last executing test programs: 11.747694309s ago: executing program 0 (id=7025): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800c6ee00009d5023de5017f60215f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xffffffffffffffde) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000740)={r0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x3a, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x50, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="090000000000000000000007157486e3e164c041798b29cb6edbc92dc842cb60ea7eb1a11b76f5f48d98284b4b55c5bf222ca3888daf0f36e4a01a4d64d5d708da8e4a7350985a8d3e5df63b7446a0b1fa446ca293b170cb6416f2cc5781a896e940a8925423863423171b3bcb508490a5349def56ba5382d524f1036deb", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="03000000050000000500"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b'], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r3 = socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x590f}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) socket$kcm(0x10, 0x400000002, 0x0) close(0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) recvmsg$unix(0xffffffffffffffff, 0x0, 0xc2d1cde420b68cde) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000005000000000000cdf960737b797ed370d5028472fe58cf16c9b7f10d14a26d666196c8d5da97ac9e85dd22d579d7337f9b53f5815c1784b30b202c4015c43cf2b26548f9200458ebda2d464f0881e104e815d7bb671e8b327df90fd4cab263881fe1788eb2e7bd2f0bff877472dfda7a75e1444d1fa2375258c8c17d6fc5f67291b4bc38b78bb39f3cc9cbad136a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES16=r5, @ANYRESOCT=r4], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b448000000000071184400000000009500"/28], &(0x7f0000000840)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x4}, 0x910, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffdf, 0xffffffffffffffff, 0x9) r9 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x1c, 0x0, 0x0) 11.440680511s ago: executing program 0 (id=7026): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x40004) 10.988873028s ago: executing program 0 (id=7030): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x7f, 0xc0, 0x0, 0x0, 0x7, 0x80020, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x106000, 0xd5c9, 0x1000, 0x6, 0x0, 0xfffffff0, 0x3, 0x0, 0x52, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500070001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ec3350568b31937cbdce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d83", 0xbd}], 0x1}, 0x0) 10.815849465s ago: executing program 0 (id=7032): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x63, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x3, 0x10, 0xffffffffffffffff, 0x1000000}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) 10.524174536s ago: executing program 0 (id=7036): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x0, 0x3e, 0x0, 0x1, 0xfffffff9, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f91124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRESHEX, @ANYRES32, @ANYBLOB="0000009536ed206d837ee089cf82fe000000000000000000efb817d78c194d0c8f00f5f6666cc99a69f9f69c48f799dad8eef8b736e3056f16ae52ac9d4262429e2242373fc35eaa949376617c953396ba3246c3"], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a0"], 0xfe33) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x6}, 0x100000, 0x200, 0xffffffff, 0x0, 0x9, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x100000032}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) recvmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x222) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000033c0)={r3, 0x20, &(0x7f0000003380)={&(0x7f0000000780)=""/168, 0xa8, 0x0, &(0x7f0000004180)=""/4096, 0x1000}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003400)=r8, 0x4) 10.022178395s ago: executing program 0 (id=7040): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x7f, 0xc0, 0x0, 0x0, 0x7, 0x80020, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x106000, 0xd5c9, 0x1000, 0x6, 0x0, 0xfffffff0, 0x3, 0x0, 0x52, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500070001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ec3350568b31937cbdce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d839da9ee307f27260e970300000000", 0xcb}], 0x1}, 0x0) 5.039812037s ago: executing program 1 (id=7065): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xea, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001380), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={0xffffffffffffffff, 0xe0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0], 0x0, 0xb5, &(0x7f0000001680)=[{}, {}], 0x10, 0x10, &(0x7f00000016c0), &(0x7f0000001700), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000001740)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f00000018c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@type_tag={0x54bb1fad, 0x0, 0x0, 0x12, 0x5}, @ptr={0x1}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x2e, 0x0, 0x30, 0x5f, 0x0, 0x61, 0x30]}}, &(0x7f0000001940)=""/49, 0x45, 0x31, 0x1, 0xfffffffe, 0x10000}, 0x28) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x0, 0x3fff8002}, 0x5025, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x1f, 0x0, 0x19) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32, @ANYBLOB="000000001a0000000000800000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r3, &(0x7f00000002c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, &(0x7f0000000200)=r1}, 0x20) r4 = socket$kcm(0x22, 0x2, 0x21) recvmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4001a050) r5 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x12120) setsockopt$sock_attach_bpf(r5, 0x84, 0x14, &(0x7f0000000000)=r7, 0x8) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001a80)=@o_path={&(0x7f0000001a40)='./file0\x00'}, 0x18) r10 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r10, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0xfffffe4f}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) 4.44488478s ago: executing program 3 (id=7067): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x3c, 0xb, 0x2, 0x0, 0x1, 0x10, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000000040), 0xf}, 0x400, 0x5, 0xff, 0x1, 0xd, 0x5, 0xfff9, 0x0, 0x3, 0x0, 0xf9}, 0xffffffffffffffff, 0x9, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0xfffffffffffffeee) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x1ff) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r10, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x6, 0x2, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xe, 0x11, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x70}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x2, 0x0, 0x9, 0x1, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x4, 0xec, &(0x7f0000000680)=""/236, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x2, 0x3, 0x66cf, 0x2}, 0x10, 0xffffffffffffffff, r8, 0x0, &(0x7f00000009c0)=[r11, 0xffffffffffffffff, r12, r6, 0xffffffffffffffff], 0x0, 0x10, 0xf}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 3.747141536s ago: executing program 1 (id=7069): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0xd, 0x6, &(0x7f0000000240)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48, 0x7fffffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000016000000b30000007f", @ANYRESOCT=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000740)=ANY=[@ANYBLOB="18030000feffffff0000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000180000000000000000000000000000009500000000000000a703000000000000950000000000000015839e3c50ac47d3ca069b63a4b8dcfb4ca970da6f230f559b1f29fbe5e0ee22d01279521bbb5be19ae33c7c64f9e60385cbaefe3572fb56f325bf0c7dd66e1bbba37b7b6217f5a1209542d6c8fcc5a992f8d61581d7b6687fbaa49f3066aea8aa9fe9f524d73ab425c2acb3da6dcc38f769fdde20bfabc5238383e3434b56b098da6f27db941bfd0edbeda8bb37dcf48b34fa644d467797b87ec9c02e9c0a99c7bb3c5b9012e2662fbf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x2b, 0x2, 0x1000, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000041801000020646c2500000000002020207b1af8ff00000000bfa100000000fb3b8c1f0000f8ffffffb702000008000000b70300000000000085000047349515007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0xe, 0x0, &(0x7f0000000280)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x1, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.503825776s ago: executing program 3 (id=7071): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x0, 0x3e, 0x0, 0x1, 0xfffffff9, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f91124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRESHEX, @ANYRES32, @ANYBLOB="0000009536ed206d837ee089cf82fe000000000000000000efb817d78c194d0c8f00f5f6666cc99a69f9f69c48f799dad8eef8b736e3056f16ae52ac9d4262429e2242373fc35eaa949376617c953396ba3246c3"], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a0"], 0xfe33) r8 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x6}, 0x100000, 0x200, 0xffffffff, 0x0, 0x9, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x100000032}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) recvmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x222) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000033c0)={r3, 0x20, &(0x7f0000003380)={&(0x7f0000000780)=""/168, 0xa8, 0x0, &(0x7f0000004180)=""/4096, 0x1000}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003400)=r9, 0x4) 3.404110169s ago: executing program 2 (id=7072): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x3c, 0xb, 0x2, 0x0, 0x1, 0x10, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000000040), 0xf}, 0x400, 0x5, 0xff, 0x1, 0xd, 0x5, 0xfff9, 0x0, 0x3, 0x0, 0xf9}, 0xffffffffffffffff, 0x9, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0xfffffffffffffeee) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x1ff) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x58000, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r10, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x6, 0x2, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xe, 0x11, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x70}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x2, 0x0, 0x9, 0x1, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x4, 0xec, &(0x7f0000000680)=""/236, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x2, 0x3, 0x66cf, 0x2}, 0x10, 0xffffffffffffffff, r8, 0x0, &(0x7f00000009c0)=[r11, 0xffffffffffffffff, r12, r6, 0xffffffffffffffff], 0x0, 0x10, 0xf}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 3.098239831s ago: executing program 1 (id=7073): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000037000b63717a3c4a01d8b45b0808aa78", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="eec3d336eb5be99afba8d122e1d3a8e3e9f8b023e91b3a754c2d9db874d84a2ee1e246579973de3226f6d39d75f619ff51f05bdde8f410ebd03dd73618e663c75204c17287c16948304916854e858e164e7aaedfdabf1929c9e6b51dbab423f30d3b0eec91b34d7e68d90117e2209ad5167a4c356053630379d667790c38f53f4ed999012a81a9db33665675bb48841c28afe5eb684c90cc2912330e879d48ead49e399af4abe4370f"], 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={&(0x7f0000000300), 0x5}, 0x482, 0x81, 0x7ff, 0x8, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x2f, &(0x7f0000000000)="06", 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 2.293124122s ago: executing program 2 (id=7074): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x0, 0x3e, 0x0, 0x1, 0xfffffff9, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f91124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRESHEX, @ANYRES32, @ANYBLOB="0000009536ed206d837ee089cf82fe000000000000000000efb817d78c194d0c8f00f5f6666cc99a69f9f69c48f799dad8eef8b736e3056f16ae52ac9d4262429e2242373fc35eaa949376617c953396ba3246c3"], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a0"], 0xfe33) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x6}, 0x100000, 0x200, 0xffffffff, 0x0, 0x9, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x100000032}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) recvmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x222) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000033c0)={r3, 0x20, &(0x7f0000003380)={&(0x7f0000000780)=""/168, 0xa8, 0x0, &(0x7f0000004180)=""/4096, 0x1000}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003400)=r8, 0x4) 2.291460042s ago: executing program 3 (id=7081): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x0, 0x3e, 0x0, 0x1, 0xfffffff9, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f91124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRESHEX, @ANYRES32, @ANYBLOB="0000009536ed206d837ee089cf82fe000000000000000000efb817d78c194d0c8f00f5f6666cc99a69f9f69c48f799dad8eef8b736e3056f16ae52ac9d4262429e2242373fc35eaa949376617c953396ba3246c3"], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a0"], 0xfe33) r8 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x6}, 0x100000, 0x200, 0xffffffff, 0x0, 0x9, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x100000032}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) recvmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x222) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000033c0)={r3, 0x20, &(0x7f0000003380)={&(0x7f0000000780)=""/168, 0xa8, 0x0, &(0x7f0000004180)=""/4096, 0x1000}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003400)=r9, 0x4) 2.148838438s ago: executing program 1 (id=7075): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x3c, 0xb, 0x2, 0x0, 0x1, 0x10, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000000040), 0xf}, 0x400, 0x5, 0xff, 0x1, 0xd, 0x5, 0xfff9, 0x0, 0x3, 0x0, 0xf9}, 0xffffffffffffffff, 0x9, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0xfffffffffffffeee) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x1ff) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x58000, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r10, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x6, 0x2, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xe, 0x11, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x70}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x2, 0x0, 0x9, 0x1, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x4, 0xec, &(0x7f0000000680)=""/236, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x2, 0x3, 0x66cf, 0x2}, 0x10, 0xffffffffffffffff, r8, 0x0, &(0x7f00000009c0)=[r11, 0xffffffffffffffff, r12, r6, 0xffffffffffffffff], 0x0, 0x10, 0xf}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 1.377136747s ago: executing program 3 (id=7076): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xea, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001380), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={0xffffffffffffffff, 0xe0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0], 0x0, 0xb5, &(0x7f0000001680)=[{}, {}], 0x10, 0x10, &(0x7f00000016c0), &(0x7f0000001700), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000001740)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f00000018c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@type_tag={0x54bb1fad, 0x0, 0x0, 0x12, 0x5}, @ptr={0x1}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x2e, 0x0, 0x30, 0x5f, 0x0, 0x61, 0x30]}}, &(0x7f0000001940)=""/49, 0x45, 0x31, 0x1, 0xfffffffe, 0x10000}, 0x28) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x0, 0x3fff8002}, 0x5025, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x1f, 0x0, 0x19) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32, @ANYBLOB="000000001a0000000000800000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r3, &(0x7f00000002c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, &(0x7f0000000200)=r1}, 0x20) r4 = socket$kcm(0x22, 0x2, 0x21) recvmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4001a050) r5 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x12120) setsockopt$sock_attach_bpf(r5, 0x84, 0x14, &(0x7f0000000000)=r7, 0x8) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001a80)=@o_path={&(0x7f0000001a40)='./file0\x00'}, 0x18) r10 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r10, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="9d7fcf3efc6316a6a555ba8b4726d7ccaf8a060000009cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71ad21b965f615b31105d60a4b16fa2fa1371850a1be85ffcad45b49422b2121d709014f49cf6bd1d18acc4c19e4356669a2ac3e05d5cdc6f0f485c1eb52ea8faf7e83a1468b6a491e71ae3d03cd9677e72413954feae71b5775a6e3e9fa9db9e1ed56e56bff66a7a86214d8145d878e26fa35bd55db98ecdef374d26a5d9cd0e89f3ae45be2d8e1d98ee0865fb64d6dd1e8c89608733370f12be1495d81b36dd72cc28e9c9b2c45f925b38b21818d93ce604772c21824e45793c4073eb44773f8e42c9ebb297dd5e76e856a22253c0e8a80f33b4d015c3f9c0c26bcdd6b440322a23b10d507eecead59faa166bdac1bd840211336dc0c", 0xfffffe4f}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) 1.276192431s ago: executing program 2 (id=7077): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.079570969s ago: executing program 1 (id=7078): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x3c, 0xb, 0x2, 0x0, 0x1, 0x10, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000000040), 0xf}, 0x400, 0x5, 0xff, 0x1, 0xd, 0x5, 0xfff9, 0x0, 0x3, 0x0, 0xf9}, 0xffffffffffffffff, 0x9, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0xfffffffffffffeee) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x1ff) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r10, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x6, 0x2, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xe, 0x11, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x70}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x2, 0x0, 0x9, 0x1, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x4, 0xec, &(0x7f0000000680)=""/236, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x2, 0x3, 0x66cf, 0x2}, 0x10, 0xffffffffffffffff, r8, 0x0, &(0x7f00000009c0)=[r11, 0xffffffffffffffff, r12, r6, 0xffffffffffffffff], 0x0, 0x10, 0xf}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 988.075852ms ago: executing program 2 (id=7079): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x63, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x3, 0x10, 0xffffffffffffffff, 0x1000000}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 591.746988ms ago: executing program 2 (id=7080): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0xd, 0x6, &(0x7f0000000240)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48, 0x7fffffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000016000000b30000007f", @ANYRESOCT=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000740)=ANY=[@ANYBLOB="18030000feffffff0000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000180000000000000000000000000000009500000000000000a703000000000000950000000000000015839e3c50ac47d3ca069b63a4b8dcfb4ca970da6f230f559b1f29fbe5e0ee22d01279521bbb5be19ae33c7c64f9e60385cbaefe3572fb56f325bf0c7dd66e1bbba37b7b6217f5a1209542d6c8fcc5a992f8d61581d7b6687fbaa49f3066aea8aa9fe9f524d73ab425c2acb3da6dcc38f769fdde20bfabc5238383e3434b56b098da6f27db941bfd0edbeda8bb37dcf48b34fa644d467797b87ec9c02e9c0a99c7bb3c5b9012e2662fbf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x2b, 