last executing test programs: 4.943326895s ago: executing program 1 (id=3906): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000f00)="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", 0x13b}, {&(0x7f0000001cc0)="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", 0x192}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e010b4adb98889254740ac86a3c330836b8cc6764cf", 0xad}, {&(0x7f00000009c0)="a484d15488fb016289fa4e2b0b25648e7abf5a74ab5e75516b79103a9b0711dd70d5a141294998c249dda70370b7f076f3ec132111d4866784da73cd0f18993549e7b185584053fb7b48d2b271af8a14858473eb1edd82f3f4cd1150bee83bf4f624d8f873ec45fe60bb431221e35526a58313e39813e83be21f2834bbf6fc621f6d9894eb03b4c8690635c5ce509de10000000000000004d8d8550dc3763f779ad276b6f32236b8534ab6701184dac56e1af78c6013715d94b4d6cd59821581983f7e3b6c5369cda3f0bc763bdda2ec97d4542041be5568230b1a9b24e1d5efff9226066adcdfd53abc7078ff74aca53708cb4e62ed", 0xf6}, {&(0x7f0000000280)="1e99548791e2af0783a5fb7491fc25443d2e058693f3cd870c1663d05d3af54326988e27b183f0ad5b87bd7a70b7c3b40346af3fbfb348fff0643fb3c1ec898599fdd2e1297a8b00255f2963eb631b3693d5115645440f13396f91d4cd3b545065767881a0fec5c47f6e339be2c223f4a8f41145b08aeb17d8bd10994f2651608733d9eb11", 0x85}, {&(0x7f0000000340)="67c290d482a10882495f867ed79385faa0b6388ee82b92af60bca95ada5af87d58058187bb8df9b43b779df318f670d9b58f8a2f48a5403e99210618fd93eef36cd487c801", 0x45}, {&(0x7f00000005c0)="9a3e7621b79b5219fd3d3b34f06166f21f5c147fca3a827c27a6932ac6eb87eeb9e77033360dccd6140f236887ca67fba89fe087023580a96beae36ac2a43ff71af9f4dfd4191fb0e8afe33c2af62917ab1ffcad26223bd84dff7fe9178d04e160de516a3d52281f8bad6704debc823ffeab95", 0x73}], 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffbff}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000680)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001600)=@o_path={&(0x7f00000015c0)='./file0\x00', r2, 0x4000, r2}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$inet(r0, &(0x7f0000001580)={&(0x7f0000000740)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000e80)="e68ad9919dbaf6700ced75f9ac8e976724296530d8f4d706076cd45e12ee89ca7faae5885fe6863c07c7e3365eedc823f46d95d2dc612be64a867defbe9f9bd019be5d09cabb4988f4439800ba567a1e0a39b6", 0x53}, {&(0x7f0000001040)="a8d637f24f0c84b6142c83e49f0ecb2f021af479cba5777ba572708670652f7ef568799f943833c41f779f3345414af3cb023f6e90138fd6d038ddfde4e66401a04378d230cc4831762c133edac115b91e8d3b47be2579ea625bd670cd0b50204651fae235305defd5a954fc34ad18b2054f5ee8f4e6efe3645bf399a4130b35c425efad76fc6fc0212ea7aba27bc0eaf9833154dd016cd4c501c2dbfdc8ee13105773bb4c7a3d55f8968c065b6535d60143168fb713e715c66cbed701c519f1ea4fb30bc57f14dc2433079bb3cabb1f783e349aa013ecc41fd89ba0b931516a", 0xe0}, {&(0x7f0000001140)="ec43e7b1f9a92d0429585f9d46c655807e9cb5004d386aea7ac856b20133ed06615b68693b3de74391d6f46966e0b4e754b9d6282e5271520706fee7e97b56d637bcb9dc493a1e3f8550b170485bc326513eeff6db13cde12b4755023a060f1bb6dbc4e7e4e9a68ea536535e0573a4869d1c669bb6231ab2f3b2bf1a6257cd0d01dfd8d17324979e3446fc6c9f401851e4d6e12ac518399f7e50c74264eb6e54a2d505c149b380e4260d366a4c1cdd220a93047a273d", 0xb6}, {&(0x7f0000001200)="880991bf4e6a588fca30b3a0d01a8394926a13aeeb2e57905fb25bcfbc052db04dc775af1ac8550fb23fe4fb5b56987e8c4b623a6e450066b361db70c791d404b3fe43c9d373d81251d67130e279065c9b3b5c2b954f272a139a8c4e1a7d68d051cf7025e0b4093d13c69832a11ff5c40b6610a9713fda7b5b08f701a26110a9c1aee8416de820bcb2cbc4b2f8d21b379065e46e26821dba6e1ba6a46c2f8cd4572c139c2ea64aa341fc8e91ac2c8c3e3511114cc3fa53b4b7951a6103f3e0451eed3306dcab97d5a9a11dafe3a7ff51017dee1c7c4b46d9a7575476e595", 0xde}, {&(0x7f0000001300)="757b6108b9b7e51d09a64a3cb86ce5bf9bba0e662adce4b665dc9281917ec80d72370b8f95b052d6db35f15351a65ca09dc3b04c8ab116b5431a16fba68b50a0e38a5affe6108dc0bca131781101625d667a7aff78b14af5a22249564fef3c919780265f5ef276632321fc9e6e3d778074e93d4c04c7b513bdab3732a55403248a4e6c82090b74a451f084e4a783c33686a57168f643c151fbdb", 0x9a}, {&(0x7f00000013c0)="f6f6892558fbf8254b9ffb6fe41c34aafdc4747dcd6180a182c1cf9f90e48a9372d469e1cf7bb6dd6e60a11f1550d17159e434f573daf1af25e6594249c7fc97a75594e8124439c95bae1d20d157484784b639885413bbc3ff50acd2cf6f20", 0x5f}, {&(0x7f0000001440)="50e9676973", 0x5}], 0x7, &(0x7f0000001500)=[@ip_retopts={{0x50, 0x0, 0x7, {[@cipso={0x86, 0x3d, 0x3, [{0x7, 0x10, "181de4b33bc2d5c01e82e1b8a99d"}, {0x4, 0x3, "15"}, {0x5, 0x8, "0644581bbaff"}, {0x2, 0xe, "b63fae9adad14d0c83cb7251"}, {0x5, 0xe, "188f5229a0ca65e9531b8650"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdc}}], 0x80}, 0x8800) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r5], 0x48}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, &(0x7f0000000640)) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x11, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc4}, [@exit, @map_val={0x18, 0xa, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x25}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x24, '\x00', 0x0, 0x0, r7}, 0x94) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x14, 0x0, 0x46) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)=r4}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x7, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x70}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000cc0)={0x5, 0xa, 0x8164, 0xb874}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000d00)=[r6, r6, r6, r6], &(0x7f0000000d40)=[{0x3, 0x4, 0xf, 0xa}, {0x3, 0x3, 0x9, 0x8}, {0x5, 0x1, 0x3, 0x1}, {0x2, 0x5, 0x4, 0x7}, {0x1, 0x5, 0xf, 0xa}, {0x2, 0x4, 0x0, 0x8}, {0x0, 0x3, 0x2, 0x8}, {0x0, 0x4, 0x8}], 0x10, 0x9}, 0x94) 4.920455635s ago: executing program 3 (id=3907): openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x113400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x104101, 0x4, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7fff, 0x3fff8000}, 0x0, 0x84, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1808000000000000000000000000000053ed4194813191faf243e41800000000000000000000001e000000952b3e4f233364aadf4b32b27492db19bec9745a0c52c29a542cd24c4a161b1be125f3d9c06c78689e22027078677dfd153fca31"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406a80016c0b00003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000001980)=[{0x180, 0x10f, 0x3, "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"}, {0xd0, 0x10e, 0xfffffff7, "e61b655bfeb6dcd02a920f783621d0ee13cf081b2259b35301be9aa319b6adff15e7a8f635d77547d5302bc58fa3056df83cbabf9b4e51875f96bbe889c916e4c35932dcbcb44c37f78235faae7ef960a21fef21d2055e2b21747b025b10f494bd0b31f22e94b4073efe007279b416bd3bba40ef1676277a0d3de9db661e7d9bc7f5ea74b596025dd3103b9c2476a7a512c51151a6662da27d9981ec744f13f7bbddc89ed4d85498bba76da35ffc0f99a88d1e29ae57aa20a76e"}, {0x198, 0x6, 0xf, "6c89539a11cd1dcabbc9926c5c93eedb14f8dbbd00e83cf55c201ad1d3ae99882f705cf96d3d596fb5d800742b608db2269ebe1385d5f92bf52446f0b7081c03091b8cc19ee29d17cfe1a9b415269ce9d9f7897bc37571a398d591213f761c1f11a2e3d09e0de29ae07e6389d064a4009644c94bf6a35f2a5ac936d586439e7a46c64560164bc94ac9a931b68c7166e2ce5876787c54aac7cd8dacdd9591cf2006000067a37469ec9a8223a8bf6f97492efd3d11c0ff748e1ff1285c8ebc67d2cd657c89a3f5271109545cb7d40bed0b1850c3cb18f0d5ae339f39fac42b8e7f8aa3b1a5cb958a31ab2df97e78d892b0825e83fd3a892f0923cd5c79866144c259943deb56167dd53c974b37cb7b43bb75cd2459b387d49c9be273704e7e4db7b2a61d22d0ecf9dc61b38d0355570ac92507ce56b2ae8d95392031ce548117a8203308ded313baae6fd057ada952cc9b8aaf789b3b62dd015bc8e79abc1dd4859b9f47a1f3c9fc60ac33596f7355dae224574597e13f84ef0a569a4447133d2c0e33"}], 0x3e8}, 0x20000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc14}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0xfc, 0xff, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffff6d, 0x6}, 0x8b001, 0x0, 0xfffffffd, 0x5, 0x1ff, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0c000000040000000400", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 4.80055644s ago: executing program 0 (id=3908): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000f00)="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", 0x13b}, {&(0x7f0000001cc0)="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", 0x192}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e010b4adb98889254740ac86a3c330836b8cc6764cf", 0xad}, {&(0x7f00000009c0)="a484d15488fb016289fa4e2b0b25648e7abf5a74ab5e75516b79103a9b0711dd70d5a141294998c249dda70370b7f076f3ec132111d4866784da73cd0f18993549e7b185584053fb7b48d2b271af8a14858473eb1edd82f3f4cd1150bee83bf4f624d8f873ec45fe60bb431221e35526a58313e39813e83be21f2834bbf6fc621f6d9894eb03b4c8690635c5ce509de10000000000000004d8d8550dc3763f779ad276b6f32236b8534ab6701184dac56e1af78c6013715d94b4d6cd59821581983f7e3b6c5369cda3f0bc763bdda2ec97d4542041be5568230b1a9b24e1d5efff9226066adcdfd53abc7078ff74aca53708cb4e62ed", 0xf6}, {&(0x7f0000000280)="1e99548791e2af0783a5fb7491fc25443d2e058693f3cd870c1663d05d3af54326988e27b183f0ad5b87bd7a70b7c3b40346af3fbfb348fff0643fb3c1ec898599fdd2e1297a8b00255f2963eb631b3693d5115645440f13396f91d4cd3b545065767881a0fec5c47f6e339be2c223f4a8f41145b08aeb17d8bd10994f2651608733d9eb11", 0x85}, {&(0x7f0000000340)="67c290d482a10882495f867ed79385faa0b6388ee82b92af60bca95ada5af87d58058187bb8df9b43b779df318f670d9b58f8a2f48a5403e99210618fd93eef36cd487c801", 0x45}, {&(0x7f00000005c0)="9a3e7621b79b5219fd3d3b34f06166f21f5c147fca3a827c27a6932ac6eb87eeb9e77033360dccd6140f236887ca67fba89fe087023580a96beae36ac2a43ff71af9f4dfd4191fb0e8afe33c2af62917ab1ffcad26223bd84dff7fe9178d04e160de516a3d52281f8bad6704debc823ffeab95", 0x73}], 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffbff}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000680)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001600)=@o_path={&(0x7f00000015c0)='./file0\x00', r2, 0x4000, r2}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$inet(r0, &(0x7f0000001580)={&(0x7f0000000740)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000e80)="e68ad9919dbaf6700ced75f9ac8e976724296530d8f4d706076cd45e12ee89ca7faae5885fe6863c07c7e3365eedc823f46d95d2dc612be64a867defbe9f9bd019be5d09cabb4988f4439800ba567a1e0a39b6", 0x53}, {&(0x7f0000001040)="a8d637f24f0c84b6142c83e49f0ecb2f021af479cba5777ba572708670652f7ef568799f943833c41f779f3345414af3cb023f6e90138fd6d038ddfde4e66401a04378d230cc4831762c133edac115b91e8d3b47be2579ea625bd670cd0b50204651fae235305defd5a954fc34ad18b2054f5ee8f4e6efe3645bf399a4130b35c425efad76fc6fc0212ea7aba27bc0eaf9833154dd016cd4c501c2dbfdc8ee13105773bb4c7a3d55f8968c065b6535d60143168fb713e715c66cbed701c519f1ea4fb30bc57f14dc2433079bb3cabb1f783e349aa013ecc41fd89ba0b931516a", 0xe0}, {&(0x7f0000001140)="ec43e7b1f9a92d0429585f9d46c655807e9cb5004d386aea7ac856b20133ed06615b68693b3de74391d6f46966e0b4e754b9d6282e5271520706fee7e97b56d637bcb9dc493a1e3f8550b170485bc326513eeff6db13cde12b4755023a060f1bb6dbc4e7e4e9a68ea536535e0573a4869d1c669bb6231ab2f3b2bf1a6257cd0d01dfd8d17324979e3446fc6c9f401851e4d6e12ac518399f7e50c74264eb6e54a2d505c149b380e4260d366a4c1cdd220a93047a273d", 0xb6}, {&(0x7f0000001200)="880991bf4e6a588fca30b3a0d01a8394926a13aeeb2e57905fb25bcfbc052db04dc775af1ac8550fb23fe4fb5b56987e8c4b623a6e450066b361db70c791d404b3fe43c9d373d81251d67130e279065c9b3b5c2b954f272a139a8c4e1a7d68d051cf7025e0b4093d13c69832a11ff5c40b6610a9713fda7b5b08f701a26110a9c1aee8416de820bcb2cbc4b2f8d21b379065e46e26821dba6e1ba6a46c2f8cd4572c139c2ea64aa341fc8e91ac2c8c3e3511114cc3fa53b4b7951a6103f3e0451eed3306dcab97d5a9a11dafe3a7ff51017dee1c7c4b46d9a7575476e595", 0xde}, {&(0x7f0000001300)="757b6108b9b7e51d09a64a3cb86ce5bf9bba0e662adce4b665dc9281917ec80d72370b8f95b052d6db35f15351a65ca09dc3b04c8ab116b5431a16fba68b50a0e38a5affe6108dc0bca131781101625d667a7aff78b14af5a22249564fef3c919780265f5ef276632321fc9e6e3d778074e93d4c04c7b513bdab3732a55403248a4e6c82090b74a451f084e4a783c33686a57168f643c151fbdb", 0x9a}, {&(0x7f00000013c0)="f6f6892558fbf8254b9ffb6fe41c34aafdc4747dcd6180a182c1cf9f90e48a9372d469e1cf7bb6dd6e60a11f1550d17159e434f573daf1af25e6594249c7fc97a75594e8124439c95bae1d20d157484784b639885413bbc3ff50acd2cf6f20", 0x5f}, {&(0x7f0000001440)="50e9676973", 0x5}], 0x7, &(0x7f0000001500)=[@ip_retopts={{0x50, 0x0, 0x7, {[@cipso={0x86, 0x3d, 0x3, [{0x7, 0x10, "181de4b33bc2d5c01e82e1b8a99d"}, {0x4, 0x3, "15"}, {0x5, 0x8, "0644581bbaff"}, {0x2, 0xe, "b63fae9adad14d0c83cb7251"}, {0x5, 0xe, "188f5229a0ca65e9531b8650"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdc}}], 0x80}, 0x8800) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r5], 0x48}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, &(0x7f0000000640)) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9980, 0x0, 0x0, 0x2, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 4.711795782s ago: executing program 1 (id=3909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="d8000000180081064e81f782db44b904d70a07748e021d086e06007c09e8fe55a10a0015400100142603600e120800060000000401a8001600a400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece09a97391e6f52ff8d763869a1b42a9ecbee5de6ccd40dd6e4edef", 0xdd}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x80000000, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000100000000000000030000001800000003000000dcdca91d8f5b00000000040000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xa}, 0x8, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x480, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x3a) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000340), 0x2a) 4.658682064s ago: executing program 0 (id=3910): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="a0", 0x1}, {&(0x7f0000000240)="94", 0x1}], 0x2}, 0xd0a0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f5fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22786d0548b25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30237a6e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a402956564f854d71c892e4aada1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020f495750f9936d9c07130d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b647333", 0x42c}, {&(0x7f0000000740)="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", 0x615}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x10, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r10, &(0x7f00000002c0)=ANY=[@ANYRES8=r9, @ANYRES8=r11], 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x1a, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0xd0, 0x7, &(0x7f0000000600)=""/7, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xc, 0x55}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000d80)=[0xffffffffffffffff, r5, r6, r7, r10], &(0x7f0000000dc0)=[{0x0, 0x4, 0x2, 0x3}], 0x10, 0x690}, 0x94) 4.508644859s ago: executing program 1 (id=3911): socket$kcm(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x40810) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 4.508053869s ago: executing program 3 (id=3912): openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x113400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x104101, 0x4, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7fff, 0x3fff8000}, 0x0, 0x84, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1808000000000000000000000000000053ed4194813191faf243e41800000000000000000000001e000000952b3e4f233364aadf4b32b27492db19bec9745a0c52c29a542cd24c4a161b1be125f3d9c06c78689e22027078677dfd153fca31"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406a80016c0b00003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000001980)=[{0x180, 0x10f, 0x3, "1eb0194e944c3a76a1ad11e7a8bd462ff867908a8e8feab43ea41a99493694cf650a0fee34cffcd2b438fb932ce2aa972212a4fad22704230560f89c7066affb6e8573656309951cad7bfd634bd17f0195003c4df5288c8647e0e0afa0b1ff032f78ad1ebc6bca2b6fbd3cf9c2c9e3509a2a8ae45ae0a40aa7e301127dd32083c5458d1028ef18fc6be5967fc5224e4761ab9166248b6f9ca212d1721601604fb1b4015f67070179f66a8fa57461bd2e997fd3fa247bce9141e2531d53161fcdc93399f671c1cacbbb5e04c9abd2943832d83717f23ea6dc43e68cc1609c3ed57a509d97096208c5c0b2f8ba93bfb71785a5b73477f40ddc25d8edb493d1f66ad468a5da637acea95a04456f1b6ef50c76fc642b4a82eb3b69171ed24d944dc9a03b0b185cad1ca3ac815e1bae464054fefd6334350ba3aa2004fca2b31c8bef3bb607a2610698c36cd039a2125523b7703a94437b20ff3dee3c9e6bff41bb2560cbb0e1abc6766dea60ff7371"}, {0xd0, 0x10e, 0xfffffff7, "e61b655bfeb6dcd02a920f783621d0ee13cf081b2259b35301be9aa319b6adff15e7a8f635d77547d5302bc58fa3056df83cbabf9b4e51875f96bbe889c916e4c35932dcbcb44c37f78235faae7ef960a21fef21d2055e2b21747b025b10f494bd0b31f22e94b4073efe007279b416bd3bba40ef1676277a0d3de9db661e7d9bc7f5ea74b596025dd3103b9c2476a7a512c51151a6662da27d9981ec744f13f7bbddc89ed4d85498bba76da35ffc0f99a88d1e29ae57aa20a76e"}, {0x198, 0x6, 0xf, "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"}], 0x3e8}, 0x20000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc14}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0xfc, 0xff, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffff6d, 0x6}, 0x8b001, 0x0, 0xfffffffd, 0x5, 0x1ff, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0c000000040000000400", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 4.313528576s ago: executing program 3 (id=3914): socket$kcm(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a", 0xa}], 0x1}, 0x40810) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 4.159709291s ago: executing program 2 (id=3916): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000000000007004000"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x7}, 0x0, 0x0, 0x3f, 0x7, 0x80000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) sendmsg$tipc(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x24000840}, 0x20040089) sendmsg$inet(r1, 0x0, 0x3406c096) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x3100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000002"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 4.079138373s ago: executing program 2 (id=3917): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000f00)="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", 0x13b}, {&(0x7f0000001cc0)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b8e153ccdf10b894d755e849d01bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f27cc89c43c9697697b53fee3e5f94497031ff2e460d2c011d0db5a289bde09ac884de124e62b5b6921c326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce00000000000000006494e8109c9ac6ab28db3c65c78c067856bdd51479d9a70cb70f61d174fb23c65e8b46b913796911739a545339ad546ffb3cc017cc0135c0ff04fd8b89a4c69a2abd4303faa480f4ec59a17bb07a8da9a7b7ce1a2bf5388aadce36071bff945c281d03e8d41338d5cbbd80ab84a726f5d1c395e67c74f8261cb83b9aac0fee3f9ac8bce811a4331264a8773fc1f7c9aa246295027d248754b80a2923d35e8016ea876a3b080cd7441d1b76cd566988ff0d4ad44e7de64de907165af57a2e0a7fb80394960bffb935", 0x192}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e010b4adb98889254740ac86a3c330836b8cc6764cf", 0xad}, {&(0x7f00000009c0)="a484d15488fb016289fa4e2b0b25648e7abf5a74ab5e75516b79103a9b0711dd70d5a141294998c249dda70370b7f076f3ec132111d4866784da73cd0f18993549e7b185584053fb7b48d2b271af8a14858473eb1edd82f3f4cd1150bee83bf4f624d8f873ec45fe60bb431221e35526a58313e39813e83be21f2834bbf6fc621f6d9894eb03b4c8690635c5ce509de10000000000000004d8d8550dc3763f779ad276b6f32236b8534ab6701184dac56e1af78c6013715d94b4d6cd59821581983f7e3b6c5369cda3f0bc763bdda2ec97d4542041be5568230b1a9b24e1d5efff9226066adcdfd53abc7078ff74aca53708cb4e62ed", 0xf6}, {&(0x7f0000000280)="1e99548791e2af0783a5fb7491fc25443d2e058693f3cd870c1663d05d3af54326988e27b183f0ad5b87bd7a70b7c3b40346af3fbfb348fff0643fb3c1ec898599fdd2e1297a8b00255f2963eb631b3693d5115645440f13396f91d4cd3b545065767881a0fec5c47f6e339be2c223f4a8f41145b08aeb17d8bd10994f2651608733d9eb11", 0x85}, {&(0x7f0000000340)="67c290d482a10882495f867ed79385faa0b6388ee82b92af60bca95ada5af87d58058187bb8df9b43b779df318f670d9b58f8a2f48a5403e99210618fd93eef36cd487c801", 0x45}, {&(0x7f00000005c0)="9a3e7621b79b5219fd3d3b34f06166f21f5c147fca3a827c27a6932ac6eb87eeb9e77033360dccd6140f236887ca67fba89fe087023580a96beae36ac2a43ff71af9f4dfd4191fb0e8afe33c2af62917ab1ffcad26223bd84dff7fe9178d04e160de516a3d52281f8bad6704debc823ffeab95", 0x73}], 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffbff}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000680)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001600)=@o_path={&(0x7f00000015c0)='./file0\x00', r2, 0x4000, r2}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$inet(r0, &(0x7f0000001580)={&(0x7f0000000740)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000e80)="e68ad9919dbaf6700ced75f9ac8e976724296530d8f4d706076cd45e12ee89ca7faae5885fe6863c07c7e3365eedc823f46d95d2dc612be64a867defbe9f9bd019be5d09cabb4988f4439800ba567a1e0a39b6", 0x53}, {&(0x7f0000001040)="a8d637f24f0c84b6142c83e49f0ecb2f021af479cba5777ba572708670652f7ef568799f943833c41f779f3345414af3cb023f6e90138fd6d038ddfde4e66401a04378d230cc4831762c133edac115b91e8d3b47be2579ea625bd670cd0b50204651fae235305defd5a954fc34ad18b2054f5ee8f4e6efe3645bf399a4130b35c425efad76fc6fc0212ea7aba27bc0eaf9833154dd016cd4c501c2dbfdc8ee13105773bb4c7a3d55f8968c065b6535d60143168fb713e715c66cbed701c519f1ea4fb30bc57f14dc2433079bb3cabb1f783e349aa013ecc41fd89ba0b931516a", 0xe0}, {&(0x7f0000001140)="ec43e7b1f9a92d0429585f9d46c655807e9cb5004d386aea7ac856b20133ed06615b68693b3de74391d6f46966e0b4e754b9d6282e5271520706fee7e97b56d637bcb9dc493a1e3f8550b170485bc326513eeff6db13cde12b4755023a060f1bb6dbc4e7e4e9a68ea536535e0573a4869d1c669bb6231ab2f3b2bf1a6257cd0d01dfd8d17324979e3446fc6c9f401851e4d6e12ac518399f7e50c74264eb6e54a2d505c149b380e4260d366a4c1cdd220a93047a273d", 0xb6}, {&(0x7f0000001200)="880991bf4e6a588fca30b3a0d01a8394926a13aeeb2e57905fb25bcfbc052db04dc775af1ac8550fb23fe4fb5b56987e8c4b623a6e450066b361db70c791d404b3fe43c9d373d81251d67130e279065c9b3b5c2b954f272a139a8c4e1a7d68d051cf7025e0b4093d13c69832a11ff5c40b6610a9713fda7b5b08f701a26110a9c1aee8416de820bcb2cbc4b2f8d21b379065e46e26821dba6e1ba6a46c2f8cd4572c139c2ea64aa341fc8e91ac2c8c3e3511114cc3fa53b4b7951a6103f3e0451eed3306dcab97d5a9a11dafe3a7ff51017dee1c7c4b46d9a7575476e595", 0xde}, {&(0x7f0000001300)="757b6108b9b7e51d09a64a3cb86ce5bf9bba0e662adce4b665dc9281917ec80d72370b8f95b052d6db35f15351a65ca09dc3b04c8ab116b5431a16fba68b50a0e38a5affe6108dc0bca131781101625d667a7aff78b14af5a22249564fef3c919780265f5ef276632321fc9e6e3d778074e93d4c04c7b513bdab3732a55403248a4e6c82090b74a451f084e4a783c33686a57168f643c151fbdb", 