last executing test programs: 9m37.771616884s ago: executing program 1 (id=727): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @sched_cls=0x2f}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x801, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdfa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000100), 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0xc04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) close(r1) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}) 9m37.479578998s ago: executing program 1 (id=729): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 9m37.134642604s ago: executing program 1 (id=731): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000500)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_create_chunk\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) 9m35.722534204s ago: executing program 1 (id=740): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @sched_cls=0x2f}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x801, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdfa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000100), 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0xc04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) close(r1) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}) 9m34.698514009s ago: executing program 1 (id=746): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000020000000000000000600000018110000", @ANYRES32=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 9m33.031991563s ago: executing program 1 (id=756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r0, 0x0, 0xa0028000}, 0x86) 9m17.944431894s ago: executing program 32 (id=756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r0, 0x0, 0xa0028000}, 0x86) 4.295337744s ago: executing program 3 (id=4489): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000081) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000200)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='ext4_es_find_extent_range_exit\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x55) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x1828a6, 0xca, 0x2, 0x0, 0x4, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x172e4, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r3, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3e0002"], 0x9a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 4.294779144s ago: executing program 5 (id=4490): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x15, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400007d90d53085000000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000", @ANYRES64=0x0, @ANYRES64=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x93) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x401, 0x0}, 0xfffffe4c) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r6, 0x0, r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)='%pi6 \x00'}, 0x20) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) gettid() setsockopt$sock_attach_bpf(r1, 0x84, 0x19, &(0x7f0000000000)=r9, 0x8) socket$kcm(0x2, 0x3, 0x2) r10 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r13, 0x107, 0x12, &(0x7f00000008c0), 0x4) close(r12) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0x17, &(0x7f00000008c0)=r14, 0x4) 3.843850051s ago: executing program 5 (id=4493): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)={[{0x2b, 'perf_event'}, {0x2b, 'cpuset'}, {0x2d, 'perf_event'}, {0x2b, 'rlimit'}, {0x2b, 'rlimit'}, {0x2b, 'io'}]}, 0x34) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060000120800040043000000a8001600040001761aff2266e5f4e90196ad8bc3d47a051ed59450a9cb6e217b69cb18b5e1e60490f9ba9f207eab83016772a3", 0x5f}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 3.746444703s ago: executing program 3 (id=4496): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000044b1407f51d3784f00"/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="3a008000000000000000000000000000181100001563fee869ae805673040a882fbeee79049a6fa9ce89bb7febdc873cd8c2ad8ccc7d75940f2fde134848f5352ee7ccc1ec820f68596012a6b2d58040c29b9654f24a548669a6248a343a77c18537874281bfea91f61687bef5c96abf5322523a9fcee22e83738b0e8c10bea13cb64c427c5d2060546acf112fd48182", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x1, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5, 0x29a8, 0x49b, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f96724fc60040011000a7403004700000037153e370248", 0x26}], 0x1}, 0x0) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x0) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r3 = socket$kcm(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x40000041) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0), 0x4) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000001095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='f2fs_destroy_extent_tree\x00'}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000400)='FROZEN\x00', 0x7) (async) mkdirat$cgroup(r6, &(0x7f0000000200)='syz1\x00', 0x1ff) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) 3.744122873s ago: executing program 5 (id=4497): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.649301954s ago: executing program 2 (id=4498): recvmsg(0xffffffffffffffff, 0x0, 0x2002) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000cc0)="2206b49bbd253c5028678f113393db4525511468432c99c1b198fa9bdd61a7b491c5f0725de0d5dad57a75fd350a40403d86d5514323ee373192", 0x3a}], 0x1}, 0x4008041) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r5}, 0x18) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3.634161155s ago: executing program 4 (id=4499): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x8000, 0x1c}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000180), &(0x7f0000000200)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0xfffffffffffffd96) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000abd92de000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000006040000000000000001000004f70000000000000003000000010000000000000000000002"], 0x0, 0x4a}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b904021d08040000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 3.603345405s ago: executing program 0 (id=4500): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.458505298s ago: executing program 5 (id=4501): recvmsg(0xffffffffffffffff, 0x0, 0x2002) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000cc0)="2206b49bbd253c5028678f113393db4525511468432c99c1b198fa9bdd61a7b491c5f0725de0d5dad57a75fd350a40403d86d5514323ee373192", 0x3a}], 0x1}, 0x4008041) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r5}, 0x18) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3.458246947s ago: executing program 0 (id=4502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x28, 0x5, 0x0, &(0x7f0000000d80)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x2, &(0x7f0000000dc0)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000e40)='syzkaller\x00', 0x72, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000ec0)={0x2, 0x6, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000f00)=[{0x1, 0x2, 0x1, 0x3}, {0x4, 0x3, 0x9, 0x6}, {0x0, 0x1, 0xd, 0x2}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0x5, 0xfffffffd, 0x5}], 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001040)=r2, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(r4) close(r3) 3.453252697s ago: executing program 3 (id=4503): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff4}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.410226638s ago: executing program 2 (id=4504): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) (async) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/143, 0x8f}, {&(0x7f00000019c0)=""/227, 0xe3}, {&(0x7f0000001ac0)=""/74, 0x4a}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/242, 0xf2}, {&(0x7f0000001d00)=""/119, 0x77}, {&(0x7f0000001d80)=""/233, 0xe9}], 0x8, &(0x7f0000001f00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x40000002) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x401, 0x12150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x1, 0x8, 0x80000000000000, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.474934272s ago: executing program 4 (id=4505): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.387460094s ago: executing program 5 (id=4506): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x10, 0x0, 0x80000003, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x9, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlink(&(0x7f0000000000)='./cgroup\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580), 0x2}, 0x0, 0x10001, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x10, 0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r5, 0x0, 0x8000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x3, 0x3, 0x100005, 0xb, 0x11}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x2, r6}, 0x38) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x55097aa4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f00000000c0)) 2.324232965s ago: executing program 2 (id=4507): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)={[{0x2b, 'perf_event'}, {0x2b, 'cpuset'}, {0x2d, 'perf_event'}, {0x2b, 'rlimit'}, {0x2b, 'rlimit'}, {0x2b, 'io'}]}, 0x34) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060000120800040043000000a8001600040001761aff2266e5f4e90196ad8bc3d47a051ed59450a9cb6e217b69cb18b5e1e60490f9ba9f207eab83016772a3", 0x5f}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2.323340045s ago: executing program 3 (id=4508): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffbf, 0x9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x6, 0x0, &(0x7f0000000040)="ded6e0966ec1", 0x0, 0x0, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='$\t:!(\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x25, 0x4, 0x2, 0x4008, r1, 0xffff3dda, '\x00', r2, r0, 0x5, 0x5, 0x1, 0x6}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb, 0x4, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x28, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x1ff) 2.287926415s ago: executing program 0 (id=4509): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xf5}, 0x0) sendmsg$inet(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) close(r0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)={[{0x2b, 'memory'}, {0x2b, 'io'}, {0x2d, 'cpu'}, {0x2b, 'net_cls'}]}, 0x1a) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10860, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1a, 0x5, 0x2, 0x7, 0x8082, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="9feb01001800000000000000ff00000000000000090000000100008401000000070000000200000007000000006100615f2e5f615f0000000000"], &(0x7f0000001fc0)=""/142, 0x3a, 0x8e, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000ecffffff00"/25], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x80008, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x22, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a2, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 2.202610286s ago: executing program 4 (id=4510): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x1c, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)}, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40}, 0x4}}, 0x80, 0x0}, 0x8000001) 1.98934767s ago: executing program 2 (id=4511): socketpair(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a3, &(0x7f0000000080)) 1.97341328s ago: executing program 0 (id=4512): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000001c0), 0x0}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff4}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.895030571s ago: executing program 4 (id=4513): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.751068524s ago: executing program 2 (id=4514): recvmsg(0xffffffffffffffff, 0x0, 0x2002) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000cc0)="2206b49bbd253c5028678f113393db4525511468432c99c1b198fa9bdd61a7b491c5f0725de0d5dad57a75fd350a40403d86d5514323ee373192", 0x3a}], 0x1}, 0x4008041) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r5}, 0x18) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.653205605s ago: executing program 4 (id=4515): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x8000, 0x1c}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000180), &(0x7f0000000200)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0xfffffffffffffd96) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000abd92de000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000006040000000000000001000004f70000000000000003000000010000000000000000000002"], 0x0, 0x4a}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b904021d08040000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 619.239081ms ago: executing program 4 (id=4516): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x10, 0x0, 0x80000003, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x9, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlink(&(0x7f0000000000)='./cgroup\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580), 0x2}, 0x0, 0x10001, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x10, 0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r5, 0x0, 0x8000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x3, 0x3, 0x100005, 0xb, 0x11}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x2, r6}, 0x38) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x55097aa4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f00000000c0)) 458.796463ms ago: executing program 2 (id=4517): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000001c0), 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 450.128303ms ago: executing program 3 (id=4518): recvmsg(0xffffffffffffffff, 0x0, 0x2002) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000cc0)="2206b49bbd253c5028678f113393db4525511468432c99c1b198fa9bdd61a7b491c5f0725de0d5dad57a75fd350a40403d86d5514323ee373192", 0x3a}], 0x1}, 0x4008041) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r5}, 0x18) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 421.486034ms ago: executing program 0 (id=4519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x28, 0x5, 0x0, &(0x7f0000000d80)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x2, &(0x7f0000000dc0)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000e40)='syzkaller\x00', 0x72, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000ec0)={0x2, 0x6, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000f00)=[{0x1, 0x2, 0x1, 0x3}, {0x4, 0x3, 0x9, 0x6}, {0x0, 0x1, 0xd, 0x2}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0x5, 0xfffffffd, 0x5}], 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001040)=r2, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(r4) close(r3) 317.489205ms ago: executing program 5 (id=4520): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff4}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 187.874587ms ago: executing program 3 (id=4521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xffffffff}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x9, 0x3, 0x0, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x970f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000480)={0x4, &(0x7f00000004c0)=[{0x2d, 0x0, 0x2}, {0x15}, {}, {0x6}]}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @remote}) 0s ago: executing program 0 (id=4522): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xf5}, 0x0) sendmsg$inet(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) close(r0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)={[{0x2b, 'memory'}, {0x2b, 'io'}, {0x2d, 'cpu'}, {0x2b, 'net_cls'}]}, 0x1a) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10860, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1a, 0x5, 0x2, 0x7, 0x8082, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="9feb01001800000000000000ff00000000000000090000000100008401000000070000000200000007000000006100615f2e5f615f0000000000"], &(0x7f0000001fc0)=""/142, 0x3a, 0x8e, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000ecffffff00"/27], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x80008, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x22, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a2, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) kernel console output (not intermixed with test programs): 8055][T15057] netlink: 'syz.2.3584': attribute type 39 has an invalid length. [ 870.017879][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.024234][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.903649][T15105] FAULT_INJECTION: forcing a failure. [ 872.903649][T15105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.923998][T15105] CPU: 1 PID: 15105 Comm: syz.2.3602 Not tainted 6.1.146-syzkaller #0 [ 872.932187][T15105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 872.942235][T15105] Call Trace: [ 872.945506][T15105] [ 872.948426][T15105] dump_stack_lvl+0x168/0x22e [ 872.953097][T15105] ? show_regs_print_info+0x12/0x12 [ 872.958284][T15105] ? load_image+0x3b0/0x3b0 [ 872.962782][T15105] ? __lock_acquire+0x7c50/0x7c50 [ 872.967810][T15105] should_fail_ex+0x399/0x4d0 [ 872.972481][T15105] _copy_from_iter+0x1c5/0x10c0 [ 872.977326][T15105] ? __lock_acquire+0x7c50/0x7c50 [ 872.982340][T15105] ? sock_alloc_send_pskb+0x871/0x980 [ 872.987705][T15105] ? copyout_mc+0x110/0x110 [ 872.992198][T15105] ? __virt_addr_valid+0x188/0x540 [ 872.997302][T15105] ? __virt_addr_valid+0x188/0x540 [ 873.002404][T15105] ? __virt_addr_valid+0x465/0x540 [ 873.007505][T15105] ? __phys_addr+0xb6/0x170 [ 873.012002][T15105] ? __check_object_size+0x500/0xa40 [ 873.017278][T15105] skb_copy_datagram_from_iter+0xef/0x690 [ 873.022997][T15105] ? skb_put+0x117/0x210 [ 873.027231][T15105] tun_get_user+0x14ba/0x3b90 [ 873.031914][T15105] ? rcu_read_unlock+0xa0/0xa0 [ 873.036673][T15105] ? tun_get+0x1c/0x2e0 [ 873.040823][T15105] ? __lock_acquire+0x7c50/0x7c50 [ 873.045845][T15105] ? tun_get+0x1c/0x2e0 [ 873.049998][T15105] tun_chr_write_iter+0x112/0x1f0 [ 873.055017][T15105] vfs_write+0x44c/0x960 [ 873.059254][T15105] ? file_end_write+0x250/0x250 [ 873.064098][T15105] ? __fget_files+0x44a/0x4d0 [ 873.068772][T15105] ? __fdget_pos+0x1d4/0x360 [ 873.073355][T15105] ? ksys_write+0x71/0x240 [ 873.077768][T15105] ksys_write+0x143/0x240 [ 873.082093][T15105] ? __ia32_sys_read+0x80/0x80 [ 873.086852][T15105] ? lockdep_hardirqs_on+0x94/0x140 [ 873.092046][T15105] do_syscall_64+0x4c/0xa0 [ 873.096451][T15105] ? clear_bhb_loop+0x60/0xb0 [ 873.101112][T15105] ? clear_bhb_loop+0x60/0xb0 [ 873.105776][T15105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 873.111666][T15105] RIP: 0033:0x7fc0e3d8e9a9 [ 873.116069][T15105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.135662][T15105] RSP: 002b:00007fc0e4b45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 873.144061][T15105] RAX: ffffffffffffffda RBX: 00007fc0e3fb5fa0 RCX: 00007fc0e3d8e9a9 [ 873.152023][T15105] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 873.159981][T15105] RBP: 00007fc0e4b45090 R08: 0000000000000000 R09: 0000000000000000 [ 873.167939][T15105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.175899][T15105] R13: 0000000000000000 R14: 00007fc0e3fb5fa0 R15: 00007ffce6ed10b8 [ 873.183871][T15105] [ 873.606312][T15119] FAULT_INJECTION: forcing a failure. [ 873.606312][T15119] name failslab, interval 1, probability 0, space 0, times 0 [ 873.630626][T15119] CPU: 0 PID: 15119 Comm: syz.0.3606 Not tainted 6.1.146-syzkaller #0 [ 873.638819][T15119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 873.648886][T15119] Call Trace: [ 873.652170][T15119] [ 873.655107][T15119] dump_stack_lvl+0x168/0x22e [ 873.659807][T15119] ? show_regs_print_info+0x12/0x12 [ 873.665020][T15119] ? load_image+0x3b0/0x3b0 [ 873.669549][T15119] ? __might_sleep+0xd0/0xd0 [ 873.674163][T15119] ? __lock_acquire+0x7c50/0x7c50 [ 873.679207][T15119] should_fail_ex+0x399/0x4d0 [ 873.683915][T15119] should_failslab+0x5/0x20 [ 873.688436][T15119] slab_pre_alloc_hook+0x59/0x310 [ 873.693479][T15119] kmem_cache_alloc_node+0x5a/0x320 [ 873.698688][T15119] ? __alloc_skb+0xfc/0x7e0 [ 873.703212][T15119] __alloc_skb+0xfc/0x7e0 [ 873.707553][T15119] ? netlink_autobind+0xda/0x300 [ 873.712503][T15119] netlink_sendmsg+0x645/0xbc0 [ 873.717289][T15119] ? netlink_getsockopt+0x540/0x540 [ 873.722497][T15119] ? aa_sock_msg_perm+0x94/0x150 [ 873.727444][T15119] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 873.732718][T15119] ? security_socket_sendmsg+0x7c/0xa0 [ 873.738182][T15119] ? netlink_getsockopt+0x540/0x540 [ 873.743368][T15119] ____sys_sendmsg+0x59b/0x970 [ 873.748131][T15119] ? __sys_sendmsg_sock+0x30/0x30 [ 873.753144][T15119] ? __import_iovec+0x315/0x500 [ 873.757994][T15119] ? import_iovec+0x6f/0xa0 [ 873.762495][T15119] ___sys_sendmsg+0x21c/0x290 [ 873.767163][T15119] ? __sys_sendmsg+0x270/0x270 [ 873.771929][T15119] ? __lock_acquire+0x7c50/0x7c50 [ 873.776957][T15119] ? __fdget+0x17c/0x200 [ 873.781193][T15119] __se_sys_sendmsg+0x19e/0x270 [ 873.786041][T15119] ? __x64_sys_sendmsg+0x80/0x80 [ 873.791238][T15119] ? lockdep_hardirqs_on+0x94/0x140 [ 873.796428][T15119] do_syscall_64+0x4c/0xa0 [ 873.800831][T15119] ? clear_bhb_loop+0x60/0xb0 [ 873.805495][T15119] ? clear_bhb_loop+0x60/0xb0 [ 873.810162][T15119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 873.816049][T15119] RIP: 0033:0x7f516b78e9a9 [ 873.820453][T15119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.840047][T15119] RSP: 002b:00007f516c638038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 873.848448][T15119] RAX: ffffffffffffffda RBX: 00007f516b9b5fa0 RCX: 00007f516b78e9a9 [ 873.856405][T15119] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 873.864361][T15119] RBP: 00007f516c638090 R08: 0000000000000000 R09: 0000000000000000 [ 873.872318][T15119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.880274][T15119] R13: 0000000000000000 R14: 00007f516b9b5fa0 R15: 00007ffc53d3a2e8 [ 873.888241][T15119] [ 874.055664][T15127] netlink: 'syz.2.3603': attribute type 3 has an invalid length. [ 874.073475][T15127] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3603'. [ 875.796291][T15153] FAULT_INJECTION: forcing a failure. [ 875.796291][T15153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.885039][T15153] CPU: 0 PID: 15153 Comm: syz.5.3617 Not tainted 6.1.146-syzkaller #0 [ 875.893266][T15153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 875.903351][T15153] Call Trace: [ 875.906664][T15153] [ 875.909638][T15153] dump_stack_lvl+0x168/0x22e [ 875.914363][T15153] ? show_regs_print_info+0x12/0x12 [ 875.919604][T15153] ? load_image+0x3b0/0x3b0 [ 875.924150][T15153] ? __lock_acquire+0x7c50/0x7c50 [ 875.929215][T15153] ? verify_lock_unused+0x140/0x140 [ 875.934446][T15153] ? perf_trace_lock+0xf3/0x370 [ 875.939340][T15153] should_fail_ex+0x399/0x4d0 [ 875.944078][T15153] _copy_from_user+0x2c/0x170 [ 875.948786][T15153] ___sys_sendmsg+0x155/0x290 [ 875.953482][T15153] ? __sys_sendmsg+0x270/0x270 [ 875.958268][T15153] ? irqentry_enter+0x33/0x50 [ 875.963049][T15153] __se_sys_sendmsg+0x19e/0x270 [ 875.967909][T15153] ? perf_trace_preemptirq_template+0x287/0x330 [ 875.974166][T15153] ? __x64_sys_sendmsg+0x80/0x80 [ 875.979149][T15153] ? lockdep_hardirqs_on+0x94/0x140 [ 875.984365][T15153] do_syscall_64+0x4c/0xa0 [ 875.988784][T15153] ? clear_bhb_loop+0x60/0xb0 [ 875.993467][T15153] ? clear_bhb_loop+0x60/0xb0 [ 875.998153][T15153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 876.004053][T15153] RIP: 0033:0x7fdf1a58e9a9 [ 876.008477][T15153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.028084][T15153] RSP: 002b:00007fdf1b387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.036502][T15153] RAX: ffffffffffffffda RBX: 00007fdf1a7b5fa0 RCX: 00007fdf1a58e9a9 [ 876.044476][T15153] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 876.052452][T15153] RBP: 00007fdf1b387090 R08: 0000000000000000 R09: 0000000000000000 [ 876.060424][T15153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.068396][T15153] R13: 0000000000000000 R14: 00007fdf1a7b5fa0 R15: 00007ffc78927e68 [ 876.076406][T15153] [ 876.707904][T15167] netlink: 'syz.3.3622': attribute type 3 has an invalid length. [ 876.726280][T15167] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3622'. [ 877.214031][ T4323] Bluetooth: hci3: command 0x0406 tx timeout [ 878.939503][T15209] FAULT_INJECTION: forcing a failure. [ 878.939503][T15209] name failslab, interval 1, probability 0, space 0, times 0 [ 878.972756][T15209] CPU: 1 PID: 15209 Comm: syz.2.3635 Not tainted 6.1.146-syzkaller #0 [ 878.980950][T15209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 878.991017][T15209] Call Trace: [ 878.994297][T15209] [ 878.997232][T15209] dump_stack_lvl+0x168/0x22e [ 879.001925][T15209] ? show_regs_print_info+0x12/0x12 [ 879.007142][T15209] ? load_image+0x3b0/0x3b0 [ 879.011664][T15209] ? __might_sleep+0xd0/0xd0 [ 879.016268][T15209] ? __lock_acquire+0x7c50/0x7c50 [ 879.021307][T15209] ? mark_lock+0x94/0x320 [ 879.025663][T15209] should_fail_ex+0x399/0x4d0 [ 879.030373][T15209] should_failslab+0x5/0x20 [ 879.034893][T15209] slab_pre_alloc_hook+0x59/0x310 [ 879.039929][T15209] ? __get_vm_area_node+0x122/0x330 [ 879.045123][T15209] __kmem_cache_alloc_node+0x4f/0x260 [ 879.050490][T15209] ? __get_vm_area_node+0x122/0x330 [ 879.055684][T15209] kmalloc_node_trace+0x22/0xe0 [ 879.060530][T15209] __get_vm_area_node+0x122/0x330 [ 879.065566][T15209] __vmalloc_node_range+0x357/0x1390 [ 879.070850][T15209] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 879.076407][T15209] ? free_vm_area+0x50/0x50 [ 879.080906][T15209] ? end_current_label_crit_section+0x170/0x170 [ 879.087143][T15209] ? __lock_acquire+0x7c50/0x7c50 [ 879.092167][T15209] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 879.097711][T15209] __vmalloc+0x76/0x80 [ 879.101775][T15209] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 879.107317][T15209] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 879.112689][T15209] ? bpf_lsm_capable+0x5/0x10 [ 879.117357][T15209] ? security_capable+0x85/0xb0 [ 879.122197][T15209] bpf_prog_alloc+0x1c/0x1b0 [ 879.126784][T15209] bpf_prog_load+0x7b6/0x15a0 [ 879.131463][T15209] ? map_freeze+0x390/0x390 [ 879.135961][T15209] ? __might_fault+0xa6/0x120 [ 879.140641][T15209] ? __might_fault+0xa6/0x120 [ 879.145314][T15209] ? __might_fault+0xc2/0x120 [ 879.149992][T15209] ? __might_fault+0xa6/0x120 [ 879.154662][T15209] ? bpf_lsm_bpf+0x5/0x10 [ 879.158978][T15209] ? security_bpf+0x7a/0xa0 [ 879.163476][T15209] __sys_bpf+0x520/0x6d0 [ 879.167712][T15209] ? bpf_link_show_fdinfo+0x340/0x340 [ 879.173081][T15209] ? lock_chain_count+0x20/0x20 [ 879.177930][T15209] __x64_sys_bpf+0x78/0x90 [ 879.182340][T15209] do_syscall_64+0x4c/0xa0 [ 879.186745][T15209] ? clear_bhb_loop+0x60/0xb0 [ 879.191415][T15209] ? clear_bhb_loop+0x60/0xb0 [ 879.196096][T15209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 879.201991][T15209] RIP: 0033:0x7fc0e3d8e9a9 [ 879.206396][T15209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 879.225994][T15209] RSP: 002b:00007fc0e4b45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 879.234404][T15209] RAX: ffffffffffffffda RBX: 00007fc0e3fb5fa0 RCX: 00007fc0e3d8e9a9 [ 879.242367][T15209] RDX: 0000000000000022 RSI: 0000200000000900 RDI: 0000000000000005 [ 879.250332][T15209] RBP: 00007fc0e4b45090 R08: 0000000000000000 R09: 0000000000000000 [ 879.258304][T15209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.266276][T15209] R13: 0000000000000001 R14: 00007fc0e3fb5fa0 R15: 00007ffce6ed10b8 [ 879.274248][T15209] [ 879.302255][T15209] syz.2.3635: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 879.326421][T15209] CPU: 1 PID: 15209 Comm: syz.2.3635 Not tainted 6.1.146-syzkaller #0 [ 879.334613][T15209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 879.344676][T15209] Call Trace: [ 879.347955][T15209] [ 879.350914][T15209] dump_stack_lvl+0x168/0x22e [ 879.355612][T15209] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 879.362040][T15209] ? show_regs_print_info+0x12/0x12 [ 879.367244][T15209] ? load_image+0x3b0/0x3b0 [ 879.371768][T15209] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 879.378200][T15209] ? cpuset_print_current_mems_allowed+0x2df/0x360 [ 879.384705][T15209] warn_alloc+0x20c/0x300 [ 879.389038][T15209] ? __get_vm_area_node+0x122/0x330 [ 879.394227][T15209] ? zone_watermark_ok_safe+0x270/0x270 [ 879.399763][T15209] ? rcu_is_watching+0x11/0xa0 [ 879.404530][T15209] ? __get_vm_area_node+0x318/0x330 [ 879.409726][T15209] __vmalloc_node_range+0x37c/0x1390 [ 879.415015][T15209] ? free_vm_area+0x50/0x50 [ 879.419505][T15209] ? end_current_label_crit_section+0x170/0x170 [ 879.425740][T15209] ? __lock_acquire+0x7c50/0x7c50 [ 879.430756][T15209] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 879.436332][T15209] __vmalloc+0x76/0x80 [ 879.440391][T15209] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 879.445930][T15209] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 879.451299][T15209] ? bpf_lsm_capable+0x5/0x10 [ 879.455966][T15209] ? security_capable+0x85/0xb0 [ 879.460813][T15209] bpf_prog_alloc+0x1c/0x1b0 [ 879.465396][T15209] bpf_prog_load+0x7b6/0x15a0 [ 879.470073][T15209] ? map_freeze+0x390/0x390 [ 879.474591][T15209] ? __might_fault+0xa6/0x120 [ 879.479266][T15209] ? __might_fault+0xa6/0x120 [ 879.483942][T15209] ? __might_fault+0xc2/0x120 [ 879.488613][T15209] ? __might_fault+0xa6/0x120 [ 879.493279][T15209] ? bpf_lsm_bpf+0x5/0x10 [ 879.497598][T15209] ? security_bpf+0x7a/0xa0 [ 879.502094][T15209] __sys_bpf+0x520/0x6d0 [ 879.506332][T15209] ? bpf_link_show_fdinfo+0x340/0x340 [ 879.511702][T15209] ? lock_chain_count+0x20/0x20 [ 879.516550][T15209] __x64_sys_bpf+0x78/0x90 [ 879.520958][T15209] do_syscall_64+0x4c/0xa0 [ 879.525362][T15209] ? clear_bhb_loop+0x60/0xb0 [ 879.530024][T15209] ? clear_bhb_loop+0x60/0xb0 [ 879.534688][T15209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 879.540572][T15209] RIP: 0033:0x7fc0e3d8e9a9 [ 879.544972][T15209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 879.564565][T15209] RSP: 002b:00007fc0e4b45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 879.572962][T15209] RAX: ffffffffffffffda RBX: 00007fc0e3fb5fa0 RCX: 00007fc0e3d8e9a9 [ 879.580920][T15209] RDX: 0000000000000022 RSI: 0000200000000900 RDI: 0000000000000005 [ 879.588878][T15209] RBP: 00007fc0e4b45090 R08: 0000000000000000 R09: 0000000000000000 [ 879.596835][T15209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.604789][T15209] R13: 0000000000000001 R14: 00007fc0e3fb5fa0 R15: 00007ffce6ed10b8 [ 879.612754][T15209] [ 879.700822][T15214] netlink: 'syz.4.3638': attribute type 3 has an invalid length. [ 879.709264][T15214] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3638'. [ 879.743315][T15209] Mem-Info: [ 879.746979][T15209] active_anon:5839 inactive_anon:0 isolated_anon:0 [ 879.746979][T15209] active_file:23078 inactive_file:40066 isolated_file:0 [ 879.746979][T15209] unevictable:768 dirty:174 writeback:0 [ 879.746979][T15209] slab_reclaimable:21124 slab_unreclaimable:105006 [ 879.746979][T15209] mapped:30236 shmem:1373 pagetables:631 [ 879.746979][T15209] sec_pagetables:0 bounce:0 [ 879.746979][T15209] kernel_misc_reclaimable:0 [ 879.746979][T15209] free:1289590 free_pcp:5428 free_cma:0 [ 879.916884][T15224] FAULT_INJECTION: forcing a failure. [ 879.916884][T15224] name failslab, interval 1, probability 0, space 0, times 0 [ 879.938289][T15209] Node 0 active_anon:23320kB inactive_anon:0kB active_file:92312kB inactive_file:160060kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121012kB dirty:828kB writeback:0kB shmem:3956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11448kB pagetables:2560kB sec_pagetables:0kB all_unreclaimable? no [ 879.989172][T15224] CPU: 1 PID: 15224 Comm: syz.4.3641 Not tainted 6.1.146-syzkaller #0 [ 879.997374][T15224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 880.007442][T15224] Call Trace: [ 880.010726][T15224] [ 880.013663][T15224] dump_stack_lvl+0x168/0x22e [ 880.018357][T15224] ? show_regs_print_info+0x12/0x12 [ 880.023570][T15224] ? load_image+0x3b0/0x3b0 [ 880.028096][T15224] ? __might_sleep+0xd0/0xd0 [ 880.032709][T15224] ? __lock_acquire+0x7c50/0x7c50 [ 880.037757][T15224] should_fail_ex+0x399/0x4d0 [ 880.042457][T15224] should_failslab+0x5/0x20 [ 880.046968][T15224] slab_pre_alloc_hook+0x59/0x310 [ 880.052006][T15224] kmem_cache_alloc_node+0x5a/0x320 [ 880.057211][T15224] ? __alloc_skb+0xfc/0x7e0 [ 880.061726][T15224] __alloc_skb+0xfc/0x7e0 [ 880.066060][T15224] ? netlink_autobind+0xda/0x300 [ 880.071007][T15224] netlink_sendmsg+0x645/0xbc0 [ 880.075785][T15224] ? netlink_getsockopt+0x540/0x540 [ 880.080995][T15224] ? aa_sock_msg_perm+0x94/0x150 [ 880.085955][T15224] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 880.091247][T15224] ? security_socket_sendmsg+0x7c/0xa0 [ 880.096723][T15224] ? netlink_getsockopt+0x540/0x540 [ 880.101928][T15224] ____sys_sendmsg+0x59b/0x970 [ 880.106708][T15224] ? __sys_sendmsg_sock+0x30/0x30 [ 880.111735][T15224] ? __import_iovec+0x315/0x500 [ 880.116600][T15224] ? import_iovec+0x6f/0xa0 [ 880.121117][T15224] ___sys_sendmsg+0x21c/0x290 [ 880.125804][T15224] ? __sys_sendmsg+0x270/0x270 [ 880.130592][T15224] ? __lock_acquire+0x7c50/0x7c50 [ 880.135641][T15224] ? __fdget+0x17c/0x200 [ 880.139893][T15224] __se_sys_sendmsg+0x19e/0x270 [ 880.144754][T15224] ? __x64_sys_sendmsg+0x80/0x80 [ 880.149710][T15224] ? lockdep_hardirqs_on+0x94/0x140 [ 880.154924][T15224] do_syscall_64+0x4c/0xa0 [ 880.159345][T15224] ? clear_bhb_loop+0x60/0xb0 [ 880.164032][T15224] ? clear_bhb_loop+0x60/0xb0 [ 880.168709][T15224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 880.174609][T15224] RIP: 0033:0x7fdad8d8e9a9 [ 880.179031][T15224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 880.198647][T15224] RSP: 002b:00007fdad9b74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 880.207065][T15224] RAX: ffffffffffffffda RBX: 00007fdad8fb5fa0 RCX: 00007fdad8d8e9a9 [ 880.215038][T15224] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000003 [ 880.223023][T15224] RBP: 00007fdad9b74090 R08: 0000000000000000 R09: 0000000000000000 [ 880.231007][T15224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.238989][T15224] R13: 0000000000000000 R14: 00007fdad8fb5fa0 R15: 00007fffb9db5368 [ 880.246986][T15224] [ 880.284041][T15209] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 880.364961][T15209] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 880.503596][T15209] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 880.544911][T15209] Node 0 DMA32 free:1240356kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:23420kB inactive_anon:0kB active_file:92312kB inactive_file:160060kB unevictable:1536kB writepending:828kB present:3129332kB managed:2593360kB mlocked:0kB bounce:0kB free_pcp:11976kB local_pcp:8252kB free_cma:0kB [ 880.644734][T15209] lowmem_reserve[]: 0 0 1 1 1 [ 880.653010][T15209] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 880.728509][T15209] lowmem_reserve[]: 0 0 0 0 0 [ 880.733308][T15209] Node 1 Normal free:3898064kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19232kB local_pcp:6752kB free_cma:0kB [ 880.783074][T15209] lowmem_reserve[]: 0 0 0 0 0 [ 880.788479][T15209] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 880.801713][T15209] Node 0 DMA32: 1594*4kB (UME) 2401*8kB (UM) 1638*16kB (UME) 2210*32kB (UME) 1223*64kB (UME) 413*128kB (UME) 231*256kB (UM) 81*512kB (UM) 32*1024kB (UME) 2*2048kB (ME) 207*4096kB (M) = 1238992kB [ 880.821743][T15209] Node 0 Normal: 3*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 880.841804][T15209] Node 1 Normal: 272*4kB (UE) 66*8kB (UE) 36*16kB (UME) 90*32kB (UME) 42*64kB (UME) 11*128kB (UME) 13*256kB (UM) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3898064kB [ 880.882271][T15234] device syzkaller0 entered promiscuous mode [ 881.001729][T15209] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 881.067539][T15209] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 881.119433][T15209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 881.129112][T15209] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 881.138621][T15209] 64519 total pagecache pages [ 881.143318][T15209] 0 pages in swap cache [ 881.147641][T15209] Free swap = 124996kB [ 881.151944][T15209] Total swap = 124996kB [ 881.156268][T15209] 2097051 pages RAM [ 881.160098][T15209] 0 pages HighMem/MovableOnly [ 881.164958][T15209] 415110 pages reserved [ 881.169133][T15209] 0 pages cma reserved [ 885.076120][T15302] netlink: 'syz.4.3670': attribute type 3 has an invalid length. [ 885.083903][T15302] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3670'. [ 887.461003][ T4318] Bluetooth: hci4: command 0x0406 tx timeout [ 890.044512][T15338] netlink: 'syz.0.3681': attribute type 10 has an invalid length. [ 890.064230][T15338] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3681'. [ 890.111428][ T11] device .