0x2, 0x1000, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000041801000020646c2500000000002020207b1af8ff00000000bfa100000000fb3b8c1f0000f8ffffffb702000008000000b70300000000000085000047349515007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0xe, 0x0, &(0x7f0000000280)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x1, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 349.380177ms ago: executing program 3 (id=7082): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 188.291603ms ago: executing program 2 (id=7083): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000037000b63717a3c4a01d8b45b0808aa78", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="eec3d336eb5be99afba8d122e1d3a8e3e9f8b023e91b3a754c2d9db874d84a2ee1e246579973de3226f6d39d75f619ff51f05bdde8f410ebd03dd73618e663c75204c17287c16948304916854e858e164e7aaedfdabf1929c9e6b51dbab423f30d3b0eec91b34d7e68d90117e2209ad5167a4c356053630379d667790c38f53f4ed999012a81a9db33665675bb48841c28afe5eb684c90cc2912330e879d48ead49e399af4abe4370f"], 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={&(0x7f0000000300), 0x5}, 0x482, 0x81, 0x7ff, 0x8, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x2f, &(0x7f0000000000)="06", 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 91.992197ms ago: executing program 1 (id=7084): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x0, 0x3e, 0x0, 0x1, 0xfffffff9, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f91124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRESHEX, @ANYRES32, @ANYBLOB="0000009536ed206d837ee089cf82fe000000000000000000efb817d78c194d0c8f00f5f6666cc99a69f9f69c48f799dad8eef8b736e3056f16ae52ac9d4262429e2242373fc35eaa949376617c953396ba3246c3"], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a0"], 0xfe33) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) recvmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x222) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000033c0)={r3, 0x20, &(0x7f0000003380)={&(0x7f0000000780)=""/168, 0xa8, 0x0, &(0x7f0000004180)=""/4096, 0x1000}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003400)=r9, 0x4) 0s ago: executing program 3 (id=7085): r0 = socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r1, &(0x7f0000000e40)={&(0x7f00000006c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f00000007c0)="b9f8bd4304631b9f51f3da06a7e9aa7be76f6a3f3180d68140281d8bd364fe03a790361efec1b1245c079e0b1f6f733d07a19be0b398a8108421a0849ce3116dcf375f73d2b7339b7cf8638b32a2053a0a218ab6808345cf9565f5b5e3", 0x5d}, {&(0x7f0000000840)="70a2186f173065fe4b1020f9973810116913af84710731d13642db5c9daf416c0a83be107d3777a890f2c69ce22e6afd2ba278272977064c6f95c1d02f1e294c067d431a40f7cfc7c4cec339601c03e20d605910e79f6a89bf03ba19c32f2dabc90f36e1a19ee1916734582a92ad65331a30bf3768b72673d6bd", 0x7a}, {&(0x7f0000000900)="40976ea398580801153dd52741be1a9bd1c4161976b7329e500c8740a7dde5f083c01f391fdf7153b25f29613f4f609d92658c", 0x33}], 0x3, &(0x7f0000000cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8b5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x29}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xb8}, 0x4018000) sendmsg$kcm(r0, &(0x7f0000002d00)={&(0x7f0000000180)=@ll={0x11, 0x0, r2, 0x1, 0xa4, 0x6, @multicast}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="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", 0xfa}, {&(0x7f0000002bc0)="79e1581872a6ca4fd04b4e5598578683d63aa8e99989501fa48c1df63f8c3954", 0x20}], 0x3, &(0x7f0000002c40)=[{0x70, 0x104, 0x1ff, "730471d388d5dae3c1924c60ae5535c187775b209ce842be0efc7fca7c5335c3865f4da8fe047fb01862b187cac2fe1fc326c22097cf2d019cad167e275b5a686abe1c836d125d2efb0a5dae12f03b61a1f5e391c76bbb4152538e3a44ad0a51"}, {0x40, 0x110, 0x3, "9580136b87cb5e1329c57671529d8efb2a5dd03a229320a89b8db741775b1b4244f68f21aded3ba224"}], 0xb0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0xc1a2, 0x1000000, 0xc, 0x5, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c", @ANYRES64=r4], 0x48}, 0x20028814) r5 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x80086601, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r3, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x20, &(0x7f0000000980)={&(0x7f00000007c0)=""/203, 0xcb, 0x0, &(0x7f00000008c0)=""/161, 0xa1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0x22, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffb}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x97}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @alu={0x4, 0x1, 0x1, 0x8, 0x0, 0xc}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}, @generic={0x71, 0x1, 0x0, 0x11bd, 0x473}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x111c676b}]}, &(0x7f0000000400)='syzkaller\x00', 0xf2a4, 0x39, &(0x7f00000004c0)=""/57, 0x41000, 0x40, '\x00', r8, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xa, 0x6, 0x80000001}, 0x10, r9, r7, 0x6, &(0x7f0000000a00)=[r3, r3, r3, r3, r3], &(0x7f0000000a40)=[{0x0, 0x5, 0x8, 0xa}, {0x1, 0x4, 0x10, 0x7}, {0x3, 0x3, 0x3, 0x9}, {0x3, 0x2, 0x10, 0x1}, {0x5, 0x2, 0x7, 0x6}, {0x1, 0x4, 0xa, 0xc}], 0x10, 0x80}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0xe, 0x800, 0x8, &(0x7f0000000200)) kernel console output (not intermixed with test programs): ][T26985] RAX: ffffffffffffffda RBX: 00007f70a1e15fa0 RCX: 00007f70a1b9ce59 [ 1338.696819][T26985] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000012 [ 1338.705046][T26985] RBP: 00007f70a2a39090 R08: 0000000000000000 R09: 0000000000000000 [ 1338.713181][T26985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1338.721146][T26985] R13: 00007f70a1e16038 R14: 00007f70a1e15fa0 R15: 00007ffe0c0db5b8 [ 1338.729218][T26985] [ 1338.748662][T26985] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1338.757288][T26981] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.6590'. [ 1339.147137][T26994] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6594'. [ 1339.337170][T26996] mac80211_hwsim hwsim144 wlan1: entered allmulticast mode [ 1340.276052][T27017] netlink: 'syz.0.6600': attribute type 9 has an invalid length. [ 1340.325779][T27017] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6600'. [ 1340.454926][T27022] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6601'. [ 1340.493286][T27023] netlink: 'syz.3.6603': attribute type 3 has an invalid length. [ 1340.512910][T27023] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6603'. [ 1341.054708][T27038] FAULT_INJECTION: forcing a failure. [ 1341.054708][T27038] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.081476][T27038] CPU: 1 PID: 27038 Comm: syz.3.6609 Not tainted syzkaller #0 [ 1341.089047][T27038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1341.099126][T27038] Call Trace: [ 1341.102423][T27038] [ 1341.105383][T27038] dump_stack_lvl+0x18c/0x250 [ 1341.110098][T27038] ? show_regs_print_info+0x20/0x20 [ 1341.115331][T27038] ? load_image+0x420/0x420 [ 1341.119876][T27038] ? __might_sleep+0xe0/0xe0 [ 1341.124499][T27038] ? __lock_acquire+0x7d40/0x7d40 [ 1341.129570][T27038] should_fail_ex+0x39d/0x4d0 [ 1341.134279][T27038] should_failslab+0x9/0x20 [ 1341.138808][T27038] slab_pre_alloc_hook+0x59/0x310 [ 1341.143866][T27038] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1341.149615][T27038] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1341.155361][T27038] __kmem_cache_alloc_node+0x53/0x250 [ 1341.160753][T27038] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1341.166482][T27038] __kmalloc+0xa4/0x230 [ 1341.170649][T27038] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1341.176207][T27038] tomoyo_path_number_perm+0x248/0x620 [ 1341.181677][T27038] ? tomoyo_path_number_perm+0x217/0x620 [ 1341.187313][T27038] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1341.192778][T27038] ? ksys_write+0x1c4/0x260 [ 1341.197338][T27038] ? __fget_files+0x28/0x4b0 [ 1341.201955][T27038] ? __fget_files+0x28/0x4b0 [ 1341.206570][T27038] security_file_ioctl+0x70/0xa0 [ 1341.211513][T27038] __se_sys_ioctl+0x48/0x170 [ 1341.216370][T27038] do_syscall_64+0x55/0xb0 [ 1341.220788][T27038] ? clear_bhb_loop+0x40/0x90 [ 1341.225460][T27038] ? clear_bhb_loop+0x40/0x90 [ 1341.230137][T27038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1341.236027][T27038] RIP: 0033:0x7f0798b9ce59 [ 1341.240449][T27038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1341.260055][T27038] RSP: 002b:00007f0799988028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1341.268472][T27038] RAX: ffffffffffffffda RBX: 00007f0798e16090 RCX: 00007f0798b9ce59 [ 1341.276442][T27038] RDX: 0000200000000100 RSI: 000000000000890c RDI: 0000000000000007 [ 1341.284448][T27038] RBP: 00007f0799988090 R08: 0000000000000000 R09: 0000000000000000 [ 1341.292419][T27038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1341.300392][T27038] R13: 00007f0798e16128 R14: 00007f0798e16090 R15: 00007ffd4dd64d78 [ 1341.308382][T27038] [ 1341.370699][T27038] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1341.902658][T27057] netlink: 'syz.1.6615': attribute type 9 has an invalid length. [ 1341.959004][T27057] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6615'. [ 1342.105961][T27062] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6616'. [ 1342.733854][T27076] FAULT_INJECTION: forcing a failure. [ 1342.733854][T27076] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.761865][T27076] CPU: 0 PID: 27076 Comm: syz.3.6622 Not tainted syzkaller #0 [ 1342.769564][T27076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1342.779646][T27076] Call Trace: [ 1342.783030][T27076] [ 1342.785967][T27076] dump_stack_lvl+0x18c/0x250 [ 1342.790667][T27076] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1342.796849][T27076] ? show_regs_print_info+0x20/0x20 [ 1342.802089][T27076] ? load_image+0x420/0x420 [ 1342.806597][T27076] ? should_fail_ex+0x322/0x4d0 [ 1342.811455][T27076] should_fail_ex+0x39d/0x4d0 [ 1342.816159][T27076] should_failslab+0x9/0x20 [ 1342.820689][T27076] slab_pre_alloc_hook+0x59/0x310 [ 1342.825718][T27076] ? kernfs_fop_write_iter+0x159/0x520 [ 1342.831206][T27076] ? kernfs_fop_write_iter+0x159/0x520 [ 1342.836671][T27076] __kmem_cache_alloc_node+0x53/0x250 [ 1342.842049][T27076] ? kernfs_fop_write_iter+0x159/0x520 [ 1342.847522][T27076] __kmalloc+0xa4/0x230 [ 1342.851685][T27076] kernfs_fop_write_iter+0x159/0x520 [ 1342.856984][T27076] vfs_write+0x46c/0x990 [ 1342.861226][T27076] ? file_end_write+0x250/0x250 [ 1342.866083][T27076] ? __fget_files+0x43d/0x4b0 [ 1342.870771][T27076] ? __fdget_pos+0x2a3/0x330 [ 1342.875380][T27076] ? ksys_write+0x75/0x260 [ 1342.879797][T27076] ksys_write+0x150/0x260 [ 1342.884136][T27076] ? __ia32_sys_read+0x90/0x90 [ 1342.888923][T27076] ? lockdep_hardirqs_on+0x98/0x150 [ 1342.894216][T27076] do_syscall_64+0x55/0xb0 [ 1342.898626][T27076] ? clear_bhb_loop+0x40/0x90 [ 1342.903310][T27076] ? clear_bhb_loop+0x40/0x90 [ 1342.907986][T27076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1342.913875][T27076] RIP: 0033:0x7f0798b9ce59 [ 1342.918285][T27076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1342.937885][T27076] RSP: 002b:00007f07999a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1342.946293][T27076] RAX: ffffffffffffffda RBX: 00007f0798e15fa0 RCX: 00007f0798b9ce59 [ 1342.954261][T27076] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000007 [ 1342.962252][T27076] RBP: 00007f07999a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1342.970214][T27076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1342.978176][T27076] R13: 00007f0798e16038 R14: 00007f0798e15fa0 R15: 00007ffd4dd64d78 [ 1342.986164][T27076] [ 1343.229320][ T5777] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 1343.240813][T27087] netlink: 'syz.1.6627': attribute type 3 has an invalid length. [ 1343.261763][T27087] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.6627'. [ 1343.375299][T27090] FAULT_INJECTION: forcing a failure. [ 1343.375299][T27090] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.412117][T27090] CPU: 1 PID: 27090 Comm: syz.0.6628 Not tainted syzkaller #0 [ 1343.419697][T27090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1343.429789][T27090] Call Trace: [ 1343.433114][T27090] [ 1343.436084][T27090] dump_stack_lvl+0x18c/0x250 [ 1343.440825][T27090] ? show_regs_print_info+0x20/0x20 [ 1343.446073][T27090] ? load_image+0x420/0x420 [ 1343.450651][T27090] ? __might_sleep+0xe0/0xe0 [ 1343.455292][T27090] ? __lock_acquire+0x7d40/0x7d40 [ 1343.460380][T27090] should_fail_ex+0x39d/0x4d0 [ 1343.465129][T27090] should_failslab+0x9/0x20 [ 1343.469682][T27090] slab_pre_alloc_hook+0x59/0x310 [ 1343.474763][T27090] ? kernfs_fop_write_iter+0x159/0x520 [ 1343.480284][T27090] ? kernfs_fop_write_iter+0x159/0x520 [ 1343.485816][T27090] __kmem_cache_alloc_node+0x53/0x250 [ 1343.491262][T27090] ? kernfs_fop_write_iter+0x159/0x520 [ 1343.496776][T27090] __kmalloc+0xa4/0x230 [ 1343.500994][T27090] kernfs_fop_write_iter+0x159/0x520 [ 1343.506359][T27090] vfs_write+0x46c/0x990 [ 1343.510668][T27090] ? file_end_write+0x250/0x250 [ 1343.515589][T27090] ? __fget_files+0x43d/0x4b0 [ 1343.520369][T27090] ? __fdget_pos+0x2a3/0x330 [ 1343.525014][T27090] ? ksys_write+0x75/0x260 [ 1343.529484][T27090] ksys_write+0x150/0x260 [ 1343.533869][T27090] ? __ia32_sys_read+0x90/0x90 [ 1343.538697][T27090] ? lockdep_hardirqs_on+0x98/0x150 [ 1343.543958][T27090] do_syscall_64+0x55/0xb0 [ 1343.548411][T27090] ? clear_bhb_loop+0x40/0x90 [ 1343.553128][T27090] ? clear_bhb_loop+0x40/0x90 [ 1343.557860][T27090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1343.563801][T27090] RIP: 0033:0x7fe89099ce59 [ 1343.568270][T27090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1343.587933][T27090] RSP: 002b:00007fe8918d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1343.596409][T27090] RAX: ffffffffffffffda RBX: 00007fe890c15fa0 RCX: 00007fe89099ce59 [ 1343.604519][T27090] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000007 [ 1343.612544][T27090] RBP: 00007fe8918d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1343.620557][T27090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1343.628584][T27090] R13: 00007fe890c16038 R14: 00007fe890c15fa0 R15: 00007fff6f933ee8 [ 1343.636677][T27090] [ 1343.969324][T27098] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6631'. [ 1344.275735][T27109] netlink: 'syz.2.6632': attribute type 9 has an invalid length. [ 1344.313171][T27109] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6632'. [ 1344.924633][T27119] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6638'. [ 1345.096398][T27119] mac80211_hwsim hwsim127 wlan1: entered allmulticast mode [ 1345.300018][T27130] netlink: 'syz.3.6644': attribute type 39 has an invalid length. [ 1345.538946][T27133] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6643'. [ 1345.806955][T27148] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6649'. [ 1345.832203][T27150] netlink: 'syz.2.6647': attribute type 9 has an invalid length. [ 1345.839978][T27150] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6647'. [ 1346.267185][T27155] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6651'. [ 1346.389558][T27163] FAULT_INJECTION: forcing a failure. [ 1346.389558][T27163] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.420083][T27163] CPU: 0 PID: 27163 Comm: syz.1.6652 Not tainted syzkaller #0 [ 1346.427610][T27163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1346.437691][T27163] Call Trace: [ 1346.440993][T27163] [ 1346.443945][T27163] dump_stack_lvl+0x18c/0x250 [ 1346.448647][T27163] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1346.454823][T27163] ? show_regs_print_info+0x20/0x20 [ 1346.460041][T27163] ? load_image+0x420/0x420 [ 1346.464591][T27163] should_fail_ex+0x39d/0x4d0 [ 1346.469306][T27163] should_failslab+0x9/0x20 [ 1346.473834][T27163] slab_pre_alloc_hook+0x59/0x310 [ 1346.478878][T27163] ? kernfs_fop_write_iter+0x159/0x520 [ 1346.484344][T27163] ? kernfs_fop_write_iter+0x159/0x520 [ 1346.489806][T27163] __kmem_cache_alloc_node+0x53/0x250 [ 1346.495186][T27163] ? kernfs_fop_write_iter+0x159/0x520 [ 1346.500646][T27163] __kmalloc+0xa4/0x230 [ 1346.504805][T27163] kernfs_fop_write_iter+0x159/0x520 [ 1346.510095][T27163] vfs_write+0x46c/0x990 [ 1346.514439][T27163] ? file_end_write+0x250/0x250 [ 1346.519297][T27163] ? __fget_files+0x43d/0x4b0 [ 1346.523982][T27163] ? __fdget_pos+0x2a3/0x330 [ 1346.528572][T27163] ? ksys_write+0x75/0x260 [ 1346.532987][T27163] ksys_write+0x150/0x260 [ 1346.537314][T27163] ? __ia32_sys_read+0x90/0x90 [ 1346.542075][T27163] ? lockdep_hardirqs_on+0x98/0x150 [ 1346.547271][T27163] do_syscall_64+0x55/0xb0 [ 1346.551682][T27163] ? clear_bhb_loop+0x40/0x90 [ 1346.556355][T27163] ? clear_bhb_loop+0x40/0x90 [ 1346.561027][T27163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1346.566914][T27163] RIP: 0033:0x7f70a1b9ce59 [ 1346.571322][T27163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.590923][T27163] RSP: 002b:00007f70a2a39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1346.599338][T27163] RAX: ffffffffffffffda RBX: 00007f70a1e15fa0 RCX: 00007f70a1b9ce59 [ 1346.607330][T27163] RDX: 0000000000000012 RSI: 0000200000000100 RDI: 0000000000000006 [ 1346.615293][T27163] RBP: 00007f70a2a39090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.623259][T27163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.631223][T27163] R13: 00007f70a1e16038 R14: 00007f70a1e15fa0 R15: 00007ffe0c0db5b8 [ 1346.639203][T27163] [ 1346.670860][T27168] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6655'. [ 1346.817304][T27164] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6654'. [ 1347.014486][T27167] mac80211_hwsim hwsim135 wlan1: entered allmulticast mode [ 1347.517184][T27182] netlink: 'syz.0.6660': attribute type 39 has an invalid length. [ 1347.567163][T27184] FAULT_INJECTION: forcing a failure. [ 1347.567163][T27184] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.589002][T27184] CPU: 0 PID: 27184 Comm: syz.1.6661 Not tainted syzkaller #0 [ 1347.596510][T27184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1347.606602][T27184] Call Trace: [ 1347.609905][T27184] [ 1347.612851][T27184] dump_stack_lvl+0x18c/0x250 [ 1347.617532][T27184] ? show_regs_print_info+0x20/0x20 [ 1347.622731][T27184] ? load_image+0x420/0x420 [ 1347.627246][T27184] ? __might_sleep+0xe0/0xe0 [ 1347.631847][T27184] ? __lock_acquire+0x7d40/0x7d40 [ 1347.636875][T27184] should_fail_ex+0x39d/0x4d0 [ 1347.641575][T27184] should_failslab+0x9/0x20 [ 1347.646099][T27184] slab_pre_alloc_hook+0x59/0x310 [ 1347.651124][T27184] ? kernfs_fop_write_iter+0x159/0x520 [ 1347.656610][T27184] ? kernfs_fop_write_iter+0x159/0x520 [ 1347.662111][T27184] __kmem_cache_alloc_node+0x53/0x250 [ 1347.667530][T27184] ? kernfs_fop_write_iter+0x159/0x520 [ 1347.673025][T27184] __kmalloc+0xa4/0x230 [ 1347.677310][T27184] kernfs_fop_write_iter+0x159/0x520 [ 1347.682645][T27184] vfs_write+0x46c/0x990 [ 1347.686934][T27184] ? file_end_write+0x250/0x250 [ 1347.691830][T27184] ? __fget_files+0x43d/0x4b0 [ 1347.696567][T27184] ? __fdget_pos+0x2a3/0x330 [ 1347.701194][T27184] ? ksys_write+0x75/0x260 [ 1347.705635][T27184] ksys_write+0x150/0x260 [ 1347.710006][T27184] ? __ia32_sys_read+0x90/0x90 [ 1347.714778][T27184] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1347.720692][T27184] do_syscall_64+0x55/0xb0 [ 1347.725123][T27184] ? clear_bhb_loop+0x40/0x90 [ 1347.729798][T27184] ? clear_bhb_loop+0x40/0x90 [ 1347.734479][T27184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1347.740369][T27184] RIP: 0033:0x7f70a1b9ce59 [ 1347.744780][T27184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.764399][T27184] RSP: 002b:00007f70a2a39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1347.772840][T27184] RAX: ffffffffffffffda RBX: 00007f70a1e15fa0 RCX: 00007f70a1b9ce59 [ 1347.780957][T27184] RDX: 0000000000000012 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1347.788938][T27184] RBP: 00007f70a2a39090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.796919][T27184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1347.804904][T27184] R13: 00007f70a1e16038 R14: 00007f70a1e15fa0 R15: 00007ffe0c0db5b8 [ 1347.812916][T27184] [ 1347.896088][T27192] netlink: 'syz.3.6662': attribute type 10 has an invalid length. [ 1347.924689][T27192] team0: Port device wlan1 added [ 1348.126487][T27200] netlink: 'syz.2.6663': attribute type 9 has an invalid length. [ 1348.143393][T27200] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6663'. [ 1348.158093][T27203] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6666'. [ 1348.489932][T27207] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6667'. [ 1348.663733][T27213] sock: sock_set_timeout: `syz.1.6669' (pid 27213) tries to set negative timeout [ 1349.681715][T27224] netlink: 'syz.0.6672': attribute type 3 has an invalid length. [ 1349.697855][T27224] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6672'. [ 1349.790299][T27212] mac80211_hwsim hwsim139 wlan1: entered allmulticast mode [ 1349.842375][T27210] delete_channel: no stack [ 1349.884906][T27227] FAULT_INJECTION: forcing a failure. [ 1349.884906][T27227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.899616][T27227] CPU: 1 PID: 27227 Comm: syz.0.6673 Not tainted syzkaller #0 [ 1349.907115][T27227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1349.917177][T27227] Call Trace: [ 1349.920450][T27227] [ 1349.923372][T27227] dump_stack_lvl+0x18c/0x250 [ 1349.928157][T27227] ? show_regs_print_info+0x20/0x20 [ 1349.933367][T27227] ? load_image+0x420/0x420 [ 1349.937879][T27227] ? __might_fault+0xaa/0x120 [ 1349.942548][T27227] ? __lock_acquire+0x7d40/0x7d40 [ 1349.947570][T27227] should_fail_ex+0x39d/0x4d0 [ 1349.952252][T27227] _copy_from_user+0x2f/0xe0 [ 1349.956844][T27227] __sys_bpf+0x23e/0x890 [ 1349.961085][T27227] ? bpf_link_show_fdinfo+0x390/0x390 [ 1349.966461][T27227] ? lock_chain_count+0x20/0x20 [ 1349.971307][T27227] __x64_sys_bpf+0x7c/0x90 [ 1349.975712][T27227] do_syscall_64+0x55/0xb0 [ 1349.980125][T27227] ? clear_bhb_loop+0x40/0x90 [ 1349.984795][T27227] ? clear_bhb_loop+0x40/0x90 [ 1349.989474][T27227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1349.995398][T27227] RIP: 0033:0x7fe89099ce59 [ 1349.999806][T27227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.020373][T27227] RSP: 002b:00007fe8918d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1350.028785][T27227] RAX: ffffffffffffffda RBX: 00007fe890c15fa0 RCX: 00007fe89099ce59 [ 1350.036750][T27227] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1350.044711][T27227] RBP: 00007fe8918d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.052677][T27227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.060637][T27227] R13: 00007fe890c16038 R14: 00007fe890c15fa0 R15: 00007fff6f933ee8 [ 1350.068615][T27227] [ 1350.260070][T27237] FAULT_INJECTION: forcing a failure. [ 1350.260070][T27237] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.276002][T27237] CPU: 1 PID: 27237 Comm: syz.2.6678 Not tainted syzkaller #0 [ 1350.283507][T27237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1350.293570][T27237] Call Trace: [ 1350.296853][T27237] [ 1350.299780][T27237] dump_stack_lvl+0x18c/0x250 [ 1350.304465][T27237] ? show_regs_print_info+0x20/0x20 [ 1350.309691][T27237] ? load_image+0x420/0x420 [ 1350.314197][T27237] ? __might_sleep+0xe0/0xe0 [ 1350.318781][T27237] ? __lock_acquire+0x7d40/0x7d40 [ 1350.323812][T27237] should_fail_ex+0x39d/0x4d0 [ 1350.328489][T27237] should_failslab+0x9/0x20 [ 1350.332988][T27237] slab_pre_alloc_hook+0x59/0x310 [ 1350.338012][T27237] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1350.343727][T27237] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1350.349450][T27237] __kmem_cache_alloc_node+0x53/0x250 [ 1350.354828][T27237] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1350.360543][T27237] __kmalloc+0xa4/0x230 [ 1350.364701][T27237] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1350.370253][T27237] tomoyo_path_number_perm+0x248/0x620 [ 1350.375721][T27237] ? tomoyo_path_number_perm+0x217/0x620 [ 1350.381359][T27237] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1350.386822][T27237] ? ksys_write+0x1c4/0x260 [ 1350.391344][T27237] ? __fget_files+0x28/0x4b0 [ 1350.395933][T27237] ? __fget_files+0x28/0x4b0 [ 1350.400552][T27237] security_file_ioctl+0x70/0xa0 [ 1350.405490][T27237] __se_sys_ioctl+0x48/0x170 [ 1350.410075][T27237] do_syscall_64+0x55/0xb0 [ 1350.414483][T27237] ? clear_bhb_loop+0x40/0x90 [ 1350.419152][T27237] ? clear_bhb_loop+0x40/0x90 [ 1350.423829][T27237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1350.429802][T27237] RIP: 0033:0x7f5b4cf9ce59 [ 1350.434229][T27237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.453832][T27237] RSP: 002b:00007f5b4dee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1350.462271][T27237] RAX: ffffffffffffffda RBX: 00007f5b4d215fa0 RCX: 00007f5b4cf9ce59 [ 1350.470238][T27237] RDX: 00002000000002c0 RSI: 0000000000008922 RDI: 0000000000000003 [ 1350.478201][T27237] RBP: 00007f5b4dee3090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.486163][T27237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.494123][T27237] R13: 00007f5b4d216038 R14: 00007f5b4d215fa0 R15: 00007ffe4681f288 [ 1350.502103][T27237] [ 1350.511680][T27237] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1350.521799][T27234] netlink: 'syz.1.6675': attribute type 39 has an invalid length. [ 1350.673226][T27236] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6676'. [ 1350.830716][T27249] FAULT_INJECTION: forcing a failure. [ 1350.830716][T27249] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.876039][T27249] CPU: 1 PID: 27249 Comm: syz.3.6683 Not tainted syzkaller #0 [ 1350.883548][T27249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1350.893621][T27249] Call Trace: [ 1350.896910][T27249] [ 1350.899851][T27249] dump_stack_lvl+0x18c/0x250 [ 1350.904553][T27249] ? show_regs_print_info+0x20/0x20 [ 1350.909759][T27249] ? load_image+0x420/0x420 [ 1350.914283][T27249] ? __might_sleep+0xe0/0xe0 [ 1350.918976][T27249] ? __lock_acquire+0x7d40/0x7d40 [ 1350.924019][T27249] should_fail_ex+0x39d/0x4d0 [ 1350.928729][T27249] should_failslab+0x9/0x20 [ 1350.933247][T27249] slab_pre_alloc_hook+0x59/0x310 [ 1350.938295][T27249] kmem_cache_alloc_node+0x60/0x320 [ 1350.943508][T27249] ? __alloc_skb+0x103/0x2c0 [ 1350.948113][T27249] __alloc_skb+0x103/0x2c0 [ 1350.952546][T27249] alloc_skb_with_frags+0xca/0x7b0 [ 1350.957671][T27249] ? mark_lock+0x94/0x320 [ 1350.962026][T27249] sock_alloc_send_pskb+0x883/0x9a0 [ 1350.967258][T27249] ? sock_kzfree_s+0x50/0x50 [ 1350.971882][T27249] tun_get_user+0x82c/0x3ca0 [ 1350.976558][T27249] ? aa_file_perm+0x11b/0xee0 [ 1350.981255][T27249] ? rcu_read_unlock+0xa0/0xa0 [ 1350.986046][T27249] ? tun_get+0x1c/0x2e0 [ 1350.990225][T27249] ? __lock_acquire+0x7d40/0x7d40 [ 1350.995305][T27249] ? tun_get+0x1c/0x2e0 [ 1350.999494][T27249] tun_chr_write_iter+0x119/0x200 [ 1351.004626][T27249] vfs_write+0x46c/0x990 [ 1351.008888][T27249] ? file_end_write+0x250/0x250 [ 1351.013760][T27249] ? __fget_files+0x43d/0x4b0 [ 1351.018459][T27249] ? __fdget_pos+0x1d8/0x330 [ 1351.023067][T27249] ? ksys_write+0x75/0x260 [ 1351.027512][T27249] ksys_write+0x150/0x260 [ 1351.031862][T27249] ? __ia32_sys_read+0x90/0x90 [ 1351.036648][T27249] ? lockdep_hardirqs_on+0x98/0x150 [ 1351.041864][T27249] do_syscall_64+0x55/0xb0 [ 1351.046293][T27249] ? clear_bhb_loop+0x40/0x90 [ 1351.050986][T27249] ? clear_bhb_loop+0x40/0x90 [ 1351.055694][T27249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1351.061618][T27249] RIP: 0033:0x7f0798b9ce59 [ 1351.066053][T27249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1351.085878][T27249] RSP: 002b:00007f07999a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1351.094319][T27249] RAX: ffffffffffffffda RBX: 00007f0798e15fa0 RCX: 00007f0798b9ce59 [ 1351.102307][T27249] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 1351.110299][T27249] RBP: 00007f07999a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1351.118282][T27249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1351.126265][T27249] R13: 00007f0798e16038 R14: 00007f0798e15fa0 R15: 00007ffd4dd64d78 [ 1351.134270][T27249] [ 1351.166620][T27253] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6685'. [ 1351.252278][T27251] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6684'. [ 1351.416397][T27264] FAULT_INJECTION: forcing a failure. [ 1351.416397][T27264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1351.433913][T27264] CPU: 0 PID: 27264 Comm: syz.2.6688 Not tainted syzkaller #0 [ 1351.441423][T27264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1351.451499][T27264] Call Trace: [ 1351.454789][T27264] [ 1351.457738][T27264] dump_stack_lvl+0x18c/0x250 [ 1351.462445][T27264] ? show_regs_print_info+0x20/0x20 [ 1351.467671][T27264] ? load_image+0x420/0x420 [ 1351.472198][T27264] ? __might_fault+0xaa/0x120 [ 1351.476891][T27264] ? __lock_acquire+0x7d40/0x7d40 [ 1351.481952][T27264] should_fail_ex+0x39d/0x4d0 [ 1351.486660][T27264] _copy_from_user+0x2f/0xe0 [ 1351.491268][T27264] __sys_bpf+0x23e/0x890 [ 1351.495540][T27264] ? bpf_link_show_fdinfo+0x390/0x390 [ 1351.500939][T27264] ? lock_chain_count+0x20/0x20 [ 1351.505806][T27264] __x64_sys_bpf+0x7c/0x90 [ 1351.510315][T27264] do_syscall_64+0x55/0xb0 [ 1351.514736][T27264] ? clear_bhb_loop+0x40/0x90 [ 1351.519421][T27264] ? clear_bhb_loop+0x40/0x90 [ 1351.524122][T27264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1351.530028][T27264] RIP: 0033:0x7f5b4cf9ce59 [ 1351.534458][T27264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1351.554094][T27264] RSP: 002b:00007f5b4dee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1351.562537][T27264] RAX: ffffffffffffffda RBX: 00007f5b4d215fa0 RCX: 00007f5b4cf9ce59 [ 1351.570524][T27264] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 1351.578513][T27264] RBP: 00007f5b4dee3090 R08: 0000000000000000 R09: 0000000000000000 [ 1351.586497][T27264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1351.594486][T27264] R13: 00007f5b4d216038 R14: 00007f5b4d215fa0 R15: 00007ffe4681f288 [ 1351.602490][T27264] [ 1351.728006][T27269] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6692'. [ 1351.808167][ T5777] Bluetooth: hci4: ISO packet for unknown connection handle 5 [ 1352.059716][T27282] FAULT_INJECTION: forcing a failure. [ 1352.059716][T27282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1352.073125][T27282] CPU: 0 PID: 27282 Comm: syz.3.6695 Not tainted syzkaller #0 [ 1352.080611][T27282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1352.090685][T27282] Call Trace: [ 1352.093964][T27282] [ 1352.096888][T27282] dump_stack_lvl+0x18c/0x250 [ 1352.101566][T27282] ? show_regs_print_info+0x20/0x20 [ 1352.106765][T27282] ? load_image+0x420/0x420 [ 1352.111271][T27282] ? __might_fault+0xaa/0x120 [ 1352.115941][T27282] ? __lock_acquire+0x7d40/0x7d40 [ 1352.120959][T27282] should_fail_ex+0x39d/0x4d0 [ 1352.125638][T27282] _copy_from_user+0x2f/0xe0 [ 1352.130224][T27282] __sys_bpf+0x23e/0x890 [ 1352.134553][T27282] ? bpf_link_show_fdinfo+0x390/0x390 [ 1352.139934][T27282] ? lock_chain_count+0x20/0x20 [ 1352.144789][T27282] __x64_sys_bpf+0x7c/0x90 [ 1352.149201][T27282] do_syscall_64+0x55/0xb0 [ 1352.153615][T27282] ? clear_bhb_loop+0x40/0x90 [ 1352.158286][T27282] ? clear_bhb_loop+0x40/0x90 [ 1352.163044][T27282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1352.168935][T27282] RIP: 0033:0x7f0798b9ce59 [ 1352.173343][T27282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.192947][T27282] RSP: 002b:00007f07999a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1352.201363][T27282] RAX: ffffffffffffffda RBX: 00007f0798e15fa0 RCX: 00007f0798b9ce59 [ 1352.209354][T27282] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 1352.217327][T27282] RBP: 00007f07999a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1352.225291][T27282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1352.233256][T27282] R13: 00007f0798e16038 R14: 00007f0798e15fa0 R15: 00007ffd4dd64d78 [ 1352.241235][T27282] [ 1352.280413][T27281] netlink: 'syz.2.6694': attribute type 39 has an invalid length. [ 1352.502481][ T5777] Bluetooth: hci4: ISO packet for unknown connection handle 3121 [ 1352.662121][T27295] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6699'. [ 1352.725871][T27300] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6703'. [ 1352.793266][T27303] FAULT_INJECTION: forcing a failure. [ 1352.793266][T27303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1352.831597][T27303] CPU: 1 PID: 27303 Comm: syz.1.6705 Not tainted syzkaller #0 [ 1352.839129][T27303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1352.849179][T27303] Call Trace: [ 1352.852458][T27303] [ 1352.855390][T27303] dump_stack_lvl+0x18c/0x250 [ 1352.860093][T27303] ? show_regs_print_info+0x20/0x20 [ 1352.865321][T27303] ? load_image+0x420/0x420 [ 1352.869853][T27303] ? __might_fault+0xaa/0x120 [ 1352.874552][T27303] ? __lock_acquire+0x7d40/0x7d40 [ 1352.879594][T27303] should_fail_ex+0x39d/0x4d0 [ 1352.884283][T27303] _copy_from_user+0x2f/0xe0 [ 1352.888875][T27303] __sys_bpf+0x23e/0x890 [ 1352.893148][T27303] ? bpf_link_show_fdinfo+0x390/0x390 [ 1352.898523][T27303] ? lock_chain_count+0x20/0x20 [ 1352.903374][T27303] __x64_sys_bpf+0x7c/0x90 [ 1352.907780][T27303] do_syscall_64+0x55/0xb0 [ 1352.912185][T27303] ? clear_bhb_loop+0x40/0x90 [ 1352.916855][T27303] ? clear_bhb_loop+0x40/0x90 [ 1352.921525][T27303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1352.927409][T27303] RIP: 0033:0x7f70a1b9ce59 [ 1352.931816][T27303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.951425][T27303] RSP: 002b:00007f70a2a39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1352.959850][T27303] RAX: ffffffffffffffda RBX: 00007f70a1e15fa0 RCX: 00007f70a1b9ce59 [ 1352.967835][T27303] RDX: 0000000000000023 RSI: 000020000000e000 RDI: 0000000000000005 [ 1352.975820][T27303] RBP: 00007f70a2a39090 R08: 0000000000000000 R09: 0000000000000000 [ 1352.983787][T27303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1352.991751][T27303] R13: 00007f70a1e16038 R14: 00007f70a1e15fa0 R15: 00007ffe0c0db5b8 [ 1352.999734][T27303] [ 1353.255409][T27321] FAULT_INJECTION: forcing a failure. [ 1353.255409][T27321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1353.281590][T27321] CPU: 0 PID: 27321 Comm: syz.1.6713 Not tainted syzkaller #0 [ 1353.289101][T27321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1353.299162][T27321] Call Trace: [ 1353.302442][T27321] [ 1353.305364][T27321] dump_stack_lvl+0x18c/0x250 [ 1353.310042][T27321] ? show_regs_print_info+0x20/0x20 [ 1353.315234][T27321] ? load_image+0x420/0x420 [ 1353.319735][T27321] ? __might_fault+0xaa/0x120 [ 1353.324411][T27321] ? __lock_acquire+0x7d40/0x7d40 [ 1353.329431][T27321] should_fail_ex+0x39d/0x4d0 [ 1353.334112][T27321] _copy_from_user+0x2f/0xe0 [ 1353.338698][T27321] __sys_bpf+0x23e/0x890 [ 1353.342940][T27321] ? bpf_link_show_fdinfo+0x390/0x390 [ 1353.348319][T27321] ? lock_chain_count+0x20/0x20 [ 1353.353174][T27321] __x64_sys_bpf+0x7c/0x90 [ 1353.357591][T27321] do_syscall_64+0x55/0xb0 [ 1353.362000][T27321] ? clear_bhb_loop+0x40/0x90 [ 1353.366678][T27321] ? clear_bhb_loop+0x40/0x90 [ 1353.371348][T27321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1353.377247][T27321] RIP: 0033:0x7f70a1b9ce59 [ 1353.381675][T27321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1353.401278][T27321] RSP: 002b:00007f70a2a39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1353.409685][T27321] RAX: ffffffffffffffda RBX: 00007f70a1e15fa0 RCX: 00007f70a1b9ce59 [ 1353.417657][T27321] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 1353.425619][T27321] RBP: 00007f70a2a39090 R08: 0000000000000000 R09: 0000000000000000 [ 1353.433579][T27321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1353.441541][T27321] R13: 00007f70a1e16038 R14: 00007f70a1e15fa0 R15: 00007ffe0c0db5b8 [ 1353.449516][T27321] [ 1353.703805][T27329] netlink: 'syz.1.6714': attribute type 9 has an invalid length. [ 1353.753552][T27329] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6714'. [ 1354.116878][T27333] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6716'. [ 1354.255608][T27330] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6715'. [ 1354.312130][T27338] FAULT_INJECTION: forcing a failure. [ 1354.312130][T27338] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.341804][T27338] CPU: 1 PID: 27338 Comm: syz.3.6718 Not tainted syzkaller #0 [ 1354.349319][T27338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1354.359406][T27338] Call Trace: [ 1354.362703][T27338] [ 1354.365652][T27338] dump_stack_lvl+0x18c/0x250 [ 1354.370375][T27338] ? show_regs_print_info+0x20/0x20 [ 1354.375703][T27338] ? load_image+0x420/0x420 [ 1354.380244][T27338] ? __might_sleep+0xe0/0xe0 [ 1354.384866][T27338] ? __lock_acquire+0x7d40/0x7d40 [ 1354.389932][T27338] should_fail_ex+0x39d/0x4d0 [ 1354.394644][T27338] should_failslab+0x9/0x20 [ 1354.399261][T27338] slab_pre_alloc_hook+0x59/0x310 [ 1354.404317][T27338] ? kernfs_fop_write_iter+0x159/0x520 [ 1354.409849][T27338] ? kernfs_fop_write_iter+0x159/0x520 [ 1354.415339][T27338] __kmem_cache_alloc_node+0x53/0x250 [ 1354.420749][T27338] ? kernfs_fop_write_iter+0x159/0x520 [ 1354.426233][T27338] __kmalloc+0xa4/0x230 [ 1354.430416][T27338] kernfs_fop_write_iter+0x159/0x520 [ 1354.435737][T27338] vfs_write+0x46c/0x990 [ 1354.440014][T27338] ? file_end_write+0x250/0x250 [ 1354.444892][T27338] ? __fget_files+0x43d/0x4b0 [ 1354.449613][T27338] ? __fdget_pos+0x2a3/0x330 [ 1354.454231][T27338] ? ksys_write+0x75/0x260 [ 1354.458680][T27338] ksys_write+0x150/0x260 [ 1354.463095][T27338] ? __ia32_sys_read+0x90/0x90 [ 1354.468768][T27338] ? lockdep_hardirqs_on+0x98/0x150 [ 1354.474008][T27338] do_syscall_64+0x55/0xb0 [ 1354.478444][T27338] ? clear_bhb_loop+0x40/0x90 [ 1354.483149][T27338] ? clear_bhb_loop+0x40/0x90 [ 1354.487848][T27338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1354.493770][T27338] RIP: 0033:0x7f0798b9ce59 [ 1354.498213][T27338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1354.517942][T27338] RSP: 002b:00007f07999a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1354.526389][T27338] RAX: ffffffffffffffda RBX: 00007f0798e15fa0 RCX: 00007f0798b9ce59 [ 1354.534391][T27338] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000004 [ 1354.542389][T27338] RBP: 00007f07999a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.550389][T27338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1354.558558][T27338] R13: 00007f0798e16038 R14: 00007f0798e15fa0 R15: 00007ffd4dd64d78 [ 1354.566660][T27338] [ 1354.739540][T27349] FAULT_INJECTION: forcing a failure. [ 1354.739540][T27349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1354.811796][T27349] CPU: 1 PID: 27349 Comm: syz.0.6724 Not tainted syzkaller #0 [ 1354.819323][T27349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1354.829400][T27349] Call Trace: [ 1354.832702][T27349] [ 1354.835655][T27349] dump_stack_lvl+0x18c/0x250 [ 1354.840369][T27349] ? show_regs_print_info+0x20/0x20 [ 1354.845586][T27349] ? load_image+0x420/0x420 [ 1354.850108][T27349] ? __might_fault+0xaa/0x120 [ 1354.854792][T27349] ? __lock_acquire+0x7d40/0x7d40 [ 1354.859825][T27349] should_fail_ex+0x39d/0x4d0 [ 1354.864508][T27349] _copy_from_user+0x2f/0xe0 [ 1354.869098][T27349] __sys_bpf+0x23e/0x890 [ 1354.873339][T27349] ? bpf_link_show_fdinfo+0x390/0x390 [ 1354.878714][T27349] ? lock_chain_count+0x20/0x20 [ 1354.883562][T27349] __x64_sys_bpf+0x7c/0x90 [ 1354.887970][T27349] do_syscall_64+0x55/0xb0 [ 1354.892400][T27349] ? clear_bhb_loop+0x40/0x90 [ 1354.897067][T27349] ? clear_bhb_loop+0x40/0x90 [ 1354.901941][T27349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1354.907829][T27349] RIP: 0033:0x7fe89099ce59 [ 1354.912256][T27349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1354.931877][T27349] RSP: 002b:00007fe8918d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1354.940292][T27349] RAX: ffffffffffffffda RBX: 00007fe890c15fa0 RCX: 00007fe89099ce59 [ 1354.948257][T27349] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a [ 1354.956244][T27349] RBP: 00007fe8918d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.964244][T27349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1354.972211][T27349] R13: 00007fe890c16038 R14: 00007fe890c15fa0 R15: 00007fff6f933ee8 [ 1354.980275][T27349] [ 1355.038914][T27353] netlink: 'syz.2.6726': attribute type 39 has an invalid length. [ 1355.053008][T27356] netlink: 'syz.1.6727': attribute type 39 has an invalid length. [ 1355.398139][T27366] FAULT_INJECTION: forcing a failure. [ 1355.398139][T27366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1355.449195][T27365] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6731'. [ 1355.478093][T27366] CPU: 1 PID: 27366 Comm: syz.2.6730 Not tainted syzkaller #0 [ 1355.485636][T27366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1355.495743][T27366] Call Trace: [ 1355.499064][T27366] [ 1355.502039][T27366] dump_stack_lvl+0x18c/0x250 [ 1355.506782][T27366] ? show_regs_print_info+0x20/0x20 [ 1355.512036][T27366] ? load_image+0x420/0x420 [ 1355.516605][T27366] ? __might_fault+0xaa/0x120 [ 1355.521339][T27366] ? __lock_acquire+0x7d40/0x7d40 [ 1355.526433][T27366] should_fail_ex+0x39d/0x4d0 [ 1355.531182][T27366] _copy_from_user+0x2f/0xe0 [ 1355.535839][T27366] __sys_bpf+0x23e/0x890 [ 1355.540237][T27366] ? bpf_link_show_fdinfo+0x390/0x390 [ 1355.545798][T27366] ? lock_chain_count+0x20/0x20 [ 1355.550733][T27366] __x64_sys_bpf+0x7c/0x90 [ 1355.555301][T27366] do_syscall_64+0x55/0xb0 [ 1355.559777][T27366] ? clear_bhb_loop+0x40/0x90 [ 1355.564506][T27366] ? clear_bhb_loop+0x40/0x90 [ 1355.569240][T27366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1355.575182][T27366] RIP: 0033:0x7f5b4cf9ce59 [ 1355.579645][T27366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.599303][T27366] RSP: 002b:00007f5b4dee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1355.607789][T27366] RAX: ffffffffffffffda RBX: 00007f5b4d215fa0 RCX: 00007f5b4cf9ce59 [ 1355.615897][T27366] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1355.623930][T27366] RBP: 00007f5b4dee3090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.631951][T27366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.639975][T27366] R13: 00007f5b4d216038 R14: 00007f5b4d215fa0 R15: 00007ffe4681f288 [ 1355.648044][T27366] [ 1355.905708][T27370] netlink: 'syz.1.6732': attribute type 9 has an invalid length. [ 1356.012217][T27370] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6732'. [ 1357.017013][T27387] FAULT_INJECTION: forcing a failure. [ 1357.017013][T27387] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.062222][T27386] netlink: 'syz.1.6738': attribute type 39 has an invalid length. [ 1357.071603][T27387] CPU: 0 PID: 27387 Comm: syz.2.6737 Not tainted syzkaller #0 [ 1357.079103][T27387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1357.089184][T27387] Call Trace: [ 1357.092480][T27387] [ 1357.095421][T27387] dump_stack_lvl+0x18c/0x250 [ 1357.100119][T27387] ? show_regs_print_info+0x20/0x20 [ 1357.105345][T27387] ? load_image+0x420/0x420 [ 1357.109931][T27387] ? __might_sleep+0xe0/0xe0 [ 1357.114542][T27387] ? __lock_acquire+0x7d40/0x7d40 [ 1357.119570][T27387] should_fail_ex+0x39d/0x4d0 [ 1357.124254][T27387] should_failslab+0x9/0x20 [ 1357.128753][T27387] slab_pre_alloc_hook+0x59/0x310 [ 1357.133777][T27387] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1357.139487][T27387] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1357.145195][T27387] __kmem_cache_alloc_node+0x53/0x250 [ 1357.150564][T27387] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1357.156275][T27387] __kmalloc+0xa4/0x230 [ 1357.160428][T27387] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1357.165987][T27387] tomoyo_path_number_perm+0x248/0x620 [ 1357.171460][T27387] ? tomoyo_path_number_perm+0x217/0x620 [ 1357.177088][T27387] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1357.182554][T27387] ? ksys_write+0x1c4/0x260 [ 1357.187078][T27387] ? __fget_files+0x28/0x4b0 [ 1357.191682][T27387] ? __fget_files+0x28/0x4b0 [ 1357.196309][T27387] security_file_ioctl+0x70/0xa0 [ 1357.201256][T27387] __se_sys_ioctl+0x48/0x170 [ 1357.205862][T27387] do_syscall_64+0x55/0xb0 [ 1357.210281][T27387] ? clear_bhb_loop+0x40/0x90 [ 1357.214958][T27387] ? clear_bhb_loop+0x40/0x90 [ 1357.219635][T27387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1357.225528][T27387] RIP: 0033:0x7f5b4cf9ce59 [ 1357.229937][T27387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1357.249538][T27387] RSP: 002b:00007f5b4dec2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1357.257953][T27387] RAX: ffffffffffffffda RBX: 00007f5b4d216090 RCX: 00007f5b4cf9ce59 [ 1357.265915][T27387] RDX: 0000200000000900 RSI: 00000000000089a1 RDI: 0000000000000007 [ 1357.273884][T27387] RBP: 00007f5b4dec2090 R08: 0000000000000000 R09: 0000000000000000 [ 1357.281853][T27387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1357.289818][T27387] R13: 00007f5b4d216128 R14: 00007f5b4d216090 R15: 00007ffe4681f288 [ 1357.297798][T27387] [ 1357.312947][T27387] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1357.669411][T27406] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.6743'. [ 1357.686958][T27407] FAULT_INJECTION: forcing a failure. [ 1357.686958][T27407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1357.734764][T27407] CPU: 1 PID: 27407 Comm: syz.0.6742 Not tainted syzkaller #0 [ 1357.742282][T27407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1357.752336][T27407] Call Trace: [ 1357.755608][T27407] [ 1357.758535][T27407] dump_stack_lvl+0x18c/0x250 [ 1357.763221][T27407] ? show_regs_print_info+0x20/0x20 [ 1357.768437][T27407] ? load_image+0x420/0x420 [ 1357.772937][T27407] ? __might_fault+0xaa/0x120 [ 1357.777608][T27407] ? __lock_acquire+0x7d40/0x7d40 [ 1357.782633][T27407] should_fail_ex+0x39d/0x4d0 [ 1357.787312][T27407] _copy_from_user+0x2f/0xe0 [ 1357.791905][T27407] __sys_bpf+0x23e/0x890 [ 1357.796156][T27407] ? bpf_link_show_fdinfo+0x390/0x390 [ 1357.801545][T27407] ? lock_chain_count+0x20/0x20 [ 1357.806414][T27407] __x64_sys_bpf+0x7c/0x90 [ 1357.810835][T27407] do_syscall_64+0x55/0xb0 [ 1357.815256][T27407] ? clear_bhb_loop+0x40/0x90 [ 1357.819929][T27407] ? clear_bhb_loop+0x40/0x90 [ 1357.824602][T27407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1357.830489][T27407] RIP: 0033:0x7fe89099ce59 [ 1357.834900][T27407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1357.854774][T27407] RSP: 002b:00007fe8918d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1357.863184][T27407] RAX: ffffffffffffffda RBX: 00007fe890c15fa0 RCX: 00007fe89099ce59 [ 1357.871151][T27407] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 1357.879117][T27407] RBP: 00007fe8918d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1357.887083][T27407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1357.895079][T27407] R13: 00007fe890c16038 R14: 00007fe890c15fa0 R15: 00007fff6f933ee8 [ 1357.903060][T27407] [ 1358.033781][T27412] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6745'. [ 1358.051058][T27413] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6745'. [ 1358.177614][T27417] FAULT_INJECTION: forcing a failure. [ 1358.177614][T27417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1358.201507][T27417] CPU: 1 PID: 27417 Comm: syz.2.6748 Not tainted syzkaller #0 [ 1358.209110][T27417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1358.219192][T27417] Call Trace: [ 1358.222483][T27417] [ 1358.225434][T27417] dump_stack_lvl+0x18c/0x250 [ 1358.230138][T27417] ? show_regs_print_info+0x20/0x20 [ 1358.235355][T27417] ? load_image+0x420/0x420 [ 1358.239879][T27417] ? __might_fault+0xaa/0x120 [ 1358.244576][T27417] ? __lock_acquire+0x7d40/0x7d40 [ 1358.249624][T27417] should_fail_ex+0x39d/0x4d0 [ 1358.254333][T27417] _copy_from_user+0x2f/0xe0 [ 1358.258943][T27417] __sys_bpf+0x23e/0x890 [ 1358.263238][T27417] ? bpf_link_show_fdinfo+0x390/0x390 [ 1358.268649][T27417] ? lock_chain_count+0x20/0x20 [ 1358.273533][T27417] __x64_sys_bpf+0x7c/0x90 [ 1358.277983][T27417] do_syscall_64+0x55/0xb0 [ 1358.282420][T27417] ? clear_bhb_loop+0x40/0x90 [ 1358.287126][T27417] ? clear_bhb_loop+0x40/0x90 [ 1358.291851][T27417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1358.297771][T27417] RIP: 0033:0x7f5b4cf9ce59 [ 1358.302208][T27417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1358.321842][T27417] RSP: 002b:00007f5b4dee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1358.330458][T27417] RAX: ffffffffffffffda RBX: 00007f5b4d215fa0 RCX: 00007f5b4cf9ce59 [ 1358.339070][T27417] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 1358.347067][T27417] RBP: 00007f5b4dee3090 R08: 0000000000000000 R09: 0000000000000000 [ 1358.355063][T27417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1358.363062][T27417] R13: 00007f5b4d216038 R14: 00007f5b4d215fa0 R15: 00007ffe4681f288 [ 1358.371074][T27417] [ 1358.392202][T27421] netlink: 'syz.3.6749': attribute type 39 has an invalid length. [ 1359.024999][T27438] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.6754'. [ 1359.067354][T27442] FAULT_INJECTION: forcing a failure. [ 1359.067354][T27442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1359.096237][T27442] CPU: 1 PID: 27442 Comm: syz.2.6756 Not tainted syzkaller #0 [ 1359.103749][T27442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1359.113902][T27442] Call Trace: [ 1359.117184][T27442] [ 1359.120106][T27442] dump_stack_lvl+0x18c/0x250 [ 1359.124783][T27442] ? show_regs_print_info+0x20/0x20 [ 1359.129973][T27442] ? load_image+0x420/0x420 [ 1359.134472][T27442] ? __might_fault+0xaa/0x120 [ 1359.139149][T27442] ? __lock_acquire+0x7d40/0x7d40 [ 1359.144168][T27442] should_fail_ex+0x39d/0x4d0 [ 1359.148848][T27442] _copy_from_user+0x2f/0xe0 [ 1359.153442][T27442] __sys_bpf+0x23e/0x890 [ 1359.157691][T27442] ? bpf_link_show_fdinfo+0x390/0x390 [ 1359.163066][T27442] ? lock_chain_count+0x20/0x20 [ 1359.167936][T27442] __x64_sys_bpf+0x7c/0x90 [ 1359.172344][T27442] do_syscall_64+0x55/0xb0 [ 1359.176753][T27442] ? clear_bhb_loop+0x40/0x90 [ 1359.181452][T27442] ? clear_bhb_loop+0x40/0x90 [ 1359.186141][T27442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1359.192041][T27442] RIP: 0033:0x7f5b4cf9ce59 [ 1359.196629][T27442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1359.216329][T27442] RSP: 002b:00007f5b4dee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1359.224745][T27442] RAX: ffffffffffffffda RBX: 00007f5b4d215fa0 RCX: 00007f5b4cf9ce59 [ 1359.232713][T27442] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000008 [ 1359.240679][T27442] RBP: 00007f5b4dee3090 R08: 0000000000000000 R09: 0000000000000000 [ 1359.248646][T27442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1359.256624][T27442] R13: 00007f5b4d216038 R14: 00007f5b4d215fa0 R15: 00007ffe4681f288 [ 1359.264610][T27442] [ 1359.310761][T27436] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6762'. [ 1359.527294][T27445] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6757'. [ 1359.536849][T27445] tc_dump_action: action bad kind [ 1359.552999][T27445] netlink: 'syz.3.6757': attribute type 21 has an invalid length. [ 1359.560882][T27445] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6757'. [ 1359.591615][T27445] netlink: 'syz.3.6757': attribute type 4 has an invalid length. [ 1359.599395][T27445] netlink: 'syz.3.6757': attribute type 5 has an invalid length. [ 1359.631783][T27445] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6757'. [ 1359.785994][T27455] FAULT_INJECTION: forcing a failure. [ 1359.785994][T27455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1359.821030][T27455] CPU: 0 PID: 27455 Comm: syz.1.6760 Not tainted syzkaller #0 [ 1359.828635][T27455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1359.838708][T27455] Call Trace: [ 1359.842011][T27455] [ 1359.844967][T27455] dump_stack_lvl+0x18c/0x250 [ 1359.849673][T27455] ? show_regs_print_info+0x20/0x20 [ 1359.854897][T27455] ? load_image+0x420/0x420 [ 1359.859518][T27455] ? __might_fault+0xaa/0x120 [ 1359.864219][T27455] ? __lock_acquire+0x7d40/0x7d40 [ 1359.869273][T27455] should_fail_ex+0x39d/0x4d0 [ 1359.873988][T27455] _copy_from_user+0x2f/0xe0 [ 1359.878611][T27455] ___sys_sendmsg+0x1c7/0x360 [ 1359.883310][T27455] ? get_pid_task+0x20/0x1e0 [ 1359.887931][T27455] ? __sys_sendmsg+0x2a0/0x2a0 [ 1359.892735][T27455] ? __lock_acquire+0x7d40/0x7d40 [ 1359.897807][T27455] __se_sys_sendmsg+0x1c2/0x2b0 [ 1359.902685][T27455] ? __x64_sys_sendmsg+0x80/0x80 [ 1359.907669][T27455] ? lockdep_hardirqs_on+0x98/0x150 [ 1359.912899][T27455] do_syscall_64+0x55/0xb0 [ 1359.917342][T27455] ? clear_bhb_loop+0x40/0x90 [ 1359.922043][T27455] ? clear_bhb_loop+0x40/0x90 [ 1359.926743][T27455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1359.932664][T27455] RIP: 0033:0x7f70a1b9ce59 [ 1359.937099][T27455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1359.956733][T27455] RSP: 002b:00007f70a2a39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1359.965148][T27455] RAX: ffffffffffffffda RBX: 00007f70a1e15fa0 RCX: 00007f70a1b9ce59 [ 1359.973119][T27455] RDX: 000000000000e900 RSI: 0000200000000b40 RDI: 0000000000000003 [ 1359.981104][T27455] RBP: 00007f70a2a39090 R08: 0000000000000000 R09: 0000000000000000 [ 1359.989073][T27455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1359.997039][T27455] R13: 00007f70a1e16038 R14: 00007f70a1e15fa0 R15: 00007ffe0c0db5b8 [ 1360.005021][T27455] [ 1360.174783][T27464] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.6766'. [ 1360.287662][T27468] syzkaller0: entered promiscuous mode [ 1360.302950][T27468] syzkaller0: entered allmulticast mode [ 1360.419354][T27478] FAULT_INJECTION: forcing a failure. [ 1360.419354][T27478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1360.443096][T27478] CPU: 1 PID: 27478 Comm: syz.3.6772 Not tainted syzkaller #0 [ 1360.450623][T27478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1360.460719][T27478] Call Trace: [ 1360.464030][T27478] [ 1360.466989][T27478] dump_stack_lvl+0x18c/0x250 [ 1360.471718][T27478] ? show_regs_print_info+0x20/0x20 [ 1360.476960][T27478] ? load_image+0x420/0x420 [ 1360.481521][T27478] ? __might_fault+0xaa/0x120 [ 1360.486246][T27478] ? __lock_acquire+0x7d40/0x7d40 [ 1360.491344][T27478] ? __lock_acquire+0x7d40/0x7d40 [ 1360.496462][T27478] should_fail_ex+0x39d/0x4d0 [ 1360.501247][T27478] _copy_from_user+0x2f/0xe0 [ 1360.505919][T27478] perf_copy_attr+0x16a/0x840 [ 1360.510690][T27478] __se_sys_perf_event_open+0x11b/0x1c50 [ 1360.516413][T27478] ? __fget_files+0x28/0x4b0 [ 1360.521080][T27478] ? mutex_unlock+0x10/0x10 [ 1360.525628][T27478] ? __fget_files+0x43d/0x4b0 [ 1360.530345][T27478] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1360.536054][T27478] ? lock_chain_count+0x20/0x20 [ 1360.540951][T27478] ? lockdep_hardirqs_on+0x98/0x150 [ 1360.546173][T27478] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1360.551850][T27478] do_syscall_64+0x55/0xb0 [ 1360.556283][T27478] ? clear_bhb_loop+0x40/0x90 [ 1360.560981][T27478] ? clear_bhb_loop+0x40/0x90 [ 1360.565693][T27478] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1360.571607][T27478] RIP: 0033:0x7f0798b9ce59 [ 1360.576046][T27478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1360.595673][T27478] RSP: 002b:00007f07999a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1360.604203][T27478] RAX: ffffffffffffffda RBX: 00007f0798e15fa0 RCX: 00007f0798b9ce59 [ 1360.612277][T27478] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000800 [ 1360.620262][T27478] RBP: 00007f07999a9090 R08: 000000000000000a R09: 0000000000000000 [ 1360.628250][T27478] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1360.636237][T27478] R13: 00007f0798e16038 R14: 00007f0798e15fa0 R15: 00007ffd4dd64d78 [ 1360.644273][T27478] [ 1361.888088][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.894584][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.057182][T27497] __nla_validate_parse: 1 callbacks suppressed [ 1363.057204][T27497] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6776'. [ 1363.101076][T27498] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6774'. [ 1363.197621][T27506] FAULT_INJECTION: forcing a failure. [ 1363.197621][T27506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1363.225261][T27506] CPU: 1 PID: 27506 Comm: syz.1.6779 Not tainted syzkaller #0 [ 1363.232787][T27506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1363.243053][T27506] Call Trace: [ 1363.246360][T27506] [ 1363.249311][T27506] dump_stack_lvl+0x18c/0x250 [ 