0x9a}, {&(0x7f00000013c0)="f6f6892558fbf8254b9ffb6fe41c34aafdc4747dcd6180a182c1cf9f90e48a9372d469e1cf7bb6dd6e60a11f1550d17159e434f573daf1af25e6594249c7fc97a75594e8124439c95bae1d20d157484784b639885413bbc3ff50acd2cf6f20", 0x5f}, {&(0x7f0000001440)="50e9676973", 0x5}], 0x7, &(0x7f0000001500)=[@ip_retopts={{0x50, 0x0, 0x7, {[@cipso={0x86, 0x3d, 0x3, [{0x7, 0x10, "181de4b33bc2d5c01e82e1b8a99d"}, {0x4, 0x3, "15"}, {0x5, 0x8, "0644581bbaff"}, {0x2, 0xe, "b63fae9adad14d0c83cb7251"}, {0x5, 0xe, "188f5229a0ca65e9531b8650"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdc}}], 0x80}, 0x8800) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r5], 0x48}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, &(0x7f0000000640)) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x11, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc4}, [@exit, @map_val={0x18, 0xa, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x25}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x24, '\x00', 0x0, 0x0, r7}, 0x94) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x14, 0x0, 0x46) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)=r4}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x7, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x70}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000cc0)={0x5, 0xa, 0x8164, 0xb874}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000d00)=[r6, r6, r6, r6], &(0x7f0000000d40)=[{0x3, 0x4, 0xf, 0xa}, {0x3, 0x3, 0x9, 0x8}, {0x5, 0x1, 0x3, 0x1}, {0x2, 0x5, 0x4, 0x7}, {0x1, 0x5, 0xf, 0xa}, {0x2, 0x4, 0x0, 0x8}, {0x0, 0x3, 0x2, 0x8}, {0x0, 0x4, 0x8}], 0x10, 0x9}, 0x94) 3.968484667s ago: executing program 2 (id=3918): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000f00)="9eb8a2c0e241fb0402ac67d48d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad3a3db73f406c4aec4ba5a715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c53e7017cf0fe0275d2d6f9531b12f12e29b903ffd774272360efe35269a1835d8f3e07382952f4fd47c9025f538c0bf576243026ed3d16af515d4e31055e765380602c4b42cb4e178350c5f387bdf01ff822a6a26b4cbd04523921adb0bddfd4c657e626ffa46f0a565ee807b56f98d90a48858679c0e5cada93389b479e4547690951c952e877d4139aaddd84d8b01dd791eff7b2c20cad352b1", 0x13b}, {&(0x7f0000001cc0)="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", 0x192}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e010b4adb98889254740ac86a3c330836b8cc6764cf", 0xad}, {&(0x7f00000009c0)="a484d15488fb016289fa4e2b0b25648e7abf5a74ab5e75516b79103a9b0711dd70d5a141294998c249dda70370b7f076f3ec132111d4866784da73cd0f18993549e7b185584053fb7b48d2b271af8a14858473eb1edd82f3f4cd1150bee83bf4f624d8f873ec45fe60bb431221e35526a58313e39813e83be21f2834bbf6fc621f6d9894eb03b4c8690635c5ce509de10000000000000004d8d8550dc3763f779ad276b6f32236b8534ab6701184dac56e1af78c6013715d94b4d6cd59821581983f7e3b6c5369cda3f0bc763bdda2ec97d4542041be5568230b1a9b24e1d5efff9226066adcdfd53abc7078ff74aca53708cb4e62ed", 0xf6}, {&(0x7f0000000280)="1e99548791e2af0783a5fb7491fc25443d2e058693f3cd870c1663d05d3af54326988e27b183f0ad5b87bd7a70b7c3b40346af3fbfb348fff0643fb3c1ec898599fdd2e1297a8b00255f2963eb631b3693d5115645440f13396f91d4cd3b545065767881a0fec5c47f6e339be2c223f4a8f41145b08aeb17d8bd10994f2651608733d9eb11", 0x85}, {&(0x7f0000000340)="67c290d482a10882495f867ed79385faa0b6388ee82b92af60bca95ada5af87d58058187bb8df9b43b779df318f670d9b58f8a2f48a5403e99210618fd93eef36cd487c801", 0x45}, {&(0x7f00000005c0)="9a3e7621b79b5219fd3d3b34f06166f21f5c147fca3a827c27a6932ac6eb87eeb9e77033360dccd6140f236887ca67fba89fe087023580a96beae36ac2a43ff71af9f4dfd4191fb0e8afe33c2af62917ab1ffcad26223bd84dff7fe9178d04e160de516a3d52281f8bad6704debc823ffeab95", 0x73}], 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffbff}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000680)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001600)=@o_path={&(0x7f00000015c0)='./file0\x00', r2, 0x4000, r2}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$inet(r0, &(0x7f0000001580)={&(0x7f0000000740)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000e80)="e68ad9919dbaf6700ced75f9ac8e976724296530d8f4d706076cd45e12ee89ca7faae5885fe6863c07c7e3365eedc823f46d95d2dc612be64a867defbe9f9bd019be5d09cabb4988f4439800ba567a1e0a39b6", 0x53}, {&(0x7f0000001040)="a8d637f24f0c84b6142c83e49f0ecb2f021af479cba5777ba572708670652f7ef568799f943833c41f779f3345414af3cb023f6e90138fd6d038ddfde4e66401a04378d230cc4831762c133edac115b91e8d3b47be2579ea625bd670cd0b50204651fae235305defd5a954fc34ad18b2054f5ee8f4e6efe3645bf399a4130b35c425efad76fc6fc0212ea7aba27bc0eaf9833154dd016cd4c501c2dbfdc8ee13105773bb4c7a3d55f8968c065b6535d60143168fb713e715c66cbed701c519f1ea4fb30bc57f14dc2433079bb3cabb1f783e349aa013ecc41fd89ba0b931516a", 0xe0}, {&(0x7f0000001140)="ec43e7b1f9a92d0429585f9d46c655807e9cb5004d386aea7ac856b20133ed06615b68693b3de74391d6f46966e0b4e754b9d6282e5271520706fee7e97b56d637bcb9dc493a1e3f8550b170485bc326513eeff6db13cde12b4755023a060f1bb6dbc4e7e4e9a68ea536535e0573a4869d1c669bb6231ab2f3b2bf1a6257cd0d01dfd8d17324979e3446fc6c9f401851e4d6e12ac518399f7e50c74264eb6e54a2d505c149b380e4260d366a4c1cdd220a93047a273d", 0xb6}, {&(0x7f0000001200)="880991bf4e6a588fca30b3a0d01a8394926a13aeeb2e57905fb25bcfbc052db04dc775af1ac8550fb23fe4fb5b56987e8c4b623a6e450066b361db70c791d404b3fe43c9d373d81251d67130e279065c9b3b5c2b954f272a139a8c4e1a7d68d051cf7025e0b4093d13c69832a11ff5c40b6610a9713fda7b5b08f701a26110a9c1aee8416de820bcb2cbc4b2f8d21b379065e46e26821dba6e1ba6a46c2f8cd4572c139c2ea64aa341fc8e91ac2c8c3e3511114cc3fa53b4b7951a6103f3e0451eed3306dcab97d5a9a11dafe3a7ff51017dee1c7c4b46d9a7575476e595", 0xde}, {&(0x7f0000001300)="757b6108b9b7e51d09a64a3cb86ce5bf9bba0e662adce4b665dc9281917ec80d72370b8f95b052d6db35f15351a65ca09dc3b04c8ab116b5431a16fba68b50a0e38a5affe6108dc0bca131781101625d667a7aff78b14af5a22249564fef3c919780265f5ef276632321fc9e6e3d778074e93d4c04c7b513bdab3732a55403248a4e6c82090b74a451f084e4a783c33686a57168f643c151fbdb", 0x9a}, {&(0x7f00000013c0)="f6f6892558fbf8254b9ffb6fe41c34aafdc4747dcd6180a182c1cf9f90e48a9372d469e1cf7bb6dd6e60a11f1550d17159e434f573daf1af25e6594249c7fc97a75594e8124439c95bae1d20d157484784b639885413bbc3ff50acd2cf6f20", 0x5f}, {&(0x7f0000001440)="50e9676973", 0x5}], 0x7, &(0x7f0000001500)=[@ip_retopts={{0x50, 0x0, 0x7, {[@cipso={0x86, 0x3d, 0x3, [{0x7, 0x10, "181de4b33bc2d5c01e82e1b8a99d"}, {0x4, 0x3, "15"}, {0x5, 0x8, "0644581bbaff"}, {0x2, 0xe, "b63fae9adad14d0c83cb7251"}, {0x5, 0xe, "188f5229a0ca65e9531b8650"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdc}}], 0x80}, 0x8800) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r5], 0x48}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, &(0x7f0000000640)) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9980, 0x0, 0x0, 0x2, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 3.848661251s ago: executing program 2 (id=3919): openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x113400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x104101, 0x4, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7fff, 0x3fff8000}, 0x0, 0x84, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1808000000000000000000000000000053ed4194813191faf243e41800000000000000000000001e000000952b3e4f233364aadf4b32b27492db19bec9745a0c52c29a542cd24c4a161b1be125f3d9c06c78689e22027078677dfd153fca31"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406a80016c0b00003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000001980)=[{0x180, 0x10f, 0x3, "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"}, {0xd0, 0x10e, 0xfffffff7, "e61b655bfeb6dcd02a920f783621d0ee13cf081b2259b35301be9aa319b6adff15e7a8f635d77547d5302bc58fa3056df83cbabf9b4e51875f96bbe889c916e4c35932dcbcb44c37f78235faae7ef960a21fef21d2055e2b21747b025b10f494bd0b31f22e94b4073efe007279b416bd3bba40ef1676277a0d3de9db661e7d9bc7f5ea74b596025dd3103b9c2476a7a512c51151a6662da27d9981ec744f13f7bbddc89ed4d85498bba76da35ffc0f99a88d1e29ae57aa20a76e"}, {0x1a0, 0x6, 0xf, "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"}], 0x3f0}, 0x20000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc14}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0xfc, 0xff, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffff6d, 0x6}, 0x8b001, 0x0, 0xfffffffd, 0x5, 0x1ff, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0c000000040000000400", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 3.701098956s ago: executing program 0 (id=3920): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a18101410000000001000000000000", 0x20}], 0x1}, 0x20000010) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x2, 0x1024, &(0x7f0000001540)=""/4132, 0x0, 0x5}, 0x94) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', r2, 0x4000, r0}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000070000008dc054500080000085000000757c14c133dbe4a457ee440000009500000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) (async) socket$kcm(0x2, 0x200000000000006, 0x0) (async) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0xe4, 0x677b8ca8, 0x7, 0x100, r2, 0x74, '\x00', 0x0, r5, 0x0, 0x0, 0x3, 0xc}, 0x50) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00'}, 0x18) 3.663688128s ago: executing program 2 (id=3921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="d8000000180081064e81f782db44b904d70a07748e021d086e06007c09e8fe55a10a0015400100142603600e120800060000000401a8001600a400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece09a97391e6f52ff8d763869a1b42a9ecbee5de6ccd40dd6e4edef", 0xdd}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x80000000, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000100000000000000030000001800000003000000dcdca91d8f5b00000000040000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xa}, 0x8, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x480, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x3a) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000340), 0x2a) 3.614981919s ago: executing program 1 (id=3922): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x9, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002027732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000008b70300000000002872000000500000008510000001000000950000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xa4, &(0x7f0000000280)=""/164, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000340)=r0, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000005c0)={0x0, 0x80, 0x7, 0x0, 0x5, 0x7f, 0x0, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x6, @perf_bp={&(0x7f00000004c0), 0x4}, 0x14000, 0x8, 0xb031, 0x7, 0x6, 0xffffffff, 0x4, 0x0, 0x1a, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a40)={&(0x7f00000003c0)="1b94565d494d020ef062672da7b25f661f080ba0c5a5820e52de31a43685863fc56b8f0394ac7d79dc", &(0x7f0000000400)=""/152, &(0x7f0000000a00)="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", &(0x7f0000001a00)="52c63e89f5653ec83e598d93a1fae91bb32e51024502d193ca07cf4f9aa9cfb45764a2944aa5da43a55a8edac1d5a1c6ce19acdf04", 0x4, r3}, 0x38) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x740b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x6890) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x81, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x6, 0x9, 0x6, 0x4002, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0xfffffffffffff24b) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32, @ANYBLOB="0500", @ANYRESOCT=r4, @ANYRES32=r6, @ANYRES64=r5], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x1, 0x6, 0x3, 0x10000, 0xffffffffffffffff, 0x80, '\x00', 0x0, r6, 0x0, 0x5, 0x2, 0xd, @void, @value, @value=r2}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0c000000040000000400000007000000000000005798932c20740cd820377d020c2643b354eba61dc256cc792ecd7aa606cc7e59", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000001280), 0x1, r8}, 0x38) syz_clone(0x804000, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000001a80)="f92faefc94a4796ca3dea6086f181e") perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xcf}, 0x0, 0x0, 0x6ff, 0x0, 0x0, 0x402000a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000200)='./file0\x00', r2, 0x4000, r7}, 0x18) setsockopt$sock_attach_bpf(r9, 0x29, 0x23, &(0x7f0000000040), 0xcf) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r10}, &(0x7f0000000640), &(0x7f00000002c0), 0x700}, 0x20) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.492811353s ago: executing program 0 (id=3923): openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x113400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x104101, 0x4, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7fff, 0x3fff8000}, 0x0, 0x84, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1808000000000000000000000000000053ed4194813191faf243e41800000000000000000000001e000000952b3e4f233364aadf4b32b27492db19bec9745a0c52c29a542cd24c4a161b1be125f3d9c06c78689e22027078677dfd153fca31"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406a80016c0b00003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000001980)=[{0x180, 0x10f, 0x3, "1eb0194e944c3a76a1ad11e7a8bd462ff867908a8e8feab43ea41a99493694cf650a0fee34cffcd2b438fb932ce2aa972212a4fad22704230560f89c7066affb6e8573656309951cad7bfd634bd17f0195003c4df5288c8647e0e0afa0b1ff032f78ad1ebc6bca2b6fbd3cf9c2c9e3509a2a8ae45ae0a40aa7e301127dd32083c5458d1028ef18fc6be5967fc5224e4761ab9166248b6f9ca212d1721601604fb1b4015f67070179f66a8fa57461bd2e997fd3fa247bce9141e2531d53161fcdc93399f671c1cacbbb5e04c9abd2943832d83717f23ea6dc43e68cc1609c3ed57a509d97096208c5c0b2f8ba93bfb71785a5b73477f40ddc25d8edb493d1f66ad468a5da637acea95a04456f1b6ef50c76fc642b4a82eb3b69171ed24d944dc9a03b0b185cad1ca3ac815e1bae464054fefd6334350ba3aa2004fca2b31c8bef3bb607a2610698c36cd039a2125523b7703a94437b20ff3dee3c9e6bff41bb2560cbb0e1abc6766dea60ff7371"}, {0xd0, 0x10e, 0xfffffff7, "e61b655bfeb6dcd02a920f783621d0ee13cf081b2259b35301be9aa319b6adff15e7a8f635d77547d5302bc58fa3056df83cbabf9b4e51875f96bbe889c916e4c35932dcbcb44c37f78235faae7ef960a21fef21d2055e2b21747b025b10f494bd0b31f22e94b4073efe007279b416bd3bba40ef1676277a0d3de9db661e7d9bc7f5ea74b596025dd3103b9c2476a7a512c51151a6662da27d9981ec744f13f7bbddc89ed4d85498bba76da35ffc0f99a88d1e29ae57aa20a76e"}, {0x198, 0x6, 0xf, "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"}], 0x3e8}, 0x20000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc14}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0xfc, 0xff, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffff6d, 0x6}, 0x8b001, 0x0, 0xfffffffd, 0x5, 0x1ff, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0c000000040000000400", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 3.381921927s ago: executing program 3 (id=3924): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000300)='5', 0x1}], 0x1}, 0x8041) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffdc, 0x0, 0x41000, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400), 0x1}, 0x0) 3.214820442s ago: executing program 3 (id=3925): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200", 0x20}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x40, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, 0x0, 0x0) close(0x3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x118488, 0x5, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x3ff, 0x0, 0xad2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688892f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.090114256s ago: executing program 0 (id=3926): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400001"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x7}, 0x0, 0x0, 0x3f, 0x7, 0x80000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) sendmsg$tipc(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x24000840}, 0x20040089) sendmsg$inet(r1, 0x0, 0x3406c096) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x3100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000002"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 3.039599808s ago: executing program 1 (id=3927): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000f00)="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", 0x13b}, {&(0x7f0000001cc0)="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", 0x192}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e010b4adb98889254740ac86a3c330836b8cc6764cf", 0xad}, {&(0x7f00000009c0)="a484d15488fb016289fa4e2b0b25648e7abf5a74ab5e75516b79103a9b0711dd70d5a141294998c249dda70370b7f076f3ec132111d4866784da73cd0f18993549e7b185584053fb7b48d2b271af8a14858473eb1edd82f3f4cd1150bee83bf4f624d8f873ec45fe60bb431221e35526a58313e39813e83be21f2834bbf6fc621f6d9894eb03b4c8690635c5ce509de10000000000000004d8d8550dc3763f779ad276b6f32236b8534ab6701184dac56e1af78c6013715d94b4d6cd59821581983f7e3b6c5369cda3f0bc763bdda2ec97d4542041be5568230b1a9b24e1d5efff9226066adcdfd53abc7078ff74aca53708cb4e62ed", 0xf6}, {&(0x7f0000000280)="1e99548791e2af0783a5fb7491fc25443d2e058693f3cd870c1663d05d3af54326988e27b183f0ad5b87bd7a70b7c3b40346af3fbfb348fff0643fb3c1ec898599fdd2e1297a8b00255f2963eb631b3693d5115645440f13396f91d4cd3b545065767881a0fec5c47f6e339be2c223f4a8f41145b08aeb17d8bd10994f2651608733d9eb11", 0x85}, {&(0x7f0000000340)="67c290d482a10882495f867ed79385faa0b6388ee82b92af60bca95ada5af87d58058187bb8df9b43b779df318f670d9b58f8a2f48a5403e99210618fd93eef36cd487c801", 0x45}, {&(0x7f00000005c0)="9a3e7621b79b5219fd3d3b34f06166f21f5c147fca3a827c27a6932ac6eb87eeb9e77033360dccd6140f236887ca67fba89fe087023580a96beae36ac2a43ff71af9f4dfd4191fb0e8afe33c2af62917ab1ffcad26223bd84dff7fe9178d04e160de516a3d52281f8bad6704debc823ffeab95", 0x73}], 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffbff}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000680)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001600)=@o_path={&(0x7f00000015c0)='./file0\x00', r2, 0x4000, r2}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$inet(r0, &(0x7f0000001580)={&(0x7f0000000740)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000e80)="e68ad9919dbaf6700ced75f9ac8e976724296530d8f4d706076cd45e12ee89ca7faae5885fe6863c07c7e3365eedc823f46d95d2dc612be64a867defbe9f9bd019be5d09cabb4988f4439800ba567a1e0a39b6", 0x53}, {&(0x7f0000001040)="a8d637f24f0c84b6142c83e49f0ecb2f021af479cba5777ba572708670652f7ef568799f943833c41f779f3345414af3cb023f6e90138fd6d038ddfde4e66401a04378d230cc4831762c133edac115b91e8d3b47be2579ea625bd670cd0b50204651fae235305defd5a954fc34ad18b2054f5ee8f4e6efe3645bf399a4130b35c425efad76fc6fc0212ea7aba27bc0eaf9833154dd016cd4c501c2dbfdc8ee13105773bb4c7a3d55f8968c065b6535d60143168fb713e715c66cbed701c519f1ea4fb30bc57f14dc2433079bb3cabb1f783e349aa013ecc41fd89ba0b931516a", 0xe0}, {&(0x7f0000001140)="ec43e7b1f9a92d0429585f9d46c655807e9cb5004d386aea7ac856b20133ed06615b68693b3de74391d6f46966e0b4e754b9d6282e5271520706fee7e97b56d637bcb9dc493a1e3f8550b170485bc326513eeff6db13cde12b4755023a060f1bb6dbc4e7e4e9a68ea536535e0573a4869d1c669bb6231ab2f3b2bf1a6257cd0d01dfd8d17324979e3446fc6c9f401851e4d6e12ac518399f7e50c74264eb6e54a2d505c149b380e4260d366a4c1cdd220a93047a273d", 0xb6}, {&(0x7f0000001200)="880991bf4e6a588fca30b3a0d01a8394926a13aeeb2e57905fb25bcfbc052db04dc775af1ac8550fb23fe4fb5b56987e8c4b623a6e450066b361db70c791d404b3fe43c9d373d81251d67130e279065c9b3b5c2b954f272a139a8c4e1a7d68d051cf7025e0b4093d13c69832a11ff5c40b6610a9713fda7b5b08f701a26110a9c1aee8416de820bcb2cbc4b2f8d21b379065e46e26821dba6e1ba6a46c2f8cd4572c139c2ea64aa341fc8e91ac2c8c3e3511114cc3fa53b4b7951a6103f3e0451eed3306dcab97d5a9a11dafe3a7ff51017dee1c7c4b46d9a7575476e595", 0xde}, {&(0x7f0000001300)="757b6108b9b7e51d09a64a3cb86ce5bf9bba0e662adce4b665dc9281917ec80d72370b8f95b052d6db35f15351a65ca09dc3b04c8ab116b5431a16fba68b50a0e38a5affe6108dc0bca131781101625d667a7aff78b14af5a22249564fef3c919780265f5ef276632321fc9e6e3d778074e93d4c04c7b513bdab3732a55403248a4e6c82090b74a451f084e4a783c33686a57168f643c151fbdb", 0x9a}, {&(0x7f00000013c0)="f6f6892558fbf8254b9ffb6fe41c34aafdc4747dcd6180a182c1cf9f90e48a9372d469e1cf7bb6dd6e60a11f1550d17159e434f573daf1af25e6594249c7fc97a75594e8124439c95bae1d20d157484784b639885413bbc3ff50acd2cf6f20", 0x5f}, {&(0x7f0000001440)="50e9676973", 0x5}], 0x7, &(0x7f0000001500)=[@ip_retopts={{0x50, 0x0, 0x7, {[@cipso={0x86, 0x3d, 0x3, [{0x7, 0x10, "181de4b33bc2d5c01e82e1b8a99d"}, {0x4, 0x3, "15"}, {0x5, 0x8, "0644581bbaff"}, {0x2, 0xe, "b63fae9adad14d0c83cb7251"}, {0x5, 0xe, "188f5229a0ca65e9531b8650"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdc}}], 0x80}, 0x8800) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r5], 0x48}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, &(0x7f0000000640)) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x11, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc4}, [@exit, @map_val={0x18, 0xa, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x25}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x24, '\x00', 0x0, 0x0, r7}, 0x94) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x14, 0x0, 0x46) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)=r4}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x7, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x70}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000cc0)={0x5, 0xa, 0x8164, 0xb874}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000d00)=[r6, r6, r6, r6], &(0x7f0000000d40)=[{0x3, 0x4, 0xf, 0xa}, {0x3, 0x3, 0x9, 0x8}, {0x5, 0x1, 0x3, 0x1}, {0x2, 0x5, 0x4, 0x7}, {0x1, 0x5, 0xf, 0xa}, {0x2, 0x4, 0x0, 0x8}, {0x0, 0x3, 0x2, 0x8}, {0x0, 0x4, 0x8}], 0x10, 0x9}, 0x94) 71.019927ms ago: executing program 2 (id=3928): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b9104006"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133}], 0x9}, 0x40020000) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) recvmsg$unix(r1, 0x0, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) 52.754978ms ago: executing program 3 (id=3929): openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x113400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x104101, 0x4, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7fff, 0x3fff8000}, 0x0, 