last executing test programs: 19.928303423s ago: executing program 3 (id=2415): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00bb0000bfa100000000000007010000f8ffff"], 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xffdd) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, 0x0, &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 16.524960346s ago: executing program 3 (id=2420): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1f04, 0xcf11}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="001000001a00911c01000000000041da81"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x8, 0xfffffffc, 0xfff, 0x440, 0xffffffffffffffff, 0xb2b, '\x00', 0x0, r4, 0x2, 0x1, 0x5, 0xf}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x1e, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xec6}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x80}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2661}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x48, &(0x7f00000003c0)=""/72, 0x41100, 0x45, '\x00', r8, 0x25, r4, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x4, 0x200, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r0, r5, r6, 0xffffffffffffffff, r9], 0x0, 0x10, 0x3}, 0x94) 16.25783756s ago: executing program 3 (id=2422): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}}, 0x80, &(0x7f0000000840)=[{0x0, 0x55}, {&(0x7f0000000440)="495bb4d8379fd36a26b300088c007d9f97ce2a31951a49427754a4ca6d692b1d690154ecfbffc95adce65b9dda0ed4864a9b3af06f81c3e2a1927565625326d65e6dbe2ae1f3c5befac6b5bef16dd86ad140f1908b"}, {&(0x7f00000004c0)="26bb7c3986b4e1c1dc15cc4e93f79fe8402e127d168fecc13d872f2bd6c60af82748bd59487a3bae4f325e776b893e29030dcf1794fd7a399566daaeb988177b64a6d4ffa42eebce44690e01f429c89359475d6ef17f"}, {&(0x7f0000000540)="7bccc625b34f5db6e9ff8f54939db292ce4af60317fde51d40dd08fe7aab6669a8939dca89114dc7c4e7ec932acf4a87d3a6fdf27f07ad51b7f6"}, {&(0x7f0000000a80)="4ded0d2fcaf737dc6b1a84101660a7a6301eca15488366bf3dbf255d3979f1e9773c0f327e23de80e195ca15a28cdff44ac6a013baffe234595a2f748622ad7013e3448743eec8fb0983febecf12c5e0c0c531b1c081fd65eb5c4bbcc1a1b607bf7d0621f932a3351a9f062d44631dd4f745e84e8bfd69772ed876b890a6e7dac164007f956bd069f92835af21326946c492df50c6b9dc9ca80420e33b3c89f888c9002338cf4f3bcfb88bc6ab71d9db167058f323ce895da1a7d04f69"}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec76064bef2f000000fb71caef932f3889d1fdda5b57000000860f5878437ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110700000094412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xe080, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000100)=""/21) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffed) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000840)={r1}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x1, @multicast, 'ip6gretap0\x00'}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000240)="3e23a66966798f", 0x7}, {&(0x7f00000002c0)="9488b203b6cc4f62324b723889f741ff07aad31402e21232fdcd240d8d09e5c2ef865367dde58eeeff39e1c117c1eb9bfc77ae258643084acd2fd2f1a6590c261b6ed5404b6bb08537fe09524aedbe619c3c464281222c0e3817889ebf6a95715e424cc4555fbc0621b29912dcb3e039aa2868a46ec86fc9ba39b1d2d7d37197c7d34691a73417e2f450d59e3206b1b7bf581bdc6d473a939dd522d60d4043b381accb7ab8b8a915a78e1670da15e5f98e1b3daee02e6d7d5d5b76b769ae1e05d70097282b0e35abf62b898aab003001ecb1ca3f7b173fa1b28b056847cb4e3dda850633612ba10c", 0xe8}, {&(0x7f0000000600)="73bc3d049ec8186e874e9cf75516cb5be2f089af0c523865c40a56bf0766a69b6ad722b62b9bd4ff2adb3719cfd283af81362aef9d6157ef44f4736abc68b0a09d15c38b01540116a3ee95447248027e9b7420b926f27c2c4e0bc980c0aac9995fde8369d46742c677fb4c561049492189591b8b01724cc64f1358a180e52bbc9d56de9284e6ec27864edbac85ab89f66d4df3a138198421cfb877485d70a40bc68b69342cdf998528fe29cd11a99f1d795e70248f841b911f498eb21d0838c4610009d27eb7f8cbab", 0xc9}, {&(0x7f00000003c0)="75c258cac1b4ee09ab16431f01956a6e6a3290f1c40ca0008c7d362862af6dd9511e60fea110ab481374ec43fd280e5ffe00f741823b7d7c49e50fc5d3fc0fa213bd113e6efc3b4d47bf63b445887bd9af4cc1da1178d2a1bc438d", 0x5b}, {&(0x7f0000000700)="14d2b72034da8847de3431843482a3916b6385a9480ba0324c31523b6e8655627a31e0391998a8496bc29f5dd6d0123e77e4e2e8ad9a9ca6115df460ed16875649ec262a104229996e6cfe5d1a467d444aaf885cbc81aa809a1b93ac4560c932258a9e4d0a394aa73ba0810b3a54056bddc9acbe8c4a0d2f388e9db0c7a9a813c1c1158c4395b120988f509bb4dad193afaf0510b2f268661cd1c1cccb5d1242769cea3490d683cb957b30c004bc210a6bef7c275c6aa6759427b3d47e", 0xbd}], 0x5}, 0x0) 4.93521422s ago: executing program 0 (id=2463): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYBLOB="fe8030bc8af86f9a35569203e96596ce9afa1f1efe08bedad1e2f7b855565b4fd53b8b7debcb655e", @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000) socket$kcm(0x2, 0x6, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) sendmsg$sock(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)}, {&(0x7f0000000140)}, {&(0x7f00000002c0)="d81eb1ced59b209c91bc47a55faa06176637589fb560579e1148897f028501a77e8781c3d1f58a7544492fa4f7", 0x2d}, {&(0x7f0000000080)}], 0x4, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x18}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9d, 0x1, 0x0, 0xce, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x800, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=ANY=[], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) close(r5) r7 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000700)=@xdp={0x2c, 0x2, 0x0, 0x10}, 0x80, &(0x7f0000000140)}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000) 4.572362842s ago: executing program 2 (id=2464): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00bb0000bfa100000000000007010000f8ffff"], 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a827012"], 0xffdd) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, 0x0, &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 4.505431858s ago: executing program 0 (id=2465): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x4000, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0xd, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@map=0x1, 0xe, 0x1, 0x100, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x12, 0x3a}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x209f, &(0x7f0000000a00)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="2300000000000000b70a0000221b00001b40dfe2d84922b078c7e819f66f837b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000c80), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x13, &(0x7f0000000000)=ANY=[@ANYRES8=r7], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d9b}, 0x94) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4020940d, &(0x7f00000005c0)=0x80000000000004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r6, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000a00), 0x0, 0xc6, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@cgroup=r5, r1, 0x10, 0x20, r3, @void, @void, @void, @value=r8, r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={&(0x7f0000000500)="e9627e3930e9f0834d06155d352720528f3b741d7b109f0bfb04056a17f134e3222dd2bc6a7b89895a82521d26bbbd3a4ba5d8a8f27c482b8a44bd6e878a7b1ead81428981110c6cc0f42f10a4e542f13cc52e3f598061d1af1f2a02a5c5354f2afe7648f66d6521cbf607fd17e134d80e6c15776449e4a4a5368f352799bd6519bd0374154bb6971cff4462505f5a216f52f440bdadc346a6e7c545956f2fcc98d8fcad32849bd0120b889149f5f4c88f123653e393a09e609d93bbb2c732ab44f922eac9087ec526ce68296bf1", &(0x7f0000000600)=""/198, &(0x7f0000000700)="bf197cf9057c0cb8846a6ae96f4142180a49e0e3c5b575963eb1ad9d6b6c94ae38ce7d95d4b2a9b004a15e413f5c5d1505b6e096af27569f64000d79d3ebeba6ceb9573dd08ed411a8c8f2c5c90d068bd4b4fa27bb6771f6ec98c51d773076a72ff52d78ce132c2b89a72cf4f2a07551a2fa429d9836169ec7759908ce8dc060de499d9b", &(0x7f00000007c0)="cb6c498572773588ebb34982fab9227ee8a1d82fcd559ec1e0e7fc38a5cb9a87005798e5a6abcfbe646fbdb76cf3ed3b173768895a9b08093fd99cae1f0b18a8445f6f36ef08bd171a68b6407bb27c4caa1e13ec52a1969e96f09206dc32ec9cfe25344879fa8efa1dd5a1494b1a3c54c530e5fcf6f579e7ad073aa484b9e190beda8232f72f56cfc32b37", 0xff, r9, 0x4}, 0x38) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20) 4.002052343s ago: executing program 0 (id=2467): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0xb, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x11, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x6531aa1a, 0x5}, 0x0, 0xc8, 0x9, 0x8, 0x0, 0x5a, 0x0, 0x0, 0x4, 0x0, 0x200000000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'vlan0\x00', 0x8000}) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200"/12], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad06b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976ada362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a867152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca4501391358000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f345e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c469953a63baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be250000000000000000000000000000dd4a009b2ba0d648a6975bcb66956a963912e26eb226af29c9f9f6261884db2d6b172b240dae6c7af327a27c533ab69811ca700d51724999cb8c0a8cace25602c3ecb9f0bcbe9ca6c9a444feb4cd9abbf2db2d583d5279de7f4130"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r6, 0x29, 0x39, &(0x7f0000000100)=r7, 0x120) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) 3.878886504s ago: executing program 2 (id=2468): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112390000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10000, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x806, 0x4, 0x8, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[], 0x31) r4 = socket$kcm(0x11, 0x200000000000003, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0xf}, 0x4) ioctl$TUNGETFEATURES(r6, 0x5452, &(0x7f00000013c0)) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000280)='GPL\x00', 0x7fffffff, 0xa, &(0x7f00000002c0)=""/10, 0x41100, 0x22, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x8, 0x5, 0xc5c}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, r9, 0xffffffffffffffff, 0x1, r9], &(0x7f0000000580)=[{0x3, 0x3, 0xb, 0x1}, {0x2, 0x4, 0x7, 0xa}, {0x2, 0x1, 0x10, 0x5}, {0x0, 0x2, 0x0, 0x3}, {0x3, 0x1, 0xd, 0xf}, {0x4, 0x2, 0x7, 0xb}, {0x1, 0x2, 0xd, 0xa}], 0x10, 0x2}, 0x94) 3.426930044s ago: executing program 0 (id=2470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'team0\x00', 0x100}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0xb2, 0x3, 0x6, 0x3, 0x0, 0x1d65, 0x0, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0xfffffffffffffffd}, 0x60, 0x0, 0x2, 0x1, 0xc7e6, 0x0, 0x6, 0x0, 0xdcb, 0x0, 0x4}, r1, 0xf, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x28100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x7}, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='!~u&00\t&&') r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffefffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r4, @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e41000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x11, 0xe53f29c4ef7ccc7a, 0x300) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="39000000140081ae50003c00fbff008311001f9f660fcf", 0xfffffffffffffe0a}], 0x1, 0x0, 0xffffffffffffff4e}, 0x800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) 3.299374185s ago: executing program 1 (id=2471): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0x4, 0x4, 0x2}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.933906638s ago: executing program 0 (id=2472): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYBLOB="fe8030bc8af86f9a35569203e96596ce9afa1f1efe08bedad1e2f7b855565b4fd53b8b7debcb655e", @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000) socket$kcm(0x2, 0x6, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) sendmsg$sock(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)}, {&(0x7f0000000140)}, {&(0x7f00000002c0)="d81eb1ced59b209c91bc47a55faa06176637589fb560579e1148897f028501a77e8781c3d1f58a7544492fa4f7", 0x2d}, {&(0x7f0000000080)}], 0x4, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x18}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9d, 0x1, 0x0, 0xce, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x800, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=ANY=[], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) close(r5) r7 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000700)=@xdp={0x2c, 0x2, 0x0, 0x10}, 0x80, &(0x7f0000000140)}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000) 2.744580205s ago: executing program 2 (id=2473): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$kcm(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r3, 0x0, 0x40010002) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.742666726s ago: executing program 1 (id=2480): socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0x4, 0x4, 0x2}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.632053165s ago: executing program 0 (id=2474): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x4000, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0xd, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@map=0x1, 0xe, 0x1, 0x100, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x12, 0x3a}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x209f, &(0x7f0000000a00)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="2300000000000000b70a0000221b00001b40dfe2d84922b078c7e819f66f837b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000c80), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x13, &(0x7f0000000000)=ANY=[@ANYRES8=r6], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d9b}, 0x94) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4020940d, &(0x7f00000005c0)=0x80000000000004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r5, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000a00), 0x0, 0xc6, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@cgroup=r4, r0, 0x10, 0x20, r2, @void, @void, @void, @value=r7, r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={&(0x7f0000000500)="e9627e3930e9f0834d06155d352720528f3b741d7b109f0bfb04056a17f134e3222dd2bc6a7b89895a82521d26bbbd3a4ba5d8a8f27c482b8a44bd6e878a7b1ead81428981110c6cc0f42f10a4e542f13cc52e3f598061d1af1f2a02a5c5354f2afe7648f66d6521cbf607fd17e134d80e6c15776449e4a4a5368f352799bd6519bd0374154bb6971cff4462505f5a216f52f440bdadc346a6e7c545956f2fcc98d8fcad32849bd0120b889149f5f4c88f123653e393a09e609d93bbb2c732ab44f922eac9087ec526ce68296bf1", &(0x7f0000000600)=""/198, &(0x7f0000000700)="bf197cf9057c0cb8846a6ae96f4142180a49e0e3c5b575963eb1ad9d6b6c94ae38ce7d95d4b2a9b004a15e413f5c5d1505b6e096af27569f64000d79d3ebeba6ceb9573dd08ed411a8c8f2c5c90d068bd4b4fa27bb6771f6ec98c51d773076a72ff52d78ce132c2b89a72cf4f2a07551a2fa429d9836169ec7759908ce8dc060de499d9b", &(0x7f00000007c0)="cb6c498572773588ebb34982fab9227ee8a1d82fcd559ec1e0e7fc38a5cb9a87005798e5a6abcfbe646fbdb76cf3ed3b173768895a9b08093fd99cae1f0b18a8445f6f36ef08bd171a68b6407bb27c4caa1e13ec52a1969e96f09206dc32ec9cfe25344879fa8efa1dd5a1494b1a3c54c530e5fcf6f579e7ad073aa484b9e190beda8232f72f56cfc32b37", 0xff, r8, 0x4}, 0x38) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20) 2.522049785s ago: executing program 1 (id=2475): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$OBJ_PIN_MAP(0x9, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=r0, @ANYRES64=r1], 0x230}, 0x0) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x391, 0xffffffffffffffff, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 2.2440155s ago: executing program 1 (id=2476): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00bb0000bfa100000000000007010000f8ffff"], 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a82701214"], 0xffdd) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, 0x0, &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 1.556614331s ago: executing program 3 (id=2425): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000200000000000000000000000000000000000000000000000007c091a89b5551cbe0430a41dce8f8431e93fef0b3fef079b3cd2a3c244030de6f96414"], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r1}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=r0, @ANYRES64=r1], 0x230}, 0x0) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x391, 0xffffffffffffffff, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1.307784353s ago: executing program 3 (id=2477): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00bb0000bfa100000000000007010000f8ffff"], 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a82"], 0xffdd) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, 0x0, &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 1.306624114s ago: executing program 1 (id=2486): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00bb0000bfa100000000000007010000f8ffff"], 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a82701214"], 0xffdd) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, 0x0, &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 1.306020644s ago: executing program 2 (id=2478): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0xb, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x11, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x6531aa1a, 0x5}, 0x0, 0xc8, 0x9, 0x8, 0x0, 0x5a, 0x0, 0x0, 0x4, 0x0, 0x200000000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 1.108837721s ago: executing program 2 (id=2479): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}}, 0x80, &(0x7f0000000840)=[{0x0, 