last executing test programs: 2.746798498s ago: executing program 4 (id=2157): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020027000b05d25a806f8c6394f90624fc602f0000000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 2.359532449s ago: executing program 1 (id=2159): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x8, &(0x7f0000000200), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0xffbf) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r4], 0xfe33) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$SIOCSIFHWADDR(r1, 0x8910, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 2.31634123s ago: executing program 4 (id=2161): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r7, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/26, 0x1a}, 0x0) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000800b8000699030000000500160002008178a8001500060001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6e430dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd2900008400000005010000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) write$cgroup_pid(r6, &(0x7f0000000880), 0x12) 1.453276353s ago: executing program 0 (id=2166): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xc}, 0x100008, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x0, 0x0, 0xc1}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffffffffffd1d, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000001000000000000000000000850000003000000085000000050000009500000000000000baab98dbccd0dff7a69195456d8d1d9ac1689850917ae162c18416b179ddf0c09a5af631f6dac92d9425b76231f8df330600ad518408a78e6e92247b293118dbd5883391d12bf372e7251451a3fe7b6273d459483d8824fa1fc46d73794da36c022a04267ccf6a68d8aca11c57d12429b73d7cdc97ec57eab299ac5799cb64c83f0497ccf25f42f84b4d30c8fd5a0687b89722b936d01291fd34a0203ab6bf304241dce856be7499301e7db7010400"/227], &(0x7f0000000a80)='syzkaller\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x5, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'ipvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x2}}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a800f9a4ff3c95b6cc8016002000024004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db799262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93", 0xd8}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000000400)={&(0x7f0000000140)=@un=@abs, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/81, 0x51}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000340)=""/66, 0x42}], 0x3, &(0x7f00000003c0)=""/59, 0x3b}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0feff32b1793791dcc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7b7020000000000008500000005000000bf09000000000000b2090100000a0000bb1e05000000007a06e88b0000000000b50300b7000000000000009500"/96], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x4) close(r8) 1.453090493s ago: executing program 1 (id=2167): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(r1) close(r0) 1.433148633s ago: executing program 4 (id=2177): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.388050454s ago: executing program 2 (id=2179): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x8, &(0x7f0000000200), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0xffbf) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r4], 0xfe33) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$SIOCSIFHWADDR(r1, 0x8910, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 1.387857484s ago: executing program 3 (id=2168): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000004000000020000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001c8e5cc9000000000000220040000064e1dd440000f10000000000f97b80"], 0x48) r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980c0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100032b00fe08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030036000b03d25a80648c2594f90624fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.382420703s ago: executing program 1 (id=2169): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2004c010) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4a2a}, 0x12104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='fsi_master_gpio_cmd_same_addr\x00', 0xffffffffffffffff, 0x0, 0xef}, 0x18) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="72df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="fd", 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000011c0)=@generic={&(0x7f0000001140)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7020000dfff00008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) 1.314503204s ago: executing program 4 (id=2171): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f00000000c0)="ee", 0x34000}], 0x1}, 0x0) 1.145848855s ago: executing program 4 (id=2172): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2004c010) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4a2a}, 0x12104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b40000000000f3ff7910900000000000630000000000000095000000000000008d92133deb6af19a615221a5e9c1c30b6e95cc8fea035580b99721396dc8eb6d5df6dc9e699a633176330ff919676a6af14926d2972f96f1b3b7e18b030df52a4f7a1c2f51146019dbb20ca845aa71fa9b92bea75cad145375cd89be1d82fabf57ee85c5e4129f42d848ed23f5b44542fe5be65239e37e6b198ca137e4432993b4576fa1ecf61a856a521d26758e4ddf6730903b5d22548be0ddaae1e6c1233841b2f6c7e7daef09f949ba0db2a1e1c43aba69adbed02c5d6cf115129ee07e25ca8518500d95e5e3ff3e7503dcf5347bee255eeba0f102d4c4c415eb56239c523a4dde580ed459f309797655222077a0442fb4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="72df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="fd", 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000011c0)=@generic={&(0x7f0000001140)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7020000dfff00008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) 1.120810235s ago: executing program 0 (id=2173): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d0500000200"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) (fail_nth: 2) 1.091842645s ago: executing program 3 (id=2174): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020027000b05d25a806f8c6394f90624fc602f0000000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 788.369996ms ago: executing program 1 (id=2175): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYBLOB="0000001000"/18, @ANYBLOB='\x00'/15], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007d3b714650befffa9d795e437a2c7a13a855f05f733cb7e2fe10402e5d72d199c25c828649a705f100d5d1703bf1e2b9927c90e7945cb90d6fec02a3c97131e400353207d45d9da1bcb0f23af4a69009d89c73cb54e4e917abdf6739be803e9eacecb824167c9e965b539fa60c1763a7bdac47ec2d6f66897c8e96833ac74347f4b0154f1e9cfc8967e926f27d3a6d1772f5224242325362dbb978da3c067d0e473c73461547945a8eeb65f7f3f7df60f770e88e358a19bffbd74e464a3a756281158a7b7dc56748381b04f036265d3ce4f3b1ce72ac6a6540548f2076ea2957be79387278fa58b09f570489cc7464ddf371f124362bf67dae6db74a5820b942149f2f7c9b5d00"/300], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000089000000000000023b50c6eebe1a4bd9a0bcd8683ff4fdf4a82dcad856d85118bc0006595533a132f6d23663ae67ab19507e289fbc259f4c7f0e05a47d343d3cc5a6ecd0c717abf61a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f0000000100)}, 0x20) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x31, 0x0, 0x0) 639.857497ms ago: executing program 0 (id=2176): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x5}, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x905c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x6b, 0x11, 0x32}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x4, 0x7fffffff, 0x18, 0x8040, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3, 0x5, @value, @void, @void, @value}, 0x50) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000e80)="b9e403c6631e39", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x19, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000bc8020"], &(0x7f0000000300)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 610.349617ms ago: executing program 1 (id=2178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d0500000200"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) 570.766047ms ago: executing program 3 (id=2180): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) 551.676017ms ago: executing program 4 (id=2181): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f91424fc602f7404000a74016c053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x0, 0x18, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x1000, &(0x7f0000000500)=""/4096, 0x41100, 0x61, '\x00', 0x0, @fallback=0x6, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0xb, 0x2, 0xd}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000001500)=[{0x3, 0x3, 0x2, 0x4}, {0x9, 0x2, 0xa, 0xc}, {0x5, 0x1, 0x6, 0x5}, {0x2, 0x3, 0x6, 0x9}, {0x4, 0x3, 0x6, 0x7}, {0x2, 0x5, 0x3, 0x6}, {0x0, 0x3, 0x3, 0x6}, {0x1, 0x5, 0x1, 0xa}, {0x5, 0x2, 0x9, 0xc}, {0x1, 0x1, 0xa, 0x6}], 0x10, 0x1, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000916000000b40000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @call, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @exit, @alu={0x5, 0x0, 0xa, 0xa, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 501.160787ms ago: executing program 3 (id=2182): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f0ffffff0000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x3ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) 464.503868ms ago: executing program 2 (id=2183): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 464.168568ms ago: executing program 0 (id=2184): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(r1) close(r0) 384.057128ms ago: executing program 2 (id=2185): socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f00000000c0)="ee", 0x34000}], 0x1}, 0x0) 383.631478ms ago: executing program 3 (id=2186): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xc}, 0x100008, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x0, 0x0, 0xc1}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffffffffffd1d, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000001000000000000000000000850000003000000085000000050000009500000000000000baab98dbccd0dff7a69195456d8d1d9ac1689850917ae162c18416b179ddf0c09a5af631f6dac92d9425b76231f8df330600ad518408a78e6e92247b293118dbd5883391d12bf372e7251451a3fe7b6273d459483d8824fa1fc46d73794da36c022a04267ccf6a68d8aca11c57d12429b73d7cdc97ec57eab299ac5799cb64c83f0497ccf25f42f84b4d30c8fd5a0687b89722b936d01291fd34a0203ab6bf304241dce856be7499301e7db7010400"/227], &(0x7f0000000a80)='syzkaller\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x5, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'ipvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x2}}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a800f9a4ff3c95b6cc8016002000024004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db799262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93", 0xd8}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000000400)={&(0x7f0000000140)=@un=@abs, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/81, 0x51}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000340)=""/66, 0x42}], 0x3, &(0x7f00000003c0)=""/59, 0x3b}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0feff32b1793791dcc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7b7020000000000008500000005000000bf09000000000000b2090100000a0000bb1e05000000007a06e88b0000000000b50300b7000000000000009500"/96], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x4) close(r8) 353.378688ms ago: executing program 0 (id=2187): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2004c010) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4a2a}, 0x12104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='fsi_master_gpio_cmd_same_addr\x00', 0xffffffffffffffff, 0x0, 0xef}, 0x18) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="72df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="fd", 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000011c0)=@generic={&(0x7f0000001140)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7020000dfff00008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) 322.568728ms ago: executing program 2 (id=2188): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x4000) 182.519159ms ago: executing program 2 (id=2189): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYBLOB="0000001000"/18, @ANYBLOB='\x00'/15], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007d3b714650befffa9d795e437a2c7a13a855f05f733cb7e2fe10402e5d72d199c25c828649a705f100d5d1703bf1e2b9927c90e7945cb90d6fec02a3c97131e400353207d45d9da1bcb0f23af4a69009d89c73cb54e4e917abdf6739be803e9eacecb824167c9e965b539fa60c1763a7bdac47ec2d6f66897c8e96833ac74347f4b0154f1e9cfc8967e926f27d3a6d1772f5224242325362dbb978da3c067d0e473c73461547945a8eeb65f7f3f7df60f770e88e358a19bffbd74e464a3a756281158a7b7dc56748381b04f036265d3ce4f3b1ce72ac6a6540548f2076ea2957be79387278fa58b09f570489cc7464ddf371f124362bf67dae6db74a5820b942149f2f7c9b5d00"/300], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000089000000000000023b50c6eebe1a4bd9a0bcd8683ff4fdf4a82dcad856d85118bc0006595533a132f6d23663ae67ab19507e289fbc259f4c7f0e05a47d343d3cc5a6ecd0c717abf61a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f0000000100)}, 0x20) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x31, 0x0, 0x0) 180.907239ms ago: executing program 1 (id=2190): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x100005, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r3}, 0x38) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000880), 0x12) 130.643719ms ago: executing program 0 (id=2191): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020027000b05d25a806f8c6394f90624fc602f0000000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 65.03369ms ago: executing program 3 (id=2192): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) 0s ago: executing program 2 (id=2193): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x8, &(0x7f0000000200), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1201, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) write$cgroup_pid(r2, &(0x7f00000001c0), 0xffbf) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r5], 0xfe33) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) ioctl$SIOCSIFHWADDR(r1, 0x8910, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) kernel console output (not intermixed with test programs): 2.771': attribute type 29 has an invalid length. [ 125.823694][ T6118] device syzkaller0 entered promiscuous mode [ 126.165955][ T6122] device syzkaller0 entered promiscuous mode [ 126.350360][ T6138] device syzkaller0 entered promiscuous mode [ 126.435202][ T6139] netlink: 11518 bytes leftover after parsing attributes in process `syz.3.792'. [ 127.086045][ T6171] device syzkaller0 entered promiscuous mode [ 127.333476][ T6180] device syzkaller0 entered promiscuous mode [ 127.871058][ T6204] device syzkaller0 entered promiscuous mode [ 128.056853][ T6203] netlink: 11518 bytes leftover after parsing attributes in process `syz.4.818'. [ 128.498505][ T6217] device syzkaller0 entered promiscuous mode [ 128.875186][ T6241] validate_nla: 14 callbacks suppressed [ 128.875204][ T6241] netlink: 'syz.1.835': attribute type 29 has an invalid length. [ 129.050599][ T6238] device syzkaller0 entered promiscuous mode [ 129.072404][ T6241] netlink: 'syz.1.835': attribute type 29 has an invalid length. [ 129.107983][ T6238] netlink: 11518 bytes leftover after parsing attributes in process `syz.2.832'. [ 129.134256][ T6244] netlink: 'syz.1.835': attribute type 29 has an invalid length. [ 129.542313][ T6256] device syzkaller0 entered promiscuous mode [ 129.653756][ T6269] device syzkaller0 entered promiscuous mode [ 129.661592][ T6259] netlink: 11518 bytes leftover after parsing attributes in process `syz.3.840'. [ 130.108769][ T6292] netlink: 'syz.4.851': attribute type 29 has an invalid length. [ 130.162488][ T6287] device syzkaller0 entered promiscuous mode [ 130.194175][ T6292] netlink: 'syz.4.851': attribute type 29 has an invalid length. [ 130.206144][ T6298] netlink: 'syz.4.851': attribute type 29 has an invalid length. [ 130.627953][ T6309] device syzkaller0 entered promiscuous mode [ 130.696318][ T6315] netlink: 11518 bytes leftover after parsing attributes in process `syz.3.856'. [ 131.123366][ T6334] netlink: 'syz.2.868': attribute type 29 has an invalid length. [ 131.131855][ T6334] netlink: 'syz.2.868': attribute type 29 has an invalid length. [ 131.159473][ T6334] netlink: 'syz.2.868': attribute type 29 has an invalid length. [ 131.326117][ T6338] device syzkaller0 entered promiscuous mode [ 131.830485][ T6365] netlink: 'syz.0.880': attribute type 29 has an invalid length. [ 132.049382][ T6366] device syzkaller0 entered promiscuous mode [ 132.060591][ T6370] netlink: 11518 bytes leftover after parsing attributes in process `syz.1.882'. [ 132.375158][ T6381] device syzkaller0 entered promiscuous mode [ 132.685802][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.692210][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.833200][ T6403] device syzkaller0 entered promiscuous mode [ 133.214628][ T6424] device syzkaller0 entered promiscuous mode [ 133.224928][ T6427] netlink: 11518 bytes leftover after parsing attributes in process `syz.3.905'. [ 133.952528][ T6452] device syzkaller0 entered promiscuous mode [ 134.189119][ T6476] validate_nla: 8 callbacks suppressed [ 134.189136][ T6476] netlink: 'syz.3.926': attribute type 29 has an invalid length. [ 134.205899][ T6476] netlink: 'syz.3.926': attribute type 29 has an invalid length. [ 134.232284][ T6476] netlink: 'syz.3.926': attribute type 29 has an invalid length. [ 134.468430][ T6466] device syzkaller0 entered promiscuous mode [ 134.962682][ T6504] netlink: 'syz.0.938': attribute type 29 has an invalid length. [ 135.009579][ T6494] device syzkaller0 entered promiscuous mode [ 135.027204][ T6497] netlink: 11518 bytes leftover after parsing attributes in process `syz.1.934'. [ 135.049391][ T6504] netlink: 'syz.0.938': attribute type 29 has an invalid length. [ 135.060736][ T6508] netlink: 'syz.0.938': attribute type 29 has an invalid length. [ 135.432670][ T6525] netlink: 'syz.1.948': attribute type 25 has an invalid length. [ 135.561632][ T6528] device syzkaller0 entered promiscuous mode [ 135.715389][ T6537] netlink: 'syz.4.953': attribute type 29 has an invalid length. [ 135.788603][ T6537] netlink: 'syz.4.953': attribute type 29 has an invalid length. [ 135.804402][ T6540] netlink: 'syz.4.953': attribute type 29 has an invalid length. [ 135.982641][ T6543] device syzkaller0 entered promiscuous mode [ 136.341533][ T6560] device syzkaller0 entered promiscuous mode [ 136.454001][ T6558] netlink: 11518 bytes leftover after parsing attributes in process `syz.3.961'. [ 136.687265][ T6569] device syzkaller0 entered promiscuous mode [ 137.933216][ T6621] device syzkaller0 entered promiscuous mode [ 138.170685][ T6624] device syzkaller0 entered promiscuous mode [ 138.277498][ T6618] netlink: 11518 bytes leftover after parsing attributes in process `syz.1.988'. [ 139.067270][ T6669] device syzkaller0 entered promiscuous mode [ 139.424889][ T6688] device syzkaller0 entered promiscuous mode [ 139.449657][ T6689] validate_nla: 5 callbacks suppressed [ 139.449674][ T6689] netlink: 'syz.1.1015': attribute type 21 has an invalid length. [ 139.569189][ T6689] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1015'. [ 139.602958][ T6683] netlink: 11518 bytes leftover after parsing attributes in process `syz.0.1014'. [ 139.897427][ T6705] netlink: 'syz.1.1021': attribute type 25 has an invalid length. [ 140.226022][ T6716] device syzkaller0 entered promiscuous mode [ 140.461340][ T6729] netlink: 'syz.4.1032': attribute type 21 has an invalid length. [ 140.487094][ T6729] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1032'. [ 140.854710][ T6742] device syzkaller0 entered promiscuous mode [ 140.865367][ T6744] netlink: 'syz.4.1038': attribute type 25 has an invalid length. [ 140.929823][ T6746] netlink: 11518 bytes leftover after parsing attributes in process `syz.0.1037'. [ 141.674184][ T6770] device syzkaller0 entered promiscuous mode [ 141.865875][ T6783] netlink: 'syz.2.1051': attribute type 21 has an invalid length. [ 141.896321][ T6783] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1051'. [ 142.216492][ T6805] netlink: 'syz.0.1060': attribute type 25 has an invalid length. [ 142.418225][ T6811] device syzkaller0 entered promiscuous mode [ 142.508379][ T6808] netlink: 11518 bytes leftover after parsing attributes in process `syz.3.1062'. [ 142.587481][ T6820] device syzkaller0 entered promiscuous mode [ 143.264688][ T6841] netlink: 'syz.0.1073': attribute type 21 has an invalid length. [ 143.318588][ T6841] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1073'. [ 143.471145][ T6853] netlink: 'syz.4.1077': attribute type 25 has an invalid length. [ 144.019561][ T6875] device syzkaller0 entered promiscuous mode [ 144.284584][ T6889] netlink: 'syz.2.1093': attribute type 21 has an invalid length. [ 144.307545][ T6889] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1093'. [ 144.496713][ T6890] device syzkaller0 entered promiscuous mode [ 144.683966][ T6896] device syzkaller0 entered promiscuous mode [ 144.799191][ T6907] netlink: 'syz.1.1098': attribute type 25 has an invalid length. [ 145.099396][ T6924] netlink: 'syz.0.1106': attribute type 21 has an invalid length. [ 145.109823][ T6924] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1106'. [ 145.273207][ T6931] netlink: 'syz.2.1107': attribute type 25 has an invalid length. [ 145.524432][ T6944] netlink: 'syz.1.1115': attribute type 25 has an invalid length. [ 146.249081][ T6987] netlink: 'syz.4.1133': attribute type 25 has an invalid length. [ 147.785200][ T7041] netlink: 'syz.4.1153': attribute type 25 has an invalid length. [ 148.211095][ T7051] netlink: 'syz.1.1160': attribute type 25 has an invalid length. [ 149.558052][ T7090] netlink: 'syz.4.1176': attribute type 25 has an invalid length. [ 150.422558][ T7123] netlink: 'syz.3.1195': attribute type 25 has an invalid length. [ 151.003696][ T7151] netlink: 'syz.2.1208': attribute type 25 has an invalid length. [ 151.979438][ T7197] netlink: 'syz.2.1222': attribute type 25 has an invalid length. [ 152.771882][ T7209] device syzkaller0 entered promiscuous mode [ 152.788769][ T7222] netlink: 12030 bytes leftover after parsing attributes in process `syz.3.1230'. [ 153.360055][ T7251] netlink: 'syz.2.1244': attribute type 25 has an invalid length. [ 154.627393][ T7283] device syzkaller0 entered promiscuous mode [ 154.641965][ T7277] netlink: 12030 bytes leftover after parsing attributes in process `syz.3.1254'. [ 154.675678][ T7281] netlink: 'syz.2.1259': attribute type 25 has an invalid length. [ 155.904734][ T7321] netlink: 'syz.1.1274': attribute type 25 has an invalid length. [ 157.037158][ T7338] device syzkaller0 entered promiscuous mode [ 158.875219][ T7384] netlink: 'syz.4.1292': attribute type 25 has an invalid length. [ 159.982070][ T7392] device syzkaller0 entered promiscuous mode [ 160.047981][ T7400] netlink: 12286 bytes leftover after parsing attributes in process `syz.0.1306'. [ 160.769568][ T7420] netlink: 11518 bytes leftover after parsing attributes in process `syz.1.1302'. [ 160.981862][ T7434] netlink: 'syz.0.1307': attribute type 25 has an invalid length. [ 161.387992][ T7424] device syzkaller0 entered promiscuous mode [ 162.284149][ T7459] device syzkaller0 entered promiscuous mode [ 162.378143][ T7462] netlink: 12030 bytes leftover after parsing attributes in process `syz.1.1317'. [ 162.411512][ T7468] netlink: 'syz.4.1319': attribute type 25 has an invalid length. [ 162.840836][ T7483] device syzkaller0 entered promiscuous mode [ 163.267817][ T7502] netlink: 'syz.0.1333': attribute type 21 has an invalid length. [ 163.319548][ T7502] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1333'. [ 163.515520][ T7510] device syzkaller0 entered promiscuous mode [ 163.751970][ T7520] device syzkaller0 entered promiscuous mode [ 164.045764][ T7533] device syzkaller0 entered promiscuous mode [ 164.061604][ T7526] netlink: 12030 bytes leftover after parsing attributes in process `syz.4.1343'. [ 164.237518][ T7547] netlink: 'syz.3.1349': attribute type 29 has an invalid length. [ 164.398988][ T7544] device syzkaller0 entered promiscuous mode [ 164.412911][ T7547] netlink: 'syz.3.1349': attribute type 29 has an invalid length. [ 164.428700][ T7550] netlink: 'syz.3.1349': attribute type 29 has an invalid length. [ 164.438140][ T7549] netlink: 'syz.2.1351': attribute type 21 has an invalid length. [ 164.447172][ T7549] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1351'. [ 165.006776][ T7565] device syzkaller0 entered promiscuous mode [ 165.153512][ T7577] device syzkaller0 entered promiscuous mode [ 165.210450][ T7576] device syzkaller0 entered promiscuous mode [ 165.278829][ T7585] device syzkaller0 entered promiscuous mode [ 165.495821][ T7585] netlink: 12286 bytes leftover after parsing attributes in process `syz.1.1362'. [ 165.604556][ T7591] netlink: 'syz.2.1364': attribute type 29 has an invalid length. [ 165.846365][ T7591] netlink: 'syz.2.1364': attribute type 29 has an invalid length. [ 165.858052][ T7597] netlink: 'syz.3.1363': attribute type 21 has an invalid length. [ 165.868435][ T7597] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1363'. [ 165.968060][ T7599] device syzkaller0 entered promiscuous mode [ 166.286529][ T7604] device syzkaller0 entered promiscuous mode [ 166.323276][ T7602] validate_nla: 1 callbacks suppressed [ 166.323312][ T7602] netlink: 'syz.1.1370': attribute type 25 has an invalid length. [ 166.347279][ T7599] netlink: 11518 bytes leftover after parsing attributes in process `syz.0.1368'. [ 166.881013][ T7629] device syzkaller0 entered promiscuous mode [ 167.031887][ T7633] device syzkaller0 entered promiscuous mode [ 167.052346][ T7629] netlink: 12286 bytes leftover after parsing attributes in process `syz.1.1381'. [ 167.148040][ T7645] device syzkaller0 entered promiscuous mode [ 167.482619][ T7653] netlink: 'syz.0.1390': attribute type 21 has an invalid length. [ 167.519035][ T7653] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1390'. [ 167.544877][ T7654] netlink: 'syz.3.1389': attribute type 25 has an invalid length. [ 168.073710][ T7666] device syzkaller0 entered promiscuous mode [ 168.172352][ T7675] device syzkaller0 entered promiscuous mode [ 168.220317][ T7676] netlink: 11518 bytes leftover after parsing attributes in process `syz.3.1393'. [ 168.317156][ T7684] device syzkaller0 entered promiscuous mode [ 168.330346][ T7682] netlink: 11518 bytes leftover after parsing attributes in process `syz.1.1399'. [ 168.622847][ T7697] device syzkaller0 entered promiscuous mode [ 168.633058][ T7692] netlink: 12286 bytes leftover after parsing attributes in process `syz.4.1401'. [ 168.897285][ T7707] netlink: 'syz.1.1406': attribute type 25 has an invalid length. [ 168.945419][ T7710] netlink: 'syz.3.1407': attribute type 21 has an invalid length. [ 168.958980][ T7710] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1407'. [ 169.615142][ T7731] device syzkaller0 entered promiscuous mode [ 169.824392][ T7743] device syzkaller0 entered promiscuous mode [ 169.902995][ T7739] device syzkaller0 entered promiscuous mode [ 170.191709][ T7754] device syzkaller0 entered promiscuous mode [ 170.199759][ T7756] netlink: 12286 bytes leftover after parsing attributes in process `syz.2.1423'. [ 170.212794][ T7758] netlink: 'syz.0.1425': attribute type 25 has an invalid length. [ 170.441749][ T7762] netlink: 'syz.3.1427': attribute type 21 has an invalid length. [ 170.504119][ T7762] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1427'. [ 170.766487][ T7786] netlink: 'syz.4.1440': attribute type 25 has an invalid length. [ 170.849736][ T7788] device syzkaller0 entered promiscuous mode [ 171.267819][ T7799] device syzkaller0 entered promiscuous mode [ 171.417576][ T7802] device syzkaller0 entered promiscuous mode [ 171.436056][ T7813] netlink: 'syz.0.1448': attribute type 21 has an invalid length. [ 171.460201][ T7813] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1448'. [ 172.347854][ T7830] netlink: 'syz.1.1455': attribute type 25 has an invalid length. [ 172.443197][ T7833] device syzkaller0 entered promiscuous mode [ 172.967386][ T7854] device syzkaller0 entered promiscuous mode [ 173.205591][ T7853] device syzkaller0 entered promiscuous mode [ 173.246116][ T7848] netlink: 'syz.4.1464': attribute type 21 has an invalid length. [ 173.254922][ T7848] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1464'. [ 173.283886][ T7851] netlink: 12286 bytes leftover after parsing attributes in process `syz.2.1465'. [ 173.790052][ T7870] device syzkaller0 entered promiscuous mode [ 173.811009][ T7878] netlink: 'syz.1.1474': attribute type 25 has an invalid length. [ 174.383411][ T7906] netlink: 'syz.0.1485': attribute type 21 has an invalid length. [ 174.412493][ T7906] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1485'. [ 174.799888][ T7913] device syzkaller0 entered promiscuous mode [ 174.828915][ T7921] netlink: 'syz.3.1493': attribute type 25 has an invalid length. [ 174.853644][ T7924] netlink: 12286 bytes leftover after parsing attributes in process `syz.2.1488'. [ 174.875692][ T7920] netlink: 'syz.0.1494': attribute type 21 has an invalid length. [ 174.898112][ T7920] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1494'. [ 175.002733][ T7923] device syzkaller0 entered promiscuous mode [ 175.437680][ T7950] netlink: 'syz.3.1501': attribute type 21 has an invalid length. [ 175.460282][ T7950] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1501'. [ 175.551861][ T7952] netlink: 'syz.2.1505': attribute type 21 has an invalid length. [ 175.613413][ T7952] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1505'. [ 175.704247][ T7958] netlink: 'syz.1.1507': attribute type 25 has an invalid length. [ 176.215016][ T7978] device syzkaller0 entered promiscuous mode [ 176.238032][ T7980] netlink: 12286 bytes leftover after parsing attributes in process `syz.0.1518'. [ 176.449470][ T7981] device syzkaller0 entered promiscuous mode [ 176.479640][ T7986] validate_nla: 2 callbacks suppressed [ 176.479681][ T7986] netlink: 'syz.2.1520': attribute type 21 has an invalid length. [ 176.516784][ T7986] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1520'. [ 176.771048][ T7993] netlink: 'syz.4.1524': attribute type 21 has an invalid length. [ 176.797102][ T7993] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1524'. [ 176.959657][ T8002] netlink: 'syz.0.1529': attribute type 25 has an invalid length. [ 177.121416][ T8013] netlink: 'syz.3.1533': attribute type 25 has an invalid length. [ 177.419576][ T8025] netlink: 'syz.3.1539': attribute type 25 has an invalid length. [ 177.522651][ T8027] netlink: 'syz.4.1540': attribute type 21 has an invalid length. [ 177.547211][ T8027] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1540'. [ 177.797539][ T8029] device syzkaller0 entered promiscuous mode [ 177.882038][ T8039] netlink: 'syz.4.1544': attribute type 25 has an invalid length. [ 178.092985][ T8042] netlink: 'syz.3.1545': attribute type 25 has an invalid length. [ 178.254116][ T8054] netlink: 'syz.1.1549': attribute type 25 has an invalid length. [ 178.425586][ T8065] netlink: 'syz.2.1554': attribute type 21 has an invalid length. [ 178.436830][ T8065] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1554'. [ 178.812894][ T8080] device syzkaller0 entered promiscuous mode [ 179.053253][ T8091] device syzkaller0 entered promiscuous mode [ 179.535069][ T8110] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1574'. [ 179.979855][ T8132] device syzkaller0 entered promiscuous mode [ 180.373879][ T8149] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1589'. [ 180.546069][ T8145] device syzkaller0 entered promiscuous mode [ 180.833494][ T4242] Bluetooth: hci0: command 0x0406 tx timeout [ 180.835945][ T1109] Bluetooth: hci3: command 0x0406 tx timeout [ 180.840854][ T4242] Bluetooth: hci2: command 0x0406 tx timeout [ 180.962086][ T4242] Bluetooth: hci1: command 0x0406 tx timeout [ 180.984224][ T4242] Bluetooth: hci4: command 0x0406 tx timeout [ 181.035826][ T8162] device syzkaller0 entered promiscuous mode [ 181.108625][ T8171] netlink: 11518 bytes leftover after parsing attributes in process `syz.1.1593'. [ 181.261926][ T8169] device syzkaller0 entered promiscuous mode [ 181.392410][ T8179] device syzkaller0 entered promiscuous mode [ 181.529586][ T8190] validate_nla: 9 callbacks suppressed [ 181.529629][ T8190] netlink: 'syz.4.1603': attribute type 21 has an invalid length. [ 181.551481][ T8190] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1603'. [ 181.730491][ T8195] netlink: 'syz.1.1614': attribute type 25 has an invalid length. [ 182.136659][ T8214] netlink: 'syz.0.1610': attribute type 21 has an invalid length. [ 182.162911][ T8214] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1610'. [ 182.336259][ T8226] netlink: 'syz.1.1618': attribute type 21 has an invalid length. [ 182.387028][ T8226] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1618'. [ 182.461344][ T8223] netlink: 'syz.2.1617': attribute type 25 has an invalid length. [ 182.678703][ T8238] netlink: 'syz.4.1623': attribute type 25 has an invalid length. [ 182.958651][ T8261] netlink: 'syz.3.1631': attribute type 21 has an invalid length. [ 183.055245][ T8261] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1631'. [ 183.303950][ T8269] netlink: 'syz.0.1636': attribute type 21 has an invalid length. [ 183.312323][ T8269] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1636'. [ 183.342498][ T8276] netlink: 'syz.4.1634': attribute type 25 has an invalid length. [ 183.571706][ T8286] netlink: 'syz.3.1638': attribute type 25 has an invalid length. [ 184.278402][ T8303] device syzkaller0 entered promiscuous mode [ 184.297657][ T8308] netlink: 12030 bytes leftover after parsing attributes in process `syz.0.1648'. [ 184.552158][ T8322] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1653'. [ 185.102257][ T8346] device syzkaller0 entered promiscuous mode [ 185.189601][ T8348] netlink: 11774 bytes leftover after parsing attributes in process `syz.4.1664'. [ 185.689189][ T8364] device syzkaller0 entered promiscuous mode [ 185.737696][ T8362] netlink: 11774 bytes leftover after parsing attributes in process `syz.2.1672'. [ 185.889232][ T8367] device syzkaller0 entered promiscuous mode [ 186.290947][ T8380] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1682'. [ 186.540096][ T8393] validate_nla: 7 callbacks suppressed [ 186.540134][ T8393] netlink: 'syz.0.1687': attribute type 21 has an invalid length. [ 186.569227][ T8393] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1687'. [ 186.880903][ T8396] device syzkaller0 entered promiscuous mode [ 186.916784][ T8397] netlink: 'syz.3.1688': attribute type 25 has an invalid length. [ 186.941579][ T8404] netlink: 11774 bytes leftover after parsing attributes in process `syz.1.1698'. [ 187.187525][ T8417] netlink: 'syz.2.1696': attribute type 25 has an invalid length. [ 187.267409][ T8418] device syzkaller0 entered promiscuous mode [ 187.479647][ T8425] netlink: 'syz.2.1699': attribute type 21 has an invalid length. [ 187.574238][ T8425] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1699'. [ 187.660410][ T8432] netlink: 'syz.4.1703': attribute type 21 has an invalid length. [ 187.695219][ T8432] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1703'. [ 187.911048][ T8443] netlink: 'syz.3.1705': attribute type 25 has an invalid length. [ 187.969239][ T8444] netlink: 'syz.4.1708': attribute type 25 has an invalid length. [ 188.308627][ T8453] device syzkaller0 entered promiscuous mode [ 188.380749][ T8454] device syzkaller0 entered promiscuous mode [ 188.389201][ T8455] netlink: 'syz.1.1711': attribute