last executing test programs: 9.511895637s ago: executing program 3 (id=884): socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext, 0x10, 0xc8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x4, 0x2}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc05, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x21, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8402, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc6736, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x1}, 0x1d480, 0x0, 0x9e6, 0x5, 0x4, 0x20005, 0xfffa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200281, 0x0) socket$kcm(0x1e, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f00000005c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x0, 0x0) 8.356024635s ago: executing program 3 (id=893): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="1c0000001a006bb12214b594e9a36f9e5c4eb100103fe3dc6e080000", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x20000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1100000004"], 0x48) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000210081044e81f782db44b9040200", 0x12}, {&(0x7f0000004200)="3d8c5ddb30a3718cef4f5210732f747226e8d7f41c83b136ac097b9a3c24c45639c2d70ee16c4b00790aca819a43b054bd01626eb0402783358806f064ef1fd963ab9b3f56cd18c60b0906d39e860184856b478f1ba6888cc780673762b0ee290d2b7dc0c21ff48175f779a7249c3f043c08a71a2f5abe07c7374fb92b8b3b61da1fa2d87a5263140bb672027b87cacc1b26a07901697eab4911135583935d28d3deb4720aad045d01d80f00db35ede34e1db4a9b9c9e4c8521575a0c0641a92ff7327130f1c", 0xc6}], 0x2}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0) 7.437102015s ago: executing program 1 (id=895): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={0x0, 0xa}, 0x104105, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e00000000"], 0x230}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 7.261227521s ago: executing program 1 (id=896): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xec211, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x39, 0x43a1bd73, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x10c002, 0xac5d, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FREEZING\x00', 0x9) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x1a5c0bf06ff69310, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d0013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x38, 0x0, &(0x7f00000001c0)="beff0307804a445b49c9fa8301005f262c7b66feafe0b864b867a169e28bb9b9b9b496ce7a96abb430c635a8cf95afab4dcb9cfdbd192c8c", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 6.021554572s ago: executing program 3 (id=897): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0xc0895) sendmsg$sock(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)="2057d58256acf748dc56fe70349e1d3800b4908ae420aa77f2fc9101e692dd4054c9f619d7c3b98d010d51cd4009d42675cbb00a864117e4797a0c30b21a21a2432c38ca322407d3ddfd499ca93440818f05a2a5c6a2fdedfacd8078f7e1f5a8ba290fb0f9f2ef77d1b1b3088774560f26329420985fa3d53b765df7cdd596ea01525b8560615e9d7e9bfa99194988d58d3fbe14e0166b6834ba920c37ff9cee715101cf81ec7fffcae92f8343966821bb794222cccf0ae7c7473ac708e07a6c30cd027296077b437722357269dcb16445", 0xd1}, {&(0x7f0000000800)="f40e80b9fe8a3eb21bd7bde532bb537fa109090ae3843f4cca29821aa47916fa7ae33c711d17cafaa763950cc03a5834213dcb37bcf340b2800d37ae31ee4528bb097b6850f0f40aa651c4aab03c5fbd9bc31af95bcda0f13275e499b88a7b6f7f6b2f2ce4c55c767f4babf5741e4dcd679d94394714c349e7c2c24b56d096bfe1b0cd01f91c0da644478de351271da8dc2f64960ed2a7214a71cd7bbae76ead8def841110f3972a62aa4d55d263f268", 0xb0}, {&(0x7f00000008c0)="b1ce5e36ed7a0703558eee5bf1b9881579fbf7278386f1c937f0d9a65f2e01098324c32be6e74834c1d16bee26497621c185aec98e79c7fc4b7844a039a9dd2f5a11575846f0a8588799bf2fcb66aa271329107e78c06e687336cf103d8b16aeb04c873fc88b342f77ff0e56e4eee550bd36879aed04477a2b00f013aac40ed67f2e542a191f20918822d1254db15bc6af94e97353e3b08c936cc7bdb7813005dc10141b6860754f4700f205f4d88890cbb0bbd112e70b1f8df5fd5d2f7f53787c823fb12c30736dc2be30", 0xcb}, {&(0x7f00000009c0)="fc57a43b3cc551a60294e2a22c53ec6cd9f9aa57f88d414562808d98e1b202c986a656929fd48eb327b12245b0004670477c851f61c1d83436d1c220826e79a90d4b452cda8fe8079ca94781c7b9", 0x4e}], 0x4, &(0x7f0000000a80)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18}, 0x48006) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c084002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd) 5.954382554s ago: executing program 0 (id=898): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x20000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1100000004"], 0x48) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000210081044e81f782db44b9040200", 0x12}, {&(0x7f0000004200)="3d8c5ddb30a3718cef4f5210732f747226e8d7f41c83b136ac097b9a3c24c45639c2d70ee16c4b00790aca819a43b054bd01626eb0402783358806f064ef1fd963ab9b3f56cd18c60b0906d39e860184856b478f1ba6888cc780673762b0ee290d2b7dc0c21ff48175f779a7249c3f043c08a71a2f5abe07c7374fb92b8b3b61da1fa2d87a5263140bb672027b87cacc1b26a07901697eab4911135583935d28d3deb4720aad045d01d80f00db35ede34e1db4a9b9c9e4c8521575a0c0641a92ff7327130f1c", 0xc6}], 0x2}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0) 5.874955007s ago: executing program 1 (id=900): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xec211, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x39, 0x43a1bd73, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x10c002, 0xac5d, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FREEZING\x00', 0x9) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x1a5c0bf06ff69310, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d0013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x38, 0x0, &(0x7f00000001c0)="beff0307804a445b49c9fa8301005f262c7b66feafe0b864b867a169e28bb9b9b9b496ce7a96abb430c635a8cf95afab4dcb9cfdbd192c8c", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 5.487306809s ago: executing program 2 (id=901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x6, 0x5, 0x3, 0x4000, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xe}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x8, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x9, 0xfffff0bc}]}, @fwd={0xe}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0x1a, 0x5}, @volatile={0x2, 0x0, 0x0, 0x9, 0x5}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x4}, @float={0x3, 0x0, 0x0, 0x10, 0x8}, @enum64={0x4, 0x8, 0x0, 0x13, 0x0, 0x2, [{0xe, 0x0, 0x3}, {0x6, 0x5, 0x97d7}, {0xe, 0x7fffffff, 0x1}, {0x2, 0x4, 0x9}, {0x9, 0x68, 0x6}, {0xe, 0x9, 0x9}, {0x6, 0x9, 0x6}, {0xe, 0x4, 0x401}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x4}}, @fwd={0xe}]}, {0x0, [0x0, 0x61, 0x5f, 0x0, 0x30, 0x61]}}, &(0x7f0000000540)=""/251, 0x104, 0xfb, 0x1, 0x5}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x5}, 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) 5.48688612s ago: executing program 3 (id=902): r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x12, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x93}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0xae, &(0x7f0000000240)=""/174, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x20005, 0xae, 0xff}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000380)=[{0x0, 0x5, 0x2, 0x6}, {0x1, 0x1, 0x10, 0x1}, {0xfffffffd, 0x1, 0xb, 0xa}, {0x1, 0x3, 0x1, 0x2}, {0x2, 0x2, 0xa, 0x6}, {0x3, 0x3, 0x1, 0x1}, {0x3, 0x2, 0x0, 0x5}, {0x3, 0x3, 0xd, 0x9}, {0x5, 0x4, 0x3, 0x8}], 0x10, 0x7f}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000040012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f900", 0xc5}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000100), &(0x7f0000000580)=r2}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0xfd, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x3}, 0x100e64, 0xc78, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r2, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x26, &(0x7f0000000800)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xd4, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xfffffffc}, [@generic={0xe, 0x9, 0xa, 0x4, 0xfffffffb}]}, &(0x7f0000000680)='GPL\x00', 0x5, 0x45, &(0x7f00000006c0)=""/69, 0x41000, 0x8, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x2, 0x1, 0x135, 0x1408}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000b40)=[0x1], &(0x7f0000000b80)=[{0x0, 0x5, 0x2, 0x2}, {0x2, 0x5, 0xf, 0x4}, {0x5, 0x3, 0x9, 0x9}, {0x4, 0x2, 0xe, 0x2}, {0x0, 0x4, 0xf}], 0x10, 0x2}, 0x94) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1c}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r8, 0x2403, 0x2) r9 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x10, r5}, 0x18) r10 = openat$cgroup_procs(r7, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201", 0x15}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r11 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) write$cgroup_pid(r10, &(0x7f0000000380), 0x12) write$cgroup_int(r9, &(0x7f0000000040), 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000040), 0x4) 5.45493939s ago: executing program 0 (id=903): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0xfffffffe, 0x6}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xfffd}], 0x1}, 0x80d1) (fail_nth: 1) 5.374575023s ago: executing program 1 (id=904): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={0x0, 0xa}, 0x104105, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006f"], 0x230}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 4.994403056s ago: executing program 0 (id=905): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="1c0000001a006bb12214b594e9a36f9e5c4eb100103fe3dc6e080000", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x20000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1100000004"], 0x48) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000210081044e81f782db44b9040200", 0x12}, {&(0x7f0000004200)="3d8c5ddb30a3718cef4f5210732f747226e8d7f41c83b136ac097b9a3c24c45639c2d70ee16c4b00790aca819a43b054bd01626eb0402783358806f064ef1fd963ab9b3f56cd18c60b0906d39e860184856b478f1ba6888cc780673762b0ee290d2b7dc0c21ff48175f779a7249c3f043c08a71a2f5abe07c7374fb92b8b3b61da1fa2d87a5263140bb672027b87cacc1b26a07901697eab4911135583935d28d3deb4720aad045d01d80f00db35ede34e1db4a9b9c9e4c8521575a0c0641a92ff7327130f1c", 0xc6}], 0x2}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0) 4.953773357s ago: executing program 1 (id=906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x6, 0x5, 0x3, 0x4000, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xe}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x8, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x9, 0xfffff0bc}]}, @fwd={0xe}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0x1a, 0x5}, @volatile={0x2, 0x0, 0x0, 0x9, 0x5}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x4}, @float={0x3, 0x0, 0x0, 0x10, 0x8}, @enum64={0x4, 0x8, 0x0, 0x13, 0x0, 0x2, [{0xe, 0x0, 0x3}, {0x6, 0x5, 0x97d7}, {0xe, 0x7fffffff, 0x1}, {0x2, 0x4, 0x9}, {0x9, 0x68, 0x6}, {0xe, 0x9, 0x9}, {0x6, 0x9, 0x6}, {0xe, 0x4, 0x401}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x4}}, @fwd={0xe}]}, {0x0, [0x0, 0x61, 0x5f, 0x0, 0x30, 0x61]}}, &(0x7f0000000540)=""/251, 0x104, 0xfb, 0x1, 0x5}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x5}, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) 4.568229339s ago: executing program 3 (id=907): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xec211, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x39, 0x43a1bd73, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x10c002, 0xac5d, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FREEZING\x00', 0x9) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x1a5c0bf06ff69310, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d0013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x38, 0x0, &(0x7f00000001c0)="beff0307804a445b49c9fa8301005f262c7b66feafe0b864b867a169e28bb9b9b9b496ce7a96abb430c635a8cf95afab4dcb9cfdbd192c8c", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 2.924507814s ago: executing program 0 (id=908): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xec211, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x39, 0x43a1bd73, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x10c002, 0xac5d, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FREEZING\x00', 0x9) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x1a5c0bf06ff69310, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d0013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x38, 0x0, &(0x7f00000001c0)="beff0307804a445b49c9fa8301005f262c7b66feafe0b864b867a169e28bb9b9b9b496ce7a96abb430c635a8cf95afab4dcb9cfdbd192c8c", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 2.868420375s ago: executing program 2 (id=909): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0xc0895) sendmsg$sock(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)="2057d58256acf748dc56fe70349e1d3800b4908ae420aa77f2fc9101e692dd4054c9f619d7c3b98d010d51cd4009d42675cbb00a864117e4797a0c30b21a21a2432c38ca322407d3ddfd499ca93440818f05a2a5c6a2fdedfacd8078f7e1f5a8ba290fb0f9f2ef77d1b1b3088774560f26329420985fa3d53b765df7cdd596ea01525b8560615e9d7e9bfa99194988d58d3fbe14e0166b6834ba920c37ff9cee715101cf81ec7fffcae92f8343966821bb794222cccf0ae7c7473ac708e07a6c30cd027296077b437722357269dcb16445", 0xd1}, {&(0x7f0000000800)="f40e80b9fe8a3eb21bd7bde532bb537fa109090ae3843f4cca29821aa47916fa7ae33c711d17cafaa763950cc03a5834213dcb37bcf340b2800d37ae31ee4528bb097b6850f0f40aa651c4aab03c5fbd9bc31af95bcda0f13275e499b88a7b6f7f6b2f2ce4c55c767f4babf5741e4dcd679d94394714c349e7c2c24b56d096bfe1b0cd01f91c0da644478de351271da8dc2f64960ed2a7214a71cd7bbae76ead8def841110f3972a62aa4d55d263f268", 0xb0}, {&(0x7f00000008c0)="b1ce5e36ed7a0703558eee5bf1b9881579fbf7278386f1c937f0d9a65f2e01098324c32be6e74834c1d16bee26497621c185aec98e79c7fc4b7844a039a9dd2f5a11575846f0a8588799bf2fcb66aa271329107e78c06e687336cf103d8b16aeb04c873fc88b342f77ff0e56e4eee550bd36879aed04477a2b00f013aac40ed67f2e542a191f20918822d1254db15bc6af94e97353e3b08c936cc7bdb7813005dc10141b6860754f4700f205f4d88890cbb0bbd112e70b1f8df5fd5d2f7f53787c823fb12c30736dc2be30", 0xcb}, {&(0x7f00000009c0)="fc57a43b3cc551a60294e2a22c53ec6cd9f9aa57f88d414562808d98e1b202c986a656929fd48eb327b12245b0004670477c851f61c1d83436d1c220826e79a90d4b452cda8fe8079ca94781c7b9", 0x4e}], 0x4, &(0x7f0000000a80)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18}, 0x48006) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c084002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd) 2.529040557s ago: executing program 2 (id=910): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x5, 0x80, 0x7, 0x5a, 0x1, 0x4, 0x0, 0x486e, 0x204, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xec, 0x7cdeb6b7fa86c61f, @perf_bp={0x0, 0x2}, 0x4, 0x9, 0x1, 0x0, 0x8, 0x0, 0xfffc, 0x0, 0x9, 0x0, 0x118d}) close(0xffffffffffffffff) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1ffffffffffffef3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x80000, 0x0, 0x0, 0x41000, 0x8}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (fail_nth: 5) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 1.52239221s ago: executing program 2 (id=911): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x20000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1100000004"], 0x48) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000210081044e81f782db44b9040200", 0x12}, {&(0x7f0000004200)="3d8c5ddb30a3718cef4f5210732f747226e8d7f41c83b136ac097b9a3c24c45639c2d70ee16c4b00790aca819a43b054bd01626eb0402783358806f064ef1fd963ab9b3f56cd18c60b0906d39e860184856b478f1ba6888cc780673762b0ee290d2b7dc0c21ff48175f779a7249c3f043c08a71a2f5abe07c7374fb92b8b3b61da1fa2d87a5263140bb672027b87cacc1b26a07901697eab4911135583935d28d3deb4720aad045d01d80f00db35ede34e1db4a9b9c9e4c8521575a0c0641a92ff7327130f1c", 0xc6}], 0x2}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0) 1.294699247s ago: executing program 2 (id=912): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xec211, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x39, 0x43a1bd73, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x10c002, 0xac5d, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FREEZING\x00', 0x9) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x1a5c0bf06ff69310, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d0013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x38, 0x0, &(0x7f00000001c0)="beff0307804a445b49c9fa8301005f262c7b66feafe0b864b867a169e28bb9b9b9b496ce7a96abb430c635a8cf95afab4dcb9cfdbd192c8c", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 308.148259ms ago: executing program 3 (id=913): socket$kcm(0x2b, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {0x0}], 0x2, 0x0, 0x0, 0x2663}, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x1ff) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xac67, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000004000008510000006000000180a0000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r6, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81}, [@map_val={0x18, 0x3, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xffff8000}, @generic={0xfb, 0x9, 0x6, 0x7, 0x8}]}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xe, '\x00', r9, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x4, 0x76, 0x8}, 0x10, 0x93a7, r0, 0x2, &(0x7f0000000900)=[r6, r6, r6, r6, r6, 0xffffffffffffffff, r6, r6], &(0x7f0000000940)=[{0x0, 0x3, 0xf, 0x8}, {0x4, 0x4, 0xc, 0x7}], 0x10, 0x3}, 0x94) 202.524003ms ago: executing program 0 (id=914): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={0x0, 0xa}, 0x104105, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006f"], 0x230}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 202.019473ms ago: executing program 1 (id=915): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x9, 0x8, 0x7, 0x4b, 0x0, 0x800, 0x280, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5e, 0x2, @perf_config_ext={0x2, 0x40}, 0x510, 0x8, 0x8001, 0x9, 0x5, 0x6c, 0x1000, 0x0, 0x99e7, 0x0, 0xfffffffffffffff7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000680)='+&\xbc\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000fcffffff000000130400000080520000a45d5abb715a743b6e95b0129d4fac253b95", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="05000000030000000200"/25], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x35, 0x43a1bd76, 0x7, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x4, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x7, @loopback, 0x8, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7000000"], 0x10b8}, 0x200408c0) sendmsg$kcm(r3, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @broadcast}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffb, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r10) r11 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r13}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) 175.120904ms ago: executing program 2 (id=916): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfdef) openat$cgroup_ro(r1, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x18, 0x0, 