*! left promiscuous mode [ 892.020221][T15377] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3696'. [ 892.037264][T15377] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3696'. [ 892.047393][T15377] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3696'. [ 892.058885][T15377] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3696'. [ 892.575740][T15392] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3700'. [ 892.611430][T15392] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3700'. [ 892.628209][T15401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3700'. [ 892.644080][T15392] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3700'. [ 894.868681][ T11] device hsr_slave_0 left promiscuous mode [ 894.905925][ T11] device hsr_slave_1 left promiscuous mode [ 894.928989][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 894.954311][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.031236][ T11] device bond0 left promiscuous mode [ 895.037189][ T11] device bond_slave_0 left promiscuous mode [ 895.068123][ T11] device bond_slave_1 left promiscuous mode [ 895.078222][ T11] device bridge_slave_1 left promiscuous mode [ 895.091853][T15436] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3717'. [ 895.106051][ T11] device batadv_slave_0 left promiscuous mode [ 895.125522][ T11] bridge0: port 3(bond0) entered disabled state [ 895.137610][ T11] device bridge_slave_0 left promiscuous mode [ 895.154417][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.321765][ T11] device veth1_macvtap left promiscuous mode [ 895.361998][ T11] device veth0_macvtap left promiscuous mode [ 895.400350][ T11] device veth1_vlan left promiscuous mode [ 895.924084][T15442] FAULT_INJECTION: forcing a failure. [ 895.924084][T15442] name fail_futex, interval 1, probability 0, space 0, times 1 [ 895.961934][T15442] CPU: 0 PID: 15442 Comm: syz.5.3717 Not tainted 6.1.146-syzkaller #0 [ 895.970143][T15442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 895.980208][T15442] Call Trace: [ 895.983496][T15442] [ 895.986431][T15442] dump_stack_lvl+0x168/0x22e [ 895.991124][T15442] ? show_regs_print_info+0x12/0x12 [ 895.996334][T15442] ? load_image+0x3b0/0x3b0 [ 896.000853][T15442] ? __lock_acquire+0x13c0/0x7c50 [ 896.005904][T15442] should_fail_ex+0x399/0x4d0 [ 896.010600][T15442] get_futex_key+0x18f/0xf50 [ 896.015210][T15442] ? verify_lock_unused+0x140/0x140 [ 896.020423][T15442] ? futex_setup_timer+0xc0/0xc0 [ 896.025377][T15442] ? perf_trace_lock+0xf3/0x370 [ 896.030253][T15442] futex_wake+0x107/0x4b0 [ 896.034598][T15442] ? trace_event_raw_event_lock+0x230/0x230 [ 896.040505][T15442] ? futex_wake_mark+0x150/0x150 [ 896.045472][T15442] do_futex+0x2e2/0x320 [ 896.049649][T15442] ? __ia32_sys_get_robust_list+0x80/0x80 [ 896.055395][T15442] ? __might_fault+0xc2/0x120 [ 896.060096][T15442] mm_release+0x211/0x360 [ 896.064439][T15442] ? exit_mm_release+0x30/0x30 [ 896.069219][T15442] ? lockdep_hardirqs_on+0x94/0x140 [ 896.074446][T15442] exit_mm+0xa4/0x2c0 [ 896.078445][T15442] ? do_exit+0x2400/0x2400 [ 896.082874][T15442] ? taskstats_exit+0x35a/0x9d0 [ 896.087749][T15442] do_exit+0x8c1/0x2400 [ 896.091927][T15442] ? put_task_struct+0x80/0x80 [ 896.096708][T15442] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 896.102701][T15442] ? _raw_spin_lock_irq+0x7a/0xe0 [ 896.107742][T15442] ? lock_chain_count+0x20/0x20 [ 896.112603][T15442] ? _raw_spin_lock_irq+0xab/0xe0 [ 896.117644][T15442] do_group_exit+0x217/0x2d0 [ 896.122248][T15442] ? lockdep_hardirqs_on+0x94/0x140 [ 896.127464][T15442] get_signal+0x1272/0x1350 [ 896.132003][T15442] arch_do_signal_or_restart+0xb0/0x1230 [ 896.137661][T15442] ? __fget_files+0x44a/0x4d0 [ 896.142356][T15442] ? get_sigframe_size+0x10/0x10 [ 896.147303][T15442] ? fput+0x150/0x1a0 [ 896.151316][T15442] ? exit_to_user_mode_loop+0x3b/0x110 [ 896.156800][T15442] exit_to_user_mode_loop+0x70/0x110 [ 896.162109][T15442] exit_to_user_mode_prepare+0xb1/0x140 [ 896.167673][T15442] syscall_exit_to_user_mode+0x16/0x40 [ 896.173144][T15442] do_syscall_64+0x58/0xa0 [ 896.177569][T15442] ? clear_bhb_loop+0x60/0xb0 [ 896.182258][T15442] ? clear_bhb_loop+0x60/0xb0 [ 896.186956][T15442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 896.192866][T15442] RIP: 0033:0x7fdf1a58e9a9 [ 896.197290][T15442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.216908][T15442] RSP: 002b:00007fdf1b345038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 896.225334][T15442] RAX: fffffffffffffe00 RBX: 00007fdf1a7b6160 RCX: 00007fdf1a58e9a9 [ 896.233312][T15442] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 896.241294][T15442] RBP: 00007fdf1b345090 R08: 0000000000000000 R09: 0000000000000000 [ 896.249279][T15442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.257263][T15442] R13: 0000000000000001 R14: 00007fdf1a7b6160 R15: 00007ffc78927e68 [ 896.265263][T15442] [ 898.309461][T15458] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3724'. [ 898.745725][ T11] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 898.780419][ T11] team0 (unregistering): Port device team_slave_1 removed [ 898.844450][ T11] team0 (unregistering): Port device team_slave_0 removed [ 898.880807][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.921908][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.961274][ T11] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 899.369914][ T11] bond0 (unregistering): Released all slaves [ 899.437157][T15436] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3717'. [ 899.453453][T15448] netlink: 'syz.4.3721': attribute type 10 has an invalid length. [ 899.461364][T15448] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3721'. [ 899.484038][T15458] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3724'. [ 900.355560][T15505] FAULT_INJECTION: forcing a failure. [ 900.355560][T15505] name failslab, interval 1, probability 0, space 0, times 0 [ 900.427611][T15505] CPU: 1 PID: 15505 Comm: syz.4.3740 Not tainted 6.1.146-syzkaller #0 [ 900.435812][T15505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 900.445859][T15505] Call Trace: [ 900.449125][T15505] [ 900.452041][T15505] dump_stack_lvl+0x168/0x22e [ 900.456740][T15505] ? show_regs_print_info+0x12/0x12 [ 900.461927][T15505] ? load_image+0x3b0/0x3b0 [ 900.466431][T15505] ? __might_sleep+0xd0/0xd0 [ 900.471012][T15505] ? __lock_acquire+0x7c50/0x7c50 [ 900.476030][T15505] should_fail_ex+0x399/0x4d0 [ 900.480705][T15505] should_failslab+0x5/0x20 [ 900.485200][T15505] slab_pre_alloc_hook+0x59/0x310 [ 900.490213][T15505] kmem_cache_alloc_node+0x5a/0x320 [ 900.495396][T15505] ? __alloc_skb+0xfc/0x7e0 [ 900.499890][T15505] __alloc_skb+0xfc/0x7e0 [ 900.504202][T15505] ? netlink_autobind+0xda/0x300 [ 900.509133][T15505] netlink_sendmsg+0x645/0xbc0 [ 900.513888][T15505] ? netlink_getsockopt+0x540/0x540 [ 900.519074][T15505] ? aa_sock_msg_perm+0x94/0x150 [ 900.524003][T15505] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 900.529274][T15505] ? security_socket_sendmsg+0x7c/0xa0 [ 900.534727][T15505] ? netlink_getsockopt+0x540/0x540 [ 900.539911][T15505] ____sys_sendmsg+0x59b/0x970 [ 900.544675][T15505] ? __sys_sendmsg_sock+0x30/0x30 [ 900.549685][T15505] ? __import_iovec+0x315/0x500 [ 900.554539][T15505] ? import_iovec+0x6f/0xa0 [ 900.559035][T15505] ___sys_sendmsg+0x21c/0x290 [ 900.563706][T15505] ? __sys_sendmsg+0x270/0x270 [ 900.568467][T15505] ? __lock_acquire+0x7c50/0x7c50 [ 900.573490][T15505] ? __fdget+0x17c/0x200 [ 900.577729][T15505] __se_sys_sendmsg+0x19e/0x270 [ 900.582573][T15505] ? __x64_sys_sendmsg+0x80/0x80 [ 900.587507][T15505] ? lockdep_hardirqs_on+0x94/0x140 [ 900.592716][T15505] do_syscall_64+0x4c/0xa0 [ 900.597117][T15505] ? clear_bhb_loop+0x60/0xb0 [ 900.601776][T15505] ? clear_bhb_loop+0x60/0xb0 [ 900.606437][T15505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 900.612323][T15505] RIP: 0033:0x7fdad8d8e9a9 [ 900.616727][T15505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.636320][T15505] RSP: 002b:00007fdad9b74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 900.644727][T15505] RAX: ffffffffffffffda RBX: 00007fdad8fb5fa0 RCX: 00007fdad8d8e9a9 [ 900.652682][T15505] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 900.660638][T15505] RBP: 00007fdad9b74090 R08: 0000000000000000 R09: 0000000000000000 [ 900.668596][T15505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.676549][T15505] R13: 0000000000000000 R14: 00007fdad8fb5fa0 R15: 00007fffb9db5368 [ 900.684517][T15505] [ 900.770242][T15508] FAULT_INJECTION: forcing a failure. [ 900.770242][T15508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.797028][T15508] CPU: 1 PID: 15508 Comm: syz.3.3741 Not tainted 6.1.146-syzkaller #0 [ 900.805227][T15508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 900.815295][T15508] Call Trace: [ 900.818586][T15508] [ 900.821522][T15508] dump_stack_lvl+0x168/0x22e [ 900.826216][T15508] ? show_regs_print_info+0x12/0x12 [ 900.830569][T15512] netlink: 'syz.4.3743': attribute type 25 has an invalid length. [ 900.831414][T15508] ? load_image+0x3b0/0x3b0 [ 900.843733][T15508] ? __lock_acquire+0x7c50/0x7c50 [ 900.848780][T15508] should_fail_ex+0x399/0x4d0 [ 900.853478][T15508] _copy_from_user+0x2c/0x170 [ 900.858168][T15508] kstrtouint_from_user+0xbe/0x150 [ 900.863304][T15508] ? kstrtol_from_user+0x150/0x150 [ 900.868445][T15508] proc_fail_nth_write+0x85/0x1f0 [ 900.873479][T15508] ? proc_fail_nth_read+0x210/0x210 [ 900.878693][T15508] ? common_file_perm+0x171/0x1c0 [ 900.883734][T15508] ? proc_fail_nth_read+0x210/0x210 [ 900.888941][T15508] vfs_write+0x2c4/0x960 [ 900.893205][T15508] ? file_end_write+0x250/0x250 [ 900.898071][T15508] ? __fget_files+0x28/0x4d0 [ 900.902670][T15508] ? __fget_files+0x44a/0x4d0 [ 900.907367][T15508] ? __fdget_pos+0x2ae/0x360 [ 900.911971][T15508] ? ksys_write+0x71/0x240 [ 900.916406][T15508] ksys_write+0x143/0x240 [ 900.920751][T15508] ? __ia32_sys_read+0x80/0x80 [ 900.925529][T15508] ? lockdep_hardirqs_on+0x94/0x140 [ 900.930745][T15508] do_syscall_64+0x4c/0xa0 [ 900.935170][T15508] ? clear_bhb_loop+0x60/0xb0 [ 900.939852][T15508] ? clear_bhb_loop+0x60/0xb0 [ 900.944549][T15508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 900.950453][T15508] RIP: 0033:0x7fa75498d45f [ 900.954856][T15508] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 900.974449][T15508] RSP: 002b:00007fa7557e7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 900.982851][T15508] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa75498d45f [ 900.990810][T15508] RDX: 0000000000000001 RSI: 00007fa7557e70a0 RDI: 0000000000000004 [ 900.998765][T15508] RBP: 00007fa7557e7090 R08: 0000000000000000 R09: 0000000000000000 [ 901.006721][T15508] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 901.014737][T15508] R13: 0000000000000001 R14: 00007fa754bb6080 R15: 00007ffcebea23d8 [ 901.022725][T15508] [ 901.558233][T15542] netlink: 'syz.3.3754': attribute type 25 has an invalid length. [ 901.568182][T15544] netlink: 'syz.0.3753': attribute type 29 has an invalid length. [ 901.605070][T15544] netlink: 'syz.0.3753': attribute type 29 has an invalid length. [ 901.636563][T15546] FAULT_INJECTION: forcing a failure. [ 901.636563][T15546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 901.678175][T15546] CPU: 1 PID: 15546 Comm: syz.5.3755 Not tainted 6.1.146-syzkaller #0 [ 901.686461][T15546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 901.696526][T15546] Call Trace: [ 901.699806][T15546] [ 901.702736][T15546] dump_stack_lvl+0x168/0x22e [ 901.707417][T15546] ? show_regs_print_info+0x12/0x12 [ 901.712615][T15546] ? load_image+0x3b0/0x3b0 [ 901.717119][T15546] ? __lock_acquire+0x7c50/0x7c50 [ 901.722145][T15546] should_fail_ex+0x399/0x4d0 [ 901.726820][T15546] _copy_from_user+0x2c/0x170 [ 901.731491][T15546] iovec_from_user+0x143/0x360 [ 901.736253][T15546] __import_iovec+0x6d/0x500 [ 901.740833][T15546] ? __might_fault+0xc2/0x120 [ 901.745511][T15546] import_iovec+0x6f/0xa0 [ 901.749836][T15546] ___sys_sendmsg+0x1e4/0x290 [ 901.754506][T15546] ? __sys_sendmsg+0x270/0x270 [ 901.759277][T15546] ? __lock_acquire+0x7c50/0x7c50 [ 901.764307][T15546] ? __fdget+0x17c/0x200 [ 901.768544][T15546] __se_sys_sendmsg+0x19e/0x270 [ 901.773388][T15546] ? __x64_sys_sendmsg+0x80/0x80 [ 901.778326][T15546] ? lockdep_hardirqs_on+0x94/0x140 [ 901.783524][T15546] do_syscall_64+0x4c/0xa0 [ 901.787928][T15546] ? clear_bhb_loop+0x60/0xb0 [ 901.792596][T15546] ? clear_bhb_loop+0x60/0xb0 [ 901.797262][T15546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 901.803148][T15546] RIP: 0033:0x7fdf1a58e9a9 [ 901.807551][T15546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.827148][T15546] RSP: 002b:00007fdf1b387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.835550][T15546] RAX: ffffffffffffffda RBX: 00007fdf1a7b5fa0 RCX: 00007fdf1a58e9a9 [ 901.843511][T15546] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 901.851465][T15546] RBP: 00007fdf1b387090 R08: 0000000000000000 R09: 0000000000000000 [ 901.859422][T15546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.867379][T15546] R13: 0000000000000000 R14: 00007fdf1a7b5fa0 R15: 00007ffc78927e68 [ 901.875352][T15546] [ 902.280717][T15561] FAULT_INJECTION: forcing a failure. [ 902.280717][T15561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.313938][T15561] CPU: 0 PID: 15561 Comm: syz.4.3759 Not tainted 6.1.146-syzkaller #0 [ 902.322137][T15561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 902.332199][T15561] Call Trace: [ 902.335479][T15561] [ 902.338417][T15561] dump_stack_lvl+0x168/0x22e [ 902.343108][T15561] ? show_regs_print_info+0x12/0x12 [ 902.348314][T15561] ? load_image+0x3b0/0x3b0 [ 902.352814][T15561] ? __lock_acquire+0x7c50/0x7c50 [ 902.357832][T15561] should_fail_ex+0x399/0x4d0 [ 902.362501][T15561] _copy_from_iter+0x1c5/0x10c0 [ 902.367345][T15561] ? __lock_acquire+0x7c50/0x7c50 [ 902.372363][T15561] ? sock_alloc_send_pskb+0x871/0x980 [ 902.377730][T15561] ? copyout_mc+0x110/0x110 [ 902.382222][T15561] ? __virt_addr_valid+0x188/0x540 [ 902.387325][T15561] ? __virt_addr_valid+0x188/0x540 [ 902.392423][T15561] ? __virt_addr_valid+0x465/0x540 [ 902.397520][T15561] ? __phys_addr+0xb6/0x170 [ 902.402013][T15561] ? __check_object_size+0x500/0xa40 [ 902.407284][T15561] skb_copy_datagram_from_iter+0xef/0x690 [ 902.412997][T15561] ? skb_put+0x117/0x210 [ 902.417227][T15561] tun_get_user+0x14ba/0x3b90 [ 902.421906][T15561] ? rcu_read_unlock+0xa0/0xa0 [ 902.426665][T15561] ? tun_get+0x1c/0x2e0 [ 902.430811][T15561] ? __lock_acquire+0x7c50/0x7c50 [ 902.435826][T15561] ? tun_get+0x1c/0x2e0 [ 902.439974][T15561] tun_chr_write_iter+0x112/0x1f0 [ 902.444997][T15561] vfs_write+0x44c/0x960 [ 902.449232][T15561] ? file_end_write+0x250/0x250 [ 902.454072][T15561] ? __fget_files+0x44a/0x4d0 [ 902.458743][T15561] ? __fdget_pos+0x1d4/0x360 [ 902.463321][T15561] ? ksys_write+0x71/0x240 [ 902.467728][T15561] ksys_write+0x143/0x240 [ 902.472045][T15561] ? __ia32_sys_read+0x80/0x80 [ 902.476802][T15561] ? lockdep_hardirqs_on+0x94/0x140 [ 902.481995][T15561] do_syscall_64+0x4c/0xa0 [ 902.486394][T15561] ? clear_bhb_loop+0x60/0xb0 [ 902.491065][T15561] ? clear_bhb_loop+0x60/0xb0 [ 902.495727][T15561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 902.501614][T15561] RIP: 0033:0x7fdad8d8e9a9 [ 902.506014][T15561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 902.525608][T15561] RSP: 002b:00007fdad9b74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 902.534006][T15561] RAX: ffffffffffffffda RBX: 00007fdad8fb5fa0 RCX: 00007fdad8d8e9a9 [ 902.541960][T15561] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 902.549919][T15561] RBP: 00007fdad9b74090 R08: 0000000000000000 R09: 0000000000000000 [ 902.557877][T15561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.565833][T15561] R13: 0000000000000000 R14: 00007fdad8fb5fa0 R15: 00007fffb9db5368 [ 902.573797][T15561] [ 902.890352][T15567] device syzkaller0 entered promiscuous mode [ 903.145368][T15586] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3768'. [ 904.153810][T15598] FAULT_INJECTION: forcing a failure. [ 904.153810][T15598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.167563][T15598] CPU: 1 PID: 15598 Comm: syz.4.3773 Not tainted 6.1.146-syzkaller #0 [ 904.175742][T15598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 904.185792][T15598] Call Trace: [ 904.189054][T15598] [ 904.191963][T15598] dump_stack_lvl+0x168/0x22e [ 904.196633][T15598] ? show_regs_print_info+0x12/0x12 [ 904.201833][T15598] ? load_image+0x3b0/0x3b0 [ 904.206329][T15598] ? __lock_acquire+0x7c50/0x7c50 [ 904.211339][T15598] should_fail_ex+0x399/0x4d0 [ 904.216020][T15598] _copy_from_iter+0x1c5/0x10c0 [ 904.220881][T15598] ? __lock_acquire+0x7c50/0x7c50 [ 904.225900][T15598] ? sock_alloc_send_pskb+0x871/0x980 [ 904.231280][T15598] ? copyout_mc+0x110/0x110 [ 904.235777][T15598] ? __virt_addr_valid+0x188/0x540 [ 904.240901][T15598] ? __virt_addr_valid+0x188/0x540 [ 904.245998][T15598] ? __virt_addr_valid+0x465/0x540 [ 904.251095][T15598] ? __phys_addr+0xb6/0x170 [ 904.255592][T15598] ? __check_object_size+0x500/0xa40 [ 904.260878][T15598] skb_copy_datagram_from_iter+0xef/0x690 [ 904.266587][T15598] ? skb_put+0x117/0x210 [ 904.270824][T15598] tun_get_user+0x14ba/0x3b90 [ 904.275528][T15598] ? rcu_read_unlock+0xa0/0xa0 [ 904.280303][T15598] ? tun_get+0x1c/0x2e0 [ 904.284447][T15598] ? __lock_acquire+0x7c50/0x7c50 [ 904.289456][T15598] ? tun_get+0x1c/0x2e0 [ 904.293600][T15598] tun_chr_write_iter+0x112/0x1f0 [ 904.298619][T15598] vfs_write+0x44c/0x960 [ 904.302856][T15598] ? file_end_write+0x250/0x250 [ 904.307692][T15598] ? __fget_files+0x44a/0x4d0 [ 904.312358][T15598] ? __fdget_pos+0x1d4/0x360 [ 904.316938][T15598] ? ksys_write+0x71/0x240 [ 904.321364][T15598] ksys_write+0x143/0x240 [ 904.325713][T15598] ? __ia32_sys_read+0x80/0x80 [ 904.330463][T15598] ? lockdep_hardirqs_on+0x94/0x140 [ 904.335665][T15598] do_syscall_64+0x4c/0xa0 [ 904.340084][T15598] ? clear_bhb_loop+0x60/0xb0 [ 904.344746][T15598] ? clear_bhb_loop+0x60/0xb0 [ 904.349406][T15598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 904.355296][T15598] RIP: 0033:0x7fdad8d8e9a9 [ 904.359709][T15598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.379304][T15598] RSP: 002b:00007fdad9b74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 904.387701][T15598] RAX: ffffffffffffffda RBX: 00007fdad8fb5fa0 RCX: 00007fdad8d8e9a9 [ 904.395665][T15598] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 904.403630][T15598] RBP: 00007fdad9b74090 R08: 0000000000000000 R09: 0000000000000000 [ 904.411587][T15598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.419541][T15598] R13: 0000000000000000 R14: 00007fdad8fb5fa0 R15: 00007fffb9db5368 [ 904.427509][T15598] [ 904.812942][T15608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3775'. [ 905.070755][T15586] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3768'. [ 905.080205][T15590] netlink: 'syz.5.3768': attribute type 21 has an invalid length. [ 905.091017][T15590] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3768'. [ 905.100721][T15589] netlink: 'syz.3.3771': attribute type 10 has an invalid length. [ 905.124780][T15589] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3771'. [ 905.145025][T15589] bridge0: port 4(veth0_vlan) entered blocking state [ 905.151871][T15589] bridge0: port 4(veth0_vlan) entered disabled state [ 905.167860][T15589] net_ratelimit: 660 callbacks suppressed [ 905.167875][T15589] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 905.193594][T15591] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3768'. [ 905.287392][T15604] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3775'. [ 905.302911][T15608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3775'. [ 905.365213][T15584] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3768'. [ 905.407900][T15611] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3776'. [ 905.425257][T15607] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3775'. [ 905.515565][T15618] FAULT_INJECTION: forcing a failure. [ 905.515565][T15618] name failslab, interval 1, probability 0, space 0, times 0 [ 905.539000][T15618] CPU: 1 PID: 15618 Comm: syz.5.3779 Not tainted 6.1.146-syzkaller #0 [ 905.547192][T15618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 905.557253][T15618] Call Trace: [ 905.560542][T15618] [ 905.563483][T15618] dump_stack_lvl+0x168/0x22e [ 905.568175][T15618] ? show_regs_print_info+0x12/0x12 [ 905.573386][T15618] ? load_image+0x3b0/0x3b0 [ 905.577913][T15618] ? __might_sleep+0xd0/0xd0 [ 905.582527][T15618] ? __lock_acquire+0x7c50/0x7c50 [ 905.587575][T15618] should_fail_ex+0x399/0x4d0 [ 905.592275][T15618] should_failslab+0x5/0x20 [ 905.596792][T15618] slab_pre_alloc_hook+0x59/0x310 [ 905.601809][T15618] ? __rwlock_init+0x140/0x140 [ 905.606570][T15618] kmem_cache_alloc_lru+0x49/0x2e0 [ 905.611671][T15618] ? iget_locked+0x206/0x830 [ 905.616255][T15618] iget_locked+0x206/0x830 [ 905.620660][T15618] kernfs_get_inode+0x4b/0x6d0 [ 905.625418][T15618] cgroup_attach_permissions+0x26a/0x9d0 [ 905.631050][T15618] __cgroup_procs_write+0x1e4/0x350 [ 905.636243][T15618] cgroup_procs_write+0x23/0x40 [ 905.641083][T15618] ? cgroup_procs_next+0xa0/0xa0 [ 905.646013][T15618] cgroup_file_write+0x2f8/0x660 [ 905.650939][T15618] ? read_lock_is_recursive+0x10/0x10 [ 905.656307][T15618] ? cgroup_seqfile_stop+0xd0/0xd0 [ 905.661419][T15618] ? cgroup_seqfile_stop+0xd0/0xd0 [ 905.666517][T15618] kernfs_fop_write_iter+0x379/0x4c0 [ 905.671793][T15618] vfs_write+0x44c/0x960 [ 905.676030][T15618] ? file_end_write+0x250/0x250 [ 905.680873][T15618] ? __fget_files+0x44a/0x4d0 [ 905.685545][T15618] ? __fdget_pos+0x2ae/0x360 [ 905.690125][T15618] ? ksys_write+0x71/0x240 [ 905.694537][T15618] ksys_write+0x143/0x240 [ 905.698861][T15618] ? __ia32_sys_read+0x80/0x80 [ 905.703618][T15618] ? lockdep_hardirqs_on+0x94/0x140 [ 905.708809][T15618] do_syscall_64+0x4c/0xa0 [ 905.713211][T15618] ? clear_bhb_loop+0x60/0xb0 [ 905.717871][T15618] ? clear_bhb_loop+0x60/0xb0 [ 905.722535][T15618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 905.728424][T15618] RIP: 0033:0x7fdf1a58e9a9 [ 905.732826][T15618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.752416][T15618] RSP: 002b:00007fdf1b387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 905.760819][T15618] RAX: ffffffffffffffda RBX: 00007fdf1a7b5fa0 RCX: 00007fdf1a58e9a9 [ 905.768775][T15618] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000004 [ 905.776731][T15618] RBP: 00007fdf1b387090 R08: 0000000000000000 R09: 0000000000000000 [ 905.784686][T15618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.792640][T15618] R13: 0000000000000000 R14: 00007fdf1a7b5fa0 R15: 00007ffc78927e68 [ 905.800609][T15618] [ 905.859391][T15622] netlink: 'syz.0.3780': attribute type 29 has an invalid length. [ 905.894934][T15622] netlink: 'syz.0.3780': attribute type 29 has an invalid length. [ 905.925986][T15622] netlink: 'syz.0.3780': attribute type 29 has an invalid length. [ 905.952428][T15622] netlink: 'syz.0.3780': attribute type 29 has an invalid length. [ 905.982823][T15622] netlink: 'syz.0.3780': attribute type 29 has an invalid length. [ 906.015742][T15628] FAULT_INJECTION: forcing a failure. [ 906.015742][T15628] name failslab, interval 1, probability 0, space 0, times 0 [ 906.048041][T15628] CPU: 0 PID: 15628 Comm: syz.2.3783 Not tainted 6.1.146-syzkaller #0 [ 906.056235][T15628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 906.066298][T15628] Call Trace: [ 906.069583][T15628] [ 906.072528][T15628] dump_stack_lvl+0x168/0x22e [ 906.077229][T15628] ? show_regs_print_info+0x12/0x12 [ 906.082440][T15628] ? load_image+0x3b0/0x3b0 [ 906.086958][T15628] ? __might_sleep+0xd0/0xd0 [ 906.091563][T15628] ? __lock_acquire+0x7c50/0x7c50 [ 906.096608][T15628] should_fail_ex+0x399/0x4d0 [ 906.101308][T15628] should_failslab+0x5/0x20 [ 906.105824][T15628] slab_pre_alloc_hook+0x59/0x310 [ 906.110864][T15628] kmem_cache_alloc_node+0x5a/0x320 [ 906.116064][T15628] ? __alloc_skb+0xfc/0x7e0 [ 906.120577][T15628] __alloc_skb+0xfc/0x7e0 [ 906.124912][T15628] ? netlink_autobind+0xda/0x300 [ 906.129867][T15628] netlink_sendmsg+0x645/0xbc0 [ 906.134649][T15628] ? netlink_getsockopt+0x540/0x540 [ 906.139860][T15628] ? aa_sock_msg_perm+0x94/0x150 [ 906.144812][T15628] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 906.150100][T15628] ? security_socket_sendmsg+0x7c/0xa0 [ 906.155573][T15628] ? netlink_getsockopt+0x540/0x540 [ 906.160779][T15628] ____sys_sendmsg+0x59b/0x970 [ 906.165562][T15628] ? __sys_sendmsg_sock+0x30/0x30 [ 906.170600][T15628] ? __import_iovec+0x315/0x500 [ 906.175476][T15628] ? import_iovec+0x6f/0xa0 [ 906.180007][T15628] ___sys_sendmsg+0x21c/0x290 [ 906.184698][T15628] ? __sys_sendmsg+0x270/0x270 [ 906.189490][T15628] ? __lock_acquire+0x7c50/0x7c50 [ 906.194551][T15628] ? __fdget+0x17c/0x200 [ 906.198815][T15628] __se_sys_sendmsg+0x19e/0x270 [ 906.203683][T15628] ? __x64_sys_sendmsg+0x80/0x80 [ 906.208652][T15628] ? lockdep_hardirqs_on+0x94/0x140 [ 906.213855][T15628] do_syscall_64+0x4c/0xa0 [ 906.218302][T15628] ? clear_bhb_loop+0x60/0xb0 [ 906.222965][T15628] ? clear_bhb_loop+0x60/0xb0 [ 906.227631][T15628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 906.233521][T15628] RIP: 0033:0x7fc0e3d8e9a9 [ 906.237933][T15628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.257532][T15628] RSP: 002b:00007fc0e4b45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.265938][T15628] RAX: ffffffffffffffda RBX: 00007fc0e3fb5fa0 RCX: 00007fc0e3d8e9a9 [ 906.273898][T15628] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 906.281856][T15628] RBP: 00007fc0e4b45090 R08: 0000000000000000 R09: 0000000000000000 [ 906.289814][T15628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.297771][T15628] R13: 0000000000000000 R14: 00007fc0e3fb5fa0 R15: 00007ffce6ed10b8 [ 906.305737][T15628] [ 906.786818][T15644] FAULT_INJECTION: forcing a failure. [ 906.786818][T15644] name failslab, interval 1, probability 0, space 0, times 0 [ 906.804967][T15644] CPU: 1 PID: 15644 Comm: syz.5.3789 Not tainted 6.1.146-syzkaller #0 [ 906.813157][T15644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 906.823223][T15644] Call Trace: [ 906.826509][T15644] [ 906.829449][T15644] dump_stack_lvl+0x168/0x22e [ 906.834144][T15644] ? show_regs_print_info+0x12/0x12 [ 906.839344][T15644] ? load_image+0x3b0/0x3b0 [ 906.843851][T15644] ? __might_sleep+0xd0/0xd0 [ 906.848444][T15644] ? __lock_acquire+0x7c50/0x7c50 [ 906.853477][T15644] should_fail_ex+0x399/0x4d0 [ 906.858150][T15644] should_failslab+0x5/0x20 [ 906.862647][T15644] slab_pre_alloc_hook+0x59/0x310 [ 906.867656][T15644] ? finish_task_switch+0x26a/0x8f0 [ 906.872845][T15644] ? sctp_datamsg_from_user+0x84/0xee0 [ 906.878294][T15644] __kmem_cache_alloc_node+0x4f/0x260 [ 906.883656][T15644] ? sctp_datamsg_from_user+0x84/0xee0 [ 906.889104][T15644] kmalloc_trace+0x26/0xe0 [ 906.893512][T15644] sctp_datamsg_from_user+0x84/0xee0 [ 906.898787][T15644] ? __sk_mem_raise_allocated+0xac8/0x13f0 [ 906.904586][T15644] ? __sk_mem_schedule+0x7b/0xe0 [ 906.909512][T15644] sctp_sendmsg_to_asoc+0xfee/0x17e0 [ 906.914800][T15644] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 906.920778][T15644] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 906.926577][T15644] ? __local_bh_enable_ip+0x12a/0x1b0 [ 906.931941][T15644] ? _local_bh_enable+0xa0/0xa0 [ 906.936781][T15644] ? lock_sock_nested+0x66/0x100 [ 906.941708][T15644] ? sctp_sendmsg_check_sflags+0x18d/0x2d0 [ 906.947513][T15644] sctp_sendmsg+0x19df/0x2980 [ 906.952192][T15644] ? sctp_getsockopt+0x8a0/0x8a0 [ 906.957122][T15644] ? aa_af_perm+0x2b0/0x2b0 [ 906.961611][T15644] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 906.968020][T15644] ? inet_sendmsg+0x78/0x2f0 [ 906.972596][T15644] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 906.977866][T15644] ? security_socket_sendmsg+0x7c/0xa0 [ 906.983318][T15644] ? inet_send_prepare+0x260/0x260 [ 906.988416][T15644] ____sys_sendmsg+0x59b/0x970 [ 906.993178][T15644] ? __sys_sendmsg_sock+0x30/0x30 [ 906.998192][T15644] ? __import_iovec+0x315/0x500 [ 907.003042][T15644] ? import_iovec+0x6f/0xa0 [ 907.007552][T15644] ___sys_sendmsg+0x21c/0x290 [ 907.012234][T15644] ? __sys_sendmsg+0x270/0x270 [ 907.017013][T15644] ? __lock_acquire+0x7c50/0x7c50 [ 907.022049][T15644] ? __fdget+0x17c/0x200 [ 907.026290][T15644] __se_sys_sendmsg+0x19e/0x270 [ 907.031138][T15644] ? __x64_sys_sendmsg+0x80/0x80 [ 907.036076][T15644] ? lockdep_hardirqs_on+0x94/0x140 [ 907.041275][T15644] do_syscall_64+0x4c/0xa0 [ 907.045682][T15644] ? clear_bhb_loop+0x60/0xb0 [ 907.050344][T15644] ? clear_bhb_loop+0x60/0xb0 [ 907.055009][T15644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 907.060895][T15644] RIP: 0033:0x7fdf1a58e9a9 [ 907.065297][T15644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.084887][T15644] RSP: 002b:00007fdf1b366038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.093287][T15644] RAX: ffffffffffffffda RBX: 00007fdf1a7b6080 RCX: 00007fdf1a58e9a9 [ 907.101245][T15644] RDX: 000000000000ccff RSI: 0000200000000180 RDI: 0000000000000003 [ 907.109208][T15644] RBP: 00007fdf1b366090 R08: 0000000000000000 R09: 0000000000000000 [ 907.117164][T15644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.125119][T15644] R13: 0000000000000001 R14: 00007fdf1a7b6080 R15: 00007ffc78927e68 [ 907.133086][T15644] [ 907.340640][T15657] netlink: 'syz.5.3794': attribute type 16 has an invalid length. [ 907.947198][T15691] FAULT_INJECTION: forcing a failure. [ 907.947198][T15691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.006529][T15691] CPU: 1 PID: 15691 Comm: syz.0.3805 Not tainted 6.1.146-syzkaller #0 [ 908.014737][T15691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 908.024795][T15691] Call Trace: [ 908.028078][T15691] [ 908.031013][T15691] dump_stack_lvl+0x168/0x22e [ 908.035704][T15691] ? show_regs_print_info+0x12/0x12 [ 908.040909][T15691] ? load_image+0x3b0/0x3b0 [ 908.045424][T15691] ? __lock_acquire+0x7c50/0x7c50 [ 908.050472][T15691] ? unix_ioctl+0x250/0x650 [ 908.055001][T15691] should_fail_ex+0x399/0x4d0 [ 908.059706][T15691] _copy_from_user+0x2c/0x170 [ 908.064398][T15691] sock_do_ioctl+0x178/0x2f0 [ 908.069006][T15691] ? sock_show_fdinfo+0xb0/0xb0 [ 908.073887][T15691] sock_ioctl+0x4ed/0x6e0 [ 908.078235][T15691] ? sock_poll+0x3f0/0x3f0 [ 908.082673][T15691] ? bpf_lsm_file_ioctl+0x5/0x10 [ 908.087621][T15691] ? security_file_ioctl+0x7c/0xa0 [ 908.092743][T15691] ? sock_poll+0x3f0/0x3f0 [ 908.097178][T15691] __se_sys_ioctl+0xfa/0x170 [ 908.101792][T15691] do_syscall_64+0x4c/0xa0 [ 908.106226][T15691] ? clear_bhb_loop+0x60/0xb0 [ 908.110924][T15691] ? clear_bhb_loop+0x60/0xb0 [ 908.115619][T15691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 908.121533][T15691] RIP: 0033:0x7f516b78e9a9 [ 908.125954][T15691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.145575][T15691] RSP: 002b:00007f516c638038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.153997][T15691] RAX: ffffffffffffffda RBX: 00007f516b9b5fa0 RCX: 00007f516b78e9a9 [ 908.161983][T15691] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 908.169969][T15691] RBP: 00007f516c638090 R08: 0000000000000000 R09: 0000000000000000 [ 908.177949][T15691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.185930][T15691] R13: 0000000000000000 R14: 00007f516b9b5fa0 R15: 00007ffc53d3a2e8 [ 908.193923][T15691] [ 908.842390][T15708] syz.0.3810 (15708) used greatest stack depth: 17216 bytes left [ 909.119484][T15723] netlink: 'syz.2.3816': attribute type 21 has an invalid length. [ 909.203756][T15722] netlink: 'syz.0.3817': attribute type 9 has an invalid length. [ 910.184007][T15768] __nla_validate_parse: 9 callbacks suppressed [ 910.184023][T15768] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3828'. [ 910.371019][T15756] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3828'. [ 910.415050][T15768] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3828'. [ 910.448178][T15755] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3828'. [ 910.476151][T15752] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3828'. [ 