type 25 has an invalid length. [ 188.427347][ T8458] netlink: 12286 bytes leftover after parsing attributes in process `syz.4.1713'. [ 188.771530][ T8466] device syzkaller0 entered promiscuous mode [ 188.780015][ T8473] netlink: 'syz.1.1718': attribute type 21 has an invalid length. [ 188.791767][ T8473] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1718'. [ 189.072701][ T8475] netlink: 'syz.3.1719': attribute type 21 has an invalid length. [ 189.082529][ T8475] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1719'. [ 189.530792][ T8499] FAULT_INJECTION: forcing a failure. [ 189.530792][ T8499] name failslab, interval 1, probability 0, space 0, times 1 [ 189.545957][ T8499] CPU: 0 PID: 8499 Comm: syz.2.1724 Not tainted 5.15.173-syzkaller #0 [ 189.554148][ T8499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 189.564282][ T8499] Call Trace: [ 189.567675][ T8499] [ 189.570713][ T8499] dump_stack_lvl+0x1e3/0x2d0 [ 189.575439][ T8499] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 189.581629][ T8499] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 189.587424][ T8499] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 189.593619][ T8499] ? __wake_up_klogd+0xcc/0x100 [ 189.598508][ T8499] should_fail+0x38a/0x4c0 [ 189.603049][ T8499] should_failslab+0x5/0x20 [ 189.607577][ T8499] slab_pre_alloc_hook+0x53/0xc0 [ 189.612543][ T8499] __kmalloc+0x6e/0x300 [ 189.616732][ T8499] ? tomoyo_realpath_from_path+0xd8/0x5e0 [ 189.622511][ T8499] tomoyo_realpath_from_path+0xd8/0x5e0 [ 189.628247][ T8499] tomoyo_path_number_perm+0x225/0x810 [ 189.633930][ T8499] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 189.639472][ T8499] ? __fget_files+0x413/0x480 [ 189.644274][ T8499] security_file_ioctl+0x6d/0xa0 [ 189.649245][ T8499] __se_sys_ioctl+0x47/0x160 [ 189.653885][ T8499] do_syscall_64+0x3b/0xb0 [ 189.658351][ T8499] ? clear_bhb_loop+0x15/0x70 [ 189.663051][ T8499] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 189.668972][ T8499] RIP: 0033:0x7f0aae5c8819 [ 189.673408][ T8499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.693048][ T8499] RSP: 002b:00007f0aac41f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.701487][ T8499] RAX: ffffffffffffffda RBX: 00007f0aae780080 RCX: 00007f0aae5c8819 [ 189.709482][ T8499] RDX: 0000000020000000 RSI: 0000000000008914 RDI: 000000000000000a [ 189.717460][ T8499] RBP: 00007f0aac41f090 R08: 0000000000000000 R09: 0000000000000000 [ 189.725430][ T8499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.733399][ T8499] R13: 0000000000000000 R14: 00007f0aae780080 R15: 00007ffcb93559e8 [ 189.741387][ T8499] [ 189.776511][ T8499] ERROR: Out of memory at tomoyo_realpath_from_path. [ 189.789408][ T8499] device veth0_vlan left promiscuous mode [ 189.821376][ T8499] device veth0_vlan entered promiscuous mode [ 190.040824][ T8512] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1732'. [ 190.443960][ T8517] device syzkaller0 entered promiscuous mode [ 190.490594][ T8526] netlink: 12286 bytes leftover after parsing attributes in process `syz.2.1734'. [ 190.599252][ T8529] device syzkaller0 entered promiscuous mode [ 190.872963][ T8540] device syzkaller0 entered promiscuous mode [ 191.151486][ T8544] device syzkaller0 entered promiscuous mode [ 191.593467][ T8559] device syzkaller0 entered promiscuous mode [ 191.747779][ T8571] device syzkaller0 entered promiscuous mode [ 191.818937][ T8570] validate_nla: 4 callbacks suppressed [ 191.818975][ T8570] netlink: 'syz.2.1753': attribute type 21 has an invalid length. [ 191.854168][ T8570] __nla_validate_parse: 2 callbacks suppressed [ 191.854211][ T8570] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1753'. [ 191.929556][ T8572] device syzkaller0 entered promiscuous mode [ 191.938408][ T8575] netlink: 12286 bytes leftover after parsing attributes in process `syz.1.1752'. [ 191.948368][ T8576] netlink: 'syz.3.1754': attribute type 21 has an invalid length. [ 191.960532][ T8576] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1754'. [ 191.972177][ T8567] netlink: 11774 bytes leftover after parsing attributes in process `syz.0.1750'. [ 192.661155][ T8595] netlink: 'syz.1.1760': attribute type 21 has an invalid length. [ 192.675234][ T8595] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1760'. [ 192.811319][ T8601] netlink: 'syz.0.1765': attribute type 21 has an invalid length. [ 192.854605][ T8601] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1765'. [ 192.892548][ T8603] netlink: 'syz.1.1766': attribute type 25 has an invalid length. [ 193.051995][ T8605] device syzkaller0 entered promiscuous mode [ 193.098094][ T8612] netlink: 'syz.2.1768': attribute type 21 has an invalid length. [ 193.122642][ T8612] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1768'. [ 193.141888][ T8614] netlink: 'syz.1.1771': attribute type 25 has an invalid length. [ 193.294339][ T8611] device syzkaller0 entered promiscuous mode [ 193.528776][ T8615] netlink: 12286 bytes leftover after parsing attributes in process `syz.0.1770'. [ 194.012876][ T8636] netlink: 'syz.2.1779': attribute type 21 has an invalid length. [ 194.057458][ T8636] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1779'. [ 194.089055][ T8639] netlink: 'syz.4.1780': attribute type 21 has an invalid length. [ 194.108023][ T8639] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1780'. [ 194.121348][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.121427][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.602103][ T8655] device veth0_vlan left promiscuous mode [ 194.750638][ T8655] device veth0_vlan entered promiscuous mode [ 195.190082][ T8656] device veth0_vlan left promiscuous mode [ 195.262959][ T8656] device veth0_vlan entered promiscuous mode [ 195.368006][ T8664] netlink: 'syz.0.1787': attribute type 21 has an invalid length. [ 195.526455][ T8668] device syzkaller0 entered promiscuous mode [ 196.069287][ T8697] FAULT_INJECTION: forcing a failure. [ 196.069287][ T8697] name failslab, interval 1, probability 0, space 0, times 0 [ 196.275573][ T8697] CPU: 1 PID: 8697 Comm: syz.0.1807 Not tainted 5.15.173-syzkaller #0 [ 196.283782][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 196.293857][ T8697] Call Trace: [ 196.297151][ T8697] [ 196.300094][ T8697] dump_stack_lvl+0x1e3/0x2d0 [ 196.304799][ T8697] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 196.310563][ T8697] ? panic+0x860/0x860 [ 196.314670][ T8697] ? __might_sleep+0xc0/0xc0 [ 196.319289][ T8697] should_fail+0x38a/0x4c0 [ 196.323924][ T8697] should_failslab+0x5/0x20 [ 196.328448][ T8697] slab_pre_alloc_hook+0x53/0xc0 [ 196.333410][ T8697] __kmalloc+0x6e/0x300 [ 196.337584][ T8697] ? tomoyo_encode+0x26b/0x530 [ 196.342387][ T8697] tomoyo_encode+0x26b/0x530 [ 196.347104][ T8697] ? sock_free_inode+0x20/0x20 [ 196.351898][ T8697] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 196.357566][ T8697] tomoyo_path_number_perm+0x225/0x810 [ 196.363062][ T8697] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 196.368599][ T8697] ? __fget_files+0x413/0x480 [ 196.373315][ T8697] security_file_ioctl+0x6d/0xa0 [ 196.378291][ T8697] __se_sys_ioctl+0x47/0x160 [ 196.382912][ T8697] do_syscall_64+0x3b/0xb0 [ 196.387351][ T8697] ? clear_bhb_loop+0x15/0x70 [ 196.392062][ T8697] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 196.397984][ T8697] RIP: 0033:0x7ff95803d819 [ 196.402422][ T8697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.422259][ T8697] RSP: 002b:00007ff955e94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.430707][ T8697] RAX: ffffffffffffffda RBX: 00007ff9581f5080 RCX: 00007ff95803d819 [ 196.438710][ T8697] RDX: 0000000020000900 RSI: 0000000000008946 RDI: 0000000000000011 [ 196.446793][ T8697] RBP: 00007ff955e94090 R08: 0000000000000000 R09: 0000000000000000 [ 196.454870][ T8697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.462846][ T8697] R13: 0000000000000000 R14: 00007ff9581f5080 R15: 00007ffff0fd8a98 [ 196.470994][ T8697] [ 196.481763][ T8697] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.701119][ T8711] FAULT_INJECTION: forcing a failure. [ 196.701119][ T8711] name failslab, interval 1, probability 0, space 0, times 0 [ 196.779792][ T8711] CPU: 1 PID: 8711 Comm: syz.0.1803 Not tainted 5.15.173-syzkaller #0 [ 196.788097][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 196.798266][ T8711] Call Trace: [ 196.801568][ T8711] [ 196.804566][ T8711] dump_stack_lvl+0x1e3/0x2d0 [ 196.809498][ T8711] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 196.815164][ T8711] ? panic+0x860/0x860 [ 196.819274][ T8711] ? __might_sleep+0xc0/0xc0 [ 196.823899][ T8711] should_fail+0x38a/0x4c0 [ 196.828439][ T8711] should_failslab+0x5/0x20 [ 196.832985][ T8711] slab_pre_alloc_hook+0x53/0xc0 [ 196.837963][ T8711] __kmalloc+0x6e/0x300 [ 196.842150][ T8711] ? tomoyo_encode+0x26b/0x530 [ 196.847170][ T8711] tomoyo_encode+0x26b/0x530 [ 196.851884][ T8711] ? sock_free_inode+0x20/0x20 [ 196.856780][ T8711] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 196.862540][ T8711] tomoyo_path_number_perm+0x225/0x810 [ 196.868055][ T8711] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 196.873597][ T8711] ? __fget_files+0x413/0x480 [ 196.878319][ T8711] security_file_ioctl+0x6d/0xa0 [ 196.883382][ T8711] __se_sys_ioctl+0x47/0x160 [ 196.888010][ T8711] do_syscall_64+0x3b/0xb0 [ 196.892542][ T8711] ? clear_bhb_loop+0x15/0x70 [ 196.897339][ T8711] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 196.903258][ T8711] RIP: 0033:0x7ff95803d819 [ 196.907783][ T8711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.927541][ T8711] RSP: 002b:00007ff955eb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.935988][ T8711] RAX: ffffffffffffffda RBX: 00007ff9581f4fa0 RCX: 00007ff95803d819 [ 196.944077][ T8711] RDX: 0000000020000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 196.952070][ T8711] RBP: 00007ff955eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 196.960099][ T8711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.968092][ T8711] R13: 0000000000000000 R14: 00007ff9581f4fa0 R15: 00007ffff0fd8a98 [ 196.976117][ T8711] [ 197.139109][ T8711] ERROR: Out of memory at tomoyo_realpath_from_path. [ 197.292434][ T8725] device syzkaller0 entered promiscuous mode [ 197.329142][ T8724] __nla_validate_parse: 3 callbacks suppressed [ 197.329160][ T8724] netlink: 12286 bytes leftover after parsing attributes in process `syz.4.1809'. [ 197.690676][ T8739] FAULT_INJECTION: forcing a failure. [ 197.690676][ T8739] name failslab, interval 1, probability 0, space 0, times 0 [ 197.713311][ T8739] CPU: 0 PID: 8739 Comm: syz.1.1817 Not tainted 5.15.173-syzkaller #0 [ 197.721617][ T8739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 197.732155][ T8739] Call Trace: [ 197.735497][ T8739] [ 197.738823][ T8739] dump_stack_lvl+0x1e3/0x2d0 [ 197.743652][ T8739] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 197.749394][ T8739] ? panic+0x860/0x860 [ 197.753808][ T8739] ? __might_sleep+0xc0/0xc0 [ 197.758472][ T8739] should_fail+0x38a/0x4c0 [ 197.763076][ T8739] should_failslab+0x5/0x20 [ 197.767628][ T8739] slab_pre_alloc_hook+0x53/0xc0 [ 197.772728][ T8739] __kmalloc+0x6e/0x300 [ 197.776931][ T8739] ? tomoyo_realpath_from_path+0xd8/0x5e0 [ 197.783116][ T8739] tomoyo_realpath_from_path+0xd8/0x5e0 [ 197.788917][ T8739] tomoyo_path_number_perm+0x225/0x810 [ 197.794750][ T8739] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 197.800520][ T8739] ? __fget_files+0x413/0x480 [ 197.805651][ T8739] security_file_ioctl+0x6d/0xa0 [ 197.810705][ T8739] __se_sys_ioctl+0x47/0x160 [ 197.815349][ T8739] do_syscall_64+0x3b/0xb0 [ 197.819981][ T8739] ? clear_bhb_loop+0x15/0x70 [ 197.825230][ T8739] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.831649][ T8739] RIP: 0033:0x7fe3df1f7819 [ 197.836192][ T8739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.856147][ T8739] RSP: 002b:00007fe3dd06f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.864799][ T8739] RAX: ffffffffffffffda RBX: 00007fe3df3aefa0 RCX: 00007fe3df1f7819 [ 197.873184][ T8739] RDX: 0000000020000900 RSI: 0000000000008946 RDI: 0000000000000005 [ 197.881579][ T8739] RBP: 00007fe3dd06f090 R08: 0000000000000000 R09: 0000000000000000 [ 197.890018][ T8739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.898538][ T8739] R13: 0000000000000000 R14: 00007fe3df3aefa0 R15: 00007ffce3b718b8 [ 197.906702][ T8739] [ 197.920973][ T8739] ERROR: Out of memory at tomoyo_realpath_from_path. [ 198.163053][ T8742] device veth0_vlan left promiscuous mode [ 198.228163][ T8742] device veth0_vlan entered promiscuous mode [ 198.413424][ T8746] validate_nla: 2 callbacks suppressed [ 198.413466][ T8746] netlink: 'syz.0.1820': attribute type 25 has an invalid length. [ 198.436374][ T8753] netlink: 'syz.2.1821': attribute type 21 has an invalid length. [ 198.493274][ T8753] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1821'. [ 198.725882][ T8756] device veth0_vlan left promiscuous mode [ 198.851632][ T8756] device veth0_vlan entered promiscuous mode [ 199.685290][ T8782] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.1829'. [ 199.791974][ T8790] device syzkaller0 entered promiscuous mode [ 199.965063][ T8801] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 200.029622][ T8804] FAULT_INJECTION: forcing a failure. [ 200.029622][ T8804] name failslab, interval 1, probability 0, space 0, times 0 [ 200.083220][ T8804] CPU: 0 PID: 8804 Comm: syz.3.1838 Not tainted 5.15.173-syzkaller #0 [ 200.091533][ T8804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 200.101742][ T8804] Call Trace: [ 200.105118][ T8804] [ 200.108080][ T8804] dump_stack_lvl+0x1e3/0x2d0 [ 200.112816][ T8804] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 200.118480][ T8804] ? panic+0x860/0x860 [ 200.122586][ T8804] ? __might_sleep+0xc0/0xc0 [ 200.127211][ T8804] should_fail+0x38a/0x4c0 [ 200.131672][ T8804] should_failslab+0x5/0x20 [ 200.136206][ T8804] slab_pre_alloc_hook+0x53/0xc0 [ 200.141177][ T8804] __kmalloc+0x6e/0x300 [ 200.145393][ T8804] ? tomoyo_encode+0x26b/0x530 [ 200.150193][ T8804] tomoyo_encode+0x26b/0x530 [ 200.154819][ T8804] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 200.160488][ T8804] tomoyo_path_number_perm+0x225/0x810 [ 200.166078][ T8804] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 200.171638][ T8804] ? __fget_files+0x413/0x480 [ 200.176534][ T8804] security_file_ioctl+0x6d/0xa0 [ 200.181512][ T8804] __se_sys_ioctl+0x47/0x160 [ 200.186139][ T8804] do_syscall_64+0x3b/0xb0 [ 200.190578][ T8804] ? clear_bhb_loop+0x15/0x70 [ 200.195402][ T8804] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.201325][ T8804] RIP: 0033:0x7f6f26106819 [ 200.205753][ T8804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.225470][ T8804] RSP: 002b:00007f6f23f7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.233930][ T8804] RAX: ffffffffffffffda RBX: 00007f6f262bdfa0 RCX: 00007f6f26106819 [ 200.241913][ T8804] RDX: 0000000020004000 RSI: 0000000040047459 RDI: 0000000000000003 [ 200.249895][ T8804] RBP: 00007f6f23f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 200.257967][ T8804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.265953][ T8804] R13: 0000000000000000 R14: 00007f6f262bdfa0 R15: 00007ffebd8bab38 [ 200.273955][ T8804] [ 200.286681][ T8804] ERROR: Out of memory at tomoyo_realpath_from_path. [ 200.301721][ T8801] device syzkaller0 entered promiscuous mode [ 200.459650][ T8820] FAULT_INJECTION: forcing a failure. [ 200.459650][ T8820] name failslab, interval 1, probability 0, space 0, times 0 [ 200.490110][ T8820] CPU: 0 PID: 8820 Comm: syz.3.1843 Not tainted 5.15.173-syzkaller #0 [ 200.498319][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 200.508408][ T8820] Call Trace: [ 200.511707][ T8820] [ 200.514658][ T8820] dump_stack_lvl+0x1e3/0x2d0 [ 200.519359][ T8820] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 200.525017][ T8820] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 200.530693][ T8820] should_fail+0x38a/0x4c0 [ 200.535141][ T8820] should_failslab+0x5/0x20 [ 200.539664][ T8820] slab_pre_alloc_hook+0x53/0xc0 [ 200.544629][ T8820] __kmalloc+0x6e/0x300 [ 200.548804][ T8820] ? tomoyo_encode+0x26b/0x530 [ 200.553591][ T8820] tomoyo_encode+0x26b/0x530 [ 200.558201][ T8820] ? anon_inodefs_init_fs_context+0x60/0x60 [ 200.564118][ T8820] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 200.569784][ T8820] tomoyo_path_number_perm+0x225/0x810 [ 200.575278][ T8820] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 200.580800][ T8820] ? __fget_files+0x413/0x480 [ 200.585520][ T8820] security_file_ioctl+0x6d/0xa0 [ 200.590486][ T8820] __se_sys_ioctl+0x47/0x160 [ 200.595188][ T8820] do_syscall_64+0x3b/0xb0 [ 200.599630][ T8820] ? clear_bhb_loop+0x15/0x70 [ 200.604336][ T8820] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.610286][ T8820] RIP: 0033:0x7f6f26106819 [ 200.614717][ T8820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.634332][ T8820] RSP: 002b:00007f6f23f7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.642793][ T8820] RAX: ffffffffffffffda RBX: 00007f6f262bdfa0 RCX: 00007f6f26106819 [ 200.650786][ T8820] RDX: 0000000000000004 RSI: 0000000000002405 RDI: 0000000000000003 [ 200.658772][ T8820] RBP: 00007f6f23f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 200.666762][ T8820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.674747][ T8820] R13: 0000000000000000 R14: 00007f6f262bdfa0 R15: 00007ffebd8bab38 [ 200.682749][ T8820] [ 200.718815][ T8820] ERROR: Out of memory at tomoyo_realpath_from_path. [ 200.905766][ T8831] device veth0_vlan left promiscuous mode [ 200.921731][ T8831] device veth0_vlan entered promiscuous mode [ 201.003207][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.053678][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.122778][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.209463][ T8833] netlink: 12798 bytes leftover after parsing attributes in process `syz.0.1849'. [ 201.386687][ T8845] FAULT_INJECTION: forcing a failure. [ 