1363.254017][T27506] ? show_regs_print_info+0x20/0x20 [ 1363.259235][T27506] ? load_image+0x420/0x420 [ 1363.263764][T27506] ? __might_fault+0xaa/0x120 [ 1363.268471][T27506] ? __lock_acquire+0x7d40/0x7d40 [ 1363.273524][T27506] should_fail_ex+0x39d/0x4d0 [ 1363.278238][T27506] _copy_from_user+0x2f/0xe0 [ 1363.282859][T27506] ___sys_sendmsg+0x1c7/0x360 [ 1363.287628][T27506] ? get_pid_task+0x20/0x1e0 [ 1363.292288][T27506] ? __sys_sendmsg+0x2a0/0x2a0 [ 1363.297200][T27506] ? __lock_acquire+0x7d40/0x7d40 [ 1363.302279][T27506] __se_sys_sendmsg+0x1c2/0x2b0 [ 1363.307176][T27506] ? __x64_sys_sendmsg+0x80/0x80 [ 1363.312161][T27506] ? lockdep_hardirqs_on+0x98/0x150 [ 1363.317395][T27506] do_syscall_64+0x55/0xb0 [ 1363.321845][T27506] ? clear_bhb_loop+0x40/0x90 [ 1363.326560][T27506] ? clear_bhb_loop+0x40/0x90 [ 1363.331276][T27506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1363.337203][T27506] RIP: 0033:0x7f70a1b9ce59 [ 1363.341640][T27506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1363.361268][T27506] RSP: 002b:00007f70a2a39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1363.369711][T27506] RAX: ffffffffffffffda RBX: 00007f70a1e15fa0 RCX: 00007f70a1b9ce59 [ 1363.377706][T27506] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1363.385717][T27506] RBP: 00007f70a2a39090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.393710][T27506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.401700][T27506] R13: 00007f70a1e16038 R14: 00007f70a1e15fa0 R15: 00007ffe0c0db5b8 [ 1363.409694][T27506] [ 1363.518732][T27513] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.638393][T27519] syzkaller0: entered promiscuous mode [ 1363.648742][T27519] syzkaller0: entered allmulticast mode [ 1363.700908][T27521] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6782'. [ 1363.815119][T27518] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6783'. [ 1364.050985][T27525] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6785'. [ 1366.543593][T27529] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6786'. [ 1366.555144][T27529] tc_dump_action: action bad kind [ 1366.560943][T27534] netlink: 'syz.2.6786': attribute type 21 has an invalid length. [ 1366.569533][T27534] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6786'. [ 1366.583136][T27534] netlink: 'syz.2.6786': attribute type 4 has an invalid length. [ 1366.591284][T27534] netlink: 'syz.2.6786': attribute type 5 has an invalid length. [ 1366.615186][T27534] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6786'. [ 1366.869711][T27546] netlink: 'syz.3.6792': attribute type 21 has an invalid length. [ 1366.881195][T27546] IPv6: NLM_F_CREATE should be specified when creating new route [ 1367.163368][T27554] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6796'. [ 1367.386916][T27560] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6795'. [ 1367.429776][T27562] netlink: 'syz.3.6797': attribute type 3 has an invalid length. [ 1368.072297][T27568] __nla_validate_parse: 2 callbacks suppressed [ 1368.072314][T27568] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6799'. [ 1368.145432][T27568] tc_dump_action: action bad kind [ 1368.293922][T27576] netlink: 'syz.2.6807': attribute type 3 has an invalid length. [ 1368.320957][T27576] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6807'. [ 1368.526385][T27575] netlink: 'syz.0.6799': attribute type 21 has an invalid length. [ 1368.534719][T27575] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6799'. [ 1368.549813][T27575] netlink: 'syz.0.6799': attribute type 4 has an invalid length. [ 1368.566249][T27575] netlink: 'syz.0.6799': attribute type 5 has an invalid length. [ 1368.574194][T27575] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6799'. [ 1368.947618][T27588] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6800'. [ 1369.250329][T27595] FAULT_INJECTION: forcing a failure. [ 1369.250329][T27595] name failslab, interval 1, probability 0, space 0, times 0 [ 1369.290442][T27595] CPU: 0 PID: 27595 Comm: syz.1.6806 Not tainted syzkaller #0 [ 1369.297986][T27595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1369.308098][T27595] Call Trace: [ 1369.311436][T27595] [ 1369.314417][T27595] dump_stack_lvl+0x18c/0x250 [ 1369.319156][T27595] ? show_regs_print_info+0x20/0x20 [ 1369.324386][T27595] ? load_image+0x420/0x420 [ 1369.328919][T27595] ? __might_sleep+0xe0/0xe0 [ 1369.333525][T27595] ? __lock_acquire+0x7d40/0x7d40 [ 1369.338561][T27595] ? perf_swevent_get_recursion_context+0xde/0x150 [ 1369.345174][T27595] should_fail_ex+0x39d/0x4d0 [ 1369.349880][T27595] should_failslab+0x9/0x20 [ 1369.354399][T27595] slab_pre_alloc_hook+0x59/0x310 [ 1369.359454][T27595] kmem_cache_alloc_node+0x60/0x320 [ 1369.364674][T27595] ? trace_call_bpf+0x5e9/0x6c0 [ 1369.369546][T27595] ? __alloc_skb+0x103/0x2c0 [ 1369.374160][T27595] __alloc_skb+0x103/0x2c0 [ 1369.378597][T27595] alloc_skb_with_frags+0xca/0x7b0 [ 1369.383735][T27595] ? trace_call_bpf+0xc3/0x6c0 [ 1369.388514][T27595] ? __lock_acquire+0x7d40/0x7d40 [ 1369.393557][T27595] sock_alloc_send_pskb+0x883/0x9a0 [ 1369.398803][T27595] ? sock_kzfree_s+0x50/0x50 [ 1369.403438][T27595] tun_get_user+0x82c/0x3ca0 [ 1369.408067][T27595] ? aa_file_perm+0x11b/0xee0 [ 1369.412767][T27595] ? rcu_read_unlock+0xa0/0xa0 [ 1369.417563][T27595] ? tun_get+0x1c/0x2e0 [ 1369.421736][T27595] ? __lock_acquire+0x7d40/0x7d40 [ 1369.426782][T27595] ? tun_get+0x1c/0x2e0 [ 1369.430965][T27595] tun_chr_write_iter+0x119/0x200 [ 1369.436006][T27595] vfs_write+0x46c/0x990 [ 1369.440292][T27595] ? file_end_write+0x250/0x250 [ 1369.445165][T27595] ? __fget_files+0x43d/0x4b0 [ 1369.449869][T27595] ? __fdget_pos+0x1d8/0x330 [ 1369.454466][T27595] ? ksys_write+0x75/0x260 [ 1369.458898][T27595] ksys_write+0x150/0x260 [ 1369.463250][T27595] ? __ia32_sys_read+0x90/0x90 [ 1369.468037][T27595] ? lockdep_hardirqs_on+0x98/0x150 [ 1369.473254][T27595] do_syscall_64+0x55/0xb0 [ 1369.477679][T27595] ? clear_bhb_loop+0x40/0x90 [ 1369.482368][T27595] ? clear_bhb_loop+0x40/0x90 [ 1369.487059][T27595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1369.492966][T27595] RIP: 0033:0x7f70a1b9ce59 [ 1369.497399][T27595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1369.517031][T27595] RSP: 002b:00007f70a2a39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1369.525456][T27595] RAX: ffffffffffffffda RBX: 00007f70a1e15fa0 RCX: 00007f70a1b9ce59 [ 1369.533436][T27595] RDX: 000000000000fdef RSI: 0000200000000980 RDI: 00000000000000c8 [ 1369.541424][T27595] RBP: 00007f70a2a39090 R08: 0000000000000000 R09: 0000000000000000 [ 1369.549422][T27595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1369.557494][T27595] R13: 00007f70a1e16038 R14: 00007f70a1e15fa0 R15: 00007ffe0c0db5b8 [ 1369.565508][T27595] [ 1369.841082][T27599] netlink: 'syz.2.6809': attribute type 3 has an invalid length. [ 1369.864340][T27599] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6809'. [ 1370.117993][T27607] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6810'. [ 1370.445743][T27614] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6812'. [ 1370.812867][T27614] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6812'. [ 1371.249840][T27626] FAULT_INJECTION: forcing a failure. [ 1371.249840][T27626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1371.307461][T27626] CPU: 0 PID: 27626 Comm: syz.0.6816 Not tainted syzkaller #0 [ 1371.314984][T27626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1371.325156][T27626] Call Trace: [ 1371.328448][T27626] [ 1371.331386][T27626] dump_stack_lvl+0x18c/0x250 [ 1371.336088][T27626] ? show_regs_print_info+0x20/0x20 [ 1371.341300][T27626] ? load_image+0x420/0x420 [ 1371.345830][T27626] ? __might_fault+0xaa/0x120 [ 1371.350531][T27626] ? __lock_acquire+0x7d40/0x7d40 [ 1371.355599][T27626] should_fail_ex+0x39d/0x4d0 [ 1371.360289][T27626] _copy_from_user+0x2f/0xe0 [ 1371.364880][T27626] __sys_bpf+0x23e/0x890 [ 1371.369123][T27626] ? bpf_link_show_fdinfo+0x390/0x390 [ 1371.374507][T27626] ? lock_chain_count+0x20/0x20 [ 1371.379364][T27626] __x64_sys_bpf+0x7c/0x90 [ 1371.383776][T27626] do_syscall_64+0x55/0xb0 [ 1371.388189][T27626] ? clear_bhb_loop+0x40/0x90 [ 1371.392893][T27626] ? clear_bhb_loop+0x40/0x90 [ 1371.397658][T27626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1371.403547][T27626] RIP: 0033:0x7fe89099ce59 [ 1371.407963][T27626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1371.427575][T27626] RSP: 002b:00007fe8918d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1371.435990][T27626] RAX: ffffffffffffffda RBX: 00007fe890c15fa0 RCX: 00007fe89099ce59 [ 1371.443956][T27626] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1371.451923][T27626] RBP: 00007fe8918d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1371.459887][T27626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1371.467953][T27626] R13: 00007fe890c16038 R14: 00007fe890c15fa0 R15: 00007fff6f933ee8 [ 1371.475951][T27626] [ 1371.615028][T27633] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6820'. [ 1371.667683][T27631] validate_nla: 3 callbacks suppressed [ 1371.667714][T27631] netlink: 'syz.0.6819': attribute type 3 has an invalid length. [ 1371.712106][T27631] netlink: 'syz.0.6819': attribute type 1 has an invalid length. [ 1371.856004][T27641] netlink: 'syz.2.6821': attribute type 3 has an invalid length. [ 1372.208537][T27657] netlink: 'syz.0.6824': attribute type 9 has an invalid length. [ 1372.405594][T27661] netlink: 'syz.0.6824': attribute type 9 has an invalid length. [ 1372.885107][T27672] FAULT_INJECTION: forcing a failure. [ 1372.885107][T27672] name failslab, interval 1, probability 0, space 0, times 0 [ 1372.959863][T27672] CPU: 0 PID: 27672 Comm: syz.1.6831 Not tainted syzkaller #0 [ 1372.967417][T27672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1372.977521][T27672] Call Trace: [ 1372.980849][T27672] [ 1372.983834][T27672] dump_stack_lvl+0x18c/0x250 [ 1372.988594][T27672] ? show_regs_print_info+0x20/0x20 [ 1372.993863][T27672] ? load_image+0x420/0x420 [ 1372.998452][T27672] ? __might_sleep+0xe0/0xe0 [ 1373.003192][T27672] ? __lock_acquire+0x7d40/0x7d40 [ 1373.008257][T27672] should_fail_ex+0x39d/0x4d0 [ 1373.012986][T27672] should_failslab+0x9/0x20 [ 1373.017542][T27672] slab_pre_alloc_hook+0x59/0x310 [ 1373.022630][T27672] ? __get_vm_area_node+0x125/0x370 [ 1373.027885][T27672] __kmem_cache_alloc_node+0x53/0x250 [ 1373.033328][T27672] ? __get_vm_area_node+0x125/0x370 [ 1373.038585][T27672] kmalloc_node_trace+0x26/0xe0 [ 1373.043517][T27672] __get_vm_area_node+0x125/0x370 [ 1373.048636][T27672] __vmalloc_node_range+0x36e/0x1330 [ 1373.053977][T27672] ? netlink_sendmsg+0x602/0xbf0 [ 1373.058969][T27672] ? netlink_insert+0x109f/0x13a0 [ 1373.064105][T27672] ? netlink_data_ready+0x10/0x10 [ 1373.069196][T27672] ? free_vm_area+0x50/0x50 [ 1373.073788][T27672] ? netlink_sendmsg+0x602/0xbf0 [ 1373.078791][T27672] vmalloc+0x79/0x90 [ 1373.082746][T27672] ? netlink_sendmsg+0x602/0xbf0 [ 1373.087732][T27672] netlink_sendmsg+0x602/0xbf0 [ 1373.092582][T27672] ? netlink_getsockopt+0x590/0x590 [ 1373.097836][T27672] ? aa_sock_msg_perm+0x94/0x150 [ 1373.102834][T27672] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1373.108176][T27672] ? security_socket_sendmsg+0x80/0xa0 [ 1373.113702][T27672] sock_write_iter+0x2df/0x420 [ 1373.118541][T27672] ? sock_read_iter+0x3e0/0x3e0 [ 1373.123488][T27672] ? common_file_perm+0x198/0x1f0 [ 1373.128604][T27672] vfs_write+0x46c/0x990 [ 1373.132919][T27672] ? file_end_write+0x250/0x250 [ 1373.137856][T27672] ? __fget_files+0x43d/0x4b0 [ 1373.142628][T27672] ? __fdget_pos+0x1d8/0x330 [ 1373.147275][T27672] ? ksys_write+0x75/0x260 [ 1373.151765][T27672] ksys_write+0x150/0x260 [ 1373.156157][T27672] ? __ia32_sys_read+0x90/0x90 [ 1373.161002][T27672] ? lockdep_hardirqs_on+0x98/0x150 [ 1373.166279][T27672] do_syscall_64+0x55/0xb0 [ 1373.170745][T27672] ? clear_bhb_loop+0x40/0x90 [ 1373.175475][T27672] ? clear_bhb_loop+0x40/0x90 [ 1373.180227][T27672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1373.186176][T27672] RIP: 0033:0x7f70a1b9ce59 [ 1373.190629][T27672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1373.210285][T27672] RSP: 002b:00007f70a2a39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1373.218763][T27672] RAX: ffffffffffffffda RBX: 00007f70a1e15fa0 RCX: 00007f70a1b9ce59 [ 1373.226787][T27672] RDX: 000000000000fe33 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1373.234812][T27672] RBP: 00007f70a2a39090 R08: 0000000000000000 R09: 0000000000000000 [ 1373.242849][T27672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1373.250884][T27672] R13: 00007f70a1e16038 R14: 00007f70a1e15fa0 R15: 00007ffe0c0db5b8 [ 1373.258963][T27672] [ 1373.341651][T27672] syz.1.6831: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1373.358462][T27672] CPU: 1 PID: 27672 Comm: syz.1.6831 Not tainted syzkaller #0 [ 1373.365989][T27672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1373.376102][T27672] Call Trace: [ 1373.379424][T27672] [ 1373.382409][T27672] dump_stack_lvl+0x18c/0x250 [ 1373.387150][T27672] ? show_regs_print_info+0x20/0x20 [ 1373.392406][T27672] ? load_image+0x420/0x420 [ 1373.396972][T27672] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1373.403447][T27672] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1373.410010][T27672] warn_alloc+0x246/0x340 [ 1373.414396][T27672] ? __get_vm_area_node+0x125/0x370 [ 1373.419655][T27672] ? zone_watermark_ok_safe+0x230/0x230 [ 1373.425235][T27672] ? rcu_is_watching+0x15/0xb0 [ 1373.430032][T27672] ? __get_vm_area_node+0x356/0x370 [ 1373.435311][T27672] __vmalloc_node_range+0x393/0x1330 [ 1373.440628][T27672] ? netlink_insert+0x109f/0x13a0 [ 1373.445701][T27672] ? netlink_data_ready+0x10/0x10 [ 1373.450763][T27672] ? free_vm_area+0x50/0x50 [ 1373.455306][T27672] ? netlink_sendmsg+0x602/0xbf0 [ 1373.460282][T27672] vmalloc+0x79/0x90 [ 1373.464207][T27672] ? netlink_sendmsg+0x602/0xbf0 [ 1373.469174][T27672] netlink_sendmsg+0x602/0xbf0 [ 1373.473995][T27672] ? netlink_getsockopt+0x590/0x590 [ 1373.479236][T27672] ? aa_sock_msg_perm+0x94/0x150 [ 1373.484211][T27672] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1373.489527][T27672] ? security_socket_sendmsg+0x80/0xa0 [ 1373.495034][T27672] sock_write_iter+0x2df/0x420 [ 1373.499849][T27672] ? sock_read_iter+0x3e0/0x3e0 [ 1373.504737][T27672] ? common_file_perm+0x198/0x1f0 [ 1373.509798][T27672] vfs_write+0x46c/0x990 [ 1373.514070][T27672] ? file_end_write+0x250/0x250 [ 1373.519209][T27672] ? __fget_files+0x43d/0x4b0 [ 1373.523915][T27672] ? __fdget_pos+0x1d8/0x330 [ 1373.528529][T27672] ? ksys_write+0x75/0x260 [ 1373.532978][T27672] ksys_write+0x150/0x260 [ 1373.537335][T27672] ? __ia32_sys_read+0x90/0x90 [ 1373.542126][T27672] ? lockdep_hardirqs_on+0x98/0x150 [ 1373.547352][T27672] do_syscall_64+0x55/0xb0 [ 1373.551790][T27672] ? clear_bhb_loop+0x40/0x90 [ 1373.554209][T27678] __nla_validate_parse: 6 callbacks suppressed [ 1373.554223][T27678] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6833'. [ 1373.556471][T27672] ? clear_bhb_loop+0x40/0x90 [ 1373.556502][T27672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1373.556524][T27672] RIP: 0033:0x7f70a1b9ce59 [ 1373.586921][T27672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1373.606551][T27672] RSP: 002b:00007f70a2a39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1373.614980][T27672] RAX: ffffffffffffffda RBX: 00007f70a1e15fa0 RCX: 00007f70a1b9ce59 [ 1373.622954][T27672] RDX: 000000000000fe33 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1373.630930][T27672] RBP: 00007f70a2a39090 R08: 0000000000000000 R09: 0000000000000000 [ 1373.638988][T27672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1373.646950][T27672] R13: 00007f70a1e16038 R14: 00007f70a1e15fa0 R15: 00007ffe0c0db5b8 [ 1373.654931][T27672] [ 1373.690094][T27672] Mem-Info: [ 1373.693545][T27672] active_anon:19617 inactive_anon:0 isolated_anon:0 [ 1373.693545][T27672] active_file:16494 inactive_file:40460 isolated_file:0 [ 1373.693545][T27672] unevictable:768 dirty:377 writeback:0 [ 1373.693545][T27672] slab_reclaimable:12648 slab_unreclaimable:107896 [ 1373.693545][T27672] mapped:25645 shmem:15671 pagetables:523 [ 1373.693545][T27672] sec_pagetables:0 bounce:0 [ 1373.693545][T27672] kernel_misc_reclaimable:0 [ 1373.693545][T27672] free:1311953 free_pcp:11668 free_cma:0 [ 1373.748320][T27672] Node 0 active_anon:78468kB inactive_anon:0kB active_file:65976kB inactive_file:161640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102580kB dirty:1504kB writeback:0kB shmem:61148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10112kB pagetables:2092kB sec_pagetables:0kB all_unreclaimable? no [ 1373.827518][T27672] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1373.872219][T27672] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1373.941453][T27672] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1373.961965][T27672] Node 0 DMA32 free:1333944kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:72932kB inactive_anon:0kB active_file:65976kB inactive_file:160804kB unevictable:1536kB writepending:1504kB present:3129332kB managed:2586944kB mlocked:0kB bounce:0kB free_pcp:40092kB local_pcp:20940kB free_cma:0kB [ 1374.012068][T27672] lowmem_reserve[]: 0 0 0 0 0 [ 1374.016864][T27672] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1374.059322][T27672] lowmem_reserve[]: 0 0 0 0 0 [ 1374.065118][T27672] Node 1 Normal free:3898508kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12192kB local_pcp:1344kB free_cma:0kB [ 1374.099596][T27672] lowmem_reserve[]: 0 0 0 0 0 [ 1374.104731][T27672] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1374.145686][T27672] Node 0 DMA32: 1184*4kB (UME) 322*8kB (UME) 775*16kB (UME) 1045*32kB (UME) 442*64kB (UME) 396*128kB (UME) 160*256kB (UM) 6*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 287*4096kB (M) = 1356832kB [ 1374.192124][T27672] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1374.235930][T27672] Node 1 Normal: 229*4kB (UME) 59*8kB (UME) 30*16kB (UME) 222*32kB (UME) 66*64kB (UME) 18*128kB (UME) 2*256kB (UM) 1*512kB (E) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3898508kB [ 1374.254593][T27687] netlink: 'syz.2.6835': attribute type 3 has an invalid length. [ 1374.270300][T27687] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6835'. [ 1374.288305][T27672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1374.288337][T27672] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1374.288353][T27672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1374.288368][T27672] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1374.288383][T27672] 66993 total pagecache pages [ 1374.288391][T27672] 0 pages in swap cache [ 1374.288398][T27672] Free swap = 124996kB [ 1374.288406][T27672] Total swap = 124996kB [ 1374.288414][T27672] 2097051 pages RAM [ 1374.288421][T27672] 0 pages HighMem/MovableOnly [ 1374.288428][T27672] 416929 pages reserved [ 