x2e, 0x0, 0x1, 0x9}, 0x28) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x11}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB], 0x10) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x6, 0x21, &(0x7f0000001540), 0x20) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r6, r6, 0x2f}, 0x20) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r8, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r9, r9, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB='/\x00\x00\x00\b\x00', @ANYRES32=r7, @ANYBLOB, @ANYRES64], 0x20) 12.334663798s ago: executing program 0 (id=2300): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f00000015c0)="6b75b597d05d969a191023", 0xb}, {&(0x7f0000001740)="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", 0x2ea}], 0x4, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 12.29485417s ago: executing program 0 (id=2301): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)) 12.094942109s ago: executing program 0 (id=2305): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x2fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000035000bfbd15a", 0xa}], 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="140000000400000004000000090000000000a0d852b0a5a9b3cd7f1ae29d94b1278af126788f219f28489efc781c0b38b6c03a9ac8216660c7369ea817726f74dddbe04ae778fa1cfe759590be992448a61fe93a5d34a9866d9c9b212b4c97e201bdd06338bb8cce2371cc96aedb5063a3c9a406d8406f8195d86bf7520c7bf46964d90f2d6230d9cc8af3bb0b8b28690d0583582478b79cba6bb59abb378edf563fe43b42fb58823ec4", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext, 0x101000, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000040000000280000080000400", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000037205faf05aa66700506544ca203000000000000"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYRESDEC=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf7103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x40, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = socket$kcm(0x10, 0x2, 0x4) close(r9) socket$kcm(0x10, 0x2, 0x0) 11.674654226s ago: executing program 0 (id=2310): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0x20, 0x2, 0x40, 0x0, 0x7fffffffffffffff, 0x8, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x2ee8, 0x4}, 0x108208, 0x4, 0x4, 0x4, 0x7, 0x1, 0x6, 0x0, 0x5, 0x0, 0x7fffffffffffffff}, 0x0, 0x4, r1, 0x9) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000250000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x110e22fff6) recvmsg$unix(r5, &(0x7f0000001fc0)={&(0x7f00000009c0), 0x6e, &(0x7f0000001e00)=[{0x0}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/215, 0xd7}, {&(0x7f0000000b80)=""/181, 0xb5}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/192, 0xc0}, {&(0x7f0000001d00)=""/221, 0xdd}], 0x7, &(0x7f0000001e80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}, 0x40000040) close(r9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_subtree(r10, 0x0, 0x13) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r7, &(0x7f00000003c0), 0x0}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r3) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000000) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000018910000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000f386000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0xb, 0x5, 0x6}, 0x10, 0x10b20, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000400)=[{0x3, 0x4, 0xc}, {0x4, 0x1, 0xa}, {0x5, 0x5, 0x5, 0xc}, {0x4, 0x5, 0x0, 0xb}, {0x0, 0x2, 0xa, 0xc}, {0x1, 0x2, 0x4}, {0x3, 0x4, 0x8, 0x8}], 0x10, 0x7ff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r11) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000980)={&(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000005c0)="75cb192d7010c852a568276a4380688dc47249fa240eac4d7bd95d1018edf6800f2a3237723ac5355d28084871d4a15e1201c9748b7abe093f2c96cb0aff597f27ea29f8dbf145e7b7eff40abc50e760d0f6a6a77c547811e47af84142e847b77859427300fd", 0x66}, {&(0x7f0000000640)="fa36d84d301f8654379027df7a8d2b65d02f033b5e343835c4814f565c6bcf9a6161763d41517b2acce421ad1a13b495c1a3bf9aa716e10b8099fa7fb4f78c9d831339068180aee6d9c38026a83ebfcfda344f4fdb83c4310a757bdf426517123c80e7fbe151e9202357f9a7a9409d21081adbfdaae84c9f259725f4e9e9520edf208929d7636c32d996e83fa1df225ea4170d6c82d4e61c315f40d3ed968da90f86bfd6cc3559fc2580d63182f2a179b1ba894bf83a81a3fe9067df45b15119bad2931331e9ebccc6d2c9d2725045f03c157ffab700737354578bedbb4f476cafd077436bc2", 0xe6}, {&(0x7f0000000740)="c46d3095f595a8f8135dc86d026fa02260415dcaba82f6348510f8a58425fe9788fe6ed136731753e9ff8c3a869ebf02d91e386445bcb8b868bc8d31a73b8d911f8b1fd561356c299a5b14e141e3cb91580b9cf63f9a5a22dd3605163207f90795640f256c8bf5bebe5bf78cea0029dd2d7569f93787f5023d2c70e71e2e7a06f78261bd00b231d10308d9bac7e716d531928e8c41e5cb757f468f2e008e66a0df4e21f1e1199c214c8d40663eacdefb480642d1dcb5c2d7b408aa67615b5290029394a677e19501d9d571a4382589ab9798", 0xd2}, {&(0x7f0000000840)="68ccfbeeabb0ce3e2b1c944dafcaaacd31cc2126100adb9d860b19e847cc817dedfbb3f92abca307cdbeaafa3a92fa83dbc6d355b984d238034c6e42d536823b5dbc123c93c6553174b99a466eeeaa4694df064d720779b4ae583609c2c3a32f5f7b60c4bea1ea4c8868348e53dd41a37152", 0x72}], 0x4, &(0x7f0000000900)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffe}}], 0x30}, 0x48815) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07276702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 10.221380448s ago: executing program 0 (id=2316): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x9) close(0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map, r1, 0xf, 0x8, 0x0, @void, @value=r1, @void, @void, r4}, 0x20) socket$kcm(0xa, 0x1, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8918, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a990053", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.499572258s ago: executing program 3 (id=2341): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x2fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000035000bfbd15a", 0xa}], 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="140000000400000004000000090000000000a0d852b0a5a9b3cd7f1ae29d94b1278af126788f219f28489efc781c0b38b6c03a9ac8216660c7369ea817726f74dddbe04ae778fa1cfe759590be992448a61fe93a5d34a9866d9c9b212b4c97e201bdd06338bb8cce2371cc96aedb5063a3c9a406d8406f8195d86bf7520c7bf46964d90f2d6230d9cc8af3bb0b8b28690d0583582478b79cba6bb59abb378edf563fe43b42fb58823ec4", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext, 0x101000, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000040000000280000080000400", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000037205faf05aa66700506544ca203000000000000"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYRESDEC=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf7103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x40, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = socket$kcm(0x10, 0x2, 0x4) close(r9) socket$kcm(0x10, 0x2, 0x0) 5.329520395s ago: executing program 2 (id=2342): r0 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d2f, 0x1040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x4, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x10000000000, 0x0, 0x5, 0x8000000000000, 0xffffffff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0x1f, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0xf, 0x8, 0x0, @void, @value, @void, @void, r4}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@fallback=r3, 0xffffffffffffffff, 0x2c, 0x2000, 0x0, @value=r5, @void, @void, @void, r4}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800483f0000005e2900421803001825800000000f00000280000c0012", 0x2e}], 0x1}, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000040)="25a053f271a76d2688ca4c6588a8", 0x0, 0x6, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 4.930397612s ago: executing program 3 (id=2344): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x894b, 0x0) 4.857064115s ago: executing program 2 (id=2345): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82744, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x81, 0x7}, 0x11efa, 0x4, 0x98, 0x2, 0x2, 0x8000, 0xfffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xf, 0x8, 0x40, 0xc0, 0x1, 0x6}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x1003, r4}, 0x38) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51b"], 0xfe33) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0, 0x2000000}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0xfff) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000009c0)={&(0x7f00000006c0)="7fe3702a3e4c119ac8aa45dd3c270de5cd0419d027bda18351adfa87b984088cbe0f3989089265327c20885106e58db5bdce491fafac6733ca794cef10cd0c5b1f70e7aa7d52514a7ca5a117e68015423b33aba19dbc67f202cc46f8b0147ce99ef9ce9bc2d2f6483bd6ce04c75802d004a253139d10bc4acd8173b3789008acfd2b310790615b40519a9f777b7a955148eb1901d6b578bec2902e2e39aec23c252796bdf89d42b4a6d2565d1f68f34f3d6daddf162931e34d0c7991bc3dc18d203803b14e2112b02ec325f9adef8a25dea76988b07809445bbd9e6283c216a329f18555772b81df6a862a66dbfcb2a29bae", &(0x7f00000007c0)=""/209, &(0x7f00000008c0)="6dca90212883e3e822ba7d74ff141a3af614a957ab5c3ee2dc27ab208b82a2fdf050788f7be97e420e848321c313ae508fb5321e75d1f68159d4eb350983b97e9100516d7d", &(0x7f0000000940)="f153a64a090593426f65a96d297319dab1c25ad7b444d1baa89d8949a635e59fedd8497ebefc408bba7aa27530ddb9bacae7071b37ec88414724f2d9bd82b11e83128b1925db3a883f7c2e113f19ba0a25bd0a2a8beeac75855c799509823d33d200293631c6aa353a86fc935aa9cd06ba2837e933df96b7f0f1bb1f", 0x400, r4}, 0x38) 4.479607011s ago: executing program 3 (id=2348): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x454, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff"], 0x48) r5 = openat$cgroup_ro(r2, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000008b00000035000000002b0000850000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x41100}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xd, 0x200, 0x40000000, 0xfffffff9, 0x8172, 0xffffffffffffffff, 0x5f4, '\x00', 0x0, r3, 0x3, 0x3, 0xfffff001, 0x0, @value=r5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x18, &(0x7f0000000a40)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf853}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x3, 0x6, 0x7, 0x18, 0xffffffffffffffff}, @ldst={0x3, 0x0, 0x0, 0x282e2305a497ce24, 0x3, 0x30, 0x10}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @jmp={0x5, 0x1, 0x1, 0x7, 0xa, 0xfffffffffffffff8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000000b00)='syzkaller\x00', 0x1, 0xd8, &(0x7f0000000b40)=""/216, 0xa1980, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000d00)=[r5, r4, r2, r6, r4, r4, r4, r5, r5], &(0x7f0000000d40)=[{0x5, 0x2, 0xf, 0xe}, {0x7f, 0x4, 0x10, 0x4}, {0x2, 0x2, 0xd, 0x6}], 0x10, 0xae0b}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/135, 0x87}, {&(0x7f0000000140)=""/195, 0xc3}, {&(0x7f0000000280)=""/215, 0xd7}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000400)=""/95, 0x5f}, {&(0x7f0000000480)=""/97, 0x61}, {&(0x7f0000000500)=""/156, 0x9c}], 0x7}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r5, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f0000000740)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xcd, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x5, 0x0, r7, 0x1, '\x00', r9, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) 3.599953948s ago: executing program 2 (id=2349): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d00000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/N'], 0x6a) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xd, 0x8, 0x8, 0x5, 0x0, 0x80000000, 0x2002, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffafe5, 0x0, @perf_config_ext={0x100000000, 0xfffffffffffff819}, 0x2000, 0x1, 0x0, 0x5, 0x2, 0x2, 0x8001, 0x0, 0xd2, 0x0, 0xfb}, 0x0, 0x3, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x14, &(0x7f0000000100), 0x120) sendmsg(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000300)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x4}}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x240}, 0x40) 3.526750771s ago: executing program 1 (id=2350): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x80, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0xe4, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 3.367190248s ago: executing program 3 (id=2351): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x2fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000035000bfbd15a", 0xa}], 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="140000000400000004000000090000000000a0d852b0a5a9b3cd7f1ae29d94b1278af126788f219f28489efc781c0b38b6c03a9ac8216660c7369ea817726f74dddbe04ae778fa1cfe759590be992448a61fe93a5d34a9866d9c9b212b4c97e201bdd06338bb8cce2371cc96aedb5063a3c9a406d8406f8195d86bf7520c7bf46964d90f2d6230d9cc8af3bb0b8b28690d0583582478b79cba6bb59abb378edf563fe43b42fb58823ec4", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext, 0x101000, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000040000000280000080000400", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000037205faf05aa66700506544ca203000000000000"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYRESDEC=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf7103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x40, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = socket$kcm(0x10, 0x2, 0x4) close(r9) socket$kcm(0x10, 0x2, 0x0) 3.243853763s ago: executing program 1 (id=2352): r0 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d2f, 0x1040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x4, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x10000000000, 0x0, 0x5, 0x8000000000000, 0xffffffff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0x1f, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0xf, 0x8, 0x0, @void, @value, @void, @void, r4}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@fallback=r3, 0xffffffffffffffff, 0x2c, 0x2000, 0x0, @value=r5, @void, @void, @void, r4}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800483f0000005e2900421803001825800000000f00000280000c0012", 0x2e}], 0x1}, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x40, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x1, @perf_config_ext={0x408003, 0xaea}, 0x14105, 0x2e, 0xfffffc03, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.045226522s ago: executing program 2 (id=2353): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x7, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$kcm(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@can, 0x80, &(0x7f0000000240), 0x0, &(0x7f00000003c0)=""/51, 0x33}, 0x142) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091114d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0xfd122f3cb48753c8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1}, 0x20000010) 2.799515762s ago: executing program 3 (id=2354): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x2fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000035000bfbd15a806c8c6f94f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, 0x0, &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000037205faf05aa66700506544ca20300"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESDEC=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf7103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x40, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) 2.738057685s ago: executing program 2 (id=2355): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x600000000000}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x5865, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703021201f314000600002fb96dbcf706e10500000086ddffff1144ee162bd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b11ba0000000000851000000200000085000000050000009500a50505000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000b949d81af3d0e5be00000000121f0000000000950000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$kcm(0xa, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000003000000000000000240000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000e00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.730136855s ago: executing program 1 (id=2362): r0 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d2f, 0x1040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x4, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x10000000000, 0x0, 0x5, 0x8000000000000, 0xffffffff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0x1f, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0xf, 0x8, 0x0, @void, @value, @void, @void, r4}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@fallback=r3, 0xffffffffffffffff, 0x2c, 0x2000, 0x0, @value=r5, @void, @void, @void, r4}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800483f0000005e2900421803001825800000000f00000280000c0012", 0x2e}], 0x1}, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x40, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x1, @perf_config_ext={0x408003, 0xaea}, 0x14105, 0x2e, 0xfffffc03, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 908.288152ms ago: executing program 3 (id=2356): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82744, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x81, 0x7}, 0x11efa, 0x4, 0x98, 0x2, 0x2, 0x8000, 0xfffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xf, 0x8, 0x40, 0xc0, 0x1, 0x6}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x1003, r4}, 0x38) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51b"], 0xfe33) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0, 0x2000000}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0xfff) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000009c0)={&(0x7f00000006c0)="7fe3702a3e4c119ac8aa45dd3c270de5cd0419d027bda18351adfa87b984088cbe0f3989089265327c20885106e58db5bdce491fafac6733ca794cef10cd0c5b1f70e7aa7d52514a7ca5a117e68015423b33aba19dbc67f202cc46f8b0147ce99ef9ce9bc2d2f6483bd6ce04c75802d004a253139d10bc4acd8173b3789008acfd2b310790615b40519a9f777b7a955148eb1901d6b578bec2902e2e39aec23c252796bdf89d42b4a6d2565d1f68f34f3d6daddf162931e34d0c7991bc3dc18d203803b14e2112b02ec325f9adef8a25dea76988b07809445bbd9e6283c216a329f18555772b81df6a862a66dbfcb2a29bae", &(0x7f00000007c0)=""/209, &(0x7f00000008c0)="6dca90212883e3e822ba7d74ff141a3af614a957ab5c3ee2dc27ab208b82a2fdf050788f7be97e420e848321c313ae508fb5321e75d1f68159d4eb350983b97e9100516d7d", &(0x7f0000000940)="f153a64a090593426f65a96d297319dab1c25ad7b444d1baa89d8949a635e59fedd8497ebefc408bba7aa27530ddb9bacae7071b37ec88414724f2d9bd82b11e83128b1925db3a883f7c2e113f19ba0a25bd0a2a8beeac75855c799509823d33d200293631c6aa353a86fc935aa9cd06ba2837e933df96b7f0f1bb1f", 