last executing test programs: 8.240138463s ago: executing program 0 (id=11785): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000180)=r1, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x80047437, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e020000100000000ac1414", @ANYRES64], 0x30}, 0x40880) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800008002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x53}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040)=0x700, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000019c0)={r5, &(0x7f0000000080)="37111eb6c3013a", 0x0, 0x4}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg(r0, 0x0, 0x4040845) syz_open_procfs$namespace(0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x0, 0x17ebd945}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r7) 7.484810196s ago: executing program 0 (id=11791): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) r3 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000950000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) close(r2) socket$kcm(0x10, 0x400000002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400b40ffff002000119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) 7.220823604s ago: executing program 1 (id=11793): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x100) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f20e"]) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 7.209082258s ago: executing program 3 (id=11794): socket$kcm(0x11, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000400000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000398aaedfb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000002100000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x2004fc10) close(r2) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xacd6a4e1331c235f, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x7, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.76368576s ago: executing program 0 (id=11796): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x7, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x7, 0x0, 0x0, &(0x7f0000000980)='syzkaller\x00', 0x8, 0x1f, &(0x7f0000000ac0)=""/31, 0x41100, 0x20, '\x00', 0x0, @fallback=0xf, r0, 0x8, &(0x7f0000000dc0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x853}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="120000002a0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000740)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r6, &(0x7f0000000300), 0x0}, 0x20) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40000020) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c89ffdb5b686158"], 0xfdef) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, 0x0, 0x4000010) recvmsg(r7, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x40010122) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x92}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f00000009c0)=""/215}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000000)="fbd2b9ed29d8974a6ce7f7c0c56aed681686762a1b0c26a85f0891", 0x1b}], 0x1}, 0x0) 3.880445733s ago: executing program 1 (id=11799): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) close(r3) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x600000, 0x0) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.880313973s ago: executing program 4 (id=11800): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff6202000000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000002000)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.825718428s ago: executing program 0 (id=11801): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000180)=r1, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x80047437, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e020000100000000ac1414", @ANYRES64], 0x30}, 0x40880) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800008002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x53}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040)=0x700, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000019c0)={r5, &(0x7f0000000080)="37111eb6c3013a", 0x0, 0x4}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg(r0, 0x0, 0x4040845) syz_open_procfs$namespace(0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x0, 0x17ebd945}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r7) 3.688566529s ago: executing program 2 (id=11802): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xb, 0x0, &(0x7f0000000040)="178d048604bf0bfb1945d7", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000721f2800080000000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000040000000a00000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000000000000000000070036b4e33eefb12e3561d12c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000020000008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="186000000400000000400000ff0700000000040000000000"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000440)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x0, 0x5, 0x1000}, 0x10}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035", 0x5}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r9 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000080), &(0x7f00000001c0)=r9}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r8, &(0x7f0000000200)}, 0x20) 3.638333514s ago: executing program 3 (id=11803): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x0, 0x8, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0901020028000b05d25a806f8c6394f90224fc600d00030009000100ff3582c137153e370248018010000000d1bd", 0x33fe0}], 0x1}, 0x0) 3.571930544s ago: executing program 1 (id=11804): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x7, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x7, 0x0, 0x0, &(0x7f0000000980)='syzkaller\x00', 0x8, 0x1f, &(0x7f0000000ac0)=""/31, 0x41100, 0x20, '\x00', 0x0, @fallback=0xf, r0, 0x8, &(0x7f0000000dc0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x853}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="120000002a0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000740)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r6, &(0x7f0000000300), 0x0}, 0x20) (fail_nth: 2) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40000020) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c89ffdb5b686158"], 0xfdef) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, 0x0, 0x4000010) recvmsg(r7, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x40010122) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x92}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f00000009c0)=""/215}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000000)="fbd2b9ed29d8974a6ce7f7c0c56aed681686762a1b0c26a85f0891", 0x1b}], 0x1}, 0x0) 3.571462714s ago: executing program 4 (id=11805): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0x19, &(0x7f0000000580), 0x4) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/184, 0xb1, 0xb8, 0x1, 0x1}, 0x28) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x792, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e035d50000af9cdff029c1fd3dc9", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c6394f90424fc602f1a09000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.566301415s ago: executing program 2 (id=11806): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000180)=r1, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x80047437, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e020000100000000ac14", @ANYRES64], 0x30}, 0x40880) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800008002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x53}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040)=0x700, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000019c0)={r5, &(0x7f0000000080)="37111eb6c3013a", 0x0, 0x4}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg(r0, 0x0, 0x4040845) syz_open_procfs$namespace(0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x0, 0x17ebd945}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r7) 3.165834804s ago: executing program 0 (id=11807): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x3, 0x3a) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_clone(0x4140000, 0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000500)="e6a7ef83d1001c235eeae828045e81705c70034f479a48ebad9f60be0fccdc3262bf3e339c8555db8cc5b1c1072c5eb5a7c2fdfcea5c7dce47940cf9f9c06f8bb0b917a5aa1e656058ef4648a27b1d010d7b0878c6307c29598fc3fdb06b945ce3753f4f3b9c47a2c5e562956fd67b56972d43a1cc8e79af0f9fb0d233126fff0edc8dbe62f2499b2b1f71a17a9c4509941c380fb890dab4785e4251b4077fec7a24cfbca2dec182e0ec2440b073bb7fb46f6bf4db43bdcb43ced733160b8fc8626b2211ac27bee0018efab17f961b999ded521971b5d788d67a342b7f5c68497f703af6defa") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000600)=r2, 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x6, 0x0, 0x41100, 0x5b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x14}, 0x18) socketpair(0x28, 0x5, 0x28, &(0x7f0000001400)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) 3.020349337s ago: executing program 3 (id=11808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async) perf_event_open(&(0x7f0000001b80)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffd}, 0x11e18e, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="060000000400000042000000a8de000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x7, r1}, 0x38) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8947, &(0x7f0000000080)={'vlan1\x00', @random="00009e0c1100"}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)=""/4110, 0x100e}], 0x1}, 0x10100) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.state\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r0, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xfdda) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000100000000000000040000001811000001cbff086a28e833319bc4b297e7", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000852000000300000095000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x2, 0x5b, &(0x7f00000005c0)=""/91, 0x1f00, 0x0, '\x00', r9, 0x1c, r10, 0x8, &(0x7f0000000740)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x2, 0x7, 0x9}, 0x10, 0x1716a, 0xffffffffffffffff, 0x6, 0x0, &(0x7f00000007c0)=[{0x3, 0x4, 0x4, 0x4}, {0x2, 0x5, 0x0, 0xa}, {0x5, 0x2, 0x6, 0x5}, {0x0, 0x3, 0xd, 0xc}, {0x4, 0x5, 0x7, 0x5}, {0x1, 0x1, 0x8, 0x12}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r4, r3}) (async) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3.013563349s ago: executing program 2 (id=11809): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x100) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f20e"]) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 2.888756515s ago: executing program 4 (id=11810): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000386ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f901", 0x39}, {&(0x7f0000000440)="63f805d7649496", 0x7}], 0x2}, 0x0) 2.63777271s ago: executing program 4 (id=11811): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x11003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7ff}, 0x105202, 0x400000, 0xbe, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'vlan1\x00', 0x8000}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x200000c0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000031c0)={&(0x7f0000003040)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000060000000b00000007000006040000000d000000ff00000006000000030000000b000000a7080000020000000e00000005000000188000000d0000000b0000000400000005000000060000000000801008000000005f30613000"], &(0x7f00000030c0)=""/224, 0x6e, 0xe0, 0x1, 0x4}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1f, 0x0, 0x3000000, 0x3, 0x40000, r5, 0x8, '\x00', 0x0, r6, 0x5, 0x2, 0x1}, 0x50) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000240)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x4, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}], &(0x7f00000002c0)='GPL\x00', 0x8, 0x8d, &(0x7f00000004c0)=""/141, 0x41000, 0x21, '\x00', 0x0, 0x1a, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x1, 0xd, 0x9a7, 0x400}, 0x10, 0x113f7, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[r7, r7, r5, r7, r5, r7], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r8, 0x0, 0x45, 0xe3, &(0x7f00000006c0)="65e4f4e2defcc61ac524e8c726f90648a3fcec57caad104979d13c559b6607c2fae01eb9af84fa50ae32a94ae30781da399e6d1cb86e6b2f9d9dc13458a728012baa842f23", &(0x7f0000000740)=""/227, 0x80000001, 0x0, 0xfe, 0xa0, &(0x7f0000000840)="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", &(0x7f0000000940)="4bbdfb48dcb6e57be14ab280494e9b9768b9995b5f4aadd00030193514cdbe142a41a3218a958c3e33d8019f57b26130032012e856c70128c88c1ce05b13d1b5d6107cc378228645ba236bf10c0e6ec1693be84896463eccab262a8ba8ffe2189462a7e5544fd2b9cea1fa56f08c9f80500b56c5d7bcd86bd85437c7fe097a07542a5c50e1c789cf3e95d83321e5bd07e6779c91b1396334f1c35de20ed5a1fe", 0x0, 0x0, 0xf8}, 0x50) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000140)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x1ff, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0x200, 0x0, 0x0, 0xbf3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x81, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xf9, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x3, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r11, 0x4008240b, &(0x7f0000000100)={0x5, 0x80, 0x9, 0x8, 0x6, 0x9, 0x0, 0x207, 0x701a0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x401, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x18047, 0x9, 0x1, 0x8, 0x23, 0x2, 0x1, 0x0, 0x7, 0x0, 0xfffffffffffff999}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r10, 0x0, 0x0}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r9}, 0x8) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0x6) 2.573257179s ago: executing program 1 (id=11812): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)}], 0x1}, 0x0) 2.26683245s ago: executing program 1 (id=11813): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0xa, 0x6, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x11, &(0x7f0000000140), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000030000000000000000000000000000000000ccb32eff26b46f1d57f9ce000000000000284e2b7012caf8fe6c76de64b1c91ff4a4a0bb23e73ecb5eb37ebea91052639065c949af8a8b8d57a069bc2ec09d95835c7828ec4766664d9cc8d53d37306e91ed25821d86017a73876c1d7a895952d4c9e4d654f1120793a859ba124b01c1875c8fb0e4d0955a9373a90722e1d164cb3cc8b47b9e874985d151efbf4dbac4106718e4b4e165f1fb37195a2a95411e4da909bfeae53f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r2, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, r6, 0x2, 0x5, 0x1}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000fe0000b7080000000000107b8af8ff00000000d7a200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000080bbbd34d0e3a4783818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018230000", @ANYRES32=r3, @ANYBLOB="000000007f000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x2, 0x4e, &(0x7f00000003c0)=""/78, 0x41000, 0x28, '\x00', r4, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r3, r8, r7, r2], 0x0, 0x10, 0x80}, 0x94) 2.26605789s ago: executing program 0 (id=11814): socket$kcm(0x11, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000400000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000398aaedfb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000002100000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x2004fc10) close(r2) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xacd6a4e1331c235f, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x7, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.216783705s ago: executing program 4 (id=11815): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff6202000000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000002000)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.937272907s ago: executing program 2 (id=11816): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xb, 0x0, &(0x7f0000000040)="178d048604bf0bfb1945d7", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000721f2800080000000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000040000000a00000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000000000000000000070036b4e33eefb12e3561d12c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000020000008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="186000000400000000400000ff0700000000040000000000"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000440)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x0, 0x5, 0x1000}, 0x10}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035", 0x5}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r9 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000080), &(0x7f00000001c0)=r9}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r8, &(0x7f0000000200)}, 0x20) 1.867205208s ago: executing program 4 (id=11817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000380)=r4) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.699871017s ago: executing program 3 (id=11818): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0xffffffffffffffff}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffe70, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x3}, 0x10c002, 0xac61, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r9 = perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0x7f, 0x4, 0x5, 0x58, 0x0, 0x1, 0x20010, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3553, 0x4, @perf_config_ext={0x3, 0x10}, 0x10, 0x7, 0x7fffffff, 0x3, 0x5, 0xd9ad, 0x7, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40042409, 0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_ID(r9, 0x80082407, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x17}, 0x4080, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0xa41}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x8, 0x4f, 0x0, 0x1, 0x0, 0x100000000000, 0x18000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x80, 0x5, 0x8, 0x0, 0x8, 0x2, 0x3, 0x0, 0x1, 0x0, 0xc}) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000015000b63d25a80648c2594f90924fc60", 0x14}], 0x1}, 0x0) write$cgroup_netprio_ifpriomap(r10, 0x0, 0xd) socket$kcm(0x10, 0x400000002, 0x0) 1.666940347s ago: executing program 2 (id=11819): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x0, 