0x84, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1808000000000000000000000000000053ed4194813191faf243e41800000000000000000000001e000000952b3e4f233364aadf4b32b27492db19bec9745a0c52c29a542cd24c4a161b1be125f3d9c06c78689e22027078677dfd153fca31"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406a80016c0b00003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000001980)=[{0x180, 0x10f, 0x3, "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"}, {0xd0, 0x10e, 0xfffffff7, "e61b655bfeb6dcd02a920f783621d0ee13cf081b2259b35301be9aa319b6adff15e7a8f635d77547d5302bc58fa3056df83cbabf9b4e51875f96bbe889c916e4c35932dcbcb44c37f78235faae7ef960a21fef21d2055e2b21747b025b10f494bd0b31f22e94b4073efe007279b416bd3bba40ef1676277a0d3de9db661e7d9bc7f5ea74b596025dd3103b9c2476a7a512c51151a6662da27d9981ec744f13f7bbddc89ed4d85498bba76da35ffc0f99a88d1e29ae57aa20a76e"}, {0x1a0, 0x6, 0xf, "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"}], 0x3f0}, 0x20000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc14}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0xfc, 0xff, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffff6d, 0x6}, 0x8b001, 0x0, 0xfffffffd, 0x5, 0x1ff, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0c000000040000000400", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 42.134489ms ago: executing program 0 (id=3930): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000400000042000000", @ANYRES32, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000b20176ab93e0b32dddef8d990a8c22c4b400000000000000000000070001290000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r7}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000005180)={@map, 0xffffffffffffffff, 0x1e, 0x3018}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a020000000880802fb0a000200110ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 0s ago: executing program 1 (id=3931): r0 = socket$kcm(0x2a, 0x2, 0x0) recvmsg(r0, 0x0, 0x40002182) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, 0x0) kernel console output (not intermixed with test programs): mes 0 [ 502.417892][T15510] CPU: 0 PID: 15510 Comm: syz.0.3433 Not tainted syzkaller #0 [ 502.425384][T15510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 502.435465][T15510] Call Trace: [ 502.438759][T15510] [ 502.441711][T15510] dump_stack_lvl+0x18c/0x250 [ 502.446417][T15510] ? show_regs_print_info+0x20/0x20 [ 502.451647][T15510] ? load_image+0x420/0x420 [ 502.456173][T15510] ? __might_sleep+0xe0/0xe0 [ 502.460779][T15510] ? __lock_acquire+0x7d80/0x7d80 [ 502.465826][T15510] should_fail_ex+0x394/0x4c0 [ 502.470547][T15510] should_failslab+0x9/0x20 [ 502.475083][T15510] slab_pre_alloc_hook+0x59/0x300 [ 502.480131][T15510] ? sk_prot_alloc+0xe7/0x210 [ 502.484833][T15510] ? sk_prot_alloc+0xe7/0x210 [ 502.489533][T15510] __kmem_cache_alloc_node+0x53/0x250 [ 502.494934][T15510] ? sk_prot_alloc+0xe7/0x210 [ 502.499628][T15510] __kmalloc+0xa7/0x240 [ 502.503815][T15510] sk_prot_alloc+0xe7/0x210 [ 502.508342][T15510] ? sk_alloc+0x24/0x350 [ 502.512612][T15510] sk_alloc+0x3a/0x350 [ 502.516701][T15510] ? bpf_ctx_init+0x154/0x190 [ 502.521406][T15510] bpf_prog_test_run_skb+0x371/0x18f0 [ 502.526813][T15510] ? __fget_files+0x28/0x460 [ 502.531429][T15510] ? __fget_files+0x3fc/0x460 [ 502.536140][T15510] ? cpu_online+0x60/0x60 [ 502.540492][T15510] bpf_prog_test_run+0x31f/0x390 [ 502.545452][T15510] __sys_bpf+0x49d/0x890 [ 502.549718][T15510] ? bpf_link_show_fdinfo+0x390/0x390 [ 502.555119][T15510] ? lock_chain_count+0x20/0x20 [ 502.559997][T15510] __x64_sys_bpf+0x7c/0x90 [ 502.564439][T15510] do_syscall_64+0x55/0xb0 [ 502.568874][T15510] ? clear_bhb_loop+0x40/0x90 [ 502.573568][T15510] ? clear_bhb_loop+0x40/0x90 [ 502.578269][T15510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.584190][T15510] RIP: 0033:0x7f247ff9ce59 [ 502.588624][T15510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.608243][T15510] RSP: 002b:00007f2480f37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 502.616681][T15510] RAX: ffffffffffffffda RBX: 00007f2480215fa0 RCX: 00007f247ff9ce59 [ 502.624671][T15510] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 502.632654][T15510] RBP: 00007f2480f37090 R08: 0000000000000000 R09: 0000000000000000 [ 502.640633][T15510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.648602][T15510] R13: 00007f2480216038 R14: 00007f2480215fa0 R15: 00007ffe86831c38 [ 502.656597][T15510] [ 502.722534][T15517] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.3437'. [ 502.738556][T15518] netlink: 'syz.2.3436': attribute type 28 has an invalid length. [ 502.746529][T15518] netlink: 'syz.2.3436': attribute type 29 has an invalid length. [ 503.110361][T15533] FAULT_INJECTION: forcing a failure. [ 503.110361][T15533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.139815][T15533] CPU: 0 PID: 15533 Comm: syz.3.3441 Not tainted syzkaller #0 [ 503.147307][T15533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 503.157378][T15533] Call Trace: [ 503.160672][T15533] [ 503.163615][T15533] dump_stack_lvl+0x18c/0x250 [ 503.168309][T15533] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 503.174480][T15533] ? show_regs_print_info+0x20/0x20 [ 503.179691][T15533] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 503.185865][T15533] ? dump_stack+0x9/0x20 [ 503.190123][T15533] should_fail_ex+0x394/0x4c0 [ 503.194816][T15533] _copy_from_user+0x2f/0xe0 [ 503.199419][T15533] sctp_setsockopt+0x19e/0x11e0 [ 503.204285][T15533] ? sock_common_recvmsg+0x190/0x190 [ 503.209578][T15533] do_sock_setsockopt+0x175/0x1a0 [ 503.214614][T15533] __x64_sys_setsockopt+0x182/0x200 [ 503.219823][T15533] do_syscall_64+0x55/0xb0 [ 503.224251][T15533] ? clear_bhb_loop+0x40/0x90 [ 503.228928][T15533] ? clear_bhb_loop+0x40/0x90 [ 503.233608][T15533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.239511][T15533] RIP: 0033:0x7fdad159ce59 [ 503.243934][T15533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.263544][T15533] RSP: 002b:00007fdad23ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 503.271966][T15533] RAX: ffffffffffffffda RBX: 00007fdad1815fa0 RCX: 00007fdad159ce59 [ 503.279940][T15533] RDX: 0000000000000024 RSI: 0000000000000084 RDI: 0000000000000006 [ 503.287914][T15533] RBP: 00007fdad23ba090 R08: 0000000000000004 R09: 0000000000000000 [ 503.295892][T15533] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.303869][T15533] R13: 00007fdad1816038 R14: 00007fdad1815fa0 R15: 00007fff4d4d2338 [ 503.311859][T15533] [ 503.461262][T15541] sctp: [Deprecated]: syz.0.3444 (pid 15541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 503.461262][T15541] Use struct sctp_sack_info instead [ 503.527604][T15544] FAULT_INJECTION: forcing a failure. [ 503.527604][T15544] name failslab, interval 1, probability 0, space 0, times 0 [ 503.548821][T15544] CPU: 1 PID: 15544 Comm: syz.3.3448 Not tainted syzkaller #0 [ 503.556319][T15544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 503.566388][T15544] Call Trace: [ 503.569663][T15544] [ 503.572591][T15544] dump_stack_lvl+0x18c/0x250 [ 503.577265][T15544] ? sctp_sendmsg+0x1519/0x27b0 [ 503.582114][T15544] ? ___sys_sendmsg+0x2a6/0x360 [ 503.586960][T15544] ? show_regs_print_info+0x20/0x20 [ 503.592150][T15544] ? load_image+0x420/0x420 [ 503.596657][T15544] should_fail_ex+0x394/0x4c0 [ 503.601343][T15544] should_failslab+0x9/0x20 [ 503.605854][T15544] slab_pre_alloc_hook+0x59/0x300 [ 503.610879][T15544] ? sctp_add_bind_addr+0x8c/0x360 [ 503.615986][T15544] __kmem_cache_alloc_node+0x53/0x250 [ 503.621358][T15544] ? sctp_add_bind_addr+0x8c/0x360 [ 503.626474][T15544] kmalloc_trace+0x2a/0xe0 [ 503.630891][T15544] sctp_add_bind_addr+0x8c/0x360 [ 503.635824][T15544] sctp_copy_local_addr_list+0x31b/0x4e0 [ 503.641453][T15544] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 503.647168][T15544] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 503.653231][T15544] ? sctp_v6_is_any+0x64/0x70 [ 503.657902][T15544] ? sctp_copy_one_addr+0x8c/0x350 [ 503.663011][T15544] sctp_bind_addr_copy+0xb3/0x3c0 [ 503.668031][T15544] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 503.674362][T15544] sctp_connect_new_asoc+0x2f9/0x6a0 [ 503.679655][T15544] ? __sctp_connect+0xd80/0xd80 [ 503.684505][T15544] ? __local_bh_enable_ip+0x13a/0x1c0 [ 503.689871][T15544] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 503.695415][T15544] ? security_sctp_bind_connect+0x89/0xb0 [ 503.701136][T15544] sctp_sendmsg+0x1519/0x27b0 [ 503.705819][T15544] ? sctp_getsockopt+0xb60/0xb60 [ 503.710756][T15544] ? aa_sk_perm+0x83c/0x970 [ 503.715260][T15544] ? aa_af_perm+0x330/0x330 [ 503.719755][T15544] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 503.726164][T15544] ? sock_rps_record_flow+0x19/0x3f0 [ 503.731455][T15544] ? inet_sendmsg+0xce/0x2a0 [ 503.736045][T15544] ? inet_send_prepare+0x250/0x250 [ 503.741154][T15544] ____sys_sendmsg+0x61b/0x980 [ 503.745919][T15544] ? __asan_memset+0x22/0x40 [ 503.750507][T15544] ? __sys_sendmsg_sock+0x30/0x30 [ 503.755521][T15544] ? __import_iovec+0x5f2/0x850 [ 503.760376][T15544] ? import_iovec+0x73/0xa0 [ 503.764875][T15544] ___sys_sendmsg+0x2a6/0x360 [ 503.769549][T15544] ? __sys_sendmsg+0x2b0/0x2b0 [ 503.774321][T15544] ? __lock_acquire+0x7d80/0x7d80 [ 503.779357][T15544] __se_sys_sendmsg+0x1d0/0x2c0 [ 503.784205][T15544] ? __x64_sys_sendmsg+0x80/0x80 [ 503.789147][T15544] ? lockdep_hardirqs_on+0x98/0x150 [ 503.794344][T15544] do_syscall_64+0x55/0xb0 [ 503.798754][T15544] ? clear_bhb_loop+0x40/0x90 [ 503.803420][T15544] ? clear_bhb_loop+0x40/0x90 [ 503.808091][T15544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.813981][T15544] RIP: 0033:0x7fdad159ce59 [ 503.818390][T15544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.837990][T15544] RSP: 002b:00007fdad23ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.846400][T15544] RAX: ffffffffffffffda RBX: 00007fdad1815fa0 RCX: 00007fdad159ce59 [ 503.854366][T15544] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 503.862330][T15544] RBP: 00007fdad23ba090 R08: 0000000000000000 R09: 0000000000000000 [ 503.870292][T15544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 503.878259][T15544] R13: 00007fdad1816038 R14: 00007fdad1815fa0 R15: 00007fff4d4d2338 [ 503.886233][T15544] [ 503.935786][T15487] Bluetooth: hci0: command 0x0406 tx timeout [ 504.933860][T15580] __nla_validate_parse: 4 callbacks suppressed [ 504.933878][T15580] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.3460'. [ 504.940115][T15582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 505.044912][T15582] netlink: 'syz.2.3462': attribute type 9 has an invalid length. [ 505.092781][T15582] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3462'. [ 505.178906][T15592] netlink: 'syz.2.3462': attribute type 10 has an invalid length. [ 505.279713][T15593] netlink: 'syz.1.3463': attribute type 10 has an invalid length. [ 505.383139][T15586] netlink: 'syz.1.3463': attribute type 9 has an invalid length. [ 505.401043][T15586] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3463'. [ 505.457401][T15587] netlink: 'syz.2.3462': attribute type 9 has an invalid length. [ 505.468046][T15587] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3462'. [ 505.626696][T15585] netlink: 'syz.1.3463': attribute type 9 has an invalid length. [ 505.638698][T15585] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3463'. [ 505.728510][T15602] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3467'. [ 505.852695][T15602] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3467'. [ 506.169415][T15619] FAULT_INJECTION: forcing a failure. [ 506.169415][T15619] name failslab, interval 1, probability 0, space 0, times 0 [ 506.188989][T15619] CPU: 1 PID: 15619 Comm: syz.2.3474 Not tainted syzkaller #0 [ 506.196481][T15619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 506.206537][T15619] Call Trace: [ 506.209810][T15619] [ 506.212737][T15619] dump_stack_lvl+0x18c/0x250 [ 506.217419][T15619] ? show_regs_print_info+0x20/0x20 [ 506.222617][T15619] ? load_image+0x420/0x420 [ 506.227121][T15619] ? __lock_acquire+0x7d80/0x7d80 [ 506.232147][T15619] should_fail_ex+0x394/0x4c0 [ 506.236834][T15619] should_failslab+0x9/0x20 [ 506.241340][T15619] slab_pre_alloc_hook+0x59/0x300 [ 506.246368][T15619] ? __lock_acquire+0x7d80/0x7d80 [ 506.251387][T15619] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 506.257295][T15619] kmem_cache_alloc+0x5a/0x2c0 [ 506.262062][T15619] ? rxrpc_alloc_call+0x274/0xc60 [ 506.267095][T15619] ? rxrpc_alloc_call+0x79/0xc60 [ 506.272029][T15619] rxrpc_alloc_call+0x274/0xc60 [ 506.276883][T15619] rxrpc_new_client_call+0xea/0x1400 [ 506.282177][T15619] rxrpc_do_sendmsg+0xe03/0x12d0 [ 506.287122][T15619] ? rxrpc_propose_abort+0x1f0/0x1f0 [ 506.292405][T15619] ? __local_bh_enable_ip+0x13a/0x1c0 [ 506.297780][T15619] ? rxrpc_sendmsg+0x373/0x5b0 [ 506.302543][T15619] ? rxrpc_getsockopt+0x150/0x150 [ 506.307565][T15619] ____sys_sendmsg+0x61b/0x980 [ 506.312333][T15619] ? __sys_sendmsg_sock+0x30/0x30 [ 506.317363][T15619] ? __import_iovec+0x5f2/0x850 [ 506.322214][T15619] ? import_iovec+0x73/0xa0 [ 506.326715][T15619] ___sys_sendmsg+0x2a6/0x360 [ 506.331391][T15619] ? get_pid_task+0x20/0x1e0 [ 506.335983][T15619] ? __sys_sendmsg+0x2b0/0x2b0 [ 506.340764][T15619] ? __lock_acquire+0x7d80/0x7d80 [ 506.345803][T15619] __se_sys_sendmsg+0x1d0/0x2c0 [ 506.350652][T15619] ? __x64_sys_sendmsg+0x80/0x80 [ 506.355601][T15619] ? lockdep_hardirqs_on+0x98/0x150 [ 506.360807][T15619] do_syscall_64+0x55/0xb0 [ 506.365238][T15619] ? clear_bhb_loop+0x40/0x90 [ 506.369908][T15619] ? clear_bhb_loop+0x40/0x90 [ 506.374584][T15619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.380484][T15619] RIP: 0033:0x7f4b6c79ce59 [ 506.384898][T15619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.404500][T15619] RSP: 002b:00007f4b6d583028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.412915][T15619] RAX: ffffffffffffffda RBX: 00007f4b6ca15fa0 RCX: 00007f4b6c79ce59 [ 506.420880][T15619] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000004 [ 506.428850][T15619] RBP: 00007f4b6d583090 R08: 0000000000000000 R09: 0000000000000000 [ 506.436814][T15619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.444778][T15619] R13: 00007f4b6ca16038 R14: 00007f4b6ca15fa0 R15: 00007ffe7de56f38 [ 506.452762][T15619] [ 506.592184][T15626] FAULT_INJECTION: forcing a failure. [ 506.592184][T15626] name failslab, interval 1, probability 0, space 0, times 0 [ 506.611298][T15626] CPU: 0 PID: 15626 Comm: syz.2.3475 Not tainted syzkaller #0 [ 506.618827][T15626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 506.628923][T15626] Call Trace: [ 506.632241][T15626] [ 506.635208][T15626] dump_stack_lvl+0x18c/0x250 [ 506.639944][T15626] ? show_regs_print_info+0x20/0x20 [ 506.645194][T15626] ? load_image+0x420/0x420 [ 506.649794][T15626] should_fail_ex+0x394/0x4c0 [ 506.654550][T15626] should_failslab+0x9/0x20 [ 506.659103][T15626] slab_pre_alloc_hook+0x59/0x300 [ 506.664180][T15626] ? lockdep_init_map_type+0x9c/0x8e0 [ 506.669599][T15626] ? nf_ct_ext_add+0x1ad/0x440 [ 506.674411][T15626] ? nf_ct_ext_add+0x1ad/0x440 [ 506.679221][T15626] __kmem_cache_alloc_node+0x53/0x250 [ 506.684663][T15626] ? nf_ct_ext_add+0x1ad/0x440 [ 506.689471][T15626] __kmalloc_node_track_caller+0xa4/0x230 [ 506.695239][T15626] ? rcu_is_watching+0x15/0xb0 [ 506.700065][T15626] krealloc+0x86/0x120 [ 506.704194][T15626] nf_ct_ext_add+0x1ad/0x440 [ 506.708866][T15626] init_conntrack+0x5e9/0xf40 [ 506.713623][T15626] ? early_drop+0x7f0/0x7f0 [ 506.718201][T15626] ? nf_conntrack_find_get+0x670/0x670 [ 506.723694][T15626] ? __local_bh_enable_ip+0x13a/0x1c0 [ 506.729096][T15626] ? __siphash_unaligned+0x25c/0x3d0 [ 506.734417][T15626] nf_conntrack_in+0xc29/0x1630 [ 506.739338][T15626] ? nf_ct_pernet+0x270/0x270 [ 506.744035][T15626] ? lockdep_hardirqs_on+0x98/0x150 [ 506.749268][T15626] ? ipt_do_table+0x2c5/0x15c0 [ 506.754078][T15626] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 506.759553][T15626] ? ipv4_conntrack_local+0x123/0x200 [ 506.764963][T15626] ? ipv4_conntrack_in+0x20/0x20 [ 506.769927][T15626] nf_hook_slow+0xbd/0x200 [ 506.774373][T15626] ? nf_hook+0x390/0x390 [ 506.778632][T15626] nf_hook+0x228/0x390 [ 506.782731][T15626] ? nf_hook+0xa2/0x390 [ 506.786905][T15626] ? __ip_local_out+0x5f0/0x5f0 [ 506.791786][T15626] ? nf_hook+0x390/0x390 [ 506.796060][T15626] ? ip_fast_csum+0x1ee/0x2b0 [ 506.800766][T15626] __ip_local_out+0x4db/0x5f0 [ 506.805457][T15626] ? nf_hook+0x390/0x390 [ 506.809727][T15626] ip_send_skb+0x4c/0x1d0 [ 506.814087][T15626] raw_sendmsg+0x15de/0x1ba0 [ 506.818739][T15626] ? compat_raw_ioctl+0x70/0x70 [ 506.823672][T15626] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 506.830116][T15626] ? sock_rps_record_flow+0x19/0x3f0 [ 506.835428][T15626] ? inet_sendmsg+0x7e/0x2a0 [ 506.840031][T15626] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 506.845333][T15626] ? inet_send_prepare+0x250/0x250 [ 506.850468][T15626] ____sys_sendmsg+0x61b/0x980 [ 506.855268][T15626] ? __asan_memset+0x22/0x40 [ 506.859880][T15626] ? __sys_sendmsg_sock+0x30/0x30 [ 506.864921][T15626] ? __import_iovec+0x3fa/0x850 [ 506.869806][T15626] ? import_iovec+0x73/0xa0 [ 506.874334][T15626] ___sys_sendmsg+0x2a6/0x360 [ 506.879041][T15626] ? __sys_sendmsg+0x2b0/0x2b0 [ 506.883874][T15626] ? __lock_acquire+0x7d80/0x7d80 [ 506.888982][T15626] __se_sys_sendmsg+0x1d0/0x2c0 [ 506.893862][T15626] ? __x64_sys_sendmsg+0x80/0x80 [ 506.898857][T15626] ? lockdep_hardirqs_on+0x98/0x150 [ 506.904086][T15626] do_syscall_64+0x55/0xb0 [ 506.908514][T15626] ? clear_bhb_loop+0x40/0x90 [ 506.913213][T15626] ? clear_bhb_loop+0x40/0x90 [ 506.917916][T15626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.923828][T15626] RIP: 0033:0x7f4b6c79ce59 [ 506.928259][T15626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.947884][T15626] RSP: 002b:00007f4b6d583028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.956319][T15626] RAX: ffffffffffffffda RBX: 00007f4b6ca15fa0 RCX: 00007f4b6c79ce59 [ 506.964310][T15626] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 506.972300][T15626] RBP: 00007f4b6d583090 R08: 0000000000000000 R09: 0000000000000000 [ 506.980283][T15626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.988274][T15626] R13: 00007f4b6ca16038 R14: 00007f4b6ca15fa0 R15: 00007ffe7de56f38 [ 506.996309][T15626] [ 507.033010][T15624] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 507.166371][T15627] validate_nla: 2 callbacks suppressed [ 507.166389][T15627] netlink: 'syz.3.3476': attribute type 9 has an invalid length. [ 507.202428][T15629] FAULT_INJECTION: forcing a failure. [ 507.202428][T15629] name failslab, interval 1, probability 0, space 0, times 0 [ 507.211089][T15627] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3476'. [ 507.220241][T15629] CPU: 1 PID: 15629 Comm: syz.0.3477 Not tainted syzkaller #0 [ 507.231823][T15629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 507.241891][T15629] Call Trace: [ 507.244892][T15630] netlink: 'syz.3.3476': attribute type 10 has an invalid length. [ 507.245166][T15629] [ 507.245177][T15629] dump_stack_lvl+0x18c/0x250 [ 507.245208][T15629] ? show_regs_print_info+0x20/0x20 [ 507.245230][T15629] ? load_image+0x420/0x420 [ 507.245254][T15629] ? __might_sleep+0xe0/0xe0 [ 507.245276][T15629] ? __lock_acquire+0x7d80/0x7d80 [ 507.245295][T15629] ? perf_trace_lock+0xfc/0x3b0 [ 507.245319][T15629] should_fail_ex+0x394/0x4c0 [ 507.245351][T15629] should_failslab+0x9/0x20 [ 507.245373][T15629] slab_pre_alloc_hook+0x59/0x300 [ 507.245400][T15629] ? __get_vm_area_node+0x125/0x370 [ 507.245423][T15629] __kmem_cache_alloc_node+0x53/0x250 [ 507.245452][T15629] ? __get_vm_area_node+0x125/0x370 [ 507.245474][T15629] kmalloc_node_trace+0x26/0xe0 [ 507.245501][T15629] __get_vm_area_node+0x125/0x370 [ 507.245531][T15629] __vmalloc_node_range+0x36f/0x1320 [ 507.245554][T15629] ? netlink_sendmsg+0x602/0xbf0 [ 507.262334][T15624] netlink: 'syz.3.3476': attribute type 9 has an invalid length. [ 507.266125][T15629] ? netlink_insert+0x1094/0x1390 [ 507.266167][T15629] ? netlink_insert+0x2ba/0x1390 [ 507.266195][T15629] ? free_vm_area+0x50/0x50 [ 507.266230][T15629] ? netlink_sendmsg+0x602/0xbf0 [ 507.266251][T15629] vmalloc+0x79/0x90 [ 507.266281][T15629] ? netlink_sendmsg+0x602/0xbf0 [ 507.276600][T15624] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3476'. [ 507.280358][T15629] netlink_sendmsg+0x602/0xbf0 [ 507.280396][T15629] ? netlink_getsockopt+0x590/0x590 [ 507.280421][T15629] ? aa_sock_msg_perm+0x94/0x150 [ 507.280447][T15629] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 507.280469][T15629] ? security_socket_sendmsg+0x80/0xa0 [ 507.280489][T15629] ? netlink_getsockopt+0x590/0x590 [ 507.280512][T15629] ____sys_sendmsg+0x61b/0x980 [ 507.353313][T15629] ? __asan_memset+0x22/0x40 [ 507.353344][T15629] ? __sys_sendmsg_sock+0x30/0x30 [ 507.353364][T15629] ? __import_iovec+0x5f2/0x850 [ 507.353393][T15629] ? import_iovec+0x73/0xa0 [ 507.353416][T15629] ___sys_sendmsg+0x2a6/0x360 [ 507.353445][T15629] ? __sys_sendmsg+0x2b0/0x2b0 [ 507.353489][T15629] ? __lock_acquire+0x7d80/0x7d80 [ 507.353538][T15629] __se_sys_sendmsg+0x1d0/0x2c0 [ 507.353563][T15629] ? __x64_sys_sendmsg+0x80/0x80 [ 507.459798][T15629] ? lockdep_hardirqs_on+0x98/0x150 [ 507.465014][T15629] do_syscall_64+0x55/0xb0 [ 507.469429][T15629] ? clear_bhb_loop+0x40/0x90 [ 507.474102][T15629] ? clear_bhb_loop+0x40/0x90 [ 507.478777][T15629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.484670][T15629] RIP: 0033:0x7f247ff9ce59 [ 507.489083][T15629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.508685][T15629] RSP: 002b:00007f2480f37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.517105][T15629] RAX: ffffffffffffffda RBX: 00007f2480215fa0 RCX: 00007f247ff9ce59 [ 507.525073][T15629] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 507.533042][T15629] RBP: 00007f2480f37090 R08: 0000000000000000 R09: 0000000000000000 [ 507.541012][T15629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.548977][T15629] R13: 00007f2480216038 R14: 00007f2480215fa0 R15: 00007ffe86831c38 [ 507.556960][T15629] [ 