910.524238][T15774] FAULT_INJECTION: forcing a failure. [ 910.524238][T15774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.537907][T15774] CPU: 1 PID: 15774 Comm: syz.4.3834 Not tainted 6.1.146-syzkaller #0 [ 910.546093][T15774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 910.556156][T15774] Call Trace: [ 910.559442][T15774] [ 910.562377][T15774] dump_stack_lvl+0x168/0x22e [ 910.567061][T15774] ? show_regs_print_info+0x12/0x12 [ 910.572252][T15774] ? load_image+0x3b0/0x3b0 [ 910.576747][T15774] ? __lock_acquire+0x7c50/0x7c50 [ 910.581762][T15774] ? verify_lock_unused+0x140/0x140 [ 910.586952][T15774] should_fail_ex+0x399/0x4d0 [ 910.591625][T15774] _copy_from_user+0x2c/0x170 [ 910.596291][T15774] ___sys_sendmsg+0x155/0x290 [ 910.600959][T15774] ? __sys_sendmsg+0x270/0x270 [ 910.605723][T15774] ? __lock_acquire+0x7c50/0x7c50 [ 910.610744][T15774] ? __fdget+0x17c/0x200 [ 910.614978][T15774] __se_sys_sendmsg+0x19e/0x270 [ 910.619813][T15774] ? ct_nmi_exit+0x145/0x1c0 [ 910.624391][T15774] ? __x64_sys_sendmsg+0x80/0x80 [ 910.629323][T15774] ? lockdep_hardirqs_on+0x94/0x140 [ 910.634509][T15774] do_syscall_64+0x4c/0xa0 [ 910.638920][T15774] ? clear_bhb_loop+0x60/0xb0 [ 910.643584][T15774] ? clear_bhb_loop+0x60/0xb0 [ 910.648245][T15774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 910.654127][T15774] RIP: 0033:0x7fdad8d8e9a9 [ 910.658528][T15774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.678119][T15774] RSP: 002b:00007fdad9b74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 910.686517][T15774] RAX: ffffffffffffffda RBX: 00007fdad8fb5fa0 RCX: 00007fdad8d8e9a9 [ 910.694473][T15774] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 910.702429][T15774] RBP: 00007fdad9b74090 R08: 0000000000000000 R09: 0000000000000000 [ 910.710386][T15774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.718345][T15774] R13: 0000000000000000 R14: 00007fdad8fb5fa0 R15: 00007fffb9db5368 [ 910.726311][T15774] [ 910.782749][T15777] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3835'. [ 910.841917][T15777] validate_nla: 5 callbacks suppressed [ 910.841934][T15777] netlink: 'syz.2.3835': attribute type 4 has an invalid length. [ 910.905861][T15777] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3835'. [ 910.983597][T15784] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3835'. [ 911.118423][T15790] netlink: 'syz.4.3838': attribute type 25 has an invalid length. [ 911.983390][T15814] netlink: 'syz.2.3847': attribute type 29 has an invalid length. [ 912.212706][T15824] FAULT_INJECTION: forcing a failure. [ 912.212706][T15824] name failslab, interval 1, probability 0, space 0, times 0 [ 912.229904][T15824] CPU: 0 PID: 15824 Comm: syz.4.3850 Not tainted 6.1.146-syzkaller #0 [ 912.238091][T15824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 912.248153][T15824] Call Trace: [ 912.251435][T15824] [ 912.254367][T15824] dump_stack_lvl+0x168/0x22e [ 912.259053][T15824] ? show_regs_print_info+0x12/0x12 [ 912.264256][T15824] ? load_image+0x3b0/0x3b0 [ 912.268769][T15824] ? __might_sleep+0xd0/0xd0 [ 912.273376][T15824] ? __lock_acquire+0x7c50/0x7c50 [ 912.278414][T15824] should_fail_ex+0x399/0x4d0 [ 912.283107][T15824] should_failslab+0x5/0x20 [ 912.287623][T15824] slab_pre_alloc_hook+0x59/0x310 [ 912.292661][T15824] kmem_cache_alloc_node+0x5a/0x320 [ 912.297872][T15824] ? __alloc_skb+0xfc/0x7e0 [ 912.302383][T15824] __alloc_skb+0xfc/0x7e0 [ 912.306720][T15824] ? netlink_autobind+0xda/0x300 [ 912.311673][T15824] netlink_sendmsg+0x645/0xbc0 [ 912.316465][T15824] ? netlink_getsockopt+0x540/0x540 [ 912.321683][T15824] ? aa_sock_msg_perm+0x94/0x150 [ 912.326638][T15824] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 912.331930][T15824] ? security_socket_sendmsg+0x7c/0xa0 [ 912.337408][T15824] ? netlink_getsockopt+0x540/0x540 [ 912.342620][T15824] ____sys_sendmsg+0x59b/0x970 [ 912.347401][T15824] ? __sys_sendmsg_sock+0x30/0x30 [ 912.352429][T15824] ? __import_iovec+0x315/0x500 [ 912.357296][T15824] ? import_iovec+0x6f/0xa0 [ 912.361812][T15824] ___sys_sendmsg+0x21c/0x290 [ 912.366494][T15824] ? __sys_sendmsg+0x270/0x270 [ 912.371295][T15824] ? __lock_acquire+0x7c50/0x7c50 [ 912.376353][T15824] ? __fdget+0x17c/0x200 [ 912.380607][T15824] __se_sys_sendmsg+0x19e/0x270 [ 912.385474][T15824] ? __x64_sys_sendmsg+0x80/0x80 [ 912.390439][T15824] ? lockdep_hardirqs_on+0x94/0x140 [ 912.395655][T15824] do_syscall_64+0x4c/0xa0 [ 912.400093][T15824] ? clear_bhb_loop+0x60/0xb0 [ 912.404814][T15824] ? clear_bhb_loop+0x60/0xb0 [ 912.409502][T15824] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 912.415408][T15824] RIP: 0033:0x7fdad8d8e9a9 [ 912.419825][T15824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.439438][T15824] RSP: 002b:00007fdad9b74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 912.447860][T15824] RAX: ffffffffffffffda RBX: 00007fdad8fb5fa0 RCX: 00007fdad8d8e9a9 [ 912.455839][T15824] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 912.463817][T15824] RBP: 00007fdad9b74090 R08: 0000000000000000 R09: 0000000000000000 [ 912.471808][T15824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.479780][T15824] R13: 0000000000000000 R14: 00007fdad8fb5fa0 R15: 00007fffb9db5368 [ 912.487771][T15824] [ 913.222057][T15849] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3854'. [ 914.277791][T15814] netlink: 'syz.2.3847': attribute type 29 has an invalid length. [ 914.286430][T15841] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3854'. [ 914.304974][T15844] netlink: 'syz.3.3856': attribute type 9 has an invalid length. [ 915.491032][T15889] netlink: 'syz.5.3871': attribute type 2 has an invalid length. [ 915.499250][T15889] __nla_validate_parse: 2 callbacks suppressed [ 915.499266][T15889] netlink: 51 bytes leftover after parsing attributes in process `syz.5.3871'. [ 915.753754][T15899] FAULT_INJECTION: forcing a failure. [ 915.753754][T15899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.767190][T15899] CPU: 1 PID: 15899 Comm: syz.5.3874 Not tainted 6.1.146-syzkaller #0 [ 915.775357][T15899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 915.785424][T15899] Call Trace: [ 915.788707][T15899] [ 915.791645][T15899] dump_stack_lvl+0x168/0x22e [ 915.796342][T15899] ? show_regs_print_info+0x12/0x12 [ 915.801555][T15899] ? load_image+0x3b0/0x3b0 [ 915.806080][T15899] ? __lock_acquire+0x7c50/0x7c50 [ 915.811121][T15899] should_fail_ex+0x399/0x4d0 [ 915.815893][T15899] _copy_from_user+0x2c/0x170 [ 915.820566][T15899] iovec_from_user+0x143/0x360 [ 915.825326][T15899] __import_iovec+0x6d/0x500 [ 915.829907][T15899] ? __might_fault+0xc2/0x120 [ 915.834587][T15899] import_iovec+0x6f/0xa0 [ 915.838911][T15899] ___sys_sendmsg+0x1e4/0x290 [ 915.843579][T15899] ? __sys_sendmsg+0x270/0x270 [ 915.848343][T15899] ? __lock_acquire+0x7c50/0x7c50 [ 915.853367][T15899] ? __fdget+0x17c/0x200 [ 915.857601][T15899] __se_sys_sendmsg+0x19e/0x270 [ 915.862446][T15899] ? __x64_sys_sendmsg+0x80/0x80 [ 915.867381][T15899] ? lockdep_hardirqs_on+0x94/0x140 [ 915.872570][T15899] do_syscall_64+0x4c/0xa0 [ 915.876971][T15899] ? clear_bhb_loop+0x60/0xb0 [ 915.881630][T15899] ? clear_bhb_loop+0x60/0xb0 [ 915.886294][T15899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 915.892176][T15899] RIP: 0033:0x7fdf1a58e9a9 [ 915.896583][T15899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 915.916171][T15899] RSP: 002b:00007fdf1b387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 915.924573][T15899] RAX: ffffffffffffffda RBX: 00007fdf1a7b5fa0 RCX: 00007fdf1a58e9a9 [ 915.932535][T15899] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 915.940503][T15899] RBP: 00007fdf1b387090 R08: 0000000000000000 R09: 0000000000000000 [ 915.948458][T15899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.956413][T15899] R13: 0000000000000000 R14: 00007fdf1a7b5fa0 R15: 00007ffc78927e68 [ 915.964378][T15899] [ 916.168384][T15902] netlink: 'syz.2.3872': attribute type 9 has an invalid length. [ 916.178301][T15902] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3872'. [ 917.172444][T15942] netlink: 'syz.5.3891': attribute type 12 has an invalid length. [ 917.203768][T15942] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3891'. [ 917.512700][T15959] FAULT_INJECTION: forcing a failure. [ 917.512700][T15959] name failslab, interval 1, probability 0, space 0, times 0 [ 917.554878][T15959] CPU: 1 PID: 15959 Comm: syz.3.3899 Not tainted 6.1.146-syzkaller #0 [ 917.563072][T15959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 917.573134][T15959] Call Trace: [ 917.576417][T15959] [ 917.579353][T15959] dump_stack_lvl+0x168/0x22e [ 917.584045][T15959] ? show_regs_print_info+0x12/0x12 [ 917.589255][T15959] ? load_image+0x3b0/0x3b0 [ 917.593772][T15959] ? __might_sleep+0xd0/0xd0 [ 917.598377][T15959] ? __lock_acquire+0x7c50/0x7c50 [ 917.603410][T15959] ? mark_lock+0x94/0x320 [ 917.607757][T15959] should_fail_ex+0x399/0x4d0 [ 917.612453][T15959] should_failslab+0x5/0x20 [ 917.616972][T15959] slab_pre_alloc_hook+0x59/0x310 [ 917.622007][T15959] ? __get_vm_area_node+0x122/0x330 [ 917.627220][T15959] __kmem_cache_alloc_node+0x4f/0x260 [ 917.632602][T15959] ? __get_vm_area_node+0x122/0x330 [ 917.637811][T15959] kmalloc_node_trace+0x22/0xe0 [ 917.642676][T15959] __get_vm_area_node+0x122/0x330 [ 917.647717][T15959] __vmalloc_node_range+0x357/0x1390 [ 917.653009][T15959] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 917.658589][T15959] ? free_vm_area+0x50/0x50 [ 917.663105][T15959] ? end_current_label_crit_section+0x170/0x170 [ 917.669364][T15959] ? __lock_acquire+0x7c50/0x7c50 [ 917.674407][T15959] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 917.679965][T15959] __vmalloc+0x76/0x80 [ 917.684042][T15959] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 917.689602][T15959] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 917.694991][T15959] ? bpf_lsm_capable+0x5/0x10 [ 917.699682][T15959] bpf_prog_alloc+0x1c/0x1b0 [ 917.704288][T15959] bpf_prog_load+0x7b6/0x15a0 [ 917.708995][T15959] ? map_freeze+0x390/0x390 [ 917.713516][T15959] ? __might_fault+0xa6/0x120 [ 917.718226][T15959] ? __might_fault+0xa6/0x120 [ 917.722916][T15959] ? __might_fault+0xc2/0x120 [ 917.727609][T15959] ? __might_fault+0xa6/0x120 [ 917.732305][T15959] ? bpf_lsm_bpf+0x5/0x10 [ 917.736646][T15959] ? security_bpf+0x7a/0xa0 [ 917.741164][T15959] __sys_bpf+0x520/0x6d0 [ 917.745421][T15959] ? bpf_link_show_fdinfo+0x340/0x340 [ 917.750819][T15959] ? lock_chain_count+0x20/0x20 [ 917.755678][T15959] __x64_sys_bpf+0x78/0x90 [ 917.760083][T15959] do_syscall_64+0x4c/0xa0 [ 917.764480][T15959] ? clear_bhb_loop+0x60/0xb0 [ 917.769150][T15959] ? clear_bhb_loop+0x60/0xb0 [ 917.773835][T15959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 917.779727][T15959] RIP: 0033:0x7fa75498e9a9 [ 917.784147][T15959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.803740][T15959] RSP: 002b:00007fa755808038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 917.812133][T15959] RAX: ffffffffffffffda RBX: 00007fa754bb5fa0 RCX: 00007fa75498e9a9 [ 917.820100][T15959] RDX: 0000000000000090 RSI: 0000200000000600 RDI: 0000000000000005 [ 917.828076][T15959] RBP: 00007fa755808090 R08: 0000000000000000 R09: 0000000000000000 [ 917.836053][T15959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.844029][T15959] R13: 0000000000000001 R14: 00007fa754bb5fa0 R15: 00007ffcebea23d8 [ 917.852009][T15959] [ 917.874611][T15959] syz.3.3899: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 917.891156][T15959] CPU: 1 PID: 15959 Comm: syz.3.3899 Not tainted 6.1.146-syzkaller #0 [ 917.899317][T15959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 917.909353][T15959] Call Trace: [ 917.912616][T15959] [ 917.915530][T15959] dump_stack_lvl+0x168/0x22e [ 917.920187][T15959] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 917.926583][T15959] ? show_regs_print_info+0x12/0x12 [ 917.931762][T15959] ? load_image+0x3b0/0x3b0 [ 917.936263][T15959] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 917.942684][T15959] ? cpuset_print_current_mems_allowed+0x2df/0x360 [ 917.949169][T15959] warn_alloc+0x20c/0x300 [ 917.953480][T15959] ? __get_vm_area_node+0x122/0x330 [ 917.958658][T15959] ? zone_watermark_ok_safe+0x270/0x270 [ 917.964184][T15959] ? rcu_is_watching+0x11/0xa0 [ 917.968930][T15959] ? __get_vm_area_node+0x318/0x330 [ 917.974109][T15959] __vmalloc_node_range+0x37c/0x1390 [ 917.979384][T15959] ? free_vm_area+0x50/0x50 [ 917.983865][T15959] ? end_current_label_crit_section+0x170/0x170 [ 917.990092][T15959] ? __lock_acquire+0x7c50/0x7c50 [ 917.995108][T15959] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 918.000645][T15959] __vmalloc+0x76/0x80 [ 918.004701][T15959] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 918.010235][T15959] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 918.015600][T15959] ? bpf_lsm_capable+0x5/0x10 [ 918.020266][T15959] bpf_prog_alloc+0x1c/0x1b0 [ 918.024847][T15959] bpf_prog_load+0x7b6/0x15a0 [ 918.029521][T15959] ? map_freeze+0x390/0x390 [ 918.034009][T15959] ? __might_fault+0xa6/0x120 [ 918.038699][T15959] ? __might_fault+0xa6/0x120 [ 918.043378][T15959] ? __might_fault+0xc2/0x120 [ 918.048052][T15959] ? __might_fault+0xa6/0x120 [ 918.052737][T15959] ? bpf_lsm_bpf+0x5/0x10 [ 918.057069][T15959] ? security_bpf+0x7a/0xa0 [ 918.061576][T15959] __sys_bpf+0x520/0x6d0 [ 918.065825][T15959] ? bpf_link_show_fdinfo+0x340/0x340 [ 918.071200][T15959] ? lock_chain_count+0x20/0x20 [ 918.076049][T15959] __x64_sys_bpf+0x78/0x90 [ 918.080461][T15959] do_syscall_64+0x4c/0xa0 [ 918.084870][T15959] ? clear_bhb_loop+0x60/0xb0 [ 918.089536][T15959] ? clear_bhb_loop+0x60/0xb0 [ 918.094206][T15959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 918.100096][T15959] RIP: 0033:0x7fa75498e9a9 [ 918.104502][T15959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.124104][T15959] RSP: 002b:00007fa755808038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 918.132505][T15959] RAX: ffffffffffffffda RBX: 00007fa754bb5fa0 RCX: 00007fa75498e9a9 [ 918.140462][T15959] RDX: 0000000000000090 RSI: 0000200000000600 RDI: 0000000000000005 [ 918.148419][T15959] RBP: 00007fa755808090 R08: 0000000000000000 R09: 0000000000000000 [ 918.156373][T15959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.164338][T15959] R13: 0000000000000001 R14: 00007fa754bb5fa0 R15: 00007ffcebea23d8 [ 918.172305][T15959] [ 918.199233][T15959] Mem-Info: [ 918.203018][T15959] active_anon:5866 inactive_anon:0 isolated_anon:0 [ 918.203018][T15959] active_file:23194 inactive_file:40086 isolated_file:0 [ 918.203018][T15959] unevictable:768 dirty:473 writeback:0 [ 918.203018][T15959] slab_reclaimable:21114 slab_unreclaimable:103652 [ 918.203018][T15959] mapped:30379 shmem:1373 pagetables:654 [ 918.203018][T15959] sec_pagetables:0 bounce:0 [ 918.203018][T15959] kernel_misc_reclaimable:0 [ 918.203018][T15959] free:1290064 free_pcp:10165 free_cma:0 [ 918.275989][T15964] netlink: 'syz.5.3897': attribute type 9 has an invalid length. [ 918.283888][T15964] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3897'. [ 918.314561][T15959] Node 0 active_anon:23264kB inactive_anon:0kB active_file:92776kB inactive_file:160140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121516kB dirty:1884kB writeback:0kB shmem:3956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11292kB pagetables:2516kB sec_pagetables:0kB all_unreclaimable? no [ 918.348343][T15959] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 918.379964][T15959] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 918.412352][T15959] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 918.424806][T15959] Node 0 DMA32 free:1246308kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:23264kB inactive_anon:0kB active_file:92776kB inactive_file:160140kB unevictable:1536kB writepending:1884kB present:3129332kB managed:2593360kB mlocked:0kB bounce:0kB free_pcp:23732kB local_pcp:2708kB free_cma:0kB [ 918.508852][T15959] lowmem_reserve[]: 0 0 1 1 1 [ 918.513876][T15959] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 918.527236][T15976] netlink: 'syz.5.3903': attribute type 2 has an invalid length. [ 918.568245][T15976] netlink: 'syz.5.3903': attribute type 11 has an invalid length. [ 918.582711][T15976] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3903'. [ 918.612384][T15959] lowmem_reserve[]: 0 0 0 0 0 [ 918.617666][T15959] Node 1 Normal free:3898576kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18720kB local_pcp:11968kB free_cma:0kB [ 918.674599][T15959] lowmem_reserve[]: 0 0 0 0 0 [ 918.679468][T15959] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 918.717848][T15959] Node 0 DMA32: 2066*4kB (UE) 2302*8kB (UME) 1728*16kB (UME) 2114*32kB (UME) 1415*64kB (UME) 477*128kB (UME) 240*256kB (UM) 81*512kB (UM) 33*1024kB (UME) 2*2048kB (ME) 208*4096kB (UM) = 1266360kB [ 918.754765][T15959] Node 0 Normal: 3*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 918.774587][T15959] Node 1 Normal: 272*4kB (UE) 66*8kB (UE) 36*16kB (UME) 94*32kB (UME) 44*64kB (UME) 13*128kB (UME) 13*256kB (UM) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3898576kB [ 918.833198][T15959] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 918.864684][T15959] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 918.874009][T15959] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 