0x8, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0901020028000b05d25a806f8c6394f90224fc600d00030009000100ff3582c137153e370248018010000000d1bd", 0x33fe0}], 0x1}, 0x0) 791.153246ms ago: executing program 3 (id=11820): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000180)=r1, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x80047437, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e020000100000000ac14", @ANYRES64], 0x30}, 0x40880) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800008002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x53}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040)=0x700, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000019c0)={r5, &(0x7f0000000080)="37111eb6c3013a", 0x0, 0x4}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg(r0, 0x0, 0x4040845) syz_open_procfs$namespace(0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x0, 0x17ebd945}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r7) 14.445466ms ago: executing program 2 (id=11821): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000800000036490000c200000001"], 0x50) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x39}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r1, 0x2b, 0x0, 0x7, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000007c0), &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001b80)={@cgroup, r3, 0x2f, 0x10, 0x0, @void, @value=r3, @void, @void, r4}, 0x20) socket$kcm(0x10, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000000)=0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x404c, 0x202, 0x4, 0x4, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x4, 0x9}, {0x10000002, 0x0, 0x8000000, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x1c, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000006c0), 0xca, r0}, 0x38) 1.34522ms ago: executing program 1 (id=11822): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x399907a35f328ec2, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600df01141092305000523000037153e370248038011f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 3 (id=11823): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)}], 0x1}, 0x0) kernel console output (not intermixed with test programs): arsing attributes in process `syz.0.10486'. [ 2146.446936][ T6040] can: request_module (can-proto-0) failed. [ 2146.623098][ T6052] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.10489'. [ 2146.894557][ T6050] netlink: 33583 bytes leftover after parsing attributes in process `syz.1.10500'. [ 2147.061290][ T6060] device syzkaller0 entered promiscuous mode [ 2148.420777][ T6080] can: request_module (can-proto-0) failed. [ 2152.130262][ T6086] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.10512'. [ 2152.503800][ T6100] netlink: 33583 bytes leftover after parsing attributes in process `syz.3.10516'. [ 2153.188687][ T6117] can: request_module (can-proto-0) failed. [ 2154.097360][ T6147] device syzkaller0 entered promiscuous mode [ 2159.824052][ T6155] netlink: 33583 bytes leftover after parsing attributes in process `syz.0.10534'. [ 2159.934443][ T6179] device syzkaller0 entered promiscuous mode [ 2160.351163][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.357567][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2163.151782][ T6206] device syzkaller0 entered promiscuous mode [ 2165.506081][ T6212] netlink: 33583 bytes leftover after parsing attributes in process `syz.2.10552'. [ 2165.817165][ T6226] netlink: 33583 bytes leftover after parsing attributes in process `syz.1.10565'. [ 2166.610039][ T6253] sctp: [Deprecated]: syz.4.10567 (pid 6253) Use of int in max_burst socket option deprecated. [ 2166.610039][ T6253] Use struct sctp_assoc_value instead [ 2167.238699][ T6266] device syzkaller0 entered promiscuous mode [ 2168.768427][ T49] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 2169.132130][ T49] Bluetooth: hci3: ACL packet too small [ 2172.266304][ T6275] netlink: 33583 bytes leftover after parsing attributes in process `syz.0.10574'. [ 2173.163482][ T6321] device syzkaller0 entered promiscuous mode [ 2175.921345][ T6352] device syzkaller0 entered promiscuous mode [ 2175.968123][ T6350] netlink: 33583 bytes leftover after parsing attributes in process `syz.3.10599'. [ 2179.536760][ T6376] netlink: 'syz.4.10609': attribute type 12 has an invalid length. [ 2179.545779][ T6376] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10609'. [ 2180.059273][ T6406] netlink: 33583 bytes leftover after parsing attributes in process `syz.3.10617'. [ 2180.471514][ T6414] device syzkaller0 entered promiscuous mode [ 2185.297392][ T6448] netlink: 'syz.3.10635': attribute type 21 has an invalid length. [ 2185.305770][ T6448] netlink: 'syz.3.10635': attribute type 1 has an invalid length. [ 2185.315120][ T6448] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10635'. [ 2185.325083][ T6454] netlink: 33583 bytes leftover after parsing attributes in process `syz.0.10637'. [ 2186.013836][ T6496] device syzkaller0 entered promiscuous mode [ 2186.924079][ T6524] netlink: 'syz.1.10663': attribute type 8 has an invalid length. [ 2190.369605][ T6561] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10679'. [ 2190.902243][ T6571] can: request_module (can-proto-0) failed. [ 2191.749821][ T6498] device syzkaller0 entered promiscuous mode [ 2193.012201][ T6600] can: request_module (can-proto-0) failed. [ 2196.517462][ T6585] netlink: 33583 bytes leftover after parsing attributes in process `syz.0.10689'. [ 2196.662640][ T6614] netlink: 'syz.1.10698': attribute type 49 has an invalid length. [ 2196.706943][ T6612] device syzkaller0 entered promiscuous mode [ 2197.240261][ T6627] can: request_module (can-proto-0) failed. [ 2200.790023][ T6645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10721'. [ 2200.839565][ T6645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10721'. [ 2200.860165][ T6651] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10721'. [ 2201.227763][ T6647] device syzkaller0 entered promiscuous mode [ 2201.281780][ T6660] device syzkaller0 entered promiscuous mode [ 2202.320047][ T6671] can: request_module (can-proto-0) failed. [ 2203.378148][ T1008] Bluetooth: hci3: command 0x0406 tx timeout [ 2205.981191][ T6649] netlink: 33583 bytes leftover after parsing attributes in process `syz.1.10712'. [ 2206.000779][ T6681] netlink: 'syz.2.10725': attribute type 10 has an invalid length. [ 2206.052123][ T6681] bond0: (slave dummy0): Releasing backup interface [ 2206.090894][ T6681] team0: Port device dummy0 added [ 2206.206590][ T6688] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10727'. [ 2206.245545][ T6688] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10727'. [ 2206.297049][ T6690] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10727'. [ 2206.457416][ T6683] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.10726'. [ 2206.770541][ T6697] can: request_module (can-proto-0) failed. [ 2207.612216][ T6715] netlink: 33583 bytes leftover after parsing attributes in process `syz.4.10739'. [ 2207.663584][ T6729] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10743'. [ 2207.993408][ T6725] device syzkaller0 entered promiscuous mode [ 2208.023621][ T6729] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10743'. [ 2208.048254][ T6730] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10743'. [ 2208.487343][ T6737] can: request_module (can-proto-0) failed. [ 2213.618063][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 2214.265484][ T6735] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.10745'. [ 2214.851853][ T6778] netlink: 33583 bytes leftover after parsing attributes in process `syz.2.10756'. [ 2214.878595][ T6775] can: request_module (can-proto-0) failed. [ 2214.950987][ T6769] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.10766'. [ 2215.156540][ T6789] netlink: 'syz.3.10762': attribute type 19 has an invalid length. [ 2215.197935][ T6789] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10762'. [ 2215.225940][ T6789] netlink: 'syz.3.10762': attribute type 10 has an invalid length. [ 2215.318485][ T6789] bond0: (slave dummy0): Releasing backup interface [ 2215.359280][ T6789] team0: Port device dummy0 added [ 2215.498894][ T6795] netlink: 'syz.0.10763': attribute type 4 has an invalid length. [ 2215.526795][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10763'. [ 2216.067440][ T6819] netlink: 'syz.1.10771': attribute type 25 has an invalid length. [ 2216.112847][ T6819] netlink: 'syz.1.10771': attribute type 10 has an invalid length. [ 2216.149328][ T6814] can: request_module (can-proto-0) failed. [ 2216.550015][ T6829] netlink: 'syz.4.10776': attribute type 9 has an invalid length. [ 2216.609603][ T6829] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.10776'. [ 2217.092549][ T6841] netlink: 'syz.3.10779': attribute type 29 has an invalid length. [ 2217.334199][ T6837] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.10778'. [ 2217.510791][ T6854] netlink: 'syz.3.10784': attribute type 1 has an invalid length. [ 2217.562222][ T6854] netlink: 'syz.3.10784': attribute type 3 has an invalid length. [ 2217.612928][ T6854] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10784'. [ 2218.244780][ T6869] netlink: 17861 bytes leftover after parsing attributes in process `syz.4.10788'. [ 2218.314729][ T6862] can: request_module (can-proto-0) failed. [ 2218.556675][ T6876] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.10792'. [ 2218.738300][ T1008] Bluetooth: hci2: command 0x0406 tx timeout [ 2218.938833][ T6878] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2219.100967][ T6878] device syzkaller0 entered promiscuous mode [ 2221.246310][ T6906] can: request_module (can-proto-0) failed. [ 2221.785500][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.791933][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.930827][ T6892] netlink: 'syz.4.10799': attribute type 21 has an invalid length. [ 2223.942302][ T6892] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10799'. [ 2223.952101][ T6920] FAULT_INJECTION: forcing a failure. [ 2223.952101][ T6920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2223.967522][ T6920] CPU: 0 PID: 6920 Comm: syz.3.10809 Not tainted syzkaller #0 [ 2223.975025][ T6920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2223.985098][ T6920] Call Trace: [ 2223.988393][ T6920] [ 2223.991342][ T6920] dump_stack_lvl+0x188/0x24e [ 2223.996047][ T6920] ? show_regs_print_info+0x12/0x12 [ 2224.001264][ T6920] ? load_image+0x410/0x410 [ 2224.005829][ T6920] ? __lock_acquire+0x7c40/0x7c40 [ 2224.010888][ T6920] should_fail_ex+0x390/0x4c0 [ 2224.015612][ T6920] _copy_to_user+0x2c/0x130 [ 2224.020144][ T6920] wext_handle_ioctl+0x157/0x1d0 [ 2224.025104][ T6920] ? call_commit_handler+0xf0/0xf0 [ 2224.030250][ T6920] sock_ioctl+0x143/0x700 [ 2224.034622][ T6920] ? sock_poll+0x420/0x420 [ 2224.039069][ T6920] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2224.044035][ T6920] ? security_file_ioctl+0x7c/0xa0 [ 2224.049199][ T6920] ? sock_poll+0x420/0x420 [ 2224.053636][ T6920] __se_sys_ioctl+0xfa/0x170 [ 2224.058265][ T6920] do_syscall_64+0x4c/0xa0 [ 2224.062733][ T6920] ? clear_bhb_loop+0x60/0xb0 [ 2224.067437][ T6920] ? clear_bhb_loop+0x60/0xb0 [ 2224.072143][ T6920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2224.078078][ T6920] RIP: 0033:0x7f042b79e159 [ 2224.082606][ T6920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2224.102245][ T6920] RSP: 002b:00007f042c640028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2224.110698][ T6920] RAX: ffffffffffffffda RBX: 00007f042ba25fa0 RCX: 00007f042b79e159 [ 2224.118731][ T6920] RDX: 0000200000000000 RSI: 0000000000008b05 RDI: 0000000000000003 [ 2224.126727][ T6920] RBP: 00007f042c640090 R08: 0000000000000000 R09: 0000000000000000 [ 2224.134743][ T6920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2224.142742][ T6920] R13: 00007f042ba26038 R14: 00007f042ba25fa0 R15: 00007ffeed043338 [ 2224.150751][ T6920] [ 2224.636229][ T6936] netlink: 'syz.1.10816': attribute type 2 has an invalid length. [ 2224.666490][ T6936] netlink: 'syz.1.10816': attribute type 4 has an invalid length. [ 2224.697042][ T6936] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10816'. [ 2224.713714][ T6931] can: request_module (can-proto-0) failed. [ 2225.258645][ T6954] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2225.373526][ T6962] FAULT_INJECTION: forcing a failure. [ 2225.373526][ T6962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2225.398320][ T6962] CPU: 1 PID: 6962 Comm: syz.2.10827 Not tainted syzkaller #0 [ 2225.405855][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2225.415950][ T6962] Call Trace: [ 2225.419272][ T6962] [ 2225.422234][ T6962] dump_stack_lvl+0x188/0x24e [ 2225.426950][ T6962] ? show_regs_print_info+0x12/0x12 [ 2225.432186][ T6962] ? load_image+0x410/0x410 [ 2225.436745][ T6962] ? __lock_acquire+0x7c40/0x7c40 [ 2225.441821][ T6962] ? unix_ioctl+0x255/0x6a0 [ 2225.446376][ T6962] should_fail_ex+0x390/0x4c0 [ 2225.451106][ T6962] _copy_from_user+0x2c/0x170 [ 2225.455846][ T6962] sock_do_ioctl+0x18c/0x320 [ 2225.460479][ T6962] ? sock_show_fdinfo+0xb0/0xb0 [ 2225.465384][ T6962] sock_ioctl+0x48a/0x700 [ 2225.469756][ T6962] ? sock_poll+0x420/0x420 [ 2225.474221][ T6962] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2225.479210][ T6962] ? security_file_ioctl+0x7c/0xa0 [ 2225.484409][ T6962] ? sock_poll+0x420/0x420 [ 2225.488868][ T6962] __se_sys_ioctl+0xfa/0x170 [ 2225.493509][ T6962] do_syscall_64+0x4c/0xa0 [ 2225.497964][ T6962] ? clear_bhb_loop+0x60/0xb0 [ 2225.502679][ T6962] ? clear_bhb_loop+0x60/0xb0 [ 2225.507390][ T6962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2225.509926][ T6954] device syzkaller0 entered promiscuous mode [ 2225.513310][ T6962] RIP: 0033:0x7f00a899e159 [ 2225.513333][ T6962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2225.513352][ T6962] RSP: 002b:00007f00a995a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2225.551836][ T6962] RAX: ffffffffffffffda RBX: 00007f00a8c25fa0 RCX: 00007f00a899e159 [ 2225.559840][ T6962] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000009 [ 2225.567839][ T6962] RBP: 00007f00a995a090 R08: 0000000000000000 R09: 0000000000000000 [ 2225.575850][ T6962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2225.583864][ T6962] R13: 00007f00a8c26038 R14: 00007f00a8c25fa0 R15: 00007fff052b4828 [ 2225.591897][ T6962] [ 2225.943647][ T6972] can: request_module (can-proto-0) failed. [ 2228.387771][ T7005] can: request_module (can-proto-0) failed. [ 2228.539697][ T7018] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2228.639163][ T7018] device syzkaller0 entered promiscuous mode [ 2230.851914][ T7029] netlink: 'syz.0.10853': attribute type 10 has an invalid length. [ 2230.865046][ T7029] netlink: 55 bytes leftover after parsing attributes in process `syz.0.10853'. [ 2231.099727][ T7048] netlink: 'syz.4.10859': attribute type 19 has an invalid length. [ 2231.153993][ T7048] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10859'. [ 2231.234650][ T7048] netlink: 'syz.4.10859': attribute type 10 has an invalid length. [ 2231.317107][ T7048] team0: Port device dummy0 added [ 2231.482407][ T7058] can: request_module (can-proto-0) failed. [ 2231.553294][ T7063] netlink: 'syz.3.10863': attribute type 1 has an invalid length. [ 2231.578241][ T7063] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.10863'. [ 2231.642476][ T7067] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10865'. [ 2231.764402][ T7075] netlink: 'syz.1.10869': attribute type 10 has an invalid length. [ 2231.797971][ T7075] netlink: 55 bytes leftover after parsing attributes in process `syz.1.10869'. [ 2232.007245][ T7073] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.10868'. [ 2232.086367][ T7080] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2232.194429][ T7080] device syzkaller0 entered promiscuous mode [ 2232.701033][ T7102] can: request_module (can-proto-0) failed. [ 2235.505106][ T7092] netlink: 'syz.1.10874': attribute type 10 has an invalid length. [ 2235.513241][ T7092] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10874'. [ 2235.524016][ T7092] batman_adv: batadv0: Adding interface: vlan1 [ 2235.533088][ T7092] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2235.559619][ T7092] batman_adv: batadv0: Interface activated: vlan1 [ 2235.569091][ T7107] bridge0: port 2(bridge_slave_1) entered disabled state [ 2235.749173][ T7126] netlink: 'syz.1.10884': attribute type 10 has an invalid length. [ 2235.757370][ T7126] netlink: 55 bytes leftover after parsing attributes in process `syz.1.10884'. [ 2236.274923][ T7138] netlink: 'syz.0.10890': attribute type 39 has an invalid length. [ 2236.356838][ T7140] can: request_module (can-proto-0) failed. [ 2237.173447][ T7164] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.10898'. [ 2238.036087][ T7186] netlink: 'syz.4.10902': attribute type 10 has an invalid length. [ 2238.077961][ T7186] netlink: 55 bytes leftover after parsing attributes in process `syz.4.10902'. [ 2238.127733][ T7191] netlink: 'syz.0.10906': attribute type 1 has an invalid length. [ 2238.150772][ T7191] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.10906'. [ 2238.220515][ T7195] netlink: 'syz.3.10907': attribute type 10 has an invalid length. [ 2238.263905][ T7195] team0: Device hsr_slave_0 failed to register rx_handler [ 2238.789271][ T7200] can: request_module (can-proto-0) failed. [ 2238.910099][ T7207] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.10909'. [ 2239.332202][ T7212] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.10912'. [ 2239.537398][ T7221] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2239.735717][ T7221] device syzkaller0 entered promiscuous mode [ 2239.837634][ T7231] netlink: 'syz.1.10920': attribute type 1 has an invalid length. [ 2239.875317][ T7231] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.10920'. [ 2240.000221][ T7236] can: request_module (can-proto-0) failed. [ 2243.613408][ T7267] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.10929'. [ 2243.952297][ T7279] can: request_module (can-proto-0) failed. [ 2244.245880][ T7286] netlink: 'syz.2.10935': attribute type 1 has an invalid length. [ 2244.266043][ T7286] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.10935'. [ 2244.550551][ T7294] delete_channel: no stack [ 2244.710076][ T7307] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2244.744914][ T7307] device syzkaller0 entered promiscuous mode [ 2244.784931][ T7309] netlink: 64019 bytes leftover after parsing attributes in process `syz.2.10940'. [ 2245.513014][ T7326] can: request_module (can-proto-0) failed. [ 2248.067932][ T7319] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.10946'. [ 2248.081874][ T7319] bridge_slave_1: default FDB implementation only supports local addresses [ 2248.093570][ T7317] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.10945'. [ 2248.989206][ T7354] can: request_module (can-proto-0) failed. [ 2249.275013][ T7363] FAULT_INJECTION: forcing a failure. [ 2249.275013][ T7363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2249.348955][ T7363] CPU: 0 PID: 7363 Comm: syz.2.10961 Not tainted syzkaller #0 [ 2249.356527][ T7363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2249.366664][ T7363] Call Trace: [ 2249.370028][ T7363] [ 2249.373042][ T7363] dump_stack_lvl+0x188/0x24e [ 2249.377822][ T7363] ? show_regs_print_info+0x12/0x12 [ 2249.383115][ T7363] ? load_image+0x410/0x410 [ 2249.387762][ T7363] ? __lock_acquire+0x7c40/0x7c40 [ 2249.392932][ T7363] should_fail_ex+0x390/0x4c0 [ 2249.397735][ T7363] _copy_from_user+0x2c/0x170 [ 2249.402529][ T7363] iovec_from_user+0x143/0x360 [ 2249.407418][ T7363] __import_iovec+0x6c/0x510 [ 2249.412149][ T7363] import_iovec+0x6f/0xa0 [ 2249.416714][ T7363] ___sys_sendmsg+0x252/0x360 [ 2249.421598][ T7363] ? __sys_sendmsg+0x2a0/0x2a0 [ 2249.426594][ T7363] ? __lock_acquire+0x7c40/0x7c40 [ 2249.431890][ T7363] __se_sys_sendmsg+0x1c3/0x2b0 [ 2249.436831][ T7363] ? ct_nmi_exit+0x145/0x1c0 [ 2249.441540][ T7363] ? __x64_sys_sendmsg+0x80/0x80 [ 2249.446688][ T7363] ? lockdep_hardirqs_on+0x94/0x140 [ 2249.451997][ T7363] do_syscall_64+0x4c/0xa0 [ 2249.456497][ T7363] ? clear_bhb_loop+0x60/0xb0 [ 2249.461256][ T7363] ? clear_bhb_loop+0x60/0xb0 [ 2249.466041][ T7363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2249.472028][ T7363] RIP: 0033:0x7f00a899e159 [ 2249.476524][ T7363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2249.496207][ T7363] RSP: 002b:00007f00a995a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2249.504697][ T7363] RAX: ffffffffffffffda RBX: 00007f00a8c25fa0 RCX: 00007f00a899e159 [ 2249.512716][ T7363] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2249.520727][ T7363] RBP: 00007f00a995a090 R08: 0000000000000000 R09: 0000000000000000 [ 2249.528742][ T7363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2249.536767][ T7363] R13: 00007f00a8c26038 R14: 00007f00a8c25fa0 R15: 00007fff052b4828 [ 2249.544874][ T7363] [ 2249.638556][ T7370] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2249.664614][ T7370] device syzkaller0 entered promiscuous mode [ 2249.722541][ T7374] FAULT_INJECTION: forcing a failure. [ 2249.722541][ T7374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2249.755246][ T7374] CPU: 1 PID: 7374 Comm: syz.3.10964 Not tainted syzkaller #0 [ 2249.762872][ T7374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2249.772959][ T7374] Call Trace: [ 2249.776272][ T7374] [ 2249.779236][ T7374] dump_stack_lvl+0x188/0x24e [ 2249.783984][ T7374] ? show_regs_print_info+0x12/0x12 [ 2249.789214][ T7374] ? lockdep_hardirqs_on+0x94/0x140 [ 2249.794449][ T7374] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2249.800653][ T7374] should_fail_ex+0x390/0x4c0 [ 2249.805384][ T7374] _copy_from_user+0x2c/0x170 [ 2249.810293][ T7374] iovec_from_user+0x143/0x360 [ 2249.815105][ T7374] __import_iovec+0x6c/0x510 [ 2249.819748][ T7374] import_iovec+0x6f/0xa0 [ 2249.824126][ T7374] ___sys_sendmsg+0x252/0x360 [ 2249.828846][ T7374] ? __sys_sendmsg+0x2a0/0x2a0 [ 2249.833668][ T7374] ? ktime_get+0x7b/0x270 [ 2249.838062][ T7374] __se_sys_sendmsg+0x1c3/0x2b0 [ 2249.842952][ T7374] ? perf_trace_preemptirq_template+0x268/0x320 [ 2249.849259][ T7374] ? __x64_sys_sendmsg+0x80/0x80 [ 2249.854251][ T7374] ? lockdep_hardirqs_on+0x94/0x140 [ 2249.859503][ T7374] do_syscall_64+0x4c/0xa0 [ 2249.863960][ T7374] ? clear_bhb_loop+0x60/0xb0 [ 2249.868674][ T7374] ? clear_bhb_loop+0x60/0xb0 [ 2249.873394][ T7374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2249.879337][ T7374] RIP: 0033:0x7f042b79e159 [ 2249.883793][ T7374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2249.903438][ T7374] RSP: 002b:00007f042c640028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2249.911898][ T7374] RAX: ffffffffffffffda RBX: 00007f042ba25fa0 RCX: 00007f042b79e159 [ 2249.919910][ T7374] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2249.927911][ T7374] RBP: 00007f042c640090 R08: 0000000000000000 R09: 0000000000000000 [ 2249.935927][ T7374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2249.943952][ T7374] R13: 00007f042ba26038 R14: 00007f042ba25fa0 R15: 00007ffeed043338 [ 2249.951969][ T7374] [ 2252.067380][ T7376] netlink: 'syz.0.10956': attribute type 1 has an invalid length. [ 2252.128803][ T7384] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.10966'. [ 2252.518183][ T7396] can: request_module (can-proto-0) failed. [ 2252.722410][ T7407] IPv6: NLM_F_CREATE should be specified when creating new route [ 2252.767979][ T7407] netlink: 1 bytes leftover after parsing attributes in process `syz.2.10974'. [ 2252.858165][ T7410] netlink: 'syz.4.10976': attribute type 21 has an invalid length. [ 2252.962720][ T7414] netlink: 'syz.2.10978': attribute type 1 has an invalid length. [ 2253.007898][ T7414] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.10978'. [ 2253.235764][ T7418] netlink: 'syz.4.10979': attribute type 1 has an invalid length. [ 2253.255601][ T7420] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2253.265897][ T7418] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.10979'. [ 2253.285037][ T7420] device syzkaller0 entered promiscuous mode [ 2253.884817][ T7434] can: request_module (can-proto-0) failed. [ 2256.058123][ T7438] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10987'. [ 2256.226557][ T7451] netlink: 'syz.4.10992': attribute type 1 has an invalid length. [ 2256.304434][ T7451] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.10992'. [ 2256.494771][ T7457] netlink: 'syz.0.10995': attribute type 10 has an invalid length. [ 2257.176405][ T7486] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2257.320352][ T7486] device syzkaller0 entered promiscuous mode [ 2257.532899][ T7499] netlink: 'syz.3.11010': attribute type 1 has an invalid length. [ 2257.583850][ T7499] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.11010'. [ 2261.966902][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11014'. [ 2261.989005][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11014'. [ 2262.026260][ T7513] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.11016'. [ 2262.077885][ T7519] netlink: 'syz.0.11017': attribute type 20 has an invalid length. [ 2262.397138][ T7528] device syzkaller0 entered promiscuous mode [ 2262.903753][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2265.647890][ T7558] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.11027'. [ 2265.854444][ T7575] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2265.996283][ T7575] device syzkaller0 entered promiscuous mode [ 2268.855294][ T7584] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.11032'. [ 2268.865030][ T7580] netlink: 'syz.4.11034': attribute type 21 has an invalid length. [ 2268.873402][ T7580] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11034'. [ 2268.883411][ T7580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11034'. [ 2269.076259][ T7609] FAULT_INJECTION: forcing a failure. [ 2269.076259][ T7609] name failslab, interval 1, probability 0, space 0, times 0 [ 2269.138917][ T7609] CPU: 1 PID: 7609 Comm: syz.0.11043 Not tainted syzkaller #0 [ 2269.146464][ T7609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2269.156586][ T7609] Call Trace: [ 2269.159924][ T7609] [ 2269.162925][ T7609] dump_stack_lvl+0x188/0x24e [ 2269.167660][ T7609] ? show_regs_print_info+0x12/0x12 [ 2269.172918][ T7609] ? load_image+0x410/0x410 [ 2269.177497][ T7609] ? __might_sleep+0xd0/0xd0 [ 2269.182149][ T7609] ? __lock_acquire+0x7c40/0x7c40 [ 2269.187257][ T7609] should_fail_ex+0x390/0x4c0 [ 2269.192027][ T7609] should_failslab+0x5/0x20 [ 2269.196584][ T7609] slab_pre_alloc_hook+0x59/0x300 [ 2269.201668][ T7609] ? trace_call_bpf+0x5d6/0x6b0 [ 2269.206630][ T7609] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 2269.212425][ T7609] __kmem_cache_alloc_node+0x4f/0x270 [ 2269.217903][ T7609] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 2269.223685][ T7609] __kmalloc+0xa3/0x240 [ 2269.227921][ T7609] tomoyo_realpath_from_path+0xe2/0x5c0 [ 2269.233567][ T7609] ? tomoyo_domain+0xd2/0x120 [ 2269.238354][ T7609] ? tomoyo_path_number_perm+0x205/0x650 [ 2269.244058][ T7609] tomoyo_path_number_perm+0x22f/0x650 [ 2269.249588][ T7609] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2269.255106][ T7609] ? ksys_write+0x1ce/0x260 [ 2269.259659][ T7609] ? common_file_perm+0x171/0x1c0 [ 2269.264790][ T7609] ? __fget_files+0x28/0x460 [ 2269.269459][ T7609] security_file_ioctl+0x6c/0xa0 [ 2269.274443][ T7609] __se_sys_ioctl+0x48/0x170 [ 2269.279086][ T7609] do_syscall_64+0x4c/0xa0 [ 2269.283530][ T7609] ? clear_bhb_loop+0x60/0xb0 [ 2269.288247][ T7609] ? clear_bhb_loop+0x60/0xb0 [ 2269.292992][ T7609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2269.298933][ T7609] RIP: 0033:0x7fd66539e159 [ 2269.303395][ T7609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2269.323040][ T7609] RSP: 002b:00007fd666220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2269.331489][ T7609] RAX: ffffffffffffffda RBX: 00007fd665625fa0 RCX: 00007fd66539e159 [ 2269.339507][ T7609] RDX: 0000200000000100 RSI: 0000000000008927 RDI: 0000000000000008 [ 2269.347531][ T7609] RBP: 00007fd666220090 R08: 0000000000000000 R09: 0000000000000000 [ 2269.355544][ T7609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2269.363552][ T7609] R13: 00007fd665626038 R14: 00007fd665625fa0 R15: 00007ffdb7f06a58 [ 2269.371601][ T7609] [ 2269.498552][ T7609] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2270.038304][ T7608] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.11044'. [ 2270.589622][ T7634] device sit0 entered promiscuous mode [ 2271.228381][ T7645] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.11053'. [ 2271.736155][ T7649] device syzkaller0 entered promiscuous mode [ 2276.067051][ T7669] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.11060'. [ 2276.664544][ T7703] FAULT_INJECTION: forcing a failure. [ 2276.664544][ T7703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2276.698169][ T7703] CPU: 1 PID: 7703 Comm: syz.1.11074 Not tainted syzkaller #0 [ 2276.705697][ T7703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2276.715793][ T7703] Call Trace: [ 2276.719121][ T7703] [ 2276.722097][ T7703] dump_stack_lvl+0x188/0x24e [ 2276.726850][ T7703] ? show_regs_print_info+0x12/0x12 [ 2276.732099][ T7703] ? load_image+0x410/0x410 [ 2276.736664][ T7703] ? __lock_acquire+0x7c40/0x7c40 [ 2276.741742][ T7703] should_fail_ex+0x390/0x4c0 [ 2276.746502][ T7703] strncpy_from_user+0x32/0x340 [ 2276.751415][ T7703] bpf_prog_load+0x200/0x1530 [ 2276.756159][ T7703] ? map_freeze+0x390/0x390 [ 2276.760705][ T7703] ? __might_fault+0xa6/0x120 [ 2276.765427][ T7703] ? __might_fault+0xa6/0x120 [ 2276.770134][ T7703] ? __might_fault+0xc2/0x120 [ 2276.774839][ T7703] ? __might_fault+0xa6/0x120 [ 2276.779545][ T7703] ? bpf_lsm_bpf+0x5/0x10 [ 2276.783907][ T7703] ? security_bpf+0x7a/0xa0 [ 2276.788453][ T7703] __sys_bpf+0x5b8/0x780 [ 2276.792755][ T7703] ? bpf_link_show_fdinfo+0x380/0x380 [ 2276.798183][ T7703] ? lock_chain_count+0x20/0x20 [ 2276.803089][ T7703] __x64_sys_bpf+0x78/0x90 [ 2276.807547][ T7703] do_syscall_64+0x4c/0xa0 [ 2276.811995][ T7703] ? clear_bhb_loop+0x60/0xb0 [ 2276.816703][ T7703] ? clear_bhb_loop+0x60/0xb0 [ 2276.821418][ T7703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2276.827347][ T7703] RIP: 0033:0x7ffa9939e159 [ 2276.831786][ T7703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2276.851429][ T7703] RSP: 002b:00007ffa975f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2276.859890][ T7703] RAX: ffffffffffffffda RBX: 00007ffa99625fa0 RCX: 00007ffa9939e159 [ 2276.867892][ T7703] RDX: 0000000000000c01 RSI: 0000200000003400 RDI: 0000000000000005 [ 2276.875893][ T7703] RBP: 00007ffa975f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2276.883900][ T7703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2276.891895][ T7703] R13: 00007ffa99626038 R14: 00007ffa99625fa0 R15: 00007ffeb4c7c428 [ 2276.899926][ T7703] [ 2277.116830][ T7715] netlink: 'syz.3.11078': attribute type 10 has an invalid length. [ 2277.540744][ T7728] netlink: 'syz.1.11079': attribute type 1 has an invalid length. [ 2277.566111][ T7728] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.11079'. [ 2278.450243][ T7715] bridge0: port 2(bridge_slave_1) entered disabled state [ 2278.515540][ T7715] device bridge_slave_1 left promiscuous mode [ 2278.534288][ T7715] bridge0: port 2(bridge_slave_1) entered disabled state [ 2278.590042][ T7715] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 2278.657611][ T7737] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.11081'. [ 2279.396699][ T7770] netlink: 'syz.2.11093': attribute type 1 has an invalid length. [ 2279.452276][ T7770] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.11093'. [ 2280.640190][ T7775] netlink: 'syz.2.11096': attribute type 1 has an invalid length. [ 2280.672271][ T7775] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.11096'. [ 2280.695225][ T7777] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2280.792569][ T7782] netlink: 'syz.4.11097': attribute type 1 has an invalid length. [ 2280.821379][ T7782] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.11097'. [ 2280.900395][ T7777] device syzkaller0 entered promiscuous mode [ 2281.544494][ T7786] netlink: 'syz.0.11099': attribute type 29 has an invalid length. [ 2283.084993][ T7812] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.11107'. [ 2283.105966][ T7812] netlink: zone id is out of range [ 2283.112366][ T7812] netlink: zone id is out of range [ 2283.124831][ T7812] netlink: zone id is out of range [ 2283.130783][ T7812] netlink: zone id is out of range [ 2283.136543][ T7812] netlink: zone id is out of range [ 2283.161863][ T7812] netlink: zone id is out of range [ 2283.167425][ T7812] netlink: zone id is out of range [ 2283.187085][ T7812] netlink: zone id is out of range [ 2283.202238][ T7812] netlink: zone id is out of range [ 2283.221289][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.227643][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.244121][ T7812] netlink: zone id is out of range [ 2286.626896][ T7784] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.11100'. [ 2286.648658][ T7786] netlink: 'syz.0.11099': attribute type 29 has an invalid length. [ 2286.988298][ T7822] netlink: 'syz.4.11112': attribute type 1 has an invalid length. [ 2286.996601][ T7822] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.11112'. [ 2287.177456][ T7826] netlink: 'syz.2.11113': attribute type 1 has an invalid length. [ 2287.215520][ T7826] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.11113'. [ 2287.340772][ T7828] FAULT_INJECTION: forcing a failure. [ 2287.340772][ T7828] name failslab, interval 1, probability 0, space 0, times 0 [ 2287.382702][ T7828] CPU: 1 PID: 7828 Comm: syz.0.11111 Not tainted syzkaller #0 [ 2287.390215][ T7828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2287.400293][ T7828] Call Trace: [ 2287.403610][ T7828] [ 2287.406582][ T7828] dump_stack_lvl+0x188/0x24e [ 2287.411306][ T7828] ? show_regs_print_info+0x12/0x12 [ 2287.416543][ T7828] ? load_image+0x410/0x410 [ 2287.421104][ T7828] ? __might_sleep+0xd0/0xd0 [ 2287.425735][ T7828] ? __lock_acquire+0x7c40/0x7c40 [ 2287.430804][ T7828] should_fail_ex+0x390/0x4c0 [ 2287.435537][ T7828] should_failslab+0x5/0x20 [ 2287.440085][ T7828] slab_pre_alloc_hook+0x59/0x300 [ 2287.445183][ T7828] ? tomoyo_encode+0x28a/0x550 [ 2287.450004][ T7828] __kmem_cache_alloc_node+0x4f/0x270 [ 2287.455415][ T7828] ? tomoyo_encode+0x28a/0x550 [ 2287.460218][ T7828] __kmalloc+0xa3/0x240 [ 2287.464422][ T7828] tomoyo_encode+0x28a/0x550 [ 2287.469062][ T7828] tomoyo_realpath_from_path+0x578/0x5c0 [ 2287.474736][ T7828] ? tomoyo_domain+0xd2/0x120 [ 2287.479472][ T7828] ? tomoyo_path_number_perm+0x205/0x650 [ 2287.485152][ T7828] tomoyo_path_number_perm+0x22f/0x650 [ 2287.490658][ T7828] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 2287.497287][ T7828] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2287.502784][ T7828] ? ksys_write+0x1ce/0x260 [ 2287.507331][ T7828] ? common_file_perm+0x171/0x1c0 [ 2287.512423][ T7828] ? __fget_files+0x28/0x460 [ 2287.517060][ T7828] security_file_ioctl+0x6c/0xa0 [ 2287.522072][ T7828] __se_sys_ioctl+0x48/0x170 [ 2287.526702][ T7828] do_syscall_64+0x4c/0xa0 [ 2287.531166][ T7828] ? clear_bhb_loop+0x60/0xb0 [ 2287.535882][ T7828] ? clear_bhb_loop+0x60/0xb0 [ 2287.540610][ T7828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2287.546540][ T7828] RIP: 0033:0x7fd66539e159 [ 2287.550996][ T7828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2287.570633][ T7828] RSP: 002b:00007fd666220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2287.579089][ T7828] RAX: ffffffffffffffda RBX: 00007fd665625fa0 RCX: 00007fd66539e159 [ 2287.587115][ T7828] RDX: 0000200000000240 RSI: 000000000000541b RDI: 0000000000000003 [ 2287.595125][ T7828] RBP: 00007fd666220090 R08: 0000000000000000 R09: 0000000000000000 [ 2287.603147][ T7828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2287.611143][ T7828] R13: 00007fd665626038 R14: 00007fd665625fa0 R15: 00007ffdb7f06a58 [ 2287.619173][ T7828] [ 2287.673131][ T7828] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2288.058000][ T7838] can: request_module (can-proto-0) failed. [ 2288.138784][ T7842] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2288.379257][ T7842] device syzkaller0 entered promiscuous mode [ 2290.737141][ T7856] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.11121'. [ 2290.940421][ T7869] netlink: 'syz.2.11127': attribute type 2 has an invalid length. [ 2290.962968][ T7869] netlink: 164 bytes leftover after parsing attributes in process `syz.2.11127'. [ 2290.981570][ T7873] netlink: 'syz.0.11129': attribute type 10 has an invalid length. [ 2291.048015][ T7873] team0: Device wg1 is up. Set it down before adding it as a team port [ 2291.426700][ T7882] netlink: 'syz.0.11134': attribute type 29 has an invalid length. [ 2291.435562][ T7882] netlink: 'syz.0.11134': attribute type 29 has an invalid length. [ 2291.470305][ T7882] netlink: 'syz.0.11134': attribute type 29 has an invalid length. [ 2291.494090][ T7882] netlink: 'syz.0.11134': attribute type 29 has an invalid length. [ 2291.536300][ T7885] netlink: 'syz.1.11135': attribute type 1 has an invalid length. [ 2291.555802][ T7885] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.11135'. [ 2291.921013][ T7897] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2292.049399][ T7897] device syzkaller0 entered promiscuous mode [ 2292.083188][ T7900] netlink: 'syz.4.11126': attribute type 29 has an invalid length. [ 2292.107226][ T7893] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.11138'. [ 2292.183552][ T7905] netlink: 'syz.1.11141': attribute type 1 has an invalid length. [ 2292.202618][ T7905] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.11141'. [ 2292.354316][ T7909] FAULT_INJECTION: forcing a failure. [ 2292.354316][ T7909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2292.408160][ T7909] CPU: 0 PID: 7909 Comm: syz.1.11143 Not tainted syzkaller #0 [ 2292.415715][ T7909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2292.422823][ T7911] FAULT_INJECTION: forcing a failure. [ 2292.422823][ T7911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2292.425796][ T7909] Call Trace: [ 2292.425806][ T7909] [ 2292.425814][ T7909] dump_stack_lvl+0x188/0x24e [ 2292.449800][ T7909] ? show_regs_print_info+0x12/0x12 [ 2292.455022][ T7909] ? load_image+0x410/0x410 [ 2292.459571][ T7909] ? __lock_acquire+0x7c40/0x7c40 [ 2292.464638][ T7909] should_fail_ex+0x390/0x4c0 [ 2292.469357][ T7909] _copy_from_user+0x2c/0x170 [ 2292.474075][ T7909] bpf_ctx_init+0x127/0x190 [ 2292.478623][ T7909] bpf_prog_test_run_skb+0x2bf/0x18e0 [ 2292.484041][ T7909] ? __fget_files+0x28/0x460 [ 2292.488702][ T7909] ? __fget_files+0x3fc/0x460 [ 2292.493441][ T7909] ? cpu_online+0xa0/0xa0 [ 2292.497808][ T7909] bpf_prog_test_run+0x31c/0x390 [ 2292.502797][ T7909] __sys_bpf+0x62b/0x780 [ 2292.507086][ T7909] ? bpf_link_show_fdinfo+0x380/0x380 [ 2292.512532][ T7909] ? lock_chain_count+0x20/0x20 [ 2292.517448][ T7909] __x64_sys_bpf+0x78/0x90 [ 2292.521899][ T7909] do_syscall_64+0x4c/0xa0 [ 2292.526353][ T7909] ? clear_bhb_loop+0x60/0xb0 [ 2292.531071][ T7909] ? clear_bhb_loop+0x60/0xb0 [ 2292.535769][ T7909] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2292.541697][ T7909] RIP: 0033:0x7ffa9939e159 [ 2292.546129][ T7909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2292.565764][ T7909] RSP: 002b:00007ffa975f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2292.574204][ T7909] RAX: ffffffffffffffda RBX: 00007ffa99625fa0 RCX: 00007ffa9939e159 [ 2292.582203][ T7909] RDX: 000000000000003b RSI: 0000200000000080 RDI: 000000000000000a [ 2292.590197][ T7909] RBP: 00007ffa975f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2292.598189][ T7909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2292.606187][ T7909] R13: 00007ffa99626038 R14: 00007ffa99625fa0 R15: 00007ffeb4c7c428 [ 2292.614186][ T7909] [ 2292.639332][ T7911] CPU: 1 PID: 7911 Comm: syz.2.11144 Not tainted syzkaller #0 [ 2292.646862][ T7911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2292.656953][ T7911] Call Trace: [ 2292.660259][ T7911] [ 2292.663221][ T7911] dump_stack_lvl+0x188/0x24e [ 2292.667940][ T7911] ? show_regs_print_info+0x12/0x12 [ 2292.673182][ T7911] ? load_image+0x410/0x410 [ 2292.677727][ T7911] ? __lock_acquire+0x7c40/0x7c40 [ 2292.682798][ T7911] should_fail_ex+0x390/0x4c0 [ 2292.687525][ T7911] _copy_from_user+0x2c/0x170 [ 2292.692253][ T7911] generic_map_update_batch+0x4dc/0x7f0 [ 2292.697855][ T7911] ? rcu_read_unlock+0xa0/0xa0 [ 2292.702666][ T7911] ? __fdget+0x17c/0x200 [ 2292.706953][ T7911] ? rcu_read_unlock+0xa0/0xa0 [ 2292.711754][ T7911] bpf_map_do_batch+0x475/0x5f0 [ 2292.716659][ T7911] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 2292.722167][ T7911] __sys_bpf+0x6f7/0x780 [ 2292.726475][ T7911] ? bpf_link_show_fdinfo+0x380/0x380 [ 2292.731916][ T7911] ? lock_chain_count+0x20/0x20 [ 2292.736823][ T7911] __x64_sys_bpf+0x78/0x90 [ 2292.741282][ T7911] do_syscall_64+0x4c/0xa0 [ 2292.745743][ T7911] ? clear_bhb_loop+0x60/0xb0 [ 2292.750481][ T7911] ? clear_bhb_loop+0x60/0xb0 [ 2292.755209][ T7911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2292.761149][ T7911] RIP: 0033:0x7f00a899e159 [ 2292.765602][ T7911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2292.785271][ T7911] RSP: 002b:00007f00a995a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2292.793717][ T7911] RAX: ffffffffffffffda RBX: 00007f00a8c25fa0 RCX: 00007f00a899e159 [ 2292.801714][ T7911] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 2292.809721][ T7911] RBP: 00007f00a995a090 R08: 0000000000000000 R09: 0000000000000000 [ 2292.817728][ T7911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2292.825735][ T7911] R13: 00007f00a8c26038 R14: 00007f00a8c25fa0 R15: 00007fff052b4828 [ 2292.833760][ T7911] [ 2294.960481][ T7913] netlink: 'syz.4.11145': attribute type 12 has an invalid length. [ 2294.969212][ T7913] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11145'. [ 2294.982245][ T7919] netlink: 'syz.1.11147': attribute type 2 has an invalid length. [ 2294.996031][ T7919] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11147'. [ 2295.006854][ T7915] netlink: 'syz.2.11146': attribute type 10 has an invalid length. [ 2295.093408][ T7915] team0: Device wg1 is of different type [ 2295.137434][ T7922] device syzkaller0 entered promiscuous mode [ 2295.243176][ T7932] netlink: 'syz.1.11151': attribute type 10 has an invalid length. [ 2295.251463][ T7932] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11151'. [ 2296.120948][ T7966] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2296.244501][ T7966] device syzkaller0 entered promiscuous mode [ 2298.714773][ T7978] netlink: 'syz.4.11165': attribute type 10 has an invalid length. [ 2298.731901][ T7978] netlink: 55 bytes leftover after parsing attributes in process `syz.4.11165'. [ 2299.157119][ T7997] FAULT_INJECTION: forcing a failure. [ 2299.157119][ T7997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2299.188403][ T7997] CPU: 0 PID: 7997 Comm: syz.3.11168 Not tainted syzkaller #0 [ 2299.195919][ T7997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2299.206013][ T7997] Call Trace: [ 2299.209325][ T7997] [ 2299.212281][ T7997] dump_stack_lvl+0x188/0x24e [ 2299.216999][ T7997] ? show_regs_print_info+0x12/0x12 [ 2299.222224][ T7997] ? load_image+0x410/0x410 [ 2299.226805][ T7997] ? __lock_acquire+0x7c40/0x7c40 [ 2299.231874][ T7997] ? do_raw_spin_unlock+0x11d/0x230 [ 2299.237117][ T7997] should_fail_ex+0x390/0x4c0 [ 2299.241861][ T7997] _copy_from_user+0x2c/0x170 [ 2299.246579][ T7997] ppp_get_filter+0xa3/0x1c0 [ 2299.251276][ T7997] ? ppp_set_compress+0x720/0x720 [ 2299.256376][ T7997] ppp_ioctl+0xe36/0x1b20 [ 2299.260755][ T7997] ? ppp_poll+0x250/0x250 [ 2299.265119][ T7997] ? __fget_files+0x28/0x460 [ 2299.269796][ T7997] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2299.274801][ T7997] ? security_file_ioctl+0x7c/0xa0 [ 2299.279962][ T7997] ? ppp_poll+0x250/0x250 [ 2299.284325][ T7997] __se_sys_ioctl+0xfa/0x170 [ 2299.288965][ T7997] do_syscall_64+0x4c/0xa0 [ 2299.293420][ T7997] ? clear_bhb_loop+0x60/0xb0 [ 2299.298136][ T7997] ? clear_bhb_loop+0x60/0xb0 [ 2299.302851][ T7997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2299.308790][ T7997] RIP: 0033:0x7f042b79e159 [ 2299.313264][ T7997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2299.332903][ T7997] RSP: 002b:00007f042c5fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2299.341381][ T7997] RAX: ffffffffffffffda RBX: 00007f042ba26180 RCX: 00007f042b79e159 [ 2299.349391][ T7997] RDX: 0000200000000180 RSI: 0000000040107447 RDI: 0000000000000004 [ 2299.357385][ T7997] RBP: 00007f042c5fe090 R08: 0000000000000000 R09: 0000000000000000 [ 2299.365401][ T7997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2299.373407][ T7997] R13: 00007f042ba26218 R14: 00007f042ba26180 R15: 00007ffeed043338 [ 2299.381447][ T7997] [ 2299.797582][ T8018] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.11175'. [ 2300.050820][ T8032] netlink: 'syz.2.11180': attribute type 10 has an invalid length. [ 2300.070773][ T8032] netlink: 55 bytes leftover after parsing attributes in process `syz.2.11180'. [ 2300.114452][ T8033] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2300.179592][ T8033] device syzkaller0 entered promiscuous mode [ 2300.456853][ T8044] netlink: 'syz.2.11183': attribute type 29 has an invalid length. [ 2300.688382][ T8057] netlink: 'syz.1.11187': attribute type 3 has an invalid length. [ 2300.696700][ T8057] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.11187'. [ 2302.716971][ T8044] netlink: 'syz.2.11183': attribute type 29 has an invalid length. [ 2302.826627][ T8063] FAULT_INJECTION: forcing a failure. [ 2302.826627][ T8063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2302.841423][ T8063] CPU: 1 PID: 8063 Comm: syz.2.11188 Not tainted syzkaller #0 [ 2302.848933][ T8063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2302.859020][ T8063] Call Trace: [ 2302.862321][ T8063] [ 2302.865276][ T8063] dump_stack_lvl+0x188/0x24e [ 2302.869984][ T8063] ? show_regs_print_info+0x12/0x12 [ 2302.875211][ T8063] ? load_image+0x410/0x410 [ 2302.879782][ T8063] ? __lock_acquire+0x7c40/0x7c40 [ 2302.884847][ T8063] ? snprintf+0xe5/0x140 [ 2302.889134][ T8063] should_fail_ex+0x390/0x4c0 [ 2302.893865][ T8063] _copy_to_user+0x2c/0x130 [ 2302.898400][ T8063] simple_read_from_buffer+0xe3/0x150 [ 2302.903848][ T8063] proc_fail_nth_read+0x1a6/0x220 [ 2302.908919][ T8063] ? proc_fault_inject_write+0x310/0x310 [ 2302.914597][ T8063] ? fsnotify_perm+0x248/0x550 [ 2302.919411][ T8063] ? proc_fault_inject_write+0x310/0x310 [ 2302.925081][ T8063] vfs_read+0x2db/0x960 [ 2302.929288][ T8063] ? kernel_read+0x1e0/0x1e0 [ 2302.933938][ T8063] ? __fget_files+0x28/0x460 [ 2302.938607][ T8063] ? __fget_files+0x3fc/0x460 [ 2302.943342][ T8063] ? __fdget_pos+0x2ae/0x360 [ 2302.947967][ T8063] ? ksys_read+0x70/0x260 [ 2302.952329][ T8063] ksys_read+0x14d/0x260 [ 2302.956619][ T8063] ? vfs_write+0x9a0/0x9a0 [ 2302.961087][ T8063] ? lockdep_hardirqs_on+0x94/0x140 [ 2302.966331][ T8063] do_syscall_64+0x4c/0xa0 [ 2302.970797][ T8063] ? clear_bhb_loop+0x60/0xb0 [ 2302.975507][ T8063] ? clear_bhb_loop+0x60/0xb0 [ 2302.980227][ T8063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2302.986162][ T8063] RIP: 0033:0x7f00a895e98e [ 2302.990615][ T8063] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2303.010252][ T8063] RSP: 002b:00007f00a9959fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2303.018708][ T8063] RAX: ffffffffffffffda RBX: 00007f00a995a6c0 RCX: 00007f00a895e98e [ 2303.026739][ T8063] RDX: 000000000000000f RSI: 00007f00a995a0a0 RDI: 0000000000000009 [ 2303.034735][ T8063] RBP: 00007f00a995a090 R08: 0000000000000000 R09: 0000000000000000 [ 2303.042736][ T8063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2303.050737][ T8063] R13: 00007f00a8c26038 R14: 00007f00a8c25fa0 R15: 00007fff052b4828 [ 2303.058761][ T8063] [ 2303.164213][ T8076] FAULT_INJECTION: forcing a failure. [ 2303.164213][ T8076] name failslab, interval 1, probability 0, space 0, times 0 [ 2303.177436][ T8076] CPU: 1 PID: 8076 Comm: syz.4.11191 Not tainted syzkaller #0 [ 2303.184928][ T8076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2303.195017][ T8076] Call Trace: [ 2303.198310][ T8076] [ 2303.201250][ T8076] dump_stack_lvl+0x188/0x24e [ 2303.205945][ T8076] ? show_regs_print_info+0x12/0x12 [ 2303.211169][ T8076] ? load_image+0x410/0x410 [ 2303.215690][ T8076] ? perf_trace_lock+0xf8/0x390 [ 2303.220566][ T8076] ? verify_lock_unused+0x140/0x140 [ 2303.225793][ T8076] ? perf_trace_lock+0xf8/0x390 [ 2303.230681][ T8076] should_fail_ex+0x390/0x4c0 [ 2303.235384][ T8076] should_failslab+0x5/0x20 [ 2303.239926][ T8076] slab_pre_alloc_hook+0x59/0x300 [ 2303.244971][ T8076] kmem_cache_alloc+0x56/0x2f0 [ 2303.249745][ T8076] ? skb_clone+0x1e7/0x370 [ 2303.254180][ T8076] skb_clone+0x1e7/0x370 [ 2303.258443][ T8076] __netlink_deliver_tap+0x3e4/0x7e0 [ 2303.263751][ T8076] ? netlink_deliver_tap+0x2e/0x1b0 [ 2303.268969][ T8076] netlink_deliver_tap+0x19c/0x1b0 [ 2303.274098][ T8076] netlink_unicast+0x777/0x920 [ 2303.278889][ T8076] netlink_sendmsg+0x8ad/0xbd0 [ 2303.283676][ T8076] ? netlink_getsockopt+0x550/0x550 [ 2303.288890][ T8076] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2303.294484][ T8076] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2303.299788][ T8076] ? security_socket_sendmsg+0x7c/0xa0 [ 2303.305274][ T8076] ? netlink_getsockopt+0x550/0x550 [ 2303.310494][ T8076] ____sys_sendmsg+0x5ed/0x9a0 [ 2303.315308][ T8076] ? __sys_sendmsg_sock+0x30/0x30 [ 2303.320344][ T8076] ? __import_iovec+0x306/0x510 [ 2303.325216][ T8076] ? import_iovec+0x6f/0xa0 [ 2303.329779][ T8076] ___sys_sendmsg+0x2a2/0x360 [ 2303.334474][ T8076] ? __sys_sendmsg+0x2a0/0x2a0 [ 2303.339269][ T8076] ? __lock_acquire+0x7c40/0x7c40 [ 2303.344331][ T8076] __se_sys_sendmsg+0x1c3/0x2b0 [ 2303.349223][ T8076] ? __x64_sys_sendmsg+0x80/0x80 [ 2303.354222][ T8076] ? lockdep_hardirqs_on+0x94/0x140 [ 2303.359462][ T8076] do_syscall_64+0x4c/0xa0 [ 2303.363896][ T8076] ? clear_bhb_loop+0x60/0xb0 [ 2303.368590][ T8076] ? clear_bhb_loop+0x60/0xb0 [ 2303.373304][ T8076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2303.379225][ T8076] RIP: 0033:0x7fe1d259e159 [ 2303.383746][ T8076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2303.403374][ T8076] RSP: 002b:00007fe1d338d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2303.411813][ T8076] RAX: ffffffffffffffda RBX: 00007fe1d2825fa0 RCX: 00007fe1d259e159 [ 2303.419801][ T8076] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 2303.427785][ T8076] RBP: 00007fe1d338d090 R08: 0000000000000000 R09: 0000000000000000 [ 2303.435772][ T8076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2303.443756][ T8076] R13: 00007fe1d2826038 R14: 00007fe1d2825fa0 R15: 00007ffe8546db68 [ 2303.451756][ T8076] [ 2303.479813][ T8076] netlink: 'syz.4.11191': attribute type 10 has an invalid length. [ 2303.516714][ T8076] 8021q: adding VLAN 0 to HW filter on device team0 [ 2303.561863][ T8076] bond0: (slave team0): Enslaving as an active interface with an up link [ 2303.574119][ T8080] netlink: 'syz.2.11193': attribute type 10 has an invalid length. [ 2303.605991][ T8080] 8021q: adding VLAN 0 to HW filter on device team0 [ 2303.655538][ T8080] bond0: (slave team0): Enslaving as an active interface with an up link [ 2303.801725][ T8086] netlink: 'syz.1.11195': attribute type 10 has an invalid length. [ 2303.827334][ T8086] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11195'. [ 2303.939013][ T8093] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.11198'. [ 2304.142187][ T8098] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2304.160039][ T8102] FAULT_INJECTION: forcing a failure. [ 2304.160039][ T8102] name failslab, interval 1, probability 0, space 0, times 0 [ 2304.206722][ T8102] CPU: 0 PID: 8102 Comm: syz.0.11202 Not tainted syzkaller #0 [ 2304.214349][ T8102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2304.224452][ T8102] Call Trace: [ 2304.227757][ T8102] [ 2304.230713][ T8102] dump_stack_lvl+0x188/0x24e [ 2304.235431][ T8102] ? show_regs_print_info+0x12/0x12 [ 2304.240663][ T8102] ? load_image+0x410/0x410 [ 2304.245218][ T8102] ? __might_sleep+0xd0/0xd0 [ 2304.249844][ T8102] ? __lock_acquire+0x7c40/0x7c40 [ 2304.254905][ T8102] should_fail_ex+0x390/0x4c0 [ 2304.259638][ T8102] should_failslab+0x5/0x20 [ 2304.264167][ T8102] slab_pre_alloc_hook+0x59/0x300 [ 2304.269231][ T8102] kmem_cache_alloc_lru+0x49/0x2e0 [ 2304.274378][ T8102] ? __d_alloc+0x2e/0x6e0 [ 2304.278744][ T8102] __d_alloc+0x2e/0x6e0 [ 2304.282931][ T8102] ? d_alloc_pseudo+0xe/0x70 [ 2304.287558][ T8102] d_alloc_pseudo+0x19/0x70 [ 2304.292121][ T8102] alloc_file_pseudo+0xe0/0x200 [ 2304.297014][ T8102] ? alloc_empty_file_noaccount+0x80/0x80 [ 2304.302816][ T8102] anon_inode_getfile+0xc1/0x1a0 [ 2304.307806][ T8102] __se_sys_perf_event_open+0xc2a/0x1ec0 [ 2304.313471][ T8102] ? __fget_files+0x3fc/0x460 [ 2304.318203][ T8102] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 2304.323878][ T8102] ? lockdep_hardirqs_on+0x94/0x140 [ 2304.329112][ T8102] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 2304.334773][ T8102] do_syscall_64+0x4c/0xa0 [ 2304.339222][ T8102] ? clear_bhb_loop+0x60/0xb0 [ 2304.343937][ T8102] ? clear_bhb_loop+0x60/0xb0 [ 2304.348662][ T8102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2304.354596][ T8102] RIP: 0033:0x7fd66539e159 [ 2304.359044][ T8102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2304.378683][ T8102] RSP: 002b:00007fd666220028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2304.387134][ T8102] RAX: ffffffffffffffda RBX: 00007fd665625fa0 RCX: 00007fd66539e159 [ 2304.395159][ T8102] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000012c0 [ 2304.403169][ T8102] RBP: 00007fd666220090 R08: 0000000000000000 R09: 0000000000000000 [ 2304.411168][ T8102] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2304.419165][ T8102] R13: 00007fd665626038 R14: 00007fd665625fa0 R15: 00007ffdb7f06a58 [ 2304.427194][ T8102] [ 2304.494467][ T8098] device syzkaller0 entered promiscuous mode [ 2306.767493][ T8110] netlink: 'syz.4.11204': attribute type 10 has an invalid length. [ 2306.775603][ T8110] netlink: 2 bytes leftover after parsing attributes in process `syz.4.11204'. [ 2306.787035][ T8110] bridge0: port 3(ip6gretap0) entered disabled state [ 2306.793955][ T8110] bridge0: port 2(bridge_slave_1) entered disabled state [ 2306.813736][ T8110] bridge0: port 3(ip6gretap0) entered blocking state [ 2306.820552][ T8110] bridge0: port 3(ip6gretap0) entered forwarding state [ 2306.827616][ T8110] bridge0: port 2(bridge_slave_1) entered blocking state [ 2306.834819][ T8110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2306.886169][ T8110] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2307.159308][ T8130] netlink: 