0x400, r4}, 0x38) 787.370547ms ago: executing program 1 (id=2357): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0x18, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0x2, 0x200000000000006, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000040), 0x4) socket$kcm(0x11, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000140)={r0}) 703.168191ms ago: executing program 2 (id=2358): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff000032727f3fc92c2b4f655ec80000bfa100000000000007010000f8fffeffb702000008004000b70300000300000085000000060000008500000023"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0xffb8}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="2e0000003600f7ffffff80698c6390090124fc602f6e354016000180008e9279ed91d47825d7563c5ddbeceb16e7", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x80, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="850000008a0000007600000000000000270000000000000095000000000000005673fb4497a09f2c5ced8780215b5bd684c4e37d8cee27e6338bc041"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="250a0000e4000000611198000000000018000000000000000000000000000000950000000000fe53c6dc2ecb791fd0aeb275b7242100f2a7fc5c41450b0000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 554.383807ms ago: executing program 1 (id=2359): r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f00000010c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="150a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f884c1fa9f46b3472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a39a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) close(r1) 0s ago: executing program 1 (id=2360): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d00000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/N'], 0x6a) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xd, 0x8, 0x8, 0x5, 0x0, 0x80000000, 0x2002, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffafe5, 0x0, @perf_config_ext={0x100000000, 0xfffffffffffff819}, 0x2000, 0x1, 0x0, 0x5, 0x2, 0x2, 0x8001, 0x0, 0xd2, 0x0, 0xfb}, 0x0, 0x3, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x14, &(0x7f0000000100), 0x120) sendmsg(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000300)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x4}}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x240}, 0x40) kernel console output (not intermixed with test programs): 66750][ T7797] R13: 00007fba8d416038 R14: 00007fba8d415fa0 R15: 00007ffdaa331278 [ 218.066783][ T7797] [ 218.237381][ T7802] netlink: 48 bytes leftover after parsing attributes in process `syz.2.693'. [ 218.266782][ T7795] netlink: 60 bytes leftover after parsing attributes in process `syz.3.692'. [ 218.306591][ T7795] netlink: 60 bytes leftover after parsing attributes in process `syz.3.692'. [ 218.340187][ T7798] netlink: 60 bytes leftover after parsing attributes in process `syz.3.692'. [ 218.416092][ T7802] netlink: 14 bytes leftover after parsing attributes in process `syz.2.693'. [ 218.442253][ T7802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.693'. [ 218.485818][ T7802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.693'. [ 218.625655][ T7802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.693'. [ 219.436614][ T7820] netlink: 14 bytes leftover after parsing attributes in process `syz.3.700'. [ 223.236977][ T7833] netlink: 'syz.1.703': attribute type 2 has an invalid length. [ 223.244700][ T7833] netlink: 'syz.1.703': attribute type 8 has an invalid length. [ 223.252783][ T7833] __nla_validate_parse: 3 callbacks suppressed [ 223.252797][ T7833] netlink: 132 bytes leftover after parsing attributes in process `syz.1.703'. [ 223.275416][ T7832] netlink: 48 bytes leftover after parsing attributes in process `syz.0.704'. [ 223.284728][ T7836] netlink: 48 bytes leftover after parsing attributes in process `syz.3.705'. [ 223.315530][ T7837] netlink: 14 bytes leftover after parsing attributes in process `syz.0.704'. [ 223.348196][ T7838] netlink: 14 bytes leftover after parsing attributes in process `syz.3.705'. [ 223.369700][ T7839] netlink: 60 bytes leftover after parsing attributes in process `syz.0.704'. [ 223.391696][ T7840] netlink: 60 bytes leftover after parsing attributes in process `syz.3.705'. [ 224.497044][ T7874] netlink: 10 bytes leftover after parsing attributes in process `syz.1.717'. [ 224.548659][ T7874] netlink: 'syz.1.717': attribute type 10 has an invalid length. [ 224.576595][ T7874] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.717'. [ 224.679821][ T7879] netlink: 48 bytes leftover after parsing attributes in process `syz.3.718'. [ 225.441593][ T7901] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.950178][ T7900] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.605649][ T7953] __nla_validate_parse: 20 callbacks suppressed [ 228.605670][ T7953] netlink: 48 bytes leftover after parsing attributes in process `syz.2.747'. [ 228.742137][ T7953] netlink: 14 bytes leftover after parsing attributes in process `syz.2.747'. [ 228.754284][ T7953] netlink: 60 bytes leftover after parsing attributes in process `syz.2.747'. [ 228.785587][ T7953] netlink: 60 bytes leftover after parsing attributes in process `syz.2.747'. [ 228.854679][ T7953] netlink: 60 bytes leftover after parsing attributes in process `syz.2.747'. [ 229.959240][ T7990] netlink: 'syz.3.762': attribute type 10 has an invalid length. [ 229.992703][ T7990] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.762'. [ 230.055438][ T7987] netlink: 10 bytes leftover after parsing attributes in process `syz.3.762'. [ 230.211918][ T7993] netlink: 'syz.3.763': attribute type 2 has an invalid length. [ 230.230954][ T7993] netlink: 'syz.3.763': attribute type 8 has an invalid length. [ 230.239381][ T7993] netlink: 132 bytes leftover after parsing attributes in process `syz.3.763'. [ 230.258570][ T7995] netlink: 38 bytes leftover after parsing attributes in process `syz.1.771'. [ 230.275617][ T7995] netlink: 38 bytes leftover after parsing attributes in process `syz.1.771'. [ 231.120798][ T8010] netlink: 'syz.2.772': attribute type 10 has an invalid length. [ 233.655573][ T8091] __nla_validate_parse: 15 callbacks suppressed [ 233.655591][ T8091] netlink: 38 bytes leftover after parsing attributes in process `syz.0.805'. [ 233.672250][ T8091] netlink: 38 bytes leftover after parsing attributes in process `syz.0.805'. [ 233.690323][ T8091] netlink: 38 bytes leftover after parsing attributes in process `syz.0.805'. [ 233.701146][ T8091] netlink: 38 bytes leftover after parsing attributes in process `syz.0.805'. [ 235.069921][ T8109] netlink: 60 bytes leftover after parsing attributes in process `syz.2.810'. [ 235.135147][ T8107] netlink: 48 bytes leftover after parsing attributes in process `syz.2.810'. [ 235.182694][ T8109] netlink: 60 bytes leftover after parsing attributes in process `syz.2.810'. [ 235.194921][ T8115] netlink: 60 bytes leftover after parsing attributes in process `syz.2.810'. [ 235.354651][ T8120] netlink: 14 bytes leftover after parsing attributes in process `syz.2.813'. [ 235.453282][ T8122] netlink: 38 bytes leftover after parsing attributes in process `syz.3.814'. [ 235.648528][ T8127] netlink: 'syz.3.817': attribute type 10 has an invalid length. [ 238.730191][ T8180] __nla_validate_parse: 30 callbacks suppressed [ 238.730210][ T8180] netlink: 38 bytes leftover after parsing attributes in process `syz.0.834'. [ 238.775533][ T8180] netlink: 38 bytes leftover after parsing attributes in process `syz.0.834'. [ 238.806416][ T8180] netlink: 38 bytes leftover after parsing attributes in process `syz.0.834'. [ 238.845612][ T8180] netlink: 38 bytes leftover after parsing attributes in process `syz.0.834'. [ 239.491429][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'. [ 239.516697][ T8189] netlink: 152 bytes leftover after parsing attributes in process `syz.0.838'. [ 240.542098][ T8209] netlink: 38 bytes leftover after parsing attributes in process `syz.1.846'. [ 240.575676][ T8209] netlink: 38 bytes leftover after parsing attributes in process `syz.1.846'. [ 240.596577][ T8209] netlink: 38 bytes leftover after parsing attributes in process `syz.1.846'. [ 240.617347][ T8209] netlink: 38 bytes leftover after parsing attributes in process `syz.1.846'. [ 241.343419][ T8224] netlink: 'syz.2.850': attribute type 10 has an invalid length. [ 242.230059][ T8244] FAULT_INJECTION: forcing a failure. [ 242.230059][ T8244] name failslab, interval 1, probability 0, space 0, times 0 [ 242.259290][ T8244] CPU: 1 PID: 8244 Comm: syz.2.860 Not tainted syzkaller #0 [ 242.266694][ T8244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.276835][ T8244] Call Trace: [ 242.280184][ T8244] [ 242.283179][ T8244] dump_stack_lvl+0x18c/0x250 [ 242.287939][ T8244] ? sctp_sendmsg+0x1575/0x28c0 [ 242.292866][ T8244] ? ___sys_sendmsg+0x2a6/0x360 [ 242.297799][ T8244] ? show_regs_print_info+0x20/0x20 [ 242.303089][ T8244] ? load_image+0x420/0x420 [ 242.307737][ T8244] should_fail_ex+0x39d/0x4d0 [ 242.312515][ T8244] should_failslab+0x9/0x20 [ 242.317104][ T8244] slab_pre_alloc_hook+0x59/0x310 [ 242.322216][ T8244] ? sctp_add_bind_addr+0x8c/0x360 [ 242.327390][ T8244] __kmem_cache_alloc_node+0x53/0x250 [ 242.332828][ T8244] ? sctp_add_bind_addr+0x8c/0x360 [ 242.337991][ T8244] kmalloc_trace+0x2a/0xe0 [ 242.342476][ T8244] sctp_add_bind_addr+0x8c/0x360 [ 242.347477][ T8244] sctp_copy_local_addr_list+0x315/0x4f0 [ 242.353171][ T8244] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 242.358943][ T8244] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 242.365073][ T8244] ? sctp_v4_is_any+0x35/0x60 [ 242.369803][ T8244] ? sctp_copy_one_addr+0x8c/0x350 [ 242.374986][ T8244] sctp_bind_addr_copy+0xb3/0x3c0 [ 242.380066][ T8244] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 242.386459][ T8244] sctp_connect_new_asoc+0x2f9/0x6a0 [ 242.391814][ T8244] ? __sctp_connect+0xd80/0xd80 [ 242.396750][ T8244] ? __local_bh_enable_ip+0x13a/0x1c0 [ 242.402178][ T8244] ? _local_bh_enable+0xa0/0xa0 [ 242.407076][ T8244] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 242.412931][ T8244] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 242.418793][ T8244] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 242.424394][ T8244] ? security_sctp_bind_connect+0x89/0xb0 [ 242.430177][ T8244] sctp_sendmsg+0x1575/0x28c0 [ 242.434947][ T8244] ? sctp_getsockopt+0xb60/0xb60 [ 242.439940][ T8244] ? aa_sk_perm+0x83c/0x970 [ 242.444529][ T8244] ? aa_af_perm+0x330/0x330 [ 242.449091][ T8244] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 242.455572][ T8244] ? sock_rps_record_flow+0x19/0x3f0 [ 242.460923][ T8244] ? inet_sendmsg+0x7c/0x2f0 [ 242.465572][ T8244] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 242.470918][ T8244] ? security_socket_sendmsg+0x80/0xa0 [ 242.476427][ T8244] ? inet_send_prepare+0x260/0x260 [ 242.481600][ T8244] ____sys_sendmsg+0x5ba/0x960 [ 242.486428][ T8244] ? __lock_acquire+0x7d40/0x7d40 [ 242.491523][ T8244] ? __asan_memset+0x22/0x40 [ 242.496170][ T8244] ? __sys_sendmsg_sock+0x30/0x30 [ 242.501244][ T8244] ? __import_iovec+0x5f2/0x850 [ 242.506180][ T8244] ? import_iovec+0x73/0xa0 [ 242.510748][ T8244] ___sys_sendmsg+0x2a6/0x360 [ 242.515473][ T8244] ? get_pid_task+0x20/0x1e0 [ 242.520131][ T8244] ? __sys_sendmsg+0x2a0/0x2a0 [ 242.525004][ T8244] ? __lock_acquire+0x7d40/0x7d40 [ 242.530154][ T8244] __se_sys_sendmsg+0x1c2/0x2b0 [ 242.535070][ T8244] ? __x64_sys_sendmsg+0x80/0x80 [ 242.540099][ T8244] ? lockdep_hardirqs_on+0x98/0x150 [ 242.545377][ T8244] do_syscall_64+0x55/0xa0 [ 242.549846][ T8244] ? clear_bhb_loop+0x40/0x90 [ 242.554577][ T8244] ? clear_bhb_loop+0x40/0x90 [ 242.559320][ T8244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.565263][ T8244] RIP: 0033:0x7fb66459ce59 [ 242.569742][ T8244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.589400][ T8244] RSP: 002b:00007fb665424028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.597872][ T8244] RAX: ffffffffffffffda RBX: 00007fb664815fa0 RCX: 00007fb66459ce59 [ 242.605894][ T8244] RDX: 0000000000000810 RSI: 0000200000000b80 RDI: 0000000000000003 [ 242.613915][ T8244] RBP: 00007fb665424090 R08: 0000000000000000 R09: 0000000000000000 [ 242.621934][ T8244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.629982][ T8244] R13: 00007fb664816038 R14: 00007fb664815fa0 R15: 00007fffcd497158 [ 242.638133][ T8244] [ 243.019536][ T8253] netlink: 'syz.0.863': attribute type 10 has an invalid length. [ 243.851082][ T8267] __nla_validate_parse: 30 callbacks suppressed [ 243.851103][ T8267] netlink: 38 bytes leftover after parsing attributes in process `syz.2.868'. [ 243.894992][ T8269] netlink: 38 bytes leftover after parsing attributes in process `syz.2.868'. [ 244.158311][ T8276] FAULT_INJECTION: forcing a failure. [ 244.158311][ T8276] name failslab, interval 1, probability 0, space 0, times 0 [ 244.186913][ T8276] CPU: 1 PID: 8276 Comm: syz.1.872 Not tainted syzkaller #0 [ 244.194296][ T8276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.204413][ T8276] Call Trace: [ 244.207736][ T8276] [ 244.210719][ T8276] dump_stack_lvl+0x18c/0x250 [ 244.215466][ T8276] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 244.222113][ T8276] ? show_regs_print_info+0x20/0x20 [ 244.227369][ T8276] ? load_image+0x420/0x420 [ 244.231900][ T8276] should_fail_ex+0x39d/0x4d0 [ 244.236603][ T8276] should_failslab+0x9/0x20 [ 244.241126][ T8276] slab_pre_alloc_hook+0x59/0x310 [ 244.246189][ T8276] kmem_cache_alloc+0x5a/0x2d0 [ 244.250986][ T8276] ? dst_alloc+0x105/0x170 [ 244.255435][ T8276] dst_alloc+0x105/0x170 [ 244.259720][ T8276] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 244.265815][ T8276] ? ip_route_output_key_hash_rcu+0x1321/0x2370 [ 244.272083][ T8276] ? ip_route_output_key_hash+0x13d/0x330 [ 244.277819][ T8276] ip_route_output_key_hash+0x1f3/0x330 [ 244.283385][ T8276] ? ip_route_input_rcu+0x30f0/0x30f0 [ 244.288780][ T8276] ? ip_cmsg_send+0x9c0/0xa70 [ 244.293472][ T8276] ip_route_output_flow+0x2a/0x150 [ 244.298598][ T8276] ? security_sk_classify_flow+0x7b/0x90 [ 244.304247][ T8276] udp_sendmsg+0x1603/0x23b0 [ 244.308856][ T8276] ? __lock_acquire+0x1347/0x7d40 [ 244.313896][ T8276] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 244.318784][ T8276] ? udp_cmsg_send+0x350/0x350 [ 244.323601][ T8276] ? __lock_acquire+0x1273/0x7d40 [ 244.328654][ T8276] ? verify_lock_unused+0x140/0x140 [ 244.333885][ T8276] ? lock_chain_count+0x20/0x20 [ 244.338773][ T8276] ? verify_lock_unused+0x140/0x140 [ 244.344040][ T8276] udpv6_sendmsg+0x790/0x2390 [ 244.348763][ T8276] ? print_unlock_imbalance_bug+0x160/0x160 [ 244.354671][ T8276] ? udp_v6_early_demux+0xf80/0xf80 [ 244.359897][ T8276] ? lock_chain_count+0x20/0x20 [ 244.364772][ T8276] ? _local_bh_enable+0xa0/0xa0 [ 244.369639][ T8276] ? inet_send_prepare+0x1b3/0x260 [ 244.374785][ T8276] ? inet_send_prepare+0x1b3/0x260 [ 244.379950][ T8276] ? inet6_sendmsg+0x5f/0xd0 [ 244.384580][ T8276] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 244.389827][ T8276] ____sys_sendmsg+0x5ba/0x960 [ 244.394642][ T8276] ? __lock_acquire+0x7d40/0x7d40 [ 244.399728][ T8276] ? __sys_sendmsg_sock+0x30/0x30 [ 244.404798][ T8276] ? __import_iovec+0x3fa/0x850 [ 244.409713][ T8276] ? import_iovec+0x73/0xa0 [ 244.414273][ T8276] ___sys_sendmsg+0x2a6/0x360 [ 244.419000][ T8276] ? get_pid_task+0x20/0x1e0 [ 244.423651][ T8276] ? __sys_sendmsg+0x2a0/0x2a0 [ 244.428487][ T8276] ? __lock_acquire+0x7d40/0x7d40 [ 244.433599][ T8276] __se_sys_sendmsg+0x1c2/0x2b0 [ 244.438504][ T8276] ? __x64_sys_sendmsg+0x80/0x80 [ 244.443524][ T8276] ? lockdep_hardirqs_on+0x98/0x150 [ 244.448780][ T8276] do_syscall_64+0x55/0xa0 [ 244.453243][ T8276] ? clear_bhb_loop+0x40/0x90 [ 244.457973][ T8276] ? clear_bhb_loop+0x40/0x90 [ 244.462703][ T8276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.468644][ T8276] RIP: 0033:0x7f486659ce59 [ 244.473103][ T8276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.492752][ T8276] RSP: 002b:00007f486749e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.501193][ T8276] RAX: ffffffffffffffda RBX: 00007f4866815fa0 RCX: 00007f486659ce59 [ 244.509183][ T8276] RDX: 0000000000000840 RSI: 0000200000000380 RDI: 0000000000000003 [ 244.517164][ T8276] RBP: 00007f486749e090 R08: 0000000000000000 R09: 0000000000000000 [ 244.525149][ T8276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.533161][ T8276] R13: 00007f4866816038 R14: 00007f4866815fa0 R15: 00007fffaa78b938 [ 244.541199][ T8276] [ 244.554282][ T8279] netlink: 48 bytes leftover after parsing attributes in process `syz.2.873'. [ 244.559685][ T8282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.873'. [ 244.586118][ T8281] netlink: 14 bytes leftover after parsing attributes in process `syz.2.873'. [ 244.614245][ T8282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.873'. [ 244.709404][ T8278] netlink: 60 bytes leftover after parsing attributes in process `syz.2.873'. [ 244.850448][ T8286] Driver unsupported XDP return value 0 on prog (id 377) dev N/A, expect packet loss! [ 245.026187][ T8292] netlink: 14 bytes leftover after parsing attributes in process `syz.2.877'. [ 245.661783][ T8301] netlink: 38 bytes leftover after parsing attributes in process `syz.3.881'. [ 245.685729][ T8301] netlink: 38 bytes leftover after parsing attributes in process `syz.3.881'. [ 247.134552][ T8338] netlink: 'syz.2.894': attribute type 10 has an invalid length. [ 248.878129][ T8368] __nla_validate_parse: 24 callbacks suppressed [ 248.878149][ T8368] netlink: 38 bytes leftover after parsing attributes in process `syz.0.904'. [ 248.937983][ T8368] netlink: 38 bytes leftover after parsing attributes in process `syz.0.904'. [ 249.008597][ T8369] netlink: 38 bytes leftover after parsing attributes in process `syz.0.904'. [ 249.045808][ T8370] netlink: 38 bytes leftover after parsing attributes in process `syz.0.904'. [ 249.152919][ T8374] netlink: 