last executing test programs: 20.29865578s ago: executing program 4 (id=1699): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)}, 0x12001) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0x40, 0x12, 0x4, 0x0, 0x8b6, 0x2000, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0xbc9f99bdeb4f2e87, @perf_bp={&(0x7f0000000080), 0x4}, 0x10080, 0x4, 0x0, 0x5, 0x1, 0x0, 0xfffc, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_config_ext={0x1, 0x80000de}, 0x0, 0xc8, 0x0, 0x7, 0x4000000000, 0x2, 0x13, 0x0, 0x20, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) close(r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000100081355622cf2ee12e08bac81d08072500000001ff55a11800150006001425000000120800030043000040a8002b000a00691f2f7b9e04fe9c10fab94dcf5c04000000000000000534cf6ee08000a0e496e6f66112c88a2ddddbbb219c6c090800d481d485dc6abb43e2782ac2662331419768c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a5e1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fac25667e006dcdf63951f215ce3bb14feb9f519e167c2ed64c8", 0xd8}], 0x1}, 0x856) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200fc00000000000000000000000000007f"], 0xfdef) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000600)={r3, r3}, 0xc) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) recvmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000440)=0x1) close(r4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r4}, 0x8) ioctl$TUNGETVNETLE(r4, 0x40107446, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES8=r2, @ANYRES32=0x1, @ANYBLOB="0000000003000000b7080000000000007b8af8ff00000000b7080000635000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000", @ANYRESOCT=r5], &(0x7f0000000180)='syzkaller\x00', 0x401, 0x20, &(0x7f00000001c0)=""/32, 0x41100, 0x1b, '\x00', 0x0, @fallback=0x17, r3, 0x8, &(0x7f0000000200)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x9, @loopback}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000000c0)="87", 0x1}], 0x1}, 0x851) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000008080000000600000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 20.29154918s ago: executing program 2 (id=1700): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000000000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x140, 0x1, 0x10000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x3) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a204d8c71ef2685634a8270e7123c000000000000000000"], 0xffdd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000040), 0x1006, 0xffffffffffffffff, 0x0, 0xd88d02a0}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x12, 0x0, 0x0, 0x6}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a9040200000000000000", 0x18}], 0x1}, 0x4090) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) 19.925846166s ago: executing program 1 (id=1704): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x4, 0x0, 0x20000, 0x60080, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x2, 0x0, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x24, 0x0, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x18, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000240)={'pimreg0\x00', @multicast}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x88) setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040)=r5, 0x4) sendmsg$kcm(r6, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e24, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0xf9, 0x0, 0x10000000000000, 0x4c080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000007c0)="d80000004a0081064e007c05e8fe55a10a000404018b2d5ed48e9a4002020a600e41b0000900ac00060311000000160015000a87572a6ea28959b561c1d67f6f94007125cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370ed7dbe56192bb940450a721eabe30259703920723f9000000008af26c8b7b55f4", 0xd8}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000de56ed7226f68bca90d4ceac000000", @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r9, &(0x7f0000000040), 0x0}, 0x20) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x0, 0x1, 0x5, 0x800, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000140)=r5) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000000340)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="e80000000000000009010000008000008eed3bb38537727f7eb11d6de4f728393b600a55b8a6ad73f34ae797e089e0fb32ca1ddc6b7acbde0b14cd3b015408eedc0fa6bdc3ce8d74f6316689f817724ae09b6dd265f612f1e5942c94e9ba0b5430acc8d2eeb0e6ddc783b999ed29c071844cf6c480d6d17ac1b9a041031da6b5b3535c71dc65c1ccad3f531a2374e794c9c2a3466ff4cbdbb0852b3e6dfcec09d0b9de91c1c03bf7cfe5bbe272e522e6af0aeb1616401a53d49a7ce9238963998e674ad3fb7bc7675bbeb441ee71d71056f89eef1b3d73711c8836811fc19049532d2a8a92fc3ba7"], 0xe8}, 0x20000000) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) recvmsg$kcm(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40002063) 19.715142535s ago: executing program 0 (id=1706): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)}, 0x12001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, 0x0, 0x24040810) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xcc3, 0x4d, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r6, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x20) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000200)="1400000015000b63d25a9a648c0f9de72a2e4a1d", 0x14}], 0x1}, 0x2000c884) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90324fc60", 0x14}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004000000000000", @ANYRES32=0x1, @ANYBLOB="00002cfe627b5e702900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0xe, &(0x7f0000000100), 0x4) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r10 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0x40, 0xf, 0x4, 0x0, 0x8b6, 0x2000, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0xbc9f99bdeb4f2e87, @perf_bp={&(0x7f0000000080), 0x4}, 0x10080, 0x4, 0x0, 0x5, 0x1, 0x0, 0xfffc, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 19.714858906s ago: executing program 3 (id=1707): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f022133000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e373a0c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) 19.548663343s ago: executing program 3 (id=1708): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000011120412706cb44248289e53a05b0c1cffe04c1e2f1ea103efe182b9ae8dbcc222c1f7de7671749256fffb517e53936dd5ea9a59c06973cff3522bebbdb71e524726d5"], 0x5) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 19.440867067s ago: executing program 4 (id=1710): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000018b, 0x2, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x27, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f00000001c0), 0x8, 0x98, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES64=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700e2ffffffffff1701000000082c2500000000002120207b0000833e8bfb7543738415ba000007010000f8ffffffb702000008000000b70300000000000085000000070000009500"/107], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r5, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081044e81f782db44b904", 0x10}], 0x1}, 0x48400) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0xe, &(0x7f0000002800)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10}, 0x94) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r7, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="000085be25933cb0e482eb0f01"], 0x48) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0680040006000a00", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19.409962388s ago: executing program 1 (id=1711): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979e29857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37ceff9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f087e9381d100d968120b11409068ad00000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f800800000f40300966fcf1e54f5a2d38708294cd6f496e5dee734f87da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f080091c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efde0142cf90ff668b9757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c2f56855b18f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539277505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a44079f03b18000070c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0}, 0x50) 19.408931269s ago: executing program 2 (id=1712): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000340)={r1}) r2 = socket$kcm(0x11, 0x2, 0x0) close(0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0x407, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1c921, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x4, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4}, 0x0, 0x8, r3, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x15) setsockopt$sock_attach_bpf(r4, 0x84, 0x18, &(0x7f0000000000), 0x8) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)}], 0x1, 0x0, 0x0, 0x39c}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x10020, 0x2, 0xfffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_UPDATE_CONST_STR(0x4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$sock(r2, &(0x7f0000000180)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x4}, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x0) close(r0) 19.200178798s ago: executing program 1 (id=1713): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000000000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x140, 0x1, 0x10000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x3) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a204d8c71ef2685634a8270e7123c00000000000000000000000000ac1414cf"], 0xffdd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000040), 0x1006, 0xffffffffffffffff, 0x0, 0xd88d02a0}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a9040200000000000000", 0x18}], 0x1}, 0x4090) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) 18.842743513s ago: executing program 2 (id=1714): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x100b0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x20) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x48) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, 0x0) r5 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000540)='(pu&00\t||') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x88) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000140)=""/117, 0x75}, {&(0x7f0000000900)=""/249, 0xf9}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000340)=""/8, 0x35}, {&(0x7f0000000400)=""/249, 0xf9}, {&(0x7f00000014c0)=""/200, 0xc8}, {&(0x7f00000011c0)=""/172, 0xac}, {&(0x7f00000036c0)=""/4132, 0x1024}], 0x8}, 0x12100) 18.668947501s ago: executing program 4 (id=1715): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, 0x0) 18.607630134s ago: executing program 3 (id=1716): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/168, 0xa8}, {&(0x7f0000002b40)=""/4104, 0x1008}, {&(0x7f0000001980)=""/70, 0x46}, {&(0x7f0000001b00)=""/4080, 0xff0}, {&(0x7f00000005c0)=""/71, 0x47}], 0x5}, 0x40012100) 18.598580224s ago: executing program 4 (id=1717): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x1, 0x400000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000800)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000200)=""/177, 0xb1}, {&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/196, 0xc4}, {&(0x7f00000005c0)=""/134, 0x86}], 0x5, &(0x7f0000000700)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x2100) mkdir(0x0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x706}, 0xf884, 0x1ffffff, 0x0, 0x0, 0x0, 0x1000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='cpu==0||!') write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, 0x0, 0x40000100) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000004100), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 18.580844855s ago: executing program 0 (id=1718): bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x8, @local, 0x6, 0x4}, 0x18, &(0x7f0000000100)=[{&(0x7f0000000cc0)="1a", 0x1}], 0x1}, 0x4804) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$kcm(0x25, 0x6, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466506000e800a00142603600e1208000f0000000406a80016c0080009400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x8010) 18.425657541s ago: executing program 2 (id=1719): socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa480}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000200)=""/3, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x2, 0x5, 0x7, 0x101}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x3, 0x3, 0x8, 0xb}, {0x4, 0x5, 0x9, 0x1}, {0x4, 0x1, 0x8}], 0x10, 0x6}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2c108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x57f5, 0x2}, 0x2200, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000c65da8f578c2e18b75d3ea7bbfe9", @ANYRES32, @ANYRES32=0x0], 0x50) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r2 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0xd0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 18.375681143s ago: executing program 0 (id=1720): bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x8, @local, 0x6, 0x4}, 0x18, &(0x7f0000000100)=[{&(0x7f0000000cc0)="1a", 0x1}], 0x1}, 0x4804) socket$kcm(0x25, 0x6, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466506000e800a00142603600e1208000f0000000406a80016c0080009400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x8010) 18.362080874s ago: executing program 1 (id=1721): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91024fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (fail_nth: 1) 18.358981225s ago: executing program 3 (id=1722): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x108, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a867e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c27578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000007b80bdb2aa1b627d163b734a83dc77f4955103decba75e6eca0fb2577d7264d2fdf068b53ef891d2de2010000000000000056187b35709857568cb174c08c91a22106f531506ccc"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r5, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100000003, &(0x7f0000000200)=[0x0, 0x0], 0xfffffffffffffffe, 0x0, 0x8, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000000c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) setsockopt$sock_attach_bpf(r2, 0x119, 0x32, 0x0, 0x0) r6 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91024fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 18.281312988s ago: executing program 4 (id=1723): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000000000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x140, 0x1, 0x10000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x3) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a204d8c71ef2685634a8270e7123c00"/30], 0xffdd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000040), 0x1006, 0xffffffffffffffff, 0x0, 0xd88d02a0}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x12, 0x0, 0x0, 0x6}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a9040200000000000000", 0x18}], 0x1}, 0x4090) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) 18.005683909s ago: executing program 1 (id=1724): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000340)={r1}) r2 = socket$kcm(0x11, 0x2, 0x0) close(0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0x407, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1c921, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x4, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4}, 0x0, 0x8, r3, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x15) setsockopt$sock_attach_bpf(r4, 0x84, 0x18, &(0x7f0000000000), 0x8) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)}], 0x1, 0x0, 0x0, 0x39c}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x10020, 0x2, 0xfffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_UPDATE_CONST_STR(0x4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$sock(r2, &(0x7f0000000180)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x4}, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x0) close(r0) 17.908903434s ago: executing program 0 (id=1725): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a44079f03b18000070c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0}, 0x50) 17.627504576s ago: executing program 3 (id=1726): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000011120412706cb44248289e53a05b0c1cffe04c1e2f1ea103efe182b9ae8dbcc222c1f7de7671749256fffb517e53936dd5ea9a59c06973cff3522bebbdb71e524726d5"], 0x5) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 17.5258888s ago: executing program 0 (id=1727): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, 0x0) 17.470819153s ago: executing program 1 (id=1728): r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="1400000021000b0f6d5a805bb98222f90324fc60", 0x14}], 0x1}, 0x40000) sendmsg$inet(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{0x0}], 0x1, 0x0, 0x6b}, 0x0) sendmsg$inet(r1, 0x0, 0x4000840) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4821a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x6}, 0x8000, 0x0, 0x0, 0xf17b17cb08554aef, 0x7, 0xfffffffd, 0xfffe}, 0x0, 0x2000000000000001, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000021c0)={r5, &(0x7f00000011c0)="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"}, 0x20) sendmsg$kcm(r4, 0x0, 0x40080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002e80), 0x0, 0xd3, &(0x7f0000000240), 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x8, 0x10000f8, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748fdb8021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4040004) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002dc0)={0x5, 0xb, &(0x7f0000002d40)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000240)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153}, 0x94) 17.433721954s ago: executing program 0 (id=1729): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000000000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x28) (fail_nth: 1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x140, 0x1, 0x10000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a204d8c71ef2685634a8270e7123c00000000000000000000000000ac1414cf"], 0xffdd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000040), 0x1006, 0xffffffffffffffff, 0x0, 0xd88d02a0}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4090) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) 17.417773005s ago: executing program 2 (id=1730): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000000000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x140, 0x1, 0x10000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a204d8c71ef2685634a8270e7123c00000000000000000000000000ac1414cf"], 0xffdd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000040), 0x1006, 0xffffffffffffffff, 0x0, 0xd88d02a0}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4090) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) 17.341197299s ago: executing program 4 (id=1731): socket$kcm(0x29, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x75, &(0x7f0000000000)=r2, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000029c0)={r2, 0x58, &(0x7f0000002940)={0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000007000000f9ffffff0000000e00800000", @ANYRES32=r2, @ANYBLOB="00000000800000000000000000000000000000009027ec", @ANYBLOB="e5c23040969d486652a9ebaa1d4e12813a904254c5d33904deb58283c5d88b7d99762cbdae7b866f79f76dcca392c7f3be41194945e9065fdcec09b0096561470c5d0c4f5b0b57a6e2eef4ff25f463d8482dbb3e2703b86b25c366c9f01a036108fa0e634accaf5740d625c98cd7092273e60258bcacc799607f323a8ea8fb57f2c9e5b2639210663ca73cebac297aa58887962b25225614709a30150df6c77d556fcd0a38aee7bf1ccae817bf3b3efd35c182fda75faf7064f02ad89e045e7dfcb680dabdacbfa9d2e1fc5b52b3e14c83b2", @ANYRES32=r3, @ANYBLOB="0300000000000000010000000a00000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x3) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x6}, 0x0, 0x2, 