last executing test programs: 4.843359915s ago: executing program 4 (id=1840): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @jmp={0x5, 0x1, 0xb, 0x1, 0x2, 0x1, 0xfffffffffffffff0}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0xfc, &(0x7f0000000280)=""/252, 0x41000, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x9, 0xc0}, 0x10, 0xdf88, 0xffffffffffffffff, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], &(0x7f00000004c0)=[{0x1, 0x3, 0x0, 0x6}, {0x1, 0x1, 0xa, 0xb}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@fallback, 0x2f, 0x0, 0x6, &(0x7f00000006c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0}, 0x40) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000d00000000000000", @ANYRES32, @ANYBLOB="0500000000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000300"/28], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)={@map=r2, 0xffffffffffffffff, 0x17, 0x8, r0, @void, @value, @void, @void, r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0xc, &(0x7f0000000ac0)=ANY=[@ANYRES16=r2, @ANYRESHEX=r0, @ANYRES16=r4, @ANYRES8, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="b67a3c2a395bf8f40fa7faf52a7df3a654854fe86b4d8fa6d172ffbc8c60c4640ad4570a9dee920624a774c02f26e87930cfc4bd92530d7d3304fb1597ff6d12081dcd0afa7a2edfc94c1e2129678e6cc4046f07316ee55ebe0d85c9b2b59ece416f9c8931a9589ac4180264d2f180263025a63d72f898999ced", @ANYRESDEC=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000006111080000000000731a0eff000000009500000cb917567d2a00000060a75353b7246f"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x800}, 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847}, 0x40000000) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x0, 0xb, 0x0, &(0x7f0000000100)="c9188e9bb95d02ff428486", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r6, 0x0, 0x40000064) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91024fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008000000000000", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r11}, &(0x7f0000000280), &(0x7f0000000240)=r10}, 0x20) 3.21160864s ago: executing program 4 (id=1844): openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x1, 0xfffffffc, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000780)="a60284", 0x3}], 0x1}, 0x8000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000500)}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x13bb711e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x16, &(0x7f0000000200)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @generic={0x4, 0x6, 0x4, 0x2, 0x101}, @call={0x85, 0x0, 0x0, 0xc9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}], &(0x7f00000002c0)='syzkaller\x00', 0x14e, 0x51, &(0x7f0000000300)=""/81, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x7, 0xf70, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000580)=[r3, r4], &(0x7f00000005c0)=[{0x3, 0x2, 0x0, 0x9}, {0x2, 0x4, 0xe, 0x4}, {0x3, 0x2, 0x8, 0xc}, {0x9, 0x4, 0xf}], 0x10, 0x4}, 0x94) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0308004d8c71ef288563"], 0xffdd) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) 3.202081072s ago: executing program 2 (id=1845): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x74}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x7, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.084717734s ago: executing program 2 (id=1847): bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) recvmsg$unix(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000), 0x8) 3.008216369s ago: executing program 1 (id=1849): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000c000000080000000100000f0500010000000000000000"], &(0x7f00000001c0)=""/257, 0x3c, 0x101, 0x6}, 0x28) (fail_nth: 12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000b0a713aefe2c61a8fb7e4d1b284dbe000000000000800000200000000000000000d53e43382c63243875dfef91e723d383091bed408cfb403c1d40d40a0e08a2182644c8d59910423873a7e98e0be0f0994569a6630dfea7e16d62a154cd73534991aac85d4a913b8796c0287b7fda"], &(0x7f0000000040)='GPL\x00', 0x1, 0x9f, &(0x7f00000001c0)=""/159}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) close(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000380), &(0x7f0000000440)=r1}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000001002eee3b939b9ac87300000000", @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000cc0)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="000000d300000000b7080000000000007b8a68ff00000000bfa200000000000007"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1e0000000100000008000000980e000008800100", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="03000000fdffffff020000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={0x0, 0x0, 0x0, r0}, 0x18) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0xffffffffffffffff, 0xfca, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x3, &(0x7f0000000f80)=ANY=[@ANYRESDEC=r3, @ANYRESOCT], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.606955126s ago: executing program 1 (id=1852): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@phonet={0x23, 0x8, 0x0, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="8100000000ac0000000000000000", 0xe}], 0x1}, 0x480c0) 2.520399453s ago: executing program 1 (id=1854): socket$kcm(0x23, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1c0000005e007f029e3b470d649bc33b02ed1c376c81bb9f72ab2539", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001640)={&(0x7f0000000140)=@generic, 0x80, &(0x7f0000001500)=[{&(0x7f00000001c0)=""/142, 0x8e}, {&(0x7f0000000280)=""/66, 0x42}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000340)=""/169, 0xa9}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/183, 0xb7}], 0x7, &(0x7f0000001580)=""/129, 0x81}, 0x40) 2.152380004s ago: executing program 2 (id=1858): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xae, 0xae, 0x7, [@datasec={0x5, 0x6, 0x0, 0xf, 0x2, [{0x1, 0x8, 0x2000000}, {0x3, 0x6, 0x8}, {0x1, 0x1, 0x80000000}, {0x2, 0x0, 0xffffff81}, {0x5, 0x10}, {0x4, 0x8, 0xff}], "d1e4"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x5f1}}, @const={0x4, 0x0, 0x0, 0xa, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x1}, @const={0x6, 0x0, 0x0, 0xa, 0x4}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x2a, 0x3}, @fwd={0x9}]}, {0x0, [0x0, 0x5f, 0x61, 0x5f, 0x5f]}}, &(0x7f0000000500)=""/4096, 0xcf, 0x1000, 0x0, 0x6}, 0x28) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_ext={0x1c, 0x1b, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000}, [@jmp={0x5, 0x0, 0x5, 0x2, 0x4, 0x40}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_query, @alu={0x4, 0x1, 0x8, 0x5, 0x0, 0x10, 0xfffffffffffffff4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000001680)='GPL\x00', 0x100, 0x9f, &(0x7f00000016c0)=""/159, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001780)={0x3, 0xc, 0x1, 0x7}, 0x10, 0x27b54, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', 0x0, r1, 0x1, 0x3, 0x5}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001ac0)={r3, &(0x7f00000019c0)="159b2f1d7ea9f84fd7a69b9a075d3db2c879d2f383008507af2caec8709bca098237eea5c6e4e58b3545669a836b82d08a5f64be423aeb43c0bc8dcbee9535a29aa5404f1664c484003d279567bbb3da2c105c4d54ea6a64d4412371483c3ec5b927d16a33f737e7afe0a9981de3c52da757f48d037163d289fb30c6378fc1de02259a7d3e27d0f9ba225b2f2417b896040eefe3df6f81ef45c9da43ab5b8ae2dd156d21eafe153fcf4e304efdbd45ec18346a5712b786af2d8227f54867494e1edd0446"}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x18, 0x4, &(0x7f0000001b00)=ANY=[@ANYBLOB="186600000d00000000000000d20800004b10310010e16e834e1dd93fecffffffbc0483b5b2f96fb33ddcab7091d036d12b95b7cf6e421f9050c4bff54b9a8b4edfe7a35a3e7abe529a90a791bd43b80c1238688ebb92a67b5a7af221c4ae59dca3ecb782044fd832989cb4035f692c37ac2125f4fd9140c4aad261996352b18bbd4ccd26e5"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x68, &(0x7f00000000c0)=""/104, 0xc1000, 0x10, '\x00', r0, @fallback=0x2b, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001540)={0x1, 0xb, 0x9, 0x9}, 0x10, 0xffffffffffffffff, r2, 0x5, 0x0, &(0x7f0000001880)=[{0x4, 0x3, 0x8, 0x2}, {0x0, 0x1, 0x5, 0x2}, {0x1, 0x5, 0xb, 0x4}, {0x5, 0x3, 0xe, 0x6}, {0x5, 0x4, 0x6, 0x6}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$sock(r5, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x200480d0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x5) 1.979770687s ago: executing program 2 (id=1860): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018002e000000000018000000180000000c000000080000000100000f0500010000000000000000"], &(0x7f00000001c0)=""/257, 0x3c, 0x101, 0x6}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000b0a713aefe2c61a8fb7e4d1b284dbe000000000000800000200000000000000000d53e43382c63243875dfef91e723d383091bed408cfb403c1d40d40a0e08a2182644c8d59910423873a7e98e0be0f0994569a6630dfea7e16d62a154cd73534991aac85d4a913b8796c0287b7fda"], &(0x7f0000000040)='GPL\x00', 0x1, 0x9f, &(0x7f00000001c0)=""/159}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) close(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000380), &(0x7f0000000440)=r1}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000001002eee3b939b9ac87300000000", @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000cc0)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="000000d300000000b7080000000000007b8a68ff00000000bfa200000000000007"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1e0000000100000008000000980e000008800100", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="03000000fdffffff020000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={0x0, 0x0, 0x0, r0}, 0x18) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0xffffffffffffffff, 0xfca, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x3, &(0x7f0000000f80)=ANY=[@ANYRESDEC=r3, @ANYRESOCT], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.849366983s ago: executing program 2 (id=1861): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='&\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x33}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000180)="007ceec574126b1521cb04665ffa90fc9607af7a985b58207c83327013e90617e46290dc690afdcf8b5972853ecfdb99dd5204845a13909de6b63201e115d7147f9cc39cd48ecf93815e62bb872c5f2542b23860ea2ced4a770e59d5333f22fb6e7eb5162e74c89c44b2c2cbfcac9fb2643871d8723682bea1a92b71c17ff806ac0143ea5dcf77ca4972350fe09a6128432a33561e5a87114c1a79069f53cdfd5ebd3e73b7b65031643905a42ca7893fbf4c3a7e88299d053a078c8f0058cec517e71089356f6bc7128aceaf5499d9ab4cb7e2", 0xd3}, {&(0x7f0000001080)="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", 0x9be}], 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x7b, &(0x7f0000000000), 0x8) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000100)=r3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x200000000000012d, &(0x7f00000008c0)=ANY=[@ANYRES8=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x2000012, 0x100e, 0xfe7f, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x201, 0x4000008, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.145745719s ago: executing program 0 (id=1862): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x41c, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@int={0x10, 0x0, 0x0, 0x1, 0x0, 0x63, 0x0, 0x14}]}, {0x0, [0x0, 0x5f, 0x2e, 0x5f, 0x784502c863b6061e]}}, &(0x7f0000000400)=""/168, 0x2f, 0xa8, 0x0, 0x81, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x0, 0x0}, 0x8) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r7], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x1e, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb1c4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xb, 0xb, 0x4, 0x2, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x280}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0xad, &(0x7f0000000240)=""/173, 0x41000, 0x8, '\x00', r2, @fallback=0x2a, r3, 0x8, &(0x7f0000000500)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x5, 0x6, 0x8}, 0x10, r4, 0xffffffffffffffff, 0x2, &(0x7f0000000700)=[r5, r6, r7, r8], &(0x7f0000000740)=[{0x0, 0x4, 0x10, 0x2}, {0x3, 0x5, 0x10, 0x4}], 0x10, 0xc}, 0x94) r9 = socket$kcm(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x11, 0x0, 0x40019) 1.076351672s ago: executing program 1 (id=1863): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@phonet={0x23, 0x8, 0x0, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="8100000000ac0000000000002f89", 0xe}], 0x1}, 0x480c0) 1.064910964s ago: executing program 4 (id=1864): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006900e0ff00000000950000005f00000096ebf578615048b3d6aa80f34bdb1050a930320f34604b669209"], &(0x7f0000000100)='GPL\x00', 0x2, 0xd0, &(0x7f0000000640)=""/208}, 0x24) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x85, &(0x7f0000000040)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62"], 0x10b8}, 0x106) recvmsg$kcm(r3, 0x0, 0x100) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@enum64={0x3, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x5, 0x2, 0x3}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x5f, 0x5f]}}, 0x0, 0x37, 0x0, 0x1}, 0x28) close(r1) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYRES16=r4], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r5 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x40000300, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0xe}, 0x4040, 0x3, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, r5, 0xb) 1.064747794s ago: executing program 3 (id=1865): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x49e5748987e10e9c) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x40000000, 0x2000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 983.33605ms ago: executing program 1 (id=1866): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x808200, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x6, 0x1004}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'ipvlan1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000080)={'bridge_slave_1\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x1811}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) write$cgroup_devices(r5, &(0x7f00000005c0)=ANY=[], 0xfffffeff) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f090094f9105f9253", 0x14}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000001c0)={'bond0\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan0\x00'}) socket$kcm(0x2, 0x200000000000001, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) 924.048291ms ago: executing program 3 (id=1867): socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x8, 0x0, 0x0, 0x280e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext, 0x2005, 0x89, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x6, 0x18090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000080), &(0x7f00000002c0)=""/21}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@fallback=r4, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 869.366632ms ago: executing program 2 (id=1868): bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) recvmsg$unix(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000), 0x8) 765.652672ms ago: executing program 0 (id=1869): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x74}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x7, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 572.343159ms ago: executing program 0 (id=1870): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x1000000) 571.935489ms ago: executing program 3 (id=1871): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000004000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xb, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3, 0x0, 0xffffffffffffffff, 0x2f}, 0x48) 419.164289ms ago: executing program 0 (id=1872): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) r3 = getpid() write$cgroup_pid(r2, &(0x7f00000000c0)=r3, 0x12) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60200, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x9, 0xe, 0xb, 0x200}]}) r5 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x8, 0x0, 0x8, 0x0, 0xfffffffffffffff9, 0x55881, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x2000000, 0x1}, 0x100004, 0x1ff, 0x4, 0x6, 0xfa00, 0x60e0, 0x5e0, 0x0, 0xcf15c6a4}, 0x0, 0x6, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r5, 0x0, 0xd, &(0x7f0000000240)='/dev/net/tun\x00'}, 0x30) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xffffffff}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x19e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x71, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xb, 0x10000, 0x100}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000400)=[r1, r0, 0x1, 0x1], &(0x7f0000000440)=[{0x0, 0x4, 0x4, 0x1}, {0x4, 0x3, 0xd, 0x9}, {0x1, 0x5, 0xb, 0x1}], 0x10, 0x55}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r6, 0x0, 0x7d, 0x5e, &(0x7f0000000540)="cbd3561befdff284f6e794368e306182976a260483e192c7457376d82895c6a8b7d1fe579068988180b8fda24294c6262183299ffd8bdb79b07c21fe26a0b24ceac5ae7dc74d8475287b7636e408309581cb5dd6fb4dc43c01afcff50987a4b3b6b60b3abaa0aaa0154ceca6c7e9f236024454eb3d9ae1c7e9fef8c158", &(0x7f00000005c0)=""/94, 0x10000, 0x0, 0x0, 0x84, &(0x7f0000000640), &(0x7f0000000680)="ab01e5ff516121dd515e94199b4075afdd0388f9f323259dcbd05774c5753d51cf51fd70e4f909c5c4283fa3c7c59379123ec9734b1a33942e25dc320c8164877943a635be32b36ecad4bd2c14f42ed11422ef734a92faf995d528f155e843e2d55f2e101eadd025370668bce46e3381cbc98d6ada159f4cf6a1c7d21cccf119ce3f8567", 0xf75f57e42563daa5, 0x0, 0x3}, 0x50) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000c80)={0x0, r2}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={r0, 0xffffffffffffffff}, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000840)="b65f8c65cbbf36518e5e30d08b26b75be806c373ad06ed2372172c727833c3c00e2b0f3788c2698b947b05129a641bca162d7744840318b16889a33aebd84dc3cab30d9f069fe41d0c7e651c165064be87f788f27da50748c8300b0ee1dd247bb284d789dcd6a3ea8c9e45c71eb2a2a31e4d3e2070d14db8c944f7e798f6994e34bc5533825697a45f420b36b56fc17e58e1e5eee8d9fe1a4e96bf972d51d7583793345d21", 0xa5}, {&(0x7f0000000900)="5205666063e3824435034269079afae3da6849215001", 0x16}, {&(0x7f0000000940)="6de2d46200b7f40db171e9dd7ed8bedc6782bba37cc147dceb98941f0892dcb4fb63aed4ec02938fd3e7055236682b9722db7f7113569c3696edc6e5c515f3f7436b0fdc106b8b78783da5d0126dab5cdcba8aac02c07b4f2b2f675b796747d356805fc7fa2af542efe200c89423a3b39322f7ccbf5199ec17126f399fe7fd5cdd73eaba5c2cae78114074384268b65b4b34c59da8e279e433a0e945b64df09a00a705147bcba7fb141bd1bd5ea472ff28ad520013bbab1a22201025f4aeef685a4eeef066dad45c7cfbadf2d3b039f8d4d2a21f291d819796454f8aa0ad5c601fcb", 0xe2}, {&(0x7f0000000a40)="3261dbacd126ade5da86bc8975091ea698b8fb5257c7824035e0d94f9f82dfb777fd6cd45b6c46eecd2c0756335811b4d009f17d966af2a24301fd7f2f484f1d8f00104f37b3c7b336b7b9e607e5125b66463ac49219b8c1003de9c337cfad4227788ca9e17fc1de5aea1be8985452bee6cab98896ea75f649731418c128be2ecd8908b9054507a870080ea6724c50e1c9697aaaf0c67eb06812d51a6adc01c067e3f972c4ab4931dbc9", 