last executing test programs: 9m13.903039376s ago: executing program 3 (id=10577): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x104010, 0x1, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000000000000000000100000d000000000000000000000000020000000000000c02000000000061"], 0x0, 0x4c}, 0x28) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x9, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xffffffffffffff74, 0x8000000000000001}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x800000, 0x0, 0x2009}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="93443f14c10900c600c2000020991d5f334d0b16bd0000004014414fe4b2c9b011db00320ef76ca8b490a3de4374678be8cafd436ce81560dad25ff0e1f0954010b5b644ebd5100357bd948935c77bc65b7d4aba5cb64af6cc56b06c8fd2f7874222e7ca14b805a4e326b246306812c90ef8b5af7fd75318"], &(0x7f00000002c0)='GPL\x00', 0xe, 0xa9, &(0x7f0000000300)=""/169, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x9, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x10, 0x4}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xac6, '\x00', 0x0, r1, 0x5, 0x2}, 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)) 9m9.106658782s ago: executing program 3 (id=10579): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000800)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}, 0x4c081) 9m8.944555515s ago: executing program 3 (id=10582): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800000000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000018580c0000000000000000040095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="aa8012f9a249204677a22fbfd08690611a9b68ee49606fb7cd3fb03454baebbfbc1a0fb2553654dfdf10131daa38346d4fcd965e28c4655d9c23e38e8b1f4e566ce806b1f4b2ab7db71aaa88b481937591302ee106a52a87c4837c36cc2b84ef458011e7cabf7370142f98441f77e773b4a552b98ae915979346456836f577675d4a8cfab71d438f6b605998197e0b1b934785dd6ae773e0b9703c600ad7ce3842a7d9d0d2afde67ca4fc099b35997cd5358faf3df5a40215e096cb1b203c2f09174fe7af2a3e026a037e07a3103d81f17e307c0c52c", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0xd}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x8, r3}, 0x18) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x4, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0xb, 0x5}, {0x1, 0x3}, {0x5, 0x1}]}, @var={0x9, 0x0, 0x0, 0xe, 0x2}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x3, 0x1}, {0xd, 0x3}, {0xe, 0x2}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000a00)=""/162, 0x7c, 0xa2, 0x1, 0x4}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0x2, 0x4, 0x8, 0x40, 0x4}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='syzkaller\x00', 0x4b1, 0xd8, &(0x7f0000000880)=""/216, 0x40f00, 0xe, '\x00', 0x0, 0x17, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x1, 0x4, 0x9, 0x5}, 0x10, 0x1a3, 0xffffffffffffffff, 0x3, &(0x7f0000000b80)=[r5, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x5, 0x5, 0xb, 0x5}, {0x0, 0x3, 0xe, 0x5}, {0x0, 0x4, 0x0, 0x3}], 0x10, 0x4}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x902, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r9, &(0x7f00000003c0), 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440), 0x4) ioctl$TUNGETVNETBE(r8, 0x800454df, &(0x7f00000001c0)) r10 = gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x9, 0x3, 0xfefffffffffffffe, 0x2, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r10, 0xa, 0xffffffffffffffff, 0x8) r11 = perf_event_open$cgroup(&(0x7f0000000cc0)={0x3, 0x80, 0x2, 0xe, 0x8, 0x8, 0x0, 0x1ff, 0x810, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x4, @perf_bp={&(0x7f00000007c0), 0x8}, 0x80, 0x6bf3e99a, 0x1, 0x2, 0x85a7, 0xdc4c, 0x1, 0x0, 0x9, 0x0, 0x8}, r9, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000740)={0x5, 0x80, 0x7, 0x0, 0x8, 0x3, 0x0, 0x1, 0x800, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000004c0), 0x9}, 0x110000, 0x7, 0x8, 0x1, 0x8, 0xa, 0x4, 0x0, 0x3, 0x0, 0x6}, r10, 0x7, r11, 0x1) 9m8.316587401s ago: executing program 3 (id=10587): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2000000a, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xc73, 0x6, 0x2, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000000000000000000100000d000000000000000000000000020000000000000c02000000000061"], 0x0, 0x4c}, 0x28) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x9, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xffffffffffffff74, 0x8000000000000001}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x800000, 0x0, 0x2009}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="93443f14c10900c600c2000020991d5f334d0b16bd0000004014414fe4b2c9b011db00320ef76ca8b490a3de4374678be8cafd436ce81560dad25ff0e1f0954010b5b644ebd5100357bd948935c77bc65b7d4aba5cb64af6cc56b06c8fd2f7874222e7ca14b805a4e326b246306812c90ef8b5af7fd75318"], &(0x7f00000002c0)='GPL\x00', 0xe, 0xa9, &(0x7f0000000300)=""/169, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x9, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x10, 0x4}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xac6, '\x00', 0x0, r1, 0x5, 0x2}, 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)) 9m5.179606946s ago: executing program 3 (id=10591): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x45, 0xfa, 0x4, 0xfffff008}]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1c, 0x0, 0xfffffffd, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') 9m3.998511155s ago: executing program 3 (id=10601): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab"], 0xfe33) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x81, 0x7, 0x9, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0500000005000000fd09000085000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000040), 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4c, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3542, 0x1ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 8m48.82174241s ago: executing program 32 (id=10601): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab"], 0xfe33) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x81, 0x7, 0x9, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0500000005000000fd09000085000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000040), 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4c, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3542, 0x1ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 9.697731722s ago: executing program 0 (id=11672): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x1aa0d, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="c0fba3f0c67497c6e350f409efe4", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffef) (async) ioctl$TUNGETVNETLE(r0, 0x80047441, &(0x7f0000000180)) 9.551892706s ago: executing program 4 (id=11673): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000500000002000000"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000100000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r1}, 0xc) 9.340522681s ago: executing program 4 (id=11675): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b1cda625ed92f6258c09e7958919d263fa42d5947105e036287a017156f19dfd16ae44850b41b6b3bfd86c7b175713752c300744882b4b3b5ee469623d9e4bc244805703018f2d8909b439f4945d709eeb3d022d89af50d7cbce8f23df9d7320de9d269d4a70a740be3079a66759237050b705c280db33210ccc1e28ab374ed461"], 0x50) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x63, 0x1, 0x0, 0x0, 0x0, 0xce, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xc}, 0x118002, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x100000000000, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x48}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001bc0)='ns/pid\x00') syz_open_procfs$namespace(0x0, &(0x7f0000001c00)='ns/pid_for_children\x00') perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r8}, &(0x7f0000000400), &(0x7f0000000440)=r8}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0xf83bb841d8c91030, 0x1, 0x0, r7}, @call={0x85, 0x0, 0x0, 0x61}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r6, r7, r8, r7, r5], &(0x7f0000000500)=[{0x1, 0x2, 0xf, 0x1}, {0x1, 0x4, 0x0, 0xc}], 0x10, 0x8}, 0x94) 9.322081351s ago: executing program 1 (id=11676): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000014006b0300224ed86e6c1d0002117ea6e070d6064e22000300000002250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000580)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, r1}, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91824fc60100005000a000200053582c137153e37000c068005", 0x29}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030023000b02d25a806f8c6394f91d24fc60040f03", 0x17}], 0x1}, 0x2404c000) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r5, &(0x7f0000000a00)}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) sendmsg$tipc(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="e9623dfe0f747a9bab1ccbda126d1d347f32978c0fca747cf4e1470f60d8eb0a11e419d1ccdb196b7523065612a6ecdb", 0x30}, {&(0x7f0000000b00)="9b11a80b974e60df4aa8901d6aa0b636089fc5d73337e44e3e6f85e35d8e171720df80bf7bc8cec8d22a71217601d0bf6a41d41817f396df2b01232ac5bcd29f9ec395ede7369b16bf75341485af98788703b3a606acc4209e79c41453aabf395d437222a3f6fe9b3e", 0x69}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) close(r7) r8 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000100)=@l2tp={0xa, 0x0, @remote, 0xc0fe}, 0x80, 0x0}, 0x4000040) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x12, 0x0, 0x37) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341218007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b70000000000090000000000000000001fa0000000000000950000000000000016fb8f26774e7385021c49887d1e47643b0fa04e2f5a30b27ab13f8c5d80208cbe2d091f88e24153799d61895bfae735a860b4180928b9b5e803fb41"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23) 9.269952463s ago: executing program 0 (id=11677): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x9}, 0x100904, 0x800000000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000018000095000a0000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x9, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x100e64, 0xc78, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7f}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) socket$kcm(0xa, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001900030002000600030000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbd, 0xbd, 0x8, [@enum={0x8, 0x3, 0x0, 0x6, 0x4, [{0xd, 0x6}, {0x7, 0xfffffffd}, {0x9, 0x8}]}, @volatile={0xd, 0x0, 0x0, 0x9, 0x5}, @enum64={0x3, 0x1, 0x0, 0x13, 0x0, 0xd, [{0xc, 0x0, 0xbf}]}, @datasec={0x10, 0x0, 0x0, 0xf, 0x3, [], "f6aae5"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x5}}, @float={0x6, 0x0, 0x0, 0x10, 0x10}, @datasec={0x10, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x9, 0xb}], "0e71"}, @var={0xa, 0x0, 0x0, 0xe, 0x3, 0x1}, @enum64={0xf, 0x1, 0x0, 0x13, 0x0, 0x0, [{0x3, 0xe8c2, 0x1000}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x30]}}, &(0x7f0000000980)=""/72, 0xe0, 0x48, 0x1, 0x6}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.027508469s ago: executing program 1 (id=11678): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x51, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000080) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x50) syz_clone(0x8000000, 0x0, 0x0, &(0x7f00000016c0), &(0x7f0000001700), 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x480c4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0x3, 0x4, 0x0, 0x0, 0x6, 0x20202, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x4}, 0x5010, 0x102, 0x9, 0x5, 0x8, 0x100, 0x889, 0x0, 0x200, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x15, 0x5, 0x0) 9.024411799s ago: executing program 4 (id=11679): perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa080, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x2, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x80}, 0x40002002) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.195625919s ago: executing program 2 (id=11681): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000016c0)={@cgroup=r0, r0, 0x2e}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@fwd={0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @typedef={0x1, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000300)=""/209, 0x4b, 0xd1, 0x2}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000000)=r3, 0x4a) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x9, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r7, r5, 0x0, r4}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) 8.193479579s ago: executing program 1 (id=11682): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2000000a, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xc73, 0x6, 0x2, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x104010, 0x1, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000000000000000000100000d000000000000000000000000020000000000"], 0x0, 0x4c}, 0x28) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x9, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xffffffffffffff74, 0x8000000000000001}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x800000, 0x0, 0x2009}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="93443f14c10900c600c2000020991d5f334d0b16bd0000004014414fe4b2c9b011db00320ef76ca8b490a3de4374678be8cafd436ce81560dad25ff0e1f0954010b5b644ebd5100357bd948935c77bc65b7d4aba5cb64af6cc56"], &(0x7f00000002c0)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x9, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x10, 0x4}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xac6, '\x00', 0x0, r1, 0x5, 0x2}, 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)) 5.913602675s ago: executing program 0 (id=11683): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000500000002000000"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000100000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r1}, 0xc) 5.881748936s ago: executing program 4 (id=11684): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/12], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r5, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000007910400000000000630a04ff000000009500000000eef224c2bff3b0d05d372c441a87e3000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100), 0x1001) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000000c0)={'veth1_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0x12b) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x80, 0x0}, 0x200000c0) sendmsg$kcm(r0, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x200, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) 5.819199497s ago: executing program 2 (id=11685): r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x2, 0xe, 0xe, 0x0, 0x7fc, 0x13398, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x95b, 0x2, @perf_config_ext={0x800, 0x4}, 0x900, 0x3, 0x71, 0x6, 0x9, 0xc, 0x1ccc, 0x0, 0xfffffff1, 0x0, 0x2}, 0xffffffffffffffff, 0x1000a, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x981b, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x108000, 0xd7, 0x0, 0x5, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41def1868b2ef7fb8d11c72b", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (rerun: 64) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r6}, 0x94) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x101001, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x200, 0x3, 0x8, 0x2, 0x4b9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async, rerun: 64) r9 = socket$kcm(0xa, 0x5, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r9, 0x29, 0x4a, 0x0, 0x2000000) ioctl$TUNSETFILTEREBPF(r8, 0x800454e1, &(0x7f0000000880)=r7) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x5, [@enum={0xb, 0x4, 0x0, 0x6, 0x4, [{0x4, 0x81}, {0xc, 0xa}, {0xe, 0x7}, {0x8, 0x1}]}, @const={0x10, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x61, 0x2e, 0x61]}}, &(0x7f0000000580)=""/55, 0x55, 0x37, 0x0, 0x6036, 0x10000}, 0x28) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00 \x00\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r12}, &(0x7f0000000280), &(0x7f0000000240)=r11}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f00000003c0)='GPL\x00', 0x1dc5, 0x0, 0x0, 0x41100, 0x10, '\x00', r6, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000600)=[r1, r12, r1, r1, r1, r1, r1], &(0x7f0000000640)=[{0x3, 0x4, 0xc}, {0x0, 0x4, 0x8, 0x6}, {0x4, 0x2, 0xa}, {0x1, 0x4, 0x5, 0x9}, {0x4, 0x1, 0x2, 0xb}, {0x2, 0x5, 0x0, 0xc}, {0x4, 0x3, 0x8, 0x53a7a80e4ccd4292}], 0x10, 0x5}, 0x94) 5.818612947s ago: executing program 1 (id=11686): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000014006b0300224ed86e6c1d0002117ea6e070d6064e22000300000002250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000580)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, r1}, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91824fc60100005000a000200053582c137153e37000c068005", 0x29}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030023000b02d25a806f8c6394f91d24fc60040f03", 0x17}], 0x1}, 0x2404c000) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r5, &(0x7f0000000a00)}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) sendmsg$tipc(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="e9623dfe0f747a9bab1ccbda126d1d347f32978c0fca747cf4e1470f60d8eb0a11e419d1ccdb196b7523065612a6ecdb", 0x30}, {&(0x7f0000000b00)="9b11a80b974e60df4aa8901d6aa0b636089fc5d73337e44e3e6f85e35d8e171720df80bf7bc8cec8d22a71217601d0bf6a41d41817f396df2b01232ac5bcd29f9ec395ede7369b16bf75341485af98788703b3a606acc4209e79c41453aabf395d437222a3f6fe9b3e", 0x69}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) close(r7) r8 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000100)=@l2tp={0xa, 0x0, @remote, 0xc0fe}, 0x80, 0x0}, 0x4000040) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x12, 0x0, 0x37) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341218007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b70000000000090000000000000000001fa0000000000000950000000000000016fb8f26774e7385021c49887d1e47643b0fa04e2f5a30b27ab13f8c5d80208cbe2d091f88e24153799d61895bfae735a860b4180928b9b5e803fb41"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23) 5.767627179s ago: executing program 0 (id=11687): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.70971184s ago: executing program 2 (id=11688): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (fail_nth: 3) 5.656204891s ago: executing program 0 (id=11689): r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001400)=""/232, 0xe8}], 0x4}, 0x2000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r1}, 0xc) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYBLOB="18080000c0000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef80"], 