0x55}, {&(0x7f0000000440)="495bb4d8379fd36a26b300088c007d9f97ce2a31951a49427754a4ca6d692b1d690154ecfbffc95adce65b9dda0ed4864a9b3af06f81c3e2a1927565625326d65e6dbe2ae1f3c5befac6b5bef16dd86ad140f1908b"}, {&(0x7f00000004c0)="26bb7c3986b4e1c1dc15cc4e93f79fe8402e127d168fecc13d872f2bd6c60af82748bd59487a3bae4f325e776b893e29030dcf1794fd7a399566daaeb988177b64a6d4ffa42eebce44690e01f429c89359475d6ef17f"}, {&(0x7f0000000540)="7bccc625b34f5db6e9ff8f54939db292ce4af60317fde51d40dd08fe7aab6669a8939dca89114dc7c4e7ec932acf4a87d3a6fdf27f07ad51b7f6"}, {&(0x7f0000000a80)="4ded0d2fcaf737dc6b1a84101660a7a6301eca15488366bf3dbf255d3979f1e9773c0f327e23de80e195ca15a28cdff44ac6a013baffe234595a2f748622ad7013e3448743eec8fb0983febecf12c5e0c0c531b1c081fd65eb5c4bbcc1a1b607bf7d0621f932a3351a9f062d44631dd4f745e84e8bfd69772ed876b890a6e7dac164007f956bd069f92835af21326946c492df50c6b9dc9ca80420e33b3c89f888c9002338cf4f3bcfb88bc6ab71d9db167058f323ce895da1a7d04f69"}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec76064bef2f000000fb71caef932f3889d1fdda5b57000000860f5878437ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110700000094412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xe080, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000100)=""/21) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffed) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000840)={r1}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg(r8, &(0x7f0000000440)={&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x1, @multicast, 'ip6gretap0\x00'}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000240)="3e23a66966798f", 0x7}, {&(0x7f00000002c0)="9488b203b6cc4f62324b723889f741ff07aad31402e21232fdcd240d8d09e5c2ef865367dde58eeeff39e1c117c1eb9bfc77ae258643084acd2fd2f1a6590c261b6ed5404b6bb08537fe09524aedbe619c3c464281222c0e3817889ebf6a95715e424cc4555fbc0621b29912dcb3e039aa2868a46ec86fc9ba39b1d2d7d37197c7d34691a73417e2f450d59e3206b1b7bf581bdc6d473a939dd522d60d4043b381accb7ab8b8a915a78e1670da15e5f98e1b3daee02e6d7d5d5b76b769ae1e05d70097282b0e35abf62b898aab003001ecb1ca3f7b173fa1b28b056847cb4e3dda850633612ba10c", 0xe8}, {&(0x7f0000000600)="73bc3d049ec8186e874e9cf75516cb5be2f089af0c523865c40a56bf0766a69b6ad722b62b9bd4ff2adb3719cfd283af81362aef9d6157ef44f4736abc68b0a09d15c38b01540116a3ee95447248027e9b7420b926f27c2c4e0bc980c0aac9995fde8369d46742c677fb4c561049492189591b8b01724cc64f1358a180e52bbc9d56de9284e6ec27864edbac85ab89f66d4df3a138198421cfb877485d70a40bc68b69342cdf998528fe29cd11a99f1d795e70248f841b911f498eb21d0838c4610009d27eb7f8cbab", 0xc9}, {&(0x7f00000003c0)="75c258cac1b4ee09ab16431f01956a6e6a3290f1c40ca0008c7d362862af6dd9511e60fea110ab481374ec43fd280e5ffe00f741823b7d7c49e50fc5d3fc0fa213bd113e6efc3b4d47bf63b445887bd9af4cc1da1178d2a1bc438d", 0x5b}, {&(0x7f0000000700)="14d2b72034da8847de3431843482a3916b6385a9480ba0324c31523b6e8655627a31e0391998a8496bc29f5dd6d0123e77e4e2e8ad9a9ca6115df460ed16875649ec262a104229996e6cfe5d1a467d444aaf885cbc81aa809a1b93ac4560c932258a9e4d0a394aa73ba0810b3a54056bddc9acbe8c4a0d2f388e9db0c7a9a813c1c1158c4395b120988f509bb4dad193afaf0510b2f268661cd1c1cccb5d1242769cea3490d683cb957b30c004bc210a6bef7c275c6aa6759427b3d47e", 0xbd}], 0x5}, 0x0) 156.942176ms ago: executing program 1 (id=2481): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112390000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10000, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x806, 0x4, 0x8, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[], 0x31) r4 = socket$kcm(0x11, 0x200000000000003, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0xf}, 0x4) ioctl$TUNGETFEATURES(r6, 0x5452, &(0x7f00000013c0)) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000280)='GPL\x00', 0x7fffffff, 0xa, &(0x7f00000002c0)=""/10, 0x41100, 0x22, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x8, 0x5, 0xc5c}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, r9, 0xffffffffffffffff, 0x1, r9], &(0x7f0000000580)=[{0x3, 0x3, 0xb, 0x1}, {0x2, 0x4, 0x7, 0xa}, {0x2, 0x1, 0x10, 0x5}, {0x0, 0x2, 0x0, 0x3}, {0x3, 0x1, 0xd, 0xf}, {0x4, 0x2, 0x7, 0xb}, {0x1, 0x2, 0xd, 0xa}], 0x10, 0x2}, 0x94) 156.302166ms ago: executing program 2 (id=2482): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b703000024000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095000000"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="34050000000000007b10a0000000000063013800001400009500090000000000a508a12684d35145f8a822ae945fb6eb8104dff0dcbba7d96bc1387742a132e90b3ca5698d730f0ba94afc26d8"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000003b410000000000000028800000d06a6138e9792f7bd22c9cd8"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000dc0)={0x0, 0x80, 0x0, 0x5, 0x8, 0x6, 0x0, 0xd, 0x20002, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x4, @perf_config_ext={0x5, 0x8}, 0x2a0f, 0xc046, 0x3e, 0xa, 0x0, 0x7, 0x8, 0x0, 0x8, 0x0, 0x4}, r4, 0xc, r2, 0x0) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff07) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) recvmsg$unix(r3, &(0x7f00000005c0)={&(0x7f00000006c0), 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000f00)=""/121, 0x79}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/93, 0x5d}, {&(0x7f0000000cc0)=""/216, 0xd8}, {0x0}], 0x5, &(0x7f0000000f80)}, 0x3) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="720ac4ffe3d5332d6910160f848e000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000500)) socket$kcm(0xa, 0x7, 0x88) close(0x3) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000180)="8621457b1771c16215fa9f61f75cf2b7f246ca4726d77339de5f19bddf0e5e56d67a9c943710e1856ef4ad79e01a9e315c18d7cfe9f2b7527bb11ccb33e891fa895730a87e5468f436edbb5d4eba1e745b31397bed3c53a4c68eaf5697a2c64ed886ef9b468a17df0d2b8c040881d9bedade4bdde343850d24292a7c60802c73cf50c1ae0025bd41c61d4c0b3102ef54a5f3794886c958e725ec90ce3eca7054853eec33b7402219c45ff36057cf8b61e733ff4aeeac7cd30de0c2ecc2acd297be4c9ef5be139211942840f35ce90696aee14a5897b38c31f11599d9130fda79a950312b9a3c827897be60496a100454", &(0x7f0000000280)=""/154, &(0x7f0000000040)="5c40ff6c90ecb6021e46e04c1f7aae2f2d8e506a417ab09fbb2b537853cfa3e9c5d04be090aed655ef6821faf3ca9dadea8cafd1a902", &(0x7f0000000340)="784be7fc6158bb0b3359fdfa2a5268088c9a001d031aeebbe7ea32e7d7471d6a12035e3e287920198e1e8b7f4b9ea835cd3507f75eeb3d14aaf87b67cd380c6aca71308453aa304c285216186aa407310c25a9cdc6f262efe072fe58b303a96c51616cffa3f1235c60d84dd19034455c78646b6318116eef81d035553dc7f149e23c84b72fc2cd5363fbe9411d5f4c8ac8a75c352e0e4a24a1c50f95d3d2e6eb9c4d4afff03860fe1455a9fc8b2ddcdc38cbee31137a544b36fa3690d6449ea78c1a3702c99a11ccbb998d210cb81c5c11", 0x8a8, 0xffffffffffffffff, 0x4}, 0x38) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800208b000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000", @ANYRES16, @ANYRESOCT, @ANYRESHEX=r6, @ANYRES8=r7], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 3 (id=2483): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x2}, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x104, 0x0, 0x3, 0x0, 0xfffffdffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x3a, &(0x7f00000003c0), 0x2}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) recvmsg$unix(r7, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000000500)=""/117, 0x75}], 0x1}, 0x10060) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) close(r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x4, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r10 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x30, 0x0, 0x20000) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x6}]}, {0x0, [0x2e, 0x0, 0x5f, 0x61, 0x5f, 0x5f]}}, 0x0, 0x2c, 0x0, 0x1, 0x4}, 0x28) r11 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r11, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) kernel console output (not intermixed with test programs): e+0x53/0x250 [ 489.915284][T10887] ? tomoyo_encode+0x28b/0x540 [ 489.920031][T10887] __kmalloc+0xa4/0x230 [ 489.924176][T10887] tomoyo_encode+0x28b/0x540 [ 489.928757][T10887] tomoyo_realpath_from_path+0x592/0x5d0 [ 489.934396][T10887] tomoyo_path_number_perm+0x248/0x620 [ 489.939858][T10887] ? tomoyo_path_number_perm+0x217/0x620 [ 489.945498][T10887] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 489.950971][T10887] ? ksys_write+0x1c4/0x260 [ 489.955505][T10887] ? __fget_files+0x28/0x4b0 [ 489.960107][T10887] ? __fget_files+0x28/0x4b0 [ 489.964718][T10887] security_file_ioctl+0x70/0xa0 [ 489.969680][T10887] __se_sys_ioctl+0x48/0x170 [ 489.974269][T10887] do_syscall_64+0x55/0xa0 [ 489.978680][T10887] ? clear_bhb_loop+0x40/0x90 [ 489.983347][T10887] ? clear_bhb_loop+0x40/0x90 [ 489.988019][T10887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 489.993904][T10887] RIP: 0033:0x7fa51d79c629 [ 489.998318][T10887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.017924][T10887] RSP: 002b:00007fa51e6bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.026353][T10887] RAX: ffffffffffffffda RBX: 00007fa51da15fa0 RCX: 00007fa51d79c629 [ 490.034327][T10887] RDX: 0000000000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 490.042295][T10887] RBP: 00007fa51e6bc090 R08: 0000000000000000 R09: 0000000000000000 [ 490.050280][T10887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.058265][T10887] R13: 00007fa51da16038 R14: 00007fa51da15fa0 R15: 00007ffeba4d11d8 [ 490.066241][T10887] [ 490.074829][T10887] ERROR: Out of memory at tomoyo_realpath_from_path. [ 491.096539][T10913] FAULT_INJECTION: forcing a failure. [ 491.096539][T10913] name failslab, interval 1, probability 0, space 0, times 0 [ 491.129073][T10913] CPU: 1 PID: 10913 Comm: syz.1.1715 Not tainted syzkaller #0 [ 491.136590][T10913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.146688][T10913] Call Trace: [ 491.149986][T10913] [ 491.152941][T10913] dump_stack_lvl+0x18c/0x250 [ 491.157655][T10913] ? show_regs_print_info+0x20/0x20 [ 491.162870][T10913] ? load_image+0x400/0x400 [ 491.167395][T10913] ? __might_sleep+0xe0/0xe0 [ 491.172012][T10913] ? __lock_acquire+0x7d40/0x7d40 [ 491.177062][T10913] ? mark_lock+0x94/0x320 [ 491.181428][T10913] should_fail_ex+0x39d/0x4d0 [ 491.186141][T10913] should_failslab+0x9/0x20 [ 491.190670][T10913] slab_pre_alloc_hook+0x59/0x310 [ 491.195721][T10913] ? __get_vm_area_node+0x125/0x370 [ 491.200945][T10913] __kmem_cache_alloc_node+0x53/0x250 [ 491.206347][T10913] ? __get_vm_area_node+0x125/0x370 [ 491.211563][T10913] kmalloc_node_trace+0x26/0xe0 [ 491.216434][T10913] __get_vm_area_node+0x125/0x370 [ 491.221485][T10913] __vmalloc_node_range+0x36e/0x1330 [ 491.226790][T10913] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 491.232348][T10913] ? mark_lock+0x94/0x320 [ 491.236688][T10913] ? __lock_acquire+0x1347/0x7d40 [ 491.241729][T10913] ? verify_lock_unused+0x140/0x140 [ 491.246946][T10913] ? free_vm_area+0x50/0x50 [ 491.251471][T10913] ? end_current_label_crit_section+0x170/0x170 [ 491.257745][T10913] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 491.263393][T10913] __vmalloc+0x7a/0x90 [ 491.267479][T10913] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 491.273035][T10913] bpf_prog_alloc_no_stats+0x47/0x440 [ 491.278414][T10913] ? bpf_prog_alloc+0x2b/0x1a0 [ 491.283188][T10913] bpf_prog_alloc+0x3d/0x1a0 [ 491.287797][T10913] bpf_prog_load+0x6eb/0x1670 [ 491.292491][T10913] ? map_freeze+0x420/0x420 [ 491.297003][T10913] ? __might_fault+0xaa/0x120 [ 491.301680][T10913] ? __lock_acquire+0x7d40/0x7d40 [ 491.306714][T10913] ? __might_fault+0xaa/0x120 [ 491.311395][T10913] ? __might_fault+0xc6/0x120 [ 491.316084][T10913] ? __might_fault+0xaa/0x120 [ 491.320788][T10913] ? bpf_lsm_bpf+0x9/0x10 [ 491.325141][T10913] ? security_bpf+0x7e/0xa0 [ 491.329674][T10913] __sys_bpf+0x5ba/0x890 [ 491.333937][T10913] ? bpf_link_show_fdinfo+0x390/0x390 [ 491.339325][T10913] ? lock_chain_count+0x20/0x20 [ 491.344187][T10913] __x64_sys_bpf+0x7c/0x90 [ 491.348636][T10913] do_syscall_64+0x55/0xa0 [ 491.353065][T10913] ? clear_bhb_loop+0x40/0x90 [ 491.357745][T10913] ? clear_bhb_loop+0x40/0x90 [ 491.362427][T10913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.368325][T10913] RIP: 0033:0x7fc5aed9c629 [ 491.372743][T10913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.392363][T10913] RSP: 002b:00007fc5afc1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 491.400784][T10913] RAX: ffffffffffffffda RBX: 00007fc5af015fa0 RCX: 00007fc5aed9c629 [ 491.408767][T10913] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 491.416767][T10913] RBP: 00007fc5afc1e090 R08: 0000000000000000 R09: 0000000000000000 [ 491.424757][T10913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.432735][T10913] R13: 00007fc5af016038 R14: 00007fc5af015fa0 R15: 00007fffe9c318e8 [ 491.440749][T10913] [ 491.532937][T10913] syz.1.1715: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 491.571249][T10915] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1716'. [ 491.581201][T10913] CPU: 1 PID: 10913 Comm: syz.1.1715 Not tainted syzkaller #0 [ 491.588698][T10913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.598773][T10913] Call Trace: [ 491.602065][T10913] [ 491.605013][T10913] dump_stack_lvl+0x18c/0x250 [ 491.609720][T10913] ? show_regs_print_info+0x20/0x20 [ 491.614927][T10913] ? load_image+0x400/0x400 [ 491.619426][T10913] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 491.625836][T10913] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 491.632330][T10913] warn_alloc+0x246/0x340 [ 491.636667][T10913] ? __get_vm_area_node+0x125/0x370 [ 491.641862][T10913] ? zone_watermark_ok_safe+0x230/0x230 [ 491.647401][T10913] ? rcu_is_watching+0x15/0xb0 [ 491.652160][T10913] ? __get_vm_area_node+0x356/0x370 [ 491.657362][T10913] __vmalloc_node_range+0x393/0x1330 [ 491.662644][T10913] ? mark_lock+0x94/0x320 [ 491.666966][T10913] ? __lock_acquire+0x1347/0x7d40 [ 491.671983][T10913] ? verify_lock_unused+0x140/0x140 [ 491.677271][T10913] ? free_vm_area+0x50/0x50 [ 491.681766][T10913] ? end_current_label_crit_section+0x170/0x170 [ 491.688002][T10913] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 491.693538][T10913] __vmalloc+0x7a/0x90 [ 491.697609][T10913] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 491.703146][T10913] bpf_prog_alloc_no_stats+0x47/0x440 [ 491.708506][T10913] ? bpf_prog_alloc+0x2b/0x1a0 [ 491.713260][T10913] bpf_prog_alloc+0x3d/0x1a0 [ 491.717842][T10913] bpf_prog_load+0x6eb/0x1670 [ 491.722516][T10913] ? map_freeze+0x420/0x420 [ 491.727022][T10913] ? __might_fault+0xaa/0x120 [ 491.731691][T10913] ? __lock_acquire+0x7d40/0x7d40 [ 491.736712][T10913] ? __might_fault+0xaa/0x120 [ 491.741384][T10913] ? __might_fault+0xc6/0x120 [ 491.746048][T10913] ? __might_fault+0xaa/0x120 [ 491.750711][T10913] ? bpf_lsm_bpf+0x9/0x10 [ 491.755034][T10913] ? security_bpf+0x7e/0xa0 [ 491.759536][T10913] __sys_bpf+0x5ba/0x890 [ 491.763778][T10913] ? bpf_link_show_fdinfo+0x390/0x390 [ 491.769155][T10913] ? lock_chain_count+0x20/0x20 [ 491.774006][T10913] __x64_sys_bpf+0x7c/0x90 [ 491.778418][T10913] do_syscall_64+0x55/0xa0 [ 491.782828][T10913] ? clear_bhb_loop+0x40/0x90 [ 491.787506][T10913] ? clear_bhb_loop+0x40/0x90 [ 491.792209][T10913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.798114][T10913] RIP: 0033:0x7fc5aed9c629 [ 491.802521][T10913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.822122][T10913] RSP: 002b:00007fc5afc1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 491.830553][T10913] RAX: ffffffffffffffda RBX: 00007fc5af015fa0 RCX: 00007fc5aed9c629 [ 491.838513][T10913] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 491.846473][T10913] RBP: 00007fc5afc1e090 R08: 0000000000000000 R09: 0000000000000000 [ 491.854451][T10913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.862415][T10913] R13: 00007fc5af016038 R14: 00007fc5af015fa0 R15: 00007fffe9c318e8 [ 491.870389][T10913] [ 491.889599][T10921] netlink: 'syz.2.1717': attribute type 9 has an invalid length. [ 491.901546][T10913] Mem-Info: [ 491.904913][T10921] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1717'. [ 491.914430][T10913] active_anon:5428 inactive_anon:0 isolated_anon:0 [ 491.914430][T10913] active_file:1858 inactive_file:40087 isolated_file:0 [ 491.914430][T10913] unevictable:768 dirty:47 writeback:0 [ 491.914430][T10913] slab_reclaimable:12923 slab_unreclaimable:116019 [ 491.914430][T10913] mapped:24784 shmem:1361 pagetables:528 [ 491.914430][T10913] sec_pagetables:0 bounce:0 [ 491.914430][T10913] kernel_misc_reclaimable:0 [ 491.914430][T10913] free:1334077 free_pcp:12183 free_cma:0 [ 491.997950][T10913] Node 0 active_anon:21712kB inactive_anon:0kB active_file:7432kB inactive_file:160144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99136kB dirty:188kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9976kB pagetables:2112kB sec_pagetables:0kB all_unreclaimable? no [ 492.030309][T10913] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 492.060804][T10924] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1717'. [ 492.106460][T10924] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 492.114108][T10913] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 492.161420][T10913] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 492.169722][T10913] Node 0 DMA32 free:1433588kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21532kB inactive_anon:0kB active_file:7432kB inactive_file:159324kB unevictable:1536kB writepending:164kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:27216kB local_pcp:13736kB free_cma:0kB [ 492.218505][T10913] lowmem_reserve[]: 0 0 0 0 0 [ 492.243973][T10913] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 492.292275][T10913] lowmem_reserve[]: 0 0 0 0 0 [ 492.301456][T10913] Node 1 Normal free:3886032kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22936kB local_pcp:11104kB free_cma:0kB [ 492.309431][T10929] syzkaller0: entered promiscuous mode [ 492.351098][T10913] lowmem_reserve[]: 0 0 0 0 0 [ 492.358264][T10913] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 492.371333][T10929] syzkaller0: entered allmulticast mode [ 492.374125][T10913] Node 0 DMA32: 1*4kB (E) 114*8kB (UME) 956*16kB (UME) 81*32kB (UME) 187*64kB (UME) 338*128kB (UE) 139*256kB (UME) 84*512kB (UE) 43*1024kB (UME) 26*2048kB (UME) 289*4096kB (UM) = 1433652kB [ 492.402071][T10913] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 