0xaa}, {&(0x7f0000000b00)="860f7e9409e4533b9a8eeee81f15e8b10084d4fa70d815032b0ffd1136f65d74540c029f3ebe27879304811fb39e0e603614699e4f262034bb7541bec41ddf9fd3f10818435e00b7e7863f967aed0574d84204462afffcb25c9fef5f3453e8124889edf2fa91e7bbb203d2608d0a941351dfc1902457411a757924e3532e187010532c6f404263bbf362df3d01e95c8ab5aea959304bfcb44bd9b4219be3e36d17214d37dd97cfe764049f0c6e4bee4328d1c972b84ca0", 0xb7}, {&(0x7f0000000bc0)}], 0x6, &(0x7f0000000d00)=[@rights={{0x34, 0x1, 0x1, [r7, r6, r0, r0, r1, r6, r1, r4, r4]}}, @rights={{0x30, 0x1, 0x1, [r5, 0xffffffffffffffff, r2, r0, 0xffffffffffffffff, r4, r8, r2]}}], 0x68, 0x5}, 0x40000) perf_event_open(&(0x7f0000000dc0)={0x1, 0x80, 0x10, 0x2, 0x1, 0x5, 0x0, 0x7, 0x17020, 0x7, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x5, 0x8}, 0x12030, 0x1ff, 0x3, 0x3, 0x5, 0x1, 0x1, 0x0, 0xe4, 0x0, 0x3}, r3, 0x3, r5, 0x9) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e40)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r9, &(0x7f0000000e80)='cgroup.threads\x00', 0x2, 0x0) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000ec0), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000f00)={r10, r6, 0x4, r6}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001040)={@map=r1, 0xa, 0x1, 0x9, &(0x7f0000000f40)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000f80)=[0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0], 0x0}, 0x40) openat$ppp(0xffffffffffffff9c, &(0x7f0000001080), 0x401c0, 0x0) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001140)=@generic={&(0x7f0000001100)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000010c0)={@map=r13, r6, 0xd, 0x38, r6, @void, @void, @void, @value, r12}, 0x20) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x4241, 0x0) ioctl$TUNGETVNETLE(r14, 0x800454dd, &(0x7f00000011c0)) r15 = socket$kcm(0x29, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x89e2, &(0x7f0000001240)={r16}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r6, 0xe0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000012c0)=[0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0], 0x0, 0xcc, &(0x7f0000001340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001380), &(0x7f00000013c0), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000001400)}}, 0x10) ioctl$TUNGETDEVNETNS(r11, 0x54e3, 0x0) 394.510184ms ago: executing program 3 (id=1873): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb5d2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000c000000080000000100000f0500010000000000000000"], &(0x7f00000001c0)=""/245, 0x3c, 0xf5, 0x806}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000b0a713aefe2c61a8fb7e4d1b284dbe000000000000800000200000000000000000d53e43382c63243875dfef91e723d383091bed408cfb403c1d40d40a0e08a2182644c8d59910423873a7e98e0be0f0994569a6630dfea7e16d62a154cd73534991aac85d4a913b8796c0287b7fda"], &(0x7f0000000040)='GPL\x00', 0x1, 0x9f, &(0x7f00000001c0)=""/159}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) close(r4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000380), &(0x7f0000000440)=r4}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000001002eee3b939b9ac87300000000", @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000cc0)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="000000d300000000b7080000000000007b8a68ff00000000bfa200000000000007"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1e0000001b110000e2df9573ec4b3684caf214af111d3b340a9f7d60a57875aa1e39c7fe58a2ab68af5c8b1dc9908ef4ad6e2ee62268af44b2107e9d2520e1a8570e8b310f963c6948685f29b106243a0605acb21e99aed55b91bdddd52e9d8eb5b45543a5e0e289685d1f9251a69e03be6206d9e398efec59deedc16be5c7914c7487eb8b3d2663592975f5112cf1ced2df2bfa49c04d17f4", @ANYBLOB="47d79cdf43681bb55222be354713fc8ec669262ebe45e8e2fcad354359e226e6d0a4f016024dba9fbf94fbf792f9f02f5f4c169df82d005465469953b4465dd4e603f38f400ed031156a45e008fedfdc685c08c45dd9b1e3015dac89d9f055e17cea7109dc7cadcbd64b630a53a74cf45b76d7", @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="03000000fdffffff06003f3638b0d165cedacc283073461f00000a00000000000100", @ANYRESOCT=r4, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x4000, r2}, 0x18) socket$kcm(0x11, 0x200000000000002, 0x300) 291.827283ms ago: executing program 4 (id=1874): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x23, 0x100000, @loopback, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="200000000000000084000000080000dada"], 0x20}, 0x41) 275.587086ms ago: executing program 4 (id=1875): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x3, 0x5, 0x8000000}, 0x50) 263.779949ms ago: executing program 0 (id=1876): socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xb}, {0x2, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}, 0x10c202, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x26, 0x5, 0x0, &(0x7f0000000740)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80f}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r2, 0x84, 0x11, &(0x7f0000000000), 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x5, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c"], 0x30}, 0x40880) openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 216.343228ms ago: executing program 3 (id=1877): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="2e00000010008188040f80ec59acbc0413a181003b00000001240300000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x4000800) 215.672098ms ago: executing program 1 (id=1878): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x1, @mcast1, 0x9}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="94", 0x1}], 0x1}, 0x4c810) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x4}, 0x10002a, 0xb, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x4}, 0x10002a, 0xb, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x1, 0x84) (async) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000280)="1408000000000000b89e08dc88a8a5a186dd", 0x0, 0xffffff02, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000280)="1408000000000000b89e08dc88a8a5a186dd", 0x0, 0xffffff02, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x40002002) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000006000000050000000800000002000000", @ANYRES32, @ANYBLOB="00263d6221331efa0fd23f2e7600000000003182647e00000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000006000000050000000800000002000000", @ANYRES32, @ANYBLOB="00263d6221331efa0fd23f2e7600000000003182647e00000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@float={0xd, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x2e, 0x61, 0x5f, 0x0, 0x2e, 0x3e, 0x5f]}}, &(0x7f0000000580)=""/1, 0x2d, 0x1, 0x0, 0xea}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x13, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x2, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf, 0xfe, 0x0, 0x2, 0x0, 0x0, 0x28002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0xffff, 0x0, 0x10000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) 97.440531ms ago: executing program 0 (id=1879): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000680)=ANY=[@ANYRESDEC=r5, @ANYRES32=r1], 0x6e) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='cpu.idle\x00', 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000190081054e81f782db4cb9051c1400fe007c05e8fe55a10a0015000200142603600e12080005007f370419e4cf3a29c07fc6d401d84701a800060a200002400400027c035c0461c1d67f6f94007134cf6efb8000a0078990457f018005906707d07f62ce8017cbec4c2ee5a7cef4090000001fb791483a5ee4ce1b14d6d930dfe122fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00f7000000262f3d40fac9ea2c5d533b7e87f9a3bcbe809f98ee5667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1, 0x0, 0x0, 0x98ffffff}, 0x4000880) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@o_path={&(0x7f00000001c0)='./file0\x00', r7, 0x4000, r8}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0xfe33) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f00000005c0)="2703022b590200330000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55eb26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c703524a4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0xfffffffffffffdbf}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) 79.080894ms ago: executing program 3 (id=1880): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x74}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x7, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 4 (id=1881): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): _bhb_loop+0x60/0xb0 [ 176.035909][ T6162] ? clear_bhb_loop+0x60/0xb0 [ 176.040703][ T6162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.046787][ T6162] RIP: 0033:0x7f2888b9e159 [ 176.051416][ T6162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.071141][ T6162] RSP: 002b:00007f2889a31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.079593][ T6162] RAX: ffffffffffffffda RBX: 00007f2888e25fa0 RCX: 00007f2888b9e159 [ 176.088082][ T6162] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 176.096474][ T6162] RBP: 00007f2889a31090 R08: 0000000000000000 R09: 0000000000000000 [ 176.105079][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.113484][ T6162] R13: 00007f2888e26038 R14: 00007f2888e25fa0 R15: 00007ffc5441bf38 [ 176.122385][ T6162] [ 176.671189][ T6192] netlink: 'syz.4.593': attribute type 27 has an invalid length. [ 176.682554][ T6189] netlink: 'syz.0.592': attribute type 2 has an invalid length. [ 176.713727][ T6193] netlink: 'syz.3.594': attribute type 3 has an invalid length. [ 176.728169][ T6189] netlink: 10 bytes leftover after parsing attributes in process `syz.0.592'. [ 176.739183][ T6192] netlink: 164 bytes leftover after parsing attributes in process `syz.4.593'. [ 176.744069][ T6193] netlink: 132 bytes leftover after parsing attributes in process `syz.3.594'. [ 177.060177][ T6204] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.598'. [ 177.605383][ T6227] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.608'. [ 177.743375][ T6227] device syzkaller0 entered promiscuous mode [ 177.766934][ T6234] netlink: 'syz.1.608': attribute type 2 has an invalid length. [ 177.790437][ T6234] netlink: 132 bytes leftover after parsing attributes in process `syz.1.608'. [ 178.158842][ T6248] FAULT_INJECTION: forcing a failure. [ 178.158842][ T6248] name failslab, interval 1, probability 0, space 0, times 0 [ 178.176276][ T6248] CPU: 0 PID: 6248 Comm: syz.0.614 Not tainted syzkaller #0 [ 178.183775][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.195363][ T6248] Call Trace: [ 178.203119][ T6248] [ 178.207458][ T6248] dump_stack_lvl+0x188/0x24e [ 178.214115][ T6248] ? show_regs_print_info+0x12/0x12 [ 178.223550][ T6248] ? load_image+0x410/0x410 [ 178.228438][ T6248] ? __might_sleep+0xd0/0xd0 [ 178.233481][ T6248] ? __lock_acquire+0x7c40/0x7c40 [ 178.239885][ T6248] should_fail_ex+0x390/0x4c0 [ 178.247050][ T6248] should_failslab+0x5/0x20 [ 178.251957][ T6248] slab_pre_alloc_hook+0x59/0x300 [ 178.257043][ T6248] ? kvmalloc_node+0x6c/0x180 [ 178.262747][ T6248] __kmem_cache_alloc_node+0x4f/0x270 [ 178.273468][ T6248] ? kvmalloc_node+0x6c/0x180 [ 178.278383][ T6248] __kmalloc_node+0xa2/0x240 [ 178.283370][ T6248] kvmalloc_node+0x6c/0x180 [ 178.288468][ T6248] bpf_test_run_xdp_live+0x206/0x1a90 [ 178.294213][ T6248] ? verify_lock_unused+0x140/0x140 [ 178.300058][ T6248] ? kasan_set_track+0x60/0x70 [ 178.305021][ T6248] ? __kasan_kmalloc+0x8e/0xa0 [ 178.309790][ T6248] ? __kmalloc+0xb3/0x240 [ 178.314237][ T6248] ? bpf_test_init+0x9f/0x140 [ 178.319080][ T6248] ? bpf_prog_test_run_xdp+0x488/0xf80 [ 178.325210][ T6248] ? __sys_bpf+0x62b/0x780 [ 178.333416][ T6248] ? __x64_sys_bpf+0x78/0x90 [ 178.342250][ T6248] ? do_syscall_64+0x4c/0xa0 [ 178.349808][ T6248] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.362028][ T6248] ? xdp_convert_md_to_buff+0x330/0x330 [ 178.368475][ T6248] ? __lock_acquire+0x7c40/0x7c40 [ 178.375743][ T6248] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 178.383774][ T6248] ? bpf_test_init+0x119/0x140 [ 178.389103][ T6248] ? xdp_convert_md_to_buff+0x5b/0x330 [ 178.394868][ T6248] bpf_prog_test_run_xdp+0x757/0xf80 [ 178.400523][ T6248] ? __lock_acquire+0x7c40/0x7c40 [ 178.406136][ T6248] ? dev_put+0x80/0x80 [ 178.410248][ T6248] ? dev_put+0x80/0x80 [ 178.414580][ T6248] bpf_prog_test_run+0x31c/0x390 [ 178.420183][ T6248] __sys_bpf+0x62b/0x780 [ 178.424794][ T6248] ? bpf_link_show_fdinfo+0x380/0x380 [ 178.433089][ T6248] ? lock_chain_count+0x20/0x20 [ 178.439366][ T6248] __x64_sys_bpf+0x78/0x90 [ 178.444559][ T6248] do_syscall_64+0x4c/0xa0 [ 178.450182][ T6248] ? clear_bhb_loop+0x60/0xb0 [ 178.458260][ T6248] ? clear_bhb_loop+0x60/0xb0 [ 178.463204][ T6248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.470003][ T6248] RIP: 0033:0x7f443759e159 [ 178.474623][ T6248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.496708][ T6248] RSP: 002b:00007f44384bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.506735][ T6248] RAX: ffffffffffffffda RBX: 00007f4437825fa0 RCX: 00007f443759e159 [ 178.516555][ T6248] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 178.525376][ T6248] RBP: 00007f44384bf090 R08: 0000000000000000 R09: 0000000000000000 [ 178.535051][ T6248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.545436][ T6248] R13: 00007f4437826038 R14: 00007f4437825fa0 R15: 00007ffe6e746ec8 [ 178.556986][ T6248] [ 178.920269][ T6268] netlink: 'syz.2.617': attribute type 2 has an invalid length. [ 178.975133][ T6268] netlink: 164 bytes leftover after parsing attributes in process `syz.2.617'. [ 179.107271][ T6271] netlink: 'syz.4.621': attribute type 10 has an invalid length. [ 179.212962][ T6271] team0: Port device macvlan1 added [ 179.249967][ T6280] netlink: 'syz.3.623': attribute type 2 has an invalid length. [ 179.278666][ T6280] netlink: 'syz.3.623': attribute type 1 has an invalid length. [ 179.300790][ T6280] netlink: 'syz.3.623': attribute type 8 has an invalid length. [ 179.354586][ T6280] netlink: 44 bytes leftover after parsing attributes in process `syz.3.623'. [ 179.371926][ T6275] netlink: 44 bytes leftover after parsing attributes in process `syz.3.623'. [ 180.600301][ T6237] syz.1.608 (6237) used greatest stack depth: 15744 bytes left [ 180.896346][ T6337] validate_nla: 7 callbacks suppressed [ 180.896369][ T6337] netlink: 'syz.2.642': attribute type 2 has an invalid length. [ 180.967558][ T6337] __nla_validate_parse: 2 callbacks suppressed [ 180.967603][ T6337] netlink: 10 bytes leftover after parsing attributes in process `syz.2.642'. [ 185.432911][ T6359] netlink: 'syz.0.648': attribute type 10 has an invalid length. [ 185.483944][ T6359] team0: Device vxcan1 is of different type [ 185.939227][ T6382] netlink: 'syz.4.655': attribute type 10 has an invalid length. [ 185.948975][ T6382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.655'. [ 185.984336][ T6382] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 186.053534][ T6385] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.653'. [ 186.439158][ T6401] netlink: 'syz.3.661': attribute type 2 has an invalid length. [ 186.476735][ T6401] netlink: 10 bytes leftover after parsing attributes in process `syz.3.661'. [ 187.537095][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 187.580946][ T6420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.730904][ T6427] netlink: 14 bytes leftover after parsing attributes in process `syz.3.670'. [ 188.268386][ T6440] FAULT_INJECTION: forcing a failure. [ 188.268386][ T6440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.344952][ T6440] CPU: 1 PID: 6440 Comm: syz.2.675 Not tainted syzkaller #0 [ 188.355032][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.365308][ T6440] Call Trace: [ 188.368695][ T6440] [ 188.371671][ T6440] dump_stack_lvl+0x188/0x24e [ 188.376704][ T6440] ? show_regs_print_info+0x12/0x12 [ 188.382140][ T6440] ? load_image+0x410/0x410 [ 188.386708][ T6440] ? __lock_acquire+0x7c40/0x7c40 [ 188.391897][ T6440] ? snprintf+0xe5/0x140 [ 188.396356][ T6440] should_fail_ex+0x390/0x4c0 [ 188.401095][ T6440] _copy_to_user+0x2c/0x130 [ 188.405643][ T6440] simple_read_from_buffer+0xe3/0x150 [ 188.411070][ T6440] proc_fail_nth_read+0x1a6/0x220 [ 188.416217][ T6440] ? proc_fault_inject_write+0x310/0x310 [ 188.421985][ T6440] ? fsnotify_perm+0x248/0x550 [ 188.426802][ T6440] ? proc_fault_inject_write+0x310/0x310 [ 188.432666][ T6440] vfs_read+0x2db/0x960 [ 188.436980][ T6440] ? kernel_read+0x1e0/0x1e0 [ 188.441635][ T6440] ? __fget_files+0x28/0x460 [ 188.446281][ T6440] ? __fget_files+0x3fc/0x460 [ 188.451231][ T6440] ? __fdget_pos+0x2ae/0x360 [ 188.455862][ T6440] ? ksys_read+0x70/0x260 [ 188.460254][ T6440] ksys_read+0x14d/0x260 [ 188.464641][ T6440] ? vfs_write+0x9a0/0x9a0 [ 188.469100][ T6440] ? lockdep_hardirqs_on+0x94/0x140 [ 188.474349][ T6440] do_syscall_64+0x4c/0xa0 [ 188.478845][ T6440] ? clear_bhb_loop+0x60/0xb0 [ 188.483613][ T6440] ? clear_bhb_loop+0x60/0xb0 [ 188.488339][ T6440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.494374][ T6440] RIP: 0033:0x7f4ebdb5e98e [ 188.498825][ T6440] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 188.518564][ T6440] RSP: 002b:00007f4ebeab2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 188.527029][ T6440] RAX: ffffffffffffffda RBX: 00007f4ebeab36c0 RCX: 00007f4ebdb5e98e [ 188.535055][ T6440] RDX: 000000000000000f RSI: 00007f4ebeab30a0 RDI: 0000000000000005 [ 188.543331][ T6440] RBP: 00007f4ebeab3090 R08: 0000000000000000 R09: 0000000000000000 [ 188.551727][ T6440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.559827][ T6440] R13: 00007f4ebde26038 R14: 00007f4ebde25fa0 R15: 00007ffe345ba0b8 [ 188.568297][ T6440] [ 188.630987][ T6442] netlink: 'syz.1.674': attribute type 3 has an invalid length. [ 188.661860][ T6442] netlink: 'syz.1.674': attribute type 8 has an invalid length. [ 188.669856][ T6442] netlink: 197344 bytes leftover after parsing attributes in process `syz.1.674'. [ 188.735594][ T6445] netlink: 'syz.0.676': attribute type 10 has an invalid length. [ 189.065387][ T6457] tap0: tun_chr_ioctl cmd 1074025677 [ 189.075423][ T6457] tap0: linktype set to 6 [ 189.093256][ T6460] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.683'. [ 189.111844][ T6460] bridge_slave_1: default FDB implementation only supports local addresses [ 189.147265][ T6462] netlink: 'syz.0.684': attribute type 3 has an invalid length. [ 189.176036][ T6462] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.684'. [ 189.446300][ T6485] netlink: 'syz.3.691': attribute type 10 has an invalid length. [ 189.628735][ T6491] netlink: 'syz.3.694': attribute type 10 has an invalid length. [ 189.757908][ T6499] netlink: 14 bytes leftover after parsing attributes in process `syz.0.696'. [ 191.113874][ T6515] FAULT_INJECTION: forcing a failure. [ 191.113874][ T6515] name failslab, interval 1, probability 0, space 0, times 0 [ 191.144889][ T6517] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.701'. [ 191.155229][ T6515] CPU: 0 PID: 6515 Comm: syz.4.702 Not tainted syzkaller #0 [ 191.162584][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.172910][ T6515] Call Trace: [ 191.176187][ T6515] [ 191.179116][ T6515] dump_stack_lvl+0x188/0x24e [ 191.183801][ T6515] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 191.189960][ T6515] ? show_regs_print_info+0x12/0x12 [ 191.205430][ T6515] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 191.211628][ T6515] should_fail_ex+0x390/0x4c0 [ 191.216313][ T6515] should_failslab+0x5/0x20 [ 191.220812][ T6515] slab_pre_alloc_hook+0x59/0x300 [ 191.225860][ T6515] ? tomoyo_encode+0x28a/0x550 [ 191.230717][ T6515] __kmem_cache_alloc_node+0x4f/0x270 [ 191.236090][ T6515] ? tomoyo_encode+0x28a/0x550 [ 191.240853][ T6515] __kmalloc+0xa3/0x240 [ 191.245014][ T6515] tomoyo_encode+0x28a/0x550 [ 191.249616][ T6515] tomoyo_realpath_from_path+0x578/0x5c0 [ 191.255252][ T6515] ? tomoyo_domain+0xd2/0x120 [ 191.259940][ T6515] ? tomoyo_path_number_perm+0x205/0x650 [ 191.265610][ T6515] tomoyo_path_number_perm+0x22f/0x650 [ 191.271076][ T6515] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 191.276554][ T6515] ? ct_irq_exit_irqson+0x113/0x170 [ 191.281772][ T6515] ? __fget_files+0x28/0x460 [ 191.286375][ T6515] security_file_ioctl+0x6c/0xa0 [ 191.291314][ T6515] __se_sys_ioctl+0x48/0x170 [ 191.295994][ T6515] do_syscall_64+0x4c/0xa0 [ 191.300630][ T6515] ? clear_bhb_loop+0x60/0xb0 [ 191.305406][ T6515] ? clear_bhb_loop+0x60/0xb0 [ 191.310260][ T6515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.316159][ T6515] RIP: 0033:0x7fd36819e159 [ 191.320580][ T6515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.346348][ T6515] RSP: 002b:00007fd369132028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.354784][ T6515] RAX: ffffffffffffffda RBX: 00007fd368425fa0 RCX: 00007fd36819e159 [ 191.363707][ T6515] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 191.371697][ T6515] RBP: 00007fd369132090 R08: 0000000000000000 R09: 0000000000000000 [ 191.379673][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.387645][ T6515] R13: 00007fd368426038 R14: 00007fd368425fa0 R15: 00007ffde1ee1868 [ 191.400344][ T6515] [ 191.423945][ T6515] ERROR: Out of memory at tomoyo_realpath_from_path. [ 194.173651][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.180104][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.122548][ T6590] FAULT_INJECTION: forcing a failure. [ 196.122548][ T6590] name failslab, interval 1, probability 0, space 0, times 0 [ 196.190636][ T6590] CPU: 1 PID: 6590 Comm: syz.1.728 Not tainted syzkaller #0 [ 196.198019][ T6590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.208289][ T6590] Call Trace: [ 196.211607][ T6590] [ 196.214569][ T6590] dump_stack_lvl+0x188/0x24e [ 196.219363][ T6590] ? show_regs_print_info+0x12/0x12 [ 196.224606][ T6590] ? load_image+0x410/0x410 [ 196.229187][ T6590] ? __might_sleep+0xd0/0xd0 [ 196.233833][ T6590] ? __lock_acquire+0x7c40/0x7c40 [ 196.238934][ T6590] should_fail_ex+0x390/0x4c0 [ 196.243721][ T6590] should_failslab+0x5/0x20 [ 196.248287][ T6590] slab_pre_alloc_hook+0x59/0x300 [ 196.253379][ T6590] ? kvmalloc_node+0x6c/0x180 [ 196.258132][ T6590] __kmem_cache_alloc_node+0x4f/0x270 [ 196.263575][ T6590] ? kvmalloc_node+0x6c/0x180 [ 196.268306][ T6590] __kmalloc_node+0xa2/0x240 [ 196.272985][ T6590] kvmalloc_node+0x6c/0x180 [ 196.277563][ T6590] page_pool_create+0x1e7/0x5c0 [ 196.282494][ T6590] bpf_test_run_xdp_live+0x220/0x1a90 [ 196.287934][ T6590] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 196.293807][ T6590] ? perf_trace_lock+0x301/0x390 [ 196.298786][ T6590] ? xdp_convert_md_to_buff+0x330/0x330 [ 196.304398][ T6590] ? __lock_acquire+0x7c40/0x7c40 [ 196.309459][ T6590] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 196.315737][ T6590] ? bpf_test_init+0x119/0x140 [ 196.320517][ T6590] ? xdp_convert_md_to_buff+0x5b/0x330 [ 196.326003][ T6590] bpf_prog_test_run_xdp+0x757/0xf80 [ 196.331307][ T6590] ? __lock_acquire+0x7c40/0x7c40 [ 196.336390][ T6590] ? dev_put+0x80/0x80 [ 196.340523][ T6590] ? dev_put+0x80/0x80 [ 196.344634][ T6590] bpf_prog_test_run+0x31c/0x390 [ 196.349608][ T6590] __sys_bpf+0x62b/0x780 [ 196.353888][ T6590] ? bpf_link_show_fdinfo+0x380/0x380 [ 196.359314][ T6590] ? lock_chain_count+0x20/0x20 [ 196.364216][ T6590] __x64_sys_bpf+0x78/0x90 [ 196.368657][ T6590] do_syscall_64+0x4c/0xa0 [ 196.373095][ T6590] ? clear_bhb_loop+0x60/0xb0 [ 196.377787][ T6590] ? clear_bhb_loop+0x60/0xb0 [ 196.382510][ T6590] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.388441][ T6590] RIP: 0033:0x7f8d8d39e159 [ 196.392873][ T6590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.412524][ T6590] RSP: 002b:00007f8d8e25b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.420956][ T6590] RAX: ffffffffffffffda RBX: 00007f8d8d625fa0 RCX: 00007f8d8d39e159 [ 196.428952][ T6590] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 196.436936][ T6590] RBP: 00007f8d8e25b090 R08: 0000000000000000 R09: 0000000000000000 [ 196.444953][ T6590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.452959][ T6590] R13: 00007f8d8d626038 R14: 00007f8d8d625fa0 R15: 00007ffd0f8473a8 [ 196.460986][ T6590] [ 196.487682][ T6591] netlink: 'syz.4.726': attribute type 10 has an invalid length. [ 196.508278][ T6591] team0: Device vxcan1 is of different type [ 196.590149][ T6590] page_pool_create() gave up with errno -12 [ 197.563664][ T6621] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.739'. [ 197.596080][ T6621] openvswitch: netlink: Flow actions attr not present in new flow. [ 198.109683][ T6637] netlink: 'syz.0.747': attribute type 27 has an invalid length. [ 198.130761][ T6637] netlink: 164 bytes leftover after parsing attributes in process `syz.0.747'. [ 198.205661][ T6640] netlink: 'syz.1.744': attribute type 10 has an invalid length. [ 198.588395][ T6640] team0: Device vxcan1 is of different type [ 198.949938][ T6649] netlink: 63763 bytes leftover after parsing attributes in process `syz.2.750'. [ 199.039912][ T4300] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 199.447174][ T6666] netlink: 'syz.1.756': attribute type 21 has an invalid length. [ 200.520421][ T6702] netlink: 'syz.2.768': attribute type 10 has an invalid length. [ 200.536119][ T6702] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.578257][ T6702] device bridge_slave_1 left promiscuous mode [ 200.610940][ T6702] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.687402][ T6702] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 200.790597][ T6703] netlink: 'syz.2.768': attribute type 10 has an invalid length. [ 200.949654][ T6714] FAULT_INJECTION: forcing a failure. [ 200.949654][ T6714] name failslab, interval 1, probability 0, space 0, times 0 [ 201.026314][ T6714] CPU: 0 PID: 6714 Comm: syz.4.769 Not tainted syzkaller #0 [ 201.033726][ T6714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.043843][ T6714] Call Trace: [ 201.047169][ T6714] [ 201.050164][ T6714] dump_stack_lvl+0x188/0x24e [ 201.054929][ T6714] ? show_regs_print_info+0x12/0x12 [ 201.060201][ T6714] ? load_image+0x410/0x410 [ 201.064788][ T6714] ? __might_sleep+0xd0/0xd0 [ 201.069443][ T6714] ? __lock_acquire+0x7c40/0x7c40 [ 201.074549][ T6714] should_fail_ex+0x390/0x4c0 [ 201.079315][ T6714] should_failslab+0x5/0x20 [ 201.083894][ T6714] slab_pre_alloc_hook+0x59/0x300 [ 201.088986][ T6714] ? page_pool_create+0x6d/0x5c0 [ 201.093994][ T6714] __kmem_cache_alloc_node+0x4f/0x270 [ 201.099433][ T6714] ? page_pool_create+0x6d/0x5c0 [ 201.104472][ T6714] kmalloc_node_trace+0x22/0xe0 [ 201.109386][ T6714] page_pool_create+0x6d/0x5c0 [ 201.114274][ T6714] bpf_test_run_xdp_live+0x220/0x1a90 [ 201.119714][ T6714] ? verify_lock_unused+0x140/0x140 [ 201.125025][ T6714] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 201.131673][ T6714] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.137830][ T6714] ? xdp_convert_md_to_buff+0x330/0x330 [ 201.143509][ T6714] ? __lock_acquire+0x7c40/0x7c40 [ 201.148628][ T6714] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 201.154949][ T6714] ? bpf_test_init+0x119/0x140 [ 201.159775][ T6714] ? xdp_convert_md_to_buff+0x5b/0x330 [ 201.165307][ T6714] bpf_prog_test_run_xdp+0x757/0xf80 [ 201.170650][ T6714] ? __lock_acquire+0x7c40/0x7c40 [ 201.175772][ T6714] ? dev_put+0x80/0x80 [ 201.179936][ T6714] ? dev_put+0x80/0x80 [ 201.184070][ T6714] bpf_prog_test_run+0x31c/0x390 [ 201.189046][ T6714] __sys_bpf+0x62b/0x780 [ 201.193329][ T6714] ? bpf_link_show_fdinfo+0x380/0x380 [ 201.198753][ T6714] ? lock_chain_count+0x20/0x20 [ 201.203656][ T6714] __x64_sys_bpf+0x78/0x90 [ 201.208128][ T6714] do_syscall_64+0x4c/0xa0 [ 201.212588][ T6714] ? clear_bhb_loop+0x60/0xb0 [ 201.217289][ T6714] ? clear_bhb_loop+0x60/0xb0 [ 201.221988][ T6714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.227974][ T6714] RIP: 0033:0x7fd36819e159 [ 201.232467][ T6714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.252096][ T6714] RSP: 002b:00007fd369132028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.260532][ T6714] RAX: ffffffffffffffda RBX: 00007fd368425fa0 RCX: 00007fd36819e159 [ 201.268522][ T6714] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 201.276535][ T6714] RBP: 00007fd369132090 R08: 0000000000000000 R09: 0000000000000000 [ 201.284604][ T6714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.292588][ T6714] R13: 00007fd368426038 R14: 00007fd368425fa0 R15: 00007ffde1ee1868 [ 201.300608][ T6714] [ 201.416721][ T6699] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.766'. [ 202.578499][ T6749] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.781'. [ 202.781689][ T6751] device syzkaller0 entered promiscuous mode [ 204.343312][ T6779] sctp: [Deprecated]: syz.2.790 (pid 6779) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.343312][ T6779] Use struct sctp_sack_info instead [ 206.162567][ T6767] netlink: 40 bytes leftover after parsing attributes in process `syz.1.787'. [ 206.190482][ T6779] netlink: 'syz.2.790': attribute type 10 has an invalid length. [ 206.260940][ T6779] team0: Port device macvlan1 added [ 206.389233][ T6784] netlink: 'syz.0.791': attribute type 3 has an invalid length. [ 206.410628][ T6784] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.791'. [ 206.457718][ T6791] netlink: 'syz.1.793': attribute type 29 has an invalid length. [ 206.474068][ T6791] netlink: 'syz.1.793': attribute type 29 has an invalid length. [ 206.487944][ T6791] netlink: 'syz.1.793': attribute type 29 has an invalid length. [ 206.497570][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 206.503836][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 206.503875][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 206.509891][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 206.516045][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 207.314625][ T6807] netlink: 'syz.2.800': attribute type 10 has an invalid length. [ 207.332882][ T6807] team0: Device vxcan1 is of different type [ 208.070669][ T6831] netlink: 14 bytes leftover after parsing attributes in process `syz.1.809'. [ 208.075203][ T6833] FAULT_INJECTION: forcing a failure. [ 208.075203][ T6833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.094097][ T6833] CPU: 1 PID: 6833 Comm: syz.0.810 Not tainted syzkaller #0 [ 208.101437][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.111515][ T6833] Call Trace: [ 208.114804][ T6833] [ 208.117742][ T6833] dump_stack_lvl+0x188/0x24e [ 208.122437][ T6833] ? show_regs_print_info+0x12/0x12 [ 208.127641][ T6833] ? load_image+0x410/0x410 [ 208.132146][ T6833] ? __lock_acquire+0x7c40/0x7c40 [ 208.137176][ T6833] should_fail_ex+0x390/0x4c0 [ 208.141861][ T6833] _copy_to_user+0x2c/0x130 [ 208.146370][ T6833] bpf_verifier_vlog+0x172/0x3a0 [ 208.151321][ T6833] __btf_verifier_log+0xdf/0x130 [ 208.156272][ T6833] ? btf_check_sec_info+0x350/0x350 [ 208.161481][ T6833] ? btf_parse_hdr+0x1dd/0x7d0 [ 208.166248][ T6833] btf_parse_hdr+0x37e/0x7d0 [ 208.170846][ T6833] btf_new_fd+0x367/0x760 [ 208.175185][ T6833] __sys_bpf+0x612/0x780 [ 208.179436][ T6833] ? bpf_link_show_fdinfo+0x380/0x380 [ 208.184829][ T6833] ? lock_chain_count+0x20/0x20 [ 208.189693][ T6833] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 208.195683][ T6833] __x64_sys_bpf+0x78/0x90 [ 208.200103][ T6833] do_syscall_64+0x4c/0xa0 [ 208.204521][ T6833] ? clear_bhb_loop+0x60/0xb0 [ 208.209198][ T6833] ? clear_bhb_loop+0x60/0xb0 [ 208.213880][ T6833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.219781][ T6833] RIP: 0033:0x7f443759e159 [ 208.224198][ T6833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.243827][ T6833] RSP: 002b:00007f44384bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 208.252244][ T6833] RAX: ffffffffffffffda RBX: 00007f4437825fa0 RCX: 00007f443759e159 [ 208.260226][ T6833] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 208.268197][ T6833] RBP: 00007f44384bf090 R08: 0000000000000000 R09: 0000000000000000 [ 208.276163][ T6833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.284154][ T6833] R13: 00007f4437826038 R14: 00007f4437825fa0 R15: 00007ffe6e746ec8 [ 208.292146][ T6833] [ 208.632048][ T6843] netlink: 'syz.1.813': attribute type 10 has an invalid length. [ 208.828729][ T6853] delete_channel: no stack [ 209.214630][ T6863] netlink: 'syz.0.820': attribute type 1 has an invalid length. [ 209.424203][ T6871] device syzkaller0 entered promiscuous mode [ 209.587290][ T6879] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.826'. [ 209.605494][ T6879] bridge_slave_1: default FDB implementation only supports local addresses [ 209.936241][ T6895] netlink: 'syz.0.833': attribute type 10 has an invalid length. [ 210.113263][ T6904] sctp: [Deprecated]: syz.0.835 (pid 6904) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.113263][ T6904] Use struct sctp_sack_info instead [ 212.859132][ T6904] netlink: 'syz.0.835': attribute type 10 has an invalid length. [ 212.872875][ T6907] netlink: 'syz.3.837': attribute type 21 has an invalid length. [ 212.883220][ T6907] IPv6: NLM_F_CREATE should be specified when creating new route [ 213.143284][ T6925] FAULT_INJECTION: forcing a failure. [ 213.143284][ T6925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.163414][ T6935] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.845'. [ 213.185235][ T6933] FAULT_INJECTION: forcing a failure. [ 213.185235][ T6933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.213066][ T6925] CPU: 0 PID: 6925 Comm: syz.3.843 Not tainted syzkaller #0 [ 213.220413][ T6925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.230485][ T6925] Call Trace: [ 213.233783][ T6925] [ 213.236732][ T6925] dump_stack_lvl+0x188/0x24e [ 213.241430][ T6925] ? show_regs_print_info+0x12/0x12 [ 213.246652][ T6925] ? load_image+0x410/0x410 [ 213.251181][ T6925] ? __might_fault+0xa6/0x120 [ 213.255880][ T6925] should_fail_ex+0x390/0x4c0 [ 213.260582][ T6925] copyin+0x1b/0x120 [ 213.264494][ T6925] _copy_from_iter+0x447/0x1130 [ 213.269374][ T6925] ? copyout_mc+0x110/0x110 [ 213.273896][ T6925] ? mark_lock+0x94/0x320 [ 213.278249][ T6925] ? __lock_acquire+0x1465/0x7c40 [ 213.283309][ T6925] ? dev_get_by_index+0x1e/0x2d0 [ 213.288267][ T6925] ? dev_get_by_index+0x1e/0x2d0 [ 213.293232][ T6925] packet_sendmsg+0x2fcd/0x4c30 [ 213.298127][ T6925] ? __might_sleep+0xd0/0xd0 [ 213.302823][ T6925] ? perf_trace_lock+0xf8/0x390 [ 213.307692][ T6925] ? trace_event_raw_event_lock+0x230/0x230 [ 213.313599][ T6925] ? aa_sk_perm+0x81f/0x950 [ 213.318107][ T6925] ? aa_af_perm+0x340/0x340 [ 213.322610][ T6925] ? packet_getsockopt+0x980/0x980 [ 213.327726][ T6925] ? apparmor_socket_sendmsg+0x8a/0x330 [ 213.333276][ T6925] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 213.338564][ T6925] ? security_socket_sendmsg+0x7c/0xa0 [ 213.344021][ T6925] ? packet_getsockopt+0x980/0x980 [ 213.349131][ T6925] ____sys_sendmsg+0x5ed/0x9a0 [ 213.353897][ T6925] ? __sys_sendmsg_sock+0x30/0x30 [ 213.358914][ T6925] ? __import_iovec+0x306/0x510 [ 213.363772][ T6925] ? import_iovec+0x6f/0xa0 [ 213.368282][ T6925] ___sys_sendmsg+0x2a2/0x360 [ 213.372961][ T6925] ? __sys_sendmsg+0x2a0/0x2a0 [ 213.377740][ T6925] ? __lock_acquire+0x7c40/0x7c40 [ 213.382784][ T6925] __se_sys_sendmsg+0x1c3/0x2b0 [ 213.387661][ T6925] ? __x64_sys_sendmsg+0x80/0x80 [ 213.392609][ T6925] ? lockdep_hardirqs_on+0x94/0x140 [ 213.397821][ T6925] do_syscall_64+0x4c/0xa0 [ 213.402234][ T6925] ? clear_bhb_loop+0x60/0xb0 [ 213.406928][ T6925] ? clear_bhb_loop+0x60/0xb0 [ 213.411712][ T6925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.417618][ T6925] RIP: 0033:0x7f2888b9e159 [ 213.422034][ T6925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.441639][ T6925] RSP: 002b:00007f2889a31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.450055][ T6925] RAX: ffffffffffffffda RBX: 00007f2888e25fa0 RCX: 00007f2888b9e159 [ 213.458026][ T6925] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 213.465996][ T6925] RBP: 00007f2889a31090 R08: 0000000000000000 R09: 0000000000000000 [ 213.473973][ T6925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.482042][ T6925] R13: 00007f2888e26038 R14: 00007f2888e25fa0 R15: 00007ffc5441bf38 [ 213.490043][ T6925] [ 213.506469][ T6933] CPU: 0 PID: 6933 Comm: syz.1.844 Not tainted syzkaller #0 [ 213.513822][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.523898][ T6933] Call Trace: [ 213.527196][ T6933] [ 213.530142][ T6933] dump_stack_lvl+0x188/0x24e [ 213.534852][ T6933] ? show_regs_print_info+0x12/0x12 [ 213.540096][ T6933] ? load_image+0x410/0x410 [ 213.544633][ T6933] ? __lock_acquire+0x7c40/0x7c40 [ 213.549686][ T6933] should_fail_ex+0x390/0x4c0 [ 213.554398][ T6933] _copy_from_user+0x2c/0x170 [ 213.559099][ T6933] get_user_ifreq+0x67/0x170 [ 213.563714][ T6933] sock_ioctl+0x61f/0x700 [ 213.568067][ T6933] ? sock_poll+0x420/0x420 [ 213.572514][ T6933] ? bpf_lsm_file_ioctl+0x5/0x10 [ 213.577476][ T6933] ? security_file_ioctl+0x7c/0xa0 [ 213.582608][ T6933] ? sock_poll+0x420/0x420 [ 213.587043][ T6933] __se_sys_ioctl+0xfa/0x170 [ 213.591653][ T6933] do_syscall_64+0x4c/0xa0 [ 213.596082][ T6933] ? clear_bhb_loop+0x60/0xb0 [ 213.600775][ T6933] ? clear_bhb_loop+0x60/0xb0 [ 213.605479][ T6933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.611391][ T6933] RIP: 0033:0x7f8d8d39e159 [ 213.615827][ T6933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.635462][ T6933] RSP: 002b:00007f8d8e23a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.643903][ T6933] RAX: ffffffffffffffda RBX: 00007f8d8d626090 RCX: 00007f8d8d39e159 [ 213.651903][ T6933] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000005 [ 213.659900][ T6933] RBP: 00007f8d8e23a090 