918.914123][T15959] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 918.948719][T15959] 64653 total pagecache pages [ 918.953651][T15959] 0 pages in swap cache [ 918.969156][T15959] Free swap = 124996kB [ 918.973339][T15959] Total swap = 124996kB [ 918.991562][T15959] 2097051 pages RAM [ 919.013093][T15959] 0 pages HighMem/MovableOnly [ 919.032649][T15959] 415110 pages reserved [ 919.058483][T15959] 0 pages cma reserved [ 919.656053][T16008] netlink: 'syz.3.3915': attribute type 9 has an invalid length. [ 919.664021][T16008] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3915'. [ 919.967530][T16018] netlink: 'syz.0.3919': attribute type 2 has an invalid length. [ 920.004793][T16018] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3919'. [ 920.021076][T16018] netlink: 'syz.0.3919': attribute type 29 has an invalid length. [ 920.029791][T16018] netlink: 'syz.0.3919': attribute type 29 has an invalid length. [ 920.046100][T16020] FAULT_INJECTION: forcing a failure. [ 920.046100][T16020] name failslab, interval 1, probability 0, space 0, times 0 [ 920.049312][T16018] netlink: 'syz.0.3919': attribute type 29 has an invalid length. [ 920.084913][T16020] CPU: 0 PID: 16020 Comm: syz.3.3920 Not tainted 6.1.146-syzkaller #0 [ 920.093103][T16020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 920.103164][T16020] Call Trace: [ 920.106454][T16020] [ 920.109388][T16020] dump_stack_lvl+0x168/0x22e [ 920.114083][T16020] ? show_regs_print_info+0x12/0x12 [ 920.119291][T16020] ? load_image+0x3b0/0x3b0 [ 920.123805][T16020] ? __might_sleep+0xd0/0xd0 [ 920.128406][T16020] ? __lock_acquire+0x7c50/0x7c50 [ 920.133460][T16020] should_fail_ex+0x399/0x4d0 [ 920.138155][T16020] should_failslab+0x5/0x20 [ 920.142674][T16020] slab_pre_alloc_hook+0x59/0x310 [ 920.147710][T16020] kmem_cache_alloc_node+0x5a/0x320 [ 920.152908][T16020] ? __alloc_skb+0xfc/0x7e0 [ 920.157413][T16020] __alloc_skb+0xfc/0x7e0 [ 920.161735][T16020] ? netlink_autobind+0xda/0x300 [ 920.166664][T16020] netlink_sendmsg+0x645/0xbc0 [ 920.171419][T16020] ? netlink_getsockopt+0x540/0x540 [ 920.176611][T16020] ? aa_sock_msg_perm+0x94/0x150 [ 920.181558][T16020] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 920.186845][T16020] ? security_socket_sendmsg+0x7c/0xa0 [ 920.192304][T16020] ? netlink_getsockopt+0x540/0x540 [ 920.197493][T16020] ____sys_sendmsg+0x59b/0x970 [ 920.202257][T16020] ? __sys_sendmsg_sock+0x30/0x30 [ 920.207271][T16020] ? __import_iovec+0x315/0x500 [ 920.212122][T16020] ? import_iovec+0x6f/0xa0 [ 920.216636][T16020] ___sys_sendmsg+0x21c/0x290 [ 920.221314][T16020] ? __sys_sendmsg+0x270/0x270 [ 920.226076][T16020] ? __lock_acquire+0x7c50/0x7c50 [ 920.231102][T16020] ? __fdget+0x17c/0x200 [ 920.235335][T16020] __se_sys_sendmsg+0x19e/0x270 [ 920.240183][T16020] ? __x64_sys_sendmsg+0x80/0x80 [ 920.245120][T16020] ? lockdep_hardirqs_on+0x94/0x140 [ 920.250313][T16020] do_syscall_64+0x4c/0xa0 [ 920.254718][T16020] ? clear_bhb_loop+0x60/0xb0 [ 920.259385][T16020] ? clear_bhb_loop+0x60/0xb0 [ 920.264054][T16020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 920.269941][T16020] RIP: 0033:0x7fa75498e9a9 [ 920.274346][T16020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.293941][T16020] RSP: 002b:00007fa755808038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.302345][T16020] RAX: ffffffffffffffda RBX: 00007fa754bb5fa0 RCX: 00007fa75498e9a9 [ 920.310318][T16020] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 920.318283][T16020] RBP: 00007fa755808090 R08: 0000000000000000 R09: 0000000000000000 [ 920.326245][T16020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.334205][T16020] R13: 0000000000000000 R14: 00007fa754bb5fa0 R15: 00007ffcebea23d8 [ 920.342182][T16020] [ 921.384921][T16049] device syzkaller0 entered promiscuous mode [ 921.486545][T16049] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3932'. [ 922.062513][ T4318] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 922.075737][ T4318] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 922.085664][ T4318] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 922.094170][ T4318] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 922.120093][ T4318] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 922.129163][ T4318] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 922.294944][T16070] validate_nla: 4 callbacks suppressed [ 922.294959][T16070] netlink: 'syz.2.3940': attribute type 12 has an invalid length. [ 922.413161][T16070] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3940'. [ 922.772366][T16066] chnl_net:caif_netlink_parms(): no params data found [ 923.360324][T16066] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.385646][T16066] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.434124][T16066] device bridge_slave_0 entered promiscuous mode [ 923.473689][T16066] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.504707][T16066] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.529624][T16066] device bridge_slave_1 entered promiscuous mode [ 923.920253][T16066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.977486][T16066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.164634][ T4323] Bluetooth: hci1: command 0x0409 tx timeout [ 924.356347][T16066] team0: Port device team_slave_0 added [ 924.363430][T16066] team0: Port device team_slave_1 added [ 924.453282][T16066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.460822][T16066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.488726][T16066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 924.653050][T16066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.669482][T16066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.695722][T16066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.960600][T16132] netlink: 'syz.3.3959': attribute type 9 has an invalid length. [ 924.978890][T16132] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3959'. [ 925.058664][T16066] device hsr_slave_0 entered promiscuous mode [ 925.084360][T16066] device hsr_slave_1 entered promiscuous mode [ 925.174715][T16066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 925.182325][T16066] Cannot create hsr debugfs directory [ 925.813374][T16066] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.086713][T16162] netlink: 'syz.4.3968': attribute type 25 has an invalid length. [ 926.106605][T16162] netlink: 'syz.4.3968': attribute type 5 has an invalid length. [ 926.170173][T16066] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.244721][ T4323] Bluetooth: hci1: command 0x041b tx timeout [ 926.330898][T16066] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.351989][T16170] netlink: 'syz.0.3972': attribute type 9 has an invalid length. [ 926.364926][T16170] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3972'. [ 926.418726][T16174] FAULT_INJECTION: forcing a failure. [ 926.418726][T16174] name failslab, interval 1, probability 0, space 0, times 0 [ 926.433676][T16066] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.443091][T16174] CPU: 1 PID: 16174 Comm: syz.2.3975 Not tainted 6.1.146-syzkaller #0 [ 926.452101][T16174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 926.462155][T16174] Call Trace: [ 926.465431][T16174] [ 926.468366][T16174] dump_stack_lvl+0x168/0x22e [ 926.473032][T16174] ? show_regs_print_info+0x12/0x12 [ 926.478224][T16174] ? load_image+0x3b0/0x3b0 [ 926.482753][T16174] ? __might_sleep+0xd0/0xd0 [ 926.487361][T16174] ? __lock_acquire+0x7c50/0x7c50 [ 926.492406][T16174] should_fail_ex+0x399/0x4d0 [ 926.497102][T16174] should_failslab+0x5/0x20 [ 926.501616][T16174] slab_pre_alloc_hook+0x59/0x310 [ 926.506653][T16174] kmem_cache_alloc_node+0x5a/0x320 [ 926.511861][T16174] ? __alloc_skb+0xfc/0x7e0 [ 926.516377][T16174] __alloc_skb+0xfc/0x7e0 [ 926.520718][T16174] ? netlink_autobind+0xda/0x300 [ 926.525671][T16174] netlink_sendmsg+0x645/0xbc0 [ 926.530466][T16174] ? netlink_getsockopt+0x540/0x540 [ 926.535678][T16174] ? aa_sock_msg_perm+0x94/0x150 [ 926.540636][T16174] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 926.545928][T16174] ? security_socket_sendmsg+0x7c/0xa0 [ 926.551389][T16174] ? netlink_getsockopt+0x540/0x540 [ 926.556589][T16174] ____sys_sendmsg+0x59b/0x970 [ 926.561359][T16174] ? __sys_sendmsg_sock+0x30/0x30 [ 926.566378][T16174] ? __import_iovec+0x315/0x500 [ 926.571236][T16174] ? import_iovec+0x6f/0xa0 [ 926.575741][T16174] ___sys_sendmsg+0x21c/0x290 [ 926.580414][T16174] ? __sys_sendmsg+0x270/0x270 [ 926.585184][T16174] ? __lock_acquire+0x7c50/0x7c50 [ 926.590216][T16174] ? __fdget+0x17c/0x200 [ 926.594460][T16174] __se_sys_sendmsg+0x19e/0x270 [ 926.599302][T16174] ? __x64_sys_sendmsg+0x80/0x80 [ 926.604243][T16174] ? lockdep_hardirqs_on+0x94/0x140 [ 926.609437][T16174] do_syscall_64+0x4c/0xa0 [ 926.613841][T16174] ? clear_bhb_loop+0x60/0xb0 [ 926.618507][T16174] ? clear_bhb_loop+0x60/0xb0 [ 926.623173][T16174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 926.629062][T16174] RIP: 0033:0x7fc0e3d8e9a9 [ 926.633468][T16174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.653065][T16174] RSP: 002b:00007fc0e4b45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.661466][T16174] RAX: ffffffffffffffda RBX: 00007fc0e3fb5fa0 RCX: 00007fc0e3d8e9a9 [ 926.669425][T16174] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 926.677385][T16174] RBP: 00007fc0e4b45090 R08: 0000000000000000 R09: 0000000000000000 [ 926.685343][T16174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.693299][T16174] R13: 0000000000000000 R14: 00007fc0e3fb5fa0 R15: 00007ffce6ed10b8 [ 926.701267][T16174] [ 926.938269][T16066] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 926.972938][T16183] netlink: 'syz.3.3980': attribute type 10 has an invalid length. [ 926.994733][T16183] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3980'. [ 927.036253][T16066] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 927.047678][T16066] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 927.079755][T16066] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 927.443311][T16066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.497568][ T6948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 927.556015][ T6948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 927.571154][T16066] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.590432][T16213] netlink: 'syz.2.3988': attribute type 25 has an invalid length. [ 927.605395][T16213] netlink: 'syz.2.3988': attribute type 5 has an invalid length. [ 927.665120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 927.720458][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 927.771438][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.778633][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.797859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 927.934630][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 927.950256][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 927.971833][ T9787] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.979058][ T9787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.983241][T16224] FAULT_INJECTION: forcing a failure. [ 927.983241][T16224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 927.988862][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 928.006984][T16224] CPU: 1 PID: 16224 Comm: syz.2.3992 Not tainted 6.1.146-syzkaller #0 [ 928.015940][T16224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 928.026007][T16224] Call Trace: [ 928.029301][T16224] [ 928.032248][T16224] dump_stack_lvl+0x168/0x22e [ 928.036947][T16224] ? show_regs_print_info+0x12/0x12 [ 928.042159][T16224] ? load_image+0x3b0/0x3b0 [ 928.045733][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 928.046665][T16224] ? __lock_acquire+0x7c50/0x7c50 [ 928.059596][T16224] should_fail_ex+0x399/0x4d0 [ 928.064299][T16224] _copy_from_user+0x2c/0x170 [ 928.065912][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 928.068978][T16224] __sys_bpf+0x265/0x6d0 [ 928.081093][T16224] ? bpf_link_show_fdinfo+0x340/0x340 [ 928.086480][T16224] ? lock_chain_count+0x20/0x20 [ 928.091342][T16224] __x64_sys_bpf+0x78/0x90 [ 928.095760][T16224] do_syscall_64+0x4c/0xa0 [ 928.100174][T16224] ? clear_bhb_loop+0x60/0xb0 [ 928.104840][T16224] ? clear_bhb_loop+0x60/0xb0 [ 928.109504][T16224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 928.115403][T16224] RIP: 0033:0x7fc0e3d8e9a9 [ 928.119815][T16224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.139412][T16224] RSP: 002b:00007fc0e4b45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 928.147820][T16224] RAX: ffffffffffffffda RBX: 00007fc0e3fb5fa0 RCX: 00007fc0e3d8e9a9 [ 928.155783][T16224] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 928.163747][T16224] RBP: 00007fc0e4b45090 R08: 0000000000000000 R09: 0000000000000000 [ 928.171736][T16224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.179694][T16224] R13: 0000000000000000 R14: 00007fc0e3fb5fa0 R15: 00007ffce6ed10b8 [ 928.187669][T16224] [ 928.202659][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 928.212559][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 928.221670][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 928.260121][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 928.276433][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 928.314955][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 928.324642][ T4323] Bluetooth: hci1: command 0x040f tx timeout [ 928.358276][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 928.430454][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 928.470189][T16066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 930.411227][ T4323] Bluetooth: hci1: command 0x0419 tx timeout [ 931.450464][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.460007][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.488114][T16272] netlink: 'syz.3.4007': attribute type 2 has an invalid length. [ 931.504767][T16272] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4007'. [ 931.529039][T16273] netlink: 'syz.2.4009': attribute type 10 has an invalid length. [ 931.554707][T16273] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4009'. [ 931.582911][T16274] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4007'. [ 931.612120][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 931.629922][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 931.650200][T16066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.055832][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 933.081980][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 933.151171][T16066] device veth0_vlan entered promiscuous mode [ 933.197131][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 933.245368][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 933.288214][T16066] device veth1_vlan entered promiscuous mode [ 933.296750][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 933.340563][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 933.349317][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 933.446707][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 933.463262][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 933.488568][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 933.554905][T16066] device veth0_macvtap entered promiscuous mode [ 933.589942][T16066] device veth1_macvtap entered promiscuous mode [ 933.666731][T16066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.693817][T16066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.719747][T16066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.737656][T16066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.750315][T16066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.770138][T16066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.783103][T16066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.797715][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 933.810443][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 933.823810][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 933.851293][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 933.867091][T16066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.893596][T16066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.920571][T16066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.950793][T16066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.998130][T16066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.048692][T16066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.058864][T16066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.079803][T16066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.120171][T16066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.129909][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 934.141256][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 934.156748][T16066] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.170119][T16066] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.199581][T16066] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.215261][T16066] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.501018][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.510196][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.538521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 