0xfe33) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004018) socket$kcm(0x10, 0x2, 0x4) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001400)=""/232, 0xe8}], 0x4}, 0x2000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r1}, 0xc) (async) socket$kcm(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYBLOB="18080000c0000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef80"], 0xfe33) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004018) (async) 5.344665299s ago: executing program 4 (id=11690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000020000000000000014085000000050000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000180)=0x80000001) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030611bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r5 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0x8, 0x1, 0x5e, 0x0, 0x3, 0x20a52, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x4, 0x800}, 0x10a010, 0xb, 0xfffffffb, 0x1, 0xfffffffffffffffc, 0xffff, 0x0, 0x0, 0xdc, 0x0, 0x7f80000000000}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f00000004c0)=@raw=[@alu={0x7, 0x0, 0x2, 0x0, 0x8, 0x18, 0x8}, @jmp={0x5, 0x1, 0x6, 0x4, 0x0, 0x2, 0x8}, @generic={0x5, 0x4, 0x5, 0x5, 0x9}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @exit, @jmp={0x5, 0x1, 0x2, 0x2, 0x4, 0xfffffffffffffff4, 0xfffffffffffffff9}], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x1, 0x10, 0xb}, {0x1, 0x3, 0xf, 0x4}, {0x2, 0x5, 0x4, 0x3}, {0x2, 0x3, 0x8, 0x2}], 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) 5.31236765s ago: executing program 1 (id=11691): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x9}, 0x100904, 0x800000000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000018000095000a0000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x9, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x100e64, 0xc78, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7f}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) socket$kcm(0xa, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001900030002000600030000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbd, 0xbd, 0x8, [@enum={0x8, 0x3, 0x0, 0x6, 0x4, [{0xd, 0x6}, {0x7, 0xfffffffd}, {0x9, 0x8}]}, @volatile={0xd, 0x0, 0x0, 0x9, 0x5}, @enum64={0x3, 0x1, 0x0, 0x13, 0x0, 0xd, [{0xc, 0x0, 0xbf}]}, @datasec={0x10, 0x0, 0x0, 0xf, 0x3, [], "f6aae5"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x5}}, @float={0x6, 0x0, 0x0, 0x10, 0x10}, @datasec={0x10, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x9, 0xb}], "0e71"}, @var={0xa, 0x0, 0x0, 0xe, 0x3, 0x1}, @enum64={0xf, 0x1, 0x0, 0x13, 0x0, 0x0, [{0x3, 0xe8c2, 0x1000}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x30]}}, &(0x7f0000000980)=""/72, 0xe0, 0x48, 0x1, 0x6}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.29968861s ago: executing program 2 (id=11692): perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa080, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x2, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x80}, 0x40002002) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 296.722453ms ago: executing program 4 (id=11693): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x9}, 0x100904, 0x800000000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000018000095000a0000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x9, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x100e64, 0xc78, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7f}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) socket$kcm(0xa, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001900030002000600030000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbd, 0xbd, 0x8, [@enum={0x8, 0x3, 0x0, 0x6, 0x4, [{0xd, 0x6}, {0x7, 0xfffffffd}, {0x9, 0x8}]}, @volatile={0xd, 0x0, 0x0, 0x9, 0x5}, @enum64={0x3, 0x1, 0x0, 0x13, 0x0, 0xd, [{0xc, 0x0, 0xbf}]}, @datasec={0x10, 0x0, 0x0, 0xf, 0x3, [], "f6aae5"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x5}}, @float={0x6, 0x0, 0x0, 0x10, 0x10}, @datasec={0x10, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x9, 0xb}], "0e71"}, @var={0xa, 0x0, 0x0, 0xe, 0x3, 0x1}, @enum64={0xf, 0x1, 0x0, 0x13, 0x0, 0x0, [{0x3, 0xe8c2, 0x1000}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x30]}}, &(0x7f0000000980)=""/72, 0xe0, 0x48, 0x1, 0x6}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 292.791263ms ago: executing program 0 (id=11701): socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000400), 0xf480aee79ef393f}, 0x8000, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x1, 0x49, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x4}, 0x283ab9bb45922541, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000f00)="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", 0x13b}, {0x0}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e010b4adb98889254740ac86a3c330836b8cc6764cf", 0xad}, {&(0x7f00000009c0)="a484d15488fb016289fa4e2b0b25648e7abf5a74ab5e75516b79103a9b0711dd70d5a141294998c249dda70370b7f076f3ec132111d4866784da73cd0f18993549e7b185584053fb7b48d2b271af8a14858473eb1edd82f3f4cd1150bee83bf4f624d8f873ec45fe60bb431221e35526a58313e39813e83be21f2834bbf6fc621f6d9894eb03b4c8690635c5ce509de10000000000000004d8d8550dc3763f779ad276b6f32236b8534ab6701184dac56e1af78c6013715d94b4d6cd59821581983f7e3b6c5369cda3f0bc763bdda2ec97d4542041be5568230b1a9b24e1d5efff9226066adcdfd53abc7078ff74aca53708cb4e62ed", 0xf6}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="76389e14050000007583ddd0569ba56a888e", 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x24, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0x40, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@map=r4, r5, 0x20, 0x30, r5, @void, @void, @void, @value=r7, r6}, 0x20) 238.729624ms ago: executing program 1 (id=11694): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2000000a, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xc73, 0x6, 0x2, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x104010, 0x1, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000000000000000000100000d000000000000000000000000020000000000"], 0x0, 0x4c}, 0x28) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x9, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xffffffffffffff74, 0x8000000000000001}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x800000, 0x0, 0x2009}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="93443f14c10900c600c2000020991d5f334d0b16bd0000004014414fe4b2c9b011db00320ef76ca8b490a3de4374678be8cafd436ce81560dad25ff0e1f0954010b5b644ebd5100357bd948935c77bc65b7d4aba5cb64af6cc56"], &(0x7f00000002c0)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x9, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x10, 0x4}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xac6, '\x00', 0x0, r1, 0x5, 0x2}, 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)) 218.730185ms ago: executing program 2 (id=11695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000500000002000000"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000100000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r1}, 0xc) 0s ago: executing program 2 (id=11696): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002c00)={r1, &(0x7f0000000700), 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) kernel console output (not intermixed with test programs): .738303][ T7747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3431.746406][ T7747] R13: 00007f0278c26038 R14: 00007f0278c25fa0 R15: 00007ffc74170048 [ 3431.754459][ T7747] [ 3431.928641][ T7752] FAULT_INJECTION: forcing a failure. [ 3431.928641][ T7752] name failslab, interval 1, probability 0, space 0, times 0 [ 3431.945986][ T7752] CPU: 1 PID: 7752 Comm: syz.1.11244 Not tainted syzkaller #0 [ 3431.953543][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3431.963646][ T7752] Call Trace: [ 3431.966981][ T7752] [ 3431.969962][ T7752] dump_stack_lvl+0x18c/0x250 [ 3431.974709][ T7752] ? show_regs_print_info+0x20/0x20 [ 3431.979957][ T7752] ? load_image+0x420/0x420 [ 3431.984525][ T7752] ? __lock_acquire+0x7d80/0x7d80 [ 3431.989617][ T7752] should_fail_ex+0x394/0x4c0 [ 3431.994345][ T7752] should_failslab+0x9/0x20 [ 3431.998907][ T7752] slab_pre_alloc_hook+0x59/0x300 [ 3432.003988][ T7752] ? bpf_test_init+0x9f/0x140 [ 3432.008728][ T7752] ? bpf_test_init+0x9f/0x140 [ 3432.013453][ T7752] __kmem_cache_alloc_node+0x53/0x250 [ 3432.018886][ T7752] ? bpf_test_init+0x9f/0x140 [ 3432.023615][ T7752] __kmalloc+0xa7/0x240 [ 3432.027833][ T7752] bpf_test_init+0x9f/0x140 [ 3432.032396][ T7752] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 3432.037823][ T7752] ? __lock_acquire+0x7d80/0x7d80 [ 3432.042910][ T7752] ? dev_put+0x80/0x80 [ 3432.047038][ T7752] ? dev_put+0x80/0x80 [ 3432.051156][ T7752] bpf_prog_test_run+0x31f/0x390 [ 3432.056143][ T7752] __sys_bpf+0x49d/0x890 [ 3432.060427][ T7752] ? bpf_link_show_fdinfo+0x390/0x390 [ 3432.065861][ T7752] ? lock_chain_count+0x20/0x20 [ 3432.070789][ T7752] __x64_sys_bpf+0x7c/0x90 [ 3432.075248][ T7752] do_syscall_64+0x55/0xb0 [ 3432.079717][ T7752] ? clear_bhb_loop+0x40/0x90 [ 3432.084435][ T7752] ? clear_bhb_loop+0x40/0x90 [ 3432.089148][ T7752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3432.095112][ T7752] RIP: 0033:0x7fcec059de99 [ 3432.099567][ T7752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3432.119216][ T7752] RSP: 002b:00007fcec147d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3432.127670][ T7752] RAX: ffffffffffffffda RBX: 00007fcec0825fa0 RCX: 00007fcec059de99 [ 3432.135780][ T7752] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 3432.143791][ T7752] RBP: 00007fcec147d090 R08: 0000000000000000 R09: 0000000000000000 [ 3432.151814][ T7752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3432.159822][ T7752] R13: 00007fcec0826038 R14: 00007fcec0825fa0 R15: 00007fffafd8c0e8 [ 3432.167871][ T7752] [ 3432.321520][ T7762] FAULT_INJECTION: forcing a failure. [ 3432.321520][ T7762] name failslab, interval 1, probability 0, space 0, times 0 [ 3432.335682][ T7762] CPU: 0 PID: 7762 Comm: syz.1.11248 Not tainted syzkaller #0 [ 3432.343218][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3432.353324][ T7762] Call Trace: [ 3432.356645][ T7762] [ 3432.359619][ T7762] dump_stack_lvl+0x18c/0x250 [ 3432.364360][ T7762] ? show_regs_print_info+0x20/0x20 [ 3432.369630][ T7762] ? load_image+0x420/0x420 [ 3432.374319][ T7762] ? __lock_acquire+0x7d80/0x7d80 [ 3432.379403][ T7762] ? verify_lock_unused+0x140/0x140 [ 3432.384661][ T7762] should_fail_ex+0x394/0x4c0 [ 3432.389411][ T7762] should_failslab+0x9/0x20 [ 3432.393975][ T7762] slab_pre_alloc_hook+0x59/0x300 [ 3432.399065][ T7762] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 3432.404671][ T7762] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 3432.410306][ T7762] __kmem_cache_alloc_node+0x53/0x250 [ 3432.415737][ T7762] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 3432.421340][ T7762] __kmalloc+0xa7/0x240 [ 3432.425578][ T7762] bpf_prog_test_run_skb+0x242/0x18f0 [ 3432.431025][ T7762] ? __fget_files+0x28/0x460 [ 3432.435676][ T7762] ? __fget_files+0x3fc/0x460 [ 3432.440422][ T7762] ? cpu_online+0x60/0x60 [ 3432.444817][ T7762] bpf_prog_test_run+0x31f/0x390 [ 3432.449824][ T7762] __sys_bpf+0x49d/0x890 [ 3432.454125][ T7762] ? bpf_link_show_fdinfo+0x390/0x390 [ 3432.459588][ T7762] ? lock_chain_count+0x20/0x20 [ 3432.464542][ T7762] __x64_sys_bpf+0x7c/0x90 [ 3432.469018][ T7762] do_syscall_64+0x55/0xb0 [ 3432.473502][ T7762] ? clear_bhb_loop+0x40/0x90 [ 3432.478234][ T7762] ? clear_bhb_loop+0x40/0x90 [ 3432.482960][ T7762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3432.488908][ T7762] RIP: 0033:0x7fcec059de99 [ 3432.493418][ T7762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3432.513076][ T7762] RSP: 002b:00007fcec147d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3432.521556][ T7762] RAX: ffffffffffffffda RBX: 00007fcec0825fa0 RCX: 00007fcec059de99 [ 3432.529604][ T7762] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 3432.537656][ T7762] RBP: 00007fcec147d090 R08: 0000000000000000 R09: 0000000000000000 [ 3432.545712][ T7762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3432.553730][ T7762] R13: 00007fcec0826038 R14: 00007fcec0825fa0 R15: 00007fffafd8c0e8 [ 3432.561776][ T7762] [ 3432.923267][ T7770] netlink: 'syz.2.11249': attribute type 10 has an invalid length. [ 3432.933989][ T7770] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11249'. [ 3435.205571][ T7781] FAULT_INJECTION: forcing a failure. [ 3435.205571][ T7781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3435.247556][ T7781] CPU: 1 PID: 7781 Comm: syz.1.11253 Not tainted syzkaller #0 [ 3435.255116][ T7781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3435.265231][ T7781] Call Trace: [ 3435.268558][ T7781] [ 3435.271531][ T7781] dump_stack_lvl+0x18c/0x250 [ 3435.276269][ T7781] ? show_regs_print_info+0x20/0x20 [ 3435.281520][ T7781] ? load_image+0x420/0x420 [ 3435.286084][ T7781] ? __lock_acquire+0x7d80/0x7d80 [ 3435.291174][ T7781] should_fail_ex+0x394/0x4c0 [ 3435.295913][ T7781] _copy_from_user+0x2f/0xe0 [ 3435.300561][ T7781] __copy_msghdr+0x388/0x560 [ 3435.305211][ T7781] ___sys_sendmsg+0x214/0x360 [ 3435.309945][ T7781] ? get_pid_task+0x20/0x1e0 [ 3435.314582][ T7781] ? __sys_sendmsg+0x2b0/0x2b0 [ 3435.319395][ T7781] ? __lock_acquire+0x7d80/0x7d80 [ 3435.324475][ T7781] __se_sys_sendmsg+0x1d0/0x2c0 [ 3435.329355][ T7781] ? __x64_sys_sendmsg+0x80/0x80 [ 3435.334341][ T7781] ? lockdep_hardirqs_on+0x98/0x150 [ 3435.339590][ T7781] do_syscall_64+0x55/0xb0 [ 3435.344044][ T7781] ? clear_bhb_loop+0x40/0x90 [ 3435.348758][ T7781] ? clear_bhb_loop+0x40/0x90 [ 3435.353465][ T7781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3435.359648][ T7781] RIP: 0033:0x7fcec059de99 [ 3435.364092][ T7781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3435.383720][ T7781] RSP: 002b:00007fcec147d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3435.392206][ T7781] RAX: ffffffffffffffda RBX: 00007fcec0825fa0 RCX: 00007fcec059de99 [ 3435.400206][ T7781] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 3435.408195][ T7781] RBP: 00007fcec147d090 R08: 0000000000000000 R09: 0000000000000000 [ 3435.416185][ T7781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3435.424204][ T7781] R13: 00007fcec0826038 R14: 00007fcec0825fa0 R15: 00007fffafd8c0e8 [ 3435.432235][ T7781] [ 3437.415884][ T7806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3437.425403][ T7806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3437.433623][ T7806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3437.449841][ T7806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3437.459315][ T7806] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3437.466804][ T7806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3437.719587][ T7804] chnl_net:caif_netlink_parms(): no params data found [ 3437.858516][ T7804] bridge0: port 1(bridge_slave_0) entered blocking state [ 3437.866001][ T7804] bridge0: port 1(bridge_slave_0) entered disabled state [ 3437.873454][ T7804] bridge_slave_0: entered allmulticast mode [ 3437.881552][ T7804] bridge_slave_0: entered promiscuous mode [ 3437.893736][ T7804] bridge0: port 2(bridge_slave_1) entered blocking state [ 3437.901422][ T7804] bridge0: port 2(bridge_slave_1) entered disabled state [ 3437.909167][ T7804] bridge_slave_1: entered allmulticast mode [ 3437.917838][ T7804] bridge_slave_1: entered promiscuous mode [ 3437.974807][ T7804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3438.007698][ T7804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3438.065515][ T7804] team0: Port device team_slave_0 added [ 3438.080577][ T7804] team0: Port device team_slave_1 added [ 3438.132499][ T7804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3438.146566][ T7804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3438.188474][ T7804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3438.207797][ T7804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3438.214797][ T7804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3438.253484][ T7804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3439.746339][ T7804] hsr_slave_0: entered promiscuous mode [ 3439.766544][ T7804] hsr_slave_1: entered promiscuous mode [ 3440.423155][ T3499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3440.572587][ T3499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3440.603203][ T7836] FAULT_INJECTION: forcing a failure. [ 3440.603203][ T7836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3440.616581][ T7836] CPU: 1 PID: 7836 Comm: syz.4.11270 Not tainted syzkaller #0 [ 3440.624103][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3440.634193][ T7836] Call Trace: [ 3440.637505][ T7836] [ 3440.640479][ T7836] dump_stack_lvl+0x18c/0x250 [ 3440.645209][ T7836] ? show_regs_print_info+0x20/0x20 [ 3440.650452][ T7836] ? load_image+0x420/0x420 [ 3440.655017][ T7836] ? __might_fault+0xaa/0x120 [ 3440.659749][ T7836] ? __lock_acquire+0x7d80/0x7d80 [ 3440.664824][ T7836] should_fail_ex+0x394/0x4c0 [ 3440.669541][ T7836] _copy_to_user+0x2f/0xa0 [ 3440.673998][ T7836] bpf_prog_test_run_raw_tp+0x4e2/0x680 [ 3440.679588][ T7836] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 3440.685085][ T7836] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 3440.690570][ T7836] bpf_prog_test_run+0x31f/0x390 [ 3440.695535][ T7836] __sys_bpf+0x49d/0x890 [ 3440.699826][ T7836] ? bpf_link_show_fdinfo+0x390/0x390 [ 3440.705354][ T7836] ? lock_chain_count+0x20/0x20 [ 3440.710329][ T7836] __x64_sys_bpf+0x7c/0x90 [ 3440.714772][ T7836] do_syscall_64+0x55/0xb0 [ 3440.719221][ T7836] ? clear_bhb_loop+0x40/0x90 [ 3440.723924][ T7836] ? clear_bhb_loop+0x40/0x90 [ 3440.728636][ T7836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3440.734560][ T7836] RIP: 0033:0x7fa6a059de99 [ 3440.739006][ T7836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3440.758646][ T7836] RSP: 002b:00007fa6a140c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3440.767099][ T7836] RAX: ffffffffffffffda RBX: 00007fa6a0825fa0 RCX: 00007fa6a059de99 [ 3440.775096][ T7836] RDX: 000000000000000c RSI: 0000200000000ac0 RDI: 000000000000000a [ 3440.783142][ T7836] RBP: 00007fa6a140c090 R08: 0000000000000000 R09: 0000000000000000 [ 3440.791152][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3440.799155][ T7836] R13: 00007fa6a0826038 R14: 00007fa6a0825fa0 R15: 00007fffcc580f88 [ 3440.807164][ T7836] [ 3440.972592][ T3499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3441.133322][ T3499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3441.747729][ T4343] Bluetooth: hci4: command tx timeout [ 3443.828003][ T4343] Bluetooth: hci4: command tx timeout [ 3445.001615][ T7859] netlink: 140 bytes leftover after parsing attributes in process `syz.2.11278'. [ 3445.385429][ T7872] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11279'. [ 3445.907688][ T4343] Bluetooth: hci4: command tx timeout [ 3447.987600][ T4343] Bluetooth: hci4: command tx timeout [ 3448.746555][ T7895] FAULT_INJECTION: forcing a failure. [ 3448.746555][ T7895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3448.798842][ T7895] CPU: 0 PID: 7895 Comm: syz.2.11284 Not tainted syzkaller #0 [ 3448.806398][ T7895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3448.816494][ T7895] Call Trace: [ 3448.819806][ T7895] [ 3448.822775][ T7895] dump_stack_lvl+0x18c/0x250 [ 3448.827498][ T7895] ? show_regs_print_info+0x20/0x20 [ 3448.832768][ T7895] ? load_image+0x420/0x420 [ 3448.837327][ T7895] ? __might_fault+0xaa/0x120 [ 3448.842036][ T7895] ? __lock_acquire+0x7d80/0x7d80 [ 3448.847095][ T7895] should_fail_ex+0x394/0x4c0 [ 3448.851814][ T7895] _copy_to_user+0x2f/0xa0 [ 3448.856265][ T7895] bpf_prog_test_run_raw_tp+0x4e2/0x680 [ 3448.861862][ T7895] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 3448.867450][ T7895] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 3448.872948][ T7895] bpf_prog_test_run+0x31f/0x390 [ 3448.877922][ T7895] __sys_bpf+0x49d/0x890 [ 3448.882194][ T7895] ? bpf_link_show_fdinfo+0x390/0x390 [ 3448.887604][ T7895] ? lock_chain_count+0x20/0x20 [ 3448.892494][ T7895] __x64_sys_bpf+0x7c/0x90 [ 3448.896938][ T7895] do_syscall_64+0x55/0xb0 [ 3448.901382][ T7895] ? clear_bhb_loop+0x40/0x90 [ 3448.906082][ T7895] ? clear_bhb_loop+0x40/0x90 [ 3448.911051][ T7895] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3448.916973][ T7895] RIP: 0033:0x7f525f19de99 [ 3448.921411][ T7895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3448.941042][ T7895] RSP: 002b:00007f5260081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3448.949487][ T7895] RAX: ffffffffffffffda RBX: 00007f525f425fa0 RCX: 00007f525f19de99 [ 3448.957507][ T7895] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 3448.965504][ T7895] RBP: 00007f5260081090 R08: 0000000000000000 R09: 0000000000000000 [ 3448.973504][ T7895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3448.981564][ T7895] R13: 00007f525f426038 R14: 00007f525f425fa0 R15: 00007ffda2457f18 [ 3448.989589][ T7895] [ 3449.247581][ T7804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3449.296899][ T7804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3450.008716][ T7804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3450.034828][ T7804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3450.451534][ T7925] syzkaller0: entered promiscuous mode [ 3450.457134][ T7925] syzkaller0: entered allmulticast mode [ 3450.958735][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.967857][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3452.654177][ T7940] netlink: 'syz.4.11295': attribute type 21 has an invalid length. [ 3452.664081][ T7940] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11295'. [ 3452.675535][ T7940] netlink: 'syz.4.11295': attribute type 4 has an invalid length. [ 3452.683622][ T7940] netlink: 'syz.4.11295': attribute type 3 has an invalid length. [ 3452.691966][ T7940] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11295'. [ 3452.707105][ T7942] netlink: 'syz.4.11295': attribute type 10 has an invalid length. [ 3452.717979][ T7942] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11295'. [ 3452.866223][ T7804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3452.915236][ T7804] 8021q: adding VLAN 0 to HW filter on device team0 [ 3453.084166][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state [ 3453.091420][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3453.166336][ T3499] hsr_slave_0: left promiscuous mode [ 3453.182504][ T3499] hsr_slave_1: left promiscuous mode [ 3453.227521][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3453.235014][ T3499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3453.255709][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3453.269391][ T3499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3453.278185][ T3499] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 3453.285462][ T3499] batman_adv: batadv0: Removing interface: virt_wifi0 [ 3453.332303][ T3499] veth1_macvtap: left promiscuous mode [ 3453.338637][ T3499] veth0_macvtap: left promiscuous mode [ 3453.344497][ T3499] veth1_vlan: left promiscuous mode [ 3453.351474][ T3499] veth0_vlan: left promiscuous mode [ 3454.252738][ T3499] team0 (unregistering): Port device team_slave_1 removed [ 3454.313468][ T3499] team0 (unregistering): Port device team_slave_0 removed [ 3454.364954][ T3499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3454.417012][ T3499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3454.727167][ T3499] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 3454.785796][ T3499] bond0 (unregistering): Released all slaves [ 3454.826759][ T7951] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.11299'. [ 3454.867075][ T7084] bridge0: port 2(bridge_slave_1) entered blocking state [ 3454.874330][ T7084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3455.210427][ T7969] netlink: 'syz.1.11305': attribute type 21 has an invalid length. [ 3455.219569][ T7969] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11305'. [ 3455.237598][ T7969] netlink: 'syz.1.11305': attribute type 4 has an invalid length. [ 3455.245761][ T7969] netlink: 'syz.1.11305': attribute type 3 has an invalid length. [ 3455.302187][ T7969] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11305'. [ 3455.383175][ T7969] netlink: 'syz.1.11305': attribute type 10 has an invalid length. [ 3455.411526][ T7969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11305'. [ 3455.655900][ T7804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3455.877759][ T7982] syzkaller0: entered promiscuous mode [ 3455.883448][ T7982] syzkaller0: entered allmulticast mode [ 3455.938516][ T7804] veth0_vlan: entered promiscuous mode [ 3455.975333][ T7804] veth1_vlan: entered promiscuous mode [ 3456.026769][ T7804] veth0_macvtap: entered promiscuous mode [ 3458.350607][ T7804] veth1_macvtap: entered promiscuous mode [ 3458.368393][ T7998] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11314'. [ 3458.392922][ T7998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3458.510777][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3458.538234][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.557731][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3458.574145][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.586048][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3458.621035][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.650901][ T7804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3458.702824][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3458.714112][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.724745][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3458.736555][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.752526][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3458.764018][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.795605][ T7804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3458.812667][ T8004] netlink: 'syz.2.11316': attribute type 21 has an invalid length. [ 3458.841223][ T8004] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11316'. [ 3458.885673][ T8004] netlink: 'syz.2.11316': attribute type 4 has an invalid length. [ 3458.920307][ T8004] netlink: 'syz.2.11316': attribute type 3 has an invalid length. [ 3458.937750][ T8004] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11316'. [ 3458.973430][ T7804] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3459.005952][ T7804] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3459.028059][ T7804] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3459.036922][ T7804] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3459.060301][ T8004] netlink: 'syz.2.11316': attribute type 10 has an invalid length. [ 3459.071907][ T8004] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11316'. [ 3459.324330][ T6773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3459.355499][ T6773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3459.718420][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3459.760435][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3460.303582][ T8031] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11325'. [ 3460.682212][ T8037] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11324'. [ 3460.766052][ T8037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3460.878481][ T8048] FAULT_INJECTION: forcing a failure. [ 3460.878481][ T8048] name failslab, interval 1, probability 0, space 0, times 0 [ 3460.914922][ T8048] CPU: 1 PID: 8048 Comm: syz.2.11328 Not tainted syzkaller #0 [ 3460.922475][ T8048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3460.932580][ T8048] Call Trace: [ 3460.935905][ T8048] [ 3460.938879][ T8048] dump_stack_lvl+0x18c/0x250 [ 3460.943651][ T8048] ? show_regs_print_info+0x20/0x20 [ 3460.948908][ T8048] ? load_image+0x420/0x420 [ 3460.953480][ T8048] ? __might_sleep+0xe0/0xe0 [ 3460.958136][ T8048] ? __lock_acquire+0x7d80/0x7d80 [ 3460.963224][ T8048] should_fail_ex+0x394/0x4c0 [ 3460.967961][ T8048] should_failslab+0x9/0x20 [ 3460.972520][ T8048] slab_pre_alloc_hook+0x59/0x300 [ 3460.977595][ T8048] ? __lock_acquire+0x7d80/0x7d80 [ 3460.982680][ T8048] kmem_cache_alloc_node+0x5e/0x310 [ 3460.987925][ T8048] ? __alloc_skb+0x103/0x2c0 [ 3460.992547][ T8048] __alloc_skb+0x103/0x2c0 [ 3460.997002][ T8048] netlink_sendmsg+0x66a/0xbf0 [ 3461.001804][ T8048] ? netlink_getsockopt+0x590/0x590 [ 3461.007081][ T8048] ? apparmor_socket_sendmsg+0x170/0x330 [ 3461.012742][ T8048] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3461.018072][ T8048] ? security_socket_sendmsg+0x80/0xa0 [ 3461.023613][ T8048] ? netlink_getsockopt+0x590/0x590 [ 3461.028841][ T8048] ____sys_sendmsg+0x61b/0x980 [ 3461.033645][ T8048] ? __asan_memset+0x22/0x40 [ 3461.038267][ T8048] ? __sys_sendmsg_sock+0x30/0x30 [ 3461.043318][ T8048] ? __import_iovec+0x5f2/0x850 [ 3461.048211][ T8048] ? import_iovec+0x73/0xa0 [ 3461.052757][ T8048] ___sys_sendmsg+0x2a6/0x360 [ 3461.057471][ T8048] ? get_pid_task+0x20/0x1e0 [ 3461.062106][ T8048] ? __sys_sendmsg+0x2b0/0x2b0 [ 3461.066931][ T8048] ? __lock_acquire+0x7d80/0x7d80 [ 3461.072006][ T8048] __se_sys_sendmsg+0x1d0/0x2c0 [ 3461.076893][ T8048] ? __x64_sys_sendmsg+0x80/0x80 [ 3461.081870][ T8048] ? lockdep_hardirqs_on+0x98/0x150 [ 3461.087097][ T8048] do_syscall_64+0x55/0xb0 [ 3461.091535][ T8048] ? clear_bhb_loop+0x40/0x90 [ 3461.096243][ T8048] ? clear_bhb_loop+0x40/0x90 [ 3461.100949][ T8048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3461.106870][ T8048] RIP: 0033:0x7f525f19de99 [ 3461.111309][ T8048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3461.130938][ T8048] RSP: 002b:00007f5260060028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3461.139402][ T8048] RAX: ffffffffffffffda RBX: 00007f525f426090 RCX: 00007f525f19de99 [ 3461.147399][ T8048] RDX: 0000000020004800 RSI: 0000200000000080 RDI: 0000000000000003 [ 3461.155487][ T8048] RBP: 00007f5260060090 R08: 0000000000000000 R09: 0000000000000000 [ 3461.163498][ T8048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3461.171494][ T8048] R13: 00007f525f426128 R14: 00007f525f426090 R15: 00007ffda2457f18 [ 3461.179501][ T8048] [ 3464.632901][ T8065] netlink: 'syz.2.11336': attribute type 21 has an invalid length. [ 3464.642653][ T8065] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11336'. [ 3464.653486][ T8069] virt_wifi0: entered promiscuous mode [ 3464.659951][ T8069] virt_wifi0: entered allmulticast mode [ 3464.890472][ T8086] FAULT_INJECTION: forcing a failure. [ 3464.890472][ T8086] name failslab, interval 1, probability 0, space 0, times 0 [ 3464.905788][ T8086] CPU: 0 PID: 8086 Comm: syz.1.11343 Not tainted syzkaller #0 [ 3464.913321][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3464.923429][ T8086] Call Trace: [ 3464.926751][ T8086] [ 3464.929726][ T8086] dump_stack_lvl+0x18c/0x250 [ 3464.934464][ T8086] ? show_regs_print_info+0x20/0x20 [ 3464.939712][ T8086] ? load_image+0x420/0x420 [ 3464.944267][ T8086] ? __might_sleep+0xe0/0xe0 [ 3464.948895][ T8086] ? __lock_acquire+0x7d80/0x7d80 [ 3464.953951][ T8086] should_fail_ex+0x394/0x4c0 [ 3464.958661][ T8086] should_failslab+0x9/0x20 [ 3464.963189][ T8086] slab_pre_alloc_hook+0x59/0x300 [ 3464.968249][ T8086] ? sock_kmalloc+0x96/0xf0 [ 3464.972783][ T8086] ? sock_kmalloc+0x96/0xf0 [ 3464.977316][ T8086] __kmem_cache_alloc_node+0x53/0x250 [ 3464.982734][ T8086] ? sock_kmalloc+0x96/0xf0 [ 3464.987261][ T8086] __kmalloc+0xa7/0x240 [ 3464.991457][ T8086] sock_kmalloc+0x96/0xf0 [ 3464.995818][ T8086] ____sys_sendmsg+0x1d4/0x980 [ 3465.000618][ T8086] ? __asan_memset+0x22/0x40 [ 3465.005238][ T8086] ? __sys_sendmsg_sock+0x30/0x30 [ 3465.010285][ T8086] ? __import_iovec+0x3fa/0x850 [ 3465.015173][ T8086] ? import_iovec+0x73/0xa0 [ 3465.019714][ T8086] ___sys_sendmsg+0x2a6/0x360 [ 3465.024421][ T8086] ? get_pid_task+0x20/0x1e0 [ 3465.029045][ T8086] ? __sys_sendmsg+0x2b0/0x2b0 [ 3465.033862][ T8086] ? __lock_acquire+0x7d80/0x7d80 [ 3465.038947][ T8086] __se_sys_sendmsg+0x1d0/0x2c0 [ 3465.043830][ T8086] ? __x64_sys_sendmsg+0x80/0x80 [ 3465.048811][ T8086] ? lockdep_hardirqs_on+0x98/0x150 [ 3465.054077][ T8086] do_syscall_64+0x55/0xb0 [ 3465.058519][ T8086] ? clear_bhb_loop+0x40/0x90 [ 3465.063222][ T8086] ? clear_bhb_loop+0x40/0x90 [ 3465.067931][ T8086] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3465.073854][ T8086] RIP: 0033:0x7fcec059de99 [ 3465.078293][ T8086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3465.097953][ T8086] RSP: 002b:00007fcec147d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3465.106390][ T8086] RAX: ffffffffffffffda RBX: 00007fcec0825fa0 RCX: 00007fcec059de99 [ 3465.114392][ T8086] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 3465.122388][ T8086] RBP: 00007fcec147d090 R08: 0000000000000000 R09: 0000000000000000 [ 3465.130381][ T8086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3465.138373][ T8086] R13: 00007fcec0826038 R14: 00007fcec0825fa0 R15: 00007fffafd8c0e8 [ 3465.146384][ T8086] [ 3465.211059][ T4343] Bluetooth: hci2: ISO packet for unknown connection handle 12 [ 3465.550364][ T8091] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11344'. [ 3465.652776][ T8091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3465.774609][ T8099] syzkaller0: entered promiscuous mode [ 3465.780242][ T8099] syzkaller0: entered allmulticast mode [ 3465.822675][ T8091] syz.0.11344 (8091) used greatest stack depth: 19432 bytes left [ 3466.141838][ T8105] FAULT_INJECTION: forcing a failure. [ 3466.141838][ T8105] name failslab, interval 1, probability 0, space 0, times 0 [ 3466.160005][ T8105] CPU: 0 PID: 8105 Comm: syz.0.11350 Not tainted syzkaller #0 [ 3466.167544][ T8105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3466.177659][ T8105] Call Trace: [ 3466.180980][ T8105] [ 3466.183950][ T8105] dump_stack_lvl+0x18c/0x250 [ 3466.188683][ T8105] ? show_regs_print_info+0x20/0x20 [ 3466.193933][ T8105] ? load_image+0x420/0x420 [ 3466.198486][ T8105] ? __might_sleep+0xe0/0xe0 [ 3466.203124][ T8105] ? __lock_acquire+0x7d80/0x7d80 [ 3466.208206][ T8105] should_fail_ex+0x394/0x4c0 [ 3466.212920][ T8105] should_failslab+0x9/0x20 [ 3466.217468][ T8105] slab_pre_alloc_hook+0x59/0x300 [ 3466.222543][ T8105] kmem_cache_alloc_node+0x5e/0x310 [ 3466.227787][ T8105] ? perf_event_alloc+0x146/0x2150 [ 3466.232938][ T8105] perf_event_alloc+0x146/0x2150 [ 3466.237913][ T8105] ? find_lively_task_by_vpid+0x19/0x290 [ 3466.243579][ T8105] ? find_lively_task_by_vpid+0x19/0x290 [ 3466.249253][ T8105] __se_sys_perf_event_open+0x740/0x1c60 [ 3466.254923][ T8105] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 3466.260671][ T8105] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 3466.266354][ T8105] ? lock_chain_count+0x20/0x20 [ 3466.271234][ T8105] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3466.277248][ T8105] ? lockdep_hardirqs_on+0x98/0x150 [ 3466.282476][ T8105] ? __x64_sys_perf_event_open+0x20/0xc0 [ 3466.288167][ T8105] do_syscall_64+0x55/0xb0 [ 3466.292605][ T8105] ? clear_bhb_loop+0x40/0x90 [ 3466.297306][ T8105] ? clear_bhb_loop+0x40/0x90 [ 3466.302019][ T8105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3466.307944][ T8105] RIP: 0033:0x7f620cf9de99 [ 3466.312400][ T8105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3466.332134][ T8105] RSP: 002b:00007f620debb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3466.340588][ T8105] RAX: ffffffffffffffda RBX: 00007f620d225fa0 RCX: 00007f620cf9de99 [ 3466.348638][ T8105] RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000200000000000 [ 3466.356632][ T8105] RBP: 00007f620debb090 R08: 0000000000000000 R09: 0000000000000000 [ 3466.364638][ T8105] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 3466.372657][ T8105] R13: 00007f620d226038 R14: 00007f620d225fa0 R15: 00007ffc1190e588 [ 3466.380687][ T8105] [ 3468.750450][ T8109] ipvlan1: entered promiscuous mode [ 3468.755742][ T8109] ipvlan1: entered allmulticast mode [ 3468.767624][ T8109] veth0_vlan: entered allmulticast mode [ 3468.786387][ T8116] ipvlan1: entered promiscuous mode [ 3468.791782][ T8116] ipvlan1: entered allmulticast mode [ 3468.797165][ T8116] veth0_vlan: entered allmulticast mode [ 3470.155514][ T8150] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11359'. [ 3470.291622][ T8150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3470.376617][ T8157] FAULT_INJECTION: forcing a failure. [ 3470.376617][ T8157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3470.454074][ T8157] CPU: 1 PID: 8157 Comm: syz.2.11364 Not tainted syzkaller #0 [ 3470.461625][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3470.471762][ T8157] Call Trace: [ 3470.475091][ T8157] [ 3470.478064][ T8157] dump_stack_lvl+0x18c/0x250 [ 3470.482809][ T8157] ? show_regs_print_info+0x20/0x20 [ 3470.488061][ T8157] ? load_image+0x420/0x420 [ 3470.492630][ T8157] ? __lock_acquire+0x7d80/0x7d80 [ 3470.497710][ T8157] ? snprintf+0xe9/0x140 [ 3470.502020][ T8157] should_fail_ex+0x394/0x4c0 [ 3470.506768][ T8157] _copy_to_user+0x2f/0xa0 [ 3470.511247][ T8157] simple_read_from_buffer+0xe7/0x150 [ 3470.516678][ T8157] proc_fail_nth_read+0x1e8/0x260 [ 3470.521774][ T8157] ? proc_fault_inject_write+0x360/0x360 [ 3470.527478][ T8157] ? fsnotify_perm+0x271/0x5e0 [ 3470.532306][ T8157] ? proc_fault_inject_write+0x360/0x360 [ 3470.538004][ T8157] vfs_read+0x298/0x990 [ 3470.542239][ T8157] ? kernel_read+0x1e0/0x1e0 [ 3470.546897][ T8157] ? __fget_files+0x28/0x460 [ 3470.551563][ T8157] ? __fget_files+0x3fc/0x460 [ 3470.556311][ T8157] ? __fdget_pos+0x2a3/0x330 [ 3470.560966][ T8157] ? ksys_read+0x74/0x260 [ 3470.565371][ T8157] ksys_read+0x151/0x260 [ 3470.569676][ T8157] ? vfs_write+0x9a0/0x9a0 [ 3470.574156][ T8157] ? lockdep_hardirqs_on+0x98/0x150 [ 3470.579428][ T8157] do_syscall_64+0x55/0xb0 [ 3470.583900][ T8157] ? clear_bhb_loop+0x40/0x90 [ 3470.588636][ T8157] ? clear_bhb_loop+0x40/0x90 [ 3470.593373][ T8157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3470.599327][ T8157] RIP: 0033:0x7f525f15e6ce [ 3470.603797][ T8157] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3470.623470][ T8157] RSP: 002b:00007f5260080fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3470.631942][ T8157] RAX: ffffffffffffffda RBX: 00007f52600816c0 RCX: 00007f525f15e6ce [ 3470.639971][ T8157] RDX: 000000000000000f RSI: 00007f52600810a0 RDI: 0000000000000005 [ 3470.647993][ T8157] RBP: 00007f5260081090 R08: 0000000000000000 R09: 0000000000000000 [ 3470.656017][ T8157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3470.664067][ T8157] R13: 00007f525f426038 R14: 00007f525f425fa0 R15: 00007ffda2457f18 [ 3470.672110][ T8157] [ 3471.339861][ T8168] netlink: 'syz.4.11368': attribute type 21 has an invalid length. [ 3471.357750][ T8168] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11368'. [ 3471.377920][ T8168] netlink: 'syz.4.11368': attribute type 4 has an invalid length. [ 3471.399362][ T8168] netlink: 'syz.4.11368': attribute type 3 has an invalid length. [ 3471.433821][ T8168] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11368'. [ 3471.506697][ T8168] netlink: 'syz.4.11368': attribute type 10 has an invalid length. [ 3471.523686][ T8168] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11368'. [ 3471.803658][ T8180] netlink: 'syz.2.11372': attribute type 21 has an invalid length. [ 3471.830329][ T8180] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11372'. [ 3471.861679][ T8180] netlink: 'syz.2.11372': attribute type 4 has an invalid length. [ 3471.885013][ T8180] netlink: 'syz.2.11372': attribute type 3 has an invalid length. [ 3471.926243][ T8180] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11372'. [ 3471.979967][ T8180] netlink: 'syz.2.11372': attribute type 10 has an invalid length. [ 3472.056687][ T8180] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11372'. [ 3472.088389][ T8180] virt_wifi0: left promiscuous mode [ 3472.105628][ T8180] virt_wifi0: left allmulticast mode [ 3472.333327][ T8191] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11375'. [ 3472.669614][ T8194] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11376'. [ 3472.905719][ T8200] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11380'. [ 3473.156524][ T8203] netlink: 'syz.2.11381': attribute type 21 has an invalid length. [ 3473.175875][ T8203] netlink: 'syz.2.11381': attribute type 4 has an invalid length. [ 3473.642695][ T8220] FAULT_INJECTION: forcing a failure. [ 3473.642695][ T8220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3473.721008][ T8220] CPU: 1 PID: 8220 Comm: syz.4.11387 Not tainted syzkaller #0 [ 3473.728564][ T8220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3473.738758][ T8220] Call Trace: [ 3473.742083][ T8220] [ 3473.745057][ T8220] dump_stack_lvl+0x18c/0x250 [ 3473.749803][ T8220] ? show_regs_print_info+0x20/0x20 [ 3473.755066][ T8220] ? load_image+0x420/0x420 [ 3473.759634][ T8220] ? __lock_acquire+0x7d80/0x7d80 [ 3473.764720][ T8220] ? snprintf+0xe9/0x140 [ 3473.769023][ T8220] should_fail_ex+0x394/0x4c0 [ 3473.773769][ T8220] _copy_to_user+0x2f/0xa0 [ 3473.778244][ T8220] simple_read_from_buffer+0xe7/0x150 [ 3473.783760][ T8220] proc_fail_nth_read+0x1e8/0x260 [ 3473.788840][ T8220] ? proc_fault_inject_write+0x360/0x360 [ 3473.794537][ T8220] ? fsnotify_perm+0x271/0x5e0 [ 3473.799357][ T8220] ? proc_fault_inject_write+0x360/0x360 [ 3473.805056][ T8220] vfs_read+0x298/0x990 [ 3473.809281][ T8220] ? kernel_read+0x1e0/0x1e0 [ 3473.813949][ T8220] ? __fget_files+0x28/0x460 [ 3473.818595][ T8220] ? __fget_files+0x3fc/0x460 [ 3473.823352][ T8220] ? __fdget_pos+0x2a3/0x330 [ 3473.828010][ T8220] ? ksys_read+0x74/0x260 [ 3473.832410][ T8220] ksys_read+0x151/0x260 [ 3473.836724][ T8220] ? vfs_write+0x9a0/0x9a0 [ 3473.841204][ T8220] ? lockdep_hardirqs_on+0x98/0x150 [ 3473.846480][ T8220] do_syscall_64+0x55/0xb0 [ 3473.850948][ T8220] ? clear_bhb_loop+0x40/0x90 [ 3473.855685][ T8220] ? clear_bhb_loop+0x40/0x90 [ 3473.860416][ T8220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3473.866380][ T8220] RIP: 0033:0x7fa6a055e6ce [ 3473.870857][ T8220] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3473.890516][ T8220] RSP: 002b:00007fa6a140bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3473.898986][ T8220] RAX: ffffffffffffffda RBX: 00007fa6a140c6c0 RCX: 00007fa6a055e6ce [ 3473.907005][ T8220] RDX: 000000000000000f RSI: 00007fa6a140c0a0 RDI: 0000000000000004 [ 3473.915117][ T8220] RBP: 00007fa6a140c090 R08: 0000000000000000 R09: 0000000000000000 [ 3473.923144][ T8220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3473.931158][ T8220] R13: 00007fa6a0826038 R14: 00007fa6a0825fa0 R15: 00007fffcc580f88 [ 3473.939204][ T8220] [ 3474.498502][ T8229] FAULT_INJECTION: forcing a failure. [ 3474.498502][ T8229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3474.518527][ T8229] CPU: 1 PID: 8229 Comm: syz.0.11394 Not tainted syzkaller #0 [ 3474.526067][ T8229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3474.536173][ T8229] Call Trace: [ 3474.539496][ T8229] [ 3474.542471][ T8229] dump_stack_lvl+0x18c/0x250 [ 3474.547204][ T8229] ? show_regs_print_info+0x20/0x20 [ 3474.552463][ T8229] ? load_image+0x420/0x420 [ 3474.557033][ T8229] ? __lock_acquire+0x7d80/0x7d80 [ 3474.562120][ T8229] should_fail_ex+0x394/0x4c0 [ 3474.566855][ T8229] _copy_from_user+0x2f/0xe0 [ 3474.571502][ T8229] __copy_msghdr+0x388/0x560 [ 3474.576184][ T8229] ___sys_sendmsg+0x214/0x360 [ 3474.580914][ T8229] ? get_pid_task+0x20/0x1e0 [ 3474.585573][ T8229] ? __sys_sendmsg+0x2b0/0x2b0 [ 3474.590407][ T8229] ? __lock_acquire+0x7d80/0x7d80 [ 3474.595504][ T8229] __se_sys_sendmsg+0x1d0/0x2c0 [ 3474.600401][ T8229] ? __x64_sys_sendmsg+0x80/0x80 [ 3474.605407][ T8229] ? lockdep_hardirqs_on+0x98/0x150 [ 3474.610660][ T8229] do_syscall_64+0x55/0xb0 [ 3474.615129][ T8229] ? clear_bhb_loop+0x40/0x90 [ 3474.619853][ T8229] ? clear_bhb_loop+0x40/0x90 [ 3474.624594][ T8229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3474.630547][ T8229] RIP: 0033:0x7f620cf9de99 [ 3474.635015][ T8229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3474.654678][ T8229] RSP: 002b:00007f620debb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3474.663155][ T8229] RAX: ffffffffffffffda RBX: 00007f620d225fa0 RCX: 00007f620cf9de99 [ 3474.671174][ T8229] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000003 [ 3474.679180][ T8229] RBP: 00007f620debb090 R08: 0000000000000000 R09: 0000000000000000 [ 3474.687180][ T8229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3474.695183][ T8229] R13: 00007f620d226038 R14: 00007f620d225fa0 R15: 00007ffc1190e588 [ 3474.703193][ T8229] [ 3475.613090][ T8256] __nla_validate_parse: 6 callbacks suppressed [ 3475.613142][ T8256] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11402'. [ 3475.653675][ T8256] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11402'. [ 3475.704856][ T8262] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11403'. [ 3475.728398][ T8256] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11402'. [ 3475.758729][ T8263] FAULT_INJECTION: forcing a failure. [ 3475.758729][ T8263] name failslab, interval 1, probability 0, space 0, times 0 [ 3475.830276][ T8263] CPU: 0 PID: 8263 Comm: syz.2.11404 Not tainted syzkaller #0 [ 3475.837836][ T8263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3475.847940][ T8263] Call Trace: [ 3475.851265][ T8263] [ 3475.854246][ T8263] dump_stack_lvl+0x18c/0x250 [ 3475.858990][ T8263] ? show_regs_print_info+0x20/0x20 [ 3475.864252][ T8263] ? load_image+0x420/0x420 [ 3475.868823][ T8263] ? __lock_acquire+0x7d80/0x7d80 [ 3475.873906][ T8263] ? verify_lock_unused+0x140/0x140 [ 3475.879187][ T8263] should_fail_ex+0x394/0x4c0 [ 3475.883943][ T8263] should_failslab+0x9/0x20 [ 3475.888502][ T8263] slab_pre_alloc_hook+0x59/0x300 [ 3475.893603][ T8263] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 3475.899218][ T8263] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 3475.904830][ T8263] __kmem_cache_alloc_node+0x53/0x250 [ 3475.910289][ T8263] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 3475.915888][ T8263] __kmalloc+0xa7/0x240 [ 3475.920112][ T8263] bpf_prog_test_run_skb+0x242/0x18f0 [ 3475.925551][ T8263] ? __fget_files+0x28/0x460 [ 3475.930199][ T8263] ? __fget_files+0x3fc/0x460 [ 3475.934944][ T8263] ? cpu_online+0x60/0x60 [ 3475.939325][ T8263] bpf_prog_test_run+0x31f/0x390 [ 3475.944334][ T8263] __sys_bpf+0x49d/0x890 [ 3475.948636][ T8263] ? bpf_link_show_fdinfo+0x390/0x390 [ 3475.954075][ T8263] ? lock_chain_count+0x20/0x20 [ 3475.958993][ T8263] __x64_sys_bpf+0x7c/0x90 [ 3475.963462][ T8263] do_syscall_64+0x55/0xb0 [ 3475.967938][ T8263] ? clear_bhb_loop+0x40/0x90 [ 3475.972688][ T8263] ? clear_bhb_loop+0x40/0x90 [ 3475.977442][ T8263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3475.983404][ T8263] RIP: 0033:0x7f525f19de99 [ 3475.987880][ T8263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3476.007576][ T8263] RSP: 002b:00007f5260081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3476.016057][ T8263] RAX: ffffffffffffffda RBX: 00007f525f425fa0 RCX: 00007f525f19de99 [ 3476.024088][ T8263] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 3476.032120][ T8263] RBP: 00007f5260081090 R08: 0000000000000000 R09: 0000000000000000 [ 3476.040153][ T8263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3476.048173][ T8263] R13: 00007f525f426038 R14: 00007f525f425fa0 R15: 00007ffda2457f18 [ 3476.056211][ T8263] [ 3476.235081][ T8256] batman_adv: batadv0: Adding interface: virt_wifi0 [ 3476.289092][ T8256] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3476.378033][ T8256] batman_adv: batadv0: Interface activated: virt_wifi0 [ 3476.659204][ T8279] FAULT_INJECTION: forcing a failure. [ 3476.659204][ T8279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3476.687315][ T8279] CPU: 0 PID: 8279 Comm: syz.1.11412 Not tainted syzkaller #0 [ 3476.694854][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3476.704960][ T8279] Call Trace: [ 3476.708278][ T8279] [ 3476.711250][ T8279] dump_stack_lvl+0x18c/0x250 [ 3476.715982][ T8279] ? show_regs_print_info+0x20/0x20 [ 3476.721238][ T8279] ? load_image+0x420/0x420 [ 3476.725807][ T8279] ? __lock_acquire+0x7d80/0x7d80 [ 3476.730890][ T8279] should_fail_ex+0x394/0x4c0 [ 3476.735629][ T8279] _copy_from_user+0x2f/0xe0 [ 3476.740262][ T8279] __copy_msghdr+0x388/0x560 [ 3476.744903][ T8279] ___sys_sendmsg+0x214/0x360 [ 3476.749632][ T8279] ? get_pid_task+0x20/0x1e0 [ 3476.754375][ T8279] ? __sys_sendmsg+0x2b0/0x2b0 [ 3476.759213][ T8279] ? __lock_acquire+0x7d80/0x7d80 [ 3476.764441][ T8279] __se_sys_sendmsg+0x1d0/0x2c0 [ 3476.769354][ T8279] ? __x64_sys_sendmsg+0x80/0x80 [ 3476.774449][ T8279] ? lockdep_hardirqs_on+0x98/0x150 [ 3476.779709][ T8279] do_syscall_64+0x55/0xb0 [ 3476.784169][ T8279] ? clear_bhb_loop+0x40/0x90 [ 3476.788909][ T8279] ? clear_bhb_loop+0x40/0x90 [ 3476.793629][ T8279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3476.799554][ T8279] RIP: 0033:0x7fcec059de99 [ 3476.803999][ T8279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3476.823646][ T8279] RSP: 002b:00007fcec147d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3476.832103][ T8279] RAX: ffffffffffffffda RBX: 00007fcec0825fa0 RCX: 00007fcec059de99 [ 3476.840102][ T8279] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 3476.848109][ T8279] RBP: 00007fcec147d090 R08: 0000000000000000 R09: 0000000000000000 [ 3476.856151][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3476.864152][ T8279] R13: 00007fcec0826038 R14: 00007fcec0825fa0 R15: 00007fffafd8c0e8 [ 3476.872164][ T8279] [ 3477.404477][ T8289] syzkaller0: entered promiscuous mode [ 3477.426873][ T8289] syzkaller0: entered allmulticast mode [ 3477.480906][ T8281] netlink: 148 bytes leftover after parsing attributes in process `syz.2.11413'. [ 3477.770315][ T8300] FAULT_INJECTION: forcing a failure. [ 3477.770315][ T8300] name failslab, interval 1, probability 0, space 0, times 0 [ 3477.794486][ T8300] CPU: 0 PID: 8300 Comm: syz.0.11420 Not tainted syzkaller #0 [ 3477.802084][ T8300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3477.812180][ T8300] Call Trace: [ 3477.815496][ T8300] [ 3477.818509][ T8300] dump_stack_lvl+0x18c/0x250 [ 3477.823242][ T8300] ? show_regs_print_info+0x20/0x20 [ 3477.828478][ T8300] ? load_image+0x420/0x420 [ 3477.833053][ T8300] ? __might_sleep+0xe0/0xe0 [ 3477.837694][ T8300] ? __lock_acquire+0x7d80/0x7d80 [ 3477.842757][ T8300] should_fail_ex+0x394/0x4c0 [ 3477.847482][ T8300] should_failslab+0x9/0x20 [ 3477.852040][ T8300] slab_pre_alloc_hook+0x59/0x300 [ 3477.857103][ T8300] ? __lock_acquire+0x7d80/0x7d80 [ 3477.862198][ T8300] kmem_cache_alloc_node+0x5e/0x310 [ 3477.867448][ T8300] ? __alloc_skb+0x103/0x2c0 [ 3477.872077][ T8300] __alloc_skb+0x103/0x2c0 [ 3477.876565][ T8300] netlink_sendmsg+0x66a/0xbf0 [ 3477.881370][ T8300] ? netlink_getsockopt+0x590/0x590 [ 3477.886633][ T8300] ? apparmor_socket_sendmsg+0x8e/0x330 [ 3477.892217][ T8300] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3477.897542][ T8300] ? security_socket_sendmsg+0x80/0xa0 [ 3477.903033][ T8300] ? netlink_getsockopt+0x590/0x590 [ 3477.908267][ T8300] ____sys_sendmsg+0x61b/0x980 [ 3477.913069][ T8300] ? __asan_memset+0x22/0x40 [ 3477.917716][ T8300] ? __sys_sendmsg_sock+0x30/0x30 [ 3477.922777][ T8300] ? __import_iovec+0x5f2/0x850 [ 3477.927676][ T8300] ? import_iovec+0x73/0xa0 [ 3477.932209][ T8300] ___sys_sendmsg+0x2a6/0x360 [ 3477.936925][ T8300] ? __sys_sendmsg+0x2b0/0x2b0 [ 3477.941741][ T8300] ? trace_call_bpf+0xc3/0x6c0 [ 3477.946566][ T8300] __se_sys_sendmsg+0x1d0/0x2c0 [ 3477.951447][ T8300] ? perf_trace_preemptirq_template+0x269/0x330 [ 3477.957744][ T8300] ? __x64_sys_sendmsg+0x80/0x80 [ 3477.962723][ T8300] ? lockdep_hardirqs_on+0x98/0x150 [ 3477.967952][ T8300] do_syscall_64+0x55/0xb0 [ 3477.972393][ T8300] ? clear_bhb_loop+0x40/0x90 [ 3477.977096][ T8300] ? clear_bhb_loop+0x40/0x90 [ 3477.981811][ T8300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3477.987735][ T8300] RIP: 0033:0x7f620cf9de99 [ 3477.992182][ T8300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3478.011819][ T8300] RSP: 002b:00007f620debb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3478.020289][ T8300] RAX: ffffffffffffffda RBX: 00007f620d225fa0 RCX: 00007f620cf9de99 [ 3478.028311][ T8300] RDX: ff0f000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 3478.036329][ T8300] RBP: 00007f620debb090 R08: 0000000000000000 R09: 0000000000000000 [ 3478.044344][ T8300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3478.052363][ T8300] R13: 00007f620d226038 R14: 00007f620d225fa0 R15: 00007ffc1190e588 [ 3478.060393][ T8300] [ 3478.248237][ T8307] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.11422'. [ 3480.424837][ T8298] IPv6: NLM_F_CREATE should be specified when creating new route [ 3480.432891][ T8308] validate_nla: 12 callbacks suppressed [ 3480.432907][ T8308] netlink: 'syz.2.11430': attribute type 21 has an invalid length. [ 3480.447402][ T8308] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11430'. [ 3480.456628][ T8308] netlink: 'syz.2.11430': attribute type 4 has an invalid length. [ 3480.470040][ T8308] netlink: 'syz.2.11430': attribute type 3 has an invalid length. [ 3480.482698][ T8308] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11430'. [ 3480.528051][ T8310] netlink: 'syz.2.11430': attribute type 10 has an invalid length. [ 3480.536108][ T8310] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11430'. [ 3480.737242][ T8313] netlink: 'syz.4.11423': attribute type 21 has an invalid length. [ 3480.747875][ T8313] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11423'. [ 3480.775728][ T8313] netlink: 'syz.4.11423': attribute type 4 has an invalid length. [ 3480.803877][ T8313] netlink: 'syz.4.11423': attribute type 3 has an invalid length. [ 3480.825158][ T8313] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11423'. [ 3480.839405][ T8324] netlink: 'syz.4.11423': attribute type 10 has an invalid length. [ 3480.853850][ T8324] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11423'. [ 3481.469526][ T8327] FAULT_INJECTION: forcing a failure. [ 3481.469526][ T8327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3481.552735][ T8327] CPU: 1 PID: 8327 Comm: syz.1.11427 Not tainted syzkaller #0 [ 3481.560372][ T8327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3481.570483][ T8327] Call Trace: [ 3481.573809][ T8327] [ 3481.576831][ T8327] dump_stack_lvl+0x18c/0x250 [ 3481.581568][ T8327] ? show_regs_print_info+0x20/0x20 [ 3481.586825][ T8327] ? load_image+0x420/0x420 [ 3481.591391][ T8327] ? __lock_acquire+0x7d80/0x7d80 [ 3481.596461][ T8327] ? snprintf+0xe9/0x140 [ 3481.600805][ T8327] should_fail_ex+0x394/0x4c0 [ 3481.605554][ T8327] _copy_to_user+0x2f/0xa0 [ 3481.610028][ T8327] simple_read_from_buffer+0xe7/0x150 [ 3481.615461][ T8327] proc_fail_nth_read+0x1e8/0x260 [ 3481.620551][ T8327] ? proc_fault_inject_write+0x360/0x360 [ 3481.626251][ T8327] ? fsnotify_perm+0x271/0x5e0 [ 3481.631072][ T8327] ? proc_fault_inject_write+0x360/0x360 [ 3481.636764][ T8327] vfs_read+0x298/0x990 [ 3481.640983][ T8327] ? kernel_read+0x1e0/0x1e0 [ 3481.645631][ T8327] ? __fget_files+0x28/0x460 [ 3481.650293][ T8327] ? __fget_files+0x3fc/0x460 [ 3481.655069][ T8327] ? __fdget_pos+0x2a3/0x330 [ 3481.659727][ T8327] ? ksys_read+0x74/0x260 [ 3481.664125][ T8327] ksys_read+0x151/0x260 [ 3481.668525][ T8327] ? vfs_write+0x9a0/0x9a0 [ 3481.673030][ T8327] ? lockdep_hardirqs_on+0x98/0x150 [ 3481.678292][ T8327] do_syscall_64+0x55/0xb0 [ 3481.682747][ T8327] ? clear_bhb_loop+0x40/0x90 [ 3481.687468][ T8327] ? clear_bhb_loop+0x40/0x90 [ 3481.692197][ T8327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3481.698130][ T8327] RIP: 0033:0x7fcec055e6ce [ 3481.702622][ T8327] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3481.722283][ T8327] RSP: 002b:00007fcec147cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3481.730750][ T8327] RAX: ffffffffffffffda RBX: 00007fcec147d6c0 RCX: 00007fcec055e6ce [ 3481.738772][ T8327] RDX: 000000000000000f RSI: 00007fcec147d0a0 RDI: 0000000000000006 [ 3481.746792][ T8327] RBP: 00007fcec147d090 R08: 0000000000000000 R09: 0000000000000000 [ 3481.754818][ T8327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3481.762831][ T8327] R13: 00007fcec0826038 R14: 00007fcec0825fa0 R15: 00007fffafd8c0e8 [ 3481.770872][ T8327] [ 3482.462895][ T8345] netlink: 'syz.0.11435': attribute type 21 has an invalid length. [ 3482.471636][ T8345] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11435'. [ 3482.491058][ T8345] netlink: 'syz.0.11435': attribute type 4 has an invalid length. [ 3482.505735][ T8345] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11435'. [ 3482.536528][ T8345] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11435'. [ 3485.295246][ T8351] FAULT_INJECTION: forcing a failure. [ 3485.295246][ T8351] name failslab, interval 1, probability 0, space 0, times 0 [ 3485.313704][ T8351] CPU: 0 PID: 8351 Comm: syz.0.11439 Not tainted syzkaller #0 [ 3485.321297][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3485.331407][ T8351] Call Trace: [ 3485.334727][ T8351] [ 3485.337711][ T8351] dump_stack_lvl+0x18c/0x250 [ 3485.342442][ T8351] ? show_regs_print_info+0x20/0x20 [ 3485.347718][ T8351] ? load_image+0x420/0x420 [ 3485.352280][ T8351] ? __might_sleep+0xe0/0xe0 [ 3485.356907][ T8351] ? __lock_acquire+0x7d80/0x7d80 [ 3485.361963][ T8351] should_fail_ex+0x394/0x4c0 [ 3485.366680][ T8351] should_failslab+0x9/0x20 [ 3485.371219][ T8351] slab_pre_alloc_hook+0x59/0x300 [ 3485.376342][ T8351] ? tomoyo_encode+0x2ad/0x570 [ 3485.381149][ T8351] ? tomoyo_encode+0x2ad/0x570 [ 3485.385956][ T8351] __kmem_cache_alloc_node+0x53/0x250 [ 3485.391381][ T8351] ? tomoyo_encode+0x2ad/0x570 [ 3485.396184][ T8351] __kmalloc+0xa7/0x240 [ 3485.400465][ T8351] tomoyo_encode+0x2ad/0x570 [ 3485.405123][ T8351] tomoyo_realpath_from_path+0x57c/0x5c0 [ 3485.410805][ T8351] ? tomoyo_domain+0xd6/0x120 [ 3485.415532][ T8351] tomoyo_path_number_perm+0x248/0x5e0 [ 3485.421044][ T8351] ? tomoyo_path_number_perm+0x217/0x5e0 [ 3485.426729][ T8351] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3485.432239][ T8351] ? ksys_write+0x1d2/0x260 [ 3485.436827][ T8351] ? __fget_files+0x28/0x460 [ 3485.441474][ T8351] security_file_ioctl+0x70/0xa0 [ 3485.446464][ T8351] __se_sys_ioctl+0x48/0x170 [ 3485.451100][ T8351] do_syscall_64+0x55/0xb0 [ 3485.455552][ T8351] ? clear_bhb_loop+0x40/0x90 [ 3485.460258][ T8351] ? clear_bhb_loop+0x40/0x90 [ 3485.464974][ T8351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3485.470900][ T8351] RIP: 0033:0x7f620cf9de99 [ 3485.475350][ T8351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3485.494989][ T8351] RSP: 002b:00007f620debb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3485.503436][ T8351] RAX: ffffffffffffffda RBX: 00007f620d225fa0 RCX: 00007f620cf9de99 [ 3485.511433][ T8351] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 3485.519436][ T8351] RBP: 00007f620debb090 R08: 0000000000000000 R09: 0000000000000000 [ 3485.527439][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3485.535440][ T8351] R13: 00007f620d226038 R14: 00007f620d225fa0 R15: 00007ffc1190e588 [ 3485.543479][ T8351] [ 3485.568855][ T8351] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3485.690249][ T8353] syzkaller0: entered promiscuous mode [ 3485.695811][ T8353] syzkaller0: entered allmulticast mode [ 3489.034532][ T8378] FAULT_INJECTION: forcing a failure. [ 3489.034532][ T8378] name failslab, interval 1, probability 0, space 0, times 0 [ 3489.047878][ T8378] CPU: 0 PID: 8378 Comm: syz.4.11445 Not tainted syzkaller #0 [ 3489.055442][ T8378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3489.065548][ T8378] Call Trace: [ 3489.068876][ T8378] [ 3489.071838][ T8378] dump_stack_lvl+0x18c/0x250 [ 3489.076559][ T8378] ? show_regs_print_info+0x20/0x20 [ 3489.081802][ T8378] ? load_image+0x420/0x420 [ 3489.086337][ T8378] ? __might_sleep+0xe0/0xe0 [ 3489.090956][ T8378] ? __lock_acquire+0x7d80/0x7d80 [ 3489.096017][ T8378] should_fail_ex+0x394/0x4c0 [ 3489.100735][ T8378] should_failslab+0x9/0x20 [ 3489.105271][ T8378] slab_pre_alloc_hook+0x59/0x300 [ 3489.110326][ T8378] ? tomoyo_encode+0x2ad/0x570 [ 3489.115130][ T8378] ? tomoyo_encode+0x2ad/0x570 [ 3489.119927][ T8378] __kmem_cache_alloc_node+0x53/0x250 [ 3489.125338][ T8378] ? tomoyo_encode+0x2ad/0x570 [ 3489.130134][ T8378] __kmalloc+0xa7/0x240 [ 3489.134333][ T8378] tomoyo_encode+0x2ad/0x570 [ 3489.138963][ T8378] tomoyo_realpath_from_path+0x57c/0x5c0 [ 3489.144632][ T8378] ? tomoyo_domain+0xd6/0x120 [ 3489.149351][ T8378] tomoyo_path_number_perm+0x248/0x5e0 [ 3489.154865][ T8378] ? tomoyo_path_number_perm+0x217/0x5e0 [ 3489.160534][ T8378] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3489.166028][ T8378] ? ksys_write+0x1d2/0x260 [ 3489.170588][ T8378] ? __fget_files+0x28/0x460 [ 3489.175223][ T8378] security_file_ioctl+0x70/0xa0 [ 3489.180232][ T8378] __se_sys_ioctl+0x48/0x170 [ 3489.184863][ T8378] do_syscall_64+0x55/0xb0 [ 3489.189307][ T8378] ? clear_bhb_loop+0x40/0x90 [ 3489.194006][ T8378] ? clear_bhb_loop+0x40/0x90 [ 3489.198714][ T8378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3489.204638][ T8378] RIP: 0033:0x7fa6a059de99 [ 3489.209081][ T8378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3489.228716][ T8378] RSP: 002b:00007fa6a140c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3489.237154][ T8378] RAX: ffffffffffffffda RBX: 00007fa6a0825fa0 RCX: 00007fa6a059de99 [ 3489.245150][ T8378] RDX: 0000200000000080 RSI: 00000000000089fd RDI: 0000000000000004 [ 3489.253150][ T8378] RBP: 00007fa6a140c090 R08: 0000000000000000 R09: 0000000000000000 [ 3489.261153][ T8378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3489.269150][ T8378] R13: 00007fa6a0826038 R14: 00007fa6a0825fa0 R15: 00007fffcc580f88 [ 3489.277158][ T8378] [ 3489.289334][ T8378] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3490.974874][ T8358] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11440'. [ 3490.984226][ T8358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3491.371998][ T8384] validate_nla: 4 callbacks suppressed [ 3491.372063][ T8384] netlink: 'syz.4.11447': attribute type 21 has an invalid length. [ 3491.392772][ T8384] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11447'. [ 3491.411842][ T8384] netlink: 'syz.4.11447': attribute type 4 has an invalid length. [ 3491.430963][ T8384] netlink: 'syz.4.11447': attribute type 3 has an invalid length. [ 3491.468744][ T8384] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11447'. [ 3491.495796][ T8386] netlink: 'syz.4.11447': attribute type 10 has an invalid length. [ 3491.523618][ T8386] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11447'. [ 3492.458380][ T8404] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.11450'. [ 3494.857564][ T8421] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11455'. [ 3494.887974][ T8421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3495.322248][ T8426] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.11459'. [ 3495.333558][ T8426] netlink: 'syz.2.11459': attribute type 1 has an invalid length. [ 3495.512264][ T8428] FAULT_INJECTION: forcing a failure. [ 3495.512264][ T8428] name failslab, interval 1, probability 0, space 0, times 0 [ 3495.525539][ T8428] CPU: 0 PID: 8428 Comm: syz.0.11460 Not tainted syzkaller #0 [ 3495.533083][ T8428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3495.543184][ T8428] Call Trace: [ 3495.546555][ T8428] [ 3495.549540][ T8428] dump_stack_lvl+0x18c/0x250 [ 3495.554279][ T8428] ? show_regs_print_info+0x20/0x20 [ 3495.559529][ T8428] ? load_image+0x420/0x420 [ 3495.564108][ T8428] ? __lock_acquire+0x7d80/0x7d80 [ 3495.569185][ T8428] ? verify_lock_unused+0x140/0x140 [ 3495.574468][ T8428] should_fail_ex+0x394/0x4c0 [ 3495.579247][ T8428] should_failslab+0x9/0x20 [ 3495.583796][ T8428] slab_pre_alloc_hook+0x59/0x300 [ 3495.588877][ T8428] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 3495.594475][ T8428] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 3495.600071][ T8428] __kmem_cache_alloc_node+0x53/0x250 [ 3495.605505][ T8428] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 3495.611098][ T8428] __kmalloc+0xa7/0x240 [ 3495.615329][ T8428] bpf_prog_test_run_skb+0x242/0x18f0 [ 3495.620784][ T8428] ? __fget_files+0x28/0x460 [ 3495.625447][ T8428] ? __fget_files+0x3fc/0x460 [ 3495.630220][ T8428] ? cpu_online+0x60/0x60 [ 3495.634601][ T8428] bpf_prog_test_run+0x31f/0x390 [ 3495.639596][ T8428] __sys_bpf+0x49d/0x890 [ 3495.643895][ T8428] ? bpf_link_show_fdinfo+0x390/0x390 [ 3495.649323][ T8428] ? lock_chain_count+0x20/0x20 [ 3495.654225][ T8428] __x64_sys_bpf+0x7c/0x90 [ 3495.658689][ T8428] do_syscall_64+0x55/0xb0 [ 3495.663153][ T8428] ? clear_bhb_loop+0x40/0x90 [ 3495.667869][ T8428] ? clear_bhb_loop+0x40/0x90 [ 3495.672599][ T8428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3495.678518][ T8428] RIP: 0033:0x7f620cf9de99 [ 3495.682982][ T8428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3495.702618][ T8428] RSP: 002b:00007f620debb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3495.711054][ T8428] RAX: ffffffffffffffda RBX: 00007f620d225fa0 RCX: 00007f620cf9de99 [ 3495.719047][ T8428] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 3495.727042][ T8428] RBP: 00007f620debb090 R08: 0000000000000000 R09: 0000000000000000 [ 3495.735046][ T8428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3495.743047][ T8428] R13: 00007f620d226038 R14: 00007f620d225fa0 R15: 00007ffc1190e588 [ 3495.751054][ T8428] [ 3495.897222][ T8432] netlink: 'syz.1.11462': attribute type 21 has an invalid length. [ 3495.910968][ T8432] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11462'. [ 3495.942426][ T8432] netlink: 'syz.1.11462': attribute type 4 has an invalid length. [ 3495.974107][ T8432] netlink: 'syz.1.11462': attribute type 3 has an invalid length. [ 3496.012125][ T8432] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11462'. [ 3496.090385][ T8432] netlink: 'syz.1.11462': attribute type 10 has an invalid length. [ 3496.134762][ T8432] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11462'. [ 3496.594013][ T8445] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.11466'. [ 3499.473348][ T8458] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11470'. [ 3499.492965][ T8458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3499.851722][ T8469] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.11473'. [ 3500.153738][ T8477] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11475'. [ 3500.479758][ T8482] netlink: 'syz.4.11479': attribute type 21 has an invalid length. [ 3500.495841][ T8481] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.11477'. [ 3500.510748][ T8482] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11479'. [ 3500.549384][ T8482] netlink: 'syz.4.11479': attribute type 4 has an invalid length. [ 3500.604442][ T8482] netlink: 'syz.4.11479': attribute type 3 has an invalid length. [ 3500.658492][ T8482] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11479'. [ 3501.405305][ T8496] netlink: 'syz.4.11485': attribute type 153 has an invalid length. [ 3501.423413][ T8496] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.11485'. [ 3501.564783][ T8505] FAULT_INJECTION: forcing a failure. [ 3501.564783][ T8505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3501.597900][ T8505] CPU: 1 PID: 8505 Comm: syz.4.11488 Not tainted syzkaller #0 [ 3501.605472][ T8505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3501.615604][ T8505] Call Trace: [ 3501.618953][ T8505] [ 3501.621952][ T8505] dump_stack_lvl+0x18c/0x250 [ 3501.626738][ T8505] ? show_regs_print_info+0x20/0x20 [ 3501.632193][ T8505] ? load_image+0x420/0x420 [ 3501.636805][ T8505] ? __lock_acquire+0x7d80/0x7d80 [ 3501.641931][ T8505] should_fail_ex+0x394/0x4c0 [ 3501.646711][ T8505] _copy_from_user+0x2f/0xe0 [ 3501.651404][ T8505] __copy_msghdr+0x388/0x560 [ 3501.656088][ T8505] ___sys_sendmsg+0x214/0x360 [ 3501.660852][ T8505] ? get_pid_task+0x20/0x1e0 [ 3501.665551][ T8505] ? __sys_sendmsg+0x2b0/0x2b0 [ 3501.670686][ T8505] ? __lock_acquire+0x7d80/0x7d80 [ 3501.675891][ T8505] __se_sys_sendmsg+0x1d0/0x2c0 [ 3501.680842][ T8505] ? __x64_sys_sendmsg+0x80/0x80 [ 3501.685912][ T8505] ? lockdep_hardirqs_on+0x98/0x150 [ 3501.691212][ T8505] do_syscall_64+0x55/0xb0 [ 3501.695710][ T8505] ? clear_bhb_loop+0x40/0x90 [ 3501.700474][ T8505] ? clear_bhb_loop+0x40/0x90 [ 3501.705255][ T8505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3501.711219][ T8505] RIP: 0033:0x7fa6a059de99 [ 3501.715784][ T8505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3501.735479][ T8505] RSP: 002b:00007fa6a140c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3501.743976][ T8505] RAX: ffffffffffffffda RBX: 00007fa6a0825fa0 RCX: 00007fa6a059de99 [ 3501.752136][ T8505] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000000000000003 [ 3501.760191][ T8505] RBP: 00007fa6a140c090 R08: 0000000000000000 R09: 0000000000000000 [ 3501.768237][ T8505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3501.776276][ T8505] R13: 00007fa6a0826038 R14: 00007fa6a0825fa0 R15: 00007fffcc580f88 [ 3501.784385][ T8505] [ 3502.182148][ T8516] netlink: 'syz.1.11493': attribute type 21 has an invalid length. [ 3502.199511][ T8516] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11493'. [ 3502.272828][ T8516] netlink: 'syz.1.11493': attribute type 4 has an invalid length. [ 3502.318039][ T8516] netlink: 'syz.1.11493': attribute type 3 has an invalid length. [ 3502.326349][ T8516] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11493'. [ 3502.352500][ T8521] netlink: 'syz.2.11495': attribute type 21 has an invalid length. [ 3502.361469][ T8521] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11495'. [ 3502.399238][ T8521] netlink: 'syz.2.11495': attribute type 4 has an invalid length. [ 3502.407848][ T8521] netlink: 'syz.2.11495': attribute type 3 has an invalid length. [ 3502.422380][ T8521] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11495'. [ 3502.435133][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11496'. [ 3502.454419][ T8521] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11495'. [ 3502.476936][ T8516] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11493'. [ 3502.520275][ T8524] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11494'. [ 3502.800444][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11496'. [ 3503.336969][ T8540] FAULT_INJECTION: forcing a failure. [ 3503.336969][ T8540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3503.373344][ T8540] CPU: 1 PID: 8540 Comm: syz.4.11501 Not tainted syzkaller #0 [ 3503.380886][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3503.390985][ T8540] Call Trace: [ 3503.394295][ T8540] [ 3503.397267][ T8540] dump_stack_lvl+0x18c/0x250 [ 3503.402004][ T8540] ? show_regs_print_info+0x20/0x20 [ 3503.407250][ T8540] ? load_image+0x420/0x420 [ 3503.411835][ T8540] ? __lock_acquire+0x7d80/0x7d80 [ 3503.416913][ T8540] should_fail_ex+0x394/0x4c0 [ 3503.421653][ T8540] _copy_from_user+0x2f/0xe0 [ 3503.426298][ T8540] __copy_msghdr+0x388/0x560 [ 3503.430943][ T8540] ___sys_sendmsg+0x214/0x360 [ 3503.435666][ T8540] ? get_pid_task+0x20/0x1e0 [ 3503.440311][ T8540] ? __sys_sendmsg+0x2b0/0x2b0 [ 3503.445142][ T8540] ? __lock_acquire+0x7d80/0x7d80 [ 3503.450238][ T8540] __se_sys_sendmsg+0x1d0/0x2c0 [ 3503.455140][ T8540] ? __x64_sys_sendmsg+0x80/0x80 [ 3503.460134][ T8540] ? lockdep_hardirqs_on+0x98/0x150 [ 3503.465384][ T8540] do_syscall_64+0x55/0xb0 [ 3503.469850][ T8540] ? clear_bhb_loop+0x40/0x90 [ 3503.474575][ T8540] ? clear_bhb_loop+0x40/0x90 [ 3503.479303][ T8540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3503.485226][ T8540] RIP: 0033:0x7fa6a059de99 [ 3503.485250][ T8540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3503.485271][ T8540] RSP: 002b:00007fa6a140c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3503.485297][ T8540] RAX: ffffffffffffffda RBX: 00007fa6a0825fa0 RCX: 00007fa6a059de99 [ 3503.485316][ T8540] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 3503.485334][ T8540] RBP: 00007fa6a140c090 R08: 0000000000000000 R09: 0000000000000000 [ 3503.485349][ T8540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3503.485363][ T8540] R13: 00007fa6a0826038 R14: 00007fa6a0825fa0 R15: 00007fffcc580f88 [ 3503.485396][ T8540] [ 3505.635801][ T8582] FAULT_INJECTION: forcing a failure. [ 3505.635801][ T8582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3505.678890][ T8582] CPU: 1 PID: 8582 Comm: syz.2.11515 Not tainted syzkaller #0 [ 3505.686445][ T8582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3505.696585][ T8582] Call Trace: [ 3505.699913][ T8582] [ 3505.703052][ T8582] dump_stack_lvl+0x18c/0x250 [ 3505.707786][ T8582] ? show_regs_print_info+0x20/0x20 [ 3505.713033][ T8582] ? load_image+0x420/0x420 [ 3505.717591][ T8582] ? __lock_acquire+0x7d80/0x7d80 [ 3505.722678][ T8582] should_fail_ex+0x394/0x4c0 [ 3505.727417][ T8582] _copy_from_user+0x2f/0xe0 [ 3505.732057][ T8582] __copy_msghdr+0x388/0x560 [ 3505.736705][ T8582] ___sys_sendmsg+0x214/0x360 [ 3505.741435][ T8582] ? get_pid_task+0x20/0x1e0 [ 3505.746090][ T8582] ? __sys_sendmsg+0x2b0/0x2b0 [ 3505.750955][ T8582] ? __lock_acquire+0x7d80/0x7d80 [ 3505.756081][ T8582] __se_sys_sendmsg+0x1d0/0x2c0 [ 3505.760983][ T8582] ? __x64_sys_sendmsg+0x80/0x80 [ 3505.765987][ T8582] ? lockdep_hardirqs_on+0x98/0x150 [ 3505.771245][ T8582] do_syscall_64+0x55/0xb0 [ 3505.775705][ T8582] ? clear_bhb_loop+0x40/0x90 [ 3505.780435][ T8582] ? clear_bhb_loop+0x40/0x90 [ 3505.785158][ T8582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3505.791098][ T8582] RIP: 0033:0x7f525f19de99 [ 3505.795568][ T8582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3505.815220][ T8582] RSP: 002b:00007f5260081028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3505.823704][ T8582] RAX: ffffffffffffffda RBX: 00007f525f425fa0 RCX: 00007f525f19de99 [ 3505.831720][ T8582] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 3505.839731][ T8582] RBP: 00007f5260081090 R08: 0000000000000000 R09: 0000000000000000 [ 3505.847741][ T8582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3505.855752][ T8582] R13: 00007f525f426038 R14: 00007f525f425fa0 R15: 00007ffda2457f18 [ 3505.863782][ T8582] [ 3506.019849][ T8587] validate_nla: 10 callbacks suppressed [ 3506.019873][ T8587] netlink: 'syz.4.11518': attribute type 21 has an invalid length. [ 3506.042251][ T8587] netlink: 'syz.4.11518': attribute type 4 has an invalid length. [ 3506.051237][ T8587] netlink: 'syz.4.11518': attribute type 3 has an invalid length. [ 3506.083010][ T8587] netlink: 