0x1, &(0x7f0000001780)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002b40)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018280000", @ANYRES32=r2, @ANYBLOB="0000000008000000183000000100000000000000000000008d2600000100000070210200f0ffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000006000000b70800002f3c00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001980)=""/4096, 0x0, 0x4f, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000002a40)={0xf0000000, 0x4}, 0x8, 0x10, &(0x7f0000002a80)={0x0, 0x5, 0x43cc, 0xb}, 0x10, 0x247ce, r2, 0x1, &(0x7f0000002ac0)=[r2, r4], &(0x7f0000002b00)=[{0x2, 0x3, 0x4, 0xb}], 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f00000001c0)="e00500000007dbe9abc8d24470e712", 0x0, 0xcd34, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2b, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) 0s ago: executing program 0 (id=917): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="1c0000001a006bb12214b594e9a36f9e5c4eb100103fe3dc6e080000", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x20000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1100000004"], 0x48) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000210081044e81f782db44b9040200", 0x12}, {&(0x7f0000004200)="3d8c5ddb30a3718cef4f5210732f747226e8d7f41c83b136ac097b9a3c24c45639c2d70ee16c4b00790aca819a43b054bd01626eb0402783358806f064ef1fd963ab9b3f56cd18c60b0906d39e860184856b478f1ba6888cc780673762b0ee290d2b7dc0c21ff48175f779a7249c3f043c08a71a2f5abe07c7374fb92b8b3b61da1fa2d87a5263140bb672027b87cacc1b26a07901697eab4911135583935d28d3deb4720aad045d01d80f00db35ede34e1db4a9b9c9e4c8521575a0c0641a92ff7327130f1c", 0xc6}], 0x2}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 048] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a [ 95.821000][ T6048] RBP: 00007fbb0261f090 R08: 0000000000000000 R09: 0000000000000000 [ 95.828994][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.836983][ T6048] R13: 00007fbb01a16038 R14: 00007fbb01a15fa0 R15: 00007ffffa674598 [ 95.845001][ T6048] [ 96.196072][ T6058] netlink: 196 bytes leftover after parsing attributes in process `syz.1.61'. [ 98.217829][ T6052] netlink: 763 bytes leftover after parsing attributes in process `syz.0.59'. [ 98.420832][ T6063] netlink: 763 bytes leftover after parsing attributes in process `syz.2.71'. [ 98.599718][ T6066] netlink: 196 bytes leftover after parsing attributes in process `syz.3.64'. [ 98.700012][ T6071] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.66'. [ 99.216930][ T6077] netlink: 763 bytes leftover after parsing attributes in process `syz.3.68'. [ 99.323289][ T6082] netlink: 'syz.1.72': attribute type 1 has an invalid length. [ 99.339612][ T6082] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.72'. [ 99.349746][ T6082] netlink: 'syz.1.72': attribute type 1 has an invalid length. [ 99.567779][ T6089] bridge0: port 2(batadv0) entered blocking state [ 99.594288][ T6089] bridge0: port 2(batadv0) entered disabled state [ 99.609633][ T6088] netlink: 196 bytes leftover after parsing attributes in process `syz.0.74'. [ 99.663816][ T6089] batadv0: entered allmulticast mode [ 99.687418][ T6089] batadv0: entered promiscuous mode [ 99.703837][ T6089] bridge0: port 2(batadv0) entered blocking state [ 99.711812][ T6089] bridge0: port 2(batadv0) entered forwarding state [ 100.017818][ T3460] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 100.027261][ T3460] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 100.253758][ T6096] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.75'. [ 101.682397][ T6099] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.76'. [ 101.713329][ T6099] netlink: del zone limit has 8 unknown bytes [ 101.882992][ T6103] netlink: 196 bytes leftover after parsing attributes in process `syz.1.78'. [ 101.967721][ T6109] syzkaller0: entered promiscuous mode [ 101.975235][ T6109] syzkaller0: entered allmulticast mode [ 101.984392][ T6109] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 65487 [ 103.040429][ T6125] bridge0: port 2(batadv0) entered blocking state [ 103.068866][ T6125] bridge0: port 2(batadv0) entered disabled state [ 103.076408][ T6125] batadv0: entered allmulticast mode [ 103.140829][ T6125] batadv0: entered promiscuous mode [ 103.144541][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 103.155543][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 103.227808][ T6125] bridge0: port 2(batadv0) entered blocking state [ 103.236158][ T6125] bridge0: port 2(batadv0) entered forwarding state [ 103.263378][ T6127] __nla_validate_parse: 2 callbacks suppressed [ 103.263400][ T6127] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.88'. [ 103.322331][ T6127] netlink: del zone limit has 8 unknown bytes [ 103.516190][ T6137] netlink: 168 bytes leftover after parsing attributes in process `syz.3.90'. [ 104.390453][ T6150] netlink: 'syz.3.93': attribute type 10 has an invalid length. [ 104.408880][ T6150] netlink: 40 bytes leftover after parsing attributes in process `syz.3.93'. [ 104.427718][ T6150] team0: entered promiscuous mode [ 104.467208][ T6150] team_slave_0: entered promiscuous mode [ 104.496948][ T6150] team_slave_1: entered promiscuous mode [ 104.514789][ T6150] team0: entered allmulticast mode [ 104.537225][ T6150] team_slave_0: entered allmulticast mode [ 104.559255][ T6150] team_slave_1: entered allmulticast mode [ 104.594090][ T6150] bridge0: port 4(team0) entered blocking state [ 104.616505][ T6150] bridge0: port 4(team0) entered disabled state [ 104.670802][ T6150] bridge0: port 4(team0) entered blocking state [ 104.677789][ T6150] bridge0: port 4(team0) entered forwarding state [ 104.942683][ T6155] netlink: 763 bytes leftover after parsing attributes in process `syz.2.94'. [ 105.074098][ T6157] netlink: 196 bytes leftover after parsing attributes in process `syz.0.95'. [ 108.941387][ T6183] netlink: 196 bytes leftover after parsing attributes in process `syz.3.106'. [ 110.119569][ T6202] netlink: 763 bytes leftover after parsing attributes in process `syz.3.109'. [ 110.127514][ T6198] netlink: 196 bytes leftover after parsing attributes in process `syz.0.110'. [ 110.271727][ T6201] netlink: 'syz.1.112': attribute type 10 has an invalid length. [ 110.281675][ T6201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.112'. [ 110.293063][ T6201] team0: entered promiscuous mode [ 110.298353][ T6201] team_slave_0: entered promiscuous mode [ 110.307101][ T6201] team_slave_1: entered promiscuous mode [ 110.314664][ T6201] team0: entered allmulticast mode [ 110.321176][ T6201] team_slave_0: entered allmulticast mode [ 110.328111][ T6201] team_slave_1: entered allmulticast mode [ 110.341819][ T6201] bridge0: port 3(team0) entered blocking state [ 110.360840][ T6201] bridge0: port 3(team0) entered disabled state [ 110.401042][ T6201] bridge0: port 3(team0) entered blocking state [ 110.408057][ T6201] bridge0: port 3(team0) entered forwarding state [ 110.621793][ T6210] FAULT_INJECTION: forcing a failure. [ 110.621793][ T6210] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.667107][ T6210] CPU: 0 PID: 6210 Comm: syz.2.114 Not tainted syzkaller #0 [ 110.674451][ T6210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 110.684535][ T6210] Call Trace: [ 110.687918][ T6210] [ 110.690870][ T6210] dump_stack_lvl+0x18c/0x250 [ 110.695769][ T6210] ? show_regs_print_info+0x20/0x20 [ 110.701004][ T6210] ? load_image+0x420/0x420 [ 110.705540][ T6210] ? __lock_acquire+0x7d40/0x7d40 [ 110.710672][ T6210] ? snprintf+0xe9/0x140 [ 110.714935][ T6210] should_fail_ex+0x39d/0x4d0 [ 110.719621][ T6210] _copy_to_user+0x2f/0xa0 [ 110.724043][ T6210] simple_read_from_buffer+0xe7/0x150 [ 110.729419][ T6210] proc_fail_nth_read+0x1e8/0x260 [ 110.734445][ T6210] ? proc_fault_inject_write+0x360/0x360 [ 110.740077][ T6210] ? fsnotify_perm+0x271/0x5e0 [ 110.744886][ T6210] ? proc_fault_inject_write+0x360/0x360 [ 110.750525][ T6210] vfs_read+0x28b/0x970 [ 110.754686][ T6210] ? kernel_read+0x1e0/0x1e0 [ 110.759274][ T6210] ? __fget_files+0x28/0x4b0 [ 110.763867][ T6210] ? __fget_files+0x28/0x4b0 [ 110.768454][ T6210] ? __fget_files+0x43d/0x4b0 [ 110.773138][ T6210] ? __fdget_pos+0x2a3/0x330 [ 110.777724][ T6210] ? ksys_read+0x75/0x260 [ 110.782062][ T6210] ksys_read+0x150/0x260 [ 110.786307][ T6210] ? vfs_write+0x990/0x990 [ 110.790908][ T6210] ? lockdep_hardirqs_on+0x98/0x150 [ 110.796115][ T6210] do_syscall_64+0x55/0xb0 [ 110.800558][ T6210] ? clear_bhb_loop+0x40/0x90 [ 110.805241][ T6210] ? clear_bhb_loop+0x40/0x90 [ 110.809916][ T6210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.815815][ T6210] RIP: 0033:0x7fd79d35d68e [ 110.820667][ T6210] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 110.840280][ T6210] RSP: 002b:00007fd79e2a7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.848689][ T6210] RAX: ffffffffffffffda RBX: 00007fd79e2a86c0 RCX: 00007fd79d35d68e [ 110.856660][ T6210] RDX: 000000000000000f RSI: 00007fd79e2a80a0 RDI: 0000000000000005 [ 110.864649][ T6210] RBP: 00007fd79e2a8090 R08: 0000000000000000 R09: 0000000000000000 [ 110.872626][ T6210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.880616][ T6210] R13: 00007fd79d616218 R14: 00007fd79d616180 R15: 00007ffd2d2a80f8 [ 110.888651][ T6210] [ 111.205968][ T6218] netlink: 196 bytes leftover after parsing attributes in process `syz.3.117'. [ 111.249619][ T6222] netlink: 763 bytes leftover after parsing attributes in process `syz.0.118'. [ 114.321464][ T6249] FAULT_INJECTION: forcing a failure. [ 114.321464][ T6249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.342879][ T6251] netlink: 763 bytes leftover after parsing attributes in process `syz.0.125'. [ 114.359179][ T6249] CPU: 1 PID: 6249 Comm: syz.2.127 Not tainted syzkaller #0 [ 114.366555][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.376638][ T6249] Call Trace: [ 114.379909][ T6249] [ 114.382842][ T6249] dump_stack_lvl+0x18c/0x250 [ 114.387536][ T6249] ? show_regs_print_info+0x20/0x20 [ 114.392730][ T6249] ? load_image+0x420/0x420 [ 114.397225][ T6249] ? __might_fault+0xaa/0x120 [ 114.401894][ T6249] ? __lock_acquire+0x7d40/0x7d40 [ 114.407016][ T6249] should_fail_ex+0x39d/0x4d0 [ 114.411707][ T6249] _copy_from_iter+0x1d9/0x12e0 [ 114.416834][ T6249] ? rep_movs_alternative+0x4a/0x90 [ 114.422068][ T6249] ? _copy_from_iter+0x24e/0x12e0 [ 114.427198][ T6249] ? __virt_addr_valid+0x18c/0x540 [ 114.432311][ T6249] ? __lock_acquire+0x7d40/0x7d40 [ 114.437334][ T6249] ? copyout_mc+0x70/0x70 [ 114.441667][ T6249] ? copyout_mc+0x70/0x70 [ 114.445995][ T6249] ? __virt_addr_valid+0x18c/0x540 [ 114.451109][ T6249] ? page_copy_sane+0x16a/0x270 [ 114.455963][ T6249] copy_page_from_iter+0x7b/0x100 [ 114.460985][ T6249] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 114.466792][ T6249] tun_get_user+0x15db/0x3ca0 [ 114.471478][ T6249] ? aa_file_perm+0x11b/0xee0 [ 114.476156][ T6249] ? rcu_read_unlock+0xa0/0xa0 [ 114.480931][ T6249] ? tun_get+0x1c/0x2e0 [ 114.485090][ T6249] ? __lock_acquire+0x7d40/0x7d40 [ 114.490118][ T6249] ? tun_get+0x1c/0x2e0 [ 114.494286][ T6249] tun_chr_write_iter+0x119/0x200 [ 114.499314][ T6249] vfs_write+0x46c/0x990 [ 114.503579][ T6249] ? file_end_write+0x250/0x250 [ 114.508431][ T6249] ? __fget_files+0x43d/0x4b0 [ 114.513112][ T6249] ? __fdget_pos+0x1d8/0x330 [ 114.517700][ T6249] ? ksys_write+0x75/0x260 [ 114.522121][ T6249] ksys_write+0x150/0x260 [ 114.526456][ T6249] ? __ia32_sys_read+0x90/0x90 [ 114.531220][ T6249] ? lockdep_hardirqs_on+0x98/0x150 [ 114.536434][ T6249] do_syscall_64+0x55/0xb0 [ 114.540849][ T6249] ? clear_bhb_loop+0x40/0x90 [ 114.545522][ T6249] ? clear_bhb_loop+0x40/0x90 [ 114.550205][ T6249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.556101][ T6249] RIP: 0033:0x7fd79d39ce59 [ 114.560524][ T6249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.580135][ T6249] RSP: 002b:00007fd79e2ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.588551][ T6249] RAX: ffffffffffffffda RBX: 00007fd79d615fa0 RCX: 00007fd79d39ce59 [ 114.596530][ T6249] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 00000000000000c8 [ 114.604583][ T6249] RBP: 00007fd79e2ea090 R08: 0000000000000000 R09: 0000000000000000 [ 114.612553][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.620521][ T6249] R13: 00007fd79d616038 R14: 00007fd79d615fa0 R15: 00007ffd2d2a80f8 [ 114.628503][ T6249] [ 114.865772][ T6262] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.130'. [ 114.904319][ T6263] netlink: 763 bytes leftover after parsing attributes in process `syz.1.131'. [ 115.089704][ T6267] netlink: 196 bytes leftover after parsing attributes in process `syz.2.133'. [ 115.345955][ T6270] netlink: 148 bytes leftover after parsing attributes in process `syz.0.134'. [ 118.179912][ T6284] FAULT_INJECTION: forcing a failure. [ 118.179912][ T6284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.218276][ T6284] CPU: 1 PID: 6284 Comm: syz.1.139 Not tainted syzkaller #0 [ 118.225647][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 118.235742][ T6284] Call Trace: [ 118.239040][ T6284] [ 118.241983][ T6284] dump_stack_lvl+0x18c/0x250 [ 118.246689][ T6284] ? show_regs_print_info+0x20/0x20 [ 118.251930][ T6284] ? load_image+0x420/0x420 [ 118.256465][ T6284] ? __lock_acquire+0x7d40/0x7d40 [ 118.261539][ T6284] ? snprintf+0xe9/0x140 [ 118.265823][ T6284] should_fail_ex+0x39d/0x4d0 [ 118.270545][ T6284] _copy_to_user+0x2f/0xa0 [ 118.274985][ T6284] simple_read_from_buffer+0xe7/0x150 [ 118.280390][ T6284] proc_fail_nth_read+0x1e8/0x260 [ 118.285450][ T6284] ? proc_fault_inject_write+0x360/0x360 [ 118.291108][ T6284] ? fsnotify_perm+0x271/0x5e0 [ 118.295894][ T6284] ? proc_fault_inject_write+0x360/0x360 [ 118.301548][ T6284] vfs_read+0x28b/0x970 [ 118.305733][ T6284] ? kernel_read+0x1e0/0x1e0 [ 118.310362][ T6284] ? __fget_files+0x28/0x4b0 [ 118.314962][ T6284] ? __fget_files+0x28/0x4b0 [ 118.319564][ T6284] ? __fget_files+0x43d/0x4b0 [ 118.324266][ T6284] ? __fdget_pos+0x2a3/0x330 [ 118.328863][ T6284] ? ksys_read+0x75/0x260 [ 118.333209][ T6284] ksys_read+0x150/0x260 [ 118.337479][ T6284] ? vfs_write+0x990/0x990 [ 118.341920][ T6284] ? lockdep_hardirqs_on+0x98/0x150 [ 118.347143][ T6284] do_syscall_64+0x55/0xb0 [ 118.351568][ T6284] ? clear_bhb_loop+0x40/0x90 [ 118.356258][ T6284] ? clear_bhb_loop+0x40/0x90 [ 118.360945][ T6284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.366849][ T6284] RIP: 0033:0x7fbb0175d68e [ 118.371279][ T6284] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 118.390907][ T6284] RSP: 002b:00007fbb0261efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.399346][ T6284] RAX: ffffffffffffffda RBX: 00007fbb0261f6c0 RCX: 00007fbb0175d68e [ 118.407328][ T6284] RDX: 000000000000000f RSI: 00007fbb0261f0a0 RDI: 0000000000000005 [ 118.415311][ T6284] RBP: 00007fbb0261f090 R08: 0000000000000000 R09: 0000000000000000 [ 118.423298][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.431280][ T6284] R13: 00007fbb01a16038 R14: 00007fbb01a15fa0 R15: 00007ffffa674598 [ 118.439317][ T6284] [ 118.526757][ T6288] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.141'. [ 118.651247][ T6294] netlink: 763 bytes leftover after parsing attributes in process `syz.1.142'. [ 118.773639][ T6295] mac80211_hwsim hwsim9 ..ãc¤±: renamed from wlan1 (while UP) [ 118.886603][ T6297] sctp: [Deprecated]: syz.2.144 (pid 6297) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.886603][ T6297] Use struct sctp_sack_info instead [ 118.984348][ T6299] netlink: 196 bytes leftover after parsing attributes in process `syz.0.145'. [ 119.466485][ T6305] FAULT_INJECTION: forcing a failure. [ 119.466485][ T6305] name failslab, interval 1, probability 0, space 0, times 0 [ 119.524691][ T6305] CPU: 0 PID: 6305 Comm: syz.0.147 Not tainted syzkaller #0 [ 119.532047][ T6305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 119.542130][ T6305] Call Trace: [ 119.545434][ T6305] [ 119.548381][ T6305] dump_stack_lvl+0x18c/0x250 [ 119.553088][ T6305] ? show_regs_print_info+0x20/0x20 [ 119.558311][ T6305] ? load_image+0x420/0x420 [ 119.562838][ T6305] ? __might_sleep+0xe0/0xe0 [ 119.567470][ T6305] ? __lock_acquire+0x7d40/0x7d40 [ 119.572521][ T6305] ? stack_trace_save+0xaa/0x100 [ 119.577487][ T6305] ? stack_trace_snprint+0xf0/0xf0 [ 119.582621][ T6305] should_fail_ex+0x39d/0x4d0 [ 119.587367][ T6305] should_failslab+0x9/0x20 [ 119.591896][ T6305] slab_pre_alloc_hook+0x59/0x310 [ 119.596942][ T6305] ? kasan_set_track+0x5f/0x70 [ 119.601729][ T6305] ? kasan_set_track+0x4e/0x70 [ 119.606512][ T6305] ? __kasan_kmalloc+0x8f/0xa0 [ 119.611310][ T6305] kmem_cache_alloc_node+0x60/0x320 [ 119.616528][ T6305] ? netlink_sendmsg+0x8d0/0xbf0 [ 119.621491][ T6305] ? __alloc_skb+0x103/0x2c0 [ 119.626111][ T6305] __alloc_skb+0x103/0x2c0 [ 119.630551][ T6305] netlink_dump+0x1ec/0xe50 [ 119.635072][ T6305] ? end_current_label_crit_section+0x170/0x170 [ 119.641338][ T6305] ? end_current_label_crit_section+0x170/0x170 [ 119.647609][ T6305] ? netlink_lookup+0x200/0x200 [ 119.652494][ T6305] ? ns_capable+0x89/0xe0 [ 119.656849][ T6305] ? __inet_diag_dump_start+0x886/0x9f0 [ 119.662426][ T6305] __netlink_dump_start+0x5f1/0x810 [ 119.667666][ T6305] inet_diag_rcv_msg_compat+0x215/0x440 [ 119.673239][ T6305] ? __inet_diag_dump+0x380/0x380 [ 119.678292][ T6305] ? sock_diag_rcv_msg+0xd1/0x600 [ 119.683344][ T6305] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 119.689082][ T6305] ? inet_diag_dump_start_compat+0x20/0x20 [ 119.694905][ T6305] ? inet_diag_dump+0x50/0x50 [ 119.699619][ T6305] ? __inet_diag_dump+0x380/0x380 [ 119.704665][ T6305] sock_diag_rcv_msg+0x3d8/0x600 [ 119.709633][ T6305] netlink_rcv_skb+0x241/0x4d0 [ 119.714420][ T6305] ? sock_diag_bind+0xb0/0xb0 [ 119.719121][ T6305] ? netlink_ack+0x1180/0x1180 [ 119.723920][ T6305] ? __lock_acquire+0x7d40/0x7d40 [ 119.728975][ T6305] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.734199][ T6305] sock_diag_rcv+0x2a/0x40 [ 119.738810][ T6305] netlink_unicast+0x751/0x8d0 [ 119.743621][ T6305] netlink_sendmsg+0x8d0/0xbf0 [ 119.748416][ T6305] ? netlink_getsockopt+0x590/0x590 [ 119.753633][ T6305] ? aa_sock_msg_perm+0x94/0x150 [ 119.758597][ T6305] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 119.763907][ T6305] ? security_socket_sendmsg+0x80/0xa0 [ 119.769391][ T6305] ? netlink_getsockopt+0x590/0x590 [ 119.774618][ T6305] ____sys_sendmsg+0x5ba/0x960 [ 119.779415][ T6305] ? __asan_memset+0x22/0x40 [ 119.784031][ T6305] ? __sys_sendmsg_sock+0x30/0x30 [ 119.789077][ T6305] ? __import_iovec+0x5f2/0x850 [ 119.793963][ T6305] ? import_iovec+0x73/0xa0 [ 119.798503][ T6305] ___sys_sendmsg+0x2a6/0x360 [ 119.803209][ T6305] ? __sys_sendmsg+0x2a0/0x2a0 [ 119.808028][ T6305] ? trace_call_bpf+0xc3/0x6c0 [ 119.812870][ T6305] __se_sys_sendmsg+0x1c2/0x2b0 [ 119.817753][ T6305] ? __x64_sys_sendmsg+0x80/0x80 [ 119.822751][ T6305] ? lockdep_hardirqs_on+0x98/0x150 [ 119.828029][ T6305] do_syscall_64+0x55/0xb0 [ 119.832505][ T6305] ? clear_bhb_loop+0x40/0x90 [ 119.837203][ T6305] ? clear_bhb_loop+0x40/0x90 [ 119.841906][ T6305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.847833][ T6305] RIP: 0033:0x7f2718d9ce59 [ 119.852281][ T6305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.871914][ T6305] RSP: 002b:00007f2719bfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.880368][ T6305] RAX: ffffffffffffffda RBX: 00007f2719015fa0 RCX: 00007f2718d9ce59 [ 119.888622][ T6305] RDX: 00000000200440c0 RSI: 0000200000000000 RDI: 0000000000000003 [ 119.896610][ T6305] RBP: 00007f2719bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 119.904604][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.912602][ T6305] R13: 00007f2719016038 R14: 00007f2719015fa0 R15: 00007ffde4329408 [ 119.920624][ T6305] [ 120.907465][ T6316] netlink: 196 bytes leftover after parsing attributes in process `syz.0.151'. [ 120.985229][ T6319] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.152'. [ 121.277503][ T6325] netlink: 196 bytes leftover after parsing attributes in process `syz.3.155'. [ 124.048633][ T6350] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.161'. [ 124.125313][ T6353] bridge0: port 2(batadv0) entered blocking state [ 124.135837][ T6353] bridge0: port 2(batadv0) entered disabled state [ 124.155555][ T6353] batadv0: entered allmulticast mode [ 124.205838][ T6353] batadv0: entered promiscuous mode [ 124.231267][ T6353] bridge0: port 2(batadv0) entered blocking state [ 124.238306][ T6353] bridge0: port 2(batadv0) entered forwarding state [ 124.254756][ T6356] netlink: 'syz.3.163': attribute type 8 has an invalid length. [ 124.271568][ T6356] netlink: 'syz.3.163': attribute type 1 has an invalid length. [ 124.288427][ T6356] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.163'. [ 124.296693][ T48] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 124.306118][ T48] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 124.357250][ T6358] netlink: 196 bytes leftover after parsing attributes in process `syz.2.164'. [ 125.322806][ T6370] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.165'. [ 125.351881][ T6370] netlink: del zone limit has 8 unknown bytes [ 125.406420][ T6371] netlink: 'syz.0.168': attribute type 2 has an invalid length. [ 125.428137][ T6371] netlink: 119 bytes leftover after parsing attributes in process `syz.0.168'. [ 125.616109][ T6380] netlink: 'syz.3.172': attribute type 9 has an invalid length. [ 125.624161][ T6380] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.172'. [ 125.744295][ T6384] FAULT_INJECTION: forcing a failure. [ 125.744295][ T6384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.767695][ T6384] CPU: 1 PID: 6384 Comm: syz.3.173 Not tainted syzkaller #0 [ 125.775045][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 125.785135][ T6384] Call Trace: [ 125.788443][ T6384] [ 125.791408][ T6384] dump_stack_lvl+0x18c/0x250 [ 125.796139][ T6384] ? show_regs_print_info+0x20/0x20 [ 125.801375][ T6384] ? load_image+0x420/0x420 [ 125.805911][ T6384] ? __might_fault+0xaa/0x120 [ 125.810616][ T6384] ? __lock_acquire+0x7d40/0x7d40 [ 125.815682][ T6384] should_fail_ex+0x39d/0x4d0 [ 125.820405][ T6384] _copy_to_user+0x2f/0xa0 [ 125.824863][ T6384] bpf_test_finish+0x19f/0x650 [ 125.829674][ T6384] ? dst_hold+0x70/0x70 [ 125.833855][ T6384] ? convert_skb_to___skb+0x420/0x420 [ 125.839270][ T6384] bpf_prog_test_run_skb+0x1122/0x18c0 [ 125.844806][ T6384] ? cpu_online+0x60/0x60 [ 125.849178][ T6384] bpf_prog_test_run+0x321/0x390 [ 125.854157][ T6384] __sys_bpf+0x49d/0x890 [ 125.858454][ T6384] ? bpf_link_show_fdinfo+0x390/0x390 [ 125.863957][ T6384] ? lock_chain_count+0x20/0x20 [ 125.868845][ T6384] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 125.874869][ T6384] __x64_sys_bpf+0x7c/0x90 [ 125.879323][ T6384] do_syscall_64+0x55/0xb0 [ 125.883779][ T6384] ? clear_bhb_loop+0x40/0x90 [ 125.888486][ T6384] ? clear_bhb_loop+0x40/0x90 [ 125.893197][ T6384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.899130][ T6384] RIP: 0033:0x7f589379ce59 [ 125.903576][ T6384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.923296][ T6384] RSP: 002b:00007f5894743028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.931737][ T6384] RAX: ffffffffffffffda RBX: 00007f5893a15fa0 RCX: 00007f589379ce59 [ 125.939727][ T6384] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 000000000000000a [ 125.947710][ T6384] RBP: 00007f5894743090 R08: 0000000000000000 R09: 0000000000000000 [ 125.955687][ T6384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.963665][ T6384] R13: 00007f5893a16038 R14: 00007f5893a15fa0 R15: 00007ffe7908f278 [ 125.971655][ T6384] [ 126.020102][ T6391] netlink: 196 bytes leftover after parsing attributes in process `syz.2.175'. [ 126.285373][ T6395] netlink: 196 bytes leftover after parsing attributes in process `syz.1.178'. [ 126.526418][ T6401] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.179'. [ 126.550480][ T6401] netlink: del zone limit has 8 unknown bytes [ 129.543685][ T6406] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.181'. [ 129.883563][ T6422] netlink: 196 bytes leftover after parsing attributes in process `syz.3.187'. [ 129.947520][ T6427] netlink: 'syz.2.184': attribute type 2 has an invalid length. [ 129.962294][ T6427] netlink: 119 bytes leftover after parsing attributes in process `syz.2.184'. [ 130.104813][ T6426] netlink: 196 bytes leftover after parsing attributes in process `syz.0.189'. [ 130.352873][ T6434] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.192'. [ 130.369364][ T6434] netlink: del zone limit has 8 unknown bytes [ 133.105500][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.112435][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.620047][ T6449] FAULT_INJECTION: forcing a failure. [ 133.620047][ T6449] name failslab, interval 1, probability 0, space 0, times 0 [ 133.676758][ T6449] CPU: 1 PID: 6449 Comm: syz.3.197 Not tainted syzkaller #0 [ 133.684123][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.694218][ T6449] Call Trace: [ 133.697536][ T6449] [ 133.700507][ T6449] dump_stack_lvl+0x18c/0x250 [ 133.705246][ T6449] ? show_regs_print_info+0x20/0x20 [ 133.710497][ T6449] ? load_image+0x420/0x420 [ 133.715057][ T6449] ? __might_sleep+0xe0/0xe0 [ 133.719702][ T6449] ? __lock_acquire+0x7d40/0x7d40 [ 133.724784][ T6449] should_fail_ex+0x39d/0x4d0 [ 133.729695][ T6449] should_failslab+0x9/0x20 [ 133.734253][ T6449] slab_pre_alloc_hook+0x59/0x310 [ 133.739346][ T6449] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 133.745111][ T6449] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 133.750880][ T6449] __kmem_cache_alloc_node+0x53/0x250 [ 133.756315][ T6449] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 133.762078][ T6449] __kmalloc+0xa4/0x230 [ 133.766291][ T6449] tomoyo_realpath_from_path+0xe3/0x5d0 [ 133.771922][ T6449] tomoyo_path_number_perm+0x248/0x620 [ 133.777443][ T6449] ? tomoyo_path_number_perm+0x217/0x620 [ 133.783126][ T6449] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 133.788641][ T6449] ? ksys_write+0x1c4/0x260 [ 133.793245][ T6449] ? __fget_files+0x28/0x4b0 [ 133.797850][ T6449] ? __fget_files+0x28/0x4b0 [ 133.802471][ T6449] security_file_ioctl+0x70/0xa0 [ 133.807429][ T6449] __se_sys_ioctl+0x48/0x170 [ 133.812036][ T6449] do_syscall_64+0x55/0xb0 [ 133.816465][ T6449] ? clear_bhb_loop+0x40/0x90 [ 133.821173][ T6449] ? clear_bhb_loop+0x40/0x90 [ 133.825863][ T6449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.831775][ T6449] RIP: 0033:0x7f589379ce59 [ 133.836198][ T6449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.855884][ T6449] RSP: 002b:00007f5894722028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.864317][ T6449] RAX: ffffffffffffffda RBX: 00007f5893a16090 RCX: 00007f589379ce59 [ 133.872297][ T6449] RDX: 0000200000000000 RSI: 0000000000008b1b RDI: 0000000000000007 [ 133.880276][ T6449] RBP: 00007f5894722090 R08: 0000000000000000 R09: 0000000000000000 [ 133.888343][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.896320][ T6449] R13: 00007f5893a16128 R14: 00007f5893a16090 R15: 00007ffe7908f278 [ 133.904327][ T6449] [ 133.955400][ T6449] ERROR: Out of memory at tomoyo_realpath_from_path. [ 134.173151][ T6459] netlink: 196 bytes leftover after parsing attributes in process `syz.1.199'. [ 134.224914][ T6463] netlink: 763 bytes leftover after parsing attributes in process `syz.0.200'. [ 134.524008][ T6469] netlink: 'syz.3.201': attribute type 2 has an invalid length. [ 134.535116][ T6469] netlink: 119 bytes leftover after parsing attributes in process `syz.3.201'. [ 134.811975][ T6473] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.204'. [ 134.833847][ T6473] netlink: del zone limit has 8 unknown bytes [ 135.093154][ T6478] netlink: 763 bytes leftover after parsing attributes in process `syz.0.213'. [ 135.160337][ T6481] netlink: 'syz.1.205': attribute type 2 has an invalid length. [ 135.176847][ T6481] netlink: 119 bytes leftover after parsing attributes in process `syz.1.205'. [ 137.073555][ T6489] netlink: 763 bytes leftover after parsing attributes in process `syz.0.216'. [ 137.237737][ T6497] netlink: 196 bytes leftover after parsing attributes in process `syz.1.210'. [ 137.372585][ T6504] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.214'. [ 137.408959][ T6504] netlink: del zone limit has 8 unknown bytes [ 137.949224][ T6516] netlink: 'syz.3.218': attribute type 2 has an invalid length. [ 137.958938][ T6516] netlink: 119 bytes leftover after parsing attributes in process `syz.3.218'. [ 139.013998][ T6532] netlink: del zone limit has 8 unknown bytes [ 141.377724][ T6536] netlink: 'syz.0.228': attribute type 3 has an invalid length. [ 141.426215][ T6536] netlink: 'syz.0.228': attribute type 6 has an invalid length. [ 141.452905][ T6536] __nla_validate_parse: 3 callbacks suppressed [ 141.452920][ T6536] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.228'. [ 141.626994][ T6546] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.232'. [ 141.661725][ T6547] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.232'. [ 141.781945][ T6553] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.236'. [ 141.792991][ T6553] netlink: del zone limit has 8 unknown bytes [ 141.877785][ T6556] netlink: 'syz.2.235': attribute type 2 has an invalid length. [ 141.886252][ T6556] netlink: 119 bytes leftover after parsing attributes in process `syz.2.235'. [ 141.901367][ T6559] netlink: 763 bytes leftover after parsing attributes in process `syz.1.234'. [ 142.022515][ T6563] netlink: 196 bytes leftover after parsing attributes in process `syz.0.237'. [ 142.882932][ T6580] netlink: 10 bytes leftover after parsing attributes in process `syz.1.243'. [ 143.113877][ T6586] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.246'. [ 143.152270][ T6586] netlink: del zone limit has 8 unknown bytes [ 143.279536][ T6588] netlink: 196 bytes leftover after parsing attributes in process `syz.0.247'. [ 143.719032][ T6600] netlink: 'syz.1.250': attribute type 2 has an invalid length. [ 144.990115][ T6606] FAULT_INJECTION: forcing a failure. [ 144.990115][ T6606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.027557][ T6606] CPU: 1 PID: 6606 Comm: syz.2.252 Not tainted syzkaller #0 [ 145.034912][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 145.044990][ T6606] Call Trace: [ 145.048290][ T6606] [ 145.051232][ T6606] dump_stack_lvl+0x18c/0x250 [ 145.055934][ T6606] ? show_regs_print_info+0x20/0x20 [ 145.061153][ T6606] ? load_image+0x420/0x420 [ 145.065665][ T6606] ? __lock_acquire+0x7d40/0x7d40 [ 145.070697][ T6606] ? snprintf+0xe9/0x140 [ 145.074974][ T6606] should_fail_ex+0x39d/0x4d0 [ 145.079679][ T6606] _copy_to_user+0x2f/0xa0 [ 145.084109][ T6606] simple_read_from_buffer+0xe7/0x150 [ 145.089495][ T6606] proc_fail_nth_read+0x1e8/0x260 [ 145.094529][ T6606] ? proc_fault_inject_write+0x360/0x360 [ 145.100167][ T6606] ? fsnotify_perm+0x271/0x5e0 [ 145.104930][ T6606] ? proc_fault_inject_write+0x360/0x360 [ 145.110673][ T6606] vfs_read+0x28b/0x970 [ 145.114838][ T6606] ? kernel_read+0x1e0/0x1e0 [ 145.119430][ T6606] ? __fget_files+0x28/0x4b0 [ 145.124018][ T6606] ? __fget_files+0x28/0x4b0 [ 145.128610][ T6606] ? __fget_files+0x43d/0x4b0 [ 145.133309][ T6606] ? __fdget_pos+0x2a3/0x330 [ 145.137959][ T6606] ? ksys_read+0x75/0x260 [ 145.142302][ T6606] ksys_read+0x150/0x260 [ 145.146550][ T6606] ? vfs_write+0x990/0x990 [ 145.150975][ T6606] ? lockdep_hardirqs_on+0x98/0x150 [ 145.156183][ T6606] do_syscall_64+0x55/0xb0 [ 145.160596][ T6606] ? clear_bhb_loop+0x40/0x90 [ 145.165288][ T6606] ? clear_bhb_loop+0x40/0x90 [ 145.169960][ T6606] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.175856][ T6606] RIP: 0033:0x7fd79d35d68e [ 145.180278][ T6606] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 145.199883][ T6606] RSP: 002b:00007fd79e2e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.208299][ T6606] RAX: ffffffffffffffda RBX: 00007fd79e2ea6c0 RCX: 00007fd79d35d68e [ 145.216289][ T6606] RDX: 000000000000000f RSI: 00007fd79e2ea0a0 RDI: 0000000000000006 [ 145.224256][ T6606] RBP: 00007fd79e2ea090 R08: 0000000000000000 R09: 0000000000000000 [ 145.232234][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.240204][ T6606] R13: 00007fd79d616038 R14: 00007fd79d615fa0 R15: 00007ffd2d2a80f8 [ 145.248186][ T6606] [ 145.727248][ T6620] netlink: del zone limit has 8 unknown bytes [ 146.351644][ T6641] bridge_slave_1: default FDB implementation only supports local addresses [ 147.985105][ T6652] __nla_validate_parse: 6 callbacks suppressed [ 147.985123][ T6652] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.272'. [ 148.013892][ T6652] netlink: del zone limit has 8 unknown bytes [ 148.021734][ T6650] netlink: 196 bytes leftover after parsing attributes in process `syz.2.271'. [ 148.113682][ T6654] macsec0: entered promiscuous mode [ 148.350053][ T6666] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.277'. [ 148.537358][ T6668] netlink: 196 bytes leftover after parsing attributes in process `syz.2.278'. [ 148.572207][ T6670] netlink: 176 bytes leftover after parsing attributes in process `syz.0.279'. [ 148.960928][ T6679] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.283'. [ 149.037124][ T6679] netlink: del zone limit has 8 unknown bytes [ 149.206742][ T6681] netlink: 'syz.1.284': attribute type 19 has an invalid length. [ 149.231136][ T6681] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 149.443506][ T6683] FAULT_INJECTION: forcing a failure. [ 149.443506][ T6683] name failslab, interval 1, probability 0, space 0, times 0 [ 149.521777][ T6683] CPU: 1 PID: 6683 Comm: syz.0.285 Not tainted syzkaller #0 [ 149.529128][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.539213][ T6683] Call Trace: [ 149.542509][ T6683] [ 149.545461][ T6683] dump_stack_lvl+0x18c/0x250 [ 149.550178][ T6683] ? show_regs_print_info+0x20/0x20 [ 149.555403][ T6683] ? load_image+0x420/0x420 [ 149.559933][ T6683] ? __might_sleep+0xe0/0xe0 [ 149.564551][ T6683] ? __lock_acquire+0x7d40/0x7d40 [ 149.569608][ T6683] ? verify_lock_unused+0x140/0x140 [ 149.574843][ T6683] should_fail_ex+0x39d/0x4d0 [ 149.579563][ T6683] should_failslab+0x9/0x20 [ 149.584220][ T6683] slab_pre_alloc_hook+0x59/0x310 [ 149.589278][ T6683] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 149.594847][ T6683] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 149.600427][ T6683] __kmem_cache_alloc_node+0x53/0x250 [ 149.605842][ T6683] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 149.611427][ T6683] __kmalloc+0xa4/0x230 [ 149.615624][ T6683] bpf_prog_test_run_skb+0x245/0x18c0 [ 149.621028][ T6683] ? __fget_files+0x28/0x4b0 [ 149.625642][ T6683] ? __fget_files+0x28/0x4b0 [ 149.630266][ T6683] ? __fget_files+0x43d/0x4b0 [ 149.634976][ T6683] ? cpu_online+0x60/0x60 [ 149.639338][ T6683] bpf_prog_test_run+0x321/0x390 [ 149.644302][ T6683] __sys_bpf+0x49d/0x890 [ 149.648568][ T6683] ? bpf_link_show_fdinfo+0x390/0x390 [ 149.653979][ T6683] ? lock_chain_count+0x20/0x20 [ 149.658960][ T6683] __x64_sys_bpf+0x7c/0x90 [ 149.663400][ T6683] do_syscall_64+0x55/0xb0 [ 149.667842][ T6683] ? clear_bhb_loop+0x40/0x90 [ 149.672539][ T6683] ? clear_bhb_loop+0x40/0x90 [ 149.677235][ T6683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.683159][ T6683] RIP: 0033:0x7f2718d9ce59 [ 149.687592][ T6683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.707223][ T6683] RSP: 002b:00007f2719bfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 149.715677][ T6683] RAX: ffffffffffffffda RBX: 00007f2719015fa0 RCX: 00007f2718d9ce59 [ 149.723674][ T6683] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 149.731678][ T6683] RBP: 00007f2719bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 149.739678][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.747707][ T6683] R13: 00007f2719016038 R14: 00007f2719015fa0 R15: 00007ffde4329408 [ 149.755738][ T6683] [ 149.791178][ T6684] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 149.797323][ T6684] syzkaller1: linktype set to 786 [ 149.895148][ T6686] netlink: 196 bytes leftover after parsing attributes in process `syz.2.286'. [ 149.952528][ T6690] netlink: 'syz.1.287': attribute type 29 has an invalid length. [ 149.962951][ T6690] netlink: 'syz.1.287': attribute type 29 has an invalid length. [ 150.347795][ T6701] netlink: 176 bytes leftover after parsing attributes in process `syz.2.292'. [ 150.447586][ T6700] netlink: 196 bytes leftover after parsing attributes in process `syz.0.291'. [ 150.618437][ T6707] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.294'. [ 150.630348][ T6707] netlink: del zone limit has 8 unknown bytes [ 150.791697][ T6709] syzkaller0: entered promiscuous mode [ 150.805537][ T6709] syzkaller0: entered allmulticast mode [ 150.899831][ T6709] netlink: 'syz.0.296': attribute type 21 has an invalid length. [ 152.656014][ T6735] netlink: 'syz.0.312': attribute type 2 has an invalid length. [ 152.841737][ T6740] netlink: del zone limit has 8 unknown bytes [ 153.571819][ T6755] FAULT_INJECTION: forcing a failure. [ 153.571819][ T6755] name failslab, interval 1, probability 0, space 0, times 0 [ 153.590585][ T6755] CPU: 1 PID: 6755 Comm: syz.2.315 Not tainted syzkaller #0 [ 153.597941][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.608016][ T6755] Call Trace: [ 153.611291][ T6755] [ 153.614253][ T6755] dump_stack_lvl+0x18c/0x250 [ 153.619028][ T6755] ? show_regs_print_info+0x20/0x20 [ 153.624240][ T6755] ? load_image+0x420/0x420 [ 153.628798][ T6755] ? __lock_acquire+0x7d40/0x7d40 [ 153.633829][ T6755] should_fail_ex+0x39d/0x4d0 [ 153.638524][ T6755] should_failslab+0x9/0x20 [ 153.643034][ T6755] slab_pre_alloc_hook+0x59/0x310 [ 153.648070][ T6755] ? sctp_stream_init_ext+0x57/0x170 [ 153.653482][ T6755] __kmem_cache_alloc_node+0x53/0x250 [ 153.658974][ T6755] ? sctp_stream_init_ext+0x57/0x170 [ 153.664261][ T6755] kmalloc_trace+0x2a/0xe0 [ 153.668686][ T6755] sctp_stream_init_ext+0x57/0x170 [ 153.673800][ T6755] sctp_sendmsg_to_asoc+0x1324/0x1830 [ 153.679177][ T6755] ? __asan_memcpy+0x40/0x70 [ 153.683804][ T6755] ? sctp_assoc_set_primary+0x249/0x340 [ 153.689382][ T6755] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 153.694764][ T6755] ? sctp_connect_new_asoc+0x404/0x6a0 [ 153.700237][ T6755] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 153.706073][ T6755] ? __sctp_connect+0xd80/0xd80 [ 153.710943][ T6755] ? __local_bh_enable_ip+0x13a/0x1c0 [ 153.716319][ T6755] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 