1374.288435][T27672] 0 pages cma reserved [ 1374.413242][T27693] FAULT_INJECTION: forcing a failure. [ 1374.413242][T27693] name failslab, interval 1, probability 0, space 0, times 0 [ 1374.468440][T27693] CPU: 0 PID: 27693 Comm: syz.1.6838 Not tainted syzkaller #0 [ 1374.476153][T27693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1374.486257][T27693] Call Trace: [ 1374.489572][T27693] [ 1374.492542][T27693] dump_stack_lvl+0x18c/0x250 [ 1374.497279][T27693] ? show_regs_print_info+0x20/0x20 [ 1374.502562][T27693] ? load_image+0x420/0x420 [ 1374.507136][T27693] ? __might_sleep+0xe0/0xe0 [ 1374.511785][T27693] ? __lock_acquire+0x7d40/0x7d40 [ 1374.517639][T27693] should_fail_ex+0x39d/0x4d0 [ 1374.522525][T27693] should_failslab+0x9/0x20 [ 1374.527043][T27693] slab_pre_alloc_hook+0x59/0x310 [ 1374.532092][T27693] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1374.537846][T27693] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1374.543578][T27693] __kmem_cache_alloc_node+0x53/0x250 [ 1374.548979][T27693] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1374.555150][T27693] __kmalloc+0xa4/0x230 [ 1374.559336][T27693] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1374.564929][T27693] tomoyo_path_number_perm+0x248/0x620 [ 1374.570405][T27693] ? tomoyo_path_number_perm+0x217/0x620 [ 1374.576072][T27693] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1374.581567][T27693] ? ksys_write+0x1c4/0x260 [ 1374.586256][T27693] ? __fget_files+0x28/0x4b0 [ 1374.590859][T27693] ? __fget_files+0x28/0x4b0 [ 1374.595576][T27693] security_file_ioctl+0x70/0xa0 [ 1374.600540][T27693] __se_sys_ioctl+0x48/0x170 [ 1374.605241][T27693] do_syscall_64+0x55/0xb0 [ 1374.609662][T27693] ? clear_bhb_loop+0x40/0x90 [ 1374.614349][T27693] ? clear_bhb_loop+0x40/0x90 [ 1374.619037][T27693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1374.624944][T27693] RIP: 0033:0x7f70a1b9ce59 [ 1374.629373][T27693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1374.649255][T27693] RSP: 002b:00007f70a2a39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1374.657691][T27693] RAX: ffffffffffffffda RBX: 00007f70a1e15fa0 RCX: 00007f70a1b9ce59 [ 1374.665768][T27693] RDX: 0000200000000040 RSI: 00000000000089e1 RDI: 0000000000000005 [ 1374.673847][T27693] RBP: 00007f70a2a39090 R08: 0000000000000000 R09: 0000000000000000 [ 1374.681869][T27693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1374.689849][T27693] R13: 00007f70a1e16038 R14: 00007f70a1e15fa0 R15: 00007ffe0c0db5b8 [ 1374.697986][T27693] [ 1374.732004][T27693] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1375.047260][T27698] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6839'. [ 1375.368469][T27709] FAULT_INJECTION: forcing a failure. [ 1375.368469][T27709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1375.385044][T27709] CPU: 1 PID: 27709 Comm: syz.0.6845 Not tainted syzkaller #0 [ 1375.392549][T27709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1375.402696][T27709] Call Trace: [ 1375.405972][T27709] [ 1375.408905][T27709] dump_stack_lvl+0x18c/0x250 [ 1375.413746][T27709] ? show_regs_print_info+0x20/0x20 [ 1375.418970][T27709] ? load_image+0x420/0x420 [ 1375.423511][T27709] ? __might_fault+0xaa/0x120 [ 1375.428204][T27709] ? __lock_acquire+0x7d40/0x7d40 [ 1375.433257][T27709] should_fail_ex+0x39d/0x4d0 [ 1375.437953][T27709] _copy_from_user+0x2f/0xe0 [ 1375.442555][T27709] __sys_bpf+0x23e/0x890 [ 1375.446811][T27709] ? bpf_link_show_fdinfo+0x390/0x390 [ 1375.452200][T27709] ? lock_chain_count+0x20/0x20 [ 1375.457078][T27709] __x64_sys_bpf+0x7c/0x90 [ 1375.461757][T27709] do_syscall_64+0x55/0xb0 [ 1375.466173][T27709] ? clear_bhb_loop+0x40/0x90 [ 1375.471024][T27709] ? clear_bhb_loop+0x40/0x90 [ 1375.476050][T27709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1375.481941][T27709] RIP: 0033:0x7fe89099ce59 [ 1375.486530][T27709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1375.506941][T27709] RSP: 002b:00007fe8918d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1375.515370][T27709] RAX: ffffffffffffffda RBX: 00007fe890c15fa0 RCX: 00007fe89099ce59 [ 1375.523346][T27709] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1375.531317][T27709] RBP: 00007fe8918d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1375.539374][T27709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1375.547347][T27709] R13: 00007fe890c16038 R14: 00007fe890c15fa0 R15: 00007fff6f933ee8 [ 1375.555343][T27709] [ 1375.624145][T27711] netlink: 'syz.3.6842': attribute type 9 has an invalid length. [ 1375.645088][T27711] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6842'. [ 1375.827279][T27711] netlink: 'syz.3.6842': attribute type 9 has an invalid length. [ 1375.837128][T27711] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6842'. [ 1376.208157][T27718] netlink: 'syz.0.6847': attribute type 3 has an invalid length. [ 1376.261721][T27718] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6847'. [ 1376.314439][T27730] netlink: 'syz.1.6848': attribute type 3 has an invalid length. [ 1376.341737][T27730] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6848'. [ 1376.376465][T27725] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6849'. [ 1376.472982][T27736] FAULT_INJECTION: forcing a failure. [ 1376.472982][T27736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1376.501681][T27736] CPU: 0 PID: 27736 Comm: syz.3.6852 Not tainted syzkaller #0 [ 1376.509192][T27736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1376.519297][T27736] Call Trace: [ 1376.522604][T27736] [ 1376.525543][T27736] dump_stack_lvl+0x18c/0x250 [ 1376.530247][T27736] ? show_regs_print_info+0x20/0x20 [ 1376.535474][T27736] ? load_image+0x420/0x420 [ 1376.540009][T27736] ? __might_fault+0xaa/0x120 [ 1376.544711][T27736] ? __lock_acquire+0x7d40/0x7d40 [ 1376.549867][T27736] should_fail_ex+0x39d/0x4d0 [ 1376.554599][T27736] _copy_from_user+0x2f/0xe0 [ 1376.559222][T27736] __sys_bpf+0x23e/0x890 [ 1376.563491][T27736] ? bpf_link_show_fdinfo+0x390/0x390 [ 1376.568902][T27736] ? lock_chain_count+0x20/0x20 [ 1376.573789][T27736] __x64_sys_bpf+0x7c/0x90 [ 1376.578351][T27736] do_syscall_64+0x55/0xb0 [ 1376.582786][T27736] ? clear_bhb_loop+0x40/0x90 [ 1376.587493][T27736] ? clear_bhb_loop+0x40/0x90 [ 1376.592200][T27736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1376.598130][T27736] RIP: 0033:0x7f0798b9ce59 [ 1376.602574][T27736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1376.622216][T27736] RSP: 002b:00007f07999a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1376.630666][T27736] RAX: ffffffffffffffda RBX: 00007f0798e15fa0 RCX: 00007f0798b9ce59 [ 1376.638670][T27736] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1376.646738][T27736] RBP: 00007f07999a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1376.654734][T27736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1376.662730][T27736] R13: 00007f0798e16038 R14: 00007f0798e15fa0 R15: 00007ffd4dd64d78 [ 1376.670827][T27736] [ 1376.723472][T27738] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.6853'. [ 1376.826882][T27744] netlink: 'syz.2.6856': attribute type 4 has an invalid length. [ 1376.907005][T27747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1376.914311][T27747] IPv6: NLM_F_CREATE should be set when creating new route [ 1376.921665][T27747] IPv6: NLM_F_CREATE should be set when creating new route [ 1376.928905][T27747] IPv6: NLM_F_CREATE should be set when creating new route [ 1377.169161][T27751] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6859'. [ 1377.329392][T27756] netlink: 'syz.1.6858': attribute type 9 has an invalid length. [ 1377.535350][T27753] netlink: 'syz.1.6858': attribute type 9 has an invalid length. [ 1377.635635][T27767] FAULT_INJECTION: forcing a failure. [ 1377.635635][T27767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1377.691488][T27767] CPU: 1 PID: 27767 Comm: syz.3.6863 Not tainted syzkaller #0 [ 1377.699010][T27767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1377.709094][T27767] Call Trace: [ 1377.712396][T27767] [ 1377.715347][T27767] dump_stack_lvl+0x18c/0x250 [ 1377.720148][T27767] ? show_regs_print_info+0x20/0x20 [ 1377.725390][T27767] ? load_image+0x420/0x420 [ 1377.729942][T27767] ? __might_fault+0xaa/0x120 [ 1377.733141][T27760] netlink: 'syz.2.6861': attribute type 3 has an invalid length. [ 1377.734641][T27767] ? __lock_acquire+0x7d40/0x7d40 [ 1377.734679][T27767] should_fail_ex+0x39d/0x4d0 [ 1377.734711][T27767] _copy_from_user+0x2f/0xe0 [ 1377.734737][T27767] ___sys_sendmsg+0x1c7/0x360 [ 1377.734764][T27767] ? __sys_sendmsg+0x2a0/0x2a0 [ 1377.734805][T27767] ? __lock_acquire+0x7d40/0x7d40 [ 1377.734858][T27767] __se_sys_sendmsg+0x1c2/0x2b0 [ 1377.734886][T27767] ? __x64_sys_sendmsg+0x80/0x80 [ 1377.734928][T27767] ? lockdep_hardirqs_on+0x98/0x150 [ 1377.734955][T27767] do_syscall_64+0x55/0xb0 [ 1377.734972][T27767] ? clear_bhb_loop+0x40/0x90 [ 1377.734993][T27767] ? clear_bhb_loop+0x40/0x90 [ 1377.735022][T27767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1377.735049][T27767] RIP: 0033:0x7f0798b9ce59 [ 1377.735068][T27767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1377.735083][T27767] RSP: 002b:00007f07999a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1377.735104][T27767] RAX: ffffffffffffffda RBX: 00007f0798e15fa0 RCX: 00007f0798b9ce59 [ 1377.735118][T27767] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1377.735130][T27767] RBP: 00007f07999a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1377.735142][T27767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1377.735153][T27767] R13: 00007f0798e16038 R14: 00007f0798e15fa0 R15: 00007ffd4dd64d78 [ 1377.735183][T27767] [ 1378.312914][T27775] netlink: 'syz.1.6867': attribute type 10 has an invalid length. [ 1378.321073][T27775] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1378.561134][T27775] netlink: 'syz.1.6867': attribute type 39 has an invalid length. [ 1378.582096][T27795] FAULT_INJECTION: forcing a failure. [ 1378.582096][T27795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1378.607369][T27795] CPU: 1 PID: 27795 Comm: syz.2.6872 Not tainted syzkaller #0 [ 1378.614883][T27795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1378.624945][T27795] Call Trace: [ 1378.628219][T27795] [ 1378.631144][T27795] dump_stack_lvl+0x18c/0x250 [ 1378.635819][T27795] ? show_regs_print_info+0x20/0x20 [ 1378.641010][T27795] ? load_image+0x420/0x420 [ 1378.645512][T27795] ? __might_fault+0xaa/0x120 [ 1378.650180][T27795] ? __lock_acquire+0x7d40/0x7d40 [ 1378.655207][T27795] should_fail_ex+0x39d/0x4d0 [ 1378.659887][T27795] _copy_from_user+0x2f/0xe0 [ 1378.664477][T27795] ___sys_sendmsg+0x1c7/0x360 [ 1378.669156][T27795] ? __sys_sendmsg+0x2a0/0x2a0 [ 1378.673929][T27795] ? trace_call_bpf+0xc3/0x6c0 [ 1378.678708][T27795] __se_sys_sendmsg+0x1c2/0x2b0 [ 1378.683556][T27795] ? __x64_sys_sendmsg+0x80/0x80 [ 1378.688503][T27795] ? lockdep_hardirqs_on+0x98/0x150 [ 1378.693698][T27795] do_syscall_64+0x55/0xb0 [ 1378.698106][T27795] ? clear_bhb_loop+0x40/0x90 [ 1378.702779][T27795] ? clear_bhb_loop+0x40/0x90 [ 1378.707452][T27795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1378.713340][T27795] RIP: 0033:0x7f5b4cf9ce59 [ 1378.717751][T27795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1378.737457][T27795] RSP: 002b:00007f5b4dee3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1378.745883][T27795] RAX: ffffffffffffffda RBX: 00007f5b4d215fa0 RCX: 00007f5b4cf9ce59 [ 1378.753855][T27795] RDX: 000000000004c810 RSI: 0000200000001280 RDI: 0000000000000003 [ 1378.761823][T27795] RBP: 00007f5b4dee3090 R08: 0000000000000000 R09: 0000000000000000 [ 1378.769785][T27795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1378.777752][T27795] R13: 00007f5b4d216038 R14: 00007f5b4d215fa0 R15: 00007ffe4681f288 [ 1378.785726][T27795] [ 1378.849736][T27797] netlink: 'syz.0.6873': attribute type 39 has an invalid length. [ 1379.041116][T27803] __nla_validate_parse: 4 callbacks suppressed [ 1379.041134][T27803] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6875'. [ 1379.076225][T27804] netlink: 'syz.0.6883': attribute type 39 has an invalid length. [ 1379.104111][T27800] netlink: 'syz.3.6874': attribute type 39 has an invalid length. [ 1379.244387][T27810] FAULT_INJECTION: forcing a failure. [ 1379.244387][T27810] name failslab, interval 1, probability 0, space 0, times 0 [ 1379.288150][T27810] CPU: 0 PID: 27810 Comm: syz.0.6878 Not tainted syzkaller #0 [ 1379.295693][T27810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1379.305790][T27810] Call Trace: [ 1379.309105][T27810] [ 1379.312071][T27810] dump_stack_lvl+0x18c/0x250 [ 1379.316797][T27810] ? show_regs_print_info+0x20/0x20 [ 1379.322037][T27810] ? load_image+0x420/0x420 [ 1379.326604][T27810] ? __might_sleep+0xe0/0xe0 [ 1379.331247][T27810] ? __lock_acquire+0x7d40/0x7d40 [ 1379.336319][T27810] should_fail_ex+0x39d/0x4d0 [ 1379.341050][T27810] should_failslab+0x9/0x20 [ 1379.345600][T27810] slab_pre_alloc_hook+0x59/0x310 [ 1379.350678][T27810] ? kernfs_fop_write_iter+0x159/0x520 [ 1379.356270][T27810] ? kernfs_fop_write_iter+0x159/0x520 [ 1379.361778][T27810] __kmem_cache_alloc_node+0x53/0x250 [ 1379.362348][T27815] netlink: 'syz.1.6876': attribute type 3 has an invalid length. [ 1379.367187][T27810] ? kernfs_fop_write_iter+0x159/0x520 [ 1379.367252][T27810] __kmalloc+0xa4/0x230 [ 1379.367287][T27810] kernfs_fop_write_iter+0x159/0x520 [ 1379.367329][T27810] vfs_write+0x46c/0x990 [ 1379.367368][T27810] ? file_end_write+0x250/0x250 [ 1379.367404][T27810] ? __fget_files+0x43d/0x4b0 [ 1379.367455][T27810] ? __fdget_pos+0x2a3/0x330 [ 1379.367478][T27810] ? ksys_write+0x75/0x260 [ 1379.367510][T27810] ksys_write+0x150/0x260 [ 1379.367548][T27810] ? __ia32_sys_read+0x90/0x90 [ 1379.367583][T27810] ? lockdep_hardirqs_on+0x98/0x150 [ 1379.367616][T27810] do_syscall_64+0x55/0xb0 [ 1379.367634][T27810] ? clear_bhb_loop+0x40/0x90 [ 1379.367658][T27810] ? clear_bhb_loop+0x40/0x90 [ 1379.367685][T27810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1379.367709][T27810] RIP: 0033:0x7fe89099ce59 [ 1379.367731][T27810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1379.367748][T27810] RSP: 002b:00007fe8918d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1379.367772][T27810] RAX: ffffffffffffffda RBX: 00007fe890c15fa0 RCX: 00007fe89099ce59 [ 1379.367787][T27810] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000005 [ 1379.367800][T27810] RBP: 00007fe8918d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.367813][T27810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.367826][T27810] R13: 00007fe890c16038 R14: 00007fe890c15fa0 R15: 00007fff6f933ee8 [ 1379.367872][T27810] [ 1379.590515][T27815] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6876'. [ 1379.769722][T27832] FAULT_INJECTION: forcing a failure. [ 1379.769722][T27832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1379.812450][T27832] CPU: 1 PID: 27832 Comm: syz.3.6885 Not tainted syzkaller #0 [ 1379.819960][T27832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1379.830022][T27832] Call Trace: [ 1379.833315][T27832] [ 1379.836259][T27832] dump_stack_lvl+0x18c/0x250 [ 1379.840969][T27832] ? show_regs_print_info+0x20/0x20 [ 1379.846195][T27832] ? load_image+0x420/0x420 [ 1379.850732][T27832] ? __might_fault+0xaa/0x120 [ 1379.855437][T27832] ? __lock_acquire+0x7d40/0x7d40 [ 1379.860586][T27832] should_fail_ex+0x39d/0x4d0 [ 1379.865319][T27832] _copy_from_user+0x2f/0xe0 [ 1379.869918][T27832] ___sys_sendmsg+0x1c7/0x360 [ 1379.874602][T27832] ? get_pid_task+0x20/0x1e0 [ 1379.879228][T27832] ? __sys_sendmsg+0x2a0/0x2a0 [ 1379.884013][T27832] ? __lock_acquire+0x7d40/0x7d40 [ 1379.889221][T27832] __se_sys_sendmsg+0x1c2/0x2b0 [ 1379.894105][T27832] ? __x64_sys_sendmsg+0x80/0x80 [ 1379.899070][T27832] ? lockdep_hardirqs_on+0x98/0x150 [ 1379.904285][T27832] do_syscall_64+0x55/0xb0 [ 1379.908700][T27832] ? clear_bhb_loop+0x40/0x90 [ 1379.913375][T27832] ? clear_bhb_loop+0x40/0x90 [ 1379.918053][T27832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1379.923954][T27832] RIP: 0033:0x7f0798b9ce59 [ 1379.928480][T27832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1379.948094][T27832] RSP: 002b:00007f07999a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1379.956514][T27832] RAX: ffffffffffffffda RBX: 00007f0798e15fa0 RCX: 00007f0798b9ce59 [ 1379.964500][T27832] RDX: 000000000000ff00 RSI: 0000200000001180 RDI: 0000000000000003 [ 1379.972468][T27832] RBP: 00007f07999a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.980460][T27832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.988427][T27832] R13: 00007f0798e16038 R14: 00007f0798e15fa0 R15: 00007ffd4dd64d78 [ 1379.996403][T27832] [ 1380.148195][T27845] FAULT_INJECTION: forcing a failure. [ 1380.148195][T27845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1380.161711][T27845] CPU: 1 PID: 27845 Comm: syz.0.6891 Not tainted syzkaller #0 [ 1380.169194][T27845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1380.180311][T27845] Call Trace: [ 1380.183604][T27845] [ 1380.186533][T27845] dump_stack_lvl+0x18c/0x250 [ 1380.191338][T27845] ? show_regs_print_info+0x20/0x20 [ 1380.196562][T27845] ? load_image+0x420/0x420 [ 1380.201100][T27845] ? __might_fault+0xaa/0x120 [ 1380.205776][T27845] ? __lock_acquire+0x7d40/0x7d40 [ 1380.210807][T27845] should_fail_ex+0x39d/0x4d0 [ 1380.215541][T27845] _copy_from_user+0x2f/0xe0 [ 1380.220147][T27845] __sys_bpf+0x23e/0x890 [ 1380.224410][T27845] ? bpf_link_show_fdinfo+0x390/0x390 [ 1380.229801][T27845] ? lock_chain_count+0x20/0x20 [ 1380.234654][T27845] __x64_sys_bpf+0x7c/0x90 [ 1380.239065][T27845] do_syscall_64+0x55/0xb0 [ 1380.243589][T27845] ? clear_bhb_loop+0x40/0x90 [ 1380.248286][T27845] ? clear_bhb_loop+0x40/0x90 [ 1380.252984][T27845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1380.258894][T27845] RIP: 0033:0x7fe89099ce59 [ 1380.263463][T27845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1380.283173][T27845] RSP: 002b:00007fe8918d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1380.291587][T27845] RAX: ffffffffffffffda RBX: 00007fe890c15fa0 RCX: 00007fe89099ce59 [ 1380.299559][T27845] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 1380.307524][T27845] RBP: 00007fe8918d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1380.315501][T27845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1380.323486][T27845] R13: 00007fe890c16038 R14: 00007fe890c15fa0 R15: 00007fff6f933ee8 [ 1380.331479][T27845] [ 1380.488940][T27848] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6892'. [ 1380.640112][T27855] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.6894'. [ 1380.899631][T27839] delete_channel: no stack [ 1380.933431][T27863] syzkaller0: entered promiscuous mode [ 1380.938948][T27863] syzkaller0: entered allmulticast mode [ 1381.254209][T27882] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6902'. [ 