'syz.4.11518': attribute type 10 has an invalid length. [ 3506.294843][ T8595] FAULT_INJECTION: forcing a failure. [ 3506.294843][ T8595] name failslab, interval 1, probability 0, space 0, times 0 [ 3506.364652][ T8595] CPU: 0 PID: 8595 Comm: syz.1.11522 Not tainted syzkaller #0 [ 3506.372205][ T8595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3506.382313][ T8595] Call Trace: [ 3506.385649][ T8595] [ 3506.388628][ T8595] dump_stack_lvl+0x18c/0x250 [ 3506.393400][ T8595] ? show_regs_print_info+0x20/0x20 [ 3506.398664][ T8595] ? load_image+0x420/0x420 [ 3506.403255][ T8595] ? __might_sleep+0xe0/0xe0 [ 3506.407910][ T8595] ? __lock_acquire+0x7d80/0x7d80 [ 3506.413025][ T8595] should_fail_ex+0x394/0x4c0 [ 3506.417804][ T8595] should_failslab+0x9/0x20 [ 3506.422382][ T8595] slab_pre_alloc_hook+0x59/0x300 [ 3506.427470][ T8595] ? __lock_acquire+0x7d80/0x7d80 [ 3506.432555][ T8595] kmem_cache_alloc_node+0x5e/0x310 [ 3506.437810][ T8595] ? __alloc_skb+0x103/0x2c0 [ 3506.442456][ T8595] __alloc_skb+0x103/0x2c0 [ 3506.446926][ T8595] netlink_sendmsg+0x66a/0xbf0 [ 3506.451742][ T8595] ? netlink_getsockopt+0x590/0x590 [ 3506.457007][ T8595] ? apparmor_socket_sendmsg+0x8e/0x330 [ 3506.462607][ T8595] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3506.467947][ T8595] ? security_socket_sendmsg+0x80/0xa0 [ 3506.473460][ T8595] ? netlink_getsockopt+0x590/0x590 [ 3506.478797][ T8595] ____sys_sendmsg+0x61b/0x980 [ 3506.483622][ T8595] ? __asan_memset+0x22/0x40 [ 3506.488274][ T8595] ? __sys_sendmsg_sock+0x30/0x30 [ 3506.493371][ T8595] ? __import_iovec+0x5f2/0x850 [ 3506.498295][ T8595] ? import_iovec+0x73/0xa0 [ 3506.502916][ T8595] ___sys_sendmsg+0x2a6/0x360 [ 3506.507652][ T8595] ? __sys_sendmsg+0x2b0/0x2b0 [ 3506.512494][ T8595] ? __lock_acquire+0x7d80/0x7d80 [ 3506.517600][ T8595] __se_sys_sendmsg+0x1d0/0x2c0 [ 3506.522508][ T8595] ? __x64_sys_sendmsg+0x80/0x80 [ 3506.527550][ T8595] ? lockdep_hardirqs_on+0x98/0x150 [ 3506.532815][ T8595] do_syscall_64+0x55/0xb0 [ 3506.537281][ T8595] ? clear_bhb_loop+0x40/0x90 [ 3506.542018][ T8595] ? clear_bhb_loop+0x40/0x90 [ 3506.546761][ T8595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3506.552719][ T8595] RIP: 0033:0x7fcec059de99 [ 3506.557189][ T8595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3506.576848][ T8595] RSP: 002b:00007fcec147d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3506.585324][ T8595] RAX: ffffffffffffffda RBX: 00007fcec0825fa0 RCX: 00007fcec059de99 [ 3506.593365][ T8595] RDX: 000000000404e0d0 RSI: 0000200000000440 RDI: 0000000000000003 [ 3506.601385][ T8595] RBP: 00007fcec147d090 R08: 0000000000000000 R09: 0000000000000000 [ 3506.609411][ T8595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3506.617438][ T8595] R13: 00007fcec0826038 R14: 00007fcec0825fa0 R15: 00007fffafd8c0e8 [ 3506.625490][ T8595] [ 3506.761012][ T8598] netlink: 'syz.0.11523': attribute type 21 has an invalid length. [ 3506.773756][ T8598] __nla_validate_parse: 12 callbacks suppressed [ 3506.773776][ T8598] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11523'. [ 3506.851211][ T8598] netlink: 'syz.0.11523': attribute type 4 has an invalid length. [ 3506.876971][ T8598] netlink: 'syz.0.11523': attribute type 3 has an invalid length. [ 3506.887711][ T8598] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11523'. [ 3506.907708][ T8601] netlink: 'syz.0.11523': attribute type 25 has an invalid length. [ 3506.915837][ T8601] netlink: 'syz.0.11523': attribute type 3 has an invalid length. [ 3506.994674][ T8598] netlink: 'syz.0.11523': attribute type 10 has an invalid length. [ 3507.003598][ T8598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11523'. [ 3507.401246][ T8616] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11525'. [ 3512.402425][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.409164][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3513.047405][ T8636] netlink: 'syz.4.11534': attribute type 21 has an invalid length. [ 3513.055385][ T8636] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11534'. [ 3513.065174][ T8636] netlink: 'syz.4.11534': attribute type 4 has an invalid length. [ 3513.077158][ T8636] netlink: 'syz.4.11534': attribute type 3 has an invalid length. [ 3513.086856][ T8636] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11534'. [ 3513.128776][ T8638] netlink: 'syz.4.11534': attribute type 10 has an invalid length. [ 3513.136751][ T8638] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11534'. [ 3513.461170][ T8655] netlink: 'syz.1.11540': attribute type 21 has an invalid length. [ 3513.483791][ T8655] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11540'. [ 3513.495459][ T8655] netlink: 'syz.1.11540': attribute type 5 has an invalid length. [ 3513.507441][ T8655] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11540'. [ 3513.760758][ T8672] FAULT_INJECTION: forcing a failure. [ 3513.760758][ T8672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3513.782947][ T8672] CPU: 0 PID: 8672 Comm: syz.0.11544 Not tainted syzkaller #0 [ 3513.790487][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3513.800674][ T8672] Call Trace: [ 3513.803994][ T8672] [ 3513.806965][ T8672] dump_stack_lvl+0x18c/0x250 [ 3513.811708][ T8672] ? show_regs_print_info+0x20/0x20 [ 3513.816959][ T8672] ? load_image+0x420/0x420 [ 3513.821549][ T8672] ? __lock_acquire+0x7d80/0x7d80 [ 3513.826636][ T8672] should_fail_ex+0x394/0x4c0 [ 3513.831372][ T8672] _copy_from_user+0x2f/0xe0 [ 3513.836024][ T8672] __copy_msghdr+0x388/0x560 [ 3513.840682][ T8672] ___sys_sendmsg+0x214/0x360 [ 3513.845410][ T8672] ? get_pid_task+0x20/0x1e0 [ 3513.850061][ T8672] ? __sys_sendmsg+0x2b0/0x2b0 [ 3513.854892][ T8672] ? __lock_acquire+0x7d80/0x7d80 [ 3513.859993][ T8672] __se_sys_sendmsg+0x1d0/0x2c0 [ 3513.864925][ T8672] ? __x64_sys_sendmsg+0x80/0x80 [ 3513.869933][ T8672] ? lockdep_hardirqs_on+0x98/0x150 [ 3513.875232][ T8672] do_syscall_64+0x55/0xb0 [ 3513.879706][ T8672] ? clear_bhb_loop+0x40/0x90 [ 3513.884436][ T8672] ? clear_bhb_loop+0x40/0x90 [ 3513.889177][ T8672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3513.895122][ T8672] RIP: 0033:0x7f620cf9de99 [ 3513.899587][ T8672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3513.919250][ T8672] RSP: 002b:00007f620debb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3513.927721][ T8672] RAX: ffffffffffffffda RBX: 00007f620d225fa0 RCX: 00007f620cf9de99 [ 3513.935738][ T8672] RDX: 0000000020048811 RSI: 00002000000001c0 RDI: 0000000000000007 [ 3513.943755][ T8672] RBP: 00007f620debb090 R08: 0000000000000000 R09: 0000000000000000 [ 3513.951776][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3513.959792][ T8672] R13: 00007f620d226038 R14: 00007f620d225fa0 R15: 00007ffc1190e588 [ 3513.967861][ T8672] [ 3517.342035][ T8686] netlink: 13822 bytes leftover after parsing attributes in process `syz.2.11547'. [ 3517.351892][ T8690] netlink: 'syz.4.11548': attribute type 21 has an invalid length. [ 3517.362823][ T8690] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11548'. [ 3517.380193][ T8690] netlink: 'syz.4.11548': attribute type 4 has an invalid length. [ 3517.390872][ T8690] netlink: 'syz.4.11548': attribute type 3 has an invalid length. [ 3517.401540][ T8690] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11548'. [ 3517.414242][ T8692] netlink: 'syz.4.11548': attribute type 10 has an invalid length. [ 3517.428468][ T8692] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11548'. [ 3518.051505][ T8717] FAULT_INJECTION: forcing a failure. [ 3518.051505][ T8717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3518.067551][ T8717] CPU: 0 PID: 8717 Comm: syz.2.11556 Not tainted syzkaller #0 [ 3518.075076][ T8717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3518.085188][ T8717] Call Trace: [ 3518.088520][ T8717] [ 3518.091493][ T8717] dump_stack_lvl+0x18c/0x250 [ 3518.096217][ T8717] ? show_regs_print_info+0x20/0x20 [ 3518.101487][ T8717] ? load_image+0x420/0x420 [ 3518.106055][ T8717] ? __lock_acquire+0x7d80/0x7d80 [ 3518.111133][ T8717] ? snprintf+0xe9/0x140 [ 3518.115432][ T8717] should_fail_ex+0x394/0x4c0 [ 3518.120180][ T8717] _copy_to_user+0x2f/0xa0 [ 3518.124644][ T8717] simple_read_from_buffer+0xe7/0x150 [ 3518.130061][ T8717] proc_fail_nth_read+0x1e8/0x260 [ 3518.135138][ T8717] ? proc_fault_inject_write+0x360/0x360 [ 3518.140831][ T8717] ? fsnotify_perm+0x271/0x5e0 [ 3518.145648][ T8717] ? proc_fault_inject_write+0x360/0x360 [ 3518.151355][ T8717] vfs_read+0x298/0x990 [ 3518.155572][ T8717] ? kernel_read+0x1e0/0x1e0 [ 3518.160217][ T8717] ? __fget_files+0x28/0x460 [ 3518.164861][ T8717] ? __fget_files+0x3fc/0x460 [ 3518.169596][ T8717] ? __fdget_pos+0x2a3/0x330 [ 3518.174233][ T8717] ? ksys_read+0x74/0x260 [ 3518.178596][ T8717] ksys_read+0x151/0x260 [ 3518.182876][ T8717] ? vfs_write+0x9a0/0x9a0 [ 3518.187358][ T8717] ? lockdep_hardirqs_on+0x98/0x150 [ 3518.192597][ T8717] do_syscall_64+0x55/0xb0 [ 3518.197030][ T8717] ? clear_bhb_loop+0x40/0x90 [ 3518.201739][ T8717] ? clear_bhb_loop+0x40/0x90 [ 3518.206443][ T8717] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3518.212365][ T8717] RIP: 0033:0x7f525f15e6ce [ 3518.216806][ T8717] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3518.236444][ T8717] RSP: 002b:00007f5260080fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3518.244901][ T8717] RAX: ffffffffffffffda RBX: 00007f52600816c0 RCX: 00007f525f15e6ce [ 3518.252894][ T8717] RDX: 000000000000000f RSI: 00007f52600810a0 RDI: 0000000000000008 [ 3518.260887][ T8717] RBP: 00007f5260081090 R08: 0000000000000000 R09: 0000000000000000 [ 3518.268884][ T8717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3518.276890][ T8717] R13: 00007f525f426038 R14: 00007f525f425fa0 R15: 00007ffda2457f18 [ 3518.284898][ T8717] [ 3518.337283][ T8719] FAULT_INJECTION: forcing a failure. [ 3518.337283][ T8719] name failslab, interval 1, probability 0, space 0, times 0 [ 3518.350644][ T8719] CPU: 0 PID: 8719 Comm: syz.0.11565 Not tainted syzkaller #0 [ 3518.358157][ T8719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3518.368261][ T8719] Call Trace: [ 3518.371580][ T8719] [ 3518.374545][ T8719] dump_stack_lvl+0x18c/0x250 [ 3518.379288][ T8719] ? show_regs_print_info+0x20/0x20 [ 3518.384542][ T8719] ? load_image+0x420/0x420 [ 3518.389108][ T8719] ? __might_sleep+0xe0/0xe0 [ 3518.393748][ T8719] ? __lock_acquire+0x7d80/0x7d80 [ 3518.398841][ T8719] should_fail_ex+0x394/0x4c0 [ 3518.403576][ T8719] should_failslab+0x9/0x20 [ 3518.408149][ T8719] slab_pre_alloc_hook+0x59/0x300 [ 3518.413236][ T8719] ? __lock_acquire+0x7d80/0x7d80 [ 3518.418312][ T8719] kmem_cache_alloc_node+0x5e/0x310 [ 3518.423566][ T8719] ? __alloc_skb+0x103/0x2c0 [ 3518.428224][ T8719] __alloc_skb+0x103/0x2c0 [ 3518.432704][ T8719] netlink_sendmsg+0x66a/0xbf0 [ 3518.437524][ T8719] ? netlink_getsockopt+0x590/0x590 [ 3518.442780][ T8719] ? apparmor_socket_sendmsg+0x170/0x330 [ 3518.448465][ T8719] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3518.453805][ T8719] ? security_socket_sendmsg+0x80/0xa0 [ 3518.459326][ T8719] ? netlink_getsockopt+0x590/0x590 [ 3518.464580][ T8719] ____sys_sendmsg+0x61b/0x980 [ 3518.469404][ T8719] ? __asan_memset+0x22/0x40 [ 3518.474044][ T8719] ? __sys_sendmsg_sock+0x30/0x30 [ 3518.479110][ T8719] ? __import_iovec+0x5f2/0x850 [ 3518.484031][ T8719] ? import_iovec+0x73/0xa0 [ 3518.488692][ T8719] ___sys_sendmsg+0x2a6/0x360 [ 3518.493431][ T8719] ? __sys_sendmsg+0x2b0/0x2b0 [ 3518.498411][ T8719] __se_sys_sendmsg+0x1d0/0x2c0 [ 3518.503325][ T8719] ? __x64_sys_sendmsg+0x80/0x80 [ 3518.508345][ T8719] ? lockdep_hardirqs_on+0x98/0x150 [ 3518.513600][ T8719] do_syscall_64+0x55/0xb0 [ 3518.518069][ T8719] ? clear_bhb_loop+0x40/0x90 [ 3518.522808][ T8719] ? clear_bhb_loop+0x40/0x90 [ 3518.527541][ T8719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3518.533487][ T8719] RIP: 0033:0x7f620cf9de99 [ 3518.537948][ T8719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3518.557605][ T8719] RSP: 002b:00007f620debb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3518.566075][ T8719] RAX: ffffffffffffffda RBX: 00007f620d225fa0 RCX: 00007f620cf9de99 [ 3518.574109][ T8719] RDX: 0000000020008844 RSI: 0000200000000000 RDI: 0000000000000003 [ 3518.582125][ T8719] RBP: 00007f620debb090 R08: 0000000000000000 R09: 0000000000000000 [ 3518.590152][ T8719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3518.598182][ T8719] R13: 00007f620d226038 R14: 00007f620d225fa0 R15: 00007ffc1190e588 [ 3518.606239][ T8719] [ 3519.174804][ T8728] netlink: 'syz.0.11560': attribute type 21 has an invalid length. [ 3519.193768][ T8728] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11560'. [ 3519.225424][ T8728] netlink: 'syz.0.11560': attribute type 4 has an invalid length. [ 3519.251158][ T8728] netlink: 'syz.0.11560': attribute type 3 has an invalid length. [ 3519.281665][ T8728] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11560'. [ 3519.315604][ T8731] netlink: 'syz.0.11560': attribute type 25 has an invalid length. [ 3519.346869][ T8731] netlink: 'syz.0.11560': attribute type 3 has an invalid length. [ 3519.395848][ T8732] netlink: 'syz.0.11560': attribute type 10 has an invalid length. [ 3519.414580][ T8732] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11560'. [ 3522.571799][ T8754] netlink: 'syz.0.11567': attribute type 21 has an invalid length. [ 3522.585742][ T8754] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11567'. [ 3522.597904][ T8754] netlink: 'syz.0.11567': attribute type 4 has an invalid length. [ 3522.606999][ T8754] netlink: 'syz.0.11567': attribute type 3 has an invalid length. [ 3522.626696][ T8754] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11567'. [ 3522.670511][ T8759] FAULT_INJECTION: forcing a failure. [ 3522.670511][ T8759] name failslab, interval 1, probability 0, space 0, times 0 [ 3522.686827][ T8764] FAULT_INJECTION: forcing a failure. [ 3522.686827][ T8764] name failslab, interval 1, probability 0, space 0, times 0 [ 3522.703467][ T8759] CPU: 1 PID: 8759 Comm: syz.4.11569 Not tainted syzkaller #0 [ 3522.711005][ T8759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3522.721111][ T8759] Call Trace: [ 3522.724428][ T8759] [ 3522.727427][ T8759] dump_stack_lvl+0x18c/0x250 [ 3522.732168][ T8759] ? show_regs_print_info+0x20/0x20 [ 3522.737438][ T8759] ? load_image+0x420/0x420 [ 3522.742008][ T8759] ? __might_sleep+0xe0/0xe0 [ 3522.746661][ T8759] ? __lock_acquire+0x7d80/0x7d80 [ 3522.751747][ T8759] should_fail_ex+0x394/0x4c0 [ 3522.756498][ T8759] should_failslab+0x9/0x20 [ 3522.761090][ T8759] slab_pre_alloc_hook+0x59/0x300 [ 3522.766220][ T8759] kmem_cache_alloc+0x5a/0x2c0 [ 3522.771042][ T8759] ? getname_flags+0xbb/0x500 [ 3522.775782][ T8759] getname_flags+0xbb/0x500 [ 3522.780357][ T8759] user_path_at_empty+0x2c/0x60 [ 3522.785263][ T8759] bpf_obj_get_user+0xbf/0x480 [ 3522.790078][ T8759] ? bpf_obj_pin_user+0x350/0x350 [ 3522.795151][ T8759] ? __might_fault+0xaa/0x120 [ 3522.799889][ T8759] __sys_bpf+0x770/0x890 [ 3522.804185][ T8759] ? bpf_link_show_fdinfo+0x390/0x390 [ 3522.809638][ T8759] ? lock_chain_count+0x20/0x20 [ 3522.814560][ T8759] __x64_sys_bpf+0x7c/0x90 [ 3522.819026][ T8759] do_syscall_64+0x55/0xb0 [ 3522.823467][ T8759] ? clear_bhb_loop+0x40/0x90 [ 3522.828170][ T8759] ? clear_bhb_loop+0x40/0x90 [ 3522.832905][ T8759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3522.838830][ T8759] RIP: 0033:0x7fa6a059de99 [ 3522.843275][ T8759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3522.862908][ T8759] RSP: 002b:00007fa6a140c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3522.871353][ T8759] RAX: ffffffffffffffda RBX: 00007fa6a0825fa0 RCX: 00007fa6a059de99 [ 3522.879368][ T8759] RDX: 0000000000000018 RSI: 0000200000000040 RDI: 0000000000000007 [ 3522.887368][ T8759] RBP: 00007fa6a140c090 R08: 0000000000000000 R09: 0000000000000000 [ 3522.895363][ T8759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3522.903360][ T8759] R13: 00007fa6a0826038 R14: 00007fa6a0825fa0 R15: 00007fffcc580f88 [ 3522.911383][ T8759] [ 3522.915461][ T8764] CPU: 1 PID: 8764 Comm: syz.2.11570 Not tainted syzkaller #0 [ 3522.922979][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3522.933096][ T8764] Call Trace: [ 3522.936419][ T8764] [ 3522.939390][ T8764] dump_stack_lvl+0x18c/0x250 [ 3522.944149][ T8764] ? show_regs_print_info+0x20/0x20 [ 3522.949395][ T8764] ? load_image+0x420/0x420 [ 3522.953951][ T8764] ? __lock_acquire+0x7d80/0x7d80 [ 3522.959016][ T8764] ? trace_event_raw_event_lock+0x240/0x240 [ 3522.964944][ T8764] ? perf_trace_lock+0xfc/0x3b0 [ 3522.969866][ T8764] should_fail_ex+0x394/0x4c0 [ 3522.974597][ T8764] should_failslab+0x9/0x20 [ 3522.979145][ T8764] slab_pre_alloc_hook+0x59/0x300 [ 3522.984220][ T8764] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 3522.989816][ T8764] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 3522.995402][ T8764] __kmem_cache_alloc_node+0x53/0x250 [ 3523.000865][ T8764] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 3523.006463][ T8764] __kmalloc+0xa7/0x240 [ 3523.010680][ T8764] bpf_prog_test_run_skb+0x242/0x18f0 [ 3523.016105][ T8764] ? __fget_files+0x28/0x460 [ 3523.020750][ T8764] ? __fget_files+0x3fc/0x460 [ 3523.025504][ T8764] ? cpu_online+0x60/0x60 [ 3523.029883][ T8764] bpf_prog_test_run+0x31f/0x390 [ 3523.034915][ T8764] __sys_bpf+0x49d/0x890 [ 3523.039215][ T8764] ? bpf_link_show_fdinfo+0x390/0x390 [ 3523.044670][ T8764] ? lock_chain_count+0x20/0x20 [ 3523.049598][ T8764] __x64_sys_bpf+0x7c/0x90 [ 3523.054058][ T8764] do_syscall_64+0x55/0xb0 [ 3523.058525][ T8764] ? clear_bhb_loop+0x40/0x90 [ 3523.063256][ T8764] ? clear_bhb_loop+0x40/0x90 [ 3523.067983][ T8764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3523.073927][ T8764] RIP: 0033:0x7f525f19de99 [ 3523.078388][ T8764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3523.098053][ T8764] RSP: 002b:00007f5260081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3523.106516][ T8764] RAX: ffffffffffffffda RBX: 00007f525f425fa0 RCX: 00007f525f19de99 [ 3523.114535][ T8764] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 3523.122555][ T8764] RBP: 00007f5260081090 R08: 0000000000000000 R09: 0000000000000000 [ 3523.130577][ T8764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3523.138596][ T8764] R13: 00007f525f426038 R14: 00007f525f425fa0 R15: 00007ffda2457f18 [ 3523.146637][ T8764] [ 3523.169473][ T8754] netlink: 'syz.0.11567': attribute type 25 has an invalid length. [ 3523.215297][ T8754] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11567'. [ 3523.593143][ T8769] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11572'. [ 3523.845620][ T8772] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11573'. [ 