492.404638][T10929] FAULT_INJECTION: forcing a failure. [ 492.404638][T10929] name failslab, interval 1, probability 0, space 0, times 0 [ 492.413811][T10913] Node 1 Normal: 232*4kB (U) 44*8kB (UME) 45*16kB (UME) 74*32kB (UME) 19*64kB (UE) 6*128kB (UME) 1*256kB (U) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 946*4096kB (M) = 3886032kB [ 492.453066][T10913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 492.455641][T10929] CPU: 1 PID: 10929 Comm: syz.0.1720 Not tainted syzkaller #0 [ 492.470104][T10929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.480153][T10929] Call Trace: [ 492.483423][T10929] [ 492.486348][T10929] dump_stack_lvl+0x18c/0x250 [ 492.491029][T10929] ? show_regs_print_info+0x20/0x20 [ 492.496239][T10929] ? load_image+0x400/0x400 [ 492.500738][T10929] ? __might_sleep+0xe0/0xe0 [ 492.505320][T10929] ? __lock_acquire+0x7d40/0x7d40 [ 492.510344][T10929] should_fail_ex+0x39d/0x4d0 [ 492.515039][T10929] should_failslab+0x9/0x20 [ 492.519573][T10929] slab_pre_alloc_hook+0x59/0x310 [ 492.524621][T10929] kmem_cache_alloc_node+0x60/0x320 [ 492.529841][T10929] ? __alloc_skb+0x103/0x2c0 [ 492.534447][T10929] __alloc_skb+0x103/0x2c0 [ 492.538887][T10929] alloc_skb_with_frags+0xca/0x7b0 [ 492.544019][T10929] ? __lock_acquire+0x7d40/0x7d40 [ 492.549057][T10929] sock_alloc_send_pskb+0x883/0x9a0 [ 492.554266][T10929] ? __might_fault+0xaa/0x120 [ 492.559043][T10929] ? sock_kzfree_s+0x50/0x50 [ 492.563636][T10929] ? iov_iter_advance+0x88/0x1a0 [ 492.568574][T10929] tun_get_user+0x82c/0x3ca0 [ 492.573202][T10929] ? aa_file_perm+0x11b/0xee0 [ 492.577885][T10929] ? rcu_read_unlock+0xa0/0xa0 [ 492.582650][T10929] ? tun_get+0x1c/0x2e0 [ 492.586807][T10929] ? __lock_acquire+0x7d40/0x7d40 [ 492.591830][T10929] ? tun_get+0x1c/0x2e0 [ 492.595986][T10929] tun_chr_write_iter+0x119/0x200 [ 492.601004][T10929] vfs_write+0x46c/0x990 [ 492.605250][T10929] ? file_end_write+0x250/0x250 [ 492.610105][T10929] ? __fget_files+0x43d/0x4b0 [ 492.615216][T10929] ? __fdget_pos+0x1d8/0x330 [ 492.619798][T10929] ? ksys_write+0x75/0x260 [ 492.624215][T10929] ksys_write+0x150/0x260 [ 492.628570][T10929] ? __ia32_sys_read+0x90/0x90 [ 492.633341][T10929] ? lockdep_hardirqs_on+0x98/0x150 [ 492.638803][T10929] do_syscall_64+0x55/0xa0 [ 492.643539][T10929] ? clear_bhb_loop+0x40/0x90 [ 492.648211][T10929] ? clear_bhb_loop+0x40/0x90 [ 492.652888][T10929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.658776][T10929] RIP: 0033:0x7fa51d79c629 [ 492.663215][T10929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.682994][T10929] RSP: 002b:00007fa51e6bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 492.691408][T10929] RAX: ffffffffffffffda RBX: 00007fa51da15fa0 RCX: 00007fa51d79c629 [ 492.699372][T10929] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000009 [ 492.707333][T10929] RBP: 00007fa51e6bc090 R08: 0000000000000000 R09: 0000000000000000 [ 492.715290][T10929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.723254][T10929] R13: 00007fa51da16038 R14: 00007fa51da15fa0 R15: 00007ffeba4d11d8 [ 492.731237][T10929] [ 492.748427][T10913] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 492.758131][T10913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 492.767869][T10913] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 492.777615][T10913] 43306 total pagecache pages [ 492.782320][T10913] 0 pages in swap cache [ 492.786626][T10913] Free swap = 124996kB [ 492.794661][T10913] Total swap = 124996kB [ 492.798911][T10913] 2097051 pages RAM [ 492.802728][T10913] 0 pages HighMem/MovableOnly [ 492.814714][T10913] 416922 pages reserved [ 492.818918][T10913] 0 pages cma reserved [ 493.057668][T10943] FAULT_INJECTION: forcing a failure. [ 493.057668][T10943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.134666][T10943] CPU: 0 PID: 10943 Comm: syz.1.1726 Not tainted syzkaller #0 [ 493.142180][T10943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.152256][T10943] Call Trace: [ 493.155553][T10943] [ 493.158493][T10943] dump_stack_lvl+0x18c/0x250 [ 493.163194][T10943] ? show_regs_print_info+0x20/0x20 [ 493.168415][T10943] ? load_image+0x400/0x400 [ 493.172940][T10943] ? __lock_acquire+0x7d40/0x7d40 [ 493.177986][T10943] should_fail_ex+0x39d/0x4d0 [ 493.182688][T10943] _copy_from_user+0x2f/0xe0 [ 493.187307][T10943] __copy_msghdr+0x3bb/0x580 [ 493.191932][T10943] ___sys_sendmsg+0x214/0x360 [ 493.196629][T10943] ? __sys_sendmsg+0x2a0/0x2a0 [ 493.201431][T10943] ? __lock_acquire+0x7d40/0x7d40 [ 493.206507][T10943] __se_sys_sendmsg+0x1c2/0x2b0 [ 493.211396][T10943] ? __x64_sys_sendmsg+0x80/0x80 [ 493.216388][T10943] ? lockdep_hardirqs_on+0x98/0x150 [ 493.221608][T10943] do_syscall_64+0x55/0xa0 [ 493.226042][T10943] ? clear_bhb_loop+0x40/0x90 [ 493.230735][T10943] ? clear_bhb_loop+0x40/0x90 [ 493.235465][T10943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.241471][T10943] RIP: 0033:0x7fc5aed9c629 [ 493.245893][T10943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.265523][T10943] RSP: 002b:00007fc5afc1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.273958][T10943] RAX: ffffffffffffffda RBX: 00007fc5af015fa0 RCX: 00007fc5aed9c629 [ 493.281952][T10943] RDX: 0000000020040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 493.289945][T10943] RBP: 00007fc5afc1e090 R08: 0000000000000000 R09: 0000000000000000 [ 493.297928][T10943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.305927][T10943] R13: 00007fc5af016038 R14: 00007fc5af015fa0 R15: 00007fffe9c318e8 [ 493.313934][T10943] [ 494.984003][T10956] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1728'. [ 495.098002][T10958] netlink: 'syz.0.1729': attribute type 9 has an invalid length. [ 495.114951][T10958] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1729'. [ 495.129166][T10966] FAULT_INJECTION: forcing a failure. [ 495.129166][T10966] name failslab, interval 1, probability 0, space 0, times 0 [ 495.192962][T10967] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1729'. [ 495.202890][T10966] CPU: 0 PID: 10966 Comm: syz.2.1732 Not tainted syzkaller #0 [ 495.210380][T10966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 495.220455][T10966] Call Trace: [ 495.223754][T10966] [ 495.227053][T10966] dump_stack_lvl+0x18c/0x250 [ 495.231758][T10966] ? show_regs_print_info+0x20/0x20 [ 495.236987][T10966] ? load_image+0x400/0x400 [ 495.241520][T10966] ? __might_sleep+0xe0/0xe0 [ 495.246128][T10966] ? __lock_acquire+0x7d40/0x7d40 [ 495.251189][T10966] ? mark_lock+0x94/0x320 [ 495.255541][T10966] should_fail_ex+0x39d/0x4d0 [ 495.260233][T10966] should_failslab+0x9/0x20 [ 495.264742][T10966] slab_pre_alloc_hook+0x59/0x310 [ 495.269766][T10966] ? __get_vm_area_node+0x125/0x370 [ 495.274957][T10966] __kmem_cache_alloc_node+0x53/0x250 [ 495.280326][T10966] ? __get_vm_area_node+0x125/0x370 [ 495.285540][T10966] kmalloc_node_trace+0x26/0xe0 [ 495.290405][T10966] __get_vm_area_node+0x125/0x370 [ 495.295436][T10966] __vmalloc_node_range+0x36e/0x1330 [ 495.300729][T10966] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 495.306272][T10966] ? mark_lock+0x94/0x320 [ 495.310596][T10966] ? __lock_acquire+0x1347/0x7d40 [ 495.315616][T10966] ? verify_lock_unused+0x140/0x140 [ 495.320812][T10966] ? free_vm_area+0x50/0x50 [ 495.325306][T10966] ? end_current_label_crit_section+0x170/0x170 [ 495.331542][T10966] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 495.337081][T10966] __vmalloc+0x7a/0x90 [ 495.341140][T10966] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 495.346675][T10966] bpf_prog_alloc_no_stats+0x47/0x440 [ 495.352036][T10966] ? bpf_prog_alloc+0x2b/0x1a0 [ 495.356790][T10966] bpf_prog_alloc+0x3d/0x1a0 [ 495.361369][T10966] bpf_prog_load+0x6eb/0x1670 [ 495.366043][T10966] ? map_freeze+0x420/0x420 [ 495.370540][T10966] ? __might_fault+0xaa/0x120 [ 495.375215][T10966] ? __lock_acquire+0x7d40/0x7d40 [ 495.380230][T10966] ? file_end_write+0x159/0x250 [ 495.385073][T10966] ? __might_fault+0xaa/0x120 [ 495.389737][T10966] ? __might_fault+0xc6/0x120 [ 495.394399][T10966] ? __might_fault+0xaa/0x120 [ 495.399067][T10966] ? bpf_lsm_bpf+0x9/0x10 [ 495.403386][T10966] ? security_bpf+0x7e/0xa0 [ 495.407905][T10966] __sys_bpf+0x5ba/0x890 [ 495.412154][T10966] ? bpf_link_show_fdinfo+0x390/0x390 [ 495.417539][T10966] ? lock_chain_count+0x20/0x20 [ 495.422413][T10966] __x64_sys_bpf+0x7c/0x90 [ 495.426848][T10966] do_syscall_64+0x55/0xa0 [ 495.431275][T10966] ? clear_bhb_loop+0x40/0x90 [ 495.435949][T10966] ? clear_bhb_loop+0x40/0x90 [ 495.440622][T10966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.446510][T10966] RIP: 0033:0x7f8d9d79c629 [ 495.450917][T10966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.470521][T10966] RSP: 002b:00007f8d9e6d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 495.478929][T10966] RAX: ffffffffffffffda RBX: 00007f8d9da15fa0 RCX: 00007f8d9d79c629 [ 495.486896][T10966] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 495.494860][T10966] RBP: 00007f8d9e6d8090 R08: 0000000000000000 R09: 0000000000000000 [ 495.502818][T10966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.510776][T10966] R13: 00007f8d9da16038 R14: 00007f8d9da15fa0 R15: 00007ffd5fce0a58 [ 495.518751][T10966] [ 495.569333][T10967] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 495.782515][T10980] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1735'. [ 496.101054][T10987] netlink: 'syz.2.1738': attribute type 10 has an invalid length. [ 496.143910][T10993] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1740'. [ 496.337841][T11000] FAULT_INJECTION: forcing a failure. [ 496.337841][T11000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.359112][T11000] CPU: 1 PID: 11000 Comm: syz.2.1742 Not tainted syzkaller #0 [ 496.366621][T11000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.376691][T11000] Call Trace: [ 496.379985][T11000] [ 496.382935][T11000] dump_stack_lvl+0x18c/0x250 [ 496.387635][T11000] ? show_regs_print_info+0x20/0x20 [ 496.392833][T11000] ? load_image+0x400/0x400 [ 496.397329][T11000] ? __lock_acquire+0x7d40/0x7d40 [ 496.402358][T11000] should_fail_ex+0x39d/0x4d0 [ 496.407035][T11000] _copy_from_user+0x2f/0xe0 [ 496.411616][T11000] __copy_msghdr+0x3bb/0x580 [ 496.416204][T11000] ___sys_sendmsg+0x214/0x360 [ 496.420869][T11000] ? get_pid_task+0x20/0x1e0 [ 496.425455][T11000] ? __sys_sendmsg+0x2a0/0x2a0 [ 496.430219][T11000] ? __lock_acquire+0x7d40/0x7d40 [ 496.435248][T11000] __se_sys_sendmsg+0x1c2/0x2b0 [ 496.440088][T11000] ? __x64_sys_sendmsg+0x80/0x80 [ 496.445025][T11000] ? lockdep_hardirqs_on+0x98/0x150 [ 496.450220][T11000] do_syscall_64+0x55/0xa0 [ 496.454703][T11000] ? clear_bhb_loop+0x40/0x90 [ 496.459369][T11000] ? clear_bhb_loop+0x40/0x90 [ 496.464035][T11000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.469917][T11000] RIP: 0033:0x7f8d9d79c629 [ 496.474325][T11000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.493945][T11000] RSP: 002b:00007f8d9e6d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.502367][T11000] RAX: ffffffffffffffda RBX: 00007f8d9da15fa0 RCX: 00007f8d9d79c629 [ 496.510334][T11000] RDX: 0000000020040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 496.518297][T11000] RBP: 00007f8d9e6d8090 R08: 0000000000000000 R09: 0000000000000000 [ 496.526356][T11000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.534315][T11000] R13: 00007f8d9da16038 R14: 00007f8d9da15fa0 R15: 00007ffd5fce0a58 [ 496.542375][T11000] [ 496.735435][T11012] netlink: 'syz.2.1744': attribute type 21 has an invalid length. [ 496.746075][T11012] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1744'. [ 496.858729][T11017] netlink: 'syz.1.1746': attribute type 9 has an invalid length. [ 496.870858][T11017] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1746'. [ 496.969947][T11019] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1746'. [ 496.981361][T11019] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 497.061993][T11024] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1747'. [ 497.323172][T11034] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1752'. [ 497.393862][T11037] FAULT_INJECTION: forcing a failure. [ 497.393862][T11037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.407234][T11037] CPU: 1 PID: 11037 Comm: syz.1.1753 Not tainted syzkaller #0 [ 497.414723][T11037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 497.424802][T11037] Call Trace: [ 497.428099][T11037] [ 497.431043][T11037] dump_stack_lvl+0x18c/0x250 [ 497.435751][T11037] ? show_regs_print_info+0x20/0x20 [ 497.440974][T11037] ? load_image+0x400/0x400 [ 497.445508][T11037] ? __might_fault+0xaa/0x120 [ 497.450203][T11037] ? __lock_acquire+0x7d40/0x7d40 [ 497.455250][T11037] should_fail_ex+0x39d/0x4d0 [ 497.459950][T11037] _copy_to_user+0x2f/0xa0 [ 497.464387][T11037] bpf_prog_test_run_raw_tp+0x4ca/0x660 [ 497.469963][T11037] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 497.475454][T11037] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 497.481009][T11037] bpf_prog_test_run+0x321/0x390 [ 497.485989][T11037] __sys_bpf+0x49d/0x890 [ 497.490251][T11037] ? bpf_link_show_fdinfo+0x390/0x390 [ 497.495660][T11037] ? lock_chain_count+0x20/0x20 [ 497.500546][T11037] __x64_sys_bpf+0x7c/0x90 [ 497.504975][T11037] do_syscall_64+0x55/0xa0 [ 497.509423][T11037] ? clear_bhb_loop+0x40/0x90 [ 497.514123][T11037] ? clear_bhb_loop+0x40/0x90 [ 497.518812][T11037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.524727][T11037] RIP: 0033:0x7fc5aed9c629 [ 497.529289][T11037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.548891][T11037] RSP: 002b:00007fc5afc1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 497.557304][T11037] RAX: ffffffffffffffda RBX: 00007fc5af015fa0 RCX: 00007fc5aed9c629 [ 497.565282][T11037] RDX: 000000000000000c RSI: 0000200000000380 RDI: 000000000000000a [ 497.573265][T11037] RBP: 00007fc5afc1e090 R08: 0000000000000000 R09: 0000000000000000 [ 497.581229][T11037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.589196][T11037] R13: 00007fc5af016038 R14: 00007fc5af015fa0 R15: 00007fffe9c318e8 [ 497.597170][T11037] [ 497.693311][T11040] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1754'. [ 497.708515][T11040] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.1754'. [ 497.717891][T11040] tipc: Started in network mode [ 497.723122][T11040] tipc: Node identity b, cluster identity 73 [ 497.732541][T11040] tipc: Node number set to 11 [ 498.577153][T11063] netlink: 'syz.3.1761': attribute type 9 has an invalid length. [ 498.592458][T11062] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1759'. [ 498.598687][T11063] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1761'. [ 498.712046][T11065] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1761'. [ 498.747614][T11065] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 501.680504][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.694746][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.458396][T11100] netlink: 'syz.0.1773': attribute type 9 has an invalid length. [ 502.466602][T11100] __nla_validate_parse: 1 callbacks suppressed [ 502.466644][T11100] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1773'. [ 502.563021][T11103] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1773'. [ 502.615299][T11103] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 503.066095][T11115] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1777'. [ 505.901977][T11117] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1786'. [ 505.923851][T11119] netlink: 'syz.1.1778': attribute type 9 has an invalid length. [ 505.940253][T11121] FAULT_INJECTION: forcing a failure. [ 505.940253][T11121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.947921][T11119] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1778'. [ 505.954811][T11121] CPU: 1 PID: 11121 Comm: syz.3.1779 Not tainted syzkaller #0 [ 505.970113][T11121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.980184][T11121] Call Trace: [ 505.983471][T11121] [ 505.986396][T11121] dump_stack_lvl+0x18c/0x250 [ 505.991073][T11121] ? show_regs_print_info+0x20/0x20 [ 505.996356][T11121] ? load_image+0x400/0x400 [ 506.001288][T11121] ? __might_fault+0xaa/0x120 [ 506.005955][T11121] ? __lock_acquire+0x7d40/0x7d40 [ 506.010974][T11121] should_fail_ex+0x39d/0x4d0 [ 506.015651][T11121] _copy_from_user+0x2f/0xe0 [ 506.020243][T11121] ___sys_sendmsg+0x1c7/0x360 [ 506.024907][T11121] ? get_pid_task+0x20/0x1e0 [ 506.029492][T11121] ? __sys_sendmsg+0x2a0/0x2a0 [ 506.034261][T11121] ? __lock_acquire+0x7d40/0x7d40 [ 506.039290][T11121] __se_sys_sendmsg+0x1c2/0x2b0 [ 506.044133][T11121] ? __x64_sys_sendmsg+0x80/0x80 [ 506.049071][T11121] ? lockdep_hardirqs_on+0x98/0x150 [ 506.054259][T11121] do_syscall_64+0x55/0xa0 [ 506.058675][T11121] ? clear_bhb_loop+0x40/0x90 [ 506.063338][T11121] ? clear_bhb_loop+0x40/0x90 [ 506.068006][T11121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.073891][T11121] RIP: 0033:0x7f27ddf9c629 [ 506.078297][T11121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.097914][T11121] RSP: 002b:00007f27dee5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.106330][T11121] RAX: ffffffffffffffda RBX: 00007f27de215fa0 RCX: 00007f27ddf9c629 [ 506.114315][T11121] RDX: 0000000000040854 RSI: 0000200000000240 RDI: 0000000000000003 [ 506.122292][T11121] RBP: 00007f27dee5b090 R08: 0000000000000000 R09: 0000000000000000 [ 506.130259][T11121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.138223][T11121] R13: 00007f27de216038 R14: 00007f27de215fa0 R15: 00007ffd0869e0e8 [ 506.146198][T11121] [ 506.226608][T11124] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1778'. [ 506.241826][T11124] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 506.500397][T11130] FAULT_INJECTION: forcing a failure. [ 506.500397][T11130] name failslab, interval 1, probability 0, space 0, times 0 [ 506.577297][T11130] CPU: 