1383.233042][T27884] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6906'. [ 1383.250704][T27886] validate_nla: 5 callbacks suppressed [ 1383.250728][T27886] netlink: 'syz.0.6907': attribute type 39 has an invalid length. [ 1383.265118][T27887] netlink: 'syz.1.6906': attribute type 4 has an invalid length. [ 1383.291432][T27887] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6906'. [ 1383.722744][T27913] netlink: 'syz.0.6917': attribute type 39 has an invalid length. [ 1383.823419][T27917] netlink: 'syz.2.6916': attribute type 3 has an invalid length. [ 1383.843593][T27917] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6916'. [ 1383.907263][T27916] syzkaller0: entered promiscuous mode [ 1383.916726][T27916] syzkaller0: entered allmulticast mode [ 1384.026909][T27927] FAULT_INJECTION: forcing a failure. [ 1384.026909][T27927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1384.078347][T27927] CPU: 0 PID: 27927 Comm: syz.0.6921 Not tainted syzkaller #0 [ 1384.085874][T27927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1384.096047][T27927] Call Trace: [ 1384.099345][T27927] [ 1384.102292][T27927] dump_stack_lvl+0x18c/0x250 [ 1384.106974][T27927] ? show_regs_print_info+0x20/0x20 [ 1384.112182][T27927] ? load_image+0x420/0x420 [ 1384.116709][T27927] ? __might_fault+0xaa/0x120 [ 1384.121408][T27927] ? __lock_acquire+0x7d40/0x7d40 [ 1384.126452][T27927] should_fail_ex+0x39d/0x4d0 [ 1384.131136][T27927] _copy_from_user+0x2f/0xe0 [ 1384.135729][T27927] ___sys_sendmsg+0x1c7/0x360 [ 1384.140401][T27927] ? get_pid_task+0x20/0x1e0 [ 1384.144990][T27927] ? __sys_sendmsg+0x2a0/0x2a0 [ 1384.149764][T27927] ? __lock_acquire+0x7d40/0x7d40 [ 1384.154799][T27927] __se_sys_sendmsg+0x1c2/0x2b0 [ 1384.159646][T27927] ? __x64_sys_sendmsg+0x80/0x80 [ 1384.164586][T27927] ? lockdep_hardirqs_on+0x98/0x150 [ 1384.169795][T27927] do_syscall_64+0x55/0xb0 [ 1384.174201][T27927] ? clear_bhb_loop+0x40/0x90 [ 1384.178873][T27927] ? clear_bhb_loop+0x40/0x90 [ 1384.183550][T27927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1384.189439][T27927] RIP: 0033:0x7fe89099ce59 [ 1384.193859][T27927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1384.213473][T27927] RSP: 002b:00007fe8918d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1384.221897][T27927] RAX: ffffffffffffffda RBX: 00007fe890c15fa0 RCX: 00007fe89099ce59 [ 1384.229862][T27927] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1384.237828][T27927] RBP: 00007fe8918d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1384.245936][T27927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1384.253907][T27927] R13: 00007fe890c16038 R14: 00007fe890c15fa0 R15: 00007fff6f933ee8 [ 1384.261887][T27927] [ 1384.908934][T27948] netlink: 'syz.3.6931': attribute type 3 has an invalid length. [ 1384.940625][T27948] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6931'. [ 1385.427403][T27942] delete_channel: no stack [ 1386.130628][T27956] FAULT_INJECTION: forcing a failure. [ 1386.130628][T27956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1386.143862][T27956] CPU: 1 PID: 27956 Comm: syz.2.6933 Not tainted syzkaller #0 [ 1386.151351][T27956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1386.161430][T27956] Call Trace: [ 1386.164716][T27956] [ 1386.167638][T27956] dump_stack_lvl+0x18c/0x250 [ 1386.172311][T27956] ? show_regs_print_info+0x20/0x20 [ 1386.177501][T27956] ? load_image+0x420/0x420 [ 1386.182047][T27956] ? __might_fault+0xaa/0x120 [ 1386.186741][T27956] ? __lock_acquire+0x7d40/0x7d40 [ 1386.191770][T27956] should_fail_ex+0x39d/0x4d0 [ 1386.196455][T27956] _copy_from_user+0x2f/0xe0 [ 1386.201047][T27956] __sys_bpf+0x23e/0x890 [ 1386.205295][T27956] ? bpf_link_show_fdinfo+0x390/0x390 [ 1386.210679][T27956] ? lock_chain_count+0x20/0x20 [ 1386.215542][T27956] __x64_sys_bpf+0x7c/0x90 [ 1386.219952][T27956] do_syscall_64+0x55/0xb0 [ 1386.224363][T27956] ? clear_bhb_loop+0x40/0x90 [ 1386.229036][T27956] ? clear_bhb_loop+0x40/0x90 [ 1386.233709][T27956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1386.239593][T27956] RIP: 0033:0x7f5b4cf9ce59 [ 1386.244000][T27956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1386.263608][T27956] RSP: 002b:00007f5b4dee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1386.272018][T27956] RAX: ffffffffffffffda RBX: 00007f5b4d215fa0 RCX: 00007f5b4cf9ce59 [ 1386.279983][T27956] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 000000000000000a [ 1386.287946][T27956] RBP: 00007f5b4dee3090 R08: 0000000000000000 R09: 0000000000000000 [ 1386.295914][T27956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1386.303885][T27956] R13: 00007f5b4d216038 R14: 00007f5b4d215fa0 R15: 00007ffe4681f288 [ 1386.311863][T27956] [ 1387.176079][T27939] netlink: 'syz.0.6928': attribute type 39 has an invalid length. [ 1387.393895][T27973] syzkaller0: entered promiscuous mode [ 1387.411680][T27973] syzkaller0: entered allmulticast mode [ 1388.153209][T27987] netlink: 'syz.0.6944': attribute type 39 has an invalid length. [ 1388.423622][T27974] delete_channel: no stack [ 1388.656188][T27991] netlink: 'syz.2.6953': attribute type 39 has an invalid length. [ 1388.781509][T27993] netlink: 'syz.0.6945': attribute type 3 has an invalid length. [ 1388.812750][T27993] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6945'. [ 1389.429218][T28002] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6949'. [ 1390.008788][T28015] netlink: 'syz.2.6956': attribute type 39 has an invalid length. [ 1390.895242][T28016] delete_channel: no stack [ 1390.930096][T28025] netlink: 'syz.2.6958': attribute type 3 has an invalid length. [ 1390.952977][T28025] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6958'. [ 1391.224969][T28041] FAULT_INJECTION: forcing a failure. [ 1391.224969][T28041] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.252990][T28045] netlink: 'syz.1.6966': attribute type 39 has an invalid length. [ 1391.272579][T28041] CPU: 1 PID: 28041 Comm: syz.2.6962 Not tainted syzkaller #0 [ 1391.280089][T28041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1391.290154][T28041] Call Trace: [ 1391.293429][T28041] [ 1391.296355][T28041] dump_stack_lvl+0x18c/0x250 [ 1391.301031][T28041] ? show_regs_print_info+0x20/0x20 [ 1391.306241][T28041] ? load_image+0x420/0x420 [ 1391.310768][T28041] ? __might_sleep+0xe0/0xe0 [ 1391.315369][T28041] ? __lock_acquire+0x7d40/0x7d40 [ 1391.320398][T28041] should_fail_ex+0x39d/0x4d0 [ 1391.325086][T28041] should_failslab+0x9/0x20 [ 1391.329589][T28041] slab_pre_alloc_hook+0x59/0x310 [ 1391.334618][T28041] ? kernfs_fop_write_iter+0x159/0x520 [ 1391.340093][T28041] ? kernfs_fop_write_iter+0x159/0x520 [ 1391.345557][T28041] __kmem_cache_alloc_node+0x53/0x250 [ 1391.350934][T28041] ? kernfs_fop_write_iter+0x159/0x520 [ 1391.356389][T28041] __kmalloc+0xa4/0x230 [ 1391.360566][T28041] kernfs_fop_write_iter+0x159/0x520 [ 1391.365854][T28041] vfs_write+0x46c/0x990 [ 1391.370101][T28041] ? file_end_write+0x250/0x250 [ 1391.374956][T28041] ? __fget_files+0x43d/0x4b0 [ 1391.379633][T28041] ? __fdget_pos+0x2a3/0x330 [ 1391.384221][T28041] ? ksys_write+0x75/0x260 [ 1391.388632][T28041] ksys_write+0x150/0x260 [ 1391.392961][T28041] ? __ia32_sys_read+0x90/0x90 [ 1391.397724][T28041] ? lockdep_hardirqs_on+0x98/0x150 [ 1391.402920][T28041] do_syscall_64+0x55/0xb0 [ 1391.407327][T28041] ? clear_bhb_loop+0x40/0x90 [ 1391.412001][T28041] ? clear_bhb_loop+0x40/0x90 [ 1391.416676][T28041] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1391.422568][T28041] RIP: 0033:0x7f5b4cf9ce59 [ 1391.426979][T28041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1391.446582][T28041] RSP: 002b:00007f5b4dec2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1391.454995][T28041] RAX: ffffffffffffffda RBX: 00007f5b4d216090 RCX: 00007f5b4cf9ce59 [ 1391.462963][T28041] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000006 [ 1391.471013][T28041] RBP: 00007f5b4dec2090 R08: 0000000000000000 R09: 0000000000000000 [ 1391.478977][T28041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1391.486939][T28041] R13: 00007f5b4d216128 R14: 00007f5b4d216090 R15: 00007ffe4681f288 [ 1391.494934][T28041] [ 1391.699884][T28049] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6969'. [ 1392.082991][T28055] netlink: 'syz.1.6970': attribute type 3 has an invalid length. [ 1392.102260][T28055] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6970'. [ 1392.848544][T28071] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6976'. [ 1392.968220][T28071] netlink: 'syz.0.6976': attribute type 4 has an invalid length. [ 1392.993387][T28071] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6976'. [ 1393.178588][T28077] netlink: 'syz.3.6978': attribute type 39 has an invalid length. [ 1393.374910][T28088] FAULT_INJECTION: forcing a failure. [ 1393.374910][T28088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1393.395784][T28088] CPU: 1 PID: 28088 Comm: syz.1.6982 Not tainted syzkaller #0 [ 1393.403295][T28088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1393.413382][T28088] Call Trace: [ 1393.416676][T28088] [ 1393.419616][T28088] dump_stack_lvl+0x18c/0x250 [ 1393.424309][T28088] ? show_regs_print_info+0x20/0x20 [ 1393.429520][T28088] ? load_image+0x420/0x420 [ 1393.434050][T28088] ? __might_fault+0xaa/0x120 [ 1393.438744][T28088] ? __lock_acquire+0x7d40/0x7d40 [ 1393.443801][T28088] should_fail_ex+0x39d/0x4d0 [ 1393.448511][T28088] _copy_from_user+0x2f/0xe0 [ 1393.453139][T28088] __sys_bpf+0x23e/0x890 [ 1393.457400][T28088] ? bpf_link_show_fdinfo+0x390/0x390 [ 1393.462805][T28088] ? lock_chain_count+0x20/0x20 [ 1393.467676][T28088] __x64_sys_bpf+0x7c/0x90 [ 1393.472101][T28088] do_syscall_64+0x55/0xb0 [ 1393.476535][T28088] ? clear_bhb_loop+0x40/0x90 [ 1393.481234][T28088] ? clear_bhb_loop+0x40/0x90 [ 1393.485930][T28088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1393.491846][T28088] RIP: 0033:0x7f70a1b9ce59 [ 1393.496273][T28088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1393.515903][T28088] RSP: 002b:00007f70a2a39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1393.524340][T28088] RAX: ffffffffffffffda RBX: 00007f70a1e15fa0 RCX: 00007f70a1b9ce59 [ 1393.532326][T28088] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 1393.540312][T28088] RBP: 00007f70a2a39090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.548293][T28088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.556273][T28088] R13: 00007f70a1e16038 R14: 00007f70a1e15fa0 R15: 00007ffe0c0db5b8 [ 1393.564281][T28088] [ 1394.092880][T28099] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6987'. [ 1394.320093][T28101] netlink: 'syz.1.6989': attribute type 39 has an invalid length. [ 1394.549959][T28111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6992'. [ 1394.568605][T28111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6992'. [ 1394.595598][T28113] delete_channel: no stack [ 1394.597367][T28111] netlink: 13 bytes leftover after parsing attributes in process `syz.3.6992'. [ 1394.600534][T28113] delete_channel: no stack [ 1395.658144][T28127] FAULT_INJECTION: forcing a failure. [ 1395.658144][T28127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1395.666324][T28129] netlink: 'syz.2.7000': attribute type 39 has an invalid length. [ 1395.696454][T28127] CPU: 0 PID: 28127 Comm: syz.3.7001 Not tainted syzkaller #0 [ 1395.704054][T28127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1395.714132][T28127] Call Trace: [ 1395.717418][T28127] [ 1395.720346][T28127] dump_stack_lvl+0x18c/0x250 [ 1395.725069][T28127] ? show_regs_print_info+0x20/0x20 [ 1395.730263][T28127] ? load_image+0x420/0x420 [ 1395.734780][T28127] ? __might_fault+0xaa/0x120 [ 1395.739467][T28127] ? __lock_acquire+0x7d40/0x7d40 [ 1395.744492][T28127] should_fail_ex+0x39d/0x4d0 [ 1395.749177][T28127] _copy_from_user+0x2f/0xe0 [ 1395.753765][T28127] __sys_bpf+0x23e/0x890 [ 1395.758005][T28127] ? bpf_link_show_fdinfo+0x390/0x390 [ 1395.763405][T28127] ? lock_chain_count+0x20/0x20 [ 1395.768257][T28127] __x64_sys_bpf+0x7c/0x90 [ 1395.772665][T28127] do_syscall_64+0x55/0xb0 [ 1395.777073][T28127] ? clear_bhb_loop+0x40/0x90 [ 1395.781744][T28127] ? clear_bhb_loop+0x40/0x90 [ 1395.786417][T28127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1395.792303][T28127] RIP: 0033:0x7f0798b9ce59 [ 1395.796797][T28127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1395.816399][T28127] RSP: 002b:00007f07999a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1395.824807][T28127] RAX: ffffffffffffffda RBX: 00007f0798e15fa0 RCX: 00007f0798b9ce59 [ 1395.832771][T28127] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1395.840818][T28127] RBP: 00007f07999a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1395.848780][T28127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1395.856742][T28127] R13: 00007f0798e16038 R14: 00007f0798e15fa0 R15: 00007ffd4dd64d78 [ 1395.864743][T28127] [ 1395.879232][T28134] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6999'. [ 1396.178270][T28141] netlink: 'syz.3.7004': attribute type 39 has an invalid length. [ 1396.803853][T28148] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7009'. [ 1397.040377][T28157] netlink: 'syz.3.7011': attribute type 39 has an invalid length. [ 1397.441065][T28142] delete_channel: no stack [ 1397.615882][T28165] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7013'. [ 1397.636965][T28165] bridge_slave_1: default FDB implementation only supports local addresses [ 1397.744544][T28171] netlink: 'syz.1.7016': attribute type 39 has an invalid length. [ 1398.001941][T28181] netlink: 'syz.1.7020': attribute type 39 has an invalid length. [ 1398.672204][T28183] FAULT_INJECTION: forcing a failure. [ 1398.672204][T28183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1398.711603][T28183] CPU: 1 PID: 28183 Comm: syz.0.7021 Not tainted syzkaller #0 [ 1398.719114][T28183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1398.729189][T28183] Call Trace: [ 1398.732496][T28183] [ 1398.735472][T28183] dump_stack_lvl+0x18c/0x250 [ 1398.740185][T28183] ? show_regs_print_info+0x20/0x20 [ 1398.745412][T28183] ? load_image+0x420/0x420 [ 1398.749949][T28183] ? __might_fault+0xaa/0x120 [ 1398.754655][T28183] ? __lock_acquire+0x7d40/0x7d40 [ 1398.759716][T28183] should_fail_ex+0x39d/0x4d0 [ 1398.764439][T28183] _copy_from_user+0x2f/0xe0 [ 1398.769085][T28183] ___sys_sendmsg+0x1c7/0x360 [ 1398.773789][T28183] ? get_pid_task+0x20/0x1e0 [ 1398.778424][T28183] ? __sys_sendmsg+0x2a0/0x2a0 [ 1398.783235][T28183] ? __lock_acquire+0x7d40/0x7d40 [ 1398.788310][T28183] __se_sys_sendmsg+0x1c2/0x2b0 [ 1398.793267][T28183] ? __x64_sys_sendmsg+0x80/0x80 [ 1398.798230][T28183] ? lockdep_hardirqs_on+0x98/0x150 [ 1398.803449][T28183] do_syscall_64+0x55/0xb0 [ 1398.807880][T28183] ? clear_bhb_loop+0x40/0x90 [ 1398.812575][T28183] ? clear_bhb_loop+0x40/0x90 [ 1398.817359][T28183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1398.823290][T28183] RIP: 0033:0x7fe89099ce59 [ 1398.827719][T28183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1398.847343][T28183] RSP: 002b:00007fe8918d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1398.855782][T28183] RAX: ffffffffffffffda RBX: 00007fe890c15fa0 RCX: 00007fe89099ce59 [ 1398.863773][T28183] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 1398.871756][T28183] RBP: 00007fe8918d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1398.879760][T28183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1398.887758][T28183] R13: 00007fe890c16038 R14: 00007fe890c15fa0 R15: 00007fff6f933ee8 [ 1398.895766][T28183] [ 1399.104504][T28187] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7023'. [ 1399.111693][T28191] macsec0: entered promiscuous mode [ 1399.137797][T28191] macsec0: entered allmulticast mode [ 1399.156280][T28191] veth1_macvtap: entered allmulticast mode [ 1399.498568][T28199] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7026'. [ 1399.546806][T28184] delete_channel: no stack [ 1399.875775][T28210] netlink: 'syz.3.7031': attribute type 39 has an invalid length. [ 1399.944495][T28211] netlink: 'syz.1.7028': attribute type 3 has an invalid length. [ 1399.953812][T28211] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7028'. [ 1400.011222][T28213] netlink: 'syz.2.7029': attribute type 3 has an invalid length. [ 1400.039617][T28213] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7029'. [ 1400.348273][T28227] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7036'. [ 1400.849494][T28235] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7038'. [ 1400.991069][T28241] netlink: 'syz.3.7041': attribute type 39 has an invalid length. [ 1401.332871][T28244] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7043'. [ 1401.371619][T28244] bridge_slave_1: default FDB implementation only supports local addresses [ 1401.429041][T28230] delete_channel: no stack [ 1401.715344][T28254] netlink: 'syz.3.7045': attribute type 3 has an invalid length. [ 1401.752635][T28254] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7045'. [ 1401.868449][T28259] FAULT_INJECTION: forcing a failure. [ 1401.868449][T28259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1401.903171][T28259] CPU: 1 PID: 28259 Comm: syz.2.7047 Not tainted syzkaller #0 [ 1401.910679][T28259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1401.920731][T28259] Call Trace: [ 1401.924006][T28259] [ 1401.926932][T28259] dump_stack_lvl+0x18c/0x250 [ 1401.931609][T28259] ? show_regs_print_info+0x20/0x20 [ 1401.936803][T28259] ? load_image+0x420/0x420 [ 1401.941306][T28259] ? __might_fault+0xaa/0x120 [ 1401.945976][T28259] ? __lock_acquire+0x7d40/0x7d40 [ 1401.950993][T28259] should_fail_ex+0x39d/0x4d0 [ 1401.955678][T28259] _copy_from_user+0x2f/0xe0 [ 1401.960274][T28259] __sys_bpf+0x23e/0x890 [ 1401.964511][T28259] ? bpf_link_show_fdinfo+0x390/0x390 [ 1401.969883][T28259] ? lock_chain_count+0x20/0x20 [ 1401.974736][T28259] __x64_sys_bpf+0x7c/0x90 [ 1401.979150][T28259] do_syscall_64+0x55/0xb0 [ 1401.983555][T28259] ? clear_bhb_loop+0x40/0x90 [ 1401.988228][T28259] ? clear_bhb_loop+0x40/0x90 [ 1401.992923][T28259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1401.998834][T28259] RIP: 0033:0x7f5b4cf9ce59 [ 1402.003266][T28259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1402.022877][T28259] RSP: 002b:00007f5b4dee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1402.031289][T28259] RAX: ffffffffffffffda RBX: 00007f5b4d215fa0 RCX: 00007f5b4cf9ce59 [ 1402.039252][T28259] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1402.047219][T28259] RBP: 00007f5b4dee3090 R08: 0000000000000000 R09: 0000000000000000 [ 1402.055183][T28259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1402.063147][T28259] R13: 00007f5b4d216038 R14: 00007f5b4d215fa0 R15: 00007ffe4681f288 [ 1402.071117][T28259] [ 