3524.033220][ T8782] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11575'. [ 3524.071214][ T8782] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11575'. [ 3527.110782][ T8794] FAULT_INJECTION: forcing a failure. [ 3527.110782][ T8794] name failslab, interval 1, probability 0, space 0, times 0 [ 3527.181598][ T8794] CPU: 0 PID: 8794 Comm: syz.4.11578 Not tainted syzkaller #0 [ 3527.189141][ T8794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3527.199246][ T8794] Call Trace: [ 3527.202565][ T8794] [ 3527.205538][ T8794] dump_stack_lvl+0x18c/0x250 [ 3527.210275][ T8794] ? show_regs_print_info+0x20/0x20 [ 3527.215535][ T8794] ? load_image+0x420/0x420 [ 3527.219219][ T8797] FAULT_INJECTION: forcing a failure. [ 3527.219219][ T8797] name failslab, interval 1, probability 0, space 0, times 0 [ 3527.220081][ T8794] ? __might_sleep+0xe0/0xe0 [ 3527.220117][ T8794] ? __lock_acquire+0x7d80/0x7d80 [ 3527.220149][ T8794] should_fail_ex+0x394/0x4c0 [ 3527.247332][ T8794] should_failslab+0x9/0x20 [ 3527.251904][ T8794] slab_pre_alloc_hook+0x59/0x300 [ 3527.256990][ T8794] ? __lock_acquire+0x7d80/0x7d80 [ 3527.262077][ T8794] kmem_cache_alloc_node+0x5e/0x310 [ 3527.267358][ T8794] ? __alloc_skb+0x103/0x2c0 [ 3527.272004][ T8794] __alloc_skb+0x103/0x2c0 [ 3527.276474][ T8794] netlink_sendmsg+0x66a/0xbf0 [ 3527.281310][ T8794] ? netlink_getsockopt+0x590/0x590 [ 3527.286572][ T8794] ? apparmor_socket_sendmsg+0x8e/0x330 [ 3527.292191][ T8794] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3527.297537][ T8794] ? security_socket_sendmsg+0x80/0xa0 [ 3527.303038][ T8794] ? netlink_getsockopt+0x590/0x590 [ 3527.308291][ T8794] ____sys_sendmsg+0x61b/0x980 [ 3527.313119][ T8794] ? __asan_memset+0x22/0x40 [ 3527.317769][ T8794] ? __sys_sendmsg_sock+0x30/0x30 [ 3527.322843][ T8794] ? __import_iovec+0x5f2/0x850 [ 3527.327758][ T8794] ? import_iovec+0x73/0xa0 [ 3527.332315][ T8794] ___sys_sendmsg+0x2a6/0x360 [ 3527.337047][ T8794] ? get_pid_task+0x20/0x1e0 [ 3527.341697][ T8794] ? __sys_sendmsg+0x2b0/0x2b0 [ 3527.346538][ T8794] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3527.352597][ T8794] __se_sys_sendmsg+0x1d0/0x2c0 [ 3527.357502][ T8794] ? __x64_sys_sendmsg+0x80/0x80 [ 3527.362493][ T8794] ? lockdep_hardirqs_on+0x98/0x150 [ 3527.367736][ T8794] do_syscall_64+0x55/0xb0 [ 3527.372188][ T8794] ? clear_bhb_loop+0x40/0x90 [ 3527.376934][ T8794] ? clear_bhb_loop+0x40/0x90 [ 3527.381655][ T8794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3527.387587][ T8794] RIP: 0033:0x7fa6a059de99 [ 3527.392052][ T8794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3527.411832][ T8794] RSP: 002b:00007fa6a140c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3527.420301][ T8794] RAX: ffffffffffffffda RBX: 00007fa6a0825fa0 RCX: 00007fa6a059de99 [ 3527.428318][ T8794] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000008 [ 3527.436343][ T8794] RBP: 00007fa6a140c090 R08: 0000000000000000 R09: 0000000000000000 [ 3527.444385][ T8794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3527.452429][ T8794] R13: 00007fa6a0826038 R14: 00007fa6a0825fa0 R15: 00007fffcc580f88 [ 3527.460468][ T8794] [ 3527.466301][ T8797] CPU: 1 PID: 8797 Comm: syz.2.11581 Not tainted syzkaller #0 [ 3527.473831][ T8797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3527.483929][ T8797] Call Trace: [ 3527.487249][ T8797] [ 3527.490218][ T8797] dump_stack_lvl+0x18c/0x250 [ 3527.494947][ T8797] ? show_regs_print_info+0x20/0x20 [ 3527.500193][ T8797] ? load_image+0x420/0x420 [ 3527.504757][ T8797] ? __lock_acquire+0x7d80/0x7d80 [ 3527.509838][ T8797] should_fail_ex+0x394/0x4c0 [ 3527.514582][ T8797] should_failslab+0x9/0x20 [ 3527.519139][ T8797] slab_pre_alloc_hook+0x59/0x300 [ 3527.524243][ T8797] ? preempt_schedule+0xc0/0xd0 [ 3527.529252][ T8797] kmem_cache_alloc_node+0x5e/0x310 [ 3527.534536][ T8797] ? __alloc_skb+0x103/0x2c0 [ 3527.539181][ T8797] __alloc_skb+0x103/0x2c0 [ 3527.543647][ T8797] tipc_msg_append+0x166/0x630 [ 3527.548589][ T8797] __tipc_sendstream+0x7d0/0x1290 [ 3527.553756][ T8797] ? tsk_advance_rx_queue+0x310/0x310 [ 3527.559186][ T8797] ? wait_woken+0x180/0x180 [ 3527.563743][ T8797] ? _local_bh_enable+0xa0/0xa0 [ 3527.568645][ T8797] tipc_sendstream+0x55/0x70 [ 3527.573266][ T8797] ? tipc_getsockopt+0x5a0/0x5a0 [ 3527.578238][ T8797] ____sys_sendmsg+0x61b/0x980 [ 3527.583035][ T8797] ? __asan_memset+0x22/0x40 [ 3527.587660][ T8797] ? __sys_sendmsg_sock+0x30/0x30 [ 3527.592705][ T8797] ? __import_iovec+0x3fa/0x850 [ 3527.597595][ T8797] ? import_iovec+0x73/0xa0 [ 3527.602130][ T8797] ___sys_sendmsg+0x2a6/0x360 [ 3527.606833][ T8797] ? get_pid_task+0x20/0x1e0 [ 3527.611516][ T8797] ? __sys_sendmsg+0x2b0/0x2b0 [ 3527.616347][ T8797] ? __lock_acquire+0x7d80/0x7d80 [ 3527.621463][ T8797] __se_sys_sendmsg+0x1d0/0x2c0 [ 3527.626379][ T8797] ? __x64_sys_sendmsg+0x80/0x80 [ 3527.631381][ T8797] ? lockdep_hardirqs_on+0x98/0x150 [ 3527.636630][ T8797] do_syscall_64+0x55/0xb0 [ 3527.641086][ T8797] ? clear_bhb_loop+0x40/0x90 [ 3527.645801][ T8797] ? clear_bhb_loop+0x40/0x90 [ 3527.650524][ T8797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3527.656469][ T8797] RIP: 0033:0x7f525f19de99 [ 3527.660924][ T8797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3527.680566][ T8797] RSP: 002b:00007f526003f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3527.689021][ T8797] RAX: ffffffffffffffda RBX: 00007f525f426180 RCX: 00007f525f19de99 [ 3527.697047][ T8797] RDX: 0000000020000810 RSI: 0000200000000900 RDI: 0000000000000004 [ 3527.705052][ T8797] RBP: 00007f526003f090 R08: 0000000000000000 R09: 0000000000000000 [ 3527.713058][ T8797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3527.721064][ T8797] R13: 00007f525f426218 R14: 00007f525f426180 R15: 00007ffda2457f18 [ 3527.729093][ T8797] [ 3528.213337][ T8807] __nla_validate_parse: 1 callbacks suppressed [ 3528.213358][ T8807] netlink: 22 bytes leftover after parsing attributes in process `syz.1.11584'. [ 3529.440432][ T8821] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11589'. [ 3532.914737][ T8846] FAULT_INJECTION: forcing a failure. [ 3532.914737][ T8846] name failslab, interval 1, probability 0, space 0, times 0 [ 3532.929558][ T8846] CPU: 1 PID: 8846 Comm: syz.2.11599 Not tainted syzkaller #0 [ 3532.937085][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3532.947189][ T8846] Call Trace: [ 3532.950515][ T8846] [ 3532.953485][ T8846] dump_stack_lvl+0x18c/0x250 [ 3532.958200][ T8846] ? show_regs_print_info+0x20/0x20 [ 3532.963428][ T8846] ? load_image+0x420/0x420 [ 3532.967975][ T8846] ? __lock_acquire+0x7d80/0x7d80 [ 3532.973037][ T8846] should_fail_ex+0x394/0x4c0 [ 3532.977757][ T8846] should_failslab+0x9/0x20 [ 3532.982294][ T8846] slab_pre_alloc_hook+0x59/0x300 [ 3532.987363][ T8846] ? bpf_test_init+0x9f/0x140 [ 3532.992086][ T8846] ? bpf_test_init+0x9f/0x140 [ 3532.996825][ T8846] __kmem_cache_alloc_node+0x53/0x250 [ 3533.002266][ T8846] ? bpf_test_init+0x9f/0x140 [ 3533.006976][ T8846] __kmalloc+0xa7/0x240 [ 3533.011167][ T8846] bpf_test_init+0x9f/0x140 [ 3533.015710][ T8846] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 3533.021141][ T8846] ? __lock_acquire+0x7d80/0x7d80 [ 3533.026210][ T8846] ? dev_put+0x80/0x80 [ 3533.030319][ T8846] ? dev_put+0x80/0x80 [ 3533.034412][ T8846] bpf_prog_test_run+0x31f/0x390 [ 3533.039402][ T8846] __sys_bpf+0x49d/0x890 [ 3533.043676][ T8846] ? bpf_link_show_fdinfo+0x390/0x390 [ 3533.049091][ T8846] ? lock_chain_count+0x20/0x20 [ 3533.053988][ T8846] __x64_sys_bpf+0x7c/0x90 [ 3533.058433][ T8846] do_syscall_64+0x55/0xb0 [ 3533.062902][ T8846] ? clear_bhb_loop+0x40/0x90 [ 3533.067606][ T8846] ? clear_bhb_loop+0x40/0x90 [ 3533.072321][ T8846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3533.078238][ T8846] RIP: 0033:0x7f525f19de99 [ 3533.082689][ T8846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3533.102319][ T8846] RSP: 002b:00007f5260081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3533.110763][ T8846] RAX: ffffffffffffffda RBX: 00007f525f425fa0 RCX: 00007f525f19de99 [ 3533.118759][ T8846] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 3533.126774][ T8846] RBP: 00007f5260081090 R08: 0000000000000000 R09: 0000000000000000 [ 3533.134770][ T8846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3533.142771][ T8846] R13: 00007f525f426038 R14: 00007f525f425fa0 R15: 00007ffda2457f18 [ 3533.150792][ T8846] [ 3533.370399][ T8849] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11601'. [ 3533.394239][ T8852] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.11609'. [ 3533.405571][ T8852] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.11609'. [ 3533.419704][ T8851] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.11609'. [ 3533.454234][ T8851] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.11609'. [ 3537.297871][ T8873] validate_nla: 7 callbacks suppressed [ 3537.297890][ T8873] netlink: 'syz.4.11610': attribute type 39 has an invalid length. [ 3540.709142][ T8906] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.11620'. [ 3540.732113][ T8903] netlink: 'syz.1.11619': attribute type 21 has an invalid length. [ 3540.751416][ T8903] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11619'. [ 3540.773260][ T8903] netlink: 'syz.1.11619': attribute type 4 has an invalid length. [ 3540.792256][ T8903] netlink: 'syz.1.11619': attribute type 3 has an invalid length. [ 3540.821739][ T8903] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11619'. [ 3540.859508][ T8906] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.11620'. [ 3540.886163][ T8901] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.11620'. [ 3540.906098][ T8903] netlink: 'syz.1.11619': attribute type 10 has an invalid length. [ 3540.971938][ T8903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11619'. [ 3540.998450][ T8908] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.11620'. [ 3541.620473][ T8924] netlink: 'syz.4.11626': attribute type 6 has an invalid length. [ 3541.653584][ T8924] netlink: 164 bytes leftover after parsing attributes in process `syz.4.11626'. [ 3545.878496][ T8941] netlink: 'syz.1.11633': attribute type 4 has an invalid length. [ 3545.916481][ T8941] netlink: 168 bytes leftover after parsing attributes in process `syz.1.11633'. [ 3545.933667][ T8946] netlink: 'syz.4.11635': attribute type 9 has an invalid length. [ 3545.942945][ T8946] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.11635'. [ 3545.958227][ T8947] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.11634'. [ 3545.981231][ T8947] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.11634'. [ 3546.041500][ T8945] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.11634'. [ 3546.049076][ T8948] netlink: 'syz.4.11635': attribute type 9 has an invalid length. [ 3546.074765][ T8945] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.11634'. [ 3546.093891][ T8948] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.11635'. [ 3546.301263][ T8943] netlink: 'syz.0.11641': attribute type 153 has an invalid length. [ 3546.311161][ T8943] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.11641'. [ 3546.410320][ T8956] netlink: 'syz.1.11636': attribute type 21 has an invalid length. [ 3546.419619][ T8956] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11636'. [ 3546.434982][ T8956] netlink: 'syz.1.11636': attribute type 4 has an invalid length. [ 3546.447097][ T8956] netlink: 'syz.1.11636': attribute type 3 has an invalid length. [ 3546.464729][ T8956] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11636'. [ 3546.483514][ T8957] netlink: 'syz.1.11636': attribute type 10 has an invalid length. [ 3546.906946][ T8966] netlink: 'syz.2.11638': attribute type 6 has an invalid length. [ 3547.634905][ T8979] FAULT_INJECTION: forcing a failure. [ 3547.634905][ T8979] name failslab, interval 1, probability 0, space 0, times 0 [ 3547.667790][ T8979] CPU: 1 PID: 8979 Comm: syz.0.11646 Not tainted syzkaller #0 [ 3547.675353][ T8979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3547.685475][ T8979] Call Trace: [ 3547.688796][ T8979] [ 3547.691778][ T8979] dump_stack_lvl+0x18c/0x250 [ 3547.696535][ T8979] ? show_regs_print_info+0x20/0x20 [ 3547.701847][ T8979] ? load_image+0x420/0x420 [ 3547.706419][ T8979] ? __lock_acquire+0x7d80/0x7d80 [ 3547.711549][ T8979] should_fail_ex+0x394/0x4c0 [ 3547.716292][ T8979] should_failslab+0x9/0x20 [ 3547.720862][ T8979] slab_pre_alloc_hook+0x59/0x300 [ 3547.726044][ T8979] ? bpf_prog_alloc+0x3d/0x1a0 [ 3547.730991][ T8979] ? bpf_prog_load+0x6b2/0x1610 [ 3547.735911][ T8979] ? __sys_bpf+0x5ba/0x890 [ 3547.740394][ T8979] kmem_cache_alloc_node+0x5e/0x310 [ 3547.745657][ T8979] ? alloc_vmap_area+0x1b4/0x1e50 [ 3547.750752][ T8979] alloc_vmap_area+0x1b4/0x1e50 [ 3547.755687][ T8979] ? vm_map_ram+0xcf0/0xcf0 [ 3547.760252][ T8979] ? rcu_is_watching+0x15/0xb0 [ 3547.765083][ T8979] __get_vm_area_node+0x162/0x370 [ 3547.770195][ T8979] __vmalloc_node_range+0x36f/0x1320 [ 3547.775543][ T8979] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 3547.781150][ T8979] ? mark_lock+0x94/0x320 [ 3547.785538][ T8979] ? __lock_acquire+0x1336/0x7d80 [ 3547.790635][ T8979] ? aa_get_newest_label+0xfd/0x5c0 [ 3547.795903][ T8979] ? free_vm_area+0x50/0x50 [ 3547.800455][ T8979] ? end_current_label_crit_section+0x170/0x170 [ 3547.806747][ T8979] ? verify_lock_unused+0x140/0x140 [ 3547.811991][ T8979] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 3547.817569][ T8979] __vmalloc+0x7a/0x90 [ 3547.821679][ T8979] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 3547.827254][ T8979] bpf_prog_alloc_no_stats+0x46/0x430 [ 3547.832667][ T8979] bpf_prog_alloc+0x3d/0x1a0 [ 3547.837296][ T8979] bpf_prog_load+0x6b2/0x1610 [ 3547.842021][ T8979] ? map_freeze+0x420/0x420 [ 3547.846584][ T8979] ? __might_fault+0xaa/0x120 [ 3547.851293][ T8979] ? __lock_acquire+0x7d80/0x7d80 [ 3547.856353][ T8979] ? file_end_write+0x159/0x250 [ 3547.861243][ T8979] ? __might_fault+0xaa/0x120 [ 3547.865947][ T8979] ? __might_fault+0xc6/0x120 [ 3547.870653][ T8979] ? __might_fault+0xaa/0x120 [ 3547.875359][ T8979] ? bpf_lsm_bpf+0x9/0x10 [ 3547.879754][ T8979] ? security_bpf+0x7e/0xa0 [ 3547.884295][ T8979] __sys_bpf+0x5ba/0x890 [ 3547.888576][ T8979] ? bpf_link_show_fdinfo+0x390/0x390 [ 3547.893994][ T8979] ? lock_chain_count+0x20/0x20 [ 3547.898894][ T8979] __x64_sys_bpf+0x7c/0x90 [ 3547.903339][ T8979] do_syscall_64+0x55/0xb0 [ 3547.907785][ T8979] ? clear_bhb_loop+0x40/0x90 [ 3547.912492][ T8979] ? clear_bhb_loop+0x40/0x90 [ 3547.917197][ T8979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3547.923122][ T8979] RIP: 0033:0x7f620cf9de99 [ 3547.927566][ T8979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3547.947207][ T8979] RSP: 002b:00007f620debb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3547.955652][ T8979] RAX: ffffffffffffffda RBX: 00007f620d225fa0 RCX: 00007f620cf9de99 [ 3547.963653][ T8979] RDX: 0000000000000090 RSI: 0000200000000180 RDI: 0000000000000005 [ 3547.971649][ T8979] RBP: 00007f620debb090 R08: 0000000000000000 R09: 0000000000000000 [ 3547.979653][ T8979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3547.987647][ T8979] R13: 00007f620d226038 R14: 00007f620d225fa0 R15: 00007ffc1190e588 [ 3547.995654][ T8979] [ 3548.058518][ T8979] warn_alloc: 1 callbacks suppressed [ 3548.058604][ T8979] syz.0.11646: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 3548.082122][ T8979] CPU: 0 PID: 8979 Comm: syz.0.11646 Not tainted syzkaller #0 [ 3548.089641][ T8979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3548.099832][ T8979] Call Trace: [ 3548.103153][ T8979] [ 3548.106162][ T8979] dump_stack_lvl+0x18c/0x250 [ 3548.110943][ T8979] ? show_regs_print_info+0x20/0x20 [ 3548.116194][ T8979] ? load_image+0x420/0x420 [ 3548.120791][ T8979] ? __rcu_read_unlock+0x7c/0xd0 [ 3548.125773][ T8979] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 3548.132242][ T8979] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 3548.138812][ T8979] warn_alloc+0x246/0x340 [ 3548.143197][ T8979] ? slab_free_freelist_hook+0x130/0x1a0 [ 3548.148884][ T8979] ? zone_watermark_ok_safe+0x230/0x230 [ 3548.154481][ T8979] ? __get_vm_area_node+0x17b/0x370 [ 3548.159784][ T8979] ? __get_vm_area_node+0x17b/0x370 [ 3548.165048][ T8979] __vmalloc_node_range+0x394/0x1320 [ 3548.170393][ T8979] ? mark_lock+0x94/0x320 [ 3548.174764][ T8979] ? __lock_acquire+0x1336/0x7d80 [ 3548.179836][ T8979] ? aa_get_newest_label+0xfd/0x5c0 [ 3548.185065][ T8979] ? free_vm_area+0x50/0x50 [ 3548.189608][ T8979] ? end_current_label_crit_section+0x170/0x170 [ 3548.195877][ T8979] ? verify_lock_unused+0x140/0x140 [ 3548.201111][ T8979] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 3548.206682][ T8979] __vmalloc+0x7a/0x90 [ 3548.210789][ T8979] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 3548.216367][ T8979] bpf_prog_alloc_no_stats+0x46/0x430 [ 3548.221769][ T8979] bpf_prog_alloc+0x3d/0x1a0 [ 3548.226397][ T8979] bpf_prog_load+0x6b2/0x1610 [ 3548.231127][ T8979] ? map_freeze+0x420/0x420 [ 3548.235668][ T8979] ? __might_fault+0xaa/0x120 [ 3548.240374][ T8979] ? __lock_acquire+0x7d80/0x7d80 [ 3548.245434][ T8979] ? file_end_write+0x159/0x250 [ 3548.250343][ T8979] ? __might_fault+0xaa/0x120 [ 3548.255046][ T8979] ? __might_fault+0xc6/0x120 [ 3548.259752][ T8979] ? __might_fault+0xaa/0x120 [ 3548.264464][ T8979] ? bpf_lsm_bpf+0x9/0x10 [ 3548.268829][ T8979] ? security_bpf+0x7e/0xa0 [ 3548.273361][ T8979] __sys_bpf+0x5ba/0x890 [ 3548.277634][ T8979] ? bpf_link_show_fdinfo+0x390/0x390 [ 3548.283047][ T8979] ? lock_chain_count+0x20/0x20 [ 3548.287940][ T8979] __x64_sys_bpf+0x7c/0x90 [ 3548.292398][ T8979] do_syscall_64+0x55/0xb0 [ 3548.296851][ T8979] ? clear_bhb_loop+0x40/0x90 [ 3548.301563][ T8979] ? clear_bhb_loop+0x40/0x90 [ 3548.306270][ T8979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3548.312189][ T8979] RIP: 0033:0x7f620cf9de99 [ 3548.316629][ T8979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3548.336263][ T8979] RSP: 002b:00007f620debb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3548.344719][ T8979] RAX: ffffffffffffffda RBX: 00007f620d225fa0 RCX: 00007f620cf9de99 [ 3548.352731][ T8979] RDX: 0000000000000090 RSI: 0000200000000180 RDI: 0000000000000005 [ 3548.360759][ T8979] RBP: 00007f620debb090 R08: 0000000000000000 R09: 0000000000000000 [ 3548.368783][ T8979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3548.376807][ T8979] R13: 00007f620d226038 R14: 00007f620d225fa0 R15: 00007ffc1190e588 [ 3548.384828][ T8979] [ 3548.429932][ T8979] Mem-Info: [ 3548.433242][ T8979] active_anon:9894 inactive_anon:0 isolated_anon:0 [ 3548.433242][ T8979] active_file:19313 inactive_file:41191 isolated_file:0 [ 3548.433242][ T8979] unevictable:768 dirty:379 writeback:0 [ 3548.433242][ T8979] slab_reclaimable:10368 slab_unreclaimable:98544 [ 3548.433242][ T8979] mapped:24859 shmem:1373 pagetables:615 [ 3548.433242][ T8979] sec_pagetables:0 bounce:0 [ 3548.433242][ T8979] kernel_misc_reclaimable:0 [ 3548.433242][ T8979] free:1336503 free_pcp:2818 free_cma:0 [ 3548.483239][ T8979] Node 0 active_anon:39676kB inactive_anon:0kB active_file:77252kB inactive_file:164564kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99436kB dirty:1516kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10452kB pagetables:2460kB sec_pagetables:0kB all_unreclaimable? no [ 3548.519314][ T8979] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 3548.555798][ T8979] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3548.590189][ T8979] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 3548.596364][ T8979] Node 0 DMA32 free:1419296kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:39936kB inactive_anon:0kB active_file:77252kB inactive_file:163744kB unevictable:1536kB writepending:1516kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:10540kB local_pcp:9372kB free_cma:0kB [ 3548.635900][ T8979] lowmem_reserve[]: 0 0 0 0 0 [ 3548.641433][ T8979] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 3548.677459][ T8979] lowmem_reserve[]: 0 0 0 0 0 [ 3548.682497][ T8979] Node 1 Normal free:3908360kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:4384kB local_pcp:4384kB free_cma:0kB [ 3548.720656][ T8979] lowmem_reserve[]: 0 0 0 0 0 [ 3548.725894][ T8979] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 3548.749383][ T8979] Node 0 DMA32: 2542*4kB (UE) 722*8kB (UE) 302*16kB (UME) 3345*32kB (UME) 2271*64kB (UME) 596*128kB (UME) 216*256kB (UME) 98*512kB (UM) 18*1024kB (UM) 8*2048kB (UM) 226*4096kB (M) = 1415432kB [ 3548.776133][ T8979] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3548.795637][ T8979] Node 1 Normal: 224*4kB (UE) 47*8kB (UE) 39*16kB (UE) 247*32kB (UE) 115*64kB (UME) 28*128kB (UME) 8*256kB (UE) 3*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3908360kB [ 3548.819440][ T8979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3548.834641][ T8979] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3548.845932][ T8979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3548.867045][ T8979] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3548.882478][ T8979] 61877 total pagecache pages [ 3548.892874][ T8979] 0 pages in swap cache [ 3548.897758][ T8979] Free swap = 124996kB [ 3548.901971][ T8979] Total swap = 124996kB [ 3548.906222][ T8979] 2097051 pages RAM [ 3548.917588][ T8979] 0 pages HighMem/MovableOnly [ 3548.922465][ T8979] 416955 pages reserved [ 3548.926704][ T8979] 0 pages cma reserved [ 3550.597526][ T8990] netlink: 'syz.1.11650': attribute type 22 has an invalid length. [ 3550.888568][ T9006] FAULT_INJECTION: forcing a failure. [ 3550.888568][ T9006] name failslab, interval 1, probability 0, space 0, times 0 [ 3550.905543][ T9006] CPU: 0 PID: 9006 Comm: syz.1.11655 Not tainted syzkaller #0 [ 3550.913077][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3550.923176][ T9006] Call Trace: [ 3550.926555][ T9006] [ 3550.929514][ T9006] dump_stack_lvl+0x18c/0x250 [ 3550.934233][ T9006] ? show_regs_print_info+0x20/0x20 [ 3550.939473][ T9006] ? load_image+0x420/0x420 [ 3550.944030][ T9006] ? __lock_acquire+0x7d80/0x7d80 [ 3550.949094][ T9006] should_fail_ex+0x394/0x4c0 [ 3550.953848][ T9006] should_failslab+0x9/0x20 [ 3550.958413][ T9006] slab_pre_alloc_hook+0x59/0x300 [ 3550.963505][ T9006] ? bpf_prog_alloc+0x3d/0x1a0 [ 3550.968325][ T9006] ? bpf_prog_load+0x6b2/0x1610 [ 3550.973233][ T9006] ? __sys_bpf+0x5ba/0x890 [ 3550.977718][ T9006] kmem_cache_alloc_node+0x5e/0x310 [ 3550.982981][ T9006] ? alloc_vmap_area+0x1b4/0x1e50 [ 3550.988075][ T9006] alloc_vmap_area+0x1b4/0x1e50 [ 3550.993006][ T9006] ? vm_map_ram+0xcf0/0xcf0 [ 3550.997568][ T9006] ? rcu_is_watching+0x15/0xb0 [ 3551.002397][ T9006] __get_vm_area_node+0x162/0x370 [ 3551.007490][ T9006] __vmalloc_node_range+0x36f/0x1320 [ 3551.012836][ T9006] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 3551.018441][ T9006] ? mark_lock+0x94/0x320 [ 3551.022823][ T9006] ? __lock_acquire+0x1336/0x7d80 [ 3551.027911][ T9006] ? aa_get_newest_label+0xfd/0x5c0 [ 3551.033200][ T9006] ? free_vm_area+0x50/0x50 [ 3551.037764][ T9006] ? end_current_label_crit_section+0x170/0x170 [ 3551.044075][ T9006] ? verify_lock_unused+0x140/0x140 [ 3551.049331][ T9006] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 3551.054939][ T9006] __vmalloc+0x7a/0x90 [ 3551.059070][ T9006] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 3551.064668][ T9006] bpf_prog_alloc_no_stats+0x46/0x430 [ 3551.070100][ T9006] bpf_prog_alloc+0x3d/0x1a0 [ 3551.074751][ T9006] bpf_prog_load+0x6b2/0x1610 [ 3551.079501][ T9006] ? map_freeze+0x420/0x420 [ 3551.084060][ T9006] ? __might_fault+0xaa/0x120 [ 3551.088782][ T9006] ? __lock_acquire+0x7d80/0x7d80 [ 3551.093854][ T9006] ? file_end_write+0x159/0x250 [ 3551.098762][ T9006] ? __might_fault+0xaa/0x120 [ 3551.103514][ T9006] ? __might_fault+0xc6/0x120 [ 3551.108243][ T9006] ? __might_fault+0xaa/0x120 [ 3551.112972][ T9006] ? bpf_lsm_bpf+0x9/0x10 [ 3551.117369][ T9006] ? security_bpf+0x7e/0xa0 [ 3551.121924][ T9006] __sys_bpf+0x5ba/0x890 [ 3551.126217][ T9006] ? bpf_link_show_fdinfo+0x390/0x390 [ 3551.131656][ T9006] ? lock_chain_count+0x20/0x20 [ 3551.136564][ T9006] __x64_sys_bpf+0x7c/0x90 [ 3551.141027][ T9006] do_syscall_64+0x55/0xb0 [ 3551.145491][ T9006] ? clear_bhb_loop+0x40/0x90 [ 3551.150256][ T9006] ? clear_bhb_loop+0x40/0x90 [ 3551.154989][ T9006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3551.160937][ T9006] RIP: 0033:0x7fcec059de99 [ 3551.165405][ T9006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3551.185065][ T9006] RSP: 002b:00007fcec147d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3551.193539][ T9006] RAX: ffffffffffffffda RBX: 00007fcec0825fa0 RCX: 00007fcec059de99 [ 3551.201562][ T9006] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 3551.209590][ T9006] RBP: 00007fcec147d090 R08: 0000000000000000 R09: 0000000000000000 [ 3551.217609][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3551.225627][ T9006] R13: 00007fcec0826038 R14: 00007fcec0825fa0 R15: 00007fffafd8c0e8 [ 3551.233673][ T9006] [ 3551.316628][ T9013] netlink: 'syz.4.11658': attribute type 17 has an invalid length. [ 3551.473710][ T9019] __nla_validate_parse: 4 callbacks suppressed [ 3551.473746][ T9019] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.11660'. [ 3551.490146][ T9017] netlink: 'syz.1.11661': attribute type 6 has an invalid length. [ 3551.499062][ T9017] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11661'. [ 3552.257496][ T9038] netlink: 'syz.0.11674': attribute type 6 has an invalid length. [ 3552.271351][ T9038] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11674'. [ 3552.354308][ T9040] netlink: 'syz.4.11666': attribute type 153 has an invalid length. [ 3552.396535][ T9040] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.11666'. [ 3553.656856][ T9072] netlink: 'syz.0.11677': attribute type 21 has an invalid length. [ 3553.667621][ T9072] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11677'. [ 3553.677111][ T9072] netlink: 'syz.0.11677': attribute type 4 has an invalid length. [ 3553.692962][ T9072] netlink: 'syz.0.11677': attribute type 3 has an invalid length. [ 3553.717588][ T9072] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11677'. [ 3553.744780][ T9072] netlink: 'syz.0.11677': attribute type 25 has an invalid length. [ 3553.775409][ T9072] netlink: 'syz.0.11677': attribute type 3 has an invalid length. [ 3553.802405][ T9072] netlink: 'syz.0.11677': attribute type 10 has an invalid length. [ 3553.824003][ T9072] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11677'. [ 3554.223674][ T9080] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.11678'. [ 3557.130135][ T9110] FAULT_INJECTION: forcing a failure. [ 3557.130135][ T9110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3557.151889][ T9110] CPU: 0 PID: 9110 Comm: syz.2.11688 Not tainted syzkaller #0 [ 3557.159436][ T9110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3557.169540][ T9110] Call Trace: [ 3557.172857][ T9110] [ 3557.175887][ T9110] dump_stack_lvl+0x18c/0x250 [ 3557.180620][ T9110] ? show_regs_print_info+0x20/0x20 [ 3557.185872][ T9110] ? load_image+0x420/0x420 [ 3557.190442][ T9110] ? __lock_acquire+0x7d80/0x7d80 [ 3557.195558][ T9110] ? snprintf+0xe9/0x140 [ 3557.199861][ T9110] should_fail_ex+0x394/0x4c0 [ 3557.204609][ T9110] _copy_to_user+0x2f/0xa0 [ 3557.209069][ T9110] simple_read_from_buffer+0xe7/0x150 [ 3557.214496][ T9110] proc_fail_nth_read+0x1e8/0x260 [ 3557.219564][ T9110] ? proc_fault_inject_write+0x360/0x360 [ 3557.225237][ T9110] ? fsnotify_perm+0x271/0x5e0 [ 3557.230037][ T9110] ? proc_fault_inject_write+0x360/0x360 [ 3557.235706][ T9110] vfs_read+0x298/0x990 [ 3557.239905][ T9110] ? kernel_read+0x1e0/0x1e0 [ 3557.244529][ T9110] ? __fget_files+0x28/0x460 [ 3557.249152][ T9110] ? __fget_files+0x3fc/0x460 [ 3557.253866][ T9110] ? __fdget_pos+0x2a3/0x330 [ 3557.258489][ T9110] ? ksys_read+0x74/0x260 [ 3557.262856][ T9110] ksys_read+0x151/0x260 [ 3557.267138][ T9110] ? vfs_write+0x9a0/0x9a0 [ 3557.271595][ T9110] ? lockdep_hardirqs_on+0x98/0x150 [ 3557.276828][ T9110] do_syscall_64+0x55/0xb0 [ 3557.281273][ T9110] ? clear_bhb_loop+0x40/0x90 [ 3557.286064][ T9110] ? clear_bhb_loop+0x40/0x90 [ 3557.290803][ T9110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3557.296736][ T9110] RIP: 0033:0x7f525f15e6ce [ 3557.301184][ T9110] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3557.320837][ T9110] RSP: 002b:00007f5260080fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3557.329284][ T9110] RAX: ffffffffffffffda RBX: 00007f52600816c0 RCX: 00007f525f15e6ce [ 3557.337288][ T9110] RDX: 000000000000000f RSI: 00007f52600810a0 RDI: 0000000000000005 [ 3557.345290][ T9110] RBP: 00007f5260081090 R08: 0000000000000000 R09: 0000000000000000 [ 3557.353294][ T9110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3557.361306][ T9110] R13: 00007f525f426038 R14: 00007f525f425fa0 R15: 00007ffda2457f18 [ 3557.369317][ T9110] [ 3557.399672][ T9113] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.11689'. [ 3557.455842][ T9113] validate_nla: 1 callbacks suppressed [ 3557.455859][ T9113] netlink: 'syz.0.11689': attribute type 3 has an invalid length. [ 3557.508545][ T9113] netlink: 'syz.0.11689': attribute type 6 has an invalid length. [ 3557.516456][ T9113] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.11689'. [ 3557.552272][ T9115] syzkaller0: entered promiscuous mode [ 3557.559122][ T9115] syzkaller0: entered allmulticast mode [ 3562.356400][ T9121] netlink: 'syz.1.11691': attribute type 21 has an invalid length. [ 3562.364454][ T9121] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11691'. [ 3562.383420][ T9121] netlink: 'syz.1.11691': attribute type 4 has an invalid length. [ 3562.394266][ T9121] netlink: 'syz.1.11691': attribute type 3 has an invalid length. [ 3562.407397][ T9121] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11691'. [ 3562.427405][ T9126] netlink: 'syz.1.11691': attribute type 10 has an invalid length. [ 3562.435383][ T9126] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11691'. [ 3562.848250][ T9141] [ 3562.850653][ T9141] ====================================================== [ 3562.857688][ T9141] WARNING: possible circular locking dependency detected [ 3562.864734][ T9141] syzkaller #0 Not tainted [ 3562.869175][ T9141] ------------------------------------------------------ [ 3562.876245][ T9141] syz.2.11696/9141 is trying to acquire lock: [ 3562.882328][ T9141] ffffffff974e4618 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x9e/0x520 [ 3562.892461][ T9141] [ 3562.892461][ T9141] but task is already holding lock: [ 3562.900189][ T9141] ffff88802fcdd238 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc4/0xd60 [ 3562.909108][ T9141] [ 3562.909108][ T9141] which lock already depends on the new lock. [ 3562.909108][ T9141] [ 3562.919532][ T9141] [ 3562.919532][ T9141] the existing dependency chain (in reverse order) is: [ 3562.928572][ T9141] [ 3562.928572][ T9141] -> #1 (&trie->lock){....}-{2:2}: [ 3562.935896][ T9141] _raw_spin_lock_irqsave+0xb4/0x100 [ 3562.941737][ T9141] trie_delete_elem+0x94/0x630 [ 3562.947060][ T9141] 0xffffffffa0000a5e [ 3562.951577][ T9141] trace_call_bpf+0x333/0x6c0 [ 3562.956793][ T9141] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 3562.962919][ T9141] perf_trace_lock_acquire+0x342/0x400 [ 3562.968928][ T9141] lock_acquire+0x3ef/0x420 [ 3562.973984][ T9141] _raw_spin_lock+0x2e/0x40 [ 3562.979041][ T9141] __free_object+0x3fe/0xa70 [ 3562.984176][ T9141] debug_check_no_obj_freed+0x10e/0x520 [ 3562.990269][ T9141] slab_free_freelist_hook+0xd2/0x1a0 [ 3562.996186][ T9141] kmem_cache_free_bulk+0x357/0x470 [ 3563.001935][ T9141] kvfree_rcu_bulk+0x1eb/0x470 [ 3563.007246][ T9141] kfree_rcu_monitor+0x7d3/0xf70 [ 3563.012724][ T9141] process_scheduled_works+0xa60/0x1600 [ 3563.018913][ T9141] worker_thread+0xa5e/0xfe0 [ 3563.024046][ T9141] kthread+0x2fa/0x390 [ 3563.028659][ T9141] ret_from_fork+0x48/0x80 [ 3563.033655][ T9141] ret_from_fork_asm+0x11/0x20 [ 3563.038975][ T9141] [ 3563.038975][ T9141] -> #0 (&obj_hash[i].lock){-.-.}-{2:2}: [ 3563.046826][ T9141] __lock_acquire+0x37ef/0x7d80 [ 3563.052226][ T9141] lock_acquire+0x19e/0x420 [ 3563.057273][ T9141] _raw_spin_lock_irqsave+0xb4/0x100 [ 3563.063119][ T9141] debug_check_no_obj_freed+0x9e/0x520 [ 3563.069128][ T9141] slab_free_freelist_hook+0xd2/0x1a0 [ 3563.075045][ T9141] __kmem_cache_free+0xba/0x1f0 [ 3563.080448][ T9141] trie_update_elem+0x783/0xd60 [ 3563.085850][ T9141] bpf_map_update_value+0x64b/0x710 [ 3563.091600][ T9141] generic_map_update_batch+0x5de/0x800 [ 3563.097711][ T9141] bpf_map_do_batch+0x3f2/0x600 [ 3563.103114][ T9141] __sys_bpf+0x381/0x890 [ 3563.107904][ T9141] __x64_sys_bpf+0x7c/0x90 [ 3563.112900][ T9141] do_syscall_64+0x55/0xb0 [ 3563.117863][ T9141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3563.124304][ T9141] [ 3563.124304][ T9141] other info that might help us debug this: [ 3563.124304][ T9141] [ 3563.134553][ T9141] Possible unsafe locking scenario: [ 3563.134553][ T9141] [ 3563.142019][ T9141] CPU0 CPU1 [ 3563.147404][ T9141] ---- ---- [ 3563.152783][ T9141] lock(&trie->lock); [ 3563.156882][ T9141] lock(&obj_hash[i].lock); [ 3563.164011][ T9141] lock(&trie->lock); [ 3563.170642][ T9141] lock(&obj_hash[i].lock); [ 3563.175252][ T9141] [ 3563.175252][ T9141] *** DEADLOCK *** [ 3563.175252][ T9141] [ 3563.183412][ T9141] 2 locks held by syz.2.11696/9141: [ 3563.188666][ T9141] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x408/0x710 [ 3563.198620][ T9141] #1: ffff88802fcdd238 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc4/0xd60 [ 3563.207976][ T9141] [ 3563.207976][ T9141] stack backtrace: [ 3563.213890][ T9141] CPU: 1 PID: 9141 Comm: syz.2.11696 Not tainted syzkaller #0 [ 3563.221370][ T9141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3563.231445][ T9141] Call Trace: [ 3563.234746][ T9141] [ 3563.237702][ T9141] dump_stack_lvl+0x18c/0x250 [ 3563.242411][ T9141] ? load_image+0x420/0x420 [ 3563.246941][ T9141] ? show_regs_print_info+0x20/0x20 [ 3563.252169][ T9141] ? print_circular_bug+0x12b/0x1a0 [ 3563.257395][ T9141] check_noncircular+0x2fc/0x400 [ 3563.262365][ T9141] ? print_deadlock_bug+0x5d0/0x5d0 [ 3563.267594][ T9141] ? lockdep_lock+0xf5/0x230 [ 3563.272213][ T9141] ? _find_first_zero_bit+0xd6/0x100 [ 3563.277534][ T9141] __lock_acquire+0x37ef/0x7d80 [ 3563.282424][ T9141] ? __lock_acquire+0x1262/0x7d80 [ 3563.287471][ T9141] ? verify_lock_unused+0x140/0x140 [ 3563.292701][ T9141] lock_acquire+0x19e/0x420 [ 3563.297233][ T9141] ? debug_check_no_obj_freed+0x9e/0x520 [ 3563.302897][ T9141] ? mod_objcg_state+0x101/0x8c0 [ 3563.307865][ T9141] ? read_lock_is_recursive+0x20/0x20 [ 3563.313281][ T9141] ? __lock_acquire+0x7d80/0x7d80 [ 3563.318353][ T9141] _raw_spin_lock_irqsave+0xb4/0x100 [ 3563.323691][ T9141] ? debug_check_no_obj_freed+0x9e/0x520 [ 3563.329380][ T9141] ? _raw_spin_lock+0x40/0x40 [ 3563.334140][ T9141] debug_check_no_obj_freed+0x9e/0x520 [ 3563.339641][ T9141] ? percpu_ref_put+0x12/0x100 [ 3563.344428][ T9141] ? percpu_ref_put+0x12/0x100 [ 3563.349219][ T9141] slab_free_freelist_hook+0xd2/0x1a0 [ 3563.354628][ T9141] ? trie_update_elem+0x783/0xd60 [ 3563.359687][ T9141] __kmem_cache_free+0xba/0x1f0 [ 3563.364582][ T9141] trie_update_elem+0x783/0xd60 [ 3563.369479][ T9141] bpf_map_update_value+0x64b/0x710 [ 3563.374708][ T9141] generic_map_update_batch+0x5de/0x800 [ 3563.380292][ T9141] ? rcu_read_unlock+0xa0/0xa0 [ 3563.385084][ T9141] ? __fdget+0x180/0x210 [ 3563.389360][ T9141] ? rcu_read_unlock+0xa0/0xa0 [ 3563.394149][ T9141] bpf_map_do_batch+0x3f2/0x600 [ 3563.399036][ T9141] ? bpf_lsm_audit_rule_known+0x10/0x10 [ 3563.404622][ T9141] __sys_bpf+0x381/0x890 [ 3563.408892][ T9141] ? bpf_link_show_fdinfo+0x390/0x390 [ 3563.414300][ T9141] ? lock_chain_count+0x20/0x20 [ 3563.419186][ T9141] __x64_sys_bpf+0x7c/0x90 [ 3563.423629][ T9141] do_syscall_64+0x55/0xb0 [ 3563.428097][ T9141] ? clear_bhb_loop+0x40/0x90 [ 3563.432822][ T9141] ? clear_bhb_loop+0x40/0x90 [ 3563.437523][ T9141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3563.443443][ T9141] RIP: 0033:0x7f525f19de99 [ 3563.447881][ T9141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3563.467515][ T9141] RSP: 002b:00007f5260081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3563.475959][ T9141] RAX: ffffffffffffffda RBX: 00007f525f425fa0 RCX: 00007f525f19de99 [ 3563.483957][ T9141] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 3563.491952][ T9141] RBP: 00007f525f233eaf R08: 0000000000000000 R09: 0000000000000000 [ 3563.499947][ T9141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3563.507944][ T9141] R13: 00007f525f426038 R14: 00007f525f425fa0 R15: 00007ffda2457f18 [ 3563.515951][ T9141] [ 3563.523844][ T9137] netlink: 'syz.4.11693': attribute type 21 has an invalid length. [ 3563.567437][ T9137] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11693'. [ 3563.603061][ T9137] netlink: 'syz.4.11693': attribute type 4 has an invalid length. [ 3563.622205][ T9137] netlink: 'syz.4.11693': attribute type 3 has an invalid length. [ 3563.645307][ T9137] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11693'. [ 3563.662763][ T9135] netlink: 'syz.4.11693': attribute type 10 has an invalid length. [ 3563.672794][ T9135] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11693'. [ 3565.677480][ T4343] Bluetooth: hci4: command 0x0406 tx timeout