153.721886][ T6755] ? security_sctp_bind_connect+0x89/0xb0 [ 153.727630][ T6755] sctp_sendmsg+0x1bd2/0x2910 [ 153.732314][ T6755] ? sctp_getsockopt+0xb60/0xb60 [ 153.737248][ T6755] ? aa_sk_perm+0x83c/0x970 [ 153.741750][ T6755] ? aa_af_perm+0x330/0x330 [ 153.746246][ T6755] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 153.752672][ T6755] ? sock_rps_record_flow+0x19/0x3f0 [ 153.757990][ T6755] ? inet_sendmsg+0xe9/0x2f0 [ 153.762612][ T6755] ? inet_send_prepare+0x260/0x260 [ 153.767770][ T6755] ____sys_sendmsg+0x5ba/0x960 [ 153.772570][ T6755] ? __lock_acquire+0x7d40/0x7d40 [ 153.777631][ T6755] ? __asan_memset+0x22/0x40 [ 153.782285][ T6755] ? __sys_sendmsg_sock+0x30/0x30 [ 153.787309][ T6755] ? __import_iovec+0x5f2/0x850 [ 153.792178][ T6755] ? import_iovec+0x73/0xa0 [ 153.796690][ T6755] ___sys_sendmsg+0x2a6/0x360 [ 153.801391][ T6755] ? __sys_sendmsg+0x2a0/0x2a0 [ 153.806203][ T6755] ? trace_call_bpf+0xc3/0x6c0 [ 153.811022][ T6755] __se_sys_sendmsg+0x1c2/0x2b0 [ 153.815875][ T6755] ? __x64_sys_sendmsg+0x80/0x80 [ 153.820820][ T6755] ? lockdep_hardirqs_on+0x98/0x150 [ 153.826026][ T6755] do_syscall_64+0x55/0xb0 [ 153.830480][ T6755] ? clear_bhb_loop+0x40/0x90 [ 153.835185][ T6755] ? clear_bhb_loop+0x40/0x90 [ 153.839866][ T6755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.845768][ T6755] RIP: 0033:0x7fd79d39ce59 [ 153.850191][ T6755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.869812][ T6755] RSP: 002b:00007fd79e2ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.878224][ T6755] RAX: ffffffffffffffda RBX: 00007fd79d615fa0 RCX: 00007fd79d39ce59 [ 153.886192][ T6755] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 153.894162][ T6755] RBP: 00007fd79e2ea090 R08: 0000000000000000 R09: 0000000000000000 [ 153.902144][ T6755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 153.910131][ T6755] R13: 00007fd79d616038 R14: 00007fd79d615fa0 R15: 00007ffd2d2a80f8 [ 153.918126][ T6755] [ 153.930206][ T6757] __nla_validate_parse: 8 callbacks suppressed [ 153.930225][ T6757] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.313'. [ 153.972104][ T6757] bridge_slave_1: default FDB implementation only supports local addresses [ 153.998701][ T6753] netlink: 'syz.1.314': attribute type 9 has an invalid length. [ 154.113550][ T6763] FAULT_INJECTION: forcing a failure. [ 154.113550][ T6763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.148579][ T6763] CPU: 0 PID: 6763 Comm: syz.3.317 Not tainted syzkaller #0 [ 154.155926][ T6763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.166011][ T6763] Call Trace: [ 154.169316][ T6763] [ 154.172260][ T6763] dump_stack_lvl+0x18c/0x250 [ 154.176974][ T6763] ? show_regs_print_info+0x20/0x20 [ 154.182193][ T6763] ? load_image+0x420/0x420 [ 154.186753][ T6763] ? __might_fault+0xaa/0x120 [ 154.191460][ T6763] ? __lock_acquire+0x7d40/0x7d40 [ 154.196516][ T6763] should_fail_ex+0x39d/0x4d0 [ 154.201232][ T6763] _copy_from_user+0x2f/0xe0 [ 154.205862][ T6763] br_ioctl_stub+0x3e0/0xd50 [ 154.210489][ T6763] ? rcu_is_watching+0x15/0xb0 [ 154.215379][ T6763] ? rcu_read_unlock+0xa0/0xa0 [ 154.220166][ T6763] ? trace_contention_end+0x39/0xe0 [ 154.225395][ T6763] ? __mutex_lock+0x315/0xcc0 [ 154.230123][ T6763] ? mutex_lock_nested+0x20/0x20 [ 154.235144][ T6763] ? rcu_read_unlock+0xa0/0xa0 [ 154.239940][ T6763] sock_ioctl+0x517/0x7e0 [ 154.244304][ T6763] ? sock_poll+0x3e0/0x3e0 [ 154.248764][ T6763] ? bpf_lsm_file_ioctl+0x9/0x10 [ 154.253730][ T6763] ? security_file_ioctl+0x80/0xa0 [ 154.258874][ T6763] ? sock_poll+0x3e0/0x3e0 [ 154.263317][ T6763] __se_sys_ioctl+0xfd/0x170 [ 154.267937][ T6763] do_syscall_64+0x55/0xb0 [ 154.272377][ T6763] ? clear_bhb_loop+0x40/0x90 [ 154.277089][ T6763] ? clear_bhb_loop+0x40/0x90 [ 154.281791][ T6763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.287714][ T6763] RIP: 0033:0x7f589379ce59 [ 154.292165][ T6763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.311803][ T6763] RSP: 002b:00007f5894743028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.320253][ T6763] RAX: ffffffffffffffda RBX: 00007f5893a15fa0 RCX: 00007f589379ce59 [ 154.328267][ T6763] RDX: 0000200000000080 RSI: 0000000000008940 RDI: 0000000000000004 [ 154.336268][ T6763] RBP: 00007f5894743090 R08: 0000000000000000 R09: 0000000000000000 [ 154.344260][ T6763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.352263][ T6763] R13: 00007f5893a16038 R14: 00007f5893a15fa0 R15: 00007ffe7908f278 [ 154.360279][ T6763] [ 154.413074][ T6764] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.318'. [ 154.426821][ T6764] netlink: del zone limit has 8 unknown bytes [ 155.058875][ T6780] netlink: 'syz.3.321': attribute type 2 has an invalid length. [ 155.086109][ T6780] netlink: 119 bytes leftover after parsing attributes in process `syz.3.321'. [ 155.147293][ T6782] FAULT_INJECTION: forcing a failure. [ 155.147293][ T6782] name failslab, interval 1, probability 0, space 0, times 0 [ 155.165225][ T6782] CPU: 0 PID: 6782 Comm: syz.0.322 Not tainted syzkaller #0 [ 155.172579][ T6782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 155.182709][ T6782] Call Trace: [ 155.186016][ T6782] [ 155.188967][ T6782] dump_stack_lvl+0x18c/0x250 [ 155.193677][ T6782] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 155.199870][ T6782] ? show_regs_print_info+0x20/0x20 [ 155.205110][ T6782] ? load_image+0x420/0x420 [ 155.209654][ T6782] should_fail_ex+0x39d/0x4d0 [ 155.214377][ T6782] should_failslab+0x9/0x20 [ 155.218909][ T6782] slab_pre_alloc_hook+0x59/0x310 [ 155.223964][ T6782] ? bpf_test_init+0x9f/0x140 [ 155.228671][ T6782] ? bpf_test_init+0x9f/0x140 [ 155.233377][ T6782] __kmem_cache_alloc_node+0x53/0x250 [ 155.238790][ T6782] ? bpf_test_init+0x9f/0x140 [ 155.243496][ T6782] __kmalloc+0xa4/0x230 [ 155.247685][ T6782] bpf_test_init+0x9f/0x140 [ 155.252228][ T6782] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 155.257630][ T6782] ? dev_put+0x80/0x80 [ 155.261727][ T6782] ? dev_put+0x80/0x80 [ 155.265837][ T6782] bpf_prog_test_run+0x321/0x390 [ 155.270817][ T6782] __sys_bpf+0x49d/0x890 [ 155.275087][ T6782] ? bpf_link_show_fdinfo+0x390/0x390 [ 155.280502][ T6782] ? lock_chain_count+0x20/0x20 [ 155.285392][ T6782] __x64_sys_bpf+0x7c/0x90 [ 155.289840][ T6782] do_syscall_64+0x55/0xb0 [ 155.294287][ T6782] ? clear_bhb_loop+0x40/0x90 [ 155.299005][ T6782] ? clear_bhb_loop+0x40/0x90 [ 155.303711][ T6782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.309649][ T6782] RIP: 0033:0x7f2718d9ce59 [ 155.314097][ T6782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.333740][ T6782] RSP: 002b:00007f2719bfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.342189][ T6782] RAX: ffffffffffffffda RBX: 00007f2719015fa0 RCX: 00007f2718d9ce59 [ 155.350196][ T6782] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 155.358200][ T6782] RBP: 00007f2719bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 155.366216][ T6782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.374210][ T6782] R13: 00007f2719016038 R14: 00007f2719015fa0 R15: 00007ffde4329408 [ 155.382256][ T6782] [ 155.592708][ T6788] syz.0.325 uses obsolete (PF_INET,SOCK_PACKET) [ 155.627233][ T6788] netlink: 'syz.0.325': attribute type 3 has an invalid length. [ 155.657017][ T6788] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.325'. [ 155.711739][ T6788] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 155.717627][ T6788] syzkaller1: Linktype set failed because interface is up [ 156.140093][ T3460] syzkaller1: tun_net_xmit 86 [ 156.218898][ T41] syzkaller1: tun_net_xmit 90 [ 156.478455][ T6798] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.328'. [ 156.509982][ T6798] netlink: del zone limit has 8 unknown bytes [ 156.596053][ T6803] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.330'. [ 156.626630][ T6803] netlink: del zone limit has 8 unknown bytes [ 156.821775][ T6812] FAULT_INJECTION: forcing a failure. [ 156.821775][ T6812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.859447][ T6812] CPU: 0 PID: 6812 Comm: syz.3.335 Not tainted syzkaller #0 [ 156.866819][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.876896][ T6812] Call Trace: [ 156.880198][ T6812] [ 156.883157][ T6812] dump_stack_lvl+0x18c/0x250 [ 156.887879][ T6812] ? show_regs_print_info+0x20/0x20 [ 156.893113][ T6812] ? load_image+0x420/0x420 [ 156.897665][ T6812] ? __lock_acquire+0x7d40/0x7d40 [ 156.902719][ T6812] ? snprintf+0xe9/0x140 [ 156.907001][ T6812] should_fail_ex+0x39d/0x4d0 [ 156.911713][ T6812] _copy_to_user+0x2f/0xa0 [ 156.916161][ T6812] simple_read_from_buffer+0xe7/0x150 [ 156.921576][ T6812] proc_fail_nth_read+0x1e8/0x260 [ 156.926638][ T6812] ? proc_fault_inject_write+0x360/0x360 [ 156.932311][ T6812] ? fsnotify_perm+0x271/0x5e0 [ 156.937105][ T6812] ? proc_fault_inject_write+0x360/0x360 [ 156.942787][ T6812] vfs_read+0x28b/0x970 [ 156.946982][ T6812] ? kernel_read+0x1e0/0x1e0 [ 156.951612][ T6812] ? __fget_files+0x28/0x4b0 [ 156.956234][ T6812] ? __fget_files+0x28/0x4b0 [ 156.960857][ T6812] ? __fget_files+0x43d/0x4b0 [ 156.965573][ T6812] ? __fdget_pos+0x2a3/0x330 [ 156.970196][ T6812] ? ksys_read+0x75/0x260 [ 156.974594][ T6812] ksys_read+0x150/0x260 [ 156.978850][ T6812] ? vfs_write+0x990/0x990 [ 156.983332][ T6812] ? lockdep_hardirqs_on+0x98/0x150 [ 156.988571][ T6812] do_syscall_64+0x55/0xb0 [ 156.993005][ T6812] ? clear_bhb_loop+0x40/0x90 [ 156.997686][ T6812] ? clear_bhb_loop+0x40/0x90 [ 157.002366][ T6812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.008351][ T6812] RIP: 0033:0x7f589375d68e [ 157.012766][ T6812] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.032374][ T6812] RSP: 002b:00007f5894742fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.040805][ T6812] RAX: ffffffffffffffda RBX: 00007f58947436c0 RCX: 00007f589375d68e [ 157.048790][ T6812] RDX: 000000000000000f RSI: 00007f58947430a0 RDI: 0000000000000005 [ 157.056768][ T6812] RBP: 00007f5894743090 R08: 0000000000000000 R09: 0000000000000000 [ 157.064776][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.072749][ T6812] R13: 00007f5893a16038 R14: 00007f5893a15fa0 R15: 00007ffe7908f278 [ 157.080731][ T6812] [ 157.187672][ T6825] FAULT_INJECTION: forcing a failure. [ 157.187672][ T6825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.204763][ T6825] CPU: 1 PID: 6825 Comm: syz.2.338 Not tainted syzkaller #0 [ 157.209862][ T6818] netlink: 'syz.0.334': attribute type 2 has an invalid length. [ 157.212082][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.212098][ T6825] Call Trace: [ 157.212105][ T6825] [ 157.212112][ T6825] dump_stack_lvl+0x18c/0x250 [ 157.219882][ T6818] netlink: 119 bytes leftover after parsing attributes in process `syz.0.334'. [ 157.229897][ T6825] ? show_regs_print_info+0x20/0x20 [ 157.229928][ T6825] ? load_image+0x420/0x420 [ 157.229943][ T6825] ? __might_fault+0xaa/0x120 [ 157.229959][ T6825] ? __lock_acquire+0x7d40/0x7d40 [ 157.229982][ T6825] should_fail_ex+0x39d/0x4d0 [ 157.230010][ T6825] _copy_from_user+0x2f/0xe0 [ 157.230031][ T6825] ____sys_sendmsg+0x2fd/0x960 [ 157.230051][ T6825] ? __lock_acquire+0x7d40/0x7d40 [ 157.230074][ T6825] ? __sys_sendmsg_sock+0x30/0x30 [ 157.293337][ T6825] ? __import_iovec+0x3fa/0x850 [ 157.298200][ T6825] ? import_iovec+0x73/0xa0 [ 157.302708][ T6825] ___sys_sendmsg+0x2a6/0x360 [ 157.307385][ T6825] ? get_pid_task+0x20/0x1e0 [ 157.311982][ T6825] ? __sys_sendmsg+0x2a0/0x2a0 [ 157.316767][ T6825] ? __lock_acquire+0x7d40/0x7d40 [ 157.321806][ T6825] __se_sys_sendmsg+0x1c2/0x2b0 [ 157.326655][ T6825] ? __x64_sys_sendmsg+0x80/0x80 [ 157.331599][ T6825] ? lockdep_hardirqs_on+0x98/0x150 [ 157.336799][ T6825] do_syscall_64+0x55/0xb0 [ 157.341217][ T6825] ? clear_bhb_loop+0x40/0x90 [ 157.345883][ T6825] ? clear_bhb_loop+0x40/0x90 [ 157.351256][ T6825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.357162][ T6825] RIP: 0033:0x7fd79d39ce59 [ 157.361585][ T6825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.381207][ T6825] RSP: 002b:00007fd79e2ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.389624][ T6825] RAX: ffffffffffffffda RBX: 00007fd79d615fa0 RCX: 00007fd79d39ce59 [ 157.397599][ T6825] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 157.405564][ T6825] RBP: 00007fd79e2ea090 R08: 0000000000000000 R09: 0000000000000000 [ 157.413536][ T6825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.421523][ T6825] R13: 00007fd79d616038 R14: 00007fd79d615fa0 R15: 00007ffd2d2a80f8 [ 157.429530][ T6825] [ 157.584091][ T6827] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.340'. [ 157.610823][ T6827] netlink: del zone limit has 8 unknown bytes [ 157.769684][ T6833] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.342'. [ 157.813225][ T6833] netlink: del zone limit has 8 unknown bytes [ 158.474796][ T6862] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.352'. [ 158.493878][ T6862] netlink: del zone limit has 8 unknown bytes [ 158.518917][ T6859] netlink: 'syz.2.351': attribute type 2 has an invalid length. [ 158.614405][ T6853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.011869][ T6879] FAULT_INJECTION: forcing a failure. [ 159.011869][ T6879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.032545][ T6879] CPU: 1 PID: 6879 Comm: syz.3.358 Not tainted syzkaller #0 [ 159.039888][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 159.049972][ T6879] Call Trace: [ 159.053270][ T6879] [ 159.056215][ T6879] dump_stack_lvl+0x18c/0x250 [ 159.060919][ T6879] ? show_regs_print_info+0x20/0x20 [ 159.066150][ T6879] ? load_image+0x420/0x420 [ 159.070670][ T6879] ? __might_fault+0xaa/0x120 [ 159.075359][ T6879] ? __lock_acquire+0x7d40/0x7d40 [ 159.080406][ T6879] should_fail_ex+0x39d/0x4d0 [ 159.085110][ T6879] _copy_from_user+0x2f/0xe0 [ 159.089718][ T6879] __sys_bpf+0x23e/0x890 [ 159.093995][ T6879] ? bpf_link_show_fdinfo+0x390/0x390 [ 159.099413][ T6879] ? lock_chain_count+0x20/0x20 [ 159.104282][ T6879] __x64_sys_bpf+0x7c/0x90 [ 159.108728][ T6879] do_syscall_64+0x55/0xb0 [ 159.113156][ T6879] ? clear_bhb_loop+0x40/0x90 [ 159.117835][ T6879] ? clear_bhb_loop+0x40/0x90 [ 159.122517][ T6879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.128510][ T6879] RIP: 0033:0x7f589379ce59 [ 159.132934][ T6879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.152550][ T6879] RSP: 002b:00007f5894743028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.161010][ T6879] RAX: ffffffffffffffda RBX: 00007f5893a15fa0 RCX: 00007f589379ce59 [ 159.169005][ T6879] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 159.176986][ T6879] RBP: 00007f5894743090 R08: 0000000000000000 R09: 0000000000000000 [ 159.184964][ T6879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.192942][ T6879] R13: 00007f5893a16038 R14: 00007f5893a15fa0 R15: 00007ffe7908f278 [ 159.200934][ T6879] [ 159.416966][ T6887] __nla_validate_parse: 1 callbacks suppressed [ 159.416984][ T6887] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.361'. [ 159.434440][ T6887] netlink: del zone limit has 8 unknown bytes [ 159.578651][ T6893] netlink: 'syz.0.365': attribute type 8 has an invalid length. [ 159.589934][ T6893] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.365'. [ 159.832939][ T6893] netlink: 'syz.0.365': attribute type 4 has an invalid length. [ 159.856861][ T6893] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.365'. [ 160.423179][ T6912] netlink: 763 bytes leftover after parsing attributes in process `syz.0.371'. [ 160.891202][ T6918] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.374'. [ 160.901238][ T6918] netlink: del zone limit has 8 unknown bytes [ 160.927567][ T6920] FAULT_INJECTION: forcing a failure. [ 160.927567][ T6920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.973334][ T6920] CPU: 0 PID: 6920 Comm: syz.3.375 Not tainted syzkaller #0 [ 160.980677][ T6920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 160.990766][ T6920] Call Trace: [ 160.994081][ T6920] [ 160.997031][ T6920] dump_stack_lvl+0x18c/0x250 [ 161.001754][ T6920] ? show_regs_print_info+0x20/0x20 [ 161.006989][ T6920] ? load_image+0x420/0x420 [ 161.011525][ T6920] ? __might_fault+0xaa/0x120 [ 161.016410][ T6920] ? __lock_acquire+0x7d40/0x7d40 [ 161.021472][ T6920] should_fail_ex+0x39d/0x4d0 [ 161.026179][ T6920] _copy_from_user+0x2f/0xe0 [ 161.030796][ T6920] ___sys_sendmsg+0x1c7/0x360 [ 161.035500][ T6920] ? get_pid_task+0x20/0x1e0 [ 161.040112][ T6920] ? __sys_sendmsg+0x2a0/0x2a0 [ 161.044917][ T6920] ? __lock_acquire+0x7d40/0x7d40 [ 161.049972][ T6920] __se_sys_sendmsg+0x1c2/0x2b0 [ 161.054833][ T6920] ? __x64_sys_sendmsg+0x80/0x80 [ 161.059782][ T6920] ? lockdep_hardirqs_on+0x98/0x150 [ 161.064994][ T6920] do_syscall_64+0x55/0xb0 [ 161.069418][ T6920] ? clear_bhb_loop+0x40/0x90 [ 161.074116][ T6920] ? clear_bhb_loop+0x40/0x90 [ 161.078802][ T6920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.084721][ T6920] RIP: 0033:0x7f589379ce59 [ 161.087356][ T6926] netlink: 'syz.1.376': attribute type 10 has an invalid length. [ 161.089155][ T6920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.089172][ T6920] RSP: 002b:00007f5894743028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.089191][ T6920] RAX: ffffffffffffffda RBX: 00007f5893a15fa0 RCX: 00007f589379ce59 [ 161.089201][ T6920] RDX: 0000000020040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 161.089211][ T6920] RBP: 00007f5894743090 R08: 0000000000000000 R09: 0000000000000000 [ 161.089220][ T6920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.089229][ T6920] R13: 00007f5893a16038 R14: 00007f5893a15fa0 R15: 00007ffe7908f278 [ 161.089253][ T6920] [ 161.179603][ T6926] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.376'. [ 161.198575][ T6926] openvswitch: netlink: Flow key attr not present in new flow. [ 161.249787][ T6922] netlink: 64 bytes leftover after parsing attributes in process `syz.1.376'. [ 161.436701][ T6932] netlink: 'syz.0.379': attribute type 8 has an invalid length. [ 161.446970][ T6932] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.379'. [ 161.503565][ T6934] netlink: 'syz.1.380': attribute type 46 has an invalid length. [ 161.647190][ T6932] netlink: 'syz.0.379': attribute type 4 has an invalid length. [ 161.658310][ T6932] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.379'. [ 161.697864][ T6937] netlink: 'syz.3.381': attribute type 5 has an invalid length. [ 161.780076][ T6940] netlink: 'syz.3.382': attribute type 29 has an invalid length. [ 161.800968][ T6940] netlink: 'syz.3.382': attribute type 29 has an invalid length. [ 161.833972][ T6941] netlink: 'syz.3.382': attribute type 29 has an invalid length. [ 161.936658][ T6940] netlink: 'syz.3.382': attribute type 29 has an invalid length. [ 161.962064][ T6940] netlink: 'syz.3.382': attribute type 29 has an invalid length. [ 162.096095][ T6949] FAULT_INJECTION: forcing a failure. [ 162.096095][ T6949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.109048][ T6951] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.386'. [ 162.115552][ T6949] CPU: 0 PID: 6949 Comm: syz.2.384 Not tainted syzkaller #0 [ 162.125935][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 162.128254][ T6951] netlink: del zone limit has 8 unknown