0xfffffffe, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x5, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x40) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@hci={0x1f, 0x4, 0x4}, 0x80, 0x0, 0x0, 0x0, 0x11a8}, 0x8800) close(0xffffffffffffffff) r7 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x22, &(0x7f0000000100), 0x120) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1500, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r4, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r9, 0x4008744b, 0xf0ff1f00000000) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}, {&(0x7f00000001c0)="4510", 0x2}, {&(0x7f0000000500)="6c608af780563eb1ca9f387fa19497ae8a62d3d82c1c1b67e1af3205bac731002cb20ee9807b753c5843736027dbd49092918dba9914ebc61c6a26af7c33f2fd176dc56a01c2bed583fdc9225fe9bfcf8a1368959f35954d52ab82e954844c8c39c14065daaf21448b50b7e643d337e8ef702208aa4c58a31345b356f3c6d044fb0cac9cc372989d158711169fc8c0205bf86e3c34a7fa13285b246f960e5ca5928176f90ab22093617375dd27754b64735da1b34af4ad6bb322eade7608526b2222402473a15c", 0xc7}], 0x3, 0x0, 0x0, 0x7400}, 0x4008000) 16.958602885s ago: executing program 2 (id=1732): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000000000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x140, 0x1, 0x10000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x3) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a204d8c71ef2685634a8270e7123c00000000000000000000000000ac1414cf"], 0xffdd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000040), 0x1006, 0xffffffffffffffff, 0x0, 0xd88d02a0}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a9040200000000000000", 0x18}], 0x1}, 0x4090) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) 16.619509969s ago: executing program 3 (id=1733): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/168, 0xa8}, {&(0x7f0000002b40)=""/4104, 0x1008}, {&(0x7f0000001980)=""/70, 0x46}, {0x0}, {&(0x7f0000001b00)=""/4080, 0xff0}, {&(0x7f00000005c0)=""/71, 0x47}], 0x6}, 0x40012100) 1.835118551s ago: executing program 32 (id=1729): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000000000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x28) (fail_nth: 1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x140, 0x1, 0x10000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a204d8c71ef2685634a8270e7123c00000000000000000000000000ac1414cf"], 0xffdd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000040), 0x1006, 0xffffffffffffffff, 0x0, 0xd88d02a0}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4090) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) 1.704221726s ago: executing program 33 (id=1728): r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="1400000021000b0f6d5a805bb98222f90324fc60", 0x14}], 0x1}, 0x40000) sendmsg$inet(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{0x0}], 0x1, 0x0, 0x6b}, 0x0) sendmsg$inet(r1, 0x0, 0x4000840) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4821a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x6}, 0x8000, 0x0, 0x0, 0xf17b17cb08554aef, 0x7, 0xfffffffd, 0xfffe}, 0x0, 0x2000000000000001, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000021c0)={r5, &(0x7f00000011c0)="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"}, 0x20) sendmsg$kcm(r4, 0x0, 0x40080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002e80), 0x0, 0xd3, &(0x7f0000000240), 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x8, 0x10000f8, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748fdb8021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4040004) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002dc0)={0x5, 0xb, &(0x7f0000002d40)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000240)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153}, 0x94) 1.579689932s ago: executing program 34 (id=1732): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000000000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x140, 0x1, 0x10000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x3) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a204d8c71ef2685634a8270e7123c00000000000000000000000000ac1414cf"], 0xffdd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000040), 0x1006, 0xffffffffffffffff, 0x0, 0xd88d02a0}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a9040200000000000000", 0x18}], 0x1}, 0x4090) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) 1.259928205s ago: executing program 35 (id=1731): socket$kcm(0x29, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x75, &(0x7f0000000000)=r2, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000029c0)={r2, 0x58, &(0x7f0000002940)={0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000007000000f9ffffff0000000e00800000", @ANYRES32=r2, @ANYBLOB="00000000800000000000000000000000000000009027ec", @ANYBLOB="e5c23040969d486652a9ebaa1d4e12813a904254c5d33904deb58283c5d88b7d99762cbdae7b866f79f76dcca392c7f3be41194945e9065fdcec09b0096561470c5d0c4f5b0b57a6e2eef4ff25f463d8482dbb3e2703b86b25c366c9f01a036108fa0e634accaf5740d625c98cd7092273e60258bcacc799607f323a8ea8fb57f2c9e5b2639210663ca73cebac297aa58887962b25225614709a30150df6c77d556fcd0a38aee7bf1ccae817bf3b3efd35c182fda75faf7064f02ad89e045e7dfcb680dabdacbfa9d2e1fc5b52b3e14c83b2", @ANYRES32=r3, @ANYBLOB="0300000000000000010000000a00000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x3) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x6}, 0x0, 0x2, 0xfffffffe, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x5, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x40) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@hci={0x1f, 0x4, 0x4}, 0x80, 0x0, 0x0, 0x0, 0x11a8}, 0x8800) close(0xffffffffffffffff) r7 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x22, &(0x7f0000000100), 0x120) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1500, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r4, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r9, 0x4008744b, 0xf0ff1f00000000) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}, {&(0x7f00000001c0)="4510", 0x2}, {&(0x7f0000000500)="6c608af780563eb1ca9f387fa19497ae8a62d3d82c1c1b67e1af3205bac731002cb20ee9807b753c5843736027dbd49092918dba9914ebc61c6a26af7c33f2fd176dc56a01c2bed583fdc9225fe9bfcf8a1368959f35954d52ab82e954844c8c39c14065daaf21448b50b7e643d337e8ef702208aa4c58a31345b356f3c6d044fb0cac9cc372989d158711169fc8c0205bf86e3c34a7fa13285b246f960e5ca5928176f90ab22093617375dd27754b64735da1b34af4ad6bb322eade7608526b2222402473a15c", 0xc7}], 0x3, 0x0, 0x0, 0x7400}, 0x4008000) 0s ago: executing program 36 (id=1733): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/168, 0xa8}, {&(0x7f0000002b40)=""/4104, 0x1008}, {&(0x7f0000001980)=""/70, 0x46}, {0x0}, {&(0x7f0000001b00)=""/4080, 0xff0}, {&(0x7f00000005c0)=""/71, 0x47}], 0x6}, 0x40012100) kernel console output (not intermixed with test programs): as an invalid length. [ 191.858174][ T6680] netlink: 'syz.2.740': attribute type 8 has an invalid length. [ 191.875818][ T6680] netlink: 132 bytes leftover after parsing attributes in process `syz.2.740'. [ 191.898525][ T6686] netlink: 'syz.1.732': attribute type 9 has an invalid length. [ 192.666218][ T6697] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.735'. [ 193.581395][ T6708] netlink: 'syz.0.738': attribute type 21 has an invalid length. [ 193.699378][ T6702] netlink: 'syz.1.737': attribute type 21 has an invalid length. [ 193.850902][ T6720] netlink: 'syz.4.742': attribute type 9 has an invalid length. [ 194.096306][ T6727] netlink: 'syz.1.745': attribute type 29 has an invalid length. [ 194.176701][ T6727] netlink: 'syz.1.745': attribute type 29 has an invalid length. [ 194.526065][ T6727] netlink: 132 bytes leftover after parsing attributes in process `syz.1.745'. [ 194.549259][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.556028][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.986729][ T6749] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.751'. [ 195.506822][ T6767] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.755'. [ 195.554895][ T6764] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.754'. [ 196.066651][ T6769] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.757'. [ 196.238820][ T6771] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.756'. [ 196.702692][ T6787] netlink: 132 bytes leftover after parsing attributes in process `syz.2.761'. [ 196.745925][ T6787] netlink: 132 bytes leftover after parsing attributes in process `syz.2.761'. [ 196.845024][ T6791] validate_nla: 12 callbacks suppressed [ 196.845054][ T6791] netlink: 'syz.4.765': attribute type 1 has an invalid length. [ 196.866235][ T6790] device syzkaller0 entered promiscuous mode [ 196.869537][ T6791] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.765'. [ 196.998436][ T6793] netlink: 'syz.3.764': attribute type 9 has an invalid length. [ 197.214023][ T6801] FAULT_INJECTION: forcing a failure. [ 197.214023][ T6801] name failslab, interval 1, probability 0, space 0, times 0 [ 197.268781][ T6801] CPU: 1 PID: 6801 Comm: syz.2.767 Not tainted syzkaller #0 [ 197.276323][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 197.286397][ T6801] Call Trace: [ 197.289702][ T6801] [ 197.292662][ T6801] dump_stack_lvl+0x188/0x250 [ 197.297560][ T6801] ? show_regs_print_info+0x20/0x20 [ 197.302779][ T6801] ? load_image+0x400/0x400 [ 197.307314][ T6801] ? __might_sleep+0xf0/0xf0 [ 197.311934][ T6801] ? __lock_acquire+0x7d10/0x7d10 [ 197.316993][ T6801] should_fail+0x38c/0x4c0 [ 197.321460][ T6801] should_failslab+0x5/0x20 [ 197.325986][ T6801] slab_pre_alloc_hook+0x51/0xc0 [ 197.330949][ T6801] kmem_cache_alloc_node+0x47/0x2d0 [ 197.336164][ T6801] ? __alloc_skb+0xf4/0x750 [ 197.340792][ T6801] __alloc_skb+0xf4/0x750 [ 197.345152][ T6801] alloc_skb_with_frags+0xa7/0x730 [ 197.350294][ T6801] ? __lock_acquire+0x7d10/0x7d10 [ 197.355362][ T6801] sock_alloc_send_pskb+0x87f/0x9a0 [ 197.360582][ T6801] ? __might_fault+0xb3/0x110 [ 197.365309][ T6801] ? sock_kzfree_s+0x50/0x50 [ 197.369934][ T6801] ? iov_iter_advance+0x202/0x390 [ 197.375009][ T6801] tun_get_user+0x7c8/0x3a70 [ 197.379658][ T6801] ? tun_ring_recv+0xc40/0xc40 [ 197.384466][ T6801] ? rcu_lock_release+0x5/0x20 [ 197.389261][ T6801] ? __lock_acquire+0x7d10/0x7d10 [ 197.394354][ T6801] tun_chr_write_iter+0x112/0x1e0 [ 197.399412][ T6801] vfs_write+0x745/0xd60 [ 197.403696][ T6801] ? file_end_write+0x250/0x250 [ 197.408592][ T6801] ? __fget_files+0x40f/0x480 [ 197.413310][ T6801] ? __fdget_pos+0x1e2/0x370 [ 197.417913][ T6801] ? ksys_write+0x71/0x260 [ 197.422344][ T6801] ksys_write+0x152/0x260 [ 197.426710][ T6801] ? __ia32_sys_read+0x80/0x80 [ 197.431513][ T6801] ? lockdep_hardirqs_on+0x94/0x140 [ 197.436746][ T6801] do_syscall_64+0x4c/0xa0 [ 197.441181][ T6801] ? clear_bhb_loop+0x30/0x80 [ 197.445882][ T6801] ? clear_bhb_loop+0x30/0x80 [ 197.450590][ T6801] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.456506][ T6801] RIP: 0033:0x7f26558a7e59 [ 197.460946][ T6801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.480650][ T6801] RSP: 002b:00007f2653b01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.489094][ T6801] RAX: ffffffffffffffda RBX: 00007f2655b20fa0 RCX: 00007f26558a7e59 [ 197.497096][ T6801] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000007 [ 197.505327][ T6801] RBP: 00007f2653b01090 R08: 0000000000000000 R09: 0000000000000000 [ 197.513319][ T6801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.521313][ T6801] R13: 00007f2655b21038 R14: 00007f2655b20fa0 R15: 00007ffcc7ef6cd8 [ 197.529329][ T6801] [ 197.641542][ T6816] netlink: 'syz.1.771': attribute type 3 has an invalid length. [ 197.688634][ T6816] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.771'. [ 197.725283][ T6802] device syzkaller0 entered promiscuous mode [ 197.733415][ T6820] netlink: 'syz.0.768': attribute type 21 has an invalid length. [ 198.583381][ T6841] netlink: 'syz.0.777': attribute type 29 has an invalid length. [ 198.600979][ T6841] netlink: 'syz.0.777': attribute type 29 has an invalid length. [ 198.755548][ T6845] netlink: 'syz.4.779': attribute type 7 has an invalid length. [ 198.801614][ T6845] netlink: 'syz.4.779': attribute type 39 has an invalid length. [ 198.916016][ T6850] netlink: 'syz.3.780': attribute type 1 has an invalid length. [ 199.024581][ T6839] netlink: 'syz.0.777': attribute type 2 has an invalid length. [ 199.321454][ T6858] FAULT_INJECTION: forcing a failure. [ 199.321454][ T6858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.440148][ T6858] CPU: 1 PID: 6858 Comm: syz.3.782 Not tainted syzkaller #0 [ 199.447501][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.457585][ T6858] Call Trace: [ 199.460893][ T6858] [ 199.463853][ T6858] dump_stack_lvl+0x188/0x250 [ 199.468660][ T6858] ? show_regs_print_info+0x20/0x20 [ 199.473890][ T6858] ? load_image+0x400/0x400 [ 199.478426][ T6858] ? __lock_acquire+0x7d10/0x7d10 [ 199.483480][ T6858] ? perf_trace_lock_acquire+0xed/0x3e0 [ 199.489063][ T6858] should_fail+0x38c/0x4c0 [ 199.493529][ T6858] _copy_from_user+0x2e/0x170 [ 199.498336][ T6858] kstrtouint_from_user+0xd3/0x220 [ 199.503478][ T6858] ? kstrtol_from_user+0x2a0/0x2a0 [ 199.508648][ T6858] proc_fail_nth_write+0x8b/0x200 [ 199.513770][ T6858] ? proc_fail_nth_read+0x220/0x220 [ 199.519003][ T6858] ? common_file_perm+0x171/0x1c0 [ 199.524064][ T6858] ? proc_fail_nth_read+0x220/0x220 [ 199.529303][ T6858] vfs_write+0x30b/0xd60 [ 199.533588][ T6858] ? file_end_write+0x250/0x250 [ 199.538485][ T6858] ? __fget_files+0x40f/0x480 [ 199.543206][ T6858] ? mutex_lock_nested+0x17/0x20 [ 199.548173][ T6858] ? __fdget_pos+0x2bf/0x370 [ 199.552786][ T6858] ? ksys_write+0x71/0x260 [ 199.557241][ T6858] ksys_write+0x152/0x260 [ 199.561603][ T6858] ? __ia32_sys_read+0x80/0x80 [ 199.563916][ T6861] __nla_validate_parse: 3 callbacks suppressed [ 199.563931][ T6861] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.784'. [ 199.566412][ T6858] ? lockdep_hardirqs_on+0x94/0x140 [ 199.566448][ T6858] do_syscall_64+0x4c/0xa0 [ 199.591463][ T6858] ? clear_bhb_loop+0x30/0x80 [ 199.596190][ T6858] ? clear_bhb_loop+0x30/0x80 [ 199.600920][ T6858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.607002][ T6858] RIP: 0033:0x7f7e9826e68e [ 199.611464][ T6858] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 199.631258][ T6858] RSP: 002b:00007f7e964e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 199.639811][ T6858] RAX: ffffffffffffffda RBX: 00007f7e964e66c0 RCX: 00007f7e9826e68e [ 199.647818][ T6858] RDX: 0000000000000001 RSI: 00007f7e964e60a0 RDI: 0000000000000006 [ 199.655830][ T6858] RBP: 00007f7e964e6090 R08: 0000000000000000 R09: 0000000000000000 [ 199.663830][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.671830][ T6858] R13: 00007f7e98527128 R14: 00007f7e98527090 R15: 00007fffd1c67498 [ 199.680314][ T6858] [ 201.094909][ T6892] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.793'. [ 201.297884][ T6893] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.794'. [ 201.874340][ T6915] validate_nla: 8 callbacks suppressed [ 201.874361][ T6915] netlink: 'syz.3.803': attribute type 21 has an invalid length. [ 202.111836][ T6922] FAULT_INJECTION: forcing a failure. [ 202.111836][ T6922] name failslab, interval 1, probability 0, space 0, times 0 [ 202.195227][ T6922] CPU: 0 PID: 6922 Comm: syz.4.804 Not tainted syzkaller #0 [ 202.202590][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.212867][ T6922] Call Trace: [ 202.216185][ T6922] [ 202.219140][ T6922] dump_stack_lvl+0x188/0x250 [ 202.223944][ T6922] ? show_regs_print_info+0x20/0x20 [ 202.229265][ T6922] ? load_image+0x400/0x400 [ 202.233816][ T6922] ? __might_sleep+0xf0/0xf0 [ 202.238440][ T6922] ? __lock_acquire+0x7d10/0x7d10 [ 202.243500][ T6922] ? netlink_insert+0xe95/0x11f0 [ 202.248481][ T6922] should_fail+0x38c/0x4c0 [ 202.253025][ T6922] should_failslab+0x5/0x20 [ 202.257561][ T6922] slab_pre_alloc_hook+0x51/0xc0 [ 202.262539][ T6922] kmem_cache_alloc_node+0x47/0x2d0 [ 202.267774][ T6922] ? __alloc_skb+0xf4/0x750 [ 202.272320][ T6922] __alloc_skb+0xf4/0x750 [ 202.276686][ T6922] netlink_sendmsg+0x654/0xbe0 [ 202.281502][ T6922] ? netlink_getsockopt+0x570/0x570 [ 202.286734][ T6922] ? aa_sock_msg_perm+0x94/0x150 [ 202.291717][ T6922] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 202.297033][ T6922] ? security_socket_sendmsg+0x7c/0xa0 [ 202.302522][ T6922] ? netlink_getsockopt+0x570/0x570 [ 202.307735][ T6922] ____sys_sendmsg+0x5b7/0x8f0 [ 202.312540][ T6922] ? __sys_sendmsg_sock+0x30/0x30 [ 202.317597][ T6922] ? import_iovec+0x6f/0xa0 [ 202.322248][ T6922] ___sys_sendmsg+0x236/0x2e0 [ 202.327042][ T6922] ? __sys_sendmsg+0x2a0/0x2a0 [ 202.331943][ T6922] ? trace_event_raw_event_lock+0x270/0x270 [ 202.337939][ T6922] ? vfs_write+0x8b2/0xd60 [ 202.342488][ T6922] __se_sys_sendmsg+0x1af/0x290 [ 202.347363][ T6922] ? __x64_sys_sendmsg+0x80/0x80 [ 202.352317][ T6922] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 202.358358][ T6922] ? lockdep_hardirqs_on+0x94/0x140 [ 202.363579][ T6922] do_syscall_64+0x4c/0xa0 [ 202.368007][ T6922] ? clear_bhb_loop+0x30/0x80 [ 202.372818][ T6922] ? clear_bhb_loop+0x30/0x80 [ 202.377512][ T6922] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.383427][ T6922] RIP: 0033:0x7fb52709ee59 [ 202.387858][ T6922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.407481][ T6922] RSP: 002b:00007fb5252f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.415914][ T6922] RAX: ffffffffffffffda RBX: 00007fb527317fa0 RCX: 00007fb52709ee59 [ 202.423904][ T6922] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 202.431904][ T6922] RBP: 00007fb5252f8090 R08: 0000000000000000 R09: 0000000000000000 [ 202.439906][ T6922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.448065][ T6922] R13: 00007fb527318038 R14: 00007fb527317fa0 R15: 00007ffd7c80d6c8 [ 202.456071][ T6922] [ 202.704638][ T6933] netlink: 68 bytes leftover after parsing attributes in process `syz.2.808'. [ 202.714631][ T6936] FAULT_INJECTION: forcing a failure. [ 202.714631][ T6936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.902405][ T6939] netlink: 196 bytes leftover after parsing attributes in process `syz.4.811'. [ 202.919970][ T6936] CPU: 1 PID: 6936 Comm: syz.1.809 Not tainted syzkaller #0 [ 202.927311][ T6936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.937391][ T6936] Call Trace: [ 202.940756][ T6936] [ 202.943718][ T6936] dump_stack_lvl+0x188/0x250 [ 202.948433][ T6936] ? show_regs_print_info+0x20/0x20 [ 202.953662][ T6936] ? load_image+0x400/0x400 [ 202.958212][ T6936] ? __lock_acquire+0x7d10/0x7d10 [ 202.963284][ T6936] should_fail+0x38c/0x4c0 [ 202.967840][ T6936] _copy_to_user+0x2e/0x130 [ 202.972407][ T6936] simple_read_from_buffer+0xe3/0x150 [ 202.977828][ T6936] proc_fail_nth_read+0x1a6/0x220 [ 202.982903][ T6936] ? proc_fault_inject_write+0x310/0x310 [ 202.988579][ T6936] ? fsnotify_perm+0x254/0x560 [ 202.993377][ T6936] ? proc_fault_inject_write+0x310/0x310 [ 202.999038][ T6936] vfs_read+0x301/0xd60 [ 203.003246][ T6936] ? kernel_read+0x1e0/0x1e0 [ 203.007980][ T6936] ? __fget_files+0x40f/0x480 [ 203.012712][ T6936] ? mutex_lock_nested+0x17/0x20 [ 203.017694][ T6936] ? __fdget_pos+0x2bf/0x370 [ 203.022314][ T6936] ? ksys_read+0x71/0x260 [ 203.026681][ T6936] ksys_read+0x152/0x260 [ 203.031047][ T6936] ? vfs_write+0xd60/0xd60 [ 203.035502][ T6936] ? lockdep_hardirqs_on+0x94/0x140 [ 203.040787][ T6936] do_syscall_64+0x4c/0xa0 [ 203.045239][ T6936] ? clear_bhb_loop+0x30/0x80 [ 203.049941][ T6936] ? clear_bhb_loop+0x30/0x80 [ 203.054644][ T6936] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 203.060570][ T6936] RIP: 0033:0x7fa38060e68e [ 203.065023][ T6936] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.084747][ T6936] RSP: 002b:00007fa37e885fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.093325][ T6936] RAX: ffffffffffffffda RBX: 00007fa37e8866c0 RCX: 00007fa38060e68e [ 203.101340][ T6936] RDX: 000000000000000f RSI: 00007fa37e8860a0 RDI: 0000000000000006 [ 203.109352][ T6936] RBP: 00007fa37e886090 R08: 0000000000000000 R09: 0000000000000000 [ 203.117391][ T6936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.125475][ T6936] R13: 00007fa3808c7128 R14: 00007fa3808c7090 R15: 00007ffc1ede3df8 [ 203.133671][ T6936] [ 203.847596][ T6962] netlink: 60 bytes leftover after parsing attributes in process `syz.2.818'. [ 203.913324][ T6959] netlink: 'syz.3.817': attribute type 29 has an invalid length. [ 204.113896][ T6960] netlink: 'syz.1.816': attribute type 21 has an invalid length. [ 204.303275][ T6962] netlink: 60 bytes leftover after parsing attributes in process `syz.2.818'. [ 204.328633][ T6951] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.812'. [ 204.374358][ T6959] netlink: 'syz.3.817': attribute type 29 has an invalid length. [ 204.389405][ T6968] netlink: 'syz.3.817': attribute type 2 has an invalid length. [ 204.412193][ T6968] netlink: 'syz.3.817': attribute type 8 has an invalid length. [ 204.435316][ T6968] netlink: 132 bytes leftover after parsing attributes in process `syz.3.817'. [ 205.701328][ T6963] netlink: 60 bytes leftover after parsing attributes in process `syz.2.818'. [ 205.812273][ T6987] netlink: 'syz.1.822': attribute type 7 has an invalid length. [ 205.887702][ T6986] device syzkaller0 entered promiscuous mode [ 206.299584][ T6987] netlink: 'syz.1.822': attribute type 39 has an invalid length. [ 206.723339][ T7000] netlink: 'syz.4.826': attribute type 1 has an invalid length. [ 206.802109][ T7000] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.826'. [ 207.188368][ T7017] netlink: 'syz.2.830': attribute type 21 has an invalid length. [ 207.731143][ T7026] netlink: 'syz.2.836': attribute type 29 has an invalid length. [ 208.145918][ T7029] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.835'. [ 208.187478][ T7026] netlink: 'syz.2.836': attribute type 29 has an invalid length. [ 208.227905][ T7034] netlink: 'syz.2.836': attribute type 2 has an invalid length. [ 208.242557][ T7034] netlink: 'syz.2.836': attribute type 8 has an invalid length. [ 208.262766][ T7034] netlink: 132 bytes leftover after parsing attributes in process `syz.2.836'. [ 208.275719][ T7038] netlink: 'syz.3.839': attribute type 3 has an invalid length. [ 208.336914][ T7038] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.839'. [ 208.474028][ T7041] FAULT_INJECTION: forcing a failure. [ 208.474028][ T7041] name failslab, interval 1, probability 0, space 0, times 0 [ 208.507835][ T7041] CPU: 1 PID: 7041 Comm: syz.4.840 Not tainted syzkaller #0 [ 208.515185][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.525273][ T7041] Call Trace: [ 208.528578][ T7041] [ 208.531612][ T7041] dump_stack_lvl+0x188/0x250 [ 208.536330][ T7041] ? show_regs_print_info+0x20/0x20 [ 208.541558][ T7041] ? load_image+0x400/0x400 [ 208.546094][ T7041] ? __might_sleep+0xf0/0xf0 [ 208.550733][ T7041] ? __lock_acquire+0x7d10/0x7d10 [ 208.555783][ T7041] should_fail+0x38c/0x4c0 [ 208.560231][ T7041] should_failslab+0x5/0x20 [ 208.564756][ T7041] slab_pre_alloc_hook+0x51/0xc0 [ 208.569733][ T7041] __kmalloc_node+0x6e/0x3b0 [ 208.574634][ T7041] ? kvmalloc_node+0x84/0x130 [ 208.579364][ T7041] kvmalloc_node+0x84/0x130 [ 208.583902][ T7041] alloc_netdev_mqs+0x618/0xc40 [ 208.588794][ T7041] ipip6_tunnel_locate+0x471/0x670 [ 208.593949][ T7041] ? check_6rd+0x4b0/0x4b0 [ 208.598407][ T7041] ? bpf_lsm_capable+0x5/0x10 [ 208.603130][ T7041] ipip6_tunnel_ctl+0x74c/0x9c0 [ 208.608022][ T7041] ip_tunnel_siocdevprivate+0x134/0x1e0 [ 208.613611][ T7041] ? ip_tunnel_update+0xad0/0xad0 [ 208.618688][ T7041] ipip6_tunnel_siocdevprivate+0x1de/0x1600 [ 208.624632][ T7041] ? sit_tunnel_xmit+0x2350/0x2350 [ 208.629770][ T7041] ? __mutex_trylock_common+0x155/0x260 [ 208.635377][ T7041] ? rcu_lock_release+0x20/0x20 [ 208.640339][ T7041] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 208.646972][ T7041] ? dev_ioctl+0x5ce/0xe30 [ 208.651425][ T7041] ? __mutex_lock_common+0x465/0x2400 [ 208.656825][ T7041] ? full_name_hash+0x8e/0xe0 [ 208.661544][ T7041] dev_ifsioc+0xa30/0xd50 [ 208.665899][ T7041] ? dev_ioctl+0xe30/0xe30 [ 208.670345][ T7041] ? full_name_hash+0x8e/0xe0 [ 208.675066][ T7041] dev_ioctl+0x5df/0xe30 [ 208.679331][ T7041] ? get_user_ifreq+0xc7/0x170 [ 208.684124][ T7041] sock_ioctl+0x691/0x710 [ 208.688478][ T7041] ? sock_poll+0x410/0x410 [ 208.692929][ T7041] ? bpf_lsm_file_ioctl+0x5/0x10 [ 208.697970][ T7041] ? security_file_ioctl+0x7c/0xa0 [ 208.703114][ T7041] ? sock_poll+0x410/0x410 [ 208.707554][ T7041] __se_sys_ioctl+0xfa/0x170 [ 208.712183][ T7041] do_syscall_64+0x4c/0xa0 [ 208.716797][ T7041] ? clear_bhb_loop+0x30/0x80 [ 208.721585][ T7041] ? clear_bhb_loop+0x30/0x80 [ 208.726287][ T7041] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.732206][ T7041] RIP: 0033:0x7fb52709ee59 [ 208.736650][ T7041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.756376][ T7041] RSP: 002b:00007fb5252f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.764839][ T7041] RAX: ffffffffffffffda RBX: 00007fb527317fa0 RCX: 00007fb52709ee59 [ 208.772994][ T7041] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000005 [ 208.780997][ T7041] RBP: 00007fb5252f8090 R08: 0000000000000000 R09: 0000000000000000 [ 208.789005][ T7041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.797031][ T7041] R13: 00007fb527318038 R14: 00007fb527317fa0 R15: 00007ffd7c80d6c8 [ 208.805061][ T7041] [ 209.020317][ T7060] netlink: 'syz.2.845': attribute type 7 has an invalid length. [ 209.135888][ T7060] netlink: 'syz.2.845': attribute type 39 has an invalid length. [ 209.346439][ T7067] netlink: 'syz.0.846': attribute type 21 has an invalid length. [ 210.357863][ T7082] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.852'. [ 210.414169][ T7089] netlink: 'syz.0.856': attribute type 3 has an invalid length. [ 210.430599][ T7089] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.856'. [ 210.633832][ T7086] netlink: 132 bytes leftover after parsing attributes in process `syz.3.854'. [ 210.668856][ T7087] netlink: 132 bytes leftover after parsing attributes in process `syz.3.854'. [ 211.806108][ T7119] FAULT_INJECTION: forcing a failure. [ 211.806108][ T7119] name failslab, interval 1, probability 0, space 0, times 0 [ 211.877094][ T7122] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.868'. [ 211.878345][ T7119] CPU: 1 PID: 7119 Comm: syz.0.866 Not tainted syzkaller #0 [ 211.893647][ T7119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 211.903742][ T7119] Call Trace: [ 211.907056][ T7119] [ 211.910006][ T7119] dump_stack_lvl+0x188/0x250 [ 211.914712][ T7119] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 211.920929][ T7119] ? show_regs_print_info+0x20/0x20 [ 211.926270][ T7119] ? load_image+0x400/0x400 [ 211.931104][ T7119] should_fail+0x38c/0x4c0 [ 211.935566][ T7119] should_failslab+0x5/0x20 [ 211.940106][ T7119] slab_pre_alloc_hook+0x51/0xc0 [ 211.945089][ T7119] kmem_cache_alloc_trace+0x47/0x2a0 [ 211.950518][ T7119] ? sctp_add_bind_addr+0x89/0x350 [ 211.955657][ T7119] sctp_add_bind_addr+0x89/0x350 [ 211.960626][ T7119] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 211.966289][ T7119] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 211.972458][ T7119] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 211.978539][ T7119] ? sctp_copy_one_addr+0x93/0x660 [ 211.983787][ T7119] sctp_bind_addr_copy+0xaf/0x3c0 [ 211.988945][ T7119] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 211.995317][ T7119] sctp_connect_new_asoc+0x2f5/0x6a0 [ 212.000621][ T7119] ? __sctp_connect+0xd80/0xd80 [ 212.005577][ T7119] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 212.011134][ T7119] ? security_sctp_bind_connect+0x85/0xb0 [ 212.016864][ T7119] sctp_sendmsg+0x158d/0x2900 [ 212.021565][ T7119] ? aa_sk_perm+0x7dc/0x910 [ 212.026069][ T7119] ? sctp_getsockopt+0x8a0/0x8a0 [ 212.031276][ T7119] ? aa_af_perm+0x340/0x340 [ 212.035777][ T7119] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 212.042196][ T7119] ? __might_fault+0x1c/0x110 [ 212.046887][ T7119] ? sock_rps_record_flow+0x17/0x3b0 [ 212.052183][ T7119] ? inet_sendmsg+0x78/0x2f0 [ 212.056775][ T7119] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 212.062069][ T7119] ? security_socket_sendmsg+0x7c/0xa0 [ 212.067534][ T7119] ? inet_send_prepare+0x260/0x260 [ 212.072653][ T7119] ____sys_sendmsg+0x5b7/0x8f0 [ 212.077439][ T7119] ? __sys_sendmsg_sock+0x30/0x30 [ 212.082478][ T7119] ? import_iovec+0x6f/0xa0 [ 212.087013][ T7119] ___sys_sendmsg+0x236/0x2e0 [ 212.091805][ T7119] ? __sys_sendmsg+0x2a0/0x2a0 [ 212.096571][ T7119] ? rcu_nmi_exit+0x6f/0xf0 [ 212.101119][ T7119] __se_sys_sendmsg+0x1af/0x290 [ 212.106066][ T7119] ? __x64_sys_sendmsg+0x80/0x80 [ 212.111036][ T7119] ? syscall_enter_from_user_mode+0x2a/0x70 [ 212.116945][ T7119] do_syscall_64+0x4c/0xa0 [ 212.121370][ T7119] ? clear_bhb_loop+0x30/0x80 [ 212.126429][ T7119] ? clear_bhb_loop+0x30/0x80 [ 212.131112][ T7119] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 212.137011][ T7119] RIP: 0033:0x7fa8553dee59 [ 212.141433][ T7119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.161299][ T7119] RSP: 002b:00007fa853638028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.169981][ T7119] RAX: ffffffffffffffda RBX: 00007fa855657fa0 RCX: 00007fa8553dee59 [ 212.177959][ T7119] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 212.185990][ T7119] RBP: 00007fa853638090 R08: 0000000000000000 R09: 0000000000000000 [ 212.193967][ T7119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.202025][ T7119] R13: 00007fa855658038 R14: 00007fa855657fa0 R15: 00007ffc2d9e4178 [ 212.210018][ T7119] [ 212.501648][ T7133] FAULT_INJECTION: forcing a failure. [ 212.501648][ T7133] name failslab, interval 1, probability 0, space 0, times 0 [ 212.590153][ T7133] CPU: 0 PID: 7133 Comm: syz.3.870 Not tainted syzkaller #0 [ 212.597502][ T7133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 212.607586][ T7133] Call Trace: [ 212.610892][ T7133] [ 212.613849][ T7133] dump_stack_lvl+0x188/0x250 [ 212.618557][ T7133] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 212.625174][ T7133] ? show_regs_print_info+0x20/0x20 [ 212.630399][ T7133] ? load_image+0x400/0x400 [ 212.634961][ T7133] should_fail+0x38c/0x4c0 [ 212.639428][ T7133] should_failslab+0x5/0x20 [ 212.643964][ T7133] slab_pre_alloc_hook+0x51/0xc0 [ 212.648936][ T7133] kmem_cache_alloc_trace+0x47/0x2a0 [ 212.654248][ T7133] ? sctp_add_bind_addr+0x89/0x350 [ 212.659392][ T7133] ? get_random_bytes+0x20/0x20 [ 212.664280][ T7133] sctp_add_bind_addr+0x89/0x350 [ 212.669364][ T7133] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 212.675045][ T7133] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 212.681149][ T7133] ? sctp_v4_is_any+0x31/0x50 [ 212.685854][ T7133] ? sctp_copy_one_addr+0x93/0x660 [ 212.691012][ T7133] sctp_bind_addr_copy+0xaf/0x3c0 [ 212.696387][ T7133] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 212.702758][ T7133] sctp_connect_new_asoc+0x2f5/0x6a0 [ 212.708161][ T7133] ? __sctp_connect+0xd80/0xd80 [ 212.713029][ T7133] ? __local_bh_enable_ip+0x136/0x1c0 [ 212.718911][ T7133] ? _local_bh_enable+0xa0/0xa0 [ 212.723797][ T7133] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 212.729462][ T7133] ? security_sctp_bind_connect+0x85/0xb0 [ 212.735212][ T7133] sctp_sendmsg+0x158d/0x2900 [ 212.739990][ T7133] ? aa_sk_perm+0x7dc/0x910 [ 212.744534][ T7133] ? sctp_getsockopt+0x8a0/0x8a0 [ 212.749531][ T7133] ? aa_af_perm+0x340/0x340 [ 212.754053][ T7133] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 212.760509][ T7133] ? sock_rps_record_flow+0x17/0x3b0 [ 212.765940][ T7133] ? inet_sendmsg+0x78/0x2f0 [ 212.770576][ T7133] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 212.775898][ T7133] ? security_socket_sendmsg+0x7c/0xa0 [ 212.781468][ T7133] ? inet_send_prepare+0x260/0x260 [ 212.786603][ T7133] ____sys_sendmsg+0x5b7/0x8f0 [ 212.791412][ T7133] ? __sys_sendmsg_sock+0x30/0x30 [ 212.796486][ T7133] ? import_iovec+0x6f/0xa0 [ 212.801010][ T7133] ___sys_sendmsg+0x236/0x2e0 [ 212.805726][ T7133] ? __sys_sendmsg+0x2a0/0x2a0 [ 212.810536][ T7133] ? trace_event_raw_event_lock+0x270/0x270 [ 212.816537][ T7133] ? vfs_write+0x8b2/0xd60 [ 212.821009][ T7133] __se_sys_sendmsg+0x1af/0x290 [ 212.825893][ T7133] ? __x64_sys_sendmsg+0x80/0x80 [ 212.830852][ T7133] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 212.836875][ T7133] ? lockdep_hardirqs_on+0x94/0x140 [ 212.842103][ T7133] do_syscall_64+0x4c/0xa0 [ 212.846534][ T7133] ? clear_bhb_loop+0x30/0x80 [ 212.851238][ T7133] ? clear_bhb_loop+0x30/0x80 [ 212.855946][ T7133] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 212.861866][ T7133] RIP: 0033:0x7f7e982ade59 [ 212.866313][ T7133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.885948][ T7133] RSP: 002b:00007f7e964e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.894418][ T7133] RAX: ffffffffffffffda RBX: 00007f7e98527090 RCX: 00007f7e982ade59 [ 212.902419][ T7133] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 212.910418][ T7133] RBP: 00007f7e964e6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.918493][ T7133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.926485][ T7133] R13: 00007f7e98527128 R14: 00007f7e98527090 R15: 00007fffd1c67498 [ 212.934595][ T7133] [ 213.123573][ T7139] validate_nla: 8 callbacks suppressed [ 213.123593][ T7139] netlink: 'syz.1.873': attribute type 29 has an invalid length. [ 213.179410][ T7139] netlink: 'syz.1.873': attribute type 29 has an invalid length. [ 213.511027][ T7147] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.874'. [ 213.531692][ T7138] netlink: 'syz.1.873': attribute type 2 has an invalid length. [ 213.564699][ T7138] netlink: 'syz.1.873': attribute type 8 has an invalid length. [ 213.588626][ T7138] netlink: 132 bytes leftover after parsing attributes in process `syz.1.873'. [ 213.608005][ T7151] netlink: 'syz.1.873': attribute type 2 has an invalid length. [ 213.632948][ T7151] netlink: 'syz.1.873': attribute type 8 has an invalid length. [ 213.657305][ T7151] netlink: 132 bytes leftover after parsing attributes in process `syz.1.873'. [ 214.341239][ T7156] netlink: 'syz.2.876': attribute type 21 has an invalid length. [ 214.514168][ T7167] FAULT_INJECTION: forcing a failure. [ 214.514168][ T7167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.592758][ T7167] CPU: 1 PID: 7167 Comm: syz.2.881 Not tainted syzkaller #0 [ 214.600122][ T7167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 214.610292][ T7167] Call Trace: [ 214.613678][ T7167] [ 214.616624][ T7167] dump_stack_lvl+0x188/0x250 [ 214.621337][ T7167] ? show_regs_print_info+0x20/0x20 [ 214.626563][ T7167] ? load_image+0x400/0x400 [ 214.631176][ T7167] ? __lock_acquire+0x7d10/0x7d10 [ 214.636242][ T7167] should_fail+0x38c/0x4c0 [ 214.640689][ T7167] _copy_from_user+0x2e/0x170 [ 214.645393][ T7167] iovec_from_user+0x142/0x370 [ 214.650178][ T7167] __import_iovec+0x70/0x490 [ 214.654793][ T7167] import_iovec+0x6f/0xa0 [ 214.659140][ T7167] ___sys_sendmsg+0x1fd/0x2e0 [ 214.663833][ T7167] ? __sys_sendmsg+0x2a0/0x2a0 [ 214.668613][ T7167] ? vfs_write+0x8b2/0xd60 [ 214.673176][ T7167] __se_sys_sendmsg+0x1af/0x290 [ 214.678094][ T7167] ? __x64_sys_sendmsg+0x80/0x80 [ 214.683197][ T7167] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 214.689208][ T7167] ? lockdep_hardirqs_on+0x94/0x140 [ 214.694421][ T7167] do_syscall_64+0x4c/0xa0 [ 214.698843][ T7167] ? clear_bhb_loop+0x30/0x80 [ 214.703532][ T7167] ? clear_bhb_loop+0x30/0x80 [ 214.708223][ T7167] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.714118][ T7167] RIP: 0033:0x7f26558a7e59 [ 214.718536][ T7167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.738146][ T7167] RSP: 002b:00007f2653b01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.746570][ T7167] RAX: ffffffffffffffda RBX: 00007f2655b20fa0 RCX: 00007f26558a7e59 [ 214.754545][ T7167] RDX: 0000000004000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 214.762520][ T7167] RBP: 00007f2653b01090 R08: 0000000000000000 R09: 0000000000000000 [ 214.770497][ T7167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.778577][ T7167] R13: 00007f2655b21038 R14: 00007f2655b20fa0 R15: 00007ffcc7ef6cd8 [ 214.786583][ T7167] [ 214.823258][ T7164] netlink: 'syz.0.879': attribute type 10 has an invalid length. [ 215.036196][ T7164] device veth0_vlan left promiscuous mode [ 215.081228][ T7164] device veth0_vlan entered promiscuous mode [ 215.121999][ T7164] team0: Device veth0_vlan failed to register rx_handler [ 215.596747][ T7189] netlink: 'syz.2.886': attribute type 3 has an invalid length. [ 215.644243][ T7189] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.886'. [ 215.864745][ T7193] netlink: 'syz.3.888': attribute type 29 has an invalid length. [ 215.984805][ T7193] netlink: 132 bytes leftover after parsing attributes in process `syz.3.888'. [ 216.037682][ T7193] netlink: 132 bytes leftover after parsing attributes in process `syz.3.888'. [ 216.498511][ T7215] netlink: 60 bytes leftover after parsing attributes in process `syz.2.895'. [ 217.041667][ T7213] team0: Device hsr_slave_0 failed to register rx_handler [ 217.088788][ T7216] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.890'. [ 217.102606][ T7215] netlink: 60 bytes leftover after parsing attributes in process `syz.2.895'. [ 217.175764][ T7220] netlink: 60 bytes leftover after parsing attributes in process `syz.2.895'. [ 217.208164][ T7221] netlink: 60 bytes leftover after parsing attributes in process `syz.2.895'. [ 217.329109][ T7232] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.901'. [ 217.651440][ T7238] netlink: 132 bytes leftover after parsing attributes in process `syz.2.903'. [ 217.689028][ T7238] netlink: 132 bytes leftover after parsing attributes in process `syz.2.903'. [ 217.811386][ T7240] netlink: 168 bytes leftover after parsing attributes in process `syz.4.904'. [ 218.351446][ T7250] validate_nla: 13 callbacks suppressed [ 218.351468][ T7250] netlink: 'syz.3.908': attribute type 10 has an invalid length. [ 218.382056][ T7250] device hsr0 entered promiscuous mode [ 218.440285][ T7259] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 218.520498][ T7259] team0: Device hsr_slave_0 failed to register rx_handler [ 218.937521][ T7274] netlink: 'syz.0.915': attribute type 3 has an invalid length. [ 218.944857][ T7271] netlink: 'syz.2.916': attribute type 3 has an invalid length. [ 218.985702][ T7274] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.915'. [ 218.993799][ T7271] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.916'. [ 219.450975][ T7285] netlink: 'syz.1.919': attribute type 29 has an invalid length. [ 219.815974][ T7294] FAULT_INJECTION: forcing a failure. [ 219.815974][ T7294] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 219.892219][ T7294] CPU: 1 PID: 7294 Comm: syz.0.923 Not tainted syzkaller #0 [ 219.899583][ T7294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.909856][ T7294] Call Trace: [ 219.913169][ T7294] [ 219.916134][ T7294] dump_stack_lvl+0x188/0x250 [ 219.920880][ T7294] ? show_regs_print_info+0x20/0x20 [ 219.926137][ T7294] ? load_image+0x400/0x400 [ 219.930701][ T7294] ? perf_trace_lock_acquire+0x340/0x3e0 [ 219.936494][ T7294] ? perf_trace_lock+0xe4/0x390 [ 219.941501][ T7294] should_fail+0x38c/0x4c0 [ 219.945999][ T7294] prepare_alloc_pages+0x1e4/0x5f0 [ 219.951186][ T7294] __alloc_pages+0x11b/0x480 [ 219.955857][ T7294] ? zone_statistics+0x170/0x170 [ 219.960929][ T7294] new_slab+0xc0/0x4b0 [ 219.965064][ T7294] ___slab_alloc+0x80a/0xdd0 [ 219.969724][ T7294] ? tomoyo_realpath_from_path+0x118/0x610 [ 219.975773][ T7294] __kmalloc+0x1cd/0x330 [ 219.980144][ T7294] ? tomoyo_realpath_from_path+0x118/0x610 [ 219.986038][ T7294] tomoyo_realpath_from_path+0x118/0x610 [ 219.991977][ T7294] tomoyo_path_number_perm+0x242/0x660 [ 219.997523][ T7294] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 220.003057][ T7294] ? perf_trace_lock+0xe4/0x390 [ 220.008166][ T7294] security_file_ioctl+0x6c/0xa0 [ 220.013256][ T7294] __se_sys_ioctl+0x48/0x170 [ 220.017905][ T7294] do_syscall_64+0x4c/0xa0 [ 220.022399][ T7294] ? clear_bhb_loop+0x30/0x80 [ 220.027122][ T7294] ? clear_bhb_loop+0x30/0x80 [ 220.031845][ T7294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.037775][ T7294] RIP: 0033:0x7fa8553dee59 [ 220.042232][ T7294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.062060][ T7294] RSP: 002b:00007fa853638028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.064530][ T7285] netlink: 'syz.1.919': attribute type 29 has an invalid length. [ 220.070680][ T7294] RAX: ffffffffffffffda RBX: 00007fa855657fa0 RCX: 00007fa8553dee59 [ 220.070713][ T7294] RDX: 0000200000000000 RSI: 0000000000008b26 RDI: 0000000000000007 [ 220.070732][ T7294] RBP: 00007fa853638090 R08: 0000000000000000 R09: 0000000000000000 [ 220.070750][ T7294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.070768][ T7294] R13: 00007fa855658038 R14: 00007fa855657fa0 R15: 00007ffc2d9e4178 [ 220.070845][ T7294] [ 220.176443][ T7289] netlink: 'syz.1.919': attribute type 2 has an invalid length. [ 220.190788][ T7289] netlink: 'syz.1.919': attribute type 8 has an invalid length. [ 220.202523][ T7298] netlink: 'syz.3.924': attribute type 21 has an invalid length. [ 220.343244][ T7300] FAULT_INJECTION: forcing a failure. [ 220.343244][ T7300] name failslab, interval 1, probability 0, space 0, times 0 [ 220.391241][ T7300] CPU: 0 PID: 7300 Comm: syz.3.925 Not tainted syzkaller #0 [ 220.398773][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 220.408862][ T7300] Call Trace: [ 220.412167][ T7300] [ 220.415115][ T7300] dump_stack_lvl+0x188/0x250 [ 220.419912][ T7300] ? show_regs_print_info+0x20/0x20 [ 220.425128][ T7300] ? load_image+0x400/0x400 [ 220.429662][ T7300] ? lockdep_hardirqs_on+0x94/0x140 [ 220.434895][ T7300] should_fail+0x38c/0x4c0 [ 220.439348][ T7300] should_failslab+0x5/0x20 [ 220.443994][ T7300] slab_pre_alloc_hook+0x51/0xc0 [ 220.449132][ T7300] kmem_cache_alloc_trace+0x47/0x2a0 [ 220.454525][ T7300] ? sctp_add_bind_addr+0x89/0x350 [ 220.459789][ T7300] sctp_add_bind_addr+0x89/0x350 [ 220.464773][ T7300] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 220.470448][ T7300] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 220.476652][ T7300] ? sctp_v4_is_any+0x31/0x50 [ 220.481364][ T7300] ? sctp_copy_one_addr+0x93/0x660 [ 220.486507][ T7300] sctp_bind_addr_copy+0xaf/0x3c0 [ 220.491650][ T7300] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 220.498032][ T7300] sctp_connect_new_asoc+0x2f5/0x6a0 [ 220.503356][ T7300] ? __sctp_connect+0xd80/0xd80 [ 220.508237][ T7300] ? security_sctp_bind_connect+0x38/0xb0 [ 220.513999][ T7300] ? security_sctp_bind_connect+0x85/0xb0 [ 220.519762][ T7300] sctp_sendmsg+0x158d/0x2900 [ 220.524567][ T7300] ? lock_chain_count+0x20/0x20 [ 220.529461][ T7300] ? aa_sk_perm+0x7dc/0x910 [ 220.533988][ T7300] ? sctp_getsockopt+0x8a0/0x8a0 [ 220.538961][ T7300] ? aa_af_perm+0x340/0x340 [ 220.543487][ T7300] ? aa_sk_perm+0x11/0x910 [ 220.547926][ T7300] ? sock_rps_record_flow+0x17/0x3b0 [ 220.553334][ T7300] ? inet_sendmsg+0x78/0x2f0 [ 220.558151][ T7300] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 220.563553][ T7300] ? security_socket_sendmsg+0x7c/0xa0 [ 220.569223][ T7300] ? inet_send_prepare+0x260/0x260 [ 220.574375][ T7300] ____sys_sendmsg+0x5b7/0x8f0 [ 220.579294][ T7300] ? __sys_sendmsg_sock+0x30/0x30 [ 220.584453][ T7300] ? import_iovec+0x6f/0xa0 [ 220.589021][ T7300] ___sys_sendmsg+0x236/0x2e0 [ 220.593742][ T7300] ? __sys_sendmsg+0x2a0/0x2a0 [ 220.598721][ T7300] ? ktime_get_real_ts64+0x440/0x440 [ 220.604179][ T7300] __se_sys_sendmsg+0x1af/0x290 [ 220.609082][ T7300] ? __x64_sys_sendmsg+0x80/0x80 [ 220.614047][ T7300] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 220.620077][ T7300] ? lockdep_hardirqs_on+0x94/0x140 [ 220.625464][ T7300] do_syscall_64+0x4c/0xa0 [ 220.629925][ T7300] ? clear_bhb_loop+0x30/0x80 [ 220.634639][ T7300] ? clear_bhb_loop+0x30/0x80 [ 220.639436][ T7300] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.645366][ T7300] RIP: 0033:0x7f7e982ade59 [ 220.649806][ T7300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.669842][ T7300] RSP: 002b:00007f7e96507028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.678304][ T7300] RAX: ffffffffffffffda RBX: 00007f7e98526fa0 RCX: 00007f7e982ade59 [ 220.686392][ T7300] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 220.694394][ T7300] RBP: 00007f7e96507090 R08: 0000000000000000 R09: 0000000000000000 [ 220.702386][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.710375][ T7300] R13: 00007f7e98527038 R14: 00007f7e98526fa0 R15: 00007fffd1c67498 [ 220.718383][ T7300] [ 220.849905][ T7311] netlink: 'syz.2.928': attribute type 1 has an invalid length. [ 222.474875][ T7374] __nla_validate_parse: 9 callbacks suppressed [ 222.474894][ T7374] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.945'. [ 222.588123][ T7378] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.950'. [ 222.775851][ T7385] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.953'. [ 223.303713][ T7390] netlink: 132 bytes leftover after parsing attributes in process `syz.2.955'. [ 223.360745][ T7402] validate_nla: 17 callbacks suppressed [ 223.360765][ T7402] netlink: 'syz.2.955': attribute type 2 has an invalid length. [ 223.495883][ T7407] FAULT_INJECTION: forcing a failure. [ 223.495883][ T7407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.505212][ T7402] netlink: 'syz.2.955': attribute type 8 has an invalid length. [ 223.518904][ T7402] netlink: 132 bytes leftover after parsing attributes in process `syz.2.955'. [ 223.544712][ T7407] CPU: 1 PID: 7407 Comm: syz.3.959 Not tainted syzkaller #0 [ 223.552056][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 223.562132][ T7407] Call Trace: [ 223.565428][ T7407] [ 223.568375][ T7407] dump_stack_lvl+0x188/0x250 [ 223.573168][ T7407] ? show_regs_print_info+0x20/0x20 [ 223.578386][ T7407] ? load_image+0x400/0x400 [ 223.582922][ T7407] ? __lock_acquire+0x7d10/0x7d10 [ 223.587981][ T7407] should_fail+0x38c/0x4c0 [ 223.592431][ T7407] _copy_to_user+0x2e/0x130 [ 223.597154][ T7407] simple_read_from_buffer+0xe3/0x150 [ 223.602567][ T7407] proc_fail_nth_read+0x1a6/0x220 [ 223.607647][ T7407] ? proc_fault_inject_write+0x310/0x310 [ 223.613315][ T7407] ? fsnotify_perm+0x254/0x560 [ 223.618104][ T7407] ? proc_fault_inject_write+0x310/0x310 [ 223.623852][ T7407] vfs_read+0x301/0xd60 [ 223.628149][ T7407] ? kernel_read+0x1e0/0x1e0 [ 223.632925][ T7407] ? __fget_files+0x40f/0x480 [ 223.637769][ T7407] ? mutex_lock_nested+0x17/0x20 [ 223.642758][ T7407] ? __fdget_pos+0x2bf/0x370 [ 223.647373][ T7407] ? ksys_read+0x71/0x260 [ 223.651738][ T7407] ksys_read+0x152/0x260 [ 223.656008][ T7407] ? vfs_write+0xd60/0xd60 [ 223.660719][ T7407] ? lockdep_hardirqs_on+0x94/0x140 [ 223.665952][ T7407] do_syscall_64+0x4c/0xa0 [ 223.670397][ T7407] ? clear_bhb_loop+0x30/0x80 [ 223.675106][ T7407] ? clear_bhb_loop+0x30/0x80 [ 223.679901][ T7407] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.685824][ T7407] RIP: 0033:0x7f7e9826e68e [ 223.690272][ T7407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 223.709989][ T7407] RSP: 002b:00007f7e964e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 223.718437][ T7407] RAX: ffffffffffffffda RBX: 00007f7e964e66c0 RCX: 00007f7e9826e68e [ 223.726451][ T7407] RDX: 000000000000000f RSI: 00007f7e964e60a0 RDI: 0000000000000004 [ 223.734569][ T7407] RBP: 00007f7e964e6090 R08: 0000000000000000 R09: 0000000000000000 [ 223.742590][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.750588][ T7407] R13: 00007f7e98527128 R14: 00007f7e98527090 R15: 00007fffd1c67498 [ 223.758724][ T7407] [ 224.099895][ T7413] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.957'. [ 224.126800][ T7419] FAULT_INJECTION: forcing a failure. [ 224.126800][ T7419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 224.152239][ T7419] CPU: 0 PID: 7419 Comm: syz.2.962 Not tainted syzkaller #0 [ 224.159722][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 224.169906][ T7419] Call Trace: [ 224.173226][ T7419] [ 224.176707][ T7419] dump_stack_lvl+0x188/0x250 [ 224.181515][ T7419] ? show_regs_print_info+0x20/0x20 [ 224.186761][ T7419] ? load_image+0x400/0x400 [ 224.191290][ T7419] ? __kasan_slab_alloc+0xb3/0xd0 [ 224.196432][ T7419] ? slab_post_alloc_hook+0x4c/0x380 [ 224.201852][ T7419] ? kmem_cache_alloc_node+0x12d/0x2d0 [ 224.207339][ T7419] ? __alloc_skb+0xf4/0x750 [ 224.211880][ T7419] ? netlink_recvmsg+0x672/0xe20 [ 224.216846][ T7419] ? ____sys_recvmsg+0x2cd/0x5e0 [ 224.221915][ T7419] ? ___sys_recvmsg+0x21a/0x5c0 [ 224.226802][ T7419] ? __x64_sys_recvmsg+0x1f9/0x2c0 [ 224.231939][ T7419] should_fail+0x38c/0x4c0 [ 224.236408][ T7419] prepare_alloc_pages+0x1e4/0x5f0 [ 224.241563][ T7419] __alloc_pages+0x11b/0x480 [ 224.246268][ T7419] ? zone_statistics+0x170/0x170 [ 224.251258][ T7419] kmalloc_large_node+0x7d/0x190 [ 224.256266][ T7419] __kmalloc_node_track_caller+0x22e/0x3a0 [ 224.262198][ T7419] ? netlink_dump+0x19f/0xcf0 [ 224.266921][ T7419] ? kmem_cache_alloc_node+0x162/0x2d0 [ 224.272417][ T7419] ? __alloc_skb+0xf4/0x750 [ 224.276950][ T7419] ? netlink_dump+0x19f/0xcf0 [ 224.281657][ T7419] __alloc_skb+0x22c/0x750 [ 224.286107][ T7419] netlink_dump+0x19f/0xcf0 [ 224.290640][ T7419] ? lockdep_hardirqs_on+0x94/0x140 [ 224.295872][ T7419] ? slab_free_freelist_hook+0xea/0x170 [ 224.301531][ T7419] ? netlink_lookup+0x1d0/0x1d0 [ 224.306434][ T7419] netlink_recvmsg+0x672/0xe20 [ 224.311232][ T7419] ? netlink_sendmsg+0xbe0/0xbe0 [ 224.316299][ T7419] ? aa_sk_perm+0x7dc/0x910 [ 224.321043][ T7419] ? aa_af_perm+0x340/0x340 [ 224.325598][ T7419] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 224.331015][ T7419] ? security_socket_recvmsg+0x85/0xb0 [ 224.336518][ T7419] ? netlink_sendmsg+0xbe0/0xbe0 [ 224.341490][ T7419] ____sys_recvmsg+0x2cd/0x5e0 [ 224.346381][ T7419] ? __might_fault+0xb3/0x110 [ 224.351193][ T7419] ? __sys_recvmsg_sock+0x40/0x40 [ 224.356278][ T7419] ? import_iovec+0x6f/0xa0 [ 224.360823][ T7419] ___sys_recvmsg+0x21a/0x5c0 [ 224.365641][ T7419] ? __sys_recvmsg+0x280/0x280 [ 224.370450][ T7419] ? __lock_acquire+0x7d10/0x7d10 [ 224.375539][ T7419] __x64_sys_recvmsg+0x1f9/0x2c0 [ 224.380604][ T7419] ? ___sys_recvmsg+0x5c0/0x5c0 [ 224.385489][ T7419] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 224.391518][ T7419] ? lockdep_hardirqs_on+0x94/0x140 [ 224.396773][ T7419] do_syscall_64+0x4c/0xa0 [ 224.401226][ T7419] ? clear_bhb_loop+0x30/0x80 [ 224.406043][ T7419] ? clear_bhb_loop+0x30/0x80 [ 224.410781][ T7419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.416714][ T7419] RIP: 0033:0x7f26558a7e59 [ 224.421252][ T7419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.440992][ T7419] RSP: 002b:00007f2653ae0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 224.449540][ T7419] RAX: ffffffffffffffda RBX: 00007f2655b21090 RCX: 00007f26558a7e59 [ 224.457739][ T7419] RDX: 0000000000002000 RSI: 0000200000000080 RDI: 0000000000000003 [ 224.465750][ T7419] RBP: 00007f2653ae0090 R08: 0000000000000000 R09: 0000000000000000 [ 224.473952][ T7419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.482134][ T7419] R13: 00007f2655b21128 R14: 00007f2655b21090 R15: 00007ffcc7ef6cd8 [ 224.490179][ T7419] [ 224.878756][ T7433] netlink: 'syz.1.967': attribute type 3 has an invalid length. [ 224.904181][ T7433] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.967'. [ 225.030055][ T7439] netlink: 'syz.4.969': attribute type 21 has an invalid length. [ 225.141960][ T7441] netlink: 'syz.0.970': attribute type 10 has an invalid length. [ 225.214218][ T7441] team0: Device hsr_slave_0 failed to register rx_handler [ 225.331034][ T7446] netlink: 'syz.3.972': attribute type 10 has an invalid length. [ 225.358996][ T7446] team0: Device hsr_slave_0 failed to register rx_handler [ 225.515269][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'. [ 225.544791][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.975'. [ 225.578469][ T7450] netlink: 33 bytes leftover after parsing attributes in process `syz.2.975'. [ 226.130191][ T7469] netlink: 'syz.3.981': attribute type 3 has an invalid length. [ 226.438589][ T7475] netlink: 'syz.1.984': attribute type 21 has an invalid length. [ 226.546107][ T7486] netlink: 'syz.3.987': attribute type 3 has an invalid length. [ 226.752745][ T7490] netlink: 'syz.4.988': attribute type 10 has an invalid length. [ 226.930696][ T7490] team0: Device hsr_slave_0 failed to register rx_handler [ 227.509186][ T7497] team0: Port device geneve1 added [ 227.761609][ T7504] __nla_validate_parse: 10 callbacks suppressed [ 227.761631][ T7504] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.992'. [ 228.054116][ T7511] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.995'. [ 228.149183][ T7508] netlink: 10 bytes leftover after parsing attributes in process `syz.4.993'. [ 228.495073][ T7527] FAULT_INJECTION: forcing a failure. [ 228.495073][ T7527] name failslab, interval 1, probability 0, space 0, times 0 [ 228.541000][ T7527] CPU: 1 PID: 7527 Comm: syz.1.1002 Not tainted syzkaller #0 [ 228.548469][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.558724][ T7527] Call Trace: [ 228.562053][ T7527] [ 228.565029][ T7527] dump_stack_lvl+0x188/0x250 [ 228.569770][ T7527] ? show_regs_print_info+0x20/0x20 [ 228.575009][ T7527] ? load_image+0x400/0x400 [ 228.579650][ T7527] ? perf_trace_lock+0x301/0x390 [ 228.584670][ T7527] should_fail+0x38c/0x4c0 [ 228.589159][ T7527] should_failslab+0x5/0x20 [ 228.593703][ T7527] slab_pre_alloc_hook+0x51/0xc0 [ 228.598745][ T7527] ? skb_clone+0x1bd/0x350 [ 228.603204][ T7527] kmem_cache_alloc+0x3d/0x290 [ 228.608205][ T7527] skb_clone+0x1bd/0x350 [ 228.612515][ T7527] __netlink_deliver_tap+0x3cd/0x7c0 [ 228.617907][ T7527] netlink_deliver_tap+0x16c/0x180 [ 228.623068][ T7527] netlink_dump+0x823/0xcf0 [ 228.627666][ T7527] ? netlink_lookup+0x1d0/0x1d0 [ 228.632635][ T7527] netlink_recvmsg+0x672/0xe20 [ 228.637450][ T7527] ? trace_event_raw_event_lock+0x270/0x270 [ 228.643417][ T7527] ? netlink_sendmsg+0xbe0/0xbe0 [ 228.648410][ T7527] ? aa_sk_perm+0x7dc/0x910 [ 228.652989][ T7527] ? aa_af_perm+0x340/0x340 [ 228.657586][ T7527] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 228.662942][ T7527] ? security_socket_recvmsg+0x85/0xb0 [ 228.668573][ T7527] ? netlink_sendmsg+0xbe0/0xbe0 [ 228.673670][ T7527] ____sys_recvmsg+0x2cd/0x5e0 [ 228.678492][ T7527] ? __might_fault+0xb3/0x110 [ 228.683270][ T7527] ? __sys_recvmsg_sock+0x40/0x40 [ 228.688406][ T7527] ? import_iovec+0x6f/0xa0 [ 228.692977][ T7527] ___sys_recvmsg+0x21a/0x5c0 [ 228.697733][ T7527] ? __sys_recvmsg+0x280/0x280 [ 228.702588][ T7527] ? trace_event_raw_event_lock+0x270/0x270 [ 228.708652][ T7527] __x64_sys_recvmsg+0x1f9/0x2c0 [ 228.713644][ T7527] ? ___sys_recvmsg+0x5c0/0x5c0 [ 228.718529][ T7527] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 228.724719][ T7527] ? lockdep_hardirqs_on+0x94/0x140 [ 228.729984][ T7527] do_syscall_64+0x4c/0xa0 [ 228.734443][ T7527] ? clear_bhb_loop+0x30/0x80 [ 228.739163][ T7527] ? clear_bhb_loop+0x30/0x80 [ 228.743892][ T7527] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.749946][ T7527] RIP: 0033:0x7fa38064de59 [ 228.754425][ T7527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.774079][ T7527] RSP: 002b:00007fa37e8a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 228.782553][ T7527] RAX: ffffffffffffffda RBX: 00007fa3808c6fa0 RCX: 00007fa38064de59 [ 228.790569][ T7527] RDX: 0000000000002000 RSI: 0000200000000080 RDI: 0000000000000003 [ 228.798596][ T7527] RBP: 00007fa37e8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 228.806619][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.814647][ T7527] R13: 00007fa3808c7038 R14: 00007fa3808c6fa0 R15: 00007ffc1ede3df8 [ 228.822813][ T7527] [ 229.117969][ T7534] validate_nla: 3 callbacks suppressed [ 229.118008][ T7534] netlink: 'syz.1.1005': attribute type 21 has an invalid length. [ 229.315499][ T7537] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1003'. [ 229.440324][ T7543] netlink: 'syz.1.1006': attribute type 10 has an invalid length. [ 229.486012][ T7543] team0: Device hsr_slave_0 failed to register rx_handler [ 229.509622][ T7541] FAULT_INJECTION: forcing a failure. [ 229.509622][ T7541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.591191][ T7541] CPU: 1 PID: 7541 Comm: syz.4.1007 Not tainted syzkaller #0 [ 229.598662][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 229.608765][ T7541] Call Trace: [ 229.612089][ T7541] [ 229.615058][ T7541] dump_stack_lvl+0x188/0x250 [ 229.619794][ T7541] ? show_regs_print_info+0x20/0x20 [ 229.625164][ T7541] ? load_image+0x400/0x400 [ 229.629731][ T7541] ? __kasan_kmalloc+0xcc/0xf0 [ 229.634646][ T7541] ? __lock_acquire+0x7d10/0x7d10 [ 229.639715][ T7541] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.646058][ T7541] should_fail+0x38c/0x4c0 [ 229.650561][ T7541] _copy_from_iter+0x22e/0x1170 [ 229.655514][ T7541] ? __lock_acquire+0x7d10/0x7d10 [ 229.660826][ T7541] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 229.666296][ T7541] ? __virt_addr_valid+0x3c6/0x470 [ 229.671473][ T7541] ? __phys_addr_symbol+0x2b/0x70 [ 229.676633][ T7541] ? __check_object_size+0x30c/0x410 [ 229.681989][ T7541] kernfs_fop_write_iter+0x1a4/0x4c0 [ 229.687423][ T7541] ? iov_iter_init+0xb4/0x170 [ 229.692250][ T7541] vfs_write+0x745/0xd60 [ 229.696732][ T7541] ? file_end_write+0x250/0x250 [ 229.701675][ T7541] ? __fget_files+0x40f/0x480 [ 229.706429][ T7541] ? mutex_lock_nested+0x17/0x20 [ 229.712530][ T7541] ? __fdget_pos+0x2bf/0x370 [ 229.717182][ T7541] ? ksys_write+0x71/0x260 [ 229.721780][ T7541] ksys_write+0x152/0x260 [ 229.726262][ T7541] ? __ia32_sys_read+0x80/0x80 [ 229.731101][ T7541] ? lockdep_hardirqs_on+0x94/0x140 [ 229.736455][ T7541] do_syscall_64+0x4c/0xa0 [ 229.740912][ T7541] ? clear_bhb_loop+0x30/0x80 [ 229.745632][ T7541] ? clear_bhb_loop+0x30/0x80 [ 229.750363][ T7541] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.756306][ T7541] RIP: 0033:0x7fb52709ee59 [ 229.760908][ T7541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.780685][ T7541] RSP: 002b:00007fb5252f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.789163][ T7541] RAX: ffffffffffffffda RBX: 00007fb527317fa0 RCX: 00007fb52709ee59 [ 229.797185][ T7541] RDX: 0000000000000012 RSI: 0000200000000880 RDI: 0000000000000007 [ 229.805189][ T7541] RBP: 00007fb5252f8090 R08: 0000000000000000 R09: 0000000000000000 [ 229.813199][ T7541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.821254][ T7541] R13: 00007fb527318038 R14: 00007fb527317fa0 R15: 00007ffd7c80d6c8 [ 229.829456][ T7541] [ 230.033482][ T7552] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1009'. [ 230.170680][ T7557] netlink: 'syz.2.1012': attribute type 3 has an invalid length. [ 230.202794][ T7557] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1012'. [ 230.531483][ T7569] FAULT_INJECTION: forcing a failure. [ 230.531483][ T7569] name failslab, interval 1, probability 0, space 0, times 0 [ 230.564255][ T7571] netlink: 'syz.0.1017': attribute type 21 has an invalid length. [ 230.595686][ T7569] CPU: 0 PID: 7569 Comm: syz.2.1018 Not tainted syzkaller #0 [ 230.603129][ T7569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.613215][ T7569] Call Trace: [ 230.616527][ T7569] [ 230.619483][ T7569] dump_stack_lvl+0x188/0x250 [ 230.624195][ T7569] ? show_regs_print_info+0x20/0x20 [ 230.629521][ T7569] ? load_image+0x400/0x400 [ 230.634054][ T7569] ? __might_sleep+0xf0/0xf0 [ 230.638765][ T7569] ? __lock_acquire+0x7d10/0x7d10 [ 230.643852][ T7569] should_fail+0x38c/0x4c0 [ 230.648301][ T7569] should_failslab+0x5/0x20 [ 230.652890][ T7569] slab_pre_alloc_hook+0x51/0xc0 [ 230.657969][ T7569] __kmalloc_node+0x6e/0x3b0 [ 230.662597][ T7569] ? kvmalloc_node+0x84/0x130 [ 230.667303][ T7569] kvmalloc_node+0x84/0x130 [ 230.671853][ T7569] btf_parse_type_sec+0x16e/0x1ad0 [ 230.677014][ T7569] ? btf_check_sec_info+0x29b/0x350 [ 230.682270][ T7569] ? btf_verifier_log+0x2b0/0x2b0 [ 230.687327][ T7569] ? btf_parse_hdr+0x617/0x810 [ 230.692124][ T7569] ? btf_parse_str_sec+0x20a/0x2a0 [ 230.697267][ T7569] btf_new_fd+0x4a7/0x910 [ 230.701632][ T7569] __sys_bpf+0x58c/0x6f0 [ 230.705907][ T7569] ? bpf_link_show_fdinfo+0x380/0x380 [ 230.711441][ T7569] ? vtime_user_exit+0x2c8/0x3e0 [ 230.716511][ T7569] __x64_sys_bpf+0x78/0x90 [ 230.721044][ T7569] do_syscall_64+0x4c/0xa0 [ 230.725494][ T7569] ? clear_bhb_loop+0x30/0x80 [ 230.730310][ T7569] ? clear_bhb_loop+0x30/0x80 [ 230.735109][ T7569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.741043][ T7569] RIP: 0033:0x7f26558a7e59 [ 230.745494][ T7569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.765397][ T7569] RSP: 002b:00007f2653b01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.773840][ T7569] RAX: ffffffffffffffda RBX: 00007f2655b20fa0 RCX: 00007f26558a7e59 [ 230.781839][ T7569] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 230.789826][ T7569] RBP: 00007f2653b01090 R08: 0000000000000000 R09: 0000000000000000 [ 230.798014][ T7569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.805990][ T7569] R13: 00007f2655b21038 R14: 00007f2655b20fa0 R15: 00007ffcc7ef6cd8 [ 230.813982][ T7569] [ 231.111460][ T7582] netlink: 'syz.0.1021': attribute type 3 has an invalid length. [ 231.122544][ T7585] netlink: 'syz.1.1023': attribute type 29 has an invalid length. [ 231.139155][ T7582] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1021'. [ 232.722211][ T7585] netlink: 'syz.1.1023': attribute type 29 has an invalid length. [ 232.742769][ T7593] netlink: 'syz.2.1024': attribute type 10 has an invalid length. [ 232.796609][ T7593] team0: Device hsr_slave_0 failed to register rx_handler [ 233.089323][ T7604] FAULT_INJECTION: forcing a failure. [ 233.089323][ T7604] name failslab, interval 1, probability 0, space 0, times 0 [ 233.098129][ T7606] netlink: 'syz.1.1029': attribute type 3 has an invalid length. [ 233.142407][ T7604] CPU: 0 PID: 7604 Comm: syz.4.1030 Not tainted syzkaller #0 [ 233.149945][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.160044][ T7604] Call Trace: [ 233.163453][ T7604] [ 233.166413][ T7604] dump_stack_lvl+0x188/0x250 [ 233.167391][ T7606] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1029'. [ 233.171125][ T7604] ? show_regs_print_info+0x20/0x20 [ 233.171165][ T7604] ? load_image+0x400/0x400 [ 233.171198][ T7604] should_fail+0x38c/0x4c0 [ 233.171228][ T7604] should_failslab+0x5/0x20 [ 233.171248][ T7604] slab_pre_alloc_hook+0x51/0xc0 [ 233.171270][ T7604] ? skb_clone+0x1bd/0x350 [ 233.209251][ T7604] kmem_cache_alloc+0x3d/0x290 [ 233.214046][ T7604] skb_clone+0x1bd/0x350 [ 233.218310][ T7604] bpf_clone_redirect+0x15f/0x470 [ 233.223446][ T7604] bpf_prog_b36a1f39e2fdd4f4+0x56/0x5a4 [ 233.229120][ T7604] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 233.235215][ T7604] ? lock_chain_count+0x20/0x20 [ 233.240278][ T7604] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 233.246525][ T7604] ? lockdep_hardirqs_on+0x94/0x140 [ 233.251728][ T7604] ? ktime_get+0x7b/0x270 [ 233.256058][ T7604] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 233.262297][ T7604] ? ktime_get_real_ts64+0x440/0x440 [ 233.267778][ T7604] ? read_lock_is_recursive+0x10/0x10 [ 233.273173][ T7604] ? __cant_sleep+0x220/0x220 [ 233.277860][ T7604] ? ktime_get+0x247/0x270 [ 233.282632][ T7604] bpf_test_run+0x2a8/0x800 [ 233.287155][ T7604] ? convert___skb_to_skb+0x4c0/0x4c0 [ 233.292535][ T7604] ? eth_get_headlen+0x200/0x200 [ 233.297477][ T7604] ? __build_skb+0x1e2/0x2e0 [ 233.302083][ T7604] ? convert___skb_to_skb+0x3d/0x4c0 [ 233.307393][ T7604] bpf_prog_test_run_skb+0x9cc/0x1180 [ 233.312802][ T7604] ? cpu_online+0x60/0x60 [ 233.317146][ T7604] bpf_prog_test_run+0x31e/0x390 [ 233.322192][ T7604] __sys_bpf+0x5a5/0x6f0 [ 233.326471][ T7604] ? bpf_link_show_fdinfo+0x380/0x380 [ 233.331996][ T7604] ? vtime_user_exit+0x2c8/0x3e0 [ 233.336962][ T7604] __x64_sys_bpf+0x78/0x90 [ 233.341442][ T7604] do_syscall_64+0x4c/0xa0 [ 233.345881][ T7604] ? clear_bhb_loop+0x30/0x80 [ 233.350570][ T7604] ? clear_bhb_loop+0x30/0x80 [ 233.355251][ T7604] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.361166][ T7604] RIP: 0033:0x7fb52709ee59 [ 233.365689][ T7604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.385450][ T7604] RSP: 002b:00007fb5252f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.394058][ T7604] RAX: ffffffffffffffda RBX: 00007fb527317fa0 RCX: 00007fb52709ee59 [ 233.402060][ T7604] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 233.410037][ T7604] RBP: 00007fb5252f8090 R08: 0000000000000000 R09: 0000000000000000 [ 233.418009][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.426099][ T7604] R13: 00007fb527318038 R14: 00007fb527317fa0 R15: 00007ffd7c80d6c8 [ 233.434114][ T7604] [ 233.550459][ T7615] netlink: 'syz.3.1031': attribute type 21 has an invalid length. [ 233.620878][ T7609] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1026'. [ 234.052223][ T7633] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1039'. [ 234.081483][ T7635] team0: Device hsr_slave_0 failed to register rx_handler [ 234.187470][ T7632] validate_nla: 6 callbacks suppressed [ 234.187548][ T7632] netlink: 'syz.4.1036': attribute type 10 has an invalid length. [ 234.480585][ T7632] team0: Port device geneve1 added [ 234.764589][ T7649] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1040'. [ 235.016719][ T7651] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1042'. [ 235.054045][ T7648] netlink: 'syz.3.1043': attribute type 21 has an invalid length. [ 235.340895][ T7669] netlink: 'syz.4.1051': attribute type 29 has an invalid length. [ 235.355062][ T7667] netlink: 'syz.2.1050': attribute type 3 has an invalid length. [ 235.374109][ T7667] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1050'. [ 235.423328][ T7669] netlink: 'syz.4.1051': attribute type 29 has an invalid length. [ 235.610948][ T7673] netlink: 'syz.4.1051': attribute type 29 has an invalid length. [ 235.620348][ T7670] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1049'. [ 235.638391][ T7679] netlink: 'syz.3.1054': attribute type 21 has an invalid length. [ 235.789885][ T7689] netlink: 'syz.4.1056': attribute type 3 has an invalid length. [ 235.798134][ T7689] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1056'. [ 235.888902][ T7693] netlink: 'syz.0.1058': attribute type 21 has an invalid length. [ 236.056860][ T7688] netlink: 'syz.2.1057': attribute type 10 has an invalid length. [ 236.433310][ T7688] team0: Port device geneve1 added [ 236.500945][ T7711] FAULT_INJECTION: forcing a failure. [ 236.500945][ T7711] name failslab, interval 1, probability 0, space 0, times 0 [ 236.513905][ T7711] CPU: 1 PID: 7711 Comm: syz.4.1065 Not tainted syzkaller #0 [ 236.521307][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 236.531404][ T7711] Call Trace: [ 236.534736][ T7711] [ 236.537695][ T7711] dump_stack_lvl+0x188/0x250 [ 236.542406][ T7711] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 236.549031][ T7711] ? show_regs_print_info+0x20/0x20 [ 236.554264][ T7711] ? load_image+0x400/0x400 [ 236.558799][ T7711] ? perf_trace_lock_acquire+0xed/0x3e0 [ 236.564452][ T7711] should_fail+0x38c/0x4c0 [ 236.568910][ T7711] should_failslab+0x5/0x20 [ 236.573444][ T7711] slab_pre_alloc_hook+0x51/0xc0 [ 236.578411][ T7711] ? skb_clone+0x1bd/0x350 [ 236.582855][ T7711] kmem_cache_alloc+0x3d/0x290 [ 236.587750][ T7711] skb_clone+0x1bd/0x350 [ 236.592037][ T7711] ? dev_queue_xmit_nit+0x1df/0xb00 [ 236.597259][ T7711] dev_queue_xmit_nit+0x2cc/0xb00 [ 236.602313][ T7711] ? validate_xmit_skb+0x7b3/0xe40 [ 236.607461][ T7711] dev_hard_start_xmit+0x13e/0x7e0 [ 236.612710][ T7711] __dev_queue_xmit+0x1a9b/0x2f80 [ 236.617780][ T7711] ? dev_queue_xmit+0x20/0x20 [ 236.622490][ T7711] ? memcpy+0x3c/0x60 [ 236.626502][ T7711] ? __copy_skb_header+0x3ba/0x4f0 [ 236.631991][ T7711] ? __skb_clone+0x480/0x790 [ 236.636625][ T7711] ? skb_clone+0x1f1/0x350 [ 236.641089][ T7711] __netlink_deliver_tap+0x53e/0x7c0 [ 236.646418][ T7711] netlink_deliver_tap+0x16c/0x180 [ 236.651553][ T7711] netlink_dump+0x823/0xcf0 [ 236.656095][ T7711] ? netlink_lookup+0x1d0/0x1d0 [ 236.660990][ T7711] netlink_recvmsg+0x672/0xe20 [ 236.665799][ T7711] ? netlink_sendmsg+0xbe0/0xbe0 [ 236.670772][ T7711] ? aa_sk_perm+0x7dc/0x910 [ 236.675310][ T7711] ? aa_af_perm+0x340/0x340 [ 236.679849][ T7711] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 236.685153][ T7711] ? security_socket_recvmsg+0x85/0xb0 [ 236.690809][ T7711] ? netlink_sendmsg+0xbe0/0xbe0 [ 236.695871][ T7711] ____sys_recvmsg+0x2cd/0x5e0 [ 236.700683][ T7711] ? __sys_recvmsg_sock+0x40/0x40 [ 236.705764][ T7711] ? import_iovec+0x6f/0xa0 [ 236.710031][ T7719] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1062'. [ 236.710298][ T7711] ___sys_recvmsg+0x21a/0x5c0 [ 236.724287][ T7711] ? __sys_recvmsg+0x280/0x280 [ 236.729105][ T7711] ? __lock_acquire+0x7d10/0x7d10 [ 236.734288][ T7711] __x64_sys_recvmsg+0x1f9/0x2c0 [ 236.739271][ T7711] ? ___sys_recvmsg+0x5c0/0x5c0 [ 236.744151][ T7711] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 236.750189][ T7711] ? lockdep_hardirqs_on+0x94/0x140 [ 236.755423][ T7711] do_syscall_64+0x4c/0xa0 [ 236.759865][ T7711] ? clear_bhb_loop+0x30/0x80 [ 236.764562][ T7711] ? clear_bhb_loop+0x30/0x80 [ 236.769266][ T7711] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 236.775184][ T7711] RIP: 0033:0x7fb52709ee59 [ 236.779705][ T7711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.799334][ T7711] RSP: 002b:00007fb5252f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 236.807785][ T7711] RAX: ffffffffffffffda RBX: 00007fb527317fa0 RCX: 00007fb52709ee59 [ 236.815794][ T7711] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 236.823798][ T7711] RBP: 00007fb5252f8090 R08: 0000000000000000 R09: 0000000000000000 [ 236.831894][ T7711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.839982][ T7711] R13: 00007fb527318038 R14: 00007fb527317fa0 R15: 00007ffd7c80d6c8 [ 236.848004][ T7711] [ 237.307764][ T7735] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1070'. [ 238.365834][ T7762] __nla_validate_parse: 3 callbacks suppressed [ 238.365878][ T7762] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1083'. [ 238.895193][ T7799] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1098'. [ 238.940432][ T7794] FAULT_INJECTION: forcing a failure. [ 238.940432][ T7794] name failslab, interval 1, probability 0, space 0, times 0 [ 238.979267][ T7794] CPU: 1 PID: 7794 Comm: syz.0.1096 Not tainted syzkaller #0 [ 238.986717][ T7794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.996980][ T7794] Call Trace: [ 239.000287][ T7794] [ 239.003240][ T7794] dump_stack_lvl+0x188/0x250 [ 239.007950][ T7794] ? show_regs_print_info+0x20/0x20 [ 239.013193][ T7794] ? load_image+0x400/0x400 [ 239.017737][ T7794] ? __might_sleep+0xf0/0xf0 [ 239.022363][ T7794] ? __lock_acquire+0x7d10/0x7d10 [ 239.027427][ T7794] should_fail+0x38c/0x4c0 [ 239.031895][ T7794] should_failslab+0x5/0x20 [ 239.036433][ T7794] slab_pre_alloc_hook+0x51/0xc0 [ 239.041412][ T7794] __kmalloc_node+0x6e/0x3b0 [ 239.046119][ T7794] ? kvmalloc_node+0x84/0x130 [ 239.051080][ T7794] kvmalloc_node+0x84/0x130 [ 239.055618][ T7794] alloc_netdev_mqs+0x618/0xc40 [ 239.060517][ T7794] ipip6_tunnel_locate+0x471/0x670 [ 239.065667][ T7794] ? check_6rd+0x4b0/0x4b0 [ 239.070093][ T7794] ? bpf_lsm_capable+0x5/0x10 [ 239.074777][ T7794] ipip6_tunnel_ctl+0x74c/0x9c0 [ 239.079830][ T7794] ip_tunnel_siocdevprivate+0x134/0x1e0 [ 239.085415][ T7794] ? ip_tunnel_update+0xad0/0xad0 [ 239.090485][ T7794] ipip6_tunnel_siocdevprivate+0x1de/0x1600 [ 239.096429][ T7794] ? rcu_lock_acquire+0x30/0x30 [ 239.101311][ T7794] ? __mutex_lock_common+0x1552/0x2400 [ 239.106806][ T7794] ? sit_tunnel_xmit+0x2350/0x2350 [ 239.111941][ T7794] ? __lock_acquire+0x7d10/0x7d10 [ 239.116966][ T7794] ? do_raw_spin_lock+0x128/0x2f0 [ 239.122008][ T7794] ? __rwlock_init+0x140/0x140 [ 239.126782][ T7794] ? do_raw_spin_unlock+0x11d/0x230 [ 239.132114][ T7794] ? __mutex_lock_common+0x155c/0x2400 [ 239.137597][ T7794] ? full_name_hash+0x8e/0xe0 [ 239.142288][ T7794] dev_ifsioc+0xa30/0xd50 [ 239.146705][ T7794] ? dev_ioctl+0xe30/0xe30 [ 239.151116][ T7794] ? full_name_hash+0x8e/0xe0 [ 239.155819][ T7794] dev_ioctl+0x5df/0xe30 [ 239.160055][ T7794] ? get_user_ifreq+0xc7/0x170 [ 239.164819][ T7794] sock_ioctl+0x691/0x710 [ 239.169143][ T7794] ? sock_poll+0x410/0x410 [ 239.173561][ T7794] ? bpf_lsm_file_ioctl+0x5/0x10 [ 239.178496][ T7794] ? security_file_ioctl+0x7c/0xa0 [ 239.183739][ T7794] ? sock_poll+0x410/0x410 [ 239.188181][ T7794] __se_sys_ioctl+0xfa/0x170 [ 239.192829][ T7794] do_syscall_64+0x4c/0xa0 [ 239.197243][ T7794] ? clear_bhb_loop+0x30/0x80 [ 239.201932][ T7794] ? clear_bhb_loop+0x30/0x80 [ 239.206615][ T7794] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 239.212508][ T7794] RIP: 0033:0x7fa8553dee59 [ 239.216956][ T7794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.236646][ T7794] RSP: 002b:00007fa853638028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.245064][ T7794] RAX: ffffffffffffffda RBX: 00007fa855657fa0 RCX: 00007fa8553dee59 [ 239.253125][ T7794] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000005 [ 239.261100][ T7794] RBP: 00007fa853638090 R08: 0000000000000000 R09: 0000000000000000 [ 239.269162][ T7794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.277127][ T7794] R13: 00007fa855658038 R14: 00007fa855657fa0 R15: 00007ffc2d9e4178 [ 239.285125][ T7794] [ 239.298758][ T7795] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1091'. [ 239.313826][ T7798] validate_nla: 20 callbacks suppressed [ 239.313871][ T7798] netlink: 'syz.3.1097': attribute type 22 has an invalid length. [ 239.353494][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1097'. [ 239.407618][ T7806] netlink: 'syz.3.1097': attribute type 22 has an invalid length. [ 239.502183][ T7813] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1101'. [ 239.702124][ T7824] netlink: 'syz.2.1104': attribute type 21 has an invalid length. [ 239.972717][ T7831] netlink: 'syz.1.1105': attribute type 10 has an invalid length. [ 239.984489][ T7831] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1105'. [ 240.016947][ T7831] device hsr0 entered promiscuous mode [ 240.123092][ T7834] netlink: 'syz.2.1107': attribute type 29 has an invalid length. [ 240.179316][ T7830] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1106'. [ 240.206931][ T7834] netlink: 'syz.2.1107': attribute type 29 has an invalid length. [ 240.215592][ T7837] netlink: 'syz.2.1107': attribute type 29 has an invalid length. [ 240.405876][ T7848] netlink: 'syz.1.1113': attribute type 3 has an invalid length. [ 240.410911][ T7843] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1112'. [ 240.510376][ T7848] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1113'. [ 240.751607][ T7859] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1115'. [ 240.773925][ T7862] netlink: 'syz.3.1118': attribute type 21 has an invalid length. [ 240.788457][ T7864] netlink: 'syz.2.1119': attribute type 9 has an invalid length. [ 241.753943][ T7893] device hsr0 entered promiscuous mode [ 243.486263][ T7931] __nla_validate_parse: 6 callbacks suppressed [ 243.486282][ T7931] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1143'. [ 243.816452][ T7945] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.1144'. [ 243.914308][ T7929] team0: Device hsr_slave_0 failed to register rx_handler [ 244.495604][ T7967] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1154'. [ 244.549717][ T7970] validate_nla: 16 callbacks suppressed [ 244.549741][ T7970] netlink: 'syz.0.1156': attribute type 30 has an invalid length. [ 245.127072][ T7979] netlink: 'syz.0.1159': attribute type 21 has an invalid length. [ 245.377680][ T7997] netlink: 'syz.2.1166': attribute type 29 has an invalid length. [ 245.389945][ T7984] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1160'. [ 245.456334][ T7994] netlink: 'syz.1.1165': attribute type 21 has an invalid length. [ 245.497789][ T7997] netlink: 'syz.2.1166': attribute type 29 has an invalid length. [ 245.506497][ T8002] netlink: 'syz.2.1166': attribute type 29 has an invalid length. [ 245.628123][ T8006] netlink: 'syz.0.1168': attribute type 3 has an invalid length. [ 245.662486][ T8015] tap0: tun_chr_ioctl cmd 2147767521 [ 245.700106][ T8006] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.1168'. [ 246.353015][ T8037] netlink: 'syz.2.1179': attribute type 21 has an invalid length. [ 246.828987][ T8044] netlink: 'syz.0.1181': attribute type 1 has an invalid length. [ 246.868060][ T8044] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1181'. [ 247.107526][ T8053] netlink: 'syz.2.1184': attribute type 29 has an invalid length. [ 247.112710][ T8051] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1182'. [ 247.960622][ T8080] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1194'. [ 248.865797][ T8100] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1200'. [ 248.924746][ T8109] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1200'. [ 248.987859][ T8094] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1208'. [ 249.027949][ T8103] team0: Device hsr_slave_0 failed to register rx_handler [ 249.085219][ T8110] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.1201'. [ 249.903848][ T8123] validate_nla: 15 callbacks suppressed [ 249.903888][ T8123] netlink: 'syz.1.1209': attribute type 21 has an invalid length. [ 250.147732][ T8132] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1212'. [ 250.282938][ T8137] netlink: 'syz.1.1215': attribute type 3 has an invalid length. [ 250.328305][ T8137] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1215'. [ 250.504454][ T8141] netlink: 'syz.4.1216': attribute type 29 has an invalid length. [ 250.654930][ T8151] netlink: 'syz.4.1216': attribute type 2 has an invalid length. [ 250.674730][ T8151] netlink: 'syz.4.1216': attribute type 8 has an invalid length. [ 250.683455][ T8151] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1216'. [ 250.762898][ T8141] netlink: 'syz.4.1216': attribute type 29 has an invalid length. [ 250.869924][ T8146] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1217'. [ 251.015336][ T8158] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1221'. [ 251.217729][ T8164] netlink: 'syz.0.1223': attribute type 21 has an invalid length. [ 251.339082][ T8176] FAULT_INJECTION: forcing a failure. [ 251.339082][ T8176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.375094][ T8176] CPU: 0 PID: 8176 Comm: syz.4.1227 Not tainted syzkaller #0 [ 251.382533][ T8176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 251.392898][ T8176] Call Trace: [ 251.396293][ T8176] [ 251.399244][ T8176] dump_stack_lvl+0x188/0x250 [ 251.403949][ T8176] ? show_regs_print_info+0x20/0x20 [ 251.409152][ T8176] ? load_image+0x400/0x400 [ 251.413681][ T8176] ? __lock_acquire+0x7d10/0x7d10 [ 251.418828][ T8176] should_fail+0x38c/0x4c0 [ 251.423295][ T8176] _copy_to_user+0x2e/0x130 [ 251.427818][ T8176] simple_read_from_buffer+0xe3/0x150 [ 251.433199][ T8176] proc_fail_nth_read+0x1a6/0x220 [ 251.438236][ T8176] ? proc_fault_inject_write+0x310/0x310 [ 251.443878][ T8176] ? fsnotify_perm+0x254/0x560 [ 251.448648][ T8176] ? proc_fault_inject_write+0x310/0x310 [ 251.454285][ T8176] vfs_read+0x301/0xd60 [ 251.458453][ T8176] ? kernel_read+0x1e0/0x1e0 [ 251.463055][ T8176] ? __fget_files+0x40f/0x480 [ 251.467744][ T8176] ? mutex_lock_nested+0x17/0x20 [ 251.472788][ T8176] ? __fdget_pos+0x2bf/0x370 [ 251.477378][ T8176] ? ksys_read+0x71/0x260 [ 251.481710][ T8176] ksys_read+0x152/0x260 [ 251.485960][ T8176] ? vfs_write+0xd60/0xd60 [ 251.490906][ T8176] ? lockdep_hardirqs_on+0x94/0x140 [ 251.496114][ T8176] do_syscall_64+0x4c/0xa0 [ 251.500533][ T8176] ? clear_bhb_loop+0x30/0x80 [ 251.505233][ T8176] ? clear_bhb_loop+0x30/0x80 [ 251.509923][ T8176] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.515819][ T8176] RIP: 0033:0x7fb52705f68e [ 251.520238][ T8176] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 251.539853][ T8176] RSP: 002b:00007fb5252f7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.548401][ T8176] RAX: ffffffffffffffda RBX: 00007fb5252f86c0 RCX: 00007fb52705f68e [ 251.556395][ T8176] RDX: 000000000000000f RSI: 00007fb5252f80a0 RDI: 0000000000000003 [ 