0 PID: 11130 Comm: syz.0.1781 Not tainted syzkaller #0 [ 506.584815][T11130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.594978][T11130] Call Trace: [ 506.598266][T11130] [ 506.601209][T11130] dump_stack_lvl+0x18c/0x250 [ 506.605910][T11130] ? show_regs_print_info+0x20/0x20 [ 506.611125][T11130] ? load_image+0x400/0x400 [ 506.615645][T11130] ? __might_sleep+0xe0/0xe0 [ 506.620252][T11130] ? __lock_acquire+0x7d40/0x7d40 [ 506.625293][T11130] ? mark_lock+0x94/0x320 [ 506.629648][T11130] should_fail_ex+0x39d/0x4d0 [ 506.634361][T11130] should_failslab+0x9/0x20 [ 506.638878][T11130] slab_pre_alloc_hook+0x59/0x310 [ 506.643922][T11130] ? __get_vm_area_node+0x125/0x370 [ 506.649134][T11130] __kmem_cache_alloc_node+0x53/0x250 [ 506.654522][T11130] ? __get_vm_area_node+0x125/0x370 [ 506.659729][T11130] kmalloc_node_trace+0x26/0xe0 [ 506.664595][T11130] __get_vm_area_node+0x125/0x370 [ 506.669643][T11130] __vmalloc_node_range+0x36e/0x1330 [ 506.675031][T11130] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 506.680588][T11130] ? mark_lock+0x94/0x320 [ 506.684930][T11130] ? __lock_acquire+0x1347/0x7d40 [ 506.689965][T11130] ? verify_lock_unused+0x140/0x140 [ 506.695185][T11130] ? free_vm_area+0x50/0x50 [ 506.699699][T11130] ? end_current_label_crit_section+0x170/0x170 [ 506.705967][T11130] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 506.711518][T11130] __vmalloc+0x7a/0x90 [ 506.715599][T11130] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 506.721243][T11130] bpf_prog_alloc_no_stats+0x47/0x440 [ 506.726620][T11130] ? bpf_prog_alloc+0x2b/0x1a0 [ 506.731399][T11130] bpf_prog_alloc+0x3d/0x1a0 [ 506.735999][T11130] bpf_prog_load+0x6eb/0x1670 [ 506.740698][T11130] ? map_freeze+0x420/0x420 [ 506.745218][T11130] ? __might_fault+0xaa/0x120 [ 506.749908][T11130] ? __lock_acquire+0x7d40/0x7d40 [ 506.754941][T11130] ? file_end_write+0x159/0x250 [ 506.759814][T11130] ? __might_fault+0xaa/0x120 [ 506.764497][T11130] ? __might_fault+0xc6/0x120 [ 506.769185][T11130] ? __might_fault+0xaa/0x120 [ 506.773876][T11130] ? bpf_lsm_bpf+0x9/0x10 [ 506.778212][T11130] ? security_bpf+0x7e/0xa0 [ 506.782715][T11130] __sys_bpf+0x5ba/0x890 [ 506.786959][T11130] ? bpf_link_show_fdinfo+0x390/0x390 [ 506.792356][T11130] ? lock_chain_count+0x20/0x20 [ 506.797222][T11130] __x64_sys_bpf+0x7c/0x90 [ 506.801645][T11130] do_syscall_64+0x55/0xa0 [ 506.806071][T11130] ? clear_bhb_loop+0x40/0x90 [ 506.810747][T11130] ? clear_bhb_loop+0x40/0x90 [ 506.815422][T11130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.821319][T11130] RIP: 0033:0x7fa51d79c629 [ 506.825816][T11130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.845417][T11130] RSP: 002b:00007fa51e6bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 506.853831][T11130] RAX: ffffffffffffffda RBX: 00007fa51da15fa0 RCX: 00007fa51d79c629 [ 506.861797][T11130] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 506.869760][T11130] RBP: 00007fa51e6bc090 R08: 0000000000000000 R09: 0000000000000000 [ 506.877723][T11130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.885686][T11130] R13: 00007fa51da16038 R14: 00007fa51da15fa0 R15: 00007ffeba4d11d8 [ 506.893665][T11130] [ 506.904839][T11130] warn_alloc: 1 callbacks suppressed [ 506.904853][T11130] syz.0.1781: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 506.951901][T11130] CPU: 1 PID: 11130 Comm: syz.0.1781 Not tainted syzkaller #0 [ 506.959413][T11130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.969483][T11130] Call Trace: [ 506.972780][T11130] [ 506.975719][T11130] dump_stack_lvl+0x18c/0x250 [ 506.980507][T11130] ? show_regs_print_info+0x20/0x20 [ 506.985718][T11130] ? load_image+0x400/0x400 [ 506.990239][T11130] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 506.996674][T11130] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 507.003190][T11130] warn_alloc+0x246/0x340 [ 507.007539][T11130] ? __get_vm_area_node+0x125/0x370 [ 507.012755][T11130] ? zone_watermark_ok_safe+0x230/0x230 [ 507.018317][T11130] ? rcu_is_watching+0x15/0xb0 [ 507.023103][T11130] ? __get_vm_area_node+0x356/0x370 [ 507.028332][T11130] __vmalloc_node_range+0x393/0x1330 [ 507.033648][T11130] ? mark_lock+0x94/0x320 [ 507.037996][T11130] ? __lock_acquire+0x1347/0x7d40 [ 507.043043][T11130] ? verify_lock_unused+0x140/0x140 [ 507.048365][T11130] ? free_vm_area+0x50/0x50 [ 507.052886][T11130] ? end_current_label_crit_section+0x170/0x170 [ 507.059151][T11130] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 507.064720][T11130] __vmalloc+0x7a/0x90 [ 507.068804][T11130] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 507.074358][T11130] bpf_prog_alloc_no_stats+0x47/0x440 [ 507.079736][T11130] ? bpf_prog_alloc+0x2b/0x1a0 [ 507.084515][T11130] bpf_prog_alloc+0x3d/0x1a0 [ 507.089123][T11130] bpf_prog_load+0x6eb/0x1670 [ 507.093822][T11130] ? map_freeze+0x420/0x420 [ 507.098429][T11130] ? __might_fault+0xaa/0x120 [ 507.103119][T11130] ? __lock_acquire+0x7d40/0x7d40 [ 507.108156][T11130] ? file_end_write+0x159/0x250 [ 507.113044][T11130] ? __might_fault+0xaa/0x120 [ 507.117740][T11130] ? __might_fault+0xc6/0x120 [ 507.122443][T11130] ? __might_fault+0xaa/0x120 [ 507.127152][T11130] ? bpf_lsm_bpf+0x9/0x10 [ 507.131509][T11130] ? security_bpf+0x7e/0xa0 [ 507.136043][T11130] __sys_bpf+0x5ba/0x890 [ 507.140317][T11130] ? bpf_link_show_fdinfo+0x390/0x390 [ 507.145730][T11130] ? lock_chain_count+0x20/0x20 [ 507.150615][T11130] __x64_sys_bpf+0x7c/0x90 [ 507.155044][T11130] do_syscall_64+0x55/0xa0 [ 507.159464][T11130] ? clear_bhb_loop+0x40/0x90 [ 507.164142][T11130] ? clear_bhb_loop+0x40/0x90 [ 507.168819][T11130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.174703][T11130] RIP: 0033:0x7fa51d79c629 [ 507.179119][T11130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.198729][T11130] RSP: 002b:00007fa51e6bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 507.207140][T11130] RAX: ffffffffffffffda RBX: 00007fa51da15fa0 RCX: 00007fa51d79c629 [ 507.215106][T11130] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 507.223069][T11130] RBP: 00007fa51e6bc090 R08: 0000000000000000 R09: 0000000000000000 [ 507.231032][T11130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.238994][T11130] R13: 00007fa51da16038 R14: 00007fa51da15fa0 R15: 00007ffeba4d11d8 [ 507.246980][T11130] [ 507.335124][T11130] Mem-Info: [ 507.341335][T11130] active_anon:5426 inactive_anon:0 isolated_anon:0 [ 507.341335][T11130] active_file:1858 inactive_file:40091 isolated_file:0 [ 507.341335][T11130] unevictable:768 dirty:228 writeback:0 [ 507.341335][T11130] slab_reclaimable:13226 slab_unreclaimable:118635 [ 507.341335][T11130] mapped:26848 shmem:1361 pagetables:543 [ 507.341335][T11130] sec_pagetables:0 bounce:0 [ 507.341335][T11130] kernel_misc_reclaimable:0 [ 507.341335][T11130] free:1328777 free_pcp:14129 free_cma:0 [ 507.341684][T11132] netlink: 61955 bytes leftover after parsing attributes in process `syz.3.1782'. [ 507.414811][T11130] Node 0 active_anon:21604kB inactive_anon:0kB active_file:7432kB inactive_file:160160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107392kB dirty:912kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10084kB pagetables:2072kB sec_pagetables:0kB all_unreclaimable? no [ 507.474794][T11132] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1782'. [ 507.503217][T11130] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 507.542694][T11130] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.572929][T11130] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 507.602788][T11130] Node 0 DMA32 free:1413972kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21564kB inactive_anon:0kB active_file:7432kB inactive_file:159340kB unevictable:1536kB writepending:912kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:34952kB local_pcp:16984kB free_cma:0kB [ 507.654340][T11130] lowmem_reserve[]: 0 0 0 0 0 [ 507.684743][T11130] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 507.761050][T11130] lowmem_reserve[]: 0 0 0 0 0 [ 507.778006][T11130] Node 1 Normal free:3886032kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22936kB local_pcp:11832kB free_cma:0kB [ 507.843751][T11130] lowmem_reserve[]: 0 0 0 0 0 [ 507.855888][T11130] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 507.879571][T11130] Node 0 DMA32: 239*4kB (U) 289*8kB (UME) 19*16kB (UM) 487*32kB (UME) 276*64kB (UME) 134*128kB (UE) 139*256kB (UM) 76*512kB (UE) 43*1024kB (UM) 28*2048kB (UME) 289*4096kB (UM) = 1413588kB [ 507.903365][T11130] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 507.919719][T11130] Node 1 Normal: 232*4kB (U) 44*8kB (UME) 45*16kB (UME) 74*32kB (UME) 19*64kB (UE) 6*128kB (UME) 1*256kB (U) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 946*4096kB (M) = 3886032kB [ 507.942483][T11130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.952968][T11130] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 507.967848][T11130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.982364][T11130] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 507.998277][T11130] 43312 total pagecache pages [ 508.003100][T11130] 0 pages in swap cache [ 508.009016][T11130] Free swap = 124996kB [ 508.013281][T11130] Total swap = 124996kB [ 508.021584][T11130] 2097051 pages RAM [ 508.026976][T11130] 0 pages HighMem/MovableOnly [ 508.031832][T11130] 416922 pages reserved [ 508.039821][T11130] 0 pages cma reserved [ 508.598421][T11156] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1789'. [ 511.613650][T11160] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1790'. [ 511.673393][T11164] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.1792'. [ 512.350031][T11186] netlink: 'syz.0.1798': attribute type 9 has an invalid length. [ 512.373800][T11186] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1798'. [ 512.441160][T11190] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1798'. [ 512.451354][T11190] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 515.808950][T11196] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1800'. [ 515.998952][T11204] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1802'. [ 516.072784][T11210] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.1804'. [ 517.203804][T11231] netlink: 'syz.1.1809': attribute type 9 has an invalid length. [ 517.211998][T11231] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1809'. [ 517.378109][T11234] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1809'. [ 517.425666][T11234] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 517.434169][T11233] netlink: 'syz.2.1810': attribute type 9 has an invalid length. [ 517.437517][T11235] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1810'. [ 517.461734][T11235] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 517.479137][T11233] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1810'. [ 517.823454][T11244] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1812'. [ 520.920906][T11247] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1814'. [ 520.977761][T11252] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.1815'. [ 520.989456][T11250] netlink: 'syz.3.1816': attribute type 28 has an invalid length. [ 520.989482][T11250] netlink: 'syz.3.1816': attribute type 29 has an invalid length. [ 520.989498][T11250] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1816'. [ 521.424284][T11264] netlink: 'syz.2.1821': attribute type 9 has an invalid length. [ 521.438500][T11264] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1821'. [ 521.499812][T11267] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1821'. [ 521.510158][T11267] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 521.794198][T11277] netlink: 'syz.1.1823': attribute type 9 has an invalid length. [ 521.802600][T11277] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1823'. [ 521.907284][T11279] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1823'. [ 521.967438][T11279] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 521.996311][T11282] FAULT_INJECTION: forcing a failure. [ 521.996311][T11282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.024822][T11282] CPU: 1 PID: 11282 Comm: syz.0.1825 Not tainted syzkaller #0 [ 522.032439][T11282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 522.042528][T11282] Call Trace: [ 522.045826][T11282] [ 522.048783][T11282] dump_stack_lvl+0x18c/0x250 [ 522.053495][T11282] ? show_regs_print_info+0x20/0x20 [ 522.058785][T11282] ? load_image+0x400/0x400 [ 522.063309][T11282] ? __lock_acquire+0x7d40/0x7d40 [ 522.068335][T11282] should_fail_ex+0x39d/0x4d0 [ 522.073013][T11282] _copy_from_user+0x2f/0xe0 [ 522.077606][T11282] __copy_msghdr+0x3bb/0x580 [ 522.082209][T11282] ___sys_sendmsg+0x214/0x360 [ 522.086880][T11282] ? get_pid_task+0x20/0x1e0 [ 522.091478][T11282] ? __sys_sendmsg+0x2a0/0x2a0 [ 522.096262][T11282] ? __lock_acquire+0x7d40/0x7d40 [ 522.101304][T11282] __se_sys_sendmsg+0x1c2/0x2b0 [ 522.106156][T11282] ? __x64_sys_sendmsg+0x80/0x80 [ 522.111099][T11282] ? lockdep_hardirqs_on+0x98/0x150 [ 522.116298][T11282] do_syscall_64+0x55/0xa0 [ 522.120713][T11282] ? clear_bhb_loop+0x40/0x90 [ 522.125388][T11282] ? clear_bhb_loop+0x40/0x90 [ 522.130060][T11282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 522.135945][T11282] RIP: 0033:0x7fa51d79c629 [ 522.140351][T11282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.159959][T11282] RSP: 002b:00007fa51e6bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.168414][T11282] RAX: ffffffffffffffda RBX: 00007fa51da15fa0 RCX: 00007fa51d79c629 [ 522.176410][T11282] RDX: 0000000020001850 RSI: 00002000000000c0 RDI: 0000000000000003 [ 522.184397][T11282] RBP: 00007fa51e6bc090 R08: 0000000000000000 R09: 0000000000000000 [ 522.192369][T11282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.200347][T11282] R13: 00007fa51da16038 R14: 00007fa51da15fa0 R15: 00007ffeba4d11d8 [ 522.208414][T11282] [ 522.471474][T11286] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1827'. [ 522.770537][T11293] netlink: 'syz.2.1830': attribute type 10 has an invalid length. [ 523.622516][T11293] team0: Port device dummy0 added [ 525.621173][T11316] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1836'. [ 525.659217][T11316] bridge_slave_1: default FDB implementation only supports local addresses [ 525.691798][T11315] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1837'. [ 525.959948][T11325] netlink: 'syz.3.1840': attribute type 10 has an invalid length. [ 525.995083][T11325] team0: Port device dummy0 added [ 527.679231][T11340] netlink: 'syz.2.1845': attribute type 29 has an invalid length. [ 527.705301][T11340] netlink: 'syz.2.1845': attribute type 29 has an invalid length. [ 527.975181][T11347] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1846'. [ 530.691395][T11354] FAULT_INJECTION: forcing a failure. [ 530.691395][T11354] name failslab, interval 1, probability 0, space 0, times 0 [ 530.705190][T11354] CPU: 1 PID: 11354 Comm: syz.0.1848 Not tainted syzkaller #0 [ 530.712687][T11354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 530.722762][T11354] Call Trace: [ 530.726048][T11354] [ 530.728987][T11354] dump_stack_lvl+0x18c/0x250 [ 530.733671][T11354] ? show_regs_print_info+0x20/0x20 [ 530.738864][T11354] ? load_image+0x400/0x400 [ 530.743365][T11354] ? __might_sleep+0xe0/0xe0 [ 530.747948][T11354] ? __lock_acquire+0x7d40/0x7d40 [ 530.752968][T11354] should_fail_ex+0x39d/0x4d0 [ 530.757644][T11354] should_failslab+0x9/0x20 [ 530.762158][T11354] slab_pre_alloc_hook+0x59/0x310 [ 530.767182][T11354] ? __lock_acquire+0x7d40/0x7d40 [ 530.772204][T11354] kmem_cache_alloc_node+0x60/0x320 [ 530.777398][T11354] ? __alloc_skb+0x103/0x2c0 [ 530.781990][T11354] __alloc_skb+0x103/0x2c0 [ 530.786405][T11354] netlink_sendmsg+0x66a/0xbf0 [ 530.791171][T11354] ? netlink_getsockopt+0x590/0x590 [ 530.796371][T11354] ? aa_sock_msg_perm+0x94/0x150 [ 530.801308][T11354] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 530.806587][T11354] ? security_socket_sendmsg+0x80/0xa0 [ 530.812036][T11354] ? netlink_getsockopt+0x590/0x590 [ 530.817230][T11354] ____sys_sendmsg+0x5ba/0x960 [ 530.821990][T11354] ? __asan_memset+0x22/0x40 [ 530.826577][T11354] ? __sys_sendmsg_sock+0x30/0x30 [ 530.831589][T11354] ? __import_iovec+0x5f2/0x850 [ 530.836442][T11354] ? import_iovec+0x73/0xa0 [ 530.840943][T11354] ___sys_sendmsg+0x2a6/0x360 [ 530.845609][T11354] ? get_pid_task+0x20/0x1e0 [ 530.850197][T11354] ? __sys_sendmsg+0x2a0/0x2a0 [ 530.854966][T11354] ? __lock_acquire+0x7d40/0x7d40 [ 530.860001][T11354] __se_sys_sendmsg+0x1c2/0x2b0 [ 530.864844][T11354] ? __x64_sys_sendmsg+0x80/0x80 [ 530.869780][T11354] ? lockdep_hardirqs_on+0x98/0x150 [ 530.874972][T11354] do_syscall_64+0x55/0xa0 [ 530.879381][T11354] ? clear_bhb_loop+0x40/0x90 [ 530.884050][T11354] ? clear_bhb_loop+0x40/0x90 [ 530.888719][T11354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.894611][T11354] RIP: 0033:0x7fa51d79c629 [ 530.899018][T11354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.918615][T11354] RSP: 002b:00007fa51e6bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.927020][T11354] RAX: ffffffffffffffda RBX: 00007fa51da15fa0 RCX: 00007fa51d79c629 [ 530.934986][T11354] RDX: 0000000000008044 RSI: 0000200000000600 RDI: 0000000000000003 [ 530.943039][T11354] RBP: 00007fa51e6bc090 R08: 0000000000000000 R09: 0000000000000000 [ 530.951003][T11354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.959050][T11354] R13: 00007fa51da16038 R14: 00007fa51da15fa0 R15: 00007ffeba4d11d8 [ 530.967027][T11354] [ 531.123100][T11360] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1851'. [ 531.148385][T11363] netlink: 'syz.2.1852': attribute type 33 has an invalid length. [ 531.159081][T11363] netlink: 'syz.2.1852': attribute type 3 has an invalid length. [ 531.167273][T11363] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.1852'. [ 