507.567756][T15629] syz.0.3477: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 507.583367][T15629] CPU: 1 PID: 15629 Comm: syz.0.3477 Not tainted syzkaller #0 [ 507.590857][T15629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 507.600921][T15629] Call Trace: [ 507.604222][T15629] [ 507.607178][T15629] dump_stack_lvl+0x18c/0x250 [ 507.611881][T15629] ? show_regs_print_info+0x20/0x20 [ 507.617103][T15629] ? load_image+0x420/0x420 [ 507.621625][T15629] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 507.628061][T15629] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 507.634584][T15629] warn_alloc+0x246/0x340 [ 507.638943][T15629] ? __get_vm_area_node+0x125/0x370 [ 507.644172][T15629] ? zone_watermark_ok_safe+0x230/0x230 [ 507.649747][T15629] ? rcu_is_watching+0x15/0xb0 [ 507.654536][T15629] ? __get_vm_area_node+0x356/0x370 [ 507.659767][T15629] __vmalloc_node_range+0x394/0x1320 [ 507.665072][T15629] ? netlink_insert+0x1094/0x1390 [ 507.670125][T15629] ? netlink_insert+0x2ba/0x1390 [ 507.675087][T15629] ? free_vm_area+0x50/0x50 [ 507.679623][T15629] ? netlink_sendmsg+0x602/0xbf0 [ 507.684580][T15629] vmalloc+0x79/0x90 [ 507.688494][T15629] ? netlink_sendmsg+0x602/0xbf0 [ 507.693446][T15629] netlink_sendmsg+0x602/0xbf0 [ 507.698242][T15629] ? netlink_getsockopt+0x590/0x590 [ 507.703459][T15629] ? aa_sock_msg_perm+0x94/0x150 [ 507.708421][T15629] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 507.713726][T15629] ? security_socket_sendmsg+0x80/0xa0 [ 507.719200][T15629] ? netlink_getsockopt+0x590/0x590 [ 507.724417][T15629] ____sys_sendmsg+0x61b/0x980 [ 507.729209][T15629] ? __asan_memset+0x22/0x40 [ 507.733821][T15629] ? __sys_sendmsg_sock+0x30/0x30 [ 507.738862][T15629] ? __import_iovec+0x5f2/0x850 [ 507.743744][T15629] ? import_iovec+0x73/0xa0 [ 507.748264][T15629] ___sys_sendmsg+0x2a6/0x360 [ 507.752964][T15629] ? __sys_sendmsg+0x2b0/0x2b0 [ 507.757766][T15629] ? __lock_acquire+0x7d80/0x7d80 [ 507.762832][T15629] __se_sys_sendmsg+0x1d0/0x2c0 [ 507.767712][T15629] ? __x64_sys_sendmsg+0x80/0x80 [ 507.772683][T15629] ? lockdep_hardirqs_on+0x98/0x150 [ 507.777915][T15629] do_syscall_64+0x55/0xb0 [ 507.782354][T15629] ? clear_bhb_loop+0x40/0x90 [ 507.787048][T15629] ? clear_bhb_loop+0x40/0x90 [ 507.791745][T15629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.797661][T15629] RIP: 0033:0x7f247ff9ce59 [ 507.802096][T15629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.821722][T15629] RSP: 002b:00007f2480f37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.830154][T15629] RAX: ffffffffffffffda RBX: 00007f2480215fa0 RCX: 00007f247ff9ce59 [ 507.838148][T15629] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 507.846136][T15629] RBP: 00007f2480f37090 R08: 0000000000000000 R09: 0000000000000000 [ 507.854122][T15629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.862106][T15629] R13: 00007f2480216038 R14: 00007f2480215fa0 R15: 00007ffe86831c38 [ 507.870114][T15629] [ 507.874312][T15629] Mem-Info: [ 507.877455][T15629] active_anon:17682 inactive_anon:0 isolated_anon:0 [ 507.877455][T15629] active_file:17102 inactive_file:40124 isolated_file:0 [ 507.877455][T15629] unevictable:768 dirty:210 writeback:0 [ 507.877455][T15629] slab_reclaimable:10851 slab_unreclaimable:94599 [ 507.877455][T15629] mapped:31744 shmem:8397 pagetables:533 [ 507.877455][T15629] sec_pagetables:0 bounce:0 [ 507.877455][T15629] kernel_misc_reclaimable:0 [ 507.877455][T15629] free:1327805 free_pcp:11003 free_cma:0 [ 507.928872][T15629] Node 0 active_anon:70728kB inactive_anon:0kB active_file:68408kB inactive_file:160296kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126976kB dirty:836kB writeback:0kB shmem:32052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10020kB pagetables:2132kB sec_pagetables:0kB all_unreclaimable? no [ 508.000839][T15629] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 508.040404][T15629] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 508.101169][T15632] netlink: 'syz.1.3486': attribute type 21 has an invalid length. [ 508.106015][T15629] lowmem_reserve[]: [ 508.109077][T15632] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3486'. [ 508.119279][T15629] 0 2521 2522 2522 2522 [ 508.142399][T15629] Node 0 DMA32 free:1390408kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:75588kB inactive_anon:0kB active_file:68408kB inactive_file:159468kB unevictable:1536kB writepending:636kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:27984kB local_pcp:10536kB free_cma:0kB [ 508.151618][T15634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 508.199355][T15629] lowmem_reserve[]: 0 0 0 0 0 [ 508.204675][T15629] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 508.228558][T15632] netlink: 'syz.1.3486': attribute type 10 has an invalid length. [ 508.240758][T15629] lowmem_reserve[]: 0 0 0 0 0 [ 508.249136][T15639] netlink: 'syz.3.3479': attribute type 3 has an invalid length. [ 508.258292][T15629] Node 1 Normal free:3900916kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15872kB local_pcp:5856kB free_cma:0kB [ 508.371732][T15638] netlink: 'syz.2.3478': attribute type 9 has an invalid length. [ 508.394729][T15634] netlink: 'syz.2.3478': attribute type 9 has an invalid length. [ 508.400750][T15629] lowmem_reserve[]: 0 0 0 0 0 [ 508.454560][T15638] netlink: 'syz.2.3478': attribute type 10 has an invalid length. [ 508.460812][T15629] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 508.531046][T15643] FAULT_INJECTION: forcing a failure. [ 508.531046][T15643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.571681][T15629] Node 0 DMA32: 437*4kB (UE) 425*8kB (UE) 328*16kB (UE) 24*32kB (UE) 246*64kB (UME) 134*128kB (UME) 97*256kB (UM) 53*512kB (UME) 18*1024kB (UME) 6*2048kB (M) 307*4096kB (UM) = 1384220kB [ 508.581730][T15643] CPU: 1 PID: 15643 Comm: syz.3.3480 Not tainted syzkaller #0 [ 508.597764][T15643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 508.607834][T15643] Call Trace: [ 508.611122][T15643] [ 508.614070][T15643] dump_stack_lvl+0x18c/0x250 [ 508.618768][T15643] ? show_regs_print_info+0x20/0x20 [ 508.623983][T15643] ? load_image+0x420/0x420 [ 508.628508][T15643] ? __lock_acquire+0x7d80/0x7d80 [ 508.633563][T15643] should_fail_ex+0x394/0x4c0 [ 508.638274][T15643] _copy_from_user+0x2f/0xe0 [ 508.642888][T15643] bpf_prog_test_run_skb+0x267/0x18f0 [ 508.648283][T15643] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 508.654457][T15643] ? lockdep_hardirqs_on+0x98/0x150 [ 508.659662][T15643] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 508.665827][T15643] ? cpu_online+0x60/0x60 [ 508.670153][T15643] bpf_prog_test_run+0x31f/0x390 [ 508.675093][T15643] __sys_bpf+0x49d/0x890 [ 508.679332][T15643] ? bpf_link_show_fdinfo+0x390/0x390 [ 508.684712][T15643] ? lock_chain_count+0x20/0x20 [ 508.689565][T15643] __x64_sys_bpf+0x7c/0x90 [ 508.693980][T15643] do_syscall_64+0x55/0xb0 [ 508.698397][T15643] ? clear_bhb_loop+0x40/0x90 [ 508.703066][T15643] ? clear_bhb_loop+0x40/0x90 [ 508.707738][T15643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 508.713629][T15643] RIP: 0033:0x7fdad159ce59 [ 508.718038][T15643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.737647][T15643] RSP: 002b:00007fdad23ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 508.746057][T15643] RAX: ffffffffffffffda RBX: 00007fdad1815fa0 RCX: 00007fdad159ce59 [ 508.754023][T15643] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 508.761988][T15643] RBP: 00007fdad23ba090 R08: 0000000000000000 R09: 0000000000000000 [ 508.769954][T15643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.777918][T15643] R13: 00007fdad1816038 R14: 00007fdad1815fa0 R15: 00007fff4d4d2338 [ 508.785898][T15643] [ 508.820609][T15629] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 508.881116][T15629] Node 1 Normal: 251*4kB (UME) 49*8kB (UME) 34*16kB (UME) 145*32kB (UME) 41*64kB (UME) 12*128kB (UE) 2*256kB (U) 1*512kB (M) 0*1024kB 1*2048kB (U) 949*4096kB (ME) = 3900916kB [ 508.914832][T15629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 508.960811][T15629] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 509.018158][T15629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.047878][T15629] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 509.063808][T15629] 68809 total pagecache pages [ 509.068514][T15629] 0 pages in swap cache [ 509.075514][T15629] Free swap = 124460kB [ 509.084962][T15629] Total swap = 124996kB [ 509.089306][T15629] 2097051 pages RAM [ 509.097755][T15629] 0 pages HighMem/MovableOnly [ 509.105077][T15629] 416931 pages reserved [ 509.109367][T15629] 0 pages cma reserved [ 509.278737][T15659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 509.327527][T15659] netlink: 'syz.0.3488': attribute type 9 has an invalid length. [ 509.510049][T15665] FAULT_INJECTION: forcing a failure. [ 509.510049][T15665] name failslab, interval 1, probability 0, space 0, times 0 [ 509.542383][T15665] CPU: 0 PID: 15665 Comm: syz.2.3492 Not tainted syzkaller #0 [ 509.549895][T15665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 509.559967][T15665] Call Trace: [ 509.563273][T15665] [ 509.566219][T15665] dump_stack_lvl+0x18c/0x250 [ 509.570925][T15665] ? show_regs_print_info+0x20/0x20 [ 509.576149][T15665] ? load_image+0x420/0x420 [ 509.580674][T15665] ? __might_sleep+0xe0/0xe0 [ 509.585285][T15665] ? __lock_acquire+0x7d80/0x7d80 [ 509.590338][T15665] should_fail_ex+0x394/0x4c0 [ 509.595050][T15665] should_failslab+0x9/0x20 [ 509.599577][T15665] slab_pre_alloc_hook+0x59/0x300 [ 509.604629][T15665] ? tomoyo_encode+0x2ad/0x570 [ 509.609413][T15665] ? tomoyo_encode+0x2ad/0x570 [ 509.614198][T15665] __kmem_cache_alloc_node+0x53/0x250 [ 509.619601][T15665] ? tomoyo_encode+0x2ad/0x570 [ 509.624377][T15665] __kmalloc+0xa7/0x240 [ 509.628537][T15665] tomoyo_encode+0x2ad/0x570 [ 509.633127][T15665] tomoyo_realpath_from_path+0x57c/0x5c0 [ 509.638757][T15665] ? tomoyo_domain+0xd6/0x120 [ 509.643436][T15665] tomoyo_path_number_perm+0x248/0x5e0 [ 509.648891][T15665] ? tomoyo_path_number_perm+0x217/0x5e0 [ 509.654524][T15665] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 509.659979][T15665] ? trace_call_bpf+0xc3/0x6c0 [ 509.664749][T15665] ? trace_call_bpf+0x5e9/0x6c0 [ 509.669621][T15665] ? __fget_files+0x28/0x460 [ 509.674224][T15665] security_file_ioctl+0x70/0xa0 [ 509.679157][T15665] __se_sys_ioctl+0x48/0x170 [ 509.683749][T15665] do_syscall_64+0x55/0xb0 [ 509.688163][T15665] ? clear_bhb_loop+0x40/0x90 [ 509.692831][T15665] ? clear_bhb_loop+0x40/0x90 [ 509.697502][T15665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.703392][T15665] RIP: 0033:0x7f4b6c79ce59 [ 509.707804][T15665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.727420][T15665] RSP: 002b:00007f4b6d583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 509.735832][T15665] RAX: ffffffffffffffda RBX: 00007f4b6ca15fa0 RCX: 00007f4b6c79ce59 [ 509.743797][T15665] RDX: 0000000000000000 RSI: 000000000000541b RDI: 000000000000000a [ 509.751763][T15665] RBP: 00007f4b6d583090 R08: 0000000000000000 R09: 0000000000000000 [ 509.759735][T15665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.767717][T15665] R13: 00007f4b6ca16038 R14: 00007f4b6ca15fa0 R15: 00007ffe7de56f38 [ 509.775703][T15665] [ 509.841043][T15665] ERROR: Out of memory at tomoyo_realpath_from_path. [ 510.084598][T15675] __nla_validate_parse: 6 callbacks suppressed [ 510.084616][T15675] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3494'. [ 510.118478][T15675] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3494'. [ 510.129130][T15672] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3494'. [ 510.312959][T15682] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.3498'. [ 511.055696][T15701] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 511.112742][T15701] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3504'. [ 511.394541][T15705] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3504'. [ 511.407142][T15711] netlink: 209340 bytes leftover after parsing attributes in process `syz.3.3505'. [ 511.573905][T15718] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3508'. [ 511.577755][T15717] FAULT_INJECTION: forcing a failure. [ 511.577755][T15717] name failslab, interval 1, probability 0, space 0, times 0 [ 511.601067][T15717] CPU: 0 PID: 15717 Comm: syz.3.3509 Not tainted syzkaller #0 [ 511.608560][T15717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 511.618627][T15717] Call Trace: [ 511.621919][T15717] [ 511.624859][T15717] dump_stack_lvl+0x18c/0x250 [ 511.629556][T15717] ? show_regs_print_info+0x20/0x20 [ 511.634771][T15717] ? load_image+0x420/0x420 [ 511.639286][T15717] ? __lock_acquire+0x7d80/0x7d80 [ 511.644336][T15717] should_fail_ex+0x394/0x4c0 [ 511.649036][T15717] should_failslab+0x9/0x20 [ 511.653548][T15717] slab_pre_alloc_hook+0x59/0x300 [ 511.658585][T15717] ? bpf_test_init+0x9f/0x140 [ 511.663277][T15717] ? bpf_test_init+0x9f/0x140 [ 511.667971][T15717] __kmem_cache_alloc_node+0x53/0x250 [ 511.673359][T15717] ? bpf_test_init+0x9f/0x140 [ 511.678044][T15717] __kmalloc+0xa7/0x240 [ 511.682213][T15717] bpf_test_init+0x9f/0x140 [ 511.686731][T15717] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 511.692118][T15717] ? __lock_acquire+0x7d80/0x7d80 [ 511.697155][T15717] ? lock_chain_count+0x20/0x20 [ 511.702022][T15717] ? dev_put+0x80/0x80 [ 511.706117][T15717] ? dev_put+0x80/0x80 [ 511.710211][T15717] bpf_prog_test_run+0x31f/0x390 [ 511.715179][T15717] __sys_bpf+0x49d/0x890 [ 511.719443][T15717] ? bpf_link_show_fdinfo+0x390/0x390 [ 511.724843][T15717] ? lock_chain_count+0x20/0x20 [ 511.729712][T15717] __x64_sys_bpf+0x7c/0x90 [ 511.734139][T15717] do_syscall_64+0x55/0xb0 [ 511.738566][T15717] ? clear_bhb_loop+0x40/0x90 [ 511.743247][T15717] ? clear_bhb_loop+0x40/0x90 [ 511.747930][T15717] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.753846][T15717] RIP: 0033:0x7fdad159ce59 [ 511.758277][T15717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.777895][T15717] RSP: 002b:00007fdad23ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 511.786322][T15717] RAX: ffffffffffffffda RBX: 00007fdad1815fa0 RCX: 00007fdad159ce59 [ 511.794296][T15717] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 511.802275][T15717] RBP: 00007fdad23ba090 R08: 0000000000000000 R09: 0000000000000000 [ 511.810258][T15717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.818235][T15717] R13: 00007fdad1816038 R14: 00007fdad1815fa0 R15: 00007fff4d4d2338 [ 511.826235][T15717] [ 512.279648][T15728] validate_nla: 11 callbacks suppressed [ 512.279667][T15728] netlink: 'syz.2.3513': attribute type 21 has an invalid length. [ 512.294522][T15728] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3513'. [ 512.295003][ T5785] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 512.396372][T15728] netlink: 'syz.2.3513': attribute type 10 has an invalid length. [ 512.410351][T15728] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3513'. [ 512.573634][T15738] netlink: 'syz.3.3517': attribute type 46 has an invalid length. [ 513.283952][T15766] netlink: 'syz.1.3527': attribute type 21 has an invalid length. [ 513.350212][T15766] netlink: 'syz.1.3527': attribute type 10 has an invalid length. [ 513.399242][T15768] FAULT_INJECTION: forcing a failure. [ 513.399242][T15768] name failslab, interval 1, probability 0, space 0, times 0 [ 513.417265][T15768] CPU: 0 PID: 15768 Comm: syz.2.3528 Not tainted syzkaller #0 [ 513.424759][T15768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 513.434828][T15768] Call Trace: [ 513.438119][T15768] [ 513.441061][T15768] dump_stack_lvl+0x18c/0x250 [ 513.445766][T15768] ? show_regs_print_info+0x20/0x20 [ 513.450986][T15768] ? load_image+0x420/0x420 [ 513.455510][T15768] ? __might_sleep+0xe0/0xe0 [ 513.460120][T15768] ? __lock_acquire+0x7d80/0x7d80 [ 513.465169][T15768] should_fail_ex+0x394/0x4c0 [ 513.469873][T15768] should_failslab+0x9/0x20 [ 513.474402][T15768] slab_pre_alloc_hook+0x59/0x300 [ 513.479451][T15768] ? __lock_acquire+0x7d80/0x7d80 [ 513.484498][T15768] kmem_cache_alloc_node+0x5e/0x310 [ 513.489721][T15768] ? __alloc_skb+0x103/0x2c0 [ 513.494340][T15768] __alloc_skb+0x103/0x2c0 [ 513.498779][T15768] netlink_sendmsg+0x66a/0xbf0 [ 513.503572][T15768] ? netlink_getsockopt+0x590/0x590 [ 513.508800][T15768] ? aa_sock_msg_perm+0x94/0x150 [ 513.513761][T15768] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 513.519065][T15768] ? security_socket_sendmsg+0x80/0xa0 [ 513.524537][T15768] ? netlink_getsockopt+0x590/0x590 [ 513.529753][T15768] ____sys_sendmsg+0x61b/0x980 [ 513.534557][T15768] ? __asan_memset+0x22/0x40 [ 513.539177][T15768] ? __sys_sendmsg_sock+0x30/0x30 [ 513.544217][T15768] ? __import_iovec+0x5f2/0x850 [ 513.549094][T15768] ? import_iovec+0x73/0xa0 [ 513.553624][T15768] ___sys_sendmsg+0x2a6/0x360 [ 513.558319][T15768] ? get_pid_task+0x20/0x1e0 [ 513.562936][T15768] ? __sys_sendmsg+0x2b0/0x2b0 [ 513.567737][T15768] ? __lock_acquire+0x7d80/0x7d80 [ 513.572803][T15768] __se_sys_sendmsg+0x1d0/0x2c0 [ 513.577682][T15768] ? __x64_sys_sendmsg+0x80/0x80 [ 513.582656][T15768] ? lockdep_hardirqs_on+0x98/0x150 [ 513.587882][T15768] do_syscall_64+0x55/0xb0 [ 513.592315][T15768] ? clear_bhb_loop+0x40/0x90 [ 513.597005][T15768] ? clear_bhb_loop+0x40/0x90 [ 513.601698][T15768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.607620][T15768] RIP: 0033:0x7f4b6c79ce59 [ 513.612053][T15768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.631674][T15768] RSP: 002b:00007f4b6d583028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.640111][T15768] RAX: ffffffffffffffda RBX: 00007f4b6ca15fa0 RCX: 00007f4b6c79ce59 [ 513.648103][T15768] RDX: 0000000020004800 RSI: 0000200000000080 RDI: 0000000000000004 [ 513.656090][T15768] RBP: 00007f4b6d583090 R08: 0000000000000000 R09: 0000000000000000 [ 513.664077][T15768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.672065][T15768] R13: 00007f4b6ca16038 R14: 00007f4b6ca15fa0 R15: 00007ffe7de56f38 [ 513.680070][T15768] [ 514.173095][T15731] Bluetooth: hci2: command 0x0406 tx timeout [ 514.331367][T15487] Bluetooth: hci0: command 0x0406 tx timeout [ 514.692442][T15799] netlink: 'syz.0.3538': attribute type 10 has an invalid length. [ 514.700342][T15799] team0: entered promiscuous mode [ 514.762222][T15799] team_slave_0: entered promiscuous mode [ 514.768092][T15799] team_slave_1: entered promiscuous mode [ 514.781187][T15799] team0: entered allmulticast mode [ 514.786427][T15799] team_slave_0: entered allmulticast mode [ 514.809202][T15799] team_slave_1: entered allmulticast mode [ 514.820017][T15799] bridge0: port 2(team0) entered blocking state [ 514.841262][T15799] bridge0: port 2(team0) entered disabled state [ 514.850328][T15799] bridge0: port 2(team0) entered blocking state [ 514.856759][T15799] bridge0: port 2(team0) entered forwarding state [ 514.895904][T15803] netlink: 'syz.1.3540': attribute type 21 has an invalid length. [ 515.039028][T15803] netlink: 'syz.1.3540': attribute type 10 has an invalid length. [ 515.116291][T15803] __nla_validate_parse: 8 callbacks suppressed [ 515.116339][T15803] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3540'. [ 515.166352][T15815] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.3545'. [ 515.611070][T15827] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3548'. [ 515.620592][T15827] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 515.655387][T15827] FAULT_INJECTION: forcing a failure. [ 515.655387][T15827] name failslab, interval 1, probability 0, space 0, times 0 [ 515.693384][T15827] CPU: 1 PID: 15827 Comm: syz.1.3548 Not tainted syzkaller #0 [ 515.700888][T15827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 515.710958][T15827] Call Trace: [ 515.714251][T15827] [ 515.717194][T15827] dump_stack_lvl+0x18c/0x250 [ 515.721905][T15827] ? show_regs_print_info+0x20/0x20 [ 515.727128][T15827] ? load_image+0x420/0x420 [ 515.731653][T15827] ? verify_lock_unused+0x140/0x140 [ 515.736880][T15827] should_fail_ex+0x394/0x4c0 [ 515.741593][T15827] should_failslab+0x9/0x20 [ 515.746123][T15827] slab_pre_alloc_hook+0x59/0x300 [ 515.751184][T15827] kmem_cache_alloc+0x5a/0x2c0 [ 515.755976][T15827] ? skb_clone+0x1eb/0x370 [ 515.760418][T15827] skb_clone+0x1eb/0x370 [ 515.764685][T15827] __netlink_deliver_tap+0x411/0x7f0 [ 515.770002][T15827] ? netlink_deliver_tap+0x2e/0x1b0 [ 515.775222][T15827] netlink_deliver_tap+0x19c/0x1b0 [ 515.780358][T15827] netlink_sendskb+0x68/0x130 [ 515.785056][T15827] netlink_ack+0xcd5/0x1160 [ 515.789595][T15827] ? netlink_dump+0xec0/0xec0 [ 515.794292][T15827] ? ref_tracker_free+0x686/0x830 [ 515.799335][T15827] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 515.805514][T15827] netlink_rcv_skb+0x2b3/0x4c0 [ 515.810281][T15827] ? rtnetlink_bind+0x80/0x80 [ 515.814959][T15827] ? netlink_ack+0x1160/0x1160 [ 515.819733][T15827] ? __lock_acquire+0x7d80/0x7d80 [ 515.824762][T15827] ? netlink_deliver_tap+0x2e/0x1b0 [ 515.829966][T15827] netlink_unicast+0x7b1/0x930 [ 515.834755][T15827] netlink_sendmsg+0x8d0/0xbf0 [ 515.839542][T15827] ? netlink_getsockopt+0x590/0x590 [ 515.844753][T15827] ? aa_sock_msg_perm+0x94/0x150 [ 515.849695][T15827] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 515.854990][T15827] ? security_socket_sendmsg+0x80/0xa0 [ 515.860460][T15827] ? netlink_getsockopt+0x590/0x590 [ 515.865663][T15827] ____sys_sendmsg+0x61b/0x980 [ 515.870436][T15827] ? __asan_memset+0x22/0x40 [ 515.875038][T15827] ? __sys_sendmsg_sock+0x30/0x30 [ 515.880073][T15827] ? __import_iovec+0x5f2/0x850 [ 515.884938][T15827] ? import_iovec+0x73/0xa0 [ 515.889440][T15827] ___sys_sendmsg+0x2a6/0x360 [ 515.894118][T15827] ? __sys_sendmsg+0x2b0/0x2b0 [ 515.898925][T15827] __se_sys_sendmsg+0x1d0/0x2c0 [ 515.903799][T15827] ? __x64_sys_sendmsg+0x80/0x80 [ 515.908748][T15827] ? syscall_enter_from_user_mode+0x2e/0x80 [ 515.914642][T15827] do_syscall_64+0x55/0xb0 [ 515.919053][T15827] ? clear_bhb_loop+0x40/0x90 [ 515.923721][T15827] ? clear_bhb_loop+0x40/0x90 [ 515.928403][T15827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 515.934295][T15827] RIP: 0033:0x7ff85579ce59 [ 