10 bytes leftover after parsing attributes in process `syz.1.906'. [ 249.230147][ T8374] netlink: 'syz.1.906': attribute type 10 has an invalid length. [ 249.245797][ T8374] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.906'. [ 250.010368][ T8395] netlink: 14 bytes leftover after parsing attributes in process `syz.0.913'. [ 250.434674][ T8404] netlink: 38 bytes leftover after parsing attributes in process `syz.2.915'. [ 250.461075][ T8404] netlink: 38 bytes leftover after parsing attributes in process `syz.2.915'. [ 250.475991][ T8404] netlink: 38 bytes leftover after parsing attributes in process `syz.2.915'. [ 253.300877][ T8482] netlink: 'syz.0.947': attribute type 10 has an invalid length. [ 253.982612][ T8504] __nla_validate_parse: 41 callbacks suppressed [ 253.982635][ T8504] netlink: 48 bytes leftover after parsing attributes in process `syz.1.956'. [ 254.117346][ T8504] netlink: 14 bytes leftover after parsing attributes in process `syz.1.956'. [ 254.150125][ T8504] netlink: 60 bytes leftover after parsing attributes in process `syz.1.956'. [ 254.171368][ T8504] netlink: 60 bytes leftover after parsing attributes in process `syz.1.956'. [ 254.262830][ T8504] netlink: 60 bytes leftover after parsing attributes in process `syz.1.956'. [ 254.321159][ T8509] netlink: 'syz.3.958': attribute type 10 has an invalid length. [ 254.330352][ T8509] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.958'. [ 254.450127][ T8514] netlink: 'syz.2.959': attribute type 10 has an invalid length. [ 254.465550][ T8514] netlink: 40 bytes leftover after parsing attributes in process `syz.2.959'. [ 254.482299][ T8514] macvlan1: entered promiscuous mode [ 254.504854][ T8514] batman_adv: batadv0: Adding interface: macvlan1 [ 254.526558][ T8514] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.553812][ T8514] batman_adv: batadv0: Interface activated: macvlan1 [ 254.570925][ T8518] netlink: 38 bytes leftover after parsing attributes in process `syz.3.961'. [ 254.611288][ T8518] netlink: 38 bytes leftover after parsing attributes in process `syz.3.961'. [ 254.632062][ T8518] netlink: 38 bytes leftover after parsing attributes in process `syz.3.961'. [ 255.801649][ T8542] netlink: 'syz.2.969': attribute type 10 has an invalid length. [ 256.056075][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.062692][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.780747][ T8562] netlink: 'syz.0.979': attribute type 10 has an invalid length. [ 258.641498][ T8607] netlink: 'syz.1.995': attribute type 10 has an invalid length. [ 258.697605][ T8607] macvlan1: entered promiscuous mode [ 258.759939][ T8607] batman_adv: batadv0: Adding interface: macvlan1 [ 258.785743][ T8607] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.841554][ T8607] batman_adv: batadv0: Interface activated: macvlan1 [ 259.148750][ T8622] __nla_validate_parse: 47 callbacks suppressed [ 259.148768][ T8622] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1000'. [ 259.332260][ T8626] netlink: 38 bytes leftover after parsing attributes in process `syz.1.1003'. [ 259.350077][ T8626] netlink: 38 bytes leftover after parsing attributes in process `syz.1.1003'. [ 259.387476][ T8626] netlink: 38 bytes leftover after parsing attributes in process `syz.1.1003'. [ 259.439795][ T8626] netlink: 38 bytes leftover after parsing attributes in process `syz.1.1003'. [ 259.492214][ T8630] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1004'. [ 259.633073][ T8630] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1004'. [ 259.657129][ T8630] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1004'. [ 259.703635][ T8630] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1004'. [ 259.737880][ T8630] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1004'. [ 260.211612][ T8638] netlink: 'syz.2.1006': attribute type 10 has an invalid length. [ 260.361138][ T8638] team0: Device wg1 is of different type [ 261.333126][ T8666] sit0: entered allmulticast mode [ 261.386652][ T8666] sit0: entered promiscuous mode [ 263.280583][ T8700] netlink: 'syz.0.1029': attribute type 10 has an invalid length. [ 263.329468][ T8700] macvlan1: entered promiscuous mode [ 263.433263][ T8700] batman_adv: batadv0: Adding interface: macvlan1 [ 263.441120][ T8700] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.473464][ T8700] batman_adv: batadv0: Interface activated: macvlan1 [ 264.643624][ T8726] __nla_validate_parse: 31 callbacks suppressed [ 264.643647][ T8726] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1040'. [ 264.902198][ T8726] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1040'. [ 265.009031][ T8726] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1040'. [ 265.065053][ T8726] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1040'. [ 265.127205][ T8726] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1040'. [ 265.277035][ T8737] FAULT_INJECTION: forcing a failure. [ 265.277035][ T8737] name failslab, interval 1, probability 0, space 0, times 0 [ 265.298128][ T8737] CPU: 1 PID: 8737 Comm: syz.3.1043 Not tainted syzkaller #0 [ 265.305598][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 265.315705][ T8737] Call Trace: [ 265.319027][ T8737] [ 265.322009][ T8737] dump_stack_lvl+0x18c/0x250 [ 265.326761][ T8737] ? show_regs_print_info+0x20/0x20 [ 265.332026][ T8737] ? load_image+0x420/0x420 [ 265.336587][ T8737] ? __lock_acquire+0x7d40/0x7d40 [ 265.341682][ T8737] should_fail_ex+0x39d/0x4d0 [ 265.346420][ T8737] should_failslab+0x9/0x20 [ 265.350981][ T8737] slab_pre_alloc_hook+0x59/0x310 [ 265.356067][ T8737] ? kernel_clone+0x24b/0x8a0 [ 265.360797][ T8737] ? __x64_sys_clone+0x1b7/0x230 [ 265.365779][ T8737] ? do_syscall_64+0x55/0xa0 [ 265.370421][ T8737] kmem_cache_alloc_node+0x60/0x320 [ 265.375679][ T8737] ? alloc_vmap_area+0x1b4/0x1e30 [ 265.380759][ T8737] alloc_vmap_area+0x1b4/0x1e30 [ 265.385688][ T8737] ? vm_map_ram+0xcb0/0xcb0 [ 265.390251][ T8737] ? rcu_is_watching+0x15/0xb0 [ 265.395158][ T8737] __get_vm_area_node+0x162/0x370 [ 265.400258][ T8737] __vmalloc_node_range+0x36e/0x1330 [ 265.405605][ T8737] ? copy_process+0x586/0x3d80 [ 265.410452][ T8737] ? free_vm_area+0x50/0x50 [ 265.415012][ T8737] ? arch_dup_task_struct+0x57/0xd0 [ 265.420284][ T8737] ? __asan_memcpy+0x40/0x70 [ 265.425017][ T8737] dup_task_struct+0x3d0/0x7c0 [ 265.429829][ T8737] ? copy_process+0x586/0x3d80 [ 265.434645][ T8737] ? lockdep_hardirqs_on+0x98/0x150 [ 265.439904][ T8737] copy_process+0x586/0x3d80 [ 265.444549][ T8737] ? __might_fault+0xaa/0x120 [ 265.449309][ T8737] ? get_pid_task+0x20/0x1e0 [ 265.453958][ T8737] ? __pidfd_prepare+0x140/0x140 [ 265.458957][ T8737] kernel_clone+0x24b/0x8a0 [ 265.463517][ T8737] ? create_io_thread+0x190/0x190 [ 265.468622][ T8737] __x64_sys_clone+0x1b7/0x230 [ 265.473437][ T8737] ? __fget_files+0x43d/0x4b0 [ 265.478177][ T8737] ? __ia32_sys_vfork+0x140/0x140 [ 265.483269][ T8737] ? lock_chain_count+0x20/0x20 [ 265.488181][ T8737] ? lockdep_hardirqs_on+0x98/0x150 [ 265.493455][ T8737] do_syscall_64+0x55/0xa0 [ 265.497917][ T8737] ? clear_bhb_loop+0x40/0x90 [ 265.502649][ T8737] ? clear_bhb_loop+0x40/0x90 [ 265.507379][ T8737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.513333][ T8737] RIP: 0033:0x7ff03f79ce59 [ 265.517796][ T8737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.537624][ T8737] RSP: 002b:00007ff0405aefd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 265.546070][ T8737] RAX: ffffffffffffffda RBX: 00007ff03fa15fa0 RCX: 00007ff03f79ce59 [ 265.554086][ T8737] RDX: 0000200000000940 RSI: 0000000000000000 RDI: 0000000000100000 [ 265.562087][ T8737] RBP: 00007ff0405af090 R08: 0000000000000000 R09: 0000000000000000 [ 265.570435][ T8737] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 265.578438][ T8737] R13: 00007ff03fa16038 R14: 00007ff03fa15fa0 R15: 00007ffde0ee9ba8 [ 265.586467][ T8737] [ 265.639069][ T8737] syz.3.1043: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 265.666659][ T8741] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1044'. [ 265.710840][ T8737] CPU: 1 PID: 8737 Comm: syz.3.1043 Not tainted syzkaller #0 [ 265.718306][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 265.728422][ T8737] Call Trace: [ 265.729510][ T8741] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1044'. [ 265.731730][ T8737] [ 265.731742][ T8737] dump_stack_lvl+0x18c/0x250 [ 265.731785][ T8737] ? show_regs_print_info+0x20/0x20 [ 265.731820][ T8737] ? load_image+0x420/0x420 [ 265.731855][ T8737] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 265.731885][ T8737] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 265.731914][ T8737] warn_alloc+0x246/0x340 [ 265.731948][ T8737] ? slab_free_freelist_hook+0x130/0x1a0 [ 265.731975][ T8737] ? zone_watermark_ok_safe+0x230/0x230 [ 265.732008][ T8737] ? __get_vm_area_node+0x17b/0x370 [ 265.732046][ T8737] ? __get_vm_area_node+0x17b/0x370 [ 265.790119][ T8742] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1044'. [ 265.792150][ T8737] __vmalloc_node_range+0x393/0x1330 [ 265.805809][ T8742] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1044'. [ 265.806372][ T8737] ? free_vm_area+0x50/0x50 [ 265.825198][ T8737] ? arch_dup_task_struct+0x57/0xd0 [ 265.830472][ T8737] ? __asan_memcpy+0x40/0x70 [ 265.835123][ T8737] dup_task_struct+0x3d0/0x7c0 [ 265.839956][ T8737] ? copy_process+0x586/0x3d80 [ 265.844837][ T8737] ? lockdep_hardirqs_on+0x98/0x150 [ 265.850082][ T8737] copy_process+0x586/0x3d80 [ 265.854723][ T8737] ? __might_fault+0xaa/0x120 [ 265.859467][ T8737] ? get_pid_task+0x20/0x1e0 [ 265.864105][ T8737] ? __pidfd_prepare+0x140/0x140 [ 265.869100][ T8737] kernel_clone+0x24b/0x8a0 [ 265.873651][ T8737] ? create_io_thread+0x190/0x190 [ 265.878735][ T8737] __x64_sys_clone+0x1b7/0x230 [ 265.883568][ T8737] ? __fget_files+0x43d/0x4b0 [ 265.888305][ T8737] ? __ia32_sys_vfork+0x140/0x140 [ 265.893381][ T8737] ? lock_chain_count+0x20/0x20 [ 265.898292][ T8737] ? lockdep_hardirqs_on+0x98/0x150 [ 265.903547][ T8737] do_syscall_64+0x55/0xa0 [ 265.908001][ T8737] ? clear_bhb_loop+0x40/0x90 [ 265.912723][ T8737] ? clear_bhb_loop+0x40/0x90 [ 265.917457][ T8737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.923410][ T8737] RIP: 0033:0x7ff03f79ce59 [ 265.927877][ T8737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.947533][ T8737] RSP: 002b:00007ff0405aefd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 265.955988][ T8737] RAX: ffffffffffffffda RBX: 00007ff03fa15fa0 RCX: 00007ff03f79ce59 [ 265.964008][ T8737] RDX: 0000200000000940 RSI: 0000000000000000 RDI: 0000000000100000 [ 265.972019][ T8737] RBP: 00007ff0405af090 R08: 0000000000000000 R09: 0000000000000000 [ 265.980075][ T8737] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 265.988089][ T8737] R13: 00007ff03fa16038 R14: 00007ff03fa15fa0 R15: 00007ffde0ee9ba8 [ 265.996131][ T8737] [ 266.011058][ T8737] Mem-Info: [ 266.014263][ T8737] active_anon:5377 inactive_anon:0 isolated_anon:0 [ 266.014263][ T8737] active_file:19167 inactive_file:40019 isolated_file:0 [ 266.014263][ T8737] unevictable:768 dirty:236 writeback:0 [ 266.014263][ T8737] slab_reclaimable:10367 slab_unreclaimable:90440 [ 266.014263][ T8737] mapped:24762 shmem:1361 pagetables:508 [ 266.014263][ T8737] sec_pagetables:0 bounce:0 [ 266.014263][ T8737] kernel_misc_reclaimable:0 [ 266.014263][ T8737] free:1346727 free_pcp:6601 free_cma:0 [ 266.033451][ T8742] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1044'. [ 266.074458][ T8737] Node 0 active_anon:21508kB inactive_anon:0kB active_file:76668kB inactive_file:159876kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99148kB dirty:940kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10632kB pagetables:2132kB sec_pagetables:0kB all_unreclaimable? no [ 266.159695][ T8737] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 266.192057][ T8737] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 266.220031][ T8737] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 266.226347][ T8737] Node 0 DMA32 free:1471612kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21532kB inactive_anon:0kB active_file:76668kB inactive_file:159048kB unevictable:1536kB writepending:940kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:9188kB local_pcp:3000kB free_cma:0kB [ 266.383638][ T8737] lowmem_reserve[]: 0 0 0 0 0 [ 266.391905][ T8737] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 266.428762][ T8737] lowmem_reserve[]: 0 0 0 0 0 [ 266.433892][ T8737] Node 1 Normal free:3899868kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16896kB local_pcp:3360kB free_cma:0kB [ 266.474362][ T8737] lowmem_reserve[]: 0 0 0 0 0 [ 266.495695][ T8737] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 266.515669][ T8737] Node 0 DMA32: 723*4kB (UM) 1770*8kB (UME) 1340*16kB (UME) 1105*32kB (UME) 541*64kB (UME) 209*128kB (UME) 97*256kB (UME) 42*512kB (UME) 6*1024kB (UME) 3*2048kB (M) 312*4096kB (M) = 1471804kB [ 266.540524][ T8737] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 266.552586][ T8737] Node 1 Normal: 261*4kB (UME) 67*8kB (UME) 35*16kB (UME) 124*32kB (UME) 20*64kB (UME) 8*128kB (UME) 3*256kB (UME) 1*512kB (E) 1*1024kB (U) 1*2048kB (E) 949*4096kB (M) = 3899868kB [ 266.592477][ T8737] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.625590][ T8737] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.634966][ T8737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.652021][ T8737] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.674019][ T8737] 60547 total pagecache pages [ 266.679385][ T8737] 0 pages in swap cache [ 266.683656][ T8737] Free swap = 124996kB [ 266.696020][ T8737] Total swap = 124996kB [ 266.700246][ T8737] 2097051 pages RAM [ 266.704102][ T8737] 0 pages HighMem/MovableOnly [ 266.740357][ T8737] 416927 pages reserved [ 266.744633][ T8737] 0 pages cma reserved [ 267.727444][ T8766] netlink: 'syz.0.1054': attribute type 10 has an invalid length. [ 267.915815][ T8766] team0: Device wg1 is of different type [ 273.041270][ T8833] __nla_validate_parse: 10 callbacks suppressed [ 273.041293][ T8833] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1071'. [ 273.189404][ T8837] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1073'. [ 273.456050][ T8841] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1075'. [ 273.566382][ T8841] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1075'. [ 273.589275][ T8841] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1075'. [ 273.607279][ T8841] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1075'. [ 273.654076][ T8841] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1075'. [ 273.908196][ T8848] bridge_slave_1: left allmulticast mode [ 273.914162][ T8848] bridge_slave_1: left promiscuous mode [ 273.948654][ T8848] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.037773][ T8848] bridge_slave_0: left allmulticast mode [ 274.101574][ T8848] bridge_slave_0: left promiscuous mode [ 274.149315][ T8848] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.228615][ T8848] team0: Port device bridge0 removed [ 274.944132][ T8873] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1085'. [ 275.251540][ T8879] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1088'. [ 275.378326][ T8879] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1088'. [ 277.638351][ T8924] FAULT_INJECTION: forcing a failure. [ 277.638351][ T8924] name failslab, interval 1, probability 0, space 0, times 0 [ 277.683731][ T8924] CPU: 1 PID: 8924 Comm: syz.2.1103 Not tainted syzkaller #0 [ 277.691198][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.701287][ T8924] Call Trace: [ 277.704589][ T8924] [ 277.707546][ T8924] dump_stack_lvl+0x18c/0x250 [ 277.712276][ T8924] ? show_regs_print_info+0x20/0x20 [ 277.717529][ T8924] ? load_image+0x420/0x420 [ 277.722099][ T8924] ? __might_sleep+0xe0/0xe0 [ 277.726729][ T8924] ? __lock_acquire+0x7d40/0x7d40 [ 277.731792][ T8924] should_fail_ex+0x39d/0x4d0 [ 277.736523][ T8924] should_failslab+0x9/0x20 [ 277.741149][ T8924] slab_pre_alloc_hook+0x59/0x310 [ 277.746216][ T8924] ? kvmalloc_node+0x70/0x180 [ 277.751012][ T8924] ? kvmalloc_node+0x70/0x180 [ 277.755721][ T8924] __kmem_cache_alloc_node+0x53/0x250 [ 277.761132][ T8924] ? kvmalloc_node+0x70/0x180 [ 277.765843][ T8924] __kmalloc_node+0xa4/0x230 [ 277.770471][ T8924] kvmalloc_node+0x70/0x180 [ 277.775004][ T8924] page_pool_create+0x1eb/0x5c0 [ 277.779892][ T8924] bpf_test_run_xdp_live+0x203/0x1b20 [ 277.785310][ T8924] ? 0xffffffffa0004740 [ 277.789497][ T8924] ? 0xffffffffa0004740 [ 277.793681][ T8924] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 277.799608][ T8924] ? 0xffffffffa0004740 [ 277.803802][ T8924] ? xdp_convert_md_to_buff+0x330/0x330 [ 277.809408][ T8924] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 277.815686][ T8924] ? _copy_from_user+0xa5/0xe0 [ 277.820486][ T8924] ? bpf_test_init+0x119/0x140 [ 277.825285][ T8924] ? xdp_convert_md_to_buff+0x5b/0x330 [ 277.830781][ T8924] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 277.836199][ T8924] ? dev_put+0x80/0x80 [ 277.840391][ T8924] ? dev_put+0x80/0x80 [ 277.844515][ T8924] bpf_prog_test_run+0x321/0x390 [ 277.849501][ T8924] __sys_bpf+0x49d/0x890 [ 277.853899][ T8924] ? bpf_link_show_fdinfo+0x390/0x390 [ 277.859332][ T8924] ? lock_chain_count+0x20/0x20 [ 277.864223][ T8924] __x64_sys_bpf+0x7c/0x90 [ 277.868669][ T8924] do_syscall_64+0x55/0xa0 [ 277.873155][ T8924] ? clear_bhb_loop+0x40/0x90 [ 277.877879][ T8924] ? clear_bhb_loop+0x40/0x90 [ 277.882595][ T8924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.888517][ T8924] RIP: 0033:0x7fb66459ce59 [ 277.892961][ T8924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.912601][ T8924] RSP: 002b:00007fb665424028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.921053][ T8924] RAX: ffffffffffffffda RBX: 00007fb664815fa0 RCX: 00007fb66459ce59 [ 277.929059][ T8924] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 277.937060][ T8924] RBP: 00007fb665424090 R08: 0000000000000000 R09: 0000000000000000 [ 277.945067][ T8924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.953070][ T8924] R13: 00007fb664816038 R14: 00007fb664815fa0 R15: 00007fffcd497158 [ 277.961083][ T8924] [ 277.976258][ T8924] page_pool_create() gave up with errno -12 [ 278.166440][ T8933] __nla_validate_parse: 5 callbacks suppressed [ 278.166458][ T8933] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1108'. [ 279.592417][ T8964] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1120'. [ 279.955580][ T8976] FAULT_INJECTION: forcing a failure. [ 279.955580][ T8976] name failslab, interval 1, probability 0, space 0, times 0 [ 279.974111][ T8976] CPU: 1 PID: 8976 Comm: syz.0.1124 Not tainted syzkaller #0 [ 279.981570][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.991668][ T8976] Call Trace: [ 279.994974][ T8976] [ 279.997932][ T8976] dump_stack_lvl+0x18c/0x250 [ 280.002664][ T8976] ? show_regs_print_info+0x20/0x20 [ 280.007902][ T8976] ? load_image+0x420/0x420 [ 280.012448][ T8976] ? __might_sleep+0xe0/0xe0 [ 280.017075][ T8976] ? __lock_acquire+0x7d40/0x7d40 [ 280.022141][ T8976] should_fail_ex+0x39d/0x4d0 [ 280.026869][ T8976] should_failslab+0x9/0x20 [ 280.031417][ T8976] slab_pre_alloc_hook+0x59/0x310 [ 280.036484][ T8976] ? kvmalloc_node+0x70/0x180 [ 280.041196][ T8976] ? kvmalloc_node+0x70/0x180 [ 280.045908][ T8976] __kmem_cache_alloc_node+0x53/0x250 [ 280.051346][ T8976] ? kvmalloc_node+0x70/0x180 [ 280.056061][ T8976] __kmalloc_node+0xa4/0x230 [ 280.060698][ T8976] kvmalloc_node+0x70/0x180 [ 280.065238][ T8976] page_pool_create+0x1eb/0x5c0 [ 280.070135][ T8976] bpf_test_run_xdp_live+0x203/0x1b20 [ 280.075561][ T8976] ? 