531.306262][T11368] FAULT_INJECTION: forcing a failure. [ 531.306262][T11368] name failslab, interval 1, probability 0, space 0, times 0 [ 531.332573][T11368] CPU: 0 PID: 11368 Comm: syz.3.1856 Not tainted syzkaller #0 [ 531.340114][T11368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.350195][T11368] Call Trace: [ 531.353481][T11368] [ 531.356419][T11368] dump_stack_lvl+0x18c/0x250 [ 531.361121][T11368] ? show_regs_print_info+0x20/0x20 [ 531.366340][T11368] ? load_image+0x400/0x400 [ 531.370872][T11368] ? __might_sleep+0xe0/0xe0 [ 531.375522][T11368] ? __lock_acquire+0x7d40/0x7d40 [ 531.380577][T11368] should_fail_ex+0x39d/0x4d0 [ 531.385288][T11368] should_failslab+0x9/0x20 [ 531.389819][T11368] slab_pre_alloc_hook+0x59/0x310 [ 531.394867][T11368] ? __lock_acquire+0x7d40/0x7d40 [ 531.399905][T11368] kmem_cache_alloc_node+0x60/0x320 [ 531.405112][T11368] ? __alloc_skb+0x103/0x2c0 [ 531.409723][T11368] __alloc_skb+0x103/0x2c0 [ 531.414157][T11368] netlink_sendmsg+0x66a/0xbf0 [ 531.418945][T11368] ? netlink_getsockopt+0x590/0x590 [ 531.424161][T11368] ? aa_sock_msg_perm+0x94/0x150 [ 531.429112][T11368] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 531.434406][T11368] ? security_socket_sendmsg+0x80/0xa0 [ 531.439873][T11368] ? netlink_getsockopt+0x590/0x590 [ 531.445086][T11368] ____sys_sendmsg+0x5ba/0x960 [ 531.449865][T11368] ? __asan_memset+0x22/0x40 [ 531.454468][T11368] ? __sys_sendmsg_sock+0x30/0x30 [ 531.459495][T11368] ? __import_iovec+0x5f2/0x850 [ 531.464372][T11368] ? import_iovec+0x73/0xa0 [ 531.468893][T11368] ___sys_sendmsg+0x2a6/0x360 [ 531.473574][T11368] ? get_pid_task+0x20/0x1e0 [ 531.478445][T11368] ? __sys_sendmsg+0x2a0/0x2a0 [ 531.483232][T11368] ? __lock_acquire+0x7d40/0x7d40 [ 531.488287][T11368] __se_sys_sendmsg+0x1c2/0x2b0 [ 531.493143][T11368] ? __x64_sys_sendmsg+0x80/0x80 [ 531.498109][T11368] ? lockdep_hardirqs_on+0x98/0x150 [ 531.503316][T11368] do_syscall_64+0x55/0xa0 [ 531.507743][T11368] ? clear_bhb_loop+0x40/0x90 [ 531.512424][T11368] ? clear_bhb_loop+0x40/0x90 [ 531.517109][T11368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 531.523014][T11368] RIP: 0033:0x7f27ddf9c629 [ 531.527442][T11368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.547062][T11368] RSP: 002b:00007f27dee5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.555485][T11368] RAX: ffffffffffffffda RBX: 00007f27de215fa0 RCX: 00007f27ddf9c629 [ 531.563462][T11368] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 531.571446][T11368] RBP: 00007f27dee5b090 R08: 0000000000000000 R09: 0000000000000000 [ 531.579423][T11368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.587400][T11368] R13: 00007f27de216038 R14: 00007f27de215fa0 R15: 00007ffd0869e0e8 [ 531.595391][T11368] [ 531.607409][T11370] netlink: 'syz.0.1854': attribute type 10 has an invalid length. [ 531.754120][T11374] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1855'. [ 532.983883][T11387] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1859'. [ 535.279136][T11405] netlink: 'syz.3.1867': attribute type 9 has an invalid length. [ 535.294344][T11405] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1867'. [ 535.421621][T11410] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1867'. [ 535.485346][T11410] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 535.970517][T11419] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1870'. [ 536.133548][T11427] netlink: 'syz.3.1873': attribute type 21 has an invalid length. [ 539.310858][T11441] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1876'. [ 539.576035][T11450] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1880'. [ 539.992010][T11456] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1884'. [ 540.010806][T11458] netlink: 'syz.3.1883': attribute type 10 has an invalid length. [ 540.034607][T11458] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1883'. [ 540.043876][T11458] team0: entered promiscuous mode [ 540.049797][T11458] team_slave_0: entered promiscuous mode [ 540.059333][T11458] team_slave_1: entered promiscuous mode [ 540.065725][T11458] geneve1: entered promiscuous mode [ 540.073419][T11458] dummy0: entered promiscuous mode [ 540.087503][T11458] team0: entered allmulticast mode [ 540.092660][T11458] team_slave_0: entered allmulticast mode [ 540.118885][T11458] team_slave_1: entered allmulticast mode [ 540.145525][T11458] geneve1: entered allmulticast mode [ 540.164673][T11458] dummy0: entered allmulticast mode [ 540.170678][T11458] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 543.316837][T11477] FAULT_INJECTION: forcing a failure. [ 543.316837][T11477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.334352][T11477] CPU: 1 PID: 11477 Comm: syz.2.1889 Not tainted syzkaller #0 [ 543.341864][T11477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 543.351941][T11477] Call Trace: [ 543.355238][T11477] [ 543.358185][T11477] dump_stack_lvl+0x18c/0x250 [ 543.362904][T11477] ? show_regs_print_info+0x20/0x20 [ 543.368130][T11477] ? load_image+0x400/0x400 [ 543.372654][T11477] ? __lock_acquire+0x7d40/0x7d40 [ 543.377709][T11477] should_fail_ex+0x39d/0x4d0 [ 543.382417][T11477] _copy_from_user+0x2f/0xe0 [ 543.387032][T11477] __copy_msghdr+0x3bb/0x580 [ 543.391620][T11477] ___sys_sendmsg+0x214/0x360 [ 543.396286][T11477] ? get_pid_task+0x20/0x1e0 [ 543.400877][T11477] ? __sys_sendmsg+0x2a0/0x2a0 [ 543.405645][T11477] ? __lock_acquire+0x7d40/0x7d40 [ 543.410681][T11477] __se_sys_sendmsg+0x1c2/0x2b0 [ 543.415528][T11477] ? __x64_sys_sendmsg+0x80/0x80 [ 543.420464][T11477] ? lockdep_hardirqs_on+0x98/0x150 [ 543.425656][T11477] do_syscall_64+0x55/0xa0 [ 543.430099][T11477] ? clear_bhb_loop+0x40/0x90 [ 543.434769][T11477] ? clear_bhb_loop+0x40/0x90 [ 543.439450][T11477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.445335][T11477] RIP: 0033:0x7f8d9d79c629 [ 543.449739][T11477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.469340][T11477] RSP: 002b:00007f8d9e6d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.477747][T11477] RAX: ffffffffffffffda RBX: 00007f8d9da15fa0 RCX: 00007f8d9d79c629 [ 543.485710][T11477] RDX: 0000000000020005 RSI: 0000200000000040 RDI: 0000000000000003 [ 543.493671][T11477] RBP: 00007f8d9e6d8090 R08: 0000000000000000 R09: 0000000000000000 [ 543.501632][T11477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.509593][T11477] R13: 00007f8d9da16038 R14: 00007f8d9da15fa0 R15: 00007ffd5fce0a58 [ 543.517566][T11477] [ 543.607104][T11479] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1890'. [ 544.012570][T11492] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1903'. [ 544.042432][T11494] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1895'. [ 544.338964][T11506] FAULT_INJECTION: forcing a failure. [ 544.338964][T11506] name failslab, interval 1, probability 0, space 0, times 0 [ 544.383750][T11506] CPU: 1 PID: 11506 Comm: syz.1.1899 Not tainted syzkaller #0 [ 544.391258][T11506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 544.401350][T11506] Call Trace: [ 544.404645][T11506] [ 544.407583][T11506] dump_stack_lvl+0x18c/0x250 [ 544.412290][T11506] ? show_regs_print_info+0x20/0x20 [ 544.417502][T11506] ? load_image+0x400/0x400 [ 544.422018][T11506] ? __might_sleep+0xe0/0xe0 [ 544.426650][T11506] ? __lock_acquire+0x7d40/0x7d40 [ 544.431690][T11506] should_fail_ex+0x39d/0x4d0 [ 544.436386][T11506] should_failslab+0x9/0x20 [ 544.440900][T11506] slab_pre_alloc_hook+0x59/0x310 [ 544.445943][T11506] ? tomoyo_encode+0x28b/0x540 [ 544.450710][T11506] ? tomoyo_encode+0x28b/0x540 [ 544.455484][T11506] __kmem_cache_alloc_node+0x53/0x250 [ 544.460870][T11506] ? tomoyo_encode+0x28b/0x540 [ 544.465642][T11506] __kmalloc+0xa4/0x230 [ 544.469816][T11506] tomoyo_encode+0x28b/0x540 [ 544.474430][T11506] tomoyo_realpath_from_path+0x592/0x5d0 [ 544.480079][T11506] tomoyo_path_number_perm+0x248/0x620 [ 544.485553][T11506] ? tomoyo_path_number_perm+0x217/0x620 [ 544.491225][T11506] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 544.496698][T11506] ? ksys_write+0x1c4/0x260 [ 544.501237][T11506] ? __fget_files+0x28/0x4b0 [ 544.505841][T11506] ? __fget_files+0x28/0x4b0 [ 544.510452][T11506] security_file_ioctl+0x70/0xa0 [ 544.515422][T11506] __se_sys_ioctl+0x48/0x170 [ 544.520038][T11506] do_syscall_64+0x55/0xa0 [ 544.524460][T11506] ? clear_bhb_loop+0x40/0x90 [ 544.529140][T11506] ? clear_bhb_loop+0x40/0x90 [ 544.533821][T11506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 544.539719][T11506] RIP: 0033:0x7fc5aed9c629 [ 544.544138][T11506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.563750][T11506] RSP: 002b:00007fc5afc1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.572169][T11506] RAX: ffffffffffffffda RBX: 00007fc5af015fa0 RCX: 00007fc5aed9c629 [ 544.580145][T11506] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 544.588118][T11506] RBP: 00007fc5afc1e090 R08: 0000000000000000 R09: 0000000000000000 [ 544.596089][T11506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.604062][T11506] R13: 00007fc5af016038 R14: 00007fc5af015fa0 R15: 00007fffe9c318e8 [ 544.612055][T11506] [ 544.624836][T11506] ERROR: Out of memory at tomoyo_realpath_from_path. [ 547.356808][T11500] netlink: 'syz.2.1896': attribute type 10 has an invalid length. [ 547.364782][T11500] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1896'. [ 547.373741][T11500] team0: entered promiscuous mode [ 547.379834][T11500] team_slave_0: entered promiscuous mode [ 547.389074][T11500] team_slave_1: entered promiscuous mode [ 547.396237][T11500] dummy0: entered promiscuous mode [ 547.401571][T11500] team0: entered allmulticast mode [ 547.409254][T11500] team_slave_0: entered allmulticast mode [ 547.424774][T11500] team_slave_1: entered allmulticast mode [ 547.430738][T11500] dummy0: entered allmulticast mode [ 547.437306][T11500] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 548.088153][T11531] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1906'. [ 548.587655][T11544] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1910'. [ 551.447334][T11549] netlink: 'syz.0.1912': attribute type 10 has an invalid length. [ 551.468186][T11549] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1912'. [ 551.480288][T11549] team0: entered promiscuous mode [ 551.486239][T11549] team_slave_0: entered promiscuous mode [ 551.492111][T11549] team_slave_1: entered promiscuous mode [ 551.500596][T11549] team0: entered allmulticast mode [ 551.506313][T11549] team_slave_0: entered allmulticast mode [ 551.512082][T11549] team_slave_1: entered allmulticast mode [ 551.535754][T11549] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 551.653874][T11558] netlink: 'syz.1.1914': attribute type 9 has an invalid length. [ 551.682134][T11558] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1914'. [ 551.785191][T11563] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1914'. [ 551.818725][T11563] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 551.978402][T11572] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1916'. [ 555.561601][T11600] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1924'. [ 555.980018][T11615] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1927'. [ 556.456018][T11624] netlink: 'syz.0.1930': attribute type 9 has an invalid length. [ 556.466162][T11624] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1930'. [ 556.582688][T11627] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1930'. [ 556.635540][T11627] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 556.767206][T11629] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1932'. [ 557.277066][T11641] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1936'. [ 560.200477][T11645] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1937'. [ 560.851224][T11668] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1943'. [ 561.172417][T11675] netlink: 'syz.2.1945': attribute type 10 has an invalid length. [ 561.181813][T11675] batman_adv: batadv0: Adding interface: wlan0 [ 561.184444][T11673] netlink: 'syz.1.1944': attribute type 9 has an invalid length. [ 561.195805][T11675] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.214512][T11673] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1944'. [ 561.244781][T11675] batman_adv: batadv0: Interface activated: wlan0 [ 561.407138][T11676] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1944'. [ 561.434824][T11676] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 562.106855][T11685] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1947'. [ 563.129384][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.141120][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.985931][T11693] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1949'. [ 565.426391][T11703] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1954'. [ 565.911170][T11721] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1960'. [ 569.445603][T11738] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1963'. [ 569.593119][T11744] netlink: 'syz.3.1966': attribute type 9 has an invalid length. [ 569.609239][T11744] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1966'. [ 569.696397][T11747] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1966'. [ 569.713520][T11747] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 570.068367][T11754] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1970'. [ 570.203212][T11757] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1971'. [ 573.437751][T11777] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1975'. [ 573.879012][T11789] netlink: 'syz.1.1980': attribute type 9 has an invalid length. [ 573.895264][T11789] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1980'. [ 573.976670][T11793] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1980'. [ 573.987176][T11793] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 574.103173][T11796] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1982'. [ 574.317676][T11800] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1984'. [ 577.990970][T11830] __nla_validate_parse: 1 callbacks suppressed [ 577.990991][T11830] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1991'. [ 578.479372][T11835] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1995'. [ 578.493604][T11837] FAULT_INJECTION: forcing a failure. [ 578.493604][T11837] name failslab, interval 1, probability 0, space 0, times 0 [ 578.510096][T11837] CPU: 1 PID: 11837 Comm: syz.3.1994 Not tainted syzkaller #0 [ 578.517605][T11837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 578.527674][T11837] Call Trace: [ 578.530948][T11837] [ 578.533869][T11837] dump_stack_lvl+0x18c/0x250 [ 578.538552][T11837] ? show_regs_print_info+0x20/0x20 [ 578.543741][T11837] ? load_image+0x400/0x400 [ 578.548236][T11837] ? __lock_acquire+0x7d40/0x7d40 [ 578.553251][T11837] should_fail_ex+0x39d/0x4d0 [ 578.558067][T11837] should_failslab+0x9/0x20 [ 578.562560][T11837] slab_pre_alloc_hook+0x59/0x310 [ 578.567584][T11837] ? bpf_test_init+0x9f/0x140 [ 578.572259][T11837] ? bpf_test_init+0x9f/0x140 [ 578.576926][T11837] __kmem_cache_alloc_node+0x53/0x250 [ 578.582298][T11837] ? bpf_test_init+0x9f/0x140 [ 578.586964][T11837] __kmalloc+0xa4/0x230 [ 578.591118][T11837] bpf_test_init+0x9f/0x140 [ 578.595615][T11837] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 578.600988][T11837] ? dev_put+0x80/0x80 [ 578.605061][T11837] ? dev_put+0x80/0x80 [ 578.609120][T11837] bpf_prog_test_run+0x321/0x390 [ 578.614058][T11837] __sys_bpf+0x49d/0x890 [ 578.618296][T11837] ? bpf_link_show_fdinfo+0x390/0x390 [ 578.623675][T11837] ? lock_chain_count+0x20/0x20 [ 578.628528][T11837] __x64_sys_bpf+0x7c/0x90 [ 578.632937][T11837] do_syscall_64+0x55/0xa0 [ 578.637348][T11837] ? clear_bhb_loop+0x40/0x90 [ 578.642017][T11837] ? clear_bhb_loop+0x40/0x90 [ 578.646693][T11837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 578.652581][T11837] RIP: 0033:0x7f27ddf9c629 [ 578.656993][T11837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.676613][T11837] RSP: 002b:00007f27dee5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 578.685033][T11837] RAX: ffffffffffffffda RBX: 00007f27de215fa0 RCX: 00007f27ddf9c629 [ 578.692997][T11837] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 578.700963][T11837] RBP: 00007f27dee5b090 R08: 0000000000000000 R09: 0000000000000000 [ 578.708925][T11837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.716891][T11837] R13: 00007f27de216038 R14: 00007f27de215fa0 R15: 00007ffd0869e0e8 [ 578.724873][T11837] [ 582.116649][T11865] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2001'. [ 582.781436][T11877] netlink: 'syz.0.2006': attribute type 21 has an invalid length. [ 582.844149][T11879] netlink: 'syz.2.2007': attribute type 9 has an invalid length. [ 582.862360][T11879] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2007'. [ 583.012972][T11881] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2007'. [ 583.086121][T11881] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 584.001426][T11891] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2008'. [ 584.989149][T11900] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2010'. [ 585.313712][T11914] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2013'. [ 586.182083][T11929] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2019'. [ 586.409229][T11935] netlink: 'syz.0.2021': attribute type 9 has an invalid length. [ 586.422212][T11935] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2021'. [ 586.498374][T11940] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2021'. [ 586.549901][T11940] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 586.807475][T11948] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2026'. [ 588.754794][T11982] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2036'. [ 589.271512][T11994] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2042'. [ 