bytes [ 162.136085][ T6949] Call Trace: [ 162.136102][ T6949] [ 162.136112][ T6949] dump_stack_lvl+0x18c/0x250 [ 162.136140][ T6949] ? show_regs_print_info+0x20/0x20 [ 162.136164][ T6949] ? load_image+0x420/0x420 [ 162.136181][ T6949] ? __might_fault+0xaa/0x120 [ 162.136198][ T6949] ? __lock_acquire+0x7d40/0x7d40 [ 162.136221][ T6949] should_fail_ex+0x39d/0x4d0 [ 162.136248][ T6949] _copy_from_iter+0x1d9/0x12e0 [ 162.136268][ T6949] ? __kmem_cache_alloc_node+0x13a/0x250 [ 162.136288][ T6949] ? __virt_addr_valid+0x18c/0x540 [ 162.136308][ T6949] ? __lock_acquire+0x7d40/0x7d40 [ 162.197917][ T6949] ? copyout_mc+0x70/0x70 [ 162.202255][ T6949] ? __virt_addr_valid+0x18c/0x540 [ 162.207370][ T6949] ? __virt_addr_valid+0x18c/0x540 [ 162.212490][ T6949] ? __virt_addr_valid+0x469/0x540 [ 162.217602][ T6949] ? __check_object_size+0x506/0xa20 [ 162.222889][ T6949] tipc_msg_build+0x861/0xee0 [ 162.227608][ T6949] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 162.233693][ T6949] ? net_generic+0x1e/0x240 [ 162.238198][ T6949] ? tipc_group_bc_cong+0x15c/0x210 [ 162.243422][ T6949] tipc_send_group_bcast+0x7d8/0xad0 [ 162.248723][ T6949] ? tipc_wait_for_connect+0x650/0x650 [ 162.254209][ T6949] ? wait_woken+0x180/0x180 [ 162.258753][ T6949] ? tomoyo_check_path_number_acl+0x280/0x280 [ 162.264825][ T6949] __tipc_sendmsg+0x33c/0x2bb0 [ 162.269605][ T6949] ? rht_unlock+0x1d0/0x1d0 [ 162.274114][ T6949] ? verify_lock_unused+0x140/0x140 [ 162.279313][ T6949] ? verify_lock_unused+0x140/0x140 [ 162.284517][ T6949] ? __might_sleep+0xe0/0xe0 [ 162.289132][ T6949] ? mark_lock+0x94/0x320 [ 162.293487][ T6949] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 162.299482][ T6949] ? __local_bh_enable_ip+0x13a/0x1c0 [ 162.304854][ T6949] ? lockdep_hardirqs_on+0x98/0x150 [ 162.310077][ T6949] ? __local_bh_enable_ip+0x13a/0x1c0 [ 162.315448][ T6949] ? _local_bh_enable+0xa0/0xa0 [ 162.320306][ T6949] tipc_sendmsg+0x55/0x70 [ 162.324641][ T6949] sock_write_iter+0x2df/0x420 [ 162.329408][ T6949] ? sock_read_iter+0x3e0/0x3e0 [ 162.334265][ T6949] ? common_file_perm+0x198/0x1f0 [ 162.339304][ T6949] vfs_write+0x46c/0x990 [ 162.343559][ T6949] ? file_end_write+0x250/0x250 [ 162.348416][ T6949] ? __fget_files+0x43d/0x4b0 [ 162.353108][ T6949] ? __fdget_pos+0x1d8/0x330 [ 162.357728][ T6949] ? ksys_write+0x75/0x260 [ 162.362200][ T6949] ksys_write+0x150/0x260 [ 162.366540][ T6949] ? __ia32_sys_read+0x90/0x90 [ 162.371307][ T6949] ? lockdep_hardirqs_on+0x98/0x150 [ 162.376512][ T6949] do_syscall_64+0x55/0xb0 [ 162.380929][ T6949] ? clear_bhb_loop+0x40/0x90 [ 162.385603][ T6949] ? clear_bhb_loop+0x40/0x90 [ 162.390282][ T6949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.396183][ T6949] RIP: 0033:0x7fd79d39ce59 [ 162.400600][ T6949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.420218][ T6949] RSP: 002b:00007fd79e2c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.428634][ T6949] RAX: ffffffffffffffda RBX: 00007fd79d616090 RCX: 00007fd79d39ce59 [ 162.436602][ T6949] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 162.444578][ T6949] RBP: 00007fd79e2c9090 R08: 0000000000000000 R09: 0000000000000000 [ 162.452557][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.460528][ T6949] R13: 00007fd79d616128 R14: 00007fd79d616090 R15: 00007ffd2d2a80f8 [ 162.468599][ T6949] [ 162.755310][ T6962] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.763002][ T6962] IPv6: NLM_F_CREATE should be set when creating new route [ 162.770434][ T6962] IPv6: NLM_F_CREATE should be set when creating new route [ 162.777793][ T6962] IPv6: NLM_F_CREATE should be set when creating new route [ 163.105223][ T6975] netlink: del zone limit has 8 unknown bytes [ 164.330902][ T7002] netlink: del zone limit has 8 unknown bytes [ 164.434459][ T7004] syzkaller0: entered promiscuous mode [ 164.468584][ T7004] syzkaller0: entered allmulticast mode [ 164.526753][ T7009] __nla_validate_parse: 7 callbacks suppressed [ 164.526770][ T7009] netlink: 763 bytes leftover after parsing attributes in process `syz.0.407'. [ 164.980133][ T7014] netlink: 119 bytes leftover after parsing attributes in process `syz.1.410'. [ 165.196643][ T7016] netlink: 152 bytes leftover after parsing attributes in process `syz.2.411'. [ 165.252500][ T7016] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 165.592579][ T7023] FAULT_INJECTION: forcing a failure. [ 165.592579][ T7023] name failslab, interval 1, probability 0, space 0, times 0 [ 165.603642][ T7021] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 165.605298][ T7023] CPU: 1 PID: 7023 Comm: syz.2.415 Not tainted syzkaller #0 [ 165.628248][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 165.638335][ T7023] Call Trace: [ 165.641653][ T7023] [ 165.644604][ T7023] dump_stack_lvl+0x18c/0x250 [ 165.649392][ T7023] ? show_regs_print_info+0x20/0x20 [ 165.654630][ T7023] ? load_image+0x420/0x420 [ 165.659184][ T7023] ? netdev_core_pick_tx+0x340/0x340 [ 165.664519][ T7023] ? rcu_is_watching+0x15/0xb0 [ 165.669321][ T7023] should_fail_ex+0x39d/0x4d0 [ 165.674025][ T7023] should_failslab+0x9/0x20 [ 165.678534][ T7023] slab_pre_alloc_hook+0x59/0x310 [ 165.683566][ T7023] kmem_cache_alloc+0x5a/0x2d0 [ 165.688333][ T7023] ? skb_clone+0x1eb/0x370 [ 165.692764][ T7023] skb_clone+0x1eb/0x370 [ 165.697008][ T7023] bpf_clone_redirect+0x167/0x4a0 [ 165.702044][ T7023] bpf_prog_c6f54bbad6dab1ee+0x5e/0x63 [ 165.707508][ T7023] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 165.713488][ T7023] ? perf_trace_preemptirq_template+0xac/0x330 [ 165.719647][ T7023] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 165.725624][ T7023] ? lockdep_softirqs_on+0x580/0x580 [ 165.730910][ T7023] ? lock_chain_count+0x20/0x20 [ 165.735757][ T7023] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 165.742003][ T7023] ? __local_bh_disable_ip+0x108/0x1a0 [ 165.747462][ T7023] ? __cant_sleep+0x220/0x220 [ 165.752132][ T7023] ? __local_bh_enable_ip+0x13a/0x1c0 [ 165.757508][ T7023] ? _local_bh_enable+0xa0/0xa0 [ 165.762360][ T7023] ? bpf_test_timer_continue+0x135/0x380 [ 165.767993][ T7023] ? bpf_test_run+0x174/0x870 [ 165.772668][ T7023] bpf_test_run+0x2df/0x870 [ 165.777268][ T7023] ? bpf_test_run+0x174/0x870 [ 165.781942][ T7023] ? dst_hold+0x70/0x70 [ 165.786101][ T7023] ? eth_get_headlen+0x210/0x210 [ 165.791042][ T7023] ? slab_build_skb+0x25f/0x3f0 [ 165.795889][ T7023] ? convert___skb_to_skb+0x3d/0x590 [ 165.801176][ T7023] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 165.806568][ T7023] ? cpu_online+0x60/0x60 [ 165.810895][ T7023] bpf_prog_test_run+0x321/0x390 [ 165.815885][ T7023] __sys_bpf+0x49d/0x890 [ 165.820131][ T7023] ? bpf_link_show_fdinfo+0x390/0x390 [ 165.825510][ T7023] ? lock_chain_count+0x20/0x20 [ 165.830364][ T7023] __x64_sys_bpf+0x7c/0x90 [ 165.834784][ T7023] do_syscall_64+0x55/0xb0 [ 165.839200][ T7023] ? clear_bhb_loop+0x40/0x90 [ 165.843872][ T7023] ? clear_bhb_loop+0x40/0x90 [ 165.848545][ T7023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.854443][ T7023] RIP: 0033:0x7fd79d39ce59 [ 165.858869][ T7023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.878558][ T7023] RSP: 002b:00007fd79e2ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 165.887406][ T7023] RAX: ffffffffffffffda RBX: 00007fd79d615fa0 RCX: 00007fd79d39ce59 [ 165.895389][ T7023] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 165.903377][ T7023] RBP: 00007fd79e2ea090 R08: 0000000000000000 R09: 0000000000000000 [ 165.911355][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.919324][ T7023] R13: 00007fd79d616038 R14: 00007fd79d615fa0 R15: 00007ffd2d2a80f8 [ 165.927306][ T7023] [ 166.099008][ T7033] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.416'. [ 166.134733][ T7033] netlink: del zone limit has 8 unknown bytes [ 166.362642][ T7043] netlink: 763 bytes leftover after parsing attributes in process `syz.2.420'. [ 166.573469][ T7047] validate_nla: 8 callbacks suppressed [ 166.573487][ T7047] netlink: 'syz.3.428': attribute type 2 has an invalid length. [ 166.600422][ T7047] netlink: 119 bytes leftover after parsing attributes in process `syz.3.428'. [ 166.989048][ T7049] syzkaller0: entered promiscuous mode [ 166.994586][ T7049] syzkaller0: entered allmulticast mode [ 167.394321][ T7059] netlink: 2220 bytes leftover after parsing attributes in process `syz.0.426'. [ 167.953862][ T7064] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.429'. [ 167.991329][ T7064] netlink: del zone limit has 8 unknown bytes [ 168.519954][ T7077] netlink: 763 bytes leftover after parsing attributes in process `syz.1.433'. [ 169.462674][ T7084] netlink: 'syz.3.438': attribute type 8 has an invalid length. [ 169.488751][ T7084] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.438'. [ 169.556963][ T7084] netlink: 'syz.3.438': attribute type 4 has an invalid length. [ 169.599506][ T7084] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.438'. [ 169.720667][ T7092] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.439'. [ 169.744662][ T7087] netlink: 'syz.0.435': attribute type 2 has an invalid length. [ 169.764751][ T7087] netlink: 119 bytes leftover after parsing attributes in process `syz.0.435'. [ 171.637008][ T7100] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.442'. [ 171.684301][ T7100] netlink: del zone limit has 8 unknown bytes [ 171.739873][ T7103] netlink: 'syz.3.441': attribute type 2 has an invalid length. [ 171.789103][ T7103] netlink: 164 bytes leftover after parsing attributes in process `syz.3.441'. [ 171.971516][ T7103] netlink: 60 bytes leftover after parsing attributes in process `syz.3.441'. [ 172.057909][ T7105] netlink: 196 bytes leftover after parsing attributes in process `syz.1.443'. [ 172.106380][ T7111] netlink: 763 bytes leftover after parsing attributes in process `syz.2.444'. [ 172.597030][ T7119] netlink: 196 bytes leftover after parsing attributes in process `syz.1.448'. [ 172.778339][ T7124] netlink: 'syz.1.450': attribute type 8 has an invalid length. [ 172.787477][ T7124] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.450'. [ 172.869443][ T7124] netlink: 'syz.1.450': attribute type 4 has an invalid length. [ 173.022359][ T7130] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 174.808085][ T7143] __nla_validate_parse: 1 callbacks suppressed [ 174.808101][ T7143] netlink: 44 bytes leftover after parsing attributes in process `syz.1.456'. [ 174.972724][ T7146] netlink: 196 bytes leftover after parsing attributes in process `syz.0.455'. [ 175.166260][ T7153] netlink: 196 bytes leftover after parsing attributes in process `syz.2.459'. [ 175.256200][ T7159] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.460'. [ 175.267676][ T7159] netlink: del zone limit has 8 unknown bytes [ 175.429123][ T7166] netlink: 'syz.1.463': attribute type 8 has an invalid length. [ 175.437264][ T7166] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.463'. [ 175.464656][ T7166] netlink: 'syz.1.463': attribute type 4 has an invalid length. [ 175.473110][ T7166] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.463'. [ 175.644366][ T7168] netlink: 196 bytes leftover after parsing attributes in process `syz.2.464'. [ 179.687780][ T7176] netlink: 763 bytes leftover after parsing attributes in process `syz.2.466'. [ 179.962562][ T7195] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.471'. [ 179.981333][ T7195] netlink: del zone limit has 8 unknown bytes [ 180.260436][ T7201] netlink: 763 bytes leftover after parsing attributes in process `syz.1.472'. [ 180.286900][ T7202] netlink: 'syz.2.473': attribute type 8 has an invalid length. [ 180.301780][ T7202] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.473'. [ 180.361052][ T7202] netlink: 'syz.2.473': attribute type 4 has an invalid length. [ 180.374289][ T7202] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.473'. [ 180.683558][ T7209] netlink: 'syz.2.476': attribute type 4 has an invalid length. [ 180.695544][ T7209] netlink: 152 bytes leftover after parsing attributes in process `syz.2.476'. [ 180.769321][ T7209] .`: renamed from bond0 (while UP) [ 180.808642][ T7215] netlink: 763 bytes leftover after parsing attributes in process `syz.3.477'. [ 181.940837][ T7232] netlink: 196 bytes leftover after parsing attributes in process `syz.0.481'. [ 182.963665][ T7227] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 183.149947][ T7237] netlink: 'syz.3.484': attribute type 8 has an invalid length. [ 183.157653][ T7237] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.484'. [ 183.252348][ T7237] netlink: 'syz.3.484': attribute type 4 has an invalid length. [ 183.263103][ T7237] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.484'. [ 183.438116][ T7247] netlink: 'syz.2.495': attribute type 4 has an invalid length. [ 183.446389][ T7247] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.495'. [ 183.482141][ T7245] netlink: 'syz.3.487': attribute type 4 has an invalid length. [ 183.565861][ T7245] .`: renamed from bond0 (while UP) [ 184.348392][ T7268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.355719][ T7268] IPv6: NLM_F_CREATE should be set when creating new route [ 184.363107][ T7268] IPv6: NLM_F_CREATE should be set when creating new route [ 184.370427][ T7268] IPv6: NLM_F_CREATE should be set when creating new route [ 184.597894][ T7274] netlink: 'syz.1.499': attribute type 4 has an invalid length. [ 184.777755][ T7279] netlink: 'syz.1.501': attribute type 4 has an invalid length. [ 184.854465][ T7279] .`: renamed from bond0 (while UP) [ 185.080718][ T7288] __nla_validate_parse: 7 callbacks suppressed [ 185.080857][ T7288] netlink: 196 bytes leftover after parsing attributes in process `syz.3.504'. [ 185.401665][ T7295] netlink: 763 bytes leftover after parsing attributes in process `syz.3.506'. [ 185.583473][ T7301] netlink: 'syz.1.508': attribute type 8 has an invalid length. [ 185.603627][ T7301] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.508'. [ 185.658079][ T7303] netlink: 'syz.0.509': attribute type 4 has an invalid length. [ 185.666890][ T7303] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.509'. [ 185.974971][ T7312] netlink: 196 bytes leftover after parsing attributes in process `syz.1.513'. [ 186.127481][ T7315] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.514'. [ 186.524436][ T7319] netlink: 'syz.3.517': attribute type 8 has an invalid length. [ 186.558599][ T7319] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.517'. [ 186.622766][ T7319] netlink: 'syz.3.517': attribute type 4 has an invalid length. [ 186.633868][ T7319] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.517'. [ 186.890860][ T7325] netlink: 'syz.3.519': attribute type 8 has an invalid length. [ 186.899577][ T7325] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.519'. [ 186.930598][ T7325] netlink: 'syz.3.519': attribute type 4 has an invalid length. [ 186.948814][ T7325] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.519'. [ 186.952787][ T7327] syzkaller0: entered promiscuous mode [ 187.006148][ T7327] syzkaller0: entered allmulticast mode [ 190.657425][ T7349] netlink: 'syz.0.527': attribute type 8 has an invalid length. [ 190.667732][ T7349] __nla_validate_parse: 2 callbacks suppressed [ 190.667749][ T7349] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.527'. [ 190.749225][ T7349] netlink: 'syz.0.527': attribute type 4 has an invalid length. [ 190.757191][ T7349] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.527'. [ 191.006378][ T7358] netlink: 'syz.3.530': attribute type 8 has an invalid length. [ 191.014746][ T7358] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.530'. [ 191.044749][ T7358] netlink: 'syz.3.530': attribute type 4 has an invalid length. [ 191.053439][ T7358] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.530'. [ 192.617051][ T7371] netlink: 763 bytes leftover after parsing attributes in process `syz.2.535'. [ 192.697477][ T7372] netlink: 196 bytes leftover after parsing attributes in process `syz.1.536'. [ 192.732592][ T7366] À: port 1(vlan0) entered blocking state [ 192.739547][ T7366] À: port 1(vlan0) entered disabled state [ 192.754274][ T7366] vlan0: entered allmulticast mode [ 192.759856][ T7366] veth0_vlan: entered allmulticast mode [ 192.791342][ T7366] vlan0: entered promiscuous mode [ 192.889206][ T7369] netlink: 'syz.0.534': attribute type 19 has an invalid length. [ 192.918944][ T7369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.534'. [ 193.162658][ T7376] FAULT_INJECTION: forcing a failure. [ 193.162658][ T7376] name failslab, interval 1, probability 0, space 0, times 0 [ 193.176255][ T7376] CPU: 0 PID: 7376 Comm: syz.3.537 Not tainted syzkaller #0 [ 193.183575][ T7376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 193.193637][ T7376] Call Trace: [ 193.196913][ T7376] [ 193.199841][ T7376] dump_stack_lvl+0x18c/0x250 [ 193.204528][ T7376] ? show_regs_print_info+0x20/0x20 [ 193.209750][ T7376] ? load_image+0x420/0x420 [ 193.214255][ T7376] ? br_get_link_af_size_filtered+0x92/0xc30 [ 193.220236][ T7376] ? __lock_acquire+0x7d40/0x7d40 [ 193.225267][ T7376] should_fail_ex+0x39d/0x4d0 [ 193.229966][ T7376] should_failslab+0x9/0x20 [ 193.234509][ T7376] slab_pre_alloc_hook+0x59/0x310 [ 193.239549][ T7376] kmem_cache_alloc_node+0x60/0x320 [ 193.244753][ T7376] ? __alloc_skb+0x103/0x2c0 [ 193.249350][ T7376] __alloc_skb+0x103/0x2c0 [ 193.253769][ T7376] br_info_notify+0x105/0x240 [ 193.258448][ T7376] br_setlink+0x398/0x8b0 [ 193.262784][ T7376] ? trace_call_bpf+0xc3/0x6c0 [ 193.267559][ T7376] ? br_vlan_info+0x460/0x460 [ 193.272266][ T7376] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 193.278248][ T7376] ? lockdep_next_lockchain+0x11/0x30 [ 193.283648][ T7376] ? nla_find+0x131/0x150 [ 193.287977][ T7376] rtnl_bridge_setlink+0x63c/0x7d0 [ 193.293093][ T7376] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 193.298388][ T7376] ? rtnetlink_rcv_msg+0x857/0xfa0 [ 193.303587][ T7376] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 193.308728][ T7376] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 193.314018][ T7376] rtnetlink_rcv_msg+0x869/0xfa0 [ 193.318963][ T7376] ? trace_call_bpf+0xc3/0x6c0 [ 193.323732][ T7376] ? rtnetlink_bind+0x80/0x80 [ 193.328408][ T7376] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 193.334482][ T7376] ? perf_trace_preemptirq_template+0x269/0x330 [ 193.340736][ T7376] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 193.346603][ T7376] ? perf_trace_preemptirq_template+0x269/0x330 [ 193.352861][ T7376] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 193.358846][ T7376] ? lock_chain_count+0x20/0x20 [ 193.363747][ T7376] ? __dev_queue_xmit+0x1b2c/0x3660 [ 193.368954][ T7376] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 193.375114][ T7376] ? lockdep_hardirqs_on+0x98/0x150 [ 193.380319][ T7376] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 193.386480][ T7376] ? netlink_rcv_skb+0xb1/0x4d0 [ 193.391326][ T7376] ? netlink_rcv_skb+0x10a/0x4d0 [ 193.396261][ T7376] ? kasan_check_range+0x9f/0x290 [ 193.401291][ T7376] netlink_rcv_skb+0x241/0x4d0 [ 193.406057][ T7376] ? rtnetlink_bind+0x80/0x80 [ 193.410739][ T7376] ? netlink_ack+0x1180/0x1180 [ 