R08: 0000000000000000 R09: 0000000000000000 [ 213.667890][ T6933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.675885][ T6933] R13: 00007f8d8d626128 R14: 00007f8d8d626090 R15: 00007ffd0f8473a8 [ 213.683901][ T6933] [ 213.979967][ T6952] sctp: [Deprecated]: syz.1.852 (pid 6952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.979967][ T6952] Use struct sctp_sack_info instead [ 214.007663][ T6953] netlink: 'syz.4.851': attribute type 10 has an invalid length. [ 214.049274][ T6955] netlink: 'syz.1.852': attribute type 10 has an invalid length. [ 214.328242][ T6971] netlink: 15007 bytes leftover after parsing attributes in process `syz.2.856'. [ 214.346605][ T6971] netlink: 15007 bytes leftover after parsing attributes in process `syz.2.856'. [ 214.581386][ T6979] netlink: 'syz.2.859': attribute type 27 has an invalid length. [ 214.630009][ T6979] netlink: 164 bytes leftover after parsing attributes in process `syz.2.859'. [ 214.700980][ T6979] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.859'. [ 214.860877][ T6985] FAULT_INJECTION: forcing a failure. [ 214.860877][ T6985] name failslab, interval 1, probability 0, space 0, times 0 [ 214.873925][ T6985] CPU: 0 PID: 6985 Comm: syz.3.860 Not tainted syzkaller #0 [ 214.881242][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.891303][ T6985] Call Trace: [ 214.894621][ T6985] [ 214.897548][ T6985] dump_stack_lvl+0x188/0x24e [ 214.902244][ T6985] ? show_regs_print_info+0x12/0x12 [ 214.907458][ T6985] ? load_image+0x410/0x410 [ 214.911975][ T6985] ? skb_network_protocol+0x52f/0x790 [ 214.917352][ T6985] should_fail_ex+0x390/0x4c0 [ 214.922036][ T6985] should_failslab+0x5/0x20 [ 214.926536][ T6985] slab_pre_alloc_hook+0x59/0x300 [ 214.931585][ T6985] ? netif_skb_features+0xafa/0x1630 [ 214.936886][ T6985] kmem_cache_alloc+0x56/0x2f0 [ 214.941653][ T6985] ? skb_clone+0x1e7/0x370 [ 214.946073][ T6985] skb_clone+0x1e7/0x370 [ 214.950318][ T6985] ? dev_queue_xmit_nit+0x200/0xba0 [ 214.955520][ T6985] dev_queue_xmit_nit+0x23b/0xba0 [ 214.960542][ T6985] ? dev_queue_xmit_nit+0x29/0xba0 [ 214.965682][ T6985] ? validate_xmit_skb+0x7ca/0xe80 [ 214.970797][ T6985] dev_hard_start_xmit+0x158/0x8b0 [ 214.975928][ T6985] ? validate_xmit_skb_list+0x120/0x120 [ 214.981484][ T6985] __dev_queue_xmit+0x1b4b/0x3810 [ 214.986515][ T6985] ? __dev_queue_xmit+0x281/0x3810 [ 214.991629][ T6985] ? netdev_core_pick_tx+0x360/0x360 [ 214.996926][ T6985] ? skb_release_data+0x1d3/0x7e0 [ 215.001960][ T6985] __bpf_redirect+0x8c7/0x1110 [ 215.006734][ T6985] bpf_clone_redirect+0x311/0x4a0 [ 215.011764][ T6985] bpf_prog_c9d58f5b8698340d+0x56/0x5b [ 215.017229][ T6985] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 215.023223][ T6985] ? __lock_acquire+0x7c40/0x7c40 [ 215.028250][ T6985] ? lock_chain_count+0x20/0x20 [ 215.033105][ T6985] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 215.039343][ T6985] ? lockdep_hardirqs_on+0x94/0x140 [ 215.044544][ T6985] ? ktime_get+0x7b/0x270 [ 215.048871][ T6985] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 215.055114][ T6985] ? ktime_get_real_ts64+0x440/0x440 [ 215.060402][ T6985] ? read_lock_is_recursive+0x10/0x10 [ 215.065782][ T6985] ? __cant_sleep+0x220/0x220 [ 215.070467][ T6985] ? bpf_test_timer_continue+0x142/0x380 [ 215.076141][ T6985] bpf_test_run+0x2b6/0x830 [ 215.080658][ T6985] ? dst_hold+0xb0/0xb0 [ 215.084821][ T6985] ? eth_get_headlen+0x200/0x200 [ 215.089756][ T6985] ? __build_skb+0x24b/0x3b0 [ 215.094350][ T6985] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 215.099737][ T6985] ? cpu_online+0xa0/0xa0 [ 215.104065][ T6985] bpf_prog_test_run+0x31c/0x390 [ 215.109006][ T6985] __sys_bpf+0x62b/0x780 [ 215.113253][ T6985] ? bpf_link_show_fdinfo+0x380/0x380 [ 215.118637][ T6985] ? lock_chain_count+0x20/0x20 [ 215.123511][ T6985] __x64_sys_bpf+0x78/0x90 [ 215.128136][ T6985] do_syscall_64+0x4c/0xa0 [ 215.132562][ T6985] ? clear_bhb_loop+0x60/0xb0 [ 215.137242][ T6985] ? clear_bhb_loop+0x60/0xb0 [ 215.141919][ T6985] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.147817][ T6985] RIP: 0033:0x7f2888b9e159 [ 215.152230][ T6985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.171856][ T6985] RSP: 002b:00007f2889a31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.180301][ T6985] RAX: ffffffffffffffda RBX: 00007f2888e25fa0 RCX: 00007f2888b9e159 [ 215.188272][ T6985] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 215.196241][ T6985] RBP: 00007f2889a31090 R08: 0000000000000000 R09: 0000000000000000 [ 215.204253][ T6985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.212222][ T6985] R13: 00007f2888e26038 R14: 00007f2888e25fa0 R15: 00007ffc5441bf38 [ 215.220208][ T6985] [ 215.569089][ T6991] netlink: 'syz.0.863': attribute type 25 has an invalid length. [ 215.598663][ T6991] netlink: 'syz.0.863': attribute type 28 has an invalid length. [ 215.939786][ T7003] delete_channel: no stack [ 215.961828][ T7013] netlink: 'syz.2.868': attribute type 10 has an invalid length. [ 216.072074][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.872'. [ 216.107324][ T7021] tc_dump_action: action bad kind [ 216.685489][ T7050] device veth1_macvtap left promiscuous mode [ 217.183572][ T7068] netlink: 164 bytes leftover after parsing attributes in process `syz.0.883'. [ 217.206119][ T7067] netlink: 164 bytes leftover after parsing attributes in process `syz.0.883'. [ 217.246284][ T7067] netlink: 'syz.0.883': attribute type 3 has an invalid length. [ 217.265576][ T7067] netlink: 'syz.0.883': attribute type 8 has an invalid length. [ 217.284142][ T7067] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.883'. [ 217.716254][ T7081] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.887'. [ 217.742208][ T7087] FAULT_INJECTION: forcing a failure. [ 217.742208][ T7087] name failslab, interval 1, probability 0, space 0, times 0 [ 217.813052][ T7087] CPU: 1 PID: 7087 Comm: syz.2.889 Not tainted syzkaller #0 [ 217.820404][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.830468][ T7087] Call Trace: [ 217.833742][ T7087] [ 217.836666][ T7087] dump_stack_lvl+0x188/0x24e [ 217.841343][ T7087] ? show_regs_print_info+0x12/0x12 [ 217.846539][ T7087] ? load_image+0x410/0x410 [ 217.851044][ T7087] should_fail_ex+0x390/0x4c0 [ 217.855747][ T7087] should_failslab+0x5/0x20 [ 217.860256][ T7087] slab_pre_alloc_hook+0x59/0x300 [ 217.865281][ T7087] ? __kernel_text_address+0x9/0x30 [ 217.870489][ T7087] kmem_cache_alloc+0x56/0x2f0 [ 217.875250][ T7087] ? skb_clone+0x1e7/0x370 [ 217.879668][ T7087] skb_clone+0x1e7/0x370 [ 217.883915][ T7087] bpf_clone_redirect+0x169/0x4a0 [ 217.888943][ T7087] bpf_prog_973cd02a7a0e8181+0x56/0x5b [ 217.894400][ T7087] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 217.900382][ T7087] ? __lock_acquire+0x7c40/0x7c40 [ 217.905409][ T7087] ? lock_chain_count+0x20/0x20 [ 217.910260][ T7087] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 217.916497][ T7087] ? lockdep_hardirqs_on+0x94/0x140 [ 217.921696][ T7087] ? ktime_get+0x7b/0x270 [ 217.926028][ T7087] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 217.932354][ T7087] ? ktime_get_real_ts64+0x440/0x440 [ 217.937640][ T7087] ? read_lock_is_recursive+0x10/0x10 [ 217.943033][ T7087] bpf_test_run+0x4c1/0x830 [ 217.947564][ T7087] ? dst_hold+0xb0/0xb0 [ 217.951724][ T7087] ? eth_get_headlen+0x200/0x200 [ 217.956670][ T7087] ? __build_skb+0x24b/0x3b0 [ 217.961264][ T7087] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 217.966663][ T7087] ? cpu_online+0xa0/0xa0 [ 217.970999][ T7087] bpf_prog_test_run+0x31c/0x390 [ 217.975956][ T7087] __sys_bpf+0x62b/0x780 [ 217.980208][ T7087] ? bpf_link_show_fdinfo+0x380/0x380 [ 217.985616][ T7087] ? lock_chain_count+0x20/0x20 [ 217.990477][ T7087] __x64_sys_bpf+0x78/0x90 [ 217.994894][ T7087] do_syscall_64+0x4c/0xa0 [ 217.999312][ T7087] ? clear_bhb_loop+0x60/0xb0 [ 218.003983][ T7087] ? clear_bhb_loop+0x60/0xb0 [ 218.008651][ T7087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.014543][ T7087] RIP: 0033:0x7f4ebdb9e159 [ 218.018950][ T7087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.038552][ T7087] RSP: 002b:00007f4ebeab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 218.046979][ T7087] RAX: ffffffffffffffda RBX: 00007f4ebde25fa0 RCX: 00007f4ebdb9e159 [ 218.054947][ T7087] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 218.062916][ T7087] RBP: 00007f4ebeab3090 R08: 0000000000000000 R09: 0000000000000000 [ 218.070877][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.078845][ T7087] R13: 00007f4ebde26038 R14: 00007f4ebde25fa0 R15: 00007ffe345ba0b8 [ 218.086827][ T7087] [ 218.906376][ T7102] device syzkaller0 entered promiscuous mode [ 218.987072][ T7114] device veth1_macvtap left promiscuous mode [ 221.509812][ T7141] device syzkaller0 entered promiscuous mode [ 224.406989][ T7182] device veth1_macvtap left promiscuous mode [ 224.424910][ T7190] validate_nla: 1 callbacks suppressed [ 224.424926][ T7190] netlink: 'syz.1.916': attribute type 25 has an invalid length. [ 224.452227][ T7190] netlink: 'syz.1.916': attribute type 28 has an invalid length. [ 226.060136][ T7198] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.919'. [ 226.372482][ T7236] netlink: 'syz.4.936': attribute type 10 has an invalid length. [ 226.388421][ T7236] netlink: 40 bytes leftover after parsing attributes in process `syz.4.936'. [ 226.407616][ T7236] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 226.548855][ T7249] netlink: 'syz.4.940': attribute type 25 has an invalid length. [ 226.569306][ T7249] netlink: 'syz.4.940': attribute type 3 has an invalid length. [ 226.580050][ T7249] netlink: 132 bytes leftover after parsing attributes in process `syz.4.940'. [ 226.598098][ T7244] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 226.609701][ T7244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.939'. [ 226.620116][ T7244] device dummy0 entered promiscuous mode [ 226.626628][ T7244] bridge0: port 3(dummy0) entered blocking state [ 226.634614][ T7244] bridge0: port 3(dummy0) entered disabled state [ 226.658115][ T7254] netlink: 60 bytes leftover after parsing attributes in process `syz.2.942'. [ 226.663276][ T7244] bridge0: port 3(dummy0) entered blocking state [ 226.673624][ T7244] bridge0: port 3(dummy0) entered forwarding state [ 226.717738][ T7254] netlink: 60 bytes leftover after parsing attributes in process `syz.2.942'. [ 226.733695][ T7257] netlink: 60 bytes leftover after parsing attributes in process `syz.2.942'. [ 226.754621][ T7252] netlink: 132 bytes leftover after parsing attributes in process `syz.4.940'. [ 226.767053][ T7254] netlink: 60 bytes leftover after parsing attributes in process `syz.2.942'. [ 226.815589][ T7258] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.943'. [ 226.887059][ T7260] netlink: 'syz.2.944': attribute type 10 has an invalid length. [ 226.896013][ T7260] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 227.203923][ T7271] FAULT_INJECTION: forcing a failure. [ 227.203923][ T7271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.219032][ T7271] CPU: 1 PID: 7271 Comm: syz.0.948 Not tainted syzkaller #0 [ 227.226366][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.236438][ T7271] Call Trace: [ 227.239784][ T7271] [ 227.242736][ T7271] dump_stack_lvl+0x188/0x24e [ 227.247443][ T7271] ? show_regs_print_info+0x12/0x12 [ 227.252682][ T7271] ? load_image+0x410/0x410 [ 227.257215][ T7271] ? __lock_acquire+0x7c40/0x7c40 [ 227.262281][ T7271] should_fail_ex+0x390/0x4c0 [ 227.266985][ T7271] _copy_to_user+0x2c/0x130 [ 227.271514][ T7271] bpf_verifier_vlog+0x172/0x3a0 [ 227.276485][ T7271] __btf_verifier_log+0xdf/0x130 [ 227.281456][ T7271] ? btf_check_sec_info+0x350/0x350 [ 227.286688][ T7271] ? btf_parse_hdr+0x1dd/0x7d0 [ 227.291477][ T7271] btf_parse_hdr+0x3aa/0x7d0 [ 227.296120][ T7271] btf_new_fd+0x367/0x760 [ 227.300491][ T7271] __sys_bpf+0x612/0x780 [ 227.304767][ T7271] ? bpf_link_show_fdinfo+0x380/0x380 [ 227.310186][ T7271] ? lock_chain_count+0x20/0x20 [ 227.315073][ T7271] __x64_sys_bpf+0x78/0x90 [ 227.319530][ T7271] do_syscall_64+0x4c/0xa0 [ 227.323978][ T7271] ? clear_bhb_loop+0x60/0xb0 [ 227.328681][ T7271] ? clear_bhb_loop+0x60/0xb0 [ 227.333384][ T7271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.339307][ T7271] RIP: 0033:0x7f443759e159 [ 227.343837][ T7271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.363472][ T7271] RSP: 002b:00007f44384bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.371891][ T7271] RAX: ffffffffffffffda RBX: 00007f4437825fa0 RCX: 00007f443759e159 [ 227.380234][ T7271] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 227.388207][ T7271] RBP: 00007f44384bf090 R08: 0000000000000000 R09: 0000000000000000 [ 227.396180][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.404149][ T7271] R13: 00007f4437826038 R14: 00007f4437825fa0 R15: 00007ffe6e746ec8 [ 227.412139][ T7271] [ 227.596784][ T7285] delete_channel: no stack [ 227.858091][ T7298] netlink: 'syz.3.958': attribute type 2 has an invalid length. [ 228.051034][ T7311] bridge_slave_1: default FDB implementation only supports local addresses [ 228.464315][ T7335] netlink: 'syz.3.974': attribute type 10 has an invalid length. [ 228.878184][ T7356] FAULT_INJECTION: forcing a failure. [ 228.878184][ T7356] name failslab, interval 1, probability 0, space 0, times 0 [ 228.920215][ T7356] CPU: 0 PID: 7356 Comm: syz.2.981 Not tainted syzkaller #0 [ 228.927562][ T7356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.934168][ T7360] netlink: 'syz.0.983': attribute type 29 has an invalid length. [ 228.937613][ T7356] Call Trace: [ 228.937632][ T7356] [ 228.937641][ T7356] dump_stack_lvl+0x188/0x24e [ 228.956270][ T7356] ? show_regs_print_info+0x12/0x12 [ 228.961492][ T7356] ? load_image+0x410/0x410 [ 228.966020][ T7356] ? __might_sleep+0xd0/0xd0 [ 228.970627][ T7356] ? __lock_acquire+0x7c40/0x7c40 [ 228.975670][ T7356] should_fail_ex+0x390/0x4c0 [ 228.980352][ T7356] should_failslab+0x5/0x20 [ 228.984853][ T7356] slab_pre_alloc_hook+0x59/0x300 [ 228.989890][ T7356] ? tomoyo_encode+0x28a/0x550 [ 228.994674][ T7356] __kmem_cache_alloc_node+0x4f/0x270 [ 229.000054][ T7356] ? tomoyo_encode+0x28a/0x550 [ 229.004817][ T7356] __kmalloc+0xa3/0x240 [ 229.008976][ T7356] tomoyo_encode+0x28a/0x550 [ 229.013562][ T7356] tomoyo_realpath_from_path+0x578/0x5c0 [ 229.019189][ T7356] ? tomoyo_domain+0xd2/0x120 [ 229.023864][ T7356] ? tomoyo_path_number_perm+0x205/0x650 [ 229.029490][ T7356] tomoyo_path_number_perm+0x22f/0x650 [ 229.034947][ T7356] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 229.040427][ T7356] ? __fget_files+0x28/0x460 [ 229.045023][ T7356] security_file_ioctl+0x6c/0xa0 [ 229.049964][ T7356] __se_sys_ioctl+0x48/0x170 [ 229.054553][ T7356] do_syscall_64+0x4c/0xa0 [ 229.058959][ T7356] ? clear_bhb_loop+0x60/0xb0 [ 229.063629][ T7356] ? clear_bhb_loop+0x60/0xb0 [ 229.068297][ T7356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.074187][ T7356] RIP: 0033:0x7f4ebdb9e159 [ 229.078596][ T7356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.098193][ T7356] RSP: 002b:00007f4ebeab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.106607][ T7356] RAX: ffffffffffffffda RBX: 00007f4ebde25fa0 RCX: 00007f4ebdb9e159 [ 229.114578][ T7356] RDX: 0000000000000005 RSI: 0000000000002400 RDI: 0000000000000003 [ 229.122539][ T7356] RBP: 00007f4ebeab3090 R08: 0000000000000000 R09: 0000000000000000 [ 229.130502][ T7356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.138463][ T7356] R13: 00007f4ebde26038 R14: 00007f4ebde25fa0 R15: 00007ffe345ba0b8 [ 229.146442][ T7356] [ 229.160724][ T7356] ERROR: Out of memory at tomoyo_realpath_from_path. [ 230.074196][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 232.438564][ T7386] __nla_validate_parse: 1 callbacks suppressed [ 232.438581][ T7386] netlink: 184 bytes leftover after parsing attributes in process `syz.4.988'. [ 232.471313][ T7387] netlink: 132 bytes leftover after parsing attributes in process `syz.4.988'. [ 232.488452][ T7388] validate_nla: 1 callbacks suppressed [ 232.488470][ T7388] netlink: 'syz.4.988': attribute type 12 has an invalid length. [ 232.523513][ T7388] netlink: 132 bytes leftover after parsing attributes in process `syz.4.988'. [ 232.548042][ T7391] netlink: 144 bytes leftover after parsing attributes in process `syz.0.989'. [ 232.562327][ T7397] netlink: 'syz.2.990': attribute type 10 has an invalid length. [ 232.571221][ T7397] team0: Device gre0 is up. Set it down before adding it as a team port [ 232.974553][ T7412] FAULT_INJECTION: forcing a failure. [ 232.974553][ T7412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.033396][ T7416] FAULT_INJECTION: forcing a failure. [ 233.033396][ T7416] name failslab, interval 1, probability 0, space 0, times 0 [ 233.052034][ T7412] CPU: 1 PID: 7412 Comm: syz.2.995 Not tainted syzkaller #0 [ 233.059366][ T7412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.069445][ T7412] Call Trace: [ 233.072741][ T7412] [ 233.075685][ T7412] dump_stack_lvl+0x188/0x24e [ 233.080379][ T7412] ? show_regs_print_info+0x12/0x12 [ 233.085590][ T7412] ? load_image+0x410/0x410 [ 233.090110][ T7412] ? __lock_acquire+0x7c40/0x7c40 [ 233.095155][ T7412] should_fail_ex+0x390/0x4c0 [ 233.099852][ T7412] _copy_from_user+0x2c/0x170 [ 233.104541][ T7412] get_user_ifreq+0x67/0x170 [ 233.109141][ T7412] sock_ioctl+0x61f/0x700 [ 233.113494][ T7412] ? sock_poll+0x420/0x420 [ 233.117931][ T7412] ? bpf_lsm_file_ioctl+0x5/0x10 [ 233.122893][ T7412] ? security_file_ioctl+0x7c/0xa0 [ 233.128021][ T7412] ? sock_poll+0x420/0x420 [ 233.132459][ T7412] __se_sys_ioctl+0xfa/0x170 [ 233.137070][ T7412] do_syscall_64+0x4c/0xa0 [ 233.141496][ T7412] ? clear_bhb_loop+0x60/0xb0 [ 233.146190][ T7412] ? clear_bhb_loop+0x60/0xb0 [ 233.150877][ T7412] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.156784][ T7412] RIP: 0033:0x7f4ebdb9e159 [ 233.161209][ T7412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.180838][ T7412] RSP: 002b:00007f4ebeab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.189280][ T7412] RAX: ffffffffffffffda RBX: 00007f4ebde25fa0 RCX: 00007f4ebdb9e159 [ 233.197286][ T7412] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 233.205308][ T7412] RBP: 00007f4ebeab3090 R08: 0000000000000000 R09: 0000000000000000 [ 233.213296][ T7412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.221287][ T7412] R13: 00007f4ebde26038 R14: 00007f4ebde25fa0 R15: 00007ffe345ba0b8 [ 233.229299][ T7412] [ 233.266555][ T7416] CPU: 1 PID: 7416 Comm: syz.1.997 Not tainted syzkaller #0 [ 233.273907][ T7416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.283982][ T7416] Call Trace: [ 233.287270][ T7416] [ 233.290207][ T7416] dump_stack_lvl+0x188/0x24e [ 233.294902][ T7416] ? show_regs_print_info+0x12/0x12 [ 233.300118][ T7416] ? load_image+0x410/0x410 [ 233.304667][ T7416] ? __might_sleep+0xd0/0xd0 [ 