0xffffffffa0004740 [ 280.079745][ T8976] ? 0xffffffffa0004740 [ 280.083929][ T8976] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 280.089855][ T8976] ? 0xffffffffa0004740 [ 280.094044][ T8976] ? xdp_convert_md_to_buff+0x330/0x330 [ 280.099669][ T8976] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 280.105954][ T8976] ? _copy_from_user+0xa5/0xe0 [ 280.110753][ T8976] ? bpf_test_init+0x119/0x140 [ 280.115545][ T8976] ? xdp_convert_md_to_buff+0x5b/0x330 [ 280.121044][ T8976] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 280.126467][ T8976] ? dev_put+0x80/0x80 [ 280.130581][ T8976] ? dev_put+0x80/0x80 [ 280.134687][ T8976] bpf_prog_test_run+0x321/0x390 [ 280.139674][ T8976] __sys_bpf+0x49d/0x890 [ 280.143955][ T8976] ? bpf_link_show_fdinfo+0x390/0x390 [ 280.149381][ T8976] ? lock_chain_count+0x20/0x20 [ 280.154277][ T8976] __x64_sys_bpf+0x7c/0x90 [ 280.158730][ T8976] do_syscall_64+0x55/0xa0 [ 280.163172][ T8976] ? clear_bhb_loop+0x40/0x90 [ 280.167884][ T8976] ? clear_bhb_loop+0x40/0x90 [ 280.172594][ T8976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.178524][ T8976] RIP: 0033:0x7fba8d19ce59 [ 280.182972][ T8976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.202609][ T8976] RSP: 002b:00007fba8dfe3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.211089][ T8976] RAX: ffffffffffffffda RBX: 00007fba8d415fa0 RCX: 00007fba8d19ce59 [ 280.219109][ T8976] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 280.227112][ T8976] RBP: 00007fba8dfe3090 R08: 0000000000000000 R09: 0000000000000000 [ 280.235107][ T8976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.243107][ T8976] R13: 00007fba8d416038 R14: 00007fba8d415fa0 R15: 00007ffdaa331278 [ 280.251141][ T8976] [ 280.275663][ T8976] page_pool_create() gave up with errno -12 [ 280.440745][ T8980] FAULT_INJECTION: forcing a failure. [ 280.440745][ T8980] name failslab, interval 1, probability 0, space 0, times 0 [ 280.459309][ T8980] CPU: 1 PID: 8980 Comm: syz.1.1126 Not tainted syzkaller #0 [ 280.466773][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 280.476898][ T8980] Call Trace: [ 280.480211][ T8980] [ 280.483172][ T8980] dump_stack_lvl+0x18c/0x250 [ 280.487912][ T8980] ? show_regs_print_info+0x20/0x20 [ 280.493159][ T8980] ? load_image+0x420/0x420 [ 280.497712][ T8980] ? __might_sleep+0xe0/0xe0 [ 280.502337][ T8980] ? __lock_acquire+0x7d40/0x7d40 [ 280.507417][ T8980] should_fail_ex+0x39d/0x4d0 [ 280.512140][ T8980] should_failslab+0x9/0x20 [ 280.516685][ T8980] slab_pre_alloc_hook+0x59/0x310 [ 280.521755][ T8980] ? rtnl_newlink+0x10d/0x20a0 [ 280.526555][ T8980] __kmem_cache_alloc_node+0x53/0x250 [ 280.531966][ T8980] ? rtnl_newlink+0x10d/0x20a0 [ 280.536762][ T8980] kmalloc_trace+0x2a/0xe0 [ 280.541217][ T8980] ? rtnl_setlink+0x4e0/0x4e0 [ 280.545922][ T8980] rtnl_newlink+0x10d/0x20a0 [ 280.550568][ T8980] ? __mutex_trylock_common+0x159/0x260 [ 280.556150][ T8980] ? rtnl_setlink+0x4e0/0x4e0 [ 280.560869][ T8980] ? trace_raw_output_contention_end+0xd0/0xd0 [ 280.567046][ T8980] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 280.573066][ T8980] ? rcu_is_watching+0x15/0xb0 [ 280.577872][ T8980] ? trace_contention_end+0x39/0xe0 [ 280.583106][ T8980] ? __mutex_lock+0x315/0xcc0 [ 280.587837][ T8980] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 280.592983][ T8980] ? mutex_lock_nested+0x20/0x20 [ 280.597961][ T8980] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 280.603108][ T8980] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 280.608246][ T8980] ? rtnl_setlink+0x4e0/0x4e0 [ 280.612951][ T8980] rtnetlink_rcv_msg+0x869/0xfa0 [ 280.617930][ T8980] ? rtnetlink_bind+0x80/0x80 [ 280.622651][ T8980] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 280.628673][ T8980] ? lock_chain_count+0x20/0x20 [ 280.633570][ T8980] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 280.639765][ T8980] ? lockdep_hardirqs_on+0x98/0x150 [ 280.645006][ T8980] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 280.651204][ T8980] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 280.657134][ T8980] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 280.663067][ T8980] ? _raw_spin_unlock+0x40/0x40 [ 280.667965][ T8980] ? swake_up_one+0x78/0x140 [ 280.672598][ T8980] ? rcu_preempt_deferred_qs_irqrestore+0x8bb/0xce0 [ 280.679237][ T8980] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 280.685457][ T8980] netlink_rcv_skb+0x241/0x4d0 [ 280.690264][ T8980] ? rtnetlink_bind+0x80/0x80 [ 280.694984][ T8980] ? netlink_ack+0x1180/0x1180 [ 280.699807][ T8980] ? __lock_acquire+0x7d40/0x7d40 [ 280.704877][ T8980] ? __rcu_read_unlock+0x7c/0xd0 [ 280.709857][ T8980] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.715114][ T8980] netlink_unicast+0x751/0x8d0 [ 280.719929][ T8980] netlink_sendmsg+0x8d0/0xbf0 [ 280.724743][ T8980] ? netlink_getsockopt+0x590/0x590 [ 280.730000][ T8980] ? aa_sock_msg_perm+0x94/0x150 [ 280.734977][ T8980] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 280.740297][ T8980] ? security_socket_sendmsg+0x80/0xa0 [ 280.745791][ T8980] ? netlink_getsockopt+0x590/0x590 [ 280.751043][ T8980] ____sys_sendmsg+0x5ba/0x960 [ 280.755854][ T8980] ? __asan_memset+0x22/0x40 [ 280.760487][ T8980] ? __sys_sendmsg_sock+0x30/0x30 [ 280.765554][ T8980] ? __import_iovec+0x5f2/0x850 [ 280.770449][ T8980] ? import_iovec+0x73/0xa0 [ 280.774989][ T8980] ___sys_sendmsg+0x2a6/0x360 [ 280.779730][ T8980] ? __sys_sendmsg+0x2a0/0x2a0 [ 280.784571][ T8980] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 280.790904][ T8980] __se_sys_sendmsg+0x1c2/0x2b0 [ 280.795927][ T8980] ? hrtimer_interrupt+0x7bb/0x9c0 [ 280.801200][ T8980] ? __x64_sys_sendmsg+0x80/0x80 [ 280.806233][ T8980] ? lockdep_hardirqs_on+0x98/0x150 [ 280.811484][ T8980] do_syscall_64+0x55/0xa0 [ 280.815938][ T8980] ? clear_bhb_loop+0x40/0x90 [ 280.820656][ T8980] ? clear_bhb_loop+0x40/0x90 [ 280.825379][ T8980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.831311][ T8980] RIP: 0033:0x7f486659ce59 [ 280.835806][ T8980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.855563][ T8980] RSP: 002b:00007f486749e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.864041][ T8980] RAX: ffffffffffffffda RBX: 00007f4866815fa0 RCX: 00007f486659ce59 [ 280.872058][ T8980] RDX: 0000000060044084 RSI: 0000200000000000 RDI: 0000000000000004 [ 280.880066][ T8980] RBP: 00007f486749e090 R08: 0000000000000000 R09: 0000000000000000 [ 280.888080][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.896093][ T8980] R13: 00007f4866816038 R14: 00007f4866815fa0 R15: 00007fffaa78b938 [ 280.904209][ T8980] [ 280.964139][ T8983] netlink: 38 bytes leftover after parsing attributes in process `syz.0.1127'. [ 280.975232][ T8983] netlink: 38 bytes leftover after parsing attributes in process `syz.0.1127'. [ 281.010255][ T8983] netlink: 38 bytes leftover after parsing attributes in process `syz.0.1127'. [ 281.030387][ T8983] netlink: 38 bytes leftover after parsing attributes in process `syz.0.1127'. [ 281.540461][ T9002] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1135'. [ 281.742995][ T9002] netlink: 'syz.1.1135': attribute type 10 has an invalid length. [ 281.755961][ T9002] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1135'. [ 282.595800][ T9020] netlink: 38 bytes leftover after parsing attributes in process `syz.0.1141'. [ 282.604904][ T9020] netlink: 38 bytes leftover after parsing attributes in process `syz.0.1141'. [ 283.202081][ T9040] netlink: 'syz.1.1148': attribute type 10 has an invalid length. [ 283.215930][ T9040] __nla_validate_parse: 3 callbacks suppressed [ 283.215966][ T9040] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1148'. [ 283.570581][ T9052] netlink: 38 bytes leftover after parsing attributes in process `syz.0.1154'. [ 283.579813][ T9052] netlink: 38 bytes leftover after parsing attributes in process `syz.0.1154'. [ 283.590139][ T9052] netlink: 38 bytes leftover after parsing attributes in process `syz.0.1154'. [ 283.605729][ T9052] netlink: 38 bytes leftover after parsing attributes in process `syz.0.1154'. [ 284.104789][ T9067] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1161'. [ 284.167606][ T9067] netlink: 'syz.2.1161': attribute type 10 has an invalid length. [ 284.195523][ T9067] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1161'. [ 284.404713][ T9074] netlink: 38 bytes leftover after parsing attributes in process `syz.3.1163'. [ 284.485581][ T9074] netlink: 38 bytes leftover after parsing attributes in process `syz.3.1163'. [ 284.528207][ T9074] netlink: 38 bytes leftover after parsing attributes in process `syz.3.1163'. [ 285.307873][ T9099] netlink: 'syz.3.1172': attribute type 10 has an invalid length. [ 286.569441][ T9125] netlink: 'syz.0.1184': attribute type 10 has an invalid length. [ 288.190406][ T9154] netlink: 'syz.2.1196': attribute type 10 has an invalid length. [ 288.265477][ T9158] __nla_validate_parse: 17 callbacks suppressed [ 288.265495][ T9158] netlink: 38 bytes leftover after parsing attributes in process `syz.0.1197'. [ 288.282133][ T9158] netlink: 38 bytes leftover after parsing attributes in process `syz.0.1197'. [ 288.299380][ T9158] netlink: 38 bytes leftover after parsing attributes in process `syz.0.1197'. [ 288.310801][ T9158] netlink: 38 bytes leftover after parsing attributes in process `syz.0.1197'. [ 288.449179][ T9162] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1199'. [ 289.639051][ T9185] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1208'. [ 289.718976][ T9185] netlink: 'syz.1.1208': attribute type 10 has an invalid length. [ 289.784657][ T9185] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1208'. [ 289.834540][ T9190] netlink: 38 bytes leftover after parsing attributes in process `syz.2.1210'. [ 289.886828][ T9190] netlink: 38 bytes leftover after parsing attributes in process `syz.2.1210'. [ 289.910853][ T9191] netlink: 38 bytes leftover after parsing attributes in process `syz.2.1210'. [ 291.133326][ T9219] netlink: 'syz.1.1220': attribute type 10 has an invalid length. [ 292.149742][ T9248] netlink: 'syz.2.1233': attribute type 10 has an invalid length. [ 293.082703][ T9279] netlink: 'syz.3.1246': attribute type 10 has an invalid length. [ 293.738992][ T9297] __nla_validate_parse: 22 callbacks suppressed [ 293.739013][ T9297] netlink: 38 bytes leftover after parsing attributes in process `syz.1.1254'. [ 293.755098][ T9297] netlink: 38 bytes leftover after parsing attributes in process `syz.1.1254'. [ 293.856871][ T9297] netlink: 38 bytes leftover after parsing attributes in process `syz.1.1254'. [ 294.345801][ T9303] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1257'. [ 294.448022][ T9308] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1258'. [ 294.502427][ T9308] netlink: 'syz.2.1258': attribute type 10 has an invalid length. [ 294.530019][ T9308] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1258'. [ 295.011434][ T9322] netlink: 38 bytes leftover after parsing attributes in process `syz.2.1265'. [ 295.020695][ T9322] netlink: 38 bytes leftover after parsing attributes in process `syz.2.1265'. [ 295.045932][ T9322] netlink: 38 bytes leftover after parsing attributes in process `syz.2.1265'. [ 295.341704][ T9334] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1268'. [ 295.507810][ T9335] netlink: 'syz.1.1269': attribute type 10 has an invalid length. [ 297.029658][ T9363] netlink: 'syz.3.1280': attribute type 10 has an invalid length. [ 298.164152][ T9397] netlink: 'syz.3.1292': attribute type 10 has an invalid length. [ 299.932631][ T9426] __nla_validate_parse: 8 callbacks suppressed [ 299.932653][ T9426] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1303'. [ 300.209807][ T9431] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1304'. [ 300.252981][ T9431] netlink: 'syz.3.1304': attribute type 10 has an invalid length. [ 300.265970][ T9431] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1304'. [ 300.281369][ T9435] netlink: 'syz.1.1307': attribute type 5 has an invalid length. [ 301.669792][ T9459] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1315'. [ 302.097787][ T9466] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1318'. [ 302.728390][ T9484] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1326'. [ 303.462449][ T9497] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1331'. [ 304.117155][ T9511] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1336'. [ 304.508852][ T9521] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1340'. [ 305.216840][ T9544] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1348'. [ 305.500326][ T9550] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1351'. [ 305.729305][ T9550] netlink: 'syz.2.1351': attribute type 10 has an invalid length. [ 305.765861][ T9550] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1351'. [ 306.972403][ T9575] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1359'. [ 307.442875][ T9589] netlink: 'syz.1.1362': attribute type 10 has an invalid length. [ 307.511105][ T9589] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1362'. [ 307.561830][ T9586] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1362'. [ 308.396918][ T9609] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1371'. [ 308.537058][ T9612] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1372'. [ 308.581087][ T9612] netlink: 'syz.0.1372': attribute type 10 has an invalid length. [ 308.589563][ T9612] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1372'. [ 309.493715][ T9637] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1383'. [ 309.508704][ T9637] netlink: 'syz.1.1383': attribute type 10 has an invalid length. [ 310.878899][ T9668] __nla_validate_parse: 2 callbacks suppressed [ 310.878920][ T9668] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1394'. [ 310.929300][ T9670] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1393'. [ 310.958326][ T9670] netlink: 'syz.1.1393': attribute type 10 has an invalid length. [ 310.966661][ T9670] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1393'. [ 311.411473][ T9680] netlink: 'syz.2.1398': attribute type 4 has an invalid length. [ 311.430024][ T9680] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1398'. [ 311.492342][ T9680] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 312.276254][ T9696] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1403'. [ 312.293932][ T9697] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1404'. [ 312.354501][ T9697] netlink: 'syz.1.1404': attribute type 10 has an invalid length. [ 312.376847][ T9697] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1404'. [ 313.312114][ T9726] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1415'. [ 313.550459][ T9729] netlink: 'syz.0.1416': attribute type 10 has an invalid length. [ 313.635928][ T9729] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1416'. [ 314.683106][ T9728] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1416'. [ 315.368136][ T9759] netlink: 'syz.3.1428': attribute type 10 has an invalid length. [ 316.639958][ T9786] __nla_validate_parse: 3 callbacks suppressed [ 316.639979][ T9786] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1438'. [ 316.738396][ T9782] FAULT_INJECTION: forcing a failure. [ 316.738396][ T9782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.759875][ T9782] CPU: 1 PID: 9782 Comm: syz.0.1436 Not tainted syzkaller #0 [ 316.767472][ T9782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 316.777805][ T9782] Call Trace: [ 316.781162][ T9782] [ 316.784167][ T9782] dump_stack_lvl+0x18c/0x250 [ 316.788979][ T9782] ? show_regs_print_info+0x20/0x20 [ 316.794280][ T9782] ? load_image+0x420/0x420 [ 316.799050][ T9782] ? __lock_acquire+0x7d40/0x7d40 [ 316.804157][ T9782] ? lockdep_hardirqs_on+0x98/0x150 [ 316.809464][ T9782] should_fail_ex+0x39d/0x4d0 [ 316.814258][ T9782] _copy_to_user+0x2f/0xa0 [ 316.818771][ T9782] put_user_ifreq+0x78/0xb0 [ 316.823356][ T9782] sock_do_ioctl+0x268/0x310 [ 316.828039][ T9782] ? sock_show_fdinfo+0xb0/0xb0 [ 316.833001][ T9782] sock_ioctl+0x5ba/0x7e0 [ 316.837405][ T9782] ? sock_poll+0x3e0/0x3e0 [ 316.841923][ T9782] ? bpf_lsm_file_ioctl+0x9/0x10 [ 316.846926][ T9782] ? security_file_ioctl+0x80/0xa0 [ 316.852113][ T9782] ? sock_poll+0x3e0/0x3e0 [ 316.856592][ T9782] __se_sys_ioctl+0xfd/0x170 [ 316.861262][ T9782] do_syscall_64+0x55/0xa0 [ 316.865735][ T9782] ? clear_bhb_loop+0x40/0x90 [ 316.870472][ T9782] ? clear_bhb_loop+0x40/0x90 [ 316.875215][ T9782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.881203][ T9782] RIP: 0033:0x7fba8d19ce59 [ 316.885769][ T9782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.905452][ T9782] RSP: 002b:00007fba8dfe3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.913959][ T9782] RAX: ffffffffffffffda RBX: 00007fba8d415fa0 RCX: 00007fba8d19ce59 [ 316.921991][ T9782] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000001f [ 316.930021][ T9782] RBP: 00007fba8dfe3090 