251.564377][ T8176] RBP: 00007fb5252f8090 R08: 0000000000000000 R09: 0000000000000000 [ 251.572543][ T8176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.580813][ T8176] R13: 00007fb527318038 R14: 00007fb527317fa0 R15: 00007ffd7c80d6c8 [ 251.588807][ T8176] [ 251.636357][ T8175] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1226'. [ 251.747232][ T8182] netlink: 'syz.0.1230': attribute type 3 has an invalid length. [ 252.034102][ T8190] netlink: 'syz.1.1234': attribute type 29 has an invalid length. [ 252.085752][ T8190] netlink: 'syz.1.1234': attribute type 29 has an invalid length. [ 253.191844][ T8237] device hsr0 entered promiscuous mode [ 253.871151][ T8256] __nla_validate_parse: 6 callbacks suppressed [ 253.871168][ T8256] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1252'. [ 254.046540][ T8257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1253'. [ 254.069172][ T8257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1253'. [ 254.332482][ T8272] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1262'. [ 254.488844][ T8275] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1263'. [ 254.672447][ T8281] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.1266'. [ 254.715836][ T8281] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.1266'. [ 255.080486][ T8290] validate_nla: 24 callbacks suppressed [ 255.080526][ T8290] netlink: 'syz.0.1268': attribute type 21 has an invalid length. [ 255.241804][ T8300] netlink: 'syz.1.1272': attribute type 29 has an invalid length. [ 255.321536][ T8300] netlink: 'syz.1.1272': attribute type 29 has an invalid length. [ 255.429893][ T8304] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1270'. [ 255.513135][ T8300] netlink: 'syz.1.1272': attribute type 2 has an invalid length. [ 255.536130][ T8300] netlink: 'syz.1.1272': attribute type 8 has an invalid length. [ 255.598636][ T8300] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1272'. [ 255.671895][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.678310][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.741763][ T8305] netlink: 'syz.1.1272': attribute type 2 has an invalid length. [ 255.779443][ T8305] netlink: 'syz.1.1272': attribute type 8 has an invalid length. [ 255.838490][ T8305] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1272'. [ 256.014021][ T8314] FAULT_INJECTION: forcing a failure. [ 256.014021][ T8314] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 256.067369][ T8314] CPU: 1 PID: 8314 Comm: syz.2.1277 Not tainted syzkaller #0 [ 256.074813][ T8314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.084901][ T8314] Call Trace: [ 256.088207][ T8314] [ 256.091166][ T8314] dump_stack_lvl+0x188/0x250 [ 256.095877][ T8314] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 256.102063][ T8314] ? show_regs_print_info+0x20/0x20 [ 256.107285][ T8314] ? load_image+0x400/0x400 [ 256.111892][ T8314] should_fail+0x38c/0x4c0 [ 256.116348][ T8314] prepare_alloc_pages+0x1e4/0x5f0 [ 256.121503][ T8314] __alloc_pages+0x11b/0x480 [ 256.126133][ T8314] ? zone_statistics+0x170/0x170 [ 256.131106][ T8314] ? __lock_acquire+0x13bc/0x7d10 [ 256.136174][ T8314] alloc_pages_vma+0x393/0x7c0 [ 256.140970][ T8314] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 256.146808][ T8314] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 256.152488][ T8314] ? shmem_swapin_page+0x2300/0x2300 [ 256.157885][ T8314] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 256.163939][ T8314] ? __lock_acquire+0x7d10/0x7d10 [ 256.169092][ T8314] ? pagecache_get_page+0x348/0xf10 [ 256.174333][ T8314] ? pagecache_get_page+0xc27/0xf10 [ 256.179567][ T8314] ? page_cache_prev_miss+0x380/0x380 [ 256.184978][ T8314] ? mark_lock+0x94/0x320 [ 256.189342][ T8314] shmem_getpage_gfp+0x14f4/0x2d40 [ 256.194516][ T8314] shmem_write_begin+0xcd/0x1a0 [ 256.199491][ T8314] generic_perform_write+0x2b6/0x550 [ 256.205013][ T8314] ? grab_cache_page_write_begin+0xa0/0xa0 [ 256.210859][ T8314] ? file_remove_privs+0x5d0/0x5d0 [ 256.216003][ T8314] ? rwsem_write_trylock+0x135/0x1c0 [ 256.221328][ T8314] ? clear_nonspinnable+0x60/0x60 [ 256.226390][ T8314] __generic_file_write_iter+0x25f/0x4e0 [ 256.232346][ T8314] generic_file_write_iter+0xa6/0x1b0 [ 256.237832][ T8314] vfs_write+0x745/0xd60 [ 256.242102][ T8314] ? file_end_write+0x250/0x250 [ 256.247126][ T8314] ? rcu_nmi_exit+0x6f/0xf0 [ 256.251753][ T8314] ? __fget_files+0x40f/0x480 [ 256.256466][ T8314] ? mutex_lock_nested+0x17/0x20 [ 256.261426][ T8314] ? __fdget_pos+0x2bf/0x370 [ 256.266136][ T8314] ? ksys_write+0x71/0x260 [ 256.270582][ T8314] ksys_write+0x152/0x260 [ 256.274943][ T8314] ? __ia32_sys_read+0x80/0x80 [ 256.279734][ T8314] ? syscall_enter_from_user_mode+0x2a/0x70 [ 256.285915][ T8314] do_syscall_64+0x4c/0xa0 [ 256.290360][ T8314] ? clear_bhb_loop+0x30/0x80 [ 256.295057][ T8314] ? clear_bhb_loop+0x30/0x80 [ 256.299756][ T8314] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.305668][ T8314] RIP: 0033:0x7f26558a7e59 [ 256.310104][ T8314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.329742][ T8314] RSP: 002b:00007f2653b01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 256.338201][ T8314] RAX: ffffffffffffffda RBX: 00007f2655b20fa0 RCX: 00007f26558a7e59 [ 256.346195][ T8314] RDX: 0000000000001001 RSI: 0000200000000100 RDI: 0000000000000007 [ 256.354187][ T8314] RBP: 00007f2653b01090 R08: 0000000000000000 R09: 0000000000000000 [ 256.362179][ T8314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.370172][ T8314] R13: 00007f2655b21038 R14: 00007f2655b20fa0 R15: 00007ffcc7ef6cd8 [ 256.378201][ T8314] [ 256.649447][ T8325] netlink: 'syz.0.1280': attribute type 3 has an invalid length. [ 257.538048][ T8342] netlink: 'syz.0.1296': attribute type 3 has an invalid length. [ 257.612580][ T8345] netlink: 'syz.2.1286': attribute type 21 has an invalid length. [ 257.866102][ T8347] team0: Device hsr_slave_0 failed to register rx_handler [ 259.035352][ T8375] __nla_validate_parse: 8 callbacks suppressed [ 259.035393][ T8375] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1295'. [ 259.122844][ T8392] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1300'. [ 259.456515][ T8395] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1304'. [ 259.498763][ T8398] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1304'. [ 259.974152][ T8422] netlink: 184904 bytes leftover after parsing attributes in process `syz.4.1306'. [ 260.178826][ T8413] validate_nla: 28 callbacks suppressed [ 260.178845][ T8413] netlink: 'syz.4.1306': attribute type 10 has an invalid length. [ 260.198804][ T8413] team0: Device hsr_slave_0 failed to register rx_handler [ 260.840989][ T8447] netlink: 'syz.4.1318': attribute type 3 has an invalid length. [ 260.927660][ T8447] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1318'. [ 261.083745][ T8446] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1313'. [ 261.192384][ T8455] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1319'. [ 261.395221][ T8455] netlink: 'syz.3.1319': attribute type 1 has an invalid length. [ 261.403280][ T8455] netlink: 16520 bytes leftover after parsing attributes in process `syz.3.1319'. [ 261.416115][ T8454] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1320'. [ 261.525304][ T8458] netlink: 'syz.1.1321': attribute type 21 has an invalid length. [ 262.110180][ T8489] netlink: 'syz.2.1332': attribute type 3 has an invalid length. [ 262.501037][ T8500] netlink: 'syz.2.1335': attribute type 21 has an invalid length. [ 263.222825][ T8524] netlink: 'syz.3.1345': attribute type 3 has an invalid length. [ 263.950299][ T8542] netlink: 'syz.1.1349': attribute type 21 has an invalid length. [ 264.126284][ T8555] __nla_validate_parse: 3 callbacks suppressed [ 264.126304][ T8555] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1354'. [ 264.235950][ T8555] netlink: 'syz.1.1354': attribute type 16 has an invalid length. [ 264.310224][ T8555] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1354'. [ 264.389034][ T8553] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1353'. [ 264.576751][ T8568] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1356'. [ 265.086803][ T8583] netlink: 'syz.3.1364': attribute type 21 has an invalid length. [ 265.165575][ T8577] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1361'. [ 265.440971][ T8596] netlink: 'syz.3.1369': attribute type 29 has an invalid length. [ 265.461830][ T8596] netlink: 'syz.3.1369': attribute type 29 has an invalid length. [ 265.531149][ T8599] netlink: 'syz.3.1369': attribute type 2 has an invalid length. [ 265.565776][ T8599] netlink: 'syz.3.1369': attribute type 8 has an invalid length. [ 265.587993][ T8599] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1369'. [ 265.608617][ T8596] netlink: 'syz.3.1369': attribute type 2 has an invalid length. [ 265.636356][ T8596] netlink: 'syz.3.1369': attribute type 8 has an invalid length. [ 265.656792][ T8596] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1369'. [ 266.167169][ T8626] netlink: 'syz.3.1380': attribute type 21 has an invalid length. [ 266.547316][ T8641] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1385'. [ 266.750576][ T8649] netlink: 'syz.4.1389': attribute type 2 has an invalid length. [ 266.885041][ T8649] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1389'. [ 267.239616][ T8668] netlink: 'syz.1.1395': attribute type 21 has an invalid length. [ 267.836945][ T8691] netlink: 'syz.2.1405': attribute type 46 has an invalid length. [ 267.891604][ T8697] team0: Device veth1_vlan failed to register rx_handler [ 267.995109][ T8696] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1408'. [ 268.857338][ T8726] team0: Device veth1_vlan failed to register rx_handler [ 269.206766][ T8744] __nla_validate_parse: 2 callbacks suppressed [ 269.206786][ T8744] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1424'. [ 269.875440][ T8771] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1438'. [ 270.272457][ T8788] FAULT_INJECTION: forcing a failure. [ 270.272457][ T8788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.380399][ T8788] CPU: 1 PID: 8788 Comm: syz.4.1443 Not tainted syzkaller #0 [ 270.387874][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 270.398160][ T8788] Call Trace: [ 270.401467][ T8788] [ 270.404429][ T8788] dump_stack_lvl+0x188/0x250 [ 270.409192][ T8788] ? show_regs_print_info+0x20/0x20 [ 270.414438][ T8788] ? load_image+0x400/0x400 [ 270.419084][ T8788] ? __lock_acquire+0x7d10/0x7d10 [ 270.424163][ T8788] should_fail+0x38c/0x4c0 [ 270.428623][ T8788] _copy_from_user+0x2e/0x170 [ 270.433346][ T8788] generic_map_lookup_batch+0x483/0xbc0 [ 270.438954][ T8788] ? bpf_map_update_value+0x650/0x650 [ 270.444392][ T8788] ? __fdget+0x18b/0x210 [ 270.448680][ T8788] ? bpf_map_update_value+0x650/0x650 [ 270.454088][ T8788] bpf_map_do_batch+0x2c8/0x600 [ 270.458983][ T8788] ? bpf_lsm_bpf+0x5/0x10 [ 270.463346][ T8788] ? security_bpf+0x7a/0xa0 [ 270.467989][ T8788] __sys_bpf+0x671/0x6f0 [ 270.472301][ T8788] ? bpf_link_show_fdinfo+0x380/0x380 [ 270.477728][ T8788] ? vtime_user_exit+0x2c8/0x3e0 [ 270.482715][ T8788] __x64_sys_bpf+0x78/0x90 [ 270.487337][ T8788] do_syscall_64+0x4c/0xa0 [ 270.491885][ T8788] ? clear_bhb_loop+0x30/0x80 [ 270.496598][ T8788] ? clear_bhb_loop+0x30/0x80 [ 270.501344][ T8788] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.507270][ T8788] RIP: 0033:0x7fb52709ee59 [ 270.511751][ T8788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.531497][ T8788] RSP: 002b:00007fb5252f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 270.540031][ T8788] RAX: ffffffffffffffda RBX: 00007fb527317fa0 RCX: 00007fb52709ee59 [ 270.548041][ T8788] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 0000000000000018 [ 270.556043][ T8788] RBP: 00007fb5252f8090 R08: 0000000000000000 R09: 0000000000000000 [ 270.564070][ T8788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.572075][ T8788] R13: 00007fb527318038 R14: 00007fb527317fa0 R15: 00007ffd7c80d6c8 [ 270.580096][ T8788] [ 270.715013][ T8791] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1440'. [ 271.239955][ T8819] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1454'. [ 271.283168][ T8810] validate_nla: 5 callbacks suppressed [ 271.283840][ T8810] netlink: 'syz.4.1453': attribute type 10 has an invalid length. [ 271.789938][ T8830] netlink: 'syz.1.1461': attribute type 3 has an invalid length. [ 271.837713][ T8832] netlink: 'syz.0.1459': attribute type 21 has an invalid length. [ 271.842864][ T8830] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1461'. [ 271.903664][ T8837] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1461'. [ 272.446534][ T8851] netlink: 'syz.0.1475': attribute type 21 has an invalid length. [ 272.504101][ T8854] netlink: 'syz.4.1467': attribute type 3 has an invalid length. [ 272.512083][ T8854] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1467'. [ 273.197876][ T8867] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1465'. [ 273.222731][ T8869] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1472'. [ 273.504510][ T8873] netlink: 'syz.2.1474': attribute type 2 has an invalid length. [ 273.531003][ T8873] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1474'. [ 273.727210][ T8886] netlink: 'syz.3.1481': attribute type 21 has an invalid length. [ 273.771802][ T8890] netlink: 'syz.1.1482': attribute type 3 has an invalid length. [ 274.385536][ T8907] __nla_validate_parse: 1 callbacks suppressed [ 274.385556][ T8907] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1488'. [ 274.972506][ T8925] netlink: 'syz.2.1496': attribute type 3 has an invalid length. [ 274.976281][ T8923] netlink: 'syz.1.1494': attribute type 21 has an invalid length. [ 274.995519][ T8925] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1496'. [ 275.256074][ T8944] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1503'. [ 275.669408][ T8968] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1511'. [ 276.117224][ T8986] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1519'. [ 276.129791][ T8989] netlink: 'syz.1.1521': attribute type 11 has an invalid length. [ 276.192145][ T8990] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1522'. [ 276.200201][ T8989] netlink: 212832 bytes leftover after parsing attributes in process `syz.1.1521'. [ 276.205071][ T8990] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1522'. [ 276.533842][ T9001] netlink: 'syz.3.1524': attribute type 11 has an invalid length. [ 276.577034][ T9001] netlink: 212832 bytes leftover after parsing attributes in process `syz.3.1524'. [ 276.685022][ T9008] FAULT_INJECTION: forcing a failure. [ 276.685022][ T9008] name failslab, interval 1, probability 0, space 0, times 0 [ 276.798409][ T9009] validate_nla: 5 callbacks suppressed [ 276.798451][ T9009] netlink: 'syz.1.1528': attribute type 21 has an invalid length. [ 276.818427][ T9008] CPU: 1 PID: 9008 Comm: syz.0.1527 Not tainted syzkaller #0 [ 276.825957][ T9008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.836045][ T9008] Call Trace: [ 276.839355][ T9008] [ 276.842509][ T9008] dump_stack_lvl+0x188/0x250 [ 276.847221][ T9008] ? show_regs_print_info+0x20/0x20 [ 276.852536][ T9008] ? load_image+0x400/0x400 [ 276.857169][ T9008] should_fail+0x38c/0x4c0 [ 276.861623][ T9008] should_failslab+0x5/0x20 [ 276.866246][ T9008] slab_pre_alloc_hook+0x51/0xc0 [ 276.871229][ T9008] kmem_cache_alloc_node+0x47/0x2d0 [ 276.876545][ T9008] ? __alloc_skb+0xf4/0x750 [ 276.881092][ T9008] __alloc_skb+0xf4/0x750 [ 276.885480][ T9008] alloc_skb_with_frags+0xa7/0x730 [ 276.889829][ T9015] netlink: 'syz.4.1529': attribute type 3 has an invalid length. [ 276.890889][ T9008] ? sock_alloc_send_pskb+0x23a/0x9a0 [ 276.904196][ T9008] sock_alloc_send_pskb+0x87f/0x9a0 [ 276.909513][ T9008] ? __might_fault+0xb3/0x110 [ 276.914233][ T9008] ? sock_kzfree_s+0x50/0x50 [ 276.918858][ T9008] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 276.925070][ T9008] packet_sendmsg+0x343c/0x5060 [ 276.930171][ T9008] ? __might_sleep+0xf0/0xf0 [ 276.934861][ T9008] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 276.940893][ T9008] ? aa_sk_perm+0x7dc/0x910 [ 276.945422][ T9008] ? packet_getsockopt+0x9a0/0x9a0 [ 276.950775][ T9008] ? aa_sock_msg_perm+0x94/0x150 [ 276.955749][ T9008] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 276.961509][ T9008] ? security_socket_sendmsg+0x7c/0xa0 [ 276.967100][ T9008] ? packet_getsockopt+0x9a0/0x9a0 [ 276.972240][ T9008] ____sys_sendmsg+0x5b7/0x8f0 [ 276.977117][ T9008] ? __sys_sendmsg_sock+0x30/0x30 [ 276.982311][ T9008] ? import_iovec+0x6f/0xa0 [ 276.986916][ T9008] ___sys_sendmsg+0x236/0x2e0 [ 276.991612][ T9008] ? __sys_sendmsg+0x2a0/0x2a0 [ 276.996393][ T9008] ? ktime_get_real_ts64+0x440/0x440 [ 277.001727][ T9008] __se_sys_sendmsg+0x1af/0x290 [ 277.006612][ T9008] ? __x64_sys_sendmsg+0x80/0x80 [ 277.011573][ T9008] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 277.017663][ T9008] ? lockdep_hardirqs_on+0x94/0x140 [ 277.022905][ T9008] do_syscall_64+0x4c/0xa0 [ 277.027332][ T9008] ? clear_bhb_loop+0x30/0x80 [ 277.032185][ T9008] ? clear_bhb_loop+0x30/0x80 [ 277.036869][ T9008] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.042856][ T9008] RIP: 0033:0x7fa8553dee59 [ 277.047277][ T9008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.066890][ T9008] RSP: 002b:00007fa853638028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.075333][ T9008] RAX: ffffffffffffffda RBX: 00007fa855657fa0 RCX: 00007fa8553dee59 [ 277.083537][ T9008] RDX: 0000000024040849 RSI: 00002000000000c0 RDI: 0000000000000004 [ 277.092143][ T9008] RBP: 00007fa853638090 R08: 0000000000000000 R09: 0000000000000000 [ 277.100160][ T9008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.108399][ T9008] R13: 00007fa855658038 R14: 00007fa855657fa0 R15: 00007ffc2d9e4178 [ 277.116391][ T9008] [ 277.202153][ T9015] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1529'. [ 277.634667][ T9040] FAULT_INJECTION: forcing a failure. [ 277.634667][ T9040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.685624][ T9040] CPU: 1 PID: 9040 Comm: syz.2.1541 Not tainted syzkaller #0 [ 277.693064][ T9040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.703253][ T9040] Call Trace: [ 277.706646][ T9040] [ 277.709597][ T9040] dump_stack_lvl+0x188/0x250 [ 277.714295][ T9040] ? show_regs_print_info+0x20/0x20 [ 277.719596][ T9040] ? load_image+0x400/0x400 [ 277.724209][ T9040] ? __lock_acquire+0x7d10/0x7d10 [ 277.729513][ T9040] should_fail+0x38c/0x4c0 [ 277.733951][ T9040] _copy_from_iter+0x22e/0x1170 [ 277.738820][ T9040] ? __lock_acquire+0x7d10/0x7d10 [ 277.743954][ T9040] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 277.749371][ T9040] ? __virt_addr_valid+0x3c6/0x470 [ 277.754501][ T9040] ? __phys_addr_symbol+0x2b/0x70 [ 277.759526][ T9040] ? __check_object_size+0x30c/0x410 [ 277.765119][ T9040] netlink_sendmsg+0x758/0xbe0 [ 277.769905][ T9040] ? netlink_getsockopt+0x570/0x570 [ 277.775137][ T9040] ? aa_sock_msg_perm+0x94/0x150 [ 277.780632][ T9040] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 277.785938][ T9040] ? security_socket_sendmsg+0x7c/0xa0 [ 277.791429][ T9040] ? netlink_getsockopt+0x570/0x570 [ 277.796638][ T9040] ____sys_sendmsg+0x5b7/0x8f0 [ 277.801439][ T9040] ? __sys_sendmsg_sock+0x30/0x30 [ 277.806580][ T9040] ? import_iovec+0x6f/0xa0 [ 277.811207][ T9040] ___sys_sendmsg+0x236/0x2e0 [ 277.815910][ T9040] ? __sys_sendmsg+0x2a0/0x2a0 [ 277.820703][ T9040] ? trace_event_raw_event_lock+0x270/0x270 [ 277.826689][ T9040] ? vfs_write+0x8b2/0xd60 [ 277.831242][ T9040] __se_sys_sendmsg+0x1af/0x290 [ 277.836292][ T9040] ? __x64_sys_sendmsg+0x80/0x80 [ 277.841334][ T9040] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 277.847442][ T9040] ? lockdep_hardirqs_on+0x94/0x140 [ 277.852669][ T9040] do_syscall_64+0x4c/0xa0 [ 277.857093][ T9040] ? clear_bhb_loop+0x30/0x80 [ 277.861774][ T9040] ? clear_bhb_loop+0x30/0x80 [ 277.866460][ T9040] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.872372][ T9040] RIP: 0033:0x7f26558a7e59 [ 277.876807][ T9040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.896518][ T9040] RSP: 002b:00007f2653b01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.904978][ T9040] RAX: ffffffffffffffda RBX: 00007f2655b20fa0 RCX: 00007f26558a7e59 [ 277.912987][ T9040] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 277.921155][ T9040] RBP: 00007f2653b01090 R08: 0000000000000000 R09: 0000000000000000 [ 277.929307][ T9040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.937280][ T9040] R13: 00007f2655b21038 R14: 00007f2655b20fa0 R15: 00007ffcc7ef6cd8 [ 277.945370][ T9040] [ 278.333440][ T9052] netlink: 'syz.3.1548': attribute type 21 has an invalid length. [ 278.337412][ T9055] netlink: 'syz.1.1549': attribute type 3 has an invalid length. [ 278.653716][ T9066] netlink: 'syz.0.1555': attribute type 6 has an invalid length. [ 279.130159][ T9067] netlink: 'syz.2.1554': attribute type 10 has an invalid length. [ 279.315188][ T9073] delete_channel: no stack [ 279.483434][ T9068] __nla_validate_parse: 6 callbacks suppressed [ 279.483785][ T9068] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1552'. [ 279.753377][ T9092] netlink: 'syz.4.1563': attribute type 3 has an invalid length. [ 279.889533][ T9092] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1563'. [ 279.930144][ T9096] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1564'. [ 280.502432][ T9107] FAULT_INJECTION: forcing a failure. [ 280.502432][ T9107] name failslab, interval 1, probability 0, space 0, times 0 [ 280.585535][ T9106] netlink: 'syz.2.1568': attribute type 10 has an invalid length. [ 280.585749][ T9107] CPU: 1 PID: 9107 Comm: syz.0.1569 Not tainted syzkaller #0 [ 280.600928][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 280.611010][ T9107] Call Trace: [ 280.614319][ T9107] [ 280.617266][ T9107] dump_stack_lvl+0x188/0x250 [ 280.621972][ T9107] ? show_regs_print_info+0x20/0x20 [ 280.627182][ T9107] ? load_image+0x400/0x400 [ 280.631703][ T9107] ? __lock_acquire+0x7d10/0x7d10 [ 280.636757][ T9107] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 280.642896][ T9107] should_fail+0x38c/0x4c0 [ 280.647381][ T9107] should_failslab+0x5/0x20 [ 280.651918][ T9107] slab_pre_alloc_hook+0x51/0xc0 [ 280.656892][ T9107] __kmalloc+0x6b/0x330 [ 280.661204][ T9107] ? sk_prot_alloc+0xe7/0x210 [ 280.665907][ T9107] sk_prot_alloc+0xe7/0x210 [ 280.670436][ T9107] ? sk_alloc+0x1d/0x310 [ 280.674707][ T9107] sk_alloc+0x2f/0x310 [ 280.678972][ T9107] bpf_prog_test_run_skb+0x240/0x1180 [ 280.684390][ T9107] ? __fget_files+0x40f/0x480 [ 280.689104][ T9107] ? cpu_online+0x60/0x60 [ 280.693458][ T9107] bpf_prog_test_run+0x31e/0x390 [ 280.698429][ T9107] __sys_bpf+0x5a5/0x6f0 [ 280.702701][ T9107] ? bpf_link_show_fdinfo+0x380/0x380 [ 280.708106][ T9107] ? vtime_user_exit+0x2c8/0x3e0 [ 280.713082][ T9107] __x64_sys_bpf+0x78/0x90 [ 280.717520][ T9107] do_syscall_64+0x4c/0xa0 [ 280.721957][ T9107] ? clear_bhb_loop+0x30/0x80 [ 280.726669][ T9107] ? clear_bhb_loop+0x30/0x80 [ 280.731404][ T9107] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.737405][ T9107] RIP: 0033:0x7fa8553dee59 [ 280.741851][ T9107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.761474][ T9107] RSP: 002b:00007fa853638028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.770036][ T9107] RAX: ffffffffffffffda RBX: 00007fa855657fa0 RCX: 00007fa8553dee59 [ 280.778046][ T9107] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 280.786044][ T9107] RBP: 00007fa853638090 R08: 0000000000000000 R09: 0000000000000000 [ 280.794036][ T9107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.802023][ T9107] R13: 00007fa855658038 R14: 00007fa855657fa0 R15: 00007ffc2d9e4178 [ 280.810047][ T9107] [ 280.874671][ T9106] team0: Device hsr_slave_0 failed to register rx_handler [ 281.165365][ T9117] netlink: 'syz.3.1572': attribute type 10 has an invalid length. [ 281.579390][ T9124] netlink: 'syz.0.1574': attribute type 29 has an invalid length. [ 281.845461][ T9132] validate_nla: 4 callbacks suppressed [ 281.845478][ T9132] netlink: 'syz.2.1575': attribute type 29 has an invalid length. [ 282.027412][ T9132] netlink: 'syz.2.1575': attribute type 29 has an invalid length. [ 282.081000][ T9131] netlink: 'syz.1.1576': attribute type 21 has an invalid length. [ 282.258457][ T9127] netlink: 'syz.2.1575': attribute type 2 has an invalid length. [ 282.278621][ T9127] netlink: 'syz.2.1575': attribute type 8 has an invalid length. [ 282.286990][ T9127] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1575'. [ 282.402691][ T9129] netlink: 'syz.2.1575': attribute type 2 has an invalid length. [ 282.414078][ T9129] netlink: 'syz.2.1575': attribute type 8 has an invalid length. [ 282.435368][ T9129] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1575'. [ 282.471228][ T9144] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1580'. [ 282.779386][ T9160] netlink: 'syz.0.1585': attribute type 21 has an invalid length. [ 282.844218][ T9153] netlink: 'syz.2.1586': attribute type 9 has an invalid length. [ 282.865561][ T9153] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.1586'. [ 282.909804][ T9162] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 283.379740][ T9161] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1587'. [ 283.967382][ T9174] netlink: 'syz.4.1590': attribute type 21 has an invalid length. [ 286.511105][ T9196] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1597'. [ 286.520582][ T9205] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1605'. [ 286.531943][ T9198] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1596'. [ 286.542277][ T9194] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1596'. [ 286.721742][ T9217] FAULT_INJECTION: forcing a failure. [ 286.721742][ T9217] name failslab, interval 1, probability 0, space 0, times 0 [ 286.770900][ T9217] CPU: 0 PID: 9217 Comm: syz.4.1602 Not tainted syzkaller #0 [ 286.778422][ T9217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.788509][ T9217] Call Trace: [ 286.791811][ T9217] [ 286.794762][ T9217] dump_stack_lvl+0x188/0x250 [ 286.799473][ T9217] ? show_regs_print_info+0x20/0x20 [ 286.804920][ T9217] ? load_image+0x400/0x400 [ 286.809549][ T9217] ? __might_sleep+0xf0/0xf0 [ 286.814171][ T9217] ? __lock_acquire+0x7d10/0x7d10 [ 286.819233][ T9217] should_fail+0x38c/0x4c0 [ 286.823682][ T9217] should_failslab+0x5/0x20 [ 286.828217][ T9217] slab_pre_alloc_hook+0x51/0xc0 [ 286.833185][ T9217] kmem_cache_alloc_node+0x47/0x2d0 [ 286.838410][ T9217] ? __alloc_skb+0xf4/0x750 [ 286.842952][ T9217] __alloc_skb+0xf4/0x750 [ 286.847315][ T9217] ? apparmor_socket_getpeersec_dgram+0x5/0x10 [ 286.853672][ T9217] netlink_sendmsg+0x654/0xbe0 [ 286.858479][ T9217] ? netlink_getsockopt+0x570/0x570 [ 286.863704][ T9217] ? aa_sock_msg_perm+0x94/0x150 [ 286.868662][ T9217] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 286.873965][ T9217] ? security_socket_sendmsg+0x7c/0xa0 [ 286.879442][ T9217] ? netlink_getsockopt+0x570/0x570 [ 286.884648][ T9217] ____sys_sendmsg+0x5b7/0x8f0 [ 286.889435][ T9217] ? __sys_sendmsg_sock+0x30/0x30 [ 286.894479][ T9217] ? import_iovec+0x6f/0xa0 [ 286.899100][ T9217] ___sys_sendmsg+0x236/0x2e0 [ 286.903884][ T9217] ? __sys_sendmsg+0x2a0/0x2a0 [ 286.908669][ T9217] ? vfs_write+0x8b2/0xd60 [ 286.913194][ T9217] __se_sys_sendmsg+0x1af/0x290 [ 286.918167][ T9217] ? __x64_sys_sendmsg+0x80/0x80 [ 286.923323][ T9217] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 286.929408][ T9217] ? lockdep_hardirqs_on+0x94/0x140 [ 286.934618][ T9217] do_syscall_64+0x4c/0xa0 [ 286.939050][ T9217] ? clear_bhb_loop+0x30/0x80 [ 286.943728][ T9217] ? clear_bhb_loop+0x30/0x80 [ 286.948425][ T9217] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.954355][ T9217] RIP: 0033:0x7fb52709ee59 [ 286.958813][ T9217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.978429][ T9217] RSP: 002b:00007fb5252d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.986854][ T9217] RAX: ffffffffffffffda RBX: 00007fb527318090 RCX: 00007fb52709ee59 [ 286.994832][ T9217] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 287.002819][ T9217] RBP: 00007fb5252d7090 R08: 0000000000000000 R09: 0000000000000000 [ 287.010826][ T9217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.018815][ T9217] R13: 00007fb527318128 R14: 00007fb527318090 R15: 00007ffd7c80d6c8 [ 287.026811][ T9217] [ 287.453596][ T9243] validate_nla: 9 callbacks suppressed [ 287.453616][ T9243] netlink: 'syz.1.1614': attribute type 29 has an invalid length. [ 288.183422][ T9243] netlink: 'syz.1.1614': attribute type 29 has an invalid length. [ 288.231788][ T9238] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1612'. [ 288.591076][ T9261] netlink: 'syz.1.1618': attribute type 21 has an invalid length. [ 289.454613][ T9286] netlink: 'syz.3.1626': attribute type 9 has an invalid length. [ 289.489315][ T9286] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1626'. [ 290.059247][ T9297] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1630'. [ 290.083053][ T9299] netlink: 'syz.1.1629': attribute type 29 has an invalid length. [ 290.096091][ T9301] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1631'. [ 290.120673][ T9301] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1631'. [ 290.131661][ T9299] netlink: 'syz.1.1629': attribute type 29 has an invalid length. [ 290.146952][ T9305] netlink: 'syz.1.1629': attribute type 29 has an invalid length. [ 290.395628][ T9309] netlink: 'syz.2.1633': attribute type 21 has an invalid length. [ 290.561602][ T9322] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1635'. [ 291.311878][ T9343] netlink: 'syz.3.1646': attribute type 29 has an invalid length. [ 291.344001][ T9343] netlink: 'syz.3.1646': attribute type 29 has an invalid length. [ 292.236941][ T9370] __nla_validate_parse: 2 callbacks suppressed [ 292.236960][ T9370] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1652'. [ 292.317023][ T9381] FAULT_INJECTION: forcing a failure. [ 292.317023][ T9381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.335942][ T9381] CPU: 1 PID: 9381 Comm: syz.3.1659 Not tainted syzkaller #0 [ 292.343457][ T9381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 292.353529][ T9381] Call Trace: [ 292.356812][ T9381] [ 292.359744][ T9381] dump_stack_lvl+0x188/0x250 [ 292.364434][ T9381] ? show_regs_print_info+0x20/0x20 [ 292.369636][ T9381] ? load_image+0x400/0x400 [ 292.374278][ T9381] ? __lock_acquire+0x7d10/0x7d10 [ 292.379315][ T9381] should_fail+0x38c/0x4c0 [ 292.383740][ T9381] _copy_to_iter+0x22e/0x1180 [ 292.388422][ T9381] ? __lock_acquire+0x7d10/0x7d10 [ 292.393454][ T9381] ? iov_iter_init+0x170/0x170 [ 292.398242][ T9381] ? __virt_addr_valid+0x3c6/0x470 [ 292.403354][ T9381] ? __phys_addr_symbol+0x2b/0x70 [ 292.408376][ T9381] ? __check_object_size+0x30c/0x410 [ 292.413675][ T9381] __skb_datagram_iter+0xde/0x740 [ 292.418709][ T9381] ? skb_copy_datagram_iter+0x1f0/0x1f0 [ 292.424315][ T9381] skb_copy_datagram_iter+0xad/0x1f0 [ 292.429612][ T9381] netlink_recvmsg+0x2d6/0xe20 [ 292.434425][ T9381] ? netlink_sendmsg+0xbe0/0xbe0 [ 292.439392][ T9381] ? aa_sk_perm+0x7dc/0x910 [ 292.443906][ T9381] ? aa_af_perm+0x340/0x340 [ 292.448528][ T9381] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 292.454076][ T9381] ? security_socket_recvmsg+0x85/0xb0 [ 292.459535][ T9381] ? netlink_sendmsg+0xbe0/0xbe0 [ 292.464562][ T9381] ____sys_recvmsg+0x2cd/0x5e0 [ 292.469333][ T9381] ? __might_fault+0xb3/0x110 [ 292.474016][ T9381] ? __sys_recvmsg_sock+0x40/0x40 [ 292.479061][ T9381] ? import_iovec+0x6f/0xa0 [ 292.483677][ T9381] ___sys_recvmsg+0x21a/0x5c0 [ 292.488480][ T9381] ? __sys_recvmsg+0x280/0x280 [ 292.493251][ T9381] ? __lock_acquire+0x7d10/0x7d10 [ 292.498390][ T9381] __x64_sys_recvmsg+0x1f9/0x2c0 [ 292.503337][ T9381] ? ___sys_recvmsg+0x5c0/0x5c0 [ 292.508188][ T9381] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 292.514180][ T9381] ? lockdep_hardirqs_on+0x94/0x140 [ 292.519432][ T9381] do_syscall_64+0x4c/0xa0 [ 292.523855][ T9381] ? clear_bhb_loop+0x30/0x80 [ 292.528536][ T9381] ? clear_bhb_loop+0x30/0x80 [ 292.533214][ T9381] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 292.539109][ T9381] RIP: 0033:0x7f7e982ade59 [ 292.543705][ T9381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.563312][ T9381] RSP: 002b:00007f7e96507028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 292.571819][ T9381] RAX: ffffffffffffffda RBX: 00007f7e98526fa0 RCX: 00007f7e982ade59 [ 292.579791][ T9381] RDX: 0000000040012100 RSI: 0000200000000000 RDI: 0000000000000003 [ 292.587768][ T9381] RBP: 00007f7e96507090 R08: 0000000000000000 R09: 0000000000000000 [ 292.595743][ T9381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.603715][ T9381] R13: 00007f7e98527038 R14: 00007f7e98526fa0 R15: 00007fffd1c67498 [ 292.611702][ T9381] [ 292.656529][ T9383] validate_nla: 8 callbacks suppressed [ 292.656549][ T9383] netlink: 'syz.2.1660': attribute type 29 has an invalid length. [ 292.678619][ T9381] netlink: 'syz.3.1659': attribute type 29 has an invalid length. [ 292.704552][ T9384] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1660'. [ 292.715166][ T9383] netlink: 'syz.2.1660': attribute type 29 has an invalid length. [ 292.873663][ T9386] netlink: 'syz.4.1661': attribute type 2 has an invalid length. [ 292.891227][ T9390] netlink: 'syz.3.1663': attribute type 29 has an invalid length. [ 292.923206][ T9386] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1661'. [ 293.008726][ T9390] netlink: 'syz.3.1663': attribute type 29 has an invalid length. [ 293.147364][ T9393] netlink: 'syz.3.1663': attribute type 29 has an invalid length. [ 293.241382][ T9391] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1662'. [ 293.386297][ T9402] netlink: 'syz.0.1665': attribute type 21 has an invalid length. [ 293.504202][ T9401] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1666'. [ 293.892474][ T9424] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1674'. [ 293.994709][ T9423] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1672'. [ 294.622316][ T9438] netlink: 'syz.4.1677': attribute type 29 has an invalid length. [ 294.814516][ T9438] netlink: 'syz.4.1677': attribute type 29 has an invalid length. [ 295.299836][ T9454] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1682'. [ 295.332813][ T9456] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1681'. [ 296.120121][ T9478] FAULT_INJECTION: forcing a failure. [ 296.120121][ T9478] name failslab, interval 1, probability 0, space 0, times 0 [ 296.237335][ T9478] CPU: 0 PID: 9478 Comm: syz.0.1690 Not tainted syzkaller #0 [ 296.241059][ T9484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1693'. [ 296.244862][ T9478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 296.244881][ T9478] Call Trace: [ 296.267307][ T9478] [ 296.270272][ T9478] dump_stack_lvl+0x188/0x250 [ 296.274983][ T9478] ? show_regs_print_info+0x20/0x20 [ 296.280205][ T9478] ? load_image+0x400/0x400 [ 296.284748][ T9478] ? __might_sleep+0xf0/0xf0 [ 296.289361][ T9478] ? __lock_acquire+0x7d10/0x7d10 [ 296.294416][ T9478] should_fail+0x38c/0x4c0 [ 296.298905][ T9478] should_failslab+0x5/0x20 [ 296.303434][ T9478] slab_pre_alloc_hook+0x51/0xc0 [ 296.308401][ T9478] __kmalloc+0x6b/0x330 [ 296.312579][ T9478] ? tomoyo_encode+0x27e/0x540 [ 296.317374][ T9478] tomoyo_encode+0x27e/0x540 [ 296.321998][ T9478] tomoyo_realpath_from_path+0x5cd/0x610 [ 296.327709][ T9478] tomoyo_path_number_perm+0x242/0x660 [ 296.333198][ T9478] ? verify_lock_unused+0x140/0x140 [ 296.338461][ T9478] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 296.343954][ T9478] ? ksys_write+0x1c6/0x260 [ 296.348547][ T9478] security_file_ioctl+0x6c/0xa0 [ 296.351456][ T9483] openvswitch: netlink: Duplicate key (type 0). [ 296.353512][ T9478] __se_sys_ioctl+0x48/0x170 [ 296.353541][ T9478] do_syscall_64+0x4c/0xa0 [ 296.353561][ T9478] ? clear_bhb_loop+0x30/0x80 [ 296.353581][ T9478] ? clear_bhb_loop+0x30/0x80 [ 296.353604][ T9478] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.353626][ T9478] RIP: 0033:0x7fa8553dee59 [ 296.353648][ T9478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.353667][ T9478] RSP: 002b:00007fa853617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.353693][ T9478] RAX: ffffffffffffffda RBX: 00007fa855658090 RCX: 00007fa8553dee59 [ 296.353709][ T9478] RDX: 0000200000000b40 RSI: 0000000000008916 RDI: 0000000000000009 [ 296.353724][ T9478] RBP: 00007fa853617090 R08: 0000000000000000 R09: 0000000000000000 [ 296.353738][ T9478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.353750][ T9478] R13: 00007fa855658128 R14: 00007fa855658090 R15: 00007ffc2d9e4178 [ 296.353784][ T9478] [ 296.383302][ T9478] ERROR: Out of memory at tomoyo_realpath_from_path. [ 297.450757][ T9506] __nla_validate_parse: 3 callbacks suppressed [ 297.450777][ T9506] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1700'. [ 297.880084][ T9543] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.1710'. [ 297.897313][ T9543] validate_nla: 14 callbacks suppressed [ 297.897334][ T9543] netlink: 'syz.4.1710': attribute type 1 has an invalid length. [ 297.914989][ T9543] netlink: 'syz.4.1710': attribute type 2 has an invalid length. [ 297.923254][ T9543] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1710'. [ 298.053412][ T9524] netlink: 'syz.0.1706': attribute type 9 has an invalid length. [ 298.066885][ T9540] netlink: 'syz.2.1712': attribute type 21 has an invalid length. [ 298.076183][ T9524] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1706'. [ 298.444439][ T9552] netlink: 'syz.2.1714': attribute type 29 has an invalid length. [ 298.476669][ T9554] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1713'. [ 298.520637][ T9552] netlink: 'syz.2.1714': attribute type 29 has an invalid length. [ 298.540287][ T9553] netlink: 'syz.2.1714': attribute type 29 has an invalid length. [ 298.587978][ T9559] netlink: 'syz.3.1716': attribute type 29 has an invalid length. [ 298.645248][ T9559] netlink: 'syz.3.1716': attribute type 29 has an invalid length. [ 298.684601][ T9563] netlink: 'syz.3.1716': attribute type 29 has an invalid length. [ 298.853875][ T9571] FAULT_INJECTION: forcing a failure. [ 298.853875][ T9571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.876713][ T9571] CPU: 0 PID: 9571 Comm: syz.1.1721 Not tainted syzkaller #0 [ 298.884165][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 298.894256][ T9571] Call Trace: [ 298.897562][ T9571] [ 298.900537][ T9571] dump_stack_lvl+0x188/0x250 [ 298.905343][ T9571] ? show_regs_print_info+0x20/0x20 [ 298.910571][ T9571] ? load_image+0x400/0x400 [ 298.915103][ T9571] ? __lock_acquire+0x7d10/0x7d10 [ 298.920198][ T9571] should_fail+0x38c/0x4c0 [ 298.924651][ T9571] _copy_from_user+0x2e/0x170 [ 298.929376][ T9571] __copy_msghdr_from_user+0xc9/0x630 [ 298.934786][ T9571] ? verify_lock_unused+0x140/0x140 [ 298.940015][ T9571] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 298.945327][ T9571] ? perf_tp_event+0xa92/0xbf0 [ 298.950217][ T9571] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 298.956067][ T9571] ___sys_sendmsg+0x19a/0x2e0 [ 298.960792][ T9571] ? __sys_sendmsg+0x2a0/0x2a0 [ 298.965631][ T9571] __se_sys_sendmsg+0x1af/0x290 [ 298.970512][ T9571] ? __x64_sys_sendmsg+0x80/0x80 [ 298.975478][ T9571] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 298.981503][ T9571] ? lockdep_hardirqs_on+0x94/0x140 [ 298.986739][ T9571] do_syscall_64+0x4c/0xa0 [ 298.991189][ T9571] ? clear_bhb_loop+0x30/0x80 [ 298.995975][ T9571] ? clear_bhb_loop+0x30/0x80 [ 299.000671][ T9571] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 299.006596][ T9571] RIP: 0033:0x7fa38064de59 [ 299.011036][ T9571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.031095][ T9571] RSP: 002b:00007fa37e8a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.039709][ T9571] RAX: ffffffffffffffda RBX: 00007fa3808c6fa0 RCX: 00007fa38064de59 [ 299.047959][ T9571] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 299.055949][ T9571] RBP: 00007fa37e8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 299.064161][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.072149][ T9571] R13: 