589.333410][T11992] netlink: 'syz.1.2041': attribute type 9 has an invalid length. [ 589.364277][T11992] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2041'. [ 589.428967][T11999] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2041'. [ 589.464986][T11999] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 589.669811][T12005] netlink: 'syz.3.2043': attribute type 9 has an invalid length. [ 589.681537][T12005] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2043'. [ 589.723133][T12002] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2043'. [ 589.763641][T12002] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 590.455201][T12018] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2048'. [ 590.547785][T12020] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2050'. [ 591.892827][T12040] FAULT_INJECTION: forcing a failure. [ 591.892827][T12040] name failslab, interval 1, probability 0, space 0, times 0 [ 591.924718][T12040] CPU: 0 PID: 12040 Comm: syz.3.2056 Not tainted syzkaller #0 [ 591.932250][T12040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 591.942355][T12040] Call Trace: [ 591.945706][T12040] [ 591.948691][T12040] dump_stack_lvl+0x18c/0x250 [ 591.953440][T12040] ? show_regs_print_info+0x20/0x20 [ 591.958706][T12040] ? load_image+0x400/0x400 [ 591.963274][T12040] ? __might_sleep+0xe0/0xe0 [ 591.967933][T12040] ? __lock_acquire+0x7d40/0x7d40 [ 591.973023][T12040] should_fail_ex+0x39d/0x4d0 [ 591.977772][T12040] should_failslab+0x9/0x20 [ 591.982326][T12040] slab_pre_alloc_hook+0x59/0x310 [ 591.987407][T12040] ? tomoyo_encode+0x28b/0x540 [ 591.992201][T12040] ? tomoyo_encode+0x28b/0x540 [ 591.996981][T12040] __kmem_cache_alloc_node+0x53/0x250 [ 592.002379][T12040] ? tomoyo_encode+0x28b/0x540 [ 592.007155][T12040] __kmalloc+0xa4/0x230 [ 592.011331][T12040] tomoyo_encode+0x28b/0x540 [ 592.015946][T12040] tomoyo_realpath_from_path+0x592/0x5d0 [ 592.021616][T12040] tomoyo_path_number_perm+0x248/0x620 [ 592.027095][T12040] ? tomoyo_path_number_perm+0x217/0x620 [ 592.032748][T12040] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 592.038224][T12040] ? trace_call_bpf+0xc3/0x6c0 [ 592.043002][T12040] ? trace_call_bpf+0xc3/0x6c0 [ 592.047780][T12040] ? trace_call_bpf+0x5e9/0x6c0 [ 592.052714][T12040] ? __fget_files+0x28/0x4b0 [ 592.057315][T12040] ? __fget_files+0x28/0x4b0 [ 592.061971][T12040] security_file_ioctl+0x70/0xa0 [ 592.066938][T12040] __se_sys_ioctl+0x48/0x170 [ 592.071545][T12040] do_syscall_64+0x55/0xa0 [ 592.075972][T12040] ? clear_bhb_loop+0x40/0x90 [ 592.080689][T12040] ? clear_bhb_loop+0x40/0x90 [ 592.085411][T12040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 592.091311][T12040] RIP: 0033:0x7f27ddf9c629 [ 592.095739][T12040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.115365][T12040] RSP: 002b:00007f27dee3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.123819][T12040] RAX: ffffffffffffffda RBX: 00007f27de216090 RCX: 00007f27ddf9c629 [ 592.131873][T12040] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003 [ 592.139879][T12040] RBP: 00007f27dee3a090 R08: 0000000000000000 R09: 0000000000000000 [ 592.147874][T12040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.155863][T12040] R13: 00007f27de216128 R14: 00007f27de216090 R15: 00007ffd0869e0e8 [ 592.163890][T12040] [ 592.210836][T12040] ERROR: Out of memory at tomoyo_realpath_from_path. [ 592.584841][T12039] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 592.822496][T12051] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.2059'. [ 592.859480][T12049] netlink: 'syz.0.2057': attribute type 9 has an invalid length. [ 592.888887][T12049] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2057'. [ 592.991615][T12053] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 594.016657][T12072] netlink: 'syz.2.2068': attribute type 9 has an invalid length. [ 594.025287][T12072] __nla_validate_parse: 3 callbacks suppressed [ 594.025318][T12072] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2068'. [ 594.161008][T12073] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2068'. [ 594.179006][T12073] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 594.363206][T12078] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2070'. [ 594.407505][T12075] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2069'. [ 594.454426][T12075] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 594.508097][T12076] netlink: 'syz.0.2069': attribute type 9 has an invalid length. [ 594.572806][T12076] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2069'. [ 595.212606][T12089] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2074'. [ 595.395643][T12091] netlink: 'syz.2.2075': attribute type 9 has an invalid length. [ 595.415581][T12091] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2075'. [ 595.494755][T12097] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2075'. [ 595.536836][T12097] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 595.555993][T12104] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2079'. [ 595.630745][T12104] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2079'. [ 596.094516][T12116] netlink: 'syz.0.2082': attribute type 9 has an invalid length. [ 596.197756][T12117] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 596.617088][T12129] netlink: 'syz.2.2088': attribute type 9 has an invalid length. [ 596.810919][T12133] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 599.810387][T12144] __nla_validate_parse: 8 callbacks suppressed [ 599.810424][T12144] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2092'. [ 600.744058][T12158] netlink: 'syz.2.2098': attribute type 9 has an invalid length. [ 600.753930][T12158] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2098'. [ 600.802676][T12159] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2098'. [ 600.813026][T12159] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 601.788663][T12169] netlink: 'syz.3.2099': attribute type 10 has an invalid length. [ 601.798297][T12169] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2099'. [ 601.818571][T12171] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2102'. [ 601.937514][T12165] netlink: 'syz.3.2099': attribute type 10 has an invalid length. [ 601.955699][T12165] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2099'. [ 604.900359][T12181] FAULT_INJECTION: forcing a failure. [ 604.900359][T12181] name failslab, interval 1, probability 0, space 0, times 0 [ 604.912972][T12179] netlink: 'syz.1.2103': attribute type 9 has an invalid length. [ 604.913038][T12179] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2103'. [ 604.933639][T12181] CPU: 1 PID: 12181 Comm: syz.3.2105 Not tainted syzkaller #0 [ 604.941138][T12181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 604.951211][T12181] Call Trace: [ 604.954507][T12181] [ 604.957449][T12181] dump_stack_lvl+0x18c/0x250 [ 604.962159][T12181] ? show_regs_print_info+0x20/0x20 [ 604.967395][T12181] ? load_image+0x400/0x400 [ 604.971929][T12181] ? __might_sleep+0xe0/0xe0 [ 604.976548][T12181] ? __lock_acquire+0x7d40/0x7d40 [ 604.981604][T12181] should_fail_ex+0x39d/0x4d0 [ 604.986316][T12181] should_failslab+0x9/0x20 [ 604.990849][T12181] slab_pre_alloc_hook+0x59/0x310 [ 604.995903][T12181] ? __lock_acquire+0x7d40/0x7d40 [ 605.000950][T12181] kmem_cache_alloc_node+0x60/0x320 [ 605.006179][T12181] ? __alloc_skb+0x103/0x2c0 [ 605.007777][T12182] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2103'. [ 605.010778][T12181] __alloc_skb+0x103/0x2c0 [ 605.010811][T12181] netlink_sendmsg+0x66a/0xbf0 [ 605.010842][T12181] ? netlink_getsockopt+0x590/0x590 [ 605.010868][T12181] ? aa_sock_msg_perm+0x94/0x150 [ 605.039592][T12181] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 605.044977][T12181] ? security_socket_sendmsg+0x80/0xa0 [ 605.050449][T12181] ? netlink_getsockopt+0x590/0x590 [ 605.055671][T12181] ____sys_sendmsg+0x5ba/0x960 [ 605.057561][T12182] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 605.060443][T12181] ? __asan_memset+0x22/0x40 [ 605.060470][T12181] ? __sys_sendmsg_sock+0x30/0x30 [ 605.060485][T12181] ? __import_iovec+0x5f2/0x850 [ 605.060519][T12181] ? import_iovec+0x73/0xa0 [ 605.060546][T12181] ___sys_sendmsg+0x2a6/0x360 [ 605.092101][T12181] ? get_pid_task+0x20/0x1e0 [ 605.096717][T12181] ? __sys_sendmsg+0x2a0/0x2a0 [ 605.101514][T12181] ? __lock_acquire+0x7d40/0x7d40 [ 605.106580][T12181] __se_sys_sendmsg+0x1c2/0x2b0 [ 605.111458][T12181] ? __x64_sys_sendmsg+0x80/0x80 [ 605.116427][T12181] ? lockdep_hardirqs_on+0x98/0x150 [ 605.121647][T12181] do_syscall_64+0x55/0xa0 [ 605.126083][T12181] ? clear_bhb_loop+0x40/0x90 [ 605.130781][T12181] ? clear_bhb_loop+0x40/0x90 [ 605.135486][T12181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 605.141575][T12181] RIP: 0033:0x7f27ddf9c629 [ 605.146014][T12181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.165642][T12181] RSP: 002b:00007f27dee5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.174081][T12181] RAX: ffffffffffffffda RBX: 00007f27de215fa0 RCX: 00007f27ddf9c629 [ 605.182080][T12181] RDX: 000000000400c800 RSI: 0000200000000040 RDI: 0000000000000003 [ 605.190065][T12181] RBP: 00007f27dee5b090 R08: 0000000000000000 R09: 0000000000000000 [ 605.198052][T12181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.206043][T12181] R13: 00007f27de216038 R14: 00007f27de215fa0 R15: 00007ffd0869e0e8 [ 605.214051][T12181] [ 605.271341][T12177] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2111'. [ 605.521303][T12191] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2108'. [ 605.526991][T12193] netlink: 'syz.0.2109': attribute type 9 has an invalid length. [ 605.547089][T12193] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2109'. [ 605.631137][T12194] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2109'. [ 605.672315][T12194] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 606.046208][T12205] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2114'. [ 609.105127][T12213] FAULT_INJECTION: forcing a failure. [ 609.105127][T12213] name failslab, interval 1, probability 0, space 0, times 0 [ 609.121411][T12213] CPU: 0 PID: 12213 Comm: syz.1.2118 Not tainted syzkaller #0 [ 609.128912][T12213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 609.139028][T12213] Call Trace: [ 609.142316][T12213] [ 609.145268][T12213] dump_stack_lvl+0x18c/0x250 [ 609.150027][T12213] ? show_regs_print_info+0x20/0x20 [ 609.155263][T12213] ? load_image+0x400/0x400 [ 609.159784][T12213] ? __might_sleep+0xe0/0xe0 [ 609.164393][T12213] ? __lock_acquire+0x7d40/0x7d40 [ 609.169436][T12213] should_fail_ex+0x39d/0x4d0 [ 609.174143][T12213] should_failslab+0x9/0x20 [ 609.178668][T12213] slab_pre_alloc_hook+0x59/0x310 [ 609.183718][T12213] ? tomoyo_encode+0x28b/0x540 [ 609.188693][T12213] ? tomoyo_encode+0x28b/0x540 [ 609.193463][T12213] __kmem_cache_alloc_node+0x53/0x250 [ 609.198855][T12213] ? tomoyo_encode+0x28b/0x540 [ 609.203629][T12213] __kmalloc+0xa4/0x230 [ 609.207800][T12213] tomoyo_encode+0x28b/0x540 [ 609.212397][T12213] tomoyo_realpath_from_path+0x592/0x5d0 [ 609.218053][T12213] tomoyo_path_number_perm+0x248/0x620 [ 609.223541][T12213] ? tomoyo_path_number_perm+0x217/0x620 [ 609.229289][T12213] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 609.234773][T12213] ? ksys_write+0x1c4/0x260 [ 609.239325][T12213] ? __fget_files+0x28/0x4b0 [ 609.243922][T12213] ? __fget_files+0x28/0x4b0 [ 609.248538][T12213] security_file_ioctl+0x70/0xa0 [ 609.253507][T12213] __se_sys_ioctl+0x48/0x170 [ 609.258122][T12213] do_syscall_64+0x55/0xa0 [ 609.262567][T12213] ? clear_bhb_loop+0x40/0x90 [ 609.267262][T12213] ? clear_bhb_loop+0x40/0x90 [ 609.271954][T12213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.277865][T12213] RIP: 0033:0x7fc5aed9c629 [ 609.282300][T12213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.301929][T12213] RSP: 002b:00007fc5afc1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.310361][T12213] RAX: ffffffffffffffda RBX: 00007fc5af015fa0 RCX: 00007fc5aed9c629 [ 609.318339][T12213] RDX: 0000200000000080 RSI: 00000000000089fb RDI: 0000000000000004 [ 609.326417][T12213] RBP: 00007fc5afc1e090 R08: 0000000000000000 R09: 0000000000000000 [ 609.334398][T12213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.342749][T12213] R13: 00007fc5af016038 R14: 00007fc5af015fa0 R15: 00007fffe9c318e8 [ 609.350757][T12213] [ 609.380571][T12213] ERROR: Out of memory at tomoyo_realpath_from_path. [ 609.582078][T12218] netlink: 'syz.2.2117': attribute type 10 has an invalid length. [ 609.631763][T12218] geneve0: entered promiscuous mode [ 609.804101][T12218] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 609.951743][T12224] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2121'. [ 610.113965][T12225] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2120'. [ 610.228084][T12233] netlink: 'syz.3.2125': attribute type 9 has an invalid length. [ 610.237849][T12233] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2125'. [ 610.334224][T12235] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2125'. [ 610.354773][T12235] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 610.490768][T12240] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2126'. [ 610.769416][T12249] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2130'. [ 611.432459][T12264] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2135'. [ 611.514094][T12271] netlink: 'syz.2.2136': attribute type 9 has an invalid length. [ 611.527115][T12271] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2136'. [ 611.643314][T12274] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2136'. [ 611.697317][T12274] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 611.761215][T12281] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2137'. [ 612.744027][T12302] netlink: 'syz.1.2146': attribute type 1 has an invalid length. [ 613.274094][T12318] netlink: 'syz.0.2152': attribute type 9 has an invalid length. [ 613.366745][T12319] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 617.845334][T12358] __nla_validate_parse: 8 callbacks suppressed [ 617.845371][T12358] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2165'. [ 617.948226][T12363] netlink: 'syz.3.2166': attribute type 9 has an invalid length. [ 617.969143][T12363] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2166'. [ 618.054290][T12364] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2166'. [ 618.086080][T12364] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 618.296403][T12369] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.2167'. [ 618.501083][T12384] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2171'. [ 619.328478][T12394] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2176'. [ 619.869147][T12413] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.2181'. [ 620.366027][T12424] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2184'. [ 620.645368][T12428] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2187'. [ 621.177423][T12454] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.2193'. [ 623.053836][T12505] __nla_validate_parse: 2 callbacks suppressed [ 623.053876][T12505] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2212'. [ 623.897796][T12517] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.2215'. [ 624.573466][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.579989][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.691387][T12539] netlink: 'syz.2.2222': attribute type 9 has an invalid length. [ 624.716433][T12539] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2222'. [ 624.805394][T12543] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2222'. [ 624.852403][T12543] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 625.028490][T12542] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2223'. [ 625.352907][T12553] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.2227'. [ 625.817951][T12560] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2229'. [ 625.873358][T12560] netlink: 'syz.1.2229': attribute type 4 has an invalid length. [ 625.881447][T12560] netlink: 174024 bytes leftover after parsing attributes in process `syz.1.2229'. [ 625.922179][T12570] FAULT_INJECTION: forcing a failure. [ 625.922179][T12570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.944699][T12570] CPU: 0 PID: 12570 Comm: syz.3.2233 Not tainted syzkaller #0 [ 625.952211][T12570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 625.962283][T12570] Call Trace: [ 625.965578][T12570] [ 625.968525][T12570] dump_stack_lvl+0x18c/0x250 [ 625.973230][T12570] ? show_regs_print_info+0x20/0x20 [ 625.978464][T12570] ? load_image+0x400/0x400 [ 625.983077][T12570] ? __might_fault+0xaa/0x120 [ 625.987773][T12570] ? __lock_acquire+0x7d40/0x7d40 [ 625.992829][T12570] should_fail_ex+0x39d/0x4d0 [ 625.997540][T12570] _copy_from_user+0x2f/0xe0 [ 626.002156][T12570] ___sys_sendmsg+0x1c7/0x360 [ 626.006852][T12570] ? get_pid_task+0x20/0x1e0 [ 626.011474][T12570] ? __sys_sendmsg+0x2a0/0x2a0 [ 626.016272][T12570] ? __lock_acquire+0x7d40/0x7d40 [ 626.021352][T12570] __se_sys_sendmsg+0x1c2/0x2b0 [ 626.026225][T12570] ? __x64_sys_sendmsg+0x80/0x80 [ 626.031196][T12570] ? lockdep_hardirqs_on+0x98/0x150 [ 626.036416][T12570] do_syscall_64+0x55/0xa0 [ 626.040845][T12570] ? clear_bhb_loop+0x40/0x90 [ 626.045521][T12570] ? clear_bhb_loop+0x40/0x90 [ 626.050199][T12570] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 626.056085][T12570] RIP: 0033:0x7f27ddf9c629 [ 626.060491][T12570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.080092][T12570] RSP: 002b:00007f27dee5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 626.088524][T12570] RAX: ffffffffffffffda RBX: 00007f27de215fa0 RCX: 00007f27ddf9c629 [ 626.096503][T12570] RDX: 0000000000004840 RSI: 0000200000000380 