193.415509][ T7376] ? __lock_acquire+0x7d40/0x7d40 [ 193.420553][ T7376] ? netlink_deliver_tap+0x2e/0x1b0 [ 193.425754][ T7376] netlink_unicast+0x751/0x8d0 [ 193.430530][ T7376] netlink_sendmsg+0x8d0/0xbf0 [ 193.435295][ T7376] ? lockdep_hardirqs_on+0x98/0x150 [ 193.440503][ T7376] ? netlink_getsockopt+0x590/0x590 [ 193.445756][ T7376] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 193.451044][ T7376] ? security_socket_sendmsg+0x80/0xa0 [ 193.456502][ T7376] ? netlink_getsockopt+0x590/0x590 [ 193.461707][ T7376] ____sys_sendmsg+0x5ba/0x960 [ 193.466478][ T7376] ? __asan_memset+0x22/0x40 [ 193.471068][ T7376] ? __sys_sendmsg_sock+0x30/0x30 [ 193.476097][ T7376] ? __import_iovec+0x5f2/0x850 [ 193.480957][ T7376] ? import_iovec+0x73/0xa0 [ 193.485464][ T7376] ___sys_sendmsg+0x2a6/0x360 [ 193.490144][ T7376] ? __sys_sendmsg+0x2a0/0x2a0 [ 193.495122][ T7376] __se_sys_sendmsg+0x1c2/0x2b0 [ 193.500062][ T7376] ? __x64_sys_sendmsg+0x80/0x80 [ 193.505023][ T7376] ? syscall_enter_from_user_mode+0x2e/0x80 [ 193.510923][ T7376] do_syscall_64+0x55/0xb0 [ 193.515342][ T7376] ? clear_bhb_loop+0x40/0x90 [ 193.520015][ T7376] ? clear_bhb_loop+0x40/0x90 [ 193.524695][ T7376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.530589][ T7376] RIP: 0033:0x7f589379ce59 [ 193.535006][ T7376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.554625][ T7376] RSP: 002b:00007f5894743028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.563047][ T7376] RAX: ffffffffffffffda RBX: 00007f5893a15fa0 RCX: 00007f589379ce59 [ 193.571113][ T7376] RDX: 000000002000c090 RSI: 0000200000000040 RDI: 0000000000000008 [ 193.579086][ T7376] RBP: 00007f5894743090 R08: 0000000000000000 R09: 0000000000000000 [ 193.587056][ T7376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.595023][ T7376] R13: 00007f5893a16038 R14: 00007f5893a15fa0 R15: 00007ffe7908f278 [ 193.603031][ T7376] [ 193.738263][ T7383] netlink: 'syz.0.539': attribute type 8 has an invalid length. [ 193.754424][ T7383] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.539'. [ 193.780616][ T7383] netlink: 'syz.0.539': attribute type 4 has an invalid length. [ 193.794982][ T7383] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.539'. [ 194.506866][ T7405] netlink: 196 bytes leftover after parsing attributes in process `syz.3.546'. [ 194.547322][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.553917][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.572251][ T7402] À: port 1(vlan0) entered blocking state [ 194.580449][ T7402] À: port 1(vlan0) entered disabled state [ 194.587206][ T7402] vlan0: entered allmulticast mode [ 194.594522][ T7402] veth0_vlan: entered allmulticast mode [ 194.617334][ T7402] vlan0: entered promiscuous mode [ 194.827257][ T7412] netlink: 'syz.1.550': attribute type 8 has an invalid length. [ 194.892052][ T7412] netlink: 'syz.1.550': attribute type 4 has an invalid length. [ 194.981719][ T7413] netlink: 'syz.2.549': attribute type 19 has an invalid length. [ 195.119055][ T23] syzkaller1: tun_net_xmit 90 [ 195.130934][ T7415] syzkaller1: tun_chr_ioctl cmd 1074025694 [ 195.174871][ T7415] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 195.208277][ T7415] syzkaller1: Linktype set failed because interface is up [ 195.259888][ T11] syzkaller1: tun_net_xmit 86 [ 196.057315][ T7433] __nla_validate_parse: 4 callbacks suppressed [ 196.057403][ T7433] netlink: 196 bytes leftover after parsing attributes in process `syz.1.559'. [ 196.341423][ T7437] netlink: 'syz.1.560': attribute type 8 has an invalid length. [ 196.372041][ T7437] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.560'. [ 196.412828][ T7437] netlink: 'syz.1.560': attribute type 4 has an invalid length. [ 196.424191][ T7437] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.560'. [ 196.451731][ T7441] netlink: 763 bytes leftover after parsing attributes in process `syz.2.561'. [ 196.569475][ T7443] netlink: 160 bytes leftover after parsing attributes in process `syz.1.562'. [ 196.797680][ T7448] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.563'. [ 197.160095][ T7458] netlink: 196 bytes leftover after parsing attributes in process `syz.0.568'. [ 197.219298][ T7460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.488114][ T7464] netlink: 'syz.1.570': attribute type 8 has an invalid length. [ 197.501211][ T7464] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.570'. [ 197.525351][ T7464] netlink: 'syz.1.570': attribute type 4 has an invalid length. [ 197.544455][ T7464] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.570'. [ 197.751155][ T7473] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.572'. [ 197.841482][ T7473] netlink: del zone limit has 8 unknown bytes [ 198.645912][ T7495] netlink: 'syz.1.582': attribute type 2 has an invalid length. [ 198.662807][ T7495] netlink: 'syz.1.582': attribute type 3 has an invalid length. [ 198.730685][ T7497] netlink: 'syz.0.583': attribute type 8 has an invalid length. [ 198.774218][ T7497] netlink: 'syz.0.583': attribute type 4 has an invalid length. [ 198.809593][ T7501] netlink: del zone limit has 8 unknown bytes [ 199.854228][ T7525] netlink: 'syz.0.594': attribute type 8 has an invalid length. [ 199.883498][ T7525] netlink: 'syz.0.594': attribute type 4 has an invalid length. [ 199.977936][ T7527] netlink: del zone limit has 8 unknown bytes [ 201.118278][ T7569] __nla_validate_parse: 18 callbacks suppressed [ 201.118290][ T7569] netlink: 763 bytes leftover after parsing attributes in process `syz.1.609'. [ 201.363319][ T7575] FAULT_INJECTION: forcing a failure. [ 201.363319][ T7575] name failslab, interval 1, probability 0, space 0, times 0 [ 201.398612][ T7573] netlink: 196 bytes leftover after parsing attributes in process `syz.2.613'. [ 201.403759][ T7575] CPU: 0 PID: 7575 Comm: syz.0.614 Not tainted syzkaller #0 [ 201.416100][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 201.426187][ T7575] Call Trace: [ 201.429487][ T7575] [ 201.432443][ T7575] dump_stack_lvl+0x18c/0x250 [ 201.437146][ T7575] ? show_regs_print_info+0x20/0x20 [ 201.442364][ T7575] ? load_image+0x420/0x420 [ 201.446900][ T7575] ? __might_sleep+0xe0/0xe0 [ 201.451533][ T7575] ? __lock_acquire+0x7d40/0x7d40 [ 201.456600][ T7575] should_fail_ex+0x39d/0x4d0 [ 201.461330][ T7575] should_failslab+0x9/0x20 [ 201.465868][ T7575] slab_pre_alloc_hook+0x59/0x310 [ 201.470935][ T7575] ? kernfs_fop_write_iter+0x159/0x520 [ 201.476426][ T7575] ? kernfs_fop_write_iter+0x159/0x520 [ 201.481918][ T7575] __kmem_cache_alloc_node+0x53/0x250 [ 201.487339][ T7575] ? kernfs_fop_write_iter+0x159/0x520 [ 201.492838][ T7575] __kmalloc+0xa4/0x230 [ 201.497039][ T7575] kernfs_fop_write_iter+0x159/0x520 [ 201.502374][ T7575] vfs_write+0x46c/0x990 [ 201.506654][ T7575] ? file_end_write+0x250/0x250 [ 201.511522][ T7575] ? __fget_files+0x43d/0x4b0 [ 201.516210][ T7575] ? __fdget_pos+0x2a3/0x330 [ 201.520810][ T7575] ? ksys_write+0x75/0x260 [ 201.525239][ T7575] ksys_write+0x150/0x260 [ 201.529578][ T7575] ? __ia32_sys_read+0x90/0x90 [ 201.534371][ T7575] ? lockdep_hardirqs_on+0x98/0x150 [ 201.539575][ T7575] do_syscall_64+0x55/0xb0 [ 201.543993][ T7575] ? clear_bhb_loop+0x40/0x90 [ 201.548665][ T7575] ? clear_bhb_loop+0x40/0x90 [ 201.553343][ T7575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.559262][ T7575] RIP: 0033:0x7f2718d9ce59 [ 201.563714][ T7575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.565171][ T7577] validate_nla: 2 callbacks suppressed [ 201.565214][ T7577] netlink: 'syz.3.615': attribute type 10 has an invalid length. [ 201.583333][ T7575] RSP: 002b:00007f2719bfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 201.583361][ T7575] RAX: ffffffffffffffda RBX: 00007f2719015fa0 RCX: 00007f2718d9ce59 [ 201.583372][ T7575] RDX: 0000000000000012 RSI: 0000200000000380 RDI: 0000000000000004 [ 201.583382][ T7575] RBP: 00007f2719bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 201.583391][ T7575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.583399][ T7575] R13: 00007f2719016038 R14: 00007f2719015fa0 R15: 00007ffde4329408 [ 201.583426][ T7575] [ 201.734671][ T7580] netlink: 'syz.0.616': attribute type 8 has an invalid length. [ 201.740878][ T5771] Bluetooth: hci2: command 0x0406 tx timeout [ 201.750018][ T5771] Bluetooth: hci3: command 0x0406 tx timeout [ 201.750396][ T7580] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.616'. [ 201.756094][ T5771] Bluetooth: hci0: command 0x0406 tx timeout [ 201.756131][ T5771] Bluetooth: hci1: command 0x0406 tx timeout [ 201.864466][ T7580] netlink: 'syz.0.616': attribute type 4 has an invalid length. [ 201.880947][ T7577] wg1: entered promiscuous mode [ 201.887938][ T7577] wg1: entered allmulticast mode [ 201.896495][ T7577] team0: Device wg1 is of different type [ 201.932338][ T7580] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.616'. [ 202.026003][ T7586] netlink: 763 bytes leftover after parsing attributes in process `syz.2.617'. [ 202.307284][ T7601] netlink: 'syz.1.622': attribute type 16 has an invalid length. [ 202.316077][ T7601] netlink: 164 bytes leftover after parsing attributes in process `syz.1.622'. [ 202.441958][ T7604] netlink: 'syz.3.623': attribute type 39 has an invalid length. [ 202.625363][ T7610] netlink: 196 bytes leftover after parsing attributes in process `syz.1.625'. [ 202.777266][ T7612] netlink: 'syz.2.626': attribute type 41 has an invalid length. [ 202.848337][ T7614] netlink: 196 bytes leftover after parsing attributes in process `syz.3.627'. [ 203.277141][ T7628] FAULT_INJECTION: forcing a failure. [ 203.277141][ T7628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.294068][ T7628] CPU: 1 PID: 7628 Comm: syz.1.633 Not tainted syzkaller #0 [ 203.301407][ T7628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 203.311645][ T7628] Call Trace: [ 203.314936][ T7628] [ 203.317861][ T7628] dump_stack_lvl+0x18c/0x250 [ 203.322567][ T7628] ? show_regs_print_info+0x20/0x20 [ 203.327767][ T7628] ? load_image+0x420/0x420 [ 203.332266][ T7628] ? __might_fault+0xaa/0x120 [ 203.336956][ T7628] ? __lock_acquire+0x7d40/0x7d40 [ 203.342046][ T7628] ? mark_lock+0x94/0x320 [ 203.346386][ T7628] should_fail_ex+0x39d/0x4d0 [ 203.351110][ T7628] _copy_from_iter+0x1d9/0x12e0 [ 203.356006][ T7628] ? dev_get_by_index+0x22/0x2d0 [ 203.360967][ T7628] ? __lock_acquire+0x7d40/0x7d40 [ 203.366091][ T7628] ? copyout_mc+0x70/0x70 [ 203.370442][ T7628] ? perf_trace_lock+0xfc/0x3b0 [ 203.375306][ T7628] ? verify_lock_unused+0x140/0x140 [ 203.380602][ T7628] ? dev_get_by_index+0x22/0x2d0 [ 203.385548][ T7628] ? dev_get_by_index+0x22/0x2d0 [ 203.390507][ T7628] packet_sendmsg+0x2cd5/0x4c30 [ 203.395384][ T7628] ? __might_sleep+0xe0/0xe0 [ 203.399977][ T7628] ? verify_lock_unused+0x140/0x140 [ 203.405176][ T7628] ? mark_lock+0x94/0x320 [ 203.409506][ T7628] ? __lock_acquire+0x1273/0x7d40 [ 203.414562][ T7628] ? aa_sk_perm+0x83c/0x970 [ 203.419066][ T7628] ? packet_getsockopt+0xad0/0xad0 [ 203.424176][ T7628] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 203.429759][ T7628] ? aa_sock_msg_perm+0x94/0x150 [ 203.434727][ T7628] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 203.440023][ T7628] ? security_socket_sendmsg+0x80/0xa0 [ 203.445480][ T7628] ? packet_getsockopt+0xad0/0xad0 [ 203.450615][ T7628] ____sys_sendmsg+0x5ba/0x960 [ 203.455389][ T7628] ? __lock_acquire+0x7d40/0x7d40 [ 203.460431][ T7628] ? __asan_memset+0x22/0x40 [ 203.465116][ T7628] ? __sys_sendmsg_sock+0x30/0x30 [ 203.470149][ T7628] ? __import_iovec+0x5f2/0x850 [ 203.475025][ T7628] ? import_iovec+0x73/0xa0 [ 203.479543][ T7628] ___sys_sendmsg+0x2a6/0x360 [ 203.484337][ T7628] ? __sys_sendmsg+0x2a0/0x2a0 [ 203.489208][ T7628] ? __lock_acquire+0x7d40/0x7d40 [ 203.494346][ T7628] __se_sys_sendmsg+0x1c2/0x2b0 [ 203.499235][ T7628] ? __x64_sys_sendmsg+0x80/0x80 [ 203.504191][ T7628] ? lockdep_hardirqs_on+0x98/0x150 [ 203.509405][ T7628] do_syscall_64+0x55/0xb0 [ 203.513873][ T7628] ? clear_bhb_loop+0x40/0x90 [ 203.518546][ T7628] ? clear_bhb_loop+0x40/0x90 [ 203.523236][ T7628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.529132][ T7628] RIP: 0033:0x7fbb0179ce59 [ 203.533545][ T7628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.553156][ T7628] RSP: 002b:00007fbb0261f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.561596][ T7628] RAX: ffffffffffffffda RBX: 00007fbb01a15fa0 RCX: 00007fbb0179ce59 [ 203.569576][ T7628] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 203.577634][ T7628] RBP: 00007fbb0261f090 R08: 0000000000000000 R09: 0000000000000000 [ 203.585612][ T7628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.593668][ T7628] R13: 00007fbb01a16038 R14: 00007fbb01a15fa0 R15: 00007ffffa674598 [ 203.601652][ T7628] [ 203.624683][ T7629] netlink: 763 bytes leftover after parsing attributes in process `syz.3.634'. [ 203.757022][ T7632] netlink: 'syz.1.636': attribute type 8 has an invalid length. [ 203.767402][ T7632] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.636'. [ 203.803629][ T7632] netlink: 'syz.1.636': attribute type 4 has an invalid length. [ 204.566351][ T7654] netlink: 'syz.0.647': attribute type 8 has an invalid length. [ 204.589216][ T7654] netlink: 'syz.0.647': attribute type 4 has an invalid length. [ 204.906340][ T7659] syzkaller0: entered promiscuous mode [ 204.917693][ T7659] syzkaller0: entered allmulticast mode [ 206.403754][ T7692] __nla_validate_parse: 9 callbacks suppressed [ 206.403769][ T7692] netlink: 40 bytes leftover after parsing attributes in process `syz.2.657'. [ 206.460785][ T7694] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.658'. [ 206.538912][ T7691] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.658'. [ 206.832230][ T7697] netlink: 196 bytes leftover after parsing attributes in process `syz.1.660'. [ 206.950002][ T7704] netlink: 763 bytes leftover after parsing attributes in process `syz.3.662'. [ 207.089417][ T7708] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.663'. [ 207.124505][ T7709] validate_nla: 5 callbacks suppressed [ 207.124523][ T7709] netlink: 'syz.0.671': attribute type 19 has an invalid length. [ 207.209697][ T7709] netlink: 40 bytes leftover after parsing attributes in process `syz.0.671'. [ 207.850948][ T7720] netlink: 196 bytes leftover after parsing attributes in process `syz.0.667'. [ 208.001006][ T7727] netlink: 'syz.2.670': attribute type 8 has an invalid length. [ 208.018600][ T7727] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.670'. [ 208.070977][ T7727] netlink: 'syz.2.670': attribute type 4 has an invalid length. [ 208.098748][ T7727] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.670'. [ 208.936429][ T7748] netlink: 'syz.3.677': attribute type 19 has an invalid length. [ 209.648350][ T7758] netlink: 'syz.2.681': attribute type 8 has an invalid length. [ 209.989079][ T7764] syzkaller0: entered promiscuous mode [ 210.064809][ T7764] syzkaller0: entered allmulticast mode [ 211.368947][ T7789] netlink: 'syz.2.693': attribute type 8 has an invalid length. [ 212.953817][ T7799] __nla_validate_parse: 9 callbacks suppressed [ 212.953833][ T7799] netlink: 763 bytes leftover after parsing attributes in process `syz.0.695'. [ 214.144418][ T7822] netlink: 'syz.1.701': attribute type 19 has an invalid length. [ 214.154728][ T7823] netlink: 196 bytes leftover after parsing attributes in process `syz.3.703'. [ 214.192854][ T7822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.701'. [ 214.302605][ T7820] netlink: 'syz.0.702': attribute type 19 has an invalid length. [ 214.325288][ T7820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.702'. [ 214.655992][ T7830] netlink: 196 bytes leftover after parsing attributes in process `syz.3.705'. [ 214.777410][ T7832] syzkaller0: entered promiscuous mode [ 214.784061][ T7832] syzkaller0: entered allmulticast mode [ 215.697412][ T7844] netlink: 'syz.0.708': attribute type 19 has an invalid length. [ 215.710843][ T7844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.708'. [ 215.755141][ T7848] netlink: 763 bytes leftover after parsing attributes in process `syz.3.710'. [ 218.442074][ T7834] netlink: 'syz.1.707': attribute type 19 has an invalid length. [ 218.450418][ T7834] netlink: 40 bytes leftover after parsing attributes in process `syz.1.707'. [ 218.465597][ T7859] netlink: 196 bytes leftover after parsing attributes in process `syz.3.713'. [ 218.906468][ T7869] netlink: 196 bytes leftover after parsing attributes in process `syz.3.717'. [ 218.942483][ T7871] netlink: 196 bytes leftover after parsing attributes in process `syz.1.718'. [ 218.958924][ T7874] hsr0: VLAN not yet supported [ 218.990133][ T7876] netlink: 763 bytes leftover after parsing attributes in process `syz.2.720'. [ 222.296803][ T7887] netlink: 128 bytes leftover after parsing attributes in process `syz.2.722'. [ 222.440009][ T7887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.487028][ T7894] netlink: 'syz.3.724': attribute type 19 has an invalid length. [ 222.515840][ T7894] netlink: 40 bytes leftover after parsing attributes in process `syz.3.724'. [ 222.533038][ T7893] netlink: 196 bytes leftover after parsing attributes in process `syz.0.732'. [ 223.116462][ T7899] netlink: 196 bytes leftover after parsing attributes in process `syz.1.725'. [ 223.401269][ T7906] netlink: 196 bytes leftover after parsing attributes in process `syz.2.729'. [ 223.434261][ T7904] netlink: 'syz.3.728': attribute type 19 has an invalid length. [ 223.460795][ T7911] __nla_validate_parse: 1 callbacks suppressed [ 223.460818][ T7911] netlink: 763 bytes leftover after parsing attributes in process `syz.1.730'. [ 223.726007][ T7913] netlink: 'syz.2.731': attribute type 19 has an invalid length. [ 223.735240][ T7915] netlink: 196 bytes leftover after parsing attributes in process `syz.0.740'. [ 223.739113][ T7913] netlink: 40 bytes leftover after parsing attributes in process `syz.2.731'. [ 224.148401][ T7921] netlink: 'syz.0.733': attribute type 19 has an invalid length. [ 224.179125][ T7921] netlink: 40 bytes leftover after parsing attributes in process `syz.0.733'. [ 224.305481][ T7924] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.735'. [ 224.503086][ T7924] netlink: 'syz.2.735': attribute type 10 has an invalid length. [ 224.528323][ T7924] team0: Device ipvlan1 failed to register rx_handler [ 224.784691][ T7932] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.738'. [ 224.967794][ T7935] netlink: 196 bytes leftover after parsing attributes in process `syz.0.739'. [ 225.046125][ T7941] netlink: 196 bytes leftover after parsing attributes in process `syz.1.742'. [ 225.358105][ T7943] netlink: 'syz.3.744': attribute type 19 has an invalid length. [ 225.413180][ T7943] netlink: 40 bytes leftover after parsing attributes in process `syz.3.744'. [ 225.439067][ T7945] netlink: 'syz.0.743': attribute type 19 has an invalid length. [ 225.471518][ T7945] netlink: 40 bytes leftover after parsing attributes in process `syz.0.743'. [ 225.857661][ T7957] FAULT_INJECTION: forcing a failure. [ 225.857661][ T7957] name failslab, interval 1, probability 0, space 0, times 0 [ 225.874469][ T7957] CPU: 0 PID: 7957 Comm: syz.2.748 Not tainted