515.938711][T15827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.958318][T15827] RSP: 002b:00007ff8566aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.966733][T15827] RAX: ffffffffffffffda RBX: 00007ff855a15fa0 RCX: 00007ff85579ce59 [ 515.974700][T15827] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000006 [ 515.982664][T15827] RBP: 00007ff8566aa090 R08: 0000000000000000 R09: 0000000000000000 [ 515.990629][T15827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 515.998590][T15827] R13: 00007ff855a16038 R14: 00007ff855a15fa0 R15: 00007fff9f6bbaf8 [ 516.006568][T15827] [ 516.869830][T15848] netlink: 'syz.1.3556': attribute type 21 has an invalid length. [ 516.971429][T15848] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3556'. [ 517.064346][T15848] netlink: 'syz.1.3556': attribute type 10 has an invalid length. [ 517.127214][T15848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3556'. [ 519.649445][T15858] FAULT_INJECTION: forcing a failure. [ 519.649445][T15858] name failslab, interval 1, probability 0, space 0, times 0 [ 519.669744][T15858] CPU: 1 PID: 15858 Comm: syz.1.3561 Not tainted syzkaller #0 [ 519.677242][T15858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 519.687311][T15858] Call Trace: [ 519.690608][T15858] [ 519.693550][T15858] dump_stack_lvl+0x18c/0x250 [ 519.698247][T15858] ? show_regs_print_info+0x20/0x20 [ 519.703469][T15858] ? load_image+0x420/0x420 [ 519.707996][T15858] ? __might_sleep+0xe0/0xe0 [ 519.712613][T15858] ? __lock_acquire+0x7d80/0x7d80 [ 519.717659][T15858] should_fail_ex+0x394/0x4c0 [ 519.722366][T15858] should_failslab+0x9/0x20 [ 519.726894][T15858] slab_pre_alloc_hook+0x59/0x300 [ 519.731949][T15858] ? trace_probe_init+0x2d2/0x400 [ 519.737024][T15858] ? trace_probe_init+0x2d2/0x400 [ 519.742068][T15858] __kmem_cache_alloc_node+0x53/0x250 [ 519.747461][T15858] ? trace_probe_init+0x2d2/0x400 [ 519.752493][T15858] __kmalloc_node_track_caller+0xa4/0x230 [ 519.758230][T15858] ? rcu_is_watching+0x15/0xb0 [ 519.763016][T15858] kstrdup+0x3b/0x80 [ 519.766922][T15858] trace_probe_init+0x2d2/0x400 [ 519.771786][T15858] create_local_trace_uprobe+0x186/0x660 [ 519.777435][T15858] ? bpf_get_uprobe_info+0x520/0x520 [ 519.782732][T15858] ? _copy_from_user+0xa5/0xe0 [ 519.787509][T15858] perf_uprobe_init+0xf3/0x190 [ 519.792290][T15858] perf_uprobe_event_init+0xe6/0x180 [ 519.797593][T15858] perf_try_init_event+0x12b/0x3c0 [ 519.802715][T15858] ? perf_event_alloc+0xb23/0x2150 [ 519.807837][T15858] perf_event_alloc+0xed4/0x2150 [ 519.812788][T15858] ? find_lively_task_by_vpid+0x19/0x290 [ 519.818432][T15858] ? find_lively_task_by_vpid+0x19/0x290 [ 519.824080][T15858] __se_sys_perf_event_open+0x740/0x1c60 [ 519.829726][T15858] ? mutex_unlock+0x10/0x10 [ 519.834244][T15858] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 519.839896][T15858] ? lock_chain_count+0x20/0x20 [ 519.844761][T15858] ? lockdep_hardirqs_on+0x98/0x150 [ 519.849972][T15858] ? __x64_sys_perf_event_open+0x20/0xc0 [ 519.855622][T15858] do_syscall_64+0x55/0xb0 [ 519.860047][T15858] ? clear_bhb_loop+0x40/0x90 [ 519.864729][T15858] ? clear_bhb_loop+0x40/0x90 [ 519.869411][T15858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.875313][T15858] RIP: 0033:0x7ff85579ce59 [ 519.879738][T15858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.899349][T15858] RSP: 002b:00007ff8566aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 519.907780][T15858] RAX: ffffffffffffffda RBX: 00007ff855a15fa0 RCX: 00007ff85579ce59 [ 519.915764][T15858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 519.923752][T15858] RBP: 00007ff8566aa090 R08: 0000000000000000 R09: 0000000000000000 [ 519.931732][T15858] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 519.939724][T15858] R13: 00007ff855a16038 R14: 00007ff855a15fa0 R15: 00007fff9f6bbaf8 [ 519.947720][T15858] [ 519.971340][T15858] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 520.259219][T15868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 520.275152][T15873] netlink: 'syz.1.3564': attribute type 10 has an invalid length. [ 520.314217][T15873] team0: Device hsr_slave_0 failed to register rx_handler [ 520.335066][T15868] netlink: 'syz.3.3565': attribute type 9 has an invalid length. [ 520.362157][T15868] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3565'. [ 520.560951][T15880] netlink: 'syz.3.3565': attribute type 10 has an invalid length. [ 520.719766][T15888] netlink: 'syz.1.3570': attribute type 21 has an invalid length. [ 520.724555][T15875] netlink: 'syz.3.3565': attribute type 9 has an invalid length. [ 520.730605][T15888] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3570'. [ 520.738407][T15875] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3565'. [ 520.784124][T15888] netlink: 'syz.1.3570': attribute type 10 has an invalid length. [ 520.794682][T15888] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3570'. [ 520.823823][T15894] netlink: 'syz.0.3571': attribute type 1 has an invalid length. [ 520.873573][T15886] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3569'. [ 520.892488][T15894] bridge0: port 2(team0) entered disabled state [ 521.116916][T15894] bridge_slave_0: left allmulticast mode [ 521.263349][T15894] bridge_slave_0: left promiscuous mode [ 521.315648][T15909] netlink: 'syz.1.3574': attribute type 3 has an invalid length. [ 521.324148][T15909] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.3574'. [ 521.340558][T15894] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.606194][T15904] netlink: 'syz.3.3576': attribute type 2 has an invalid length. [ 521.614357][T15904] netlink: 51 bytes leftover after parsing attributes in process `syz.3.3576'. [ 521.926680][T15925] netlink: 'syz.3.3581': attribute type 21 has an invalid length. [ 521.935315][T15925] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3581'. [ 521.975569][T15925] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3581'. [ 522.150964][T15930] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3583'. [ 522.212385][T15934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 522.477253][T15940] bridge_slave_0: left allmulticast mode [ 522.497801][T15940] bridge_slave_0: left promiscuous mode [ 522.533099][T15940] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.810013][T15487] Bluetooth: hci1: ISO packet for unknown connection handle 2 [ 524.116757][T15985] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 524.815080][T15998] bridge_slave_1: left allmulticast mode [ 524.843712][T15998] bridge_slave_1: left promiscuous mode [ 524.851960][T15998] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.958363][T15998] bridge_slave_0: left allmulticast mode [ 524.962910][T16004] FAULT_INJECTION: forcing a failure. [ 524.962910][T16004] name failslab, interval 1, probability 0, space 0, times 0 [ 524.986460][T15998] bridge_slave_0: left promiscuous mode [ 524.996259][T15998] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.015737][T16004] CPU: 1 PID: 16004 Comm: syz.0.3610 Not tainted syzkaller #0 [ 525.023251][T16004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 525.033312][T16004] Call Trace: [ 525.036600][T16004] [ 525.039536][T16004] dump_stack_lvl+0x18c/0x250 [ 525.044239][T16004] ? show_regs_print_info+0x20/0x20 [ 525.049443][T16004] ? load_image+0x420/0x420 [ 525.053958][T16004] ? verify_lock_unused+0x140/0x140 [ 525.059162][T16004] ? perf_trace_lock_acquire+0x105/0x400 [ 525.064828][T16004] should_fail_ex+0x394/0x4c0 [ 525.069523][T16004] should_failslab+0x9/0x20 [ 525.074037][T16004] slab_pre_alloc_hook+0x59/0x300 [ 525.079081][T16004] kmem_cache_alloc+0x5a/0x2c0 [ 525.083850][T16004] ? skb_clone+0x1eb/0x370 [ 525.088283][T16004] skb_clone+0x1eb/0x370 [ 525.092536][T16004] __netlink_deliver_tap+0x411/0x7f0 [ 525.097849][T16004] ? netlink_deliver_tap+0x2e/0x1b0 [ 525.103056][T16004] netlink_deliver_tap+0x19c/0x1b0 [ 525.108175][T16004] netlink_unicast+0x77b/0x930 [ 525.112967][T16004] netlink_sendmsg+0x8d0/0xbf0 [ 525.117741][T16004] ? perf_trace_lock+0x303/0x3b0 [ 525.122695][T16004] ? netlink_getsockopt+0x590/0x590 [ 525.127905][T16004] ? aa_sock_msg_perm+0x94/0x150 [ 525.132855][T16004] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 525.138144][T16004] ? security_socket_sendmsg+0x80/0xa0 [ 525.143607][T16004] ? netlink_getsockopt+0x590/0x590 [ 525.148813][T16004] ____sys_sendmsg+0x61b/0x980 [ 525.153595][T16004] ? __asan_memset+0x22/0x40 [ 525.158190][T16004] ? __sys_sendmsg_sock+0x30/0x30 [ 525.163216][T16004] ? __import_iovec+0x3fa/0x850 [ 525.168083][T16004] ? import_iovec+0x73/0xa0 [ 525.172592][T16004] ___sys_sendmsg+0x2a6/0x360 [ 525.177288][T16004] ? __sys_sendmsg+0x2b0/0x2b0 [ 525.182088][T16004] ? __lock_acquire+0x7d80/0x7d80 [ 525.187154][T16004] __se_sys_sendmsg+0x1d0/0x2c0 [ 525.192015][T16004] ? __x64_sys_sendmsg+0x80/0x80 [ 525.196981][T16004] ? lockdep_hardirqs_on+0x98/0x150 [ 525.202191][T16004] do_syscall_64+0x55/0xb0 [ 525.206608][T16004] ? clear_bhb_loop+0x40/0x90 [ 525.211284][T16004] ? clear_bhb_loop+0x40/0x90 [ 525.215962][T16004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.221865][T16004] RIP: 0033:0x7f247ff9ce59 [ 525.226288][T16004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.245896][T16004] RSP: 002b:00007f2480f37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.254317][T16004] RAX: ffffffffffffffda RBX: 00007f2480215fa0 RCX: 00007f247ff9ce59 [ 525.262293][T16004] RDX: 0000000000000090 RSI: 0000200000000080 RDI: 0000000000000004 [ 525.270266][T16004] RBP: 00007f2480f37090 R08: 0000000000000000 R09: 0000000000000000 [ 525.278237][T16004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.286208][T16004] R13: 00007f2480216038 R14: 00007f2480215fa0 R15: 00007ffe86831c38 [ 525.294210][T16004] [ 525.748834][T16012] __nla_validate_parse: 9 callbacks suppressed [ 525.748869][T16012] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3613'. [ 525.912129][T16019] validate_nla: 14 callbacks suppressed [ 525.912148][T16019] netlink: 'syz.2.3616': attribute type 21 has an invalid length. [ 525.950840][T16019] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3616'. [ 526.012913][T16019] netlink: 'syz.2.3616': attribute type 10 has an invalid length. [ 526.037574][T16019] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3616'. [ 526.479568][T16040] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3624'. [ 526.644696][T16050] FAULT_INJECTION: forcing a failure. [ 526.644696][T16050] name failslab, interval 1, probability 0, space 0, times 0 [ 526.665136][T16050] CPU: 1 PID: 16050 Comm: syz.2.3628 Not tainted syzkaller #0 [ 526.672641][T16050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 526.682717][T16050] Call Trace: [ 526.686012][T16050] [ 526.688943][T16050] dump_stack_lvl+0x18c/0x250 [ 526.693632][T16050] ? show_regs_print_info+0x20/0x20 [ 526.698831][T16050] ? load_image+0x420/0x420 [ 526.703335][T16050] ? __might_sleep+0xe0/0xe0 [ 526.707927][T16050] ? __lock_acquire+0x7d80/0x7d80 [ 526.712958][T16050] should_fail_ex+0x394/0x4c0 [ 526.717641][T16050] should_failslab+0x9/0x20 [ 526.722146][T16050] slab_pre_alloc_hook+0x59/0x300 [ 526.727177][T16050] kmem_cache_alloc_node+0x5e/0x310 [ 526.732384][T16050] ? __alloc_skb+0x103/0x2c0 [ 526.736984][T16050] __alloc_skb+0x103/0x2c0 [ 526.741402][T16050] _sctp_make_chunk+0x5b/0x430 [ 526.746167][T16050] sctp_make_datafrag_empty+0x12b/0x240 [ 526.751714][T16050] ? sctp_make_ecne+0x350/0x350 [ 526.756568][T16050] ? sctp_auth_send_cid+0x69/0x250 [ 526.761687][T16050] sctp_datamsg_from_user+0x72e/0xee0 [ 526.767079][T16050] sctp_sendmsg_to_asoc+0xfdd/0x17f0 [ 526.772395][T16050] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 526.778212][T16050] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 526.784018][T16050] ? __local_bh_enable_ip+0x13a/0x1c0 [ 526.789384][T16050] ? _local_bh_enable+0xa0/0xa0 [ 526.794231][T16050] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 526.800040][T16050] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 526.805850][T16050] ? sctp_sendmsg_check_sflags+0x18d/0x2d0 [ 526.811663][T16050] sctp_sendmsg+0x1afa/0x27b0 [ 526.816355][T16050] ? sctp_getsockopt+0xb60/0xb60 [ 526.821297][T16050] ? aa_sk_perm+0x83c/0x970 [ 526.825809][T16050] ? aa_af_perm+0x330/0x330 [ 526.830310][T16050] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 526.836728][T16050] ? sock_rps_record_flow+0x19/0x3f0 [ 526.842016][T16050] ? inet_sendmsg+0x7e/0x2a0 [ 526.846606][T16050] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 526.851888][T16050] ? inet_send_prepare+0x250/0x250 [ 526.857002][T16050] ____sys_sendmsg+0x61b/0x980 [ 526.861769][T16050] ? __asan_memset+0x22/0x40 [ 526.866358][T16050] ? __sys_sendmsg_sock+0x30/0x30 [ 526.871377][T16050] ? __import_iovec+0x5f2/0x850 [ 526.876275][T16050] ? import_iovec+0x73/0xa0 [ 526.880799][T16050] ___sys_sendmsg+0x2a6/0x360 [ 526.885496][T16050] ? get_pid_task+0x20/0x1e0 [ 526.890100][T16050] ? __sys_sendmsg+0x2b0/0x2b0 [ 526.894880][T16050] ? __lock_acquire+0x7d80/0x7d80 [ 526.899927][T16050] __se_sys_sendmsg+0x1d0/0x2c0 [ 526.904781][T16050] ? __x64_sys_sendmsg+0x80/0x80 [ 526.909738][T16050] ? lockdep_hardirqs_on+0x98/0x150 [ 526.914943][T16050] do_syscall_64+0x55/0xb0 [ 526.919357][T16050] ? clear_bhb_loop+0x40/0x90 [ 526.924031][T16050] ? clear_bhb_loop+0x40/0x90 [ 526.928705][T16050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.934601][T16050] RIP: 0033:0x7f4b6c79ce59 [ 526.939016][T16050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.958622][T16050] RSP: 002b:00007f4b6d583028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.967043][T16050] RAX: ffffffffffffffda RBX: 00007f4b6ca15fa0 RCX: 00007f4b6c79ce59 [ 526.975010][T16050] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 526.982979][T16050] RBP: 00007f4b6d583090 R08: 0000000000000000 R09: 0000000000000000 [ 526.990950][T16050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.998918][T16050] R13: 00007f4b6ca16038 R14: 00007f4b6ca15fa0 R15: 00007ffe7de56f38 [ 527.006917][T16050] [ 527.110980][T16054] netlink: 'syz.0.3629': attribute type 2 has an invalid length. [ 527.118781][T16054] netlink: 119 bytes leftover after parsing attributes in process `syz.0.3629'. [ 527.216185][T16058] netlink: 'syz.1.3630': attribute type 21 has an invalid length. [ 527.247405][T16058] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3630'. [ 527.278194][T16058] netlink: 'syz.1.3630': attribute type 10 has an invalid length. [ 527.299526][T16058] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3630'. [ 527.422086][T16064] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3632'. [ 527.446278][T16064] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.3632'. [ 527.471321][T16064] tipc: Started in network mode [ 527.481114][T16064] tipc: Node identity b, cluster identity 73 [ 527.497760][T16064] tipc: Node number set to 11 [ 527.505848][T16068] netlink: 'syz.0.3636': attribute type 46 has an invalid length. [ 527.589916][T16072] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3635'. [ 528.358386][T16082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 528.423992][T16082] netlink: 'syz.2.3640': attribute type 9 has an invalid length. [ 528.661504][T16094] netlink: 'syz.2.3640': attribute type 10 has an invalid length. [ 528.805179][T16078] netlink: 'syz.0.3639': attribute type 10 has an invalid length. [ 528.819296][T16092] netlink: 'syz.2.3640': attribute type 9 has an invalid length. [ 528.849448][T16078] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 528.872030][T16078] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.904727][T16078] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 529.426428][T16114] batman_adv: batadv0: Interface deactivated: vlan1 [ 529.872618][T16114] batman_adv: batadv0: Removing interface: vlan1 [ 529.887403][T16129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 530.718250][T16177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 530.780349][T16177] __nla_validate_parse: 19 callbacks suppressed [ 530.780430][T16177] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3669'. [ 531.022154][T16181] validate_nla: 11 callbacks suppressed [ 531.022171][T16181] netlink: 'syz.2.3669': attribute type 10 has an invalid length. [ 531.331154][T16180] netlink: 'syz.2.3669': attribute type 9 has an invalid length. [ 531.356647][T16180] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3669'. [ 531.499774][T16198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.587943][T16198] netlink: 'syz.0.3680': attribute type 9 has an invalid length. [ 531.611962][T16198] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3680'. [ 531.884170][T16206] netlink: 'syz.0.3680': attribute type 10 has an invalid length. [ 532.157759][T16203] netlink: 'syz.0.3680': attribute type 9 has an invalid length. [ 532.170108][T16217] netlink: 'syz.3.3678': attribute type 6 has an invalid length. [ 532.185174][T16217] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3678'. [ 532.194865][T16203] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3680'. [ 532.274098][T16219] FAULT_INJECTION: forcing a failure. [ 532.274098][T16219] name failslab, interval 1, probability 0, space 0, times 0 [ 532.350792][T16219] CPU: 1 PID: 16219 Comm: syz.1.3679 Not tainted syzkaller #0 [ 532.358310][T16219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 532.368380][T16219] Call Trace: [ 532.371687][T16219] [ 532.374624][T16219] dump_stack_lvl+0x18c/0x250 [ 532.379329][T16219] ? show_regs_print_info+0x20/0x20 [ 532.384539][T16219] ? load_image+0x420/0x420 [ 532.389063][T16219] ? __might_sleep+0xe0/0xe0 [ 532.393668][T16219] ? __lock_acquire+0x7d80/0x7d80 [ 532.398714][T16219] should_fail_ex+0x394/0x4c0 [ 532.403412][T16219] should_failslab+0x9/0x20 [ 532.407929][T16219] slab_pre_alloc_hook+0x59/0x300 [ 532.412969][T16219] ? __lock_acquire+0x7d80/0x7d80 [ 532.418008][T16219] kmem_cache_alloc_node+0x5e/0x310 [ 532.423219][T16219] ? __alloc_skb+0x103/0x2c0 [ 532.427822][T16219] __alloc_skb+0x103/0x2c0 [ 532.432256][T16219] netlink_sendmsg+0x66a/0xbf0 [ 532.437040][T16219] ? netlink_getsockopt+0x590/0x590 [ 532.442246][T16219] ? aa_sock_msg_perm+0x94/0x150 [ 532.447197][T16219] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 532.452488][T16219] ? security_socket_sendmsg+0x80/0xa0 [ 532.457950][T16219] ? netlink_getsockopt+0x590/0x590 [ 532.463161][T16219] ____sys_sendmsg+0x61b/0x980 [ 532.467948][T16219] ? __asan_memset+0x22/0x40 [ 532.472549][T16219] ? __sys_sendmsg_sock+0x30/0x30 [ 532.477579][T16219] ? __import_iovec+0x5f2/0x850 [ 532.482445][T16219] ? import_iovec+0x73/0xa0 [ 532.486963][T16219] ___sys_sendmsg+0x2a6/0x360 [ 532.491668][T16219] ? __sys_sendmsg+0x2b0/0x2b0 [ 532.496463][T16219] ? trace_call_bpf+0xc3/0x6c0 [ 532.501264][T16219] __se_sys_sendmsg+0x1d0/0x2c0 [ 532.506137][T16219] ? perf_trace_preemptirq_template+0x269/0x330 [ 532.512398][T16219] ? __x64_sys_sendmsg+0x80/0x80 [ 532.517364][T16219] ? lockdep_hardirqs_on+0x98/0x150 [ 532.522586][T16219] do_syscall_64+0x55/0xb0 [ 532.527008][T16219] ? clear_bhb_loop+0x40/0x90 [ 532.531688][T16219] ? clear_bhb_loop+0x40/0x90 [ 532.536369][T16219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 532.542273][T16219] RIP: 0033:0x7ff85579ce59 [ 532.546715][T16219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.566333][T16219] RSP: 002b:00007ff8566aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.574761][T16219] RAX: ffffffffffffffda RBX: 00007ff855a15fa0 RCX: 00007ff85579ce59 [ 532.582746][T16219] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000a [ 532.590728][T16219] RBP: 00007ff8566aa090 R08: 0000000000000000 R09: 0000000000000000 [ 532.598708][T16219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.606686][T16219] R13: 00007ff855a16038 R14: 00007ff855a15fa0 R15: 00007fff9f6bbaf8 [ 532.614683][T16219] [ 532.906958][T16228] netlink: 'syz.2.3682': attribute type 4 has an invalid length. [ 532.921939][T16228] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3682'. [ 533.662543][T16244] netlink: 'syz.2.3688': attribute type 39 has an invalid length. [ 533.898756][T16244] hsr_slave_1 (unregistering): left promiscuous mode [ 533.921870][T16249] netlink: 'syz.0.3689': attribute type 9 has an invalid length. [ 533.930179][T16249] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3689'. [ 533.996685][T16247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.146054][T16247] netlink: 'syz.0.3689': attribute type 10 has an invalid length. [ 534.219833][T16254] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3689'. [ 534.936960][T16276] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3697'. [ 534.964132][T16276] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3697'. [ 535.944498][T16270] __nla_validate_parse: 3 callbacks suppressed [ 535.944518][T16270] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3697'. [ 535.966468][T16270] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 535.974055][T16270] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.028528][T16270] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 536.084201][T16288] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3701'. [ 536.433340][T16299] validate_nla: 3 callbacks suppressed [ 536.433358][T16299] netlink: 'syz.0.3703': attribute type 9 has an invalid length. [ 536.460825][T16299] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3703'. [ 536.680206][T16296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 536.725266][T16293] netlink: 'syz.0.3703': attribute type 10 has an invalid length. [ 536.797381][T16300] netlink: 'syz.0.3703': attribute type 9 has an invalid length. [ 536.834634][T16300] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3703'. [ 536.998178][T16310] delete_channel: no stack [ 537.012022][T16310] delete_channel: no stack [ 537.115252][T16316] FAULT_INJECTION: forcing a failure. [ 537.115252][T16316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.171119][T16316] CPU: 0 PID: 16316 Comm: syz.0.3709 Not tainted syzkaller #0 [ 537.178646][T16316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 537.188725][T16316] Call