RDI: 0000000000000003 [ 626.104652][T12570] RBP: 00007f27dee5b090 R08: 0000000000000000 R09: 0000000000000000 [ 626.112622][T12570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.120584][T12570] R13: 00007f27de216038 R14: 00007f27de215fa0 R15: 00007ffd0869e0e8 [ 626.128562][T12570] [ 626.329957][T12578] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.2237'. [ 626.362029][T12572] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2234'. [ 627.294308][T12609] netlink: 'syz.0.2246': attribute type 4 has an invalid length. [ 627.994122][T12643] FAULT_INJECTION: forcing a failure. [ 627.994122][T12643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.007636][T12643] CPU: 0 PID: 12643 Comm: syz.0.2256 Not tainted syzkaller #0 [ 628.015167][T12643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 628.025226][T12643] Call Trace: [ 628.028515][T12643] [ 628.031448][T12643] dump_stack_lvl+0x18c/0x250 [ 628.036127][T12643] ? show_regs_print_info+0x20/0x20 [ 628.041326][T12643] ? load_image+0x400/0x400 [ 628.045838][T12643] ? __lock_acquire+0x7d40/0x7d40 [ 628.050870][T12643] ? snprintf+0xe9/0x140 [ 628.055112][T12643] should_fail_ex+0x39d/0x4d0 [ 628.059789][T12643] _copy_to_user+0x2f/0xa0 [ 628.064198][T12643] simple_read_from_buffer+0xe7/0x150 [ 628.069769][T12643] proc_fail_nth_read+0x1e8/0x260 [ 628.074821][T12643] ? proc_fault_inject_write+0x360/0x360 [ 628.080482][T12643] ? fsnotify_perm+0x271/0x5e0 [ 628.085271][T12643] ? proc_fault_inject_write+0x360/0x360 [ 628.090916][T12643] vfs_read+0x28b/0x970 [ 628.095132][T12643] ? kernel_read+0x1e0/0x1e0 [ 628.099807][T12643] ? __fget_files+0x28/0x4b0 [ 628.104394][T12643] ? __fget_files+0x28/0x4b0 [ 628.108984][T12643] ? __fget_files+0x43d/0x4b0 [ 628.113663][T12643] ? __fdget_pos+0x2a3/0x330 [ 628.118267][T12643] ? ksys_read+0x75/0x260 [ 628.122680][T12643] ksys_read+0x150/0x260 [ 628.126918][T12643] ? vfs_write+0x990/0x990 [ 628.131516][T12643] ? lockdep_hardirqs_on+0x98/0x150 [ 628.136733][T12643] do_syscall_64+0x55/0xa0 [ 628.141162][T12643] ? clear_bhb_loop+0x40/0x90 [ 628.145834][T12643] ? clear_bhb_loop+0x40/0x90 [ 628.150510][T12643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 628.156406][T12643] RIP: 0033:0x7fa51d75cece [ 628.160821][T12643] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 628.180426][T12643] RSP: 002b:00007fa51e679fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 628.188837][T12643] RAX: ffffffffffffffda RBX: 00007fa51e67a6c0 RCX: 00007fa51d75cece [ 628.196847][T12643] RDX: 000000000000000f RSI: 00007fa51e67a0a0 RDI: 0000000000000004 [ 628.204812][T12643] RBP: 00007fa51e67a090 R08: 0000000000000000 R09: 0000000000000000 [ 628.212777][T12643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.220737][T12643] R13: 00007fa51da16218 R14: 00007fa51da16180 R15: 00007ffeba4d11d8 [ 628.228718][T12643] [ 628.321063][T12648] __nla_validate_parse: 5 callbacks suppressed [ 628.321081][T12648] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2259'. [ 628.525300][T12652] netlink: 'syz.3.2260': attribute type 10 has an invalid length. [ 628.533531][T12652] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2260'. [ 629.273686][T12672] netlink: 'syz.0.2268': attribute type 9 has an invalid length. [ 629.302102][T12672] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2268'. [ 629.474197][T12676] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2268'. [ 629.556708][T12676] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 629.668119][T12682] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2271'. [ 630.692413][T12705] netlink: 'syz.1.2278': attribute type 3 has an invalid length. [ 630.710631][T12705] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2278'. [ 630.943532][T12715] netlink: 'syz.1.2282': attribute type 9 has an invalid length. [ 630.960455][T12715] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2282'. [ 631.071156][T12716] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2282'. [ 631.115214][T12716] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 631.233910][T12718] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2283'. [ 632.368368][T12745] netlink: 'syz.3.2293': attribute type 27 has an invalid length. [ 632.384738][T12745] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2293'. [ 632.495717][T12747] FAULT_INJECTION: forcing a failure. [ 632.495717][T12747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.509672][T12747] CPU: 0 PID: 12747 Comm: syz.1.2294 Not tainted syzkaller #0 [ 632.517165][T12747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 632.523028][T12749] netlink: 'syz.0.2295': attribute type 9 has an invalid length. [ 632.527221][T12747] Call Trace: [ 632.527257][T12747] [ 632.527265][T12747] dump_stack_lvl+0x18c/0x250 [ 632.527298][T12747] ? show_regs_print_info+0x20/0x20 [ 632.527321][T12747] ? load_image+0x400/0x400 [ 632.527346][T12747] ? __lock_acquire+0x7d40/0x7d40 [ 632.527375][T12747] should_fail_ex+0x39d/0x4d0 [ 632.565409][T12747] _copy_to_user+0x2f/0xa0 [ 632.569853][T12747] simple_read_from_buffer+0xe7/0x150 [ 632.575242][T12747] proc_fail_nth_read+0x1e8/0x260 [ 632.575271][T12747] ? proc_fault_inject_write+0x360/0x360 [ 632.575298][T12747] ? fsnotify_perm+0x271/0x5e0 [ 632.575320][T12747] ? proc_fault_inject_write+0x360/0x360 [ 632.575343][T12747] vfs_read+0x28b/0x970 [ 632.575370][T12747] ? kernel_read+0x1e0/0x1e0 [ 632.575392][T12747] ? __fget_files+0x28/0x4b0 [ 632.575412][T12747] ? __fget_files+0x28/0x4b0 [ 632.575433][T12747] ? __fget_files+0x43d/0x4b0 [ 632.575463][T12747] ? __fdget_pos+0x2a3/0x330 [ 632.575483][T12747] ? ksys_read+0x75/0x260 [ 632.575507][T12747] ksys_read+0x150/0x260 [ 632.575531][T12747] ? vfs_write+0x990/0x990 [ 632.575557][T12747] ? lockdep_hardirqs_on+0x98/0x150 [ 632.575581][T12747] do_syscall_64+0x55/0xa0 [ 632.575602][T12747] ? clear_bhb_loop+0x40/0x90 [ 632.575621][T12747] ? clear_bhb_loop+0x40/0x90 [ 632.575641][T12747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.575660][T12747] RIP: 0033:0x7fc5aed5cece [ 632.575678][T12747] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 632.575693][T12747] RSP: 002b:00007fc5afc1dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 632.575714][T12747] RAX: ffffffffffffffda RBX: 00007fc5afc1e6c0 RCX: 00007fc5aed5cece [ 632.702096][T12747] RDX: 000000000000000f RSI: 00007fc5afc1e0a0 RDI: 0000000000000015 [ 632.710063][T12747] RBP: 00007fc5afc1e090 R08: 0000000000000000 R09: 0000000000000000 [ 632.718035][T12747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.725994][T12747] R13: 00007fc5af016038 R14: 00007fc5af015fa0 R15: 00007fffe9c318e8 [ 632.733971][T12747] [ 632.754325][T12750] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 633.453949][T12764] __nla_validate_parse: 2 callbacks suppressed [ 633.453962][T12764] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.2298'. [ 636.262943][T12775] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2301'. [ 636.307720][T12775] netlink: 'syz.3.2301': attribute type 4 has an invalid length. [ 636.321887][T12775] netlink: 174024 bytes leftover after parsing attributes in process `syz.3.2301'. [ 639.255359][T12782] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2304'. [ 639.310459][T12785] netlink: 'syz.0.2305': attribute type 4 has an invalid length. [ 639.619672][T12796] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.2310'. [ 639.796495][T12798] netlink: 'syz.3.2312': attribute type 9 has an invalid length. [ 639.819824][T12798] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2312'. [ 640.170827][T12801] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2312'. [ 640.324414][T12801] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 640.774632][T12803] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2313'. [ 644.016715][T12822] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2317'. [ 644.483738][T12837] netlink: 'syz.0.2321': attribute type 9 has an invalid length. [ 644.500456][T12837] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2321'. [ 644.619089][T12838] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2321'. [ 644.635758][T12838] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 644.703142][T12844] netlink: 'syz.3.2325': attribute type 4 has an invalid length. [ 645.103337][T12855] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2327'. [ 648.323837][T12863] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2330'. [ 648.682351][T12878] netlink: 'syz.3.2335': attribute type 9 has an invalid length. [ 648.725819][T12878] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2335'. [ 648.944427][T12879] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2335'. [ 648.963324][T12879] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 649.401234][T12889] netlink: 'syz.0.2337': attribute type 1 has an invalid length. [ 649.454867][T12889] netlink: 'syz.0.2337': attribute type 4 has an invalid length. [ 649.466715][T12889] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2337'. [ 650.031112][T12897] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2340'. [ 653.322496][T12917] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.2345'. [ 653.428790][T12919] netlink: 'syz.2.2346': attribute type 9 has an invalid length. [ 653.437114][T12919] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2346'. [ 653.539144][T12921] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2346'. [ 653.557738][T12921] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 653.845750][T12934] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2351'. [ 654.448009][T12951] netlink: 'syz.1.2357': attribute type 10 has an invalid length. [ 654.456245][T12951] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2357'. [ 654.801179][T12955] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.2356'. [ 655.114521][T12962] netlink: 'syz.1.2360': attribute type 9 has an invalid length. [ 655.132691][T12962] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2360'. [ 655.241866][T12965] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2360'. [ 655.305053][T12965] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 655.441722][T12970] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 655.452399][T12970] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 655.461622][T12970] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 655.472255][T12970] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 655.480591][T12970] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 655.488472][T12970] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 655.635737][T12972] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2362'. [ 655.866000][T12977] netlink: 'syz.1.2364': attribute type 10 has an invalid length. [ 655.874149][T12977] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2364'. [ 655.976053][ T3528] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.111193][ T3528] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.139280][T12986] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.2367'. [ 656.277500][ T3528] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.383067][ T3528] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.459846][T12968] chnl_net:caif_netlink_parms(): no params data found [ 656.701141][T12968] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.708526][T12968] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.716083][T12968] bridge_slave_0: entered allmulticast mode [ 656.723487][T12968] bridge_slave_0: entered promiscuous mode [ 656.732130][T12968] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.739438][T12968] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.746937][T12968] bridge_slave_1: entered allmulticast mode [ 656.755110][T12968] bridge_slave_1: entered promiscuous mode [ 656.762284][T13002] netlink: 'syz.0.2371': attribute type 10 has an invalid length. [ 656.775639][T13009] netlink: 'syz.1.2372': attribute type 9 has an invalid length. [ 656.783441][T13009] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2372'. [ 656.793825][T13002] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2371'. [ 656.828315][T13011] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2372'. [ 656.838343][T13011] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 657.251717][T12968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.518193][T12968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.553214][T13016] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2373'. [ 657.595971][T12970] Bluetooth: hci4: command tx timeout [ 657.627142][T12968] team0: Port device team_slave_0 added [ 657.651064][T12968] team0: Port device team_slave_1 added [ 657.743303][T12968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.793296][T12968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.839565][T12968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.896826][T12968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.942935][T12968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.987566][T12968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.072204][T13024] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.2377'. [ 658.098783][T13033] netlink: 'syz.1.2376': attribute type 10 has an invalid length. [ 658.232490][T12968] hsr_slave_0: entered promiscuous mode [ 658.283955][T12968] hsr_slave_1: entered promiscuous mode [ 659.242300][T13061] netlink: 'syz.3.2383': attribute type 9 has an invalid length. [ 659.360275][T13063] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 659.685949][T12970] Bluetooth: hci4: command tx timeout [ 660.159181][T13077] netlink: 'syz.3.2384': attribute type 10 has an invalid length. [ 660.203841][T13077] __nla_validate_parse: 3 callbacks suppressed [ 660.203859][T13077] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2384'. [ 660.228003][T13081] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2385'. [ 660.617872][T13092] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.2386'. [ 660.633105][T13089] netlink: 'syz.3.2387': attribute type 10 has an invalid length. [ 660.645304][T13089] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2387'. [ 660.777513][T12968] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 660.842211][T12968] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 660.961724][T12968] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 660.993113][T13109] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.2397'. [ 661.047013][T12968] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 661.423208][T13119] netlink: 'syz.0.2392': attribute type 9 has an invalid length. [ 661.464968][T13119] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2392'. [ 661.575320][T13120] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2392'. [ 661.613506][T13120] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 661.703903][T13122] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2393'. [ 661.754647][T12970] Bluetooth: hci4: command tx timeout [ 662.078010][T12968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.204390][T12968] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.276917][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.284109][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.314300][T13142] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2395'. [ 662.388490][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.395699][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.753957][T13161] netlink: 'syz.0.2398': attribute type 10 has an invalid length. [ 662.804704][T13161] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2398'. [ 663.401830][T12968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.493169][T13180] netlink: 'syz.0.2404': attribute type 9 has an invalid length. [ 663.569913][T13184] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 663.838762][T12970] Bluetooth: hci4: command tx timeout [ 666.992772][T12968] veth0_vlan: entered promiscuous mode [ 667.097150][T13205] netlink: 'syz.1.2409': attribute type 10 has an invalid length. [ 667.150522][T13205] __nla_validate_parse: 4 callbacks suppressed [ 667.150566][T13205] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2409'. [ 667.181424][T12968] veth1_vlan: entered promiscuous mode [ 667.449681][T12968] veth0_macvtap: entered promiscuous mode [ 667.503317][T12968] veth1_macvtap: entered promiscuous mode [ 667.624463][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.684864][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.698636][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.710546][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.720792][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.735130][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.765274][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.798367][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.814033][T12968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.898489][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.928055][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.954634][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.987708][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.011295][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.033142][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.043325][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.054085][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.078087][T12968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.102105][T12968] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.119520][T12968] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.136842][T12968] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.149605][T12968] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.258782][T13241] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2417'. [ 