'syz.0.11210': attribute type 10 has an invalid length. [ 2307.178450][ T8131] delete_channel: no stack [ 2307.184030][ T8131] delete_channel: no stack [ 2307.188019][ T8130] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11210'. [ 2307.896962][ T8150] netlink: 'syz.4.11217': attribute type 3 has an invalid length. [ 2307.955499][ T8150] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.11217'. [ 2308.019977][ T8154] FAULT_INJECTION: forcing a failure. [ 2308.019977][ T8154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2308.041745][ T8154] CPU: 1 PID: 8154 Comm: syz.2.11218 Not tainted syzkaller #0 [ 2308.049263][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2308.059344][ T8154] Call Trace: [ 2308.062660][ T8154] [ 2308.065633][ T8154] dump_stack_lvl+0x188/0x24e [ 2308.070339][ T8154] ? show_regs_print_info+0x12/0x12 [ 2308.075585][ T8154] ? load_image+0x410/0x410 [ 2308.080125][ T8154] ? __might_fault+0xa6/0x120 [ 2308.084825][ T8154] should_fail_ex+0x390/0x4c0 [ 2308.089525][ T8154] copyin+0x1b/0x120 [ 2308.093446][ T8154] _copy_from_iter+0x447/0x1130 [ 2308.098324][ T8154] ? copyout_mc+0x110/0x110 [ 2308.102842][ T8154] ? __virt_addr_valid+0x188/0x540 [ 2308.107973][ T8154] ? __virt_addr_valid+0x188/0x540 [ 2308.113115][ T8154] ? __virt_addr_valid+0x467/0x540 [ 2308.118267][ T8154] ? __phys_addr_symbol+0x2b/0x70 [ 2308.123309][ T8154] ? __check_object_size+0x4f6/0xa70 [ 2308.128617][ T8154] netlink_sendmsg+0x755/0xbd0 [ 2308.133425][ T8154] ? netlink_getsockopt+0x550/0x550 [ 2308.138649][ T8154] ? apparmor_socket_sendmsg+0x16c/0x330 [ 2308.144334][ T8154] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2308.149634][ T8154] ? security_socket_sendmsg+0x7c/0xa0 [ 2308.155110][ T8154] ? netlink_getsockopt+0x550/0x550 [ 2308.160335][ T8154] ____sys_sendmsg+0x5ed/0x9a0 [ 2308.165154][ T8154] ? __sys_sendmsg_sock+0x30/0x30 [ 2308.170197][ T8154] ? __import_iovec+0x306/0x510 [ 2308.175098][ T8154] ? import_iovec+0x6f/0xa0 [ 2308.179630][ T8154] ___sys_sendmsg+0x2a2/0x360 [ 2308.184328][ T8154] ? __sys_sendmsg+0x2a0/0x2a0 [ 2308.189131][ T8154] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2308.194928][ T8154] __se_sys_sendmsg+0x1c3/0x2b0 [ 2308.199813][ T8154] ? __x64_sys_sendmsg+0x80/0x80 [ 2308.204796][ T8154] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2308.210715][ T8154] do_syscall_64+0x4c/0xa0 [ 2308.215142][ T8154] ? clear_bhb_loop+0x60/0xb0 [ 2308.219859][ T8154] ? clear_bhb_loop+0x60/0xb0 [ 2308.224576][ T8154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2308.230492][ T8154] RIP: 0033:0x7f00a899e159 [ 2308.234935][ T8154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2308.254565][ T8154] RSP: 002b:00007f00a995a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2308.262992][ T8154] RAX: ffffffffffffffda RBX: 00007f00a8c25fa0 RCX: 00007f00a899e159 [ 2308.270987][ T8154] RDX: 0000000020000090 RSI: 0000200000000080 RDI: 0000000000000006 [ 2308.278980][ T8154] RBP: 00007f00a995a090 R08: 0000000000000000 R09: 0000000000000000 [ 2308.286968][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2308.294963][ T8154] R13: 00007f00a8c26038 R14: 00007f00a8c25fa0 R15: 00007fff052b4828 [ 2308.302965][ T8154] [ 2308.342102][ T8152] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11217'. [ 2308.453547][ T8152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2308.475648][ T8152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2308.504225][ T8152] bond0 (unregistering): (slave team0): Releasing backup interface [ 2308.540176][ T8152] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 2308.549566][ T8152] bridge0: port 3(ip6gretap0) entered disabled state [ 2308.556501][ T8152] bridge0: port 2(bridge_slave_1) entered disabled state [ 2308.575540][ T8152] bond0 (unregistering): Released all slaves [ 2308.601758][ T8158] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.11219'. [ 2308.940619][ T8173] FAULT_INJECTION: forcing a failure. [ 2308.940619][ T8173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2308.967262][ T8173] CPU: 0 PID: 8173 Comm: syz.2.11225 Not tainted syzkaller #0 [ 2308.974776][ T8173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2308.984857][ T8173] Call Trace: [ 2308.988167][ T8173] [ 2308.991132][ T8173] dump_stack_lvl+0x188/0x24e [ 2308.995863][ T8173] ? show_regs_print_info+0x12/0x12 [ 2309.001096][ T8173] ? load_image+0x410/0x410 [ 2309.005658][ T8173] ? __might_fault+0xa6/0x120 [ 2309.010379][ T8173] should_fail_ex+0x390/0x4c0 [ 2309.015106][ T8173] copyin+0x1b/0x120 [ 2309.019058][ T8173] _copy_from_iter+0x447/0x1130 [ 2309.023992][ T8173] ? copyout_mc+0x110/0x110 [ 2309.028582][ T8173] ? __virt_addr_valid+0x188/0x540 [ 2309.033744][ T8173] ? __virt_addr_valid+0x188/0x540 [ 2309.038899][ T8173] ? __virt_addr_valid+0x467/0x540 [ 2309.044086][ T8173] ? __phys_addr_symbol+0x2b/0x70 [ 2309.049142][ T8173] ? __check_object_size+0x4f6/0xa70 [ 2309.054458][ T8173] netlink_sendmsg+0x755/0xbd0 [ 2309.059266][ T8173] ? netlink_getsockopt+0x550/0x550 [ 2309.064509][ T8173] ? ____sys_sendmsg+0x569/0x9a0 [ 2309.069574][ T8173] ? netlink_getsockopt+0x550/0x550 [ 2309.074793][ T8173] ____sys_sendmsg+0x5ed/0x9a0 [ 2309.079698][ T8173] ? __sys_sendmsg_sock+0x30/0x30 [ 2309.084735][ T8173] ? __import_iovec+0x306/0x510 [ 2309.089623][ T8173] ? import_iovec+0x6f/0xa0 [ 2309.094186][ T8173] ___sys_sendmsg+0x2a2/0x360 [ 2309.098896][ T8173] ? __sys_sendmsg+0x2a0/0x2a0 [ 2309.103708][ T8173] __se_sys_sendmsg+0x1c3/0x2b0 [ 2309.108574][ T8173] ? __x64_sys_sendmsg+0x80/0x80 [ 2309.113560][ T8173] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2309.119488][ T8173] do_syscall_64+0x4c/0xa0 [ 2309.123948][ T8173] ? clear_bhb_loop+0x60/0xb0 [ 2309.128647][ T8173] ? clear_bhb_loop+0x60/0xb0 [ 2309.133347][ T8173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2309.139265][ T8173] RIP: 0033:0x7f00a899e159 [ 2309.143700][ T8173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2309.163336][ T8173] RSP: 002b:00007f00a995a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2309.171771][ T8173] RAX: ffffffffffffffda RBX: 00007f00a8c25fa0 RCX: 00007f00a899e159 [ 2309.179770][ T8173] RDX: 0000000004000040 RSI: 0000200000000940 RDI: 0000000000000004 [ 2309.187761][ T8173] RBP: 00007f00a995a090 R08: 0000000000000000 R09: 0000000000000000 [ 2309.195750][ T8173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2309.203738][ T8173] R13: 00007f00a8c26038 R14: 00007f00a8c25fa0 R15: 00007fff052b4828 [ 2309.211730][ T8173] [ 2309.230238][ T8176] netlink: 'syz.1.11223': attribute type 13 has an invalid length. [ 2309.268559][ T8176] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11223'. [ 2309.293079][ T8176] syz_tun: refused to change device tx_queue_len [ 2309.302101][ T8176] net_ratelimit: 3660 callbacks suppressed [ 2309.302115][ T8176] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2309.483016][ T8182] netlink: 'syz.0.11227': attribute type 10 has an invalid length. [ 2309.496532][ T8182] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11227'. [ 2310.136852][ T8209] netlink: 'syz.3.11234': attribute type 10 has an invalid length. [ 2310.458108][ T8218] FAULT_INJECTION: forcing a failure. [ 2310.458108][ T8218] name failslab, interval 1, probability 0, space 0, times 0 [ 2310.492852][ T8218] CPU: 1 PID: 8218 Comm: syz.3.11239 Not tainted syzkaller #0 [ 2310.500380][ T8218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2310.510468][ T8218] Call Trace: [ 2310.513771][ T8218] [ 2310.516720][ T8218] dump_stack_lvl+0x188/0x24e [ 2310.521446][ T8218] ? show_regs_print_info+0x12/0x12 [ 2310.526704][ T8218] ? load_image+0x410/0x410 [ 2310.531262][ T8218] ? __might_sleep+0xd0/0xd0 [ 2310.535905][ T8218] ? __lock_acquire+0x7c40/0x7c40 [ 2310.540975][ T8218] ? tcp_current_mss+0x6e0/0x6e0 [ 2310.545946][ T8218] should_fail_ex+0x390/0x4c0 [ 2310.550662][ T8218] should_failslab+0x5/0x20 [ 2310.555186][ T8218] slab_pre_alloc_hook+0x59/0x300 [ 2310.560260][ T8218] kmem_cache_alloc_node+0x5a/0x310 [ 2310.565505][ T8218] ? __alloc_skb+0xf9/0x7d0 [ 2310.570081][ T8218] __alloc_skb+0xf9/0x7d0 [ 2310.574453][ T8218] tcp_stream_alloc_skb+0x3e/0x330 [ 2310.579609][ T8218] tcp_sendmsg_locked+0xca4/0x39e0 [ 2310.584807][ T8218] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2310.590841][ T8218] ? tcp_set_state+0x520/0x520 [ 2310.595676][ T8218] tcp_sendmsg+0x2b/0x40 [ 2310.599939][ T8218] ? inet_send_prepare+0x250/0x250 [ 2310.605075][ T8218] ____sys_sendmsg+0x5ed/0x9a0 [ 2310.609863][ T8218] ? __sys_sendmsg_sock+0x30/0x30 [ 2310.614891][ T8218] ? __import_iovec+0x306/0x510 [ 2310.619778][ T8218] ? import_iovec+0x6f/0xa0 [ 2310.624327][ T8218] ___sys_sendmsg+0x2a2/0x360 [ 2310.629022][ T8218] ? __sys_sendmsg+0x2a0/0x2a0 [ 2310.633826][ T8218] ? __lock_acquire+0x7c40/0x7c40 [ 2310.638913][ T8218] __se_sys_sendmsg+0x1c3/0x2b0 [ 2310.643816][ T8218] ? __x64_sys_sendmsg+0x80/0x80 [ 2310.648776][ T8218] ? lockdep_hardirqs_on+0x94/0x140 [ 2310.653998][ T8218] do_syscall_64+0x4c/0xa0 [ 2310.658430][ T8218] ? clear_bhb_loop+0x60/0xb0 [ 2310.663126][ T8218] ? clear_bhb_loop+0x60/0xb0 [ 2310.667833][ T8218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2310.673758][ T8218] RIP: 0033:0x7f042b79e159 [ 2310.678192][ T8218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2310.697812][ T8218] RSP: 002b:00007f042c640028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2310.706247][ T8218] RAX: ffffffffffffffda RBX: 00007f042ba25fa0 RCX: 00007f042b79e159 [ 2310.714239][ T8218] RDX: 000000000400c081 RSI: 0000200000000000 RDI: 0000000000000003 [ 2310.722229][ T8218] RBP: 00007f042c640090 R08: 0000000000000000 R09: 0000000000000000 [ 2310.730227][ T8218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2310.738219][ T8218] R13: 00007f042ba26038 R14: 00007f042ba25fa0 R15: 00007ffeed043338 [ 2310.746222][ T8218] [ 2310.982519][ T8227] netlink: 'syz.3.11242': attribute type 10 has an invalid length. [ 2311.007895][ T8227] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11242'. [ 2311.157528][ T8233] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2311.260466][ T8233] device syzkaller0 entered promiscuous mode [ 2314.782020][ T8229] device syzkaller0 entered promiscuous mode [ 2316.570572][ T8260] bond0: (slave bridge_slave_1): Error: Slave has XDP program loaded, please unload before enslaving [ 2316.589249][ T8261] netlink: 'syz.3.11253': attribute type 10 has an invalid length. [ 2316.656264][ T8268] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2316.662782][ T8268] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2316.779954][ T8270] FAULT_INJECTION: forcing a failure. [ 2316.779954][ T8270] name failslab, interval 1, probability 0, space 0, times 0 [ 2316.834440][ T8270] CPU: 0 PID: 8270 Comm: syz.2.11255 Not tainted syzkaller #0 [ 2316.841970][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2316.852053][ T8270] Call Trace: [ 2316.855357][ T8270] [ 2316.858322][ T8270] dump_stack_lvl+0x188/0x24e [ 2316.863042][ T8270] ? show_regs_print_info+0x12/0x12 [ 2316.868276][ T8270] ? load_image+0x410/0x410 [ 2316.872848][ T8270] ? __might_sleep+0xd0/0xd0 [ 2316.877480][ T8270] ? __lock_acquire+0x7c40/0x7c40 [ 2316.882578][ T8270] should_fail_ex+0x390/0x4c0 [ 2316.887314][ T8270] should_failslab+0x5/0x20 [ 2316.891863][ T8270] slab_pre_alloc_hook+0x59/0x300 [ 2316.896964][ T8270] ? netdevice_event+0x325/0x900 [ 2316.901975][ T8270] __kmem_cache_alloc_node+0x4f/0x270 [ 2316.907395][ T8270] ? netdevice_event+0x325/0x900 [ 2316.912391][ T8270] kmalloc_trace+0x26/0xe0 [ 2316.916871][ T8270] netdevice_event+0x325/0x900 [ 2316.921690][ T8270] ? netdev_upper_walk+0x210/0x210 [ 2316.926853][ T8270] ? add_default_gids+0xe0/0xe0 [ 2316.931758][ T8270] ? is_ndev_for_default_gid_filter+0x2e0/0x2e0 [ 2316.938048][ T8270] ? enum_all_gids_of_dev_cb+0x290/0x290 [ 2316.943720][ T8270] ? netdevice_event+0x900/0x900 [ 2316.948697][ T8270] ? add_default_gids+0xe0/0xe0 [ 2316.953583][ T8270] ? netlbl_unlhsh_netdev_handler+0x187/0x260 [ 2316.959803][ T8270] raw_notifier_call_chain+0xcb/0x160 [ 2316.965229][ T8270] dev_set_mac_address+0x2ed/0x400 [ 2316.970393][ T8270] ? dev_pre_changeaddr_notify+0x120/0x120 [ 2316.976248][ T8270] ? rwsem_write_trylock+0x135/0x1c0 [ 2316.981588][ T8270] ? clear_nonspinnable+0x60/0x60 [ 2316.986656][ T8270] ? trace_contention_end+0x5f/0x170 [ 2316.991989][ T8270] ? full_name_hash+0x8e/0xe0 [ 2316.996722][ T8270] dev_set_mac_address_user+0x2d/0x50 [ 2317.002170][ T8270] dev_ifsioc+0x74e/0xd50 [ 2317.006540][ T8270] ? dev_ioctl+0xe80/0xe80 [ 2317.010993][ T8270] ? apparmor_capable+0x12c/0x190 [ 2317.016065][ T8270] ? full_name_hash+0x8e/0xe0 [ 2317.020797][ T8270] ? dev_load+0x1d/0x1e0 [ 2317.025075][ T8270] ? dev_load+0x1d/0x1e0 [ 2317.029355][ T8270] dev_ioctl+0x55e/0xe80 [ 2317.033649][ T8270] sock_do_ioctl+0x245/0x320 [ 2317.038286][ T8270] ? sock_show_fdinfo+0xb0/0xb0 [ 2317.043203][ T8270] sock_ioctl+0x48a/0x700 [ 2317.047577][ T8270] ? sock_poll+0x420/0x420 [ 2317.052042][ T8270] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2317.057019][ T8270] ? security_file_ioctl+0x7c/0xa0 [ 2317.062188][ T8270] ? sock_poll+0x420/0x420 [ 2317.066649][ T8270] __se_sys_ioctl+0xfa/0x170 [ 2317.071294][ T8270] do_syscall_64+0x4c/0xa0 [ 2317.075752][ T8270] ? clear_bhb_loop+0x60/0xb0 [ 2317.080472][ T8270] ? clear_bhb_loop+0x60/0xb0 [ 2317.085199][ T8270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2317.091148][ T8270] RIP: 0033:0x7f00a899e159 [ 2317.095610][ T8270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2317.115254][ T8270] RSP: 002b:00007f00a995a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2317.123711][ T8270] RAX: ffffffffffffffda RBX: 00007f00a8c25fa0 RCX: 00007f00a899e159 [ 2317.131723][ T8270] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000004 [ 2317.139732][ T8270] RBP: 00007f00a995a090 R08: 0000000000000000 R09: 0000000000000000 [ 2317.147738][ T8270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2317.155761][ T8270] R13: 00007f00a8c26038 R14: 00007f00a8c25fa0 R15: 00007fff052b4828 [ 2317.163795][ T8270] [ 2317.214077][ T8274] netlink: 'syz.0.11256': attribute type 10 has an invalid length. [ 2317.242196][ T8274] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11256'. [ 2317.651035][ T8294] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2317.793524][ T8294] device syzkaller0 entered promiscuous mode [ 2322.461889][ T8325] delete_channel: no stack [ 2323.130605][ T8332] netlink: 'syz.1.11275': attribute type 10 has an invalid length. [ 2323.153895][ T8332] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11275'. [ 2324.321021][ T8368] netlink: 'syz.0.11288': attribute type 2 has an invalid length. [ 2324.349993][ T8368] netlink: 'syz.0.11288': attribute type 4 has an invalid length. [ 2324.379503][ T8368] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11288'. [ 2324.409892][ T8370] delete_channel: no stack [ 2324.414433][ T8370] delete_channel: no stack [ 2324.663087][ T8356] device syzkaller0 entered promiscuous mode [ 2324.685188][ T8373] netlink: 'syz.3.11290': attribute type 10 has an invalid length. [ 2324.715440][ T8373] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11290'. [ 2330.018306][ T8413] FAULT_INJECTION: forcing a failure. [ 2330.018306][ T8413] name failslab, interval 1, probability 0, space 0, times 0 [ 2330.065743][ T8413] CPU: 1 PID: 8413 Comm: syz.4.11303 Not tainted syzkaller #0 [ 2330.073291][ T8413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2330.083427][ T8413] Call Trace: [ 2330.086754][ T8413] [ 2330.089731][ T8413] dump_stack_lvl+0x188/0x24e [ 2330.094499][ T8413] ? show_regs_print_info+0x12/0x12 [ 2330.099751][ T8413] ? load_image+0x410/0x410 [ 2330.104332][ T8413] ? __might_sleep+0xd0/0xd0 [ 2330.108987][ T8413] ? __lock_acquire+0x7c40/0x7c40 [ 2330.114090][ T8413] should_fail_ex+0x390/0x4c0 [ 2330.118846][ T8413] should_failslab+0x5/0x20 [ 2330.123414][ T8413] slab_pre_alloc_hook+0x59/0x300 [ 2330.128524][ T8413] ? tomoyo_encode+0x28a/0x550 [ 2330.133353][ T8413] __kmem_cache_alloc_node+0x4f/0x270 [ 2330.138795][ T8413] ? tomoyo_encode+0x28a/0x550 [ 2330.143639][ T8413] __kmalloc+0xa3/0x240 [ 2330.147863][ T8413] tomoyo_encode+0x28a/0x550 [ 2330.152562][ T8413] tomoyo_realpath_from_path+0x578/0x5c0 [ 2330.158291][ T8413] ? tomoyo_domain+0xd2/0x120 [ 2330.163051][ T8413] ? tomoyo_path_number_perm+0x205/0x650 [ 2330.168744][ T8413] tomoyo_path_number_perm+0x22f/0x650 [ 2330.174260][ T8413] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 2330.180921][ T8413] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2330.186443][ T8413] ? ksys_write+0x1ce/0x260 [ 2330.191012][ T8413] ? common_file_perm+0x171/0x1c0 [ 2330.196209][ T8413] ? __fget_files+0x28/0x460 [ 2330.200892][ T8413] security_file_ioctl+0x6c/0xa0 [ 2330.205899][ T8413] __se_sys_ioctl+0x48/0x170 [ 2330.210573][ T8413] do_syscall_64+0x4c/0xa0 [ 2330.215047][ T8413] ? clear_bhb_loop+0x60/0xb0 [ 2330.219772][ T8413] ? clear_bhb_loop+0x60/0xb0 [ 2330.224499][ T8413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2330.230453][ T8413] RIP: 0033:0x7fe1d259e159 [ 2330.234932][ T8413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2330.254589][ T8413] RSP: 002b:00007fe1d338d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2330.263058][ T8413] RAX: ffffffffffffffda RBX: 00007fe1d2825fa0 RCX: 00007fe1d259e159 [ 2330.271096][ T8413] RDX: 0000200000000240 RSI: 000000000000541b RDI: 0000000000000003 [ 2330.278575][ T8410] netlink: 'syz.1.11302': attribute type 10 has an invalid length. [ 2330.279090][ T8413] RBP: 00007fe1d338d090 R08: 0000000000000000 R09: 0000000000000000 [ 2330.287584][ T8410] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11302'. [ 2330.294991][ T8413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2330.295012][ T8413] R13: 00007fe1d2826038 R14: 00007fe1d2825fa0 R15: 00007ffe8546db68 [ 2330.295077][ T8413] [ 2330.411695][ T8413] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2336.283899][ T8474] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.11317'. [ 2336.307580][ T8474] netlink: zone id is out of range [ 2336.316807][ T8474] netlink: zone id is out of range [ 2336.342883][ T8478] netlink: 'syz.0.11318': attribute type 10 has an invalid length. [ 2336.344319][ T8474] netlink: zone id is out of range [ 2336.373218][ T8478] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11318'. [ 2336.438363][ T8474] netlink: zone id is out of range [ 2336.451815][ T8474] netlink: zone id is out of range [ 2336.474821][ T8474] netlink: zone id is out of range [ 2336.491835][ T8474] netlink: zone id is out of range [ 2336.606223][ T8474] netlink: del zone limit has 4 unknown bytes [ 2336.905913][ T8493] netlink: 279 bytes leftover after parsing attributes in process `syz.0.11323'. [ 2337.051934][ T8499] netlink: 'syz.1.11326': attribute type 1 has an invalid length. [ 2337.074192][ T8499] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.11326'. [ 2337.557496][ T8521] netlink: 'syz.0.11334': attribute type 10 has an invalid length. [ 2337.598090][ T8521] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11334'. [ 2338.390048][ T8509] device syzkaller0 entered promiscuous mode [ 2342.396600][ T8540] netlink: 'syz.2.11336': attribute type 33 has an invalid length. [ 2342.404814][ T8540] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11336'. [ 2342.565416][ T8551] netlink: 'syz.2.11341': attribute type 1 has an invalid length. [ 2342.585197][ T8551] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.11341'. [ 2344.366561][ T8566] netlink: 'syz.4.11347': attribute type 10 has an invalid length. [ 2344.391839][ T8566] netlink: 55 bytes leftover after parsing attributes in process `syz.4.11347'. [ 2344.672179][ T8581] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11353'. [ 2344.683573][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.689938][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.916206][ T8587] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2345.044663][ T8587] device syzkaller0 entered promiscuous mode [ 2348.386799][ T8578] device syzkaller0 entered promiscuous mode [ 2348.393798][ T8595] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.11355'. [ 2350.257144][ T8601] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2350.268251][ T8602] netlink: 'syz.4.11357': attribute type 33 has an invalid length. [ 2350.276193][ T8602] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11357'. [ 2350.285453][ T8601] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2350.310096][ T8608] ¥: port 1(team0) entered blocking state [ 2350.315967][ T8608] ¥: port 1(team0) entered disabled state [ 2350.324692][ T8608] device team0 entered promiscuous mode [ 2350.330421][ T8601] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2350.339138][ T8608] device team_slave_0 entered promiscuous mode [ 2350.345961][ T8608] device team_slave_1 entered promiscuous mode [ 2350.403757][ T8608] device dummy0 entered promiscuous mode [ 2350.424486][ T8609] device team0 left promiscuous mode [ 2350.458598][ T8609] device team_slave_0 left promiscuous mode [ 2350.464711][ T8609] device team_slave_1 left promiscuous mode [ 2350.489430][ T8609] device dummy0 left promiscuous mode [ 2350.518374][ T8609] ¥: port 1(team0) entered disabled state [ 2350.582558][ T8614] netlink: 'syz.4.11360': attribute type 10 has an invalid length. [ 2350.645208][ T8614] netlink: 55 bytes leftover after parsing attributes in process `syz.4.11360'. [ 2350.950754][ T8616] netlink: 'syz.2.11370': attribute type 16 has an invalid length. [ 2350.960136][ T8616] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11370'. [ 2351.069918][ T8632] device pim6reg1 entered promiscuous mode [ 2351.168249][ T8635] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11365'. [ 2351.243977][ T8637] netlink: 'syz.1.11366': attribute type 1 has an invalid length. [ 2351.261430][ T8637] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.11366'. [ 2351.945329][ T8645] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2352.056801][ T8645] device syzkaller0 entered promiscuous mode [ 2355.275171][ T8669] ¥: port 1(team0) entered blocking state [ 2355.288049][ T8669] ¥: port 1(team0) entered disabled state [ 2355.305820][ T8669] device team0 entered promiscuous mode [ 2355.321921][ T8669] device team_slave_0 entered promiscuous mode [ 2355.365355][ T8669] device team_slave_1 entered promiscuous mode [ 2355.372810][ T8669] device geneve1 entered promiscuous mode [ 2355.407225][ T8672] netlink: 'syz.4.11376': attribute type 10 has an invalid length. [ 2355.418105][ T8672] netlink: 55 bytes leftover after parsing attributes in process `syz.4.11376'. [ 2355.447706][ T8670] device team0 left promiscuous mode [ 2355.453474][ T8670] device team_slave_0 left promiscuous mode [ 2355.469012][ T8670] device team_slave_1 left promiscuous mode [ 2355.477415][ T8670] device geneve1 left promiscuous mode [ 2355.483548][ T8670] ¥: port 1(team0) entered disabled state [ 2356.327526][ T8703] netlink: 'syz.1.11387': attribute type 3 has an invalid length. [ 2356.370398][ T8703] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.11387'. [ 2356.414309][ T8704] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 2356.690704][ T8713] netlink: 'syz.0.11392': attribute type 10 has an invalid length. [ 2356.739060][ T8713] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11392'. [ 2356.894990][ T8725] ¥: port 1(team0) entered blocking state [ 2356.928017][ T8725] ¥: port 1(team0) entered disabled state [ 2356.955664][ T8725] device team0 entered promiscuous mode [ 2357.007908][ T8725] device team_slave_0 entered promiscuous mode [ 2357.014288][ T8725] device team_slave_1 entered promiscuous mode [ 2357.090675][ T8726] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.11394'. [ 2357.121974][ T8716] device team0 left promiscuous mode [ 2357.159901][ T8716] device team_slave_0 left promiscuous mode [ 2357.170132][ T8716] device team_slave_1 left promiscuous mode [ 2357.202616][ T8716] ¥: port 1(team0) entered disabled state [ 2357.919005][ T8714] device syzkaller0 entered promiscuous mode [ 2362.357896][ T8738] netlink: 'syz.4.11396': attribute type 16 has an invalid length. [ 2362.365844][ T8738] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11396'. [ 2362.375812][ T8743] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.11400'. [ 2362.583336][ T8761] FAULT_INJECTION: forcing a failure. [ 2362.583336][ T8761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2362.617465][ T8763] netlink: 'syz.4.11405': attribute type 10 has an invalid length. [ 2362.636143][ T8763] netlink: 55 bytes leftover after parsing attributes in process `syz.4.11405'. [ 2362.658275][ T8761] CPU: 0 PID: 8761 Comm: syz.3.11403 Not tainted syzkaller #0 [ 2362.665782][ T8761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2362.675868][ T8761] Call Trace: [ 2362.679184][ T8761] [ 2362.682145][ T8761] dump_stack_lvl+0x188/0x24e [ 2362.686889][ T8761] ? show_regs_print_info+0x12/0x12 [ 2362.692129][ T8761] ? load_image+0x410/0x410 [ 2362.696696][ T8761] ? __lock_acquire+0x7c40/0x7c40 [ 2362.701814][ T8761] ? snprintf+0xe5/0x140 [ 2362.706094][ T8761] should_fail_ex+0x390/0x4c0 [ 2362.710821][ T8761] _copy_to_user+0x2c/0x130 [ 2362.715377][ T8761] simple_read_from_buffer+0xe3/0x150 [ 2362.720802][ T8761] proc_fail_nth_read+0x1a6/0x220 [ 2362.725876][ T8761] ? proc_fault_inject_write+0x310/0x310 [ 2362.731549][ T8761] ? fsnotify_perm+0x248/0x550 [ 2362.736358][ T8761] ? proc_fault_inject_write+0x310/0x310 [ 2362.742043][ T8761] vfs_read+0x2db/0x960 [ 2362.746278][ T8761] ? kernel_read+0x1e0/0x1e0 [ 2362.750921][ T8761] ? __fget_files+0x28/0x460 [ 2362.755560][ T8761] ? __fget_files+0x3fc/0x460 [ 2362.760301][ T8761] ? __fdget_pos+0x2ae/0x360 [ 2362.764944][ T8761] ? ksys_read+0x70/0x260 [ 2362.769324][ T8761] ksys_read+0x14d/0x260 [ 2362.773636][ T8761] ? vfs_write+0x9a0/0x9a0 [ 2362.778124][ T8761] ? lockdep_hardirqs_on+0x94/0x140 [ 2362.783378][ T8761] do_syscall_64+0x4c/0xa0 [ 2362.787836][ T8761] ? clear_bhb_loop+0x60/0xb0 [ 2362.792558][ T8761] ? clear_bhb_loop+0x60/0xb0 [ 2362.797284][ T8761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2362.803216][ T8761] RIP: 0033:0x7f042b75e98e [ 2362.807684][ T8761] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2362.827354][ T8761] RSP: 002b:00007f042c63ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2362.835811][ T8761] RAX: ffffffffffffffda RBX: 00007f042c6406c0 RCX: 00007f042b75e98e [ 2362.843836][ T8761] RDX: 000000000000000f RSI: 00007f042c6400a0 RDI: 0000000000000009 [ 2362.845221][ T8766] netlink: 'syz.0.11407': attribute type 7 has an invalid length. [ 2362.851839][ T8761] RBP: 00007f042c640090 R08: 0000000000000000 R09: 0000000000000000 [ 2362.867752][ T8761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2362.875783][ T8761] R13: 00007f042ba26038 R14: 00007f042ba25fa0 R15: 00007ffeed043338 [ 2362.883845][ T8761] [ 2362.937106][ T8766] netlink: 'syz.0.11407': attribute type 7 has an invalid length. [ 2362.984402][ T8766] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.11407'. [ 2363.410378][ T8787] ¥: port 1(team0) entered blocking state [ 2363.416319][ T8787] ¥: port 1(team0) entered disabled state [ 2363.465961][ T8787] device team0 entered promiscuous mode [ 2363.493295][ T8787] device team_slave_0 entered promiscuous mode [ 2363.513336][ T8787] device team_slave_1 entered promiscuous mode [ 2363.531227][ T8787] device dummy0 entered promiscuous mode [ 2363.589269][ T8779] device team0 left promiscuous mode [ 2363.608052][ T8779] device team_slave_0 left promiscuous mode [ 2363.628806][ T8779] device team_slave_1 left promiscuous mode [ 2363.666260][ T8779] device dummy0 left promiscuous mode [ 2363.675591][ T8779] ¥: port 1(team0) entered disabled state [ 2363.960834][ T8782] device syzkaller0 entered promiscuous mode [ 2363.988061][ T8800] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.11416'. [ 2367.359683][ T8805] netlink: 'syz.3.11419': attribute type 10 has an invalid length. [ 2367.368166][ T8805] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11419'. [ 2367.388457][ T8818] netlink: 63579 bytes leftover after parsing attributes in process `syz.4.11425'. [ 2367.610381][ T8841] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11430'. [ 2367.770564][ T8839] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.11431'. [ 2367.902570][ T8851] FAULT_INJECTION: forcing a failure. [ 2367.902570][ T8851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2367.939455][ T8851] CPU: 0 PID: 8851 Comm: syz.2.11433 Not tainted syzkaller #0 [ 2367.946966][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2367.957058][ T8851] Call Trace: [ 2367.960361][ T8851] [ 2367.963316][ T8851] dump_stack_lvl+0x188/0x24e [ 2367.968032][ T8851] ? show_regs_print_info+0x12/0x12 [ 2367.973263][ T8851] ? load_image+0x410/0x410 [ 2367.977807][ T8851] ? __lock_acquire+0x7c40/0x7c40 [ 2367.982872][ T8851] ? snprintf+0xe5/0x140 [ 2367.987169][ T8851] should_fail_ex+0x390/0x4c0 [ 2367.991926][ T8851] _copy_to_user+0x2c/0x130 [ 2367.996468][ T8851] simple_read_from_buffer+0xe3/0x150 [ 2368.001887][ T8851] proc_fail_nth_read+0x1a6/0x220 [ 2368.006946][ T8851] ? proc_fault_inject_write+0x310/0x310 [ 2368.012614][ T8851] ? fsnotify_perm+0x248/0x550 [ 2368.017424][ T8851] ? proc_fault_inject_write+0x310/0x310 [ 2368.023087][ T8851] vfs_read+0x2db/0x960 [ 2368.027291][ T8851] ? kernel_read+0x1e0/0x1e0 [ 2368.031939][ T8851] ? __fget_files+0x28/0x460 [ 2368.036566][ T8851] ? __fget_files+0x3fc/0x460 [ 2368.041303][ T8851] ? __fdget_pos+0x2ae/0x360 [ 2368.045925][ T8851] ? ksys_read+0x70/0x260 [ 2368.050296][ T8851] ksys_read+0x14d/0x260 [ 2368.054568][ T8851] ? vfs_write+0x9a0/0x9a0 [ 2368.059016][ T8851] ? lockdep_hardirqs_on+0x94/0x140 [ 2368.064233][ T8851] do_syscall_64+0x4c/0xa0 [ 2368.068661][ T8851] ? clear_bhb_loop+0x60/0xb0 [ 2368.073349][ T8851] ? clear_bhb_loop+0x60/0xb0 [ 2368.078043][ T8851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2368.083966][ T8851] RIP: 0033:0x7f00a895e98e [ 2368.088414][ T8851] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2368.108039][ T8851] RSP: 002b:00007f00a9959fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2368.116463][ T8851] RAX: ffffffffffffffda RBX: 00007f00a995a6c0 RCX: 00007f00a895e98e [ 2368.124450][ T8851] RDX: 000000000000000f RSI: 00007f00a995a0a0 RDI: 0000000000000004 [ 2368.132430][ T8851] RBP: 00007f00a995a090 R08: 0000000000000000 R09: 0000000000000000 [ 2368.140499][ T8851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2368.148480][ T8851] R13: 00007f00a8c26038 R14: 00007f00a8c25fa0 R15: 00007fff052b4828 [ 2368.156488][ T8851] [ 2368.385395][ T8856] netlink: 'syz.2.11437': attribute type 10 has an invalid length. [ 2368.417869][ T8856] netlink: 55 bytes leftover after parsing attributes in process `syz.2.11437'. [ 2368.741210][ T8865] netlink: 'syz.3.11439': attribute type 10 has an invalid length. [ 2368.768006][ T8865] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11439'. [ 2369.002612][ T8866] device syzkaller0 entered promiscuous mode [ 2369.400175][ T8890] netlink: 'syz.2.11448': attribute type 1 has an invalid length. [ 2369.459255][ T8890] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.11448'. [ 2369.484696][ T8888] netlink: 'syz.1.11449': attribute type 1 has an invalid length. [ 2369.503282][ T8888] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.11449'. [ 2373.430628][ T8886] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.11447'. [ 2373.447864][ T8899] netlink: 'syz.1.11451': attribute type 10 has an invalid length. [ 2373.455815][ T8899] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11451'. [ 2373.485576][ T8904] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11453'. [ 2373.497900][ T8904] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2373.550135][ T8904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2373.588395][ T8905] netlink: 'syz.4.11453': attribute type 21 has an invalid length. [ 2373.607851][ T8906] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11453'. [ 2373.617046][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2373.668344][ T8906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2373.807358][ T8913] netlink: 'syz.1.11457': attribute type 10 has an invalid length. [ 2373.828601][ T8913] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11457'. [ 2374.019228][ T8921] netlink: 'syz.0.11461': attribute type 1 has an invalid length. [ 2374.040697][ T8921] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.11461'. [ 2374.101582][ T8924] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11462'. [ 2374.353136][ T8937] netlink: 'syz.3.11454': attribute type 10 has an invalid length. [ 2374.367913][ T8937] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11454'. [ 2374.385520][ T8937] bridge0: port 2(veth0_vlan) entered blocking state [ 2374.398456][ T8937] bridge0: port 2(veth0_vlan) entered disabled state [ 2374.414969][ T8937] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2374.499782][ T8931] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.11464'. [ 2374.544667][ T8943] netlink: 'syz.0.11466': attribute type 10 has an invalid length. [ 2374.563073][ T8943] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11466'. [ 2374.629338][ T8937] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 2374.855428][ T8954] netlink: 'syz.0.11470': attribute type 10 has an invalid length. [ 2375.135148][ T8954] device veth0_vlan left promiscuous mode [ 2375.297492][ T8954] device veth0_vlan entered promiscuous mode [ 2375.427715][ T8954] team0: Device veth0_vlan failed to register rx_handler [ 2375.862695][ T8948] device syzkaller0 entered promiscuous mode [ 2376.215921][ T8972] netlink: 'syz.4.11477': attribute type 1 has an invalid length. [ 2380.336411][ T8973] netlink: 'syz.0.11474': attribute type 10 has an invalid length. [ 2380.344612][ T8973] __nla_validate_parse: 2 callbacks suppressed [ 2380.344626][ T8973] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11474'. [ 2380.378739][ T8987] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.11479'. [ 2380.915258][ T9008] netlink: 'syz.1.11488': attribute type 10 has an invalid length. [ 2381.009633][ T9008] team0: Device wg1 is of different type [ 2381.311304][ T9015] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2381.426047][ T9015] device syzkaller0 entered promiscuous mode [ 2381.456215][ T9017] netlink: 'syz.4.11483': attribute type 10 has an invalid length. [ 2381.474400][ T9017] netlink: 55 bytes leftover after parsing attributes in process `syz.4.11483'. [ 2385.241009][ T9023] netlink: 'syz.0.11491': attribute type 10 has an invalid length. [ 2385.269751][ T9023] team0: Device wg1 is of different type [ 2385.301377][ T9039] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.11493'. [ 2385.414128][ T9044] netlink: 'syz.1.11494': attribute type 10 has an invalid length. [ 2385.442629][ T9044] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11494'. [ 2385.547573][ T9051] netlink: 'syz.4.11497': attribute type 29 has an invalid length. [ 2385.566445][ T9051] netlink: 'syz.4.11497': attribute type 29 has an invalid length. [ 2385.600314][ T9052] netlink: 'syz.4.11497': attribute type 29 has an invalid length. [ 2385.661862][ T9051] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.11497'. [ 2385.875658][ T9059] netlink: 'syz.2.11500': attribute type 1 has an invalid length. [ 2385.894380][ T9059] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.11500'. [ 2385.970890][ T9064] netlink: 'syz.1.11502': attribute type 10 has an invalid length. [ 2386.007911][ T9064] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11502'. [ 2386.358226][ T9069] device hsr0 entered promiscuous mode [ 2386.483161][ T9072] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2386.585087][ T9072] device syzkaller0 entered promiscuous mode [ 2389.262073][ T9079] netlink: 'syz.1.11508': attribute type 10 has an invalid length. [ 2389.273253][ T9079] team0: Device wg1 is of different type [ 2389.295426][ T9075] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2389.370239][ T9075] device syzkaller0 entered promiscuous mode [ 2389.404900][ T9088] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.11509'. [ 2391.842376][ T9101] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.11513'. [ 2391.852135][ T9101] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.11513'. [ 2391.862991][ T9101] netlink: 3 bytes leftover after parsing attributes in process `syz.3.11513'. [ 2392.253730][ T9120] device syzkaller0 entered promiscuous mode [ 2392.291951][ T9123] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2392.437204][ T9123] device syzkaller0 entered promiscuous mode [ 2392.513857][ T9134] netlink: 'syz.2.11523': attribute type 1 has an invalid length. [ 2392.532735][ T9134] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.11523'. [ 2392.705990][ T9139] FAULT_INJECTION: forcing a failure. [ 2392.705990][ T9139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2392.747238][ T9139] CPU: 1 PID: 9139 Comm: syz.2.11525 Not tainted syzkaller #0 [ 2392.754783][ T9139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2392.764947][ T9139] Call Trace: [ 2392.768272][ T9139] [ 2392.771257][ T9139] dump_stack_lvl+0x188/0x24e [ 2392.775997][ T9139] ? show_regs_print_info+0x12/0x12 [ 2392.781242][ T9139] ? load_image+0x410/0x410 [ 2392.785804][ T9139] ? __lock_acquire+0x7c40/0x7c40 [ 2392.790887][ T9139] should_fail_ex+0x390/0x4c0 [ 2392.795615][ T9139] _copy_from_user+0x2c/0x170 [ 2392.800329][ T9139] __copy_msghdr+0x384/0x560 [ 2392.804961][ T9139] ___sys_sendmsg+0x210/0x360 [ 2392.809688][ T9139] ? __sys_sendmsg+0x2a0/0x2a0 [ 2392.814510][ T9139] ? __lock_acquire+0x7c40/0x7c40 [ 2392.819606][ T9139] __se_sys_sendmsg+0x1c3/0x2b0 [ 2392.824501][ T9139] ? __x64_sys_sendmsg+0x80/0x80 [ 2392.829499][ T9139] ? lockdep_hardirqs_on+0x94/0x140 [ 2392.834757][ T9139] do_syscall_64+0x4c/0xa0 [ 2392.839212][ T9139] ? clear_bhb_loop+0x60/0xb0 [ 2392.843920][ T9139] ? clear_bhb_loop+0x60/0xb0 [ 2392.848627][ T9139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2392.854570][ T9139] RIP: 0033:0x7f00a899e159 [ 2392.859018][ T9139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2392.878666][ T9139] RSP: 002b:00007f00a995a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2392.887164][ T9139] RAX: ffffffffffffffda RBX: 00007f00a8c25fa0 RCX: 00007f00a899e159 [ 2392.895192][ T9139] RDX: 0000000020040800 RSI: 0000200000000140 RDI: 0000000000000003 [ 2392.903252][ T9139] RBP: 00007f00a995a090 R08: 0000000000000000 R09: 0000000000000000 [ 2392.911368][ T9139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2392.919404][ T9139] R13: 00007f00a8c26038 R14: 00007f00a8c25fa0 R15: 00007fff052b4828 [ 2392.927450][ T9139] [ 2395.758603][ T9124] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.11522'. [ 2397.765270][ T9147] netlink: 'syz.2.11529': attribute type 10 has an invalid length. [ 2397.774902][ T9147] netlink: 55 bytes leftover after parsing attributes in process `syz.2.11529'. [ 2398.044105][ T9169] delete_channel: no stack [ 2398.364209][ T9182] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.11540'. [ 2398.465669][ T9188] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2398.639752][ T9191] netlink: 'syz.1.11544': attribute type 2 has an invalid length. [ 2398.656563][ T9191] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11544'. [ 2398.730649][ T9194] netlink: 'syz.2.11545': attribute type 10 has an invalid length. [ 2398.769367][ T9194] netlink: 55 bytes leftover after parsing attributes in process `syz.2.11545'. [ 2398.814352][ T9196] netlink: 'syz.0.11546': attribute type 13 has an invalid length. [ 2398.997653][ T9203] FAULT_INJECTION: forcing a failure. [ 2398.997653][ T9203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2399.095900][ T9203] CPU: 1 PID: 9203 Comm: syz.4.11547 Not tainted syzkaller #0 [ 2399.103489][ T9203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2399.113629][ T9203] Call Trace: [ 2399.116986][ T9203] [ 2399.120004][ T9203] dump_stack_lvl+0x188/0x24e [ 2399.124827][ T9203] ? show_regs_print_info+0x12/0x12 [ 2399.130141][ T9203] ? load_image+0x410/0x410 [ 2399.134784][ T9203] ? __lock_acquire+0x7c40/0x7c40 [ 2399.139996][ T9203] should_fail_ex+0x390/0x4c0 [ 2399.144846][ T9203] _copy_from_user+0x2c/0x170 [ 2399.149665][ T9203] ___sys_sendmsg+0x1c3/0x360 [ 2399.154513][ T9203] ? __sys_sendmsg+0x2a0/0x2a0 [ 2399.159561][ T9203] ? __lock_acquire+0x7c40/0x7c40 [ 2399.164922][ T9203] __se_sys_sendmsg+0x1c3/0x2b0 [ 2399.169916][ T9203] ? __x64_sys_sendmsg+0x80/0x80 [ 2399.175116][ T9203] ? lockdep_hardirqs_on+0x94/0x140 [ 2399.180473][ T9203] do_syscall_64+0x4c/0xa0 [ 2399.184980][ T9203] ? clear_bhb_loop+0x60/0xb0 [ 2399.189745][ T9203] ? clear_bhb_loop+0x60/0xb0 [ 2399.194558][ T9203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2399.200553][ T9203] RIP: 0033:0x7fe1d259e159 [ 2399.205070][ T9203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2399.224788][ T9203] RSP: 002b:00007fe1d338d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2399.233317][ T9203] RAX: ffffffffffffffda RBX: 00007fe1d2825fa0 RCX: 00007fe1d259e159 [ 2399.241378][ T9203] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000004 [ 2399.249433][ T9203] RBP: 00007fe1d338d090 R08: 0000000000000000 R09: 0000000000000000 [ 2399.257493][ T9203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2399.265560][ T9203] R13: 00007fe1d2826038 R14: 00007fe1d2825fa0 R15: 00007ffe8546db68 [ 2399.273746][ T9203] [ 2399.866536][ T9221] netlink: 'syz.1.11556': attribute type 1 has an invalid length. [ 2399.918163][ T9221] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.11556'. [ 2400.175809][ T9223] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.11555'. [ 2400.230201][ T9232] netlink: 'syz.0.11560': attribute type 2 has an invalid length. [ 2400.258398][ T9232] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11560'. [ 2400.322310][ T9230] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.11559'. [ 2400.386021][ T9230] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2400.409755][ T9236] netlink: 'syz.1.11561': attribute type 10 has an invalid length. [ 2400.454950][ T9236] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11561'. [ 2401.387177][ T9261] netlink: 'syz.4.11568': attribute type 4 has an invalid length. [ 2401.448100][ T9259] netlink: 'syz.0.11571': attribute type 1 has an invalid length. [ 2401.456116][ T9259] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.11571'. [ 2401.470946][ T9261] netlink: 'syz.4.11568': attribute type 26 has an invalid length. [ 2403.107408][ T9295] __nla_validate_parse: 4 callbacks suppressed [ 2403.107428][ T9295] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11579'. [ 2403.991491][ T9307] validate_nla: 2 callbacks suppressed [ 2403.991528][ T9307] netlink: 'syz.3.11585': attribute type 1 has an invalid length. [ 2404.012179][ T9308] netlink: 'syz.0.11586': attribute type 21 has an invalid length. [ 2404.048309][ T9308] netlink: 'syz.0.11586': attribute type 1 has an invalid length. [ 2404.076509][ T9307] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.11585'. [ 2404.370748][ T9314] FAULT_INJECTION: forcing a failure. [ 2404.370748][ T9314] name failslab, interval 1, probability 0, space 0, times 0 [ 2404.427967][ T9314] CPU: 0 PID: 9314 Comm: syz.4.11587 Not tainted syzkaller #0 [ 2404.435529][ T9314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2404.445615][ T9314] Call Trace: [ 2404.448940][ T9314] [ 2404.451896][ T9314] dump_stack_lvl+0x188/0x24e [ 2404.456603][ T9314] ? sctp_sendmsg+0x1686/0x2940 [ 2404.461501][ T9314] ? ___sys_sendmsg+0x2a2/0x360 [ 2404.466379][ T9314] ? show_regs_print_info+0x12/0x12 [ 2404.471623][ T9314] ? load_image+0x410/0x410 [ 2404.476185][ T9314] should_fail_ex+0x390/0x4c0 [ 2404.480908][ T9314] should_failslab+0x5/0x20 [ 2404.485462][ T9314] slab_pre_alloc_hook+0x59/0x300 [ 2404.490525][ T9314] ? sctp_add_bind_addr+0x89/0x350 [ 2404.495689][ T9314] __kmem_cache_alloc_node+0x4f/0x270 [ 2404.501100][ T9314] ? sctp_add_bind_addr+0x89/0x350 [ 2404.506247][ T9314] kmalloc_trace+0x26/0xe0 [ 2404.510706][ T9314] sctp_add_bind_addr+0x89/0x350 [ 2404.515704][ T9314] sctp_copy_local_addr_list+0x317/0x4d0 [ 2404.521375][ T9314] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 2404.527129][ T9314] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 2404.533244][ T9314] ? sctp_v4_is_any+0x31/0x50 [ 2404.537941][ T9314] ? sctp_copy_one_addr+0x93/0x660 [ 2404.543072][ T9314] sctp_bind_addr_copy+0xaf/0x3c0 [ 2404.548109][ T9314] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 2404.554471][ T9314] sctp_connect_new_asoc+0x2f5/0x6a0 [ 2404.559791][ T9314] ? __sctp_connect+0xd80/0xd80 [ 2404.564668][ T9314] ? __local_bh_enable_ip+0x136/0x1c0 [ 2404.570062][ T9314] ? _local_bh_enable+0xa0/0xa0 [ 2404.574936][ T9314] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 2404.580797][ T9314] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 2404.586637][ T9314] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 2404.592222][ T9314] ? security_sctp_bind_connect+0x85/0xb0 [ 2404.597977][ T9314] sctp_sendmsg+0x1686/0x2940 [ 2404.602699][ T9314] ? sctp_getsockopt+0x8a0/0x8a0 [ 2404.607666][ T9314] ? __might_fault+0xa6/0x120 [ 2404.612391][ T9314] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2404.618833][ T9314] ? aa_sock_msg_perm+0x94/0x150 [ 2404.623807][ T9314] ? inet_sendmsg+0x7a/0x2a0 [ 2404.628434][ T9314] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2404.633760][ T9314] ? inet_send_prepare+0x250/0x250 [ 2404.638899][ T9314] ____sys_sendmsg+0x5ed/0x9a0 [ 2404.643698][ T9314] ? __sys_sendmsg_sock+0x30/0x30 [ 2404.648731][ T9314] ? __import_iovec+0x306/0x510 [ 2404.653617][ T9314] ? import_iovec+0x6f/0xa0 [ 2404.658157][ T9314] ___sys_sendmsg+0x2a2/0x360 [ 2404.662846][ T9314] ? __sys_sendmsg+0x2a0/0x2a0 [ 2404.667630][ T9314] ? __lock_acquire+0x7c40/0x7c40 [ 2404.672702][ T9314] __se_sys_sendmsg+0x1c3/0x2b0 [ 2404.677565][ T9314] ? __x64_sys_sendmsg+0x80/0x80 [ 2404.682540][ T9314] ? lockdep_hardirqs_on+0x94/0x140 [ 2404.687764][ T9314] do_syscall_64+0x4c/0xa0 [ 2404.692194][ T9314] ? clear_bhb_loop+0x60/0xb0 [ 2404.696882][ T9314] ? clear_bhb_loop+0x60/0xb0 [ 2404.701574][ T9314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2404.707493][ T9314] RIP: 0033:0x7fe1d259e159 [ 2404.711931][ T9314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2404.731573][ T9314] RSP: 002b:00007fe1d07f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2404.740007][ T9314] RAX: ffffffffffffffda RBX: 00007fe1d2826090 RCX: 00007fe1d259e159 [ 2404.748014][ T9314] RDX: 0000000004008010 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 2404.756017][ T9314] RBP: 00007fe1d07f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2404.764010][ T9314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2404.771991][ T9314] R13: 00007fe1d2826128 R14: 00007fe1d2826090 R15: 00007ffe8546db68 [ 2404.779986][ T9314] [ 2405.415207][ T9317] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.11588'. [ 2406.101288][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.107646][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.610019][ T9332] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2406.634251][ T9332] device syzkaller0 entered promiscuous mode [ 2411.331832][ T9341] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2411.344743][ T9341] device syzkaller0 entered promiscuous mode [ 2412.938707][ T9357] netlink: 'syz.4.11598': attribute type 1 has an invalid length. [ 2413.208332][ T9364] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.11602'. [ 2417.101787][ T9408] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.11617'. [ 2417.161263][ T9410] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2417.235292][ T9410] device syzkaller0 entered promiscuous mode [ 2420.534134][ T9464] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.11634'. [ 2423.204687][ T9475] hsr0: VLAN not yet supported [ 2423.316094][ T9479] netlink: 'syz.4.11640': attribute type 10 has an invalid length. [ 2423.375850][ T9479] netlink: 55 bytes leftover after parsing attributes in process `syz.4.11640'. [ 2423.846345][ T9497] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.11646'. [ 2424.978707][ T9533] netlink: 'syz.0.11657': attribute type 16 has an invalid length. [ 2424.993841][ T9533] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11657'. [ 2427.283149][ T9535] netlink: 'syz.0.11658': attribute type 10 has an invalid length. [ 2427.297219][ T9535] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11658'. [ 2427.650982][ T9549] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.11664'. [ 2427.738858][ T9559] FAULT_INJECTION: forcing a failure. [ 2427.738858][ T9559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2427.800175][ T9559] CPU: 1 PID: 9559 Comm: syz.2.11665 Not tainted syzkaller #0 [ 2427.807741][ T9559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2427.817834][ T9559] Call Trace: [ 2427.821144][ T9559] [ 2427.824105][ T9559] dump_stack_lvl+0x188/0x24e [ 2427.828835][ T9559] ? show_regs_print_info+0x12/0x12 [ 2427.834076][ T9559] ? load_image+0x410/0x410 [ 2427.838631][ T9559] ? __lock_acquire+0x7c40/0x7c40 [ 2427.843713][ T9559] ? snprintf+0xe5/0x140 [ 2427.847993][ T9559] should_fail_ex+0x390/0x4c0 [ 2427.852720][ T9559] _copy_to_user+0x2c/0x130 [ 2427.857276][ T9559] simple_read_from_buffer+0xe3/0x150 [ 2427.862713][ T9559] proc_fail_nth_read+0x1a6/0x220 [ 2427.867779][ T9559] ? proc_fault_inject_write+0x310/0x310 [ 2427.873466][ T9559] ? fsnotify_perm+0x248/0x550 [ 2427.878258][ T9559] ? proc_fault_inject_write+0x310/0x310 [ 2427.883939][ T9559] vfs_read+0x2db/0x960 [ 2427.888165][ T9559] ? kernel_read+0x1e0/0x1e0 [ 2427.892811][ T9559] ? __fget_files+0x28/0x460 [ 2427.897456][ T9559] ? __fget_files+0x3fc/0x460 [ 2427.902195][ T9559] ? __fdget_pos+0x2ae/0x360 [ 2427.906874][ T9559] ? ksys_read+0x70/0x260 [ 2427.911255][ T9559] ksys_read+0x14d/0x260 [ 2427.915565][ T9559] ? vfs_write+0x9a0/0x9a0 [ 2427.920021][ T9559] ? lockdep_hardirqs_on+0x94/0x140 [ 2427.925260][ T9559] do_syscall_64+0x4c/0xa0 [ 2427.929708][ T9559] ? clear_bhb_loop+0x60/0xb0 [ 2427.934417][ T9559] ? clear_bhb_loop+0x60/0xb0 [ 2427.939122][ T9559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2427.945054][ T9559] RIP: 0033:0x7f00a895e98e [ 2427.949502][ T9559] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2427.969159][ T9559] RSP: 002b:00007f00a9959fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2427.977629][ T9559] RAX: ffffffffffffffda RBX: 00007f00a995a6c0 RCX: 00007f00a895e98e [ 2427.985636][ T9559] RDX: 000000000000000f RSI: 00007f00a995a0a0 RDI: 0000000000000004 [ 2427.993688][ T9559] RBP: 00007f00a995a090 R08: 0000000000000000 R09: 0000000000000000 [ 2428.001689][ T9559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2428.009691][ T9559] R13: 00007f00a8c26038 R14: 00007f00a8c25fa0 R15: 00007fff052b4828 [ 2428.017713][ T9559] [ 2428.945615][ T9583] netlink: 'syz.1.11676': attribute type 10 has an invalid length. [ 2428.963984][ T9583] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11676'. [ 2430.691217][ T9602] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.11681'. [ 2431.180060][ T9629] netlink: 'syz.3.11691': attribute type 10 has an invalid length. [ 2431.198950][ T9629] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11691'. [ 2431.209162][ T9633] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.11692'. [ 2431.629378][ T9639] netlink: 63751 bytes leftover after parsing attributes in process `syz.2.11694'. [ 2434.415739][ T9646] netlink: 63579 bytes leftover after parsing attributes in process `syz.4.11695'. [ 2434.665448][ T9654] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.11699'. [ 2435.147480][ T9673] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2435.231368][ T9673] device syzkaller0 entered promiscuous mode [ 2438.201376][ T9682] netlink: 'syz.0.11707': attribute type 10 has an invalid length. [ 2438.213419][ T9682] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11707'. [ 2438.255006][ T9699] device syzkaller0 entered promiscuous mode [ 2438.384370][ T9716] FAULT_INJECTION: forcing a failure. [ 2438.384370][ T9716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2438.403801][ T9716] CPU: 1 PID: 9716 Comm: syz.0.11714 Not tainted syzkaller #0 [ 2438.411315][ T9716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2438.421382][ T9716] Call Trace: [ 2438.424671][ T9716] [ 2438.427621][ T9716] dump_stack_lvl+0x188/0x24e [ 2438.432316][ T9716] ? show_regs_print_info+0x12/0x12 [ 2438.437524][ T9716] ? load_image+0x410/0x410 [ 2438.442072][ T9716] ? __lock_acquire+0x7c40/0x7c40 [ 2438.447121][ T9716] should_fail_ex+0x390/0x4c0 [ 2438.451819][ T9716] _copy_from_user+0x2c/0x170 [ 2438.456515][ T9716] iovec_from_user+0x143/0x360 [ 2438.461309][ T9716] __import_iovec+0x6c/0x510 [ 2438.465932][ T9716] import_iovec+0x6f/0xa0 [ 2438.470294][ T9716] ___sys_sendmsg+0x252/0x360 [ 2438.475006][ T9716] ? __sys_sendmsg+0x2a0/0x2a0 [ 2438.479801][ T9716] ? __lock_acquire+0x7c40/0x7c40 [ 2438.484865][ T9716] __se_sys_sendmsg+0x1c3/0x2b0 [ 2438.489731][ T9716] ? __x64_sys_sendmsg+0x80/0x80 [ 2438.494690][ T9716] ? lockdep_hardirqs_on+0x94/0x140 [ 2438.499906][ T9716] do_syscall_64+0x4c/0xa0 [ 2438.504330][ T9716] ? clear_bhb_loop+0x60/0xb0 [ 2438.509025][ T9716] ? clear_bhb_loop+0x60/0xb0 [ 2438.513709][ T9716] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2438.519620][ T9716] RIP: 0033:0x7fd66539e159 [ 2438.524047][ T9716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2438.543659][ T9716] RSP: 002b:00007fd666220028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2438.552087][ T9716] RAX: ffffffffffffffda RBX: 00007fd665625fa0 RCX: 00007fd66539e159 [ 2438.560068][ T9716] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2438.568073][ T9716] RBP: 00007fd666220090 R08: 0000000000000000 R09: 0000000000000000 [ 2438.576060][ T9716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2438.584063][ T9716] R13: 00007fd665626038 R14: 00007fd665625fa0 R15: 00007ffdb7f06a58 [ 2438.592066][ T9716] [ 2438.849104][ T9718] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.11713'. [ 2438.884613][ T9726] netlink: 'syz.2.11720': attribute type 41 has an invalid length. [ 2438.929953][ T9730] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11719'. [ 2439.202863][ T9740] netlink: 'syz.3.11724': attribute type 10 has an invalid length. [ 2439.324714][ T9740] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11724'. [ 2439.389448][ T9744] netlink: 'syz.4.11725': attribute type 1 has an invalid length. [ 2439.410556][ T9744] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.11725'. [ 2440.448514][ T9785] netlink: 'syz.2.11737': attribute type 1 has an invalid length. [ 2440.472623][ T9785] netlink: 'syz.2.11737': attribute type 3 has an invalid length. [ 2440.491657][ T9776] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.11734'. [ 2440.513020][ T9785] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11737'. [ 