Trace: [ 537.192024][T16316] [ 537.194978][T16316] dump_stack_lvl+0x18c/0x250 [ 537.199689][T16316] ? show_regs_print_info+0x20/0x20 [ 537.202201][T16320] netlink: 'syz.2.3710': attribute type 3 has an invalid length. [ 537.204895][T16316] ? load_image+0x420/0x420 [ 537.204924][T16316] ? __lock_acquire+0x7d80/0x7d80 [ 537.204955][T16316] should_fail_ex+0x394/0x4c0 [ 537.226893][T16316] _copy_from_user+0x2f/0xe0 [ 537.230891][T16320] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.3710'. [ 537.231494][T16316] __copy_msghdr+0x388/0x560 [ 537.231527][T16316] ___sys_sendmsg+0x214/0x360 [ 537.231556][T16316] ? __sys_sendmsg+0x2b0/0x2b0 [ 537.231597][T16316] ? __lock_acquire+0x7d80/0x7d80 [ 537.259828][T16316] __se_sys_sendmsg+0x1d0/0x2c0 [ 537.264706][T16316] ? __x64_sys_sendmsg+0x80/0x80 [ 537.269682][T16316] ? lockdep_hardirqs_on+0x98/0x150 [ 537.274912][T16316] do_syscall_64+0x55/0xb0 [ 537.279348][T16316] ? clear_bhb_loop+0x40/0x90 [ 537.284048][T16316] ? clear_bhb_loop+0x40/0x90 [ 537.288752][T16316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.294672][T16316] RIP: 0033:0x7f247ff9ce59 [ 537.299101][T16316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.318734][T16316] RSP: 002b:00007f2480f37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.327178][T16316] RAX: ffffffffffffffda RBX: 00007f2480215fa0 RCX: 00007f247ff9ce59 [ 537.335176][T16316] RDX: 0000000000040810 RSI: 0000200000000000 RDI: 0000000000000004 [ 537.343160][T16316] RBP: 00007f2480f37090 R08: 0000000000000000 R09: 0000000000000000 [ 537.351141][T16316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.359118][T16316] R13: 00007f2480216038 R14: 00007f2480215fa0 R15: 00007ffe86831c38 [ 537.367111][T16316] [ 537.425302][T16307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.861868][T16330] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3714'. [ 538.115944][T16333] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3711'. [ 538.129408][T16333] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3711'. [ 538.183895][T16333] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3711'. [ 538.218427][T16328] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3711'. [ 538.242756][T16333] netlink: 'syz.1.3711': attribute type 10 has an invalid length. [ 538.255913][T16333] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 538.263218][T16333] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.292899][T16333] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 538.743009][T16364] netlink: 'syz.3.3727': attribute type 46 has an invalid length. [ 539.128662][T16381] netlink: 'syz.2.3734': attribute type 15 has an invalid length. [ 539.428751][T16390] netlink: 'syz.2.3738': attribute type 46 has an invalid length. [ 540.100484][T16411] netlink: 'syz.2.3743': attribute type 3 has an invalid length. [ 540.282060][T16415] netlink: 'syz.2.3748': attribute type 46 has an invalid length. [ 541.597989][T16468] validate_nla: 2 callbacks suppressed [ 541.598008][T16468] netlink: 'syz.2.3770': attribute type 46 has an invalid length. [ 541.819198][T16473] __nla_validate_parse: 9 callbacks suppressed [ 541.819217][T16473] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.3772'. [ 542.127212][T16481] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3775'. [ 542.162534][T16483] FAULT_INJECTION: forcing a failure. [ 542.162534][T16483] name failslab, interval 1, probability 0, space 0, times 0 [ 542.179583][T16483] CPU: 0 PID: 16483 Comm: syz.3.3776 Not tainted syzkaller #0 [ 542.187101][T16483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 542.197193][T16483] Call Trace: [ 542.200513][T16483] [ 542.203480][T16483] dump_stack_lvl+0x18c/0x250 [ 542.208227][T16483] ? show_regs_print_info+0x20/0x20 [ 542.213475][T16483] ? load_image+0x420/0x420 [ 542.218037][T16483] ? __might_sleep+0xe0/0xe0 [ 542.222681][T16483] ? __lock_acquire+0x7d80/0x7d80 [ 542.227769][T16483] should_fail_ex+0x394/0x4c0 [ 542.232514][T16483] should_failslab+0x9/0x20 [ 542.237060][T16483] slab_pre_alloc_hook+0x59/0x300 [ 542.242149][T16483] kmem_cache_alloc_node+0x5e/0x310 [ 542.247392][T16483] ? perf_event_alloc+0x146/0x2150 [ 542.252563][T16483] perf_event_alloc+0x146/0x2150 [ 542.257555][T16483] ? _raw_spin_unlock+0x28/0x40 [ 542.262455][T16483] ? find_lively_task_by_vpid+0x19/0x290 [ 542.268132][T16483] ? find_lively_task_by_vpid+0x19/0x290 [ 542.273821][T16483] __se_sys_perf_event_open+0x740/0x1c60 [ 542.279521][T16483] ? mutex_unlock+0x10/0x10 [ 542.284083][T16483] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 542.289803][T16483] ? lock_chain_count+0x20/0x20 [ 542.294720][T16483] ? lockdep_hardirqs_on+0x98/0x150 [ 542.299961][T16483] ? __x64_sys_perf_event_open+0x20/0xc0 [ 542.305651][T16483] do_syscall_64+0x55/0xb0 [ 542.310110][T16483] ? clear_bhb_loop+0x40/0x90 [ 542.314826][T16483] ? clear_bhb_loop+0x40/0x90 [ 542.319553][T16483] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.325491][T16483] RIP: 0033:0x7fdad159ce59 [ 542.329942][T16483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.349582][T16483] RSP: 002b:00007fdad23ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 542.358035][T16483] RAX: ffffffffffffffda RBX: 00007fdad1815fa0 RCX: 00007fdad159ce59 [ 542.366037][T16483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 542.374036][T16483] RBP: 00007fdad23ba090 R08: 0000000000000000 R09: 0000000000000000 [ 542.382043][T16483] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 542.390043][T16483] R13: 00007fdad1816038 R14: 00007fdad1815fa0 R15: 00007fff4d4d2338 [ 542.398093][T16483] [ 542.600246][T16490] netlink: 'syz.0.3778': attribute type 10 has an invalid length. [ 542.612728][T16490] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3778'. [ 542.638319][T16492] netlink: 'syz.1.3780': attribute type 46 has an invalid length. [ 542.757835][T16496] netlink: 'syz.0.3778': attribute type 3 has an invalid length. [ 542.765772][T16496] netlink: 'syz.0.3778': attribute type 6 has an invalid length. [ 542.774092][T16496] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.3778'. [ 543.214411][T16504] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.3785'. [ 543.333066][T16512] FAULT_INJECTION: forcing a failure. [ 543.333066][T16512] name failslab, interval 1, probability 0, space 0, times 0 [ 543.351109][T16512] CPU: 1 PID: 16512 Comm: syz.2.3788 Not tainted syzkaller #0 [ 543.358612][T16512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 543.366756][T16514] netlink: 'syz.3.3789': attribute type 46 has an invalid length. [ 543.368670][T16512] Call Trace: [ 543.368682][T16512] [ 543.368691][T16512] dump_stack_lvl+0x18c/0x250 [ 543.387417][T16512] ? show_regs_print_info+0x20/0x20 [ 543.392638][T16512] ? load_image+0x420/0x420 [ 543.397166][T16512] ? __might_sleep+0xe0/0xe0 [ 543.401783][T16512] ? __lock_acquire+0x7d80/0x7d80 [ 543.406835][T16512] should_fail_ex+0x394/0x4c0 [ 543.411544][T16512] should_failslab+0x9/0x20 [ 543.416078][T16512] slab_pre_alloc_hook+0x59/0x300 [ 543.421134][T16512] ? tomoyo_encode+0x2ad/0x570 [ 543.425918][T16512] ? tomoyo_encode+0x2ad/0x570 [ 543.430692][T16512] __kmem_cache_alloc_node+0x53/0x250 [ 543.436088][T16512] ? tomoyo_encode+0x2ad/0x570 [ 543.440871][T16512] __kmalloc+0xa7/0x240 [ 543.445058][T16512] tomoyo_encode+0x2ad/0x570 [ 543.449678][T16512] tomoyo_realpath_from_path+0x57c/0x5c0 [ 543.455338][T16512] ? tomoyo_domain+0xd6/0x120 [ 543.460030][T16512] tomoyo_path_number_perm+0x248/0x5e0 [ 543.465499][T16512] ? tomoyo_path_number_perm+0x217/0x5e0 [ 543.471157][T16512] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 543.476633][T16512] ? ksys_write+0x1d2/0x260 [ 543.481189][T16512] ? __fget_files+0x28/0x460 [ 543.486155][T16512] security_file_ioctl+0x70/0xa0 [ 543.491121][T16512] __se_sys_ioctl+0x48/0x170 [ 543.494069][T16518] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.3791'. [ 543.495723][T16512] do_syscall_64+0x55/0xb0 [ 543.495750][T16512] ? clear_bhb_loop+0x40/0x90 [ 543.513946][T16512] ? clear_bhb_loop+0x40/0x90 [ 543.518646][T16512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.524565][T16512] RIP: 0033:0x7f4b6c79ce59 [ 543.528995][T16512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.548622][T16512] RSP: 002b:00007f4b6d583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.557060][T16512] RAX: ffffffffffffffda RBX: 00007f4b6ca15fa0 RCX: 00007f4b6c79ce59 [ 543.565050][T16512] RDX: 0000200000000400 RSI: 0000000000008946 RDI: 0000000000000006 [ 543.567432][T16520] FAULT_INJECTION: forcing a failure. [ 543.567432][T16520] name failslab, interval 1, probability 0, space 0, times 0 [ 543.573017][T16512] RBP: 00007f4b6d583090 R08: 0000000000000000 R09: 0000000000000000 [ 543.573033][T16512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.573045][T16512] R13: 00007f4b6ca16038 R14: 00007f4b6ca15fa0 R15: 00007ffe7de56f38 [ 543.573073][T16512] [ 543.599068][T16512] ERROR: Out of memory at tomoyo_realpath_from_path. [ 543.661006][T16520] CPU: 0 PID: 16520 Comm: syz.0.3792 Not tainted syzkaller #0 [ 543.668531][T16520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 543.678605][T16520] Call Trace: [ 543.681902][T16520] [ 543.684849][T16520] dump_stack_lvl+0x18c/0x250 [ 543.689555][T16520] ? show_regs_print_info+0x20/0x20 [ 543.694780][T16520] ? load_image+0x420/0x420 [ 543.699310][T16520] ? __lock_acquire+0x7d80/0x7d80 [ 543.704360][T16520] should_fail_ex+0x394/0x4c0 [ 543.709073][T16520] should_failslab+0x9/0x20 [ 543.713599][T16520] slab_pre_alloc_hook+0x59/0x300 [ 543.718651][T16520] ? bpf_test_init+0x9f/0x140 [ 543.723348][T16520] ? bpf_test_init+0x9f/0x140 [ 543.728050][T16520] __kmem_cache_alloc_node+0x53/0x250 [ 543.733442][T16520] ? bpf_test_init+0x9f/0x140 [ 543.738132][T16520] __kmalloc+0xa7/0x240 [ 543.742300][T16520] bpf_test_init+0x9f/0x140 [ 543.746807][T16520] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 543.752192][T16520] ? __lock_acquire+0x7d80/0x7d80 [ 543.757226][T16520] ? dev_put+0x80/0x80 [ 543.761312][T16520] ? dev_put+0x80/0x80 [ 543.765380][T16520] bpf_prog_test_run+0x31f/0x390 [ 543.770320][T16520] __sys_bpf+0x49d/0x890 [ 543.774562][T16520] ? bpf_link_show_fdinfo+0x390/0x390 [ 543.779942][T16520] ? lock_chain_count+0x20/0x20 [ 543.784787][T16520] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 543.790771][T16520] __x64_sys_bpf+0x7c/0x90 [ 543.795182][T16520] do_syscall_64+0x55/0xb0 [ 543.799601][T16520] ? clear_bhb_loop+0x40/0x90 [ 543.804272][T16520] ? clear_bhb_loop+0x40/0x90 [ 543.808946][T16520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.814844][T16520] RIP: 0033:0x7f247ff9ce59 [ 543.819259][T16520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.838870][T16520] RSP: 002b:00007f2480f37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 543.847279][T16520] RAX: ffffffffffffffda RBX: 00007f2480215fa0 RCX: 00007f247ff9ce59 [ 543.855244][T16520] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 543.863209][T16520] RBP: 00007f2480f37090 R08: 0000000000000000 R09: 0000000000000000 [ 543.871174][T16520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.879139][T16520] R13: 00007f2480216038 R14: 00007f2480215fa0 R15: 00007ffe86831c38 [ 543.887119][T16520] [ 544.010647][T16531] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3795'. [ 544.025113][T16532] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3793'. [ 544.189158][T16538] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.3797'. [ 544.341823][T16545] netlink: 'syz.0.3799': attribute type 46 has an invalid length. [ 544.355693][T16547] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3800'. [ 544.399958][T16547] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 545.308568][T16586] FAULT_INJECTION: forcing a failure. [ 545.308568][T16586] name failslab, interval 1, probability 0, space 0, times 0 [ 545.355336][T16586] CPU: 1 PID: 16586 Comm: syz.1.3808 Not tainted syzkaller #0 [ 545.362851][T16586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 545.372936][T16586] Call Trace: [ 545.376235][T16586] [ 545.379184][T16586] dump_stack_lvl+0x18c/0x250 [ 545.383895][T16586] ? show_regs_print_info+0x20/0x20 [ 545.389097][T16586] ? load_image+0x420/0x420 [ 545.393610][T16586] ? perf_trace_lock+0xfc/0x3b0 [ 545.398461][T16586] ? trace_event_raw_event_lock+0x240/0x240 [ 545.404357][T16586] should_fail_ex+0x394/0x4c0 [ 545.409039][T16586] should_failslab+0x9/0x20 [ 545.413550][T16586] slab_pre_alloc_hook+0x59/0x300 [ 545.418581][T16586] kmem_cache_alloc_node+0x5e/0x310 [ 545.423781][T16586] ? __alloc_skb+0x103/0x2c0 [ 545.428375][T16586] __alloc_skb+0x103/0x2c0 [ 545.432796][T16586] tipc_msg_create+0x4a/0x4c0 [ 545.437578][T16586] ? tipc_own_addr+0x45/0x2a0 [ 545.442284][T16586] tipc_group_proto_xmit+0xce/0x790 [ 545.447486][T16586] tipc_group_delete+0x15f/0x4c0 [ 545.452427][T16586] ? tipc_group_update_member+0x360/0x360 [ 545.458153][T16586] ? tipc_group_self+0x26/0x1c0 [ 545.463004][T16586] tipc_sk_leave+0x154/0x4d0 [ 545.467600][T16586] ? __tipc_shutdown+0x1590/0x1590 [ 545.472716][T16586] ? _local_bh_enable+0xa0/0xa0 [ 545.477575][T16586] tipc_release+0x333/0x20e0 [ 545.482168][T16586] ? ima_get_current_hash_algo+0x10/0x10 [ 545.487812][T16586] ? tipc_sock_destruct+0x180/0x180 [ 545.493011][T16586] ? down_write+0x16e/0x200 [ 545.497515][T16586] ? down_read_killable+0x340/0x340 [ 545.502723][T16586] sock_close+0xa7/0x210 [ 545.506966][T16586] ? sock_mmap+0xa0/0xa0 [ 545.511207][T16586] __fput+0x221/0x930 [ 545.515199][T16586] __se_sys_close+0x15c/0x1e0 [ 545.519878][T16586] do_syscall_64+0x55/0xb0 [ 545.524291][T16586] ? clear_bhb_loop+0x40/0x90 [ 545.528962][T16586] ? clear_bhb_loop+0x40/0x90 [ 545.533636][T16586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.539533][T16586] RIP: 0033:0x7ff85579ce59 [ 545.543949][T16586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.563551][T16586] RSP: 002b:00007ff856689028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 545.571966][T16586] RAX: ffffffffffffffda RBX: 00007ff855a16090 RCX: 00007ff85579ce59 [ 545.580017][T16586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 545.587988][T16586] RBP: 00007ff856689090 R08: 0000000000000000 R09: 0000000000000000 [ 545.595957][T16586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.603921][T16586] R13: 00007ff855a16128 R14: 00007ff855a16090 R15: 00007fff9f6bbaf8 [ 545.611908][T16586] [ 545.689869][T16591] netlink: 'syz.2.3810': attribute type 46 has an invalid length. [ 545.875507][T16595] netlink: 'syz.0.3812': attribute type 10 has an invalid length. [ 545.980007][T16595] geneve1: entered promiscuous mode [ 545.998093][T16595] geneve1: entered allmulticast mode [ 546.020293][T16595] team0: Port device geneve1 added [ 546.151719][T16612] FAULT_INJECTION: forcing a failure. [ 546.151719][T16612] name failslab, interval 1, probability 0, space 0, times 0 [ 546.170000][T16612] CPU: 0 PID: 16612 Comm: syz.2.3817 Not tainted syzkaller #0 [ 546.177495][T16612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 546.187553][T16612] Call Trace: [ 546.190821][T16612] [ 546.193741][T16612] dump_stack_lvl+0x18c/0x250 [ 546.198413][T16612] ? show_regs_print_info+0x20/0x20 [ 546.203598][T16612] ? load_image+0x420/0x420 [ 546.208107][T16612] ? __might_sleep+0xe0/0xe0 [ 546.212717][T16612] ? __lock_acquire+0x7d80/0x7d80 [ 546.217765][T16612] should_fail_ex+0x394/0x4c0 [ 546.222481][T16612] should_failslab+0x9/0x20 [ 546.227003][T16612] slab_pre_alloc_hook+0x59/0x300 [ 546.232051][T16612] ? __get_vm_area_node+0x125/0x370 [ 546.237271][T16612] __kmem_cache_alloc_node+0x53/0x250 [ 546.238604][T16616] netlink: 'syz.0.3819': attribute type 46 has an invalid length. [ 546.242656][T16612] ? __get_vm_area_node+0x125/0x370 [ 546.242685][T16612] kmalloc_node_trace+0x26/0xe0 [ 546.242711][T16612] __get_vm_area_node+0x125/0x370 [ 546.265572][T16612] __vmalloc_node_range+0x36f/0x1320 [ 546.270879][T16612] ? netlink_sendmsg+0x602/0xbf0 [ 546.275831][T16612] ? netlink_insert+0x1094/0x1390 [ 546.280891][T16612] ? netlink_insert+0x2ba/0x1390 [ 546.285853][T16612] ? free_vm_area+0x50/0x50 [ 546.290382][T16612] ? netlink_sendmsg+0x602/0xbf0 [ 546.295332][T16612] vmalloc+0x79/0x90 [ 546.299248][T16612] ? netlink_sendmsg+0x602/0xbf0 [ 546.304195][T16612] netlink_sendmsg+0x602/0xbf0 [ 546.308955][T16612] ? netlink_getsockopt+0x590/0x590 [ 546.314145][T16612] ? aa_sock_msg_perm+0x94/0x150 [ 546.319081][T16612] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 546.324354][T16612] ? security_socket_sendmsg+0x80/0xa0 [ 546.329805][T16612] sock_write_iter+0x2dc/0x420 [ 546.334566][T16612] ? sock_read_iter+0x3f0/0x3f0 [ 546.339409][T16612] ? common_file_perm+0x198/0x1f0 [ 546.344425][T16612] vfs_write+0x474/0x9a0 [ 546.348665][T16612] ? file_end_write+0x250/0x250 [ 546.353521][T16612] ? __fget_files+0x3fc/0x460 [ 546.358213][T16612] ? __fdget_pos+0x1d8/0x330 [ 546.362805][T16612] ? ksys_write+0x74/0x260 [ 546.367214][T16612] ksys_write+0x151/0x260 [ 546.371545][T16612] ? __ia32_sys_read+0x90/0x90 [ 546.376331][T16612] ? lockdep_hardirqs_on+0x98/0x150 [ 546.381541][T16612] do_syscall_64+0x55/0xb0 [ 546.385947][T16612] ? clear_bhb_loop+0x40/0x90 [ 546.390621][T16612] ? clear_bhb_loop+0x40/0x90 [ 546.395298][T16612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.401182][T16612] RIP: 0033:0x7f4b6c79ce59 [ 546.405582][T16612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.425176][T16612] RSP: 002b:00007f4b6d583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 546.433575][T16612] RAX: ffffffffffffffda RBX: 00007f4b6ca15fa0 RCX: 00007f4b6c79ce59 [ 546.441543][T16612] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000003 [ 546.449500][T16612] RBP: 00007f4b6d583090 R08: 0000000000000000 R09: 0000000000000000 [ 546.457458][T16612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.465416][T16612] R13: 00007f4b6ca16038 R14: 00007f4b6ca15fa0 R15: 00007ffe7de56f38 [ 546.473403][T16612] [ 546.487208][T16612] syz.2.3817: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 546.501783][T16612] CPU: 0 PID: 16612 Comm: syz.2.3817 Not tainted syzkaller #0 [ 546.509258][T16612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 546.519320][T16612] Call Trace: [ 546.522600][T16612] [ 546.525529][T16612] dump_stack_lvl+0x18c/0x250 [ 546.530212][T16612] ? show_regs_print_info+0x20/0x20 [ 546.535409][T16612] ? load_image+0x420/0x420 [ 546.539911][T16612] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 546.546323][T16612] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 546.552822][T16612] warn_alloc+0x246/0x340 [ 546.557152][T16612] ? __get_vm_area_node+0x125/0x370 [ 546.562354][T16612] ? zone_watermark_ok_safe+0x230/0x230 [ 546.567900][T16612] ? rcu_is_watching+0x15/0xb0 [ 546.572664][T16612] ? __get_vm_area_node+0x356/0x370 [ 546.577865][T16612] __vmalloc_node_range+0x394/0x1320 [ 546.583148][T16612] ? netlink_insert+0x1094/0x1390 [ 546.588176][T16612] ? netlink_insert+0x2ba/0x1390 [ 546.593114][T16612] ? free_vm_area+0x50/0x50 [ 546.597621][T16612] ? netlink_sendmsg+0x602/0xbf0 [ 546.602556][T16612] vmalloc+0x79/0x90 [ 546.606452][T16612] ? netlink_sendmsg+0x602/0xbf0 [ 546.611384][T16612] netlink_sendmsg+0x602/0xbf0 [ 546.616149][T16612] ? netlink_getsockopt+0x590/0x590 [ 546.621350][T16612] ? aa_sock_msg_perm+0x94/0x150 [ 546.626289][T16612] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 546.631570][T16612] ? security_socket_sendmsg+0x80/0xa0 [ 546.637026][T16612] sock_write_iter+0x2dc/0x420 [ 546.641788][T16612] ? sock_read_iter+0x3f0/0x3f0 [ 546.646645][T16612] ? common_file_perm+0x198/0x1f0 [ 546.651675][T16612] vfs_write+0x474/0x9a0 [ 546.655920][T16612] ? file_end_write+0x250/0x250 [ 546.660773][T16612] ? __fget_files+0x3fc/0x460 [ 546.665457][T16612] ? __fdget_pos+0x1d8/0x330 [ 546.670042][T16612] ? ksys_write+0x74/0x260 [ 546.674457][T16612] ksys_write+0x151/0x260 [ 546.678787][T16612] ? __ia32_sys_read+0x90/0x90 [ 546.683583][T16612] ? lockdep_hardirqs_on+0x98/0x150 [ 546.688784][T16612] do_syscall_64+0x55/0xb0 [ 546.693197][T16612] ? clear_bhb_loop+0x40/0x90 [ 546.697867][T16612] ? clear_bhb_loop+0x40/0x90 [ 546.702538][T16612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.708429][T16612] RIP: 0033:0x7f4b6c79ce59 [ 546.712845][T16612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.732455][T16612] RSP: 002b:00007f4b6d583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 546.740870][T16612] RAX: ffffffffffffffda RBX: 00007f4b6ca15fa0 RCX: 00007f4b6c79ce59 [ 546.748836][T16612] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000003 [ 546.756802][T16612] RBP: 00007f4b6d583090 R08: 0000000000000000 R09: 0000000000000000 [ 546.764772][T16612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.772739][T16612] R13: 00007f4b6ca16038 R14: 00007f4b6ca15fa0 R15: 00007ffe7de56f38 [ 546.780724][T16612] [ 546.825859][T16612] Mem-Info: [ 546.829288][T16612] active_anon:10628 inactive_anon:0 isolated_anon:0 [ 546.829288][T16612] active_file:19483 inactive_file:40140 isolated_file:0 [ 546.829288][T16612] unevictable:768 dirty:497 writeback:0 [ 546.829288][T16612] slab_reclaimable:11457 slab_unreclaimable:95280 [ 546.829288][T16612] mapped:24973 shmem:1361 pagetables:543 [ 546.829288][T16612] sec_pagetables:0 bounce:0 [ 546.829288][T16612] kernel_misc_reclaimable:0 [ 546.829288][T16612] free:1332113 free_pcp:9892 free_cma:0 [ 546.881896][T16612] Node 0 active_anon:42412kB inactive_anon:0kB active_file:77932kB inactive_file:160360kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99892kB dirty:1988kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9972kB pagetables:2072kB sec_pagetables:0kB all_unreclaimable? no [ 546.930634][T16612] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 547.026185][T16612] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 547.070137][T16612] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 547.077650][T16612] Node 0 DMA32 free:1411916kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:42372kB inactive_anon:0kB active_file:77932kB inactive_file:159532kB unevictable:1536kB