671.377010][T13249] netlink: 'syz.0.2418': attribute type 10 has an invalid length. [ 671.387663][T13249] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2418'. [ 671.403031][T12968] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 671.413201][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.424060][T13255] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.2420'. [ 671.451688][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.474263][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.653365][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.700905][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.742182][T13262] netlink: 'syz.3.2422': attribute type 10 has an invalid length. [ 671.792662][T13262] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2422'. [ 672.873003][T13286] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2427'. [ 672.904363][T13286] hsr_slave_0: left promiscuous mode [ 672.960296][T13286] hsr_slave_1: left promiscuous mode [ 672.995482][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 673.003541][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 673.014710][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 673.043684][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 673.053245][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 673.062262][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 673.222063][T13295] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.2430'. [ 673.453315][T13301] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2433'. [ 674.300189][T13292] chnl_net:caif_netlink_parms(): no params data found [ 674.482986][T13292] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.493901][T13292] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.501315][T13292] bridge_slave_0: entered allmulticast mode [ 674.508722][T13292] bridge_slave_0: entered promiscuous mode [ 674.520523][T13292] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.527990][T13292] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.535466][T13292] bridge_slave_1: entered allmulticast mode [ 674.542914][T13292] bridge_slave_1: entered promiscuous mode [ 674.729505][T13329] netlink: 'syz.1.2439': attribute type 9 has an invalid length. [ 674.756495][T13329] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2439'. [ 674.791268][T13292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.794228][T13332] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2439'. [ 674.816139][T13332] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 674.817252][T13292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.910394][ T3528] batman_adv: batadv0: Interface deactivated: wlan0 [ 674.946039][ T3528] batman_adv: batadv0: Removing interface: wlan0 [ 675.094021][T13292] team0: Port device team_slave_0 added [ 675.110344][T13336] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.2440'. [ 675.128064][T12970] Bluetooth: hci0: command tx timeout [ 675.161968][T13292] team0: Port device team_slave_1 added [ 675.193824][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.203166][ T3528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.219777][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.230653][ T3528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.290913][ T3528] veth1_macvtap: left promiscuous mode [ 675.313302][ T3528] veth0_macvtap: left promiscuous mode [ 675.335176][ T3528] veth1_vlan: left promiscuous mode [ 675.340825][ T3528] veth0_vlan: left promiscuous mode [ 675.418684][T13343] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2443'. [ 675.546002][ T3528] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 675.962571][ T3528] team_slave_1 (unregistering): left promiscuous mode [ 675.972301][ T3528] team_slave_1 (unregistering): left allmulticast mode [ 675.984429][ T3528] team0 (unregistering): Port device team_slave_1 removed [ 676.023641][ T3528] team_slave_0 (unregistering): left promiscuous mode [ 676.030554][ T3528] team_slave_0 (unregistering): left allmulticast mode [ 676.040684][ T3528] team0 (unregistering): Port device team_slave_0 removed [ 676.083193][ T3528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.128337][ T3528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.358971][ T3528] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 676.400928][ T3528] dummy0 (unregistering): left promiscuous mode [ 676.412216][ T3528] dummy0 (unregistering): left allmulticast mode [ 676.420018][ T3528] team0 (unregistering): Port device dummy0 removed [ 676.463024][ T3528] bond0 (unregistering): Released all slaves [ 676.535609][T13292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.542724][T13292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.596585][T13292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.646605][T13292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.654427][T13292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.724826][T13292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.941333][T13292] hsr_slave_0: entered promiscuous mode [ 676.972290][T13292] hsr_slave_1: entered promiscuous mode [ 677.194896][T12970] Bluetooth: hci0: command tx timeout [ 677.452897][ T3528] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.533038][ T3528] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.556896][T13368] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.2449'. [ 677.623861][ T3528] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.740690][ T3528] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.290773][T12970] Bluetooth: hci0: command tx timeout [ 681.354711][T12970] Bluetooth: hci0: command tx timeout [ 681.512001][T13394] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2455'. [ 682.254180][T13407] netlink: 'syz.2.2457': attribute type 10 has an invalid length. [ 682.275249][T13407] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.286425][T13407] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.330953][T13407] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.338689][T13407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.347335][T13407] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.355380][T13407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.392673][T13407] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 682.431787][T13418] netlink: 'syz.1.2458': attribute type 10 has an invalid length. [ 682.450846][T13418] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2458'. [ 682.669477][T13423] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2460'. [ 682.949993][T13292] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 683.012676][T13292] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 683.177411][T13438] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2463'. [ 683.214729][T13292] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 683.307472][T13292] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 683.947672][T13292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.102551][T13292] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.132268][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.140290][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.184306][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.191512][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.453546][T13465] netlink: 'syz.1.2469': attribute type 10 has an invalid length. [ 684.476895][T13465] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2469'. [ 685.020449][T13292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.061074][T13481] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2472'. [ 685.228642][T13292] veth0_vlan: entered promiscuous mode [ 685.336715][T13292] veth1_vlan: entered promiscuous mode [ 685.457139][T13491] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2475'. [ 685.507448][T13292] veth0_macvtap: entered promiscuous mode [ 685.531124][T13292] veth1_macvtap: entered promiscuous mode [ 685.630541][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.642627][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.654501][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.665099][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.674974][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.685488][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.695670][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.706742][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.718837][T13292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.732180][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.758762][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.779951][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.790465][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.800466][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.811033][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.820911][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.832242][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.848803][T13292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.879628][T13292] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.891002][T13292] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.907063][T13292] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.919457][T13292] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.008624][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.015287][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.111883][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.124422][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.203426][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.213856][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.337049][T13500] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2425'. [ 686.916726][T13512] netlink: 'syz.2.2479': attribute type 10 has an invalid length. [ 686.950667][T13512] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2479'. [ 687.166043][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 687.183680][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 687.193558][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 687.203205][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 687.212837][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 687.220951][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 687.895731][T13526] netlink: 'syz.2.2482': attribute type 28 has an invalid length. [ 687.903579][T13526] netlink: 'syz.2.2482': attribute type 29 has an invalid length. [ 687.946171][T13526] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2482'. [ 689.274885][T12970] Bluetooth: hci2: command tx timeout [ 690.730970][T13522] ------------[ cut here ]------------ [ 690.736562][T13522] WARNING: CPU: 0 PID: 13522 at kernel/events/core.c:6806 perf_pending_task+0x35c/0x470 [ 690.746798][T13522] Modules linked in: [ 690.750733][T13522] CPU: 0 PID: 13522 Comm: syz.2.2482 Not tainted syzkaller #0 [ 690.758330][T13522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 690.768542][T13522] RIP: 0010:perf_pending_task+0x35c/0x470 [ 690.774302][T13522] Code: ff 84 db 75 14 e8 d4 df d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 df d5 ff e8 2b 68 4f ff eb e5 e8 b4 df d5 ff <0f> 0b e9 f3 fe ff ff e8 a8 df d5 ff 48 c7 c7 b0 f2 1c 8d 4c 89 f6 [ 690.793968][T13522] RSP: 0018:ffffc9000502f9c0 EFLAGS: 00010293 [ 690.800462][T13522] RAX: ffffffff81b1355c RBX: ffff8880552753a0 RCX: ffff88807d75bc00 [ 690.808579][T13522] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 690.816705][T13522] RBP: 0000000000000001 R08: ffffffff8e8adeaf R09: 1ffffffff1d15bd5 [ 690.824778][T13522] R10: dffffc0000000000 R11: fffffbfff1d15bd6 R12: ffff88807d75bc00 [ 690.832776][T13522] R13: ffff88805d23b530 R14: ffff888055275160 R15: 1ffff1100aa4ea2c [ 690.840806][T13522] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 690.850182][T13522] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.856888][T13522] CR2: 0000001b2d204ff8 CR3: 00000000626b3000 CR4: 00000000003506f0 [ 690.864949][T13522] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 690.872950][T13522] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 690.881155][T13522] Call Trace: [ 690.884463][T13522] [ 690.887450][T13522] task_work_run+0x1d4/0x260 [ 690.892191][T13522] ? task_work_cancel+0x220/0x220 [ 690.897320][T13522] do_exit+0x95a/0x2460 [ 690.901511][T13522] ? lock_chain_count+0x20/0x20 [ 690.906507][T13522] ? put_task_struct+0xc0/0xc0 [ 690.911301][T13522] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 690.917600][T13522] ? lockdep_hardirqs_on+0x98/0x150 [ 690.922820][T13522] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 690.929043][T13522] do_group_exit+0x21b/0x2d0 [ 690.933665][T13522] ? _raw_spin_unlock_irq+0x29/0x50 [ 690.938941][T13522] get_signal+0x12fc/0x13f0 [ 690.943492][T13522] arch_do_signal_or_restart+0xc2/0x800 [ 690.949114][T13522] ? get_sigframe_size+0x20/0x20 [ 690.954495][T13522] ? exit_to_user_mode_loop+0x3b/0x110 [ 690.960994][T13522] exit_to_user_mode_loop+0x70/0x110 [ 690.966344][T13522] exit_to_user_mode_prepare+0xee/0x180 [ 690.971948][T13522] syscall_exit_to_user_mode+0x1a/0x50 [ 690.977458][T13522] do_syscall_64+0x61/0xa0 [ 690.981894][T13522] ? clear_bhb_loop+0x40/0x90 [ 690.986710][T13522] ? clear_bhb_loop+0x40/0x90 [ 690.991417][T13522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 690.997509][T13522] RIP: 0033:0x7f3cdc59c629 [ 691.001950][T13522] Code: Unable to access opcode bytes at 0x7f3cdc59c5ff. [ 691.009015][T13522] RSP: 002b:00007f3cdd4250e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 691.017662][T13522] RAX: fffffffffffffe00 RBX: 00007f3cdc815fa8 RCX: 00007f3cdc59c629 [ 691.026462][T13522] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3cdc815fa8 [ 691.034470][T13522] RBP: 00007f3cdc815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 691.042875][T13522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.050930][T13522] R13: 00007f3cdc816038 R14: 00007ffdfdcafba0 R15: 00007ffdfdcafc88 [ 691.059341][T13522] [ 691.062381][T13522] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 691.069665][T13522] CPU: 0 PID: 13522 Comm: syz.2.2482 Not tainted syzkaller #0 [ 691.077135][T13522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.087202][T13522] Call Trace: [ 691.090488][T13522] [ 691.093426][T13522] dump_stack_lvl+0x18c/0x250 [ 691.098129][T13522] ? show_regs_print_info+0x20/0x20 [ 691.103350][T13522] ? load_image+0x400/0x400 [ 691.107881][T13522] panic+0x2dc/0x730 [ 691.111795][T13522] ? bpf_jit_dump+0xd0/0xd0 [ 691.116323][T13522] __warn+0x2e0/0x470 [ 691.120314][T13522] ? perf_pending_task+0x35c/0x470 [ 691.125444][T13522] ? perf_pending_task+0x35c/0x470 [ 691.130576][T13522] report_bug+0x2be/0x4f0 [ 691.134930][T13522] ? perf_pending_task+0x35c/0x470 [ 691.140146][T13522] ? perf_pending_task+0x35c/0x470 [ 691.145444][T13522] ? perf_pending_task+0x35e/0x470 [ 691.150568][T13522] handle_bug+0xcf/0x120 [ 691.154825][T13522] exc_invalid_op+0x1a/0x50 [ 691.159348][T13522] asm_exc_invalid_op+0x1a/0x20 [ 691.164209][T13522] RIP: 0010:perf_pending_task+0x35c/0x470 [ 691.169954][T13522] Code: ff 84 db 75 14 e8 d4 df d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 df d5 ff e8 2b 68 4f ff eb e5 e8 b4 df d5 ff <0f> 0b e9 f3 fe ff ff e8 a8 df d5 ff 48 c7 c7 b0 f2 1c 8d 4c 89 f6 [ 691.189571][T13522] RSP: 0018:ffffc9000502f9c0 EFLAGS: 00010293 [ 691.195747][T13522] RAX: ffffffff81b1355c RBX: ffff8880552753a0 RCX: ffff88807d75bc00 [ 691.203734][T13522] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 691.211711][T13522] RBP: 0000000000000001 R08: ffffffff8e8adeaf R09: 1ffffffff1d15bd5 [ 691.219674][T13522] R10: dffffc0000000000 R11: fffffbfff1d15bd6 R12: ffff88807d75bc00 [ 691.227638][T13522] R13: ffff88805d23b530 R14: ffff888055275160 R15: 1ffff1100aa4ea2c [ 691.235617][T13522] ? perf_pending_task+0x35c/0x470 [ 691.240741][T13522] task_work_run+0x1d4/0x260 [ 691.245329][T13522] ? task_work_cancel+0x220/0x220 [ 691.250361][T13522] do_exit+0x95a/0x2460 [ 691.254521][T13522] ? lock_chain_count+0x20/0x20 [ 691.259377][T13522] ? put_task_struct+0xc0/0xc0 [ 691.264138][T13522] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 691.270290][T13522] ? lockdep_hardirqs_on+0x98/0x150 [ 691.275481][T13522] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 691.281661][T13522] do_group_exit+0x21b/0x2d0 [ 691.286254][T13522] ? _raw_spin_unlock_irq+0x29/0x50 [ 691.291445][T13522] get_signal+0x12fc/0x13f0 [ 691.295978][T13522] arch_do_signal_or_restart+0xc2/0x800 [ 691.301537][T13522] ? get_sigframe_size+0x20/0x20 [ 691.306491][T13522] ? exit_to_user_mode_loop+0x3b/0x110 [ 691.311952][T13522] exit_to_user_mode_loop+0x70/0x110 [ 691.317244][T13522] exit_to_user_mode_prepare+0xee/0x180 [ 691.322799][T13522] syscall_exit_to_user_mode+0x1a/0x50 [ 691.328344][T13522] do_syscall_64+0x61/0xa0 [ 691.332885][T13522] ? clear_bhb_loop+0x40/0x90 [ 691.337557][T13522] ? clear_bhb_loop+0x40/0x90 [ 691.342223][T13522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 691.348112][T13522] RIP: 0033:0x7f3cdc59c629 [ 691.352516][T13522] Code: Unable to access opcode bytes at 0x7f3cdc59c5ff. [ 691.359527][T13522] RSP: 002b:00007f3cdd4250e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 691.367935][T13522] RAX: fffffffffffffe00 RBX: 00007f3cdc815fa8 RCX: 00007f3cdc59c629 [ 691.375930][T13522] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3cdc815fa8 [ 691.383899][T13522] RBP: 00007f3cdc815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 691.391860][T13522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.399847][T13522] R13: 00007f3cdc816038 R14: 00007ffdfdcafba0 R15: 00007ffdfdcafc88 [ 691.407818][T13522] [ 691.411236][T13522] Kernel Offset: disabled [ 691.415548][T13522] Rebooting in 86400 seconds..