934.592249][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.625397][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.673045][ T6948] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 936.269896][T16409] FAULT_INJECTION: forcing a failure. [ 936.269896][T16409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 936.334011][T16409] CPU: 0 PID: 16409 Comm: syz.4.4063 Not tainted 6.1.146-syzkaller #0 [ 936.342215][T16409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 936.352287][T16409] Call Trace: [ 936.355570][T16409] [ 936.358531][T16409] dump_stack_lvl+0x168/0x22e [ 936.363226][T16409] ? show_regs_print_info+0x12/0x12 [ 936.368436][T16409] ? load_image+0x3b0/0x3b0 [ 936.372951][T16409] ? __lock_acquire+0x7c50/0x7c50 [ 936.378006][T16409] should_fail_ex+0x399/0x4d0 [ 936.382700][T16409] _copy_from_user+0x2c/0x170 [ 936.387386][T16409] __sys_bpf+0x265/0x6d0 [ 936.391644][T16409] ? bpf_link_show_fdinfo+0x340/0x340 [ 936.397040][T16409] ? lock_chain_count+0x20/0x20 [ 936.401911][T16409] __x64_sys_bpf+0x78/0x90 [ 936.406337][T16409] do_syscall_64+0x4c/0xa0 [ 936.410758][T16409] ? clear_bhb_loop+0x60/0xb0 [ 936.415442][T16409] ? clear_bhb_loop+0x60/0xb0 [ 936.420126][T16409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 936.426014][T16409] RIP: 0033:0x7fdad8d8e9a9 [ 936.430417][T16409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.450013][T16409] RSP: 002b:00007fdad9b74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 936.458414][T16409] RAX: ffffffffffffffda RBX: 00007fdad8fb5fa0 RCX: 00007fdad8d8e9a9 [ 936.466373][T16409] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a [ 936.474331][T16409] RBP: 00007fdad9b74090 R08: 0000000000000000 R09: 0000000000000000 [ 936.482290][T16409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.490248][T16409] R13: 0000000000000000 R14: 00007fdad8fb5fa0 R15: 00007fffb9db5368 [ 936.498222][T16409] [ 937.246906][T16431] : renamed from pim6reg1 [ 937.622182][T16442] netlink: 'syz.5.4071': attribute type 2 has an invalid length. [ 937.644689][T16442] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4071'. [ 937.777098][T16442] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4071'. [ 938.045541][T16459] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4078'. [ 938.939271][T16488] FAULT_INJECTION: forcing a failure. [ 938.939271][T16488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.998831][T16488] CPU: 0 PID: 16488 Comm: syz.2.4089 Not tainted 6.1.146-syzkaller #0 [ 939.007034][T16488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 939.017097][T16488] Call Trace: [ 939.020384][T16488] [ 939.023320][T16488] dump_stack_lvl+0x168/0x22e [ 939.028016][T16488] ? show_regs_print_info+0x12/0x12 [ 939.033233][T16488] ? load_image+0x3b0/0x3b0 [ 939.037762][T16488] ? __lock_acquire+0x7c50/0x7c50 [ 939.042803][T16488] ? __virt_addr_valid+0x188/0x540 [ 939.047933][T16488] should_fail_ex+0x399/0x4d0 [ 939.052638][T16488] _copy_from_user+0x2c/0x170 [ 939.057332][T16488] bpf_test_init+0xf9/0x150 [ 939.061852][T16488] bpf_prog_test_run_xdp+0x359/0xe50 [ 939.067165][T16488] ? dev_put+0x80/0x80 [ 939.071260][T16488] ? dev_put+0x80/0x80 [ 939.075336][T16488] bpf_prog_test_run+0x31e/0x390 [ 939.080270][T16488] __sys_bpf+0x593/0x6d0 [ 939.084504][T16488] ? bpf_link_show_fdinfo+0x340/0x340 [ 939.089884][T16488] ? lock_chain_count+0x20/0x20 [ 939.094744][T16488] __x64_sys_bpf+0x78/0x90 [ 939.099166][T16488] do_syscall_64+0x4c/0xa0 [ 939.103578][T16488] ? clear_bhb_loop+0x60/0xb0 [ 939.108244][T16488] ? clear_bhb_loop+0x60/0xb0 [ 939.112910][T16488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.118803][T16488] RIP: 0033:0x7fc0e3d8e9a9 [ 939.123207][T16488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.142801][T16488] RSP: 002b:00007fc0e4b45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 939.151205][T16488] RAX: ffffffffffffffda RBX: 00007fc0e3fb5fa0 RCX: 00007fc0e3d8e9a9 [ 939.159186][T16488] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 939.167153][T16488] RBP: 00007fc0e4b45090 R08: 0000000000000000 R09: 0000000000000000 [ 939.175116][T16488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.183078][T16488] R13: 0000000000000000 R14: 00007fc0e3fb5fa0 R15: 00007ffce6ed10b8 [ 939.191050][T16488] [ 940.044879][T16515] netlink: 'syz.4.4096': attribute type 2 has an invalid length. [ 940.078961][T16515] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4096'. [ 940.108407][T16523] FAULT_INJECTION: forcing a failure. [ 940.108407][T16523] name failslab, interval 1, probability 0, space 0, times 0 [ 940.146907][T16521] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4096'. [ 940.192940][T16523] CPU: 0 PID: 16523 Comm: syz.5.4100 Not tainted 6.1.146-syzkaller #0 [ 940.201158][T16523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 940.211244][T16523] Call Trace: [ 940.214545][T16523] [ 940.217503][T16523] dump_stack_lvl+0x168/0x22e [ 940.222223][T16523] ? show_regs_print_info+0x12/0x12 [ 940.227461][T16523] ? load_image+0x3b0/0x3b0 [ 940.232011][T16523] ? __might_sleep+0xd0/0xd0 [ 940.236644][T16523] ? __lock_acquire+0x7c50/0x7c50 [ 940.241747][T16523] should_fail_ex+0x399/0x4d0 [ 940.246481][T16523] should_failslab+0x5/0x20 [ 940.251007][T16523] slab_pre_alloc_hook+0x59/0x310 [ 940.256046][T16523] kmem_cache_alloc_node+0x5a/0x320 [ 940.261247][T16523] ? __alloc_skb+0xfc/0x7e0 [ 940.265766][T16523] __alloc_skb+0xfc/0x7e0 [ 940.270100][T16523] ? netlink_autobind+0xda/0x300 [ 940.275055][T16523] netlink_sendmsg+0x645/0xbc0 [ 940.279844][T16523] ? netlink_getsockopt+0x540/0x540 [ 940.285052][T16523] ? aa_sock_msg_perm+0x94/0x150 [ 940.290000][T16523] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 940.295284][T16523] ? security_socket_sendmsg+0x7c/0xa0 [ 940.300755][T16523] ? netlink_getsockopt+0x540/0x540 [ 940.305956][T16523] ____sys_sendmsg+0x59b/0x970 [ 940.310740][T16523] ? __sys_sendmsg_sock+0x30/0x30 [ 940.315763][T16523] ? __import_iovec+0x315/0x500 [ 940.320635][T16523] ? import_iovec+0x6f/0xa0 [ 940.325156][T16523] ___sys_sendmsg+0x21c/0x290 [ 940.329838][T16523] ? __sys_sendmsg+0x270/0x270 [ 940.334653][T16523] ? __lock_acquire+0x7c50/0x7c50 [ 940.339716][T16523] ? __fdget+0x17c/0x200 [ 940.343969][T16523] __se_sys_sendmsg+0x19e/0x270 [ 940.348827][T16523] ? __x64_sys_sendmsg+0x80/0x80 [ 940.353798][T16523] ? lockdep_hardirqs_on+0x94/0x140 [ 940.359008][T16523] do_syscall_64+0x4c/0xa0 [ 940.363421][T16523] ? clear_bhb_loop+0x60/0xb0 [ 940.368096][T16523] ? clear_bhb_loop+0x60/0xb0 [ 940.372775][T16523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 940.378674][T16523] RIP: 0033:0x7f229ed8e9a9 [ 940.383089][T16523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.402693][T16523] RSP: 002b:00007f229ebff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.411106][T16523] RAX: ffffffffffffffda RBX: 00007f229efb5fa0 RCX: 00007f229ed8e9a9 [ 940.419076][T16523] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 940.427043][T16523] RBP: 00007f229ebff090 R08: 0000000000000000 R09: 0000000000000000 [ 940.435011][T16523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.442979][T16523] R13: 0000000000000000 R14: 00007f229efb5fa0 R15: 00007ffc2622e0d8 [ 940.450982][T16523] [ 940.989187][T16528] netlink: 'syz.2.4102': attribute type 10 has an invalid length. [ 941.151991][T16528] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.188663][T16528] device bridge_slave_1 left promiscuous mode [ 941.197917][T16528] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.236071][T16528] device bridge_slave_1 entered promiscuous mode [ 941.255362][T16528] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 941.562947][T16544] FAULT_INJECTION: forcing a failure. [ 941.562947][T16544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 941.584282][T16544] CPU: 0 PID: 16544 Comm: syz.3.4108 Not tainted 6.1.146-syzkaller #0 [ 941.592470][T16544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 941.602518][T16544] Call Trace: [ 941.605787][T16544] [ 941.608711][T16544] dump_stack_lvl+0x168/0x22e [ 941.613379][T16544] ? show_regs_print_info+0x12/0x12 [ 941.618562][T16544] ? load_image+0x3b0/0x3b0 [ 941.623056][T16544] ? __lock_acquire+0x7c50/0x7c50 [ 941.628069][T16544] ? unix_ioctl+0x250/0x650 [ 941.632564][T16544] should_fail_ex+0x399/0x4d0 [ 941.637239][T16544] _copy_from_user+0x2c/0x170 [ 941.641906][T16544] sock_do_ioctl+0x178/0x2f0 [ 941.646490][T16544] ? sock_show_fdinfo+0xb0/0xb0 [ 941.651343][T16544] sock_ioctl+0x4ed/0x6e0 [ 941.655667][T16544] ? sock_poll+0x3f0/0x3f0 [ 941.660077][T16544] ? bpf_lsm_file_ioctl+0x5/0x10 [ 941.665002][T16544] ? security_file_ioctl+0x7c/0xa0 [ 941.670099][T16544] ? sock_poll+0x3f0/0x3f0 [ 941.674501][T16544] __se_sys_ioctl+0xfa/0x170 [ 941.679087][T16544] do_syscall_64+0x4c/0xa0 [ 941.683485][T16544] ? clear_bhb_loop+0x60/0xb0 [ 941.688145][T16544] ? clear_bhb_loop+0x60/0xb0 [ 941.692807][T16544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.698690][T16544] RIP: 0033:0x7fa75498e9a9 [ 941.703088][T16544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 941.722691][T16544] RSP: 002b:00007fa755808038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 941.731097][T16544] RAX: ffffffffffffffda RBX: 00007fa754bb5fa0 RCX: 00007fa75498e9a9 [ 941.739058][T16544] RDX: 0000200000000080 RSI: 00000000000089a3 RDI: 0000000000000004 [ 941.747021][T16544] RBP: 00007fa755808090 R08: 0000000000000000 R09: 0000000000000000 [ 941.754982][T16544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.762944][T16544] R13: 0000000000000000 R14: 00007fa754bb5fa0 R15: 00007ffcebea23d8 [ 941.770916][T16544] [ 942.578559][T16566] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.4116'. [ 943.980709][T16593] bridge0: port 3(bond0) entered disabled state [ 944.722672][T16622] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.4136'. [ 946.453980][T16630] Q6`Ҙ: renamed from lo [ 947.761782][T16647] FAULT_INJECTION: forcing a failure. [ 947.761782][T16647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.816078][T16647] CPU: 1 PID: 16647 Comm: syz.4.4146 Not tainted 6.1.146-syzkaller #0 [ 947.824276][T16647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 947.834336][T16647] Call Trace: [ 947.837619][T16647] [ 947.840559][T16647] dump_stack_lvl+0x168/0x22e [ 947.845253][T16647] ? show_regs_print_info+0x12/0x12 [ 947.850479][T16647] ? load_image+0x3b0/0x3b0 [ 947.855001][T16647] ? __lock_acquire+0x7c50/0x7c50 [ 947.860057][T16647] should_fail_ex+0x399/0x4d0 [ 947.864752][T16647] strncpy_from_user+0x32/0x350 [ 947.869611][T16647] ? get_pid_task+0x1c/0x1e0 [ 947.874213][T16647] bpf_prog_load+0x1ab/0x15a0 [ 947.878916][T16647] ? map_freeze+0x390/0x390 [ 947.883431][T16647] ? __might_fault+0xa6/0x120 [ 947.888134][T16647] ? __might_fault+0xa6/0x120 [ 947.892826][T16647] ? __might_fault+0xc2/0x120 [ 947.897514][T16647] ? __might_fault+0xa6/0x120 [ 947.902209][T16647] ? bpf_lsm_bpf+0x5/0x10 [ 947.906544][T16647] ? security_bpf+0x7a/0xa0 [ 947.911065][T16647] __sys_bpf+0x520/0x6d0 [ 947.915325][T16647] ? bpf_link_show_fdinfo+0x340/0x340 [ 947.920724][T16647] ? lock_chain_count+0x20/0x20 [ 947.925593][T16647] __x64_sys_bpf+0x78/0x90 [ 947.930021][T16647] do_syscall_64+0x4c/0xa0 [ 947.934440][T16647] ? clear_bhb_loop+0x60/0xb0 [ 947.939102][T16647] ? clear_bhb_loop+0x60/0xb0 [ 947.943769][T16647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 947.949662][T16647] RIP: 0033:0x7fdad8d8e9a9 [ 947.954062][T16647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 947.973652][T16647] RSP: 002b:00007fdad9b74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 947.982053][T16647] RAX: ffffffffffffffda RBX: 00007fdad8fb5fa0 RCX: 00007fdad8d8e9a9 [ 947.990012][T16647] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 947.997971][T16647] RBP: 00007fdad9b74090 R08: 0000000000000000 R09: 0000000000000000 [ 948.005925][T16647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.013882][T16647] R13: 0000000000000000 R14: 00007fdad8fb5fa0 R15: 00007fffb9db5368 [ 948.021850][T16647] [ 948.484651][T16656] FAULT_INJECTION: forcing a failure. [ 948.484651][T16656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.504048][T16656] CPU: 0 PID: 16656 Comm: syz.3.4149 Not tainted 6.1.146-syzkaller #0 [ 948.512234][T16656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 948.522302][T16656] Call Trace: [ 948.525592][T16656] [ 948.528534][T16656] dump_stack_lvl+0x168/0x22e [ 948.533228][T16656] ? show_regs_print_info+0x12/0x12 [ 948.538441][T16656] ? load_image+0x3b0/0x3b0 [ 948.542960][T16656] ? __lock_acquire+0x7c50/0x7c50 [ 948.547997][T16656] ? snprintf+0xd7/0x120 [ 948.552238][T16656] should_fail_ex+0x399/0x4d0 [ 948.556912][T16656] _copy_to_user+0x2c/0x130 [ 948.561407][T16656] simple_read_from_buffer+0xe3/0x150 [ 948.566773][T16656] proc_fail_nth_read+0x19a/0x210 [ 948.571781][T16656] ? proc_fault_inject_write+0x2f0/0x2f0 [ 948.577404][T16656] ? fsnotify_perm+0x248/0x550 [ 948.582156][T16656] ? proc_fault_inject_write+0x2f0/0x2f0 [ 948.587774][T16656] vfs_read+0x2c0/0x920 [ 948.591924][T16656] ? kernel_read+0x1e0/0x1e0 [ 948.596501][T16656] ? __fget_files+0x28/0x4d0 [ 948.601079][T16656] ? __fget_files+0x44a/0x4d0 [ 948.605752][T16656] ? __fdget_pos+0x2ae/0x360 [ 948.610327][T16656] ? ksys_read+0x71/0x240 [ 948.614647][T16656] ksys_read+0x143/0x240 [ 948.618879][T16656] ? vfs_write+0x960/0x960 [ 948.623287][T16656] ? lockdep_hardirqs_on+0x94/0x140 [ 948.628476][T16656] do_syscall_64+0x4c/0xa0 [ 948.632878][T16656] ? clear_bhb_loop+0x60/0xb0 [ 948.637539][T16656] ? clear_bhb_loop+0x60/0xb0 [ 948.642202][T16656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 948.648085][T16656] RIP: 0033:0x7fa75498d3bc [ 948.652486][T16656] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 948.672078][T16656] RSP: 002b:00007fa755808030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 948.680481][T16656] RAX: ffffffffffffffda RBX: 00007fa754bb5fa0 RCX: 00007fa75498d3bc [ 948.688436][T16656] RDX: 000000000000000f RSI: 00007fa7558080a0 RDI: 0000000000000004 [ 948.696393][T16656] RBP: 00007fa755808090 R08: 0000000000000000 R09: 0000000000000000 [ 948.704347][T16656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.712301][T16656] R13: 0000000000000000 R14: 00007fa754bb5fa0 R15: 00007ffcebea23d8 [ 948.720269][T16656] [ 948.745875][T16667] device bond0 left promiscuous mode [ 948.763490][T16667] device bond_slave_0 left promiscuous mode [ 948.774123][T16667] device bond_slave_1 left promiscuous mode [ 948.785339][T16667] bridge0: port 4(bond0) entered disabled state [ 950.342502][T16682] netlink: 14548 bytes leftover after parsing attributes in process `syz.5.4157'. [ 950.845545][T16721] netlink: 'syz.2.4174': attribute type 21 has an invalid length. [ 950.871682][T16721] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.4174'. [ 953.242641][T16759] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4186'. [ 954.303098][T16792] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4198'. [ 954.370759][T16795] netlink: 'syz.2.4199': attribute type 25 has an invalid length. [ 954.690352][T16806] netlink: 'syz.2.4203': attribute type 3 has an invalid length. [ 954.708564][T16806] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4203'. [ 955.032047][T16823] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4208'. [ 955.489729][T16836] netlink: 'syz.0.4214': attribute type 21 has an invalid length. [ 955.523117][T16836] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.4214'. [ 956.016870][T16853] FAULT_INJECTION: forcing a failure. [ 956.016870][T16853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.145470][T16853] CPU: 0 PID: 16853 Comm: syz.2.4223 Not tainted 6.1.146-syzkaller #0 [ 956.153681][T16853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 956.163751][T16853] Call Trace: [ 956.167045][T16853] [ 956.169983][T16853] dump_stack_lvl+0x168/0x22e [ 956.174687][T16853] ? show_regs_print_info+0x12/0x12 [ 956.179906][T16853] ? load_image+0x3b0/0x3b0 [ 956.184443][T16853] ? __lock_acquire+0x7c50/0x7c50 [ 956.189493][T16853] should_fail_ex+0x399/0x4d0 [ 956.194193][T16853] _copy_from_user+0x2c/0x170 [ 956.198888][T16853] iovec_from_user+0x143/0x360 [ 956.203679][T16853] __import_iovec+0x6d/0x500 [ 956.208293][T16853] ? __might_fault+0xa6/0x120 [ 956.212996][T16853] import_iovec+0x6f/0xa0 [ 956.217351][T16853] ___sys_sendmsg+0x1e4/0x290 [ 956.222064][T16853] ? __sys_sendmsg+0x270/0x270 [ 956.226875][T16853] ? __lock_acquire+0x7c50/0x7c50 [ 956.231934][T16853] ? __fdget+0x17c/0x200 [ 956.236197][T16853] __se_sys_sendmsg+0x19e/0x270 [ 956.241062][T16853] ? __x64_sys_sendmsg+0x80/0x80 [ 956.246039][T16853] ? lockdep_hardirqs_on+0x94/0x140 [ 956.251256][T16853] do_syscall_64+0x4c/0xa0 [ 956.255680][T16853] ? clear_bhb_loop+0x60/0xb0 [ 956.260365][T16853] ? clear_bhb_loop+0x60/0xb0 [ 956.265052][T16853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 956.270965][T16853] RIP: 0033:0x7fc0e3d8e9a9 [ 956.275393][T16853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 956.295009][T16853] RSP: 002b:00007fc0e4b45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 956.303440][T16853] RAX: ffffffffffffffda RBX: 00007fc0e3fb5fa0 RCX: 00007fc0e3d8e9a9 [ 