syzkaller #0 [ 225.881905][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 225.892084][ T7957] Call Trace: [ 225.895386][ T7957] [ 225.898328][ T7957] dump_stack_lvl+0x18c/0x250 [ 225.903049][ T7957] ? show_regs_print_info+0x20/0x20 [ 225.908276][ T7957] ? load_image+0x420/0x420 [ 225.912812][ T7957] ? __might_sleep+0xe0/0xe0 [ 225.917520][ T7957] ? __lock_acquire+0x7d40/0x7d40 [ 225.922582][ T7957] should_fail_ex+0x39d/0x4d0 [ 225.927303][ T7957] should_failslab+0x9/0x20 [ 225.931841][ T7957] slab_pre_alloc_hook+0x59/0x310 [ 225.936999][ T7957] ? tomoyo_encode+0x28b/0x540 [ 225.941799][ T7957] ? tomoyo_encode+0x28b/0x540 [ 225.946600][ T7957] __kmem_cache_alloc_node+0x53/0x250 [ 225.953473][ T7957] ? tomoyo_encode+0x28b/0x540 [ 225.958355][ T7957] __kmalloc+0xa4/0x230 [ 225.962798][ T7957] tomoyo_encode+0x28b/0x540 [ 225.967431][ T7957] tomoyo_realpath_from_path+0x592/0x5d0 [ 225.973120][ T7957] tomoyo_path_number_perm+0x248/0x620 [ 225.978616][ T7957] ? tomoyo_path_number_perm+0x217/0x620 [ 225.984282][ T7957] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 225.989779][ T7957] ? ksys_write+0x1c4/0x260 [ 225.994369][ T7957] ? __fget_files+0x28/0x4b0 [ 225.999030][ T7957] ? __fget_files+0x28/0x4b0 [ 226.003665][ T7957] security_file_ioctl+0x70/0xa0 [ 226.008643][ T7957] __se_sys_ioctl+0x48/0x170 [ 226.013263][ T7957] do_syscall_64+0x55/0xb0 [ 226.017701][ T7957] ? clear_bhb_loop+0x40/0x90 [ 226.022417][ T7957] ? clear_bhb_loop+0x40/0x90 [ 226.027206][ T7957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.033145][ T7957] RIP: 0033:0x7fd79d39ce59 [ 226.037582][ T7957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.057217][ T7957] RSP: 002b:00007fd79e2ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.065660][ T7957] RAX: ffffffffffffffda RBX: 00007fd79d615fa0 RCX: 00007fd79d39ce59 [ 226.073664][ T7957] RDX: 0000200000000100 RSI: 000000000000894b RDI: 0000000000000003 [ 226.081664][ T7957] RBP: 00007fd79e2ea090 R08: 0000000000000000 R09: 0000000000000000 [ 226.089703][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.097698][ T7957] R13: 00007fd79d616038 R14: 00007fd79d615fa0 R15: 00007ffd2d2a80f8 [ 226.105706][ T7957] [ 226.123879][ T7957] ERROR: Out of memory at tomoyo_realpath_from_path. [ 226.132716][ T7955] netlink: 'syz.3.747': attribute type 19 has an invalid length. [ 226.373964][ T7960] netlink: 'syz.0.757': attribute type 2 has an invalid length. [ 226.389081][ T7960] netlink: 'syz.0.757': attribute type 8 has an invalid length. [ 227.590954][ T7987] validate_nla: 3 callbacks suppressed [ 227.590975][ T7987] netlink: 'syz.1.760': attribute type 19 has an invalid length. [ 227.706329][ T7991] delete_channel: no stack [ 228.391757][ T7999] bridge_slave_1: default FDB implementation only supports local addresses [ 228.708493][ T8008] netlink: 'syz.1.768': attribute type 19 has an invalid length. [ 228.720225][ T8008] __nla_validate_parse: 13 callbacks suppressed [ 228.720314][ T8008] netlink: 40 bytes leftover after parsing attributes in process `syz.1.768'. [ 228.947353][ T8013] veth1_macvtap: left promiscuous mode [ 228.978034][ T8013] macsec0: entered allmulticast mode [ 229.174271][ T8018] FAULT_INJECTION: forcing a failure. [ 229.174271][ T8018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.189144][ T8018] CPU: 1 PID: 8018 Comm: syz.2.771 Not tainted syzkaller #0 [ 229.196488][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.206927][ T8018] Call Trace: [ 229.210232][ T8018] [ 229.213263][ T8018] dump_stack_lvl+0x18c/0x250 [ 229.217987][ T8018] ? show_regs_print_info+0x20/0x20 [ 229.223228][ T8018] ? load_image+0x420/0x420 [ 229.227761][ T8018] ? __might_fault+0xaa/0x120 [ 229.232580][ T8018] should_fail_ex+0x39d/0x4d0 [ 229.237282][ T8018] copyin+0x1a/0x90 [ 229.241107][ T8018] _copy_from_iter+0x404/0x12e0 [ 229.246063][ T8018] ? copyout_mc+0x70/0x70 [ 229.250419][ T8018] ? verify_lock_unused+0x140/0x140 [ 229.255628][ T8018] ? dev_get_by_index+0x22/0x2d0 [ 229.260577][ T8018] ? dev_get_by_index+0x22/0x2d0 [ 229.265535][ T8018] packet_sendmsg+0x2cd5/0x4c30 [ 229.270419][ T8018] ? __might_sleep+0xe0/0xe0 [ 229.275026][ T8018] ? verify_lock_unused+0x140/0x140 [ 229.280251][ T8018] ? mark_lock+0x94/0x320 [ 229.284770][ T8018] ? __lock_acquire+0x1273/0x7d40 [ 229.289798][ T8018] ? verify_lock_unused+0x140/0x140 [ 229.295010][ T8018] ? aa_sk_perm+0x83c/0x970 [ 229.299531][ T8018] ? packet_getsockopt+0xad0/0xad0 [ 229.304659][ T8018] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 229.310127][ T8018] ? aa_sock_msg_perm+0x94/0x150 [ 229.315072][ T8018] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 229.320361][ T8018] ? security_socket_sendmsg+0x80/0xa0 [ 229.325831][ T8018] ? packet_getsockopt+0xad0/0xad0 [ 229.330950][ T8018] ____sys_sendmsg+0x5ba/0x960 [ 229.335722][ T8018] ? __lock_acquire+0x7d40/0x7d40 [ 229.340752][ T8018] ? __asan_memset+0x22/0x40 [ 229.345347][ T8018] ? __sys_sendmsg_sock+0x30/0x30 [ 229.350378][ T8018] ? __import_iovec+0x3fa/0x850 [ 229.355251][ T8018] ? import_iovec+0x73/0xa0 [ 229.359761][ T8018] ___sys_sendmsg+0x2a6/0x360 [ 229.364439][ T8018] ? get_pid_task+0x20/0x1e0 [ 229.369033][ T8018] ? __sys_sendmsg+0x2a0/0x2a0 [ 229.373811][ T8018] ? __lock_acquire+0x7d40/0x7d40 [ 229.378859][ T8018] __se_sys_sendmsg+0x1c2/0x2b0 [ 229.383723][ T8018] ? __x64_sys_sendmsg+0x80/0x80 [ 229.388681][ T8018] ? lockdep_hardirqs_on+0x98/0x150 [ 229.393889][ T8018] do_syscall_64+0x55/0xb0 [ 229.398304][ T8018] ? clear_bhb_loop+0x40/0x90 [ 229.402986][ T8018] ? clear_bhb_loop+0x40/0x90 [ 229.407660][ T8018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.413558][ T8018] RIP: 0033:0x7fd79d39ce59 [ 229.417972][ T8018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.437584][ T8018] RSP: 002b:00007fd79e2ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.446092][ T8018] RAX: ffffffffffffffda RBX: 00007fd79d615fa0 RCX: 00007fd79d39ce59 [ 229.454072][ T8018] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 229.462054][ T8018] RBP: 00007fd79e2ea090 R08: 0000000000000000 R09: 0000000000000000 [ 229.470027][ T8018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.478011][ T8018] R13: 00007fd79d616038 R14: 00007fd79d615fa0 R15: 00007ffd2d2a80f8 [ 229.486012][ T8018] [ 229.710626][ T8028] netlink: 196 bytes leftover after parsing attributes in process `syz.2.774'. [ 229.793410][ T8025] netlink: 'syz.1.773': attribute type 19 has an invalid length. [ 229.847495][ T8025] netlink: 40 bytes leftover after parsing attributes in process `syz.1.773'. [ 230.016768][ T8034] netlink: 763 bytes leftover after parsing attributes in process `syz.0.775'. [ 230.080413][ T8033] netlink: 196 bytes leftover after parsing attributes in process `syz.2.776'. [ 230.613174][ T8045] netlink: 'syz.1.780': attribute type 19 has an invalid length. [ 230.622020][ T8045] netlink: 40 bytes leftover after parsing attributes in process `syz.1.780'. [ 230.965003][ T8054] netlink: 14 bytes leftover after parsing attributes in process `syz.1.782'. [ 231.033944][ T8054] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.057915][ T8054] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.074676][ T8054] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 231.092735][ T8054] .` (unregistering): Released all slaves [ 231.137681][ T8061] netlink: 196 bytes leftover after parsing attributes in process `syz.0.784'. [ 231.328410][ T8063] netlink: 'syz.2.785': attribute type 9 has an invalid length. [ 231.350392][ T8063] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.785'. [ 231.441381][ T8065] netlink: 196 bytes leftover after parsing attributes in process `syz.3.786'. [ 231.787391][ T8076] netlink: 'syz.3.790': attribute type 19 has an invalid length. [ 232.458608][ T8092] netlink: 'syz.2.794': attribute type 2 has an invalid length. [ 232.611148][ T8095] netlink: 'syz.1.795': attribute type 1 has an invalid length. [ 233.145283][ T8105] netlink: 'syz.3.799': attribute type 9 has an invalid length. [ 233.445775][ T8108] netlink: 'syz.1.801': attribute type 19 has an invalid length. [ 233.589809][ T8113] syzkaller0: entered promiscuous mode [ 233.603697][ T8113] syzkaller0: entered allmulticast mode [ 234.121594][ T8129] __nla_validate_parse: 7 callbacks suppressed [ 234.121632][ T8129] netlink: 196 bytes leftover after parsing attributes in process `syz.1.806'. [ 235.527724][ T8118] netlink: 'syz.3.803': attribute type 7 has an invalid length. [ 235.535681][ T8121] netlink: 763 bytes leftover after parsing attributes in process `syz.0.804'. [ 235.545470][ T8122] netlink: 'syz.3.803': attribute type 10 has an invalid length. [ 235.554834][ T8126] netlink: 'syz.3.803': attribute type 21 has an invalid length. [ 235.567883][ T8126] netlink: 128 bytes leftover after parsing attributes in process `syz.3.803'. [ 235.598666][ T8126] netlink: 'syz.3.803': attribute type 5 has an invalid length. [ 235.606373][ T8126] netlink: 'syz.3.803': attribute type 6 has an invalid length. [ 235.636936][ T8126] netlink: 3 bytes leftover after parsing attributes in process `syz.3.803'. [ 235.691941][ T8134] FAULT_INJECTION: forcing a failure. [ 235.691941][ T8134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.717293][ T8134] CPU: 0 PID: 8134 Comm: syz.1.808 Not tainted syzkaller #0 [ 235.724656][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 235.734754][ T8134] Call Trace: [ 235.738098][ T8134] [ 235.741049][ T8134] dump_stack_lvl+0x18c/0x250 [ 235.745756][ T8134] ? show_regs_print_info+0x20/0x20 [ 235.750980][ T8134] ? load_image+0x420/0x420 [ 235.755505][ T8134] ? __lock_acquire+0x7d40/0x7d40 [ 235.760566][ T8134] ? snprintf+0xe9/0x140 [ 235.764873][ T8134] should_fail_ex+0x39d/0x4d0 [ 235.769579][ T8134] _copy_to_user+0x2f/0xa0 [ 235.774015][ T8134] simple_read_from_buffer+0xe7/0x150 [ 235.779424][ T8134] proc_fail_nth_read+0x1e8/0x260 [ 235.784474][ T8134] ? proc_fault_inject_write+0x360/0x360 [ 235.790132][ T8134] ? fsnotify_perm+0x271/0x5e0 [ 235.794916][ T8134] ? proc_fault_inject_write+0x360/0x360 [ 235.800568][ T8134] vfs_read+0x28b/0x970 [ 235.804750][ T8134] ? kernel_read+0x1e0/0x1e0 [ 235.809420][ T8134] ? __fget_files+0x28/0x4b0 [ 235.814022][ T8134] ? __fget_files+0x28/0x4b0 [ 235.818632][ T8134] ? __fget_files+0x43d/0x4b0 [ 235.823347][ T8134] ? __fdget_pos+0x2a3/0x330 [ 235.827966][ T8134] ? ksys_read+0x75/0x260 [ 235.832336][ T8134] ksys_read+0x150/0x260 [ 235.836610][ T8134] ? vfs_write+0x990/0x990 [ 235.841058][ T8134] ? lockdep_hardirqs_on+0x98/0x150 [ 235.846284][ T8134] do_syscall_64+0x55/0xb0 [ 235.850724][ T8134] ? clear_bhb_loop+0x40/0x90 [ 235.855417][ T8134] ? clear_bhb_loop+0x40/0x90 [ 235.860107][ T8134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.866019][ T8134] RIP: 0033:0x7fbb0175d68e [ 235.870451][ T8134] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.890086][ T8134] RSP: 002b:00007fbb0261efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 235.898541][ T8134] RAX: ffffffffffffffda RBX: 00007fbb0261f6c0 RCX: 00007fbb0175d68e [ 235.906732][ T8134] RDX: 000000000000000f RSI: 00007fbb0261f0a0 RDI: 0000000000000005 [ 235.914832][ T8134] RBP: 00007fbb0261f090 R08: 0000000000000000 R09: 0000000000000000 [ 235.922831][ T8134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.930835][ T8134] R13: 00007fbb01a16038 R14: 00007fbb01a15fa0 R15: 00007ffffa674598 [ 235.938853][ T8134] [ 236.093911][ T8140] netlink: 196 bytes leftover after parsing attributes in process `syz.3.810'. [ 236.494501][ T8149] netlink: 'syz.3.813': attribute type 19 has an invalid length. [ 236.503210][ T8149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.813'. [ 236.760597][ T8159] netlink: 763 bytes leftover after parsing attributes in process `syz.2.815'. [ 236.763481][ T8157] netlink: 196 bytes leftover after parsing attributes in process `syz.1.816'. [ 236.868252][ T8161] syzkaller0: entered promiscuous mode [ 236.874571][ T8161] syzkaller0: entered allmulticast mode [ 237.712608][ T8176] netlink: 196 bytes leftover after parsing attributes in process `syz.0.822'. [ 238.804980][ T8169] ªªªªªª: renamed from vlan0 (while UP) [ 239.335447][ T8191] netlink: 196 bytes leftover after parsing attributes in process `syz.2.827'. [ 239.341198][ T8186] netlink: 'syz.1.826': attribute type 19 has an invalid length. [ 239.353014][ T8186] netlink: 40 bytes leftover after parsing attributes in process `syz.1.826'. [ 239.647466][ T8194] netlink: 'syz.3.828': attribute type 19 has an invalid length. [ 239.667230][ T8194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.828'. [ 239.705632][ T8200] netlink: 763 bytes leftover after parsing attributes in process `syz.2.829'. [ 239.729064][ T8199] netlink: 'syz.1.830': attribute type 19 has an invalid length. [ 239.737076][ T8199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.830'. [ 239.957139][ T8205] netlink: 196 bytes leftover after parsing attributes in process `syz.3.831'. [ 240.066700][ T8207] syzkaller0: entered promiscuous mode [ 240.072498][ T8207] syzkaller0: entered allmulticast mode [ 240.178258][ T8213] syzkaller0: entered promiscuous mode [ 240.184655][ T8213] syzkaller0: entered allmulticast mode [ 240.592078][ T8219] netlink: 196 bytes leftover after parsing attributes in process `syz.2.835'. [ 241.933519][ T8220] netlink: 763 bytes leftover after parsing attributes in process `syz.1.843'. [ 244.062457][ T8228] netlink: 'syz.3.838': attribute type 19 has an invalid length. [ 244.062632][ T8229] netlink: 196 bytes leftover after parsing attributes in process `syz.1.837'. [ 244.070739][ T8228] netlink: 40 bytes leftover after parsing attributes in process `syz.3.838'. [ 244.426805][ T8240] netlink: 196 bytes leftover after parsing attributes in process `syz.3.842'. [ 244.503673][ T8245] netlink: 'syz.0.841': attribute type 19 has an invalid length. [ 244.526977][ T8245] netlink: 40 bytes leftover after parsing attributes in process `syz.0.841'. [ 244.945966][ T8251] macvlan1: entered promiscuous mode [ 244.964103][ T8251] macvlan1: entered allmulticast mode [ 244.971971][ T8251] veth1_vlan: entered allmulticast mode [ 245.022659][ T8255] netlink: 763 bytes leftover after parsing attributes in process `syz.0.846'. [ 245.207067][ T8257] syzkaller0: entered promiscuous mode [ 245.217723][ T8257] syzkaller0: entered allmulticast mode [ 245.547874][ T8263] netlink: 196 bytes leftover after parsing attributes in process `syz.1.849'. [ 246.015702][ T8266] netlink: 196 bytes leftover after parsing attributes in process `syz.0.850'. [ 247.222079][ T8270] netlink: 196 bytes leftover after parsing attributes in process `syz.0.852'. [ 247.345577][ T8268] netlink: 'syz.1.851': attribute type 19 has an invalid length. [ 247.364870][ T8268] netlink: 40 bytes leftover after parsing attributes in process `syz.1.851'. [ 247.489553][ T8274] netlink: 'syz.3.853': attribute type 19 has an invalid length. [ 247.515419][ T8274] netlink: 40 bytes leftover after parsing attributes in process `syz.3.853'. [ 247.559833][ T8275] netlink: 'syz.2.854': attribute type 19 has an invalid length. [ 247.572107][ T8275] netlink: 40 bytes leftover after parsing attributes in process `syz.2.854'. [ 247.721312][ T8279] netlink: 164 bytes leftover after parsing attributes in process `syz.1.855'. [ 248.254779][ T8294] syzkaller0: entered promiscuous mode [ 248.262038][ T8294] syzkaller0: entered allmulticast mode [ 250.628209][ T8301] netlink: 'syz.1.863': attribute type 19 has an invalid length. [ 250.639586][ T8301] __nla_validate_parse: 4 callbacks suppressed [ 250.639602][ T8301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.863'. [ 250.681775][ T8306] netlink: 'syz.3.865': attribute type 19 has an invalid length. [ 250.714591][ T8306] netlink: 40 bytes leftover after parsing attributes in process `syz.3.865'. [ 250.936676][ T8315] netlink: 196 bytes leftover after parsing attributes in process `syz.2.868'. [ 250.942118][ T8309] netlink: 'syz.0.866': attribute type 19 has an invalid length. [ 250.955103][ T8309] netlink: 40 bytes leftover after parsing attributes in process `syz.0.866'. [ 251.143935][ T8320] netlink: 'syz.2.870': attribute type 2 has an invalid length. [ 251.153200][ T8320] netlink: 'syz.2.870': attribute type 11 has an invalid length. [ 251.161973][ T8320] netlink: 132 bytes leftover after parsing attributes in process `syz.2.870'. [ 251.205449][ T8322] netlink: 156 bytes leftover after parsing attributes in process `syz.0.871'. [ 251.425746][ T8332] netlink: 763 bytes leftover after parsing attributes in process `syz.2.873'. [ 251.457949][ T8330] netlink: 196 bytes leftover after parsing attributes in process `syz.0.874'. [ 251.731499][ T8335] netlink: 'syz.0.875': attribute type 19 has an invalid length. [ 251.741441][ T8335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.875'. [ 251.883428][ T8338] syzkaller0: entered promiscuous mode [ 251.889684][ T8338] syzkaller0: entered allmulticast mode [ 252.403090][ T8343] netlink: 196 bytes leftover after parsing attributes in process `syz.3.878'. [ 254.218181][ T8341] netlink: 'syz.0.877': attribute type 19 has an invalid length. [ 254.236431][ T8345] netlink: 'syz.2.879': attribute type 19 has an invalid length. [ 254.430691][ T8357] delete_channel: no stack [ 254.436148][ T8357] delete_channel: no stack [ 254.760030][ T8362] netlink: 'syz.2.885': attribute type 19 has an invalid length. [ 255.394020][ T8378] netlink: 'syz.1.889': attribute type 19 has an invalid length. [ 255.511831][ T8380] syzkaller0: entered promiscuous mode [ 255.517513][ T8380] syzkaller0: entered allmulticast mode [ 255.907403][ T8387] __nla_validate_parse: 8 callbacks suppressed [ 255.907442][ T8387] netlink: 196 bytes leftover after parsing attributes in process `syz.3.893'. [ 255.983960][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.990568][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.755950][ T8393] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.895'. [ 258.037779][ T8389] netlink: 'syz.2.894': attribute type 19 has an invalid length. [ 258.052589][ T8389] netlink: 40 bytes leftover after parsing attributes in process `syz.2.894'. [ 258.082489][ T8395] netlink: 'syz.1.896': attribute type 19 has an invalid length. [ 258.091443][ T8395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.896'. [ 258.155496][ T8399] netlink: 'syz.3.897': attribute type 4 has an invalid length. [ 258.187752][ T8399] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.897'. [ 258.408374][ T8404] netlink: 196 bytes leftover after parsing attributes in process `syz.0.898'. [ 258.492895][ T8408] netlink: 'syz.1.900': attribute type 19 has an invalid length. [ 258.508858][ T8408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.900'. [ 258.693264][ T8414] FAULT_INJECTION: forcing a failure. [ 258.693264][ T8414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.753591][ T8414] CPU: 1 PID: 8414 Comm: syz.0.903 Not tainted syzkaller #0 [ 258.761064][ T8414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 258.771168][ T8414] Call Trace: [ 258.774501][ T8414] [ 258.777472][ T8414] dump_stack_lvl+0x18c/0x250 [ 258.780815][ T8411] syzkaller0: entered