00007fa3808c7038 R14: 00007fa3808c6fa0 R15: 00007ffc1ede3df8 [ 299.080175][ T9571] [ 299.519923][ T9579] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1723'. [ 299.912078][ T9593] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1728'. [ 300.233930][ T9597] FAULT_INJECTION: forcing a failure. [ 300.233930][ T9597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.278331][ T9597] CPU: 0 PID: 9597 Comm: syz.0.1729 Not tainted syzkaller #0 [ 300.285775][ T9597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 300.295860][ T9597] Call Trace: [ 300.299170][ T9597] [ 300.302121][ T9597] dump_stack_lvl+0x188/0x250 [ 300.306924][ T9597] ? show_regs_print_info+0x20/0x20 [ 300.312150][ T9597] ? load_image+0x400/0x400 [ 300.316681][ T9597] ? __lock_acquire+0x7d10/0x7d10 [ 300.321741][ T9597] should_fail+0x38c/0x4c0 [ 300.326190][ T9597] _copy_from_user+0x2e/0x170 [ 300.330903][ T9597] __sys_bpf+0x26d/0x6f0 [ 300.335185][ T9597] ? bpf_link_show_fdinfo+0x380/0x380 [ 300.340614][ T9597] __x64_sys_bpf+0x78/0x90 [ 300.345142][ T9597] do_syscall_64+0x4c/0xa0 [ 300.349568][ T9597] ? clear_bhb_loop+0x30/0x80 [ 300.354271][ T9597] ? clear_bhb_loop+0x30/0x80 [ 300.359040][ T9597] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 300.365038][ T9597] RIP: 0033:0x7fa8553dee59 [ 300.369467][ T9597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.389089][ T9597] RSP: 002b:00007fa853638028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 300.397538][ T9597] RAX: ffffffffffffffda RBX: 00007fa855657fa0 RCX: 00007fa8553dee59 [ 300.405528][ T9597] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 300.413512][ T9597] RBP: 00007fa853638090 R08: 0000000000000000 R09: 0000000000000000 [ 300.421490][ T9597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.429481][ T9597] R13: 00007fa855658038 R14: 00007fa855657fa0 R15: 00007ffc2d9e4178 [ 300.437478][ T9597] [ 317.112945][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.119344][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.988297][ T1108] Bluetooth: hci5: command 0x0409 tx timeout [ 318.068365][ T1108] Bluetooth: hci6: command 0x0409 tx timeout [ 318.148341][ T1108] Bluetooth: hci7: command 0x0409 tx timeout [ 318.308351][ T1108] Bluetooth: hci8: command 0x0409 tx timeout [ 319.428240][ T1108] Bluetooth: hci9: command 0x0409 tx timeout [ 320.068263][ T1108] Bluetooth: hci5: command 0x041b tx timeout [ 320.148319][ T1108] Bluetooth: hci6: command 0x041b tx timeout [ 320.228295][ T1108] Bluetooth: hci7: command 0x041b tx timeout [ 320.388349][ T1108] Bluetooth: hci8: command 0x041b tx timeout [ 321.508236][ T1108] Bluetooth: hci9: command 0x041b tx timeout [ 322.148275][ T1108] Bluetooth: hci5: command 0x040f tx timeout [ 322.230512][ T1108] Bluetooth: hci6: command 0x040f tx timeout [ 322.308269][ T1108] Bluetooth: hci7: command 0x040f tx timeout [ 322.468315][ T1108] Bluetooth: hci8: command 0x040f tx timeout [ 323.588247][ T1108] Bluetooth: hci9: command 0x040f tx timeout [ 324.228295][ T5067] Bluetooth: hci5: command 0x0419 tx timeout [ 324.308254][ T5067] Bluetooth: hci6: command 0x0419 tx timeout [ 324.388294][ T5067] Bluetooth: hci7: command 0x0419 tx timeout [ 324.548367][ T5067] Bluetooth: hci8: command 0x0419 tx timeout [ 325.668259][ T1108] Bluetooth: hci9: command 0x0419 tx timeout [ 378.550760][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.557112][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.348398][ T5065] Bluetooth: hci11: command 0x0409 tx timeout [ 379.360086][ T5065] Bluetooth: hci12: command 0x0409 tx timeout [ 379.371547][ T5065] Bluetooth: hci13: command 0x0409 tx timeout [ 379.428304][ T5065] Bluetooth: hci10: command 0x0409 tx timeout [ 379.668285][ T5065] Bluetooth: hci14: command 0x0409 tx timeout [ 381.428306][ T5065] Bluetooth: hci13: command 0x041b tx timeout [ 381.440442][ T5065] Bluetooth: hci12: command 0x041b tx timeout [ 381.450021][ T5065] Bluetooth: hci11: command 0x041b tx timeout [ 381.508294][ T5065] Bluetooth: hci10: command 0x041b tx timeout [ 381.748363][ T5065] Bluetooth: hci14: command 0x041b tx timeout [ 383.508277][ T5065] Bluetooth: hci11: command 0x040f tx timeout [ 383.515273][ T5065] Bluetooth: hci12: command 0x040f tx timeout [ 383.528881][ T5065] Bluetooth: hci13: command 0x040f tx timeout [ 383.588344][ T5065] Bluetooth: hci10: command 0x040f tx timeout [ 383.828373][ T5065] Bluetooth: hci14: command 0x040f tx timeout [ 385.588300][ T5065] Bluetooth: hci13: command 0x0419 tx timeout [ 385.594540][ T5065] Bluetooth: hci12: command 0x0419 tx timeout [ 385.608566][ T5065] Bluetooth: hci11: command 0x0419 tx timeout [ 385.668225][ T5065] Bluetooth: hci10: command 0x0419 tx timeout [ 385.908312][ T5065] Bluetooth: hci14: command 0x0419 tx timeout [ 405.558139][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 405.565259][ C1] rcu: 0-...!: (0 ticks this GP) idle=8f5/1/0x4000000000000002 softirq=24711/24711 fqs=0 [ 405.576049][ C1] (detected by 1, t=10502 jiffies, g=33573, q=969) [ 405.582753][ C1] Sending NMI from CPU 1 to CPUs 0: [ 405.588192][ C0] NMI backtrace for cpu 0 [ 405.588202][ C0] CPU: 0 PID: 9597 Comm: syz.0.1729 Not tainted syzkaller #0 [ 405.588217][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 405.588225][ C0] RIP: 0010:native_apic_msr_eoi_write+0xb/0x10 [ 405.588250][ C0] Code: 8b 06 bf f0 03 00 00 89 de 5b 41 5e 41 5f ff e0 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b9 0b 08 00 00 31 c0 31 d2 0f 30 0f 1f 40 00 81 ff cf 00 00 00 7f 0c 83 ff 20 74 2a 83 ff 30 74 [ 405.588263][ C0] RSP: 0000:ffffc90000007fd8 EFLAGS: 00000046 [ 405.588277][ C0] RAX: 0000000000000000 RBX: ffffffff8be339c8 RCX: 000000000000080b [ 405.588287][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000b0 [ 405.588296][ C0] RBP: 0000000000000000 R08: ffffffff8f0ea008 R09: ffffffff8f0ea018 [ 405.588307][ C0] R10: ffffffff8f0ea010 R11: ffffffff8f0ea003 R12: 0000000000000000 [ 405.588317][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 405.588326][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 405.588339][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.588359][ C0] CR2: 000000110c360588 CR3: 00000000595e0000 CR4: 00000000003506f0 [ 405.588374][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 405.588383][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 405.588393][ C0] Call Trace: [ 405.588398][ C0] [ 405.588403][ C0] __sysvec_irq_work+0x51/0x240 [ 405.588424][ C0] sysvec_irq_work+0x98/0xc0 [ 405.588440][ C0] [ 405.588445][ C0] [ 405.588450][ C0] asm_sysvec_irq_work+0x16/0x20 [ 405.588465][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x4a0 [ 405.588481][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 32 e1 9c 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 405.588492][ C0] RSP: 0000:ffffc90002fdf460 EFLAGS: 00000206 [ 405.588504][ C0] RAX: 59a9399f5e644700 RBX: 1ffff920005fbe90 RCX: 59a9399f5e644700 [ 405.588514][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2800 RDI: ffffffff8a79fe00 [ 405.588525][ C0] RBP: ffffc90002fdf530 R08: ffffffff901d50c7 R09: 1ffffffff203aa18 [ 405.588535][ C0] R10: dffffc0000000000 R11: fffffbfff203aa19 R12: ffffffff8c323000 [ 405.588545][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 405.588563][ C0] ? lockdep_hardirqs_on+0x30/0x140 [ 405.588579][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 405.588596][ C0] ? page_remove_rmap+0x631/0x10f0 [ 405.588609][ C0] ? page_remove_rmap+0x647/0x10f0 [ 405.588625][ C0] __rcu_read_unlock+0x78/0xd0 [ 405.588640][ C0] __unlock_page_memcg+0xea/0x100 [ 405.588655][ C0] unmap_page_range+0xf96/0x2500 [ 405.588684][ C0] unmap_vmas+0x131/0x250 [ 405.588698][ C0] ? unmap_page_range+0x2500/0x2500 [ 405.588711][ C0] ? __mutex_lock_common+0x465/0x2400 [ 405.588734][ C0] exit_mmap+0x3b9/0x640 [ 405.588750][ C0] ? vm_brk+0x20/0x20 [ 405.588770][ C0] ? uprobe_clear_state+0x2f6/0x460 [ 405.588785][ C0] ? mm_update_next_owner+0x522/0x640 [ 405.588800][ C0] __mmput+0x115/0x3b0 [ 405.588816][ C0] exit_mm+0x588/0x6e0 [ 405.588828][ C0] ? xacct_add_tsk+0x4a0/0x4a0 [ 405.588845][ C0] ? do_exit+0x20c0/0x20c0 [ 405.588859][ C0] ? taskstats_exit+0x439/0xab0 [ 405.588875][ C0] ? tty_audit_exit+0x14e/0x1f0 [ 405.588893][ C0] do_exit+0x5a9/0x20c0 [ 405.588907][ C0] ? rcu_nmi_exit+0x6f/0xf0 [ 405.588921][ C0] ? put_task_struct+0x80/0x80 [ 405.588935][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 405.588953][ C0] ? lock_chain_count+0x20/0x20 [ 405.588977][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 405.588993][ C0] do_group_exit+0x12e/0x300 [ 405.589006][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 405.589022][ C0] get_signal+0x6ca/0x12c0 [ 405.589045][ C0] arch_do_signal_or_restart+0xe7/0x12c0 [ 405.589067][ C0] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 405.589085][ C0] ? get_sigframe_size+0x10/0x10 [ 405.589101][ C0] ? rcu_nmi_exit+0x6f/0xf0 [ 405.589123][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 405.589138][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 405.589152][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 405.589166][ C0] irqentry_exit_to_user_mode+0x5/0x30 [ 405.589181][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 405.589196][ C0] RIP: 0033:0x7fa8553dee59 [ 405.589208][ C0] Code: Unable to access opcode bytes at RIP 0x7fa8553dee2f. [ 405.589215][ C0] RSP: 002b:00007fa8536380e8 EFLAGS: 00000246 [ 405.589226][ C0] RAX: 0000000000000000 RBX: 00007fa855657fa8 RCX: 00007fa8553dee59 [ 405.589235][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa855657fac [ 405.589245][ C0] RBP: 00007fa855657fa0 R08: 001bf248ac1a5598 R09: 0000000000000000 [ 405.589255][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 405.589264][ C0] R13: 00007fa855658038 R14: 00007ffc2d9e4090 R15: 00007ffc2d9e4178 [ 405.589282][ C0] [ 405.590186][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g33573 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 406.084331][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=13983 [ 406.092235][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g33573 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 406.103615][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 406.113591][ C1] rcu: RCU grace-period kthread stack dump: [ 406.119482][ C1] task:rcu_preempt state:I stack:27824 pid: 15 ppid: 2 flags:0x00004000 [ 406.128796][ C1] Call Trace: [ 406.132092][ C1] [ 406.135043][ C1] __schedule+0x11ef/0x43c0 [ 406.139665][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 406.145572][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 406.150789][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 406.156790][ C1] ? _raw_spin_unlock+0x40/0x40 [ 406.162365][ C1] ? release_firmware_map_entry+0x190/0x190 [ 406.168277][ C1] ? __mod_timer+0x91e/0xd00 [ 406.172892][ C1] schedule+0x11b/0x1e0 [ 406.177065][ C1] schedule_timeout+0x184/0x2d0 [ 406.181933][ C1] ? console_conditional_schedule+0x40/0x40 [ 406.187840][ C1] ? update_process_times+0x200/0x200 [ 406.193236][ C1] ? prepare_to_swait_event+0x331/0x350 [ 406.198801][ C1] rcu_gp_fqs_loop+0x2be/0x11d0 [ 406.203665][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 406.208884][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 406.214109][ C1] ? rcu_gp_init+0xd6c/0x10f0 [ 406.218908][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 406.223689][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 406.228900][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 406.234409][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 406.239660][ C1] rcu_gp_kthread+0x9b/0x370 [ 406.244297][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 406.250233][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 406.255379][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 406.261299][ C1] ? __kthread_parkme+0x157/0x1b0 [ 406.266348][ C1] kthread+0x436/0x520 [ 406.270431][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 406.275654][ C1] ? kthread_blkcg+0xd0/0xd0 [ 406.280264][ C1] ret_from_fork+0x1f/0x30 [ 406.284713][ C1] [ 406.287748][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 406.294086][ C1] Sending NMI from CPU 1 to CPUs 0: [ 406.299314][ C0] NMI backtrace for cpu 0 [ 406.299324][ C0] CPU: 0 PID: 9597 Comm: syz.0.1729 Not tainted syzkaller #0 [ 406.299339][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 406.299347][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x58/0x60 [ 406.299366][ C0] Code: 10 16 00 00 83 fa 02 75 21 48 8b 91 18 16 00 00 48 8b 32 48 8d 7e 01 8b 89 14 16 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 3a 0f 1f 80 00 00 00 00 48 8b 04 24 65 48 8b 0d c4 3a 89 7e 65 8b [ 406.299378][ C0] RSP: 0000:ffffc90002fdf370 EFLAGS: 00000093 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 406.299393][ C0] RAX: ffffffff817f61a7 RBX: 0000000000000000 RCX: ffff8880741e8000 [ 406.299403][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880b903b308 [ 406.299413][ C0] RBP: 0000000000000000 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 406.299423][ C0] R10: dffffc0000000000 R11: ffffed1017207662 R12: 0000000000000000 [ 406.299433][ C0] R13: 0000000000000000 R14: ffffffff89e00e46 R15: ffff8880775ef190 [ 406.299443][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 406.299456][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.299467][ C0] CR2: 000000110c360588 CR3: 00000000595e0000 CR4: 00000000003506f0 [ 406.299482][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 406.299491][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 406.299501][ C0] Call Trace: [ 406.299507][ C0] [ 406.299511][ C0] trace_irq_enable_rcuidle+0xd7/0x180 [ 406.299530][ C0] trace_hardirqs_on+0x57/0x80 [ 406.299544][ C0] asm_sysvec_irq_work+0x16/0x20 [ 406.299560][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x4a0 [ 406.299576][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 32 e1 9c 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 406.299587][ C0] RSP: 0000:ffffc90002fdf460 EFLAGS: 00000206 [ 406.299598][ C0] RAX: 59a9399f5e644700 RBX: 1ffff920005fbe90 RCX: 59a9399f5e644700 [ 406.299608][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2800 RDI: ffffffff8a79fe00 [ 406.299619][ C0] RBP: ffffc90002fdf530 R08: ffffffff901d50c7 R09: 1ffffffff203aa18 [ 406.299629][ C0] R10: dffffc0000000000 R11: fffffbfff203aa19 R12: ffffffff8c323000 [ 406.299640][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 406.299658][ C0] ? lockdep_hardirqs_on+0x30/0x140 [ 406.299674][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 406.299691][ C0] ? page_remove_rmap+0x631/0x10f0 [ 406.299705][ C0] ? page_remove_rmap+0x647/0x10f0 [ 406.299720][ C0] __rcu_read_unlock+0x78/0xd0 [ 406.299735][ C0] __unlock_page_memcg+0xea/0x100 [ 406.299750][ C0] unmap_page_range+0xf96/0x2500 [ 406.299780][ C0] unmap_vmas+0x131/0x250 [ 406.299793][ C0] ? unmap_page_range+0x2500/0x2500 [ 406.299806][ C0] ? __mutex_lock_common+0x465/0x2400 [ 406.299829][ C0] exit_mmap+0x3b9/0x640 [ 406.299846][ C0] ? vm_brk+0x20/0x20 [ 406.299867][ C0] ? uprobe_clear_state+0x2f6/0x460 [ 406.299881][ C0] ? mm_update_next_owner+0x522/0x640 [ 406.299896][ C0] __mmput+0x115/0x3b0 [ 406.299913][ C0] exit_mm+0x588/0x6e0 [ 406.299926][ C0] ? xacct_add_tsk+0x4a0/0x4a0 [ 406.299943][ C0] ? do_exit+0x20c0/0x20c0 [ 406.299956][ C0] ? taskstats_exit+0x439/0xab0 [ 406.299973][ C0] ? tty_audit_exit+0x14e/0x1f0 [ 406.299991][ C0] do_exit+0x5a9/0x20c0 [ 406.300005][ C0] ? rcu_nmi_exit+0x6f/0xf0 [ 406.300019][ C0] ? put_task_struct+0x80/0x80 [ 406.300032][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 406.300051][ C0] ? lock_chain_count+0x20/0x20 [ 406.300067][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 406.300081][ C0] do_group_exit+0x12e/0x300 [ 406.300094][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 406.300111][ C0] get_signal+0x6ca/0x12c0 [ 406.300133][ C0] arch_do_signal_or_restart+0xe7/0x12c0 [ 406.300162][ C0] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 406.300180][ C0] ? get_sigframe_size+0x10/0x10 [ 406.300196][ C0] ? rcu_nmi_exit+0x6f/0xf0 [ 406.300219][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 406.300234][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 406.300248][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 406.300262][ C0] irqentry_exit_to_user_mode+0x5/0x30 [ 406.300277][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 406.300292][ C0] RIP: 0033:0x7fa8553dee59 [ 406.300304][ C0] Code: Unable to access opcode bytes at RIP 0x7fa8553dee2f. [ 406.300311][ C0] RSP: 002b:00007fa8536380e8 EFLAGS: 00000246 [ 406.300322][ C0] RAX: 0000000000000000 RBX: 00007fa855657fa8 RCX: 00007fa8553dee59 [ 406.300331][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa855657fac [ 406.300341][ C0] RBP: 00007fa855657fa0 R08: 001bf248ac1a5598 R09: 0000000000000000 [ 406.300351][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 406.300360][ C0] R13: 00007fa855658038 R14: 00007ffc2d9e4090 R15: 00007ffc2d9e4178 [ 406.300378][ C0] [ 409.268342][ T4231] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10873 jiffies s: 17809 root: 0x1/. [ 409.290571][ T4231] rcu: blocking rcu_node structures (internal RCU debug): [ 409.297732][ T4231] Task dump for CPU 0: [ 409.301943][ T4231] task:syz.0.1729 state:R running task stack:23440 pid: 9597 ppid: 4196 flags:0x00004008 [ 409.312854][ T4231] Call Trace: [ 409.316184][ T4231] [ 409.319263][ T4231] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 409.325530][ T4231] ? mark_lock+0x94/0x320 [ 409.330151][ T4231] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 409.337478][ T4231] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 409.343523][ T4231] ? lock_chain_count+0x20/0x20 [ 409.348434][ T4231] ? asm_sysvec_irq_work+0x16/0x20 [ 409.353567][ T4231] ? trace_hardirqs_off_finish+0xca/0x1f0 [ 409.359353][ T4231] ? trace_irq_enable_rcuidle+0x108/0x180 [ 409.365104][ T4231] ? trace_hardirqs_on+0x67/0x80 [ 409.370104][ T4231] ? asm_sysvec_irq_work+0x16/0x20 [ 409.375256][ T4231] ? rcu_read_unlock_special+0x7f/0x4a0 [ 409.380872][ T4231] ? lockdep_hardirqs_on+0x30/0x140 [ 409.386094][ T4231] ? __rcu_read_unlock+0xd0/0xd0 [ 409.391516][ T4231] ? page_remove_rmap+0x631/0x10f0 [ 409.396654][ T4231] ? page_remove_rmap+0x647/0x10f0 [ 409.401892][ T4231] ? __rcu_read_unlock+0x78/0xd0 [ 409.406863][ T4231] ? __unlock_page_memcg+0xea/0x100 [ 409.412115][ T4231] ? unmap_page_range+0xf96/0x2500 [ 409.417297][ T4231] ? unmap_vmas+0x131/0x250 [ 409.421889][ T4231] ? unmap_page_range+0x2500/0x2500 [ 409.427104][ T4231] ? __mutex_lock_common+0x465/0x2400 [ 409.432555][ T4231] ? exit_mmap+0x3b9/0x640 [ 409.437008][ T4231] ? vm_brk+0x20/0x20 [ 409.441059][ T4231] ? uprobe_clear_state+0x2f6/0x460 [ 409.446285][ T4231] ? mm_update_next_owner+0x522/0x640 [ 409.451713][ T4231] ? __mmput+0x115/0x3b0 [ 409.455982][ T4231] ? exit_mm+0x588/0x6e0 [ 409.460270][ T4231] ? xacct_add_tsk+0x4a0/0x4a0 [ 409.465070][ T4231] ? do_exit+0x20c0/0x20c0 [ 409.469642][ T4231] ? taskstats_exit+0x439/0xab0 [ 409.474618][ T4231] ? tty_audit_exit+0x14e/0x1f0 [ 409.479526][ T4231] ? do_exit+0x5a9/0x20c0 [ 409.483876][ T4231] ? rcu_nmi_exit+0x6f/0xf0 [ 409.488431][ T4231] ? put_task_struct+0x80/0x80 [ 409.493319][ T4231] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 409.499355][ T4231] ? lock_chain_count+0x20/0x20 [ 409.504322][ T4231] ? _raw_spin_lock_irq+0xb7/0xf0 [ 409.509394][ T4231] ? do_group_exit+0x12e/0x300 [ 409.514177][ T4231] ? lockdep_hardirqs_on+0x94/0x140 [ 409.519428][ T4231] ? get_signal+0x6ca/0x12c0 [ 409.524060][ T4231] ? arch_do_signal_or_restart+0xe7/0x12c0 [ 409.529935][ T4231] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 409.535697][ T4231] ? get_sigframe_size+0x10/0x10 [ 409.540694][ T4231] ? rcu_nmi_exit+0x6f/0xf0 [ 409.545235][ T4231] ? exit_to_user_mode_loop+0x3b/0x130 [ 409.550747][ T4231] ? exit_to_user_mode_loop+0x9e/0x130 [ 409.556312][ T4231] ? exit_to_user_mode_prepare+0xee/0x180 [ 409.562078][ T4231] ? irqentry_exit_to_user_mode+0x5/0x30 [ 409.567734][ T4231] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 409.573959][ T4231]