R08: 0000000000000000 R09: 0000000000000000 [ 316.938046][ T9782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.946159][ T9782] R13: 00007fba8d416038 R14: 00007fba8d415fa0 R15: 00007ffdaa331278 [ 316.954310][ T9782] [ 317.250233][ T9791] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1440'. [ 317.263468][ T9791] netlink: 'syz.3.1440': attribute type 10 has an invalid length. [ 317.271807][ T9791] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1440'. [ 317.470550][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.477545][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.302137][ T9814] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1448'. [ 318.646863][ T9820] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1451'. [ 318.693760][ T9820] netlink: 'syz.1.1451': attribute type 10 has an invalid length. [ 318.728977][ T9820] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1451'. [ 319.677762][ T9848] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1460'. [ 320.102258][ T9855] netlink: 'syz.0.1462': attribute type 41 has an invalid length. [ 320.191403][ T9856] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1463'. [ 320.234868][ T9856] netlink: 'syz.2.1463': attribute type 10 has an invalid length. [ 320.265527][ T9856] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1463'. [ 320.665221][ T9869] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1469'. [ 321.264693][ T9886] netlink: 'syz.0.1475': attribute type 10 has an invalid length. [ 322.010859][ T9891] FAULT_INJECTION: forcing a failure. [ 322.010859][ T9891] name failslab, interval 1, probability 0, space 0, times 0 [ 322.078506][ T9891] CPU: 0 PID: 9891 Comm: syz.1.1477 Not tainted syzkaller #0 [ 322.085977][ T9891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 322.096086][ T9891] Call Trace: [ 322.099412][ T9891] [ 322.102395][ T9891] dump_stack_lvl+0x18c/0x250 [ 322.107134][ T9891] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.113343][ T9891] ? show_regs_print_info+0x20/0x20 [ 322.118613][ T9891] ? load_image+0x420/0x420 [ 322.123202][ T9891] should_fail_ex+0x39d/0x4d0 [ 322.128039][ T9891] should_failslab+0x9/0x20 [ 322.132602][ T9891] slab_pre_alloc_hook+0x59/0x310 [ 322.137701][ T9891] ? lock_chain_count+0x20/0x20 [ 322.142610][ T9891] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 322.148563][ T9891] __kmem_cache_alloc_node+0x53/0x250 [ 322.154169][ T9891] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 322.160136][ T9891] kmalloc_trace+0x2a/0xe0 [ 322.164633][ T9891] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 322.170430][ T9891] sctp_association_new+0x15d3/0x25c0 [ 322.175965][ T9891] sctp_connect_new_asoc+0x2de/0x6a0 [ 322.181318][ T9891] ? __sctp_connect+0xd80/0xd80 [ 322.186249][ T9891] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 322.191868][ T9891] ? security_sctp_bind_connect+0x89/0xb0 [ 322.197658][ T9891] sctp_sendmsg+0x1575/0x28c0 [ 322.202416][ T9891] ? sctp_getsockopt+0xb60/0xb60 [ 322.207417][ T9891] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.213635][ T9891] ? lockdep_hardirqs_on+0x98/0x150 [ 322.218883][ T9891] ? sock_rps_record_flow+0x19/0x3f0 [ 322.224208][ T9891] ? inet_sendmsg+0xe9/0x2f0 [ 322.228837][ T9891] ? inet_send_prepare+0x260/0x260 [ 322.233986][ T9891] ____sys_sendmsg+0x5ba/0x960 [ 322.238787][ T9891] ? __asan_memset+0x22/0x40 [ 322.243423][ T9891] ? __sys_sendmsg_sock+0x30/0x30 [ 322.248490][ T9891] ? __import_iovec+0x5f2/0x850 [ 322.253382][ T9891] ? import_iovec+0x73/0xa0 [ 322.258023][ T9891] ___sys_sendmsg+0x2a6/0x360 [ 322.262745][ T9891] ? __sys_sendmsg+0x2a0/0x2a0 [ 322.267587][ T9891] __se_sys_sendmsg+0x1c2/0x2b0 [ 322.272476][ T9891] ? __x64_sys_sendmsg+0x80/0x80 [ 322.277496][ T9891] do_syscall_64+0x55/0xa0 [ 322.281954][ T9891] ? clear_bhb_loop+0x40/0x90 [ 322.286674][ T9891] ? clear_bhb_loop+0x40/0x90 [ 322.291391][ T9891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.297327][ T9891] RIP: 0033:0x7f486659ce59 [ 322.301800][ T9891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.321543][ T9891] RSP: 002b:00007f486749e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.330005][ T9891] RAX: ffffffffffffffda RBX: 00007f4866815fa0 RCX: 00007f486659ce59 [ 322.338103][ T9891] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 000000000000000e [ 322.346112][ T9891] RBP: 00007f486749e090 R08: 0000000000000000 R09: 0000000000000000 [ 322.354113][ T9891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.362122][ T9891] R13: 00007f4866816038 R14: 00007f4866815fa0 R15: 00007fffaa78b938 [ 322.370144][ T9891] [ 322.406612][ T9898] __nla_validate_parse: 2 callbacks suppressed [ 322.406632][ T9898] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1480'. [ 322.784663][ T9907] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1484'. [ 322.803763][ T9907] netlink: 'syz.0.1484': attribute type 10 has an invalid length. [ 322.814006][ T9907] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1484'. [ 323.792206][ T9929] geneve1: entered promiscuous mode [ 323.797711][ T9929] geneve1: entered allmulticast mode [ 323.906139][ T9929] syzkaller0: entered promiscuous mode [ 323.912039][ T9929] syzkaller0: entered allmulticast mode [ 324.239066][ T9943] netlink: 'syz.3.1496': attribute type 10 has an invalid length. [ 324.255985][ T9943] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1496'. [ 325.764987][ T9933] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1493'. [ 325.809202][ T9941] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1496'. [ 327.457563][ T9970] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1505'. [ 327.555088][ T9972] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1506'. [ 327.568217][ T9972] netlink: 'syz.1.1506': attribute type 10 has an invalid length. [ 327.576578][ T9972] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1506'. [ 329.208712][T10012] netlink: 'syz.3.1516': attribute type 10 has an invalid length. [ 329.218379][T10012] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1516'. [ 329.229279][T10008] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1516'. [ 329.389212][T10015] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1519'. [ 330.304555][T10033] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1527'. [ 330.326734][T10033] netlink: 'syz.2.1527': attribute type 10 has an invalid length. [ 330.334797][T10033] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1527'. [ 330.488585][T10039] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1529'. [ 331.157880][T10055] FAULT_INJECTION: forcing a failure. [ 331.157880][T10055] name failslab, interval 1, probability 0, space 0, times 0 [ 331.195347][T10055] CPU: 1 PID: 10055 Comm: syz.0.1535 Not tainted syzkaller #0 [ 331.202873][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 331.212940][T10055] Call Trace: [ 331.216240][T10055] [ 331.219202][T10055] dump_stack_lvl+0x18c/0x250 [ 331.223907][T10055] ? show_regs_print_info+0x20/0x20 [ 331.229131][T10055] ? load_image+0x420/0x420 [ 331.233655][T10055] ? perf_trace_lock_acquire+0x104/0x410 [ 331.239360][T10055] should_fail_ex+0x39d/0x4d0 [ 331.244082][T10055] should_failslab+0x9/0x20 [ 331.248617][T10055] slab_pre_alloc_hook+0x59/0x310 [ 331.253713][T10055] kmem_cache_alloc+0x5a/0x2d0 [ 331.258530][T10055] ? skb_clone+0x1eb/0x370 [ 331.263005][T10055] skb_clone+0x1eb/0x370 [ 331.267305][T10055] __netlink_deliver_tap+0x41c/0x830 [ 331.272668][T10055] ? netlink_deliver_tap+0x2e/0x1b0 [ 331.277917][T10055] netlink_deliver_tap+0x19c/0x1b0 [ 331.283081][T10055] netlink_dump+0x94b/0xe50 [ 331.287630][T10055] ? netlink_lookup+0x200/0x200 [ 331.292530][T10055] ? slab_free_freelist_hook+0x130/0x1a0 [ 331.298223][T10055] ? netlink_recvmsg+0x5e7/0xe60 [ 331.303218][T10055] ? kmem_cache_free+0xf8/0x270 [ 331.308135][T10055] netlink_recvmsg+0x693/0xe60 [ 331.312964][T10055] ? netlink_sendmsg+0xbf0/0xbf0 [ 331.317963][T10055] ? aa_af_perm+0x330/0x330 [ 331.322529][T10055] ? verify_lock_unused+0x140/0x140 [ 331.327779][T10055] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 331.333113][T10055] ? security_socket_recvmsg+0x89/0xb0 [ 331.338619][T10055] ? netlink_sendmsg+0xbf0/0xbf0 [ 331.343616][T10055] ____sys_recvmsg+0x2ce/0x5e0 [ 331.348441][T10055] ? __sys_recvmsg_sock+0x50/0x50 [ 331.353522][T10055] ? import_iovec+0x73/0xa0 [ 331.358122][T10055] ___sys_recvmsg+0x216/0x590 [ 331.362950][T10055] ? __sys_recvmsg+0x2a0/0x2a0 [ 331.367743][T10055] ? ksys_write+0x1c4/0x260 [ 331.372312][T10055] ? __fget_files+0x43d/0x4b0 [ 331.377055][T10055] __x64_sys_recvmsg+0x20c/0x2e0 [ 331.382048][T10055] ? ___sys_recvmsg+0x590/0x590 [ 331.386965][T10055] ? lockdep_hardirqs_on+0x98/0x150 [ 331.392205][T10055] do_syscall_64+0x55/0xa0 [ 331.396671][T10055] ? clear_bhb_loop+0x40/0x90 [ 331.401404][T10055] ? clear_bhb_loop+0x40/0x90 [ 331.406142][T10055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.412079][T10055] RIP: 0033:0x7fba8d19ce59 [ 331.416519][T10055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.436143][T10055] RSP: 002b:00007fba8dfe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 331.444575][T10055] RAX: ffffffffffffffda RBX: 00007fba8d415fa0 RCX: 00007fba8d19ce59 [ 331.452565][T10055] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 331.460571][T10055] RBP: 00007fba8dfe3090 R08: 0000000000000000 R09: 0000000000000000 [ 331.468598][T10055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.476618][T10055] R13: 00007fba8d416038 R14: 00007fba8d415fa0 R15: 00007ffdaa331278 [ 331.484666][T10055] [ 331.738494][T10062] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1539'. [ 331.763951][T10064] netlink: 'syz.2.1538': attribute type 10 has an invalid length. [ 332.641972][T10088] tun0: tun_chr_ioctl cmd 2147767511 [ 332.650022][T10090] tun0: tun_chr_ioctl cmd 1074025677 [ 332.655858][T10090] tun0: linktype set to 778 [ 332.938394][T10096] __nla_validate_parse: 2 callbacks suppressed [ 332.938416][T10096] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1550'. [ 333.297438][T10098] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1551'. [ 333.332092][T10098] netlink: 'syz.3.1551': attribute type 10 has an invalid length. [ 333.350855][T10098] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1551'. [ 334.754946][T10128] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1561'. [ 334.778149][T10128] netlink: 'syz.2.1561': attribute type 10 has an invalid length. [ 334.798764][T10128] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1561'. [ 335.168479][T10138] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1566'. [ 335.772785][T10154] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1572'. [ 335.785614][T10154] netlink: 'syz.0.1572': attribute type 10 has an invalid length. [ 335.793493][T10154] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1572'. [ 336.333792][T10163] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x31 [ 336.356626][T10163] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1574'. [ 337.200594][T10169] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1576'. [ 337.748597][T10185] netlink: 'syz.2.1582': attribute type 10 has an invalid length. [ 338.138658][T10194] netlink: 'syz.3.1586': attribute type 21 has an invalid length. [ 338.148205][T10194] __nla_validate_parse: 2 callbacks suppressed [ 338.148300][T10194] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1586'. [ 339.432468][T10220] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1593'. [ 339.462344][T10220] netlink: 'syz.3.1593': attribute type 10 has an invalid length. [ 339.487209][T10220] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1593'. [ 340.592178][T10245] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1603'. [ 340.635438][T10245] netlink: 'syz.1.1603': attribute type 10 has an invalid length. [ 340.678720][T10245] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1603'. [ 341.853851][T10274] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1614'. [ 341.868736][T10274] netlink: 'syz.2.1614': attribute type 10 has an invalid length. [ 341.895385][T10274] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1614'. [ 342.753191][T10294] netlink: 'syz.2.1620': attribute type 41 has an invalid length. [ 342.780118][T10294] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1620'. [ 343.446769][T10310] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1626'. [ 343.477557][T10310] netlink: 'syz.0.1626': attribute type 10 has an invalid length. [ 343.490901][T10310] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1626'. [ 345.084535][T10344] netlink: 'syz.1.1639': attribute type 10 has an invalid length. [ 345.100377][T10344] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1639'. [ 345.922236][T10370] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1649'. [ 346.288675][T10376] netlink: 'syz.0.1652': attribute type 10 has an invalid length. [ 346.315906][T10376] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1652'. [ 347.287358][T10407] FAULT_INJECTION: forcing a failure. [ 347.287358][T10407] name failslab, interval 1, probability 0, space 0, times 0 [ 347.321028][T10407] CPU: 1 PID: 10407 Comm: syz.3.1662 Not tainted syzkaller #0 [ 347.328592][T10407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 347.338707][T10407] Call Trace: [ 347.342038][T10407] [ 347.345014][T10407] dump_stack_lvl+0x18c/0x250 [ 347.349859][T10407] ? show_regs_print_info+0x20/0x20 [ 347.355552][T10407] ? load_image+0x420/0x420 [ 347.360204][T10407] ? __might_sleep+0xe0/0xe0 [ 347.364852][T10407] ? __lock_acquire+0x7d40/0x7d40 [ 347.369946][T10407] should_fail_ex+0x39d/0x4d0 [ 347.374738][T10407] should_failslab+0x9/0x20 [ 347.379303][T10407] slab_pre_alloc_hook+0x59/0x310 [ 347.384406][T10407] kmem_cache_alloc_node+0x60/0x320 [ 347.389665][T10407] ? __alloc_skb+0x103/0x2c0 [ 347.394312][T10407] __alloc_skb+0x103/0x2c0 [ 347.398822][T10407] alloc_skb_with_frags+0xca/0x7b0 [ 347.403958][T10407] ? mark_lock+0x94/0x320 [ 347.408333][T10407] sock_alloc_send_pskb+0x883/0x9a0 [ 347.413784][T10407] ? sock_kzfree_s+0x50/0x50 [ 347.418449][T10407] tun_get_user+0x82c/0x3ca0 [ 347.423110][T10407] ? aa_file_perm+0x11b/0xee0 [ 347.427845][T10407] ? rcu_read_unlock+0xa0/0xa0 [ 347.432674][T10407] ? tun_get+0x1c/0x2e0 [ 347.436887][T10407] ? __lock_acquire+0x7d40/0x7d40 [ 347.441975][T10407] ? tun_get+0x1c/0x2e0 [ 347.446202][T10407] tun_chr_write_iter+0x119/0x200 [ 347.451287][T10407] vfs_write+0x46c/0x990 [ 347.455600][T10407] ? file_end_write+0x250/0x250 [ 347.460518][T10407] ? __fget_files+0x43d/0x4b0 [ 347.465263][T10407] ? __fdget_pos+0x1d8/0x330 [ 347.469914][T10407] ? ksys_write+0x75/0x260 [ 347.474409][T10407] ksys_write+0x150/0x260 [ 347.478811][T10407] ? __ia32_sys_read+0x90/0x90 [ 347.483677][T10407] ? lockdep_hardirqs_on+0x98/0x150 [ 347.488944][T10407] do_syscall_64+0x55/0xa0 [ 347.493417][T10407] ? clear_bhb_loop+0x40/0x90 [ 347.498161][T10407] ? clear_bhb_loop+0x40/0x90 [ 347.502904][T10407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.508861][T10407] RIP: 0033:0x7ff03f79ce59 [ 347.513325][T10407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.532986][T10407] RSP: 002b:00007ff04058e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 347.541551][T10407] RAX: ffffffffffffffda RBX: 00007ff03fa16090 RCX: 00007ff03f79ce59 [ 347.549571][T10407] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 347.557775][T10407] RBP: 00007ff04058e090 R08: 0000000000000000 R09: 0000000000000000 [ 347.565807][T10407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.573836][T10407] R13: 00007ff03fa16128 R14: 00007ff03fa16090 R15: 00007ffde0ee9ba8 [ 347.581882][T10407] [ 347.873611][T10411] netlink: 'syz.3.1664': attribute type 10 has an invalid length. [ 347.885407][T10411] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1664'. [ 349.810246][T10446] netlink: 'syz.2.1677': attribute type 10 has an invalid length. [ 349.832559][T10446] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1677'. [ 351.302104][T10481] netlink: 'syz.3.1691': attribute type 10 has an invalid length. [ 351.310218][T10481] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1691'. [ 352.631614][T10508] netlink: 'syz.1.1703': attribute type 10 has an invalid length. [ 352.650062][T10508] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1703'. [ 353.775076][T10535] netlink: 'syz.3.1713': attribute type 10 has an invalid length. [ 353.816550][T10535] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1713'. [ 354.797518][T10560] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1721'. [ 354.843454][T10560] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1721'. [ 354.881469][T10562] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1721'. [ 354.907240][T10560] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1721'. [ 355.137323][T10566] netlink: 'syz.1.1723': attribute type 10 has an invalid length. [ 355.168219][T10566] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1723'. [ 356.233368][T10595] netlink: 'syz.0.1733': attribute type 10 has an invalid length. [ 356.242081][T10595] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1733'. [ 356.462406][T10602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1737'. [ 356.674434][T10602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1737'. [ 356.694242][T10608] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1737'. [ 356.711805][T10606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1737'. [ 357.565205][T10628] netlink: 'syz.2.1745': attribute type 21 has an invalid length. [ 357.583807][T10628] IPv6: NLM_F_CREATE should be specified when creating new route [ 357.596051][T10628] IPv6: Can't replace route, no match found [ 357.616421][T10628] netlink: 'syz.2.1745': attribute type 2 has an invalid length. [ 357.636346][T10628] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1745'. [ 357.803398][T10634] netlink: 'syz.0.1746': attribute type 10 has an invalid length. [ 358.845464][T10662] netlink: 'syz.1.1758': attribute type 10 has an invalid length. [ 358.905620][T10664] FAULT_INJECTION: forcing a failure. [ 358.905620][T10664] name failslab, interval 1, probability 0, space 0, times 0 [ 358.928735][T10664] CPU: 1 PID: 10664 Comm: syz.0.1759 Not tainted syzkaller #0 [ 