writepending:1988kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:24388kB local_pcp:10512kB free_cma:0kB [ 547.079211][T16626] __nla_validate_parse: 2 callbacks suppressed [ 547.079224][T16626] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3824'. [ 547.113118][T16612] lowmem_reserve[]: [ 547.124361][T16626] netlink: 'syz.0.3824': attribute type 1 has an invalid length. [ 547.126153][T16612] 0 [ 547.129216][T16626] netlink: 16520 bytes leftover after parsing attributes in process `syz.0.3824'. [ 547.143720][T16612] 0 0 0 0 [ 547.151315][T16612] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 547.180080][T16612] lowmem_reserve[]: 0 0 0 0 0 [ 547.189183][T16612] Node 1 Normal free:3901172kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15616kB local_pcp:10016kB free_cma:0kB [ 547.277685][T16612] lowmem_reserve[]: 0 0 0 0 0 [ 547.285192][T16612] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 547.320743][T16612] Node 0 DMA32: 397*4kB (U) 449*8kB (UME) 705*16kB (UM) 1220*32kB (UME) 316*64kB (UM) 135*128kB (UM) 96*256kB (UME) 46*512kB (UM) 11*1024kB (UME) 5*2048kB (UM) 305*4096kB (M) = 1411916kB [ 547.353816][T16612] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 547.368545][T16612] Node 1 Normal: 251*4kB (UME) 49*8kB (UME) 34*16kB (UME) 153*32kB (UME) 41*64kB (UME) 12*128kB (UE) 2*256kB (U) 1*512kB (M) 0*1024kB 1*2048kB (U) 949*4096kB (ME) = 3901172kB [ 547.391086][T16612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 547.405702][T16612] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 547.415146][T16612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 547.454570][T16612] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 547.484443][T16612] 60984 total pagecache pages [ 547.487451][T16645] FAULT_INJECTION: forcing a failure. [ 547.487451][T16645] name failslab, interval 1, probability 0, space 0, times 0 [ 547.489144][T16612] 0 pages in swap cache [ 547.489154][T16612] Free swap = 124460kB [ 547.489162][T16612] Total swap = 124996kB [ 547.489170][T16612] 2097051 pages RAM [ 547.489177][T16612] 0 pages HighMem/MovableOnly [ 547.489185][T16612] 416931 pages reserved [ 547.489191][T16612] 0 pages cma reserved [ 547.500098][T16641] netlink: 'syz.0.3827': attribute type 9 has an invalid length. [ 547.510532][T16645] CPU: 1 PID: 16645 Comm: syz.1.3829 Not tainted syzkaller #0 [ 547.510558][T16645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 547.510569][T16645] Call Trace: [ 547.510577][T16645] [ 547.510585][T16645] dump_stack_lvl+0x18c/0x250 [ 547.510617][T16645] ? show_regs_print_info+0x20/0x20 [ 547.510645][T16645] ? lockdep_hardirqs_on+0x98/0x150 [ 547.530009][T16641] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3827'. [ 547.531449][T16645] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 547.531494][T16645] should_fail_ex+0x394/0x4c0 [ 547.531526][T16645] should_failslab+0x9/0x20 [ 547.531548][T16645] slab_pre_alloc_hook+0x59/0x300 [ 547.531573][T16645] ? perf_tp_event+0x1550/0x1550 [ 547.531592][T16645] ? perf_event_output_forward+0x330/0x3e0 [ 547.531611][T16645] ? __get_vm_area_node+0x125/0x370 [ 547.531641][T16645] __kmem_cache_alloc_node+0x53/0x250 [ 547.531668][T16645] ? __get_vm_area_node+0x125/0x370 [ 547.531689][T16645] kmalloc_node_trace+0x26/0xe0 [ 547.531715][T16645] __get_vm_area_node+0x125/0x370 [ 547.531743][T16645] __vmalloc_node_range+0x36f/0x1320 [ 547.531766][T16645] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 547.531786][T16645] ? mark_lock+0x94/0x320 [ 547.531809][T16645] ? __lock_acquire+0x1336/0x7d80 [ 547.531843][T16645] ? aa_get_newest_label+0xfd/0x5c0 [ 547.531867][T16645] ? free_vm_area+0x50/0x50 [ 547.531889][T16645] ? end_current_label_crit_section+0x170/0x170 [ 547.531912][T16645] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 547.531933][T16645] ? verify_lock_unused+0x140/0x140 [ 547.531955][T16645] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 547.531974][T16645] __vmalloc+0x7a/0x90 [ 547.531995][T16645] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 547.532015][T16645] bpf_prog_alloc_no_stats+0x46/0x430 [ 547.532037][T16645] bpf_prog_alloc+0x3d/0x1a0 [ 547.532059][T16645] bpf_prog_load+0x6b2/0x1610 [ 547.532090][T16645] ? map_freeze+0x420/0x420 [ 547.532114][T16645] ? __might_fault+0xaa/0x120 [ 547.532132][T16645] ? __lock_acquire+0x7d80/0x7d80 [ 547.532153][T16645] ? __check_object_size+0x41/0xa40 [ 547.532171][T16645] ? __might_fault+0xaa/0x120 [ 547.532188][T16645] ? __might_fault+0xc6/0x120 [ 547.532203][T16645] ? __might_fault+0xaa/0x120 [ 547.532222][T16645] ? bpf_lsm_bpf+0x9/0x10 [ 547.532241][T16645] ? security_bpf+0x7e/0xa0 [ 547.532264][T16645] __sys_bpf+0x5ba/0x890 [ 547.532286][T16645] ? bpf_link_show_fdinfo+0x390/0x390 [ 547.532316][T16645] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 547.532352][T16645] __x64_sys_bpf+0x7c/0x90 [ 547.532372][T16645] do_syscall_64+0x55/0xb0 [ 547.532391][T16645] ? clear_bhb_loop+0x40/0x90 [ 547.532408][T16645] ? clear_bhb_loop+0x40/0x90 [ 547.532426][T16645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.532449][T16645] RIP: 0033:0x7ff85579ce59 [ 547.532467][T16645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.532482][T16645] RSP: 002b:00007ff8566aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 547.532503][T16645] RAX: ffffffffffffffda RBX: 00007ff855a15fa0 RCX: 00007ff85579ce59 [ 547.532517][T16645] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 547.532530][T16645] RBP: 00007ff8566aa090 R08: 0000000000000000 R09: 0000000000000000 [ 547.532542][T16645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.532553][T16645] R13: 00007ff855a16038 R14: 00007ff855a15fa0 R15: 00007fff9f6bbaf8 [ 547.532581][T16645] [ 547.536239][T16643] netlink: 'syz.3.3828': attribute type 46 has an invalid length. [ 547.903728][T16649] IPv6: NLM_F_CREATE should be specified when creating new route [ 548.112679][T16659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 548.208876][T16659] netlink: 'syz.0.3833': attribute type 9 has an invalid length. [ 548.218506][T16659] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3833'. [ 548.310366][T16665] netlink: 'syz.0.3833': attribute type 10 has an invalid length. [ 548.782211][T16670] netlink: 'syz.1.3836': attribute type 10 has an invalid length. [ 548.790270][T16670] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3836'. [ 549.078551][T16685] netlink: 'syz.3.3841': attribute type 21 has an invalid length. [ 549.090835][T16685] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3841'. [ 549.125094][T16685] netlink: 'syz.3.3841': attribute type 10 has an invalid length. [ 549.142467][T16685] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3841'. [ 549.993714][T16700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 550.069736][T16700] netlink: 'syz.0.3846': attribute type 9 has an invalid length. [ 550.080866][T16700] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3846'. [ 550.200041][T16710] FAULT_INJECTION: forcing a failure. [ 550.200041][T16710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.248005][T16703] netlink: 'syz.0.3846': attribute type 10 has an invalid length. [ 550.269927][T16710] CPU: 0 PID: 16710 Comm: syz.2.3847 Not tainted syzkaller #0 [ 550.277432][T16710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 550.287499][T16710] Call Trace: [ 550.290787][T16710] [ 550.293726][T16710] dump_stack_lvl+0x18c/0x250 [ 550.298428][T16710] ? show_regs_print_info+0x20/0x20 [ 550.303643][T16710] ? load_image+0x420/0x420 [ 550.308164][T16710] ? __might_fault+0xaa/0x120 [ 550.312858][T16710] ? __lock_acquire+0x7d80/0x7d80 [ 550.317898][T16710] ? __virt_addr_valid+0x10c/0x380 [ 550.323031][T16710] should_fail_ex+0x394/0x4c0 [ 550.327749][T16710] _copy_from_user+0x2f/0xe0 [ 550.332376][T16710] generic_map_update_batch+0x58c/0x800 [ 550.337968][T16710] ? rcu_read_unlock+0xa0/0xa0 [ 550.342758][T16710] ? __fdget+0x180/0x210 [ 550.347023][T16710] ? rcu_read_unlock+0xa0/0xa0 [ 550.351801][T16710] bpf_map_do_batch+0x3f2/0x600 [ 550.356673][T16710] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 550.362154][T16710] __sys_bpf+0x381/0x890 [ 550.366424][T16710] ? bpf_link_show_fdinfo+0x390/0x390 [ 550.371829][T16710] ? lock_chain_count+0x20/0x20 [ 550.376712][T16710] __x64_sys_bpf+0x7c/0x90 [ 550.381146][T16710] do_syscall_64+0x55/0xb0 [ 550.385584][T16710] ? clear_bhb_loop+0x40/0x90 [ 550.390272][T16710] ? clear_bhb_loop+0x40/0x90 [ 550.394948][T16710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 550.400840][T16710] RIP: 0033:0x7f4b6c79ce59 [ 550.405249][T16710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.424863][T16710] RSP: 002b:00007f4b6a9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 550.433275][T16710] RAX: ffffffffffffffda RBX: 00007f4b6ca16090 RCX: 00007f4b6c79ce59 [ 550.441242][T16710] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 550.449205][T16710] RBP: 00007f4b6a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 550.457170][T16710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 550.465135][T16710] R13: 00007f4b6ca16128 R14: 00007f4b6ca16090 R15: 00007ffe7de56f38 [ 550.473114][T16710] [ 550.720364][T16721] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3853'. [ 550.780469][T16719] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3851'. [ 551.058059][T16741] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.072107][T16741] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.107841][T16741] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.133061][T16741] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.190677][T16741] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.242787][T16741] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.271174][T16741] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.291364][T16741] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.357332][T16741] team0: Port device geneve1 added [ 551.695589][T16762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 552.169524][T16766] validate_nla: 5 callbacks suppressed [ 552.169542][T16766] netlink: 'syz.0.3861': attribute type 10 has an invalid length. [ 552.231006][T16775] netlink: 'syz.2.3865': attribute type 21 has an invalid length. [ 552.238930][T16775] __nla_validate_parse: 5 callbacks suppressed [ 552.238944][T16775] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3865'. [ 552.271387][T16779] netlink: 'syz.2.3865': attribute type 10 has an invalid length. [ 552.279241][T16779] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3865'. [ 552.542708][T16785] netlink: 'syz.3.3869': attribute type 10 has an invalid length. [ 553.353696][T16793] FAULT_INJECTION: forcing a failure. [ 553.353696][T16793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.377375][T16793] CPU: 0 PID: 16793 Comm: syz.1.3870 Not tainted syzkaller #0 [ 553.384869][T16793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 553.390499][T16785] team0: Port device geneve1 added [ 553.394919][T16793] Call Trace: [ 553.394952][T16793] [ 553.394962][T16793] dump_stack_lvl+0x18c/0x250 [ 553.394994][T16793] ? show_regs_print_info+0x20/0x20 [ 553.416128][T16793] ? load_image+0x420/0x420 [ 553.420626][T16793] ? __might_fault+0xaa/0x120 [ 553.425300][T16793] ? __lock_acquire+0x7d80/0x7d80 [ 553.430333][T16793] ? __mutex_trylock_common+0x160/0x270 [ 553.435880][T16793] should_fail_ex+0x394/0x4c0 [ 553.440568][T16793] _copy_from_user+0x2f/0xe0 [ 553.445155][T16793] do_tcp_setsockopt+0x58d/0x1c50 [ 553.450180][T16793] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 553.455552][T16793] ? smc_setsockopt+0x175/0xb00 [ 553.460495][T16793] ? mutex_lock_nested+0x20/0x20 [ 553.465438][T16793] ? aa_sk_perm+0x83c/0x970 [ 553.469933][T16793] ? __fget_files+0x28/0x460 [ 553.474518][T16793] ? sock_common_setsockopt+0x36/0xc0 [ 553.479895][T16793] ? tcp_setsockopt+0x3d/0xe0 [ 553.484566][T16793] ? tcp_enable_tx_delay+0x70/0x70 [ 553.489674][T16793] ? sock_common_recvmsg+0x190/0x190 [ 553.494953][T16793] smc_setsockopt+0x22d/0xb00 [ 553.499631][T16793] ? smc_shutdown+0x9a0/0x9a0 [ 553.504301][T16793] ? __fget_files+0x28/0x460 [ 553.508892][T16793] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 553.514433][T16793] ? security_socket_setsockopt+0x7e/0xa0 [ 553.520146][T16793] ? smc_shutdown+0x9a0/0x9a0 [ 553.524825][T16793] do_sock_setsockopt+0x175/0x1a0 [ 553.529844][T16793] ? __fdget+0x180/0x210 [ 553.534083][T16793] __x64_sys_setsockopt+0x182/0x200 [ 553.539278][T16793] do_syscall_64+0x55/0xb0 [ 553.543689][T16793] ? clear_bhb_loop+0x40/0x90 [ 553.548357][T16793] ? clear_bhb_loop+0x40/0x90 [ 553.553028][T16793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.558922][T16793] RIP: 0033:0x7ff85579ce59 [ 553.563338][T16793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.582938][T16793] RSP: 002b:00007ff8566aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 553.591346][T16793] RAX: ffffffffffffffda RBX: 00007ff855a15fa0 RCX: 00007ff85579ce59 [ 553.599308][T16793] RDX: 0000000000000010 RSI: 0000000000000006 RDI: 0000000000000003 [ 553.607271][T16793] RBP: 00007ff8566aa090 R08: 0000000000000004 R09: 0000000000000000 [ 553.615235][T16793] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 553.623199][T16793] R13: 00007ff855a16038 R14: 00007ff855a15fa0 R15: 00007fff9f6bbaf8 [ 553.631179][T16793] [ 553.868081][T16805] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3874'. [ 554.010618][T16811] netlink: 'syz.1.3877': attribute type 21 has an invalid length. [ 554.018956][T16811] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3877'. [ 554.088162][T16811] netlink: 'syz.1.3877': attribute type 10 has an invalid length. [ 554.101470][T16811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3877'. [ 554.114026][T16813] FAULT_INJECTION: forcing a failure. [ 554.114026][T16813] name failslab, interval 1, probability 0, space 0, times 0 [ 554.114055][T16813] CPU: 0 PID: 16813 Comm: syz.0.3878 Not tainted syzkaller #0 [ 554.114075][T16813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 554.114086][T16813] Call Trace: [ 554.114095][T16813] [ 554.114103][T16813] dump_stack_lvl+0x18c/0x250 [ 554.114134][T16813] ? show_regs_print_info+0x20/0x20 [ 554.114157][T16813] ? load_image+0x420/0x420 [ 554.114180][T16813] ? __might_sleep+0xe0/0xe0 [ 554.114204][T16813] ? __lock_acquire+0x7d80/0x7d80 [ 554.114230][T16813] should_fail_ex+0x394/0x4c0 [ 554.114262][T16813] should_failslab+0x9/0x20 [ 554.114286][T16813] slab_pre_alloc_hook+0x59/0x300 [ 554.114316][T16813] kmem_cache_alloc_node+0x5e/0x310 [ 554.114340][T16813] ? __alloc_skb+0x103/0x2c0 [ 554.114368][T16813] __alloc_skb+0x103/0x2c0 [ 554.114396][T16813] alloc_skb_with_frags+0xcd/0x7a0 [ 554.114436][T16813] sock_alloc_send_pskb+0x883/0x9a0 [ 554.114477][T16813] ? sock_kzfree_s+0x50/0x50 [ 554.114520][T16813] tun_get_user+0xa53/0x3d40 [ 554.114604][T16813] ? trace_event_raw_event_lock+0x150/0x240 [ 554.114628][T16813] ? aa_file_perm+0x11b/0xee0 [ 554.114653][T16813] ? aa_file_perm+0x3e3/0xee0 [ 554.114677][T16813] ? rcu_read_unlock+0xa0/0xa0 [ 554.114714][T16813] ? tun_get+0x1c/0x2e0 [ 554.114737][T16813] ? __lock_acquire+0x7d80/0x7d80 [ 554.114765][T16813] ? tun_get+0x1c/0x2e0 [ 554.114793][T16813] tun_chr_write_iter+0x119/0x200 [ 554.114817][T16813] vfs_write+0x474/0x9a0 [ 554.114847][T16813] ? file_end_write+0x250/0x250 [ 554.114875][T16813] ? __fget_files+0x3fc/0x460 [ 554.114906][T16813] ? __fdget_pos+0x1d8/0x330 [ 554.114926][T16813] ? ksys_write+0x74/0x260 [ 554.114950][T16813] ksys_write+0x151/0x260 [ 554.114976][T16813] ? __ia32_sys_read+0x90/0x90 [ 554.115004][T16813] ? lockdep_hardirqs_on+0x98/0x150 [ 554.115033][T16813] do_syscall_64+0x55/0xb0 [ 554.115052][T16813] ? clear_bhb_loop+0x40/0x90 [ 554.115070][T16813] ? clear_bhb_loop+0x40/0x90 [ 554.115089][T16813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.115113][T16813] RIP: 0033:0x7f247ff9ce59 [ 554.115132][T16813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.115147][T16813] RSP: 002b:00007f2480f37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 554.115169][T16813] RAX: ffffffffffffffda RBX: 00007f2480215fa0 RCX: 00007f247ff9ce59 [ 554.115185][T16813] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 554.115199][T16813] RBP: 00007f2480f37090 R08: 0000000000000000 R09: 0000000000000000 [ 554.115212][T16813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.115224][T16813] R13: 00007f2480216038 R14: 00007f2480215fa0 R15: 00007ffe86831c38 [ 554.115262][T16813] [ 554.418190][T16818] FAULT_INJECTION: forcing a failure. [ 554.418190][T16818] name failslab, interval 1, probability 0, space 0, times 0 [ 554.531294][T16818] CPU: 1 PID: 16818 Comm: syz.0.3880 Not tainted syzkaller #0 [ 554.538797][T16818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 554.548868][T16818] Call Trace: [ 554.552170][T16818] [ 554.555108][T16818] dump_stack_lvl+0x18c/0x250 [ 554.559799][T16818] ? show_regs_print_info+0x20/0x20 [ 554.565009][T16818] ? load_image+0x420/0x420 [ 554.569532][T16818] ? __might_sleep+0xe0/0xe0 [ 554.574121][T16818] ? __lock_acquire+0x7d80/0x7d80 [ 554.579148][T16818] should_fail_ex+0x394/0x4c0 [ 554.583832][T16818] should_failslab+0x9/0x20 [ 554.588333][T16818] slab_pre_alloc_hook+0x59/0x300 [ 554.593361][T16818] ? __lock_acquire+0x7d80/0x7d80 [ 554.598385][T16818] kmem_cache_alloc_node+0x5e/0x310 [ 554.603585][T16818] ? __alloc_skb+0x103/0x2c0 [ 554.608175][T16818] __alloc_skb+0x103/0x2c0 [ 554.612592][T16818] netlink_sendmsg+0x66a/0xbf0 [ 554.617357][T16818] ? netlink_getsockopt+0x590/0x590 [ 554.622551][T16818] ? aa_sock_msg_perm+0x94/0x150 [ 554.627487][T16818] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 554.632769][T16818] ? security_socket_sendmsg+0x80/0xa0 [ 554.638220][T16818] ? netlink_getsockopt+0x590/0x590 [ 554.643415][T16818] ____sys_sendmsg+0x61b/0x980 [ 554.648182][T16818] ? __asan_memset+0x22/0x40 [ 554.652769][T16818] ? __sys_sendmsg_sock+0x30/0x30 [ 554.657792][T16818] ? __import_iovec+0x3fa/0x850 [ 554.662661][T16818] ? import_iovec+0x73/0xa0 [ 554.667159][T16818] ___sys_sendmsg+0x2a6/0x360 [ 554.671837][T16818] ? __sys_sendmsg+0x2b0/0x2b0 [ 554.676617][T16818] ? __lock_acquire+0x7d80/0x7d80 [ 554.681660][T16818] __se_sys_sendmsg+0x1d0/0x2c0 [ 554.686507][T16818] ? __x64_sys_sendmsg+0x80/0x80 [ 554.691452][T16818] ? lockdep_hardirqs_on+0x98/0x150 [ 554.696653][T16818] do_syscall_64+0x55/0xb0 [ 554.701065][T16818] ? clear_bhb_loop+0x40/0x90 [ 554.705738][T16818] ? clear_bhb_loop+0x40/0x90 [ 554.710410][T16818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.716319][T16818] RIP: 0033:0x7f247ff9ce59 [ 554.720744][T16818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.740364][T16818] RSP: 002b:00007f2480f37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.748782][T16818] RAX: ffffffffffffffda RBX: 00007f2480215fa0 RCX: 00007f247ff9ce59 [ 554.756751][T16818] RDX: 0000000000000090 RSI: 0000200000000080 RDI: 0000000000000003 [ 554.764719][T16818] RBP: 00007f2480f37090 R08: 0000000000000000 R09: 0000000000000000 [ 554.772687][T16818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.780652][T16818] R13: 00007f2480216038 R14: 00007f2480215fa0 R15: 00007ffe86831c38 [ 554.788635][T16818] [ 555.188279][T16832] bridge0: port 2(batadv0) entered blocking state [ 555.214229][T16832] bridge0: port 2(batadv0) entered disabled state [ 555.248572][T16829] FAULT_INJECTION: forcing a failure. [ 555.248572][T16829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.255813][T16832] batadv0: entered allmulticast mode [ 555.296690][T16829] CPU: 1 PID: 16829 Comm: syz.1.3884 Not tainted syzkaller #0 [ 555.300025][T16832] batadv0: entered promiscuous mode [ 555.304179][T16829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 555.304194][T16829] Call Trace: [ 555.304202][T16829] [ 555.304210][T16829] dump_stack_lvl+0x18c/0x250 [ 555.304239][T16829] ? show_regs_print_info+0x20/0x20 [ 555.304261][T16829] ? load_image+0x420/0x420 [ 555.304281][T16829] ? __might_fault+0xaa/0x120 [ 555.304301][T16829] ? __lock_acquire+0x7d80/0x7d80 [ 555.304325][T16829] should_fail_ex+0x394/0x4c0 [ 555.304354][T16829] _copy_to_user+0x2f/0xa0 [ 555.304385][T16829] bpf_test_finish+0x206/0x650 [ 555.304416][T16829] ? convert_skb_to___skb+0x420/0x420 [ 555.304439][T16829] ? read_tsc+0x9/0x20 [ 555.304470][T16829] bpf_prog_test_run_flow_dissector+0x4c9/0x640 [ 555.304504][T16829] ? xdp_convert_buff_to_md+0x200/0x200 [ 555.304530][T16829] ? __fget_files+0x28/0x460 [ 555.304565][T16829] ? xdp_convert_buff_to_md+0x200/0x200 [ 555.340381][T16832] bridge0: port 2(batadv0) entered blocking state [ 555.345029][T16829] bpf_prog_test_run+0x31f/0x390 [ 555.345061][T16829] __sys_bpf+0x49d/0x890 [ 555.345081][T16829] ? bpf_link_show_fdinfo+0x390/0x390 [ 555.345116][T16829] ? lock_chain_count+0x20/0x20 [ 555.345146][T16829] __x64_sys_bpf+0x7c/0x90 [ 555.345166][T16829] do_syscall_64+0x55/0xb0 [ 555.345188][T16829] ? clear_bhb_loop+0x40/0x90 [ 555.350915][T16832] bridge0: port 2(batadv0) entered forwarding state [ 555.355031][T16829] ? clear_bhb_loop+0x40/0x90 [ 555.355057][T16829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 555.451929][T16829] RIP: 0033:0x7ff85579ce59 [ 555.456368][T16829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.475993][T16829] RSP: 002b:00007ff8566aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 555.484434][T16829] RAX: ffffffffffffffda RBX: 00007ff855a15fa0 RCX: 00007ff85579ce59 [ 555.492424][T16829] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 555.500410][T16829] RBP: 00007ff8566aa090 R08: 0000000000000000 R09: 0000000000000000 [ 555.508394][T16829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.516381][T16829] R13: 00007ff855a16038 R14: 00007ff855a15fa0 R15: 00007fff9f6bbaf8 [ 555.524379][T16829] [ 555.544463][ T1135] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 555.554155][ T1135] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 555.891472][T16855] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3890'. [ 555.906871][T16852] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3891'. [ 555.919029][T16852] netlink: del zone