promiscuous mode [ 258.782190][ T8414] ? show_regs_print_info+0x20/0x20 [ 258.782225][ T8414] ? load_image+0x420/0x420 [ 258.788001][ T8411] syzkaller0: entered allmulticast mode [ 258.792883][ T8414] ? __might_fault+0xaa/0x120 [ 258.792917][ T8414] ? __lock_acquire+0x7d40/0x7d40 [ 258.792960][ T8414] should_fail_ex+0x39d/0x4d0 [ 258.793016][ T8414] _copy_from_user+0x2f/0xe0 [ 258.812975][ T8415] netlink: 763 bytes leftover after parsing attributes in process `syz.3.902'. [ 258.817474][ T8414] ___sys_sendmsg+0x1c7/0x360 [ 258.817513][ T8414] ? get_pid_task+0x20/0x1e0 [ 258.817556][ T8414] ? __sys_sendmsg+0x2a0/0x2a0 [ 258.817642][ T8414] ? __lock_acquire+0x7d40/0x7d40 [ 258.850810][ T8414] __se_sys_sendmsg+0x1c2/0x2b0 [ 258.855729][ T8414] ? __x64_sys_sendmsg+0x80/0x80 [ 258.860741][ T8414] ? lockdep_hardirqs_on+0x98/0x150 [ 258.865981][ T8414] do_syscall_64+0x55/0xb0 [ 258.870602][ T8414] ? clear_bhb_loop+0x40/0x90 [ 258.875296][ T8414] ? clear_bhb_loop+0x40/0x90 [ 258.879993][ T8414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.885909][ T8414] RIP: 0033:0x7f2718d9ce59 [ 258.890342][ T8414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.909980][ T8414] RSP: 002b:00007f2719bfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.918473][ T8414] RAX: ffffffffffffffda RBX: 00007f2719015fa0 RCX: 00007f2718d9ce59 [ 258.926549][ T8414] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 258.934537][ T8414] RBP: 00007f2719bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 258.942523][ T8414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.950515][ T8414] R13: 00007f2719016038 R14: 00007f2719015fa0 R15: 00007ffde4329408 [ 258.958544][ T8414] [ 259.007452][ T8420] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.904'. [ 259.206269][ T8423] netlink: 196 bytes leftover after parsing attributes in process `syz.0.905'. [ 261.153825][ T8427] syzkaller0: entered promiscuous mode [ 261.161996][ T8427] syzkaller0: entered allmulticast mode [ 261.169851][ T8432] netlink: 'syz.3.907': attribute type 19 has an invalid length. [ 261.188911][ T8432] netlink: 40 bytes leftover after parsing attributes in process `syz.3.907'. [ 261.357588][ T8438] netlink: 'syz.2.909': attribute type 4 has an invalid length. [ 261.388048][ T8438] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.909'. [ 261.755067][ T8444] FAULT_INJECTION: forcing a failure. [ 261.755067][ T8444] name failslab, interval 1, probability 0, space 0, times 0 [ 261.772685][ T8444] CPU: 1 PID: 8444 Comm: syz.2.910 Not tainted syzkaller #0 [ 261.780156][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 261.790288][ T8444] Call Trace: [ 261.793596][ T8444] [ 261.796562][ T8444] dump_stack_lvl+0x18c/0x250 [ 261.801313][ T8444] ? show_regs_print_info+0x20/0x20 [ 261.806535][ T8444] ? load_image+0x420/0x420 [ 261.811137][ T8444] ? __might_sleep+0xe0/0xe0 [ 261.815746][ T8444] ? __lock_acquire+0x7d40/0x7d40 [ 261.820835][ T8444] should_fail_ex+0x39d/0x4d0 [ 261.825573][ T8444] should_failslab+0x9/0x20 [ 261.830106][ T8444] slab_pre_alloc_hook+0x59/0x310 [ 261.835165][ T8444] ? kvmalloc_node+0x70/0x180 [ 261.839871][ T8444] ? kvmalloc_node+0x70/0x180 [ 261.844585][ T8444] __kmem_cache_alloc_node+0x53/0x250 [ 261.850095][ T8444] ? kvmalloc_node+0x70/0x180 [ 261.854797][ T8444] __kmalloc_node+0xa4/0x230 [ 261.859433][ T8444] kvmalloc_node+0x70/0x180 [ 261.863962][ T8444] bpf_test_run_xdp_live+0x1e9/0x1b20 [ 261.869667][ T8444] ? bpf_dispatcher_xdp+0x800/0x1000 [ 261.874996][ T8444] ? bpf_dispatcher_xdp+0x800/0x1000 [ 261.880330][ T8444] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 261.886252][ T8444] ? bpf_dispatcher_xdp+0x800/0x1000 [ 261.891579][ T8444] ? xdp_convert_md_to_buff+0x330/0x330 [ 261.897223][ T8444] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 261.903550][ T8444] ? xdp_convert_md_to_buff+0x5b/0x330 [ 261.909054][ T8444] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 261.914659][ T8444] ? lock_chain_count+0x20/0x20 [ 261.919546][ T8444] ? dev_put+0x80/0x80 [ 261.923675][ T8444] ? dev_put+0x80/0x80 [ 261.928064][ T8444] bpf_prog_test_run+0x321/0x390 [ 261.933036][ T8444] __sys_bpf+0x49d/0x890 [ 261.937309][ T8444] ? bpf_link_show_fdinfo+0x390/0x390 [ 261.942743][ T8444] ? lock_chain_count+0x20/0x20 [ 261.947641][ T8444] __x64_sys_bpf+0x7c/0x90 [ 261.952095][ T8444] do_syscall_64+0x55/0xb0 [ 261.956536][ T8444] ? clear_bhb_loop+0x40/0x90 [ 261.961228][ T8444] ? clear_bhb_loop+0x40/0x90 [ 261.965937][ T8444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.971854][ T8444] RIP: 0033:0x7fd79d39ce59 [ 261.976297][ T8444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.995927][ T8444] RSP: 002b:00007fd79e2c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 262.004366][ T8444] RAX: ffffffffffffffda RBX: 00007fd79d616090 RCX: 00007fd79d39ce59 [ 262.012357][ T8444] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 262.020345][ T8444] RBP: 00007fd79e2c9090 R08: 0000000000000000 R09: 0000000000000000 [ 262.028335][ T8444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.036324][ T8444] R13: 00007fd79d616128 R14: 00007fd79d616090 R15: 00007ffd2d2a80f8 [ 262.044440][ T8444] [ 262.617727][ T8447] netlink: 196 bytes leftover after parsing attributes in process `syz.2.911'. [ 263.760618][ T8439] netlink: 'syz.0.908': attribute type 19 has an invalid length. [ 263.768660][ T8439] netlink: 40 bytes leftover after parsing attributes in process `syz.0.908'. [ 263.780916][ T8449] netlink: 'syz.2.912': attribute type 19 has an invalid length. [ 263.803069][ T8449] netlink: 40 bytes leftover after parsing attributes in process `syz.2.912'. [ 263.944872][ T8452] netlink: 'syz.3.913': attribute type 10 has an invalid length. [ 263.959820][ T8452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.913'. [ 263.977606][ T8454] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.914'. [ 263.994126][ T8452] batman_adv: batadv0: Adding interface: veth0_vlan [ 264.002526][ T8452] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.031209][ T8452] batman_adv: batadv0: Interface activated: veth0_vlan [ 264.106800][ T8457] ================================================================== [ 264.114915][ T8457] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 264.122776][ T8457] Write of size 72 at addr ffff888028c7a390 by task syz.1.915/8457 [ 264.130783][ T8457] [ 264.133119][ T8457] CPU: 0 PID: 8457 Comm: syz.1.915 Not tainted syzkaller #0 [ 264.140433][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 264.150527][ T8457] Call Trace: [ 264.153827][ T8457] [ 264.156777][ T8457] dump_stack_lvl+0x18c/0x250 [ 264.161483][ T8457] ? __lock_acquire+0x7d40/0x7d40 [ 264.166551][ T8457] ? show_regs_print_info+0x20/0x20 [ 264.171782][ T8457] ? load_image+0x420/0x420 [ 264.176332][ T8457] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 264.181846][ T8457] ? __virt_addr_valid+0x18c/0x540 [ 264.186992][ T8457] ? __virt_addr_valid+0x469/0x540 [ 264.192137][ T8457] print_report+0xa8/0x210 [ 264.196570][ T8457] ? __bpf_get_stackid+0x6bf/0x900 [ 264.201709][ T8457] kasan_report+0x117/0x150 [ 264.206242][ T8457] ? __bpf_get_stackid+0x6bf/0x900 [ 264.211374][ T8457] kasan_check_range+0x241/0x290 [ 264.216320][ T8457] ? __bpf_get_stackid+0x6bf/0x900 [ 264.221437][ T8457] __asan_memcpy+0x40/0x70 [ 264.225858][ T8457] __bpf_get_stackid+0x6bf/0x900 [ 264.230825][ T8457] bpf_get_stackid_pe+0x343/0x410 [ 264.235872][ T8457] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 264.241341][ T8457] bpf_overflow_handler+0x1fc/0x510 [ 264.246555][ T8457] ? bpf_overflow_handler+0xde/0x510 [ 264.251852][ T8457] ? tp_perf_event_destroy+0x20/0x20 [ 264.257143][ T8457] ? perf_trace_preemptirq_template+0x144/0x330 [ 264.263438][ T8457] ? __perf_event_account_interrupt+0x187/0x280 [ 264.269794][ T8457] __perf_event_overflow+0x447/0x630 [ 264.275105][ T8457] perf_swevent_event+0x319/0x570 [ 264.280140][ T8457] ? perf_tp_event+0x1520/0x1520 [ 264.285078][ T8457] ? perf_tp_event+0x13d7/0x1520 [ 264.290018][ T8457] ___perf_sw_event+0x4a7/0x730 [ 264.294892][ T8457] ? ___perf_sw_event+0x199/0x730 [ 264.299942][ T8457] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 264.306371][ T8457] ? rep_movs_alternative+0x4a/0x90 [ 264.311586][ T8457] ? verify_lock_unused+0x140/0x140 [ 264.316798][ T8457] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 264.322795][ T8457] ? lock_chain_count+0x20/0x20 [ 264.327652][ T8457] __perf_sw_event+0x139/0x270 [ 264.332440][ T8457] do_user_addr_fault+0x123e/0x12c0 [ 264.337648][ T8457] ? rcu_is_watching+0x15/0xb0 [ 264.342423][ T8457] exc_page_fault+0x64/0x100 [ 264.347022][ T8457] asm_exc_page_fault+0x26/0x30 [ 264.351882][ T8457] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 264.357695][ T8457] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 264.377572][ T8457] RSP: 0018:ffffc900191efbd0 EFLAGS: 00050206 [ 264.383654][ T8457] RAX: ffffffff842a7f01 RBX: 000000000000056d RCX: 00000000000004ed [ 264.391626][ T8457] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff8880246d0080 [ 264.399603][ T8457] RBP: ffffc900191efd20 R08: 0000000000000004 R09: 0000000000000005 [ 264.407577][ T8457] R10: dffffc0000000000 R11: ffffed10048da0ad R12: 00002000000024ed [ 264.415551][ T8457] R13: 1ffff9200323dfbd R14: ffff8880246d0000 R15: 0000200000001f80 [ 264.423532][ T8457] ? _copy_from_user+0x41/0xe0 [ 264.428404][ T8457] _copy_from_user+0x8b/0xe0 [ 264.433002][ T8457] generic_map_update_batch+0x59a/0x810 [ 264.438580][ T8457] ? rcu_read_unlock+0xa0/0xa0 [ 264.443347][ T8457] ? __fdget+0x180/0x210 [ 264.447598][ T8457] ? rcu_read_unlock+0xa0/0xa0 [ 264.452359][ T8457] bpf_map_do_batch+0x3d7/0x610 [ 264.457239][ T8457] __sys_bpf+0x381/0x890 [ 264.461494][ T8457] ? bpf_link_show_fdinfo+0x390/0x390 [ 264.466869][ T8457] ? lock_chain_count+0x20/0x20 [ 264.471721][ T8457] __x64_sys_bpf+0x7c/0x90 [ 264.476224][ T8457] do_syscall_64+0x55/0xb0 [ 264.480654][ T8457] ? clear_bhb_loop+0x40/0x90 [ 264.485328][ T8457] ? clear_bhb_loop+0x40/0x90 [ 264.490004][ T8457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.495907][ T8457] RIP: 0033:0x7fbb0179ce59 [ 264.500321][ T8457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.519946][ T8457] RSP: 002b:00007fbb0261f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 264.528367][ T8457] RAX: ffffffffffffffda RBX: 00007fbb01a15fa0 RCX: 00007fbb0179ce59 [ 264.536435][ T8457] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 264.544409][ T8457] RBP: 00007fbb01832d6f R08: 0000000000000000 R09: 0000000000000000 [ 264.552382][ T8457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.560523][ T8457] R13: 00007fbb01a16038 R14: 00007fbb01a15fa0 R15: 00007ffffa674598 [ 264.568587][ T8457] [ 264.571621][ T8457] [ 264.573937][ T8457] Allocated by task 8457: [ 264.578254][ T8457] kasan_set_track+0x4e/0x70 [ 264.582852][ T8457] __kasan_kmalloc+0x8f/0xa0 [ 264.587445][ T8457] __kmalloc_node+0xb4/0x230 [ 264.592044][ T8457] bpf_map_area_alloc+0x5e/0x110 [ 264.596983][ T8457] prealloc_elems_and_freelist+0x86/0x1c0 [ 264.602730][ T8457] stack_map_alloc+0x33a/0x4c0 [ 264.607495][ T8457] map_create+0x877/0x12f0 [ 264.611907][ T8457] __sys_bpf+0x651/0x890 [ 264.616230][ T8457] __x64_sys_bpf+0x7c/0x90 [ 264.620728][ T8457] do_syscall_64+0x55/0xb0 [ 264.625232][ T8457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.631125][ T8457] [ 264.633439][ T8457] The buggy address belongs to the object at ffff888028c7a380 [ 264.633439][ T8457] which belongs to the cache kmalloc-cg-64 of size 64 [ 264.647592][ T8457] The buggy address is located 16 bytes inside of [ 264.647592][ T8457] allocated 40-byte region [ffff888028c7a380, ffff888028c7a3a8) [ 264.661648][ T8457] [ 264.663966][ T8457] The buggy address belongs to the physical page: [ 264.670389][ T8457] page:ffffea0000a31e80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28c7a [ 264.680537][ T8457] memcg:ffff88802bf16801 [ 264.684770][ T8457] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 264.692320][ T8457] page_type: 0xffffffff() [ 264.696642][ T8457] raw: 00fff00000000800 ffff888017c4da00 dead000000000122 0000000000000000 [ 264.705221][ T8457] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88802bf16801 [ 264.713802][ T8457] page dumped because: kasan: bad access detected [ 264.720217][ T8457] page_owner tracks the page as allocated [ 264.725924][ T8457] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5776, tgid 5776 (syz-executor), ts 261569998753, free_ts 261568973451 [ 264.744329][ T8457] post_alloc_hook+0x1c1/0x200 [ 264.749105][ T8457] get_page_from_freelist+0x1951/0x19e0 [ 264.754650][ T8457] __alloc_pages+0x1f0/0x460 [ 264.759235][ T8457] alloc_slab_page+0x5d/0x160 [ 264.763909][ T8457] new_slab+0x87/0x2d0 [ 264.767978][ T8457] ___slab_alloc+0xc5d/0x12f0 [ 264.772746][ T8457] __kmem_cache_alloc_node+0x19e/0x250 [ 264.778205][ T8457] kmalloc_trace+0x2a/0xe0 [ 264.782710][ T8457] alloc_fdtable+0xca/0x2c0 [ 264.787210][ T8457] dup_fd+0x786/0xa50 [ 264.791188][ T8457] copy_files+0xc3/0x120 [ 264.795422][ T8457] copy_process+0x15ab/0x3dc0 [ 264.800094][ T8457] kernel_clone+0x24b/0x8a0 [ 264.804612][ T8457] __x64_sys_clone+0x1b7/0x230 [ 264.809374][ T8457] do_syscall_64+0x55/0xb0 [ 264.813796][ T8457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.819689][ T8457] page last free stack trace: [ 264.824436][ T8457] free_unref_page_prepare+0x7b2/0x8c0 [ 264.829901][ T8457] free_unref_page+0x32/0x2e0 [ 264.834577][ T8457] vfree+0x1a6/0x320 [ 264.838475][ T8457] do_ip6t_get_ctl+0xf21/0x1210 [ 264.843326][ T8457] nf_getsockopt+0x262/0x280 [ 264.847918][ T8457] ipv6_getsockopt+0x226/0x2e0 [ 264.852683][ T8457] do_sock_getsockopt+0x379/0x450 [ 264.857703][ T8457] __x64_sys_getsockopt+0x1d6/0x280 [ 264.862901][ T8457] do_syscall_64+0x55/0xb0 [ 264.867316][ T8457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.873215][ T8457] [ 264.875529][ T8457] Memory state around the buggy address: [ 264.881150][ T8457] ffff888028c7a280: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 264.889385][ T8457] ffff888028c7a300: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 264.897444][ T8457] >ffff888028c7a380: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 264.905491][ T8457] ^ [ 264.910890][ T8457] ffff888028c7a400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 264.918951][ T8457] ffff888028c7a480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 264.927003][ T8457] ================================================================== [ 264.935153][ T8457] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 264.942339][ T8457] CPU: 0 PID: 8457 Comm: syz.1.915 Not tainted syzkaller #0 [ 264.949708][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 264.959758][ T8457] Call Trace: [ 264.963035][ T8457] [ 264.965959][ T8457] dump_stack_lvl+0x18c/0x250 [ 264.970643][ T8457] ? show_regs_print_info+0x20/0x20 [ 264.975839][ T8457] ? load_image+0x420/0x420 [ 264.980351][ T8457] panic+0x2dc/0x730 [ 264.984256][ T8457] ? __lock_acquire+0x7d40/0x7d40 [ 264.989287][ T8457] ? bpf_jit_dump+0xd0/0xd0 [ 264.993799][ T8457] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 264.999693][ T8457] ? _raw_spin_unlock+0x40/0x40 [ 265.004548][ T8457] ? __bpf_get_stackid+0x6bf/0x900 [ 265.009655][ T8457] check_panic_on_warn+0x84/0xa0 [ 265.014593][ T8457] ? __bpf_get_stackid+0x6bf/0x900 [ 265.020140][ T8457] end_report+0x6f/0x130 [ 265.024380][ T8457] kasan_report+0x128/0x150 [ 265.028881][ T8457] ? __bpf_get_stackid+0x6bf/0x900 [ 265.033993][ T8457] kasan_check_range+0x241/0x290 [ 265.038932][ T8457] ? __bpf_get_stackid+0x6bf/0x900 [ 265.044044][ T8457] __asan_memcpy+0x40/0x70 [ 265.048463][ T8457] __bpf_get_stackid+0x6bf/0x900 [ 265.053415][ T8457] bpf_get_stackid_pe+0x343/0x410 [ 265.058454][ T8457] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 265.063928][ T8457] bpf_overflow_handler+0x1fc/0x510 [ 265.069148][ T8457] ? bpf_overflow_handler+0xde/0x510 [ 265.074441][ T8457] ? tp_perf_event_destroy+0x20/0x20 [ 265.079737][ T8457] ? perf_trace_preemptirq_template+0x144/0x330 [ 265.085981][ T8457] ? __perf_event_account_interrupt+0x187/0x280 [ 265.092229][ T8457] __perf_event_overflow+0x447/0x630 [ 265.097518][ T8457] perf_swevent_event+0x319/0x570 [ 265.102550][ T8457] ? perf_tp_event+0x1520/0x1520 [ 265.107487][ T8457] ? perf_tp_event+0x13d7/0x1520 [ 265.112420][ T8457] ___perf_sw_event+0x4a7/0x730 [ 265.117271][ T8457] ? ___perf_sw_event+0x199/0x730 [ 265.122296][ T8457] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 265.128715][ T8457] ? rep_movs_alternative+0x4a/0x90 [ 265.133920][ T8457] ? verify_lock_unused+0x140/0x140 [ 265.139126][ T8457] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 265.145106][ T8457] ? lock_chain_count+0x20/0x20 [ 265.149954][ T8457] __perf_sw_event+0x139/0x270 [ 265.154741][ T8457] do_user_addr_fault+0x123e/0x12c0 [ 265.159943][ T8457] ? rcu_is_watching+0x15/0xb0 [ 265.164722][ T8457] exc_page_fault+0x64/0x100 [ 265.169318][ T8457] asm_exc_page_fault+0x26/0x30 [ 265.174183][ T8457] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 265.179992][ T8457] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 265.199613][ T8457] RSP: 0018:ffffc900191efbd0 EFLAGS: 00050206 [ 265.205714][ T8457] RAX: ffffffff842a7f01 RBX: 000000000000056d RCX: 00000000000004ed [ 265.213877][ T8457] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff8880246d0080 [ 265.221862][ T8457] RBP: ffffc900191efd20 R08: 0000000000000004 R09: 0000000000000005 [ 265.229838][ T8457] R10: dffffc0000000000 R11: ffffed10048da0ad R12: 00002000000024ed [ 265.237819][ T8457] R13: 1ffff9200323dfbd R14: ffff8880246d0000 R15: 0000200000001f80 [ 265.245810][ T8457] ? _copy_from_user+0x41/0xe0 [ 265.250604][ T8457] _copy_from_user+0x8b/0xe0 [ 265.255242][ T8457] generic_map_update_batch+0x59a/0x810 [ 265.260824][ T8457] ? rcu_read_unlock+0xa0/0xa0 [ 265.265594][ T8457] ? __fdget+0x180/0x210 [ 265.269853][ T8457] ? rcu_read_unlock+0xa0/0xa0 [ 265.274613][ T8457] bpf_map_do_batch+0x3d7/0x610 [ 265.279468][ T8457] __sys_bpf+0x381/0x890 [ 265.283713][ T8457] ? bpf_link_show_fdinfo+0x390/0x390 [ 265.289094][ T8457] ? lock_chain_count+0x20/0x20 [ 265.293962][ T8457] __x64_sys_bpf+0x7c/0x90 [ 265.298378][ T8457] do_syscall_64+0x55/0xb0 [ 265.302800][ T8457] ? clear_bhb_loop+0x40/0x90 [ 265.307473][ T8457] ? clear_bhb_loop+0x40/0x90 [ 265.312149][ T8457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.318065][ T8457] RIP: 0033:0x7fbb0179ce59 [ 265.322483][ T8457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.342097][ T8457] RSP: 002b:00007fbb0261f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 265.350521][ T8457] RAX: ffffffffffffffda RBX: 00007fbb01a15fa0 RCX: 00007fbb0179ce59 [ 265.358665][ T8457] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 265.366635][ T8457] RBP: 00007fbb01832d6f R08: 0000000000000000 R09: 0000000000000000 [ 265.374607][ T8457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.382585][ T8457] R13: 00007fbb01a16038 R14: 00007fbb01a15fa0 R15: 00007ffffa674598 [ 265.390572][ T8457] [ 265.393918][ T8457] Kernel Offset: disabled [ 265.398235][ T8457] Rebooting in 86400 seconds..