358.936300][T10664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 358.946405][T10664] Call Trace: [ 358.949741][T10664] [ 358.952710][T10664] dump_stack_lvl+0x18c/0x250 [ 358.957462][T10664] ? show_regs_print_info+0x20/0x20 [ 358.962725][T10664] ? load_image+0x420/0x420 [ 358.967293][T10664] ? __might_sleep+0xe0/0xe0 [ 358.971942][T10664] ? __lock_acquire+0x7d40/0x7d40 [ 358.977026][T10664] should_fail_ex+0x39d/0x4d0 [ 358.981774][T10664] should_failslab+0x9/0x20 [ 358.986337][T10664] slab_pre_alloc_hook+0x59/0x310 [ 358.991437][T10664] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 358.997216][T10664] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 359.002991][T10664] __kmem_cache_alloc_node+0x53/0x250 [ 359.008427][T10664] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 359.014195][T10664] __kmalloc+0xa4/0x230 [ 359.018430][T10664] tomoyo_realpath_from_path+0xe3/0x5d0 [ 359.024126][T10664] tomoyo_path_number_perm+0x248/0x620 [ 359.029662][T10664] ? tomoyo_path_number_perm+0x217/0x620 [ 359.035370][T10664] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 359.040899][T10664] ? ksys_write+0x1c4/0x260 [ 359.045494][T10664] ? __fget_files+0x28/0x4b0 [ 359.050154][T10664] ? __fget_files+0x28/0x4b0 [ 359.054822][T10664] security_file_ioctl+0x70/0xa0 [ 359.059838][T10664] __se_sys_ioctl+0x48/0x170 [ 359.064492][T10664] do_syscall_64+0x55/0xa0 [ 359.068960][T10664] ? clear_bhb_loop+0x40/0x90 [ 359.073695][T10664] ? clear_bhb_loop+0x40/0x90 [ 359.078425][T10664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.084358][T10664] RIP: 0033:0x7fba8d19ce59 [ 359.088813][T10664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.108467][T10664] RSP: 002b:00007fba8dfe3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.116935][T10664] RAX: ffffffffffffffda RBX: 00007fba8d415fa0 RCX: 00007fba8d19ce59 [ 359.124947][T10664] RDX: 0000200000000080 RSI: 0000000000008940 RDI: 0000000000000004 [ 359.132953][T10664] RBP: 00007fba8dfe3090 R08: 0000000000000000 R09: 0000000000000000 [ 359.140958][T10664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.149058][T10664] R13: 00007fba8d416038 R14: 00007fba8d415fa0 R15: 00007ffdaa331278 [ 359.157109][T10664] [ 359.176890][T10664] ERROR: Out of memory at tomoyo_realpath_from_path. [ 360.623194][T10685] netlink: 'syz.3.1768': attribute type 10 has an invalid length. [ 360.641520][T10685] __nla_validate_parse: 2 callbacks suppressed [ 360.641719][T10685] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1768'. [ 361.711919][T10717] netlink: 'syz.2.1780': attribute type 10 has an invalid length. [ 361.720136][T10717] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1780'. [ 363.073633][T10746] netlink: 'syz.3.1793': attribute type 10 has an invalid length. [ 363.125786][T10746] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1793'. [ 363.871664][T10755] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1797'. [ 363.918032][T10757] FAULT_INJECTION: forcing a failure. [ 363.918032][T10757] name failslab, interval 1, probability 0, space 0, times 0 [ 363.946640][T10757] CPU: 1 PID: 10757 Comm: syz.1.1796 Not tainted syzkaller #0 [ 363.954196][T10757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 363.964318][T10757] Call Trace: [ 363.967655][T10757] [ 363.970639][T10757] dump_stack_lvl+0x18c/0x250 [ 363.975397][T10757] ? show_regs_print_info+0x20/0x20 [ 363.980683][T10757] ? load_image+0x420/0x420 [ 363.985245][T10757] ? perf_trace_lock_acquire+0x104/0x410 [ 363.990955][T10757] should_fail_ex+0x39d/0x4d0 [ 363.995707][T10757] should_failslab+0x9/0x20 [ 364.000277][T10757] slab_pre_alloc_hook+0x59/0x310 [ 364.005387][T10757] kmem_cache_alloc+0x5a/0x2d0 [ 364.010205][T10757] ? skb_clone+0x1eb/0x370 [ 364.014683][T10757] skb_clone+0x1eb/0x370 [ 364.018982][T10757] __netlink_deliver_tap+0x41c/0x830 [ 364.024341][T10757] ? netlink_deliver_tap+0x2e/0x1b0 [ 364.029603][T10757] netlink_deliver_tap+0x19c/0x1b0 [ 364.034787][T10757] netlink_dump+0x94b/0xe50 [ 364.039371][T10757] ? netlink_lookup+0x200/0x200 [ 364.044332][T10757] ? slab_free_freelist_hook+0x130/0x1a0 [ 364.050026][T10757] ? netlink_recvmsg+0x5e7/0xe60 [ 364.055023][T10757] ? kmem_cache_free+0xf8/0x270 [ 364.059948][T10757] netlink_recvmsg+0x693/0xe60 [ 364.064805][T10757] ? netlink_sendmsg+0xbf0/0xbf0 [ 364.069820][T10757] ? aa_af_perm+0x330/0x330 [ 364.074390][T10757] ? verify_lock_unused+0x140/0x140 [ 364.079653][T10757] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 364.085001][T10757] ? security_socket_recvmsg+0x89/0xb0 [ 364.090527][T10757] ? netlink_sendmsg+0xbf0/0xbf0 [ 364.095540][T10757] ____sys_recvmsg+0x2ce/0x5e0 [ 364.100376][T10757] ? __sys_recvmsg_sock+0x50/0x50 [ 364.105478][T10757] ? import_iovec+0x73/0xa0 [ 364.110031][T10757] ___sys_recvmsg+0x216/0x590 [ 364.114766][T10757] ? __sys_recvmsg+0x2a0/0x2a0 [ 364.119586][T10757] ? ksys_write+0x1c4/0x260 [ 364.124156][T10757] ? __fget_files+0x43d/0x4b0 [ 364.128905][T10757] __x64_sys_recvmsg+0x20c/0x2e0 [ 364.133904][T10757] ? ___sys_recvmsg+0x590/0x590 [ 364.138812][T10757] ? lockdep_hardirqs_on+0x98/0x150 [ 364.144057][T10757] do_syscall_64+0x55/0xa0 [ 364.148519][T10757] ? clear_bhb_loop+0x40/0x90 [ 364.153242][T10757] ? clear_bhb_loop+0x40/0x90 [ 364.157959][T10757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.163896][T10757] RIP: 0033:0x7f486659ce59 [ 364.168346][T10757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.188184][T10757] RSP: 002b:00007f486749e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 364.196655][T10757] RAX: ffffffffffffffda RBX: 00007f4866815fa0 RCX: 00007f486659ce59 [ 364.204684][T10757] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 364.212726][T10757] RBP: 00007f486749e090 R08: 0000000000000000 R09: 0000000000000000 [ 364.220841][T10757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.229052][T10757] R13: 00007f4866816038 R14: 00007f4866815fa0 R15: 00007fffaa78b938 [ 364.237105][T10757] [ 364.437709][T10767] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1800'. [ 364.458790][T10767] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1800'. [ 364.478921][T10767] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1800'. [ 364.492566][T10767] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1800'. [ 364.852233][T10773] netlink: 'syz.3.1803': attribute type 10 has an invalid length. [ 364.860764][T10773] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1803'. [ 365.895592][T10799] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1813'. [ 365.904754][T10799] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1813'. [ 365.915901][T10799] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1813'. [ 365.926176][T10799] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1813'. [ 365.988007][T10802] netlink: 'syz.0.1814': attribute type 10 has an invalid length. [ 366.007683][T10802] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1814'. [ 366.027449][T10800] netlink: 'syz.2.1812': attribute type 10 has an invalid length. [ 366.051856][T10800] netlink: 'syz.2.1812': attribute type 11 has an invalid length. [ 366.071837][T10800] netlink: 'syz.2.1812': attribute type 11 has an invalid length. [ 366.102901][T10800] netlink: 'syz.2.1812': attribute type 11 has an invalid length. [ 366.123634][T10800] netlink: 'syz.2.1812': attribute type 11 has an invalid length. [ 366.132606][T10800] netlink: 'syz.2.1812': attribute type 11 has an invalid length. [ 366.141564][T10800] netlink: 'syz.2.1812': attribute type 11 has an invalid length. [ 366.152042][T10800] netlink: 'syz.2.1812': attribute type 11 has an invalid length. [ 366.160975][T10800] netlink: 'syz.2.1812': attribute type 11 has an invalid length. [ 366.171382][T10800] netlink: 'syz.2.1812': attribute type 11 has an invalid length. [ 366.187441][T10800] netlink: 'syz.2.1812': attribute type 11 has an invalid length. [ 366.214517][T10800] netlink: 'syz.2.1812': attribute type 4 has an invalid length. [ 366.246444][T10800] netlink: 'syz.2.1812': attribute type 5 has an invalid length. [ 366.292354][T10800] netlink: 208556 bytes leftover after parsing attributes in process `syz.2.1812'. [ 367.424376][T10833] netlink: 'syz.2.1824': attribute type 10 has an invalid length. [ 367.432768][T10833] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1824'. [ 367.564290][T10837] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1825'. [ 367.577183][T10837] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1825'. [ 367.605803][T10837] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1825'. [ 368.681509][T10864] netlink: 'syz.3.1836': attribute type 10 has an invalid length. [ 370.281034][T10893] netlink: 'syz.0.1848': attribute type 10 has an invalid length. [ 371.361580][T10926] netlink: 'syz.3.1860': attribute type 10 has an invalid length. [ 371.369909][T10926] __nla_validate_parse: 14 callbacks suppressed [ 371.369925][T10926] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1860'. [ 371.692924][T10932] netlink: 'syz.1.1863': attribute type 29 has an invalid length. [ 371.728033][T10932] netlink: 'syz.1.1863': attribute type 29 has an invalid length. [ 371.747155][T10933] netlink: 'syz.1.1863': attribute type 29 has an invalid length. [ 371.780410][T10932] netlink: 'syz.1.1863': attribute type 29 has an invalid length. [ 371.800359][T10932] netlink: 'syz.1.1863': attribute type 29 has an invalid length. [ 371.977335][T10942] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1866'. [ 371.991732][T10942] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1866'. [ 372.003441][T10942] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1866'. [ 372.034162][T10942] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1866'. [ 372.512897][T10951] netlink: 'syz.2.1870': attribute type 10 has an invalid length. [ 372.526598][T10951] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1870'. [ 373.089951][T10967] netlink: 64159 bytes leftover after parsing attributes in process `syz.3.1877'. [ 373.166671][T10973] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1876'. [ 373.207301][T10973] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1876'. [ 373.299487][T10974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1876'. [ 373.319022][T10976] netlink: 'syz.3.1880': attribute type 10 has an invalid length. [ 374.515990][T11005] netlink: 'syz.0.1890': attribute type 10 has an invalid length. [ 374.824294][ T34] tipc: Subscription rejected, illegal request [ 375.292575][T11027] netlink: 'syz.0.1900': attribute type 10 has an invalid length. [ 376.618773][T11060] netlink: 'syz.2.1910': attribute type 10 has an invalid length. [ 376.627022][T11060] __nla_validate_parse: 8 callbacks suppressed [ 376.627037][T11060] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1910'. [ 376.831892][T11068] FAULT_INJECTION: forcing a failure. [ 376.831892][T11068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.858625][T11068] CPU: 0 PID: 11068 Comm: syz.1.1914 Not tainted syzkaller #0 [ 376.866228][T11068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 376.876421][T11068] Call Trace: [ 376.879750][T11068] [ 376.882822][T11068] dump_stack_lvl+0x18c/0x250 [ 376.887582][T11068] ? show_regs_print_info+0x20/0x20 [ 376.892940][T11068] ? load_image+0x420/0x420 [ 376.897512][T11068] ? __might_fault+0xaa/0x120 [ 376.902246][T11068] ? __lock_acquire+0x7d40/0x7d40 [ 376.907331][T11068] should_fail_ex+0x39d/0x4d0 [ 376.912080][T11068] _copy_to_user+0x2f/0xa0 [ 376.916560][T11068] bpf_verifier_vlog+0x5db/0x870 [ 376.921570][T11068] __btf_verifier_log+0xe3/0x140 [ 376.926576][T11068] ? btf_check_sec_info+0x350/0x350 [ 376.931844][T11068] ? __lock_acquire+0x7d40/0x7d40 [ 376.936930][T11068] ? btf_parse_hdr+0x1f5/0x710 [ 376.941767][T11068] btf_parse_hdr+0x2d0/0x710 [ 376.946412][T11068] btf_new_fd+0x397/0x9f0 [ 376.950806][T11068] ? bpf_btf_show_fdinfo+0x80/0x80 [ 376.955977][T11068] ? capable+0x88/0xe0 [ 376.960106][T11068] __sys_bpf+0x670/0x890 [ 376.964413][T11068] ? bpf_link_show_fdinfo+0x390/0x390 [ 376.969848][T11068] ? lock_chain_count+0x20/0x20 [ 376.974768][T11068] __x64_sys_bpf+0x7c/0x90 [ 376.979236][T11068] do_syscall_64+0x55/0xa0 [ 376.983700][T11068] ? clear_bhb_loop+0x40/0x90 [ 376.988438][T11068] ? clear_bhb_loop+0x40/0x90 [ 376.993179][T11068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.999136][T11068] RIP: 0033:0x7f486659ce59 [ 377.003593][T11068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.023258][T11068] RSP: 002b:00007f486749e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.031823][T11068] RAX: ffffffffffffffda RBX: 00007f4866815fa0 RCX: 00007f486659ce59 [ 377.039851][T11068] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 377.047864][T11068] RBP: 00007f486749e090 R08: 0000000000000000 R09: 0000000000000000 [ 377.055915][T11068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.063928][T11068] R13: 00007f4866816038 R14: 00007f4866815fa0 R15: 00007fffaa78b938 [ 377.071946][T11068] [ 378.339943][T11091] netlink: 'syz.0.1923': attribute type 10 has an invalid length. [ 378.348193][T11091] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1923'. [ 378.732620][T11103] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1929'. [ 378.899022][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.905533][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.471583][T11125] netlink: 'syz.3.1935': attribute type 10 has an invalid length. [ 379.480793][T11125] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1935'. [ 379.672086][T11130] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 379.685759][T11130] syzkaller1: linktype set to 769 [ 379.801692][T11138] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1940'. [ 380.523543][T11157] netlink: 'syz.0.1948': attribute type 10 has an invalid length. [ 380.562363][T11157] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1948'. [ 381.157975][T11168] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1951'. [ 381.770965][T11184] netlink: 'syz.3.1958': attribute type 10 has an invalid length. [ 381.795740][T11184] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1958'. [ 382.077953][T11192] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1962'. [ 382.585968][T11204] netlink: 'syz.2.1968': attribute type 10 has an invalid length. [ 382.615384][T11204] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1968'. [ 382.758251][T11212] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1972'. [ 382.814556][T11212] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1972'. [ 382.846586][T11213] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1972'. [ 382.923525][T11215] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1972'. [ 382.942366][T11215] FAULT_INJECTION: forcing a failure. [ 382.942366][T11215] name failslab, interval 1, probability 0, space 0, times 0 [ 382.955561][T11215] CPU: 0 PID: 11215 Comm: syz.1.1972 Not tainted syzkaller #0 [ 382.963184][T11215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 382.973319][T11215] Call Trace: [ 382.976664][T11215] [ 382.979667][T11215] dump_stack_lvl+0x18c/0x250 [ 382.984444][T11215] ? show_regs_print_info+0x20/0x20 [ 382.989717][T11215] ? load_image+0x420/0x420 [ 382.994316][T11215] ? skb_network_protocol+0x51f/0x780 [ 382.999798][T11215] should_fail_ex+0x39d/0x4d0 [ 383.004568][T11215] should_failslab+0x9/0x20 [ 383.009135][T11215] slab_pre_alloc_hook+0x59/0x310 [ 383.014251][T11215] kmem_cache_alloc+0x5a/0x2d0 [ 383.019085][T11215] ? skb_clone+0x1eb/0x370 [ 383.023604][T11215] skb_clone+0x1eb/0x370 [ 383.028009][T11215] ? dev_queue_xmit_nit+0x212/0xbb0 [ 383.033297][T11215] dev_queue_xmit_nit+0x24d/0xbb0 [ 383.038389][T11215] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 383.043572][T11215] ? validate_xmit_skb+0x949/0xf60 [ 383.048780][T11215] dev_hard_start_xmit+0x148/0x740 [ 383.054006][T11215] __dev_queue_xmit+0x19a3/0x3660 [ 383.059145][T11215] ? __dev_queue_xmit+0x265/0x3660 [ 383.064354][T11215] ? netdev_core_pick_tx+0x340/0x340 [ 383.069706][T11215] ? __copy_skb_header+0xa3/0x4a0 [ 383.074802][T11215] ? __asan_memcpy+0x40/0x70 [ 383.079474][T11215] ? __skb_clone+0x63/0x790 [ 383.084061][T11215] ? __skb_clone+0x480/0x790 [ 383.088743][T11215] ? skb_clone+0x21f/0x370 [ 383.093234][T11215] __netlink_deliver_tap+0x5ab/0x830 [ 383.098730][T11215] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.104015][T11215] netlink_deliver_tap+0x19c/0x1b0 [ 383.109201][T11215] netlink_dump+0x94b/0xe50 [ 383.113809][T11215] ? netlink_lookup+0x200/0x200 [ 383.118788][T11215] ? slab_free_freelist_hook+0x130/0x1a0 [ 383.124507][T11215] ? netlink_recvmsg+0x5e7/0xe60 [ 383.129516][T11215] ? kmem_cache_free+0xf8/0x270 [ 383.134543][T11215] netlink_recvmsg+0x693/0xe60 [ 383.139422][T11215] ? netlink_sendmsg+0xbf0/0xbf0 [ 383.144526][T11215] ? perf_trace_lock_acquire+0x34f/0x410 [ 383.150339][T11215] ? aa_af_perm+0x330/0x330 [ 383.154927][T11215] ? verify_lock_unused+0x140/0x140 [ 383.160341][T11215] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 383.165709][T11215] ? security_socket_recvmsg+0x89/0xb0 [ 383.171242][T11215] ? netlink_sendmsg+0xbf0/0xbf0 [ 383.176294][T11215] ____sys_recvmsg+0x2ce/0x5e0 [ 383.181197][T11215] ? __sys_recvmsg_sock+0x50/0x50 [ 383.186367][T11215] ? import_iovec+0x73/0xa0 [ 383.190971][T11215] ___sys_recvmsg+0x216/0x590 [ 383.195921][T11215] ? __sys_recvmsg+0x2a0/0x2a0 [ 383.200794][T11215] ? ksys_write+0x1c4/0x260 [ 383.205430][T11215] ? __fget_files+0x43d/0x4b0 [ 383.210259][T11215] __x64_sys_recvmsg+0x20c/0x2e0 [ 383.215295][T11215] ? ___sys_recvmsg+0x590/0x590 [ 383.220281][T11215] ? lockdep_hardirqs_on+0x98/0x150 [ 383.225573][T11215] do_syscall_64+0x55/0xa0 [ 383.230054][T11215] ? clear_bhb_loop+0x40/0x90 [ 383.234808][T11215] ? clear_bhb_loop+0x40/0x90 [ 383.239560][T11215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.245529][T11215] RIP: 0033:0x7f486659ce59 [ 383.250020][T11215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.269696][T11215] RSP: 002b:00007f486745c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 383.278287][T11215] RAX: ffffffffffffffda RBX: 00007f4866816180 RCX: 00007f486659ce59 [ 383.286333][T11215] RDX: 0000000000000080 RSI: 0000200000000900 RDI: 0000000000000003 [ 383.294367][T11215] RBP: 00007f486745c090 R08: 0000000000000000 