956.311424][T16853] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 956.319403][T16853] RBP: 00007fc0e4b45090 R08: 0000000000000000 R09: 0000000000000000 [ 956.327385][T16853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.335363][T16853] R13: 0000000000000000 R14: 00007fc0e3fb5fa0 R15: 00007ffce6ed10b8 [ 956.338804][T16846] netlink: 'syz.4.4222': attribute type 1 has an invalid length. [ 956.343341][T16853] [ 956.581236][T16846] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.4222'. [ 957.539329][T16873] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4229'. [ 957.814499][T16889] netlink: 'syz.3.4233': attribute type 21 has an invalid length. [ 957.854681][T16889] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.4233'. [ 960.865648][T16941] netlink: 'syz.5.4254': attribute type 21 has an invalid length. [ 960.873687][T16941] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.4254'. [ 963.194120][T16995] bridge0: port 3(bond0) entered blocking state [ 963.231781][T16995] bridge0: port 3(bond0) entered disabled state [ 963.277690][T16995] device bond0 entered promiscuous mode [ 963.304416][T16995] device bond_slave_0 entered promiscuous mode [ 963.314181][T16995] device bond_slave_1 entered promiscuous mode [ 963.339770][T16995] bridge0: port 3(bond0) entered blocking state [ 963.346470][T16995] bridge0: port 3(bond0) entered forwarding state [ 968.898167][T17094] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4309'. [ 971.125987][T17150] bridge0: port 3(bond0) entered blocking state [ 971.155068][T17150] bridge0: port 3(bond0) entered disabled state [ 971.183603][T17150] bridge0: port 3(bond0) entered blocking state [ 971.190211][T17150] bridge0: port 3(bond0) entered forwarding state [ 972.184491][T17181] FAULT_INJECTION: forcing a failure. [ 972.184491][T17181] name failslab, interval 1, probability 0, space 0, times 0 [ 972.252775][T17181] CPU: 1 PID: 17181 Comm: syz.4.4346 Not tainted 6.1.146-syzkaller #0 [ 972.260983][T17181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 972.271046][T17181] Call Trace: [ 972.274330][T17181] [ 972.277266][T17181] dump_stack_lvl+0x168/0x22e [ 972.281955][T17181] ? show_regs_print_info+0x12/0x12 [ 972.287157][T17181] ? load_image+0x3b0/0x3b0 [ 972.291676][T17181] ? __might_sleep+0xd0/0xd0 [ 972.296279][T17181] ? __lock_acquire+0x7c50/0x7c50 [ 972.301320][T17181] should_fail_ex+0x399/0x4d0 [ 972.306013][T17181] should_failslab+0x5/0x20 [ 972.310523][T17181] slab_pre_alloc_hook+0x59/0x310 [ 972.315553][T17181] ? bpf_prog_test_run_flow_dissector+0x22d/0x600 [ 972.321984][T17181] __kmem_cache_alloc_node+0x4f/0x260 [ 972.327373][T17181] ? bpf_prog_test_run_flow_dissector+0x22d/0x600 [ 972.333804][T17181] __kmalloc+0xa0/0x240 [ 972.337975][T17181] bpf_prog_test_run_flow_dissector+0x22d/0x600 [ 972.344240][T17181] ? xdp_convert_buff_to_md+0x200/0x200 [ 972.349796][T17181] ? __fget_files+0x28/0x4d0 [ 972.354396][T17181] ? __fget_files+0x44a/0x4d0 [ 972.359092][T17181] ? xdp_convert_buff_to_md+0x200/0x200 [ 972.364646][T17181] bpf_prog_test_run+0x31e/0x390 [ 972.369597][T17181] __sys_bpf+0x593/0x6d0 [ 972.373850][T17181] ? bpf_link_show_fdinfo+0x340/0x340 [ 972.379242][T17181] ? lock_chain_count+0x20/0x20 [ 972.384115][T17181] __x64_sys_bpf+0x78/0x90 [ 972.388544][T17181] do_syscall_64+0x4c/0xa0 [ 972.392968][T17181] ? clear_bhb_loop+0x60/0xb0 [ 972.397655][T17181] ? clear_bhb_loop+0x60/0xb0 [ 972.402340][T17181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 972.408248][T17181] RIP: 0033:0x7fdad8d8e9a9 [ 972.412666][T17181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.432281][T17181] RSP: 002b:00007fdad9b74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 972.440703][T17181] RAX: ffffffffffffffda RBX: 00007fdad8fb5fa0 RCX: 00007fdad8d8e9a9 [ 972.448687][T17181] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 972.456669][T17181] RBP: 00007fdad9b74090 R08: 0000000000000000 R09: 0000000000000000 [ 972.464642][T17181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.472611][T17181] R13: 0000000000000000 R14: 00007fdad8fb5fa0 R15: 00007fffb9db5368 [ 972.480604][T17181] [ 976.087703][T17267] bridge0: port 4(bond0) entered blocking state [ 976.095041][T17267] bridge0: port 4(bond0) entered disabled state [ 976.146543][T17267] device bond0 entered promiscuous mode [ 976.152242][T17267] device bond_slave_0 entered promiscuous mode [ 976.185765][T17267] device bond_slave_1 entered promiscuous mode [ 976.216480][T17267] bridge0: port 4(bond0) entered blocking state [ 976.223155][T17267] bridge0: port 4(bond0) entered forwarding state [ 977.302529][T17272] device wg2 entered promiscuous mode [ 978.906784][T17334] device wg2 entered promiscuous mode [ 978.929312][T17341] device bond0 left promiscuous mode [ 978.934830][T17341] device bond_slave_0 left promiscuous mode [ 978.951162][T17341] device bond_slave_1 left promiscuous mode [ 978.965883][T17341] bridge0: port 3(bond0) entered disabled state [ 984.020164][T17457] bridge0: port 3(bond0) entered blocking state [ 984.038136][T17457] bridge0: port 3(bond0) entered disabled state [ 984.076816][T17457] device bond0 entered promiscuous mode [ 984.106706][T17457] device bond_slave_0 entered promiscuous mode [ 984.133911][T17457] device bond_slave_1 entered promiscuous mode [ 984.165877][T17457] bridge0: port 3(bond0) entered blocking state [ 984.172504][T17457] bridge0: port 3(bond0) entered forwarding state [ 984.209956][T17465] bridge0: port 3(bond0) entered disabled state [ 985.653013][T17495] bridge0: port 3(bond0) entered blocking state [ 985.664053][T17495] bridge0: port 3(bond0) entered disabled state [ 985.696623][T17495] bridge0: port 3(bond0) entered blocking state [ 985.703077][T17495] bridge0: port 3(bond0) entered forwarding state [ 985.735831][T17499] netlink: 'syz.5.4473': attribute type 9 has an invalid length. [ 985.743602][T17499] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4473'. [ 985.859571][T17504] device bond0 left promiscuous mode [ 985.887517][T17504] bridge0: port 3(bond0) entered disabled state [ 986.128909][T17517] FAULT_INJECTION: forcing a failure. [ 986.128909][T17517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 986.204795][T17517] CPU: 1 PID: 17517 Comm: syz.3.4481 Not tainted 6.1.146-syzkaller #0 [ 986.212988][T17517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 986.223043][T17517] Call Trace: [ 986.226311][T17517] [ 986.229228][T17517] dump_stack_lvl+0x168/0x22e [ 986.233901][T17517] ? show_regs_print_info+0x12/0x12 [ 986.239086][T17517] ? load_image+0x3b0/0x3b0 [ 986.243592][T17517] ? __lock_acquire+0x7c50/0x7c50 [ 986.248613][T17517] should_fail_ex+0x399/0x4d0 [ 986.253286][T17517] _copy_from_user+0x2c/0x170 [ 986.257950][T17517] ____sys_sendmsg+0x2d5/0x970 [ 986.262703][T17517] ? __lock_acquire+0x7c50/0x7c50 [ 986.267722][T17517] ? __sys_sendmsg_sock+0x30/0x30 [ 986.272734][T17517] ? __import_iovec+0x315/0x500 [ 986.277579][T17517] ? import_iovec+0x6f/0xa0 [ 986.282078][T17517] ___sys_sendmsg+0x21c/0x290 [ 986.286748][T17517] ? __sys_sendmsg+0x270/0x270 [ 986.291526][T17517] ? __lock_acquire+0x7c50/0x7c50 [ 986.296563][T17517] ? __fdget+0x17c/0x200 [ 986.300803][T17517] __se_sys_sendmsg+0x19e/0x270 [ 986.305651][T17517] ? __x64_sys_sendmsg+0x80/0x80 [ 986.310593][T17517] ? lockdep_hardirqs_on+0x94/0x140 [ 986.315782][T17517] do_syscall_64+0x4c/0xa0 [ 986.320185][T17517] ? clear_bhb_loop+0x60/0xb0 [ 986.324850][T17517] ? clear_bhb_loop+0x60/0xb0 [ 986.329514][T17517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 986.335402][T17517] RIP: 0033:0x7fa75498e9a9 [ 986.339804][T17517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 986.359399][T17517] RSP: 002b:00007fa755808038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 986.367799][T17517] RAX: ffffffffffffffda RBX: 00007fa754bb5fa0 RCX: 00007fa75498e9a9 [ 986.375756][T17517] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 986.383715][T17517] RBP: 00007fa755808090 R08: 0000000000000000 R09: 0000000000000000 [ 986.391671][T17517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.399629][T17517] R13: 0000000000000000 R14: 00007fa754bb5fa0 R15: 00007ffcebea23d8 [ 986.407597][T17517] [ 987.285944][ T4323] Bluetooth: hci2: ISO packet for unknown connection handle 62 [ 987.594985][T17551] device bond0 left promiscuous mode [ 987.616273][T17551] device bond_slave_0 left promiscuous mode [ 987.641780][T17551] device bond_slave_1 left promiscuous mode [ 987.668651][T17551] bridge0: port 4(bond0) entered disabled state [ 989.142586][T17590] bridge0: port 4(bond0) entered blocking state [ 989.164986][T17590] bridge0: port 4(bond0) entered disabled state [ 989.178198][T17590] device bond0 entered promiscuous mode [ 989.184129][T17590] device bond_slave_0 entered promiscuous mode [ 989.197579][T17590] device bond_slave_1 entered promiscuous mode [ 989.206714][T17591] netlink: 'syz.5.4506': attribute type 1 has an invalid length. [ 989.209663][T17590] bridge0: port 4(bond0) entered blocking state [ 989.221185][T17590] bridge0: port 4(bond0) entered forwarding state [ 989.274396][T17591] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.4506'. [ 991.282072][T17621] netlink: 'syz.4.4516': attribute type 1 has an invalid length. [ 991.308917][T17621] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.4516'. [ 997.771479][T17625] ------------[ cut here ]------------ [ 997.777090][T17625] WARNING: CPU: 1 PID: 17625 at kernel/events/core.c:6578 perf_pending_task+0x358/0x470 [ 997.787010][T17625] Modules linked in: [ 997.790919][T17625] CPU: 1 PID: 17625 Comm: syz.3.4521 Not tainted 6.1.146-syzkaller #0 [ 997.799107][T17625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 997.809203][T17625] RIP: 0010:perf_pending_task+0x358/0x470 [ 997.814965][T17625] Code: ff 84 db 75 14 e8 d8 d6 da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c4 d6 da ff e8 e7 8f 5a ff eb e5 e8 b8 d6 da ff <0f> 0b e9 f3 fe ff ff e8 ac d6 da ff 48 c7 c7 d0 03 bc 8c 4c 89 f6 [ 997.834609][T17625] RSP: 0018:ffffc90004b2f920 EFLAGS: 00010293 [ 997.840691][T17625] RAX: ffffffff81a5f0d8 RBX: ffff888057d75e58 RCX: ffff88802b69d940 [ 997.848695][T17625] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 997.856701][T17625] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed10056d3c69 [ 997.864709][T17625] R10: ffffed10056d3c69 R11: 1ffff110056d3c68 R12: ffff88802b69d940 [ 997.872693][T17625] R13: ffff8880262fd960 R14: ffff888057d75c20 R15: 1ffff1100afaeb84 [ 997.880704][T17625] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 997.889671][T17625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 997.896293][T17625] CR2: 00007f5e719e0380 CR3: 0000000026179000 CR4: 00000000003506e0 [ 997.904280][T17625] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 997.912289][T17625] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 997.920293][T17625] Call Trace: [ 997.923578][T17625] [ 997.926546][T17625] task_work_run+0x1ca/0x250 [ 997.931159][T17625] ? task_work_cancel+0x230/0x230 [ 997.936222][T17625] ? do_raw_spin_unlock+0x11d/0x230 [ 997.941450][T17625] do_exit+0x93e/0x2400 [ 997.945653][T17625] ? lock_chain_count+0x20/0x20 [ 997.950517][T17625] ? put_task_struct+0x80/0x80 [ 997.955329][T17625] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 997.961502][T17625] ? lockdep_hardirqs_on+0x94/0x140 [ 997.966746][T17625] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 997.972924][T17625] do_group_exit+0x217/0x2d0 [ 997.977561][T17625] get_signal+0x1272/0x1350 [ 997.982103][T17625] arch_do_signal_or_restart+0xb0/0x1230 [ 997.987777][T17625] ? perf_trace_preemptirq_template+0xa0/0x330 [ 997.993944][T17625] ? irqentry_enter+0x33/0x50 [ 997.998664][T17625] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 998.004687][T17625] ? lock_chain_count+0x20/0x20 [ 998.009552][T17625] ? get_sigframe_size+0x10/0x10 [ 998.014540][T17625] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 998.020717][T17625] ? lockdep_hardirqs_on+0x94/0x140 [ 998.025971][T17625] ? arch_do_signal_or_restart+0x6/0x1230 [ 998.031712][T17625] exit_to_user_mode_loop+0x70/0x110 [ 998.037045][T17625] exit_to_user_mode_prepare+0xb1/0x140 [ 998.042608][T17625] syscall_exit_to_user_mode+0x16/0x40 [ 998.048109][T17625] do_syscall_64+0x58/0xa0 [ 998.052534][T17625] ? clear_bhb_loop+0x60/0xb0 [ 998.057247][T17625] ? clear_bhb_loop+0x60/0xb0 [ 998.061937][T17625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 998.067875][T17625] RIP: 0033:0x7fa75498e9a9 [ 998.072298][T17625] Code: Unable to access opcode bytes at 0x7fa75498e97f. [ 998.079348][T17625] RSP: 002b:00007fa755808038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 998.087809][T17625] RAX: 0000000000000000 RBX: 00007fa754bb5fa0 RCX: 00007fa75498e9a9 [ 998.095820][T17625] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000003 [ 998.103805][T17625] RBP: 00007fa754a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 998.111813][T17625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 998.119831][T17625] R13: 0000000000000000 R14: 00007fa754bb5fa0 R15: 00007ffcebea23d8 [ 998.127859][T17625] [ 998.130905][T17625] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 998.138184][T17625] CPU: 1 PID: 17625 Comm: syz.3.4521 Not tainted 6.1.146-syzkaller #0 [ 998.146341][T17625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 998.156397][T17625] Call Trace: [ 998.159678][T17625] [ 998.162613][T17625] dump_stack_lvl+0x168/0x22e [ 998.167294][T17625] ? memcpy+0x3c/0x60 [ 998.171286][T17625] ? show_regs_print_info+0x12/0x12 [ 998.176490][T17625] ? load_image+0x3b0/0x3b0 [ 998.181013][T17625] panic+0x2c9/0x710 [ 998.184918][T17625] ? bpf_jit_dump+0xd0/0xd0 [ 998.189446][T17625] __warn+0x2f8/0x4f0 [ 998.193438][T17625] ? perf_pending_task+0x358/0x470 [ 998.198557][T17625] ? perf_pending_task+0x358/0x470 [ 998.203675][T17625] report_bug+0x2ba/0x4f0 [ 998.208005][T17625] ? perf_pending_task+0x358/0x470 [ 998.213129][T17625] handle_bug+0x3a/0x70 [ 998.217287][T17625] exc_invalid_op+0x16/0x40 [ 998.221792][T17625] asm_exc_invalid_op+0x16/0x20 [ 998.226648][T17625] RIP: 0010:perf_pending_task+0x358/0x470 [ 998.232372][T17625] Code: ff 84 db 75 14 e8 d8 d6 da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c4 d6 da ff e8 e7 8f 5a ff eb e5 e8 b8 d6 da ff <0f> 0b e9 f3 fe ff ff e8 ac d6 da ff 48 c7 c7 d0 03 bc 8c 4c 89 f6 [ 998.251979][T17625] RSP: 0018:ffffc90004b2f920 EFLAGS: 00010293 [ 998.258051][T17625] RAX: ffffffff81a5f0d8 RBX: ffff888057d75e58 RCX: ffff88802b69d940 [ 998.266032][T17625] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 998.274004][T17625] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed10056d3c69 [ 998.281986][T17625] R10: ffffed10056d3c69 R11: 1ffff110056d3c68 R12: ffff88802b69d940 [ 998.289962][T17625] R13: ffff8880262fd960 R14: ffff888057d75c20 R15: 1ffff1100afaeb84 [ 998.297948][T17625] ? perf_pending_task+0x358/0x470 [ 998.303083][T17625] task_work_run+0x1ca/0x250 [ 998.307682][T17625] ? task_work_cancel+0x230/0x230 [ 998.312713][T17625] ? do_raw_spin_unlock+0x11d/0x230 [ 998.317929][T17625] do_exit+0x93e/0x2400 [ 998.322102][T17625] ? lock_chain_count+0x20/0x20 [ 998.326963][T17625] ? put_task_struct+0x80/0x80 [ 998.331740][T17625] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 998.337910][T17625] ? lockdep_hardirqs_on+0x94/0x140 [ 998.343116][T17625] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 998.349296][T17625] do_group_exit+0x217/0x2d0 [ 998.353904][T17625] get_signal+0x1272/0x1350 [ 998.358443][T17625] arch_do_signal_or_restart+0xb0/0x1230 [ 998.364082][T17625] ? perf_trace_preemptirq_template+0xa0/0x330 [ 998.370246][T17625] ? irqentry_enter+0x33/0x50 [ 998.374944][T17625] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 998.380938][T17625] ? lock_chain_count+0x20/0x20 [ 998.385797][T17625] ? get_sigframe_size+0x10/0x10 [ 998.390753][T17625] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 998.396920][T17625] ? lockdep_hardirqs_on+0x94/0x140 [ 998.400870][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.400911][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.414575][T17625] ? arch_do_signal_or_restart+0x6/0x1230 [ 998.420291][T17625] exit_to_user_mode_loop+0x70/0x110 [ 998.425569][T17625] exit_to_user_mode_prepare+0xb1/0x140 [ 998.431104][T17625] syscall_exit_to_user_mode+0x16/0x40 [ 998.436552][T17625] do_syscall_64+0x58/0xa0 [ 998.440954][T17625] ? clear_bhb_loop+0x60/0xb0 [ 998.445618][T17625] ? clear_bhb_loop+0x60/0xb0 [ 998.450282][T17625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 998.456169][T17625] RIP: 0033:0x7fa75498e9a9 [ 998.460569][T17625] Code: Unable to access opcode bytes at 0x7fa75498e97f. [ 998.467567][T17625] RSP: 002b:00007fa755808038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 998.475966][T17625] RAX: 0000000000000000 RBX: 00007fa754bb5fa0 RCX: 00007fa75498e9a9 [ 998.483922][T17625] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000003 [ 998.491883][T17625] RBP: 00007fa754a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 998.499840][T17625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 998.507795][T17625] R13: 0000000000000000 R14: 00007fa754bb5fa0 R15: 00007ffcebea23d8 [ 998.515765][T17625] [ 998.519002][T17625] Kernel Offset: disabled [ 998.523314][T17625] Rebooting in 86400 seconds..