201.386687][ T8845] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 201.416170][ T8845] CPU: 0 PID: 8845 Comm: syz.3.1851 Not tainted 5.15.173-syzkaller #0 [ 201.424375][ T8845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 201.434449][ T8845] Call Trace: [ 201.437742][ T8845] [ 201.440675][ T8845] dump_stack_lvl+0x1e3/0x2d0 [ 201.445378][ T8845] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 201.451035][ T8845] ? panic+0x860/0x860 [ 201.455146][ T8845] should_fail+0x38a/0x4c0 [ 201.459592][ T8845] strncpy_from_user+0x32/0x370 [ 201.464478][ T8845] bpf_prog_load+0x185/0x1b60 [ 201.469209][ T8845] ? map_freeze+0x360/0x360 [ 201.473735][ T8845] ? __might_fault+0xb8/0x110 [ 201.478486][ T8845] ? __might_fault+0xb4/0x110 [ 201.483194][ T8845] ? bpf_lsm_bpf+0x5/0x10 [ 201.487718][ T8845] ? security_bpf+0x7d/0xa0 [ 201.492243][ T8845] __sys_bpf+0x343/0x670 [ 201.496502][ T8845] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 201.501905][ T8845] ? syscall_enter_from_user_mode+0x2e/0x240 [ 201.507896][ T8845] ? lockdep_hardirqs_on+0x94/0x130 [ 201.513111][ T8845] __x64_sys_bpf+0x78/0x90 [ 201.517537][ T8845] do_syscall_64+0x3b/0xb0 [ 201.521951][ T8845] ? clear_bhb_loop+0x15/0x70 [ 201.526635][ T8845] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.532544][ T8845] RIP: 0033:0x7f6f26106819 [ 201.536975][ T8845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.556592][ T8845] RSP: 002b:00007f6f23f7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.565021][ T8845] RAX: ffffffffffffffda RBX: 00007f6f262bdfa0 RCX: 00007f6f26106819 [ 201.572996][ T8845] RDX: 0000000000000090 RSI: 0000000020000840 RDI: 0000000000000005 [ 201.580972][ T8845] RBP: 00007f6f23f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 201.588947][ T8845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.596918][ T8845] R13: 0000000000000000 R14: 00007f6f262bdfa0 R15: 00007ffebd8bab38 [ 201.604914][ T8845] [ 201.778226][ T8848] device syzkaller0 entered promiscuous mode [ 202.057348][ T8866] netlink: 'syz.4.1858': attribute type 25 has an invalid length. [ 202.261669][ T8875] FAULT_INJECTION: forcing a failure. [ 202.261669][ T8875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.356187][ T8875] CPU: 0 PID: 8875 Comm: syz.3.1861 Not tainted 5.15.173-syzkaller #0 [ 202.364383][ T8875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 202.374538][ T8875] Call Trace: [ 202.377833][ T8875] [ 202.380771][ T8875] dump_stack_lvl+0x1e3/0x2d0 [ 202.385465][ T8875] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 202.391108][ T8875] ? panic+0x860/0x860 [ 202.395197][ T8875] should_fail+0x38a/0x4c0 [ 202.399624][ T8875] _copy_from_user+0x2d/0x170 [ 202.404302][ T8875] __sys_bpf+0x1d5/0x670 [ 202.408550][ T8875] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 202.413941][ T8875] ? syscall_enter_from_user_mode+0x2e/0x240 [ 202.419926][ T8875] ? lockdep_hardirqs_on+0x94/0x130 [ 202.425128][ T8875] __x64_sys_bpf+0x78/0x90 [ 202.429548][ T8875] do_syscall_64+0x3b/0xb0 [ 202.433963][ T8875] ? clear_bhb_loop+0x15/0x70 [ 202.438641][ T8875] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.444536][ T8875] RIP: 0033:0x7f6f26106819 [ 202.448949][ T8875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.468550][ T8875] RSP: 002b:00007f6f23f7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.476967][ T8875] RAX: ffffffffffffffda RBX: 00007f6f262bdfa0 RCX: 00007f6f26106819 [ 202.484936][ T8875] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000001 [ 202.492921][ T8875] RBP: 00007f6f23f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 202.500897][ T8875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.508877][ T8875] R13: 0000000000000000 R14: 00007f6f262bdfa0 R15: 00007ffebd8bab38 [ 202.516874][ T8875] [ 202.805572][ T8889] netlink: 'syz.3.1865': attribute type 25 has an invalid length. [ 202.859615][ T8893] netlink: 'syz.4.1864': attribute type 12 has an invalid length. [ 202.870170][ T8893] netlink: 95868 bytes leftover after parsing attributes in process `syz.4.1864'. [ 202.947663][ T8897] netlink: 'syz.1.1878': attribute type 25 has an invalid length. [ 203.096334][ T8906] FAULT_INJECTION: forcing a failure. [ 203.096334][ T8906] name failslab, interval 1, probability 0, space 0, times 0 [ 203.131763][ T8906] CPU: 1 PID: 8906 Comm: syz.2.1869 Not tainted 5.15.173-syzkaller #0 [ 203.139964][ T8906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 203.150039][ T8906] Call Trace: [ 203.153337][ T8906] [ 203.156278][ T8906] dump_stack_lvl+0x1e3/0x2d0 [ 203.160966][ T8906] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 203.166609][ T8906] ? panic+0x860/0x860 [ 203.170684][ T8906] ? __might_sleep+0xc0/0xc0 [ 203.175318][ T8906] should_fail+0x38a/0x4c0 [ 203.179754][ T8906] should_failslab+0x5/0x20 [ 203.184256][ T8906] slab_pre_alloc_hook+0x53/0xc0 [ 203.189215][ T8906] __kmalloc+0x6e/0x300 [ 203.193382][ T8906] ? tomoyo_encode+0x26b/0x530 [ 203.198167][ T8906] tomoyo_encode+0x26b/0x530 [ 203.202757][ T8906] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 203.208419][ T8906] tomoyo_path_number_perm+0x225/0x810 [ 203.213899][ T8906] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 203.219582][ T8906] ? __fget_files+0x413/0x480 [ 203.224274][ T8906] security_file_ioctl+0x6d/0xa0 [ 203.229233][ T8906] __se_sys_ioctl+0x47/0x160 [ 203.233829][ T8906] do_syscall_64+0x3b/0xb0 [ 203.238268][ T8906] ? clear_bhb_loop+0x15/0x70 [ 203.242953][ T8906] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 203.248851][ T8906] RIP: 0033:0x7f0aae5c8819 [ 203.253289][ T8906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.272908][ T8906] RSP: 002b:00007f0aac41f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.281318][ T8906] RAX: ffffffffffffffda RBX: 00007f0aae780080 RCX: 00007f0aae5c8819 [ 203.289292][ T8906] RDX: 0000000020000040 RSI: 00000000401054d5 RDI: 0000000000000003 [ 203.297279][ T8906] RBP: 00007f0aac41f090 R08: 0000000000000000 R09: 0000000000000000 [ 203.305256][ T8906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.313247][ T8906] R13: 0000000000000001 R14: 00007f0aae780080 R15: 00007ffcb93559e8 [ 203.321262][ T8906] [ 203.355795][ T8898] device veth0_vlan left promiscuous mode [ 203.362163][ T8906] ERROR: Out of memory at tomoyo_realpath_from_path. [ 203.368015][ T8898] device veth0_vlan entered promiscuous mode [ 203.558442][ T8914] netlink: 'syz.0.1884': attribute type 25 has an invalid length. [ 203.571916][ T8915] netlink: 'syz.3.1874': attribute type 25 has an invalid length. [ 203.708727][ T8925] FAULT_INJECTION: forcing a failure. [ 203.708727][ T8925] name failslab, interval 1, probability 0, space 0, times 0 [ 203.747473][ T8925] CPU: 0 PID: 8925 Comm: syz.1.1876 Not tainted 5.15.173-syzkaller #0 [ 203.755676][ T8925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 203.765746][ T8925] Call Trace: [ 203.769039][ T8925] [ 203.771988][ T8925] dump_stack_lvl+0x1e3/0x2d0 [ 203.776687][ T8925] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 203.782347][ T8925] ? panic+0x860/0x860 [ 203.786441][ T8925] ? __might_sleep+0xc0/0xc0 [ 203.791158][ T8925] should_fail+0x38a/0x4c0 [ 203.795606][ T8925] should_failslab+0x5/0x20 [ 203.800157][ T8925] slab_pre_alloc_hook+0x53/0xc0 [ 203.805114][ T8925] __kmalloc+0x6e/0x300 [ 203.809284][ T8925] ? tomoyo_encode+0x26b/0x530 [ 203.814075][ T8925] tomoyo_encode+0x26b/0x530 [ 203.818770][ T8925] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 203.824435][ T8925] tomoyo_path_number_perm+0x225/0x810 [ 203.829922][ T8925] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 203.835436][ T8925] ? __fget_files+0x413/0x480 [ 203.840152][ T8925] security_file_ioctl+0x6d/0xa0 [ 203.845107][ T8925] __se_sys_ioctl+0x47/0x160 [ 203.849711][ T8925] do_syscall_64+0x3b/0xb0 [ 203.854139][ T8925] ? clear_bhb_loop+0x15/0x70 [ 203.858824][ T8925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 203.864780][ T8925] RIP: 0033:0x7fe3df1f7819 [ 203.869209][ T8925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.888828][ T8925] RSP: 002b:00007fe3dd06f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.897260][ T8925] RAX: ffffffffffffffda RBX: 00007fe3df3aefa0 RCX: 00007fe3df1f7819 [ 203.905238][ T8925] RDX: 00000000200006c0 RSI: 00000000400454d9 RDI: 0000000000000003 [ 203.913214][ T8925] RBP: 00007fe3dd06f090 R08: 0000000000000000 R09: 0000000000000000 [ 203.921196][ T8925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.929172][ T8925] R13: 0000000000000000 R14: 00007fe3df3aefa0 R15: 00007ffce3b718b8 [ 203.937169][ T8925] [ 203.976950][ T8925] ERROR: Out of memory at tomoyo_realpath_from_path. [ 204.327342][ T8945] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1887'. [ 204.601175][ T8952] FAULT_INJECTION: forcing a failure. [ 204.601175][ T8952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.658722][ T8952] CPU: 1 PID: 8952 Comm: syz.2.1889 Not tainted 5.15.173-syzkaller #0 [ 204.666926][ T8952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 204.677004][ T8952] Call Trace: [ 204.680296][ T8952] [ 204.683235][ T8952] dump_stack_lvl+0x1e3/0x2d0 [ 204.687933][ T8952] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 204.693590][ T8952] ? panic+0x860/0x860 [ 204.697736][ T8952] should_fail+0x38a/0x4c0 [ 204.702175][ T8952] strncpy_from_user+0x32/0x370 [ 204.707046][ T8952] bpf_prog_load+0x185/0x1b60 [ 204.711749][ T8952] ? map_freeze+0x360/0x360 [ 204.716266][ T8952] ? __might_fault+0xb8/0x110 [ 204.720993][ T8952] ? __might_fault+0xb4/0x110 [ 204.725693][ T8952] ? bpf_lsm_bpf+0x5/0x10 [ 204.730038][ T8952] ? security_bpf+0x7d/0xa0 [ 204.734560][ T8952] __sys_bpf+0x343/0x670 [ 204.738822][ T8952] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 204.744240][ T8952] ? trace_hardirqs_on+0x30/0x80 [ 204.749212][ T8952] ? syscall_enter_from_user_mode+0x37/0x240 [ 204.755213][ T8952] __x64_sys_bpf+0x78/0x90 [ 204.759649][ T8952] do_syscall_64+0x3b/0xb0 [ 204.764083][ T8952] ? clear_bhb_loop+0x15/0x70 [ 204.768783][ T8952] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 204.774705][ T8952] RIP: 0033:0x7f0aae5c8819 [ 204.779138][ T8952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.798763][ T8952] RSP: 002b:00007f0aac440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 204.807200][ T8952] RAX: ffffffffffffffda RBX: 00007f0aae77ffa0 RCX: 00007f0aae5c8819 [ 204.815189][ T8952] RDX: 0000000000000070 RSI: 00000000200000c0 RDI: 0000000000000005 [ 204.823178][ T8952] RBP: 00007f0aac440090 R08: 0000000000000000 R09: 0000000000000000 [ 204.831161][ T8952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.837912][ T8958] FAULT_INJECTION: forcing a failure. [ 204.837912][ T8958] name failslab, interval 1, probability 0, space 0, times 0 [ 204.839166][ T8952] R13: 0000000000000000 R14: 00007f0aae77ffa0 R15: 00007ffcb93559e8 [ 204.839205][ T8952] [ 204.865718][ T8949] device veth0_vlan left promiscuous mode [ 204.909200][ T8958] CPU: 0 PID: 8958 Comm: syz.3.1891 Not tainted 5.15.173-syzkaller #0 [ 204.917405][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 204.927484][ T8958] Call Trace: [ 204.930786][ T8958] [ 204.933735][ T8958] dump_stack_lvl+0x1e3/0x2d0 [ 204.938443][ T8958] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 204.944191][ T8958] ? panic+0x860/0x860 [ 204.948292][ T8958] ? __might_sleep+0xc0/0xc0 [ 204.952912][ T8958] should_fail+0x38a/0x4c0 [ 204.957354][ T8958] should_failslab+0x5/0x20 [ 204.961879][ T8958] slab_pre_alloc_hook+0x53/0xc0 [ 204.966841][ T8958] __kmalloc_node+0x71/0x390 [ 204.971453][ T8958] ? vmemdup_user+0x3e/0x160 [ 204.976078][ T8958] vmemdup_user+0x3e/0x160 [ 204.980515][ T8958] map_delete_elem+0x203/0x580 [ 204.985306][ T8958] ? bpf_lsm_bpf+0x5/0x10 [ 204.989657][ T8958] ? security_bpf+0x7d/0xa0 [ 204.994195][ T8958] __sys_bpf+0x311/0x670 [ 204.998462][ T8958] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 205.003874][ T8958] ? syscall_enter_from_user_mode+0x2e/0x240 [ 205.009879][ T8958] ? lockdep_hardirqs_on+0x94/0x130 [ 205.015100][ T8958] __x64_sys_bpf+0x78/0x90 [ 205.019543][ T8958] do_syscall_64+0x3b/0xb0 [ 205.023982][ T8958] ? clear_bhb_loop+0x15/0x70 [ 205.028688][ T8958] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.034603][ T8958] RIP: 0033:0x7f6f26106819 [ 205.039035][ T8958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.058662][ T8958] RSP: 002b:00007f6f23f5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 205.067113][ T8958] RAX: ffffffffffffffda RBX: 00007f6f262be080 RCX: 00007f6f26106819 [ 205.075101][ T8958] RDX: 0000000000000036 RSI: 00000000200007c0 RDI: 0000000000000003 [ 205.083098][ T8958] RBP: 00007f6f23f5d090 R08: 0000000000000000 R09: 0000000000000000 [ 205.091173][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.097966][ T8949] device veth0_vlan entered promiscuous mode [ 205.099157][ T8958] R13: 0000000000000000 R14: 00007f6f262be080 R15: 00007ffebd8bab38 [ 205.099194][ T8958] [ 205.151246][ T8950] netlink: 'syz.1.1890': attribute type 25 has an invalid length. [ 205.439329][ T8963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1892'. [ 205.692217][ T8983] delete_channel: no stack [ 205.813235][ T8986] FAULT_INJECTION: forcing a failure. [ 205.813235][ T8986] name failslab, interval 1, probability 0, space 0, times 0 [ 205.828066][ T8986] CPU: 1 PID: 8986 Comm: syz.4.1900 Not tainted 5.15.173-syzkaller #0 [ 205.836386][ T8986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 205.846634][ T8986] Call Trace: [ 205.849930][ T8986] [ 205.852872][ T8986] dump_stack_lvl+0x1e3/0x2d0 [ 205.857583][ T8986] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 205.863228][ T8986] ? panic+0x860/0x860 [ 205.867312][ T8986] ? __might_sleep+0xc0/0xc0 [ 205.871923][ T8986] should_fail+0x38a/0x4c0 [ 205.876385][ T8986] should_failslab+0x5/0x20 [ 205.880902][ T8986] slab_pre_alloc_hook+0x53/0xc0 [ 205.885855][ T8986] __kmalloc+0x6e/0x300 [ 205.890021][ T8986] ? tomoyo_encode+0x26b/0x530 [ 205.894803][ T8986] tomoyo_encode+0x26b/0x530 [ 205.899409][ T8986] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 205.905112][ T8986] tomoyo_path_number_perm+0x225/0x810 [ 205.910593][ T8986] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 205.916107][ T8986] ? __fget_files+0x413/0x480 [ 205.920806][ T8986] security_file_ioctl+0x6d/0xa0 [ 205.925754][ T8986] __se_sys_ioctl+0x47/0x160 [ 205.930349][ T8986] do_syscall_64+0x3b/0xb0 [ 205.934771][ T8986] ? clear_bhb_loop+0x15/0x70 [ 205.939556][ T8986] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.945587][ T8986] RIP: 0033:0x7f21a6701819 [ 205.949997][ T8986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.969621][ T8986] RSP: 002b:00007f21a4579038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.978035][ T8986] RAX: ffffffffffffffda RBX: 00007f21a68b8fa0 RCX: 00007f21a6701819 [ 205.986012][ T8986] RDX: 0000000020000040 RSI: 000000004030582a RDI: 0000000000000008 [ 205.993996][ T8986] RBP: 00007f21a4579090 R08: 0000000000000000 R09: 0000000000000000 [ 206.001965][ T8986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.010106][ T8986] R13: 0000000000000000 R14: 00007f21a68b8fa0 R15: 00007ffe59a61aa8 [ 206.018094][ T8986] [ 206.034753][ T8986] ERROR: Out of memory at tomoyo_realpath_from_path. [ 206.224470][ T8998] FAULT_INJECTION: forcing a failure. [ 206.224470][ T8998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.309246][ T8998] CPU: 0 PID: 8998 Comm: syz.3.1905 Not tainted 5.15.173-syzkaller #0 [ 206.317453][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 206.327530][ T8998] Call Trace: [ 206.330832][ T8998] [ 206.333777][ T8998] dump_stack_lvl+0x1e3/0x2d0 [ 206.338476][ T8998] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 206.344134][ T8998] ? panic+0x860/0x860 [ 206.348227][ T8998] ? __lock_acquire+0x1295/0x1ff0 [ 206.353366][ T8998] should_fail+0x38a/0x4c0 [ 206.357816][ T8998] strncpy_from_user+0x32/0x370 [ 206.362692][ T8998] bpf_raw_tracepoint_open+0x32f/0x750 [ 206.368177][ T8998] ? bpf_obj_get_info_by_fd+0x3e10/0x3e10 [ 206.373930][ T8998] ? __lock_acquire+0x1ff0/0x1ff0 [ 206.378985][ T8998] ? __might_fault+0xb4/0x110 [ 206.383688][ T8998] ? bpf_lsm_bpf+0x5/0x10 [ 206.388039][ T8998] ? security_bpf+0x7d/0xa0 [ 206.392567][ T8998] __sys_bpf+0x468/0x670 [ 206.396839][ T8998] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 206.402246][ T8998] ? syscall_enter_from_user_mode+0x2e/0x240 [ 206.408257][ T8998] ? lockdep_hardirqs_on+0x94/0x130 [ 206.413479][ T8998] __x64_sys_bpf+0x78/0x90 [ 206.417933][ T8998] do_syscall_64+0x3b/0xb0 [ 206.422364][ T8998] ? clear_bhb_loop+0x15/0x70 [ 206.427068][ T8998] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 206.432985][ T8998] RIP: 0033:0x7f6f26106819 [ 206.437417][ T8998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.457040][ T8998] RSP: 002b:00007f6f23f7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.465474][ T8998] RAX: ffffffffffffffda RBX: 00007f6f262bdfa0 RCX: 00007f6f26106819 [ 206.473507][ T8998] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011 [ 206.481506][ T8998] RBP: 00007f6f23f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 206.489544][ T8998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.497533][ T8998] R13: 0000000000000000 R14: 00007f6f262bdfa0 R15: 00007ffebd8bab38 [ 206.505548][ T8998] [ 206.547076][ T9006] netlink: 'syz.4.1908': attribute type 25 has an invalid length. [ 206.655329][ T9014] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1911'. [ 206.829739][ T9013] device syzkaller0 entered promiscuous mode [ 207.096287][ T9028] FAULT_INJECTION: forcing a failure. [ 207.096287][ T9028] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 207.153964][ T9028] CPU: 1 PID: 9028 Comm: syz.3.1914 Not tainted 5.15.173-syzkaller #0 [ 207.162254][ T9028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 207.172326][ T9028] Call Trace: [ 207.175712][ T9028] [ 207.178656][ T9028] dump_stack_lvl+0x1e3/0x2d0 [ 207.183350][ T9028] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 207.188998][ T9028] ? panic+0x860/0x860 [ 207.193077][ T9028] ? __lock_acquire+0x1295/0x1ff0 [ 207.198117][ T9028] ? __kasan_slab_alloc+0x43/0xc0 [ 207.203179][ T9028] should_fail+0x38a/0x4c0 [ 207.207621][ T9028] prepare_alloc_pages+0x1db/0x5b0 [ 207.212753][ T9028] __alloc_pages+0x14f/0x700 [ 207.217361][ T9028] ? __rmqueue_pcplist+0x23a0/0x23a0 [ 207.222666][ T9028] ? mark_lock+0x98/0x340 [ 207.227007][ T9028] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 207.233088][ T9028] kmalloc_large_node+0x7c/0x180 [ 207.238046][ T9028] __kmalloc_node_track_caller+0x229/0x390 [ 207.243862][ T9028] ? tun_get_user+0xdaf/0x40f0 [ 207.248636][ T9028] ? __local_bh_enable_ip+0x164/0x1f0 [ 207.254014][ T9028] ? lockdep_hardirqs_on+0x94/0x130 [ 207.259228][ T9028] ? tun_get_user+0xdaf/0x40f0 [ 207.264000][ T9028] pskb_expand_head+0x111/0x1130 [ 207.268959][ T9028] ? __napi_alloc_skb+0x169/0x2d0 [ 207.274008][ T9028] tun_get_user+0xdaf/0x40f0 [ 207.278637][ T9028] ? tun_ring_recv+0xcc0/0xcc0 [ 207.283418][ T9028] ? rcu_lock_release+0x5/0x20 [ 207.288222][ T9028] tun_chr_write_iter+0x10c/0x1e0 [ 207.293264][ T9028] vfs_write+0xacd/0xe50 [ 207.297533][ T9028] ? file_end_write+0x250/0x250 [ 207.302423][ T9028] ? __fget_files+0x413/0x480 [ 207.307484][ T9028] ? __fdget_pos+0x1e9/0x380 [ 207.312093][ T9028] ? ksys_write+0x77/0x2c0 [ 207.316524][ T9028] ksys_write+0x1a2/0x2c0 [ 207.320865][ T9028] ? print_irqtrace_events+0x210/0x210 [ 207.326340][ T9028] ? __ia32_sys_read+0x80/0x80 [ 207.331117][ T9028] ? syscall_enter_from_user_mode+0x2e/0x240 [ 207.337110][ T9028] ? lockdep_hardirqs_on+0x94/0x130 [ 207.342324][ T9028] ? syscall_enter_from_user_mode+0x2e/0x240 [ 207.348319][ T9028] do_syscall_64+0x3b/0xb0 [ 207.352749][ T9028] ? clear_bhb_loop+0x15/0x70 [ 207.357442][ T9028] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 207.363351][ T9028] RIP: 0033:0x7f6f26106819 [ 207.367781][ T9028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.387407][ T9028] RSP: 002b:00007f6f23f5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.395849][ T9028] RAX: ffffffffffffffda RBX: 00007f6f262be080 RCX: 00007f6f26106819 [ 207.403834][ T9028] RDX: 000000000000fdef RSI: 0000000020000440 RDI: 0000000000000003 [ 207.411814][ T9028] RBP: 00007f6f23f5d090 R08: 0000000000000000 R09: 0000000000000000 [ 207.420069][ T9028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.428053][ T9028] R13: 0000000000000001 R14: 00007f6f262be080 R15: 00007ffebd8bab38 [ 207.436157][ T9028] [ 207.675351][ T9045] netlink: 'syz.1.1919': attribute type 10 has an invalid length. [ 207.683846][ T9045] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1919'. [ 207.693561][ T9045] device bond0 entered promiscuous mode [ 207.699663][ T9045] device bond_slave_1 entered promiscuous mode [ 207.710045][ T9045] bridge0: port 3(bond0) entered blocking state [ 207.741108][ T9045] bridge0: port 3(bond0) entered disabled state [ 207.789600][ T9045] bridge0: port 3(bond0) entered blocking state [ 207.796252][ T9045] bridge0: port 3(bond0) entered forwarding state [ 207.880761][ T9047] netlink: 'syz.0.1922': attribute type 25 has an invalid length. [ 207.985440][ T9053] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1923'. [ 208.021709][ T9057] FAULT_INJECTION: forcing a failure. [ 208.021709][ T9057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.042434][ T9057] CPU: 0 PID: 9057 Comm: syz.2.1925 Not tainted 5.15.173-syzkaller #0 [ 208.050644][ T9057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 208.060719][ T9057] Call Trace: [ 208.064018][ T9057] [ 208.066968][ T9057] dump_stack_lvl+0x1e3/0x2d0 [ 208.071672][ T9057] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 208.077330][ T9057] ? panic+0x860/0x860 [ 208.081440][ T9057] should_fail+0x38a/0x4c0 [ 208.085888][ T9057] strncpy_from_user+0x32/0x370 [ 208.090771][ T9057] bpf_prog_load+0x185/0x1b60 [ 208.095483][ T9057] ? map_freeze+0x360/0x360 [ 208.100013][ T9057] ? __might_fault+0xb8/0x110 [ 208.104733][ T9057] ? __might_fault+0xb4/0x110 [ 208.109436][ T9057] ? bpf_lsm_bpf+0x5/0x10 [ 208.113786][ T9057] ? security_bpf+0x7d/0xa0 [ 208.118311][ T9057] __sys_bpf+0x343/0x670 [ 208.122570][ T9057] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 208.127964][ T9057] ? syscall_enter_from_user_mode+0x2e/0x240 [ 208.133951][ T9057] ? lockdep_hardirqs_on+0x94/0x130 [ 208.139332][ T9057] __x64_sys_bpf+0x78/0x90 [ 208.143756][ T9057] do_syscall_64+0x3b/0xb0 [ 208.148174][ T9057] ? clear_bhb_loop+0x15/0x70 [ 208.152853][ T9057] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.158749][ T9057] RIP: 0033:0x7f0aae5c8819 [ 208.163168][ T9057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.182770][ T9057] RSP: 002b:00007f0aac440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 208.191183][ T9057] RAX: ffffffffffffffda RBX: 00007f0aae77ffa0 RCX: 00007f0aae5c8819 [ 208.199154][ T9057] RDX: 0000000000000070 RSI: 00000000200000c0 RDI: 0000000000000005 [ 208.207123][ T9057] RBP: 00007f0aac440090 R08: 0000000000000000 R09: 0000000000000000 [ 208.215090][ T9057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.223076][ T9057] R13: 0000000000000000 R14: 00007f0aae77ffa0 R15: 00007ffcb93559e8 [ 208.231057][ T9057] [ 208.302694][ T9066] device syzkaller0 entered promiscuous mode [ 208.543102][ T9065] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1927'. [ 208.664112][ T9074] netlink: 'syz.2.1931': attribute type 25 has an invalid length. [ 208.961842][ T9087] FAULT_INJECTION: forcing a failure. [ 208.961842][ T9087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.994326][ T9086] netlink: 'syz.3.1938': attribute type 21 has an invalid length. [ 209.001532][ T9087] CPU: 0 PID: 9087 Comm: syz.4.1937 Not tainted 5.15.173-syzkaller #0 [ 209.011224][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 209.021743][ T9087] Call Trace: [ 209.025089][ T9087] [ 209.028113][ T9087] dump_stack_lvl+0x1e3/0x2d0 [ 209.032912][ T9087] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 209.039016][ T9087] ? panic+0x860/0x860 [ 209.043308][ T9087] ? __fget_files+0x413/0x480 [ 209.048056][ T9087] should_fail+0x38a/0x4c0 [ 209.052554][ T9087] _copy_from_user+0x2d/0x170 [ 209.055733][ T9086] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1938'. [ 209.057559][ T9087] bpf_obj_get_info_by_fd+0x419/0x3e10 [ 209.057604][ T9087] ? mark_lock+0x98/0x340 [ 209.057633][ T9087] ? bpf_map_get_fd_by_id+0x340/0x340 [ 209.057701][ T9087] ? __might_fault+0xb4/0x110 [ 209.057728][ T9087] ? bpf_lsm_bpf+0x5/0x10 [ 209.093092][ T9087] ? security_bpf+0x7d/0xa0 [ 209.098076][ T9087] __sys_bpf+0x43b/0x670 [ 209.102671][ T9087] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 209.109085][ T9087] ? syscall_enter_from_user_mode+0x2e/0x240 [ 209.115311][ T9087] ? lockdep_hardirqs_on+0x94/0x130 [ 209.120569][ T9087] __x64_sys_bpf+0x78/0x90 [ 209.125897][ T9087] do_syscall_64+0x3b/0xb0 [ 209.132112][ T9087] ? clear_bhb_loop+0x15/0x70 [ 209.138060][ T9087] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.145162][ T9087] RIP: 0033:0x7f21a6701819 [ 209.150377][ T9087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.170449][ T9087] RSP: 002b:00007f21a4579038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.179154][ T9087] RAX: ffffffffffffffda RBX: 00007f21a68b8fa0 RCX: 00007f21a6701819 [ 209.188066][ T9087] RDX: 0000000000000010 RSI: 0000000020000500 RDI: 000000000000000f [ 209.196329][ T9087] RBP: 00007f21a4579090 R08: 0000000000000000 R09: 0000000000000000 [ 209.204752][ T9087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.213132][ T9087] R13: 0000000000000000 R14: 00007f21a68b8fa0 R15: 00007ffe59a61aa8 [ 209.221320][ T9087] [ 209.539523][ T9110] netlink: 12286 bytes leftover after parsing attributes in process `syz.4.1943'. [ 209.655003][ T9107] device syzkaller0 entered promiscuous mode [ 209.798608][ T9119] netlink: 'syz.3.1947': attribute type 25 has an invalid length. [ 209.832887][ T9126] netlink: 'syz.1.1950': attribute type 25 has an invalid length. [ 210.153916][ T9136] netlink: 'syz.1.1956': attribute type 21 has an invalid length. [ 210.194715][ T9144] FAULT_INJECTION: forcing a failure. [ 210.194715][ T9144] name failslab, interval 1, probability 0, space 0, times 0 [ 210.214016][ T9136] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1956'. [ 210.240855][ T9144] CPU: 1 PID: 9144 Comm: syz.0.1958 Not tainted 5.15.173-syzkaller #0 [ 210.249066][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 210.259523][ T9144] Call Trace: [ 210.262827][ T9144] [ 210.265814][ T9144] dump_stack_lvl+0x1e3/0x2d0 [ 210.270528][ T9144] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 210.276400][ T9144] ? panic+0x860/0x860 [ 210.280818][ T9144] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 210.290253][ T9144] should_fail+0x38a/0x4c0 [ 210.296318][ T9144] should_failslab+0x5/0x20 [ 210.301863][ T9144] slab_pre_alloc_hook+0x53/0xc0 [ 210.308577][ T9144] kmem_cache_alloc_node+0x49/0x2c0 [ 210.315169][ T9144] ? __alloc_skb+0xdd/0x590 [ 210.321412][ T9144] __alloc_skb+0xdd/0x590 [ 210.328731][ T9144] tcp_send_fin+0x1c8/0xf90 [ 210.333719][ T9144] ? kmem_cache_free+0x146/0x1f0 [ 210.339989][ T9144] ? __sk_mem_reduce_allocated+0x1d9/0x2c0 [ 210.348769][ T9144] __tcp_close+0xb4d/0xec0 [ 210.353358][ T9144] tcp_close+0x24/0x110 [ 210.358648][ T9144] inet_release+0x174/0x1f0 [ 210.363611][ T9144] sock_release+0x7a/0x140 [ 210.368509][ T9144] smc_clcsock_release+0xc8/0xe0 [ 210.375940][ T9144] __smc_release+0x3b9/0x530 [ 210.380663][ T9144] smc_release+0x2d5/0x530 [ 210.385391][ T9144] sock_close+0xcd/0x230 [ 210.390608][ T9144] ? sock_mmap+0x90/0x90 [ 210.395131][ T9144] __fput+0x3fe/0x8e0 [ 210.399437][ T9144] task_work_run+0x129/0x1a0 [ 210.404135][ T9144] exit_to_user_mode_loop+0x106/0x130 [ 210.409512][ T9144] exit_to_user_mode_prepare+0xb1/0x140 [ 210.415069][ T9144] syscall_exit_to_user_mode+0x5d/0x240 [ 210.420667][ T9144] do_syscall_64+0x47/0xb0 [ 210.425084][ T9144] ? clear_bhb_loop+0x15/0x70 [ 210.429850][ T9144] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.435831][ T9144] RIP: 0033:0x7ff95803d819 [ 210.441526][ T9144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.464615][ T9144] RSP: 002b:00007ff955eb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 210.476811][ T9144] RAX: 0000000000000000 RBX: 00007ff9581f4fa0 RCX: 00007ff95803d819 [ 210.486763][ T9144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 210.496640][ T9144] RBP: 00007ff955eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 210.504724][ T9144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.512980][ T9144] R13: 0000000000000000 R14: 00007ff9581f4fa0 R15: 00007ffff0fd8a98 [ 210.521821][ T9144] [ 210.552971][ T3546] udevd[3546]: worker [4185] terminated by signal 33 (Unknown signal 33) [ 210.561580][ T3546] udevd[3546]: worker [4185] failed while handling '/devices/virtual/block/loop0' [ 210.734392][ T9155] FAULT_INJECTION: forcing a failure. [ 210.734392][ T9155] name failslab, interval 1, probability 0, space 0, times 0 [ 210.787341][ T9155] CPU: 0 PID: 9155 Comm: syz.0.1962 Not tainted 5.15.173-syzkaller #0 [ 210.796659][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 210.808648][ T9155] Call Trace: [ 210.812306][ T9155] [ 210.816171][ T9155] dump_stack_lvl+0x1e3/0x2d0 [ 210.821476][ T9155] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 210.828972][ T9155] ? panic+0x860/0x860 [ 210.834074][ T9155] ? __might_sleep+0xc0/0xc0 [ 210.839671][ T9155] should_fail+0x38a/0x4c0 [ 210.844385][ T9155] should_failslab+0x5/0x20 [ 210.849363][ T9155] slab_pre_alloc_hook+0x53/0xc0 [ 210.854514][ T9155] __kmalloc+0x6e/0x300 [ 210.859014][ T9155] ? tomoyo_encode+0x26b/0x530 [ 210.864914][ T9155] tomoyo_encode+0x26b/0x530 [ 210.869880][ T9155] ? sock_free_inode+0x20/0x20 [ 210.874673][ T9155] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 210.880876][ T9155] tomoyo_path_number_perm+0x225/0x810 [ 210.887026][ T9155] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 210.892857][ T9155] ? __fget_files+0x413/0x480 [ 210.897653][ T9155] security_file_ioctl+0x6d/0xa0 [ 210.903031][ T9155] __se_sys_ioctl+0x47/0x160 [ 210.907648][ T9155] do_syscall_64+0x3b/0xb0 [ 210.912110][ T9155] ? clear_bhb_loop+0x15/0x70 [ 210.916799][ T9155] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.922786][ T9155] RIP: 0033:0x7ff95803d819 [ 210.927291][ T9155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.946898][ T9155] RSP: 002b:00007ff955eb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.955943][ T9155] RAX: ffffffffffffffda RBX: 00007ff9581f4fa0 RCX: 00007ff95803d819 [ 210.964616][ T9155] RDX: 0000000020000000 RSI: 0000000000008b1a RDI: 0000000000000003 [ 210.972698][ T9155] RBP: 00007ff955eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 210.980949][ T9155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.988923][ T9155] R13: 0000000000000000 R14: 00007ff9581f4fa0 R15: 00007ffff0fd8a98 [ 210.997201][ T9155] [ 211.044862][ T9155] ERROR: Out of memory at tomoyo_realpath_from_path. [ 211.136044][ T9160] netlink: 'syz.4.1965': attribute type 1 has an invalid length. [ 211.154831][ T9160] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1965'. [ 211.203688][ T9165] device syzkaller0 entered promiscuous mode [ 211.352485][ T9163] netlink: 12286 bytes leftover after parsing attributes in process `syz.2.1963'. [ 211.374416][ T9168] netlink: 'syz.0.1967': attribute type 25 has an invalid length. [ 211.583900][ T9180] netlink: 'syz.0.1970': attribute type 25 has an invalid length. [ 211.626081][ T9178] delete_channel: no stack [ 211.632144][ T9181] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1971'. [ 211.819781][ T9187] device syzkaller0 entered promiscuous mode [ 213.008873][ T9203] device syzkaller0 entered promiscuous mode [ 213.142048][ T9208] netlink: 'syz.0.1980': attribute type 25 has an invalid length. [ 213.398563][ T9210] device syzkaller0 entered promiscuous mode [ 213.415103][ T9215] netlink: 'syz.1.1993': attribute type 25 has an invalid length. [ 213.436015][ T9217] netlink: 12542 bytes leftover after parsing attributes in process `syz.3.1982'. [ 213.600505][ T9229] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1985'. [ 213.644630][ T9229] device bond0 entered promiscuous mode [ 213.661055][ T9229] device bond_slave_1 entered promiscuous mode [ 213.668214][ T9229] bridge0: port 3(bond0) entered blocking state [ 213.703102][ T9229] bridge0: port 3(bond0) entered disabled state [ 213.726043][ T9232] FAULT_INJECTION: forcing a failure. [ 213.726043][ T9232] name failslab, interval 1, probability 0, space 0, times 0 [ 213.759062][ T9229] bridge0: port 3(bond0) entered blocking state [ 213.765497][ T9229] bridge0: port 3(bond0) entered forwarding state [ 213.774568][ T9232] CPU: 0 PID: 9232 Comm: syz.0.1989 Not tainted 5.15.173-syzkaller #0 [ 213.782774][ T9232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 213.792852][ T9232] Call Trace: [ 213.796154][ T9232] [ 213.799106][ T9232] dump_stack_lvl+0x1e3/0x2d0 [ 213.803827][ T9232] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 213.809476][ T9232] ? panic+0x860/0x860 [ 213.813568][ T9232] ? __might_sleep+0xc0/0xc0 [ 213.818183][ T9232] should_fail+0x38a/0x4c0 [ 213.822626][ T9232] should_failslab+0x5/0x20 [ 213.827161][ T9232] slab_pre_alloc_hook+0x53/0xc0 [ 213.832126][ T9232] __kmalloc+0x6e/0x300 [ 213.836298][ T9232] ? tomoyo_encode+0x26b/0x530 [ 213.841093][ T9232] tomoyo_encode+0x26b/0x530 [ 213.845788][ T9232] ? sock_free_inode+0x20/0x20 [ 213.850608][ T9232] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 213.856276][ T9232] tomoyo_path_number_perm+0x225/0x810 [ 213.861762][ T9232] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 213.867939][ T9232] ? lockdep_hardirqs_on+0x94/0x130 [ 213.873169][ T9232] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 213.879359][ T9232] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 213.884847][ T9232] ? __fget_files+0x388/0x480 [ 213.889579][ T9232] ? lock_release+0xa8/0x9a0 [ 213.894241][ T9232] ? __fget_files+0x413/0x480 [ 213.898954][ T9232] security_file_ioctl+0x6d/0xa0 [ 213.903922][ T9232] __se_sys_ioctl+0x47/0x160 [ 213.908522][ T9232] do_syscall_64+0x3b/0xb0 [ 213.912940][ T9232] ? clear_bhb_loop+0x15/0x70 [ 213.917624][ T9232] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.923525][ T9232] RIP: 0033:0x7ff95803d819 [ 213.927942][ T9232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.947643][ T9232] RSP: 002b:00007ff955eb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.956070][ T9232] RAX: ffffffffffffffda RBX: 00007ff9581f4fa0 RCX: 00007ff95803d819 [ 213.964045][ T9232] RDX: 0000000020000900 RSI: 0000000000008946 RDI: 0000000000000026 [ 213.972018][ T9232] RBP: 00007ff955eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 213.979990][ T9232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.987982][ T9232] R13: 0000000000000000 R14: 00007ff9581f4fa0 R15: 00007ffff0fd8a98 [ 213.995975][ T9232] [ 214.061977][ T9232] ERROR: Out of memory at tomoyo_realpath_from_path. [ 214.182973][ T9244] validate_nla: 1 callbacks suppressed [ 214.197263][ T9244] netlink: 'syz.4.1992': attribute type 25 has an invalid length. [ 214.215968][ T9245] netlink: 'syz.0.1995': attribute type 25 has an invalid length. [ 214.397760][ T9252] netlink: 'syz.3.1996': attribute type 10 has an invalid length. [ 214.418963][ T9252] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.427093][ T9252] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.456780][ T9252] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.464158][ T9252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.472927][ T9252] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.480114][ T9252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.537961][ T9252] team0: Port device bridge0 added [ 214.576849][ T9252] syz.3.1996 (9252) used greatest stack depth: 18544 bytes left [ 214.666339][ T9250] device syzkaller0 entered promiscuous mode [ 214.690594][ T9254] netlink: 'syz.2.1999': attribute