R09: 0000000000000000 [ 383.302386][T11215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.310413][T11215] R13: 00007f4866816218 R14: 00007f4866816180 R15: 00007fffaa78b938 [ 383.318537][T11215] [ 383.403186][T11217] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1971'. [ 384.100809][T11233] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1979'. [ 384.137813][T11233] netlink: 'syz.0.1979': attribute type 10 has an invalid length. [ 384.157841][T11233] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1979'. [ 385.243805][T11254] FAULT_INJECTION: forcing a failure. [ 385.243805][T11254] name failslab, interval 1, probability 0, space 0, times 0 [ 385.276834][T11254] CPU: 0 PID: 11254 Comm: syz.3.1986 Not tainted syzkaller #0 [ 385.284378][T11254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 385.294827][T11254] Call Trace: [ 385.298153][T11254] [ 385.301127][T11254] dump_stack_lvl+0x18c/0x250 [ 385.305886][T11254] ? show_regs_print_info+0x20/0x20 [ 385.311149][T11254] ? load_image+0x420/0x420 [ 385.315713][T11254] ? __might_sleep+0xe0/0xe0 [ 385.320357][T11254] ? __lock_acquire+0x7d40/0x7d40 [ 385.325543][T11254] should_fail_ex+0x39d/0x4d0 [ 385.330291][T11254] should_failslab+0x9/0x20 [ 385.334850][T11254] slab_pre_alloc_hook+0x59/0x310 [ 385.339941][T11254] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 385.345719][T11254] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 385.351494][T11254] __kmem_cache_alloc_node+0x53/0x250 [ 385.356952][T11254] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 385.362803][T11254] __kmalloc+0xa4/0x230 [ 385.367001][T11254] tomoyo_realpath_from_path+0xe3/0x5d0 [ 385.372593][T11254] tomoyo_path_number_perm+0x248/0x620 [ 385.378090][T11254] ? tomoyo_path_number_perm+0x217/0x620 [ 385.383770][T11254] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 385.389286][T11254] ? ksys_write+0x1c4/0x260 [ 385.393851][T11254] ? __fget_files+0x28/0x4b0 [ 385.398480][T11254] ? __fget_files+0x28/0x4b0 [ 385.403109][T11254] security_file_ioctl+0x70/0xa0 [ 385.408081][T11254] __se_sys_ioctl+0x48/0x170 [ 385.412709][T11254] do_syscall_64+0x55/0xa0 [ 385.417146][T11254] ? clear_bhb_loop+0x40/0x90 [ 385.421848][T11254] ? clear_bhb_loop+0x40/0x90 [ 385.426560][T11254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.432481][T11254] RIP: 0033:0x7ff03f79ce59 [ 385.436920][T11254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.456556][T11254] RSP: 002b:00007ff04058e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.464999][T11254] RAX: ffffffffffffffda RBX: 00007ff03fa16090 RCX: 00007ff03f79ce59 [ 385.473000][T11254] RDX: 0000200000000080 RSI: 0000000000008b0f RDI: 0000000000000006 [ 385.480997][T11254] RBP: 00007ff04058e090 R08: 0000000000000000 R09: 0000000000000000 [ 385.488993][T11254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.497001][T11254] R13: 00007ff03fa16128 R14: 00007ff03fa16090 R15: 00007ffde0ee9ba8 [ 385.505008][T11254] [ 385.515416][T11254] ERROR: Out of memory at tomoyo_realpath_from_path. [ 386.024922][T11269] netlink: 'syz.0.1992': attribute type 10 has an invalid length. [ 387.101631][T11285] __nla_validate_parse: 3 callbacks suppressed [ 387.101653][T11285] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1998'. [ 387.572674][T11298] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2004'. [ 387.597481][T11298] netlink: 'syz.1.2004': attribute type 10 has an invalid length. [ 387.600166][T11300] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2005'. [ 387.617699][T11298] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.2004'. [ 387.621485][T11300] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2005'. [ 387.675373][T11302] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2005'. [ 388.098375][T11311] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2009'. [ 388.967971][T11318] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2011'. [ 389.469313][T11327] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2015'. [ 389.483861][T11327] netlink: 'syz.2.2015': attribute type 10 has an invalid length. [ 389.492011][T11327] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.2015'. [ 390.153630][T11347] netlink: 'syz.0.2026': attribute type 10 has an invalid length. [ 390.876655][T11360] FAULT_INJECTION: forcing a failure. [ 390.876655][T11360] name failslab, interval 1, probability 0, space 0, times 0 [ 390.892476][T11360] CPU: 0 PID: 11360 Comm: syz.3.2030 Not tainted syzkaller #0 [ 390.900032][T11360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 390.910148][T11360] Call Trace: [ 390.913479][T11360] [ 390.916457][T11360] dump_stack_lvl+0x18c/0x250 [ 390.921206][T11360] ? show_regs_print_info+0x20/0x20 [ 390.926471][T11360] ? load_image+0x420/0x420 [ 390.931043][T11360] ? __might_sleep+0xe0/0xe0 [ 390.935692][T11360] ? __lock_acquire+0x7d40/0x7d40 [ 390.940776][T11360] ? queue_work_on+0x19a/0x1f0 [ 390.945607][T11360] should_fail_ex+0x39d/0x4d0 [ 390.950351][T11360] should_failslab+0x9/0x20 [ 390.954924][T11360] slab_pre_alloc_hook+0x59/0x310 [ 390.960027][T11360] kmem_cache_alloc_node+0x60/0x320 [ 390.965278][T11360] ? __alloc_skb+0x103/0x2c0 [ 390.969938][T11360] __alloc_skb+0x103/0x2c0 [ 390.974416][T11360] rtmsg_fib+0xeb/0x4c0 [ 390.978639][T11360] ? atomic_notifier_call_chain+0x16e/0x180 [ 390.984603][T11360] fib_table_delete+0xd04/0xff0 [ 390.989546][T11360] ? nexthop_get_nhc_lookup+0x400/0x400 [ 390.995334][T11360] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 391.001999][T11360] ? l3mdev_fib_table+0x18/0x160 [ 391.007090][T11360] ? fib_new_table+0x10a/0x2d0 [ 391.011929][T11360] fib_magic+0x305/0x3c0 [ 391.016235][T11360] ? fib_add_ifaddr+0x5e0/0x5e0 [ 391.021168][T11360] fib_del_ifaddr+0x1082/0x1480 [ 391.026089][T11360] ? inetaddr_event+0xf0/0x150 [ 391.030918][T11360] ? is_eth_active_slave_of_bonding_rcu+0x260/0x260 [ 391.037566][T11360] ? netlink_broadcast_filtered+0x10a4/0x1110 [ 391.043689][T11360] ? fib_del_ifaddr+0x2fa/0x1480 [ 391.048766][T11360] fib_inetaddr_event+0xbb/0x1d0 [ 391.053774][T11360] notifier_call_chain+0x197/0x380 [ 391.058969][T11360] blocking_notifier_call_chain+0x6a/0x90 [ 391.064751][T11360] __inet_del_ifa+0x879/0x1020 [ 391.069602][T11360] devinet_ioctl+0xd63/0x1c40 [ 391.074350][T11360] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 391.079515][T11360] ? _copy_from_user+0xa5/0xe0 [ 391.084333][T11360] ? get_user_ifreq+0x12b/0x180 [ 391.089236][T11360] inet_ioctl+0x42b/0x560 [ 391.093623][T11360] ? tomoyo_path_number_perm+0x217/0x620 [ 391.099331][T11360] ? inet_shutdown+0x370/0x370 [ 391.104153][T11360] ? slab_free_freelist_hook+0x130/0x1a0 [ 391.109857][T11360] ? tomoyo_path_number_perm+0x500/0x620 [ 391.115563][T11360] ? __kmem_cache_free+0xba/0x1e0 [ 391.120666][T11360] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 391.126194][T11360] ? packet_ioctl+0x269/0x340 [ 391.130944][T11360] sock_do_ioctl+0xfc/0x310 [ 391.135514][T11360] ? sock_show_fdinfo+0xb0/0xb0 [ 391.140443][T11360] sock_ioctl+0x5ba/0x7e0 [ 391.144842][T11360] ? sock_poll+0x3e0/0x3e0 [ 391.149332][T11360] ? bpf_lsm_file_ioctl+0x9/0x10 [ 391.154322][T11360] ? security_file_ioctl+0x80/0xa0 [ 391.159611][T11360] ? sock_poll+0x3e0/0x3e0 [ 391.164080][T11360] __se_sys_ioctl+0xfd/0x170 [ 391.168732][T11360] do_syscall_64+0x55/0xa0 [ 391.173203][T11360] ? clear_bhb_loop+0x40/0x90 [ 391.177933][T11360] ? clear_bhb_loop+0x40/0x90 [ 391.182664][T11360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.188595][T11360] RIP: 0033:0x7ff03f79ce59 [ 391.193066][T11360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.212746][T11360] RSP: 002b:00007ff0405af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.221231][T11360] RAX: ffffffffffffffda RBX: 00007ff03fa15fa0 RCX: 00007ff03f79ce59 [ 391.229261][T11360] RDX: 0000200000000000 RSI: 000000000000891a RDI: 0000000000000003 [ 391.237297][T11360] RBP: 00007ff0405af090 R08: 0000000000000000 R09: 0000000000000000 [ 391.245328][T11360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.253358][T11360] R13: 00007ff03fa16038 R14: 00007ff03fa15fa0 R15: 00007ffde0ee9ba8 [ 391.261499][T11360] [ 391.910070][T11385] netlink: 'syz.0.2037': attribute type 10 has an invalid length. [ 392.162233][T11394] __nla_validate_parse: 8 callbacks suppressed [ 392.162252][T11394] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2043'. [ 392.704747][T11407] netlink: 'syz.0.2046': attribute type 1 has an invalid length. [ 393.182797][T11412] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2049'. [ 393.678114][T11421] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2053'. [ 394.225080][T11439] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2060'. [ 394.890532][T11451] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 394.918920][T11451] dvmrp1: persist disabled [ 394.943697][T11457] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2065'. [ 396.001277][T11470] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2071'. [ 396.275940][T11480] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2076'. [ 396.729822][T11489] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2079'. [ 397.271240][T11504] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2083'. [ 397.435405][T11511] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2087'. [ 398.404175][T11531] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2095'. [ 398.740283][T11539] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2099'. [ 399.192328][T11561] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2107'. [ 399.650193][T11571] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2112'. [ 399.882461][T11574] FAULT_INJECTION: forcing a failure. [ 399.882461][T11574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.914920][T11574] CPU: 1 PID: 11574 Comm: syz.3.2113 Not tainted syzkaller #0 [ 399.922487][T11574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 399.932602][T11574] Call Trace: [ 399.935935][T11574] [ 399.938919][T11574] dump_stack_lvl+0x18c/0x250 [ 399.943679][T11574] ? show_regs_print_info+0x20/0x20 [ 399.948956][T11574] ? load_image+0x420/0x420 [ 399.953523][T11574] ? __might_fault+0xaa/0x120 [ 399.958256][T11574] ? __lock_acquire+0x7d40/0x7d40 [ 399.963337][T11574] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 399.969384][T11574] should_fail_ex+0x39d/0x4d0 [ 399.974134][T11574] _copy_from_iter+0x1d9/0x12e0 [ 399.979051][T11574] ? __virt_addr_valid+0x18c/0x540 [ 399.984222][T11574] ? __lock_acquire+0x7d40/0x7d40 [ 399.989305][T11574] ? copyout_mc+0x70/0x70 [ 399.993706][T11574] ? __virt_addr_valid+0x18c/0x540 [ 399.998874][T11574] ? __virt_addr_valid+0x18c/0x540 [ 400.004038][T11574] ? __virt_addr_valid+0x469/0x540 [ 400.009205][T11574] ? __check_object_size+0x506/0xa20 [ 400.014547][T11574] netlink_sendmsg+0x76b/0xbf0 [ 400.019379][T11574] ? netlink_getsockopt+0x590/0x590 [ 400.024640][T11574] ? aa_sock_msg_perm+0x94/0x150 [ 400.029642][T11574] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 400.034985][T11574] ? security_socket_sendmsg+0x80/0xa0 [ 400.040497][T11574] ? netlink_getsockopt+0x590/0x590 [ 400.045761][T11574] ____sys_sendmsg+0x5ba/0x960 [ 400.050592][T11574] ? __asan_memset+0x22/0x40 [ 400.055239][T11574] ? __sys_sendmsg_sock+0x30/0x30 [ 400.060319][T11574] ? __import_iovec+0x5f2/0x850 [ 400.065229][T11574] ? import_iovec+0x73/0xa0 [ 400.069782][T11574] ___sys_sendmsg+0x2a6/0x360 [ 400.074512][T11574] ? __sys_sendmsg+0x2a0/0x2a0 [ 400.079377][T11574] __se_sys_sendmsg+0x1c2/0x2b0 [ 400.084280][T11574] ? __x64_sys_sendmsg+0x80/0x80 [ 400.089288][T11574] ? lockdep_hardirqs_on+0x98/0x150 [ 400.094542][T11574] do_syscall_64+0x55/0xa0 [ 400.099010][T11574] ? clear_bhb_loop+0x40/0x90 [ 400.103741][T11574] ? clear_bhb_loop+0x40/0x90 [ 400.108480][T11574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.114448][T11574] RIP: 0033:0x7ff03f79ce59 [ 400.118912][T11574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.138574][T11574] RSP: 002b:00007ff0405af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.147051][T11574] RAX: ffffffffffffffda RBX: 00007ff03fa15fa0 RCX: 00007ff03f79ce59 [ 400.155118][T11574] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 400.163142][T11574] RBP: 00007ff0405af090 R08: 0000000000000000 R09: 0000000000000000 [ 400.171168][T11574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.179197][T11574] R13: 00007ff03fa16038 R14: 00007ff03fa15fa0 R15: 00007ffde0ee9ba8 [ 400.187249][T11574] [ 400.988011][T11585] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2116'. [ 401.575705][T11601] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2123'. [ 401.828448][T11610] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2127'. [ 403.920406][T11635] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2135'. [ 404.088361][T11641] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2137'. [ 404.199036][T11643] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2138'. [ 404.700304][T11654] netlink: 'syz.0.2143': attribute type 29 has an invalid length. [ 404.712610][T11654] netlink: 'syz.0.2143': attribute type 29 has an invalid length. [ 404.758449][T11658] netlink: 'syz.0.2143': attribute type 29 has an invalid length. [ 404.942735][T11654] netlink: 'syz.0.2143': attribute type 29 has an invalid length. [ 405.010007][T11658] netlink: 'syz.0.2143': attribute type 29 has an invalid length. [ 405.246599][T11669] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2146'. [ 405.337446][T11672] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2148'. [ 405.615577][T11680] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2151'. [ 406.282282][T11696] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2158'. [ 406.697198][T11701] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2159'. [ 407.219957][T11716] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2167'. [ 408.461419][T11735] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2172'. [ 408.702113][T11743] netlink: 'syz.3.2176': attribute type 41 has an invalid length. [ 411.576833][T11776] __nla_validate_parse: 1 callbacks suppressed [ 411.576853][T11776] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2186'. [ 411.635910][T11782] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2188'. [ 412.596493][T11798] netlink: 'syz.0.2195': attribute type 10 has an invalid length. [ 412.614879][T11798] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.2195'. [ 412.907459][T11805] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2199'. [ 412.935886][T11810] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2200'. [ 415.144519][T11843] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2211'. [ 415.216575][T11844] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2210'. [ 415.323495][T11848] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2213'. [ 415.657300][T11855] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2223'. [ 416.732301][T11877] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2222'. [ 417.094246][T11882] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2225'. [ 417.548815][T11887] netlink: 'syz.2.2227': attribute type 29 has an invalid length. [ 417.571592][T11887] netlink: 'syz.2.2227': attribute type 29 has an invalid length. [ 417.611176][T11886] netlink: 'syz.2.2227': attribute type 29 has an invalid length. [ 417.653782][T11886] netlink: 'syz.2.2227': attribute type 29 has an invalid length. [ 417.688238][T11886] netlink: 'syz.2.2227': attribute type 29 has an invalid length. [ 417.771564][T11892] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.2229'. [ 418.616848][T11913] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2234'. [ 420.132867][T11941] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2245'. [ 420.808769][T11950] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.2250'. [ 421.893216][T11970] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2257'. [ 424.606851][T12005] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2268'. [ 424.929113][T12014] FAULT_INJECTION: forcing a failure. [ 424.929113][T12014] name failslab, interval 1, probability 0, space 0, times 0 [ 424.942929][T12014] CPU: 1 PID: 12014 Comm: syz.3.2272 Not tainted syzkaller #0 [ 424.950455][T12014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 424.960569][T12014] Call Trace: [ 424.963891][T12014] [ 424.966867][T12014] dump_stack_lvl+0x18c/0x250 [ 424.971618][T12014] ? show_regs_print_info+0x20/0x20 [ 424.976878][T12014] ? load_image+0x420/0x420 [ 424.981433][T12014] ? __might_sleep+0xe0/0xe0 [ 424.986053][T12014] ? __lock_acquire+0x7d40/0x7d40 [ 424.991114][T12014] should_fail_ex+0x39d/0x4d0 [ 424.995838][T12014] should_failslab+0x9/0x20 [ 425.000370][T12014] slab_pre_alloc_hook+0x59/0x310 [ 425.005427][T12014] ? tomoyo_encode+0x28b/0x540 [ 425.010217][T12014] ? tomoyo_encode+0x28b/0x540 [ 425.015004][T12014] __kmem_cache_alloc_node+0x53/0x250 [ 425.020408][T12014] ? tomoyo_encode+0x28b/0x540 [ 425.025191][T12014] __kmalloc+0xa4/0x230 [ 425.029389][T12014] tomoyo_encode+0x28b/0x540 [ 425.034013][T12014] tomoyo_realpath_from_path+0x592/0x5d0 [ 425.039683][T12014] tomoyo_path_number_perm+0x248/0x620 [ 425.045185][T12014] ? tomoyo_path_number_perm+0x217/0x620 [ 425.050859][T12014] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 425.056354][T12014] ? ksys_write+0x1c4/0x260 [ 425.060914][T12014] ? __fget_files+0x28/0x4b0 [ 425.065531][T12014] ? __fget_files+0x28/0x4b0 [ 425.070174][T12014] security_file_ioctl+0x70/0xa0 [ 425.075156][T12014] __se_sys_ioctl+0x48/0x170 [ 425.079792][T12014] do_syscall_64+0x55/0xa0 [ 425.084232][T12014] ? clear_bhb_loop+0x40/0x90 [ 425.088936][T12014] ? clear_bhb_loop+0x40/0x90 [ 425.093643][T12014] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.099569][T12014] RIP: 0033:0x7ff03f79ce59 [ 425.104007][T12014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.123640][T12014] RSP: 002b:00007ff0405af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.132077][T12014] RAX: ffffffffffffffda RBX: 00007ff03fa15fa0 RCX: 00007ff03f79ce59 [ 425.140072][T12014] RDX: 0000200000000540 RSI: 0000000000008943 RDI: 0000000000000003 [ 425.148064][T12014] RBP: 00007ff0405af090 R08: 0000000000000000 R09: 0000000000000000 [ 425.156055][T12014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.164055][T12014] R13: 