233.309423][ T7416] ? __lock_acquire+0x7c40/0x7c40 [ 233.314479][ T7416] ? __lock_acquire+0x138a/0x7c40 [ 233.319530][ T7416] should_fail_ex+0x390/0x4c0 [ 233.324248][ T7416] should_failslab+0x5/0x20 [ 233.328772][ T7416] slab_pre_alloc_hook+0x59/0x300 [ 233.333828][ T7416] kmem_cache_alloc_node+0x5a/0x310 [ 233.339048][ T7416] ? __alloc_skb+0xf9/0x7d0 [ 233.343573][ T7416] __alloc_skb+0xf9/0x7d0 [ 233.347920][ T7416] alloc_skb_with_frags+0xa7/0x710 [ 233.353049][ T7416] ? __might_fault+0xa6/0x120 [ 233.357737][ T7416] ? __lock_acquire+0x7c40/0x7c40 [ 233.362803][ T7416] sock_alloc_send_pskb+0x87f/0x9a0 [ 233.368038][ T7416] ? sock_kzfree_s+0x50/0x50 [ 233.372652][ T7416] ? mark_lock+0x94/0x320 [ 233.377001][ T7416] ? __lock_acquire+0x1465/0x7c40 [ 233.382041][ T7416] ? dev_get_by_index+0x1e/0x2d0 [ 233.386993][ T7416] ? dev_get_by_index+0x1e/0x2d0 [ 233.391948][ T7416] packet_sendmsg+0x31b9/0x4c30 [ 233.396832][ T7416] ? __might_sleep+0xd0/0xd0 [ 233.401440][ T7416] ? is_bpf_text_address+0x22/0x2a0 [ 233.406667][ T7416] ? verify_lock_unused+0x140/0x140 [ 233.411899][ T7416] ? aa_sk_perm+0x81f/0x950 [ 233.416425][ T7416] ? aa_af_perm+0x340/0x340 [ 233.420946][ T7416] ? packet_getsockopt+0x980/0x980 [ 233.426086][ T7416] ? apparmor_socket_sendmsg+0x8a/0x330 [ 233.431742][ T7416] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 233.437041][ T7416] ? security_socket_sendmsg+0x7c/0xa0 [ 233.442525][ T7416] ? packet_getsockopt+0x980/0x980 [ 233.447657][ T7416] ____sys_sendmsg+0x5ed/0x9a0 [ 233.452449][ T7416] ? __sys_sendmsg_sock+0x30/0x30 [ 233.457482][ T7416] ? __import_iovec+0x306/0x510 [ 233.462362][ T7416] ? import_iovec+0x6f/0xa0 [ 233.466888][ T7416] ___sys_sendmsg+0x2a2/0x360 [ 233.471585][ T7416] ? __sys_sendmsg+0x2a0/0x2a0 [ 233.476379][ T7416] ? __lock_acquire+0x7c40/0x7c40 [ 233.481444][ T7416] __se_sys_sendmsg+0x1c3/0x2b0 [ 233.486319][ T7416] ? __x64_sys_sendmsg+0x80/0x80 [ 233.491292][ T7416] ? lockdep_hardirqs_on+0x94/0x140 [ 233.496526][ T7416] do_syscall_64+0x4c/0xa0 [ 233.500955][ T7416] ? clear_bhb_loop+0x60/0xb0 [ 233.505646][ T7416] ? clear_bhb_loop+0x60/0xb0 [ 233.510348][ T7416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.516266][ T7416] RIP: 0033:0x7f8d8d39e159 [ 233.520695][ T7416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.540322][ T7416] RSP: 002b:00007f8d8e25b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.548759][ T7416] RAX: ffffffffffffffda RBX: 00007f8d8d625fa0 RCX: 00007f8d8d39e159 [ 233.556750][ T7416] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 233.564739][ T7416] RBP: 00007f8d8e25b090 R08: 0000000000000000 R09: 0000000000000000 [ 233.572733][ T7416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.580725][ T7416] R13: 00007f8d8d626038 R14: 00007f8d8d625fa0 R15: 00007ffd0f8473a8 [ 233.588738][ T7416] [ 234.638955][ T7451] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 234.931878][ T7468] netlink: 'syz.2.1011': attribute type 27 has an invalid length. [ 234.955076][ T7468] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1011'. [ 235.148615][ T7479] netlink: 'syz.3.1014': attribute type 21 has an invalid length. [ 235.161386][ T7479] netlink: 'syz.3.1014': attribute type 1 has an invalid length. [ 235.181084][ T7479] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1014'. [ 237.889411][ T7542] netlink: 'syz.0.1034': attribute type 21 has an invalid length. [ 237.900595][ T7542] netlink: 'syz.0.1034': attribute type 12 has an invalid length. [ 237.914288][ T7542] netlink: 'syz.0.1034': attribute type 13 has an invalid length. [ 237.935036][ T7542] netlink: 'syz.0.1034': attribute type 14 has an invalid length. [ 237.954685][ T7542] netlink: 'syz.0.1034': attribute type 15 has an invalid length. [ 237.969981][ T7542] netlink: 'syz.0.1034': attribute type 16 has an invalid length. [ 237.987289][ T7542] netlink: 12926 bytes leftover after parsing attributes in process `syz.0.1034'. [ 238.077705][ T7536] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1027'. [ 238.456976][ T7579] FAULT_INJECTION: forcing a failure. [ 238.456976][ T7579] name failslab, interval 1, probability 0, space 0, times 0 [ 238.500993][ T7579] CPU: 1 PID: 7579 Comm: syz.3.1046 Not tainted syzkaller #0 [ 238.508441][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.518699][ T7579] Call Trace: [ 238.522012][ T7579] [ 238.524965][ T7579] dump_stack_lvl+0x188/0x24e [ 238.529679][ T7579] ? show_regs_print_info+0x12/0x12 [ 238.534915][ T7579] ? load_image+0x410/0x410 [ 238.539473][ T7579] should_fail_ex+0x390/0x4c0 [ 238.544194][ T7579] should_failslab+0x5/0x20 [ 238.547009][ T7576] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 238.548711][ T7579] slab_pre_alloc_hook+0x59/0x300 [ 238.548744][ T7579] kmem_cache_alloc+0x56/0x2f0 [ 238.548761][ T7579] ? skb_clone+0x1e7/0x370 [ 238.548784][ T7579] skb_clone+0x1e7/0x370 [ 238.573000][ T7579] bpf_clone_redirect+0x169/0x4a0 [ 238.578042][ T7579] bpf_prog_c9d58f5b8698340d+0x56/0x5b [ 238.583500][ T7579] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 238.589482][ T7579] ? __lock_acquire+0x7c40/0x7c40 [ 238.594507][ T7579] ? lock_chain_count+0x20/0x20 [ 238.599362][ T7579] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 238.605605][ T7579] ? lockdep_hardirqs_on+0x94/0x140 [ 238.610811][ T7579] ? ktime_get+0x7b/0x270 [ 238.615155][ T7579] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 238.621402][ T7579] ? ktime_get_real_ts64+0x440/0x440 [ 238.626694][ T7579] ? read_lock_is_recursive+0x10/0x10 [ 238.632078][ T7579] ? __cant_sleep+0x220/0x220 [ 238.636763][ T7579] ? bpf_test_timer_continue+0x142/0x380 [ 238.642406][ T7579] bpf_test_run+0x2b6/0x830 [ 238.646929][ T7579] ? dst_hold+0xb0/0xb0 [ 238.651184][ T7579] ? eth_get_headlen+0x200/0x200 [ 238.656128][ T7579] ? __build_skb+0x24b/0x3b0 [ 238.660723][ T7579] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 238.666112][ T7579] ? cpu_online+0xa0/0xa0 [ 238.670450][ T7579] bpf_prog_test_run+0x31c/0x390 [ 238.675498][ T7579] __sys_bpf+0x62b/0x780 [ 238.679751][ T7579] ? bpf_link_show_fdinfo+0x380/0x380 [ 238.685134][ T7579] ? lock_chain_count+0x20/0x20 [ 238.689991][ T7579] __x64_sys_bpf+0x78/0x90 [ 238.694407][ T7579] do_syscall_64+0x4c/0xa0 [ 238.698819][ T7579] ? clear_bhb_loop+0x60/0xb0 [ 238.703506][ T7579] ? clear_bhb_loop+0x60/0xb0 [ 238.708180][ T7579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.714078][ T7579] RIP: 0033:0x7f2888b9e159 [ 238.718495][ T7579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.738128][ T7579] RSP: 002b:00007f2889a31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.746579][ T7579] RAX: ffffffffffffffda RBX: 00007f2888e25fa0 RCX: 00007f2888b9e159 [ 238.754552][ T7579] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 238.762521][ T7579] RBP: 00007f2889a31090 R08: 0000000000000000 R09: 0000000000000000 [ 238.770491][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.778471][ T7579] R13: 00007f2888e26038 R14: 00007f2888e25fa0 R15: 00007ffc5441bf38 [ 238.786451][ T7579] [ 238.801067][ T7576] syzkaller1: linktype set to 786 [ 240.982875][ T7618] ¥: port 1(team0) entered blocking state [ 240.989428][ T7618] ¥: port 1(team0) entered disabled state [ 241.008228][ T7618] device team0 entered promiscuous mode [ 241.020574][ T7618] device team_slave_0 entered promiscuous mode [ 241.038146][ T7618] device team_slave_1 entered promiscuous mode [ 241.151474][ T7631] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1062'. [ 241.179832][ T7631] bridge_slave_1: default FDB implementation only supports local addresses [ 241.228939][ T7633] device team0 left promiscuous mode [ 241.238880][ T7633] device team_slave_0 left promiscuous mode [ 241.250955][ T7633] device team_slave_1 left promiscuous mode [ 241.271590][ T7633] ¥: port 1(team0) entered disabled state [ 241.338234][ T7636] netlink: 'syz.2.1067': attribute type 21 has an invalid length. [ 243.752318][ T7669] delete_channel: no stack [ 243.907293][ T7692] netlink: 'syz.3.1088': attribute type 27 has an invalid length. [ 243.941760][ T7692] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1088'. [ 244.155627][ T7701] netlink: 'syz.3.1092': attribute type 2 has an invalid length. [ 244.636847][ T7715] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1099'. [ 244.961105][ T7736] netlink: 'syz.4.1104': attribute type 29 has an invalid length. [ 244.969599][ T7736] netlink: 'syz.4.1104': attribute type 29 has an invalid length. [ 244.982033][ T7736] netlink: 'syz.4.1104': attribute type 29 has an invalid length. [ 244.990880][ T7736] netlink: 'syz.4.1104': attribute type 29 has an invalid length. [ 246.170233][ T7764] netlink: 'syz.2.1115': attribute type 10 has an invalid length. [ 246.210502][ T7764] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1115'. [ 246.263561][ T7764] device hsr0 entered promiscuous mode [ 246.297971][ T7764] bridge0: port 2(hsr0) entered blocking state [ 246.304912][ T7764] bridge0: port 2(hsr0) entered disabled state [ 246.316340][ T7764] bridge0: port 2(hsr0) entered blocking state [ 246.323490][ T7764] bridge0: port 2(hsr0) entered forwarding state [ 246.799265][ T7784] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1122'. [ 246.854894][ T7784] netlink: 'syz.0.1122': attribute type 10 has an invalid length. [ 251.954357][ T7879] sctp: [Deprecated]: syz.3.1156 (pid 7879) Use of int in maxseg socket option. [ 251.954357][ T7879] Use struct sctp_assoc_value instead [ 251.969726][ T7881] tun0: tun_chr_ioctl cmd 2147767507 [ 251.978930][ T7882] tun0: tun_chr_ioctl cmd 2147767507 [ 251.987310][ T7882] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1155'. [ 252.009105][ T7881] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1155'. [ 252.040658][ T7880] tun0: tun_chr_ioctl cmd 1074025673 [ 252.046548][ T7882] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1155'. [ 252.066172][ T7881] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 252.124773][ T7886] netlink: 'syz.1.1157': attribute type 3 has an invalid length. [ 252.142059][ T7886] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1157'. [ 253.550030][ T7937] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1174'. [ 253.564166][ T7937] device hsr_slave_0 left promiscuous mode [ 253.571981][ T7937] device hsr_slave_1 left promiscuous mode [ 254.409162][ T7951] netlink: 'syz.2.1178': attribute type 10 has an invalid length. [ 254.419627][ T7951] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1178'. [ 254.439219][ T7951] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 254.637938][ T7957] netlink: 'syz.3.1182': attribute type 10 has an invalid length. [ 254.664333][ T7957] team0: Device hsr_slave_0 failed to register rx_handler [ 254.712136][ T7966] FAULT_INJECTION: forcing a failure. [ 254.712136][ T7966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.727428][ T7967] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1180'. [ 254.753495][ T7966] CPU: 0 PID: 7966 Comm: syz.4.1185 Not tainted syzkaller #0 [ 254.760927][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.771004][ T7966] Call Trace: [ 254.774297][ T7966] [ 254.777244][ T7966] dump_stack_lvl+0x188/0x24e [ 254.781977][ T7966] ? show_regs_print_info+0x12/0x12 [ 254.787204][ T7966] ? load_image+0x410/0x410 [ 254.791734][ T7966] ? __lock_acquire+0x7c40/0x7c40 [ 254.794069][ T7967] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.1180'. [ 254.796762][ T7966] ? __might_fault+0x98/0x120 [ 254.810668][ T7966] should_fail_ex+0x390/0x4c0 [ 254.815361][ T7966] _copy_to_user+0x2c/0x130 [ 254.819881][ T7966] bpf_verifier_vlog+0x172/0x3a0 [ 254.824830][ T7966] __btf_verifier_log+0xdf/0x130 [ 254.829785][ T7966] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 254.835962][ T7966] ? btf_check_sec_info+0x350/0x350 [ 254.841187][ T7966] ? btf_parse_hdr+0x1dd/0x7d0 [ 254.845967][ T7966] btf_parse_hdr+0x3d5/0x7d0 [ 254.850574][ T7966] btf_new_fd+0x367/0x760 [ 254.854924][ T7966] __sys_bpf+0x612/0x780 [ 254.859192][ T7966] ? bpf_link_show_fdinfo+0x380/0x380 [ 254.864599][ T7966] ? lock_chain_count+0x20/0x20 [ 254.869463][ T7966] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 254.875474][ T7966] __x64_sys_bpf+0x78/0x90 [ 254.879914][ T7966] do_syscall_64+0x4c/0xa0 [ 254.884345][ T7966] ? clear_bhb_loop+0x60/0xb0 [ 254.889051][ T7966] ? clear_bhb_loop+0x60/0xb0 [ 254.893841][ T7966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.899770][ T7966] RIP: 0033:0x7fd36819e159 [ 254.904214][ T7966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.923847][ T7966] RSP: 002b:00007fd369132028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 254.932289][ T7966] RAX: ffffffffffffffda RBX: 00007fd368425fa0 RCX: 00007fd36819e159 [ 254.940285][ T7966] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 254.948279][ T7966] RBP: 00007fd369132090 R08: 0000000000000000 R09: 0000000000000000 [ 254.956273][ T7966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.964268][ T7966] R13: 00007fd368426038 R14: 00007fd368425fa0 R15: 00007ffde1ee1868 [ 254.972277][ T7966] [ 255.178944][ T7984] delete_channel: no stack [ 255.642780][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.649132][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.224409][ T8004] netlink: 'syz.0.1199': attribute type 3 has an invalid length. [ 256.244883][ T8004] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1199'. [ 256.465829][ T8018] netlink: 'syz.4.1201': attribute type 2 has an invalid length. [ 256.888926][ T8040] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1211'. [ 256.899250][ T8040] bridge_slave_1: default FDB implementation only supports local addresses [ 257.677983][ T8056] netlink: 'syz.0.1218': attribute type 10 has an invalid length. [ 257.711231][ T8056] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 257.744263][ T8059] netlink: 'syz.3.1220': attribute type 27 has an invalid length. [ 257.758284][ T8059] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1220'. [ 257.793898][ T8056] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 257.850965][ T8056] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 258.365524][ T8074] netlink: 'syz.2.1222': attribute type 39 has an invalid length. [ 259.348492][ T8086] FAULT_INJECTION: forcing a failure. [ 259.348492][ T8086] name failslab, interval 1, probability 0, space 0, times 0 [ 259.380561][ T8086] CPU: 1 PID: 8086 Comm: syz.4.1226 Not tainted syzkaller #0 [ 259.387996][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.398056][ T8086] Call Trace: [ 259.401333][ T8086] [ 259.404256][ T8086] dump_stack_lvl+0x188/0x24e [ 259.408933][ T8086] ? show_regs_print_info+0x12/0x12 [ 259.414126][ T8086] ? load_image+0x410/0x410 [ 259.418645][ T8086] ? __might_sleep+0xd0/0xd0 [ 259.423264][ T8086] ? __lock_acquire+0x7c40/0x7c40 [ 259.428304][ T8086] should_fail_ex+0x390/0x4c0 [ 259.432995][ T8086] should_failslab+0x5/0x20 [ 259.437498][ T8086] slab_pre_alloc_hook+0x59/0x300 [ 259.442526][ T8086] ? tomoyo_encode+0x28a/0x550 [ 259.447295][ T8086] __kmem_cache_alloc_node+0x4f/0x270 [ 259.452670][ T8086] ? tomoyo_encode+0x28a/0x550 [ 259.457432][ T8086] __kmalloc+0xa3/0x240 [ 259.461593][ T8086] tomoyo_encode+0x28a/0x550 [ 259.466186][ T8086] tomoyo_realpath_from_path+0x578/0x5c0 [ 259.471824][ T8086] ? tomoyo_domain+0xd2/0x120 [ 259.476504][ T8086] ? tomoyo_path_number_perm+0x205/0x650 [ 259.482133][ T8086] tomoyo_path_number_perm+0x22f/0x650 [ 259.487593][ T8086] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 259.493050][ T8086] ? ktime_get+0x7b/0x270 [ 259.497393][ T8086] ? __fget_files+0x28/0x460 [ 259.501994][ T8086] security_file_ioctl+0x6c/0xa0 [ 259.506936][ T8086] __se_sys_ioctl+0x48/0x170 [ 259.511530][ T8086] do_syscall_64+0x4c/0xa0 [ 259.515940][ T8086] ? clear_bhb_loop+0x60/0xb0 [ 259.520610][ T8086] ? clear_bhb_loop+0x60/0xb0 [ 259.525283][ T8086] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.531174][ T8086] RIP: 0033:0x7fd36819e159 [ 259.535586][ T8086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.555186][ T8086] RSP: 002b:00007fd369132028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.563601][ T8086] RAX: ffffffffffffffda RBX: 00007fd368425fa0 RCX: 00007fd36819e159 [ 259.571568][ T8086] RDX: 0000000000000005 RSI: 0000000000002400 RDI: 0000000000000003 [ 259.579557][ T8086] RBP: 00007fd369132090 R08: 0000000000000000 R09: 0000000000000000 [ 259.587523][ T8086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.595489][ T8086] R13: 00007fd368426038 R14: 00007fd368425fa0 R15: 00007ffde1ee1868 [ 259.603470][ T8086] [ 259.839576][ T8086] ERROR: Out of memory at tomoyo_realpath_from_path. [ 259.953414][ T8098] netlink: 'syz.0.1231': attribute type 2 has an invalid length. [ 259.962004][ T8098] netlink: 'syz.0.1231': attribute type 8 has an invalid length. [ 259.975582][ T8098] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1231'. [ 260.209253][ T8103] device syzkaller0 entered promiscuous mode [ 260.994718][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 262.045111][ T8125] netlink: 'syz.0.1239': attribute type 10 has an invalid length. [ 262.079799][ T8125] team0: Device gre0 is of different type [ 264.687319][ T8144] FAULT_INJECTION: forcing a failure. [ 264.687319][ T8144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.701143][ T8144] CPU: 0 PID: 8144 Comm: syz.0.1244 Not tainted syzkaller #0 [ 264.708521][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.718569][ T8144] Call Trace: [ 264.721841][ T8144] [ 264.724784][ T8144] dump_stack_lvl+0x188/0x24e [ 264.729455][ T8144] ? show_regs_print_info+0x12/0x12 [ 264.734689][ T8144] ? load_image+0x410/0x410 [ 264.739199][ T8144] ? __lock_acquire+0x7c40/0x7c40 [ 264.744228][ T8144] should_fail_ex+0x390/0x4c0 [ 264.748912][ T8144] _copy_from_user+0x2c/0x170 [ 264.753590][ T8144] ip_tunnel_siocdevprivate+0xbe/0x1e0 [ 264.759051][ T8144] ? ip_tunnel_update+0xc10/0xc10 [ 264.764077][ T8144] ? full_name_hash+0x8e/0xe0 [ 264.768753][ T8144] dev_ifsioc+0xa4a/0xd50 [ 264.773086][ T8144] ? dev_ioctl+0xe80/0xe80 [ 264.777503][ T8144] ? dev_load+0x1d/0x1e0 [ 264.781739][ T8144] ? dev_load+0x1d/0x1e0 [ 264.785990][ T8144] dev_ioctl+0x5f8/0xe80 [ 264.790230][ T8144] ? get_user_ifreq+0xc7/0x170 [ 264.795019][ T8144] sock_ioctl+0x679/0x700 [ 264.799353][ T8144] ? sock_poll+0x420/0x420 [ 264.803769][ T8144] ? bpf_lsm_file_free_security+0x10/0x10 [ 264.809490][ T8144] ? bpf_lsm_file_ioctl+0x5/0x10 [ 264.814422][ T8144] ? security_file_ioctl+0x7c/0xa0 [ 264.819529][ T8144] ? sock_poll+0x420/0x420 [ 264.823967][ T8144] __se_sys_ioctl+0xfa/0x170 [ 264.828565][ T8144] do_syscall_64+0x4c/0xa0 [ 264.832984][ T8144] ? clear_bhb_loop+0x60/0xb0 [ 264.837654][ T8144] ? clear_bhb_loop+0x60/0xb0 [ 264.842362][ T8144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.848254][ T8144] RIP: 0033:0x7f443759e159 [ 264.852674][ T8144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.872277][ T8144] RSP: 002b:00007f44384bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.880689][ T8144] RAX: ffffffffffffffda RBX: 00007f4437825fa0 RCX: 00007f443759e159 [ 264.888659][ T8144] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 264.896623][ T8144] RBP: 00007f44384bf090 R08: 0000000000000000 R09: 0000000000000000 [ 264.904592][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.912575][ T8144] R13: 00007f4437826038 R14: 00007f4437825fa0 R15: 00007ffe6e746ec8 [ 264.920551][ T8144] [ 264.942906][ T8157] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1249'. [ 265.122807][ T8163] netlink: 'syz.4.1252': attribute type 1 has an invalid length. [ 266.604317][ T8201] netlink: 'syz.3.1263': attribute type 27 has an invalid length. [ 266.620545][ T8201] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1263'. [ 266.885897][ T8211] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1268'. [ 266.914109][ T8214] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1269'. [ 267.945900][ T8246] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1283'. [ 268.427142][ T8272] FAULT_INJECTION: forcing a failure. [ 268.427142][ T8272] name failslab, interval 1, probability 0, space 0, times 0 [ 268.440522][ T8272] CPU: 0 PID: 8272 Comm: syz.1.1293 Not tainted syzkaller #0 [ 268.447926][ T8272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.458002][ T8272] Call Trace: [ 268.461330][ T8272] [ 268.464308][ T8272] dump_stack_lvl+0x188/0x24e [ 268.469007][ T8272] ? show_regs_print_info+0x12/0x12 [ 268.474214][ T8272] ? load_image+0x410/0x410 [ 268.478722][ T8272] should_fail_ex+0x390/0x4c0 [ 268.483405][ T8272] should_failslab+0x5/0x20 [ 268.487907][ T8272] slab_pre_alloc_hook+0x59/0x300 [ 268.492929][ T8272] kmem_cache_alloc+0x56/0x2f0 [ 268.497687][ T8272] ? skb_clone+0x1e7/0x370 [ 268.502100][ T8272] skb_clone+0x1e7/0x370 [ 268.506338][ T8272] bpf_clone_redirect+0x169/0x4a0 [ 268.511373][ T8272] bpf_prog_c9d58f5b8698340d+0x56/0x5b [ 268.516827][ T8272] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 268.522808][ T8272] ? __lock_acquire+0x7c40/0x7c40 [ 268.527833][ T8272] ? lock_chain_count+0x20/0x20 [ 268.532687][ T8272] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 268.538921][ T8272] ? lockdep_hardirqs_on+0x94/0x140 [ 268.544118][ T8272] ? ktime_get+0x7b/0x270 [ 268.548467][ T8272] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 268.554702][ T8272] ? ktime_get_real_ts64+0x440/0x440 [ 268.559987][ T8272] ? read_lock_is_recursive+0x10/0x10 [ 268.565367][ T8272] ? __cant_sleep+0x220/0x220 [ 268.570047][ T8272] ? bpf_test_timer_continue+0x142/0x380 [ 268.575677][ T8272] bpf_test_run+0x2b6/0x830 [ 268.580185][ T8272] ? dst_hold+0xb0/0xb0 [ 268.584340][ T8272] ? eth_get_headlen+0x200/0x200 [ 268.589276][ T8272] ? __build_skb+0x24b/0x3b0 [ 268.593874][ T8272] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 268.599269][ T8272] ? cpu_online+0xa0/0xa0 [ 268.603599][ T8272] bpf_prog_test_run+0x31c/0x390 [ 268.608540][ T8272] __sys_bpf+0x62b/0x780 [ 268.612784][ T8272] ? bpf_link_show_fdinfo+0x380/0x380 [ 268.618168][ T8272] ? lock_chain_count+0x20/0x20 [ 268.623024][ T8272] __x64_sys_bpf+0x78/0x90 [ 268.627440][ T8272] do_syscall_64+0x4c/0xa0 [ 268.631863][ T8272] ? clear_bhb_loop+0x60/0xb0 [ 268.636538][ T8272] ? clear_bhb_loop+0x60/0xb0 [ 268.641217][ T8272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.647124][ T8272] RIP: 0033:0x7f8d8d39e159 [ 268.651540][ T8272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.671142][ T8272] RSP: 002b:00007f8d8e25b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 268.679550][ T8272] RAX: ffffffffffffffda RBX: 00007f8d8d625fa0 RCX: 00007f8d8d39e159 [ 268.687517][ T8272] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 268.695481][ T8272] RBP: 00007f8d8e25b090 R08: 0000000000000000 R09: 0000000000000000 [ 268.703446][ T8272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 268.711410][ T8272] R13: 00007f8d8d626038 R14: 00007f8d8d625fa0 R15: 00007ffd0f8473a8 [ 268.719392][ T8272] [ 269.656443][ T8303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1305'. [ 269.763790][ T8310] netlink: 'syz.0.1308': attribute type 22 has an invalid length. [ 269.781146][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1308'. [ 270.756084][ T8341] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 270.771420][ T8341] dvmrp1: linktype set to 768 [ 270.950037][ T8347] netlink: 'syz.2.1323': attribute type 10 has an invalid length. [ 270.972800][ T8347] bridge0: port 2(hsr0) entered disabled state [ 270.979256][ T8347] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.038437][ T8347] bridge0: port 2(hsr0) entered blocking state [ 271.045561][ T8347] bridge0: port 2(hsr0) entered forwarding state [ 271.053720][ T8347] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.060935][ T8347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.097373][ T8347] team0: Port device bridge0 added [ 271.385700][ T8363] netlink: 'syz.0.1329': attribute type 27 has an invalid length. [ 271.400811][ T8363] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1329'. [ 272.174253][ T8378] netlink: 'syz.2.1335': attribute type 21 has an invalid length. [ 275.331577][ T8404] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 275.370635][ T8404] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 275.395718][ T8404] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 275.663479][ T8420] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1344'. [ 277.429925][ T8433] netlink: 'syz.1.1350': attribute type 3 has an invalid length. [ 277.460647][ T8433] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1350'. [ 278.252503][ T8468] netlink: 'syz.0.1364': attribute type 10 has an invalid length. [ 278.664541][ T8468] bridge0: port 3(dummy0) entered disabled state [ 278.671708][ T8468] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.680819][ T8468] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.735615][ T8468] bridge0: port 3(dummy0) entered blocking state [ 278.742490][ T8468] bridge0: port 3(dummy0) entered forwarding state [ 278.750026][ T8468] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.757517][ T8468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.765423][ T8468] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.773004][ T8468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.821690][ T8468] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 278.841480][ T8469] netlink: 'syz.0.1364': attribute type 10 has an invalid length. [ 278.861439][ T8482] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1368'. [ 278.880849][ T8469] bridge0: port 3(dummy0) entered disabled state [ 278.888317][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.896405][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.927401][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1369'. [ 279.061814][ T8487] netlink: 'syz.3.1369': attribute type 16 has an invalid length. [ 279.077923][ T8487] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1369'. [ 281.284163][ T8560] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1395'. [ 281.306578][ T8562] netlink: 'syz.4.1396': attribute type 21 has an invalid length. [ 283.249712][ T8593] netlink: 'syz.2.1407': attribute type 10 has an invalid length. [ 283.263892][ T8593] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1407'. [ 283.274888][ T8593] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 283.425342][ T8607] netlink: 'syz.1.1411': attribute type 15 has an invalid length. [ 283.433821][ T8607] netlink: 'syz.1.1411': attribute type 7 has an invalid length. [ 283.833798][ T8614] netlink: 'syz.4.1414': attribute type 10 has an invalid length. [ 283.913297][ T8614] team0: Device hsr_slave_0 failed to register rx_handler [ 284.265956][ T8622] FAULT_INJECTION: forcing a failure. [ 284.265956][ T8622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.297883][ T8622] CPU: 0 PID: 8622 Comm: syz.3.1416 Not tainted syzkaller #0 [ 284.305323][ T8622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.315403][ T8622] Call Trace: [ 284.318701][ T8622] [ 284.321653][ T8622] dump_stack_lvl+0x188/0x24e [ 284.326369][ T8622] ? show_regs_print_info+0x12/0x12 [ 284.331620][ T8622] ? load_image+0x410/0x410 [ 284.336155][ T8622] ? __lock_acquire+0x7c40/0x7c40 [ 284.341216][ T8622] should_fail_ex+0x390/0x4c0 [ 284.346030][ T8622] _copy_to_user+0x2c/0x130 [ 284.350581][ T8622] bpf_verifier_vlog+0x172/0x3a0 [ 284.355559][ T8622] __btf_verifier_log+0xdf/0x130 [ 284.360538][ T8622] ? btf_check_sec_info+0x350/0x350 [ 284.365771][ T8622] ? btf_parse_hdr+0x1dd/0x7d0 [ 284.370564][ T8622] btf_parse_hdr+0x400/0x7d0 [ 284.375185][ T8622] btf_new_fd+0x367/0x760 [ 284.379561][ T8622] __sys_bpf+0x612/0x780 [ 284.383841][ T8622] ? bpf_link_show_fdinfo+0x380/0x380 [ 284.389259][ T8622] ? lock_chain_count+0x20/0x20 [ 284.394141][ T8622] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 284.400168][ T8622] __x64_sys_bpf+0x78/0x90 [ 284.404606][ T8622] do_syscall_64+0x4c/0xa0 [ 284.409022][ T8622] ? clear_bhb_loop+0x60/0xb0 [ 284.413696][ T8622] ? clear_bhb_loop+0x60/0xb0 [ 284.418391][ T8622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.424285][ T8622] RIP: 0033:0x7f2888b9e159 [ 284.428704][ T8622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.448326][ T8622] RSP: 002b:00007f2889a31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 284.456746][ T8622] RAX: ffffffffffffffda RBX: 00007f2888e25fa0 RCX: 00007f2888b9e159 [ 284.464714][ T8622] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 284.472682][ T8622] RBP: 00007f2889a31090 R08: 0000000000000000 R09: 0000000000000000 [ 284.480649][ T8622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 284.488615][ T8622] R13: 00007f2888e26038 R14: 00007f2888e25fa0 R15: 00007ffc5441bf38 [ 284.496602][ T8622] [ 284.761228][ T8620] netlink: 'syz.0.1415': attribute type 2 has an invalid length. [ 284.792457][ T8620] netlink: 'syz.0.1415': attribute type 8 has an invalid length. [ 284.837839][ T8620] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1415'. [ 285.027750][ T8641] delete_channel: no stack [ 285.205165][ T8646] sock: sock_timestamping_bind_phc: sock not bind to device [ 286.180561][ T8678] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1436'. [ 286.523609][ T8697] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1441'. [ 286.571270][ T8697] device hsr_slave_0 left promiscuous mode [ 286.698810][ T8697] device hsr_slave_1 left promiscuous mode [ 286.746595][ T8697] nr0: port 1(hsr0) entered disabled state [ 286.806566][ T8697] device hsr0 left promiscuous mode [ 286.823860][ T8697] nr0: port 1(hsr0) entered disabled state [ 286.944046][ T8707] netlink: 'syz.0.1445': attribute type 10 has an invalid length. [ 286.957989][ T8707] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 287.004605][ T8707] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 287.125557][ T8707] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 288.214582][ T8744] FAULT_INJECTION: forcing a failure. [ 288.214582][ T8744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.322859][ T8744] CPU: 1 PID: 8744 Comm: syz.2.1454 Not tainted syzkaller #0 [ 288.330297][ T8744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.340373][ T8744] Call Trace: [ 288.343659][ T8744] [ 288.346606][ T8744] dump_stack_lvl+0x188/0x24e [ 288.351305][ T8744] ? show_regs_print_info+0x12/0x12 [ 288.356517][ T8744] ? load_image+0x410/0x410 [ 288.361043][ T8744] ? __lock_acquire+0x7c40/0x7c40 [ 288.366095][ T8744] should_fail_ex+0x390/0x4c0 [ 288.370795][ T8744] _copy_from_user+0x2c/0x170 [ 288.375496][ T8744] kstrtouint_from_user+0xda/0x170 [ 288.380630][ T8744] ? kstrtol_from_user+0x190/0x190 [ 288.385776][ T8744] proc_fail_nth_write+0x8b/0x200 [ 288.390825][ T8744] ? proc_fail_nth_read+0x220/0x220 [ 288.396039][ T8744] ? common_file_perm+0x171/0x1c0 [ 288.401115][ T8744] ? proc_fail_nth_read+0x220/0x220 [ 288.406342][ T8744] vfs_write+0x2dc/0x9a0 [ 288.410614][ T8744] ? file_end_write+0x250/0x250 [ 288.415485][ T8744] ? __fget_files+0x28/0x460 [ 288.420090][ T8744] ? __fget_files+0x3fc/0x460 [ 288.424786][ T8744] ? __fdget_pos+0x2ae/0x360 [ 288.429375][ T8744] ? ksys_write+0x70/0x260 [ 288.433792][ T8744] ksys_write+0x14d/0x260 [ 288.438129][ T8744] ? __ia32_sys_read+0x80/0x80 [ 288.442896][ T8744] ? lockdep_hardirqs_on+0x94/0x140 [ 288.448092][ T8744] do_syscall_64+0x4c/0xa0 [ 288.452501][ T8744] ? clear_bhb_loop+0x60/0xb0 [ 288.457169][ T8744] ? clear_bhb_loop+0x60/0xb0 [ 288.461838][ T8744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.467737][ T8744] RIP: 0033:0x7f4ebdb5e98e [ 288.472147][ T8744] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 288.491746][ T8744] RSP: 002b:00007f4ebeab2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 288.500157][ T8744] RAX: ffffffffffffffda RBX: 00007f4ebeab36c0 RCX: 00007f4ebdb5e98e [ 288.508129][ T8744] RDX: 0000000000000001 RSI: 00007f4ebeab30a0 RDI: 0000000000000005 [ 288.516101][ T8744] RBP: 00007f4ebeab3090 R08: 0000000000000000 R09: 0000000000000000 [ 288.524067][ T8744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.532069][ T8744] R13: 00007f4ebde26038 R14: 00007f4ebde25fa0 R15: 00007ffe345ba0b8 [ 288.540260][ T8744] [ 288.697664][ T8716] tipc: Subscription rejected, illegal request [ 288.967908][ T8754] device syzkaller0 entered promiscuous mode [ 289.034033][ T8752] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1456'. [ 291.456801][ T8766] netlink: 'syz.4.1461': attribute type 10 has an invalid length. [ 291.466717][ T8766] team0: Device gre0 is up. Set it down before adding it as a team port [ 291.809197][ T8806] ¥: port 1(team0) entered blocking state [ 291.821239][ T8806] ¥: port 1(team0) entered disabled state [ 291.865921][ T8806] device team0 entered promiscuous mode [ 291.917689][ T8806] device team_slave_1 entered promiscuous mode [ 291.944564][ T8806] device macvlan1 entered promiscuous mode [ 291.966451][ T8806] device bridge0 entered promiscuous mode [ 292.076620][ T8815] device team0 left promiscuous mode [ 292.101946][ T8815] device team_slave_1 left promiscuous mode [ 292.143764][ T8815] device macvlan1 left promiscuous mode [ 292.220722][ T8815] device bridge0 left promiscuous mode [ 292.226906][ T8815] ¥: port 1(team0) entered disabled state [ 293.112143][ T8840] netlink: 'syz.3.1483': attribute type 10 has an invalid length. [ 293.131854][ T8840] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1483'. [ 293.155617][ T8840] device dummy0 entered promiscuous mode [ 293.162631][ T8840] bridge0: port 3(dummy0) entered blocking state [ 293.169357][ T8840] bridge0: port 3(dummy0) entered disabled state [ 293.185039][ T8840] bridge0: port 3(dummy0) entered blocking state [ 293.191558][ T8840] bridge0: port 3(dummy0) entered forwarding state [ 293.262305][ T8844] netlink: 'syz.2.1484': attribute type 27 has an invalid length. [ 293.289537][ T8844] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1484'. [ 293.446223][ T8850] netlink: 'syz.2.1487': attribute type 29 has an invalid length. [ 293.463890][ T8850] netlink: 'syz.2.1487': attribute type 29 has an invalid length. [ 293.473127][ T8850] netlink: 'syz.2.1487': attribute type 29 has an invalid length. [ 295.659235][ T8914] FAULT_INJECTION: forcing a failure. [ 295.659235][ T8914] name failslab, interval 1, probability 0, space 0, times 0 [ 295.671979][ T8914] CPU: 1 PID: 8914 Comm: syz.3.1512 Not tainted syzkaller #0 [ 295.679373][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.689450][ T8914] Call Trace: [ 295.692737][ T8914] [ 295.695672][ T8914] dump_stack_lvl+0x188/0x24e [ 295.700453][ T8914] ? show_regs_print_info+0x12/0x12 [ 295.705664][ T8914] ? load_image+0x410/0x410 [ 295.710203][ T8914] should_fail_ex+0x390/0x4c0 [ 295.714904][ T8914] should_failslab+0x5/0x20 [ 295.719413][ T8914] slab_pre_alloc_hook+0x59/0x300 [ 295.724442][ T8914] ? __lock_acquire+0x7c40/0x7c40 [ 295.729473][ T8914] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 295.735748][ T8914] kmem_cache_alloc+0x56/0x2f0 [ 295.740525][ T8914] ? skb_clone+0x1e7/0x370 [ 295.744950][ T8914] skb_clone+0x1e7/0x370 [ 295.749196][ T8914] ? packet_rcv+0x46b/0x1300 [ 295.753802][ T8914] packet_rcv+0x5bf/0x1300 [ 295.758227][ T8914] ? fanout_init_data+0xf0/0xf0 [ 295.763084][ T8914] dev_queue_xmit_nit+0x5d1/0xba0 [ 295.768125][ T8914] ? dev_queue_xmit_nit+0x29/0xba0 [ 295.773249][ T8914] dev_hard_start_xmit+0x158/0x8b0 [ 295.778375][ T8914] ? validate_xmit_skb_list+0x120/0x120 [ 295.783939][ T8914] __dev_queue_xmit+0x1b4b/0x3810 [ 295.788978][ T8914] ? __dev_queue_xmit+0x281/0x3810 [ 295.794109][ T8914] ? netdev_core_pick_tx+0x360/0x360 [ 295.799508][ T8914] ? skb_release_data+0x1d3/0x7e0 [ 295.804550][ T8914] __bpf_redirect+0x8c7/0x1110 [ 295.809330][ T8914] bpf_clone_redirect+0x311/0x4a0 [ 295.814371][ T8914] bpf_prog_c9d58f5b8698340d+0x56/0x5b [ 295.819842][ T8914] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 295.825831][ T8914] ? __lock_acquire+0x7c40/0x7c40 [ 295.830868][ T8914] ? lock_chain_count+0x20/0x20 [ 295.835731][ T8914] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 295.841986][ T8914] ? lockdep_hardirqs_on+0x94/0x140 [ 295.847191][ T8914] ? ktime_get+0x7b/0x270 [ 295.851527][ T8914] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 295.857775][ T8914] ? ktime_get_real_ts64+0x440/0x440 [ 295.863068][ T8914] ? read_lock_is_recursive+0x10/0x10 [ 295.868467][ T8914] ? __cant_sleep+0x220/0x220 [ 295.873160][ T8914] ? bpf_test_timer_continue+0x142/0x380 [ 295.878810][ T8914] bpf_test_run+0x2b6/0x830 [ 295.883350][ T8914] ? dst_hold+0xb0/0xb0 [ 295.887519][ T8914] ? eth_get_headlen+0x200/0x200 [ 295.892463][ T8914] ? __build_skb+0x24b/0x3b0 [ 295.897068][ T8914] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 295.902474][ T8914] ? cpu_online+0xa0/0xa0 [ 295.906819][ T8914] bpf_prog_test_run+0x31c/0x390 [ 295.911769][ T8914] __sys_bpf+0x62b/0x780 [ 295.916027][ T8914] ? bpf_link_show_fdinfo+0x380/0x380 [ 295.921425][ T8914] ? lock_chain_count+0x20/0x20 [ 295.926300][ T8914] __x64_sys_bpf+0x78/0x90 [ 295.930731][ T8914] do_syscall_64+0x4c/0xa0 [ 295.935159][ T8914] ? clear_bhb_loop+0x60/0xb0 [ 295.939839][ T8914] ? clear_bhb_loop+0x60/0xb0 [ 295.944521][ T8914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.950425][ T8914] RIP: 0033:0x7f2888b9e159 [ 295.954846][ T8914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.974461][ T8914] RSP: 002b:00007f2889a31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.982881][ T8914] RAX: ffffffffffffffda RBX: 00007f2888e25fa0 RCX: 00007f2888b9e159 [ 295.990858][ T8914] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 295.998835][ T8914] RBP: 00007f2889a31090 R08: 0000000000000000 R09: 0000000000000000 [ 296.006812][ T8914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 296.014787][ T8914] R13: 00007f2888e26038 R14: 00007f2888e25fa0 R15: 00007ffc5441bf38 [ 296.022777][ T8914] [ 296.137084][ T8913] netlink: 'syz.4.1510': attribute type 10 has an invalid length. [ 296.446834][ T8913] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 297.063941][ T8950] netlink: 'syz.4.1522': attribute type 21 has an invalid length. [ 297.090430][ T8950] netlink: 9618 bytes leftover after parsing attributes in process `syz.4.1522'. [ 297.108812][ T8953] FAULT_INJECTION: forcing a failure. [ 297.108812][ T8953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.124176][ T8953] CPU: 0 PID: 8953 Comm: syz.2.1524 Not tainted syzkaller #0 [ 297.131605][ T8953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.141685][ T8953] Call Trace: [ 297.144983][ T8953] [ 297.147935][ T8953] dump_stack_lvl+0x188/0x24e [ 297.152645][ T8953] ? show_regs_print_info+0x12/0x12 [ 297.157875][ T8953] ? load_image+0x410/0x410 [ 297.162414][ T8953] ? __lock_acquire+0x7c40/0x7c40 [ 297.167481][ T8953] should_fail_ex+0x390/0x4c0 [ 297.172192][ T8953] _copy_to_user+0x2c/0x130 [ 297.176720][ T8953] bpf_test_finish+0x198/0x600 [ 297.181485][ T8953] ? convert_skb_to___skb+0x420/0x420 [ 297.186868][ T8953] ? bpf_test_init+0x119/0x140 [ 297.191648][ T8953] bpf_prog_test_run_xdp+0x827/0xf80 [ 297.196935][ T8953] ? __lock_acquire+0x7c40/0x7c40 [ 297.201980][ T8953] ? dev_put+0x80/0x80 [ 297.206082][ T8953] ? dev_put+0x80/0x80 [ 297.210174][ T8953] bpf_prog_test_run+0x31c/0x390 [ 297.215142][ T8953] __sys_bpf+0x62b/0x780 [ 297.219416][ T8953] ? bpf_link_show_fdinfo+0x380/0x380 [ 297.224829][ T8953] ? lock_chain_count+0x20/0x20 [ 297.229707][ T8953] __x64_sys_bpf+0x78/0x90 [ 297.234149][ T8953] do_syscall_64+0x4c/0xa0 [ 297.238588][ T8953] ? clear_bhb_loop+0x60/0xb0 [ 297.243281][ T8953] ? clear_bhb_loop+0x60/0xb0 [ 297.247978][ T8953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.253888][ T8953] RIP: 0033:0x7f4ebdb9e159 [ 297.258291][ T8953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.277906][ T8953] RSP: 002b:00007f4ebeab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 297.286350][ T8953] RAX: ffffffffffffffda RBX: 00007f4ebde25fa0 RCX: 00007f4ebdb9e159 [ 297.294347][ T8953] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 297.302340][ T8953] RBP: 00007f4ebeab3090 R08: 0000000000000000 R09: 0000000000000000 [ 297.310329][ T8953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 297.318321][ T8953] R13: 00007f4ebde26038 R14: 00007f4ebde25fa0 R15: 00007ffe345ba0b8 [ 297.326317][ T8953] [ 297.888804][ T8973] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 298.122195][ T8984] netlink: 'syz.4.1537': attribute type 1 has an invalid length. [ 298.142089][ T8984] netlink: 'syz.4.1537': attribute type 3 has an invalid length. [ 298.150129][ T8984] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1537'. [ 298.416827][ T8988] FAULT_INJECTION: forcing a failure. [ 298.416827][ T8988] name failslab, interval 1, probability 0, space 0, times 0 [ 298.452685][ T8988] CPU: 0 PID: 8988 Comm: syz.2.1539 Not tainted syzkaller #0 [ 298.460131][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.470207][ T8988] Call Trace: [ 298.473516][ T8988] [ 298.476472][ T8988] dump_stack_lvl+0x188/0x24e [ 298.481351][ T8988] ? show_regs_print_info+0x12/0x12 [ 298.486580][ T8988] ? load_image+0x410/0x410 [ 298.491120][ T8988] ? __might_sleep+0xd0/0xd0 [ 298.495735][ T8988] ? __lock_acquire+0x7c40/0x7c40 [ 298.500799][ T8988] should_fail_ex+0x390/0x4c0 [ 298.505509][ T8988] should_failslab+0x5/0x20 [ 298.510032][ T8988] slab_pre_alloc_hook+0x59/0x300 [ 298.515084][ T8988] ? __lock_acquire+0x138a/0x7c40 [ 298.520141][ T8988] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 298.525892][ T8988] __kmem_cache_alloc_node+0x4f/0x270 [ 298.531313][ T8988] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 298.537068][ T8988] __kmalloc+0xa3/0x240 [ 298.541264][ T8988] tomoyo_realpath_from_path+0xe2/0x5c0 [ 298.546828][ T8988] ? tomoyo_domain+0xd2/0x120 [ 298.551516][ T8988] ? tomoyo_path_number_perm+0x205/0x650 [ 298.557147][ T8988] tomoyo_path_number_perm+0x22f/0x650 [ 298.562601][ T8988] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 298.568057][ T8988] ? ksys_write+0x1ce/0x260 [ 298.572561][ T8988] ? common_file_perm+0x171/0x1c0 [ 298.577608][ T8988] ? __fget_files+0x28/0x460 [ 298.582205][ T8988] security_file_ioctl+0x6c/0xa0 [ 298.587145][ T8988] __se_sys_ioctl+0x48/0x170 [ 298.591734][ T8988] do_syscall_64+0x4c/0xa0 [ 298.596152][ T8988] ? clear_bhb_loop+0x60/0xb0 [ 298.600818][ T8988] ? clear_bhb_loop+0x60/0xb0 [ 298.605490][ T8988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.611403][ T8988] RIP: 0033:0x7f4ebdb9e159 [ 298.615830][ T8988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.635456][ T8988] RSP: 002b:00007f4ebeab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.643878][ T8988] RAX: ffffffffffffffda RBX: 00007f4ebde25fa0 RCX: 00007f4ebdb9e159 [ 298.651842][ T8988] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000003 [ 298.659808][ T8988] RBP: 00007f4ebeab3090 R08: 0000000000000000 R09: 0000000000000000 [ 298.667769][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.675745][ T8988] R13: 00007f4ebde26038 R14: 00007f4ebde25fa0 R15: 00007ffe345ba0b8 [ 298.683726][ T8988] [ 298.696704][ T8988] ERROR: Out of memory at tomoyo_realpath_from_path. [ 298.871778][ T9001] netlink: 'syz.3.1543': attribute type 10 has an invalid length. [ 298.879740][ T9001] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1543'. [ 298.914127][ T9001] device caif0 entered promiscuous mode [ 298.919728][ T9001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.223847][ T9017] netlink: 'syz.0.1548': attribute type 2 has an invalid length. [ 299.304756][ T9017] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1548'. [ 299.335528][ T9020] netlink: 'syz.3.1551': attribute type 2 has an invalid length. [ 299.380509][ T9020] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.1551'. [ 299.977240][ T9027] netlink: 'syz.1.1553': attribute type 27 has an invalid length. [ 299.997631][ T9027] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1553'. [ 300.246488][ T9032] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1555'. [ 301.771719][ T8716] wlan1: Trigger new scan to find an IBSS to join [ 301.858191][ T9050] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1562'. [ 302.401346][ T9075] netlink: 'syz.2.1572': attribute type 2 has an invalid length. [ 302.437923][ T9075] netlink: 'syz.2.1572': attribute type 1 has an invalid length. [ 303.178532][ T9104] FAULT_INJECTION: forcing a failure. [ 303.178532][ T9104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.197502][ T9104] CPU: 0 PID: 9104 Comm: syz.1.1583 Not tainted syzkaller #0 [ 303.204925][ T9104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.215012][ T9104] Call Trace: [ 303.218291][ T9104] [ 303.221221][ T9104] dump_stack_lvl+0x188/0x24e [ 303.225905][ T9104] ? show_regs_print_info+0x12/0x12 [ 303.231100][ T9104] ? load_image+0x410/0x410 [ 303.235601][ T9104] ? __lock_acquire+0x7c40/0x7c40 [ 303.240652][ T9104] should_fail_ex+0x390/0x4c0 [ 303.245346][ T9104] _copy_to_user+0x2c/0x130 [ 303.249846][ T9104] bpf_test_finish+0x198/0x600 [ 303.254626][ T9104] ? convert_skb_to___skb+0x420/0x420 [ 303.259999][ T9104] ? bpf_test_init+0x119/0x140 [ 303.264765][ T9104] bpf_prog_test_run_xdp+0x827/0xf80 [ 303.270050][ T9104] ? __lock_acquire+0x7c40/0x7c40 [ 303.275080][ T9104] ? dev_put+0x80/0x80 [ 303.279153][ T9104] ? dev_put+0x80/0x80 [ 303.283218][ T9104] bpf_prog_test_run+0x31c/0x390 [ 303.288159][ T9104] __sys_bpf+0x62b/0x780 [ 303.292403][ T9104] ? bpf_link_show_fdinfo+0x380/0x380 [ 303.297781][ T9104] ? lock_chain_count+0x20/0x20 [ 303.302632][ T9104] __x64_sys_bpf+0x78/0x90 [ 303.307046][ T9104] do_syscall_64+0x4c/0xa0 [ 303.311454][ T9104] ? clear_bhb_loop+0x60/0xb0 [ 303.316125][ T9104] ? clear_bhb_loop+0x60/0xb0 [ 303.320795][ T9104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.326688][ T9104] RIP: 0033:0x7f8d8d39e159 [ 303.331099][ T9104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.350694][ T9104] RSP: 002b:00007f8d8e25b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 303.359105][ T9104] RAX: ffffffffffffffda RBX: 00007f8d8d625fa0 RCX: 00007f8d8d39e159 [ 303.367071][ T9104] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 303.375038][ T9104] RBP: 00007f8d8e25b090 R08: 0000000000000000 R09: 0000000000000000 [ 303.383018][ T9104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 303.390998][ T9104] R13: 00007f8d8d626038 R14: 00007f8d8d625fa0 R15: 00007ffd0f8473a8 [ 303.398986][ T9104] [ 304.589807][ T9143] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1595'. [ 305.061210][ T9162] netlink: 'syz.2.1603': attribute type 49 has an invalid length. [ 305.770685][ T8720] wlan1: Trigger new scan to find an IBSS to join [ 306.264912][ T9197] netlink: 'syz.4.1615': attribute type 3 has an invalid length. [ 306.274725][ T9197] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1615'. [ 306.311669][ T9164] team0: Port device macvlan1 removed [ 306.381417][ T9201] syz.3.1618[9201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.381580][ T9201] syz.3.1618[9201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.440981][ T9205] syz.3.1618[9205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.469179][ T9208] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1619'. [ 306.591704][ T9205] syz.3.1618[9205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.632901][ T9198] device syzkaller0 entered promiscuous mode [ 306.692165][ T8720] wlan1: Creating new IBSS network, BSSID 42:29:b1:f3:6d:c4 [ 306.719850][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 309.572829][ T9242] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1630'. [ 309.588332][ T9240] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1630'. [ 309.615568][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 309.639604][ T9258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.743720][ T9268] FAULT_INJECTION: forcing a failure. [ 309.743720][ T9268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.781454][ T9268] CPU: 1 PID: 9268 Comm: syz.3.1639 Not tainted syzkaller #0 [ 309.788888][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.798962][ T9268] Call Trace: [ 309.802271][ T9268] [ 309.805255][ T9268] dump_stack_lvl+0x188/0x24e [ 309.809970][ T9268] ? show_regs_print_info+0x12/0x12 [ 309.815180][ T9268] ? load_image+0x410/0x410 [ 309.819684][ T9268] ? __lock_acquire+0x7c40/0x7c40 [ 309.824711][ T9268] should_fail_ex+0x390/0x4c0 [ 309.829388][ T9268] _copy_to_user+0x2c/0x130 [ 309.833887][ T9268] bpf_verifier_vlog+0x172/0x3a0 [ 309.838830][ T9268] __btf_verifier_log+0xdf/0x130 [ 309.843767][ T9268] ? lock_chain_count+0x20/0x20 [ 309.848614][ T9268] ? btf_check_sec_info+0x350/0x350 [ 309.853816][ T9268] ? lockdep_hardirqs_on+0x94/0x140 [ 309.859008][ T9268] ? btf_parse_hdr+0x1dd/0x7d0 [ 309.863766][ T9268] btf_parse_hdr+0x42b/0x7d0 [ 309.868352][ T9268] btf_new_fd+0x367/0x760 [ 309.872679][ T9268] __sys_bpf+0x612/0x780 [ 309.876932][ T9268] ? bpf_link_show_fdinfo+0x380/0x380 [ 309.882307][ T9268] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 309.888464][ T9268] __x64_sys_bpf+0x78/0x90 [ 309.892876][ T9268] do_syscall_64+0x4c/0xa0 [ 309.897284][ T9268] ? clear_bhb_loop+0x60/0xb0 [ 309.901979][ T9268] ? clear_bhb_loop+0x60/0xb0 [ 309.906649][ T9268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.912538][ T9268] RIP: 0033:0x7f2888b9e159 [ 309.916979][ T9268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.936585][ T9268] RSP: 002b:00007f2889a31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.945003][ T9268] RAX: ffffffffffffffda RBX: 00007f2888e25fa0 RCX: 00007f2888b9e159 [ 309.952969][ T9268] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 309.960936][ T9268] RBP: 00007f2889a31090 R08: 0000000000000000 R09: 0000000000000000 [ 309.968900][ T9268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 309.976866][ T9268] R13: 00007f2888e26038 R14: 00007f2888e25fa0 R15: 00007ffc5441bf38 [ 309.984844][ T9268] [ 310.107200][ T9274] bond0: (slave bridge_slave_1): Error: Slave has XDP program loaded, please unload before enslaving [ 310.155525][ T9278] netlink: 'syz.4.1642': attribute type 10 has an invalid length. [ 310.202357][ T9278] team0: Device hsr_slave_0 failed to register rx_handler [ 310.229409][ T9283] netlink: 'syz.3.1645': attribute type 2 has an invalid length. [ 310.279497][ T9282] netlink: 'syz.3.1645': attribute type 2 has an invalid length. [ 310.300592][ T9283] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1645'. [ 310.358313][ T9282] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1645'. [ 310.397099][ T9288] netlink: 'syz.3.1645': attribute type 29 has an invalid length. [ 310.425323][ T9288] netlink: 'syz.3.1645': attribute type 29 has an invalid length. [ 310.495404][ T9289] netlink: 'syz.3.1645': attribute type 29 has an invalid length. [ 310.567957][ T9283] netlink: 'syz.3.1645': attribute type 2 has an invalid length. [ 310.582501][ T9282] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1645'. [ 310.768552][ T9282] bridge0: port 3(dummy0) entered disabled state [ 310.778621][ T9292] delete_channel: no stack [ 310.843099][ T9282] bridge0: port 3(dummy0) entered disabled state [ 311.214467][ T9303] netlink: 'syz.4.1648': attribute type 1 has an invalid length. [ 311.246603][ T9303] netlink: 'syz.4.1648': attribute type 3 has an invalid length. [ 311.296090][ T9303] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1648'. [ 311.813928][ T9336] netlink: 'syz.0.1660': attribute type 2 has an invalid length. [ 311.969359][ T9349] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1662'. [ 312.005750][ T9349] bridge_slave_1: default FDB implementation only supports local addresses [ 312.717586][ T9352] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1663'. [ 312.750787][ T9355] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1663'. [ 312.986612][ T9374] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 313.031950][ T9374] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 313.063410][ T9374] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 313.325652][ T9390] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1675'. [ 314.444915][ T9412] team0: Device gre0 is up. Set it down before adding it as a team port [ 314.528109][ T9414] device syzkaller0 entered promiscuous mode [ 317.053433][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.059788][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.401422][ T9442] delete_channel: no stack [ 317.771875][ T9460] validate_nla: 4 callbacks suppressed [ 317.771909][ T9460] netlink: 'syz.2.1702': attribute type 27 has an invalid length. [ 317.779580][ T9457] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1703'. [ 317.810770][ T9460] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1702'. [ 317.833811][ T9463] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1703'. [ 317.899416][ T9468] netlink: 'syz.1.1706': attribute type 33 has an invalid length. [ 317.930474][ T9468] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1706'. [ 318.015643][ T9457] can: request_module (can-proto-0) failed. [ 318.507283][ T9486] netlink: 'syz.2.1714': attribute type 21 has an invalid length. [ 318.517463][ T9486] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1714'. [ 318.527080][ T9486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1714'. [ 318.537528][ T9487] netlink: 'syz.1.1711': attribute type 16 has an invalid length. [ 318.549619][ T9487] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1711'. [ 318.566707][ T9487] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 318.803936][ T9500] netlink: 'syz.1.1719': attribute type 29 has an invalid length. [ 318.818591][ T9500] netlink: 'syz.1.1719': attribute type 29 has an invalid length. [ 318.835587][ T9500] netlink: 'syz.1.1719': attribute type 29 has an invalid length. [ 319.223188][ T9519] sock: sock_set_timeout: `syz.1.1728' (pid 9519) tries to set negative timeout [ 319.277105][ T9528] FAULT_INJECTION: forcing a failure. [ 319.277105][ T9528] name failslab, interval 1, probability 0, space 0, times 0 [ 319.290464][ T9528] CPU: 1 PID: 9528 Comm: syz.0.1729 Not tainted syzkaller #0 [ 319.297876][ T9528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.307956][ T9528] Call Trace: [ 319.311234][ T9528] [ 319.314165][ T9528] dump_stack_lvl+0x188/0x24e [ 319.318842][ T9528] ? show_regs_print_info+0x12/0x12 [ 319.324026][ T9528] ? load_image+0x410/0x410 [ 319.328524][ T9528] should_fail_ex+0x390/0x4c0 [ 319.333201][ T9528] should_failslab+0x5/0x20 [ 319.337706][ T9528] slab_pre_alloc_hook+0x59/0x300 [ 319.342724][ T9528] kmem_cache_alloc+0x56/0x2f0 [ 319.347476][ T9528] ? skb_clone+0x1e7/0x370 [ 319.351895][ T9528] skb_clone+0x1e7/0x370 [ 319.356143][ T9528] bpf_clone_redirect+0x169/0x4a0 [ 319.361172][ T9528] bpf_prog_c9d58f5b8698340d+0x56/0x5b [ 319.366627][ T9528] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 319.372607][ T9528] ? __lock_acquire+0x7c40/0x7c40 [ 319.377627][ T9528] ? lock_chain_count+0x20/0x20 [ 319.382474][ T9528] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 319.388710][ T9528] ? lockdep_hardirqs_on+0x94/0x140 [ 319.393903][ T9528] ? ktime_get+0x7b/0x270 [ 319.398223][ T9528] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 319.404461][ T9528] ? ktime_get_real_ts64+0x440/0x440 [ 319.409742][ T9528] ? read_lock_is_recursive+0x10/0x10 [ 319.415119][ T9528] ? __cant_sleep+0x220/0x220 [ 319.419798][ T9528] ? bpf_test_timer_continue+0x142/0x380 [ 319.425433][ T9528] bpf_test_run+0x2b6/0x830 [ 319.429948][ T9528] ? dst_hold+0xb0/0xb0 [ 319.434103][ T9528] ? eth_get_headlen+0x200/0x200 [ 319.439045][ T9528] ? __build_skb+0x24b/0x3b0 [ 319.443649][ T9528] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 319.449057][ T9528] ? cpu_online+0xa0/0xa0 [ 319.453399][ T9528] bpf_prog_test_run+0x31c/0x390 [ 319.458342][ T9528] __sys_bpf+0x62b/0x780 [ 319.462586][ T9528] ? bpf_link_show_fdinfo+0x380/0x380 [ 319.467980][ T9528] ? lock_chain_count+0x20/0x20 [ 319.472837][ T9528] __x64_sys_bpf+0x78/0x90 [ 319.477259][ T9528] do_syscall_64+0x4c/0xa0 [ 319.481669][ T9528] ? clear_bhb_loop+0x60/0xb0 [ 319.486340][ T9528] ? clear_bhb_loop+0x60/0xb0 [ 319.491008][ T9528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.496903][ T9528] RIP: 0033:0x7f443759e159 [ 319.501312][ T9528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.520912][ T9528] RSP: 002b:00007f44384bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 319.529321][ T9528] RAX: ffffffffffffffda RBX: 00007f4437825fa0 RCX: 00007f443759e159 [ 319.537288][ T9528] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 319.545258][ T9528] RBP: 00007f44384bf090 R08: 0000000000000000 R09: 0000000000000000 [ 319.553224][ T9528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 319.561188][ T9528] R13: 00007f4437826038 R14: 00007f4437825fa0 R15: 00007ffe6e746ec8 [ 319.569169][ T9528] [ 320.172704][ T9565] FAULT_INJECTION: forcing a failure. [ 320.172704][ T9565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.196387][ T9565] CPU: 1 PID: 9565 Comm: syz.1.1744 Not tainted syzkaller #0 [ 320.203824][ T9565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.213900][ T9565] Call Trace: [ 320.217202][ T9565] [ 320.220147][ T9565] dump_stack_lvl+0x188/0x24e [ 320.224860][ T9565] ? show_regs_print_info+0x12/0x12 [ 320.230083][ T9565] ? load_image+0x410/0x410 [ 320.234617][ T9565] ? __lock_acquire+0x7c40/0x7c40 [ 320.239676][ T9565] should_fail_ex+0x390/0x4c0 [ 320.244393][ T9565] _copy_to_user+0x2c/0x130 [ 320.248918][ T9565] bpf_test_finish+0x266/0x600 [ 320.253706][ T9565] ? convert_skb_to___skb+0x420/0x420 [ 320.259083][ T9565] ? bpf_test_init+0x119/0x140 [ 320.263848][ T9565] bpf_prog_test_run_xdp+0x827/0xf80 [ 320.269130][ T9565] ? __lock_acquire+0x7c40/0x7c40 [ 320.274170][ T9565] ? dev_put+0x80/0x80 [ 320.278243][ T9565] ? dev_put+0x80/0x80 [ 320.282308][ T9565] bpf_prog_test_run+0x31c/0x390 [ 320.287248][ T9565] __sys_bpf+0x62b/0x780 [ 320.291489][ T9565] ? bpf_link_show_fdinfo+0x380/0x380 [ 320.296871][ T9565] ? lock_chain_count+0x20/0x20 [ 320.301736][ T9565] __x64_sys_bpf+0x78/0x90 [ 320.306152][ T9565] do_syscall_64+0x4c/0xa0 [ 320.310573][ T9565] ? clear_bhb_loop+0x60/0xb0 [ 320.315243][ T9565] ? clear_bhb_loop+0x60/0xb0 [ 320.319911][ T9565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.325804][ T9565] RIP: 0033:0x7f8d8d39e159 [ 320.330219][ T9565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.349822][ T9565] RSP: 002b:00007f8d8e25b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 320.358233][ T9565] RAX: ffffffffffffffda RBX: 00007f8d8d625fa0 RCX: 00007f8d8d39e159 [ 320.366203][ T9565] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 320.374172][ T9565] RBP: 00007f8d8e25b090 R08: 0000000000000000 R09: 0000000000000000 [ 320.382138][ T9565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 320.390110][ T9565] R13: 00007f8d8d626038 R14: 00007f8d8d625fa0 R15: 00007ffd0f8473a8 [ 320.398092][ T9565] [ 321.016742][ T9589] netlink: 'syz.2.1751': attribute type 10 has an invalid length. [ 321.207902][ T9589] team0 (unregistering): Port device team_slave_1 removed [ 321.221055][ T9589] bridge0: port 2(hsr0) entered disabled state [ 321.227712][ T9589] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.276919][ T9589] team0 (unregistering): Port device bridge0 removed [ 321.323044][ T9601] IPv6: Can't replace route, no match found [ 321.544927][ T9608] FAULT_INJECTION: forcing a failure. [ 321.544927][ T9608] name failslab, interval 1, probability 0, space 0, times 0 [ 321.595308][ T9608] CPU: 0 PID: 9608 Comm: syz.1.1760 Not tainted syzkaller #0 [ 321.602739][ T9608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 321.612818][ T9608] Call Trace: [ 321.616116][ T9608] [ 321.619056][ T9608] dump_stack_lvl+0x188/0x24e [ 321.623756][ T9608] ? show_regs_print_info+0x12/0x12 [ 321.628973][ T9608] ? load_image+0x410/0x410 [ 321.633505][ T9608] ? __might_sleep+0xd0/0xd0 [ 321.638130][ T9608] ? __lock_acquire+0x7c40/0x7c40 [ 321.643183][ T9608] should_fail_ex+0x390/0x4c0 [ 321.647888][ T9608] should_failslab+0x5/0x20 [ 321.652407][ T9608] slab_pre_alloc_hook+0x59/0x300 [ 321.657471][ T9608] ? tomoyo_encode+0x28a/0x550 [ 321.662256][ T9608] __kmem_cache_alloc_node+0x4f/0x270 [ 321.667648][ T9608] ? tomoyo_encode+0x28a/0x550 [ 321.672428][ T9608] __kmalloc+0xa3/0x240 [ 321.676619][ T9608] tomoyo_encode+0x28a/0x550 [ 321.681233][ T9608] tomoyo_realpath_from_path+0x578/0x5c0 [ 321.686888][ T9608] ? tomoyo_domain+0xd2/0x120 [ 321.691589][ T9608] ? tomoyo_path_number_perm+0x205/0x650 [ 321.697239][ T9608] tomoyo_path_number_perm+0x22f/0x650 [ 321.702718][ T9608] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 321.708193][ T9608] ? ksys_write+0x1ce/0x260 [ 321.712715][ T9608] ? common_file_perm+0x171/0x1c0 [ 321.717789][ T9608] ? __fget_files+0x28/0x460 [ 321.722415][ T9608] security_file_ioctl+0x6c/0xa0 [ 321.727385][ T9608] __se_sys_ioctl+0x48/0x170 [ 321.732001][ T9608] do_syscall_64+0x4c/0xa0 [ 321.736433][ T9608] ? clear_bhb_loop+0x60/0xb0 [ 321.741129][ T9608] ? clear_bhb_loop+0x60/0xb0 [ 321.745822][ T9608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.751744][ T9608] RIP: 0033:0x7f8d8d39e159 [ 321.756176][ T9608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.777634][ T9608] RSP: 002b:00007f8d8e25b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.786089][ T9608] RAX: ffffffffffffffda RBX: 00007f8d8d625fa0 RCX: 00007f8d8d39e159 [ 321.794081][ T9608] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000003 [ 321.802074][ T9608] RBP: 00007f8d8e25b090 R08: 0000000000000000 R09: 0000000000000000 [ 321.810068][ T9608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.818072][ T9608] R13: 00007f8d8d626038 R14: 00007f8d8d625fa0 R15: 00007ffd0f8473a8 [ 321.826076][ T9608] [ 321.833976][ T9608] ERROR: Out of memory at tomoyo_realpath_from_path. [ 321.844644][ T9606] netlink: 'syz.0.1759': attribute type 2 has an invalid length. [ 321.871873][ T9606] netlink: 'syz.0.1759': attribute type 8 has an invalid length. [ 321.879874][ T9606] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1759'. [ 322.683218][ T9645] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1770'. [ 322.939007][ T9653] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1773'. [ 323.033703][ T9658] validate_nla: 2 callbacks suppressed [ 323.033720][ T9658] netlink: 'syz.1.1776': attribute type 21 has an invalid length. [ 323.064823][ T9658] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1776'. [ 324.051890][ T9701] netlink: 'syz.1.1791': attribute type 19 has an invalid length. [ 324.060008][ T9701] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.1791'. [ 324.271090][ T9711] FAULT_INJECTION: forcing a failure. [ 324.271090][ T9711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.310422][ T9711] CPU: 0 PID: 9711 Comm: syz.4.1795 Not tainted syzkaller #0 [ 324.317869][ T9711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.327945][ T9711] Call Trace: [ 324.331248][ T9711] [ 324.334206][ T9711] dump_stack_lvl+0x188/0x24e [ 324.338889][ T9711] ? show_regs_print_info+0x12/0x12 [ 324.344107][ T9711] ? load_image+0x410/0x410 [ 324.348627][ T9711] ? __lock_acquire+0x7c40/0x7c40 [ 324.353659][ T9711] should_fail_ex+0x390/0x4c0 [ 324.358340][ T9711] _copy_to_user+0x2c/0x130 [ 324.362837][ T9711] bpf_test_finish+0x4a2/0x600 [ 324.367626][ T9711] ? convert_skb_to___skb+0x420/0x420 [ 324.373023][ T9711] ? bpf_test_init+0x119/0x140 [ 324.377800][ T9711] bpf_prog_test_run_xdp+0x827/0xf80 [ 324.383098][ T9711] ? __lock_acquire+0x7c40/0x7c40 [ 324.388128][ T9711] ? dev_put+0x80/0x80 [ 324.392220][ T9711] ? dev_put+0x80/0x80 [ 324.396288][ T9711] bpf_prog_test_run+0x31c/0x390 [ 324.401224][ T9711] __sys_bpf+0x62b/0x780 [ 324.405489][ T9711] ? bpf_link_show_fdinfo+0x380/0x380 [ 324.410867][ T9711] ? lock_chain_count+0x20/0x20 [ 324.415719][ T9711] __x64_sys_bpf+0x78/0x90 [ 324.420131][ T9711] do_syscall_64+0x4c/0xa0 [ 324.424537][ T9711] ? clear_bhb_loop+0x60/0xb0 [ 324.429222][ T9711] ? clear_bhb_loop+0x60/0xb0 [ 324.433894][ T9711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.439782][ T9711] RIP: 0033:0x7fd36819e159 [ 324.444195][ T9711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.463797][ T9711] RSP: 002b:00007fd369132028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.472207][ T9711] RAX: ffffffffffffffda RBX: 00007fd368425fa0 RCX: 00007fd36819e159 [ 324.480175][ T9711] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 324.488144][ T9711] RBP: 00007fd369132090 R08: 0000000000000000 R09: 0000000000000000 [ 324.496112][ T9711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 324.504086][ T9711] R13: 00007fd368426038 R14: 00007fd368425fa0 R15: 00007ffde1ee1868 [ 324.512067][ T9711] [ 325.431363][ T9732] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1803'. [ 325.820221][ T9754] IPv6: Can't replace route, no match found [ 326.733018][ T9785] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1822'. [ 327.087833][ T9785] team0: Port device team_slave_0 removed [ 327.177938][ T9790] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1823'. [ 327.199205][ T9788] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1823'. [ 327.228419][ T9796] netlink: 'syz.1.1823': attribute type 11 has an invalid length. [ 327.276914][ T9788] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1823'. [ 327.405627][ T9788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.446033][ T9788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.473083][ T9788] bond0 (unregistering): Released all slaves [ 327.697703][ T9814] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1831'. [ 328.443622][ T9837] netlink: 'syz.4.1840': attribute type 3 has an invalid length. [ 328.452415][ T9837] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1840'. [ 329.942425][ T9849] device syzkaller0 entered promiscuous mode [ 330.034282][ T9860] FAULT_INJECTION: forcing a failure. [ 330.034282][ T9860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.078345][ T9860] CPU: 1 PID: 9860 Comm: syz.1.1849 Not tainted syzkaller #0 [ 330.085780][ T9860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.095844][ T9860] Call Trace: [ 330.099135][ T9860] [ 330.102075][ T9860] dump_stack_lvl+0x188/0x24e [ 330.106769][ T9860] ? show_regs_print_info+0x12/0x12 [ 330.111988][ T9860] ? load_image+0x410/0x410 [ 330.116522][ T9860] ? __lock_acquire+0x7c40/0x7c40 [ 330.121584][ T9860] should_fail_ex+0x390/0x4c0 [ 330.126291][ T9860] _copy_to_user+0x2c/0x130 [ 330.130812][ T9860] bpf_verifier_vlog+0x172/0x3a0 [ 330.135812][ T9860] __btf_verifier_log+0xdf/0x130 [ 330.140754][ T9860] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 330.146915][ T9860] ? btf_check_sec_info+0x350/0x350 [ 330.152125][ T9860] btf_parse_hdr+0x456/0x7d0 [ 330.156718][ T9860] btf_new_fd+0x367/0x760 [ 330.161047][ T9860] __sys_bpf+0x612/0x780 [ 330.165287][ T9860] ? bpf_link_show_fdinfo+0x380/0x380 [ 330.170675][ T9860] ? lock_chain_count+0x20/0x20 [ 330.175537][ T9860] __x64_sys_bpf+0x78/0x90 [ 330.179963][ T9860] do_syscall_64+0x4c/0xa0 [ 330.184378][ T9860] ? clear_bhb_loop+0x60/0xb0 [ 330.189059][ T9860] ? clear_bhb_loop+0x60/0xb0 [ 330.193734][ T9860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.199625][ T9860] RIP: 0033:0x7f8d8d39e159 [ 330.204033][ T9860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.223651][ T9860] RSP: 002b:00007f8d8e25b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 330.232060][ T9860] RAX: ffffffffffffffda RBX: 00007f8d8d625fa0 RCX: 00007f8d8d39e159 [ 330.240025][ T9860] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 330.247990][ T9860] RBP: 00007f8d8e25b090 R08: 0000000000000000 R09: 0000000000000000 [ 330.255953][ T9860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 330.263914][ T9860] R13: 00007f8d8d626038 R14: 00007f8d8d625fa0 R15: 00007ffd0f8473a8 [ 330.271912][ T9860] [ 330.747503][ T9876] delete_channel: no stack [ 331.843010][ T9863] netlink: 'syz.0.1850': attribute type 10 has an invalid length. [ 331.853490][ T9863] team0: Port device hsr_slave_0 added [ 331.870734][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.879116][ T9885] netlink: 'syz.3.1859': attribute type 10 has an invalid length. [ 332.504600][ T9917] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1870'. [ 332.834050][ T9932] netlink: 'syz.3.1877': attribute type 10 has an invalid length. [ 332.849740][ T9932] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 332.867081][ T9932] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 332.881265][ T9932] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 333.017524][ T9939] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1879'. [ 333.052376][ C1] [ 333.052384][ C1] ================================ [ 333.052389][ C1] WARNING: inconsistent lock state [ 333.052414][ C1] syzkaller #0 Not tainted [ 333.052422][ C1] -------------------------------- [ 333.052426][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 333.052433][ C1] syz.0.1879/9939 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 333.052448][ C1] ffff88801968ba38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x8e/0x620 [ 333.052498][ C1] {INITIAL USE} state was registered at: [ 333.052505][ C1] lock_acquire+0x1bb/0x4a0 [ 333.052526][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 333.052548][ C1] trie_update_elem+0xbe/0xd40 [ 333.052567][ C1] bpf_map_update_value+0x59d/0x670 [ 333.052585][ C1] map_update_elem+0x4fa/0x6a0 [ 333.052603][ C1] __sys_bpf+0x4ec/0x780 [ 333.052621][ C1] __x64_sys_bpf+0x78/0x90 [ 333.052638][ C1] do_syscall_64+0x4c/0xa0 [ 333.052653][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.052681][ C1] irq event stamp: 1754 [ 333.052686][ C1] hardirqs last enabled at (1753): [] seqcount_lockdep_reader_access+0x106/0x190 [ 333.052708][ C1] hardirqs last disabled at (1754): [] exc_debug+0x6e/0x130 [ 333.052728][ C1] softirqs last enabled at (1738): [] __irq_exit_rcu+0x13b/0x230 [ 333.052769][ C1] softirqs last disabled at (1617): [] __irq_exit_rcu+0x13b/0x230 [ 333.052787][ C1] [ 333.052787][ C1] other info that might help us debug this: [ 333.052792][ C1] Possible unsafe locking scenario: [ 333.052792][ C1] [ 333.052796][ C1] CPU0 [ 333.052799][ C1] ---- [ 333.052801][ C1] lock(&trie->lock); [ 333.052812][ C1] [ 333.052815][ C1] lock(&trie->lock); [ 333.052824][ C1] [ 333.052824][ C1] *** DEADLOCK *** [ 333.052824][ C1] [ 333.052827][ C1] no locks held by syz.0.1879/9939. [ 333.052840][ C1] [ 333.052840][ C1] stack backtrace: [ 333.052845][ C1] CPU: 1 PID: 9939 Comm: syz.0.1879 Not tainted syzkaller #0 [ 333.052859][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.052868][ C1] Call Trace: [ 333.052874][ C1] <#DB> [ 333.052881][ C1] dump_stack_lvl+0x188/0x24e [ 333.052914][ C1] ? show_regs_print_info+0x12/0x12 [ 333.052941][ C1] ? print_usage_bug+0x42a/0x690 [ 333.052964][ C1] ? verify_lock_unused+0x15/0x140 [ 333.052990][ C1] lock_acquire+0x2df/0x4a0 [ 333.053017][ C1] ? trie_delete_elem+0x8e/0x620 [ 333.053041][ C1] ? read_lock_is_recursive+0x10/0x10 [ 333.053065][ C1] ? look_up_lock_class+0x75/0x140 [ 333.053087][ C1] ? verify_lock_unused+0x15/0x140 [ 333.053112][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 333.053134][ C1] ? trie_delete_elem+0x8e/0x620 [ 333.053155][ C1] ? _raw_spin_lock+0x40/0x40 [ 333.053183][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 333.053209][ C1] trie_delete_elem+0x8e/0x620 [ 333.053246][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 333.053267][ C1] bpf_overflow_handler+0x6d1/0x790 [ 333.053290][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 333.053308][ C1] ? perf_swevent_overflow+0x230/0x230 [ 333.053336][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 333.053365][ C1] __perf_event_overflow+0x457/0x630 [ 333.053397][ C1] perf_swevent_event+0x315/0x570 [ 333.053425][ C1] ? perf_tp_event+0xc10/0xc10 [ 333.053465][ C1] perf_bp_event+0x311/0x3f0 [ 333.053495][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 333.053553][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 333.053576][ C1] ? read_lock_is_recursive+0x10/0x10 [ 333.053608][ C1] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 333.053638][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 333.053656][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 333.053680][ C1] notify_die+0x141/0x1a0 [ 333.053699][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 333.053731][ C1] notify_debug+0x20/0x30 [ 333.053754][ C1] exc_debug+0xd9/0x130 [ 333.053780][ C1] asm_exc_debug+0x1a/0x40 [ 333.053794][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 333.053816][ C1] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 333.053830][ C1] RSP: 0018:ffffc900067bf958 EFLAGS: 00050206 [ 333.053850][ C1] RAX: ffffffff84142301 RBX: ffffc9000cbf1000 RCX: 000000000000fb33 [ 333.053861][ C1] RDX: 000000000000fe33 RSI: 0000200000000340 RDI: ffffc9000cbf1300 [ 333.053872][ C1] RBP: ffffc900067bfa90 R08: ffffc9000cc00e32 R09: 1ffff920019801c6 [ 333.053883][ C1] R10: dffffc0000000000 R11: fffff520019801c7 R12: 1ffff92000cf7f83 [ 333.053894][ C1] R13: 0000200000000040 R14: 000000000000fe33 R15: 00007ffffffef1cd [ 333.053914][ C1] ? _copy_from_iter+0x211/0x1130 [ 333.053944][ C1] [ 333.053949][ C1] [ 333.053953][ C1] _copy_from_iter+0x2a9/0x1130 [ 333.053976][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 333.054006][ C1] ? copyout_mc+0x110/0x110 [ 333.054026][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 333.054046][ C1] ? _raw_spin_unlock+0x24/0x40 [ 333.054066][ C1] ? find_vmap_area+0xf8/0x110 [ 333.054085][ C1] ? __phys_addr_symbol+0x2b/0x70 [ 333.054106][ C1] ? __check_object_size+0x4f6/0xa70 [ 333.054128][ C1] netlink_sendmsg+0x755/0xbd0 [ 333.054156][ C1] ? netlink_getsockopt+0x550/0x550 [ 333.054178][ C1] ? apparmor_socket_sendmsg+0x8a/0x330 [ 333.054204][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 333.054220][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 333.054246][ C1] sock_write_iter+0x2d5/0x3e0 [ 333.054269][ C1] ? sock_read_iter+0x3a0/0x3a0 [ 333.054302][ C1] ? common_file_perm+0x171/0x1c0 [ 333.054334][ C1] vfs_write+0x482/0x9a0 [ 333.054366][ C1] ? file_end_write+0x250/0x250 [ 333.054396][ C1] ? __fget_files+0x3fc/0x460 [ 333.054430][ C1] ? __fdget_pos+0x1d4/0x360 [ 333.054450][ C1] ? ksys_write+0x70/0x260 [ 333.054476][ C1] ksys_write+0x14d/0x260 [ 333.054502][ C1] ? __ia32_sys_read+0x80/0x80 [ 333.054531][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 333.054556][ C1] do_syscall_64+0x4c/0xa0 [ 333.054571][ C1] ? clear_bhb_loop+0x60/0xb0 [ 333.054586][ C1] ? clear_bhb_loop+0x60/0xb0 [ 333.054604][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.054626][ C1] RIP: 0033:0x7f443759e159 [ 333.054641][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.054653][ C1] RSP: 002b:00007f44384bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 333.054668][ C1] RAX: ffffffffffffffda RBX: 00007f4437825fa0 RCX: 00007f443759e159 [ 333.054679][ C1] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 000000000000000d [ 333.054689][ C1] RBP: 00007f443763506b R08: 0000000000000000 R09: 0000000000000000 [ 333.054699][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.054707][ C1] R13: 00007f4437826038 R14: 00007f4437825fa0 R15: 00007ffe6e746ec8 [ 333.054739][ C1] [ 336.767658][ T4325] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)