limit has 8 unknown bytes [ 555.973336][T16859] netlink: 'syz.1.3893': attribute type 21 has an invalid length. [ 555.981977][T16859] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3893'. [ 556.059562][T16859] netlink: 'syz.1.3893': attribute type 10 has an invalid length. [ 556.075053][T16859] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3893'. [ 556.229396][T16867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 556.264139][T16867] netlink: 'syz.1.3898': attribute type 9 has an invalid length. [ 556.280848][T16867] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3898'. [ 556.309190][T16871] FAULT_INJECTION: forcing a failure. [ 556.309190][T16871] name failslab, interval 1, probability 0, space 0, times 0 [ 556.329765][T16871] CPU: 1 PID: 16871 Comm: syz.3.3899 Not tainted syzkaller #0 [ 556.337269][T16871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 556.347341][T16871] Call Trace: [ 556.350638][T16871] [ 556.353586][T16871] dump_stack_lvl+0x18c/0x250 [ 556.358296][T16871] ? show_regs_print_info+0x20/0x20 [ 556.363525][T16871] ? load_image+0x420/0x420 [ 556.368052][T16871] ? __might_sleep+0xe0/0xe0 [ 556.372665][T16871] ? __lock_acquire+0x7d80/0x7d80 [ 556.377715][T16871] should_fail_ex+0x394/0x4c0 [ 556.382421][T16871] should_failslab+0x9/0x20 [ 556.386945][T16871] slab_pre_alloc_hook+0x59/0x300 [ 556.392003][T16871] ? rtnl_newlink+0x10d/0x2170 [ 556.396777][T16871] __kmem_cache_alloc_node+0x53/0x250 [ 556.402163][T16871] ? rtnl_newlink+0x10d/0x2170 [ 556.406927][T16871] kmalloc_trace+0x2a/0xe0 [ 556.411343][T16871] rtnl_newlink+0x10d/0x2170 [ 556.415932][T16871] ? arch_stack_walk+0x160/0x190 [ 556.420896][T16871] ? verify_lock_unused+0x140/0x140 [ 556.426094][T16871] ? __mutex_trylock_common+0x160/0x270 [ 556.431632][T16871] ? rtnl_setlink+0x4e0/0x4e0 [ 556.436306][T16871] ? trace_raw_output_contention_end+0xd0/0xd0 [ 556.442463][T16871] ? rcu_is_watching+0x15/0xb0 [ 556.447227][T16871] ? trace_contention_end+0x39/0xe0 [ 556.452421][T16871] ? __mutex_lock+0x30d/0xc80 [ 556.457099][T16871] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 556.462207][T16871] ? mutex_lock_nested+0x20/0x20 [ 556.467150][T16871] ? rtnl_setlink+0x4e0/0x4e0 [ 556.471818][T16871] rtnetlink_rcv_msg+0x843/0xf90 [ 556.476755][T16871] ? rtnetlink_rcv_msg+0x220/0xf90 [ 556.481869][T16871] ? rtnetlink_bind+0x80/0x80 [ 556.486541][T16871] ? perf_trace_preemptirq_template+0xac/0x330 [ 556.492693][T16871] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 556.498669][T16871] ? lock_chain_count+0x20/0x20 [ 556.503516][T16871] ? __local_bh_enable_ip+0x13a/0x1c0 [ 556.508887][T16871] ? lockdep_hardirqs_on+0x98/0x150 [ 556.514085][T16871] ? __local_bh_enable_ip+0x13a/0x1c0 [ 556.519447][T16871] ? _local_bh_enable+0xa0/0xa0 [ 556.524305][T16871] ? __dev_queue_xmit+0x275/0x3630 [ 556.529415][T16871] ? __dev_queue_xmit+0x1bc2/0x3630 [ 556.534611][T16871] ? __dev_queue_xmit+0x275/0x3630 [ 556.539731][T16871] ? ref_tracker_free+0x686/0x830 [ 556.544756][T16871] netlink_rcv_skb+0x235/0x4c0 [ 556.549519][T16871] ? rtnetlink_bind+0x80/0x80 [ 556.554191][T16871] ? netlink_ack+0x1160/0x1160 [ 556.558955][T16871] ? __lock_acquire+0x7d80/0x7d80 [ 556.563984][T16871] ? netlink_deliver_tap+0x2e/0x1b0 [ 556.569184][T16871] netlink_unicast+0x7b1/0x930 [ 556.573947][T16871] netlink_sendmsg+0x8d0/0xbf0 [ 556.578712][T16871] ? netlink_getsockopt+0x590/0x590 [ 556.583905][T16871] ? aa_sock_msg_perm+0x94/0x150 [ 556.588838][T16871] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 556.594121][T16871] ? security_socket_sendmsg+0x80/0xa0 [ 556.599574][T16871] ? netlink_getsockopt+0x590/0x590 [ 556.604768][T16871] ____sys_sendmsg+0x61b/0x980 [ 556.609539][T16871] ? __asan_memset+0x22/0x40 [ 556.614128][T16871] ? __sys_sendmsg_sock+0x30/0x30 [ 556.619143][T16871] ? __import_iovec+0x5f2/0x850 [ 556.623990][T16871] ? import_iovec+0x73/0xa0 [ 556.628489][T16871] ___sys_sendmsg+0x2a6/0x360 [ 556.633174][T16871] ? get_pid_task+0x20/0x1e0 [ 556.637766][T16871] ? __sys_sendmsg+0x2b0/0x2b0 [ 556.642541][T16871] ? __lock_acquire+0x7d80/0x7d80 [ 556.647579][T16871] __se_sys_sendmsg+0x1d0/0x2c0 [ 556.652427][T16871] ? __x64_sys_sendmsg+0x80/0x80 [ 556.657373][T16871] ? lockdep_hardirqs_on+0x98/0x150 [ 556.662571][T16871] do_syscall_64+0x55/0xb0 [ 556.666982][T16871] ? clear_bhb_loop+0x40/0x90 [ 556.671650][T16871] ? clear_bhb_loop+0x40/0x90 [ 556.676320][T16871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.682213][T16871] RIP: 0033:0x7fdad159ce59 [ 556.686622][T16871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.706227][T16871] RSP: 002b:00007fdad23ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.714638][T16871] RAX: ffffffffffffffda RBX: 00007fdad1815fa0 RCX: 00007fdad159ce59 [ 556.722602][T16871] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 556.730569][T16871] RBP: 00007fdad23ba090 R08: 0000000000000000 R09: 0000000000000000 [ 556.738532][T16871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.746492][T16871] R13: 00007fdad1816038 R14: 00007fdad1815fa0 R15: 00007fff4d4d2338 [ 556.754469][T16871] [ 556.864778][T16874] netlink: 'syz.0.3901': attribute type 10 has an invalid length. [ 556.900320][T16874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.925516][T16874] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 557.239768][T16891] validate_nla: 2 callbacks suppressed [ 557.239785][T16891] netlink: 'syz.3.3907': attribute type 21 has an invalid length. [ 557.271031][T16891] __nla_validate_parse: 2 callbacks suppressed [ 557.271049][T16891] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3907'. [ 557.342220][T16891] netlink: 'syz.3.3907': attribute type 10 has an invalid length. [ 557.350481][T16891] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3907'. [ 557.644340][T16900] netlink: 'syz.3.3912': attribute type 21 has an invalid length. [ 557.653975][T16900] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3912'. [ 557.684625][T16900] netlink: 'syz.3.3912': attribute type 10 has an invalid length. [ 557.692898][T16900] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3912'. [ 557.707150][T16903] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3911'. [ 557.897872][T16908] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3914'. [ 557.983944][T16912] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.3916'. [ 558.296340][T16918] netlink: 'syz.2.3919': attribute type 21 has an invalid length. [ 558.304752][T16918] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3919'. [ 558.341699][T16918] netlink: 'syz.2.3919': attribute type 10 has an invalid length. [ 558.350505][T16918] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3919'. [ 558.637386][T16930] netlink: 'syz.1.3922': attribute type 39 has an invalid length. [ 558.888355][T16933] netlink: 'syz.0.3923': attribute type 21 has an invalid length. [ 558.922089][T16933] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3923'. [ 558.971600][T16937] netlink: 'syz.0.3923': attribute type 10 has an invalid length. [ 562.123869][T16952] netlink: 'syz.3.3929': attribute type 21 has an invalid length. [ 562.201377][T16955] ================================================================== [ 562.209563][T16955] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 562.217404][T16955] Write of size 72 at addr ffff88804975f190 by task syz.0.3930/16955 [ 562.225481][T16955] [ 562.227806][T16955] CPU: 1 PID: 16955 Comm: syz.0.3930 Not tainted syzkaller #0 [ 562.235261][T16955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 562.245314][T16955] Call Trace: [ 562.248597][T16955] [ 562.251532][T16955] dump_stack_lvl+0x18c/0x250 [ 562.256216][T16955] ? read_lock_is_recursive+0x20/0x20 [ 562.261592][T16955] ? show_regs_print_info+0x20/0x20 [ 562.266798][T16955] ? load_image+0x420/0x420 [ 562.271302][T16955] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 562.276762][T16955] ? __virt_addr_valid+0x10c/0x380 [ 562.281872][T16955] ? __virt_addr_valid+0x10c/0x380 [ 562.286990][T16955] ? __virt_addr_valid+0x10c/0x380 [ 562.292103][T16955] print_report+0xa8/0x210 [ 562.296522][T16955] ? __bpf_get_stackid+0x6c7/0x900 [ 562.301639][T16955] kasan_report+0x117/0x150 [ 562.306148][T16955] ? __bpf_get_stackid+0x6c7/0x900 [ 562.311267][T16955] kasan_check_range+0x241/0x290 [ 562.316206][T16955] ? __bpf_get_stackid+0x6c7/0x900 [ 562.321320][T16955] __asan_memcpy+0x40/0x70 [ 562.325751][T16955] __bpf_get_stackid+0x6c7/0x900 [ 562.330700][T16955] bpf_get_stackid_pe+0x343/0x410 [ 562.335741][T16955] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 562.341200][T16955] bpf_overflow_handler+0x1fc/0x510 [ 562.346402][T16955] ? verify_lock_unused+0x140/0x140 [ 562.351600][T16955] ? bpf_overflow_handler+0xde/0x510 [ 562.356893][T16955] ? tp_perf_event_destroy+0x20/0x20 [ 562.362178][T16955] ? perf_trace_preemptirq_template+0xac/0x330 [ 562.368339][T16955] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 562.375539][T16955] ? __perf_event_account_interrupt+0x187/0x280 [ 562.381779][T16955] __perf_event_overflow+0x461/0x660 [ 562.387070][T16955] perf_swevent_event+0x319/0x570 [ 562.392098][T16955] ? perf_tp_event+0x1550/0x1550 [ 562.397045][T16955] ___perf_sw_event+0x4ab/0x730 [ 562.401896][T16955] ? ___perf_sw_event+0x19e/0x730 [ 562.406918][T16955] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 562.413337][T16955] ? __lock_acquire+0x1336/0x7d80 [ 562.418361][T16955] ? is_bpf_text_address+0x28f/0x2a0 [ 562.423648][T16955] ? is_bpf_text_address+0x26/0x2a0 [ 562.428853][T16955] ? rep_movs_alternative+0x4a/0x90 [ 562.434069][T16955] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 562.440052][T16955] ? lock_chain_count+0x20/0x20 [ 562.444903][T16955] __perf_sw_event+0x139/0x270 [ 562.449670][T16955] do_user_addr_fault+0x1242/0x12d0 [ 562.454879][T16955] ? rcu_is_watching+0x15/0xb0 [ 562.459651][T16955] exc_page_fault+0x64/0x100 [ 562.464248][T16955] asm_exc_page_fault+0x26/0x30 [ 562.469102][T16955] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 562.474910][T16955] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 562.494514][T16955] RSP: 0018:ffffc900049577b8 EFLAGS: 00050202 [ 562.500581][T16955] RAX: ffffffff84271401 RBX: 000000000000fec9 RCX: 000000000000e0c9 [ 562.508552][T16955] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffffc90004da4e00 [ 562.516525][T16955] RBP: ffffc900049578f0 R08: ffffc90004db2ec8 R09: 1ffff920009b65d9 [ 562.524495][T16955] R10: dffffc0000000000 R11: fffff520009b65da R12: ffffc90004da3000 [ 562.532465][T16955] R13: 0000200000000200 R14: ffffc90004957e38 R15: 1ffff9200092afc7 [ 562.540442][T16955] ? _copy_from_iter+0x151/0x1290 [ 562.545481][T16955] _copy_from_iter+0x242/0x1290 [ 562.550339][T16955] ? __rwlock_init+0x150/0x150 [ 562.555104][T16955] ? copyout_mc+0x70/0x70 [ 562.559435][T16955] ? do_raw_spin_unlock+0x121/0x230 [ 562.564642][T16955] ? _raw_spin_unlock+0x28/0x40 [ 562.569497][T16955] ? find_vmap_area+0xfc/0x110 [ 562.574264][T16955] ? __check_object_size+0x4fc/0xa40 [ 562.579550][T16955] netlink_sendmsg+0x76b/0xbf0 [ 562.584324][T16955] ? netlink_getsockopt+0x590/0x590 [ 562.589525][T16955] ? aa_sock_msg_perm+0x94/0x150 [ 562.594467][T16955] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 562.599753][T16955] ? security_socket_sendmsg+0x80/0xa0 [ 562.605209][T16955] ? netlink_getsockopt+0x590/0x590 [ 562.610407][T16955] ____sys_sendmsg+0x61b/0x980 [ 562.615175][T16955] ? __asan_memset+0x22/0x40 [ 562.619770][T16955] ? __sys_sendmsg_sock+0x30/0x30 [ 562.624793][T16955] ? __import_iovec+0x5f2/0x850 [ 562.629659][T16955] ? import_iovec+0x73/0xa0 [ 562.634162][T16955] ___sys_sendmsg+0x2a6/0x360 [ 562.638842][T16955] ? __sys_sendmsg+0x2b0/0x2b0 [ 562.643647][T16955] __se_sys_sendmsg+0x1d0/0x2c0 [ 562.648499][T16955] ? __x64_sys_sendmsg+0x80/0x80 [ 562.653453][T16955] ? lockdep_hardirqs_on+0x98/0x150 [ 562.658659][T16955] do_syscall_64+0x55/0xb0 [ 562.663074][T16955] ? clear_bhb_loop+0x40/0x90 [ 562.667745][T16955] ? clear_bhb_loop+0x40/0x90 [ 562.672417][T16955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.678316][T16955] RIP: 0033:0x7f247ff9ce59 [ 562.682730][T16955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.702334][T16955] RSP: 002b:00007f2480f37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.710751][T16955] RAX: ffffffffffffffda RBX: 00007f2480215fa0 RCX: 00007f247ff9ce59 [ 562.718724][T16955] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 562.726692][T16955] RBP: 00007f2480032e6f R08: 0000000000000000 R09: 0000000000000000 [ 562.734655][T16955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.742621][T16955] R13: 00007f2480216038 R14: 00007f2480215fa0 R15: 00007ffe86831c38 [ 562.750625][T16955] [ 562.753647][T16955] [ 562.755963][T16955] Allocated by task 16955: [ 562.760368][T16955] kasan_set_track+0x4e/0x70 [ 562.764961][T16955] __kasan_kmalloc+0x8f/0xa0 [ 562.769549][T16955] __kmalloc_node+0xb6/0x240 [ 562.774145][T16955] bpf_map_area_alloc+0x5e/0x110 [ 562.779089][T16955] prealloc_elems_and_freelist+0x86/0x1c0 [ 562.784810][T16955] stack_map_alloc+0x32b/0x4b0 [ 562.789572][T16955] map_create+0x877/0x12f0 [ 562.793984][T16955] __sys_bpf+0x651/0x890 [ 562.798223][T16955] __x64_sys_bpf+0x7c/0x90 [ 562.802636][T16955] do_syscall_64+0x55/0xb0 [ 562.807048][T16955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.812942][T16955] [ 562.815254][T16955] The buggy address belongs to the object at ffff88804975f180 [ 562.815254][T16955] which belongs to the cache kmalloc-cg-64 of size 64 [ 562.829398][T16955] The buggy address is located 16 bytes inside of [ 562.829398][T16955] allocated 40-byte region [ffff88804975f180, ffff88804975f1a8) [ 562.843377][T16955] [ 562.845695][T16955] The buggy address belongs to the physical page: [ 562.852172][T16955] page:ffffea000125d7c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88804975f100 pfn:0x4975f [ 562.863631][T16955] memcg:ffff888020ddf401 [ 562.867866][T16955] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 562.875836][T16955] page_type: 0xffffffff() [ 562.880159][T16955] raw: 00fff00000000800 ffff888017c4da00 0000000000000000 0000000000000001 [ 562.888742][T16955] raw: ffff88804975f100 000000008020001a 00000001ffffffff ffff888020ddf401 [ 562.897318][T16955] page dumped because: kasan: bad access detected [ 562.903745][T16955] page_owner tracks the page as allocated [ 562.909452][T16955] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5772, tgid 5772 (syz-executor), ts 341998020402, free_ts 341997524780 [ 562.927858][T16955] post_alloc_hook+0x1c1/0x200 [ 562.932629][T16955] get_page_from_freelist+0x2181/0x22a0 [ 562.938166][T16955] __alloc_pages+0x1f0/0x460 [ 562.942750][T16955] alloc_slab_page+0x5d/0x180 [ 562.947417][T16955] new_slab+0x87/0x2d0 [ 562.951488][T16955] ___slab_alloc+0xc5c/0x12f0 [ 562.956166][T16955] __kmem_cache_alloc_node+0x11f/0x250 [ 562.961625][T16955] kmalloc_trace+0x2a/0xe0 [ 562.966041][T16955] alloc_fdtable+0xca/0x2c0 [ 562.970547][T16955] dup_fd+0x747/0xa20 [ 562.974532][T16955] copy_files+0xaf/0x110 [ 562.978770][T16955] copy_process+0x15d1/0x3df0 [ 562.983445][T16955] kernel_clone+0x24b/0x8a0 [ 562.987944][T16955] __x64_sys_clone+0x1b7/0x230 [ 562.992704][T16955] do_syscall_64+0x55/0xb0 [ 562.997115][T16955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 563.003008][T16955] page last free stack trace: [ 563.007664][T16955] free_unref_page_prepare+0x7d7/0x8f0 [ 563.013122][T16955] free_unref_page+0x32/0x2e0 [ 563.017795][T16955] vfree+0x1a7/0x340 [ 563.021688][T16955] __do_replace+0x878/0x9b0 [ 563.026193][T16955] do_ip6t_set_ctl+0xb41/0xe10 [ 563.030955][T16955] nf_setsockopt+0x263/0x280 [ 563.035538][T16955] do_sock_setsockopt+0x175/0x1a0 [ 563.040566][T16955] __x64_sys_setsockopt+0x182/0x200 [ 563.045756][T16955] do_syscall_64+0x55/0xb0 [ 563.050166][T16955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 563.056060][T16955] [ 563.058375][T16955] Memory state around the buggy address: [ 563.063993][T16955] ffff88804975f080: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 563.072046][T16955] ffff88804975f100: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 563.080095][T16955] >ffff88804975f180: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 563.088143][T16955] ^ [ 563.093503][T16955] ffff88804975f200: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 563.101558][T16955] ffff88804975f280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 563.109606][T16955] ================================================================== [ 563.117672][T16955] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 563.124851][T16955] CPU: 1 PID: 16955 Comm: syz.0.3930 Not tainted syzkaller #0 [ 563.132301][T16955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 563.142347][T16955] Call Trace: [ 563.145617][T16955] [ 563.148542][T16955] dump_stack_lvl+0x18c/0x250 [ 563.153226][T16955] ? show_regs_print_info+0x20/0x20 [ 563.158418][T16955] ? load_image+0x420/0x420 [ 563.162926][T16955] panic+0x2ca/0x720 [ 563.166820][T16955] ? __lock_acquire+0x7d80/0x7d80 [ 563.171844][T16955] ? bpf_jit_dump+0xd0/0xd0 [ 563.176349][T16955] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 563.182242][T16955] ? _raw_spin_unlock+0x40/0x40 [ 563.187097][T16955] ? __bpf_get_stackid+0x6c7/0x900 [ 563.192203][T16955] check_panic_on_warn+0x84/0xa0 [ 563.197138][T16955] ? __bpf_get_stackid+0x6c7/0x900 [ 563.202245][T16955] end_report+0x6f/0x130 [ 563.206483][T16955] kasan_report+0x128/0x150 [ 563.210988][T16955] ? __bpf_get_stackid+0x6c7/0x900 [ 563.216101][T16955] kasan_check_range+0x241/0x290 [ 563.221034][T16955] ? __bpf_get_stackid+0x6c7/0x900 [ 563.226143][T16955] __asan_memcpy+0x40/0x70 [ 563.230560][T16955] __bpf_get_stackid+0x6c7/0x900 [ 563.235500][T16955] bpf_get_stackid_pe+0x343/0x410 [ 563.240532][T16955] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 563.245991][T16955] bpf_overflow_handler+0x1fc/0x510 [ 563.251192][T16955] ? verify_lock_unused+0x140/0x140 [ 563.256384][T16955] ? bpf_overflow_handler+0xde/0x510 [ 563.261667][T16955] ? tp_perf_event_destroy+0x20/0x20 [ 563.266949][T16955] ? perf_trace_preemptirq_template+0xac/0x330 [ 563.273104][T16955] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 563.280299][T16955] ? __perf_event_account_interrupt+0x187/0x280 [ 563.286550][T16955] __perf_event_overflow+0x461/0x660 [ 563.291836][T16955] perf_swevent_event+0x319/0x570 [ 563.296862][T16955] ? perf_tp_event+0x1550/0x1550 [ 563.301805][T16955] ___perf_sw_event+0x4ab/0x730 [ 563.306654][T16955] ? ___perf_sw_event+0x19e/0x730 [ 563.311673][T16955] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 563.318080][T16955] ? __lock_acquire+0x1336/0x7d80 [ 563.323096][T16955] ? is_bpf_text_address+0x28f/0x2a0 [ 563.328375][T16955] ? is_bpf_text_address+0x26/0x2a0 [ 563.333573][T16955] ? rep_movs_alternative+0x4a/0x90 [ 563.338786][T16955] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 563.344765][T16955] ? lock_chain_count+0x20/0x20 [ 563.349612][T16955] __perf_sw_event+0x139/0x270 [ 563.354378][T16955] do_user_addr_fault+0x1242/0x12d0 [ 563.359577][T16955] ? rcu_is_watching+0x15/0xb0 [ 563.364340][T16955] exc_page_fault+0x64/0x100 [ 563.368938][T16955] asm_exc_page_fault+0x26/0x30 [ 563.373789][T16955] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 563.379592][T16955] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 563.399191][T16955] RSP: 0018:ffffc900049577b8 EFLAGS: 00050202 [ 563.405253][T16955] RAX: ffffffff84271401 RBX: 000000000000fec9 RCX: 000000000000e0c9 [ 563.413217][T16955] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffffc90004da4e00 [ 563.421181][T16955] RBP: ffffc900049578f0 R08: ffffc90004db2ec8 R09: 1ffff920009b65d9 [ 563.429145][T16955] R10: dffffc0000000000 R11: fffff520009b65da R12: ffffc90004da3000 [ 563.437109][T16955] R13: 0000200000000200 R14: ffffc90004957e38 R15: 1ffff9200092afc7 [ 563.445081][T16955] ? _copy_from_iter+0x151/0x1290 [ 563.450115][T16955] _copy_from_iter+0x242/0x1290 [ 563.454967][T16955] ? __rwlock_init+0x150/0x150 [ 563.459731][T16955] ? copyout_mc+0x70/0x70 [ 563.464062][T16955] ? do_raw_spin_unlock+0x121/0x230 [ 563.469261][T16955] ? _raw_spin_unlock+0x28/0x40 [ 563.474110][T16955] ? find_vmap_area+0xfc/0x110 [ 563.478874][T16955] ? __check_object_size+0x4fc/0xa40 [ 563.484157][T16955] netlink_sendmsg+0x76b/0xbf0 [ 563.488923][T16955] ? netlink_getsockopt+0x590/0x590 [ 563.494118][T16955] ? aa_sock_msg_perm+0x94/0x150 [ 563.499052][T16955] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 563.504334][T16955] ? security_socket_sendmsg+0x80/0xa0 [ 563.509787][T16955] ? netlink_getsockopt+0x590/0x590 [ 563.514979][T16955] ____sys_sendmsg+0x61b/0x980 [ 563.519747][T16955] ? __asan_memset+0x22/0x40 [ 563.524337][T16955] ? __sys_sendmsg_sock+0x30/0x30 [ 563.529356][T16955] ? __import_iovec+0x5f2/0x850 [ 563.534222][T16955] ? import_iovec+0x73/0xa0 [ 563.538740][T16955] ___sys_sendmsg+0x2a6/0x360 [ 563.543425][T16955] ? __sys_sendmsg+0x2b0/0x2b0 [ 563.548226][T16955] __se_sys_sendmsg+0x1d0/0x2c0 [ 563.553080][T16955] ? __x64_sys_sendmsg+0x80/0x80 [ 563.558037][T16955] ? lockdep_hardirqs_on+0x98/0x150 [ 563.563243][T16955] do_syscall_64+0x55/0xb0 [ 563.567661][T16955] ? clear_bhb_loop+0x40/0x90 [ 563.572333][T16955] ? clear_bhb_loop+0x40/0x90 [ 563.577005][T16955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 563.582899][T16955] RIP: 0033:0x7f247ff9ce59 [ 563.587308][T16955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.606908][T16955] RSP: 002b:00007f2480f37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.615323][T16955] RAX: ffffffffffffffda RBX: 00007f2480215fa0 RCX: 00007f247ff9ce59 [ 563.623292][T16955] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 563.631260][T16955] RBP: 00007f2480032e6f R08: 0000000000000000 R09: 0000000000000000 [ 563.639223][T16955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.647188][T16955] R13: 00007f2480216038 R14: 00007f2480215fa0 R15: 00007ffe86831c38 [ 563.655168][T16955] [ 563.658421][T16955] Kernel Offset: disabled [ 563.662731][T16955] Rebooting in 86400 seconds..