1402.118965][T20671] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1402.127811][T20671] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1402.167072][T20671] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1402.176979][T20671] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1402.186031][T20671] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1402.202046][T20671] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1402.477664][T28269] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7048'. [ 1402.850936][T19346] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.919934][T28278] netlink: 'syz.2.7051': attribute type 39 has an invalid length. [ 1402.973981][T19346] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.166129][T19346] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.194603][T28289] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7052'. [ 1403.222636][T28285] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7053'. [ 1403.370315][T19346] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.635658][T28263] chnl_net:caif_netlink_parms(): no params data found [ 1403.987598][T28305] netlink: 'syz.3.7056': attribute type 3 has an invalid length. [ 1403.996966][T28287] delete_channel: no stack [ 1404.031863][T28305] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7056'. [ 1404.261610][ T5777] Bluetooth: hci2: command tx timeout [ 1404.277047][T28309] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.7057'. [ 1404.304844][T28309] bridge_slave_1: default FDB implementation only supports local addresses [ 1404.463245][T28263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.484363][T28263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.511865][T28263] bridge_slave_0: entered allmulticast mode [ 1404.529995][T28263] bridge_slave_0: entered promiscuous mode [ 1404.613372][T28263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.620586][T28263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.661977][T28263] bridge_slave_1: entered allmulticast mode [ 1404.670022][T28263] bridge_slave_1: entered promiscuous mode [ 1404.677528][T28323] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7059'. [ 1404.866011][T28321] netlink: 'syz.3.7060': attribute type 39 has an invalid length. [ 1404.985338][T28263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.084792][T28331] FAULT_INJECTION: forcing a failure. [ 1405.084792][T28331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1405.121158][T28330] netlink: 'syz.1.7061': attribute type 29 has an invalid length. [ 1405.142618][T28331] CPU: 1 PID: 28331 Comm: syz.1.7061 Not tainted syzkaller #0 [ 1405.150293][T28331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1405.160403][T28331] Call Trace: [ 1405.163729][T28331] [ 1405.166710][T28331] dump_stack_lvl+0x18c/0x250 [ 1405.171454][T28331] ? show_regs_print_info+0x20/0x20 [ 1405.176718][T28331] ? load_image+0x420/0x420 [ 1405.181332][T28331] ? __might_fault+0xaa/0x120 [ 1405.186241][T28331] ? __lock_acquire+0x7d40/0x7d40 [ 1405.191342][T28331] should_fail_ex+0x39d/0x4d0 [ 1405.196097][T28331] _copy_from_user+0x2f/0xe0 [ 1405.200748][T28331] ___sys_recvmsg+0x176/0x590 [ 1405.205504][T28331] ? __sys_recvmsg+0x2a0/0x2a0 [ 1405.210342][T28331] ? ksys_write+0x1c4/0x260 [ 1405.214944][T28331] ? __fget_files+0x43d/0x4b0 [ 1405.219721][T28331] __x64_sys_recvmsg+0x20c/0x2e0 [ 1405.224726][T28331] ? ___sys_recvmsg+0x590/0x590 [ 1405.229682][T28331] ? lockdep_hardirqs_on+0x98/0x150 [ 1405.234947][T28331] do_syscall_64+0x55/0xb0 [ 1405.239411][T28331] ? clear_bhb_loop+0x40/0x90 [ 1405.244135][T28331] ? clear_bhb_loop+0x40/0x90 [ 1405.248883][T28331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1405.254839][T28331] RIP: 0033:0x7f70a1b9ce59 [ 1405.259315][T28331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1405.278978][T28331] RSP: 002b:00007f70a29f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1405.287460][T28331] RAX: ffffffffffffffda RBX: 00007f70a1e16180 RCX: 00007f70a1b9ce59 [ 1405.295487][T28331] RDX: 0000000040000080 RSI: 0000200000000c40 RDI: 0000000000000003 [ 1405.303616][T28331] RBP: 00007f70a29f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1405.311642][T28331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1405.319665][T28331] R13: 00007f70a1e16218 R14: 00007f70a1e16180 R15: 00007ffe0c0db5b8 [ 1405.327782][T28331] [ 1405.349738][T28263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1405.382262][T28330] netlink: 'syz.1.7061': attribute type 29 has an invalid length. [ 1405.528670][T28327] netlink: 'syz.1.7061': attribute type 29 has an invalid length. [ 1405.645800][T28340] netlink: 'syz.2.7064': attribute type 29 has an invalid length. [ 1405.725815][T28340] netlink: 'syz.2.7064': attribute type 29 has an invalid length. [ 1405.743961][T28339] netlink: 'syz.2.7064': attribute type 29 has an invalid length. [ 1405.778962][T28341] netlink: 'syz.2.7064': attribute type 29 has an invalid length. [ 1405.834381][T28263] team0: Port device team_slave_0 added [ 1406.059517][T28345] netlink: 'syz.3.7063': attribute type 3 has an invalid length. [ 1406.100136][T28345] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7063'. [ 1406.126126][T28263] team0: Port device team_slave_1 added [ 1406.264988][T28353] netlink: 'syz.2.7066': attribute type 29 has an invalid length. [ 1406.341721][ T5777] Bluetooth: hci2: command tx timeout [ 1406.343557][T28353] netlink: 'syz.2.7066': attribute type 29 has an invalid length. [ 1406.388051][T28355] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7066'. [ 1406.413638][T28263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1406.420771][T28263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1406.480904][T28263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1406.523508][T28263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1406.530522][T28263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1406.565928][T28263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1406.743711][T28344] delete_channel: no stack [ 1406.847058][T28366] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7067'. [ 1406.898133][T28263] hsr_slave_0: entered promiscuous mode [ 1406.953995][T28263] hsr_slave_1: entered promiscuous mode [ 1406.964153][T28263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1406.975457][T28263] Cannot create hsr debugfs directory [ 1407.369811][T28381] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7071'. [ 1407.872627][T28391] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7072'. [ 1408.421869][ T5777] Bluetooth: hci2: command tx timeout [ 1408.650849][T28398] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7081'. [ 1408.860704][T28397] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7074'. [ 1409.329234][T28403] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7075'. [ 1409.630059][T28263] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1409.666052][T28263] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1409.720355][T28263] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1409.781500][T28263] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1410.205142][T28425] validate_nla: 7 callbacks suppressed [ 1410.205160][T28425] netlink: 'syz.1.7078': attribute type 3 has an invalid length. [ 1410.277882][T28405] delete_channel: no stack [ 1410.287000][T28425] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7078'. [ 1410.376066][T28427] netlink: 'syz.2.7080': attribute type 39 has an invalid length. [ 1410.519803][ T5777] Bluetooth: hci2: command tx timeout [ 1410.768325][T28439] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7084'. [ 1411.507959][T28447] ================================================================== [ 1411.516165][T28447] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 1411.524027][T28447] Write of size 32 at addr ffff888068ae4810 by task syz.3.7085/28447 [ 1411.525138][T28263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1411.532088][T28447] [ 1411.532097][T28447] CPU: 0 PID: 28447 Comm: syz.3.7085 Not tainted syzkaller #0 [ 1411.532115][T28447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1411.532125][T28447] Call Trace: [ 1411.532132][T28447] [ 1411.532140][T28447] dump_stack_lvl+0x18c/0x250 [ 1411.532165][T28447] ? __lock_acquire+0x7d40/0x7d40 [ 1411.532187][T28447] ? show_regs_print_info+0x20/0x20 [ 1411.579546][T28447] ? load_image+0x420/0x420 [ 1411.584055][T28447] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1411.589510][T28447] ? __virt_addr_valid+0x18c/0x540 [ 1411.594649][T28447] ? __virt_addr_valid+0x469/0x540 [ 1411.599753][T28447] print_report+0xa8/0x210 [ 1411.604181][T28447] ? __bpf_get_stackid+0x6bf/0x900 [ 1411.609287][T28447] kasan_report+0x117/0x150 [ 1411.613808][T28447] ? __bpf_get_stackid+0x6bf/0x900 [ 1411.618942][T28447] kasan_check_range+0x241/0x290 [ 1411.623892][T28447] ? __bpf_get_stackid+0x6bf/0x900 [ 1411.629007][T28447] __asan_memcpy+0x40/0x70 [ 1411.633429][T28447] __bpf_get_stackid+0x6bf/0x900 [ 1411.638369][T28447] bpf_get_stackid_pe+0x2f0/0x410 [ 1411.643397][T28447] bpf_prog_63958b2bb0b64835+0x33/0x48 [ 1411.648849][T28447] bpf_overflow_handler+0x1fc/0x510 [ 1411.654054][T28447] ? bpf_overflow_handler+0xde/0x510 [ 1411.659341][T28447] ? tp_perf_event_destroy+0x20/0x20 [ 1411.664633][T28447] ? __perf_event_account_interrupt+0x187/0x280 [ 1411.670869][T28447] __perf_event_overflow+0x447/0x630 [ 1411.676173][T28447] perf_swevent_event+0x319/0x570 [ 1411.681193][T28447] ? perf_tp_event+0x1520/0x1520 [ 1411.686122][T28447] ? sched_mm_cid_remote_clear+0x13a/0x500 [ 1411.691932][T28447] ___perf_sw_event+0x4a7/0x730 [ 1411.696777][T28447] ? ___perf_sw_event+0x199/0x730 [ 1411.701793][T28447] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1411.708203][T28447] ? cpu_cfs_local_stat_show+0x150/0x150 [ 1411.713854][T28447] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1411.719828][T28447] ? _raw_spin_unlock_irq+0x23/0x50 [ 1411.725029][T28447] ? lock_chain_count+0x20/0x20 [ 1411.729874][T28447] __perf_sw_event+0x139/0x270 [ 1411.734640][T28447] do_user_addr_fault+0x123e/0x12c0 [ 1411.739845][T28447] ? rcu_is_watching+0x15/0xb0 [ 1411.744610][T28447] exc_page_fault+0x64/0x100 [ 1411.749198][T28447] ? clear_bhb_loop+0x40/0x90 [ 1411.753874][T28447] asm_exc_page_fault+0x26/0x30 [ 1411.758741][T28447] RIP: 0033:0x7ffd4ddc0a21 [ 1411.763173][T28447] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 [ 1411.782780][T28447] RSP: 002b:00007f07999a8ff0 EFLAGS: 00010203 [ 1411.788839][T28447] RAX: 001c83e07fb6f79e RBX: 00007ffd4ddbc0b0 RCX: 0000000000000018 [ 1411.796802][T28447] RDX: 000000001d00acbf RSI: 00007f07999a90b0 RDI: 7fffffffffffffff [ 1411.804770][T28447] RBP: 00007f07999a9030 R08: 0000000000000583 R09: 0000000000745ae6 [ 1411.812735][T28447] R10: 000002d53a6414a3 R11: 000000000004426c R12: 0000000000000010 [ 1411.820696][T28447] R13: 00007f0798e16038 R14: 00007ffd4ddbc080 R15: 000000000004426c [ 1411.828682][T28447] [ 1411.831693][T28447] [ 1411.834018][T28447] Allocated by task 28447: [ 1411.838415][T28447] kasan_set_track+0x4e/0x70 [ 1411.843001][T28447] __kasan_kmalloc+0x8f/0xa0 [ 1411.847593][T28447] __kmalloc_node+0xb4/0x230 [ 1411.852193][T28447] bpf_map_area_alloc+0x5e/0x110 [ 1411.857125][T28447] prealloc_elems_and_freelist+0x86/0x1c0 [ 1411.862842][T28447] stack_map_alloc+0x33a/0x4c0 [ 1411.867598][T28447] map_create+0x877/0x12f0 [ 1411.872014][T28447] __sys_bpf+0x651/0x890 [ 1411.876247][T28447] __x64_sys_bpf+0x7c/0x90 [ 1411.880649][T28447] do_syscall_64+0x55/0xb0 [ 1411.885057][T28447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1411.891030][T28447] [ 1411.893342][T28447] Last potentially related work creation: [ 1411.899041][T28447] kasan_save_stack+0x3e/0x60 [ 1411.903709][T28447] __kasan_record_aux_stack+0xaf/0xc0 [ 1411.909070][T28447] kvfree_call_rcu+0xee/0x790 [ 1411.913748][T28447] sock_map_remove_links+0x4c6/0x5a0 [ 1411.919125][T28447] sock_map_close+0x18f/0x3c0 [ 1411.923798][T28447] unix_release+0x82/0xc0 [ 1411.928176][T28447] sock_close+0xbd/0x230 [ 1411.932410][T28447] __fput+0x234/0x970 [ 1411.936380][T28447] task_work_run+0x1d4/0x260 [ 1411.940964][T28447] exit_to_user_mode_loop+0xe6/0x110 [ 1411.946248][T28447] exit_to_user_mode_prepare+0xee/0x180 [ 1411.951792][T28447] syscall_exit_to_user_mode+0x1a/0x50 [ 1411.957248][T28447] do_syscall_64+0x61/0xb0 [ 1411.961657][T28447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1411.967539][T28447] [ 1411.969851][T28447] The buggy address belongs to the object at ffff888068ae4800 [ 1411.969851][T28447] which belongs to the cache kmalloc-cg-64 of size 64 [ 1411.983980][T28447] The buggy address is located 16 bytes inside of [ 1411.983980][T28447] allocated 40-byte region [ffff888068ae4800, ffff888068ae4828) [ 1411.997964][T28447] [ 1412.000282][T28447] The buggy address belongs to the physical page: [ 1412.006768][T28447] page:ffffea0001a2b900 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888068ae4280 pfn:0x68ae4 [ 1412.018237][T28447] memcg:ffff888030cb3e01 [ 1412.022472][T28447] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1412.030011][T28447] page_type: 0xffffffff() [ 1412.034332][T28447] raw: 00fff00000000800 ffff888017c4da00 ffffea0001732180 0000000000000004 [ 1412.042908][T28447] raw: ffff888068ae4280 000000008020001c 00000001ffffffff ffff888030cb3e01 [ 1412.051477][T28447] page dumped because: kasan: bad access detected [ 1412.057917][T28447] page_owner tracks the page as allocated [ 1412.063627][T28447] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 20668, tgid 20668 (syz-executor), ts 1354708034559, free_ts 1354611526890 [ 1412.082381][T28447] post_alloc_hook+0x1c1/0x200 [ 1412.087148][T28447] get_page_from_freelist+0x1951/0x19e0 [ 1412.092685][T28447] __alloc_pages+0x1f0/0x460 [ 1412.097262][T28447] alloc_slab_page+0x5d/0x160 [ 1412.101930][T28447] new_slab+0x87/0x2d0 [ 1412.105995][T28447] ___slab_alloc+0xc5d/0x12f0 [ 1412.110664][T28447] __kmem_cache_alloc_node+0x19e/0x250 [ 1412.116115][T28447] kmalloc_trace+0x2a/0xe0 [ 1412.120523][T28447] alloc_fdtable+0xca/0x2c0 [ 1412.125019][T28447] dup_fd+0x786/0xa50 [ 1412.128990][T28447] copy_files+0xc3/0x120 [ 1412.133224][T28447] copy_process+0x15ab/0x3dc0 [ 1412.137891][T28447] kernel_clone+0x24b/0x8a0 [ 1412.142469][T28447] __x64_sys_clone+0x1b7/0x230 [ 1412.147219][T28447] do_syscall_64+0x55/0xb0 [ 1412.151625][T28447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1412.157514][T28447] page last free stack trace: [ 1412.162172][T28447] free_unref_page_prepare+0x7b2/0x8c0 [ 1412.167712][T28447] free_unref_page_list+0xbe/0x860 [ 1412.172842][T28447] release_pages+0x1f7a/0x2200 [ 1412.177688][T28447] tlb_flush_mmu+0x379/0x510 [ 1412.182290][T28447] tlb_finish_mmu+0xf9/0x220 [ 1412.186889][T28447] exit_mmap+0x428/0xb90 [ 1412.191129][T28447] __mmput+0x118/0x3c0 [ 1412.195193][T28447] exit_mm+0x24a/0x350 [ 1412.199259][T28447] do_exit+0x8dd/0x2460 [ 1412.203434][T28447] do_group_exit+0x21b/0x2d0 [ 1412.208017][T28447] __x64_sys_exit_group+0x3f/0x40 [ 1412.213037][T28447] do_syscall_64+0x55/0xb0 [ 1412.217445][T28447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1412.223342][T28447] [ 1412.225658][T28447] Memory state around the buggy address: [ 1412.231300][T28447] ffff888068ae4700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1412.239354][T28447] ffff888068ae4780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1412.247405][T28447] >ffff888068ae4800: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1412.255451][T28447] ^ [ 1412.260813][T28447] ffff888068ae4880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1412.268861][T28447] ffff888068ae4900: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1412.276912][T28447] ================================================================== [ 1412.285002][T28447] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1412.292202][T28447] CPU: 0 PID: 28447 Comm: syz.3.7085 Not tainted syzkaller #0 [ 1412.299648][T28447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1412.309695][T28447] Call Trace: [ 1412.312972][T28447] [ 1412.315896][T28447] dump_stack_lvl+0x18c/0x250 [ 1412.320569][T28447] ? show_regs_print_info+0x20/0x20 [ 1412.325764][T28447] ? load_image+0x420/0x420 [ 1412.330269][T28447] panic+0x2dc/0x730 [ 1412.334162][T28447] ? __lock_acquire+0x7d40/0x7d40 [ 1412.339179][T28447] ? bpf_jit_dump+0xd0/0xd0 [ 1412.343679][T28447] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1412.349564][T28447] ? _raw_spin_unlock+0x40/0x40 [ 1412.354412][T28447] ? __bpf_get_stackid+0x6bf/0x900 [ 1412.359522][T28447] check_panic_on_warn+0x84/0xa0 [ 1412.364464][T28447] ? __bpf_get_stackid+0x6bf/0x900 [ 1412.369577][T28447] end_report+0x6f/0x130 [ 1412.373817][T28447] kasan_report+0x128/0x150 [ 1412.378310][T28447] ? __bpf_get_stackid+0x6bf/0x900 [ 1412.383419][T28447] kasan_check_range+0x241/0x290 [ 1412.388345][T28447] ? __bpf_get_stackid+0x6bf/0x900 [ 1412.393452][T28447] __asan_memcpy+0x40/0x70 [ 1412.397863][T28447] __bpf_get_stackid+0x6bf/0x900 [ 1412.402796][T28447] bpf_get_stackid_pe+0x2f0/0x410 [ 1412.407819][T28447] bpf_prog_63958b2bb0b64835+0x33/0x48 [ 1412.413272][T28447] bpf_overflow_handler+0x1fc/0x510 [ 1412.418468][T28447] ? bpf_overflow_handler+0xde/0x510 [ 1412.423748][T28447] ? tp_perf_event_destroy+0x20/0x20 [ 1412.429032][T28447] ? __perf_event_account_interrupt+0x187/0x280 [ 1412.435270][T28447] __perf_event_overflow+0x447/0x630 [ 1412.440552][T28447] perf_swevent_event+0x319/0x570 [ 1412.445571][T28447] ? perf_tp_event+0x1520/0x1520 [ 1412.450501][T28447] ? sched_mm_cid_remote_clear+0x13a/0x500 [ 1412.456309][T28447] ___perf_sw_event+0x4a7/0x730 [ 1412.461160][T28447] ? ___perf_sw_event+0x199/0x730 [ 1412.466265][T28447] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1412.472675][T28447] ? cpu_cfs_local_stat_show+0x150/0x150 [ 1412.478343][T28447] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1412.484322][T28447] ? _raw_spin_unlock_irq+0x23/0x50 [ 1412.489518][T28447] ? lock_chain_count+0x20/0x20 [ 1412.494363][T28447] __perf_sw_event+0x139/0x270 [ 1412.499128][T28447] do_user_addr_fault+0x123e/0x12c0 [ 1412.504325][T28447] ? rcu_is_watching+0x15/0xb0 [ 1412.509087][T28447] exc_page_fault+0x64/0x100 [ 1412.513670][T28447] ? clear_bhb_loop+0x40/0x90 [ 1412.518349][T28447] asm_exc_page_fault+0x26/0x30 [ 1412.523192][T28447] RIP: 0033:0x7ffd4ddc0a21 [ 1412.527605][T28447] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 [ 1412.547203][T28447] RSP: 002b:00007f07999a8ff0 EFLAGS: 00010203 [ 1412.553268][T28447] RAX: 001c83e07fb6f79e RBX: 00007ffd4ddbc0b0 RCX: 0000000000000018 [ 1412.561316][T28447] RDX: 000000001d00acbf RSI: 00007f07999a90b0 RDI: 7fffffffffffffff [ 1412.569282][T28447] RBP: 00007f07999a9030 R08: 0000000000000583 R09: 0000000000745ae6 [ 1412.577245][T28447] R10: 000002d53a6414a3 R11: 000000000004426c R12: 0000000000000010 [ 1412.585213][T28447] R13: 00007f0798e16038 R14: 00007ffd4ddbc080 R15: 000000000004426c [ 1412.593185][T28447] [ 1412.596456][T28447] Kernel Offset: disabled [ 1412.600772][T28447] Rebooting in 86400 seconds..