type 25 has an invalid length. [ 214.727825][ T9258] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2000'. [ 214.948813][ T9272] netlink: 'syz.2.2005': attribute type 25 has an invalid length. [ 215.008558][ T9277] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.2007'. [ 215.097354][ T9280] netlink: 'syz.0.2009': attribute type 25 has an invalid length. [ 215.117759][ T9279] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.2008'. [ 215.151218][ T9275] delete_channel: no stack [ 215.342152][ T9283] device syzkaller0 entered promiscuous mode [ 215.371936][ T9290] netlink: 'syz.3.2011': attribute type 25 has an invalid length. [ 215.396095][ T9293] netlink: 'syz.0.2022': attribute type 25 has an invalid length. [ 215.639904][ T9299] FAULT_INJECTION: forcing a failure. [ 215.639904][ T9299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.656894][ T9299] CPU: 0 PID: 9299 Comm: syz.3.2014 Not tainted 5.15.173-syzkaller #0 [ 215.665083][ T9299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 215.675352][ T9299] Call Trace: [ 215.678653][ T9299] [ 215.681601][ T9299] dump_stack_lvl+0x1e3/0x2d0 [ 215.686319][ T9299] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 215.691989][ T9299] ? panic+0x860/0x860 [ 215.696089][ T9299] ? ___ratelimit+0xc1/0x670 [ 215.700714][ T9299] should_fail+0x38a/0x4c0 [ 215.705175][ T9299] _copy_from_user+0x2d/0x170 [ 215.709878][ T9299] sctp_setsockopt+0xc6/0x10d0 [ 215.714668][ T9299] ? sock_common_recvmsg+0x240/0x240 [ 215.719981][ T9299] __sys_setsockopt+0x57e/0x990 [ 215.724870][ T9299] ? __ia32_sys_recv+0xb0/0xb0 [ 215.729677][ T9299] ? syscall_enter_from_user_mode+0x2e/0x240 [ 215.735689][ T9299] __x64_sys_setsockopt+0xb1/0xc0 [ 215.740747][ T9299] do_syscall_64+0x3b/0xb0 [ 215.745190][ T9299] ? clear_bhb_loop+0x15/0x70 [ 215.749890][ T9299] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 215.755811][ T9299] RIP: 0033:0x7f6f26106819 [ 215.760248][ T9299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.779875][ T9299] RSP: 002b:00007f6f23f7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 215.788324][ T9299] RAX: ffffffffffffffda RBX: 00007f6f262bdfa0 RCX: 00007f6f26106819 [ 215.796330][ T9299] RDX: 0000000000000072 RSI: 0000000000000084 RDI: 0000000000000006 [ 215.804330][ T9299] RBP: 00007f6f23f7e090 R08: 000000000000000c R09: 0000000000000000 [ 215.812329][ T9299] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.820327][ T9299] R13: 0000000000000000 R14: 00007f6f262bdfa0 R15: 00007ffebd8bab38 [ 215.828434][ T9299] [ 215.969773][ T9304] FAULT_INJECTION: forcing a failure. [ 215.969773][ T9304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.983328][ T9304] CPU: 1 PID: 9304 Comm: syz.1.2018 Not tainted 5.15.173-syzkaller #0 [ 215.991516][ T9304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 216.001713][ T9304] Call Trace: [ 216.005020][ T9304] [ 216.007956][ T9304] dump_stack_lvl+0x1e3/0x2d0 [ 216.012652][ T9304] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 216.018309][ T9304] ? panic+0x860/0x860 [ 216.022396][ T9304] ? snprintf+0xd6/0x120 [ 216.026640][ T9304] should_fail+0x38a/0x4c0 [ 216.031059][ T9304] _copy_to_user+0x2d/0x130 [ 216.035558][ T9304] simple_read_from_buffer+0xc6/0x150 [ 216.041121][ T9304] proc_fail_nth_read+0x1a3/0x210 [ 216.046155][ T9304] ? proc_fault_inject_write+0x390/0x390 [ 216.051797][ T9304] ? fsnotify_perm+0x442/0x590 [ 216.056560][ T9304] ? proc_fault_inject_write+0x390/0x390 [ 216.062190][ T9304] vfs_read+0x2fc/0xe10 [ 216.066359][ T9304] ? kernel_read+0x1f0/0x1f0 [ 216.071051][ T9304] ? __fget_files+0x413/0x480 [ 216.075736][ T9304] ? mutex_lock_nested+0x17/0x20 [ 216.080786][ T9304] ? __fdget_pos+0x2cb/0x380 [ 216.085469][ T9304] ? ksys_read+0x77/0x2c0 [ 216.089817][ T9304] ksys_read+0x1a2/0x2c0 [ 216.094059][ T9304] ? print_irqtrace_events+0x210/0x210 [ 216.099516][ T9304] ? vfs_write+0xe50/0xe50 [ 216.103932][ T9304] ? syscall_enter_from_user_mode+0x2e/0x240 [ 216.109912][ T9304] ? lockdep_hardirqs_on+0x94/0x130 [ 216.115109][ T9304] ? syscall_enter_from_user_mode+0x2e/0x240 [ 216.121095][ T9304] do_syscall_64+0x3b/0xb0 [ 216.125512][ T9304] ? clear_bhb_loop+0x15/0x70 [ 216.130328][ T9304] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.136222][ T9304] RIP: 0033:0x7fe3df1f625c [ 216.140635][ T9304] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 216.160357][ T9304] RSP: 002b:00007fe3dd06f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.168777][ T9304] RAX: ffffffffffffffda RBX: 00007fe3df3aefa0 RCX: 00007fe3df1f625c [ 216.176750][ T9304] RDX: 000000000000000f RSI: 00007fe3dd06f0a0 RDI: 0000000000000003 [ 216.184807][ T9304] RBP: 00007fe3dd06f090 R08: 0000000000000000 R09: 0000000000000000 [ 216.192772][ T9304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.200739][ T9304] R13: 0000000000000001 R14: 00007fe3df3aefa0 R15: 00007ffce3b718b8 [ 216.208719][ T9304] [ 216.306268][ T9307] netlink: 'syz.2.2016': attribute type 25 has an invalid length. [ 216.367433][ T9312] netlink: 'syz.1.2021': attribute type 21 has an invalid length. [ 216.380283][ T9312] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2021'. [ 216.507827][ T9318] FAULT_INJECTION: forcing a failure. [ 216.507827][ T9318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.569168][ T9318] CPU: 1 PID: 9318 Comm: syz.2.2024 Not tainted 5.15.173-syzkaller #0 [ 216.577376][ T9318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 216.587463][ T9318] Call Trace: [ 216.590761][ T9318] [ 216.593710][ T9318] dump_stack_lvl+0x1e3/0x2d0 [ 216.598418][ T9318] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 216.604084][ T9318] ? panic+0x860/0x860 [ 216.608186][ T9318] ? validate_chain+0x112/0x5930 [ 216.613158][ T9318] should_fail+0x38a/0x4c0 [ 216.617608][ T9318] _copy_from_user+0x2d/0x170 [ 216.622313][ T9318] __copy_msghdr_from_user+0x587/0x7c0 [ 216.627817][ T9318] ? __ia32_sys_shutdown+0x60/0x60 [ 216.633017][ T9318] ___sys_sendmsg+0x166/0x2e0 [ 216.637731][ T9318] ? __sys_sendmsg+0x260/0x260 [ 216.642564][ T9318] ? __fdget+0x191/0x220 [ 216.646835][ T9318] __se_sys_sendmsg+0x19a/0x260 [ 216.651759][ T9318] ? __x64_sys_sendmsg+0x80/0x80 [ 216.656735][ T9318] ? syscall_enter_from_user_mode+0x2e/0x240 [ 216.662747][ T9318] ? lockdep_hardirqs_on+0x94/0x130 [ 216.667979][ T9318] ? syscall_enter_from_user_mode+0x2e/0x240 [ 216.674084][ T9318] do_syscall_64+0x3b/0xb0 [ 216.678529][ T9318] ? clear_bhb_loop+0x15/0x70 [ 216.683225][ T9318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.689146][ T9318] RIP: 0033:0x7f0aae5c8819 [ 216.693729][ T9318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.713660][ T9318] RSP: 002b:00007f0aac440038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.722106][ T9318] RAX: ffffffffffffffda RBX: 00007f0aae77ffa0 RCX: 00007f0aae5c8819 [ 216.730108][ T9318] RDX: 00000000200048b0 RSI: 0000000020000380 RDI: 0000000000000003 [ 216.738105][ T9318] RBP: 00007f0aac440090 R08: 0000000000000000 R09: 0000000000000000 [ 216.746098][ T9318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.754098][ T9318] R13: 0000000000000000 R14: 00007f0aae77ffa0 R15: 00007ffcb93559e8 [ 216.762114][ T9318] [ 216.971921][ T9332] device syzkaller0 entered promiscuous mode [ 217.115025][ T9344] FAULT_INJECTION: forcing a failure. [ 217.115025][ T9344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.119060][ T9336] device syzkaller0 entered promiscuous mode [ 217.150227][ T9344] CPU: 1 PID: 9344 Comm: syz.1.2034 Not tainted 5.15.173-syzkaller #0 [ 217.158431][ T9344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 217.168606][ T9344] Call Trace: [ 217.171901][ T9344] [ 217.174845][ T9344] dump_stack_lvl+0x1e3/0x2d0 [ 217.179553][ T9344] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 217.185216][ T9344] ? panic+0x860/0x860 [ 217.189321][ T9344] should_fail+0x38a/0x4c0 [ 217.193773][ T9344] _copy_from_user+0x2d/0x170 [ 217.198471][ T9344] iovec_from_user+0x13b/0x390 [ 217.203264][ T9344] __import_iovec+0x72/0x4b0 [ 217.207891][ T9344] import_iovec+0xe6/0x120 [ 217.212336][ T9344] ___sys_recvmsg+0x56b/0x690 [ 217.217050][ T9344] ? __sys_recvmsg+0x260/0x260 [ 217.221929][ T9344] ? __fdget+0x191/0x220 [ 217.226198][ T9344] __x64_sys_recvmsg+0x1dc/0x2b0 [ 217.231170][ T9344] ? ___sys_recvmsg+0x690/0x690 [ 217.236063][ T9344] ? syscall_enter_from_user_mode+0x2e/0x240 [ 217.242066][ T9344] ? lockdep_hardirqs_on+0x94/0x130 [ 217.247303][ T9344] ? syscall_enter_from_user_mode+0x2e/0x240 [ 217.253316][ T9344] do_syscall_64+0x3b/0xb0 [ 217.257757][ T9344] ? clear_bhb_loop+0x15/0x70 [ 217.262463][ T9344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.268386][ T9344] RIP: 0033:0x7fe3df1f7819 [ 217.272829][ T9344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.292463][ T9344] RSP: 002b:00007fe3dd04e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 217.300912][ T9344] RAX: ffffffffffffffda RBX: 00007fe3df3af080 RCX: 00007fe3df1f7819 [ 217.308912][ T9344] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 217.316914][ T9344] RBP: 00007fe3dd04e090 R08: 0000000000000000 R09: 0000000000000000 [ 217.324913][ T9344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.332911][ T9344] R13: 0000000000000001 R14: 00007fe3df3af080 R15: 00007ffce3b718b8 [ 217.341034][ T9344] [ 217.704495][ T9353] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2038'. [ 217.935754][ T9367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2044'. [ 217.960505][ T9367] device bond0 entered promiscuous mode [ 217.978580][ T9367] device bond_slave_0 entered promiscuous mode [ 218.030946][ T9367] device bond_slave_1 entered promiscuous mode [ 218.067906][ T9367] bridge0: port 3(bond0) entered blocking state [ 218.076456][ T9367] bridge0: port 3(bond0) entered disabled state [ 218.085607][ T9367] bridge0: port 3(bond0) entered blocking state [ 218.091942][ T9367] bridge0: port 3(bond0) entered forwarding state [ 218.190226][ T9373] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.197750][ T9373] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.289203][ T9373] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.296549][ T9373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.305555][ T9373] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.312664][ T9373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.357573][ T9373] team0: Port device bridge0 added [ 218.531785][ T9376] device syzkaller0 entered promiscuous mode [ 218.566546][ T9382] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.2048'. [ 218.689031][ T9395] device syzkaller0 entered promiscuous mode [ 218.718426][ T9394] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2053'. [ 218.895080][ T9389] device syzkaller0 entered promiscuous mode [ 218.913204][ T9402] FAULT_INJECTION: forcing a failure. [ 218.913204][ T9402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.934330][ T9402] CPU: 1 PID: 9402 Comm: syz.0.2055 Not tainted 5.15.173-syzkaller #0 [ 218.942540][ T9402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 218.952622][ T9402] Call Trace: [ 218.955926][ T9402] [ 218.958870][ T9402] dump_stack_lvl+0x1e3/0x2d0 [ 218.963576][ T9402] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 218.969241][ T9402] ? panic+0x860/0x860 [ 218.973401][ T9402] should_fail+0x38a/0x4c0 [ 218.977851][ T9402] _copy_from_user+0x2d/0x170 [ 218.982554][ T9402] iovec_from_user+0x13b/0x390 [ 218.987355][ T9402] __import_iovec+0x72/0x4b0 [ 218.991993][ T9402] import_iovec+0xe6/0x120 [ 218.996445][ T9402] ___sys_recvmsg+0x56b/0x690 [ 219.001158][ T9402] ? __sys_recvmsg+0x260/0x260 [ 219.006021][ T9402] ? __fdget+0x191/0x220 [ 219.010296][ T9402] __x64_sys_recvmsg+0x1dc/0x2b0 [ 219.015266][ T9402] ? ___sys_recvmsg+0x690/0x690 [ 219.020160][ T9402] ? syscall_enter_from_user_mode+0x2e/0x240 [ 219.026186][ T9402] ? lockdep_hardirqs_on+0x94/0x130 [ 219.031409][ T9402] ? syscall_enter_from_user_mode+0x2e/0x240 [ 219.037419][ T9402] do_syscall_64+0x3b/0xb0 [ 219.041854][ T9402] ? clear_bhb_loop+0x15/0x70 [ 219.046557][ T9402] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.052475][ T9402] RIP: 0033:0x7ff95803d819 [ 219.056911][ T9402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.076654][ T9402] RSP: 002b:00007ff955eb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 219.085097][ T9402] RAX: ffffffffffffffda RBX: 00007ff9581f4fa0 RCX: 00007ff95803d819 [ 219.093090][ T9402] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 219.101083][ T9402] RBP: 00007ff955eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 219.109072][ T9402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.117064][ T9402] R13: 0000000000000000 R14: 00007ff9581f4fa0 R15: 00007ffff0fd8a98 [ 219.125072][ T9402] [ 219.402844][ T9415] validate_nla: 20 callbacks suppressed [ 219.402864][ T9415] netlink: 'syz.3.2061': attribute type 10 has an invalid length. [ 219.463650][ T9415] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2061'. [ 219.534352][ T9419] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2063'. [ 219.550363][ T9419] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2063'. [ 219.602821][ T9419] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2063'. [ 219.632138][ T9419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.650244][ T9419] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2063'. [ 219.661887][ T9419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.676719][ T9422] netlink: 'syz.4.2064': attribute type 25 has an invalid length. [ 219.733342][ T9424] netlink: 'syz.3.2065': attribute type 21 has an invalid length. [ 219.741384][ T9424] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2065'. [ 219.792777][ T9429] netlink: 'syz.0.2066': attribute type 25 has an invalid length. [ 219.929739][ T9434] FAULT_INJECTION: forcing a failure. [ 219.929739][ T9434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.976724][ T9434] CPU: 0 PID: 9434 Comm: syz.2.2069 Not tainted 5.15.173-syzkaller #0 [ 219.976790][ T9437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.985015][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 219.985033][ T9434] Call Trace: [ 219.985042][ T9434] [ 219.985050][ T9434] dump_stack_lvl+0x1e3/0x2d0 [ 219.985082][ T9434] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 219.985104][ T9434] ? panic+0x860/0x860 [ 219.985136][ T9434] ? validate_chain+0x112/0x5930 [ 219.985164][ T9434] should_fail+0x38a/0x4c0 [ 219.985195][ T9434] _copy_from_user+0x2d/0x170 [ 219.985219][ T9434] iovec_from_user+0x13b/0x390 [ 219.985248][ T9434] __import_iovec+0x72/0x4b0 [ 219.985270][ T9434] ? __ia32_sys_shutdown+0x60/0x60 [ 219.985303][ T9434] import_iovec+0xe6/0x120 [ 220.019482][ T9437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.020443][ T9434] ___sys_sendmsg+0x215/0x2e0 [ 220.077683][ T9434] ? __sys_sendmsg+0x260/0x260 [ 220.082616][ T9434] ? __fdget+0x191/0x220 [ 220.086983][ T9434] __se_sys_sendmsg+0x19a/0x260 [ 220.092227][ T9434] ? __x64_sys_sendmsg+0x80/0x80 [ 220.097915][ T9434] ? syscall_enter_from_user_mode+0x2e/0x240 [ 220.104058][ T9434] ? lockdep_hardirqs_on+0x94/0x130 [ 220.110036][ T9434] ? syscall_enter_from_user_mode+0x2e/0x240 [ 220.116695][ T9434] do_syscall_64+0x3b/0xb0 [ 220.121940][ T9434] ? clear_bhb_loop+0x15/0x70 [ 220.127040][ T9434] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.133720][ T9434] RIP: 0033:0x7f0aae5c8819 [ 220.138696][ T9434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.159073][ T9434] RSP: 002b:00007f0aac440038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.168068][ T9434] RAX: ffffffffffffffda RBX: 00007f0aae77ffa0 RCX: 00007f0aae5c8819 [ 220.176400][ T9434] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 220.185117][ T9434] RBP: 00007f0aac440090 R08: 0000000000000000 R09: 0000000000000000 [ 220.195781][ T9434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.207040][ T9434] R13: 0000000000000000 R14: 00007f0aae77ffa0 R15: 00007ffcb93559e8 [ 220.216481][ T9434] [ 220.224586][ T9437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.232172][ T9437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.387667][ T9453] netlink: 'syz.2.2075': attribute type 10 has an invalid length. [ 220.397955][ T9453] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2075'. [ 220.508932][ T9454] IPv6: NLM_F_CREATE should be specified when creating new route [ 220.520890][ T9454] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2074'. [ 220.643928][ T9462] FAULT_INJECTION: forcing a failure. [ 220.643928][ T9462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.719923][ T9462] CPU: 0 PID: 9462 Comm: syz.4.2078 Not tainted 5.15.173-syzkaller #0 [ 220.728212][ T9462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 220.738290][ T9462] Call Trace: [ 220.741587][ T9462] [ 220.744535][ T9462] dump_stack_lvl+0x1e3/0x2d0 [ 220.749241][ T9462] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 220.755007][ T9462] ? panic+0x860/0x860 [ 220.759113][ T9462] ? validate_chain+0x112/0x5930 [ 220.764090][ T9462] ? validate_chain+0x112/0x5930 [ 220.769074][ T9462] should_fail+0x38a/0x4c0 [ 220.773528][ T9462] _copy_from_user+0x2d/0x170 [ 220.778238][ T9462] __copy_msghdr_from_user+0x587/0x7c0 [ 220.783743][ T9462] ? __ia32_sys_shutdown+0x60/0x60 [ 220.789003][ T9462] ___sys_sendmsg+0x166/0x2e0 [ 220.793703][ T9462] ? __sys_sendmsg+0x260/0x260 [ 220.798516][ T9462] ? __fdget+0x191/0x220 [ 220.802763][ T9462] __se_sys_sendmsg+0x19a/0x260 [ 220.807664][ T9462] ? __x64_sys_sendmsg+0x80/0x80 [ 220.812616][ T9462] ? syscall_enter_from_user_mode+0x2e/0x240 [ 220.818607][ T9462] ? lockdep_hardirqs_on+0x94/0x130 [ 220.823820][ T9462] ? syscall_enter_from_user_mode+0x2e/0x240 [ 220.829808][ T9462] do_syscall_64+0x3b/0xb0 [ 220.834222][ T9462] ? clear_bhb_loop+0x15/0x70 [ 220.838951][ T9462] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.844845][ T9462] RIP: 0033:0x7f21a6701819 [ 220.849263][ T9462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.868863][ T9462] RSP: 002b:00007f21a4579038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.877290][ T9462] RAX: ffffffffffffffda RBX: 00007f21a68b8fa0 RCX: 00007f21a6701819 [ 220.885265][ T9462] RDX: 0000000000000000 RSI: 0000000020001180 RDI: 0000000000000004 [ 220.893233][ T9462] RBP: 00007f21a4579090 R08: 0000000000000000 R09: 0000000000000000 [ 220.901223][ T9462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.909187][ T9462] R13: 0000000000000000 R14: 00007f21a68b8fa0 R15: 00007ffe59a61aa8 [ 220.917171][ T9462] [ 221.056938][ T9461] device syzkaller0 entered promiscuous mode [ 221.142348][ T9474] netlink: 'syz.2.2083': attribute type 21 has an invalid length. [ 221.219913][ T9477] netlink: 'syz.4.2085': attribute type 25 has an invalid length. [ 222.193468][ T9492] device syzkaller0 entered promiscuous mode [ 222.212463][ T3546] udevd[3546]: worker [4159] terminated by signal 33 (Unknown signal 33) [ 222.331737][ T3546] udevd[3546]: worker [4159] failed while handling '/devices/virtual/block/loop1' [ 222.539934][ T9513] netlink: 'syz.3.2097': attribute type 21 has an invalid length. [ 222.617702][ T9518] syz.1.2098 uses obsolete (PF_INET,SOCK_PACKET) [ 222.637376][ T9516] FAULT_INJECTION: forcing a failure. [ 222.637376][ T9516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.643989][ T9518] netlink: 'syz.1.2098': attribute type 1 has an invalid length. [ 222.683274][ T9516] CPU: 1 PID: 9516 Comm: syz.2.2099 Not tainted 5.15.173-syzkaller #0 [ 222.691481][ T9516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 222.701557][ T9516] Call Trace: [ 222.704855][ T9516] [ 222.707800][ T9516] dump_stack_lvl+0x1e3/0x2d0 [ 222.712503][ T9516] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 222.718699][ T9516] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 222.724368][ T9516] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 222.730723][ T9516] ? __wake_up_klogd+0xcc/0x100 [ 222.735615][ T9516] should_fail+0x38a/0x4c0 [ 222.740240][ T9516] _copy_from_user+0x2d/0x170 [ 222.744942][ T9516] iovec_from_user+0x13b/0x390 [ 222.749746][ T9516] __import_iovec+0x72/0x4b0 [ 222.754362][ T9516] ? __ia32_sys_shutdown+0x60/0x60 [ 222.759508][ T9516] import_iovec+0xe6/0x120 [ 222.763949][ T9516] ___sys_sendmsg+0x215/0x2e0 [ 222.768660][ T9516] ? __sys_sendmsg+0x260/0x260 [ 222.773529][ T9516] ? __fdget+0x191/0x220 [ 222.777798][ T9516] __se_sys_sendmsg+0x19a/0x260 [ 222.782675][ T9516] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 222.788858][ T9516] ? __x64_sys_sendmsg+0x80/0x80 [ 222.793829][ T9516] ? syscall_enter_from_user_mode+0x37/0x240 [ 222.799861][ T9516] ? syscall_enter_from_user_mode+0x2e/0x240 [ 222.805898][ T9516] do_syscall_64+0x3b/0xb0 [ 222.810336][ T9516] ? clear_bhb_loop+0x15/0x70 [ 222.815067][ T9516] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 222.820983][ T9516] RIP: 0033:0x7f0aae5c8819 [ 222.825413][ T9516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.845032][ T9516] RSP: 002b:00007f0aac440038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.853651][ T9516] RAX: ffffffffffffffda RBX: 00007f0aae77ffa0 RCX: 00007f0aae5c8819 [ 222.861644][ T9516] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000009 [ 222.869645][ T9516] RBP: 00007f0aac440090 R08: 0000000000000000 R09: 0000000000000000 [ 222.877633][ T9516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.885626][ T9516] R13: 0000000000000000 R14: 00007f0aae77ffa0 R15: 00007ffcb93559e8 [ 222.893638][ T9516] [ 223.168549][ T9535] FAULT_INJECTION: forcing a failure. [ 223.168549][ T9535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.205458][ T9538] netlink: 'syz.4.2107': attribute type 10 has an invalid length. [ 223.241000][ T9535] CPU: 1 PID: 9535 Comm: syz.3.2106 Not tainted 5.15.173-syzkaller #0 [ 223.249209][ T9535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 223.259281][ T9535] Call Trace: [ 223.262663][ T9535] [ 223.265607][ T9535] dump_stack_lvl+0x1e3/0x2d0 [ 223.270326][ T9535] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 223.276682][ T9535] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 223.282343][ T9535] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 223.288521][ T9535] ? __wake_up_klogd+0xcc/0x100 [ 223.293397][ T9535] should_fail+0x38a/0x4c0 [ 223.297826][ T9535] _copy_from_user+0x2d/0x170 [ 223.302508][ T9535] iovec_from_user+0x13b/0x390 [ 223.307282][ T9535] __import_iovec+0x72/0x4b0 [ 223.311874][ T9535] ? __ia32_sys_shutdown+0x60/0x60 [ 223.316990][ T9535] import_iovec+0xe6/0x120 [ 223.321413][ T9535] ___sys_sendmsg+0x215/0x2e0 [ 223.326091][ T9535] ? __sys_sendmsg+0x260/0x260 [ 223.330882][ T9535] ? __fdget+0x191/0x220 [ 223.335122][ T9535] __se_sys_sendmsg+0x19a/0x260 [ 223.339972][ T9535] ? __x64_sys_sendmsg+0x80/0x80 [ 223.344920][ T9535] ? syscall_enter_from_user_mode+0x2e/0x240 [ 223.350901][ T9535] ? lockdep_hardirqs_on+0x94/0x130 [ 223.356100][ T9535] ? syscall_enter_from_user_mode+0x2e/0x240 [ 223.362081][ T9535] do_syscall_64+0x3b/0xb0 [ 223.366491][ T9535] ? clear_bhb_loop+0x15/0x70 [ 223.371170][ T9535] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.377062][ T9535] RIP: 0033:0x7f6f26106819 [ 223.381476][ T9535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.401077][ T9535] RSP: 002b:00007f6f23f7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.409490][ T9535] RAX: ffffffffffffffda RBX: 00007f6f262bdfa0 RCX: 00007f6f26106819 [ 223.417475][ T9535] RDX: 0000000000000000 RSI: 0000000020002080 RDI: 0000000000000005 [ 223.425438][ T9535] RBP: 00007f6f23f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 223.433432][ T9535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.441402][ T9535] R13: 0000000000000000 R14: 00007f6f262bdfa0 R15: 00007ffebd8bab38 [ 223.449566][ T9535] [ 223.480800][ T9538] team0: Device ipvlan1 failed to register rx_handler [ 223.623482][ T9538] syz.4.2107 (9538) used greatest stack depth: 18200 bytes left [ 223.670359][ T9548] __nla_validate_parse: 3 callbacks suppressed [ 223.670400][ T9548] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2111'. [ 223.712249][ T9548] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2111'. [ 223.759619][ T9548] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2111'. [ 223.780258][ T9548] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2111'. [ 223.840564][ T9553] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2113'. [ 223.925704][ T9551] netlink: 12286 bytes leftover after parsing attributes in process `syz.0.2112'. [ 223.943793][ T9563] FAULT_INJECTION: forcing a failure. [ 223.943793][ T9563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.994535][ T9563] CPU: 0 PID: 9563 Comm: syz.2.2116 Not tainted 5.15.173-syzkaller #0 [ 224.002868][ T9563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 224.012959][ T9563] Call Trace: [ 224.016260][ T9563] [ 224.019211][ T9563] dump_stack_lvl+0x1e3/0x2d0 [ 224.023964][ T9563] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 224.029627][ T9563] ? panic+0x860/0x860 [ 224.033730][ T9563] ? validate_chain+0x112/0x5930 [ 224.038693][ T9563] ? validate_chain+0x112/0x5930 [ 224.043663][ T9563] should_fail+0x38a/0x4c0 [ 224.048116][ T9563] _copy_from_user+0x2d/0x170 [ 224.052815][ T9563] iovec_from_user+0x13b/0x390 [ 224.057596][ T9563] __import_iovec+0x72/0x4b0 [ 224.062194][ T9563] ? __ia32_sys_shutdown+0x60/0x60 [ 224.067322][ T9563] import_iovec+0xe6/0x120 [ 224.071751][ T9563] ___sys_sendmsg+0x215/0x2e0 [ 224.076442][ T9563] ? __sys_sendmsg+0x260/0x260 [ 224.081245][ T9563] ? __fdget+0x191/0x220 [ 224.085492][ T9563] __se_sys_sendmsg+0x19a/0x260 [ 224.090348][ T9563] ? __x64_sys_sendmsg+0x80/0x80 [ 224.095293][ T9563] ? syscall_enter_from_user_mode+0x2e/0x240 [ 224.101276][ T9563] ? lockdep_hardirqs_on+0x94/0x130 [ 224.106489][ T9563] ? syscall_enter_from_user_mode+0x2e/0x240 [ 224.112473][ T9563] do_syscall_64+0x3b/0xb0 [ 224.116887][ T9563] ? clear_bhb_loop+0x15/0x70 [ 224.121565][ T9563] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.127559][ T9563] RIP: 0033:0x7f0aae5c8819 [ 224.131974][ T9563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.151581][ T9563] RSP: 002b:00007f0aac440038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.160003][ T9563] RAX: ffffffffffffffda RBX: 00007f0aae77ffa0 RCX: 00007f0aae5c8819 [ 224.167974][ T9563] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 224.175972][ T9563] RBP: 00007f0aac440090 R08: 0000000000000000 R09: 0000000000000000 [ 224.183942][ T9563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.191921][ T9563] R13: 0000000000000000 R14: 00007f0aae77ffa0 R15: 00007ffcb93559e8 [ 224.199918][ T9563] [ 224.342350][ T9554] device syzkaller0 entered promiscuous mode [ 224.372985][ T9573] FAULT_INJECTION: forcing a failure. [ 224.372985][ T9573] name failslab, interval 1, probability 0, space 0, times 0 [ 224.400661][ T9573] CPU: 1 PID: 9573 Comm: syz.2.2120 Not tainted 5.15.173-syzkaller #0 [ 224.408866][ T9573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 224.418943][ T9573] Call Trace: [ 224.422257][ T9573] [ 224.425208][ T9573] dump_stack_lvl+0x1e3/0x2d0 [ 224.429918][ T9573] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 224.435590][ T9573] ? panic+0x860/0x860 [ 224.439703][ T9573] ? __might_sleep+0xc0/0xc0 [ 224.444330][ T9573] should_fail+0x38a/0x4c0 [ 224.448787][ T9573] should_failslab+0x5/0x20 [ 224.453318][ T9573] slab_pre_alloc_hook+0x53/0xc0 [ 224.458289][ T9573] kmem_cache_alloc_node_trace+0x4e/0x2e0 [ 224.464032][ T9573] ? __get_vm_area_node+0x11f/0x2f0 [ 224.469505][ T9573] __get_vm_area_node+0x11f/0x2f0 [ 224.474542][ T9573] ? __lock_acquire+0x1ff0/0x1ff0 [ 224.479579][ T9573] __vmalloc_node_range+0xe3/0x8c0 [ 224.484708][ T9573] ? copy_process+0x5eb/0x3ef0 [ 224.489480][ T9573] ? rcu_is_watching+0x11/0xa0 [ 224.494248][ T9573] ? kmem_cache_alloc_node+0x154/0x2c0 [ 224.499716][ T9573] dup_task_struct+0x428/0xb60 [ 224.504484][ T9573] ? copy_process+0x5eb/0x3ef0 [ 224.509245][ T9573] ? _raw_spin_unlock_irq+0x1f/0x40 [ 224.514457][ T9573] ? lockdep_hardirqs_on+0x94/0x130 [ 224.519656][ T9573] copy_process+0x5eb/0x3ef0 [ 224.524238][ T9573] ? perf_trace_lock+0x37f/0x440 [ 224.529183][ T9573] ? rcu_lock_release+0x5/0x20 [ 224.533946][ T9573] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 224.539834][ T9573] ? trace_event_raw_event_lock+0x250/0x250 [ 224.545733][ T9573] ? perf_trace_run_bpf_submit+0x12c/0x1d0 [ 224.551544][ T9573] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 224.556663][ T9573] kernel_clone+0x210/0x960 [ 224.561173][ T9573] ? create_io_thread+0x1e0/0x1e0 [ 224.566220][ T9573] ? read_lock_is_recursive+0x10/0x10 [ 224.571610][ T9573] ? __context_tracking_exit+0x4c/0x80 [ 224.577099][ T9573] __x64_sys_clone+0x23f/0x290 [ 224.581875][ T9573] ? __do_sys_vfork+0x130/0x130 [ 224.586823][ T9573] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 224.593511][ T9573] ? syscall_enter_from_user_mode+0x2e/0x240 [ 224.599494][ T9573] ? lockdep_hardirqs_on+0x94/0x130 [ 224.604689][ T9573] ? syscall_enter_from_user_mode+0x2e/0x240 [ 224.610678][ T9573] do_syscall_64+0x3b/0xb0 [ 224.615090][ T9573] ? clear_bhb_loop+0x15/0x70 [ 224.619854][ T9573] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.625751][ T9573] RIP: 0033:0x7f0aae5c8819 [ 224.630165][ T9573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.649914][ T9573] RSP: 002b:00007f0aac43ffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 224.658327][ T9573] RAX: ffffffffffffffda RBX: 00007f0aae77ffa0 RCX: 00007f0aae5c8819 [ 224.666298][ T9573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040020000 [ 224.674265][ T9573] RBP: 00007f0aac440090 R08: 0000000000000000 R09: 0000000000000000 [ 224.682234][ T9573] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 224.690200][ T9573] R13: 0000000000000001 R14: 00007f0aae77ffa0 R15: 00007ffcb93559e8 [ 224.698188][ T9573] [ 224.708178][ T9573] syz.2.2120: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 224.724541][ T9573] CPU: 0 PID: 9573 Comm: syz.2.2120 Not tainted 5.15.173-syzkaller #0 [ 224.732727][ T9573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 224.742781][ T9573] Call Trace: [ 224.746059][ T9573] [ 224.748984][ T9573] dump_stack_lvl+0x1e3/0x2d0 [ 224.753667][ T9573] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 224.759297][ T9573] ? panic+0x860/0x860 [ 224.763377][ T9573] warn_alloc+0x278/0x3f0 [ 224.767712][ T9573] ? zone_watermark_ok_safe+0x280/0x280 [ 224.773255][ T9573] ? kmem_cache_alloc_node_trace+0x171/0x2e0 [ 224.779234][ T9573] ? __get_vm_area_node+0x11f/0x2f0 [ 224.784443][ T9573] ? __get_vm_area_node+0x2d6/0x2f0 [ 224.789645][ T9573] ? __lock_acquire+0x1ff0/0x1ff0 [ 224.794673][ T9573] __vmalloc_node_range+0x2b9/0x8c0 [ 224.799878][ T9573] ? rcu_is_watching+0x11/0xa0 [ 224.804642][ T9573] ? kmem_cache_alloc_node+0x154/0x2c0 [ 224.810110][ T9573] dup_task_struct+0x428/0xb60 [ 224.814875][ T9573] ? copy_process+0x5eb/0x3ef0 [ 224.819636][ T9573] ? _raw_spin_unlock_irq+0x1f/0x40 [ 224.824834][ T9573] ? lockdep_hardirqs_on+0x94/0x130 [ 224.830032][ T9573] copy_process+0x5eb/0x3ef0 [ 224.834621][ T9573] ? perf_trace_lock+0x37f/0x440 [ 224.839558][ T9573] ? rcu_lock_release+0x5/0x20 [ 224.844328][ T9573] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 224.850218][ T9573] ? trace_event_raw_event_lock+0x250/0x250 [ 224.856127][ T9573] ? perf_trace_run_bpf_submit+0x12c/0x1d0 [ 224.861936][ T9573] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 224.867050][ T9573] kernel_clone+0x210/0x960 [ 224.871553][ T9573] ? create_io_thread+0x1e0/0x1e0 [ 224.876607][ T9573] ? read_lock_is_recursive+0x10/0x10 [ 224.881989][ T9573] ? __context_tracking_exit+0x4c/0x80 [ 224.887452][ T9573] __x64_sys_clone+0x23f/0x290 [ 224.892214][ T9573] ? __do_sys_vfork+0x130/0x130 [ 224.897056][ T9573] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 224.903041][ T9573] ? syscall_enter_from_user_mode+0x2e/0x240 [ 224.909020][ T9573] ? lockdep_hardirqs_on+0x94/0x130 [ 224.914217][ T9573] ? syscall_enter_from_user_mode+0x2e/0x240 [ 224.920199][ T9573] do_syscall_64+0x3b/0xb0 [ 224.924609][ T9573] ? clear_bhb_loop+0x15/0x70 [ 224.929282][ T9573] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.935172][ T9573] RIP: 0033:0x7f0aae5c8819 [ 224.939585][ T9573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.959274][ T9573] RSP: 002b:00007f0aac43ffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 224.967689][ T9573] RAX: ffffffffffffffda RBX: 00007f0aae77ffa0 RCX: 00007f0aae5c8819 [ 224.975660][ T9573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040020000 [ 224.983662][ T9573] RBP: 00007f0aac440090 R08: 0000000000000000 R09: 0000000000000000 [ 224.991733][ T9573] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 224.999716][ T9573] R13: 0000000000000001 R14: 00007f0aae77ffa0 R15: 00007ffcb93559e8 [ 225.007706][ T9573] [ 225.029132][ T9573] Mem-Info: [ 225.032388][ T9573] active_anon:346 inactive_anon:4242 isolated_anon:0 [ 225.032388][ T9573] active_file:17323 inactive_file:37871 isolated_file:0 [ 225.032388][ T9573] unevictable:768 dirty:522 writeback:0 [ 225.032388][ T9573] slab_reclaimable:20237 slab_unreclaimable:95276 [ 225.032388][ T9573] mapped:29336 shmem:1751 pagetables:593 bounce:0 [ 225.032388][ T9573] kernel_misc_reclaimable:0 [ 225.032388][ T9573] free:1378747 free_pcp:11194 free_cma:0 [ 225.074367][ T9573] Node 0 active_anon:1376kB inactive_anon:16452kB active_file:69220kB inactive_file:151484kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117344kB dirty:2088kB writeback:0kB shmem:4944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10192kB pagetables:2372kB all_unreclaimable? no [ 225.111478][ T9573] Node 1 active_anon:8kB inactive_anon:516kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 225.153460][ T9573] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 225.190061][ T9573] lowmem_reserve[]: 0 2533 2533 2533 2533 [ 225.206432][ T9573] Node 0 DMA32 free:1581456kB min:34736kB low:43420kB high:52104kB reserved_highatomic:0KB active_anon:1376kB inactive_anon:16552kB active_file:69220kB inactive_file:151484kB unevictable:1536kB writepending:2088kB present:3129332kB managed:2600784kB mlocked:0kB bounce:0kB free_pcp:41936kB local_pcp:20876kB free_cma:0kB [ 225.245796][ T9573] lowmem_reserve[]: 0 0 0 0 0 [ 225.250703][ T9573] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 225.306803][ T9573] lowmem_reserve[]: 0 0 0 0 0 [ 225.321277][ T9573] Node 1 Normal free:3918172kB min:55164kB low:68952kB high:82740kB reserved_highatomic:0KB active_anon:8kB inactive_anon:516kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:2140kB local_pcp:0kB free_cma:0kB [ 225.355884][ T9573] lowmem_reserve[]: 0 0 0 0 0 [ 225.366951][ T9573] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 225.400789][ T9573] Node 0 DMA32: 1702*4kB (UM) 1346*8kB (UME) 384*16kB (UME) 905*32kB (UME) 620*64kB (UME) 258*128kB (UME) 111*256kB (UM) 40*512kB (UME) 13*1024kB (UM) 4*2048kB (UM) 339*4096kB (M) = 1584328kB [ 225.487621][ T9573] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 225.537445][ T9573] Node 1 Normal: 215*4kB (UME) 40*8kB (UME) 26*16kB (UME) 185*32kB (UME) 84*64kB (UME) 28*128kB (UME) 9*256kB (UME) 2*512kB (U) 1*1024kB (U) 3*2048kB (UME) 950*4096kB (M) = 3918172kB [ 225.593495][ T9573] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 225.606025][ T9573] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 225.616587][ T9573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 225.627970][ T9573] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 225.657532][ T9573] 56895 total pagecache pages [ 225.662588][ T9573] 0 pages in swap cache [ 225.667506][ T9573] Swap cache stats: add 0, delete 0, find 0/0 [ 225.674373][ T9573] Free swap = 124996kB [ 225.700094][ T9573] Total swap = 124996kB [ 225.713294][ T9573] 2097051 pages RAM [ 225.721708][ T9573] 0 pages HighMem/MovableOnly [ 225.733279][ T9573] 413097 pages reserved [ 225.753416][ T9573] 0 pages cma reserved [ 225.967235][ T9609] validate_nla: 2 callbacks suppressed [ 225.967274][ T9609] netlink: 'syz.2.2132': attribute type 25 has an invalid length. [ 225.983794][ T3546] udevd[3546]: worker [4184] terminated by signal 33 (Unknown signal 33) [ 225.992895][ T3546] udevd[3546]: worker [4184] failed while handling '/devices/virtual/block/loop3' [ 226.358317][ T9619] device syzkaller0 entered promiscuous mode [ 226.429805][ T9627] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.2136'. [ 226.626202][ T9641] FAULT_INJECTION: forcing a failure. [ 226.626202][ T9641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.709258][ T9641] CPU: 1 PID: 9641 Comm: syz.3.2146 Not tainted 5.15.173-syzkaller #0 [ 226.717480][ T9641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 226.727563][ T9641] Call Trace: [ 226.730866][ T9641] [ 226.733817][ T9641] dump_stack_lvl+0x1e3/0x2d0 [ 226.738519][ T9641] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 226.744182][ T9641] ? panic+0x860/0x860 [ 226.748277][ T9641] ? __lock_acquire+0x1ff0/0x1ff0 [ 226.753323][ T9641] should_fail+0x38a/0x4c0 [ 226.757773][ T9641] _copy_from_iter+0x243/0xe90 [ 226.762573][ T9641] ? copy_mc_pipe_to_iter+0x760/0x760 [ 226.767972][ T9641] ? __virt_addr_valid+0x3bb/0x460 [ 226.773104][ T9641] ? 