2441.517654][ T9804] device syzkaller0 entered promiscuous mode [ 2441.562174][ T9802] netlink: 'syz.3.11743': attribute type 10 has an invalid length. [ 2441.624175][ T9802] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11743'. [ 2446.334903][ T9829] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.11752'. [ 2446.616318][ T9839] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11756'. [ 2446.664706][ T9839] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2447.141615][ T9856] FAULT_INJECTION: forcing a failure. [ 2447.141615][ T9856] name failslab, interval 1, probability 0, space 0, times 0 [ 2447.178054][ T9856] CPU: 0 PID: 9856 Comm: syz.3.11754 Not tainted syzkaller #0 [ 2447.185675][ T9856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2447.195787][ T9856] Call Trace: [ 2447.199091][ T9856] [ 2447.202070][ T9856] dump_stack_lvl+0x188/0x24e [ 2447.206793][ T9856] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2447.213002][ T9856] ? show_regs_print_info+0x12/0x12 [ 2447.218234][ T9856] ? load_image+0x410/0x410 [ 2447.222790][ T9856] should_fail_ex+0x390/0x4c0 [ 2447.227513][ T9856] should_failslab+0x5/0x20 [ 2447.232059][ T9856] slab_pre_alloc_hook+0x59/0x300 [ 2447.237127][ T9856] kmem_cache_alloc_node+0x5a/0x310 [ 2447.242362][ T9856] ? alloc_vmap_area+0x6a3/0x18d0 [ 2447.247437][ T9856] alloc_vmap_area+0x6a3/0x18d0 [ 2447.252332][ T9856] ? vm_map_ram+0xab0/0xab0 [ 2447.256863][ T9856] ? rcu_is_watching+0x11/0xa0 [ 2447.261675][ T9856] __get_vm_area_node+0x158/0x330 [ 2447.266718][ T9856] ? perf_trace_lock_acquire+0x101/0x3f0 [ 2447.272375][ T9856] __vmalloc_node_range+0x357/0x1380 [ 2447.277681][ T9856] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2447.283270][ T9856] ? aa_get_newest_label+0xf9/0x5b0 [ 2447.288512][ T9856] ? free_vm_area+0x50/0x50 [ 2447.293060][ T9856] ? end_current_label_crit_section+0x170/0x170 [ 2447.299336][ T9856] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2447.304930][ T9856] __vmalloc+0x76/0x80 [ 2447.309016][ T9856] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2447.314580][ T9856] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2447.319980][ T9856] ? bpf_prog_alloc+0x13/0x1b0 [ 2447.324775][ T9856] bpf_prog_alloc+0x1c/0x1b0 [ 2447.329388][ T9856] bpf_prog_load+0x7d4/0x1530 [ 2447.334091][ T9856] ? map_freeze+0x390/0x390 [ 2447.338615][ T9856] ? __might_fault+0xa6/0x120 [ 2447.343335][ T9856] ? __might_fault+0xa6/0x120 [ 2447.348031][ T9856] ? __might_fault+0xc2/0x120 [ 2447.352740][ T9856] ? __might_fault+0xa6/0x120 [ 2447.357428][ T9856] ? bpf_lsm_bpf+0x5/0x10 [ 2447.361777][ T9856] ? security_bpf+0x7a/0xa0 [ 2447.366307][ T9856] __sys_bpf+0x5b8/0x780 [ 2447.370595][ T9856] ? bpf_link_show_fdinfo+0x380/0x380 [ 2447.376017][ T9856] ? lock_chain_count+0x20/0x20 [ 2447.380898][ T9856] __x64_sys_bpf+0x78/0x90 [ 2447.385343][ T9856] do_syscall_64+0x4c/0xa0 [ 2447.389777][ T9856] ? clear_bhb_loop+0x60/0xb0 [ 2447.394478][ T9856] ? clear_bhb_loop+0x60/0xb0 [ 2447.399174][ T9856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2447.405092][ T9856] RIP: 0033:0x7f042b79e159 [ 2447.409537][ T9856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2447.429153][ T9856] RSP: 002b:00007f042c640028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2447.437580][ T9856] RAX: ffffffffffffffda RBX: 00007f042ba25fa0 RCX: 00007f042b79e159 [ 2447.445589][ T9856] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 2447.453577][ T9856] RBP: 00007f042c640090 R08: 0000000000000000 R09: 0000000000000000 [ 2447.461565][ T9856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2447.469555][ T9856] R13: 00007f042ba26038 R14: 00007f042ba25fa0 R15: 00007ffeed043338 [ 2447.477556][ T9856] [ 2448.772510][ T9872] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.11764'. [ 2448.899214][ T9878] device syzkaller0 entered promiscuous mode [ 2449.138574][ T9889] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2449.145849][ T9889] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2449.943059][ T9910] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2449.949852][ T9910] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2450.478544][ T9923] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.11783'. [ 2450.494550][ T9916] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.11779'. [ 2451.003247][ T9938] FAULT_INJECTION: forcing a failure. [ 2451.003247][ T9938] name failslab, interval 1, probability 0, space 0, times 0 [ 2451.043026][ T9938] CPU: 0 PID: 9938 Comm: syz.2.11790 Not tainted syzkaller #0 [ 2451.050547][ T9938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2451.060636][ T9938] Call Trace: [ 2451.063956][ T9938] [ 2451.066919][ T9938] dump_stack_lvl+0x188/0x24e [ 2451.071666][ T9938] ? show_regs_print_info+0x12/0x12 [ 2451.076995][ T9938] ? load_image+0x410/0x410 [ 2451.081549][ T9938] ? __might_sleep+0xd0/0xd0 [ 2451.086185][ T9938] ? __lock_acquire+0x7c40/0x7c40 [ 2451.091289][ T9938] should_fail_ex+0x390/0x4c0 [ 2451.096014][ T9938] should_failslab+0x5/0x20 [ 2451.100558][ T9938] slab_pre_alloc_hook+0x59/0x300 [ 2451.105626][ T9938] kmem_cache_alloc+0x56/0x2f0 [ 2451.110452][ T9938] ? skb_clone+0x1e7/0x370 [ 2451.114918][ T9938] skb_clone+0x1e7/0x370 [ 2451.119217][ T9938] pfkey_sendmsg+0x4c8/0x1140 [ 2451.123949][ T9938] ? pfkey_release+0x340/0x340 [ 2451.128749][ T9938] ? aa_sk_perm+0x81f/0x950 [ 2451.133303][ T9938] ? aa_af_perm+0x340/0x340 [ 2451.137841][ T9938] ? __might_fault+0xa6/0x120 [ 2451.142553][ T9938] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2451.149029][ T9938] ? aa_sock_msg_perm+0x94/0x150 [ 2451.154028][ T9938] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2451.159610][ T9938] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2451.164931][ T9938] ? security_socket_sendmsg+0x7c/0xa0 [ 2451.170427][ T9938] ? pfkey_release+0x340/0x340 [ 2451.175229][ T9938] ____sys_sendmsg+0x5ed/0x9a0 [ 2451.180030][ T9938] ? __sys_sendmsg_sock+0x30/0x30 [ 2451.185088][ T9938] ? __import_iovec+0x306/0x510 [ 2451.189983][ T9938] ? import_iovec+0x6f/0xa0 [ 2451.194549][ T9938] ___sys_sendmsg+0x2a2/0x360 [ 2451.199265][ T9938] ? __sys_sendmsg+0x2a0/0x2a0 [ 2451.204167][ T9938] ? __lock_acquire+0x7c40/0x7c40 [ 2451.209278][ T9938] __se_sys_sendmsg+0x1c3/0x2b0 [ 2451.214179][ T9938] ? __x64_sys_sendmsg+0x80/0x80 [ 2451.219260][ T9938] ? lockdep_hardirqs_on+0x94/0x140 [ 2451.224508][ T9938] do_syscall_64+0x4c/0xa0 [ 2451.228953][ T9938] ? clear_bhb_loop+0x60/0xb0 [ 2451.233658][ T9938] ? clear_bhb_loop+0x60/0xb0 [ 2451.238363][ T9938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2451.244301][ T9938] RIP: 0033:0x7f00a899e159 [ 2451.248751][ T9938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2451.268380][ T9938] RSP: 002b:00007f00a995a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2451.276821][ T9938] RAX: ffffffffffffffda RBX: 00007f00a8c25fa0 RCX: 00007f00a899e159 [ 2451.284834][ T9938] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 2451.292838][ T9938] RBP: 00007f00a995a090 R08: 0000000000000000 R09: 0000000000000000 [ 2451.300840][ T9938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2451.308831][ T9938] R13: 00007f00a8c26038 R14: 00007f00a8c25fa0 R15: 00007fff052b4828 [ 2451.316854][ T9938] [ 2451.376745][ T9939] device syzkaller0 entered promiscuous mode [ 2452.233654][ T9955] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.11795'. [ 2455.440491][ T9981] FAULT_INJECTION: forcing a failure. [ 2455.440491][ T9981] name failslab, interval 1, probability 0, space 0, times 0 [ 2455.464240][ T9981] CPU: 0 PID: 9981 Comm: syz.1.11804 Not tainted syzkaller #0 [ 2455.471756][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2455.481838][ T9981] Call Trace: [ 2455.485137][ T9981] [ 2455.488087][ T9981] dump_stack_lvl+0x188/0x24e [ 2455.492792][ T9981] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2455.498976][ T9981] ? show_regs_print_info+0x12/0x12 [ 2455.504212][ T9981] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2455.510436][ T9981] ? dump_stack+0x5/0x12 [ 2455.514712][ T9981] should_fail_ex+0x390/0x4c0 [ 2455.519428][ T9981] should_failslab+0x5/0x20 [ 2455.523960][ T9981] slab_pre_alloc_hook+0x59/0x300 [ 2455.529020][ T9981] ? vmemdup_user+0x45/0x1d0 [ 2455.533637][ T9981] __kmem_cache_alloc_node+0x4f/0x270 [ 2455.539044][ T9981] ? vmemdup_user+0x45/0x1d0 [ 2455.543654][ T9981] __kmalloc_node+0xa2/0x240 [ 2455.548268][ T9981] vmemdup_user+0x45/0x1d0 [ 2455.552710][ T9981] map_get_next_key+0x21d/0x620 [ 2455.557609][ T9981] ? bpf_lsm_bpf+0x5/0x10 [ 2455.561970][ T9981] __sys_bpf+0x466/0x780 [ 2455.566249][ T9981] ? bpf_link_show_fdinfo+0x380/0x380 [ 2455.571676][ T9981] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2455.577897][ T9981] __x64_sys_bpf+0x78/0x90 [ 2455.582353][ T9981] do_syscall_64+0x4c/0xa0 [ 2455.586792][ T9981] ? clear_bhb_loop+0x60/0xb0 [ 2455.591491][ T9981] ? clear_bhb_loop+0x60/0xb0 [ 2455.596178][ T9981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2455.602090][ T9981] RIP: 0033:0x7ffa9939e159 [ 2455.606516][ T9981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2455.626146][ T9981] RSP: 002b:00007ffa975f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2455.634575][ T9981] RAX: ffffffffffffffda RBX: 00007ffa99625fa0 RCX: 00007ffa9939e159 [ 2455.642571][ T9981] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000004 [ 2455.650551][ T9981] RBP: 00007ffa975f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2455.658535][ T9981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2455.666521][ T9981] R13: 00007ffa99626038 R14: 00007ffa99625fa0 R15: 00007ffeb4c7c428 [ 2455.674515][ T9981] [ 2455.701420][ T9983] netlink: 'syz.3.11803': attribute type 1 has an invalid length. [ 2455.719243][ T9983] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.11803'. [ 2455.854707][ T9986] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.11805'. [ 2456.115863][ T9998] netlink: 'syz.3.11808': attribute type 2 has an invalid length. [ 2456.192229][ T9998] netlink: 'syz.3.11808': attribute type 1 has an invalid length. [ 2456.278001][ T9998] netlink: 'syz.3.11808': attribute type 4 has an invalid length. [ 2456.302361][ T9992] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.11807'. [ 2456.316866][ T9998] netlink: 'syz.3.11808': attribute type 6 has an invalid length. [ 2456.371202][ T9998] netlink: 'syz.3.11808': attribute type 7 has an invalid length. [ 2456.400480][ T9998] netlink: 'syz.3.11808': attribute type 5 has an invalid length. [ 2456.452184][ T9998] netlink: 206468 bytes leftover after parsing attributes in process `syz.3.11808'. [ 2457.341754][T10021] device syzkaller0 entered promiscuous mode [ 2457.573175][T10031] netlink: 'syz.2.11819': attribute type 1 has an invalid length. [ 2457.581218][T10031] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.11819'. [ 2459.034605][ C1] [ 2459.034613][ C1] ================================ [ 2459.034618][ C1] WARNING: inconsistent lock state [ 2459.034640][ C1] syzkaller #0 Not tainted [ 2459.034648][ C1] -------------------------------- [ 2459.034652][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 2459.034660][ C1] syz.1.11822/10038 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 2459.034676][ C1] ffff8880342ed238 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x8e/0x620 [ 2459.034797][ C1] {INITIAL USE} state was registered at: [ 2459.034803][ C1] lock_acquire+0x1bb/0x4a0 [ 2459.034825][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 2459.034848][ C1] trie_update_elem+0xbe/0xd40 [ 2459.034868][ C1] bpf_map_update_value+0x59d/0x670 [ 2459.034888][ C1] generic_map_update_batch+0x52e/0x7f0 [ 2459.034906][ C1] bpf_map_do_batch+0x475/0x5f0 [ 2459.034928][ C1] __sys_bpf+0x6f7/0x780 [ 2459.034947][ C1] __x64_sys_bpf+0x78/0x90 [ 2459.034966][ C1] do_syscall_64+0x4c/0xa0 [ 2459.034981][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2459.035011][ C1] irq event stamp: 4456 [ 2459.035017][ C1] hardirqs last enabled at (4455): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2459.035038][ C1] hardirqs last disabled at (4456): [] exc_debug+0x6e/0x130 [ 2459.035058][ C1] softirqs last enabled at (4018): [] netlink_insert+0x101d/0x13b0 [ 2459.035078][ C1] softirqs last disabled at (4016): [] release_sock+0x2b/0x1b0 [ 2459.035101][ C1] [ 2459.035101][ C1] other info that might help us debug this: [ 2459.035106][ C1] Possible unsafe locking scenario: [ 2459.035106][ C1] [ 2459.035110][ C1] CPU0 [ 2459.035113][ C1] ---- [ 2459.035115][ C1] lock(&trie->lock); [ 2459.035126][ C1] [ 2459.035129][ C1] lock(&trie->lock); [ 2459.035138][ C1] [ 2459.035138][ C1] *** DEADLOCK *** [ 2459.035138][ C1] [ 2459.035141][ C1] no locks held by syz.1.11822/10038. [ 2459.035148][ C1] [ 2459.035148][ C1] stack backtrace: [ 2459.035153][ C1] CPU: 1 PID: 10038 Comm: syz.1.11822 Not tainted syzkaller #0 [ 2459.035169][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2459.035178][ C1] Call Trace: [ 2459.035192][ C1] <#DB> [ 2459.035198][ C1] dump_stack_lvl+0x188/0x24e [ 2459.035218][ C1] ? show_regs_print_info+0x12/0x12 [ 2459.035239][ C1] ? print_usage_bug+0x42a/0x690 [ 2459.035263][ C1] ? verify_lock_unused+0x15/0x140 [ 2459.035288][ C1] lock_acquire+0x2df/0x4a0 [ 2459.035309][ C1] ? perf_output_begin_forward+0xa7/0xa70 [ 2459.035334][ C1] ? trie_delete_elem+0x8e/0x620 [ 2459.035358][ C1] ? read_lock_is_recursive+0x10/0x10 [ 2459.035382][ C1] ? look_up_lock_class+0x75/0x140 [ 2459.035403][ C1] ? verify_lock_unused+0x15/0x140 [ 2459.035427][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 2459.035450][ C1] ? trie_delete_elem+0x8e/0x620 [ 2459.035472][ C1] ? _raw_spin_lock+0x40/0x40 [ 2459.035495][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 2459.035516][ C1] trie_delete_elem+0x8e/0x620 [ 2459.035543][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 2459.035561][ C1] bpf_overflow_handler+0x6d1/0x790 [ 2459.035580][ C1] ? perf_get_page_size+0x430/0x430 [ 2459.035604][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 2459.035622][ C1] ? perf_swevent_overflow+0x230/0x230 [ 2459.035644][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 2459.035670][ C1] __perf_event_overflow+0x457/0x630 [ 2459.035693][ C1] ? perf_swevent_overflow+0x20c/0x230 [ 2459.035715][ C1] perf_swevent_event+0x315/0x570 [ 2459.035741][ C1] ? perf_tp_event+0xc10/0xc10 [ 2459.035771][ C1] perf_bp_event+0x311/0x3f0 [ 2459.035797][ C1] ? perf_trace_lock_acquire+0x101/0x3f0 [ 2459.035816][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 2459.035854][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 2459.035872][ C1] ? read_lock_is_recursive+0x10/0x10 [ 2459.035894][ C1] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 2459.035958][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 2459.035976][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 2459.035997][ C1] notify_die+0x141/0x1a0 [ 2459.036032][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 2459.036061][ C1] notify_debug+0x20/0x30 [ 2459.036082][ C1] exc_debug+0xd9/0x130 [ 2459.036104][ C1] asm_exc_debug+0x1a/0x40 [ 2459.036120][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 2459.036141][ C1] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 2459.036157][ C1] RSP: 0018:ffffc9000c5cf788 EFLAGS: 00050206 [ 2459.036172][ C1] RAX: ffffffff84143201 RBX: 0000000000033fe0 RCX: 0000000000033ce0 [ 2459.036193][ C1] RDX: 0000000000033fe0 RSI: 0000200000000340 RDI: ffffc9000c849300 [ 2459.036207][ C1] RBP: 0000000000000000 R08: ffffc9000c87cfdf R09: 1ffff9200190f9fb [ 2459.036220][ C1] R10: dffffc0000000000 R11: fffff5200190f9fc R12: 00007ffffffcb020 [ 2459.036232][ C1] R13: 0000000000000000 R14: 0000200000000040 R15: ffffc9000c849000 [ 2459.036247][ C1] ? _copy_from_iter+0x1111/0x1130 [ 2459.036276][ C1] [ 2459.036280][ C1] [ 2459.036285][ C1] copyin+0xe7/0x120 [ 2459.036306][ C1] _copy_from_iter+0x447/0x1130 [ 2459.036330][ C1] ? copyout_mc+0x110/0x110 [ 2459.036350][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 2459.036365][ C1] ? _raw_spin_unlock+0x24/0x40 [ 2459.036386][ C1] ? find_vmap_area+0xf8/0x110 [ 2459.036405][ C1] ? __phys_addr_symbol+0x2b/0x70 [ 2459.036427][ C1] ? __check_object_size+0x4f6/0xa70 [ 2459.036445][ C1] netlink_sendmsg+0x755/0xbd0 [ 2459.036465][ C1] ? netlink_getsockopt+0x550/0x550 [ 2459.036483][ C1] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2459.036509][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2459.036524][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 2459.036543][ C1] ? netlink_getsockopt+0x550/0x550 [ 2459.036558][ C1] ____sys_sendmsg+0x5ed/0x9a0 [ 2459.036576][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 2459.036589][ C1] ? __import_iovec+0x306/0x510 [ 2459.036614][ C1] ? import_iovec+0x6f/0xa0 [ 2459.036636][ C1] ___sys_sendmsg+0x2a2/0x360 [ 2459.036653][ C1] ? __sys_sendmsg+0x2a0/0x2a0 [ 2459.036675][ C1] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2459.036710][ C1] __se_sys_sendmsg+0x1c3/0x2b0 [ 2459.036725][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 2459.036747][ C1] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2459.036767][ C1] do_syscall_64+0x4c/0xa0 [ 2459.036781][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2459.036794][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2459.036808][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2459.036840][ C1] RIP: 0033:0x7ffa9939e159 [ 2459.036851][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2459.036862][ C1] RSP: 002b:00007ffa975f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2459.036875][ C1] RAX: ffffffffffffffda RBX: 00007ffa99625fa0 RCX: 00007ffa9939e159 [ 2459.036885][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 2459.036893][ C1] RBP: 00007ffa9943506b R08: 0000000000000000 R09: 0000000000000000 [ 2459.036901][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2459.036909][ C1] R13: 00007ffa99626038 R14: 00007ffa99625fa0 R15: 00007ffeb4c7c428 [ 2459.036925][ C1] [ 2461.233122][T10038] netlink: 3529 bytes leftover after parsing attributes in process `syz.1.11822'. [ 2461.242401][T10038] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.11822'. [ 2461.251824][T10038] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.11822'. [ 2467.539356][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.545684][ T1281] ieee802154 phy1 wpan1: encryption failed: -22