00007ff03fa16038 R14: 00007ff03fa15fa0 R15: 00007ffde0ee9ba8 [ 425.172066][T12014] [ 425.204117][T12014] ERROR: Out of memory at tomoyo_realpath_from_path. [ 426.859190][T12031] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2278'. [ 426.921242][T12036] netlink: 759 bytes leftover after parsing attributes in process `syz.1.2276'. [ 429.783944][T12070] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2287'. [ 430.496398][T12087] tap0: tun_chr_ioctl cmd 1074025681 [ 431.383263][T12097] netlink: 'syz.1.2297': attribute type 39 has an invalid length. [ 432.203500][T12106] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2299'. [ 432.921156][T12123] FAULT_INJECTION: forcing a failure. [ 432.921156][T12123] name failslab, interval 1, probability 0, space 0, times 0 [ 432.968559][T12123] CPU: 1 PID: 12123 Comm: syz.1.2308 Not tainted syzkaller #0 [ 432.976112][T12123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 432.986236][T12123] Call Trace: [ 432.989560][T12123] [ 432.992535][T12123] dump_stack_lvl+0x18c/0x250 [ 432.997281][T12123] ? show_regs_print_info+0x20/0x20 [ 433.002546][T12123] ? load_image+0x420/0x420 [ 433.007109][T12123] ? __might_sleep+0xe0/0xe0 [ 433.011752][T12123] ? __lock_acquire+0x7d40/0x7d40 [ 433.016827][T12123] ? lockdep_hardirqs_on+0x98/0x150 [ 433.022086][T12123] should_fail_ex+0x39d/0x4d0 [ 433.026835][T12123] should_failslab+0x9/0x20 [ 433.031395][T12123] slab_pre_alloc_hook+0x59/0x310 [ 433.036487][T12123] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 433.042088][T12123] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 433.047683][T12123] __kmem_cache_alloc_node+0x53/0x250 [ 433.053380][T12123] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 433.058980][T12123] __kmalloc+0xa4/0x230 [ 433.063199][T12123] bpf_prog_test_run_skb+0x238/0x12b0 [ 433.068624][T12123] ? lockdep_hardirqs_on+0x98/0x150 [ 433.073883][T12123] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 433.080109][T12123] ? cpu_online+0x60/0x60 [ 433.084477][T12123] bpf_prog_test_run+0x321/0x390 [ 433.089454][T12123] __sys_bpf+0x49d/0x890 [ 433.093728][T12123] ? bpf_link_show_fdinfo+0x390/0x390 [ 433.099158][T12123] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 433.105374][T12123] __x64_sys_bpf+0x7c/0x90 [ 433.109830][T12123] do_syscall_64+0x55/0xa0 [ 433.114275][T12123] ? clear_bhb_loop+0x40/0x90 [ 433.118989][T12123] ? clear_bhb_loop+0x40/0x90 [ 433.123697][T12123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 433.129627][T12123] RIP: 0033:0x7f486659ce59 [ 433.134106][T12123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.153743][T12123] RSP: 002b:00007f486749e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 433.162188][T12123] RAX: ffffffffffffffda RBX: 00007f4866815fa0 RCX: 00007f486659ce59 [ 433.170191][T12123] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 433.178198][T12123] RBP: 00007f486749e090 R08: 0000000000000000 R09: 0000000000000000 [ 433.186199][T12123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.194193][T12123] R13: 00007f4866816038 R14: 00007f4866815fa0 R15: 00007fffaa78b938 [ 433.202210][T12123] [ 433.614806][ T5789] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7 [ 434.009218][T12135] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2312'. [ 434.466018][T12148] FAULT_INJECTION: forcing a failure. [ 434.466018][T12148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.481519][T12148] CPU: 0 PID: 12148 Comm: syz.2.2318 Not tainted syzkaller #0 [ 434.489061][T12148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 434.499184][T12148] Call Trace: [ 434.502517][T12148] [ 434.505505][T12148] dump_stack_lvl+0x18c/0x250 [ 434.510257][T12148] ? show_regs_print_info+0x20/0x20 [ 434.515528][T12148] ? load_image+0x420/0x420 [ 434.520102][T12148] ? __might_fault+0xaa/0x120 [ 434.524837][T12148] ? __lock_acquire+0x7d40/0x7d40 [ 434.529956][T12148] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 434.536254][T12148] should_fail_ex+0x39d/0x4d0 [ 434.540994][T12148] _copy_from_user+0x2f/0xe0 [ 434.545638][T12148] __sys_bpf+0x23e/0x890 [ 434.549937][T12148] ? bpf_link_show_fdinfo+0x390/0x390 [ 434.555374][T12148] ? lock_chain_count+0x20/0x20 [ 434.560279][T12148] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 434.566331][T12148] __x64_sys_bpf+0x7c/0x90 [ 434.570794][T12148] do_syscall_64+0x55/0xa0 [ 434.575249][T12148] ? clear_bhb_loop+0x40/0x90 [ 434.579982][T12148] ? clear_bhb_loop+0x40/0x90 [ 434.584705][T12148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.590647][T12148] RIP: 0033:0x7fb66459ce59 [ 434.595118][T12148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.614765][T12148] RSP: 002b:00007fb665424028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 434.623214][T12148] RAX: ffffffffffffffda RBX: 00007fb664815fa0 RCX: 00007fb66459ce59 [ 434.631216][T12148] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 434.639222][T12148] RBP: 00007fb665424090 R08: 0000000000000000 R09: 0000000000000000 [ 434.647216][T12148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.655213][T12148] R13: 00007fb664816038 R14: 00007fb664815fa0 R15: 00007fffcd497158 [ 434.663235][T12148] [ 435.262298][T12162] netlink: 'syz.1.2324': attribute type 10 has an invalid length. [ 435.340114][T12162] team0: Port device netdevsim0 added [ 436.052919][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 436.068294][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 436.088879][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 436.117448][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 436.127218][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 436.135584][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 436.656455][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.781875][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.814458][T12185] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2333'. [ 436.880102][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.967920][ T5781] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 438.255800][ T5781] Bluetooth: hci1: command tx timeout [ 438.292328][T12177] chnl_net:caif_netlink_parms(): no params data found [ 438.508864][T12211] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2339'. [ 438.579956][T12211] netlink: set zone limit has 4 unknown bytes [ 439.448217][T12177] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.456394][T12177] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.463665][T12177] bridge_slave_0: entered allmulticast mode [ 439.471777][T12177] bridge_slave_0: entered promiscuous mode [ 439.481874][T12223] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2342'. [ 439.596982][T12177] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.604207][T12177] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.646921][T12177] bridge_slave_1: entered allmulticast mode [ 439.654462][T12177] bridge_slave_1: entered promiscuous mode [ 439.901620][T12177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.925127][T12177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.123751][T12177] team0: Port device team_slave_0 added [ 440.138767][T12177] team0: Port device team_slave_1 added [ 440.415922][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.422328][ T5781] Bluetooth: hci1: command tx timeout [ 440.422752][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.438212][T12250] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2348'. [ 440.805029][T12177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.828333][T12177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.860380][T12177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.871293][ T5781] Bluetooth: hci3: unexpected event 0x20 length: 15 > 7 [ 441.038480][T12177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.083048][T12177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.118795][T12177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.338222][T12177] hsr_slave_0: entered promiscuous mode [ 441.379305][T12177] hsr_slave_1: entered promiscuous mode [ 441.557188][T12266] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2352'. [ 441.638278][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.666527][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.687408][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.694897][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.707095][ T11] batman_adv: batadv0: Interface deactivated: macvlan1 [ 441.714159][ T11] batman_adv: batadv0: Removing interface: macvlan1 [ 441.845752][ T11] veth1_vlan: left promiscuous mode [ 441.851725][ T11] veth0_vlan: left promiscuous mode [ 442.501367][ T5781] Bluetooth: hci1: command tx timeout [ 442.990428][ T11] team0 (unregistering): Port device team_slave_1 removed [ 443.039264][ T11] team0 (unregistering): Port device team_slave_0 removed [ 443.089699][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.140271][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.482077][ T11] bond0 (unregistering): Released all slaves [ 443.540136][T12282] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2362'. [ 449.996565][ T5781] Bluetooth: hci1: command tx timeout [ 501.784391][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.795300][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 549.115216][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 549.122007][ C1] rcu: 1-....: (1 GPs behind) idle=b434/1/0x4000000000000000 softirq=42401/42402 fqs=5030 [ 549.133172][ C1] rcu: hardirqs softirqs csw/system [ 549.139598][ C1] rcu: number: 1203918 0 0 [ 549.146050][ C1] rcu: cputime: 19560 32929 68 ==> 52500(ms) [ 549.153888][ C1] rcu: (t=10502 jiffies g=61109 q=658 ncpus=2) [ 549.160182][ C1] CPU: 1 PID: 12299 Comm: syz.2.2358 Not tainted syzkaller #0 [ 549.167706][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 549.177821][ C1] RIP: 0010:get_random_u8+0x51b/0x970 [ 549.183256][ C1] Code: fc 4d 85 f6 75 16 e8 b4 bc db fc eb 15 e8 ad bc db fc e8 88 05 db 05 4d 85 f6 74 ea e8 9e bc db fc fb 0f b6 84 24 00 01 00 00 <43> c6 44 2f 18 f8 48 c7 44 24 40 0e 36 e0 45 4b c7 04 2f 00 00 00 [ 549.202918][ C1] RSP: 0018:ffffc900001efd60 EFLAGS: 00000246 [ 549.209001][ C1] RAX: 000000000000005f RBX: 0000000000000000 RCX: ffff888022b61e00 [ 549.216979][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 549.224965][ C1] RBP: ffffc900001efed0 R08: ffffffff911c65c7 R09: 1ffffffff2238cb8 [ 549.232945][ C1] R10: dffffc0000000000 R11: fffffbfff2238cb9 R12: 0000000000000002 [ 549.240924][ C1] R13: dffffc0000000000 R14: 0000000000000200 R15: 1ffff9200003dfb4 [ 549.248931][ C1] FS: 00007fb6654246c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 549.257877][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 549.264467][ C1] CR2: 0000000100000000 CR3: 000000005a110000 CR4: 00000000003506e0 [ 549.272495][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 549.280476][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 549.288455][ C1] Call Trace: [ 549.291757][ C1] [ 549.294612][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 549.299834][ C1] ? _get_random_bytes+0x250/0x250 [ 549.304978][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 549.310210][ C1] ? entry_SYSCALL_64_safe_stack+0x6/0xf [ 549.315863][ C1] ? kernel_text_address+0xa0/0xd0 [ 549.321000][ C1] kfence_guarded_alloc+0xa2/0xe30 [ 549.326128][ C1] ? arch_stack_walk+0x160/0x190 [ 549.331087][ C1] ? alloc_covered_contains+0xe0/0xe0 [ 549.336480][ C1] ? stack_trace_save+0xaa/0x100 [ 549.341446][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 549.346588][ C1] __kfence_alloc+0x39a/0x3d0 [ 549.351310][ C1] ? kfence_guarded_free+0x4b0/0x4b0 [ 549.356614][ C1] ? __kfence_alloc+0x2d7/0x3d0 [ 549.361489][ C1] ? kmem_cache_alloc+0x27d/0x2d0 [ 549.366534][ C1] ? skb_clone+0x1eb/0x370 [ 549.370957][ C1] ? __neigh_event_send+0xe63/0x1440 [ 549.376256][ C1] ? neigh_resolve_output+0x19b/0x730 [ 549.381646][ C1] ? ip_finish_output2+0xd3a/0x11e0 [ 549.386852][ C1] ? ip_output+0x2a1/0x3b0 [ 549.391273][ C1] ? ip_send_skb+0x12f/0x1d0 [ 549.395870][ C1] ? __icmp_send+0x10b5/0x1420 [ 549.400640][ C1] ? ipv4_link_failure+0x657/0xa40 [ 549.405770][ C1] ? arp_error_report+0x112/0x160 [ 549.410801][ C1] ? neigh_invalidate+0x22c/0x450 [ 549.415843][ C1] ? neigh_timer_handler+0x914/0xff0 [ 549.421141][ C1] ? call_timer_fn+0x189/0x540 [ 549.425913][ C1] ? __run_timers+0x542/0x800 [ 549.430605][ C1] ? run_timer_softirq+0x67/0xf0 [ 549.435565][ C1] ? handle_softirqs+0x280/0x820 [ 549.440526][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 549.445306][ C1] ? irq_exit_rcu+0x9/0x20 [ 549.449734][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 549.455553][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 549.461722][ C1] ? generic_exec_single+0x481/0x4f0 [ 549.467031][ C1] ? smp_call_function_single+0x36d/0x5a0 [ 549.472762][ C1] ? perf_install_in_context+0x5be/0x920 [ 549.478411][ C1] ? __se_sys_perf_event_open+0x1836/0x1c50 [ 549.484320][ C1] ? do_syscall_64+0x55/0xa0 [ 549.488913][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.495113][ C1] ? slab_pre_alloc_hook+0x59/0x310 [ 549.500326][ C1] ? __mod_timer+0x984/0xdb0 [ 549.504956][ C1] kmem_cache_alloc+0x27d/0x2d0 [ 549.509828][ C1] ? skb_clone+0x1eb/0x370 [ 549.514279][ C1] skb_clone+0x1eb/0x370 [ 549.518533][ C1] ? __neigh_event_send+0xe56/0x1440 [ 549.523838][ C1] __neigh_event_send+0xe63/0x1440 [ 549.528992][ C1] neigh_resolve_output+0x19b/0x730 [ 549.534207][ C1] ? ip_finish_output2+0x11e0/0x11e0 [ 549.539498][ C1] ? nf_nat_ipv4_out+0x3af/0x4d0 [ 549.544462][ C1] ? ip_finish_output2+0x457/0x11e0 [ 549.549666][ C1] ip_finish_output2+0xd3a/0x11e0 [ 549.554702][ C1] ? ip_finish_output2+0x457/0x11e0 [ 549.559917][ C1] ? nf_hook+0xa2/0x390 [ 549.564096][ C1] ? __ip_local_out+0x5f0/0x5f0 [ 549.568970][ C1] ? nf_hook+0xa2/0x390 [ 549.573137][ C1] ? ip_fragment+0x210/0x210 [ 549.577737][ C1] ? ip_mc_finish_output+0x250/0x250 [ 549.583035][ C1] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 549.587895][ C1] ? ip_finish_output+0x3ef/0x4c0 [ 549.592929][ C1] ip_output+0x2a1/0x3b0 [ 549.597186][ C1] ? ip_output+0x60/0x3b0 [ 549.601526][ C1] ip_send_skb+0x12f/0x1d0 [ 549.605997][ C1] ? __icmp_send+0x216/0x1420 [ 549.610687][ C1] __icmp_send+0x10b5/0x1420 [ 549.615296][ C1] ? __icmp_send+0x216/0x1420 [ 549.619985][ C1] ? icmp_out_count+0x90/0x90 [ 549.624693][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 549.630877][ C1] ipv4_link_failure+0x657/0xa40 [ 549.635839][ C1] ? ipv4_negative_advice+0x1a0/0x1a0 [ 549.641237][ C1] ? ipv4_negative_advice+0x1a0/0x1a0 [ 549.646623][ C1] arp_error_report+0x112/0x160 [ 549.651490][ C1] neigh_invalidate+0x22c/0x450 [ 549.656386][ C1] neigh_timer_handler+0x914/0xff0 [ 549.661529][ C1] call_timer_fn+0x189/0x540 [ 549.666127][ C1] ? neigh_release+0x80/0x80 [ 549.670733][ C1] ? call_timer_fn+0xd2/0x540 [ 549.675436][ C1] ? __run_timers+0x800/0x800 [ 549.680222][ C1] ? neigh_release+0x80/0x80 [ 549.684854][ C1] __run_timers+0x542/0x800 [ 549.689393][ C1] ? detach_timer+0x2b0/0x2b0 [ 549.694107][ C1] run_timer_softirq+0x67/0xf0 [ 549.698893][ C1] handle_softirqs+0x280/0x820 [ 549.703681][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 549.708472][ C1] ? do_softirq+0x1a0/0x1a0 [ 549.712991][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 549.718219][ C1] __irq_exit_rcu+0xd3/0x190 [ 549.722820][ C1] ? irq_exit_rcu+0x20/0x20 [ 549.727344][ C1] irq_exit_rcu+0x9/0x20 [ 549.731599][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 549.737333][ C1] [ 549.740271][ C1] [ 549.743220][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 549.749215][ C1] RIP: 0010:generic_exec_single+0x481/0x4f0 [ 549.755129][ C1] Code: 75 11 e8 42 05 0b 00 48 85 db 75 16 e8 38 05 0b 00 eb 15 e8 31 05 0b 00 e8 0c 4e 0a 09 48 85 db 74 ea e8 22 05 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 549.774750][ C1] RSP: 0018:ffffc90003877a00 EFLAGS: 00000246 [ 549.780836][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 549.788816][ C1] RDX: ffffc9000d4ea000 RSI: 00000000000028a9 RDI: 00000000000028aa [ 549.796808][ C1] RBP: ffffc90003877ad0 R08: ffffffff911c65ff R09: 1ffffffff2238cbf [ 549.804796][ C1] R10: dffffc0000000000 R11: fffffbfff2238cc0 R12: 1ffff9200070ef44 [ 549.812806][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff9200070ef65 [ 549.820825][ C1] ? event_function+0x300/0x300 [ 549.825705][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 549.831442][ C1] ? percpu_counter_add_batch+0x1f1/0x2a0 [ 549.837218][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 549.842441][ C1] ? smp_call_function_single+0xb0/0x5a0 [ 549.848093][ C1] smp_call_function_single+0x36d/0x5a0 [ 549.853826][ C1] ? event_function+0x300/0x300 [ 549.858692][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 549.864854][ C1] ? event_function+0x300/0x300 [ 549.869731][ C1] perf_install_in_context+0x5be/0x920 [ 549.875212][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 549.881202][ C1] ? add_event_to_ctx+0x1180/0x1180 [ 549.886426][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 549.891645][ C1] ? perf_event__header_size+0x165/0x220 [ 549.897300][ C1] __se_sys_perf_event_open+0x1836/0x1c50 [ 549.903045][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 549.908701][ C1] ? lock_chain_count+0x20/0x20 [ 549.913568][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 549.918790][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 549.924457][ C1] do_syscall_64+0x55/0xa0 [ 549.928902][ C1] ? clear_bhb_loop+0x40/0x90 [ 549.933605][ C1] ? clear_bhb_loop+0x40/0x90 [ 549.938298][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.944202][ C1] RIP: 0033:0x7fb66459ce59 [ 549.948630][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.968247][ C1] RSP: 002b:00007fb665424028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 549.976673][ C1] RAX: ffffffffffffffda RBX: 00007fb664815fa0 RCX: 00007fb66459ce59 [ 549.984655][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 549.992634][ C1] RBP: 00007fb664632d6f R08: 0000000000000000 R09: 0000000000000000 [ 550.000620][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 550.008623][ C1] R13: 00007fb664816038 R14: 00007fb664815fa0 R15: 00007fffcd497158 [ 550.016621][ C1]