0xffffffff81000000 [ 226.777266][ T9641] ? __check_object_size+0x300/0x410 [ 226.782575][ T9641] kernfs_fop_write_iter+0x1a6/0x4f0 [ 226.787884][ T9641] vfs_write+0xacd/0xe50 [ 226.792152][ T9641] ? file_end_write+0x250/0x250 [ 226.797027][ T9641] ? __fget_files+0x413/0x480 [ 226.801731][ T9641] ? mutex_lock_nested+0x17/0x20 [ 226.806689][ T9641] ? __fdget_pos+0x2cb/0x380 [ 226.811291][ T9641] ? ksys_write+0x77/0x2c0 [ 226.815733][ T9641] ksys_write+0x1a2/0x2c0 [ 226.820080][ T9641] ? print_irqtrace_events+0x210/0x210 [ 226.825556][ T9641] ? __ia32_sys_read+0x80/0x80 [ 226.830342][ T9641] ? syscall_enter_from_user_mode+0x2e/0x240 [ 226.836343][ T9641] ? lockdep_hardirqs_on+0x94/0x130 [ 226.841564][ T9641] ? syscall_enter_from_user_mode+0x2e/0x240 [ 226.847566][ T9641] do_syscall_64+0x3b/0xb0 [ 226.851996][ T9641] ? clear_bhb_loop+0x15/0x70 [ 226.856697][ T9641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 226.862612][ T9641] RIP: 0033:0x7f6f26106819 [ 226.867045][ T9641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.886850][ T9641] RSP: 002b:00007f6f23f7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 226.895287][ T9641] RAX: ffffffffffffffda RBX: 00007f6f262bdfa0 RCX: 00007f6f26106819 [ 226.903299][ T9641] RDX: 0000000000000012 RSI: 0000000020000880 RDI: 0000000000000006 [ 226.911296][ T9641] RBP: 00007f6f23f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 226.919299][ T9641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.927304][ T9641] R13: 0000000000000000 R14: 00007f6f262bdfa0 R15: 00007ffebd8bab38 [ 226.935319][ T9641] [ 227.224587][ T9654] netlink: 'syz.3.2150': attribute type 25 has an invalid length. [ 227.533870][ T9674] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.2157'. [ 227.628338][ T9674] netlink: 'syz.4.2157': attribute type 1 has an invalid length. [ 227.647727][ T9674] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.2157'. [ 228.346118][ T9679] device syzkaller0 entered promiscuous mode [ 228.383182][ T9688] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.2159'. [ 228.896775][ T9706] netlink: 'syz.0.2166': attribute type 1 has an invalid length. [ 228.922177][ T9706] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2166'. [ 229.147158][ T9710] device syzkaller0 entered promiscuous mode [ 229.171747][ T9713] netlink: 'syz.1.2169': attribute type 25 has an invalid length. [ 229.192015][ T9717] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.2179'. [ 229.231766][ T9724] FAULT_INJECTION: forcing a failure. [ 229.231766][ T9724] name failslab, interval 1, probability 0, space 0, times 0 [ 229.236416][ T9725] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.2174'. [ 229.248723][ T9724] CPU: 0 PID: 9724 Comm: syz.0.2173 Not tainted 5.15.173-syzkaller #0 [ 229.262066][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 229.272139][ T9724] Call Trace: [ 229.275455][ T9724] [ 229.278388][ T9724] dump_stack_lvl+0x1e3/0x2d0 [ 229.283088][ T9724] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 229.288722][ T9724] ? panic+0x860/0x860 [ 229.292802][ T9724] should_fail+0x38a/0x4c0 [ 229.297226][ T9724] should_failslab+0x5/0x20 [ 229.301753][ T9724] slab_pre_alloc_hook+0x53/0xc0 [ 229.306701][ T9724] __kmalloc_node+0x71/0x390 [ 229.311291][ T9724] ? kvmalloc_node+0x80/0x140 [ 229.315977][ T9724] kvmalloc_node+0x80/0x140 [ 229.320613][ T9724] generic_map_update_batch+0x3c8/0x8b0 [ 229.326171][ T9724] ? __fget_files+0x413/0x480 [ 229.330852][ T9724] ? rcu_read_unlock+0x90/0x90 [ 229.335714][ T9724] ? __fdget+0x191/0x220 [ 229.339985][ T9724] ? rcu_read_unlock+0x90/0x90 [ 229.344753][ T9724] bpf_map_do_batch+0x4d0/0x620 [ 229.349604][ T9724] __sys_bpf+0x55c/0x670 [ 229.353851][ T9724] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 229.359244][ T9724] ? syscall_enter_from_user_mode+0x2e/0x240 [ 229.365239][ T9724] ? lockdep_hardirqs_on+0x94/0x130 [ 229.370460][ T9724] __x64_sys_bpf+0x78/0x90 [ 229.374973][ T9724] do_syscall_64+0x3b/0xb0 [ 229.379479][ T9724] ? clear_bhb_loop+0x15/0x70 [ 229.384151][ T9724] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.390045][ T9724] RIP: 0033:0x7ff95803d819 [ 229.394462][ T9724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.414089][ T9724] RSP: 002b:00007ff955eb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.422510][ T9724] RAX: ffffffffffffffda RBX: 00007ff9581f4fa0 RCX: 00007ff95803d819 [ 229.430609][ T9724] RDX: 0000000000000038 RSI: 0000000020000500 RDI: 000000000000001a [ 229.438611][ T9724] RBP: 00007ff955eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 229.446597][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.454568][ T9724] R13: 0000000000000000 R14: 00007ff9581f4fa0 R15: 00007ffff0fd8a98 [ 229.462555][ T9724] [ 229.500502][ T9729] netlink: 'syz.3.2174': attribute type 1 has an invalid length. [ 229.535127][ T9729] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.2174'. [ 229.619514][ T9721] netlink: 'syz.4.2172': attribute type 25 has an invalid length. [ 229.762248][ T9736] netlink: 105084 bytes leftover after parsing attributes in process `syz.4.2181'. [ 230.000406][ T9750] netlink: 'syz.0.2187': attribute type 25 has an invalid length. [ 230.022478][ T9748] netlink: 'syz.3.2186': attribute type 1 has an invalid length. [ 230.042678][ T9748] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2186'. [ 230.201336][ T9761] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.2191'. [ 230.256698][ C1] ------------[ cut here ]------------ [ 230.262259][ C1] WARNING: CPU: 1 PID: 9763 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 230.271859][ C1] Modules linked in: [ 230.275833][ C1] CPU: 1 PID: 9763 Comm: syz.3.2192 Not tainted 5.15.173-syzkaller #0 [ 230.284064][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 230.294562][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 230.300881][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 cb c6 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b4 c6 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 230.304223][ T9761] netlink: 'syz.0.2191': attribute type 1 has an invalid length. [ 230.320679][ C1] RSP: 0018:ffffc90000dd0690 EFLAGS: 00010246 [ 230.320726][ C1] RAX: ffffffff81aaacec RBX: 0000000000000000 RCX: ffff8880249b9dc0 [ 230.320743][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.320756][ C1] RBP: dffffc0000000000 R08: ffffffff81aaabfd R09: ffffed10049373b9 [ 230.320772][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 230.320785][ C1] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000dd0708 [ 230.320800][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 230.320817][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.320833][ C1] CR2: 00007ff955e93f98 CR3: 0000000064134000 CR4: 00000000003506e0 [ 230.378732][ T9761] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2191'. [ 230.384106][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 230.384129][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 230.384145][ C1] Call Trace: [ 230.384155][ C1] [ 230.384165][ C1] ? __warn+0x15b/0x300 [ 230.384196][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 230.384218][ C1] ? report_bug+0x1b7/0x2e0 [ 230.384249][ C1] ? handle_bug+0x3d/0x70 [ 230.384271][ C1] ? exc_invalid_op+0x16/0x40 [ 230.384294][ C1] ? asm_exc_invalid_op+0x16/0x20 [ 230.384326][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 230.384344][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 230.384368][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 230.476280][ C1] bpf_probe_read_compat+0xe4/0x180 [ 230.481559][ C1] ? bpf_trace_run4+0x1ea/0x390 [ 230.486517][ C1] ? bpf_trace_run3+0x380/0x380 [ 230.491415][ C1] ? __bpf_trace_mm_page_alloc+0xba/0xe0 [ 230.497153][ C1] ? __alloc_pages+0x6e0/0x700 [ 230.501968][ C1] ? __rmqueue_pcplist+0x23a0/0x23a0 [ 230.507382][ C1] ? virtqueue_add_inbuf_ctx+0xc4/0x110 [ 230.513162][ C1] ? alloc_pages+0x458/0x570 [ 230.517805][ C1] ? skb_page_frag_refill+0x220/0x4b0 [ 230.523262][ C1] ? try_fill_recv+0x49d/0x17d0 [ 230.528170][ C1] ? virtnet_poll+0x83a/0x1260 [ 230.533117][ C1] ? refill_work+0x220/0x220 [ 230.537729][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 230.542873][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 230.548972][ C1] ? __napi_poll+0xc7/0x440 [ 230.553543][ C1] ? net_rx_action+0x617/0xda0 [ 230.558358][ C1] ? net_tx_action+0x8e0/0x8e0 [ 230.563481][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 230.569525][ C1] ? handle_softirqs+0x3a7/0x930 [ 230.574696][ C1] ? __irq_exit_rcu+0x157/0x240 [ 230.579593][ C1] ? do_softirq+0x240/0x240 [ 230.582350][ T9765] device syzkaller0 entered promiscuous mode [ 230.584184][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 230.584222][ C1] ? __irq_exit_rcu+0x157/0x240 [ 230.584244][ C1] ? irq_exit_rcu+0x20/0x20 [ 230.584279][ C1] ? irq_exit_rcu+0x5/0x20 [ 230.584298][ C1] ? common_interrupt+0xb3/0xd0 [ 230.584322][ C1] [ 230.617195][ C1] [ 230.620147][ C1] ? asm_common_interrupt+0x22/0x40 [ 230.625460][ C1] ? lock_is_held_type+0x137/0x180 [ 230.630708][ C1] ? ___might_sleep+0xf1/0x6a0 [ 230.635616][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 230.640664][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 230.645798][ C1] ? __might_sleep+0xc0/0xc0 [ 230.650440][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 230.655767][ C1] ? unmap_page_range+0x223e/0x2630 [ 230.661045][ C1] ? mmu_notifier_invalidate_range_end+0xf0/0xf0 [ 230.668013][ C1] ? __pagevec_lru_add+0x1584/0x18d0 [ 230.673396][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 230.678501][ C1] ? uprobe_munmap+0x17a/0x400 [ 230.683384][ C1] ? unmap_single_vma+0x1a1/0x2d0 [ 230.688459][ C1] ? unmap_vmas+0x1f8/0x390 [ 230.693061][ C1] ? unmap_page_range+0x2630/0x2630 [ 230.698363][ C1] ? tlb_gather_mmu_fullmm+0x159/0x200 [ 230.704095][ C1] ? exit_mmap+0x3b6/0x670 [ 230.708553][ C1] ? vm_brk+0x20/0x20 [ 230.712589][ C1] ? uprobe_clear_state+0x304/0x460 [ 230.717885][ C1] ? __mmput+0x112/0x3b0 [ 230.722170][ C1] ? exit_mm+0x688/0x7f0 [ 230.726523][ C1] ? _raw_spin_unlock+0x40/0x40 [ 230.731452][ C1] ? do_exit+0x2480/0x2480 [ 230.735951][ C1] ? taskstats_exit+0x491/0xa10 [ 230.740848][ C1] ? tty_audit_exit+0x150/0x1f0 [ 230.745830][ C1] ? do_exit+0x626/0x2480 [ 230.750209][ C1] ? put_task_struct+0x80/0x80 [ 230.755085][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 230.761158][ C1] ? do_group_exit+0x144/0x310 [ 230.766024][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 230.771352][ C1] ? get_signal+0xc66/0x14e0 [ 230.776154][ C1] ? arch_do_signal_or_restart+0xc3/0x1890 [ 230.782086][ C1] ? futex_exit_release+0x1e0/0x1e0 [ 230.787409][ C1] ? read_lock_is_recursive+0x10/0x10 [ 230.792810][ C1] ? get_sigframe_size+0x10/0x10 [ 230.797935][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 230.803061][ C1] ? exit_to_user_mode_loop+0x39/0x130 [ 230.808566][ C1] ? exit_to_user_mode_loop+0x97/0x130 [ 230.814163][ C1] ? exit_to_user_mode_prepare+0xb1/0x140 [ 230.819916][ C1] ? syscall_exit_to_user_mode+0x5d/0x240 [ 230.825736][ C1] ? do_syscall_64+0x47/0xb0 [ 230.830693][ C1] ? clear_bhb_loop+0x15/0x70 [ 230.835475][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.841586][ C1] [ 230.844701][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 230.851996][ C1] CPU: 1 PID: 9763 Comm: syz.3.2192 Not tainted 5.15.173-syzkaller #0 [ 230.860198][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 230.870318][ C1] Call Trace: [ 230.873602][ C1] [ 230.876453][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 230.881146][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 230.886786][ C1] ? panic+0x860/0x860 [ 230.890875][ C1] ? __rcu_read_lock+0x2b/0xb0 [ 230.895992][ C1] ? copy_from_user_nofault+0x70/0x1c0 [ 230.901460][ C1] ? copy_from_user_nofault+0x70/0x1c0 [ 230.906930][ C1] panic+0x318/0x860 [ 230.910844][ C1] ? __warn+0x16a/0x300 [ 230.915011][ C1] ? fb_is_primary_device+0xd0/0xd0 [ 230.920272][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 230.925839][ C1] __warn+0x2b2/0x300 [ 230.929841][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 230.935397][ C1] report_bug+0x1b7/0x2e0 [ 230.939751][ C1] handle_bug+0x3d/0x70 [ 230.943923][ C1] exc_invalid_op+0x16/0x40 [ 230.948437][ C1] asm_exc_invalid_op+0x16/0x20 [ 230.953293][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 230.959679][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 cb c6 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b4 c6 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 230.979378][ C1] RSP: 0018:ffffc90000dd0690 EFLAGS: 00010246 [ 230.985464][ C1] RAX: ffffffff81aaacec RBX: 0000000000000000 RCX: ffff8880249b9dc0 [ 230.993432][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.001399][ C1] RBP: dffffc0000000000 R08: ffffffff81aaabfd R09: ffffed10049373b9 [ 231.009379][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 231.017627][ C1] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000dd0708 [ 231.025607][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 231.031071][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 231.036635][ C1] bpf_probe_read_compat+0xe4/0x180 [ 231.041850][ C1] ? bpf_trace_run4+0x1ea/0x390 [ 231.046784][ C1] ? bpf_trace_run3+0x380/0x380 [ 231.051738][ C1] ? __bpf_trace_mm_page_alloc+0xba/0xe0 [ 231.057378][ C1] ? __alloc_pages+0x6e0/0x700 [ 231.062141][ C1] ? __rmqueue_pcplist+0x23a0/0x23a0 [ 231.067434][ C1] ? virtqueue_add_inbuf_ctx+0xc4/0x110 [ 231.072997][ C1] ? alloc_pages+0x458/0x570 [ 231.077599][ C1] ? skb_page_frag_refill+0x220/0x4b0 [ 231.082980][ C1] ? try_fill_recv+0x49d/0x17d0 [ 231.087854][ C1] ? virtnet_poll+0x83a/0x1260 [ 231.092640][ C1] ? refill_work+0x220/0x220 [ 231.097314][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 231.102519][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 231.108597][ C1] ? __napi_poll+0xc7/0x440 [ 231.113282][ C1] ? net_rx_action+0x617/0xda0 [ 231.118159][ C1] ? net_tx_action+0x8e0/0x8e0 [ 231.122962][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 231.128956][ C1] ? handle_softirqs+0x3a7/0x930 [ 231.134075][ C1] ? __irq_exit_rcu+0x157/0x240 [ 231.138928][ C1] ? do_softirq+0x240/0x240 [ 231.143433][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 231.148723][ C1] ? __irq_exit_rcu+0x157/0x240 [ 231.153576][ C1] ? irq_exit_rcu+0x20/0x20 [ 231.158090][ C1] ? irq_exit_rcu+0x5/0x20 [ 231.162630][ C1] ? common_interrupt+0xb3/0xd0 [ 231.167478][ C1] [ 231.170405][ C1] [ 231.173333][ C1] ? asm_common_interrupt+0x22/0x40 [ 231.178720][ C1] ? lock_is_held_type+0x137/0x180 [ 231.183836][ C1] ? ___might_sleep+0xf1/0x6a0 [ 231.188605][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 231.193622][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 231.198643][ C1] ? __might_sleep+0xc0/0xc0 [ 231.203530][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 231.208732][ C1] ? unmap_page_range+0x223e/0x2630 [ 231.213966][ C1] ? mmu_notifier_invalidate_range_end+0xf0/0xf0 [ 231.220300][ C1] ? __pagevec_lru_add+0x1584/0x18d0 [ 231.225755][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 231.230773][ C1] ? uprobe_munmap+0x17a/0x400 [ 231.235540][ C1] ? unmap_single_vma+0x1a1/0x2d0 [ 231.240675][ C1] ? unmap_vmas+0x1f8/0x390 [ 231.245267][ C1] ? unmap_page_range+0x2630/0x2630 [ 231.250473][ C1] ? tlb_gather_mmu_fullmm+0x159/0x200 [ 231.256019][ C1] ? exit_mmap+0x3b6/0x670 [ 231.260445][ C1] ? vm_brk+0x20/0x20 [ 231.264437][ C1] ? uprobe_clear_state+0x304/0x460 [ 231.269638][ C1] ? __mmput+0x112/0x3b0 [ 231.273893][ C1] ? exit_mm+0x688/0x7f0 [ 231.278136][ C1] ? _raw_spin_unlock+0x40/0x40 [ 231.283083][ C1] ? do_exit+0x2480/0x2480 [ 231.287767][ C1] ? taskstats_exit+0x491/0xa10 [ 231.292619][ C1] ? tty_audit_exit+0x150/0x1f0 [ 231.297471][ C1] ? do_exit+0x626/0x2480 [ 231.301810][ C1] ? put_task_struct+0x80/0x80 [ 231.306574][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 231.312565][ C1] ? do_group_exit+0x144/0x310 [ 231.317328][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 231.322614][ C1] ? get_signal+0xc66/0x14e0 [ 231.327219][ C1] ? arch_do_signal_or_restart+0xc3/0x1890 [ 231.333029][ C1] ? futex_exit_release+0x1e0/0x1e0 [ 231.338325][ C1] ? read_lock_is_recursive+0x10/0x10 [ 231.343692][ C1] ? get_sigframe_size+0x10/0x10 [ 231.348629][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 231.353663][ C1] ? exit_to_user_mode_loop+0x39/0x130 [ 231.359121][ C1] ? exit_to_user_mode_loop+0x97/0x130 [ 231.364582][ C1] ? exit_to_user_mode_prepare+0xb1/0x140 [ 231.370306][ C1] ? syscall_exit_to_user_mode+0x5d/0x240 [ 231.376030][ C1] ? do_syscall_64+0x47/0xb0 [ 231.380615][ C1] ? clear_bhb_loop+0x15/0x70 [ 231.385285][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.391360][ C1] [ 231.394480][ C1] Kernel Offset: disabled [ 231.398950][ C1] Rebooting in 86400 seconds..